| Description: | Summary:
The remote host is missing an update for the 'gzip' package(s) announced via the SSA:2006-262-01 advisory.
Vulnerability Insight:
New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2,
and -current to fix possible security issues.
More details about the issues fixed may be found in the Common
Vulnerabilities and Exposures (CVE) database:
[links moved to references]
Here are the details from the Slackware 10.2 ChangeLog:
+--------------------------+
patches/packages/gzip-1.3.5-i486-1_slack10.2.tgz:
Upgraded to gzip-1.3.5, and fixed a variety of bugs.
Some of the bugs have possible security implications if gzip or its tools are
fed a carefully constructed malicious archive. Most of these issues were
recently discovered by Tavis Ormandy and the Google Security Team. Thanks
to them, and also to the ALT and Owl developers for cleaning up the patch.
For further details about the issues fixed, please see:
[links moved to references]
(* Security fix *)
+--------------------------+
Affected Software/OS:
'gzip' package(s) on Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware current.
Solution:
Please install the updated package(s).
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
