mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-26 07:37:14 +00:00
Gyorgy Sarvari
85f7185fec
An already existing patch fixes a CVE (CVE-2004-0980), but it since the patch didn't have the CVE tag, the cve checker did not pick it up. Rectify this ommission. CVE details: https://nvd.nist.gov/vuln/detail/CVE-2004-0980 The same patch is used by Gentoo to mitigate this issue. Gentoo CVE advisory: https://security.gentoo.org/glsa/200411-20 Linked Gentoo bug, containing this patch: https://bugs.gentoo.org/69658 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
21 lines
578 B
Diff
21 lines
578 B
Diff
|
|
This patch is used by Gentoo to mitigate CVE-2004-0980:
|
|
https://bugs.gentoo.org/69658
|
|
|
|
CVE: CVE-2004-0980
|
|
Upstream-Status: Inactive-Upstream [last commit: 2002]
|
|
|
|
Index: ez-ipupdate-3.0.11b7/ez-ipupdate.c
|
|
===================================================================
|
|
--- ez-ipupdate-3.0.11b7.orig/ez-ipupdate.c
|
|
+++ ez-ipupdate-3.0.11b7/ez-ipupdate.c
|
|
@@ -798,7 +798,7 @@ void show_message(char *fmt, ...)
|
|
sprintf(buf, "message incomplete because your OS sucks: %s\n", fmt);
|
|
#endif
|
|
|
|
- syslog(LOG_NOTICE, buf);
|
|
+ syslog(LOG_NOTICE, "%s", buf);
|
|
}
|
|
else
|
|
{
|