----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Debian update for zope

SECUNIA ADVISORY ID:
SA21130

VERIFY ADVISORY:
http://secunia.com/advisories/21130/

CRITICAL:
Moderately critical

IMPACT:
Exposure of sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 3.1
http://secunia.com/product/5307/

DESCRIPTION:
Debian has issued an update for zope. This fixes a vulnerability,
which can be exploited by malicious people to disclose potentially
sensitive information.

For more information:
SA20988

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2.dsc
Size/MD5 checksum: 906 e23c6dc88c7af48940e86fa41f97d536
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2.diff.gz
Size/MD5 checksum: 51266 a30c65b102a2ae75eb8e953826ec397b
http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5.orig.tar.gz
Size/MD5 checksum: 2885871 5b5c5823c62370d9f7325c6014a49d8b

Alpha architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_alpha.deb
Size/MD5 checksum: 2669594 3012b1b7c60fbaa2a4e28270d8524993

AMD64 architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_amd64.deb
Size/MD5 checksum: 2661200 a2396ea45bdee6684526e50bbd91d407

ARM architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_arm.deb
Size/MD5 checksum: 2615998 94eba92b3e764b1409d9f204752c145d

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_i386.deb
Size/MD5 checksum: 2608476 0d2255ee8404c285df5d218ff1720ca1

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_ia64.deb
Size/MD5 checksum: 2959536 3f930a43af8b566f3ea791d7dd37b5cd

HP Precision architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_hppa.deb
Size/MD5 checksum: 2736776 55734b807c8b20f65e6e0df0e2e27820

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_m68k.deb
Size/MD5 checksum: 2601508 29c0606574cb83e54d8df984e0a45b25

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_mips.deb
Size/MD5 checksum: 2675708 d48d0ef186ac908b5ab29c930e12dcb7

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_mipsel.deb
Size/MD5 checksum: 2678350 2f8078005091cea22255944c8f5d0953

PowerPC architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_powerpc.deb
Size/MD5 checksum: 2724040 ea43d949c6e6d8970d58088dc112bc78

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_s390.deb
Size/MD5 checksum: 2663274 140d55d68fdcbe8397f3d0ec13087f7e

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/z/zope2.7/zope2.7_2.7.5-2sarge2_sparc.deb
Size/MD5 checksum: 2670674 cbdb9f302896fd372cd583be41a8ec2a

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1113

OTHER REFERENCES:
SA20988:
http://secunia.com/advisories/20988/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------