Logo
›
›component›boost
Name
boost
Version
1.78.0
Type
library
Description
Free peer-reviewed portable C++ source libraries
Licenses
BSL-1.0 & MIT & Python-2.0
PURL
-
CPE
cpe:2.3:*:boost:boost:1.78.0:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
master
1.90.0
yocto
scarthgap
1.84.0

Patches#

#
Title
Author
Resolve
1
Don't set up arch/instruction-set flags, we do that
Alexander Kanavin <alex.kanavin@gmail.com>
2
Don't skip install targets if there's <build>no in ureqs
Dmitry <grisumbras@gmail.com>
3
Patch #3
Yue Tao <yue.tao@windriver.com>
CVE-2012-2677
4
Fix missing sys/stat.h include on musl-based systems
Leonardo Neumann <leonardo@neumann.dev.br>
5
boost-math: disable pch for gcc
Jackie Huang <jackie.huang@windriver.com>
6
dont setup compiler flags -m32/-m64
Anuj Mittal <anuj.mittal@intel.com>
7
futex: fix build on 32-bit architectures using 64-bit time_t
Khem Raj <raj.khem@gmail.com>

Vulnerabilities#

Name
Analysis
Description
CVE-2012-2677
Patched
Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.