diff options
| author | Polampalli, Archana <archana.polampalli@windriver.com> | 2023-07-20 11:35:41 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2023-08-03 16:47:53 -0400 |
| commit | 83f5741bd53ae3eafee33fdbf52dbacc593e3c95 (patch) | |
| tree | fa9a9da904a737c56947caa7c9c59159bb7da34b /meta-oe/recipes-devtools/yasm/yasm_git.bb | |
| parent | 4da92ed9be41734f6ced46b981958e2e868cbff2 (diff) | |
| download | meta-openembedded-83f5741bd53ae3eafee33fdbf52dbacc593e3c95.tar.gz | |
yasm: fix CVE-2023-31975
yasm v1.3.0 was discovered to contain a memory leak via the function
yasm_intnum_copy at /libyasm/intnum.c.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-31975
https://github.com/yasm/yasm/issues/210
Upstream patches:
https://github.com/yasm/yasm/commit/b2cc5a1693b17ac415df76d0795b15994c106441
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-oe/recipes-devtools/yasm/yasm_git.bb')
| -rw-r--r-- | meta-oe/recipes-devtools/yasm/yasm_git.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-devtools/yasm/yasm_git.bb b/meta-oe/recipes-devtools/yasm/yasm_git.bb index 044fcbea74..5c3562300b 100644 --- a/meta-oe/recipes-devtools/yasm/yasm_git.bb +++ b/meta-oe/recipes-devtools/yasm/yasm_git.bb | |||
| @@ -11,6 +11,7 @@ PV = "1.3.0+git${SRCPV}" | |||
| 11 | SRCREV = "ba463d3c26c0ece2e797b8d6381b161633b5971a" | 11 | SRCREV = "ba463d3c26c0ece2e797b8d6381b161633b5971a" |
| 12 | SRC_URI = "git://github.com/yasm/yasm.git;branch=master;protocol=https \ | 12 | SRC_URI = "git://github.com/yasm/yasm.git;branch=master;protocol=https \ |
| 13 | file://0001-Do-not-use-AC_HEADER_STDC.patch \ | 13 | file://0001-Do-not-use-AC_HEADER_STDC.patch \ |
| 14 | file://CVE-2023-31975.patch \ | ||
| 14 | " | 15 | " |
| 15 | 16 | ||
| 16 | S = "${WORKDIR}/git" | 17 | S = "${WORKDIR}/git" |