diff options
| author | Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> | 2018-08-22 17:30:32 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-08-23 07:50:01 +0100 |
| commit | 227a6c1acbd0e5f582d64dd683b044c9b35306dc (patch) | |
| tree | 32d08959499a72f5dcf4e8524be03885c2daa069 /meta/classes | |
| parent | 79c8c364719440bc42f551a14b40bb7bae8901dd (diff) | |
| download | poky-227a6c1acbd0e5f582d64dd683b044c9b35306dc.tar.gz | |
perl: CVE-2018-12015
Remove existing files before overwriting them
Archive should extract only the latest same-named entry.
Extracted regular file should not be writtent into existing block
device (or any other one).
https://rt.cpan.org/Ticket/Display.html?id=125523
Affects perl <= 5.26.2
(From OE-Core rev: 037b205e89ae4c7d638a5c15d64f60e16facbaa2)
Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/classes')
0 files changed, 0 insertions, 0 deletions