PT-1999-1114 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions 2.2.3 and earlier Description: The issue allows a remote attacker to perform an IP fragmentation attack, causing a denial of service. Recommendations: For Linux versions 2.2.3 and earlier, at the moment, there is no information...

[SECURITY] New versions of gzip available

We were told by Michal Zalewski that gzexe as shipped with gzip uses an unsecure method decompressing executables on the fly opening a way of calling arbitrary programs. Newer versions for bo and hamm are fixing this. We recommend you upgrade your gzip package if youre using the gzexe method. dpk...