]> rtime.felk.cvut.cz Git - coffee/buildroot.git/commit
rsync: add security fix patches
authorBaruch Siach <baruch@tkos.co.il>
Thu, 7 Dec 2017 16:52:23 +0000 (18:52 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Thu, 28 Dec 2017 22:34:26 +0000 (23:34 +0100)
commit60638a279d73e7cc78c1b9217a5729b11325eaca
tree03b33197a37b4f86443fb2bb02dc47d685914e7a
parent9f17c300ce96ab2aedbee5ec4a89fb91e99a3ffe
rsync: add security fix patches

Fixes CVE-2017-17433 and CVE-2017-17434: remote bypass of security
restrictions.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7e0a002df7f3e0b74f99cdc5b6d0a0e165ba1228)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/rsync/0001-Check-fname-in-recv_files-sooner.patch [new file with mode: 0644]
package/rsync/0002-Sanitize-xname-in-read_ndx_and_attrs.patch [new file with mode: 0644]
package/rsync/0003-Check-daemon-filter-against-fnamecmp-in-recv_files.patch [new file with mode: 0644]