libarchive: add security patch for CVE-2016-1541
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Wed, 11 May 2016 17:55:43 +0000 (14:55 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Wed, 11 May 2016 20:04:00 +0000 (22:04 +0200)
commit156633ace8195997c374f901f5e61772f31b1ddc
tree950ac2e4cfbd51e2d96fb7607bc023e526c174e3
parent5883703bcd840663d1afb2f618febc276f00da92
libarchive: add security patch for CVE-2016-1541

Fixes:
CVE-2016-1541 - heap-based buffer overflow vulnerability in the
zip_read_mac_metadata function in libarchive, a multi-format archive and
compression library, which may lead to the execution of arbitrary code
if a user or automated system is tricked into processing a specially
crafted ZIP file.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libarchive/0001-fix-CVE-2016-1541.patch [new file with mode: 0644]