diff --git a/.checkpackageignore b/.checkpackageignore index 2e33117c5d..55d54aa5be 100644 --- a/.checkpackageignore +++ b/.checkpackageignore @@ -1031,7 +1031,6 @@ package/shadowsocks-libev/0003-lib-Makefile.am-remove-static-from-LDFLAGS.patch package/shairport-sync/S99shairport-sync Shellcheck lib_sysv.Indent lib_sysv.Variables package/shared-mime-info/0001-Remove-incorrect-dependency-from-install-data-hook.patch lib_patch.Upstream package/shellinabox/0001-Makefile-disable-always-building-statically.patch lib_patch.Upstream -package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch lib_patch.Upstream package/skeleton-init-systemd/fakeroot_tmpfiles.sh Shellcheck package/slang/0001-slsh-libs.patch lib_patch.Upstream package/smcroute/S41smcroute NotExecutable lib_sysv.Indent lib_sysv.Variables diff --git a/package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch b/package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch index 4b15f419e3..5067833056 100644 --- a/package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch +++ b/package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch @@ -4,7 +4,9 @@ Date: Fri, 26 Oct 2018 11:51:15 +0200 Subject: [PATCH] fix for broken multipart/form-data Malformed multipart/form-data payload results in infinite loop and thus denial of service -[Upstream status: https://github.com/shellinabox/shellinabox/pull/446] + +CVE: CVE-2018-16789 +Upstream: https://github.com/shellinabox/shellinabox/pull/446 Signed-off-by: Fabrice Fontaine --- libhttp/url.c | 3 +++