diff options
author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2014-10-01 10:23:53 -0300 |
---|---|---|
committer | Peter Korsgaard <peter@korsgaard.com> | 2014-10-01 15:55:32 +0200 |
commit | fba37d2322e7aec6a0b68a49db23867cdb9a66e4 (patch) | |
tree | 754369568d2cad5587fa07fd64e7a3c65d996f02 /package/rsyslog/rsyslog-0001-revert-strdup.patch | |
parent | d89a2610cfc0274073f5d89efdc95598de757621 (diff) | |
download | buildroot-fba37d2322e7aec6a0b68a49db23867cdb9a66e4.tar.gz buildroot-fba37d2322e7aec6a0b68a49db23867cdb9a66e4.zip |
rsyslog: security bump to version 7.6.6
Fixes CVE-2014-3634 - potential abort when a message with PRI > 191 was
processed if the "pri-text" property was used in active templates, this
could be abused to a remote denial of service from permitted senders.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/rsyslog/rsyslog-0001-revert-strdup.patch')
-rw-r--r-- | package/rsyslog/rsyslog-0001-revert-strdup.patch | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/package/rsyslog/rsyslog-0001-revert-strdup.patch b/package/rsyslog/rsyslog-0001-revert-strdup.patch new file mode 100644 index 0000000000..5e820184d4 --- /dev/null +++ b/package/rsyslog/rsyslog-0001-revert-strdup.patch @@ -0,0 +1,27 @@ +Revert upstream 0403361ac57082dc47840d1f31832f1a0e319078 +It breaks the build when it's defined. + +Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> + +diff -Nura rsyslog-7.6.6.orig/grammar/lexer.c rsyslog-7.6.6/grammar/lexer.c +--- rsyslog-7.6.6.orig/grammar/lexer.c 2014-10-01 10:12:34.960082719 -0300 ++++ rsyslog-7.6.6/grammar/lexer.c 2014-10-01 10:13:24.512769964 -0300 +@@ -1459,7 +1459,6 @@ + #line 32 "lexer.l" + #include "config.h" + #include "parserif.h" +-extern char *strdup(char*); /* somehow we do not get this from string.h... */ + /*%option noyywrap nodefault case-insensitive */ + /* avoid compiler warning: `yyunput' defined but not used */ + #define YY_NO_INPUT 1 +diff -Nura rsyslog-7.6.6.orig/grammar/lexer.l rsyslog-7.6.6/grammar/lexer.l +--- rsyslog-7.6.6.orig/grammar/lexer.l 2014-10-01 10:12:34.960082719 -0300 ++++ rsyslog-7.6.6/grammar/lexer.l 2014-10-01 10:13:41.935363172 -0300 +@@ -31,7 +31,6 @@ + %{ + #include "config.h" + #include "parserif.h" +-extern char *strdup(char*); /* somehow we do not get this from string.h... */ + %} + + %option noyywrap nodefault case-insensitive yylineno |