OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[sec-adv] Debian update for unzip

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Jul 09 2003 - 04:26:14 CDT


TITLE:
Debian update for unzip

READ ONLINE:
http://www.secunia.com/advisories/9215/

CRITICAL:
Less critical

IMPACT:
System access

WHERE:
From remote

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
Debian GNU/Linux 3.0

DESCRIPTION:
Debian has issued updated packages for unzip. These fix a
vulnerability, which potentially can be exploited by malicious people
to compromise a user's system by overwriting arbitrary files on it.

For more information:
http://www.secunia.com/advisories/8781/

SOLUTION:
Updated packages:

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1.dsc
Size/MD5 checksum: 528 78fe98174204f12d53c472429f570b72
http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1.diff.gz
Size/MD5 checksum: 4281 d143f706e7598b72b80c2b0479f74c82
http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50.orig.tar.gz
Size/MD5 checksum: 1068379 6d27bcdf9b51d0ad0f78161d0f99582e

Alpha architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_alpha.deb
Size/MD5 checksum: 159796 d102536d4df17efa47d181e892cd0a78

ARM architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_arm.deb
Size/MD5 checksum: 138900 2cad290445168c872140ccfa4d991c64

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_i386.deb
Size/MD5 checksum: 122262 23f370812910bfe54af5248ed8d436b0

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_ia64.deb
Size/MD5 checksum: 190398 68e1c6567a8dad804dcb6e312e3b081b

HP Precision architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_hppa.deb
Size/MD5 checksum: 146386 1b81ff0dd1dcc257b03075656d54aaba

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_m68k.deb
Size/MD5 checksum: 118962 8ed05af2af30b9965bec490fa33c3647

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_mips.deb
Size/MD5 checksum: 142572 b7d0ead363f47c34188ef454d13d1495

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_mipsel.deb
Size/MD5 checksum: 143038 45b35c8d561fcbcbfa74d18988ac9ef0

PowerPC architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_powerpc.deb
Size/MD5 checksum: 135910 e694627b076850fad5979d361038bc48

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_s390.deb
Size/MD5 checksum: 136418 b5b4c6448d02b8aba0ecbe7892d9393c

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_sparc.deb
Size/MD5 checksum: 146950 b01e9ee7609d8bdbff57e61c0679d691

-- Debian GNU/Linux unstable alias sid --

According to Debian, the vulnerability will be fixed soon.

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------