linux/meta-el-common.git - Commmon distro layer for Enea Linux

	Commit message (Collapse)	Author	Age	Files	Lines
*	glibc: CVE-2017-8804	Sona Sarmadi	2017-09-15	2	-0/+226
\| \| \| \| \| \| \| \| \| \| \| \|	Fixes memory leak in sunrpc when decoding malformed XDR References: https://security-tracker.debian.org/tracker/CVE-2017-8804 Upstream patch: https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>
*	glibc:CVE-2017-12132	Sona Sarmadi	2017-09-11	2	-0/+867
\| \| \| \| \| \| \| \| \| \| \| \| \|	The DNS stub resolver in the glibc or libc6 before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation. Reference: https://security-tracker.debian.org/tracker/CVE-2017-12132 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>
*	glibc: CVE-2017-1000366	Sona Sarmadi	2017-09-11	2	-0/+59
	glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Reference: https://security-tracker.debian.org/tracker/CVE-2017-1000366 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>