Petr Štetiar 0af411f49d zlib: backport security fix for a reproducible crash in compressor ... Tavis has just reported, that he was recently trying to track down a reproducible crash in a compressor. Believe it or not, it really was a bug in zlib-1.2.11 when compressing (not decompressing!) certain inputs. Tavis has reported it upstream, but it turns out the issue has been public since 2018, but the patch never made it into a release. As far as he knows, nobody ever assigned it a CVE. Runtime tested on ipq40xx/glinet-b1300 and mvebu/turris-omnia. Suggested-by: Tavis Ormandy <taviso@gmail.com> References: https://www.openwall.com/lists/oss-security/2022/03/24/1 Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit b3aa2909a7) (cherry picked from commit 3965dda0fa) (cherry picked from commit f65edc9b99)		2022-03-24 10:02:01 +01:00
..
base-files	base-files: call "sync" after initial setup	2022-03-15 10:15:39 +01:00
boot	uboot-lantiq: danube: fix hanging lzma kernel uncompression #2	2021-11-27 22:55:25 +01:00
devel	perf: build with NO_LIBCAP=1	2020-05-05 00:05:28 +02:00
firmware	wireless-regdb: update to version 2021.08.28	2021-11-07 19:49:57 +01:00
kernel	mac80211: Update to version 4.19.221	2021-12-14 23:38:30 +01:00
libs	zlib: backport security fix for a reproducible crash in compressor	2022-03-24 10:02:01 +01:00
network	hostapd: Apply SAE/EAP-pwd side-channel attack update 2	2022-02-13 19:14:38 +01:00
system	ubus: backport fixes for UAF and other issues	2022-02-21 07:41:05 +01:00
utils	busybox: delete redundant patch	2020-08-12 11:10:16 +02:00
Makefile	packages: apply usign padding workarounds to package indexes if needed	2019-08-07 07:22:37 +02:00