zziplib-0.13.68-9.el8

エラータID: AXSA:2021-2591:01

Release date: 
Friday, December 10, 2021 - 07:05
Subject: 
zziplib-0.13.68-9.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-18442
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. zziplib-0.13.68-9.el8.src.rpm
    MD5: 41be1252841605fc0d52eaa87aae458f
    SHA-256: 04753d0130278ebe5a90a4195c8abc71f6b1ee063c738fdd9166c7de4dce0aa0
    Size: 1.06 MB

Asianux Server 8 for x86_64
  1. zziplib-0.13.68-9.el8.x86_64.rpm
    MD5: 5e3e0d474c321e10fcde348cb28fbc14
    SHA-256: 2efe9886eb3ed95ef90fc4a0e52f055e873338609691acc9f591c6efa42ad915
    Size: 89.82 kB
  2. zziplib-devel-0.13.68-9.el8.x86_64.rpm
    MD5: 070ee4dfbe2af30732ae29a8b8cff2a5
    SHA-256: f5778f48473b9ed2d92d76e935311b46106718b86da3bdb38ef4419aa9302584
    Size: 147.95 kB
  3. zziplib-utils-0.13.68-9.el8.x86_64.rpm
    MD5: 210ca6963e49538fd6325b06d44ef0c8
    SHA-256: 37ca3dff04f7f4f137ab00eeae90a68786efa73c9d5f95a25713a448b3cc703f
    Size: 46.45 kB
  4. zziplib-0.13.68-9.el8.i686.rpm
    MD5: 84704d7bcb44bef5eb3521f3dfe4ba3e
    SHA-256: 9ae3c45c39fe4cb2715622f6a7e07ea7254b72d848552b5cca095aab8cbd1fd9
    Size: 92.05 kB
  5. zziplib-devel-0.13.68-9.el8.i686.rpm
    MD5: fe61f96c1290f3c14aec323ecc43900d
    SHA-256: 6d70e28788b84fd3808c40b277cbc3803c36a3693cdff0a89cc90374fbb01604
    Size: 147.95 kB