EUVD-2012-1193

Malware in sbrugna...

EUVD-2012-1192

Malware in sbrugna...

EUVD-2017-5619

Malware in sbrugna...

EUVD-2017-4393

Malware in sbrugna...

EUVD-2019-7912

Malware in sbrugna...

php:8.2 security update

libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

Oracle Linux 8 : php:8.2 (ELSA-2025-15687)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15687 advisory. libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding descripti...

libzip bug fix and enhancement update

An update is available for libzip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...

php:7.4 security update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php 7.4.33-2 - fix low/moderate CVEs RHEL-66589 - Fix cgi.forceredirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of...

php:8.2 security update

libzip php 8.2.25-1 - rebase to 8.2.25 RHEL-66166 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

OPENSUSE-SU-2024:10113-1 libzip-devel-1.1.3-1.4 on GA media

These are all security issues fixed in the libzip-devel-1.1.3-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11018-1 libzip-devel-1.8.0-1.2 on GA media

These are all security issues fixed in the libzip-devel-1.8.0-1.2 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : libzip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...

RHEL 7 : libzip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...

RHEL 7 : libzip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...

VulnCheck KEV: CVE-2015-2331

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

php:8.0 security update

libzip php 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

Ubuntu 16.04 ESM / 18.04 ESM : libzip vulnerability (USN-4811-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4811-1 advisory. It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...

libzip:zip_read_fuzzer: Use-of-uninitialized-value in lzma_index_hash_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5152121978486784 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipreadfuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lzmaindexhashdecode liblzma.so.5 lzmacode...

libzip:zip_write_encrypt_pkware_file_fuzzer: Use-of-uninitialized-value in _zip_stdio_op_write

Detailed Report: https://oss-fuzz.com/testcase?key=4874869814460416 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipwriteencryptpkwarefilefuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zipstdioopwrite readfile...