zziplib security update

2020-04-0600:00:00

linux.oracle.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

JSON

[0.13.62-12]

Fix a directory traversal bug
unzip-mem should now strip all ‘…/’ prefixes from the archived files
Resolves: CVE-2018-17828

OSVersionArchitecturePackageVersionFilename
oracle linux7srczziplib< 0.13.62-12.el7zziplib-0.13.62-12.el7.src.rpm
oracle linux7aarch64zziplib< 0.13.62-12.el7zziplib-0.13.62-12.el7.aarch64.rpm
oracle linux7aarch64zziplib-devel< 0.13.62-12.el7zziplib-devel-0.13.62-12.el7.aarch64.rpm
oracle linux7aarch64zziplib-utils< 0.13.62-12.el7zziplib-utils-0.13.62-12.el7.aarch64.rpm
oracle linux7srczziplib< 0.13.62-12.el7zziplib-0.13.62-12.el7.src.rpm
oracle linux7i686zziplib< 0.13.62-12.el7zziplib-0.13.62-12.el7.i686.rpm
oracle linux7x86_64zziplib< 0.13.62-12.el7zziplib-0.13.62-12.el7.x86_64.rpm
oracle linux7i686zziplib-devel< 0.13.62-12.el7zziplib-devel-0.13.62-12.el7.i686.rpm
oracle linux7x86_64zziplib-devel< 0.13.62-12.el7zziplib-devel-0.13.62-12.el7.x86_64.rpm
oracle linux7x86_64zziplib-utils< 0.13.62-12.el7zziplib-utils-0.13.62-12.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	zziplib	< 0.13.62-12.el7	zziplib-0.13.62-12.el7.src.rpm
oracle linux	7	aarch64	zziplib	< 0.13.62-12.el7	zziplib-0.13.62-12.el7.aarch64.rpm
oracle linux	7	aarch64	zziplib-devel	< 0.13.62-12.el7	zziplib-devel-0.13.62-12.el7.aarch64.rpm
oracle linux	7	aarch64	zziplib-utils	< 0.13.62-12.el7	zziplib-utils-0.13.62-12.el7.aarch64.rpm
oracle linux	7	src	zziplib	< 0.13.62-12.el7	zziplib-0.13.62-12.el7.src.rpm
oracle linux	7	i686	zziplib	< 0.13.62-12.el7	zziplib-0.13.62-12.el7.i686.rpm
oracle linux	7	x86_64	zziplib	< 0.13.62-12.el7	zziplib-0.13.62-12.el7.x86_64.rpm
oracle linux	7	i686	zziplib-devel	< 0.13.62-12.el7	zziplib-devel-0.13.62-12.el7.i686.rpm
oracle linux	7	x86_64	zziplib-devel	< 0.13.62-12.el7	zziplib-devel-0.13.62-12.el7.x86_64.rpm
oracle linux	7	x86_64	zziplib-utils	< 0.13.62-12.el7	zziplib-utils-0.13.62-12.el7.x86_64.rpm