Security
English
همهٔ محصولات

Red Hat Fuse 7/adm-zip

Red Hat · بسته
8 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationCVE-2026-102282 · GHSA-J5F4-CC29-5X44 adm-zipRed Hat Build of Podman Desktop/rh-podman-desktop npmRed Hat زیاد اصلاح گزارش شده
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0CVE-2026-92000 · GHSA-RCW4-F5RP-G42V adm-zipRed Hat Build of Podman Desktop/rh-podman-desktop.git npmRed Hat زیاد اصلاح گزارش شده
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)CVE-2026-77301 · GHSA-7Q85-XJ36-VMFC adm-zipRed Hat Advanced Cluster Management for Kubernetes 2/redhat-user-workloads/volsync-0-12 npmRed Hat زیاد اصلاح گزارش شده
adm-zip extraction follows destination symlinks, allowing arbitrary file overwriteCVE-2026-76845 · GHSA-VWC7-R8MQ-G2X9 adm-zipRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle npmRed Hat متوسط اصلاح اعلام نشده
adm-zip: adm-zip: Denial of Service via decompression bomb protection bypass in asynchronous extractionCVE-2026-114103 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundleRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-rhel9 Red Hat متوسط اصلاح اعلام نشده
adm-zip: adm-zip: Content validation bypass via duplicate archive entry namesCVE-2026-114104 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundleRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-rhel9 Red Hat متوسط اصلاح اعلام نشده
adm-zip: adm-zip: Privilege escalation via unmasked permissions during archive extractionCVE-2026-114105 Cost Management On Premise/costmanagement/costmanagement-ui-rhel10Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle Red Hat متوسط اصلاح اعلام نشده
adm-zip: adm-zip: File integrity check bypass via duplicate archive entriesCVE-2026-116137 Cost Management On Premise/costmanagement/costmanagement-ui-rhel10Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle Red Hat کم اصلاح اعلام نشده