The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade foreman-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade python39-pulp_manifestUpgrade rubygem-unicode-display_widthUpgrade rubygem-ffi-debugsourceUpgrade rubygem-clampUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-loggingUpgrade rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade rubygem-ffiUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-domain_nameUpgrade rubygem-amazing_printUpgrade rubygem-unicodeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-mime-typesUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-gssapiUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade satellite-cliUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookie | Nov 17, 2022 | Oct 19, 2021 |
| Debian | — | Upgrade netty | Jan 13, 2023 | Oct 19, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 9, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffiUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-unfUpgrade rubygem-unicode-debugsourceUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-jwtUpgrade rubygem-multi_jsonUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_widthUpgrade foreman-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debugsourceUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauthUpgrade rubygem-apipie-bindingsUpgrade python39-pulp_manifestUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-gssapi | Nov 17, 2022 | Oct 19, 2021 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 12, 2024 | Oct 19, 2021 |
| Suse | — | Upgrade netty-pomsUpgrade netty-javadocUpgrade netty | Oct 26, 2022 | Oct 19, 2021 |
| Ubuntu | — | Upgrade libnetty-javaUpgrade libnetty-java (Ubuntu Pro) | May 1, 2023 | Oct 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub