Minjae Kim 415757639d go: fix CVE-2022-23772 ...

math/big: prevent large memory consumption in Rat.SetString

An attacker can cause unbounded memory growth in a program using (*Rat).SetString
due to an unhandled overflow.

Upstream-Status: Backport [https://go.dev/issue/50699]
CVE: CVE-2022-23772
(From OE-Core rev: e4d15040f62744265b9236ad7276f3371a9172da)

Signed-off-by:Minjae Kim <flowergom@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-03-09 17:30:48 +00:00

..

go-1.14

go: fix CVE-2022-23772

2022-03-09 17:30:48 +00:00

go-dep

go-dep: Fix build on riscv64

2020-07-22 22:46:37 +01:00

go_1.14.bb

go_1.14: don't set -buildmode=pie when building for windows targets

2021-04-23 10:41:15 +01:00

go-1.14.inc

go: fix CVE-2022-23772

2022-03-09 17:30:48 +00:00

go-common.inc

Revert "go: Reset unneeded GOARCH variables for native recipe"

2019-12-15 09:10:46 +00:00

go-cross_1.14.bb

go: Update to 1.14 release series

2020-02-28 23:11:29 +00:00

go-cross-canadian_1.14.bb

go: Update to 1.14 release series

2020-02-28 23:11:29 +00:00

go-cross-canadian.inc

go: Extract common environment setup.

2019-11-25 17:57:22 +00:00

go-cross.inc

go: Extract common environment setup.

2019-11-25 17:57:22 +00:00

go-crosssdk_1.14.bb

go: Update to 1.14 release series

2020-02-28 23:11:29 +00:00

go-crosssdk.inc

go: Extract common environment setup.

2019-11-25 17:57:22 +00:00

go-dep_0.5.4.bb

meta: Add explict branch to git SRC_URIs, handle github url changes

2021-11-11 10:54:32 +00:00

go-native_1.14.bb

go: Update to 1.14 release series

2020-02-28 23:11:29 +00:00

go-native.inc

go-native: use libdir_native

2018-05-15 10:56:49 +01:00

go-runtime_1.14.bb

go: Disbale CGO for riscv64

2020-07-22 22:46:37 +01:00

go-runtime.inc

go: Extract common environment setup.

2019-11-25 17:57:22 +00:00

go-target.inc

go: Rely on go-runtime to provide needed modules

2020-05-07 13:03:30 +01:00