Li Wang c511d0eb40 cups CVE-2011-3170 ... the patch come from: http://cups.org/strfiles/3914/str3914.patch The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170 [YOCTO #3583] [ CQID: WIND00299594 ] Upstream-Status: Backport (From OE-Core rev: c82517bb667484854eaa05b6e9efd9ee0f164fec) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>		2012-12-17 17:24:56 +00:00
..
cups-1.4.6	cups CVE-2011-3170	2012-12-17 17:24:56 +00:00
cups14.inc	cups: disable pdftops	2012-08-23 11:43:34 +01:00
cups_1.4.6.bb	cups CVE-2011-3170	2012-12-17 17:24:56 +00:00