|
Info-ZIP UnZip Encoded Character Hostile Destination Path Vulnerability
Solution: Debian have reported that fixes released in the original Debian advisory (DSA 344-1) may not have sufficiently addressed this issue. A revised advisory (DSA 344-2) has been released. Please see the referenced advisory for further details regarding obtaining and applying fixes. Mandrake has released an updated advisory MDKSA-2003:073-1 with updated fixes to address this issue. See the attached advisory for further details. Users are advised to upgrade as soon as possible. Conectiva has released a security advisory (CLA-2003:724) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Immunix has released a security advisory (IMNX-2003-7+-017-01) containing fixes to address this issue. Users are advised to upgrade as soon as possible. RedHat fixes for this issue have been made available. See the attached advisory for further details. Conectiva has released a security advisory (CLA-2003:672) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Mandrake has released advisory MDKSA-2003:073 with fixes to address this issue. OpenPKG has released advisory OpenPKG-SA-2003.033 to address this issue. Gentoo has released advisory 200307-02 to address this issue. Vulnerable users are advised to execute the following commands to update affected systems: emerge sync emerge unzip emerge clean Yellow Dog has released an advisory (YDU-20030710-1) to address this issue. Please see the attached advisory for details on obtaining and applying fixes. Turbolinux has released an advisory (TLSA-2003-42.txt) to address this issue. Please see the attached advisory for details on obtaining and applying fixes. Sun has released a fix for Sun Linux 5.0.6. Sun has also released updated packages for Sun Cobalt Qube3, RaQ4, and RaQXTR. SCO has released an advisory (CSSA-2003-031.0) for OpenLinux that addresses this issue. SCO OpenLinux Workstation 3.1.1
SCO OpenLinux Server 3.1.1
Info-ZIP UnZip 5.50
|
|
|
Privacy Statement |