File _patchinfo of Package patchinfo.20488

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.20488

<patchinfo incident="20488">
  <issue tracker="cve" id="2021-36090"/>
  <issue tracker="cve" id="2021-35515"/>
  <issue tracker="cve" id="2021-35517"/>
  <issue tracker="cve" id="2021-35516"/>
  <issue tracker="bnc" id="1188465">VUL-0: CVE-2021-35517: apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive</issue>
  <issue tracker="bnc" id="1188464">VUL-0: CVE-2021-35516: apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive</issue>
  <issue tracker="bnc" id="1188466">VUL-0: CVE-2021-36090: apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive</issue>
  <issue tracker="bnc" id="1188463">VUL-0: CVE-2021-35515: apache-commons-compress: infinite loop when reading a specially crafted 7Z archive</issue>
  <packager>fstrba</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for apache-commons-compress</summary>
  <description>This update for apache-commons-compress fixes the following issues:

- Updated to 1.21
- CVE-2021-35515: Fixed an infinite loop when reading a specially crafted 7Z archive. (bsc#1188463)
- CVE-2021-35516: Fixed an excessive memory allocation when reading a specially crafted 7Z archive. (bsc#1188464)
- CVE-2021-35517: Fixed an excessive memory allocation when reading a specially crafted TAR archive. (bsc#1188465)
- CVE-2021-36090: Fixed an excessive memory allocation when reading a specially crafted ZIP archive. (bsc#1188466)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.20488

Places