The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-loggingUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-netrcUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hashieUpgrade rubygem-domain_nameUpgrade rubygem-unf_extUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffiUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-types-dataUpgrade rubygem-mime-typesUpgrade rubygem-fast_gettext | Nov 17, 2022 | Oct 19, 2021 |
| Debian | — | Upgrade netty | Jan 13, 2023 | Oct 19, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 9, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade rubygem-highlineUpgrade rubygem-mime-typesUpgrade rubygem-unfUpgrade foreman-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicodeUpgrade python39-pulp_manifestUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-cookieUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-rest-clientUpgrade rubygem-localeUpgrade rubygem-domain_nameUpgrade rubygem-gssapiUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli | Nov 17, 2022 | Oct 19, 2021 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 12, 2024 | Oct 19, 2021 |
| Suse | — | Upgrade netty-javadocUpgrade netty-pomsUpgrade netty | Oct 26, 2022 | Oct 19, 2021 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade libnetty-java | May 1, 2023 | Oct 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub