Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

unzip-6.0-45.el8 RPM for ppc64le

From CentOS 8-stream BaseOS for ppc64le / Packages

Name: unzip Distribution: CentOS
Version: 6.0 Vendor: CentOS
Release: 45.el8 Build date: Tue May 18 17:07:04 2021
Group: Applications/Archiving Build host: ppc64le-02.mbox.centos.org
Size: 549325 Source RPM: unzip-6.0-45.el8.src.rpm
Packager: CentOS Buildsys <bugs@centos.org>
Url: http://www.info-zip.org/UnZip.html
Summary: A utility for unpacking zip files
 
The unzip utility is used to list, test, or extract files from a zip
archive.  Zip archives are commonly found on MS-DOS systems.  The zip
utility, included in the zip package, creates zip archives.  Zip and
unzip are both compatible with archives created by PKWARE(R)'s PKZIP
for MS-DOS, but the programs' options and default behaviors do differ
in some respects.

Install the unzip package if you need to list, test or extract files from
a zip archive.

Provides

Requires

License

BSD

Changelog

* Tue Nov 24 2020 Jakub Martisko <jamartis@redhat.com> - 6.0-45
  Fix a false positive zipbomb detection
  Related: 1954649
  Related: 1953565
* Tue Nov 24 2020 Jakub Martisko <jamartis@redhat.com> - 6.0-44
  * Fix out of memory errors while checking for zip-bombs
  Resolves: #1900915
* Mon Nov 18 2019 Jakub Martisko <jamartis@redhat.com> - 6.0-43
  - Update the man page with the new exit code introduced in 6.0-42
  - Related: CVE-2019-13232
* Thu Oct 17 2019 Jakub Martisko <jamartis@redhat.com> - 6.0-42
  - Fix CVE-2019-13232
  - Resolves: CVE-2019-13232
* Wed Nov 14 2018 Jakub Martisko <jamartis@redhat.com> - 6.0-41
  - Fix strcpy call with possibly overlapping src/dest strings.
  - Related: #1602721
* Mon Nov 12 2018 Jakub Martisko <jamartis@redhat.com> - 6.0-40
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').
  - Related: #1602721
* Mon Nov 05 2018 Jakub Martisko <jamartis@redhat.com> - 6.0-39
  - Fix CVE-2018-18384
    Resolves: CVE-2018-18384
* Tue Feb 13 2018 Jakub Martisko <jamartis@redhat.com> - 6.0-38
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-37
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-36
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-35
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Jul 14 2017 Petr Stodulka <pstodulk@redhat.com> - 6.0.34
  - restore of unix timestamp accurately
    Resolves: #1451953
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-33
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Feb 01 2017 Stephen Gallagher <sgallagh@redhat.com> - 6.0-32
  - Add missing %license macro
* Wed Dec 14 2016 Petr Stodulka <pstodulk@redhat.com> - 6.0-31
  - Fix CVE-2016-9844 - buffer overflow in zipinfo
    Resolves: #1404283
* Thu Jul 14 2016 Petr Stodulka <pstodulk@redhat.com> - 6.0-30
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
    so linking is now configurable from the spec file
  - define __global_ldflags on EL <= 7
  - set LFLAGS2 with __global_ldflags for hardened build
    Resolves: #1330519
* Fri Jul 01 2016 Petr Stodulka <pstodulk@redhat.com> - 6.0-29
  - added build parameter "-DNO_LCHMOD" because lchmod isn't provided on Linux
    system
    Resolves: #1350627
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-28
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Nov 25 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-27
  - fix print of non-ascii filenames (#225576)
* Fri Nov 13 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-26
  - fix unsigned overflow patch for #1260944 (#1281804)
* Thu Oct 29 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-25
  - add support of non-latin and non-unicode encodings for filenames (#885540)
* Wed Sep 23 2015 Kamil Dudka <kdudka@redhat.com> - 6.0-24
  - prevent unsigned overflow on invalid input (#1260944)
* Mon Sep 14 2015 Kamil Dudka <kdudka@redhat.com> - 6.0-23
  - Fix heap overflow and infinite loop when invalid input is given (#1260947)
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-22
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 6.0-21
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
* Wed Feb 11 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-20
  - re-patch CVE-2014-9636 - original patch was incorrect (#1184986)
* Tue Feb 10 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-19
  - Fix CVE-2014-8139 - CRC32 verification heap-based buffer overread 
    (#1174844)
  - Fix CVE-2014-8140 - out-of-bounds write issue in test_compr_eb()
    (#1174851)
  - Fix CVE-2014-8141 - getZip64Data() out-of-bounds read issues
    (#1174856)
  - Fix buffer overflow on long file sizes
    (#1191136)
* Mon Jan 26 2015 Petr Stodulka <pstodulk@redhat.com> - 6.0-18
  - Fix security bug - CVE-2014-9636
* Fri Nov 21 2014 Petr Stodulka <pstodulk@redhat.com> - 6.0-17
  - Fix unitialized reads (#558738)
  - Fix fix broken -X option - never worked before. Added -DIZ_HAVE_UXUIDGID
    option for compilation.
    (#935202)
* Thu Nov 06 2014 Petr Stodulka <pstodulk@redhat.com> - 6.0-16
  - Fix producing of incorrect output due to memcpy overlapping
    by added option -D NOMEMCPY to compile section.
    (#1153388)
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-15
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Fri Jun 06 2014 Petr Stodulka <pstodulk@redhat.com> - 6.0-14
  - Fix previous patch (#1104018) - case-insensitive matching
    was reversed in function recmatch
* Wed Jun 04 2014 Petr Stodulka <pstodulk@redhat.com> - 6.0-13
  - Solve problem with non-functional case-insensitive matching
    (#1104018)
  - Added patch for build option "-Werror=format-security"
    However solve only false positives - here is not really
    vulnerable print.
* Mon Oct 21 2013 Petr Stodulka <pstodulk@redhat.com> - 6.0.-12
  - Solve problem with symlink errors in archive with many files
    (#740012,#972427)
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-11
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jun 24 2013 Tom Callaway <spot@fedoraproject.org> - 6.0-10
  - unset WILD_STOP_AT_DIR
* Tue May 28 2013 Tom Callaway <spot@fedoraproject.org> - 6.0-9
  - Apply changes to match.c to sync with recmatch from util.c (from zip 3.0)
    This also resolves the license issue in that file.
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-8
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Mon Dec 10 2012 Michal Luscon <mluscon@redhat.com> 6.0-7
  - Resolves: #884679 - zip files with bzip2 compression
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-6
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
  
