From c38d2a74f762a792046f3d3c377827b08aade513 Mon Sep 17 00:00:00 2001 From: Sana Kazi Date: Fri, 28 May 2021 16:01:25 +0000 Subject: dnsmasq: Add fixes for CVEs reported for dnsmasq Applied single patch for below listed CVEs: CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25687 as they are fixed by single commit http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=4e96a4be685c9e4445f6ee79ad0b36b9119b502a Link: https://www.openwall.com/lists/oss-security/2021/01/19/1 Also, applied patch for below listed CVEs: CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 all CVEs applicable to v2.81 Signed-off-by: Sana Kazi Signed-off-by: Nisha Parrakat [Refreshed patches] Signed-off-by: Armin Kuster --- meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb') diff --git a/meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb b/meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb index 92415386c2..a1dc0f3a0a 100644 --- a/meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb +++ b/meta-networking/recipes-support/dnsmasq/dnsmasq_2.81.bb @@ -4,5 +4,10 @@ SRC_URI[dnsmasq-2.81.md5sum] = "e43808177a773014b5892ccba238f7a8" SRC_URI[dnsmasq-2.81.sha256sum] = "3c28c68c6c2967c3a96e9b432c0c046a5df17a426d3a43cffe9e693cf05804d0" SRC_URI += "\ file://lua.patch \ + file://CVE-2020-25681.patch \ + file://CVE-2020-25684.patch \ + file://CVE-2020-25685-1.patch \ + file://CVE-2020-25685-2.patch \ + file://CVE-2020-25686-1.patch \ + file://CVE-2020-25686-2.patch \ " - -- cgit 1.2.3-korg