Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Enterprise Linux 4 ELSA-2007-0203 Low Severity: Unzip Buffer Overflow

oracle
Calendar Grey May 17, 2007
Scroller Oracle
The Advisory for Enterprise Linux ELSA-2007-0204 highlights vulnerabilities in tar, with the provision of revised RPM packages.
The following updated rpms for Enterprise Linux 4 have been uploaded to the Unbreakable Linux Network:

Summary

[5.51-9.EL4.5] - Resolves: #230558 problem in patch4 (unzipped file permissions) [ 5.51-8.EL4.5] - fix problem with ~4GB files which are not compressed [5.51-7.EL4.5] - fix 164927 - TOCTOU issue in unzip - fix 178960 - unzip long filename buffer overflow - fix 199104 - add large file support (return Lon's ~4GB patch - fixed symlink problem)

Topics%20covered

Topics Covered

security advisory buffer overflow unzip file permissions Enterprise Linux

SRPMs

https://oss.oracle.com:443/el4/SRPMS-updates/unzip-5.51-9.EL4.5.src.rpm

x86_64

unzip-5.51-9.EL4.5.x86_64.rpm

aarch64

Severity
low
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory buffer overflow unzip file permissions Enterprise Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.