mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 13:18:36 -09:00
4e73a15a7b
The patch is provided thanks to the Ubuntu community.
- CVE-2021-4217:
A flaw was found in unzip. The vulnerability occurs due to improper
handling of Unicode strings, which can lead to a null pointer
dereference. This flaw allows an attacker to input a specially crafted
zip file, leading to a crash or code execution.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2021-4217
- https://launchpadlibrarian.net/580782282/0001-Fix-null-pointer-dereference-and-use-of-uninitialized-data.patch
- https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1957077
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Peter: correct _IGNORE_CVES entry]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>