Debian/libzip: unknown
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers
Action: Upgrade libzip to 0.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10-1 | - |
Fixed versions
| 0.10-1 |
Sources
- osv: DEBIAN-CVE-2011-0421#Debian:14/libzip
- https://security-tracker.debian.org/tracker/CVE-2011-0421
published · modified · JSON