From: "Christian Hudon" <chrish@debian.org>
Date: Sun, 22 Nov 1998 23:35:32 -0500
To: debian-security-announce@lists.debian.org
Subject: [SECURITY] New version of zgv fixes buffer overflows


--7AUc2qLy4jB3hD7Z
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

We have received reports that the zgv package is vulnerable to buffer
overflows.

We recommend you upgrade your zgv package immediately.

wget url
	will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.0 alias hamm
-------------------------------

  This version of Debian was released only for the Intel and the
  Motorola 68xxx architecture.

  Source archives:

ftp://ftp.debian.org/debian/dists/proposed-updates/zgv_2.8-4.1.diff.gz

	MD5 checksum: 4b27423a723fa47058a859c2c634484d

ftp://ftp.debian.org/debian/dists/proposed-updates/zgv_2.8-4.1.dsc

	MD5 checksum: 7e5a171873f54b469888d959fa478ac0

ftp://ftp.debian.org/debian/dists/hamm/main/source/graphics/zgv_2.8.orig.ta=
r.gz

	MD5 checksum: b2421d03a98cc1af9df57a15630f0740

  Intel architecture:

ftp://ftp.debian.org/debian/dists/proposed-updates/zgv_2.8-4.1_i386.deb

	MD5 checksum: 2434197a4f36e8ae25d5886819554843

  Motorola 68xxx architecture:

The zgv package is not available for this architecture.

  These files will be moved into
  ftp://ftp.debian.org/debian/dists/hamm/*/binary-$arch/ soon.


For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .

--=20
Debian GNU/Linux    .    Security Managers    .    security@debian.org
	      debian-security-announce@lists.debian.org
  Christian Hudon     .      Wichert Akkerman     .     Martin Schulze
<chrish@debian.org>   .   <wakkerma@debian.org>   .   <joey@debian.org>

--7AUc2qLy4jB3hD7Z
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia

iQCVAwUBNljmE44/+LDuJkz5AQHc7wP/VaBkt4ttl3Bgix9f9U8wbxraZdrHBpEX
1927cVnb30WB7foF6fAdke2mhiMHs4TnK7sGB5lWdNKzW3X8t6do1EZvpdEbkrtE
mV6czuRRYdGbtkOLXO22Z3o1xxSZutK7Xm5ipn1Hkqeto0SVVbeOuP0aTmLj7lmN
irEHF4FCsBY=
=k7Mm
-----END PGP SIGNATURE-----

--7AUc2qLy4jB3hD7Z--


--  
To UNSUBSCRIBE, email to debian-security-announce-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org