The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size. . Package : busybox Version : 1:1.22.0-9+deb8u3 The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size. For Debian 8 "Jessie", this problem has been fixed in version 1:1.22.0-9+deb8u3. We recommend that you upgrade your busybox packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The Busybox package has been revised to resolve a complication regarding gzip archive extraction in Debian 8, which stemmed from an earlier regression.. Busybox Update, Debian Security, Regression Fix, Gzip Compression, Debian LTS Advisory. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.