Package: zip Version: 3.0-15ubuntu3 Severity: normal Tags: patch
I'm with the upstream Info-ZIP team. We've has a command injection issue reported against zip that we've been able to reproduce with the latest Debian sources. Attached patch is the proposed fix. Ping me if you need more details on reproduction steps
253.patch
Description: 253.patch

