Dismissed
by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
5 packages
- runzip
- ripunzip
- unzipNLS
- haskellPackages.unzip-traversable
- haskellPackages.wai-middleware-gunzip
- @LeSuisse dismissed
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip …
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
References
- https://access.redhat.com/errata/RHSA-2015:0700 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=1174856 x_refsource_MISC
- http://www.securitytracker.com/id/1031433 x_refsource_MISC
- http://www.ocert.org/advisories/ocert-2014-011.html x_refsource_MISC
- http://www.ocert.org/advisories/ocert-2014-011.html x_refsource_MISC x_transferred
- https://access.redhat.com/errata/RHSA-2015:0700 x_refsource_MISC x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=1174856 x_refsource_MISC x_transferred
- http://www.securitytracker.com/id/1031433 x_refsource_MISC x_transferred
- http://www.ocert.org/advisories/ocert-2014-011.html x_refsource_MISC
- https://access.redhat.com/errata/RHSA-2015:0700 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=1174856 x_refsource_MISC
- http://www.securitytracker.com/id/1031433 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=1174856 x_refsource_MISC x_transferred
- http://www.securitytracker.com/id/1031433 x_refsource_MISC x_transferred
- http://www.ocert.org/advisories/ocert-2014-011.html x_refsource_MISC x_transferred
- https://access.redhat.com/errata/RHSA-2015:0700 x_refsource_MISC x_transferred
Affected products
UnZip
- ==6.0 and earlier
Matching in nixpkgs
Ignored packages (5)
pkgs.runzip
Tool to convert filename encoding inside a ZIP archive
pkgs.ripunzip
Tool to unzip files in parallel
pkgs.unzipNLS
Extraction utility for archives compressed in .zip format
pkgs.haskellPackages.unzip-traversable
Unzip functions for general Traversable containers
Package maintainers
-
@RossComputerGuy Tristan Ross <tristan.ross@midstall.com>