unzip (6.0-13ubuntu1) vivid; urgency=medium
* Merge with Debian; remaining changes:
unzip (6.0-13) unstable; urgency=medium
* Apply upstream fix for three security bugs. Closes: #773722.
CVE-2014-8139: CRC32 verification heap-based overflow
CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
CVE-2014-8141: out-of-bounds read issues in getZip64Data()
Date: Thu, 25 Dec 2014 13:34:55 +0100
Changed-By: Matthias Klose <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/+source/unzip/6.0-13ubuntu1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 25 Dec 2014 13:34:55 +0100
Source: unzip
Binary: unzip
Architecture: source
Version: 6.0-13ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Matthias Klose <[email protected]>
Description:
unzip - De-archiver for .zip files
Closes: 773722
Changes:
unzip (6.0-13ubuntu1) vivid; urgency=medium
.
* Merge with Debian; remaining changes:
.
unzip (6.0-13) unstable; urgency=medium
.
* Apply upstream fix for three security bugs. Closes: #773722.
CVE-2014-8139: CRC32 verification heap-based overflow
CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
CVE-2014-8141: out-of-bounds read issues in getZip64Data()
Checksums-Sha1:
430f78e1c3ee5669379d2c399371d00d06a8f218 1764 unzip_6.0-13ubuntu1.dsc
43144dadb5ffdc45f625e15777e1954632677f5f 16736
unzip_6.0-13ubuntu1.debian.tar.xz
Checksums-Sha256:
1cef6841e1b6dfd32fd101e80e71f0d56b200e6439955a8224a673643e3004ab 1764
unzip_6.0-13ubuntu1.dsc
850068b63f2508942b7ccce47939818fc225452e56034f4fd5744cae7f9db237 16736
unzip_6.0-13ubuntu1.debian.tar.xz
Files:
d8b83ba06f327d742835403bc5ee6bf3 1764 utils optional unzip_6.0-13ubuntu1.dsc
7c1385003e106d89ad9798792b593c49 16736 utils optional
unzip_6.0-13ubuntu1.debian.tar.xz
Original-Maintainer: Santiago Vila <[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=fr4J
-----END PGP SIGNATURE-----
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
