summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb
diff options
context:
space:
mode:
authorJunling Zheng <zhengjunling@huawei.com>2015-05-04 03:22:26 +0000
committerJoe MacDonald <joe_macdonald@mentor.com>2015-05-08 15:40:28 -0400
commitff3c52f44da3cd8c2e350677c85d161b9819ddcc (patch)
tree15dfe1c1af0d0424bc26d82b7f1e43264c3e16c6 /meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb
parent2cb54ed8a103c56fcf42d4a363d175dbdc094489 (diff)
downloadmeta-openembedded-ff3c52f44da3cd8c2e350677c85d161b9819ddcc.tar.gz
net-snmp: fix CVE-2014-2285
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044 Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb')
-rw-r--r--meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb
index 1baf101d9..c9a692dd6 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb
@@ -19,6 +19,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.zip \
19 file://fix-libtool-finish.patch \ 19 file://fix-libtool-finish.patch \
20 file://net-snmp-testing-add-the-output-format-for-ptest.patch \ 20 file://net-snmp-testing-add-the-output-format-for-ptest.patch \
21 file://run-ptest \ 21 file://run-ptest \
22 file://0001-Fix-CVE-2014-2285.patch \
22" 23"
23 24
24SRC_URI[md5sum] = "a2c83518648b0f2a5d378625e45c0e18" 25SRC_URI[md5sum] = "a2c83518648b0f2a5d378625e45c0e18"