]> git.ipfire.org Git - thirdparty/lldpd.git/commitdiff
security: update commit fixing SONMP issue
authorVincent Bernat <vincent@bernat.ch>
Tue, 14 Dec 2021 22:54:33 +0000 (23:54 +0100)
committerVincent Bernat <vincent@bernat.ch>
Tue, 14 Dec 2021 22:54:33 +0000 (23:54 +0100)
content/security.html

index 76c9b91f8d677ecb2218fca1e11994b4f89bb40c..2da972bf1eadf30b76c763397782f2b91854706c 100644 (file)
@@ -12,7 +12,7 @@ directly.
  * [CVE-2021-43612][]: heap overflow when parsing too short SONMP
    packets. This vulnerability affects the parser which is run in an
    unprivileged and chrooted process. It does not allow arbitrary code
-   execution. This bug has been fixed in commit [10b24442][] and in
+   execution. This bug has been fixed in commit [73d42680][] and in
    version 1.0.13. It has been discovered by Jeremy Galindo.
 
  * [CVE-2020-27827][]: memory exhaustion attack through crafted LLDPU
@@ -52,6 +52,7 @@ directly.
 [a8d3c90f]: https://github.com/lldpd/lldpd/commit/a8d3c90feca548fc0656d95b5d278713db86ff61
 [7d60bf30]: https://github.com/lldpd/lldpd/commit/7d60bf30effc4c88f17f3d58ecaa72479f16d4be
 [10b24442]: https://github.com/lldpd/lldpd/commit/10b244425662bbbf056a317965f359fdc036da27
+[73d42680]: https://github.com/lldpd/lldpd/commit/73d42680fce8598324364dbb31b9bc3b8320adf7
 
 {# Local Variables:      #}
 {# mode: markdown        #}