  - Fix minor manpage spelling mistake
    Resolves: #675454
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.0-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon May 24 2010 Karel Klic <kklic@redhat.com> - 6.0-3
  - Removed BuildRoot tag
  - Removed %clean section
  - Removed trailing whitespaces in the spec file
* Mon Nov 30 2009 Karel Klic <kklic@redhat.com> - 6.0-2
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
* Mon Nov 16 2009 Karel Klic <kklic@redhat.com> - 6.0-1
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.52-11
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.52-10
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Wed Mar 19 2008 Ivana Varekova <varekova@redhat.com> - 5.52-9
  - fix crash (double free) on malformed zip archive
    CVE-2008-0888 (#431438)
* Fri Feb 08 2008 Ivana Varekova <varekova@redhat.com> - 5.52-8
  - fix output when out of space error appears
* Wed Jan 23 2008 Ivana Varekova <varekova@redhat.com> - 5.52-7
  - fix another long file support problem
* Tue Jan 22 2008 Ivana Varekova <varekova@redhat.com> - 5.52-6
  - add 4GB patch (#429674)
* Tue Sep 04 2007 Ivana Varekova <varekova@redhat.com> - 5.52-5
  - fix open call
* Wed Feb 07 2007 Ivana Varekova <varekova@redhat.com> - 5.52-4
  - incorporate the next peckage review comment
* Tue Feb 06 2007 Ivana Varekova <varekova@redhat.com> - 5.52-3
  - Resolves: 226516
    Incorporate the package review
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 5.52-2.2.1
  - rebuild
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 5.52-2.2
  - bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 5.52-2.1
  - rebuilt for new gcc4.1 snapshot and glibc changes
* Mon Feb 06 2006 Ivana Varekova <varekova@redhat.com> 5.52-2
  - fix bug 180078 - unzip -l causing error
  - fix CVE-2005-4667 - unzip long file name buffer overflow
* Thu Dec 22 2005 Ivana Varekova <varekova@redhat.com> 5.52-1
  - update to 5.52
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
  - rebuilt
* Wed Aug 03 2005 Ivana Varekova <varekova@redhat.com> 5.51-12
  - fix bug 164928 - TOCTOU issue in unzip
* Mon May 09 2005 Ivana Varekova <varekova@redhat.com> 5.51-11
  - fix bug 156959 – invalid file mode on created files
* Mon Mar 07 2005 Ivana Varekova <varekova@redhat.com> 5.51-10
  - rebuilt
* Thu Feb 10 2005 Ivana Varekova <varekova@redhat.com> 5.51-9
  - fix the other problem with unpacking zipfiles containing symlinks
    (bug #134073)
* Thu Feb 03 2005 Ivana Varekova <varekova@redhat.com> 5.51-8
  - fix segfault with unpacking of zipfiles containing dangling symlinks
    (bug #134073)
* Thu Dec 02 2004 Lon Hohberger <lhh@redhat.com> 5.51-6
  - Rebuild
* Thu Dec 02 2004 Lon Hohberger <lhh@redhat.com> 5.51-5
  - Fix segfault on extraction of symlinks
* Mon Jun 21 2004 Lon Hohberger <lhh@redhat.com> 5.51-4
  - Extend max file/archive size to 2^32-8193 (4294959103) bytes
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Tue Jun 08 2004 Lon Hohberger <lhh@redhat.com> 5.51-2
  - Rebuild
* Tue Jun 08 2004 Lon Hohberger <lhh@redhat.com> 5.51-1.1
  - Update to 5.51; remove dotdot patch.
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Mon Nov 17 2003 Lon Hohberger <lhh@redhat.com> 5.50-36
  - Rebuild for FC-next
* Fri Aug 01 2003 Lon Hohberger <lhh@redhat.com> 5.50-35
  - Rebuild for Severn
* Fri Aug 01 2003 Lon Hohberger <lhh@redhat.com> 5.50-34
  - Rebuild for Taroon
* Fri Aug 01 2003 Lon Hohberger <lhh@redhat.com> 5.50-33
  - Rebuild for 9 errata
* Fri Aug 01 2003 Lon Hohberger <lhh@redhat.com> 5.50-32
  - Rebuild for 8.0 errata
* Fri Aug 01 2003 Lon Hohberger <lhh@redhat.com> 5.50-31
  - Rebuild for 7.3 errata
* Wed Jul 30 2003 Lon Hohberger <lhh@redhat.com> 5.50-30
  - SECURITY Round 3: Fix up original patch (from 5.50-9) to fix
  ^V/ exploit, but still allow '-:', which the other patch (5.50-18)
  does not allow.  Never allow explicit writing to the root
  directory; force users to change there and extract it manually.
* Wed Jul 30 2003 Lon Hohberger <lhh@redhat.com> 5.50-29
  - Rebuild for Severn
* Wed Jul 30 2003 Lon Hohberger <lhh@redhat.com> 5.50-28
  - Rebuild
* Wed Jul 30 2003 Lon Hohberger <lhh@redhat.com> 5.50-27
  - Rebuild for 9
* Wed Jul 30 2003 Lon Hohberger <lhh@redhat.com> 5.50-26
