libosip2: add upstream security fix
authorPeter Korsgaard <peter@korsgaard.com>
Sun, 16 Jul 2017 14:23:09 +0000 (16:23 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Sun, 16 Jul 2017 21:25:42 +0000 (23:25 +0200)
commitd8a806e2b81d6f76fa2636a554cd2fbf2fff38ef
treeac960e271a712350e52d3bd9f6e8cc0776ccd096
parent9a0a0a976bc1094719556065ab5e982c6ca27563
libosip2: add upstream security fix

Fixes CVE-2016-10324 - In libosip2 in GNU oSIP 4.1.0, a malformed SIP
message can lead to a heap buffer overflow in the osip_clrncpy() function
defined in osipparser2/osip_port.c.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libosip2/0001-fix-bug-report-sr-109133-Heap-buffer-overflow-in-uti.patch [new file with mode: 0644]