Affected: AlmaLinux:9: zziplib, AlmaLinux:9: zziplib-devel, AlmaLinux:9: zziplib-utils

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Affected: openEuler:20.03-LTS-SP1: zziplib, openEuler:20.03-LTS-SP3: zziplib, openEuler:22.03-LTS: zziplib, openEuler:22.03-LTS-SP1: zziplib, openEuler:22.03-LTS-SP2: zziplib

The zziplib is a lightweight library to easily extract data from zip files. Applications can bundle files into a single zip archive and access them. The implementation is based only on the (free) subset of compression with the zlib algorithm which is actually used by the zip/unzip tools. Security Fix(es): An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.(CVE-2020-18770)

libzzip-0-13-0.13.72-3.1 on GA media

Security update for zziplib

Affected: Ubuntu:Pro:16.04:LTS: zziplib, Ubuntu:Pro:18.04:LTS: zziplib, Ubuntu:20.04:LTS: zziplib, Ubuntu:22.04:LTS: zziplib, Ubuntu:24.04:LTS: zziplib, Ubuntu:25.10: zziplib, Ubuntu:26.04:LTS: zziplib

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.