From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dan.rpsys.net (5751f4a1.skybroadband.com [87.81.244.161]) by mail.openembedded.org (Postfix) with ESMTP id E43C960670 for ; Sun, 28 Jun 2015 12:37:36 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id t5SCbbDM026551; Sun, 28 Jun 2015 13:37:37 +0100 Received: from dan.rpsys.net ([127.0.0.1]) by localhost (dan.rpsys.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id aDtNib30E35V; Sun, 28 Jun 2015 13:37:37 +0100 (BST) Received: from [192.168.3.10] ([192.168.3.10]) (authenticated bits=0) by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id t5SCbMdQ026539 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Sun, 28 Jun 2015 13:37:33 +0100 Message-ID: <1435495042.7287.2.camel@linuxfoundation.org> From: Richard Purdie To: rongqing.li@windriver.com Date: Sun, 28 Jun 2015 13:37:22 +0100 In-Reply-To: <1435108341-25026-1-git-send-email-rongqing.li@windriver.com> References: <1435108341-25026-1-git-send-email-rongqing.li@windriver.com> X-Mailer: Evolution 3.12.10-0ubuntu1~14.10.1 Mime-Version: 1.0 Cc: openembedded-core@lists.openembedded.org Subject: Re: [PATCH][v2] unzip: fix three CVE defects X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jun 2015 12:37:42 -0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Wed, 2015-06-24 at 09:12 +0800, rongqing.li@windriver.com wrote: > From: Roy Li > > Port four patches from unzip_6.0-8+deb7u2.debian.tar.gz to fix: > cve-2014-8139 > cve-2014-8140 > cve-2014-8141 > > Signed-off-by: Roy Li I've gone and mixed up patches for this one and merged the wrong one. Could you send a patch to fix the patches in master to be the correct ones please? Sorry about that. Cheers, Richard