Fabrice Fontaine 62485fec9d package/lldpd: security bump to version 1.0.9 ...

- Out-of-bound read access when parsing LLDP-MED civic address in
  liblldpctl for malformed fields.
- Fix memory leak when receiving LLDPU with duplicate fields.
  CVE-2020-27827.
- More memory leak fixes on duplicate TLVs in LLDP, CDP and EDP
  (related to CVE-2020-27827).

https://github.com/lldpd/lldpd/blob/1.0.9/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5522b7526b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2021-04-04 11:39:50 +02:00

..

Config.in

…

lldpd.hash

package/lldpd: security bump to version 1.0.9

2021-04-04 11:39:50 +02:00

lldpd.mk

package/lldpd: security bump to version 1.0.9

2021-04-04 11:39:50 +02:00

S60lldpd

…