Roy Li 9f363a9c8a unzip: Security Advisory -CVE-2014-9636 and CVE-2015-1315 ...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9636

unzip 6.0 allows remote attackers to cause a denial of service
(out-of-bounds read or write and crash) via an extra field with
an uncompressed size smaller than the compressed field size in a
zip archive that advertises STORED method compression.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1315

Buffer overflow in the charset_to_intern function in unix/unix.c in
Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code
via a crafted string, as demonstrated by converting a string from CP866
to UTF-8.

(From OE-Core rev: f86a178fd7036541a45bf31a46bddf634c133802)

(From OE-Core rev: 7c667c6aa0302649c125b0325a2e6f641810cb09)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-07-20 20:54:33 +01:00

..

classes

license.bbclass: set dirs for do_populate_lic_setscene

2015-07-20 20:54:31 +01:00

conf

security_flags: disable PIE on expect

2015-02-11 17:40:10 +00:00

files

files/toolchain-shar-template.sh: fix replace target_sdk_dir twice in environment setup file

2015-04-17 22:39:31 +01:00

lib

split_and_strip_files: regroup hardlinks to make build deterministic

2015-05-15 18:13:40 +01:00

recipes-bsp

pciutils: Fix multilib header conflict - pci/config.h

2014-12-31 10:18:33 +00:00

recipes-connectivity

ppp: Security Advisory - CVE-2015-3310

2015-07-20 20:54:33 +01:00

recipes-core

glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

2015-07-20 20:54:33 +01:00

recipes-devtools

e2fsprogs: install populate-extfs.sh

2015-07-20 20:54:33 +01:00

recipes-extended

unzip: Security Advisory -CVE-2014-9636 and CVE-2015-1315

2015-07-20 20:54:33 +01:00

recipes-gnome

gdk-pixbuf: use ptest-gnome

2014-12-31 10:18:52 +00:00

recipes-graphics

mesa: update --with-llvm-shared-libs configure option

2015-07-20 20:54:33 +01:00

recipes-kernel

perf: add LIBNUMA_DEFINES

2015-07-20 20:54:31 +01:00

recipes-lsb4

libpod-plainer-perl: Upgrade to 1.04

2014-07-17 12:28:52 +01:00

recipes-multimedia

libsndfile: Security Advisory - libsndfile - CVE-2014-9496

2015-07-20 20:54:32 +01:00

recipes-qt

qt4: add patch for BMP denial-of-service vulnerability

2015-07-20 20:54:32 +01:00

recipes-rt

hwlatdetect: fix PV

2014-06-17 10:23:53 +01:00

recipes-sato

packagegroup: Move inherit packagegroup to after PACKAGE_ARCH

2014-08-25 08:57:44 +01:00

recipes-support

gpgme: fix CVE-2014-3564

2015-07-20 20:54:33 +01:00

site

site/common-darwin: Really fix common-darwin typo

2014-08-18 10:00:26 +01:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

meta/recipes.txt: add recipes-lsb4

2013-04-10 09:23:17 +01:00