]> code.ossystems Code Review - openembedded-core.git/commit
rsync: fix CVEs for included zlib
authorAnuj Mittal <anuj.mittal@intel.com>
Wed, 6 Nov 2019 15:37:58 +0000 (17:37 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 6 Nov 2019 20:44:15 +0000 (20:44 +0000)
commit1ce0a922853b6136a019763b64e58194bb0df00f
treeb8818c98518f22945fe01bbf95fc29da4a706620
parenta879a194aae0f1e97f3683f5ce01eaa8b5c0dd15
rsync: fix CVEs for included zlib

rsync includes its own copy of zlib and doesn't recommend linking with
the system version [1].

Import CVE fixes that impact zlib version 1.2.8 [2] that is currently used
by rsync.

[1] https://git.samba.org/rsync.git/?p=rsync.git;a=blob;f=zlib/README.rsync
[2] https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe%3a%2fa%3agnu%3azlib%3a1.2.8

(From OE-Core rev: a55fbb4cb489853dfb0b4553f6e187c3f3633f48)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Conflicts:
meta/recipes-devtools/rsync/rsync_3.1.3.bb
meta/recipes-devtools/rsync/files/CVE-2016-9840.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9841.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9842.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9843.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/rsync_3.1.3.bb