lrzip vulnerabilities (Alpine)

7 vulnerabilities.

• lrzip Alpine lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int)... CVE-2023-39741 Fix available 5.5 MediumAugust 17, 2023
• lrzip Alpine Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions... CVE-2022-33067 Fix available 5.5 MediumJune 22, 2022
• lrzip Alpine Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c... CVE-2022-28044 Fix available 9.8 CriticalApril 15, 2022
• lrzip Alpine lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the... CVE-2022-26291 Fix available 5.5 MediumMarch 28, 2022
• lrzip Alpine A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows... CVE-2021-27345 Fix available 5.5 MediumJune 10, 2021
• lrzip Alpine A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which... CVE-2020-25467 Fix available 5.5 MediumJune 10, 2021
• lrzip Alpine Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to... CVE-2021-27347 Fix available 5.5 MediumJune 10, 2021