  - Rebuild for 8.0
* Tue Jul 22 2003 Lon Hohberger <lhh@redhat.com> 5.50-23
  - Rebuild for 7.3
* Mon Jul 21 2003 Lon Hohberger <lhh@redhat.com> 5.50-22
  - Rebuild for Severn
* Mon Jul 21 2003 Lon Hohberger <lhh@redhat.com> 5.50-21
  - Rebuild
* Mon Jul 21 2003 Lon Hohberger <lhh@redhat.com> 5.50-20
  - Rebuild for 9
* Mon Jul 21 2003 Lon Hohberger <lhh@redhat.com> 5.50-19
  - Rebuild for 8.0
* Mon Jul 21 2003 Lon Hohberger <lhh@redhat.com> 5.50-18
  - SECURITY: Incorporate far cleaner patch from Ben Laurie
  <ben@algroup.co.uk> which also fixes ^V/ (quote-slash).
  Patch checks post-decode as opposed to inline as previous
  patch does.
* Mon Jun 16 2003 Lon Hohberger <lhh@redhat.com> 5.50-17
  - Rebuilt per request
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-16
  - Rebuilt
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-15
  - Rebuilt
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-14
  - Rebuilt: Red Hat Linux 9
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-13
  - Rebuilt: Red Hat Enterprise Linux 2.1
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-12
  - Rebuilt Red Hat Linux 8.0
* Thu Jun 12 2003 Lon Hohberger <lhh@redhat.com> 5.50-11
  - Rebuilt Red Hat Linux 7.3
* Wed Jun 11 2003 Lon Hohberger <lhh@redhat.com> 5.50-10
  - Rebuilt
* Wed Jun 11 2003 Lon Hohberger <lhh@redhat.com> 5.50-9
  - SECURITY: Scour start of filename for ../ patterns which
  include quote and/or control characters.
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
  - rebuilt
* Thu Dec 19 2002 Tim Powers <timp@redhat.com>
  - bump and rebuild
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Thu May 23 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Thu Apr 25 2002 Trond Eivind Glomsrød <teg@redhat.com> 5.50-3
  - Rebuild
* Tue Apr 02 2002 Trond Eivind Glomsrød <teg@redhat.com> 5.50-2
  - Make it not strip
* Wed Mar 13 2002 Trond Eivind Glomsrød <teg@redhat.com> 5.50-1
  - 5.50
* Thu Feb 21 2002 Trond Eivind Glomsrød <teg@redhat.com> 5.42-3
  - Rebuild
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Mon May 21 2001 Trond Eivind Glomsrød <teg@redhat.com>
  - 5.42
  - Don't strip binaries explicitly
  - build without assembly, it doesn't seem to increase performance
  - make it respect RPM_OPT_FLAGS, define _GNU_SOURCE
  - use %{_tmppath}
  - "License:" replaces "Copyright:"
  - Update URL
  - include zipgrep
  - COPYING doesn't exist anymore, include LICENSE instead
* Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
  - automatic rebuild
* Sun Jun 11 2000 BIll Nottingham <notting@redhat.com>
  - rebuild in new env.; FHS fixes.
* Tue Apr 18 2000 Bernhard Rosenkraenzer <bero@redhat.com>
  - 4.51 (an acceptable license at last...)
* Thu Feb 03 2000 Bill Nottingham <notting@redhat.com>
  - handle compressed man pages
* Fri Jul 30 1999 Bill Nottingham <notting@redhat.com>
  - update to 5.40
* Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>
  - auto rebuild in the new build environment (release 5)
* Thu Dec 17 1998 Michael Maher <mike@redhat.com>
  - built for 6.0
* Tue Aug 11 1998 Jeff Johnson <jbj@redhat.com>
  - build root
* Mon Apr 27 1998 Prospector System <bugs@redhat.com>
  - translations modified for de, fr, tr
* Tue Oct 21 1997 Erik Troan <ewt@redhat.com>
  - builds on non i386 platforms
* Mon Oct 20 1997 Otto Hammersmith <otto@redhat.com>
  - updated the version
* Thu Jul 10 1997 Erik Troan <ewt@redhat.com>
  - built against glibc

Files

/usr/bin/funzip
/usr/bin/unzip
/usr/bin/unzipsfx
/usr/bin/zipgrep
/usr/bin/zipinfo
/usr/lib/.build-id
/usr/lib/.build-id/c6
/usr/lib/.build-id/c6/875fe045665d12b35f3a96415305d44a8ec973
/usr/lib/.build-id/d1
/usr/lib/.build-id/d1/fbdb103c52325d428374e35d1ea5cb91034dcb
/usr/lib/.build-id/fc
/usr/lib/.build-id/fc/da5008f30bc3eabf1e7f073d30785f3a562998
/usr/lib/.build-id/fc/da5008f30bc3eabf1e7f073d30785f3a562998.1
/usr/share/doc/unzip
/usr/share/doc/unzip/BUGS
/usr/share/doc/unzip/README
/usr/share/licenses/unzip
/usr/share/licenses/unzip/COPYING.OLD
/usr/share/licenses/unzip/LICENSE
/usr/share/man/man1/funzip.1.gz
/usr/share/man/man1/unzip.1.gz
/usr/share/man/man1/unzipsfx.1.gz
/usr/share/man/man1/zipgrep.1.gz
/usr/share/man/man1/zipinfo.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed May 29 02:12:33 2024