https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html libbsd is a library to provide common functions from BSD systems on Linux. libbsd 0.8.1 and earlier contains a buffer overflow in the function fgetwln(). An if checks if it is necessary to reallocate memory in the target buffer. However this check is off by one, therefore an out of bounds write happens. Upstream has released version 0.8.2 to fix this. I have checked where this function gets used. I didn't find any code using it, so I assume the impact is limited. This bug was found with the help of Address Sanitizer. https://bugs.freedesktop.org/show_bug.cgi?id=93881 http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7
master: is at 0.8.1 jethro and fido: 0.7.0
jethro: http://cgit.openembedded.org/openembedded-core/commit/?h=jethro&id=e56aba3a822f072f8ed2062a691762a4a970a3f0 fido: http://cgit.openembedded.org/openembedded-core/commit/?h=fido&id=ab29efb8e85020a3621079c7fde217c1bfaa5289 master was updated to 0.8.2
Verified on: fido: 6b2102cd59c1ac48b8550dbbea0b83eada7e7b32 jethro: 6b2102cd59c1ac48b8550dbbea0b83eada7e7b32 master 7ca60ec8bff7656b4e52f5a4d238913e851da089