Update to sharpziplib 1.3.3 which contains a security fix, and rebuild of mono-tools to use the fixed version. References: - https://bugs.mageia.org/show_bug.cgi?id=29495 . MGASA-2021-0541 - Updated sharpziplib/mono-tools packages fix security vulnerability Publication date: 08 Dec 2021 URL: https://advisories.mageia.org/MGASA-2021-0541.html Type: security Affected Mageia releases: 8 Update to sharpziplib 1.3.3 which contains a security fix, and rebuild of mono-tools to use the fixed version. References: - https://bugs.mageia.org/show_bug.cgi?id=29495 - https://lists.fedoraproject.org/archives/list/
update for sharpziplib 1.3.3 which contains a security fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f26cdf180b 2021-09-30 01:12:40.914585 --------------------------------------------------------------------------------Name : mono-tools Product : Fedora 34 Version : 4.2 Release : 24.fc34 URL : https://www.mono-project.com/Main_Page/ Summary : A collection of tools for mono applications Description : Monotools are a number of tools for mono such as allowing monodoc to be run independantly of monodevelop --------------------------------------------------------------------------------Update Information: update for sharpziplib 1.3.3 which contains a security fix --------------------------------------------------------------------------------ChangeLog: * Tue Sep 21 2021 Timotheus Pokorra - 4.2-24 - Rebuilt for latest SharpZipLib * Thu Jul 22 2021 Fedora Release Engineering - 4.2-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 14 2021 Timotheus Pokorra - 4.2-22 - Rebuilt for latest SharpZipLib --------------------------------------------------------------------------------References: [ 1 ] Bug #2005660 - sharpziplib-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2005660 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-f26cdf180b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
update for sharpziplib 1.3.3 which contains a security fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f26cdf180b 2021-09-30 01:12:40.914585 --------------------------------------------------------------------------------Name : sharpziplib Product : Fedora 34 Version : 1.3.3 Release : 0.fc34 URL : http://icsharpcode.github.io/SharpZipLib/ Summary : Zip, GZip, Tar and BZip2 library Description : SharpZipLib, formerly NZipLib is a Zip, GZip, Tar and BZip2 library written entirely in C# . It is implemented as an assembly (installable in the GAC), and thus can easily be incorporated into other projects. --------------------------------------------------------------------------------Update Information: update for sharpziplib 1.3.3 which contains a security fix --------------------------------------------------------------------------------ChangeLog: * Mon Sep 20 2021 Timotheus Pokorra - 1.3.3-0 - Upgrade to v1.3.3 * Fri Jul 23 2021 Fedora Release Engineering - 1.3.2-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon May 10 2021 Timotheus Pokorra - 1.3.2-0 - Upgrade to v1.3.2 --------------------------------------------------------------------------------References: [ 1 ] Bug #2005660 - sharpziplib-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2005660 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-f26cdf180b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
update for sharpziplib 1.3.3 which contains a security fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-4d31e51987 2021-09-26 00:15:16.314817 --------------------------------------------------------------------------------Name : sharpziplib Product : Fedora 35 Version : 1.3.3 Release : 0.fc35 URL : http://icsharpcode.github.io/SharpZipLib/ Summary : Zip, GZip, Tar and BZip2 library Description : SharpZipLib, formerly NZipLib is a Zip, GZip, Tar and BZip2 library written entirely in C# . It is implemented as an assembly (installable in the GAC), and thus can easily be incorporated into other projects. --------------------------------------------------------------------------------Update Information: update for sharpziplib 1.3.3 which contains a security fix --------------------------------------------------------------------------------ChangeLog: * Mon Sep 20 2021 Timotheus Pokorra - 1.3.3-0 - Upgrade to v1.3.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #2005660 - sharpziplib-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2005660 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-4d31e51987' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
update for sharpziplib 1.3.3 which contains a security fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-4d31e51987 2021-09-26 00:15:16.314817 --------------------------------------------------------------------------------Name : mono-tools Product : Fedora 35 Version : 4.2 Release : 24.fc35 URL : https://www.mono-project.com/Main_Page/ Summary : A collection of tools for mono applications Description : Monotools are a number of tools for mono such as allowing monodoc to be run independantly of monodevelop --------------------------------------------------------------------------------Update Information: update for sharpziplib 1.3.3 which contains a security fix --------------------------------------------------------------------------------ChangeLog: * Tue Sep 21 2021 Timotheus Pokorra - 4.2-24 - Rebuilt for latest SharpZipLib --------------------------------------------------------------------------------References: [ 1 ] Bug #2005660 - sharpziplib-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2005660 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-4d31e51987' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
upgrade to version 1.1.0 which fixes the vulnerability of directory traversal. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-d43282031d 2019-05-28 01:09:18.320826 --------------------------------------------------------------------------------Name : sharpziplib Product : Fedora 30 Version : 1.1.0 Release : 0.fc30 URL : http://icsharpcode.github.io/SharpZipLib/ Summary : Zip, GZip, Tar and BZip2 library Description : SharpZipLib, formerly NZipLib is a Zip, GZip, Tar and BZip2 library written entirely in C# . It is implemented as an assembly (installable in the GAC), and thus can easily be incorporated into other projects. --------------------------------------------------------------------------------Update Information: upgrade to version 1.1.0 which fixes the vulnerability of directory traversal --------------------------------------------------------------------------------ChangeLog: * Fri Mar 1 2019 Timotheus Pokorra - 1.1.0-0 * Upgrade to v1.1.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1585949 - sharpziplib: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file [fedora-28] https://bugzilla.redhat.com/show_bug.cgi?id=1585949 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-d43282031d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.