256 matches found
EUVD-2017-5619
Malware in sbrugna...
EUVD-2012-1192
Malware in sbrugna...
EUVD-2019-7912
Malware in sbrugna...
php:8.2 security update
libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...
Oracle Linux 8 : php:8.2 (ELSA-2025-15687)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15687 advisory. libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding descripti...
libzip bug fix and enhancement update
An update is available for libzip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...
php:7.4 security update
libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php 7.4.33-2 - fix low/moderate CVEs RHEL-66589 - Fix cgi.forceredirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of...
php:8.2 security update
libzip php 8.2.25-1 - rebase to 8.2.25 RHEL-66166 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...
OPENSUSE-SU-2024:10113-1 libzip-devel-1.1.3-1.4 on GA media
These are all security issues fixed in the libzip-devel-1.1.3-1.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11018-1 libzip-devel-1.8.0-1.2 on GA media
These are all security issues fixed in the libzip-devel-1.8.0-1.2 package on the GA media of openSUSE Tumbleweed...
RHEL 6 : libzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...
RHEL 7 : libzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...
RHEL 7 : libzip (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...
VulnCheck KEV: CVE-2015-2331
Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...
php:8.0 security update
libzip php 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...
Ubuntu 16.04 ESM / 18.04 ESM : libzip vulnerability (USN-4811-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4811-1 advisory. It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...
libzip:zip_read_fuzzer: Use-of-uninitialized-value in lzma_index_hash_decode
Detailed Report: https://oss-fuzz.com/testcase?key=5152121978486784 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipreadfuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lzmaindexhashdecode liblzma.so.5 lzmacode...
libzip:zip_write_encrypt_pkware_file_fuzzer: Use-of-uninitialized-value in _zip_stdio_op_write
Detailed Report: https://oss-fuzz.com/testcase?key=4874869814460416 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipwriteencryptpkwarefilefuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zipstdioopwrite readfile...
libzip:zip_write_encrypt_aes256_file_fuzzer: Heap-use-after-free in zip_error_fini
Project: https://github.com/nih-at/libzip.git Detailed Report: https://oss-fuzz.com/testcase?key=6114202340950016 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipwriteencryptaes256filefuzzer Job Type: libfuzzerasanlibzip Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...
php:7.4 security update
libzip 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available 1.5.1-1 - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no more referenced in libzip.pc...