archivers/zip - 3.0_6

Дата публикации: 15-08-2026 19:32:57

archivers/zip: fix command injection vulnerability
Insufficient quoting in the -T option gave rise to the possibility of
a command injection. Apply a fix from the Debian project.
Reported by: nimaje (via IRC)
See also: https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
MFH: 2026Q3

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	archivers/minizip - 1.3.2	0	13.67	15-08-2026
2	Max severity SAP Commerce Cloud flaw now targeted in attacks	0	9.23	14-08-2026
3	CVE-2026-17431: PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for	0	11.54	13-08-2026
4	Microsoft patches LegacyHive Windows zero-day vulnerability	0	14.69	13-08-2026
5	CVE-2026-73194: DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse	0	9.69	15-08-2026
6	Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay	0	15	28-07-2026
7	textproc/librevenge - 0.0.6	0	5	13-07-2026
8	CVE-2026-73193: DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse	0	8.75	15-08-2026
9	New U-Boot flaws could enable stealthy firmware attacks	-2	7	10-07-2026
10	CVE Request: BlueZ AVRCP Out-of-Bounds Read (CWE-125)	0	9.12	14-08-2026

Классификация: Общество. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 8.48. Источник: www.freshports.org.