external_zlib_CVE-2022-37434

ZLIB データ圧縮ライブラリ zlib 1.2.8 は汎用データ圧縮ライブラリです。すべてのコードはスレッドセーフです。zlib ライブラリで使用されるデータ形式は、RFC Request for Comments 1950 から 1952 で説明されており、ファイルは http://tools.ietf.org/html/rfc1950 zlib 形式、rfc1951 deflate 形式、rfc1952 gzip 形式 にあります。 圧縮ライブラリの全関数はファイル zlib.h に文書化されています（マニュアルページを書くボランティア歓迎、[email protected]...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor 工具 本仓库包含针对 XZ Backdoor 漏洞（也称为 CVE-2024-3094）的工具。 关于 CVE-2024-3094 CVE-2024-3094，也称为 XZ Backdoor，是在 XZ 数据压缩库中发现的一个严重漏洞。 关于 XZ Backdoor 和 CVE-2024-3094 的更多信息，请参考 JFrog 博客文章，该文章提供了全面的概述以及对该问题的深入分析。 CVE-2024-3094 检测器 本仓库中的 cve-2024-3094-detector 工具旨在扫描文件和目录，以检测是否存在 XZ Backdo...

CVE-2024-3094-checker

CVE-2024-3094 検出および修復スクリプト このスクリプトは、XZ Utils データ圧縮ライブラリに影響を与える重大な脆弱性 CVE-2024-3094 を検出および修復するために設計されています。この脆弱性は CISA アラートで強調されており、システムのセキュリティに重大な影響を及ぼします。この Bash スクリプトは、検出と修復の両方の機能を提供します。 免責事項...

external_zlib-1.2.7_CVE-2018-25032

ZLIB डेटा संपीड़न पुस्तकालय zlib 1.2.7 एक सामान्य प्रयोजन डेटा संपीड़न पुस्तकालय है। सभी कोड थ्रेड-सुरक्षित है। zlib पुस्तकालय द्वारा उपयोग किया जाने वाला डेटा प्रारूप RFCs Request for Comments 1950 से 1952 में फाइलों में वर्णित है http://tools.ietf.org/html/rfc1950 zlib प्रारूप, rfc1951 deflate...

external_zlib_4.4_CVE-2018-25032

BIBLIOTECA DE COMPRESSÃO DE DADOS ZLIB zlib 1.2.7 é uma biblioteca de compressão de dados de uso geral. Todo o código é seguro para threads. O formato de dados usado pela biblioteca zlib é descrito pelas RFCs Request for Comments 1950 a 1952 nos arquivos http://tools.ietf.org/html/rfc1950 formato...

CVE-2026-64031 erofs: fix managed cache race for unaligned extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

EulerOS Virtualization 2.13.1 : xz (EulerOS-SA-2026-2393)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

CVE-2026-48962

A flaw was found in perl-IO-Compress, a component used for data compression and decompression. A remote attacker could exploit this vulnerability by crafting a malicious input, specifically an output glob, that bypasses the intended security measures. This could lead to the execution of...

[SECURITY] Fedora 44 Update: python-pysam-0.24.0-1.fc44

pysam - a python module for reading, manipulating and writing genomic data sets.pysam is a lightweight wrapper of the htslib C-API and provides faciliti es to read and write SAM/BAM/VCF/BCF/BED/GFF/GTF/FASTA/FASTQ files as well as access to the command line functionality of the samtools and...

[SECURITY] Fedora 43 Update: openvpn-2.6.20-1.fc43

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

CVE-2026-34743

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

AZL-81905 CVE-2026-34743 affecting package rust for versions less than 1.75.0-28

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2025-62813

CVE-2025-62813 corresponds to a vulnerability in LZ4 processing of untrusted frames (CVE-2025-62813) that can cause a denial of service or other unspecified impact. Connected advisories show affected packages across Linux distributions: LZ4 (versions less than 1.9.4-2 on Amazon Linux 2/ALAS2 and ...

EUVD-2024-42768

Malicious code in bioql PyPI...

EUVD-2025-14786

Malicious code in bioql PyPI...

A Non-Monotonic Relationship: an Empirical Analysis of Hybrid Quantum Classifiers for Unseen Ransomware Detection

Detecting unseen ransomware is a critical cybersecurity challenge where classical machine learning often fails. While Quantum Machine Learning QML presents a potential alternative, its application is hindered by the dimensionality gap between classical data and quantum hardware. This paper...

C-AAE: Compressively Anonymizing Autoencoders for Privacy-Preserving Activity Recognition in Healthcare Sensor Streams

Wearable accelerometers and gyroscopes encode fine-grained behavioural signatures that can be exploited to re-identify users, making privacy protection essential for healthcare applications. We introduce C-AAE, a compressive anonymizing autoencoder that marries an Anonymizing AutoEncoder AAE with...

K000152366: XZ Utils vulnerability CVE-2025-31115

Security Advisory Description XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and...

ALSA-2025:7524 Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ has a...