Bzip2 (bzgrep)

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to [email protected] for more info.

---1463811840-1387148632-1123621562=:28159
Content-Type: TEXT/PLAIN; charset=ISO-8859-15
Content-Transfer-Encoding: QUOTED-PRINTABLE

 The vulnerability in zgrep (CAN-2005-0758) applies also to bzgrep.
Attached patch is from fedora3, modified to use bash as the shell (as
ubuntu do - I suspect there is a typo in their patch).  Rated as low
risk, a gullible user has to use bzgrep in an untrusted directory with
specially-crafted filenames, and any arbitrary code will run with the
user's own permissions.

Ken
--=20
 das eine Mal als Trag=F6die, das andere Mal als Farce

---1463811840-1387148632-1123621562=:28159
Content-Type: TEXT/PLAIN; charset=US-ASCII;
	name="bzip2-1.0.3-bzgrep_security-1.patch"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.58.0508092206020.28159@ppg_penguin.kenmoffat.uklinux.net>
Content-Description: 
Content-Disposition: attachment; filename="bzip2-1.0.3-bzgrep_security-1.patch"
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---1463811840-1387148632-1123621562=:28159
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

---1463811840-1387148632-1123621562=:28159--