|
Info-ZIP Zip Remote Recursive Directory Compression Buffer Overflow Vulnerability
Solution: Slackware has released an advisory (SSA:2005-121-01) and fixes to address this issue. Please see the referenced advisory for more information. Ubuntu has released an advisory (USN-18-1) to address this issue. Please see the referenced advisory for more information. RedHat Fedora has released advisory FEDORA-2004-399 along with fixes for this issue in their Fedora Core 2 packages. Please see the referenced advisory for more information. RedHat Fedora has released advisory FEDORA-2004-400 along with fixes for this issue in their Fedora Core 3 packages. Please see the referenced advisory for more information. Gentoo Linux has released advisory (GLSA 200411-16) dealing with this issue. Gentoo advises that all zip users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/zip-2.3-r4" For more information please see the referenced Gentoo advisory. Mandrake has released advisory MDKSA-2004:141 to address this issue. Please see the referenced advisory for further information on obtaining and applying fixes. SUSE has released an advisory (SUSE-SR:2004:003) that address this and various other issues. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2004:634-08 to address this issue in Red Hat Enterprise Linux. Please see the advisory in Web references for more information. Debian has released an advisory DSA 624-1 to address this issue. Please see the referenced advisory for more information. SGI has released advisory 20050101-01-U to address various issues in SGI Advanced Linux Environment 3. This advisory includes updated SGI ProPack 3 Service Pack 3 packages. Please see the referenced advisory for more information. Avaya has released advisory ASA-2005-019 to document the affected versions of Avaya products. Please see the referenced advisory for further information. Turbolinux has released advisory Turbolinux Security Announcement 31/Jan/2005 to address various issues. Please see the referenced advisory for more information. Fedora has released an advisory (Fedora Legacy Update Advisory FLSA:2255) to address this issue in Red Hat Linux 7.3 - i386, Red Hat Linux 9 - i386, and Fedora Core 1 - i386. Please see the referenced advisory for more information. Slackware Linux -current
Slackware Linux 10.0
Slackware Linux 10.1
Info-ZIP Zip 2.3
SGI ProPack 3.0
Slackware Linux 8.1
Slackware Linux 9.0
Slackware Linux 9.1
|
|
 Privacy Statement |
