USN-7054-1: unzip vulnerability
It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7054-1?
The severity of USN-7054-1 is classified as potentially critical due to the possibility of denial of service.
How do I fix USN-7054-1?
To fix USN-7054-1, update the unzip package to version 6.0-28ubuntu4.1 or later.
What issue does USN-7054-1 address?
USN-7054-1 addresses a vulnerability in unzip related to improper handling of unicode strings.
Who is affected by USN-7054-1?
Users running unzip version 6.0-28ubuntu4 or earlier on Ubuntu 24.04 are affected by USN-7054-1.
What could happen if I ignore USN-7054-1?
If ignored, exploiting the vulnerability in USN-7054-1 could lead to crashes of the unzip utility, causing denial of service.