diff --git a/unzip-6.0-heap-overflow-infloop.patch b/unzip-6.0-heap-overflow-infloop.patch index 160c512..b517c40 100644 --- a/unzip-6.0-heap-overflow-infloop.patch +++ b/unzip-6.0-heap-overflow-infloop.patch @@ -86,7 +86,7 @@ index 29db027..b9ae667 100644 - if (G.pInfo->encrypted) + if (G.pInfo->encrypted) { -+ if (csiz_decrypted <= 12) { ++ if (csiz_decrypted < 12) { + /* handle the error now to prevent unsigned overflow */ + Info(slide, 0x401, ((char *)slide, + LoadFarStringSmall(ErrUnzipNoFile), diff --git a/unzip.spec b/unzip.spec index 25f2451..e293d8b 100644 --- a/unzip.spec +++ b/unzip.spec @@ -1,7 +1,7 @@ Summary: A utility for unpacking zip files Name: unzip Version: 6.0 -Release: 25%{?dist} +Release: 26%{?dist} License: BSD Group: Applications/Archiving Source: http://downloads.sourceforge.net/infozip/unzip60.tar.gz @@ -95,6 +95,9 @@ make -f unix/Makefile prefix=$RPM_BUILD_ROOT%{_prefix} MANDIR=$RPM_BUILD_ROOT/%{ %{_mandir}/*/* %changelog +* Fri Nov 13 2015 Petr Stodulka - 6.0-26 +- fix unsigned overflow patch for #1260944 (#1281804) + * Thu Oct 29 2015 Petr Stodulka - 6.0-25 - add support of non-latin and non-unicode encodings for filenames (#885540)