unzip 6.0-4ubuntu2.1 source package in Ubuntu

Changelog

unzip (6.0-4ubuntu2.1) precise-security; urgency=medium

  * SECURITY UPDATE: CRC32 verification heap-based overflow
    - debian/patches/09-cve-2014-8139-crc-overflow: check extra block
      length in extract.c.
    - CVE-2014-8139
  * SECURITY UPDATE: out-of-bounds write issue in test_compr_eb()
    - debian/patches/10-cve-2014-8140-test-compr-eb: properly validate
      sizes in extract.c.
    - CVE-2014-8140
  * SECURITY UPDATE: out-of-bounds read issues in getZip64Data()
    - debian/patches/11-cve-2014-8141-getzip64data: validate extra fields
      in fileio.c, check sizes in process.c.
    - CVE-2014-8141
 -- Marc Deslauriers <email address hidden>   Wed, 07 Jan 2015 16:14:50 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
unzip_6.0.orig.tar.gz 1.3 MiB 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37
unzip_6.0-4ubuntu2.1.debian.tar.gz 15.7 KiB 235f4b2752946d249c6d3d20ec163fbe5949b366f2cfdf7193eef9517b84b33e
unzip_6.0-4ubuntu2.1.dsc 1.7 KiB 008b7c61c95c12fb5ba5794456656b8bea90495976fc9aac705d2511df057002

View changes file

Binary packages built by this source

unzip: De-archiver for .zip files

 InfoZIP's unzip program. With the exception of multi-volume archives
 (ie, .ZIP files that are split across several disks using PKZIP's /& option),
 this can handle any file produced either by PKZIP, or the corresponding
 InfoZIP zip program.
 .
 This version supports encryption.