<feed xmlns='http://www.w3.org/2005/Atom'>
<title>buildroot/package/unzip, branch 2019.02-op-build</title>
<subtitle>OpenPOWER buildroot sources</subtitle>
<id>https://git.raptorcs.com/git/buildroot/atom?h=2019.02-op-build</id>
<link rel='self' href='https://git.raptorcs.com/git/buildroot/atom?h=2019.02-op-build'/>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/'/>
<updated>2019-02-22T13:45:04+00:00</updated>
<entry>
<title>package/unzip: add security and bug fix patches from Debian</title>
<updated>2019-02-22T13:45:04+00:00</updated>
<author>
<name>Baruch Siach</name>
<email>baruch@tkos.co.il</email>
</author>
<published>2019-02-22T05:36:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=872561cd5b35d0516338cd2530a4ac1236d3efb1'/>
<id>urn:sha1:872561cd5b35d0516338cd2530a4ac1236d3efb1</id>
<content type='text'>
Debian bug #741384: Buffer overflow

Debian bug #744212: Buffer overflow

CVE-2014-8139: CRC32 verification heap-based overflow

CVE-2014-8140: Out-of-bounds write issue in test_compr_eb()

CVE-2014-8141: Out-of-bounds read issues in getZip64Data()

CVE-2014-9636: Heap overflow

CVE-2015-7696: Heap overflow when extracting password-protected archive

CVE-2015-7697: Infinite loop when extracting password-protected archive

Red Hat Bugzilla #1260944: Unsigned overflow on invalid input

Debian bug #842993: Do not ignore Unix Timestamps

CVE-2014-9913: Buffer overflow

CVE-2016-9844: Buffer overflow in zipinfo

CVE-2018-1000035: Buffer overflow in password protected ZIP archives

Cc: Luca Ceresoli &lt;luca@lucaceresoli.net&gt;
Signed-off-by: Baruch Siach &lt;baruch@tkos.co.il&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>package/busybox: invert dependency with unzip</title>
<updated>2018-07-08T10:22:14+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2018-07-08T09:45:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=faa21d4d22e1d8aac2313dcdc2f4bb9274ca59f5'/>
<id>urn:sha1:faa21d4d22e1d8aac2313dcdc2f4bb9274ca59f5</id>
<content type='text'>
Signed-off-by: Yann E. MORIN &lt;yann.morin.1998@free.fr&gt;
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) &lt;arnout@mind.be&gt;
</content>
</entry>
<entry>
<title>package: move busybox show others dependency to per-package</title>
<updated>2016-07-04T14:12:38+00:00</updated>
<author>
<name>Thomas Petazzoni</name>
<email>thomas.petazzoni@free-electrons.com</email>
</author>
<published>2016-07-04T13:46:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=1dbd7b991025a8bf39ab5d25c2fd97f47f084bac'/>
<id>urn:sha1:1dbd7b991025a8bf39ab5d25c2fd97f47f084bac</id>
<content type='text'>
Having the BR2_PACKAGE_BUSYBOX_SHOW_OTHERS dependencies in
package/Config.in is not very practical: it makes this file not very
readable, and puts the dependency away from the package itself, which
can sometimes be confusing. Therefore, this commit moves the dependency
in each package Config.in file.

Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>unzip: new package</title>
<updated>2015-12-18T21:06:32+00:00</updated>
<author>
<name>Luca Ceresoli</name>
<email>luca@lucaceresoli.net</email>
</author>
<published>2015-12-01T10:53:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=8a536fef7f76f2e4be3b92bd653f1d9bb968ebca'/>
<id>urn:sha1:8a536fef7f76f2e4be3b92bd653f1d9bb968ebca</id>
<content type='text'>
Signed-off-by: Luca Ceresoli &lt;luca@lucaceresoli.net&gt;
Cc: Romain Naour &lt;romain.naour@openwide.fr&gt;
Cc: Jan Pedersen &lt;jp@jp-embedded.com&gt;
Cc: Arnout Vandecappelle &lt;arnout@mind.be&gt;
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) &lt;arnout@mind.be&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
</feed>
