[ MDVSA-2010:019 ] gzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:019 http://www.mandriva.com/security/ Package : gzip Date : January 20, 2010 Affected: Corporate 4.0 Problem Description: A vulnerability has been found and corrected in gzip: An integer underflow leading to...

Mandriva Linux Security Advisory : gzip (MDVSA-2010:020)

Multiple vulnerabilities has been found and corrected in gzip : A missing input sanitation flaw was found in the way gzip used to decompress data blocks for dynamic Huffman codes. A remote attacker could provide a specially crafted gzip compressed data archive, which once opened by a local,...

CentOS 3 / 4 / 5 : gzip (CESA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

RHEL 3 / 4 / 5 : gzip (RHSA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : gzip vulnerabilities (USN-889-1)

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...

USN-889-1: gzip vulnerabilities

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...

gzip security update

CentOS Errata and Security Advisory CESA-2010:0061 An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GN...

Moderate: Red Hat Security Advisory: gzip security update

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

gzip: (64 bit) Integer underflow by decompressing LZW format files

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

[SECURITY] [DSA 1974-1] New gzip packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1974-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 20, 2010 http://www.debian.org/security/faq -...

gzip security update

1.3.5-11.0.1.el54.1 - Updated description in specfile to be product neutral 1.3.5-11:.1 - Added fix for CVE-2010-0001: 64 bit Integer underflow by decompressing LZW format files Resolves: rhbz555088...

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

DSA-1974-1 gzip - arbitrary code execution

Bulletin has no description...

Security fix for the ALT Linux 5 package gzip version 1.3.5-alt6

Jan. 13, 2010 Dmitry V. Levin 1.3.5-alt6 - Applied upstream fix for integer underflow bug CVE-2010-0001...

Security fix for the ALT Linux 9 package gzip version 1.3.5-alt6

Jan. 13, 2010 Dmitry V. Levin 1.3.5-alt6 - Applied upstream fix for integer underflow bug CVE-2010-0001...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SuSE9 Security Update : gzip (YOU Patch Number 11220)

Several security issues with gzip have been found that can be exploited to compromise the system in conjunction with other programs while processing malformed archive files. The vulnerabilities have been tracked by Mitre CVE-2006-4334, CVE-2006-4335, CVE-2006-4336, CVE-2006-4337 and CVE-2006-4338...

Solaris Update for gzip and Freeware info files 116341-07

Check for the Version of gzip and Freeware info files OpenVAS Vulnerability Test Solaris Update for gzip and Freeware info files 116341-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for SunFreeware gzip 120719-02

Check for the Version of SunFreeware gzip OpenVAS Vulnerability Test Solaris Update for SunFreeware gzip 120719-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...