Medium ELSA-2025-20838 1 CVE

Moderate: zziplib security update (Oracle Linux 9)

Published Nov 17, 2025 · Updated Nov 17, 2025

Ecosystem: Oracle Linux

Summary

[0.13.71-12]
- Fix a directory traversal issue in unzip-mem
Resolves: RHEL-6266

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	zziplib	0:0.13.71-12.el9
Oracle Linux · 9	zziplib-devel	0:0.13.71-12.el9
Oracle Linux · 9	zziplib-utils	0:0.13.71-12.el9

Vulnerabilities 1

Unscored —

CVE-2018-17828

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) i…

zziplib zziplib zziplib zziplib Debian Ubuntu Azure Linux Alpine

Oct 1, 2018