[Midnightbsd-cvs] [MidnightBSD/src] 503b0b: zlib through 1.2.12 has a heap-based buffer over-r...

[Lucas Holt]

  Branch: refs/heads/stable/2.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 503b0bf752059db4724525729944199977da7e18
      https://github.com/MidnightBSD/src/commit/503b0bf752059db4724525729944199977da7e18
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M sys/contrib/zlib/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.

Obtained from: FreeBSD


  Commit: 7d58061756cf235885cb7e090df63e0464086b23
      https://github.com/MidnightBSD/src/commit/7d58061756cf235885cb7e090df63e0464086b23
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M contrib/zlib/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.


  Commit: bb3dc663798c3d49be652ec55f2c4a5f6143cbc5
      https://github.com/MidnightBSD/src/commit/bb3dc663798c3d49be652ec55f2c4a5f6143cbc5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  backport zlib fix


Compare: https://github.com/MidnightBSD/src/compare/7b15676abaa6...bb3dc663798c