diff options
| author |   Armin Kuster <akuster808@gmail.com> | 2021-09-10 19:59:17 -0700 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-09-11 22:36:27 +0100 |
| commit | d52b78c75323fb254b5d0216f9183573b353abd3 (patch) | |
| tree | ed4235e06362a67aaab8614077cfb85bcfe501b4 /meta/conf | |
| parent | 5aae9c2cb464350bc443a0f60fd6602942e61f46 (diff) | |
| download | openembedded-core-d52b78c75323fb254b5d0216f9183573b353abd3.tar.gz | |
apr: Security fix for CVE-2021-35940
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the
Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue
was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed
compared to 1.6.3 and is vulnerable to the same issue.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/conf')
0 files changed, 0 insertions, 0 deletions