Fedora 41 : p7zip (2024-6ecf5236ae)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6ecf5236ae advisory. Fix wrapper to hide password from process history Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

MGASA-2021-0305 Updated p7zip package fixes security vulnerabilities

In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream-Write where a memcpy uses a NULL pointer as destination address, leading to a crash CVE-2021-3465. Null pointer dereference in function Reserve found in p7zip 16.02 rhbz1951218. Null...

OPENSUSE-SU-2021:0684-1 Security update for p7zip

This update for p7zip fixes the following issues: - CVE-2021-3465: Fixed a NULL pointer dereference in NCompress:CCopyCoder:Code bsc1184699 This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2018:0464-1 Security update for p7zip

This update for p7zip fixes the following issues: Security issues fixed: - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR...

SUSE-SU-2016:1593-1 Security update for p7zip

This update for p7zip fixes the following issues: - add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF CInArchive::ReadFileItem code execution vulnerability bsc979823, CVE-2016-2335...

Updated p7zip package fixes security vulnerability

Alexander Cherepanov discovered that p7zip is susceptible to a directory traversal vulnerability. While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write files outside the current...