mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-21 08:08:29 +00:00
Aravind Bandari
de904fbb90
Pillow prior to 12.3.0, when loading an uncompressed McIdas AREA image through the mmap raw codec path, allows an attacker-controlled row stride smaller than the natural row width, causing pixel access to read beyond the mapped region and disclose adjacent process memory or fault. Ensure the map stride is at least one full row of pixels. Backport the patch to fix CVE-2026-54058 https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-54058 Signed-off-by: Aravind Bandari <aravind.bandari@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories