diff -Nru unzip-6.0/debian/changelog unzip-6.0/debian/changelog --- unzip-6.0/debian/changelog 2022-10-07 13:09:47.000000000 -0400 +++ unzip-6.0/debian/changelog 2024-02-01 10:54:32.000000000 -0500 @@ -1,3 +1,11 @@ +unzip (6.0-25ubuntu1.2) focal; urgency=medium + + * Properly handle Microsoft ZIP64 file (LP: #2051952) + - debian/patches/handle_windows_zip64.patch: ignore invalid "Total + number of disks" field in process.c. + + -- Marc Deslauriers Thu, 01 Feb 2024 10:54:32 -0500 + unzip (6.0-25ubuntu1.1) focal-security; urgency=medium * SECURITY UPDATE: Null pointer dereference in unzip (LP: #1957077) diff -Nru unzip-6.0/debian/patches/handle_windows_zip64.patch unzip-6.0/debian/patches/handle_windows_zip64.patch --- unzip-6.0/debian/patches/handle_windows_zip64.patch 1969-12-31 19:00:00.000000000 -0500 +++ unzip-6.0/debian/patches/handle_windows_zip64.patch 2024-02-01 10:54:17.000000000 -0500 @@ -0,0 +1,18 @@ +Description: Properly handle Microsoft ZIP64 file by ignoring invalid + "Total number of disks" field +Origin: https://sourceforge.net/p/infozip/bugs/42/ +Bug: https://sourceforge.net/p/infozip/bugs/42/ +Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/2051952 +Author: Roy Tam + +--- a/process.c ++++ b/process.c +@@ -1279,7 +1279,7 @@ static int find_ecrec64(__G__ searchlen) + fprintf(stdout,"\nnumber of disks (ECR) %u, (ECLOC64) %lu\n", + G.ecrec.number_this_disk, ecloc64_total_disks); fflush(stdout); + #endif +- if ((G.ecrec.number_this_disk != 0xFFFF) && ++ if ((G.ecrec.number_this_disk != 0xFFFF) && ecloc64_total_disks && + (G.ecrec.number_this_disk != ecloc64_total_disks - 1)) { + /* Note: For some unknown reason, the developers at PKWARE decided to + store the "zip64 total disks" value as a counter starting from 1, diff -Nru unzip-6.0/debian/patches/series unzip-6.0/debian/patches/series --- unzip-6.0/debian/patches/series 2022-10-07 13:09:35.000000000 -0400 +++ unzip-6.0/debian/patches/series 2024-02-01 10:54:17.000000000 -0500 @@ -26,3 +26,4 @@ CVE-2021-4217.patch CVE-2022-0529.patch CVE-2022-0530.patch +handle_windows_zip64.patch