zziplib-0.13.68-13.el8

エラータID: AXSA:2024-8177:02

Release date: 
Friday, June 14, 2024 - 20:56
Subject: 
zziplib-0.13.68-13.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.10 Release Notes linked from the References section.

CVE-2020-18770
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. zziplib-0.13.68-13.el8.src.rpm
    MD5: d6eb821ef179aa8fc548081f6dc405da
    SHA-256: e99ff51773fcae5390246482d26857ba4c544ac2de68707fd713d92291d3f033
    Size: 1.06 MB

Asianux Server 8 for x86_64
  1. zziplib-0.13.68-13.el8.i686.rpm
    MD5: 17cdda55e4b8d6de602bd7752a8257e1
    SHA-256: 5b4b9f9577ad3d2015477651807453473fa74432295b053b0ba7a80636c56a13
    Size: 92.43 kB
  2. zziplib-0.13.68-13.el8.x86_64.rpm
    MD5: 30d0c34cb0221d09aca9b77f6d7c2c82
    SHA-256: 6bec01669c16a40d2eca76a6d1db03719445f8e1f7b44e69911b25f261cbca84
    Size: 90.20 kB
  3. zziplib-devel-0.13.68-13.el8.i686.rpm
    MD5: e64a87e7c917b1b07cc47af0d962a3c6
    SHA-256: 0e10adb88ac009867aaa85edd8773c87f32041034d4ffc28500565d8d7332c9d
    Size: 148.36 kB
  4. zziplib-devel-0.13.68-13.el8.x86_64.rpm
    MD5: ef6ec00d74d8d590c42fbdf105e12573
    SHA-256: 31b3776e957a196ca6b3b99b97e65ddbe70d4088cb2c699d243835999675377c
    Size: 148.34 kB
  5. zziplib-utils-0.13.68-13.el8.x86_64.rpm
    MD5: bffb012afb1033b38cb7d19e8ca95284
    SHA-256: 99da49aa58dc4bf169824b331306f55105042a77e9159780c594e51ab1db103d
    Size: 46.84 kB