summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster@mvista.com>2016-02-01 17:46:10 (GMT)
committerRichard Purdie <richard.purdie@linuxfoundation.org>2016-03-03 11:11:39 (GMT)
commit83af960b7d9596b5355d1b8cf757ff14d087d0dc (patch)
tree8491e0f35e6502d12683420e99452a42ee536d28
parent9a6a7150d9d027a36306b516c3549cbe00ab21a8 (diff)
downloadpoky-83af960b7d9596b5355d1b8cf757ff14d087d0dc.tar.gz
foomatic-filters: Security fixes CVE-2015-8327
CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character this time with the recipe changes. (From OE-Core master rev: 62d6876033476592a8ca35f4e563c996120a687b) (From OE-Core rev: 9ca5534b1d8ce71eb150964e11ce79ba79ced7e4) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch23
-rw-r--r--meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb1
2 files changed, 24 insertions, 0 deletions
diff --git a/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch
new file mode 100644
index 0000000..aaedc88
--- /dev/null
+++ b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch
@@ -0,0 +1,23 @@
1Upstream-Status: Backport
2
3
4http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7406
5
6Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters.
7
8CVE: CVE-2015-8327
9Signed-off-by: Armin Kuster <akuster@mvista.com>
10
11Index: util.c
12===================================================================
13--- a/util.c
14+++ b/util.c
15@@ -31,7 +31,7 @@
16 #include <assert.h>
17
18
19-const char* shellescapes = "|;<>&!$\'\"#*?()[]{}";
20+const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}";
21
22 const char * temp_dir()
23 {
diff --git a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
index 7d0d717..58ef1f5 100644
--- a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
+++ b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
@@ -18,6 +18,7 @@ LIC_FILES_CHKSUM = "file://${WORKDIR}/foomatic-filters-${PV}/COPYING;md5=393a5ca
18SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz" 18SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
19 19
20SRC_URI += "file://CVE-2015-8560.patch \ 20SRC_URI += "file://CVE-2015-8560.patch \
21 file://CVE-2015-8327.patch \
21 " 22 "
22 23
23SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896" 24SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"