]> code.ossystems Code Review - openembedded-core.git/commit
busybox: CVE-2017-15874
authorSinan Kaya <okaya@kernel.org>
Sat, 22 Sep 2018 02:16:48 +0000 (02:16 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 27 Sep 2018 11:16:47 +0000 (12:16 +0100)
commitc35a0355a3561cd17703ece3a66c3389ceb224bf
tree7b7384e3bc2debdb9329fa408b48e1bf89842438
parent2f84939b0e17dfba1fc43bf053871ea930d9a04c
busybox: CVE-2017-15874

* CVE-2017-15874
busybox: Integer underflow in archival/libarchive/decompress_unlzma.c

(cherry picked from 9ac42c500586fa5f10a1f6d22c3f797df11b1f6b)

Affects busybox <= 1.27.2

CVE: CVE-2017-15874
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15874
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-core/busybox/busybox/CVE-2017-15874.patch [new file with mode: 0644]
meta/recipes-core/busybox/busybox_1.27.2.bb