OpenSUSE Linux update for unzip

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to out-of-bounds read when handling malicious input. A remote attacker can supply extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression and cause the service to crash.

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The weakness exists due to heap-based buffer overflow in the processing of password-protected archives. A remote attacker can trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.