Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=krogoth-next 2016-02-11T22:33:39+00:00 2016-02-11T22:33:39+00:00 Armin Kuster akuster@mvista.com 2016-02-10T22:18:24+00:00 urn:sha1:72c6b6257fd98cf8f6a37e9f14b98a3a3844e5da This update includes: CVE-2016-2090 Heap buffer overflow in fgetwln function of libbsd libbsd 0.8.1 and earlier contains a buffer overflow in the function fgetwln(). An if checks if it is necessary to reallocate memory in the target buffer. However this check is off by one, therefore an out of bounds write happens. Upstream has released version 0.8.2 to fix this. (From OE-Core rev: 29053ff82bf28da45eef9d7e85d6d3ce7060daf6) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>