首页 -> 安全研究
安全研究
安全漏洞
GNU zlib压缩程序库堆破坏漏洞
发布日期：2002-03-15
更新日期：2002-03-15
受影响系统：
GNU zlib 1.1.3不受影响系统：
GNU zlib 1.1.2
GNU zlib 1.1.1
GNU zlib 1.1
GNU zlib 1.0.9
GNU zlib 1.0.8
GNU zlib 1.0.7
GNU zlib 1.0.6
GNU zlib 1.0.5
GNU zlib 1.0.4
GNU zlib 1.0.3
GNU zlib 1.0.2
GNU zlib 1.0.1
GNU zlib 1.0
GNU zlib 1.1.4描述：
BUGTRAQ ID: 4267
CVE(CAN) ID: CVE-2002-0059
GNU zlib压缩程序库广泛被用于各种程序以提供压缩功能。
GNU zlib实现上存在问题，导致与此程序库连接的应用程序可能存在可以被远程或本地利用的堆破坏漏洞。
zlib实现上存在的问题使在某些情况下，一块动态分配的内存可能会被free()系统调用释放两次，这样的情况可能在解压时发生。当free()系统调用去试图翻译一块已经被释放的内存时，在某些特定的情况下，攻击者可以操纵free()把一个特定的字存放到特定的内存中，这样可能改写某些关键的值如程序的返回地址、GOT入口等，使攻击者执行任意代码成为可能。
当然，要利用zlib的这个漏洞，需要攻击者首先确定一个与此程序库相连的程序，此程序可能有较高的执行权限或运行在一个远程的系统上，并且攻击者必须想出触发这个漏洞的方法（比如以压缩后的数据作为输入）。已知的使用zlib程序库的应用程序有：
SSH / OpenSSH
rsync
OpenPKG
popt / rpm
Linux Kernel
<*来源：Matthias Clasen （maclas@gmx.de）
Owen Taylor （otaylor@redhat.com）
链接：http://archives.neohapsis.com/archives/bugtraq/2002-03/0111.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0118.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0170.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0173.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0174.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0179.html
https://www.redhat.com/support/errata/RHSA-2002-027.html
http://www.linuxsecurity.com/advisories/other_advisory-1960.html
http://www.suse.com/de/support/security/2002_010_libz_txt.html
http://www.debian.org/security/2002/dsa-122
https://www.redhat.com/support/errata/RHSA-2002-026.html
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-022.php
http://www.cert.org/advisories/CA-2002-07.html
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023-1.php
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469
http://www.suse.com/de/support/security/2002_011_libz_packages_txt.html
*>
建议：
临时解决方法：
如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：
没有合适的临时解决方法，请尽快升级库程序和相关的应用程序。
厂商补丁：
Conectiva
---------
Conectiva已经为此发布了一个安全公告（CLA-2002:469）以及相应补丁:
CLA-2002:469：zlib
链接：
补丁下载：
ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/zlib-1.1.3-15U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/rsync-2.4.6-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/cvs-1.10.8-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/vnc-3.3.3-6U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/rpm-3.0.4-10U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/zlib-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/zlib-devel-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/zlib-devel-static-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/rsync-2.4.6-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/cvs-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/cvs-doc-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/vnc-3.3.3-6U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/rpm-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/rpm-devel-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/rpm-python-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/zlib-1.1.3-15U51_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/rsync-2.4.6-5U51_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/cvs-1.10.8-5U51_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/vnc-3.3.3-6U51_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/rpm-3.0.4-10U51_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/cvs-1.10.8-5U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/zlib-1.1.3-15U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/zlib-devel-1.1.3-15U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/zlib-devel-static-1.1.3-15U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/rsync-2.4.6-5U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/cvs-doc-1.10.8-5U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/vnc-3.3.3-6U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/rpm-3.0.4-10U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/rpm-devel-3.0.4-10U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/rpm-python-3.0.4-10U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/zlib-1.1.3-15U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/rsync-2.4.6-5U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/cvs-1.10.8-5U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/vnc-3.3.3-6U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/rpm-3.0.5-45U60_3cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/pngcrush-1.5.4-2U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/gcc-2.95.2-10U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86-4.0.1-35U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/zlib-1.1.3-15U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rsync-2.4.6-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/zlib-devel-1.1.3-15U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/zlib-devel-static-1.1.3-15U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cvs-1.10.8-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cvs-doc-1.10.8-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/vnc-3.3.3-6U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/librpm-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/popt-1.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/popt-devel-1.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/popt-devel-static-1.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/popt-doc-1.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm-build-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm-devel-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm-devel-static-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm-doc-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/rpm2cpio-3.0.5-45U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/pngcrush-1.5.4-2U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cpp-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-c++-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-chill-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-g77-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-java-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/gcc-objc-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/libgcj-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/libstdc++-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/libstdc++-devel-2.95.2-10U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-devel-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xvfb-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-imstt-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Server-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-libs-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-xfs-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xnest-4.0.1-35U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/zlib-1.1.3-15U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/rsync-2.4.6-5U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/vnc-3.3.3-6U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/gcc-2.95.3-20U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/rpm-4.0.2-28U70_2cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/pngcrush-1.5.4-2U70_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/zlib-1.1.3-15U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/zlib-devel-1.1.3-15U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/zlib-devel-static-1.1.3-15U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rsync-2.4.6-5U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/vnc-3.3.3-6U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/cpp-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libgcj-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-c++-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-c++-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-chill-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-chill-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-g77-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-g77-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-java-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-java-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-objc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/gcc-objc-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libgcj-devel-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libgcj-devel-static-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libgcj-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/librpm-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/librpmbuild-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libstdc++-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libstdc++-devel-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/libstdc++-doc-2.95.3-20U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/popt-1.6.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/popt-devel-1.6.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/popt-devel-static-1.6.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/popt-doc-1.6.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/python-rpm-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm-build-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm-devel-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm-devel-static-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm-doc-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rpm2cpio-4.0.2-28U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/pngcrush-1.5.4-2U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xaa-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-dri-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-sis-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i128-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-dps-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i740-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-freetype-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-lowcolor-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xvfb-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-config-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xnest-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-devel-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-multi-depths-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-trident-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw6-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-siliconmotion-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xterm-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xprt-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-chips-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tseng-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-s3virge-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-static-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cirrus-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glide-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-apm-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xie-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-common-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xfs-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-codeconv-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-common-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cyrix-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-misc-locales-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vga-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ark-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-savage-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xtt-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-neomagic-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-extended-input-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vesa-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rstart-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tga-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-dri-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-afb-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-bench-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-twm-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-rendition-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-progs-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-pex5-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xdm-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-cfb-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-manpages-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glint-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-common-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-dri-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-dri-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-proxy-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-fbdev-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-nv-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-minimal-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xkb-4.0.3-26U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/zlib-1.1.3-15U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/rsync-2.4.6-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/cvs-1.10.8-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/vnc-3.3.3-6U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/rpm-3.0.4-10U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/zlib-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/zlib-devel-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/zlib-devel-static-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/rsync-2.4.6-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/cvs-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/cvs-doc-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/vnc-3.3.3-6U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/rpm-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/rpm-devel-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/rpm-python-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/zlib-1.1.3-15U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/rsync-2.4.6-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/cvs-1.10.8-5U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/vnc-3.3.3-6U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/rpm-3.0.4-10U50_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/zlib-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/zlib-devel-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/zlib-devel-static-1.1.3-15U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/rsync-2.4.6-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/cvs-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/cvs-doc-1.10.8-5U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/vnc-3.3.3-6U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/rpm-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/rpm-devel-3.0.4-10U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/rpm-python-3.0.4-10U50_1cl.i386.rpm
