unzip: actually apply CVE-2018-18384

(From OE-Core rev: d8e1b7afc536f989e7e6efdab0998d54f26ad1f6)

(From OE-Core rev: 1a42e6401369ffaf02f4711c01f757007f831cc8)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Ross Burton
2018-11-09 16:28:36 +00:00
committed by Richard Purdie
parent 0995109f36
commit 2ddc94e8e6

View File

@@ -21,6 +21,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/infozip/UnZip%206.x%20%28latest%29/UnZip%206.0/
file://19-cve-2016-9844-zipinfo-buffer-overflow.patch \
file://symlink.patch \
file://0001-unzip-fix-CVE-2018-1000035.patch \
file://CVE-2018-18384.patch \
"
UPSTREAM_VERSION_UNKNOWN = "1"