lp:ubuntu/warty-security/unzip

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

5. By Martin Pitt on 2006-02-15

Previous security update scrambled the output fields in the contents
listing, fix that regression.

4. By Martin Pitt on 2006-02-10

* SECURITY UPDATE: Arbitrary code execution on specially crafted long file
  names (which should not happen in many scenarios, though).
* unzpriv.h, Info macro:
  - Use snprintf() instead of sprintf() as inner formatting function.
  - Use fputs() instead of fprintf() as outer function to ignore leftover
    format strings which might not have been substituted in the inner
    snprintf().
  - Throw away the three different implementations of that macro and use
    just one safe one.
* unix/unix.c, do_wild():
  - Replace unchecked strcpy() calls from user provided file argument to
    statically sized buffer with strncpy() and ensure null termination.
* CVE-2005-4667

3. By Martin Pitt on 2005-09-29

* SECURITY UPDATE: Fix file permission modification race.
* unix/unix.c: Use fchmod() instead of chmod() to change permissions on the
  files unzip actually created, not the files another attacker might have
  hardlinked to in the meantime.
* CAN-2005-2475

2. By Santiago Vila on 2004-06-06

Added unshrinking support (Closes: #252563).

1. By Santiago Vila on 2004-06-06

Import upstream version 5.51