diff options
| author | Li Wang <li.wang@windriver.com> | 2013-01-07 11:10:01 +0000 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2013-01-07 11:32:14 +0000 |
| commit | 923852c9522b15ffda9885a38a174ada61c90528 (patch) | |
| tree | 37a1d67f355cdf1c8cebde9c8105e75fe9a18bbd /meta/recipes-gnome/librsvg/librsvg_2.32.1.bb | |
| parent | abc622145cf05c3115bad8cf1fbc64a621b72df4 (diff) | |
| download | poky-923852c9522b15ffda9885a38a174ada61c90528.tar.gz | |
cups CVE-2011-3170
the patch come from:
http://cups.org/strfiles/3914/str3914.patch
The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and
earlier does not properly handle the first code word in an LZW stream,
which allows remote attackers to trigger a heap-based buffer overflow,
and possibly execute arbitrary code, via a crafted stream, a different
vulnerability than CVE-2011-2896.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170
[YOCTO #3583]
[ CQID: WIND00299594 ]
Upstream-Status: Backport
(From OE-Core rev: c82517bb667484854eaa05b6e9efd9ee0f164fec)
(From OE-Core rev: 1f555a6a45eb68011cbe759acf486ac507a6599c)
Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-gnome/librsvg/librsvg_2.32.1.bb')
0 files changed, 0 insertions, 0 deletions