Package unzip

Source package: unzip
Version: 6.0-alt4
Build time:  Jul 14, 2021, 04:31 AM
 in the task #278477
Category: Archiving/Compression
Report package bug
License:  Info-ZIP
Summary:  An utility for unpacking zip archives
Description: 
The unzip utility is used to list, test, or extract files from a zip archive.
Zip archives are commonly found on MS-DOS systems. The zip utility, included in
the zip package, creates zip archives. Zip and unzip are both compatible with
archives created by PKWARE(R)'s PKZIP for MS-DOS, but the programs' options and
default behaviors do differ in some respects.
List of rpms provided by this srpm: 
unzip (x86_64, ppc64le, i586, armh, aarch64)
unzip-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
    1. bzip2-devel
    2. libnatspec-devel
Last changes:
Nov. 13, 2020 Evgeny Sinelnikov 6.0-alt4
- Build with bzip2 compression method support
- Massive apply security patches from Fedora and openSUSE
- Fixes:
  + CVE-2014-8139 CRC32 verification heap-based buffer overread
  + CVE-2014-8140 out-of-bounds write issue in test_compr_eb()
  + CVE-2014-8141 getZip64Data() out-of-bounds read issues
  + CVE-2014-9913 buffer overflow in zipinfo
  + CVE-2014-9636 out-of-bounds read or write and crash
  + CVE-2015-7696 fix for heap overflow
  + CVE-2015-7697 fix infinite loop when extracting empty bzip2 data
  + CVE-2016-9844 buffer overflow in zipinfo in similar way like fix for CVE-2014-9913
  + CVE-2018-1000035 heap based buffer overflow when opening password protected files
  + CVE-2018-18384 buffer overflow, when a ZIP archive specially crafted
Jan. 15, 2020 Nikita Ermakov 6.0-alt3
- Update license to meet the SPDX.
April 15, 2013 Dmitry V. Levin 6.0-alt2.qa1
- NMU: rebuilt for debuginfo.

Back to Top