Armin Kuster eb3e28fa18 apr: Security fix for CVE-2021-35940 ...

Source:  https://dist.apache.org
MR: 112793
Type: Security Fix
Disposition: Backport from https://dist.apache.org/repos/dist/release/apr/patches/apr-1.7.0-CVE-2021-35940.patch
ChangeID: c8247210204ffcc7d1425e3d60f077ad3dd54ebc
Description:

An out-of-bounds array read in the apr_time_exp*() functions was fixed in the
Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue
was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed
compared to 1.6.3 and is vulnerable to the same issue.

(From OE-Core rev: 315262830bfe2bc8b2a9259541bb3a0bc83a2cdd)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-09-30 00:02:22 +01:00

..

classes

sdk: Decouple default install path from built in path

2021-09-08 23:47:30 +01:00

conf

flex: Add CVE-2019-6293 to exclusions for checks

2021-09-14 17:27:42 +01:00

files

sdk: Decouple default install path from built in path

2021-09-08 23:47:30 +01:00

lib

oeqa/runtime/parselogs: Make DVD ata error apply to all qemux86 machines

2021-09-10 16:21:36 +01:00

recipes-bsp

grub: Exclude CVE-2019-14865 from cve-check

2021-06-03 16:30:56 +01:00

recipes-connectivity

openssl: update from 1.1.1k to 1.1.1l

2021-09-01 16:27:09 +01:00

recipes-core

build-appliance-image: Update to dunfell head revision

2021-09-15 18:34:21 +01:00

recipes-devtools

go: Several Security fixes

2021-09-14 17:27:42 +01:00

recipes-extended

lighttpd: Add patch for reuse large memory chunks

2021-09-10 16:21:36 +01:00

recipes-gnome

gdk-pixbuf: fix CVE-2021-20240

2021-09-10 16:21:36 +01:00

recipes-graphics

xserver-xorg: Security fix for CVE-2020-14360/-25712

2021-09-14 17:27:42 +01:00

recipes-kernel

linux-yocto/5.4: update to v5.4.142

2021-09-01 16:27:09 +01:00

recipes-multimedia

gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522

2021-08-10 11:14:10 +01:00

recipes-rt

rt-tests: set branch name in SRC_URI

2021-09-10 16:21:36 +01:00

recipes-sato

webkitgtk: Upgrade to 2.28.4

2021-07-15 15:27:49 +01:00

recipes-support

apr: Security fix for CVE-2021-35940

2021-09-30 00:02:22 +01:00

site

site: Make sys_siglist default to no

2020-10-06 14:15:21 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00