diff options
| author | Steve Sakoman <steve@sakoman.com> | 2020-11-18 05:25:22 -1000 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-01-01 11:55:35 +0000 |
| commit | 18a3a31131a333029f1096a5dc05b6a4a827544d (patch) | |
| tree | 271549452f612e618fca40dfee133343b8e8f0f5 /LICENSE.GPL-2.0-only | |
| parent | ac15769c8286a3e4ea4af9eac1ae9c4e7b5f2a6d (diff) | |
| download | poky-18a3a31131a333029f1096a5dc05b6a4a827544d.tar.gz | |
cups: whitelist CVE-2018-6553
This an Ububtu specific issue:
The CUPS AppArmor profile incorrectly confined the dnssd backend
due to use of hard links. A local attacker could possibly use this
issue to escape confinement. This flaw affects versions prior to
2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1
in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS,
and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS
(From OE-Core rev: e30fd2421da579b7d1e799c7d267395026a780dc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 22e89983a8f83a369d83bc67e4f3492bc50db648)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'LICENSE.GPL-2.0-only')
0 files changed, 0 insertions, 0 deletions