Red Hat Security Advisory

RHSA-2020:1178

zziplib security update

Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) zziplib-0.13.62-12.el7
Red Hat Enterprise Linux Client Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) zziplib-0.13.62-12.el7, zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7
Red Hat Enterprise Linux Server (v. 7) zziplib-0.13.62-12.el7, zziplib-0.13.62-12.el7.ppc
Red Hat Enterprise Linux Server Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-devel-0.13.62-12.el7.ppc, zziplib-utils-0.13.62-12.el7
Red Hat Enterprise Linux Workstation (v. 7) zziplib-0.13.62-12.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) zziplib-devel-0.13.62-12.el7, zziplib-utils-0.13.62-12.el7

TI-2018-12673 CVE-2018-17828 · GHSA-g8rp-fvg9-52vv

LOW 28

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01538 Published 2018-10-01 Fixed CWE-22