diff options
author | Armin Kuster <akuster@mvista.com> | 2015-01-21 12:43:11 -0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-02-11 17:40:07 +0000 |
commit | 620718b05d946144e0e4c05b5fdbec0d79fd77fb (patch) | |
tree | b675c23a826c47b28cd441a90e156af7a7fe9215 /meta/recipes-core/glibc/glibc_2.20.bb | |
parent | 8b255bd4910bc8ed0308cea6b605e88e6f453abd (diff) | |
download | poky-620718b05d946144e0e4c05b5fdbec0d79fd77fb.tar.gz |
glibc: CVE-2014-9402 endless loop in getaddr_r
The getnetbyname function in glibc 2.21 in earlier will enter an infinite loop
if the DNS backend is activated in the system Name Service Switch
configuration, and the DNS resolver receives a positive answer while processing
the network name.
(From OE-Core rev: f03bf84c179f69ef4800ed92a4a9d9401d0e5966)
(From OE-Core rev: 7e3f4ddd001f9c50a49d8ba5ab548af311e6b51f)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/glibc/glibc_2.20.bb')
-rw-r--r-- | meta/recipes-core/glibc/glibc_2.20.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/glibc/glibc_2.20.bb b/meta/recipes-core/glibc/glibc_2.20.bb index f67fbfdf0d..8a8b296def 100644 --- a/meta/recipes-core/glibc/glibc_2.20.bb +++ b/meta/recipes-core/glibc/glibc_2.20.bb | |||
@@ -44,6 +44,7 @@ EGLIBCPATCHES = "\ | |||
44 | CVEPATCHES = "\ | 44 | CVEPATCHES = "\ |
45 | file://CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch \ | 45 | file://CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch \ |
46 | file://CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch \ | 46 | file://CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch \ |
47 | file://CVE-2014-9402_endless-loop-in-getaddr_r.patch \ | ||
47 | " | 48 | " |
48 | LIC_FILES_CHKSUM = "file://LICENSES;md5=e9a558e243b36d3209f380deb394b213 \ | 49 | LIC_FILES_CHKSUM = "file://LICENSES;md5=e9a558e243b36d3209f380deb394b213 \ |
49 | file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ | 50 | file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ |