diff options
Diffstat (limited to 'meta/recipes-extended/unzip')
7 files changed, 7 insertions, 0 deletions
diff --git a/meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch b/meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch index 9ba3c1dc62..afc4c734a7 100644 --- a/meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch +++ b/meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch | |||
@@ -3,6 +3,7 @@ Subject: unzip files encoded with non-latin, non-unicode file names | |||
3 | Last-Update: 2015-02-11 | 3 | Last-Update: 2015-02-11 |
4 | 4 | ||
5 | Upstream-Status: Backport | 5 | Upstream-Status: Backport |
6 | CVE: CVE-2015-1315 | ||
6 | 7 | ||
7 | Updated 2015-02-11 by Marc Deslauriers <marc.deslauriers@canonical.com> | 8 | Updated 2015-02-11 by Marc Deslauriers <marc.deslauriers@canonical.com> |
8 | to fix buffer overflow in charset_to_intern() | 9 | to fix buffer overflow in charset_to_intern() |
diff --git a/meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch b/meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch index e137f0dc76..0e497cc65f 100644 --- a/meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch +++ b/meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch | |||
@@ -5,6 +5,7 @@ Bug-Debian: http://bugs.debian.org/773722 | |||
5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz | 5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz |
6 | 6 | ||
7 | Upstream-Status: Backport | 7 | Upstream-Status: Backport |
8 | CVE: CVE-2014-8139 | ||
8 | 9 | ||
9 | Signed-off-by: Roy Li <rongqing.li@windriver.com> | 10 | Signed-off-by: Roy Li <rongqing.li@windriver.com> |
10 | 11 | ||
diff --git a/meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch b/meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch index edc7d515b0..c989df1896 100644 --- a/meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch +++ b/meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch | |||
@@ -5,6 +5,7 @@ Bug-Debian: http://bugs.debian.org/773722 | |||
5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz | 5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz |
6 | 6 | ||
7 | Upstream-Status: Backport | 7 | Upstream-Status: Backport |
8 | CVE: CVE-2014-8140 | ||
8 | 9 | ||
9 | Signed-off-by: Roy Li <rongqing.li@windriver.com> | 10 | Signed-off-by: Roy Li <rongqing.li@windriver.com> |
10 | 11 | ||
diff --git a/meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch b/meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch index d0c1db3925..c48c23f304 100644 --- a/meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch +++ b/meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch | |||
@@ -5,6 +5,7 @@ Bug-Debian: http://bugs.debian.org/773722 | |||
5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz | 5 | The patch comes from unzip_6.0-8+deb7u2.debian.tar.gz |
6 | 6 | ||
7 | Upstream-Status: Backport | 7 | Upstream-Status: Backport |
8 | CVE: CVE-2014-8141 | ||
8 | 9 | ||
9 | Signed-off-by: Roy Li <rongqing.li@windriver.com> | 10 | Signed-off-by: Roy Li <rongqing.li@windriver.com> |
10 | 11 | ||
diff --git a/meta/recipes-extended/unzip/unzip/CVE-2015-7696.patch b/meta/recipes-extended/unzip/unzip/CVE-2015-7696.patch index ea93823cbe..87eed965d0 100644 --- a/meta/recipes-extended/unzip/unzip/CVE-2015-7696.patch +++ b/meta/recipes-extended/unzip/unzip/CVE-2015-7696.patch | |||
@@ -1,4 +1,5 @@ | |||
1 | Upstream-Status: Backport | 1 | Upstream-Status: Backport |
2 | CVE: CVE-2015-7696 | ||
2 | Signed-off-by: Tudor Florea <tudor.flore@enea.com> | 3 | Signed-off-by: Tudor Florea <tudor.flore@enea.com> |
3 | 4 | ||
4 | From 68efed87fabddd450c08f3112f62a73f61d493c9 Mon Sep 17 00:00:00 2001 | 5 | From 68efed87fabddd450c08f3112f62a73f61d493c9 Mon Sep 17 00:00:00 2001 |
diff --git a/meta/recipes-extended/unzip/unzip/CVE-2015-7697.patch b/meta/recipes-extended/unzip/unzip/CVE-2015-7697.patch index da68988338..a8f293674b 100644 --- a/meta/recipes-extended/unzip/unzip/CVE-2015-7697.patch +++ b/meta/recipes-extended/unzip/unzip/CVE-2015-7697.patch | |||
@@ -1,4 +1,5 @@ | |||
1 | Upstream-Status: Backport | 1 | Upstream-Status: Backport |
2 | CVE: CVE-2015-7697 | ||
2 | Signed-off-by: Tudor Florea <tudor.flore@enea.com> | 3 | Signed-off-by: Tudor Florea <tudor.flore@enea.com> |
3 | 4 | ||
4 | From bd8a743ee0a77e65ad07ef4196c4cd366add3f26 Mon Sep 17 00:00:00 2001 | 5 | From bd8a743ee0a77e65ad07ef4196c4cd366add3f26 Mon Sep 17 00:00:00 2001 |
diff --git a/meta/recipes-extended/unzip/unzip/cve-2014-9636.patch b/meta/recipes-extended/unzip/unzip/cve-2014-9636.patch index 0a0bfbbb17..5fcd318b25 100644 --- a/meta/recipes-extended/unzip/unzip/cve-2014-9636.patch +++ b/meta/recipes-extended/unzip/unzip/cve-2014-9636.patch | |||
@@ -4,6 +4,7 @@ Date: Wed, 11 Feb 2015 | |||
4 | Subject: Info-ZIP UnZip buffer overflow | 4 | Subject: Info-ZIP UnZip buffer overflow |
5 | 5 | ||
6 | Upstream-Status: Backport | 6 | Upstream-Status: Backport |
7 | CVE: CVE-2014-9636 | ||
7 | 8 | ||
8 | By carefully crafting a corrupt ZIP archive with "extra fields" that | 9 | By carefully crafting a corrupt ZIP archive with "extra fields" that |
9 | purport to have compressed blocks larger than the corresponding | 10 | purport to have compressed blocks larger than the corresponding |