Files
poky/meta/recipes-devtools
yanjun.zhu 54dd30e514 squashfs: fix CVE-2012-4025
CQID:WIND00366813

Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi?
p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e

Integer overflow in the queue_init function in unsquashfs.c in
unsquashfs in Squashfs 4.2 and earlier allows remote attackers
to execute arbitrary code via a crafted block_log field in the
superblock of a .sqsh file, leading to a heap-based buffer overflow.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4025

(From OE-Core rev: 4493173c1ab7a0528e0c74935a105e474521ed1c)

Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com>

[YOCTO #3564]
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-14 15:19:52 +00:00
..
2012-09-28 15:19:39 +01:00
2012-07-28 09:20:51 +01:00
2012-01-03 12:14:31 +00:00
2012-09-02 05:52:07 -07:00
2012-10-03 10:04:56 +01:00
2012-09-02 05:52:10 -07:00
2012-02-28 12:27:46 +00:00
2012-09-28 15:19:39 +01:00
2012-09-21 11:10:21 +01:00
2012-02-26 22:51:58 +00:00
2011-07-20 15:27:36 +01:00
2011-11-29 11:22:04 +00:00
2012-05-08 14:49:15 +01:00
2012-07-17 10:54:01 +01:00
2012-09-24 12:13:49 +01:00
2011-12-08 15:24:32 +00:00
2012-08-19 10:46:39 +01:00