Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0970-1

Опубликовано: 22 мар. 2024
Источник: suse-cvrf

Описание

Security update for zziplib

This update for zziplib fixes the following issues:

Security issue fixed:

  • CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526).
  • CVE-2020-18770: Fixed denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c (bsc#1214577).

Non-security issue fixed:

  • Implement an error message with a condition by checking the return value of a function call. (bsc#1154002)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP5
libzzip-0-13-0.13.69-150000.3.17.1
zziplib-devel-0.13.69-150000.3.17.1
SUSE Linux Enterprise Server 15 SP4-TERADATA
libzzip-0-13-0.13.69-150000.3.17.1
zziplib-devel-0.13.69-150000.3.17.1
openSUSE Leap 15.5
libzzip-0-13-0.13.69-150000.3.17.1
libzzip-0-13-32bit-0.13.69-150000.3.17.1
zziplib-devel-0.13.69-150000.3.17.1
zziplib-devel-32bit-0.13.69-150000.3.17.1

Ссылки

Описание

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP5:libzzip-0-13-0.13.69-150000.3.17.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:zziplib-devel-0.13.69-150000.3.17.1
SUSE Linux Enterprise Server 15 SP4-TERADATA:libzzip-0-13-0.13.69-150000.3.17.1
SUSE Linux Enterprise Server 15 SP4-TERADATA:zziplib-devel-0.13.69-150000.3.17.1
Ссылки

Описание

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP5:libzzip-0-13-0.13.69-150000.3.17.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:zziplib-devel-0.13.69-150000.3.17.1
SUSE Linux Enterprise Server 15 SP4-TERADATA:libzzip-0-13-0.13.69-150000.3.17.1
SUSE Linux Enterprise Server 15 SP4-TERADATA:zziplib-devel-0.13.69-150000.3.17.1
Ссылки