Red Hat Security Advisory

RHSA-2024:2377

zziplib security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) zziplib-0.13.71-11.el9_4, zziplib-utils-0.13.71-11.el9_4
Red Hat Enterprise Linux CRB (v. 9) zziplib-devel-0.13.71-11.el9_4

TI-2020-13469 CVE-2020-18770 · GHSA-mjgv-6qmw-8jwc

MEDIUM 58

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00344 Published 2023-08-22 Partial fix CWE-400