diff options
author | Sona Sarmadi <sona.sarmadi@enea.com> | 2016-04-06 08:53:36 +0200 |
---|---|---|
committer | Tudor Florea <tudor.florea@enea.com> | 2016-04-07 03:12:56 +0200 |
commit | 291c45aaebb29078e32ff38f7b9998fd9fdfe167 (patch) | |
tree | 48f9f2a87949def8757f1b9868209c336febb3fc /recipes-kernel/linux/linux-hierofalcon_3.19.bb | |
parent | 95e2d54d188fa653d9075782a3e431925829c297 (diff) | |
download | meta-hierofalcon-291c45aaebb29078e32ff38f7b9998fd9fdfe167.tar.gz |
kernel/Btrfs: CVE-2015-8374
Fixes an information-leak vulnerability in the kernel when it
truncated a file to a smaller size which consisted of an inline
extent that was compressed.
A caller of the clone ioctl could exploit this flaw by using only
standard file-system operations without root access to read the truncated data.
Reference:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8374
Reference to upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/
patch/?id=f1008f6d21ec52d533f7473e2e46218408fb4580
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Diffstat (limited to 'recipes-kernel/linux/linux-hierofalcon_3.19.bb')
-rw-r--r-- | recipes-kernel/linux/linux-hierofalcon_3.19.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-hierofalcon_3.19.bb b/recipes-kernel/linux/linux-hierofalcon_3.19.bb index d56f1ff..55ccec7 100644 --- a/recipes-kernel/linux/linux-hierofalcon_3.19.bb +++ b/recipes-kernel/linux/linux-hierofalcon_3.19.bb | |||
@@ -35,6 +35,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto-3.19;branch="standard/qemuarm6 | |||
35 | file://ipc-CVE-2015-7613.patch \ | 35 | file://ipc-CVE-2015-7613.patch \ |
36 | file://net-unix-CVE-2013-7446.patch \ | 36 | file://net-unix-CVE-2013-7446.patch \ |
37 | file://ALSA-CVE-2016-2546.patch \ | 37 | file://ALSA-CVE-2016-2546.patch \ |
38 | file://Btrfs-CVE-2015-8374.patch \ | ||
38 | " | 39 | " |
39 | 40 | ||
40 | S = "${WORKDIR}/git" | 41 | S = "${WORKDIR}/git" |