Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1214230

Bug#1067451: Libzip update would help with web development

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

I’m coming here in support for bumping libzip, specifically for

https://github.com/nih-at/libzip/issues/341

This is causing trouble for various web development projects which need to
accept end-user uploaded ZIP files and which want to be as sure as possible
that the ZIP file is formatted correctly before touching it.

Unfortunately, a very widely-used ZIP utility (the one built into macOS)
produces slightly malformed ZIP files which cause this extra validation to
fail.

Furthermore, version 1.7 of libzip does not provide any means for a caller
to determine which part of the consistency checks have failed, whereas
versions 1.10 and later provide an additional field in the error structure
that would allow callers to opt out of specific consistency checks and
which would also help with debugging third-party ZIP files failing
validation.

I’m aware that things are complicated due to Debian patches not applying to
later versions (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004588#10),
but still, I think the improved error reporting especially would warrant a
bump of the upstream library.

Thank you

Philip

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#1067451: Libzip update would help with web development Philip Hofstetter <phofstetter@sensational.ch> - 2024-09-25 15:00 +0200

csiph-web