Files
poky/meta/recipes-devtools
yanjun.zhu a86e32a18b squashfs: fix CVE-2012-4025
CQID:WIND00366813

Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi?
p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e

Integer overflow in the queue_init function in unsquashfs.c in
unsquashfs in Squashfs 4.2 and earlier allows remote attackers
to execute arbitrary code via a crafted block_log field in the
superblock of a .sqsh file, leading to a heap-based buffer overflow.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4025

(From OE-Core rev: e6fddd1961061895e9335fa94b636163efdc9caa)

Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com>

[YOCTO #3564]
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-01-03 12:34:25 +00:00
..
2012-01-03 12:14:25 +00:00
2012-01-03 12:14:31 +00:00
2012-03-21 15:33:03 +00:00
2012-02-28 12:27:46 +00:00
2012-04-10 13:32:01 +01:00
2012-02-26 22:51:58 +00:00
2011-07-20 15:27:36 +01:00
2011-07-01 23:27:29 +01:00
2012-01-03 12:14:31 +00:00
2011-11-29 11:22:04 +00:00
2012-03-19 14:37:43 +00:00
2012-03-13 23:18:46 +00:00
2012-01-17 14:53:25 +00:00
2012-04-23 23:10:39 +01:00
2012-09-28 16:53:11 +01:00
2011-10-14 13:18:18 +01:00
2012-02-03 15:56:38 +00:00
2011-12-08 15:24:32 +00:00
2011-12-02 15:14:02 +00:00
2010-12-23 15:52:06 +00:00