drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in unzip (Aktualisierung)
Name: |
Pufferüberlauf in unzip (Aktualisierung) |
|
ID: |
USN-248-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 4.10, Ubuntu 5.04, Ubuntu 5.10 |
|
Datum: |
Mi, 15. Februar 2006, 14:52 |
|
Referenzen: |
https://launchpad.net/bugs/31457 |
|
Applikationen: |
UnZip |
|
Update von: |
Pufferüberlauf in unzip |
|
Originalnachricht |
--===============0024349873== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="KR/qxknboQ7+Tpez" Content-Disposition: inline
--KR/qxknboQ7+Tpez Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
=========================================================== Ubuntu Security Notice USN-248-2 February 15, 2006 unzip regression fix https://launchpad.net/bugs/31457 ===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger)
The following packages are affected:
unzip
The problem can be corrected by upgrading the affected package to version 5.51-2ubuntu0.4 (for Ubuntu 4.10), 5.51-2ubuntu1.4 (for Ubuntu 5.04), or 5.52-3ubuntu2.2 (for Ubuntu 5.10). In general, a standard system upgrade is sufficient to effect the necessary changes.
Details follow:
USN-248-1 fixed a vulnerability in unzip. However, that update inadvertedly changed the field order in the contents listing output, which broke unzip frontends like file-roller. The updated packages fix this regression.
Updated packages for Ubuntu 4.10:
Source archives:
unzip_5.51-2ubuntu0.4.diff.gz Size/MD5: 6474 da3e2aa0f07b0f6942c8ca7c811be8dc unzip_5.51-2ubuntu0.4.dsc Size/MD5: 534 5863a6faa2e16fc470344be6ac0685a6 http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51.orig.tar.gz Size/MD5: 1112594 8a25712aac642430d87d21491f7c6bd1
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
unzip_5.51-2ubuntu0.4_amd64.deb Size/MD5: 148136 e56ba0b19a029ca74d3b9c962e4c3067
i386 architecture (x86 compatible Intel/AMD)
unzip_5.51-2ubuntu0.4_i386.deb Size/MD5: 135098 8d7826896481ae1b36c25a2bb82b2d77
powerpc architecture (Apple Macintosh G3/G4/G5)
unzip_5.51-2ubuntu0.4_powerpc.deb Size/MD5: 151026 501a8ca46b0fad1bd4f6db2111d58917
Updated packages for Ubuntu 5.04:
Source archives:
unzip_5.51-2ubuntu1.4.diff.gz Size/MD5: 7291 085233db5f584b7ac0bb85f130094982 unzip_5.51-2ubuntu1.4.dsc Size/MD5: 534 be84e01929f5caaae5ce229d6481d6bd http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51.orig.tar.gz Size/MD5: 1112594 8a25712aac642430d87d21491f7c6bd1
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
unzip_5.51-2ubuntu1.4_amd64.deb Size/MD5: 148326 f889fb1bed3fdfe4547cb3b06e68b22d
i386 architecture (x86 compatible Intel/AMD)
unzip_5.51-2ubuntu1.4_i386.deb Size/MD5: 136030 1443cd81161e7928862f4371f1477aa2
powerpc architecture (Apple Macintosh G3/G4/G5)
unzip_5.51-2ubuntu1.4_powerpc.deb Size/MD5: 152608 60a9c1e55ecde86784f1e227f6532f1f
Updated packages for Ubuntu 5.10:
Source archives:
unzip_5.52-3ubuntu2.2.diff.gz Size/MD5: 9709 3a3d485c017577a2b6a465240308a629 unzip_5.52-3ubuntu2.2.dsc Size/MD5: 534 2bb7488730bc34d3ca413f4a2dae48cd http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.52.orig.tar.gz Size/MD5: 1140291 9d23919999d6eac9217d1f41472034a9
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
unzip_5.52-3ubuntu2.2_amd64.deb Size/MD5: 159824 b3cecbc81298489ee20b27b3a174ee72
i386 architecture (x86 compatible Intel/AMD)
unzip_5.52-3ubuntu2.2_i386.deb Size/MD5: 146510 1ce02df278333118ca892bfb841d1887
powerpc architecture (Apple Macintosh G3/G4/G5)
unzip_5.52-3ubuntu2.2_powerpc.deb Size/MD5: 164084 d7b948b8c503a3cf4eb720255cc0f416
--KR/qxknboQ7+Tpez Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFD8y9qDecnbV4Fd/IRAnlVAKC2eJDqcVJLk6DVBG8mQXizt3n5AwCgruuf pGkyGBHQamV2tplYk9Tvudk= =Zj2q -----END PGP SIGNATURE-----
--KR/qxknboQ7+Tpez--
--===============0024349873== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============0024349873==--
|
|
|
|