-
Committer:
Bazaar Package Importer
-
Author(s):
Martin Pitt
-
Date:
2006-02-10 20:14:01 UTC
-
Revision ID:
james.westby@ubuntu.com-20060210201401-1ri1ls1pfiyrvump
Tags: 5.52-6ubuntu2
* SECURITY UPDATE: Arbitrary code execution on specially crafted long file
names (which should not happen in many scenarios, though).
* unzpriv.h, Info macro:
- Use snprintf() instead of sprintf() as inner formatting function.
- Use fputs() instead of fprintf() as outer function to ignore leftover
format strings which might not have been substituted in the inner
snprintf().
- Throw away the three different implementations of that macro and use
just one safe one.
- CVE-2005-4667