Skip Navigation

  • Home
  • Contact us
  • FAQ
  • Glossary
  • Public key
  • Sitemap
  • Cymraeg
  • What's new
CPNI - Centre for the Protection of National Infastructure

Advanced search

  • About CPNI
  • The threats
  • Security planning
  • Methods of attack
  • Protecting your assets
  • Products and services
    • CSIRTUK advisories
      • Advisories archive
    • General protective security publications
    • InfoSec briefings
    • InfoSec technical notes
    • InfoSec vulnerability disclosures
    • Good practice guidelines
    • Viewpoints
    • Information exchanges
    • Risk Management Delivery Group
  • Research
Home > Products and services > CSIRTUK advisories > Advisories archive > February 2006 > Two Fedora Update Notifications; 1. FEDORA-2006-098 - unzip-5.51-13.fc4 2. FEDORA-2006-102 - kernel-2.6.15-1.1831_FC4

February 2006

Two Fedora Update Notifications; 1. FEDORA-2006-098 - unzip-5.51-13.fc4 2. FEDORA-2006-102 - kernel-2.6.15-1.1831_FC4

ID: 00113
Ref: 111/2006
Date: 08 February 2006:14:19:29
Version: 1

Title: Two Fedora Update Notifications; 1. FEDORA-2006-098 - unzip-5.51-13.fc4 2. FEDORA-2006-102 - kernel-2.6.15-1.1831_FC4
Abstract:
Vendors affected: Fedora
Operating systems affected: Fedora
Applications affected: Fedora

Title
=====

Two Fedora Update Notifications;

1. FEDORA-2006-098 - unzip-5.51-13.fc4

2. FEDORA-2006-102 - kernel-2.6.15-1.1831_FC4

Detail
======

1. The unzip utility is used to list, test, or extract files from a zip
archive. Zip archives are commonly found on MS-DOS systems. The zip
utility, included in the zip package, creates zip archives. Zip and
unzip are both compatible with archives created by PKWARE(R)'s PKZIP
for MS-DOS, but the programs' options and default behaviors do differ
in some respects.

2. The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.



1.



- ---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-098
2006-02-06
- ---------------------------------------------------------------------

Product : Fedora Core 4
Name : unzip
Version : 5.51
Release : 13.fc4
Summary : A utility for unpacking zip files.
Description :
The unzip utility is used to list, test, or extract files from a zip
archive. Zip archives are commonly found on MS-DOS systems. The zip
utility, included in the zip package, creates zip archives. Zip and
unzip are both compatible with archives created by PKWARE(R)'s PKZIP
for MS-DOS, but the programs' options and default behaviors do differ
in some respects.

Install the unzip package if you need to list, test or extract files from
a zip archive.

- ---------------------------------------------------------------------

* Mon Feb 6 2006 Ivana Varekova 5.51-13.fc4
- - fix bug 178961 - CVE-2005-4667 - unzip long file name buffer overflow
* Wed Aug 3 2005 Ivana Varekova 5.51-12.fc4
- - fix bug 164928 - TOCTOU issue in unzip
* Mon May 9 2005 Ivana Varekova 5.51-11
- - fix bug 156959 â## invalid file mode on created files

- ---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

0b621ba9565ce4507c6809e342dfdfea2cceec46 SRPMS/unzip-5.51-13.fc4.src.rpm
e8f67af74893566142d7c4a957fd1f6ca6aca209 ppc/unzip-5.51-13.fc4.ppc.rpm
268b5b2e62fdd4263b4849cac5d3ae915f5095d7 ppc/debug/unzip-debuginfo-5.51-13.fc4.ppc.rpm
5fe96c87893982f2752d0f528e1691591d8b655e x86_64/unzip-5.51-13.fc4.x86_64.rpm
47676a08bd382d976c08ea3927b51fd07cb67850 x86_64/debug/unzip-debuginfo-5.51-13.fc4.x86_64.rpm
69cf5c0e4faf82e7e5305abe5cf7feb8d480ba99 i386/unzip-5.51-13.fc4.i386.rpm
c7260e51f7b60ffbf92a99c44caa928e5cb50df6 i386/debug/unzip-debuginfo-5.51-13.fc4.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
- ---------------------------------------------------------------------

- --
fedora-announce-list mailing list
fedora-announce-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-announce-list



2.

