Description
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | unzip | 5.51-9.EL4.5 | RHSA-2007:0203 |
| RHEL 3 | unzip | 5.50-35.EL3 | RHBA-2007:0418 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | unzip | 6.00-39.1 | openSUSE-SU-2024:11485-1 |
Advisories 5
- RHSA-2007:0203 Red Hat Security Advisory: unzip security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHBA-2007:0418 Red Hat Bug Fix Advisory: unzip bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-903-1 unzip - race condition Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11485-1 unzip-6.00-39.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-21-308-01 VISAM VBASE Editor CISA ICS & IT advisories · Nov 4, 2021
References
- 25098 third-party-advisory
- 17653 third-party-advisory
- http://www.info-zip.org/FAQ.html
- 2005-0053 vendor-advisory
- USN-191-1 vendor-advisory
- 18530 vdb-entry
- 14450 vdb-entry
- 17342 third-party-advisory
- 16985 third-party-advisory
- 20050801 unzip TOCTOU file-permissions vulnerability mailing-list
- 32 third-party-advisory
- DSA-903 vendor-advisory
- RHSA-2007:0203 vendor-advisory
- 17045 third-party-advisory
- 17006 third-party-advisory
- 16309 third-party-advisory
- oval:org.mitre.oval:def:9975 vdb-entry signature
- MDKSA-2005:197 vendor-advisory