Back Linuxsecurity openSUSE 7zip Important Denial Of Service Vulnern 2026-21038
- CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858).
- CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (bsc#1267421).
- CVE-2026-48101: Information Disclosure via uninitialized memory in UEFI capsule parser (bsc#1267859).
- CVE-2026-48102: Information disclosure and denial of service via crafted UDF image (bsc#1267860).
- CVE-2026-48103: off-by-one heap out-of-bounds read (bsc#1267861).
- CVE-2026-48104: Uninitialized heap read in SquashFS archive handler (bsc#1267862).
- CVE-2026-48111: off-by-one out-of-bounds read in ParseDepedencyExpression function (bsc#1267863).
- CVE-2026-48112: heap out-of-bounds read in BSD SYMDEF parser (bsc#1267864).
* linux version of 7-Zip can use huge pages (2 MB pages). It can
increase compression speed for 10% for 7z/xz/LZMA/LZMA2 compression.
* new -spo[d|c|r] switch specifies the...
- openSUSE Leap 16.0:
7zip-26.01-160000.1.1
*
*
*
*
*
*
*
*
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
