]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
systemd: CVE-2016-7795 ChenQi/CVE-2016-7795
authorChen Qi <Qi.Chen@windriver.com>
Tue, 25 Oct 2016 06:23:08 +0000 (14:23 +0800)
committerChen Qi <Qi.Chen@windriver.com>
Wed, 26 Oct 2016 06:05:52 +0000 (14:05 +0800)
commit03fe8f1085b1f9ab381e69f1735ba8b1c049d4b8
tree473856bc706f34db444792e01e081d91bfd6725e
parent1886ab2f1dc1e3b5758a85604998e8deb9198f5e
systemd: CVE-2016-7795

The manager_invoke_notify_message function in systemd 231 and earlier allows
local users to cause a denial of service (assertion failure and PID 1 hang)
via a zero-length message received over a notify socket.

The patch is a backport from the latest git repo.

Please see the link below for more information.
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7795

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
meta/recipes-core/systemd/systemd/CVE-2016-7795.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd_230.bb