Re: [RHSA-2002:026-35] Vulnerability in zlib library
From: helmut g. katzgraber (dummkopf@physics.ucsc.edu)Date: 03/12/02
- Previous message: FreeBSD Security Advisories: "FreeBSD Ports Security Advisory FreeBSD-SA-02:17.mod_frontpage"
- Next in thread: Tomasz Ostrowski: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Next in thread: Mark J Cox: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Mark J Cox: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Tomasz Ostrowski: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Pavel Kankovsky: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 12 Mar 2002 13:23:31 -0800 (PST) From: "helmut g. katzgraber" <dummkopf@physics.ucsc.edu> To: bugtraq@securityfocus.com, <redhat-watch-list@redhat.com>
hm... when i look at the rpm list below i notice that redhat
seems to be doing the same thing they did last time there was a
big upgrade: issue new kernel rpms, forget about the kernel
headers. while these might not change, several programs will barf
if the directory in which the headers are, does not match the
kernel version.... unless they put the headers now in the
kernel, which i doubt. a quick check of the 6.2 kernel rpm
kernel-2.2.19-6.2.15.alpha.rpm shows that
[debussy ~]$ rpm -qlf kernel-2.2.19-6.2.15.alpha.rpm | grep include
it does not contain header files. please redhat, provide the
necessary rpms (in time)...
i'd be careful to start patching without the headers. i'd be
careful without patching either...
h.
header of redhat advisory:
# ---------------------------------------------------------------------
# Red Hat, Inc. Red Hat Security Advisory
#
# Synopsis: Vulnerability in zlib library
# Advisory ID: RHSA-2002:026-35
# Issue date: 2002-02-11
# Updated on: 2002-03-11
# Product: Red Hat Linux
# Keywords: zlib double free
# Cross references: RHSA-2002:028 RHSA-2002:027
# Obsoletes:
# ---------------------------------------------------------------------
_______________________________________________________________
Dr. Helmut G. Katzgraber dummkopf@physics.ucdavis.edu
Department of Physics http://nacaq.ucdavis.edu/
University of California, Davis Phone: (+1) 530-752-9855
One Shields Ave, Davis, CA 95616 Fax: (+1) 530-752-4717
- Previous message: FreeBSD Security Advisories: "FreeBSD Ports Security Advisory FreeBSD-SA-02:17.mod_frontpage"
- Next in thread: Tomasz Ostrowski: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Next in thread: Mark J Cox: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Mark J Cox: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Tomasz Ostrowski: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Reply: Pavel Kankovsky: "Re: [RHSA-2002:026-35] Vulnerability in zlib library"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
