File _patchinfo of Package patchinfo.13903

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.13903

<patchinfo incident="13903">
<issue tracker="bnc" id="1154002">unzip-mem command unzip file error</issue>
  <issue tracker="bnc" id="1214577">VUL-0: CVE-2020-18770: zziplib: denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c</issue>
  <issue tracker="cve" id="2020-18770"/>
  <issue tracker="bnc" id="1187526">VUL-0: CVE-2020-18442: zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()</issue>
  <issue tracker="cve" id="2020-18442"/>
  <packager>jmoellers</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for zziplib</summary>
  <description>This update for zziplib fixes the following issues:

Security issue fixed:

- CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526).
- CVE-2020-18770: Fixed denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c (bsc#1214577).

Non-security issue fixed:

- Implement an error message with a condition by checking the return value of a function call. (bsc#1154002)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.13903

Places