Ubuntu: Security Advisory (USN-889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2010:019 ] gzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:019 http://www.mandriva.com/security/ Package : gzip Date : January 20, 2010 Affected: Corporate 4.0 Problem Description: A vulnerability has been found and corrected in gzip: An integer underflow leading to...

CentOS 3 / 4 / 5 : gzip (CESA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

Mandriva Linux Security Advisory : gzip (MDVSA-2010:020)

Multiple vulnerabilities has been found and corrected in gzip : A missing input sanitation flaw was found in the way gzip used to decompress data blocks for dynamic Huffman codes. A remote attacker could provide a specially crafted gzip compressed data archive, which once opened by a local,...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : gzip vulnerabilities (USN-889-1)

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...

RHEL 3 / 4 / 5 : gzip (RHSA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

USN-889-1: gzip vulnerabilities

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...

gzip security update

CentOS Errata and Security Advisory CESA-2010:0061 An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GN...

Moderate: Red Hat Security Advisory: gzip security update

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

gzip: (64 bit) Integer underflow by decompressing LZW format files

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

[SECURITY] [DSA 1974-1] New gzip packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1974-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 20, 2010 http://www.debian.org/security/faq -...

gzip security update

1.3.5-11.0.1.el54.1 - Updated description in specfile to be product neutral 1.3.5-11:.1 - Added fix for CVE-2010-0001: 64 bit Integer underflow by decompressing LZW format files Resolves: rhbz555088...

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

DSA-1974-1 gzip - arbitrary code execution

Bulletin has no description...

Security fix for the ALT Linux 5 package gzip version 1.3.5-alt6

Jan. 13, 2010 Dmitry V. Levin 1.3.5-alt6 - Applied upstream fix for integer underflow bug CVE-2010-0001...

Security fix for the ALT Linux 9 package gzip version 1.3.5-alt6

Jan. 13, 2010 Dmitry V. Levin 1.3.5-alt6 - Applied upstream fix for integer underflow bug CVE-2010-0001...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SuSE9 Security Update : gzip (YOU Patch Number 11220)

Several security issues with gzip have been found that can be exploited to compromise the system in conjunction with other programs while processing malformed archive files. The vulnerabilities have been tracked by Mitre CVE-2006-4334, CVE-2006-4335, CVE-2006-4336, CVE-2006-4337 and CVE-2006-4338...

Solaris Update for gzip 112669-04

Check for the Version of gzip OpenVAS Vulnerability Test Solaris Update for gzip 112669-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...