diff --git a/unzip-6.0-heap-overflow-infloop.patch b/unzip-6.0-heap-overflow-infloop.patch index 160c512..b517c40 100644 --- a/unzip-6.0-heap-overflow-infloop.patch +++ b/unzip-6.0-heap-overflow-infloop.patch @@ -86,7 +86,7 @@ index 29db027..b9ae667 100644 - if (G.pInfo->encrypted) + if (G.pInfo->encrypted) { -+ if (csiz_decrypted <= 12) { ++ if (csiz_decrypted < 12) { + /* handle the error now to prevent unsigned overflow */ + Info(slide, 0x401, ((char *)slide, + LoadFarStringSmall(ErrUnzipNoFile), diff --git a/unzip.spec b/unzip.spec index 9995eb4..2b92f99 100644 --- a/unzip.spec +++ b/unzip.spec @@ -1,7 +1,7 @@ Summary: A utility for unpacking zip files Name: unzip Version: 6.0 -Release: 26s%{?dist} +Release: 27s%{?dist} License: BSD Group: Applications/Archiving Source: http://downloads.sourceforge.net/infozip/unzip60.tar.gz @@ -98,6 +98,9 @@ make -f unix/Makefile prefix=$RPM_BUILD_ROOT%{_prefix} MANDIR=$RPM_BUILD_ROOT/%{ %{_mandir}/*/* %changelog +* Mon Nov 23 2015 Petr Stodulka - 6.0-27s +- add fixed security update for #1260944 (#1281804) + * Fri Oct 30 2015 Petr Stodulka - 6.0-26s - add "s" to release due to diff between stdandard unzip in Fedora - add support of non-latin and non-unicode encodings for filenames (#885540)