diff options
| author | Sona Sarmadi <sona.sarmadi@enea.com> | 2015-04-29 11:02:21 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-05-01 12:34:52 +0100 |
| commit | b9da1f441bbd8ef2c4bbcd2aabd2d42b65757827 (patch) | |
| tree | e6839f9fd5ef2729efb69869ec2d5d88cf577340 /meta/recipes-devtools/elfutils/elfutils_0.155.bb | |
| parent | ccbb7ef72f799fd11824009f2b000090e09b8bef (diff) | |
| download | poky-b9da1f441bbd8ef2c4bbcd2aabd2d42b65757827.tar.gz | |
elfutils: CVE-2014-9447
directory traversal in read_long_names()
Reference
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447
Upstream commit with the analysis:
https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e
(From OE-Core rev: 6e7badf6819f372bd6dced191c7fda9748062126)
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/elfutils/elfutils_0.155.bb')
| -rw-r--r-- | meta/recipes-devtools/elfutils/elfutils_0.155.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-devtools/elfutils/elfutils_0.155.bb b/meta/recipes-devtools/elfutils/elfutils_0.155.bb index b1f410c0f6..edb4919e1a 100644 --- a/meta/recipes-devtools/elfutils/elfutils_0.155.bb +++ b/meta/recipes-devtools/elfutils/elfutils_0.155.bb | |||
| @@ -23,6 +23,7 @@ SRC_URI += "\ | |||
| 23 | file://nm-Fix-size-passed-to-snprintf-for-invalid-sh_name-case.patch \ | 23 | file://nm-Fix-size-passed-to-snprintf-for-invalid-sh_name-case.patch \ |
| 24 | file://elfutils-ar-c-fix-num-passed-to-memset.patch \ | 24 | file://elfutils-ar-c-fix-num-passed-to-memset.patch \ |
| 25 | file://fix-build-gcc-4.8.patch \ | 25 | file://fix-build-gcc-4.8.patch \ |
| 26 | file://CVE-2014-9447.patch \ | ||
| 26 | " | 27 | " |
| 27 | # Only apply when building uclibc based target recipe | 28 | # Only apply when building uclibc based target recipe |
| 28 | SRC_URI_append_libc-uclibc = " file://uclibc-support.patch" | 29 | SRC_URI_append_libc-uclibc = " file://uclibc-support.patch" |