diff options
| author |   jason.lau <Haitao.Liu@windriver.com> | 2020-06-18 16:31:36 +0800 |
|---|---|---|
| committer |   Anuj Mittal <anuj.mittal@intel.com> | 2020-06-29 13:17:11 +0800 |
| commit | 90f4e2f299d8cd6c839b73307dc7b0ec3d389294 (patch) | |
| tree | 0569e94e61dd9c445f6b74647294f7cd6049b736 /scripts/oe-pkgdata-util | |
| parent | 4a4413aa521f35414d94f883a74aec3beb628a9a (diff) | |
| download | openembedded-core-90f4e2f299d8cd6c839b73307dc7b0ec3d389294.tar.gz | |
libjpeg-turbo: Fix CVE-2020-13790
libjpeg-turbo 2.0.4 has a heap-based buffer over-read
in get_rgb_row() in rdppm.c via a malformed PPM input file.
Upstream-Status: Backport
[https://github.com/libjpeg-turbo/libjpeg-turbo/commit/3de15e0c344d11d4b90f4a47136467053eb2d09a]
CVE:CVE-2020-13790
Signed-off-by: Liu Haitao <haitao.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Diffstat (limited to 'scripts/oe-pkgdata-util')
0 files changed, 0 insertions, 0 deletions