summaryrefslogtreecommitdiffstats
path: root/meta/recipes-graphics/xorg-xserver
diff options
context:
space:
mode:
authorLi Wang <li.wang@windriver.com>2012-12-13 15:24:07 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2012-12-17 17:24:56 +0000
commitc511d0eb40d5567a828cb21666b2e05ed7ef1168 (patch)
treef282ca110a3aad4f96d920666eafc40b4a8bd325 /meta/recipes-graphics/xorg-xserver
parentcdb398935ec1c4e15e2be6b0fe98f696c9e280fc (diff)
downloadpoky-c511d0eb40d5567a828cb21666b2e05ed7ef1168.tar.gz
cups CVE-2011-3170
the patch come from: http://cups.org/strfiles/3914/str3914.patch The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170 [YOCTO #3583] [ CQID: WIND00299594 ] Upstream-Status: Backport (From OE-Core rev: c82517bb667484854eaa05b6e9efd9ee0f164fec) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-graphics/xorg-xserver')
0 files changed, 0 insertions, 0 deletions