zlib security update

1.2.11-18 - Resolves: CVE-2018-25032 1.2.11-17 - Fixed DFLTCC compression level switching issues 1875492 - Enabled HW compression for compression levels 1 through 6 1847438 - Fixed inflateSyncPoint bad return value on z15 1888930...

Important: Red Hat Security Advisory: gzip security update

An update for gzip is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: zlib security update

An update for zlib is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has many distant matches. For some rare inputs with a large number of distant matches crafted payloads, the buffer into which the compressed or deflated data is written...

Important: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: arbitrary-file-write vulnerability...

gzip security update

An update is available for gzip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gzip packages contain the gzip GNU zip data compression utility. gzip is use...

Fedora: Security Advisory for xz (FEDORA-2022-c69e286f8d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: xz-5.2.5-9.fc35

XZ Utils are an attempt to make LZMA compression easy to use on free as in freedom operating systems. This is achieved by providing tools and libraries which are similar to use than the equivalents of the most popular existing compression algorithms. LZMA is a general purpose compression algorith...

[SECURITY] Fedora 35 Update: wavpack-5.4.0-5.fc35

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

[SECURITY] Fedora 34 Update: wavpack-5.4.0-5.fc34

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

Fedora: Security Advisory for gzip (FEDORA-2022-6746dde2a0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: gzip-1.10-6.fc35

The gzip package contains the popular GNU gzip data compression program. Gzipped files have a .gz extension. Gzip should be installed on your system, because it is a very commonly used data compression program...

Memory Corruption Vulnerability in 2345 GoodPress (CNVD-2022-38914)

2345 GoodPress is a free decompression software. A memory corruption vulnerability exists in 2345 GoodPress, which can be exploited by an attacker to cause a local software crash...

USN-5378-2: XZ Utils vulnerability

Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with specially crafted filenames, a remote attacker could overwrite arbitrary files...

Frequently Overlooked Settings to Improve Graphics Performance for XenApp, XenDesktop, Receiver Technologies

This article provides an overview of frequently overlooked or misconfigured settings that can be used to enhance graphics performance in XenDesktop, XenApp, and the Citrix Receiver. Background Throughout the life of XenApp and XenDesktop, the combination of many factors such as the architecture o...

Out-of-bounds read vulnerability in libarchive

libarchive is a multi-format archive and compression library. An out-of-bounds read vulnerability exists in libarchive, which can be exploited by an attacker to cause an out-of-bounds read...

[SECURITY] [DLA 2976-1] gzip security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2976-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 10, 2022 https://wiki.debian.org/LTS -...

ulikunitz/xz: Infinite loop in readUvarint allows for denial of service

A flaw was found in github.com/ulikunitz/xz. The function readUvarint may not terminate a loop what could lead to denial of service DoS...

FreeBSD : FreeBSD -- zlib compression out-of-bounds write (38f2e3a0-b61e-11ec-9ebc-1c697aa5a594)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 38f2e3a0-b61e-11ec-9ebc-1c697aa5a594 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has ma...

FreeBSD -- zlib compression out-of-bounds write

Problem Description: Certain inputs can cause zlib's compression routine to overwrite an internal buffer with compressed data. This issue may require the use of uncommon or non-default compression parameters. Impact: The out-of-bounds write may result in memory corruption and an application crash...