The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cliUpgrade rubygem-multi_jsonUpgrade rubygem-oauthUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade satellite-cliUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unfUpgrade rubygem-localeUpgrade rubygem-little-pluggerUpgrade rubygem-ffiUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-loggingUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-netrcUpgrade rubygem-rest-clientUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman | Nov 17, 2022 | Oct 19, 2021 |
| Debian | — | Upgrade netty | Jan 13, 2023 | Oct 19, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 9, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade rubygem-unf_ext-debugsourceUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debugsourceUpgrade rubygem-jwtUpgrade rubygem-multi_jsonUpgrade rubygem-ffiUpgrade foreman-cliUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-highlineUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-loggingUpgrade rubygem-localeUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-domain_nameUpgrade rubygem-ffi-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicodeUpgrade satellite-cliUpgrade rubygem-gssapiUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-powerbarUpgrade rubygem-hashieUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscap | Nov 17, 2022 | Oct 19, 2021 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Oct 19, 2021 |
| Suse | — | Upgrade nettyUpgrade netty-pomsUpgrade netty-javadoc | Oct 26, 2022 | Oct 19, 2021 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade libnetty-java | May 1, 2023 | Oct 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub