Divya Chellam 68c9f9f449 zlib: fix CVE-2014-9485 ...

Directory traversal vulnerability in the do_extract_currentfile
function in miniunz.c in miniunzip in minizip before 1.1-5 might
allow remote attackers to write to arbitrary files via a crafted
entry in a ZIP archive.

Reference:
https://security-tracker.debian.org/tracker/CVE-2014-9485

Upstream-patch:
https://github.com/madler/zlib/commit/14a5f8f266c16c87ab6c086fc52b770b27701e01

(From OE-Core rev: 32c4b28fc06e39ab8ef86aebc5e1e1ae19934495)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-04-04 08:42:47 -07:00

..

0001-configure-Pass-LDFLAGS-to-link-tests.patch

…

CVE-2014-9485.patch

zlib: fix CVE-2014-9485

2025-04-04 08:42:47 -07:00

CVE-2018-25032.patch

zlib: backport the fix for CVE-2018-25032

2022-03-30 13:07:41 +01:00

CVE-2022-37434.patch

zlib: CVE-2022-37434 a heap-based buffer over-read

2022-08-23 15:22:52 +01:00

CVE-2023-45853.patch

zlib: patch CVE-2023-45853

2023-10-25 04:45:50 -10:00

ldflags-tests.patch

…

run-ptest

…