USN-151-3: zlib vulnerabilities

Releases

• Ubuntu 5.10
• Ubuntu 5.04
• Ubuntu 4.10

Details

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could
be exploited to cause Denial of Service attacks or even arbitrary code
execution with malicious data streams.

Since aide is statically linked against the zlib library, it is also
affected by these issues. The updated packagages have been rebuilt
against the fixed zlib.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 5.10

• aide -

Ubuntu 5.04

• aide -

Ubuntu 4.10

• aide -

In general, a standard system update will make all the necessary changes.

References

• CVE-2005-1849
• CVE-2005-2096

Related notices

• USN-151-4: lsb-rpm
• USN-151-2: dpkg, amd64-libs, dpkg-dev, ia32-libs-dev, ia32-libs, dselect, amd64-libs-dev
• USN-151-1: zlib1g
• USN-148-1: zlib1g