| *** nerdboy <nerdboy!~nerdboy@gentoo/developer/nerdboy> has quit IRC (Ping timeout: 260 seconds) | 00:26 | |
| *** nerdboy <nerdboy!~nerdboy@47.143.129.185> has joined #oe | 00:38 | |
| *** florian_kc <florian_kc!~florian@dynamic-089-013-090-234.89.13.pool.telefonica.de> has quit IRC (Ping timeout: 268 seconds) | 01:02 | |
| *** rber|res <rber|res!~rber|res@089144197092.atnat0006.highway.a1.net> has quit IRC (Remote host closed the connection) | 01:14 | |
| *** rber|res <rber|res!~rber|res@089144197092.atnat0006.highway.a1.net> has joined #oe | 01:15 | |
| *** nerdboy <nerdboy!~nerdboy@gentoo/developer/nerdboy> has quit IRC (Ping timeout: 255 seconds) | 02:19 | |
| *** nerdboy <nerdboy!~nerdboy@47.143.129.186> has joined #oe | 02:31 | |
| *** khem <khem!uid220931@id-220931.helmsley.irccloud.com> has quit IRC (Quit: Connection closed for inactivity) | 03:37 | |
| *** simonew <simonew!~ile@2a02:810d:a940:35fc:9843:f59:c626:e2bf> has quit IRC (Ping timeout: 256 seconds) | 04:11 | |
| *** otavio <otavio!~otavio@189-74-214-19.user3p.brasiltelecom.net.br> has quit IRC (Ping timeout: 260 seconds) | 07:05 | |
| *** leon-anavi <leon-anavi!~Leon@46.55.231.62> has joined #oe | 09:40 | |
| *** ptsneves <ptsneves!~Thunderbi@031011128046.dynamic-3-poz-k-0-2-0.vectranet.pl> has joined #oe | 09:48 | |
| *** leon-anavi <leon-anavi!~Leon@46.55.231.62> has quit IRC (Quit: Leaving) | 09:49 | |
| *** ptsneves <ptsneves!~Thunderbi@031011128046.dynamic-3-poz-k-0-2-0.vectranet.pl> has quit IRC (Ping timeout: 264 seconds) | 10:11 | |
| *** florian_kc <florian_kc!~florian@78.48.96.15> has joined #oe | 11:09 | |
| *** florian_kc <florian_kc!~florian@78.48.96.15> has quit IRC (Ping timeout: 255 seconds) | 11:41 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has joined #oe | 12:32 | |
| *** Leatherface <Leatherface!leatherfac@helvetet.eu> has quit IRC (Ping timeout: 256 seconds) | 13:04 | |
| *** Leatherface <Leatherface!leatherfac@helvetet.eu> has joined #oe | 13:05 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has quit IRC (Ping timeout: 252 seconds) | 13:54 | |
| *** OnkelUlla <OnkelUlla!~user@dude03.red.stw.pengutronix.de> has quit IRC (Remote host closed the connection) | 14:58 | |
| *** florian_kc <florian_kc!~florian@78.48.96.15> has joined #oe | 16:40 | |
| *** florian_kc <florian_kc!~florian@78.48.96.15> has quit IRC (Ping timeout: 276 seconds) | 17:23 | |
| *** simonew <simonew!~ile@2a02:810d:a940:35fc:6d7b:7f15:1cdd:d4c4> has joined #oe | 17:51 | |
| *** Kubu_work <Kubu_work!~kubu@arennes-654-1-262-155.w2-13.abo.wanadoo.fr> has joined #oe | 18:23 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has joined #oe | 18:32 | |
| *** flom84 <flom84!~flom84@user/flom84> has joined #oe | 18:51 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has quit IRC (Ping timeout: 240 seconds) | 19:03 | |
| *** olani- <olani-!~olani@81-230-13-132-no2811.tbcn.telia.com> has joined #oe | 19:23 | |
| *** ptsneves <ptsneves!~Thunderbi@031011128046.dynamic-3-poz-k-0-2-0.vectranet.pl> has joined #oe | 19:26 | |
| *** flom84 <flom84!~flom84@user/flom84> has quit IRC (Ping timeout: 264 seconds) | 19:31 | |
| *** micka <micka!~micka@reverse-177-98.fdn.fr> has quit IRC (Quit: ZNC 1.8.2+deb3.1 - https://znc.in) | 19:34 | |
| *** micka <micka!~micka@reverse-177-98.fdn.fr> has joined #oe | 19:36 | |
| *** ptsneves <ptsneves!~Thunderbi@031011128046.dynamic-3-poz-k-0-2-0.vectranet.pl> has quit IRC (Ping timeout: 255 seconds) | 19:39 | |
| *** Kubu_work <Kubu_work!~kubu@arennes-654-1-262-155.w2-13.abo.wanadoo.fr> has quit IRC (Quit: Leaving.) | 20:00 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has joined #oe | 20:02 | |
| *** simonew <simonew!~ile@2a02:810d:a940:35fc:6d7b:7f15:1cdd:d4c4> has quit IRC (Quit: Konversation terminated!) | 20:26 | |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has quit IRC (Ping timeout: 240 seconds) | 21:33 | |
| *** umbramalison <umbramalison!~umbramali@188.74.90.42> has quit IRC (Ping timeout: 256 seconds) | 21:43 | |
| *** umbramalison <umbramalison!~umbramali@188.74.90.42> has joined #oe | 21:45 | |
| marex | hey uh, I am building OE dunfell with INHERIT += "cve-check" in local.conf. If I do bitbake -c cve_check gawk , and then inspect tmp/work/*/gawk/5.0.1-r0/temp/cve.log , I see this: | 22:38 |
|---|---|---|
| marex | LAYER: meta | 22:38 |
| marex | PACKAGE NAME: gawk | 22:38 |
| marex | PACKAGE VERSION: 5.0.1 | 22:38 |
| marex | CVE: CVE-2023-3164 | 22:38 |
| marex | and now the weird thing | 22:38 |
| marex | CVE SUMMARY: A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. | 22:38 |
| marex | this is a gawk recipe, but the CVE description is for LibTIFF ? | 22:39 |
| marex | it seems it is only the description which is bogus | 22:39 |
| marex | Kirkstone, same problem | 22:41 |
| marex | uh, having one more look at the online CVE listing, it seems to be misfiled | 22:50 |
| *** florian_kc <florian_kc!~florian@dynamic-078-048-096-015.78.48.pool.telefonica.de> has joined #oe | 22:51 | |
| yocton | marex: yeah, it happens (misfiled CVE). There is a mail address you can send this to, explaining this and get it fixed | 23:22 |
| yocton | marex: I guess it's either https://nvd.nist.gov/info/contact-form or cpe_dictionary@nist.gov | 23:24 |
| smurray | marex: I think rburton also posted instructions on how to get corrections done to oe-core a while back | 23:37 |
| marex | yocton: yep | 23:48 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!