Fedora Core 3 High: 2005-389 Buffer Overflow in Sharutils

The sharutils package contains the GNU shar utilities, a set of tools

for encoding and decoding packages of files (in binary or text format)

in a special plain text format called shell archives (shar). This

format can be sent through e-mail (which can be problematic for regular

binary files). The shar utility supports a wide range of capabilities

(compressing, uuencoding, splitting long files for multi-part

mailings, providing checksums), which make it very flexible at

creating shar files. After the files have been sent, the unshar tool

scans mail messages looking for shar files. Unshar automatically

strips off mail headers and introductory text and then unpacks the

shar files.

Install sharutils if you send binary files through e-mail.

- apply patch to fix multiple buffer overflows #152574

df4a4a01dcbe7fbb544847478aecf4a5 SRPMS/sharutils-4.2.1-22.1.FC3.src.rpm

1055ee07d931b09552277514bf83a50c x86_64/sharutils-4.2.1-22.1.FC3.x86_64.rpm

a0b0aa23227605491c313f08bcb27749

x86_64/debug/sharutils-debuginfo-4.2.1-22.1.FC3.x86_64.rpm

cf3bef5c2a37e560fef8486280fed96b i386/sharutils-4.2.1-22.1.FC3.i386.rpm

de310d133963e85ccf5e5b5be40c9473

i386/debug/sharutils-debuginfo-4.2.1-22.1.FC3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com