goIssue_kirkstone

OpenEmbedded-Core OpenEmbedded-Core は、現在のバージョンの OpenEmbedded のコアメタデータを含むレイヤーです。これはディストロなし（DISTRO = "nodistro" で機能的なイメージをビルド可能）であり、エミュレートされたマシンのみをサポートしています。 OpenEmbedded の詳細については、OpenEmbedded ウェブサイトをご覧ください: https://www.openembedded.org/ Yocto Project は OE に関する広範なドキュメントを提供しており、リファレンスマニュアルは以下で参照できます...

goIssue_dunfell

OpenEmbedded-Core OpenEmbedded-Coreは、現在のバージョンのOpenEmbedded向けのコアメタデータを含むレイヤーです。ディストロなし（DISTRO = "nodistro" で機能的なイメージを構築可能）であり、エミュレートされたマシンのサポートのみを含んでいます。 OpenEmbeddedの詳細については、OpenEmbeddedのWebサイトを参照してください： https://www.openembedded.org/ Yocto ProjectにはOEに関する広範なドキュメントがあり、リファレンスマニュアルは以下で見つけることができます：...

EUVD-2017-18662

Malware in sbrugna...

EUVD-2024-22946

Malicious code in bioql PyPI...

CVE-2024-25626

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

PT-2024-9220 · Mediatek +1 · Mediatek Microchips +1

Name of the Vulnerable Software and Affected Versions: MediaTek microchip software affected versions not specified Android versions 12.0 through 15.0 openWRT versions 19.07 through 23.05 Yocto version 4.0 RDK-B versions 22Q3 through 24Q1 Description: The issue is related to an out-of-bounds write...

CVE-2024-25626

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

Input validation

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

CVE-2024-25626 Yocto Project Security Advisory - BitBake/Toaster

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

CVE-2024-25626 Yocto Project Security Advisory - BitBake/Toaster

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

CVE-2024-25626 Yocto Project Security Advisory - BitBake/Toaster

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

CVE-2024-25626

The CVE-2024-25626 issue affects Yocto Project’s BitBake/Toaster: when the Toaster web interface is running, there is missing input validation in the Toaster server that can allow remote code execution via a crafted HTTP request. Authentication is not required, and the Toaster server is not part ...

Yocto Project poky Operating System Command Injection Vulnerability

poky is an open source application from The Yocto Project. An operating system command injection vulnerability exists in versions prior to Yocto Project poky 4.3.2, which stems from a lack of input validation. An attacker exploits this vulnerability to remotely execute code in a server shell via...

CVE-2024-25626: Improper Neutralization of Special Elements used in an OS Command

Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 before and included Yocto Project 4.3.1, with the Toaster server included in bitbake running, missing input...

MediaTek 芯片代码问题漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which originates from an anomaly check in wlan, and can be exploited by an attacker to locally escalate privileges, affecting the following products and...

Google Android Access Privilege Control Vulnerability (CNVD-2019-24173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An access control error vulnerability exists in Yocto in Android. An attacker can exploit the vulnerability to modify properties...

Google Android Access Privilege Control Vulnerability (CNVD-2019-24172)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android. An attacker can exploit the vulnerability to cause a security issue in the current scenario,...

Google Android Access Privilege Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An access control vulnerability exists in Yocto in Android, which stems from the program not enforcing proper access control. An attacker could exploit the vulnerability to cause...

Android Permission License and Access Control Vulnerability (CNVD-2019-09148)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android, which stems from the program's failure to perform proper access control. A detailed vulnerabili...

Android Privilege Permission and Access Control Vulnerabilities

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android that stems from the program not properly configuring nodes. A detailed vulnerability description...