mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-08 17:39:24 +00:00
ez-ipupdate: add CVE tag to CVE-fixing patch
An already existing patch fixes a CVE (CVE-2004-0980), but it since the patch didn't have the CVE tag, the cve checker did not pick it up. Rectify this ommission. CVE details: https://nvd.nist.gov/vuln/detail/CVE-2004-0980 The same patch is used by Gentoo to mitigate this issue. Gentoo CVE advisory: https://security.gentoo.org/glsa/200411-20 Linked Gentoo bug, containing this patch: https://bugs.gentoo.org/69658 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
@@ -1,4 +1,9 @@
|
||||
Upstream-Status: Pending
|
||||
|
||||
This patch is used by Gentoo to mitigate CVE-2004-0980:
|
||||
https://bugs.gentoo.org/69658
|
||||
|
||||
CVE: CVE-2004-0980
|
||||
Upstream-Status: Inactive-Upstream [last commit: 2002]
|
||||
|
||||
Index: ez-ipupdate-3.0.11b7/ez-ipupdate.c
|
||||
===================================================================
|
||||
|
||||
Reference in New Issue
Block a user