Mikko Rapeli 60ca60be6f zip: whitelist CVE-2018-13410 and CVE-2018-13684 ...

https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and
also Debian considers it not a vulnerability:

https://security-tracker.debian.org/tracker/CVE-2018-13410

http://seclists.org/fulldisclosure/2018/Jul/24
"Negligible security impact, would involve that a untrusted party controls the -TT value."

https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this:

https://security-tracker.debian.org/tracker/CVE-2018-13684

"NOT-FOR-US: smart contract implementation for ZIP"

(From OE-Core rev: f0314a6937a63b3274bcd84817476834c1de876e)

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-01-27 09:32:45 +00:00

..

zip-3.0

zip: Add patch fixing zipnote segfault

2020-01-10 21:18:22 +00:00

zip_3.0.bb

zip: whitelist CVE-2018-13410 and CVE-2018-13684

2021-01-27 09:32:45 +00:00