| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Neutralize zip file traversal attacks in miniunz. | Matt Wilson | 2024-01-17 | 1 | -0/+14 |
| | | | | | | | | | | | | | | | | | | | | | | | | | Archive formats such as .zip files are generally susceptible to so-called "traversal attacks". This allows an attacker to craft an archive that writes to unexpected locations of the file system (e.g., /etc/shadow) if an unspecting root user were to unpack a malicious archive. This patch neutralizes absolute paths such as /tmp/moo and deeply relative paths such as dummy/../../../../../../../../../../tmp/moo The Debian project requested CVE-2014-9485 be allocated for the first identified weakness. The fix was incomplete, resulting in a revised patch applied here. Since there wasn't an updated version released by Debian with the incomplete fix, I suggest we use this CVE to identify both issues. Link: https://security.snyk.io/research/zip-slip-vulnerability Link: https://bugs.debian.org/774321 Link: https://bugs.debian.org/776831 Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485 Reported-by: Jakub Wilk <jwilk@debian.org> Fixed-by: Michael Gilbert <mgilbert@debian.org> | ||||
| * | Correct case of MSDOS in contrib/minizip/miniunz.c. | William Leara | 2024-01-17 | 1 | -1/+1 |
| | | |||||
| * | Update miniunz version. | tbeu | 2023-08-20 | 1 | -1/+1 |
| | | |||||
| * | Avoid uninitialized and unused warnings in contrib/minizip. | Mark Adler | 2023-08-17 | 1 | -1/+7 |
| | | |||||
| * | Support Haiku in minizip. | Gilles Vollant | 2023-08-03 | 1 | -1/+1 |
| | | |||||
| * | Fix typos found by codespell in minizip | Dimitri Papadopoulos | 2023-07-29 | 1 | -3/+3 |
| | | |||||
| * | Remove K&R function definitions from contrib/minizip. | Mark Adler | 2023-04-15 | 1 | -43/+11 |
| | | |||||
| * | Remove some harmless semicolons in minizip. | Mark Adler | 2022-10-06 | 1 | -1/+1 |
| | | |||||
| * | Clean up minizip to reduce warnings for testing. | Mark Adler | 2022-01-01 | 1 | -13/+13 |
| | | | | | Also fix Makefile test target and permit added compile options. | ||||
| * | Improve portability of contrib/minizip. | Mark Adler | 2021-02-10 | 1 | -5/+4 |
| | | |||||
| * | zlib 1.2.5.1v1.2.5.1 | Mark Adler | 2011-09-11 | 1 | -13/+25 |
| | | |||||
| * | zlib 1.2.3.9v1.2.3.9 | Mark Adler | 2011-09-09 | 1 | -23/+23 |
| | | |||||
| * | zlib 1.2.3.8v1.2.3.8 | Mark Adler | 2011-09-09 | 1 | -4/+4 |
| | | |||||
| * | zlib 1.2.3.5v1.2.3.5 | Mark Adler | 2011-09-09 | 1 | -37/+100 |
| | | |||||
| * | zlib 1.2.3v1.2.3 | Mark Adler | 2011-09-09 | 1 | -585/+585 |
| | | |||||
| * | zlib 1.2.2.3v1.2.2.3 | Mark Adler | 2011-09-09 | 1 | -585/+585 |
| | | |||||
| * | zlib 1.2.2v1.2.2 | Mark Adler | 2011-09-09 | 1 | -2/+2 |
| | | |||||
| * | zlib 1.2.1.2v1.2.1.2 | Mark Adler | 2011-09-09 | 1 | -6/+35 |
| | | |||||
| * | zlib 1.2.0.6v1.2.0.6 | Mark Adler | 2011-09-09 | 1 | -1/+1 |
| | | |||||
| * | zlib 1.2.0.5v1.2.0.5 | Mark Adler | 2011-09-09 | 1 | -556/+556 |
| | | |||||
| * | zlib 1.2.0.2v1.2.0.2 | Mark Adler | 2011-09-09 | 1 | -543/+556 |
| | | |||||
| * | zlib 1.2.0.1v1.2.0.1 | Mark Adler | 2011-09-09 | 1 | -287/+322 |
| | | |||||
| * | zlib 1.1.2v1.1.2 | Mark Adler | 2011-09-09 | 1 | -0/+508 |
 |
index : zlib | |
| A mirror of https://github.com/madler/zlib.git |
| summaryrefslogtreecommitdiff |