unzip: fix four CVE defects

Port four patches from unzip_6.0-8+deb7u2.debian.tar.gz to fix:
     cve-2014-8139
     cve-2014-8140
     cve-2014-8141
     cve-2014-9636

(From OE-Core rev: 5e9f29b1c212f7a067772699e7fc9b6e233baa34)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

1 files changed, 4 insertions, 0 deletions

diff --git a/meta/recipes-extended/unzip/unzip_6.0.bb b/meta/recipes-extended/unzip/unzip_6.0.bb
index 5060d35546..b022f21844 100644
--- a/meta/recipes-extended/unzip/unzip_6.0.bb
+++ b/meta/recipes-extended/unzip/unzip_6.0.bb
@@ -11,6 +11,10 @@ SRC_URI = "ftp://ftp.info-zip.org/pub/infozip/src/unzip60.tgz \
         file://define-ldflags.patch \
         file://06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch \
         file://unzip-6.0_overflow3.diff \
+        file://09-cve-2014-8139-crc-overflow.patch \
+        file://10-cve-2014-8140-test-compr-eb.patch \
+        file://11-cve-2014-8141-getzip64data.patch \
+        file://12-cve-2014-9636-test-compr-eb.patch \
 "
 
 SRC_URI[md5sum] = "62b490407489521db863b523a7f86375"