helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-04-02 02:49:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

indent: fix CVE-2023-40305

Browse Source 
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace
in indent.c via a crafted file.

Reference:
https://savannah.gnu.org/bugs/index.php?64503

(cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Yogita Urade 2025-09-27 12:27:17 +02:00 committed by Khem Raj
parent 721d4f901d
commit 91ac7b0212
No known key found for this signature in database
GPG Key ID: BB053355919D3314
3 changed files with 8452 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4196
meta-oe/recipes-extended/indent/indent/CVE-2023-40305_0001.patch Normal file
View File

File diff suppressed because it is too large Load Diff

4254
meta-oe/recipes-extended/indent/indent/CVE-2023-40305_0002.patch Normal file
View File

File diff suppressed because it is too large Load Diff

2
meta-oe/recipes-extended/indent/indent_2.2.12.bb
View File

@ -17,6 +17,8 @@ SRC_URI = "${GNU_MIRROR}/${BPN}/${BP}.tar.gz \
file://0001-Makefile.am-remove-regression-dir.patch \
file://0001-Fix-builds-with-recent-gettext.patch \
file://0001-Remove-dead-paren_level-code.patch \
file://CVE-2023-40305_0001.patch \
file://CVE-2023-40305_0002.patch \
"
SRC_URI[sha256sum] = "e77d68c0211515459b8812118d606812e300097cfac0b4e9fb3472664263bb8b"