Bug 301826

Summary:	app-arch/gzip <=1.3.14 vulnerable to arbitary code execution
Product:	Gentoo Linux	Reporter:	Tero Pelander <tpeland>
Component:	New packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	major
Priority:	Highest
Version:	10.0
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Tero Pelander 2010-01-22 11:18:39 UTC

Versions 1.3.3 to 1.3.14 are vulnerable to arbitary code execution in 64-bit systems! Fixed in 1.4.0.

More info in following sites:
http://savannah.gnu.org/forum/forum.php?forum_id=6153
http://www.cert.fi/haavoittuvuudet/2010/haavoittuvuus-2010-014.html

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2010-01-24 00:06:32 UTC


*** This bug has been marked as a duplicate of bug 301706 ***

Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev

2010-01-24 00:06:45 UTC

Wrong bug#

Comment 3 Diego Elio Pettenò (RETIRED) gentoo-dev

2010-01-24 00:07:16 UTC

Actually, only one duplicable…


*** This bug has been marked as a duplicate of bug 301706 ***