File _patchinfo of Package patchinfo.13903
<patchinfo incident="13903"> <issue tracker="bnc" id="1154002">unzip-mem command unzip file error</issue> <issue tracker="bnc" id="1214577">VUL-0: CVE-2020-18770: zziplib: denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c</issue> <issue tracker="cve" id="2020-18770"/> <issue tracker="bnc" id="1187526">VUL-0: CVE-2020-18442: zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()</issue> <issue tracker="cve" id="2020-18442"/> <packager>jmoellers</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for zziplib</summary> <description>This update for zziplib fixes the following issues: Security issue fixed: - CVE-2020-18442: Fixed infinite loop in zzip_file_read() as used in unzzip_cat_file() (bsc#1187526). - CVE-2020-18770: Fixed denial-of-service in function zzip_disk_entry_to_file_header in mmapped.c (bsc#1214577). Non-security issue fixed: - Implement an error message with a condition by checking the return value of a function call. (bsc#1154002) </description> </patchinfo>