USN-151-4: rpm vulnerability

Releases

• Ubuntu 5.10
• Ubuntu 5.04
• Ubuntu 4.10

Details

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could
be exploited to cause Denial of Service attacks or even arbitrary code
execution with malicious data streams.

Since lsb-rpm is statically linked against the zlib library, it is also
affected by these issues. The updated packagages have been rebuilt
against the fixed zlib.

Please note that lsb-rpm is not officially supported (it is in the "universe"
component of the archive).

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 5.10

• lsb-rpm -

Ubuntu 5.04

• lsb-rpm -

Ubuntu 4.10

• lsb-rpm -

In general, a standard system update will make all the necessary changes.

References

• CVE-2005-1849
• CVE-2005-2096

Related notices

• USN-151-2: dpkg, dpkg-dev, ia32-libs-dev, ia32-libs, amd64-libs, dselect, amd64-libs-dev
• USN-151-1: zlib1g
• USN-151-3: aide
• USN-148-1: zlib1g