~ubuntu-core-dev/shim/trunk

Viewing all changes in revision 89.

  • Committer: Steve Langasek
  • Date: 2014-10-08 06:40:28 UTC
  • Revision ID: steve.langasek@canonical.com-20141008064028-oigpzcz3ib0nifua
* SECURITY UPDATE: heap overflow and out-of-bounds read access when
  parsing DHCPv6 information
  - debian/patches/CVE-2014-3675.patch: apply proper bounds checking
    when parsing data provided in DHCPv6 packets.
  - CVE-2014-3675
  - CVE-2014-3676
* SECURITY UPDATE: memory corruption when processing user-provided key
  lists
  - debian/patches/CVE-2014-3677.patch: detect malformed machine owner
    key (MOK) lists and ignore them, avoiding possible memory corruption.
  - CVE-2014-3677

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: