[OE-core] [PATCH] unzip: fix CVE-2018-1000035

Alexander Kanavin alex.kanavin at gmail.com
Wed Aug 15 09:53:00 UTC 2018


2018-08-15 11:43 GMT+02:00  <changqing.li at windriver.com>:
> From: Changqing Li <changqing.li at windriver.com>
> +Upstream-Status: Backport
> +
> +backport from unzip6.10c23

The new versions of zip/unzip are now published here
http://antinode.info/ftp/info-zip/

I wonder if we should still consider them 'betas' or as it has been a
decade since the last release, we should just treat them as new
releases.

Alex



More information about the Openembedded-core mailing list