Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-13232: Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue. 1727761: CVE-2019-13232 unzip: overlapping of files in ZIP container leads to denial of service
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | unzip | 0:6.0-21.amzn2 |
| Amazon Linux · 2 | unzip-debuginfo | 0:6.0-21.amzn2 |
Vulnerabilities 1
-
Unscored —
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource c…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-13232.html