|
 |
CONECTIVA LINUX SECURITY ANNOUNCEMENT
PACKAGE : zlib
DESCRIPTION This announcement improves the correction adopted by the previous one[2] by adding a single missing hunk to the correction's patch. Due to a Debian bug report[3], a denial of service vulnerability[4] was discovered in the zlib compression library versions 1.2.x, in the inflate() and inflateBack() functions. An attacker could exploit this vulnerability to launch a denial of service attack on any application using the zlib library. Older versions of zlib are not affected.
SOLUTION IMPORTANT: all applications linked against zlib must be restarted after the upgrade in order to close the vulnerabilities.
REFERENCES
UPDATED PACKAGES
ADDITIONAL INSTRUCTIONS
Detailed instructions regarding the use of apt and upgrade examples can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at http://distro.conectiva.com.br/seguranca/chave/?idioma=en Instructions on how to check the signatures of the RPM packages can be found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en All our advisories and generic update instructions can be viewed at http://distro.conectiva.com.br/atualizacoes/?idioma=en Copyright (c) 2004 Conectiva Inc. http://www.conectiva.com  
|
 |
|
|
|
|
| All times are recorded in UTC. Linux is a trademark of Linus Torvalds. Powered by Linux, Apache and PHP |
