Re: [SECURITY] [DSA 740-1] New zlib packages fix denial of service

2005-07-07 Thread Roberto Gordo Saez
On Wed, Jul 06, 2005 at 04:45:01PM +0200, Michael Stone wrote:
> - 
> Debian Security Advisory DSA 740-1   [EMAIL PROTECTED]
> http://www.debian.org/security/Michael Stone
> July 06, 2005 http://www.debian.org/security/faq
> - 
> 
> Package: zlib
> Vulnerability  : buffer overflow
> Problem type   : remote DOS
> Debian-specific: no
> CVE Id(s)  : CAN-2005-2096
> 
> An error in the way zlib handles the inflation of certain compressed
> files can cause a program which uses zlib to crash when opening an
> invalid file. 
> 
> This problem does not affect the old stable distribution (woody).
> 
> For the stable distribution (sarge), this problem has been fixed in
> version 1.2.2-4.sarge.1.
> 
> For the unstable distribution, this problem has been fixed in version
> 1.2.2-7.
> 
> We recommend that you upgrade your clamav package.

I would prefer to upgrade also my zlib package ;-)

-- 
Roberto Gordo Saez - Free Software Engineer
Linalco "Especialistas en Linux y Software Libre"
http://www.linalco.com/  Tel: +34-914561700


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: openssh-3.4p1.tar.gz on ftp.openbsd.org trojaned

2002-08-02 Thread Roberto Gordo Saez
See also:

http://online.securityfocus.com/archive/75/285547/2002-07-30/2002-08-05/0/


-- 
Roberto Gordo - Free Software Engineer
Linalco "Especialistas Linux y en Software Libre"
Tel: +34-91-5970074 Fax: +34-91-5970083