Thanks for this investigation! It looks like the overflow is not very harmful, so I'm unmarking this a security bug. A single byte overflow in the bss region is happening, which does not appear to be near any control structures.
** Changed in: unzip (Ubuntu) Status: New => Triaged ** Visibility changed to: Public ** This bug is no longer flagged as a security vulnerability -- Buffer overflow in unzip with hand-crafted ZIP file https://bugs.launchpad.net/bugs/387350 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs