Fedora Linux 8550 Published by

A sharutils security update has been released for Fedora Core 2

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-280
2005-04-01
---------------------------------------------------------------------

Product : Fedora Core 2
Name : sharutils
Version : 4.2.1
Release : 18.1.FC2
Summary : The GNU shar utilities for packaging and unpackaging shell
archives.
Description :
The sharutils package contains the GNU shar utilities, a set of tools for encoding and decoding packages of files (in binary or text format) in a special plain text format called shell archives (shar). This format can be sent through e-mail (which can be problematic for regular binary files). The shar utility supports a wide range of capabilities
(compressing, uuencoding, splitting long files for multi-part mailings, providing checksums), which make it very flexible at creating shar files. After the files have been sent, the unshar tool scans mail messages looking for shar files. Unshar automatically strips off mail headers and introductory text and then unpacks the shar files.

Install sharutils if you send binary files through e-mail.



---------------------------------------------------------------------

* Thu Mar 31 2005 Than Ngo <than@redhat.com> 4.2.1-18.1.FC2

- apply patch to fix multiple buffer overflows #152571
- apply patch to fix buffer overflow in handling of -o option, CAN-2004-1772, #123230


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

22f58e3841b4ff9de5eef6e5a8d84ef2 SRPMS/sharutils-4.2.1-18.1.FC2.src.rpm
d31b37a68a56df58a08d10605d2b6c8e x86_64/sharutils-4.2.1-18.1.FC2.x86_64.rpm
e8321daa0a4b890aae11dd35306ed344
x86_64/debug/sharutils-debuginfo-4.2.1-18.1.FC2.x86_64.rpm
6f7d0c8bc00709ebe55e56635bbea2d9 i386/sharutils-4.2.1-18.1.FC2.i386.rpm
bc666746782979cb6de3628981e77c5f
i386/debug/sharutils-debuginfo-4.2.1-18.1.FC2.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.