[Buildroot] [PATCH 1/1] package/connman: fix CVE-2022-3229{2, 3}

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:

 > Fix CVE-2022-32292: In ConnMan through 1.41, remote attackers able to
 > send HTTP requests to the gweb component are able to exploit a
 > heap-based buffer overflow in received_data to execute code.

 > Fix CVE-2022-32293: In ConnMan through 1.41, a man-in-the-middle attack
 > against a WISPR HTTP query could be used to trigger a use-after-free in
 > WISPR handling, leading to crashes or code execution.

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>

Committed to 2022.11.x and 2022.02.x, thanks.

-- 
Bye, Peter Korsgaard