mirror of
https://git.yoctoproject.org/poky
synced 2026-05-02 18:32:15 +02:00
unsigned signature header leads to string injection into an rpm database
reference:
https://nvd.nist.gov/vuln/detail/CVE-2021-3421
d6a86b5e69
(From OE-Core rev: eb1183cac91a9948ac47acc56454b8841764ba72)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>