Most recent entries from all

ALSA-2024:2377 — Moderate: zziplib security update

Affected: AlmaLinux:9: zziplib, AlmaLinux:9: zziplib-devel, AlmaLinux:9: zziplib-utils

The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-16157

EUVD-2026-192465

fkie_cve-2020-18770

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

GHSA-mjgv-6qmw-8jwc

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

gsd-2020-18770

msrc_CVE-2020-18770 — An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to…

msrc_CVE-2020-18770

OESA-2023-1816 — zziplib security update

Affected: openEuler:20.03-LTS-SP1: zziplib, openEuler:20.03-LTS-SP3: zziplib, openEuler:22.03-LTS: zziplib, openEuler:22.03-LTS-SP1: zziplib, openEuler:22.03-LTS-SP2: zziplib

The zziplib is a lightweight library to easily extract data from zip files. Applications can bundle files into a single zip archive and access them. The implementation is based only on the (free) subset of compression with the zlib algorithm which is actually used by the zip/unzip tools. Security Fix(es): An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.(CVE-2020-18770)

openSUSE-SU-2024:13746-1 — libzzip-0-13-0.13.72-3.1 on GA media

libzzip-0-13-0.13.72-3.1 on GA media

SUSE-SU-2024:0961-1 — Security update for zziplib

Security update for zziplib

UBUNTU-CVE-2020-18770

Affected: Ubuntu:Pro:16.04:LTS: zziplib, Ubuntu:Pro:18.04:LTS: zziplib, Ubuntu:20.04:LTS: zziplib, Ubuntu:22.04:LTS: zziplib, Ubuntu:24.04:LTS: zziplib, Ubuntu:25.10: zziplib, Ubuntu:26.04:LTS: zziplib

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

WID-SEC-W-2024-1213 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.