diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-16 15:15:05 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-25 06:20:37 -0800 |
| commit | b8832293c542062a1f1277f54df06c6309034a4d (patch) | |
| tree | 8176c9db90a8c2ed86ee2b473b68b9acec2d9453 /scripts/patchtest | |
| parent | 29909c9cf6f4362f68403760747f23556d1cfb30 (diff) | |
| download | poky-b8832293c542062a1f1277f54df06c6309034a4d.tar.gz | |
rsync: fix CVE-2024-12085
A flaw was found in the rsync daemon which could be triggered when rsync compares
file checksums. This flaw allows an attacker to manipulate the checksum length
(s2length) to cause a comparison between a checksum and uninitialized memory and
leak one byte of uninitialized stack data at a time.
(From OE-Core rev: fb8439e856d5ea10d12180020a14442c3b101e56)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/patchtest')
0 files changed, 0 insertions, 0 deletions