ELSA-2019-2196 — Low: zziplib security update (Oracle Linux 7)

Summary

[0.13.62-11]
- Fix CVE-2018-6541
- Part of the original patch has already been applied in the past (CVE-2018-7726),
so the bug should not be reproducible in a way described in the github
issue, even without this commit. Applying the rest of the original patch anyway.
- https://github.com/gdraheim/zziplib/issues/16
- Related: CVE-2018-6541

[0.13.62-10]
- Fix CVE-2018-16548
- Resolves: CVE-2018-16548

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	zziplib	0:0.13.62-11.el7
Oracle Linux · 7	zziplib-devel	0:0.13.62-11.el7
Oracle Linux · 7	zziplib-utils	0:0.13.62-11.el7

Vulnerabilities 2

Unscored —

CVE-2018-16548

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_…

zziplib zziplib zziplib zziplib Debian Ubuntu Azure Linux Alpine

Sep 5, 2018
Unscored —

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local …

zziplib zziplib Debian Ubuntu

Feb 2, 2018

Low: zziplib security update (Oracle Linux 7)

Summary

Fixed packages 3

Vulnerabilities 2

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_…

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local …