On Sat, Jun 11, 2005, Matthias Kurz wrote:
> On Fri, Jun 10, 2005, OpenPKG wrote:
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > ________________________________________________________________________
> >
> > OpenPKG Security Advisory The OpenPKG Project
> > http://www.openpkg.org/security.html http://www.openpkg.org
> > [EMAIL PROTECTED] [EMAIL PROTECTED]
> > OpenPKG-SA-2005.009 10-Jun-2005
> > ________________________________________________________________________
> >
> > Package: gzip
> > Vulnerability: arbitrary path writing
> > OpenPKG Specific: no
> >
> > Affected Releases: Affected Packages: Corrected Packages:
> > OpenPKG CURRENT <= gzip-1.3.5-20040207 >= gzip-1.3.5-20050610
> ^^^^^^^^
> Where is it ?
Fixed with gzip-1.3.5-20050611 now. Sorry and thanks for the hint.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
The OpenPKG Project www.openpkg.org
User Communication List [email protected]