William Woodruff

When extracting a link on a system that does not support links, the software falls back to extracting a member from the archive. During this process, the filter function is executed twice: once for the extracted member and once with the name set to the link location. The return value of one of these calls is ignored, whereas the member should be skipped if either call returns None.

When decompressing crafted zip files using bzip, LZMA, or Zstandard compressions, the software may use an attacker-controlled size to pre-allocate memory, which can lead to memory exhaustion.

A flaw in the GnuTLS library is related to shortcomings in handling exceptional states when analyzing the `cert list size` parameter in the `gnutls x509 trust list verify crt2()` function. This issue can be exploited by an attacker to cause a denial of service by passing a specially crafted certificate chain in PEM encoding to `certtool`. The vulnerability can also be triggered when verifying a specially crafted .pem bundle using the "certtool --verify-chain" command, potentially leading to an application crash. Remote attacks are possible, but no exploit has been reported yet.