poky/meta at f42ef3f50f746d80f8ac956f85a0cee84b51c22f - poky

mirror of https://git.yoctoproject.org/poky synced 2026-06-16 18:09:56 +00:00

Files

T

Li Zhou f42ef3f50f rpcbind: Security Advisory - rpcbind - CVE-2015-7236

rpcbind: Fix memory corruption in PMAP_CALLIT code

Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in
rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of
service (daemon crash) via crafted packets, involving a PMAP_CALLIT
code.

The patch comes from
<http://www.openwall.com/lists/oss-security/2015/09/18/7>, and it hasn't
been in rpcbind upstream yet.

(From OE-Core rev: cc4f62f3627f3804907e8ff9c68d9321979df32b)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-12-01 21:32:06 +00:00

classes

sanity: don't enforce DISPLAY for testimage

2015-12-01 21:32:01 +00:00

conf

meta/conf/machine: use ' inside quoted values

2015-12-01 21:32:05 +00:00

files

toolchain-shar-extract.sh: Ensure it's ran in clean environment

2015-12-01 21:32:02 +00:00

lib

oeqa/sshcontrol: don't source profile