]> code.ossystems Code Review - openembedded-core.git/commit
libpcre: Add fix for CVE-2020-14155
authorRahul Taya <Rahul.Taya@kpit.com>
Thu, 30 Jul 2020 08:41:51 +0000 (14:11 +0530)
committerAnuj Mittal <anuj.mittal@intel.com>
Mon, 10 Aug 2020 00:52:49 +0000 (08:52 +0800)
commit3f536edfa56ce3f93223c23ed48427a0c24ede1a
tree055935b7789fe6d0409f3bef5dc69b78565fbcf6
parent0e8526ce8694ebd6988c3804e4d2ccf39cda90c7
libpcre: Add fix for CVE-2020-14155

Added below patch in libpcre
CVE-2020-14155.patch

This patch fixes below error:
PCRE could allow a remote attacker to execute arbitrary
code on the system, caused by an integer overflow in
libpcre via a large number after (?C substring.
By sending a request with a large number, an attacker
can execute arbitrary code on the system or
cause the application to crash.

Tested-by: Rahul Taya <Rahul.Taya@kpit.com>
Signed-off-by: Saloni Jain <Saloni.Jain@kpit.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch [new file with mode: 0644]
meta/recipes-support/libpcre/libpcre_8.43.bb