|
|
>> Fedora Security Update Fixes LHA Multiple Code Execution and DoS Vulnerabilities
|
Multiple vulnerabilities have been identified in Fedora, which could be exploited by attackers to cause a denial of service or execute arbitrary code. These issues are caused by errors in LHA. For additional information, see : VUPEN/ADV-2006-4760
Affected Products
Fedora Core 5
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
f77c3f3784791ebef153250183a94e7435c3910a SRPMS/lha-1.14i-20.src.rpm
f77c3f3784791ebef153250183a94e7435c3910a noarch/lha-1.14i-20.src.rpm
60f14246eab34d230adc929a7d405a86b05b82fb ppc/lha-1.14i-20.ppc.rpm
df778e5163b234a85ec836be5f5f39a70fa5850c ppc/debug/lha-debuginfo-1.14i-20.ppc.rpm
74e9229fd6cef8687e50d0c5eeb1b9dbaae0bc40 x86_64/debug/lha-debuginfo-1.14i-20.x86_64.rpm
28b18e042aaeee1d5e4c9625e0bb8b6339da35ff x86_64/lha-1.14i-20.x86_64.rpm
79d0dbcac14f359d693300c8d417a8c6162aa214 i386/debug/lha-debuginfo-1.14i-20.i386.rpm
2c067e9c2f6e150259bd40c25b954399fc08307f i386/lha-1.14i-20.i386.rpm
References
http://www.vupen.com/english/advisories/2007/2027
https://www.redhat.com/archives/fedora-package-announce/2007-May/msg00072.html
ChangeLog
2007-06-04 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
