]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: e7986a5) | patch
ruby: fix CVE-2017-922{6-9}
authorJoe Slater <jslater@windriver.com>
Fri, 18 Aug 2017 17:43:44 +0000 (10:43 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 19 Aug 2017 08:19:12 +0000 (09:19 +0100)
commitf15f01edbaa431829a50053d07ed6d6b333584c7
tree53e4dfa79172205902709c19b79575bc234d94e1tree | snapshot
parente7986a5493ccd222b82c2388ea8c3bb7004b48ddcommit | diff
ruby: fix CVE-2017-922{6-9}

CVE-2017-9226 : check too big code point value for single byte
CVE-2017-9227 : access to invalid address by reg->dmin value
CVE-2017-9228 : invalid state(CCS_VALUE) in parse_char_class()
CVE-2017-9229 : access to invalid address by reg->dmax value

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9226.patch [new file with mode: 0644] blob
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9227.patch [new file with mode: 0644] blob
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9228.patch [new file with mode: 0644] blob
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9229.patch [new file with mode: 0644] blob
meta/recipes-devtools/ruby/ruby_2.4.1.bb diff | blob | history
Mirror of the official openembedded-core repository