mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-02 17:02:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

glibc: Document and whitelist CVE-2021-35942

Browse Source 
This CVE is fixed in the upstream glibc-2.31 branch, and dunfell already
includes an update to this version in commit e1e89ff7d7 ("glibc:
update to lastest 2.31 release HEAD")

(From OE-Core rev: c1d49cee0a3a7391708b19647889f48036d7e4e8)

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Ralph Siemsen
2021-08-09 15:10:17 -04:00
committed by Richard Purdie
parent 55b0822504
commit 9a93dde4e3
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
meta/recipes-core/glibc/glibc_2.31.bb
View File

@@ -18,6 +18,16 @@ CVE_CHECK_WHITELIST += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
# Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
CVE_CHECK_WHITELIST += "CVE-2019-1010025"
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-35942
# The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash
# or read arbitrary memory in parse_param (in posix/wordexp.c) when called with
# an untrusted, crafted pattern, potentially resulting in a denial of service
# or disclosure of information. Patch was backported to 2.31 branch already:
# https://sourceware.org/git/?p=glibc.git;a=commit;h=4f0a61f75385c9a5879cbe7202042e88f692a3c8
# which is already included in the dunfell branch of poky:
# https://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=dunfell&id=e1e89ff7d75c3d2223f9e3bd875b9b0c5e15836b
CVE_CHECK_WHITELIST += "CVE-2021-35942"
DEPENDS += "gperf-native bison-native make-native"
NATIVESDKFIXES ?= ""