Re: Info-ZIP maintainer

Greg Roelofs <[email protected]> Thu, 26 Feb 2004 23:03:13 -0800
Newsgroups gmane.comp.archivers.info-zip
Message-ID <[email protected]>
> I wrote:
> > > I asked if there are other changes to
> > > unz551c, to be integrated into unz551d.

> Greg wrote:
> >And my answer was yes...

> Ok, how can I get them?

Well, following the links on the UnZip page would be a good start.
At least one has further links to various Linux distros' advisories,
each of which has a corresponding patch.  The Debian or Red Hat ones
are probably good targets.

However, I meant what I said ("and/or fixes to be created") quite
literally.  The Linux patches will touch only the Unix subtree, I'm
pretty sure, and there are at least several other OSes that are
vulnerable in all but the symlink case.  If the general solution
is too time-consuming, a quick patch just for the Unix tree would
still be better than nothing, but I would hope that the Unix one
could be adapted to a number of other OSes without too much trouble.

Greg