GNU GZip CHMod File Permission Modification Race Condition Weakness

GNU GZip CHMod File Permission Modification Race Condition Weakness

Solution:
Please see the referenced advisories for more information.

Sun Solaris 8

Sun 112668-03
http://sunsolve.sun.com/patches

Sun Solaris 10

Sun 120719-01
http://sunsolve.sun.com/patches

GNU gzip 1.3.2

Debian gzip_1.3.2-3woody5_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _alpha.deb

Debian gzip_1.3.2-3woody5_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _arm.deb

Debian gzip_1.3.2-3woody5_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _hppa.deb

Debian gzip_1.3.2-3woody5_i386.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _i386.deb

Debian gzip_1.3.2-3woody5_ia64.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _ia64.deb

Debian gzip_1.3.2-3woody5_m68k.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _m68k.deb

Debian gzip_1.3.2-3woody5_mips.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _mips.deb

Debian gzip_1.3.2-3woody5_mipsel.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _mipsel.deb

Debian gzip_1.3.2-3woody5_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _powerpc.deb

Debian gzip_1.3.2-3woody5_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _s390.deb

Debian gzip_1.3.2-3woody5_sparc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _sparc.deb

GNU gzip 1.3.5

Conectiva gzip-1.3.5-49375U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/gzip-1.3.5-49375U10_1cl.i3 86.rpm

Conectiva gzip-i18n-pt_BR-1.3.5-49375U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/gzip-i18n-pt_BR-1.3.5-4937 5U10_1cl.i386.rpm

Ubuntu gzip_1.3.5-9ubuntu3.1_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_amd64.deb

Ubuntu gzip_1.3.5-9ubuntu3.1_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_i386.deb

Ubuntu gzip_1.3.5-9ubuntu3.1_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_powerpc.deb

Ubuntu gzip_1.3.5-9ubuntu3.2_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_amd64.deb

Ubuntu gzip_1.3.5-9ubuntu3.2_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_i386.deb

Ubuntu gzip_1.3.5-9ubuntu3.2_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_powerpc.deb

Apple Mac OS X Server 10.3.9

Apple SecUpdSrvr2006-004Pan.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11231&cat= 1&platform=osx&method=sa/SecUpdSrvr2006-004Pan.dmg

FreeBSD FreeBSD 4.11 -RELEASE-p3

FreeBSD gzip.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:11/gzip.patch

FreeBSD FreeBSD 5.3

FreeBSD gzip.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:11/gzip.patch

SCO Open Server 6.0

SCO VOL.000.000 for SCOSA-2005.59
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.59