mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-30 00:33:19 +00:00
Benjamin Robin (Schneider Electric)
7eb9410758
A heap memory buffer overflow might occur in a worker process when using a configuration with "ignore_invalid_headers off;" and "large_client_header_buffers" with large configured values when proxying a specially crafted request to gRPC backend, allowing an attacker to cause worker process memory corruption or segmentation fault in a worker process. This is a partial cherry-pick of 131be8514da8985b15b74150521afedbf9cc4ea3 since ngx_http_proxy_v2_module.c does not exist in nginx 1.24 Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to suppliment OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories