From: Vincent Bernat Date: Tue, 14 Dec 2021 22:54:33 +0000 (+0100) Subject: security: update commit fixing SONMP issue X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=830644ffa6dd61f375755e568734a0b03548f8fe;p=thirdparty%2Flldpd.git security: update commit fixing SONMP issue --- diff --git a/content/security.html b/content/security.html index 76c9b91f..2da972bf 100644 --- a/content/security.html +++ b/content/security.html @@ -12,7 +12,7 @@ directly. * [CVE-2021-43612][]: heap overflow when parsing too short SONMP packets. This vulnerability affects the parser which is run in an unprivileged and chrooted process. It does not allow arbitrary code - execution. This bug has been fixed in commit [10b24442][] and in + execution. This bug has been fixed in commit [73d42680][] and in version 1.0.13. It has been discovered by Jeremy Galindo. * [CVE-2020-27827][]: memory exhaustion attack through crafted LLDPU @@ -52,6 +52,7 @@ directly. [a8d3c90f]: https://github.com/lldpd/lldpd/commit/a8d3c90feca548fc0656d95b5d278713db86ff61 [7d60bf30]: https://github.com/lldpd/lldpd/commit/7d60bf30effc4c88f17f3d58ecaa72479f16d4be [10b24442]: https://github.com/lldpd/lldpd/commit/10b244425662bbbf056a317965f359fdc036da27 +[73d42680]: https://github.com/lldpd/lldpd/commit/73d42680fce8598324364dbb31b9bc3b8320adf7 {# Local Variables: #} {# mode: markdown #}