Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisorysecurity issuecriticalFedora Security Advisory: 2009-10233 Critical Zlib Deltarpm Update
deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CAN-2005-1849 This build of deltarpm patches the program to use the system zlib (which was fixed when the vulnerability was first discovered) instead of the bundled copy.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10233 2009-10-03 17:54:23 -------------------------------------------------------------------------------- Name : deltarpm Product : Fedora 10 Version : 3.4 Release : 11.fc10.1 URL : Summary : Create deltas between rpms Description : A deltarpm contains the difference between an old and a new version of a rpm, which makes it possible to recreate the new rpm from the deltarpm and the old one. You don't have to have a copy of the old rpm, deltarpms can also work with installed rpms. -------------------------------------------------------------------------------- Update Information: deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CAN-2005-1849 This build of deltarpm patches the program to use the system zlib (which was fixed when the vulnerability was first discovered) instead of the bundled copy. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 30 2009 Toshio Kuratomi - 3.4-11.1 - Build against the system zlib, not the bundled library. This remedies the fact that the included zlib is affected by CAN-2005-1849. - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable of making rsync-friendly compressed files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #526432 - deltarpm contains an own, modified copy of zlib https://bugzilla.redhat.com/show_bug.cgi?id=526432 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update deltarpm' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Oct 08, 2009
•Critical
Fedora
89
security advisorybuffer overflowcriticalFedora 11: 2009-10237 Critical Update for zlib Issue in Deltarpm
deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CAN-2005-1849 This build of deltarpm patches the program to use the system zlib (which was fixed when the vulnerability was first discovered) instead of the bundled copy.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-10237 2009-10-03 17:54:32 -------------------------------------------------------------------------------- Name : deltarpm Product : Fedora 11 Version : 3.4 Release : 17.fc11 URL : Summary : Create deltas between rpms Description : A deltarpm contains the difference between an old and a new version of a rpm, which makes it possible to recreate the new rpm from the deltarpm and the old one. You don't have to have a copy of the old rpm, deltarpms can also work with installed rpms. -------------------------------------------------------------------------------- Update Information: deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CAN-2005-1849 This build of deltarpm patches the program to use the system zlib (which was fixed when the vulnerability was first discovered) instead of the bundled copy. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 30 2009 Toshio Kuratomi - 3.4-17 - Work around cvs tag problem * Wed Sep 30 2009 Toshio Kuratomi - 3.4-16 - Build against the system zlib, not the bundled library. This remedies the fact that the included zlib is affected by CAN-2005-1849. - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable of making rsync-friendly compressed files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #526432 - deltarpm contains an own, modified copy of zlib https://bugzilla.redhat.com/show_bug.cgi?id=526432 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update deltarpm' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Oct 08, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!