Package unzip

Binary package: unzip
Version: 6.0-alt4
Architecture: ppc64le
Build time:  Jul 14, 2021, 04:31 AM
 in the task #278477
Source package: unzip
Category: Archiving/Compression
Report package bug
Gear: https://git.altlinux.org/gears/u/unzip.git?a=tree;hb=02102b687cd…
Download: unzip-6.0-alt4.ppc64le.rpm
Build log: https://git.altlinux.org/tasks/278477/build/100/ppc64le/log
Home page: http://www.info-zip.org/
License:  Info-ZIP
Summary:  An utility for unpacking zip archives
Description: 
The unzip utility is used to list, test, or extract files from a zip archive.
Zip archives are commonly found on MS-DOS systems. The zip utility, included in
the zip package, creates zip archives. Zip and unzip are both compatible with
archives created by PKWARE(R)'s PKZIP for MS-DOS, but the programs' options and
default behaviors do differ in some respects.
Maintainer: Victor Forsyuk
List of contributors: 
Evgeny Sinelnikov
Nikita Ermakov
Dmitry V. Levin
Victor Forsyuk
Eugene Ostapets
Alexey Voinov
Dmitry V. Levin
Anton Farygin

ACL: Nikita Ermakov, @everybody
Last changes:
Nov. 13, 2020 Evgeny Sinelnikov 6.0-alt4
- Build with bzip2 compression method support
- Massive apply security patches from Fedora and openSUSE
- Fixes:
  + CVE-2014-8139 CRC32 verification heap-based buffer overread
  + CVE-2014-8140 out-of-bounds write issue in test_compr_eb()
  + CVE-2014-8141 getZip64Data() out-of-bounds read issues
  + CVE-2014-9913 buffer overflow in zipinfo
  + CVE-2014-9636 out-of-bounds read or write and crash
  + CVE-2015-7696 fix for heap overflow
  + CVE-2015-7697 fix infinite loop when extracting empty bzip2 data
  + CVE-2016-9844 buffer overflow in zipinfo in similar way like fix for CVE-2014-9913
  + CVE-2018-1000035 heap based buffer overflow when opening password protected files
  + CVE-2018-18384 buffer overflow, when a ZIP archive specially crafted
Jan. 15, 2020 Nikita Ermakov 6.0-alt3
- Update license to meet the SPDX.
April 15, 2013 Dmitry V. Levin 6.0-alt2.qa1
- NMU: rebuilt for debuginfo.

Back to Top