6.0 P20 or newer would be good
dburger@ will look at this as a starter bug. He starts tomorrow.
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/e36cc804973930bc2acd5a2694288273b06c7c5f commit e36cc804973930bc2acd5a2694288273b06c7c5f Author: David Burger <dburger@google.com> Date: Tue Aug 07 08:50:53 2018 unzip: upgraded package to upstream Upgraded app-arch/unzip to version 6.0_p21-r2 on amd64, arm BUG=chromium:763062 TEST=`emerge unzip` `emerge-amd-64-generic unzip` `emerge-arm-generic unzip` Change-Id: Ie184856cd507af49b833448765c7a0a7a5a5ea52 Reviewed-on: https://chromium-review.googlesource.com/1162935 Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com> Tested-by: Don Garrett <dgarrett@chromium.org> Reviewed-by: Don Garrett <dgarrett@chromium.org> [modify] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/app-arch/unzip/Manifest [delete] https://crrev.com/1d0367326dc8a4f2a04a6625394ecb4cd2214698/app-arch/unzip/unzip-6.0-r3.ebuild [delete] https://crrev.com/1d0367326dc8a4f2a04a6625394ecb4cd2214698/app-arch/unzip/files/unzip-5.52-no-exec-stack.patch [add] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/app-arch/unzip/unzip-6.0_p21-r2.ebuild [add] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/app-arch/unzip/files/unzip-6.0-format-security.patch [modify] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/app-arch/unzip/metadata.xml [modify] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/app-arch/unzip/files/unzip-6.0-natspec.patch [rename] https://crrev.com/e36cc804973930bc2acd5a2694288273b06c7c5f/metadata/md5-cache/app-arch/unzip-6.0_p21-r2 [delete] https://crrev.com/1d0367326dc8a4f2a04a6625394ecb4cd2214698/app-arch/unzip/files/unzip-5.52-CVE-2008-0888.patch
Comment 1 by athilenius@chromium.org
, Sep 15 2017