All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#46955 - [unzip] security issues

Task Type Bug Report Category Security Status Closed Assigned To Gaetan Bisson (vesath) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details via https://www.debian.org/security/2015/dsa-3386 https://security-tracker.debian.org/tracker/CVE-2015-7696 - Heap buffer overflow when extracting password-protected archive https://security-tracker.debian.org/tracker/CVE-2015-7697 - Infinite loop when extracting password-protected archive Patches: https://sources.debian.net/data/main/u/unzip/6.0-19/debian/patches/14-cve-2015-7696 https://sources.debian.net/data/main/u/unzip/6.0-19/debian/patches/15-cve-2015-7697 https://sources.debian.net/data/main/u/unzip/6.0-19/debian/patches/16-fix-integer-underflow-csiz-decrypted