diff options
| author |   Roy Li <rongqing.li@windriver.com> | 2015-06-23 13:32:06 +0800 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-06-26 14:08:03 +0100 |
| commit | 5e9f29b1c212f7a067772699e7fc9b6e233baa34 (patch) | |
| tree | 6e6d6efcbf0f6b7408256b11014593d844c434f2 /meta/recipes-extended/unzip/unzip_6.0.bb | |
| parent | 496b3ffba6755bb76709c88cf81399c9d23f830a (diff) | |
| download | openembedded-core-5e9f29b1c212f7a067772699e7fc9b6e233baa34.tar.gz | |
unzip: fix four CVE defects
Port four patches from unzip_6.0-8+deb7u2.debian.tar.gz to fix:
cve-2014-8139
cve-2014-8140
cve-2014-8141
cve-2014-9636
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-extended/unzip/unzip_6.0.bb')
| -rw-r--r-- | meta/recipes-extended/unzip/unzip_6.0.bb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/meta/recipes-extended/unzip/unzip_6.0.bb b/meta/recipes-extended/unzip/unzip_6.0.bb index 5060d35546..b022f21844 100644 --- a/meta/recipes-extended/unzip/unzip_6.0.bb +++ b/meta/recipes-extended/unzip/unzip_6.0.bb @@ -11,6 +11,10 @@ SRC_URI = "ftp://ftp.info-zip.org/pub/infozip/src/unzip60.tgz \ file://define-ldflags.patch \ file://06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch \ file://unzip-6.0_overflow3.diff \ + file://09-cve-2014-8139-crc-overflow.patch \ + file://10-cve-2014-8140-test-compr-eb.patch \ + file://11-cve-2014-8141-getzip64data.patch \ + file://12-cve-2014-9636-test-compr-eb.patch \ " SRC_URI[md5sum] = "62b490407489521db863b523a7f86375" |