]> code.ossystems Code Review - openembedded-core.git/commit
rsync: fix CVEs for included zlib
authorAnuj Mittal <anuj.mittal@intel.com>
Wed, 21 Aug 2019 01:58:16 +0000 (09:58 +0800)
committerArmin Kuster <akuster808@gmail.com>
Wed, 4 Sep 2019 15:22:02 +0000 (08:22 -0700)
commit93ce13106abc05f4a68a6265590e3770f0bf49a2
tree3ad47d753da410f03b5e5db31e2bb19dd972a9c5
parent219befc2dad0c6df171f46725c995ce0038fa4f8
rsync: fix CVEs for included zlib

rsync includes its own copy of zlib and doesn't recommend linking with
the system version [1].

Import CVE fixes that impact zlib version 1.2.8 [2] that is currently used
by rsync.

[1] https://git.samba.org/rsync.git/?p=rsync.git;a=blob;f=zlib/README.rsync
[2] https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe%3a%2fa%3agnu%3azlib%3a1.2.8

(From OE-Core rev: a55fbb4cb489853dfb0b4553f6e187c3f3633f48)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-devtools/rsync/files/CVE-2016-9840.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9841.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9842.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/files/CVE-2016-9843.patch [new file with mode: 0644]
meta/recipes-devtools/rsync/rsync_3.1.3.bb