Files
buildroot/package
Peter Korsgaard 6ba6187077 package/atftp: security bump to version 0.7.2
Fixes the following security issues:

CVE-2019-11365: An issue was discovered in atftpd in atftp 0.7.1.  A remote
attacker may send a crafted packet triggering a stack-based buffer overflow
due to an insecurely implemented strncpy call.  The vulnerability is
triggered by sending an error packet of 3 bytes or fewer.  There are
multiple instances of this vulnerable strncpy pattern within the code base,
specifically within tftpd_file.c, tftp_file.c, tftpd_mtftp.c, and
tftp_mtftp.c.

CVE-2019-11366: An issue was discovered in atftpd in atftp 0.7.1.  It does
not lock the thread_list_mutex mutex before assigning the current thread
data structure.  As a result, the daemon is vulnerable to a denial of
service attack due to a NULL pointer dereference.  If thread_data is NULL
when assigned to current, and modified by another thread before a certain
tftpd_list.c check, there is a crash when dereferencing current->next.

For details, see
https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities

Patch 0001-Makefile.am-link-against-libpthread-for-atftp.patch patches
Makefile.am, so add _AUTORECONF.

CFLAGS is now correctly handled since commit f9dbb96844167f (configure.ac:
fix hard setting of CFLAGS), so drop the workaround about passing
-fgnu89-inline in CPPFLAGS.

Add a hash for the license file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: Ryan Barnett <ryan.barnett@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 457837087d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-05-26 09:29:32 +02:00
..
2019-01-12 18:08:12 +01:00
2019-01-28 10:00:22 +01:00
2019-04-29 10:33:15 +02:00
2019-02-04 16:58:17 +01:00
2019-01-15 21:21:25 +01:00
2018-12-13 21:19:33 +01:00
2018-12-03 23:08:20 +01:00
2018-11-29 22:39:00 +01:00
2018-12-02 08:16:10 +01:00
2019-01-23 10:51:03 +01:00
2019-01-06 21:09:12 +01:00
2019-03-19 20:20:09 +01:00
2019-03-27 22:58:42 +01:00
2018-12-14 21:52:53 +01:00
2019-01-20 21:54:22 +01:00
2019-02-26 13:09:27 +01:00
2019-05-01 22:10:31 +02:00
2019-02-06 16:31:06 +01:00
2019-01-15 21:15:50 +01:00
2019-02-05 17:14:01 +01:00
2019-01-22 21:48:43 +01:00
2018-12-14 21:53:00 +01:00
2019-01-28 22:05:52 +01:00
2019-01-28 23:01:09 +01:00
2018-12-14 21:28:48 +01:00
2019-03-25 20:11:02 +01:00
2018-12-31 14:14:22 +01:00
2019-01-15 21:21:48 +01:00
2019-01-15 19:53:18 +01:00
2019-01-28 22:06:07 +01:00
2019-01-17 23:12:46 +01:00
2018-12-02 08:16:10 +01:00
2018-12-08 23:38:33 +01:00
2018-12-02 08:16:10 +01:00
2019-01-16 16:01:59 +01:00
2019-01-20 20:15:32 +01:00
2019-01-19 23:06:09 +01:00
2019-02-12 20:08:45 +01:00
2019-04-26 14:39:39 +02:00
2019-04-26 14:38:10 +02:00
2019-01-22 21:49:58 +01:00
2018-12-09 17:38:50 +01:00
2019-03-27 23:00:28 +01:00
2019-01-13 21:51:02 +01:00
2019-04-26 14:45:44 +02:00
2019-01-16 20:00:19 +01:00
2019-03-25 20:11:02 +01:00
2019-02-06 14:18:01 +01:00
2018-12-09 17:38:50 +01:00
2018-12-02 08:16:10 +01:00
2019-04-24 21:52:51 +02:00
2019-01-01 21:08:04 +01:00
2019-02-04 09:54:46 +01:00
2019-04-26 14:46:24 +02:00
2019-02-05 13:17:44 +01:00
2019-01-17 15:51:24 +01:00
2019-01-20 20:17:43 +01:00
2019-01-19 23:14:28 +01:00
2019-04-24 22:25:16 +02:00
2019-05-10 12:15:02 +02:00
2019-02-04 18:05:01 +01:00
2019-02-02 22:33:06 +01:00
2019-04-26 14:51:32 +02:00
2019-01-27 11:22:35 +01:00
2019-01-27 11:23:16 +01:00
2018-12-16 16:39:59 +01:00
2019-02-06 15:41:12 +01:00
2019-01-27 20:11:49 +01:00
2019-02-06 15:43:47 +01:00
2018-12-02 08:16:10 +01:00
2019-02-06 15:44:24 +01:00
2019-01-12 18:26:20 +01:00
2019-02-06 12:56:26 +01:00
2019-02-22 22:23:34 +01:00
2019-04-26 14:48:42 +02:00
2018-12-27 16:35:55 +01:00
2019-01-08 21:09:15 +01:00
2019-01-16 13:09:21 +01:00
2018-12-27 16:35:53 +01:00
2019-01-24 10:46:12 +01:00
2019-01-19 22:40:18 +01:00
2019-02-24 21:23:41 +01:00
2019-02-04 16:35:51 +01:00
2019-01-27 10:44:12 +01:00
2018-12-08 23:00:33 +01:00
2019-01-14 22:05:56 +01:00
2019-01-15 21:22:02 +01:00
2019-01-08 16:12:29 +01:00
2019-03-25 17:26:52 +01:00
2019-04-24 20:46:22 +02:00
2019-02-28 23:40:30 +01:00
2019-02-12 20:13:40 +01:00
2019-02-06 12:56:26 +01:00
2018-12-02 08:16:10 +01:00