]> code.ossystems Code Review - openembedded-core.git/commit
cups: fix CVE-2020-10001
authorStefan Ghinea <stefan.ghinea@windriver.com>
Thu, 25 Feb 2021 18:41:27 +0000 (20:41 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 10 Mar 2021 00:24:18 +0000 (00:24 +0000)
commitbf8ea2c4d477133196b20a00b4bfb63c7f36de18
treef6b92fdb9e0226e0bab7e73a3e2e530566055083
parent0ede88ee0d5972352d317d1e2c7735b89bffab50
cups: fix CVE-2020-10001

A buffer (read) overflow in the ippReadIO function.

References:
https://nvd.nist.gov/vuln/detail/CVE-2020-10001

Upstream patches:
https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 90eba79bf6f623aa3021eafd0141dad1c3059001)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-extended/cups/cups.inc
meta/recipes-extended/cups/cups/CVE-2020-10001.patch [new file with mode: 0644]