]> dgit.raspbian.org Git - ostree.git/commit
projects / ostree.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d69cb6b) | patch
d/patches: Add post-release patch to fix offset validation
authorSimon McVittie <smcv@debian.org>
Thu, 20 Aug 2026 18:02:07 +0000 (19:02 +0100)
committerSimon McVittie <smcv@debian.org>
Thu, 20 Aug 2026 18:02:07 +0000 (19:02 +0100)
commite8b46b73b501921e6e74ca82910abf7a6f076b7e
tree4c61ce5c5347951cb0f0c92e90c551bef8f29943tree | snapshot
parentd69cb6beb48218b7f02651506c0ffa9580cb7ebecommit | diff
d/patches: Add post-release patch to fix offset validation

This is an out-of-bounds read when downloading from a malicious/crafted
ostree repository, but is not believed to be practically exploitable
for anything worse than a crash (denial-of-service).
debian/patches/series diff | blob | history
debian/patches/static-delta-validate-bspatch-payload-offset-and-length.patch [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.