diff options
| author | Soumya Sambu <soumya.sambu@windriver.com> | 2024-03-20 12:35:50 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2024-03-25 07:11:05 -0400 |
| commit | bb16c640dd4604063a0c2aa6ee7cb4d9d5746e58 (patch) | |
| tree | d947e07315dbd1097e967c404dd9531b6c589ce6 /meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb | |
| parent | 9a22be4267b39bcdbcea4d7496a6867a40153c93 (diff) | |
| download | meta-openembedded-bb16c640dd4604063a0c2aa6ee7cb4d9d5746e58.tar.gz | |
unixodbc: Fix CVE-2024-1013
An out-of-bounds stack write flaw was found in unixODBC on 64-bit
architectures where the caller has 4 bytes and callee writes 8 bytes.
This issue may go unnoticed on little-endian architectures, while
big-endian architectures can be broken.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-1013
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb')
| -rw-r--r-- | meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb b/meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb index c194739cb1..283546cf0e 100644 --- a/meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb +++ b/meta-oe/recipes-support/unixodbc/unixodbc_2.3.9.bb | |||
| @@ -10,6 +10,7 @@ DEPENDS = "libtool readline" | |||
| 10 | 10 | ||
| 11 | SRC_URI = "http://ftp.unixodbc.org/unixODBC-${PV}.tar.gz \ | 11 | SRC_URI = "http://ftp.unixodbc.org/unixODBC-${PV}.tar.gz \ |
| 12 | file://do-not-use-libltdl-source-directory.patch \ | 12 | file://do-not-use-libltdl-source-directory.patch \ |
| 13 | file://CVE-2024-1013.patch \ | ||
| 13 | " | 14 | " |
| 14 | SRC_URI[sha256sum] = "52833eac3d681c8b0c9a5a65f2ebd745b3a964f208fc748f977e44015a31b207" | 15 | SRC_URI[sha256sum] = "52833eac3d681c8b0c9a5a65f2ebd745b3a964f208fc748f977e44015a31b207" |
| 15 | 16 | ||