USN-151-2: zlib vulnerabilities

Releases

• Ubuntu 5.04
• Ubuntu 4.10

Details

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could
be exploited to cause Denial of Service attacks or even arbitrary code
execution with malicious data streams.

Most applications use the shared library provided by the "zlib1g"
package; however, some packages contain copies of the affected zlib
code, so they need to be upgraded as well.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 5.04

• amd64-libs-dev -
• ia32-libs -
• ia32-libs-dev -
• amd64-libs -
• dpkg-dev -
• dselect -
• dpkg -

Ubuntu 4.10

• amd64-libs-dev -
• ia32-libs -
• ia32-libs-dev -
• amd64-libs -
• dpkg-dev -
• dselect -
• dpkg -

In general, a standard system update will make all the necessary changes.

References

• CVE-2005-1849
• CVE-2005-2096

Related notices

• USN-151-4: lsb-rpm
• USN-151-1: zlib1g
• USN-151-3: aide
• USN-148-1: zlib1g