projects / openwrt / staging / zorun.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5d8ea6d) | patch
busybox: backport fix for CVE-2021-28831
authorHauke Mehrtens <hauke@hauke-m.de>
Sun, 2 May 2021 15:42:19 +0000 (17:42 +0200)
committerHauke Mehrtens <hauke@hauke-m.de>
Sun, 2 May 2021 17:06:02 +0000 (19:06 +0200)
commit13397b2b95b4800fb0a29c3d483fa280d10f0eb0
tree19566e5ad7fd642231e98168e989e6e5990502b2tree | snapshot
parent5d8ea6d34f9f23d4dfff4ffcac8c9599d842c3a8commit | diff
busybox: backport fix for CVE-2021-28831

This backports a fix for the low priority CVE-2021-28831:
  decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit
  on the huft_build result pointer, with a resultant invalid free or
  segmentation fault, via malformed gzip data.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
package/utils/busybox/Makefile diff | blob | history
package/utils/busybox/patches/005-backport-CVE-2021-28831.patch [new file with mode: 0644] blob
Staging tree of Baptiste Jonglez