Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora Core 3: 2005-319 Moderate: sharutils File Management Fix

fedora
Calendar Grey April 14, 2005
Dist Fedora Esm H88
Fedora Core 3 patches: sharutils resolved temporary file vulnerability, enhancing email attachments and securing file compression.
Updated package.

Summary

The sharutils package contains the GNU shar utilities, a set of tools

for encoding and decoding packages of files (in binary or text format)

in a special plain text format called shell archives (shar). This

format can be sent through e-mail (which can be problematic for regular

binary files). The shar utility supports a wide range of capabilities

(compressing, uuencoding, splitting long files for multi-part

mailings, providing checksums), which make it very flexible at

creating shar files. After the files have been sent, the unshar tool

scans mail messages looking for shar files. Unshar automatically

strips off mail headers and introductory text and then unpacks the

shar files.

Install sharutils if you send binary files through e-mail.

- apply debian patch to fix insecure temporary file creation

in unshar #154049, CAN-2005-0990

fc07dcf37e66806304cee15aa08cb25e SRPMS/sharutils-4.2.1-22.2.FC3.src.rpm

a7e0a420752de2891694471293c33d9b x86_64/sharutils-4.2.1-22.2.FC3.x86_64.rpm

2da2ac96023131c2611b051a73366248

x86_64/debug/sharutils-debuginfo-4.2.1-22.2.FC3.x86_64.rpm

95cd246dd03612edb6962cfc23c6beb9 i386/sharutils-4.2.1-22.2.FC3.i386.rpm

f05e7c1e156116a70a9980bbcdc6874c

i386/debug/sharutils-debuginfo-4.2.1-22.2.FC3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Name: sharutils
Version: 4.2.1
Release: 22.2.FC3
Summary: The GNU shar utilities for packaging and unpackaging shell

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here