summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools/patch
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@intel.com>2019-11-04 12:27:13 +0000
committerRichard Purdie <richard.purdie@linuxfoundation.org>2019-11-05 10:37:11 +0000
commitd8fad5a81078847c5ab8cb336cfdf8fa3b321c17 (patch)
tree604c3f7f20cf47340266efdeed40a66aa6d57823 /meta/recipes-devtools/patch
parent4626a42c7be849b9c57ddb52114e1a84db2abfcb (diff)
downloadpoky-d8fad5a81078847c5ab8cb336cfdf8fa3b321c17.tar.gz
patch: the CVE-2019-13638 fix also handles CVE-2018-20969
(From OE-Core rev: 10c3af7ad8b7bb369c84c60a717bcd1358861187) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/patch')
-rw-r--r--meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch4
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch b/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch
index f60dfe879a..d13d419f51 100644
--- a/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch
+++ b/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch
@@ -6,8 +6,8 @@ Subject: [PATCH] Invoke ed directly instead of using the shell
6* src/pch.c (do_ed_script): Invoke ed directly instead of using a shell 6* src/pch.c (do_ed_script): Invoke ed directly instead of using a shell
7command to avoid quoting vulnerabilities. 7command to avoid quoting vulnerabilities.
8 8
9CVE: CVE-2019-13638 9CVE: CVE-2019-13638 CVE-2018-20969
10Upstream-Status: Backport[https://git.savannah.gnu.org/cgit/patch.git/patch/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0] 10Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/patch.git/patch/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0]
11Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> 11Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
12 12
13--- 13---