CVS commit: pkgsrc/misc/rpm

["Sevan Janiyan" <sevan%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   sevan
Date:           Sun Mar 22 17:32:55 UTC 2015

Modified Files:
        pkgsrc/misc/rpm: Makefile distinfo
Added Files:
        pkgsrc/misc/rpm/patches: patch-lib_cpio.c

Log Message:
Add patch for CVE-2014-8118 - Integer overflow allows remote attackers to
execute arbitrary code via a crafted CPIO header in the payload section of an
RPM file, which triggers a stack-based buffer overflow.

https://bugzilla.redhat.com/show_bug.cgi?id=1168715

Reviewed by wiz@


To generate a diff of this commit:
cvs rdiff -u -r1.85 -r1.86 pkgsrc/misc/rpm/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/misc/rpm/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/misc/rpm/patches/patch-lib_cpio.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.