Red Hat Security AdvisoryRHSA-2010:0061
gzip security update
Released 2010-01-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 gzip-1.3.3-15.rhel3, gzip-1.3.3-15.rhel3.i386
- Red Hat Enterprise Linux (v. 5 server) gzip-1.3.5-11.el5_4.1, gzip-1.3.5-11.el5_4.1.i386, gzip-1.3.5-11.el5_4.1.ia64 +1
- Red Hat Enterprise Linux AS version 3 gzip-1.3.3-15.rhel3, gzip-1.3.3-15.rhel3.i386, gzip-1.3.3-15.rhel3.ia64 +1
- Red Hat Enterprise Linux AS version 4 gzip-1.3.3-18.el4_8.1, gzip-1.3.3-18.el4_8.1.i386, gzip-1.3.3-18.el4_8.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) gzip-1.3.5-11.el5_4.1, gzip-1.3.5-11.el5_4.1.i386
- Red Hat Enterprise Linux Desktop version 4 gzip-1.3.3-18.el4_8.1, gzip-1.3.3-18.el4_8.1.i386
- Red Hat Enterprise Linux ES version 3 gzip-1.3.3-15.rhel3, gzip-1.3.3-15.rhel3.i386, gzip-1.3.3-15.rhel3.ia64
- Red Hat Enterprise Linux ES version 4 gzip-1.3.3-18.el4_8.1, gzip-1.3.3-18.el4_8.1.i386, gzip-1.3.3-18.el4_8.1.ia64
- Red Hat Enterprise Linux WS version 3 gzip-1.3.3-15.rhel3, gzip-1.3.3-15.rhel3.i386, gzip-1.3.3-15.rhel3.ia64
- Red Hat Enterprise Linux WS version 4 gzip-1.3.3-18.el4_8.1, gzip-1.3.3-18.el4_8.1.i386, gzip-1.3.3-18.el4_8.1.ia64
Fixes 1 record
Priority LOW 38
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly ex…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04774 · Published 2010-01-29 · Fixed CWE-189
