Re: [OE-core][meta-oe][dunfell][PATCH] mdns: Whitelisted CVE-2007-0613 for mdns

2021-03-08 Thread Khem Raj
Hi Sana Thanks for your contribution. this patch needs a bit of rework, please apply it to master branch of meta-openembedded repository, this recipe is from meta-networking layer therefore prefix your subject line with [meta-networking] and meta-openembedded repo patches are sent to

[OE-core][meta-oe][dunfell][PATCH] mdns: Whitelisted CVE-2007-0613 for mdns

2021-03-07 Thread Sana Kazi
CVE-2007-0613 is not applicable as it only affects Apple products i.e. ichat,mdnsresponder, instant message framework and MacOS. Also, https://www.exploit-db.com/exploits/3230 shows the part of code affected by CVE-2007-0613 which is not preset in upstream source code. Hence, CVE-2007-0613 does