Search for packages
Package details: pkg:alpm/archlinux/minizip@1:1.3-1
purl pkg:alpm/archlinux/minizip@1:1.3-1
Next non-vulnerable version 1:1.3.1-1
Latest non-vulnerable version 1:1.3.1-1
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-mhka-nrx1-gfgc
Aliases:
CVE-2023-45853
GHSA-mq29-j5xf-cjwr
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.
1:1.3.1-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T11:34:51.872119+00:00 Arch Linux Importer Affected by VCID-mhka-nrx1-gfgc https://security.archlinux.org/AVG-2847 37.0.0