~ubuntu-branches/ubuntu/dapper/unzip/dapper-security : changes

~ubuntu-branches/ubuntu/dapper/unzip/dapper-security » Changes from revision 10

From Revision 10

Rev	Summary	Authors	Tags	Date
10	* SECURITY UPDATE: arbitrary code execution via heap corrupt... * SECURITY UPDATE: arbitrary code execution via heap corruption. * inflate.c: fix invalid free() calls, patch from Tavis Ormandy. * References CVE-2008-0888	Kees Cook	5.52-6ubuntu4.1	16 years ago
9	* const.h, process.c: Limit the maximum length of displayed ... * const.h, process.c: Limit the maximum length of displayed file names to 512 bytes, to avoid spewage with excessively long file names (which caused buffer overflows until the recent security fix for CVE-2005-4667). * Thanks to Santiago Vila for pointing this out.	Martin Pitt	5.52-6ubuntu4	18 years ago
8	Previous security update scrambled the output fields in the ... Previous security update scrambled the output fields in the contents listing, fix that regression.	Martin Pitt	5.52-6ubuntu3	18 years ago
7	* SECURITY UPDATE: Arbitrary code execution on specially cra... * SECURITY UPDATE: Arbitrary code execution on specially crafted long file names (which should not happen in many scenarios, though). * unzpriv.h, Info macro: - Use snprintf() instead of sprintf() as inner formatting function. - Use fputs() instead of fprintf() as outer function to ignore leftover format strings which might not have been substituted in the inner snprintf(). - Throw away the three different implementations of that macro and use just one safe one. - CVE-2005-4667	Martin Pitt	5.52-6ubuntu2	18 years ago
6	Resynchronise with Debian. Resynchronise with Debian.	Michael Vogt	5.52-6ubuntu1	18 years ago
5	* Resynchronise with Debian. * Resynchronise with Debian. * Repaired totally scrambled changelog. * unzip.c: Change Debian banner to 'Ubuntu', as advised by the Debian maintainer.	Martin Pitt	5.52-5ubuntu1	18 years ago
4	* SECURITY UPDATE: Fix file permission modification race. * SECURITY UPDATE: Fix file permission modification race. * unix/unix.c: Use fchmod() instead of chmod() to change permissions on the files unzip actually created, not the files another attacker might have hardlinked to in the meantime. * CAN-2005-2475	Martin Pitt	5.52-3ubuntu2	18 years ago
3	Fixed unzip of >2GB files, thanks to patch from ard at kwaak... Fixed unzip of >2GB files, thanks to patch from ard at kwaak.net	Thom May	5.51-2ubuntu1	19 years ago
2	Added unshrinking support (Closes: #252563). Added unshrinking support (Closes: #252563).	Santiago Vila	5.51-2	19 years ago
1	Import upstream version 5.51 Import upstream version 5.51	Santiago Vila	upstream-5.51	19 years ago