Gentoo: 200505-05 Advisory on Gzip Command Execution Vulnerabilities

Gentoo Linux Security Advisory GLSA 200505-05 https://security.gentoo.org/ Severity: Normal Title: gzip: Multiple vulnerabilities Date: May 09, 2005 Bugs: #89946, #90626 ID: 200505-05

Synopsis ======= gzip contains multiple vulnerabilities potentially allowing an attacker to execute arbitrary commands.
Background ========= gzip (GNU zip) is a popular compression program. The included zgrep utility allows you to grep gzipped files in place.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-arch/gzip < 1.3.5-r6 >= 1.3.5-r6
========== The gzip and gunzip programs are vulnerable to a race condition when setting file permissions (CAN-2005-0988), as well as im...