You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa sharutils

Sigurnosni nedostaci programskog paketa sharutils

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2018-4e657bf5e3
2018-03-06 17:26:39.510865
——————————————————————————–

Name : sharutils
Product : Fedora 26
Version : 4.15.2
Release : 6.fc26
URL : http://www.gnu.org/software/sharutils/
Summary : The GNU shar utilities for packaging and unpackaging shell archives
Description :
The sharutils package contains the GNU shar utilities, a set of tools for
encoding and decoding packages of files (in binary or text format) in
a special plain text format called shell archives (shar). This format can be
sent through e-mail (which can be problematic for regular binary files). The
shar utility supports a wide range of capabilities (compressing, uuencoding,
splitting long files for multi-part mailings, providing check-sums), which
make it very flexible at creating shar files. After the files have been sent,
the unshar tool scans mail messages looking for shar files. Unshar
automatically strips off mail headers and introductory text and then unpacks
the shar files.

——————————————————————————–
Update Information:

This release fixes a heap buffer overflow when processing a shar archive by
unshar tool if the arhive contains overlong lines.
——————————————————————————–
References:

[ 1 ] Bug #1548018 – sharutils: heap-buffer-overflow in find_archive in unshar.c
https://bugzilla.redhat.com/show_bug.cgi?id=1548018
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade sharutils’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2018-8f4b3fa844
2018-03-06 17:17:51.856083
——————————————————————————–

Name : sharutils
Product : Fedora 27
Version : 4.15.2
Release : 8.fc27
URL : http://www.gnu.org/software/sharutils/
Summary : The GNU shar utilities for packaging and unpackaging shell archives
Description :
The sharutils package contains the GNU shar utilities, a set of tools for
encoding and decoding packages of files (in binary or text format) in
a special plain text format called shell archives (shar). This format can be
sent through e-mail (which can be problematic for regular binary files). The
shar utility supports a wide range of capabilities (compressing, uuencoding,
splitting long files for multi-part mailings, providing check-sums), which
make it very flexible at creating shar files. After the files have been sent,
the unshar tool scans mail messages looking for shar files. Unshar
automatically strips off mail headers and introductory text and then unpacks
the shar files.

——————————————————————————–
Update Information:

This release fixes a heap buffer overflow when processing a shar archive by
unshar tool if the arhive contains overlong lines.
——————————————————————————–
References:

[ 1 ] Bug #1548018 – sharutils: heap-buffer-overflow in find_archive in unshar.c
https://bugzilla.redhat.com/show_bug.cgi?id=1548018
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade sharutils’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorPetar Bertok
Cert idNCERT-REF-2018-03-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa quagga

Otkriveni su sigurnosni nedostaci u programskom paketu quagga za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju otkrivanje osjetljivih informacija,...

Close