[Buildroot] [PATCH 1/1] package/tcpreplay: security bump to version 4.3.3
Thomas Petazzoni
thomas.petazzoni at bootlin.com
Wed Jun 17 20:00:54 UTC 2020
On Wed, 17 Jun 2020 21:56:54 +0200
Fabrice Fontaine <fontaine.fabrice at gmail.com> wrote:
> - Fix CVE-2020-12740: tcprewrite in Tcpreplay through 4.3.2 has a
> heap-based buffer over-read during a get_c operation. The issue is
> being triggered in the function get_ipv6_next() at common/get.c.
> - Update indentation in hash file (two spaces)
>
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
> ---
> package/tcpreplay/tcpreplay.hash | 6 +++---
> package/tcpreplay/tcpreplay.mk | 2 +-
> 2 files changed, 4 insertions(+), 4 deletions(-)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
More information about the buildroot
mailing list