SuSE9 Security Update : zlib (YOU Patch Number 10347)

The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer discovered additional ways a stream could trigger an overflow. This security...

SuSE9 Security Update : perl-Compress-Zlib (YOU Patch Number 10292)

perl-Compress-Zlib included a copy of zlib which is vulnerable to a denial of service attack tracked by the Mitre CVE CVE-2005-2096. This update removed the use of the internal copy and now uses the external version of zlib. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

Gentoo Security Advisory GLSA 200908-07 (Compress-Raw-Zlib Compress-Raw-Bzip2)

The remote host is missing updates announced in advisory GLSA 200908-07. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

perl DoS

Crash on processing zlib stream via Compress::Raw::Zlib and bzip2 stream in Compress-Raw-Bzip2...

Perl Compress::Raw modules: Denial of service

Background Compress::Raw::Zlib and Compress::Raw::Bzip2 are Perl low-level interfaces to the zlib and bzip2 compression libraries. Description Leo Bergolth reported an off-by-one error in the inflate function in Zlib.xs of Compress::Raw::Zlib, possibly leading to a heap-based buffer overflow...

Mandrake Security Advisory MDVSA-2009:174 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:174. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mandrake Security Advisory MDVSA-2009:174 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:174. OpenVAS Vulnerability Test $Id: mdksa2009174.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:174 perl-Compress-Raw-Zlib Authors: Thomas Reinke...

Mandrake Security Advisory MDVSA-2009:157 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora Core 10 FEDORA-2009-7680 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. OpenVAS Vulnerability Test $Id: fcore20097680.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7680 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-7680 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandrake Security Advisory MDVSA-2009:157 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157. OpenVAS Vulnerability Test $Id: mdksa2009157.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:157 perl-Compress-Raw-Zlib Authors: Thomas Reinke...

python: integer signedness error in the zlib extension module

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

python: integer signedness error in the zlib extension module

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

python security update

2.3.4-14.7.el48.2 - Fix all of the low priority security bugs: - Resolves: rhbz486329 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

Mandriva Linux Security Advisory : perl-Compress-Raw-Zlib (MDVSA-2009:157-1)

A vulnerability has been found and corrected in perl-Compress-Raw-Zlib : Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of servi...

Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)

This security update fixes an off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx...

Ubuntu: Security Advisory (USN-794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 : libcompress-raw-zlib-perl, perl vulnerability (USN-794-1)

It was discovered that the Compress::Raw::Zlib Perl module incorrectly handled certain zlib compressed streams. If a user or automated system were tricked into processing a specially crafted compressed stream or file, a remote attacker could crash the application, leading to a denial of service...

USN-794-1: Perl vulnerability

It was discovered that the Compress::Raw::Zlib Perl module incorrectly handled certain zlib compressed streams. If a user or automated system were tricked into processing a specially crafted compressed stream or file, a remote attacker could crash the application, leading to a denial of service...

openSUSE 10 Security Update : perl-Compress-Raw-Zlib (perl-Compress-Raw-Zlib-6300)

A Buffer overflow in the Compress::Raw::Zlib perl module has been fixed. CVE-2009-1391 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Compress-Raw-Zlib-6300. The text description of this...