Lucene search

K
mageiaGentoo FoundationMGASA-2021-0033
HistoryJan 17, 2021 - 7:07 p.m.

Updated unzip package fixes a security vulnerability

2021-01-1719:07:01
Gentoo Foundation
advisories.mageia.org
21

0.0005 Low

EPSS

Percentile

15.4%

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a “better zip bomb” issue (CVE-2019-13232).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchunzip< 6.0-1unzip-6.0-1.mga7