]> code.ossystems Code Review - openembedded-core.git/commit
unzip: fix four CVE defects
authorRoy Li <rongqing.li@windriver.com>
Tue, 23 Jun 2015 05:32:06 +0000 (13:32 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 26 Jun 2015 13:08:03 +0000 (14:08 +0100)
commit5e9f29b1c212f7a067772699e7fc9b6e233baa34
tree6e6d6efcbf0f6b7408256b11014593d844c434f2
parent496b3ffba6755bb76709c88cf81399c9d23f830a
unzip: fix four CVE defects

Port four patches from unzip_6.0-8+deb7u2.debian.tar.gz to fix:
     cve-2014-8139
     cve-2014-8140
     cve-2014-8141
     cve-2014-9636

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch [new file with mode: 0644]
meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch [new file with mode: 0644]
meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch [new file with mode: 0644]
meta/recipes-extended/unzip/unzip/12-cve-2014-9636-test-compr-eb.patch [new file with mode: 0644]
meta/recipes-extended/unzip/unzip_6.0.bb