https://bugzilla.redhat.com/show_bug.cgi?id=1981909
--- Comment #3 from Garrett Tucker <gtucker(a)redhat.com> ---
After analysis, a Denial of Service attack is possible via excessive memory
allocated caused by a crafted zip archive. An ongoing method of allocating an
array then trying to fill it, combined with an insufficient check for symbolic
link length led to the ability to cause excessive memory allocation. Thus a
specially crafted archive could force excessive memory allocation impacting
availability of a system.
This flaw has been fixed in Version 1.21
--
You are receiving this mail because:
You are on the CC list for the bug.