- ---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-102
2006-02-07
- ---------------------------------------------------------------------

Product : Fedora Core 4
Name : kernel
Version : 2.6.15
Release : 1.1831_FC4
Summary : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

- ---------------------------------------------------------------------
Update Information:

This update fixes a remotely exploitable denial of service
attack in the icmp networking code (CVE-2006-0454). An
information leak has also been fixed (CVE-2006-0095), and
some debugging patches that had accidentally been left
applied in the previous update have been removed, restoring
the functionality of the 'quiet' argument.

- ---------------------------------------------------------------------
* Tue Feb 7 2006 Dave Jones
- - 2.6.15.3
Fixes remotely exploitable bug in ICMP (CVE-2006-0454)
* Fri Feb 3 2006 Dave Jones
- - Make 'quiet' work again.
- - dm-crypt: zero key before freeing it

- ---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

b1f9d6a89e638edeeacecfd7495eb4e6450e279b SRPMS/kernel-2.6.15-1.1831_FC4.src.rpm
188b62f36e7e600c588715536d96e32606640abf ppc/kernel-2.6.15-1.1831_FC4.ppc.rpm
e286cb0385c3fdf49aef3d42fd43420a51ebcea8 ppc/kernel-devel-2.6.15-1.1831_FC4.ppc.rpm
8e3d18db547e94f750c022111c94f7d56943180f ppc/kernel-smp-2.6.15-1.1831_FC4.ppc.rpm
3be387fa5fb7c3cd095c329ce71b9f94190e83df ppc/kernel-smp-devel-2.6.15-1.1831_FC4.ppc.rpm
3c8b1004b5e9e64677dbf6b457db55f68ecd2e77 ppc/debug/kernel-debuginfo-2.6.15-1.1831_FC4.ppc.rpm
62af3a7baffdbb17904985289fa16437fb5a950e ppc/kernel-doc-2.6.15-1.1831_FC4.noarch.rpm
1392789f2ede26c037f9715012d8452e6d0e4590 x86_64/kernel-2.6.15-1.1831_FC4.x86_64.rpm
09054fea4b6dbb75ccfdaafb9bb2ca0572b13b6a x86_64/kernel-devel-2.6.15-1.1831_FC4.x86_64.rpm
058d2e9feb887f4e1947f6c67cd0e3e7d1b41d7e x86_64/kernel-smp-2.6.15-1.1831_FC4.x86_64.rpm
e776cc09a16f83e7bb63b1f297b39cbc15924684 x86_64/kernel-smp-devel-2.6.15-1.1831_FC4.x86_64.rpm
f0b33070f10c2c7451658e8ad63472e3b7647446 x86_64/debug/kernel-debuginfo-2.6.15-1.1831_FC4.x86_64.rpm
62af3a7baffdbb17904985289fa16437fb5a950e x86_64/kernel-doc-2.6.15-1.1831_FC4.noarch.rpm
a65c2356bf30f818f23476aa2944171f2e8e58ed i386/kernel-2.6.15-1.1831_FC4.i586.rpm
4c2d91f66fee74f748a596ebfc2f16e61ec66bb2 i386/kernel-devel-2.6.15-1.1831_FC4.i586.rpm
b64db9db09db127809d5a426ca14faaeefef9161 i386/debug/kernel-debuginfo-2.6.15-1.1831_FC4.i586.rpm
743357e7d11966a6218cfd251404d2e670b12847 i386/kernel-2.6.15-1.1831_FC4.i686.rpm
6a61118b549d1252f3944838ff574bed4c244ef7 i386/kernel-devel-2.6.15-1.1831_FC4.i686.rpm
77e82a0a4458567d74ee6817c84f77bca85640d6 i386/kernel-smp-2.6.15-1.1831_FC4.i686.rpm
579e825578ff22d44ebb3a50e3728ee6a1fcbb9d i386/kernel-smp-devel-2.6.15-1.1831_FC4.i686.rpm
a42a5afe3689b3812a9fe781a9f8922a33be811e i386/debug/kernel-debuginfo-2.6.15-1.1831_FC4.i686.rpm
62af3a7baffdbb17904985289fa16437fb5a950e i386/kernel-doc-2.6.15-1.1831_FC4.noarch.rpm

This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
- ---------------------------------------------------------------------

- --
fedora-announce-list mailing list
fedora-announce-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-announce-list
  • Accessibility |
  • Terms and conditions |
  • Privacy statement |
  • Data protection act |
  • Freedom of information |