From 7f93052dc5cefe7ecc8c1288e3bc77e3c5b400d6 Mon Sep 17 00:00:00 2001 From: Li Zhou Date: Wed, 2 Sep 2015 11:03:39 +0800 Subject: libunwind: Security Advisory - libunwind - CVE-2015-3239 libunwind: Invalid dwarf opcodes can cause references beyond the end of the array Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. (From OE-Core rev: 9c4e7f5c009b076b0bc638a02fcf3d96c362e7eb) Signed-off-by: Li Zhou Signed-off-by: Richard Purdie --- meta/recipes-support/libunwind/libunwind_1.1.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-support/libunwind/libunwind_1.1.bb') diff --git a/meta/recipes-support/libunwind/libunwind_1.1.bb b/meta/recipes-support/libunwind/libunwind_1.1.bb index ee6f522d68..8282c1b71a 100644 --- a/meta/recipes-support/libunwind/libunwind_1.1.bb +++ b/meta/recipes-support/libunwind/libunwind_1.1.bb @@ -5,6 +5,7 @@ SRC_URI += "\ file://AArch64-port.patch \ file://Fix-test-case-link-failure-on-PowerPC-systems-with-Altivec.patch \ file://Link-libunwind-to-libgcc_s-rather-than-libgcc.patch \ + file://0001-Invalid-dwarf-opcodes-can-cause-references-beyond-th.patch \ " SRC_URI[md5sum] = "fb4ea2f6fbbe45bf032cd36e586883ce" -- cgit v1.2.3-54-g00ecf