From a8a723b3bfc761fe945c564d3e6a943accdef642 Mon Sep 17 00:00:00 2001 From: Yogita Urade Date: Fri, 14 Apr 2023 05:57:35 +0000 Subject: [PATCH] src/meta-openembedded:dlt-daemon: fix CVE-2023-26257 An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-26257 https://github.com/COVESA/dlt-daemon/issues/440 Signed-off-by: Yogita Urade Signed-off-by: Khem Raj --- src/meta-openembedded | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/meta-openembedded b/src/meta-openembedded index e64fda2f961..ad73ee286f8 160000 --- a/src/meta-openembedded +++ b/src/meta-openembedded @@ -1 +1 @@ -Subproject commit e64fda2f961fee477350fcc3c90d374ca1545831 +Subproject commit ad73ee286f850c11b79de3bbb4b3d565340c1531