Skip to content
OpenAdvisories
Medium ALAS2-2024-2689 1 CVE

Moderate: zziplib security update (Amazon Linux 2)

Published Oct 24, 2024 · Updated Oct 31, 2024

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-18770: An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 zziplib 0:0.13.62-12.amzn2.0.1
Amazon Linux · 2 zziplib-debuginfo 0:0.13.62-12.amzn2.0.1
Amazon Linux · 2 zziplib-devel 0:0.13.62-12.amzn2.0.1
Amazon Linux · 2 zziplib-utils 0:0.13.62-12.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-18770.html