1 files changed, 115 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2012-March/013604.html b/zarb-ml/mageia-dev/2012-March/013604.html
new file mode 100644
index 000000000..8751f01ca
--- /dev/null
+++ b/zarb-ml/mageia-dev/2012-March/013604.html
@@ -0,0 +1,115 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+   <TITLE> [Mageia-dev] Freeze push: libzip (security update)
+   </TITLE>
+   <LINK REL="Index" HREF="index.html" >
+   <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Freeze%20push%3A%20libzip%20%28security%20update%29&In-Reply-To=%3Cloom.20120328T180830-414%40post.gmane.org%3E">
+   <META NAME="robots" CONTENT="index,nofollow">
+   <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+   <LINK REL="Previous"  HREF="013603.html">
+   <LINK REL="Next"  HREF="013609.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+   <H1>[Mageia-dev] Freeze push: libzip (security update)</H1>
+    <B>David Walser</B> 
+    <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Freeze%20push%3A%20libzip%20%28security%20update%29&In-Reply-To=%3Cloom.20120328T180830-414%40post.gmane.org%3E"
+       TITLE="[Mageia-dev] Freeze push: libzip (security update)">luigiwalser at yahoo.com
+       </A><BR>
+    <I>Wed Mar 28 18:10:43 CEST 2012</I>
+    <P><UL>
+        <LI>Previous message: <A HREF="013603.html">[Mageia-dev] Old library packages left on system after upgrade
+</A></li>
+        <LI>Next message: <A HREF="013609.html">[Mageia-dev] Freeze push: libzip (security update)
+</A></li>
+         <LI> <B>Messages sorted by:</B> 
+              <a href="date.html#13604">[ date ]</a>
+              <a href="thread.html#13604">[ thread ]</a>
+              <a href="subject.html#13604">[ subject ]</a>
+              <a href="author.html#13604">[ author ]</a>
+         </LI>
+       </UL>
+    <HR>  
+<!--beginarticle-->
+<PRE>New vulnerabilities CVE-2012-1162 (heap overflow) and CVE-2012-1163 (integer
+overflow) in libzip were recently announced.
+
+libzip 0.10.1 has been released to fix these.  I have updated it in SVN and
+confirmed it builds on current Cauldron.  I mentioned this earlier and Anne
+submitted it to the build system, and it built, but one of the make check
+tests failed.  I can't reproduce this, even on a stripped-down VM with no
+extra -devel packages installed, so I'm thinking it was a transient issue on
+the build system (as I've seen this happen before).  Can we please try
+submitting it again?
+
+References:
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=5063">https://bugs.mageia.org/show_bug.cgi?id=5063</A>
+<A HREF="http://seclists.org/oss-sec/2012/q1/710">http://seclists.org/oss-sec/2012/q1/710</A>
+<A HREF="https://bugzilla.redhat.com/show_bug.cgi?id=802564">https://bugzilla.redhat.com/show_bug.cgi?id=802564</A>
+<A HREF="https://bugzilla.redhat.com/show_bug.cgi?id=803028">https://bugzilla.redhat.com/show_bug.cgi?id=803028</A>
+
+</PRE>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<!--endarticle-->
+    <HR>
+    <P><UL>
+        <!--threads-->
+	<LI>Previous message: <A HREF="013603.html">[Mageia-dev] Old library packages left on system after upgrade
+</A></li>
+	<LI>Next message: <A HREF="013609.html">[Mageia-dev] Freeze push: libzip (security update)
+</A></li>
+         <LI> <B>Messages sorted by:</B> 
+              <a href="date.html#13604">[ date ]</a>
+              <a href="thread.html#13604">[ thread ]</a>
+              <a href="subject.html#13604">[ subject ]</a>
+              <a href="author.html#13604">[ author ]</a>
+         </LI>
+       </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
+mailing list</a><br>
+</body></html>