hongxu 00973f130d p7zip: fix CVE-2023-52169 and CVE-2023-52168 ...

According to [1][2], Igor Pavlov, the author of 7-Zip, refused to
provide an advisory or any related change log entries. Have to
backport a part of ./CPP/7zip/Archive/NtfsHandler.cpp from upstream
big commit https://github.com/ip7z/7zip/commit/fc662341e6f85da78ada0e443f6116b978f79f22

[1] https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
[2] https://dfir.ru/wp-content/uploads/2024/07/screenshot-2024-07-03-at-02-13-40-7-zip-_-bugs-_-2402-two-vulnerabilities-in-the-ntfs-handler.png

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2024-12-15 13:52:02 -05:00

..

files

p7zip: fix CVE-2023-52169 and CVE-2023-52168

2024-12-15 13:52:02 -05:00

p7zip_16.02.bb

p7zip: fix CVE-2023-52169 and CVE-2023-52168

2024-12-15 13:52:02 -05:00