projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9f1256e) | patch
package/libarchive: add upstream security fixes
authorBaruch Siach <baruch@tkos.co.il>
Tue, 12 Feb 2019 16:57:29 +0000 (18:57 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 12 Feb 2019 19:02:03 +0000 (20:02 +0100)
commit0526c9f7819722b2deebf7a15821689ac4ead56a
tree22e9fead9e0622de674f4ac1747d1313ea0f9821tree
parent9f1256e1aae0a1e91e033d51b968415adec117bfcommit | diff
package/libarchive: add upstream security fixes

CVE-2019-1000019: Crash when parsing some 7zip archives.

CVE-2019-1000020: A corrupted or malicious ISO9660 image can cause
read_CE() to loop forever.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libarchive/0005-iso9660-Fail-when-expected-Rockridge-extensions-is-m.patch [new file with mode: 0644] blob
package/libarchive/0006-7zip-fix-crash-when-parsing-certain-archives.patch [new file with mode: 0644] blob