external_zlib_4.4_CVE-2018-25032

ZLIB 数据压缩库 zlib 1.2.7 是一个通用的数据压缩库。所有代码都是线程安全的。zlib 库使用的数据格式由 RFC（请求评论）1950 到 1952 在以下文件中描述： http://tools.ietf.org/html/rfc1950（zlib 格式），rfc1951（deflate 格式）和 rfc1952（gzip 格式）。 压缩库的所有功能都在文件 zlib.h 中说明（欢迎志愿者编写手册页，请联系 [email protected]）。库的使用示例在文件 test/example.c 中给出，该文件也测试库是否正常工作。另一个示例在文件...

CVE-2024-3094-checker

Script de Detección y Corrección de CVE-2024-3094 Este script está diseñado para detectar y corregir una vulnerabilidad crítica, CVE-2024-3094, que afecta a la biblioteca de compresión de datos XZ Utils. La vulnerabilidad fue destacada en una Alerta de CISA y tiene implicaciones significativas pa...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor Tools This repository contains tools for the XZ Backdoor vulnerability, also known as CVE-2024-3094. About CVE-2024-3094 CVE-2024-3094, also known as the XZ Backdoor, is a critical vulnerability discovered in the XZ data compression library. For more information about th...

external_zlib-1.2.7_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 es una biblioteca de compresión de datos de propósito general. Todo el código es seguro para subprocesos. El formato de datos utilizado por la biblioteca zlib se describe en los RFC Request for Comments 1950 a 1952 en los archivos...

external_zlib_CVE-2022-37434

ZLIB 数据压缩库 zlib 1.2.8 是一个通用数据压缩库。所有代码都是线程安全的。zlib 库使用的数据格式在 RFC（请求评论）1950 至 1952 中描述，文件位于： http://tools.ietf.org/html/rfc1950 zlib 格式、rfc1951 deflate 格式 和 rfc1952 gzip 格式。 压缩库的所有函数都在文件 zlib.h 中进行了说明（欢迎志愿者编写手册页，请联系 [email protected]）。库的使用示例见文件 test/example.c，该文件还测试库是否正常工作。另一个示例见文件...

EulerOS Virtualization 2.12.0 : xz (EulerOS-SA-2026-2812)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

CVE-2026-64031 erofs: fix managed cache race for unaligned extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: Thread 1 Thread 2 zerofsfillbiovec ... filemapaddfolio 1 zerofsbindcache...

EulerOS Virtualization 2.13.1 : xz (EulerOS-SA-2026-2393)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

CVE-2026-48962

A flaw was found in perl-IO-Compress, a component used for data compression and decompression. A remote attacker could exploit this vulnerability by crafting a malicious input, specifically an output glob, that bypasses the intended security measures. This could lead to the execution of...

[SECURITY] Fedora 44 Update: python-pysam-0.24.0-1.fc44

pysam - a python module for reading, manipulating and writing genomic data sets.pysam is a lightweight wrapper of the htslib C-API and provides faciliti es to read and write SAM/BAM/VCF/BCF/BED/GFF/GTF/FASTA/FASTQ files as well as access to the command line functionality of the samtools and...

[SECURITY] Fedora 43 Update: openvpn-2.6.20-1.fc43

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

CVE-2026-34743

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

AZL-81905 CVE-2026-34743 affecting package rust for versions less than 1.75.0-28

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2025-62813

CVE-2025-62813 corresponds to a vulnerability in LZ4 processing of untrusted frames (CVE-2025-62813) that can cause a denial of service or other unspecified impact. Connected advisories show affected packages across Linux distributions: LZ4 (versions less than 1.9.4-2 on Amazon Linux 2/ALAS2 and ...

EUVD-2024-42768

Malicious code in bioql PyPI...

EUVD-2025-14786

Malicious code in bioql PyPI...

A Non-Monotonic Relationship: an Empirical Analysis of Hybrid Quantum Classifiers for Unseen Ransomware Detection

Detecting unseen ransomware is a critical cybersecurity challenge where classical machine learning often fails. While Quantum Machine Learning QML presents a potential alternative, its application is hindered by the dimensionality gap between classical data and quantum hardware. This paper...

C-AAE: Compressively Anonymizing Autoencoders for Privacy-Preserving Activity Recognition in Healthcare Sensor Streams

Wearable accelerometers and gyroscopes encode fine-grained behavioural signatures that can be exploited to re-identify users, making privacy protection essential for healthcare applications. We introduce C-AAE, a compressive anonymizing autoencoder that marries an Anonymizing AutoEncoder AAE with...

K000152366: XZ Utils vulnerability CVE-2025-31115

Security Advisory Description XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and...