Files
poky/meta
Hongxu Jia 7e46bdecf4 u-boot: fix CVE-2024-57255
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0xffffffff,
resulting in a malloc of zero and resultant memory overwrite.

https://nvd.nist.gov/vuln/detail/CVE-2024-57255

(From OE-Core rev: 687b6e0a166d7dc999b7d226a9bd68155f59a03a)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
..
2024-10-07 05:43:22 -07:00
2025-02-28 06:51:35 -08:00
2025-02-24 07:00:53 -08:00
2024-09-16 06:09:56 -07:00
2019-08-29 14:05:12 +01:00