MDVA-2008:012

Package name

lzma

Date

2008-01-17

Advisory ID

MDVA-2008:012

Affected versions

2008.0 i586 , 2008.0 x86_64

Problem description

The lzma program did not properly check that the closing of output
succeeded, which could lead to rare, but possible, data loss.
Another issue with liblzmadec was also discovered where programs
could crash if decoding of a stream was not properly initialized.

This update ensures that output is properly closed so as to avoid
silent data loss, and adds consistency checks to liblzmadec so that
programs will no longer crash if a stream isn't properly initialized.

Updated packages

2008.0 i586

 4f0e82d096561bf25fec268d43990a43  2008.0/i586/dkms-lzma-4.43-17.1mdv2008.0.i586.rpm
 35c278d3854d0c894369787c51fca11a  2008.0/i586/liblzma0-4.43-17.1mdv2008.0.i586.rpm
 fbdeffc055eac2abecc063cc6b9fd162  2008.0/i586/liblzma0-devel-4.43-17.1mdv2008.0.i586.rpm
 014ecdae0b866bd57f9033f206b6348e  2008.0/i586/lzma-4.43-17.1mdv2008.0.i586.rpm 
 4e63267629faffbf153734c27fd105f6  2008.0/SRPMS/lzma-4.43-17.1mdv2008.0.src.rpm

2008.0 x86_64

 40250f544c19f2505e58916e5b769b8e  2008.0/x86_64/dkms-lzma-4.43-17.1mdv2008.0.x86_64.rpm
 beedc795d3656b09b7aa9fe435abeac2  2008.0/x86_64/lib64lzma0-4.43-17.1mdv2008.0.x86_64.rpm
 3aeee2cb7c31da5f1d413e8d7d51fe3d  2008.0/x86_64/lib64lzma0-devel-4.43-17.1mdv2008.0.x86_64.rpm
 0cc3f63a7b82e9927be2957532b97d1f  2008.0/x86_64/lzma-4.43-17.1mdv2008.0.x86_64.rpm 
 4e63267629faffbf153734c27fd105f6  2008.0/SRPMS/lzma-4.43-17.1mdv2008.0.src.rpm