Описание
Security update for zziplib
This update for zziplib fixes the following issues:
- CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526).
Список пакетов
SUSE Linux Enterprise Software Development Kit 12 SP5
libzzip-0-13-0.13.67-10.33.1
zziplib-devel-0.13.67-10.33.1
SUSE Linux Enterprise Workstation Extension 12 SP5
libzzip-0-13-0.13.67-10.33.1
Ссылки
- Link for SUSE-SU-2021:2164-1
- E-Mail link for SUSE-SU-2021:2164-1
- SUSE Security Ratings
- SUSE Bug 1187526
- SUSE CVE CVE-2020-18442 page
Описание
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libzzip-0-13-0.13.67-10.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5:zziplib-devel-0.13.67-10.33.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libzzip-0-13-0.13.67-10.33.1
Ссылки
- CVE-2020-18442
- SUSE Bug 1187526