Fabrice Fontaine 4616a30c63 package/minizip-zlib: fix CVE-2023-45853 ...

MiniZip in zlib through 1.3 has an integer overflow and resultant
heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long
filename, comment, or extra field. NOTE: MiniZip is not a supported part
of the zlib product.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit de7bc4ada2ab5ef2e4094934acd5271c0aca19a1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2023-10-30 13:40:31 +01:00

..

0001-Reject-overflows-of-zip-header-fields-in-minizip.patch

…

Config.in

…

minizip-zlib.hash

…

minizip-zlib.mk

…