diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2023-10-07 21:07:20 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2023-10-09 23:45:35 +0200 |
| commit | 6637af95aa9085c8367ce8184b0fe6917365c3d3 (patch) | |
| tree | 047e2fcf549f70e2cdd777e540d2308a8bfa3e8c /package/utils/bsdiff/Makefile | |
| parent | fadbec8857efddf5d1b55b77af56afac8428a943 (diff) | |
| download | upstream-6637af95aa9085c8367ce8184b0fe6917365c3d3.tar.gz upstream-6637af95aa9085c8367ce8184b0fe6917365c3d3.tar.bz2 upstream-6637af95aa9085c8367ce8184b0fe6917365c3d3.zip | |
bsdiff: Add patches for CVEs
Add two patches from Debian fixing CVEs in the bsdiff application.
CVE-2014-9862: Heap vulnerability in bspatch
CVE-2020-14315: Memory Corruption Vulnerability in bspatch
Copied the patches from this location:
https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/20-CVE-2014-9862.patch
https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/33-CVE-2020-14315.patch
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit cac723e8b8748938b8d80603578c60189fc32b24)
Diffstat (limited to 'package/utils/bsdiff/Makefile')
| -rw-r--r-- | package/utils/bsdiff/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/utils/bsdiff/Makefile b/package/utils/bsdiff/Makefile index 32e59cea9c..d86be2dc0c 100644 --- a/package/utils/bsdiff/Makefile +++ b/package/utils/bsdiff/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=bsdiff PKG_VERSION:=4.3 -PKG_RELEASE:=1 +PKG_RELEASE:=2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://www.daemonology.net/bsdiff/ |