Tag: Branch: Tree: 9f418e1028

develop

master

v0.71

v0.79

v0.8

v0.9

v0.91

v0.92

v0.93

v0.94

v0.95

v0.99

v1.0-pre

v1.0.1

v1.0.2

v1.0.4

v1.0.5

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.0.1

v1.2.0.2

v1.2.0.3

v1.2.0.4

v1.2.0.5

v1.2.0.6

v1.2.0.7

v1.2.0.8

v1.2.1

v1.2.1.1

v1.2.1.2

v1.2.10

v1.2.11

v1.2.12

v1.2.13

v1.2.2

v1.2.2.1

v1.2.2.2

v1.2.2.3

v1.2.2.4

v1.2.3

v1.2.3.1

v1.2.3.2

v1.2.3.3

v1.2.3.4

v1.2.3.5

v1.2.3.6

v1.2.3.7

v1.2.3.8

v1.2.3.9

v1.2.4

v1.2.4-pre1

v1.2.4-pre2

v1.2.4.1

v1.2.4.2

v1.2.4.3

v1.2.4.4

v1.2.4.5

v1.2.5

v1.2.5.1

v1.2.5.2

v1.2.5.3

v1.2.6

v1.2.6.1

v1.2.7

v1.2.7.1

v1.2.7.2

v1.2.7.3

v1.2.8

v1.2.9

v1.3

v1.3.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '9f418e1028'

${ noResults }

Commit Graph

24 Commits (9f418e1028d98cd4782fd3a2b883eaaf1a09cae5)

Author	SHA1	Message	Date
Mark Adler	d4eaa1d939	Avoid unterminated file name in contrib/minizip/miniunz.c.	1 year ago
Matt Wilson	14a5f8f266	Neutralize zip file traversal attacks in miniunz. ... Archive formats such as .zip files are generally susceptible to so-called "traversal attacks". This allows an attacker to craft an archive that writes to unexpected locations of the file system (e.g., /etc/shadow) if an unspecting root user were to unpack a malicious archive. This patch neutralizes absolute paths such as /tmp/moo and deeply relative paths such as dummy/../../../../../../../../../../tmp/moo The Debian project requested CVE-2014-9485 be allocated for the first identified weakness. The fix was incomplete, resulting in a revised patch applied here. Since there wasn't an updated version released by Debian with the incomplete fix, I suggest we use this CVE to identify both issues. Link: https://security.snyk.io/research/zip-slip-vulnerability Link: https://bugs.debian.org/774321 Link: https://bugs.debian.org/776831 Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485 Reported-by: Jakub Wilk <jwilk@debian.org> Fixed-by: Michael Gilbert <mgilbert@debian.org>	1 year ago
William Leara	190168cc1c	Correct case of MSDOS in contrib/minizip/miniunz.c.	1 year ago
tbeu	88e50f1705	Update miniunz version.	2 years ago
Mark Adler	25bbd7f5a6	Avoid uninitialized and unused warnings in contrib/minizip.	2 years ago
Gilles Vollant	aa154e3da0	Support Haiku in minizip.	2 years ago
Dimitri Papadopoulos	379bbda363	Fix typos found by codespell in minizip	2 years ago
Mark Adler	bf2578be2d	Remove K&R function definitions from contrib/minizip.	2 years ago
Mark Adler	4572dfbe99	Remove some harmless semicolons in minizip.	2 years ago
Mark Adler	2014a993ad	Clean up minizip to reduce warnings for testing. ... Also fix Makefile test target and permit added compile options.	3 years ago
Mark Adler	0530dbcef9	Improve portability of contrib/minizip.	4 years ago
Mark Adler	10daf0d4d7	zlib 1.2.5.1	14 years ago
Mark Adler	7751bd4c71	zlib 1.2.3.9	14 years ago
Mark Adler	e0ff940e1a	zlib 1.2.3.8	14 years ago
Mark Adler	d004b04783	zlib 1.2.3.5	14 years ago
Mark Adler	abf180a067	zlib 1.2.3	14 years ago
Mark Adler	6b8233bfe0	zlib 1.2.2.3	14 years ago
Mark Adler	79fbcdc939	zlib 1.2.2	14 years ago
Mark Adler	7a6955760b	zlib 1.2.1.2	14 years ago
Mark Adler	f81ba93d4a	zlib 1.2.0.6	14 years ago
Mark Adler	4b5a43a219	zlib 1.2.0.5	14 years ago
Mark Adler	8e34b3a802	zlib 1.2.0.2	14 years ago
Mark Adler	13a294f044	zlib 1.2.0.1	14 years ago
Mark Adler	c34c1fcbb1	zlib 1.1.2	14 years ago