infozip: privilege escalation, directory-traversal

infozip: privilege escalation, directory-traversal

This was actually reported long ago, though the fix didn't come out until two months ago. And the UnZip vulnerabilities are even older news, having been fixed in Slackware almost two years ago and covered here at the same time.

Relevant CVE #s are CAN-2003-0282, CAN-2004-1010, and CAN-2005-0602. Some issues, like the symlink-traversal one, were never assigned a CVE number.

Greg