patch: apply upstream cve fixes
authorRussell Senior <russell@personaltelco.net>
Sun, 14 Oct 2018 09:34:32 +0000 (02:34 -0700)
committerJo-Philipp Wich <jo@mein.io>
Tue, 18 Dec 2018 16:22:06 +0000 (17:22 +0100)
commited32045bcc645e15b5e9f44061efa218024d5137
tree9470914724e9432b44195270f440e9609a44db6b
parentab64f9da81c72cad4ca88c0af1e3a7ba0fa7685c
patch: apply upstream cve fixes

Apply two upstream patches to address two CVEs:

 * CVE-2018-1000156
 * CVE-2018-6952

Add PKG_CPE_ID to Makefile.

Build tested on apm821xx and ar71xx.

Signed-off-by: Russell Senior <russell@personaltelco.net>
(backported from 4797dddfde6a8ffdbdcb4e5b5e137b0a00313f62)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
tools/patch/Makefile
tools/patch/patches/010-CVE-2018-1000156.patch [new file with mode: 0644]
tools/patch/patches/020-CVE-2018-6952.patch [new file with mode: 0644]