diff options
| author | Tudor Florea <tudor.florea@enea.com> | 2015-10-29 01:14:18 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-11-02 12:26:39 +0000 |
| commit | 96cab332674aa48f69269e753aaed3af15851d6a (patch) | |
| tree | 7fa2e807ee5f1bb1a2d2339cde08358b4f718ab1 /meta/recipes-core/images | |
| parent | 1b2a94245a8337e8a055c64e180f9e0f63f04d17 (diff) | |
| download | poky-96cab332674aa48f69269e753aaed3af15851d6a.tar.gz | |
unzip: CVE-2015-7696, CVE-2015-7697
CVE-2015-7696: Fixes a heap overflow triggered by unzipping a file with password
CVE-2015-7697: Fixes a denial of service with a file that never finishes unzipping
References:
http://www.openwall.com/lists/oss-security/2015/10/11/5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7696
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7697
(From OE-Core rev: a11b23a7d2a29414a4ea47c411f09a68b1b28e2d)
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/images')
0 files changed, 0 insertions, 0 deletions