Bug 122367 - vulnerability on archivers/unzip
Summary: vulnerability on archivers/unzip
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Andrey A. Chernov
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-04-02 05:20 UTC by TsurutaniNaoki
Modified: 2008-04-02 16:10 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description TsurutaniNaoki 2008-04-02 05:20:00 UTC
	http://www.ciac.org/ciac/bulletins/s-237.shtml

Fix: 

patch for debian can be available from the above site:
	http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge5.diff.gz
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2008-04-02 05:20:08 UTC
Responsible Changed
From-To: freebsd-ports-bugs->ache

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 dfilter service freebsd_committer freebsd_triage 2008-04-02 16:04:57 UTC
ache        2008-04-02 15:04:46 UTC

  FreeBSD ports repository

  Modified files:
    archivers/unzip      Makefile 
    archivers/unzip/files patch-unix_unix.c 
  Added files:
    archivers/unzip/files patch-contsts.h patch-fileio.c 
                          patch-inflate.c patch-process.c 
                          patch-unzpriv.h 
  Log:
  Security fixes adopted/reimplemented from Debian:
  CVE-2008-0888, CVE-2005-4667, CAN-2005-2475
  Enable ACORN_FTYPE_NFS and WILD_STOP_AT_DIR options
  
  PR:             122367
  Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
  
  Revision  Changes    Path
  1.57      +3 -2      ports/archivers/unzip/Makefile
  1.1       +14 -0     ports/archivers/unzip/files/patch-contsts.h (new)
  1.1       +14 -0     ports/archivers/unzip/files/patch-fileio.c (new)
  1.1       +50 -0     ports/archivers/unzip/files/patch-inflate.c (new)
  1.1       +30 -0     ports/archivers/unzip/files/patch-process.c (new)
  1.2       +100 -22   ports/archivers/unzip/files/patch-unix_unix.c
  1.1       +30 -0     ports/archivers/unzip/files/patch-unzpriv.h (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Andrey A. Chernov freebsd_committer freebsd_triage 2008-04-02 16:10:03 UTC
State Changed
From-To: open->closed

Committed