Steve Sakoman 95cda9d091 cups: fix CVE-2022-26691 ...

In scheduler/cert.c the previous algorithm didn't expect the strings can
have a different length, so one string can be a substring of the other
and such substring was reported as equal to the longer string.

Backport patch from upstream to fix:
de4f8c1961

CVE: CVE-2022-26691

(From OE-Core rev: cc657868d31cc8b4218a07aa10fa098c379e473c)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-06-22 23:46:32 +01:00

..

cups

cups: fix CVE-2022-26691

2022-06-22 23:46:32 +01:00

cups_2.3.1.bb

cups: update to 2.3.1

2019-12-28 23:25:42 +00:00

cups.inc

cups: fix CVE-2022-26691

2022-06-22 23:46:32 +01:00