-
Committer:
Bazaar Package Importer
-
Author(s):
Martin Pitt
-
Date:
2006-02-10 21:08:40 UTC
-
Revision ID:
james.westby@ubuntu.com-20060210210840-ymx1cksc0fn51ftn
Tags: 5.51-2ubuntu1.3
* SECURITY UPDATE: Arbitrary code execution on specially crafted long file
names (which should not happen in many scenarios, though).
* unzpriv.h, Info macro:
- Use snprintf() instead of sprintf() as inner formatting function.
- Use fputs() instead of fprintf() as outer function to ignore leftover
format strings which might not have been substituted in the inner
snprintf().
- Throw away the three different implementations of that macro and use
just one safe one.
* unix/unix.c, do_wild():
- Replace unchecked strcpy() calls from user provided file argument to
statically sized buffer with strncpy() and ensure null termination.
* CVE-2005-4667