The unzip package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues.
VERSION 6.0-2 => 6.0-3 CHANGELOG [Sun, 1 Nov 2015 16:21:56 +0100 8a70dde] Patch CVE-2015-7696, CVE-2015-7697 and integer underflow CHANGES utils/unzip/Makefile | 2 +- .../005-CVE-2015-7696-heap-overflow.patch | 21 +++++++++++++++++ .../006-CVE-2015-7697-infinite-loop.patch | 15 ++++++++++++ ...007-integer-underflow-csiz_decrypted.patch | 21 +++++++++++++++++ 4 files changed, 58 insertions(+), 1 deletion(-) REFERENCES * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7696 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7697 * https://github.com/openwrt/packages/commit/8a70ddefc782fd955080a6eba2cfc2578d057c6e _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel