[ GLSA 201611-01 ] UnZip

[GLSA]

Gentoo Linux Security Advisory

Title: UnZip: Multiple vulnerabilities (GLSA 201611-01)
Severity: normal
Exploitable: remote
Date: November 01, 2016
Bug(s): #528082, #533748, #537424, #560416
ID: 201611-01

Synopsis

Multiple vulnerabilities have been found in UnZip allowing remote
attackers to execute arbitrary code and cause Denial of Service.


Background

Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP
compressed files.


Affected Packages

Package: app-arch/unzip
Vulnerable: < 6.0_p20
Unaffected: >= 6.0_p20
Architectures: All supported architectures


Description

Multiple vulnerabilities were found in UnZip. Please review the
referenced CVE’s for additional information.


Impact

Remote attackers could execute arbitrary code or cause Denial of
Service.


Workaround

There is no known workaround at this time.

Resolution

All UnZip users should upgrade to the latest version: