Debian-LTS alert DLA-337-1 (busybox)

From:
    	     
 
Chris Lamb <lamby@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 337-1] busybox security update 
Date:
    	     
 
Sat, 31 Oct 2015 05:14:13 +0000
Message-ID:
    	     
 
<1446268453.4036498.425187361.78CCDB17@webmail.messagingengine.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : busybox
Version        : 1:1.17.1-8+deb6u11
Debian Bug     : 803097

busybox, a collection of tiny utilities for small and embedded systems,
was vulnerable to crashing when handling a specially crafted zip file.
The issue was discovered by Gustavo Grieco.

For Debian 6 Squeeze, this issue has been fixed in busybox version
1.17.1-8+deb6u11.

Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJWNE3KAAoJEB6VPifUMR5Y4xEQAIr/PwnghtyTnU1Pbh5Qn73X
syw0j6UNN/O7MYotj1wQTPnOfe2jINISqlf2SjzdSeFfDGfUBecqOdvELeFx7GeV
U/uU32IAcmBSHRl+dhLm1x8QdRMQHtQ6bhQ+58YDQMRti+aZU6Ia5kWMMAOCCgeS
xJGk+cUG2+NAPiOr7fZPmE/qHC15B+PRfQ3Bx9C3PNr5R8eRzMwr2QzPNJt79VNh
2h9Y4JihsV1bTjwYD7D3lTUxqjsX2Isp7X17j2A5ivRjbeUp1CQp8UC5L8Vg9zIL
4Pq8jTIb2prGvYLM+D1Al3iTEzxJx+gyx6L0hhdXpdL4txHU42PWWJoV7eanMaRr
8hbuC/V7MUoQqujfwytoB3OZbXW0Q8sMu9SeMdA60uqYijfe1sMWJxS4yngK2NxA
QesLP9l3hhHggekupQYn1XYkoHRzeeL2UpUY7gKG0sSuPztXGsInT3htAHtiTxuO
5MjKk+y3eDQWcscA7AmBrwrN7I2i7KmbytjHTt0FhBgPYAEYh31Rk+uR98g870+9
YGpdaQr5rjWxNURxMMm+s5ogQrwnhTWAwj5Bc3dG7jY3E1IH0uJbLgCnB2LGdMgB
54VpHvsaPuGsV0zDOvwHvXCInWWvsSe8L7lEBBsGIjEZ2qxBAk+QLY9vr18r6+jV
exDeupeA2lcZ0KqvPFko
=Oa4/
-----END PGP SIGNATURE-----