Minjae Kim dfd900b5b0 go: fix CVE-2022-23806 ...

crypto/elliptic: fix IsOnCurve for big.Int values that are not valid coordinates

Some big.Int values that are not valid field elements (negative or overflowing)
might cause Curve.IsOnCurve to incorrectly return true. Operating on those values
may cause a panic or an invalid curve operation. Note that Unmarshal will never
return such values.

Upstream-Status: Backport [https://go.dev/issue/50974]
CVE: CVE-2022-23806
(From OE-Core rev: eb7aa0929ecd712aeeec0ff37dfb77c3da33b375)

Signed-off-by:Minjae Kim <flowergom@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-03-09 17:30:48 +00:00

..

classes

default-distrovars.inc: Switch connectivity check to a yoctoproject.org page

2022-02-23 23:43:42 +00:00

conf

default-distrovars.inc: Switch connectivity check to a yoctoproject.org page

2022-02-23 23:43:42 +00:00

files

sdk: fix search for dynamic loader

2022-02-23 23:43:42 +00:00

lib

parselogs: add a couple systemd false positives

2022-01-22 17:56:53 +00:00

recipes-bsp

grub: add a fix for a crash in scripts

2022-03-02 00:21:37 +00:00

recipes-connectivity

openssl: Add fix for CVE-2021-4160

2022-03-02 00:21:36 +00:00

recipes-core

expat: fix CVE-2022-23990

2022-02-23 23:43:42 +00:00

recipes-devtools

go: fix CVE-2022-23806

2022-03-09 17:30:48 +00:00

recipes-extended

libarchive: Fix for CVE-2021-36976

2022-03-09 17:30:48 +00:00

recipes-gnome

gobject-introspection: Don't write $HOME into scripts

2021-10-23 23:14:17 +01:00

recipes-graphics

freetype: add missing CVE tag CVE-2020-15999

2022-02-23 23:43:42 +00:00

recipes-kernel

linux-firmware: upgrade 20211216 -> 20220209

2022-02-23 23:43:42 +00:00

recipes-multimedia

tiff: fix for CVE-2022-22844

2022-03-02 00:21:36 +00:00

recipes-rt

rt-tests: set branch name in SRC_URI

2021-09-10 16:21:36 +01:00

recipes-sato

puzzles: Upstream changed to main branch for development

2022-03-02 00:21:36 +00:00

recipes-support

vim: Upgrade 8.2.4314 -> 8.2.4424

2022-02-23 23:43:43 +00:00

site

site: Make sys_siglist default to no

2020-10-06 14:15:21 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00