(RHSA-2004:634) zip security update

2004-12-1600:00:00

access.redhat.com

0.175 Low

EPSS

Percentile

96.2%

JSON

The zip program is an archiving utility which can create ZIP-compatible
archives.

A buffer overflow bug has been discovered in zip when handling long file
names. An attacker could create a specially crafted path which could
cause zip to crash or execute arbitrary instructions. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-1010 to this issue.

Users of zip should upgrade to this updated package, which contains
backported patches and is not vulnerable to this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyppczip< 2.3-16.1zip-2.3-16.1.ppc.rpm
RedHatanyi386zip< 2.3-16.1zip-2.3-16.1.i386.rpm
RedHatanyia64zip< 2.3-16.1zip-2.3-16.1.ia64.rpm
RedHatanyx86_64zip< 2.3-16.1zip-2.3-16.1.x86_64.rpm
RedHatanyi386zip< 2.3-10.1zip-2.3-10.1.i386.rpm
RedHatanyia64zip< 2.3-10.1zip-2.3-10.1.ia64.rpm
RedHatanys390zip< 2.3-16.1zip-2.3-16.1.s390.rpm
RedHatanys390xzip< 2.3-16.1zip-2.3-16.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc	zip	< 2.3-16.1	zip-2.3-16.1.ppc.rpm
RedHat	any	i386	zip	< 2.3-16.1	zip-2.3-16.1.i386.rpm
RedHat	any	ia64	zip	< 2.3-16.1	zip-2.3-16.1.ia64.rpm
RedHat	any	x86_64	zip	< 2.3-16.1	zip-2.3-16.1.x86_64.rpm
RedHat	any	i386	zip	< 2.3-10.1	zip-2.3-10.1.i386.rpm
RedHat	any	ia64	zip	< 2.3-10.1	zip-2.3-10.1.ia64.rpm
RedHat	any	s390	zip	< 2.3-16.1	zip-2.3-16.1.s390.rpm
RedHat	any	s390x	zip	< 2.3-16.1	zip-2.3-16.1.s390x.rpm

0.175 Low

EPSS

Percentile

96.2%

JSON

Related for RHSA-2004:634