diff options
| author | Wenzong Fan <wenzong.fan@windriver.com> | 2014-11-12 03:25:48 -0500 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-11-20 14:08:10 +0000 |
| commit | 07a31ed4d19edf7eec47cdf2a65b0dc53e2c713c (patch) | |
| tree | 99b5211a3de9fd73ec08da91cd269d8186ed0f70 /README | |
| parent | 587b28b551308c8b772d088788452f6ca7420909 (diff) | |
| download | poky-07a31ed4d19edf7eec47cdf2a65b0dc53e2c713c.tar.gz | |
python: Fix CVE-2014-7185
Integer overflow in bufferobject.c in Python before 2.7.8 allows
context-dependent attackers to obtain sensitive information from
process memory via a large size and offset in a "buffer" function.
This back-ported patch fixes CVE-2014-7185
(From OE-Core rev: 49ceed974e39ab8ac4be410e5caa5e1ef7a646d9)
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions