[SECURITY] Fedora 30 Update: sharpziplib-1.1.0-0.fc30

SharpZipLib, formerly NZipLib is a Zip, GZip, Tar and BZip2 library written entirely in C . It is implemented as an assembly installable in the GAC, and thus can easily be incorporated into other projects...

openSUSE Security Update : bzip2 (openSUSE-2019-1435)

This update for bzip2 fixes the following issues : Security issue fixed : - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

OPENSUSE-SU-2019:1435-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bzip2 (low)

openSUSE Security Update: Security update for bzip2 Announcement ID: openSUSE-SU-2019:1435-1 Rating: low References: 985657 Cross-References: CVE-2016-3189 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for bzip2 fixes the...

openSUSE: Security Advisory for bzip2 (openSUSE-SU-2019:1398-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : bzip2 (openSUSE-2019-1398)

This update for bzip2 fixes the following issues : Security issue fixed : - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

OPENSUSE-SU-2019:1398-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bzip2 (low)

openSUSE Security Update: Security update for bzip2 Announcement ID: openSUSE-SU-2019:1398-1 Rating: low References: 985657 Cross-References: CVE-2016-3189 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for bzip2 fixes the...

SUSE SLED15 / SLES15 Security Update : bzip2 (SUSE-SU-2019:1206-1)

This update for bzip2 fixes the following issues : Security issue fixed : CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2019:1206-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657...

EulerOS Virtualization 2.5.3 : bzip2 (EulerOS-SA-2019-1171)

According to the version of the bzip2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. An...

Ubuntu: Security Advisory (USN-3935-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3935-1: BusyBox vulnerabilities

Tyler Hicks discovered that BusyBox incorrectly handled symlinks inside tar archives. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could overwrite arbitrary files outside of the current directory. This issue only affected Ubuntu 14....

USN-3935-1 busybox vulnerabilities

Tyler Hicks discovered that BusyBox incorrectly handled symlinks inside tar archives. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could overwrite arbitrary files outside of the current directory. This issue only affected Ubuntu 14....

EulerOS 2.0 SP5 : bzip2 (EulerOS-SA-2019-1020)

According to the version of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. An attacker could us...

Denial Of Service (Dos)

xen is vulnerable to denial of service. This is due to the way the pyGrub boot loader handles compressed kernel images, which consumes an excessive amount of CPU resources when a large bzip2 or lzma compressed kernel image is processed, resulting in an out-of-memory condition...

bzip2/bzip2_decompress_target: Crash in unRLE_obuf_to_output_FAST

Detailed report: https://oss-fuzz.com/testcase?key=5660879073312768 Project: bzip2 Fuzzer: libFuzzerbzip2decompresstarget Fuzz target binary: bzip2decompresstarget Job Type: libfuzzerasanbzip2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff82d64d2f8 Crash State:...

Path traversal in org.springframework.integration:spring-integration-zip

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z that holds path traversal filenames. So when the filename gets concatenated to th...

GHSA-M9JM-RHRM-GCXJ Path traversal in org.springframework.integration:spring-integration-zip

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z that holds path traversal filenames. So when the filename gets concatenated to th...

Updated quazip packages fix security vulnerability

Updated quazip packages fix security vulnerability: A vulnerability has been found in the way developers have implemented the archive extraction of files. An arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar,x...