Medium ELSA-2020-1178 1 CVE

Moderate: zziplib security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[0.13.62-12]
- Fix a directory traversal bug
- unzip-mem should now strip all '../' prefixes from the archived files
- Resolves: CVE-2018-17828

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	zziplib	0:0.13.62-12.el7
Oracle Linux · 7	zziplib-devel	0:0.13.62-12.el7
Oracle Linux · 7	zziplib-utils	0:0.13.62-12.el7

Vulnerabilities 1

Unscored —

CVE-2018-17828

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) i…

zziplib zziplib zziplib zziplib Debian Ubuntu Azure Linux Alpine

Oct 1, 2018