Li Wang c511d0eb40 cups CVE-2011-3170 ... the patch come from: http://cups.org/strfiles/3914/str3914.patch The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3170 [YOCTO #3583] [ CQID: WIND00299594 ] Upstream-Status: Backport (From OE-Core rev: c82517bb667484854eaa05b6e9efd9ee0f164fec) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>		2012-12-17 17:24:56 +00:00
..
0001-don-t-try-to-run-generated-binaries.patch	Patch Upstream Status Updates	2011-12-15 14:36:26 +00:00
cups-CVE-2011-2896.patch	cups - CVE-2011-2896	2012-12-17 17:24:56 +00:00
cups-CVE-2011-3170.patch	cups CVE-2011-3170	2012-12-17 17:24:56 +00:00
cups-CVE-2012-5519.patch	cups: CVE-2012-5519	2012-12-17 17:24:55 +00:00
cups_serverbin.patch	cups_1.4.6.bb: Fix build on ppc64	2012-07-26 14:40:46 +01:00
use_echo_only_in_init.patch	Patch Upstream Status Updates	2011-12-15 14:36:26 +00:00