[DSA 6440-1] unzip security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6440-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
August 14, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : unzip
CVE ID         : not yet available
Debian Bug     : 1142906

Akhil Koul discovered a vulnerability in the Info-ZIP unzip program,
which could result in the execution of arbitrary code if a specially
crafted file is processed.

For the stable distribution (trixie), this problem has been fixed in
version 6.0-29+deb13u1.

We recommend that you upgrade your unzip packages.

For the detailed security status of unzip please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/unzip

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=20yB
-----END PGP SIGNATURE-----