diff options
| author | Sona Sarmadi <sona.sarmadi@enea.com> | 2017-01-27 12:59:35 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-02-08 12:00:00 +0000 |
| commit | 1c293e889f6eeae36f8f6ddd9676c65d613ad0fc (patch) | |
| tree | 7b9bd27910f005c47ff590e223139e1090432956 /meta/classes/cross.bbclass | |
| parent | 87ffd7ce2e8ece8b44ff3f1c219a74b3590cf14b (diff) | |
| download | openembedded-core-1c293e889f6eeae36f8f6ddd9676c65d613ad0fc.tar.gz openembedded-core-1c293e889f6eeae36f8f6ddd9676c65d613ad0fc.tar.bz2 openembedded-core-1c293e889f6eeae36f8f6ddd9676c65d613ad0fc.zip | |
libXrandr: fix for CVE-2016-7947 and CVE-2016-7948
CVE-2016-7947
Insufficient validation of server responses result in Integer overflows
CVE-2016-7948
Insufficient validation of server responses result in various data mishandlings
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7947
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7948
https://lists.x.org/archives/xorg-announce/2016-October/002720.html
Upstream patch for both CVEs:
https://cgit.freedesktop.org/xorg/lib/libXrandr/commit/?id=a0df3e1c7728205e5c7650b2e6dce684139254a6
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Diffstat (limited to 'meta/classes/cross.bbclass')
0 files changed, 0 insertions, 0 deletions