« back to all changes in this revision
Viewing changes to atheos/README
- Committer: Bazaar Package Importer
- Date: 2005-09-29 17:02:50 UTC
- mfrom: (1.1.1 upstream)
- Revision ID: james.westby@ubuntu.com-20050929170250-my63eoy88vv1gd7e
* SECURITY UPDATE: Fix file permission modification race.
* unix/unix.c: Use fchmod() instead of chmod() to change permissions on the
files unzip actually created, not the files another attacker might have
hardlinked to in the meantime.
* CAN-2005-2475
* unix/unix.c: Use fchmod() instead of chmod() to change permissions on the
files unzip actually created, not the files another attacker might have
hardlinked to in the meantime.
* CAN-2005-2475
- files added:
- History.552
- atheos
- win32/vc6
- files removed:
- windll/vc5/dll/unzip32.dsp
- files modified:
- Contents
- cmsmvs/ccunzip.exec *
- cmsmvs/mc.exec *
- cmsmvs/unzip.exec *
- cmsmvs/zipinfo.exec *
- os2/rexxtest.cmd *
- os2/zip2exe.cmd *
- os2/zipgrep.cmd *
- unix/Packaging/postinstall *
- unix/Packaging/preinstall.in *
- unix/zipgrep *
- vms/link_unz.com *
- vms/make_unz.com *
- vms/makesfx.com *
added
removed
atheos/README
