summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support/nss/nss.inc
diff options
context:
space:
mode:
authoryanjun.zhu <yanjun.zhu@windriver.com>2014-03-28 17:43:37 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2014-03-30 10:10:32 +0100
commit6a3cadea0ce3f26306389f19121876378cf8925b (patch)
treea656e6e7e3b67297d38cf8ac661fa86ca4751403 /meta/recipes-support/nss/nss.inc
parentc4c31eb76170ee4d7cb436954b35b27971a46e84 (diff)
downloadast2050-yocto-poky-6a3cadea0ce3f26306389f19121876378cf8925b.zip
ast2050-yocto-poky-6a3cadea0ce3f26306389f19121876378cf8925b.tar.gz
nss-3.15.1: fix CVE-2013-1741
Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1741 (From OE-Core rev: b666d173ff0ba213bf81e2c035a605a28e5395ea) Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com> Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/nss/nss.inc')
-rw-r--r--meta/recipes-support/nss/nss.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-support/nss/nss.inc b/meta/recipes-support/nss/nss.inc
index a6aeed8..6364562 100644
--- a/meta/recipes-support/nss/nss.inc
+++ b/meta/recipes-support/nss/nss.inc
@@ -16,6 +16,7 @@ SRC_URI = "\
file://nss-fix-support-cross-compiling.patch \
file://nss-no-rpath-for-cross-compiling.patch \
file://nss-fix-incorrect-shebang-of-perl.patch \
+ file://nss-3.15.1-fix-CVE-2013-1741.patch \
"
SRC_URI_append_class-target = "\
file://nss.pc.in \
OpenPOWER on IntegriCloud