Fedora Core 3: 2005-845 Moderate: Resolution for Archive Unzip TOCTOU Issue

The unzip utility is used to list, test, or extract files from a zip

archive. Zip archives are commonly found on MS-DOS systems. The zip

utility, included in the zip package, creates zip archives. Zip and

unzip are both compatible with archives created by PKWARE(R)'s PKZIP

for MS-DOS, but the programs' options and default behaviors do differ

in some respects.

This update fixes TOCTOU issue in unzip.

- fix bug 164928 - TOCTOU issue in unzip

1986eb3284676935cf5a089c9895f530 SRPMS/unzip-5.51-4.fc3.src.rpm

88158ea088b919096576f2bf1067c93c x86_64/unzip-5.51-4.fc3.x86_64.rpm

33f279a5938435cba79e1e9926548572 x86_64/debug/unzip-debuginfo-5.51-4.fc3.x86_64.rpm

3cbb410a6e2ea6e2af8d60ab9cc4bfce i386/unzip-5.51-4.fc3.i386.rpm

044b3d0355e3d624b0f0c08b0bfef950 i386/debug/unzip-debuginfo-5.51-4.fc3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list

fedora-announce-list@redhat.com