Armin Kuster 37c55c0e3b apr: Security fix for CVE-2021-35940 ...

An out-of-bounds array read in the apr_time_exp*() functions was fixed in the
Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue
was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed
compared to 1.6.3 and is vulnerable to the same issue.

(From OE-Core rev: 2b1a8731359d990b3a8eec6403d689144a516207)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d52b78c75323fb254b5d0216f9183573b353abd3)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-09-17 21:31:37 +01:00

..

apr

apr: Security fix for CVE-2021-35940

2021-09-17 21:31:37 +01:00

apr-util

apr-util: fix ptest fail problem

2018-09-13 17:38:07 +01:00

apr_1.7.0.bb

apr: Security fix for CVE-2021-35940

2021-09-17 21:31:37 +01:00

apr-util_1.6.1.bb

apr-util: Fix CFLAGS used in build

2021-03-01 00:17:46 +00:00