Skip to content
OpenAdvisories
High DLA-3670-1 1 CVE

minizip - security update

Published Nov 28, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 minizip 1.1-8+deb10u1

Vulnerabilities 1

  • High 8.8
    CVE-2023-45853

    pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

    MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is a…

    qt6-qtwebengine qt5-qtwebengine rust cloud-hypervisor Debian Ubuntu Azure Linux Alpine Wolfi PyPI