A vulnerability in eazip versions 0.2.5 and 0.2.6 allows crafted archives to create symlinks that escape the intended extraction directory on Windows. This occurs because the symlink target validation mistakenly checks the symlink name instead of the target, allowing backslash characters in targets to bypass validation. This can lead to arbitrary filesystem writes outside the extraction directory. The issue was fixed in version 0.2.7.
Multiple security vulnerabilities affecting the zip processing functionality in rust-keylime have been addressed. These include security control bypass, authentication bypass in AES encrypted entries, denial of service via unbounded memory allocation, path traversal during extraction, and denial of service via uncontrolled memory allocation on symlink targets. These issues were fixed in a security update provided by the SUSE Product Security Team.
A heap out-of-bounds read vulnerability exists in the zchunk library's read_preface() function. This flaw can be triggered by processing a crafted .zck file, potentially causing an application crash.
Multiple vulnerabilities in the cockpit-files component of Red Hat Enterprise Linux (RHEL) allow local attackers to manipulate file ownership and permissions via symlink race conditions and symlink following during privileged operations. These issues affect RHEL versions 9 and 10 and have been rated with a Moderate security impact by Red Hat. Updates addressing these vulnerabilities are available for affected RHEL versions.
Multiple vulnerabilities have been identified in the Golang programming language affecting versions prior to 1.27.4. These issues have been addressed in version 1.27.4. Red Hat has issued security advisories updating their Hardened Images RPMs to include fixes for these vulnerabilities. No specific exploitation details or impacts are provided.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, IPv6, block device handling, network file systems, SCTP, IPVS, AF_UNIX, XFS, SUNRPC, NFS, and IPv4. The update fixes issues including use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, and error path bugs.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 addresses multiple security vulnerabilities across various kernel components including crypto, virtiofs, ipv6, block, netfs, xfrm, ASoC SOF, sctp, ipvs, af_unix, xfs, SUNRPC, nfsd, and ipv4. The update fixes issues such as use-after-free, infinite loops, heap overflow, buffer overruns, and other memory corruption bugs.
A security update for python-Pillow addresses multiple vulnerabilities including decompression bomb protection bypasses, denial of service via infinite loops and memory exhaustion, heap buffer overflows, use-after-free, out-of-bounds reads, and potential code execution. These issues affect various image format parsers and encoders such as MPO, DCX, BMP, PDF, TIFF, JPEG, GIF, and others. The update fixes critical memory safety and denial of service flaws that could lead to resource exhaustion, crashes, or code execution.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.38.1 addresses multiple security vulnerabilities affecting various kernel components including SCTP, AF_UNIX, SUNRPC, NFS daemon, and IPv4. The update fixes issues such as peer transport count overflow, unlinking errors, buffer underflow, XDR length miscalculations, and improper freeing of options after RCU grace periods.
A vulnerability in the xorg-x11-server component of Red Hat Enterprise Linux 8 allows arbitrary code execution and denial of service via an out-of-bounds write in XKB keycode handling. This issue affects the Xwayland server used to run X clients under Wayland. Red Hat has released an update to address this moderate severity security flaw.