zziplib security update

2018-11-0500:00:00

linux.oracle.com

474

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

64.1%

JSON

[0.13.62-9]

Fix covscan warning
‘Variable ‘file’ going out of scope leaks the storage it points to.’
has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
Related: 1558596
[0.13.62-8]
Fix CVE-2018-7727
Resolves: 1558891
[0.13.62-7]
Fix CVE-2018-7726
Resolves: 1558623
[0.13.62-6]
Fix CVE-2018-7725
Resolves: 1558596

OSVersionArchitecturePackageVersionFilename
oracle linux7srczziplib< 0.13.62-9.el7zziplib-0.13.62-9.el7.src.rpm
oracle linux7aarch64zziplib< 0.13.62-9.el7zziplib-0.13.62-9.el7.aarch64.rpm
oracle linux7aarch64zziplib-devel< 0.13.62-9.el7zziplib-devel-0.13.62-9.el7.aarch64.rpm
oracle linux7aarch64zziplib-utils< 0.13.62-9.el7zziplib-utils-0.13.62-9.el7.aarch64.rpm
oracle linux7srczziplib< 0.13.62-9.el7zziplib-0.13.62-9.el7.src.rpm
oracle linux7i686zziplib< 0.13.62-9.el7zziplib-0.13.62-9.el7.i686.rpm
oracle linux7x86_64zziplib< 0.13.62-9.el7zziplib-0.13.62-9.el7.x86_64.rpm
oracle linux7i686zziplib-devel< 0.13.62-9.el7zziplib-devel-0.13.62-9.el7.i686.rpm
oracle linux7x86_64zziplib-devel< 0.13.62-9.el7zziplib-devel-0.13.62-9.el7.x86_64.rpm
oracle linux7x86_64zziplib-utils< 0.13.62-9.el7zziplib-utils-0.13.62-9.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	zziplib	< 0.13.62-9.el7	zziplib-0.13.62-9.el7.src.rpm
oracle linux	7	aarch64	zziplib	< 0.13.62-9.el7	zziplib-0.13.62-9.el7.aarch64.rpm
oracle linux	7	aarch64	zziplib-devel	< 0.13.62-9.el7	zziplib-devel-0.13.62-9.el7.aarch64.rpm
oracle linux	7	aarch64	zziplib-utils	< 0.13.62-9.el7	zziplib-utils-0.13.62-9.el7.aarch64.rpm
oracle linux	7	src	zziplib	< 0.13.62-9.el7	zziplib-0.13.62-9.el7.src.rpm
oracle linux	7	i686	zziplib	< 0.13.62-9.el7	zziplib-0.13.62-9.el7.i686.rpm
oracle linux	7	x86_64	zziplib	< 0.13.62-9.el7	zziplib-0.13.62-9.el7.x86_64.rpm
oracle linux	7	i686	zziplib-devel	< 0.13.62-9.el7	zziplib-devel-0.13.62-9.el7.i686.rpm
oracle linux	7	x86_64	zziplib-devel	< 0.13.62-9.el7	zziplib-devel-0.13.62-9.el7.x86_64.rpm
oracle linux	7	x86_64	zziplib-utils	< 0.13.62-9.el7	zziplib-utils-0.13.62-9.el7.x86_64.rpm