unzip (6.0-13ubuntu2) vivid; urgency=medium
* SECURITY UPDATE: heap overflow via mismatched block sizes
- debian/patches/12-cve-2014-9636-test-compr-eb: ensure compressed and
uncompressed block sizes match when using STORED method in extract.c.
- CVE-2014-9636
Date: Thu, 29 Jan 2015 11:16:07 -0500
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/+source/unzip/6.0-13ubuntu2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Jan 2015 11:16:07 -0500
Source: unzip
Binary: unzip
Architecture: source
Version: 6.0-13ubuntu2
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
unzip - De-archiver for .zip files
Changes:
unzip (6.0-13ubuntu2) vivid; urgency=medium
.
* SECURITY UPDATE: heap overflow via mismatched block sizes
- debian/patches/12-cve-2014-9636-test-compr-eb: ensure compressed and
uncompressed block sizes match when using STORED method in extract.c.
- CVE-2014-9636
Checksums-Sha1:
ce0524992ad99db0155a90e02baca0d94c4b1ee2 1764 unzip_6.0-13ubuntu2.dsc
9c38429b99a68b4c27c2ef56eb86ad08b3eb7064 17344
unzip_6.0-13ubuntu2.debian.tar.xz
Checksums-Sha256:
4f5b03b56374c73628bb5e8632d93afecad84ac8645da7b031e40122aa7476a6 1764
unzip_6.0-13ubuntu2.dsc
143bdbae4aa3e0e221e04735802fd1674f2c97aad07c3b2c38cee03a9c2a4e27 17344
unzip_6.0-13ubuntu2.debian.tar.xz
Files:
fd8d7b148bc61206989b5ef2eabd1f24 1764 utils optional unzip_6.0-13ubuntu2.dsc
716beb613a4b7c93c21cc810535010cf 17344 utils optional
unzip_6.0-13ubuntu2.debian.tar.xz
Original-Maintainer: Santiago Vila <[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=c9Fm
-----END PGP SIGNATURE-----
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
