diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-16 15:51:14 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-24 07:49:28 -0800 |
| commit | a1fab4c1a99c39792891fb84979f3f6f72c9bb68 (patch) | |
| tree | 7cca137f259684818fad884a14cfbb0aa87fc616 /scripts/pybootchartgui/pybootchartgui.py | |
| parent | b7070c567a9cae98741d98b9104bf83c5d47bf68 (diff) | |
| download | poky-a1fab4c1a99c39792891fb84979f3f6f72c9bb68.tar.gz | |
rsync: fix CVE-2024-12084
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due
to improper handling of attacker-controlled checksum lengths (s2length) in the code.
When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write
out of bounds in the sum2 buffer.
(From OE-Core rev: 17fac276e27af19b00b6263f22156a55bae6a5c9)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/pybootchartgui/pybootchartgui.py')
0 files changed, 0 insertions, 0 deletions