Lucene search
RedHatRHSA-2019:2196HistoryAug 06, 2019 - 8:12 a.m.
(RHSA-2019:2196) Low: zziplib security update
2019-08-0608:12:11
access.redhat.com
13
0.005 Low
EPSS
Percentile
76.8%
The zziplib is a lightweight library to easily extract data from zip files.
Security Fix(es):
-
zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c (CVE-2018-6541)
-
zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c (CVE-2018-16548)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc | zziplib-devel | < 0.13.62-11.el7 | zziplib-devel-0.13.62-11.el7.ppc.rpm |
| RedHat | 7 | ppc | zziplib | < 0.13.62-11.el7 | zziplib-0.13.62-11.el7.ppc.rpm |
| RedHat | 7 | s390x | zziplib-devel | < 0.13.62-11.el7 | zziplib-devel-0.13.62-11.el7.s390x.rpm |
| RedHat | 7 | s390x | zziplib-debuginfo | < 0.13.62-11.el7 | zziplib-debuginfo-0.13.62-11.el7.s390x.rpm |
| RedHat | 7 | ppc64le | zziplib-devel | < 0.13.62-11.el7 | zziplib-devel-0.13.62-11.el7.ppc64le.rpm |
| RedHat | 7 | s390 | zziplib-debuginfo | < 0.13.62-11.el7 | zziplib-debuginfo-0.13.62-11.el7.s390.rpm |
| RedHat | 7 | ppc64le | zziplib-utils | < 0.13.62-11.el7 | zziplib-utils-0.13.62-11.el7.ppc64le.rpm |
| RedHat | 7 | ppc64 | zziplib-devel | < 0.13.62-11.el7 | zziplib-devel-0.13.62-11.el7.ppc64.rpm |
| RedHat | 7 | s390x | zziplib | < 0.13.62-11.el7 | zziplib-0.13.62-11.el7.s390x.rpm |
| RedHat | 7 | x86_64 | zziplib-utils | < 0.13.62-11.el7 | zziplib-utils-0.13.62-11.el7.x86_64.rpm |
Related
nessus
nessus
RHEL 7 : zziplib (RHSA-2019:2196)
2019-08-12 00:00:00
CentOS 7 : zziplib (CESA-2019:2196)
2019-08-30 00:00:00
amazon
amazon
Low: zziplib
2019-11-04 22:40:00
centos
centos
zziplib security update
2019-08-30 04:38:06
oraclelinux
oraclelinux
zziplib security update
2019-08-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2019-2236)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2750-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for zziplib (openSUSE-SU-2019:2394-1)
2019-10-29 00:00:00
redhatcve
redhatcve
CVE-2018-16548
2018-09-06 18:19:02
CVE-2018-6541
2019-10-09 06:30:09
ubuntucve
ubuntucve
CVE-2018-16548
2018-09-05 00:00:00
CVE-2018-6541
2018-02-02 00:00:00
alpinelinux
alpinelinux
CVE-2018-16548
2018-09-05 21:29:03
osv
osv
CVE-2018-16548
2018-09-05 21:29:03
CVE-2018-6541
2018-02-02 09:29:00
zziplib - security update
2020-06-28 00:00:00
cve
cve
CVE-2018-16548
2018-09-05 21:29:03
CVE-2018-6541
2018-02-02 09:29:00
prion
prion
Memory corruption
2018-09-05 21:29:00
Design/Logic Flaw
2018-02-02 09:29:00
cbl_mariner
cbl_mariner
CVE-2018-16548 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
CVE-2018-16548 affecting package zziplib for versions less than 0.13.69-8
2023-01-27 21:29:56
suse
suse
Security update for zziplib (moderate)
2019-10-28 00:00:00
Security update for zziplib (moderate)
2019-10-28 00:00:00
nvd
nvd
CVE-2018-16548
2018-09-05 21:29:03
CVE-2018-6541
2018-02-02 09:29:00
cvelist
cvelist
CVE-2018-16548
2018-09-05 21:00:00
CVE-2018-6541
2018-02-02 09:00:00
debiancve
debiancve
CVE-2018-6541
2018-02-02 09:29:00
CVE-2018-16548
2018-09-05 21:29:03
veracode
veracode
Denial Of Service (DoS)
2019-08-07 07:11:21
Denial Of Service (DoS)
2018-02-04 23:38:48
debian
debian
[SECURITY] [DLA 2258-1] zziplib security update
2020-06-28 12:37:46
mageia
mageia
Updated zziplib packages fix security vulnerability
2019-02-21 01:18:01
fedora
fedora
[SECURITY] Fedora 27 Update: zziplib-0.13.69-1.fc27
2018-09-13 17:07:13
[SECURITY] Fedora 28 Update: zziplib-0.13.69-1.fc28
2018-07-31 18:06:22
ubuntu
ubuntu
zziplib vulnerabilities
2018-07-03 00:00:00
freebsd
freebsd
zziplib - multiple vulnerabilities
2017-03-01 00:00:00