]> code.ossystems Code Review - openembedded-core.git/commit
systemd: CVE-2016-7795
authorChen Qi <Qi.Chen@windriver.com>
Wed, 26 Oct 2016 06:09:47 +0000 (14:09 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 6 Nov 2016 23:35:16 +0000 (23:35 +0000)
commit543570cafa8d7f595b489d03d05f0aa4478f8539
tree475d3c30c929a59992eba14c350952d2c7128580
parentf4d70bb0882eec4fb46cd942f2796fad57c72982
systemd: CVE-2016-7795

The manager_invoke_notify_message function in systemd 231 and earlier allows
local users to cause a denial of service (assertion failure and PID 1 hang)
via a zero-length message received over a notify socket.

The patch is a backport from the latest git repo.

Please see the link below for more information.
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7795

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-core/systemd/systemd/CVE-2016-7795.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd_230.bb