On 15/01/2020 15:47, Saloni Jain wrote:
From: Sana Kazi <sana.k...@kpit.com>
Added patch for CVE-2019-12900 as backport from upstream.
Fixes out of bound access discovered while fuzzying karchive.
Tested by: sana.k...@kpit.com
Signed-off-by: Saloni Jain <saloni.j...@kpit.com>
Need a S-o-b in the patch itself alongside a CVE tag, but also why not a
backport for Warrior and Thud?
Ross
--
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
