8fb8dddbf4
Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site. For more details, see: https://sourceforge.net/p/openocd/mailman/message/36188041/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |
||
|---|---|---|
| .. | ||
| 0001-Fix-jimtcl-auto-configuration-to-force-static-librar.patch | ||
| 0002-configure-enable-build-on-uclinux.patch | ||
| 0003-CVE-2018-5704-Prevent-some-forms-of-Cross-Protocol-S.patch | ||
| Config.in | ||
| Config.in.host | ||
| openocd.hash | ||
| openocd.mk | ||