Conectiva Linux version 6.0及以上版本的用户可以使用apt进行RPM包的更新：
- 把以下的文本行加入到/etc/apt/sources.list文件中：
rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates
(如果你不是使用6.0版本，用合适的版本号代替上面的6.0)
- 执行: apt-get update
- 更新以后，再执行: apt-get upgrade
Debian
------
Debian已经为此发布了一个安全公告（DSA-122-1）以及相应补丁:
DSA-122-1：New zlib & other packages fix buffer overflow
链接：http://www.debian.org/security/2002/dsa-122
补丁下载：
Source archives:
http://security.debian.org/dists/stable/updates/main/source/amaya_2.4-1potato1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/amaya_2.4-1potato1.dsc
http://security.debian.org/dists/stable/updates/main/source/dictd_1.4.9-9potato1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/dictd_1.4.9-9potato1.dsc
http://security.debian.org/dists/stable/updates/main/source/erlang_49.1-10.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/erlang_49.1-10.1.dsc
http://security.debian.org/dists/stable/updates/main/source/freeamp_2.0.6-2.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/freeamp_2.0.6-2.1.dsc
http://security.debian.org/dists/stable/updates/main/source/mirrordir_0.10.48-2.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/mirrordir_0.10.48-2.1.dsc
http://security.debian.org/dists/stable/updates/main/source/ppp_2.3.11-1.5.diff.gz
http://security.debian.org/dists/stable/updates/main/source/ppp_2.3.11-1.5.dsc
http://security.debian.org/dists/stable/updates/main/source/rsync_2.3.2-1.6.diff.gz
http://security.debian.org/dists/stable/updates/main/source/rsync_2.3.2-1.6.dsc
http://security.debian.org/dists/stable/updates/main/source/vrweb_1.5-5.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/vrweb_1.5-5.1.dsc
http://security.debian.org/dists/stable/updates/main/source/zlib_1.1.3-5.1.diff.gz
http://security.debian.org/dists/stable/updates/main/source/zlib_1.1.3-5.1.dsc
Architecture-independent components:
http://security.debian.org/dists/stable/updates/main/binary-all/erlang-base_49.1-10.1_all.deb
http://security.debian.org/dists/stable/updates/main/binary-all/erlang-erl_49.1-10.1_all.deb
http://security.debian.org/dists/stable/updates/main/binary-all/erlang-java_49.1-10.1_all.deb
http://security.debian.org/dists/stable/updates/main/binary-all/freeamp-doc_2.0.6-2.1_all.deb
Alpha architecture:
Fixed erlang and freeamp packages are not yet available.
http://security.debian.org/dists/stable/updates/main/binary-alpha/amaya_2.4-1potato1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/dict_1.4.9-9potato1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/dictd_1.4.9-9potato1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/mirrordir_0.10.48-2.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/ppp_2.3.11-1.5_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/rsync_2.3.2-1.6_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/vrweb_1.5-5.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/zlib-bin_1.1.3-5.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/zlib1g-dev_1.1.3-5.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/zlib1g_1.1.3-5.1_alpha.deb
ARM architecture:
erlang and freeamp packages are not yet available
http://security.debian.org/dists/stable/updates/main/binary-arm/amaya_2.4-1potato1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/dict_1.4.9-9potato1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/dictd_1.4.9-9potato1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/mirrordir_0.10.48-2.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/ppp_2.3.11-1.5_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/rsync_2.3.2-1.6_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/vrweb_1.5-5.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/zlib-bin_1.1.3-5.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/zlib1g-dev_1.1.3-5.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/zlib1g_1.1.3-5.1_arm.deb
Intel ia32 architecture:
http://security.debian.org/dists/stable/updates/main/binary-i386/amaya_2.4-1potato1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/dict_1.4.9-9potato1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/dictd_1.4.9-9potato1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/erlang_49.1-10.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/freeamp_2.0.6-2.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libfreeamp-alsa_2.0.6-2.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libfreeamp-esound_2.0.6-2.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/mirrordir_0.10.48-2.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/ppp_2.3.11-1.5_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/rsync_2.3.2-1.6_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/vrweb_1.5-5.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/zlib-bin_1.1.3-5.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/zlib1-altdev_1.1.3-5.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/zlib1_1.1.3-5.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/zlib1g-dev_1.1.3-5.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/zlib1g_1.1.3-5.1_i386.deb
Motorola 680x0 architecture:
amaya, erlang, and freeamp packages are not yet available
http://security.debian.org/dists/stable/updates/main/binary-m68k/dict_1.4.9-9potato1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/dictd_1.4.9-9potato1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/mirrordir_0.10.48-2.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/ppp_2.3.11-1.5_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/rsync_2.3.2-1.6_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/zlib-bin_1.1.3-5.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/zlib1-altdev_1.1.3-5.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/zlib1_1.1.3-5.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/zlib1g-dev_1.1.3-5.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/zlib1g_1.1.3-5.1_m68k.deb
PowerPC architecture:
http://security.debian.org/dists/stable/updates/main/binary-powerpc/amaya_2.4-1potato1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/dict_1.4.9-9potato1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/dictd_1.4.9-9potato1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/erlang_49.1-10.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/freeamp_2.0.6-2.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/libfreeamp-alsa_2.0.6-2.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/libfreeamp-esound_2.0.6-2.1_powerpc.deb
浏览次数：8713
严重程度：0（网友投票）
绿盟科技给您安全的保障