Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in sharutils
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in sharutils
ID: FEDORA-2018-8f4b3fa844
Distribution: Fedora
Plattformen: Fedora 27
Datum: Mi, 7. März 2018, 10:17
Referenzen: https://bugzilla.redhat.com/show_bug.cgi?id=1548018
Applikationen: GNU Shar

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2018-8f4b3fa844
2018-03-06 17:17:51.856083
-------------------------------------------------------------------------------
-

Name : sharutils
Product : Fedora 27
Version : 4.15.2
Release : 8.fc27
URL : http://www.gnu.org/software/sharutils/
Summary : The GNU shar utilities for packaging and unpackaging shell
archives
Description :
The sharutils package contains the GNU shar utilities, a set of tools for
encoding and decoding packages of files (in binary or text format) in
a special plain text format called shell archives (shar). This format can be
sent through e-mail (which can be problematic for regular binary files). The
shar utility supports a wide range of capabilities (compressing, uuencoding,
splitting long files for multi-part mailings, providing check-sums), which
make it very flexible at creating shar files. After the files have been sent,
the unshar tool scans mail messages looking for shar files. Unshar
automatically strips off mail headers and introductory text and then unpacks
the shar files.

-------------------------------------------------------------------------------
-
Update Information:

This release fixes a heap buffer overflow when processing a shar archive by
unshar tool if the arhive contains overlong lines.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1548018 - sharutils: heap-buffer-overflow in find_archive in
unshar.c
https://bugzilla.redhat.com/show_bug.cgi?id=1548018
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade sharutils' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung