]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 064455b) | patch
file: Security fix CVE-2018-10360
authorYi Zhao <yi.zhao@windriver.com>
Wed, 11 Jul 2018 03:23:44 +0000 (11:23 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 13 Jul 2018 15:32:38 +0000 (16:32 +0100)
commit22886cf6f37d9a5c6ff90e10e0c17ed7f6321305
tree470fdba1e05e1bd9968c4d6f132c1b6df720414btree | snapshot
parent064455bc88f50d633f2ffe6a74c439d8a87c4fdccommit | diff
file: Security fix CVE-2018-10360

CVE-2018-10360: The do_core_note function in readelf.c in libmagic.a in
file 5.33 allows remote attackers to cause a denial of service
(out-of-bounds read and application crash) via a crafted ELF file.

References:
https://nvd.nist.gov/vuln/detail/CVE-2018-10360

Patch from:
https://github.com/file/file/commit/a642587a9c9e2dd7feacdf513c3643ce26ad3c22

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-devtools/file/file/CVE-2018-10360.patch [new file with mode: 0644] blob
meta/recipes-devtools/file/file_5.33.bb diff | blob | history
Mirror of the official openembedded-core repository