With the 17 affected jar files in the current working directory:
unzip 6.0-23:
$ for f in *.jar; do echo $f; unzip -tq $f; done
asm-5.0.3-sources.jar
No errors detected in compressed data of asm-5.0.3-sources.jar.
asm-analysis-5.0.3-sources.jar
No errors detected in compressed data of asm-analysis-5.0.3-sources.jar.
asm-tree-5.0.3-sources.jar
No errors detected in compressed data of asm-tree-5.0.3-sources.jar.
asm-util-5.0.3-sources.jar
No errors detected in compressed data of asm-util-5.0.3-sources.jar.
gradle-kotlin-dsl-5.4.1.jar
No errors detected in compressed data of gradle-kotlin-dsl-5.4.1.jar.
gradle-kotlin-dsl-5.5.1.jar
No errors detected in compressed data of gradle-kotlin-dsl-5.5.1.jar.
gradle-kotlin-dsl-provider-plugins-5.4.1.jar
No errors detected in compressed data of
gradle-kotlin-dsl-provider-plugins-5.4.1.jar.
gradle-kotlin-dsl-provider-plugins-5.5.1.jar
No errors detected in compressed data of
gradle-kotlin-dsl-provider-plugins-5.5.1.jar.
gradle-kotlin-dsl-tooling-builders-5.4.1.jar
No errors detected in compressed data of
gradle-kotlin-dsl-tooling-builders-5.4.1.jar.
gradle-kotlin-dsl-tooling-builders-5.5.1.jar
No errors detected in compressed data of
gradle-kotlin-dsl-tooling-builders-5.5.1.jar.
groovy-all-1.0-2.5.4.jar
No errors detected in compressed data of groovy-all-1.0-2.5.4.jar.
spring-beans-4.2.5.RELEASE-sources.jar
No errors detected in compressed data of
spring-beans-4.2.5.RELEASE-sources.jar.
spring-beans-4.3.16.RELEASE-sources.jar
No errors detected in compressed data of
spring-beans-4.3.16.RELEASE-sources.jar.
spring-beans-4.3.18.RELEASE-sources.jar
No errors detected in compressed data of
spring-beans-4.3.18.RELEASE-sources.jar.
spring-beans-4.3.7.RELEASE-sources.jar
No errors detected in compressed data of
spring-beans-4.3.7.RELEASE-sources.jar.
spring-orm-4.2.5.RELEASE-sources.jar
No errors detected in compressed data of
spring-orm-4.2.5.RELEASE-sources.jar.
spring-orm-4.3.7.RELEASE-sources.jar
No errors detected in compressed data of
spring-orm-4.3.7.RELEASE-sources.jar.
unzip 6.0-24:
$ for f in *.jar; do echo $f; unzip -tq $f; done
asm-5.0.3-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
asm-analysis-5.0.3-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
asm-tree-5.0.3-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
asm-util-5.0.3-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-5.4.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-5.5.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-provider-plugins-5.4.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-provider-plugins-5.5.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-tooling-builders-5.4.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
gradle-kotlin-dsl-tooling-builders-5.5.1.jar
error: invalid zip file with overlapped components (possible zip bomb)
groovy-all-1.0-2.5.4.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-beans-4.2.5.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-beans-4.3.16.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-beans-4.3.18.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-beans-4.3.7.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-orm-4.2.5.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
spring-orm-4.3.7.RELEASE-sources.jar
error: invalid zip file with overlapped components (possible zip bomb)
Kind regards,
--
Ben Caradoc-Davies <b...@transient.nz>
Director
Transient Software Limited <https://transient.nz/>
New Zealand
