diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2018-01-28 23:02:56 +0100 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2018-01-29 09:47:53 +0100 |
| commit | 8fb8dddbf487706891040659959352af8c8d28d4 (patch) | |
| tree | 2db79a0e6765f0ab11cb439f9a20682f0268224a /package/pngquant | |
| parent | b473cb15429bbe18c3b5be3266025c38df8a7ae3 (diff) | |
| download | buildroot-8fb8dddbf487706891040659959352af8c8d28d4.tar.gz buildroot-8fb8dddbf487706891040659959352af8c8d28d4.zip | |
openocd: add security fix for CVE-2018-5704
Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP
POST for sending data to 127.0.0.1 port 4444, which allows remote attackers
to conduct cross-protocol scripting attacks, and consequently execute
arbitrary commands, via a crafted web site.
For more details, see:
https://sourceforge.net/p/openocd/mailman/message/36188041/
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/pngquant')
0 files changed, 0 insertions, 0 deletions
