openwrt/package
Petr Štetiar f65edc9b99 zlib: backport security fix for a reproducible crash in compressor
Tavis has just reported, that he was recently trying to track down a
reproducible crash in a compressor. Believe it or not, it really was a
bug in zlib-1.2.11 when compressing (not decompressing!) certain inputs.

Tavis has reported it upstream, but it turns out the issue has been
public since 2018, but the patch never made it into a release. As far as
he knows, nobody ever assigned it a CVE.

Suggested-by: Tavis Ormandy <taviso@gmail.com>
References: https://www.openwall.com/lists/oss-security/2022/03/24/1
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b3aa2909a7)
(cherry picked from commit 3965dda0fa)
2022-03-24 09:40:12 +01:00
..
base-files base-files: call "sync" after initial setup 2022-03-14 08:51:02 +01:00
boot uboot-bcm4908: use "xxd" from staging_dir 2022-03-15 18:55:08 +01:00
devel binutils: fix libbfd missing DSO dependency if NLS enabled 2021-04-10 14:22:28 +02:00
firmware linux-firmware: amd: consolidate amd's linux-firmware entries 2021-12-29 23:45:37 +01:00
kernel kernel: add kmod-ledtrig-pattern 2022-01-08 21:31:15 +01:00
libs zlib: backport security fix for a reproducible crash in compressor 2022-03-24 09:40:12 +01:00
network hostapd: add STA extended capabilities to get_clients 2022-03-20 01:32:36 +01:00
system rpcd: backport 802.11ax support 2022-02-19 10:01:03 +01:00
utils busybox: backport dd support for iflag=count_bytes 2022-01-03 14:28:13 +01:00
Makefile build: fix opkg install step for large package selection 2021-12-31 17:55:29 +01:00