From cef136b5f09827a8d1e98a0dce0380449ed61cd4 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 29 Dec 2025 10:07:12 +0100 Subject: [PATCH] package/avahi: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch adds the relevant information to the patch header and adds the `Upstream` trailer. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- .checkpackageignore | 1 - package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch | 4 ++-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.checkpackageignore b/.checkpackageignore index b0ebd9c49e..c8bc36efe7 100644 --- a/.checkpackageignore +++ b/.checkpackageignore @@ -218,7 +218,6 @@ package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream package/automake/0001-noman.patch lib_patch.Upstream -package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch lib_patch.Upstream package/avahi/S05avahi-setup.sh lib_sysv.Indent lib_sysv.Variables package/avahi/S50avahi-daemon lib_sysv.Indent lib_sysv.Variables package/babeld/S50babeld Shellcheck lib_sysv.Indent lib_sysv.Variables diff --git a/package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch b/package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch index 7e191e8da7..c2c6434196 100644 --- a/package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch +++ b/package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch @@ -9,8 +9,8 @@ Add missing NULL pointer checks to fix it. Introduced in #175 - merge commit 8f75a045709a780c8cf92a6a21e9d35b593bdecd -[Retrieved from: -https://github.com/lathiat/avahi/commit/9d31939e55280a733d930b15ac9e4dda4497680c] +CVE: CVE-2021-36217 +Upstream: https://github.com/lathiat/avahi/commit/9d31939e55280a733d930b15ac9e4dda4497680c Signed-off-by: Fabrice Fontaine --- avahi-core/browse-dns-server.c | 5 ++++-