A massively spiffy yet delicately unobtrusive compression library. (grpc依赖)

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tag: Branch: Tree: 6201f89384

develop

master

v0.71

v0.79

v0.8

v0.9

v0.91

v0.92

v0.93

v0.94

v0.95

v0.99

v1.0-pre

v1.0.1

v1.0.2

v1.0.4

v1.0.5

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.0.1

v1.2.0.2

v1.2.0.3

v1.2.0.4

v1.2.0.5

v1.2.0.6

v1.2.0.7

v1.2.0.8

v1.2.1

v1.2.1.1

v1.2.1.2

v1.2.10

v1.2.11

v1.2.12

v1.2.13

v1.2.2

v1.2.2.1

v1.2.2.2

v1.2.2.3

v1.2.2.4

v1.2.3

v1.2.3.1

v1.2.3.2

v1.2.3.3

v1.2.3.4

v1.2.3.5

v1.2.3.6

v1.2.3.7

v1.2.3.8

v1.2.3.9

v1.2.4

v1.2.4-pre1

v1.2.4-pre2

v1.2.4.1

v1.2.4.2

v1.2.4.3

v1.2.4.4

v1.2.4.5

v1.2.5

v1.2.5.1

v1.2.5.2

v1.2.5.3

v1.2.6

v1.2.6.1

v1.2.7

v1.2.7.1

v1.2.7.2

v1.2.7.3

v1.2.8

v1.2.9

v1.3

v1.3.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '6201f89384'

${ noResults }

zlib/contrib/minizip

History

Matt Wilson 14a5f8f266 Neutralize zip file traversal attacks in miniunz. ... Archive formats such as .zip files are generally susceptible to so-called "traversal attacks". This allows an attacker to craft an archive that writes to unexpected locations of the file system (e.g., /etc/shadow) if an unspecting root user were to unpack a malicious archive. This patch neutralizes absolute paths such as /tmp/moo and deeply relative paths such as dummy/../../../../../../../../../../tmp/moo The Debian project requested CVE-2014-9485 be allocated for the first identified weakness. The fix was incomplete, resulting in a revised patch applied here. Since there wasn't an updated version released by Debian with the incomplete fix, I suggest we use this CVE to identify both issues. Link: https://security.snyk.io/research/zip-slip-vulnerability Link: https://bugs.debian.org/774321 Link: https://bugs.debian.org/776831 Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485 Reported-by: Jakub Wilk <jwilk@debian.org> Fixed-by: Michael Gilbert <mgilbert@debian.org>		1 year ago
..
Makefile	…
Makefile.am	…
MiniZip64_Changes.txt	…
MiniZip64_info.txt	…
configure.ac	…
crypt.h	…
ioapi.c	…
ioapi.h	Correct repeated words in source file comments and a readme.	1 year ago
iowin32.c	…
iowin32.h	…
make_vms.com	…
miniunz.c	Neutralize zip file traversal attacks in miniunz.	1 year ago
miniunzip.1	…
minizip.1	…
minizip.c	…
minizip.pc.in	…
mztools.c	…
mztools.h	…
unzip.c	Fix random typos over several source and text files.	1 year ago
unzip.h	Fix random typos over several source and text files.	1 year ago
zip.c	Fix random typos over several source and text files.	1 year ago
zip.h	Correct repeated words in source file comments and a readme.	1 year ago