libfcgi:add security patch for CVE-2012-6687
authorniranjan.reddy <niranjan.reddy@rockwellcollins.com>
Tue, 1 Mar 2016 06:21:56 +0000 (11:51 +0530)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 1 Mar 2016 10:18:27 +0000 (11:18 +0100)
commit2311d54ec4a2320505750655c2c3fb4c525e0872
tree52fcab58cc0eebe680c0ce24f9729998ae0bf6f6
parent18f3a22dcefe668a4522a936a0af59a2fa55f707
libfcgi:add security patch for CVE-2012-6687

Fix-CVE-2012-6687 - remote attackers cause a denial of service (crash)
via a large number of connections (http://www.cvedetails.com/cve/CVE-2012-6687/).
use poll in os_unix.c instead of select to avoid problem with > 1024 connections.
The patch libfcgi_2.4.0-8.3.debian.tar.xz is taken from the below link:
(https://launchpad.net/ubuntu/+source/libfcgi/2.4.0-8.3)
The next release of libfcgi is 2.4.1 which may have this fix is yet to be released
officially.

Signed-off-by: Niranjan Reddy <niranjan.reddy@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libfcgi/0006-fix-CVE-2012-6687.patch [new file with mode: 0644]