cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor ツール このリポジトリには、CVE-2024-3094 としても知られる XZ Backdoor 脆弱性のためのツールが含まれています。 CVE-2024-3094 について CVE-2024-3094 は XZ Backdoor としても知られ、XZ データ圧縮ライブラリで発見された重大な脆弱性です。 XZ Backdoor と CVE-2024-3094 の詳細については、包括的な概要と問題のより深い分析の両方を提供する JFrog ブログ記事 を参照してください。 CVE-2024-3094 検出ツール このリポジトリの...

external_zlib_4.4_CVE-2018-25032

ZLIBデータ圧縮ライブラリ zlib 1.2.7は汎用データ圧縮ライブラリです。すべてのコードはスレッドセーフです。zlibライブラリが使用するデータ形式は、ファイル内のRFC（Request for Comments）1950から1952で説明されています：http://tools.ietf.org/html/rfc1950 zlib形式, rfc1951 deflate形式, rfc1952 gzip形式。...

CVE-2024-3094-checker

CVE-2024-3094 検出および修復スクリプト このスクリプトは、XZ Utils データ圧縮ライブラリに影響を与える重大な脆弱性 CVE-2024-3094 を検出および修復するために設計されています。この脆弱性は CISA アラートで強調されており、システムのセキュリティに重大な影響を及ぼします。この Bash スクリプトは、検出と修復の両方の機能を提供します。 免責事項...

external_zlib-1.2.7_CVE-2018-25032

ZLIB 数据压缩库 zlib 1.2.7 是一个通用数据压缩库。所有代码都是线程安全的。zlib 库使用的数据格式在 RFC（请求评论）1950 到 1952 中描述，文件位于： http://tools.ietf.org/html/rfc1950（zlib 格式）、rfc1951（deflate 格式）和 rfc1952（gzip 格式）。 压缩库的所有函数都在文件 zlib.h 中说明（欢迎志愿者编写 man 页面，请联系 [email protected]）。库的使用示例在文件 test/example.c 中给出，该文件也测试库是否正常工作。另一个示例在文件...

external_zlib_CVE-2022-37434

ZLIB データ圧縮ライブラリ zlib 1.2.8 は汎用データ圧縮ライブラリです。すべてのコードはスレッドセーフです。zlib ライブラリで使用されるデータ形式は、RFC Request for Comments 1950 から 1952 で説明されており、ファイルは http://tools.ietf.org/html/rfc1950 zlib 形式、rfc1951 deflate 形式、rfc1952 gzip 形式 にあります。 圧縮ライブラリの全関数はファイル zlib.h に文書化されています（マニュアルページを書くボランティア歓迎、[email protected]...

CVE-2026-64031 erofs: fix managed cache race for unaligned extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

EulerOS Virtualization 2.13.1 : xz (EulerOS-SA-2026-2393)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

CVE-2026-48962

A flaw was found in perl-IO-Compress, a component used for data compression and decompression. A remote attacker could exploit this vulnerability by crafting a malicious input, specifically an output glob, that bypasses the intended security measures. This could lead to the execution of...

[SECURITY] Fedora 44 Update: python-pysam-0.24.0-1.fc44

pysam - a python module for reading, manipulating and writing genomic data sets.pysam is a lightweight wrapper of the htslib C-API and provides faciliti es to read and write SAM/BAM/VCF/BCF/BED/GFF/GTF/FASTA/FASTQ files as well as access to the command line functionality of the samtools and...

[SECURITY] Fedora 43 Update: openvpn-2.6.20-1.fc43

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

CVE-2026-34743

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

AZL-81905 CVE-2026-34743 affecting package rust for versions less than 1.75.0-28

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2025-62813

CVE-2025-62813 corresponds to a vulnerability in LZ4 processing of untrusted frames (CVE-2025-62813) that can cause a denial of service or other unspecified impact. Connected advisories show affected packages across Linux distributions: LZ4 (versions less than 1.9.4-2 on Amazon Linux 2/ALAS2 and ...

EUVD-2024-42768

Malicious code in bioql PyPI...

EUVD-2025-14786

Malicious code in bioql PyPI...

A Non-Monotonic Relationship: an Empirical Analysis of Hybrid Quantum Classifiers for Unseen Ransomware Detection

Detecting unseen ransomware is a critical cybersecurity challenge where classical machine learning often fails. While Quantum Machine Learning QML presents a potential alternative, its application is hindered by the dimensionality gap between classical data and quantum hardware. This paper...

C-AAE: Compressively Anonymizing Autoencoders for Privacy-Preserving Activity Recognition in Healthcare Sensor Streams

Wearable accelerometers and gyroscopes encode fine-grained behavioural signatures that can be exploited to re-identify users, making privacy protection essential for healthcare applications. We introduce C-AAE, a compressive anonymizing autoencoder that marries an Anonymizing AutoEncoder AAE with...

K000152366: XZ Utils vulnerability CVE-2025-31115

Security Advisory Description XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and...

ALSA-2025:7524 Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ has a...