diff options
| author | Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> | 2018-08-22 17:30:32 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-08-23 07:50:01 +0100 |
| commit | 227a6c1acbd0e5f582d64dd683b044c9b35306dc (patch) | |
| tree | 32d08959499a72f5dcf4e8524be03885c2daa069 /meta/recipes-devtools/perl/perl_5.24.4.bb | |
| parent | 79c8c364719440bc42f551a14b40bb7bae8901dd (diff) | |
| download | poky-227a6c1acbd0e5f582d64dd683b044c9b35306dc.tar.gz | |
perl: CVE-2018-12015
Remove existing files before overwriting them
Archive should extract only the latest same-named entry.
Extracted regular file should not be writtent into existing block
device (or any other one).
https://rt.cpan.org/Ticket/Display.html?id=125523
Affects perl <= 5.26.2
(From OE-Core rev: 037b205e89ae4c7d638a5c15d64f60e16facbaa2)
Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/perl/perl_5.24.4.bb')
| -rw-r--r-- | meta/recipes-devtools/perl/perl_5.24.4.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-devtools/perl/perl_5.24.4.bb b/meta/recipes-devtools/perl/perl_5.24.4.bb index 87a85a39d4..28f1c249dc 100644 --- a/meta/recipes-devtools/perl/perl_5.24.4.bb +++ b/meta/recipes-devtools/perl/perl_5.24.4.bb | |||
| @@ -64,6 +64,7 @@ SRC_URI += " \ | |||
| 64 | file://perl-fix-conflict-between-skip_all-and-END.patch \ | 64 | file://perl-fix-conflict-between-skip_all-and-END.patch \ |
| 65 | file://perl-test-customized.patch \ | 65 | file://perl-test-customized.patch \ |
| 66 | file://perl-5.26.1-guard_old_libcrypt_fix.patch \ | 66 | file://perl-5.26.1-guard_old_libcrypt_fix.patch \ |
| 67 | file://CVE-2018-12015.patch \ | ||
| 67 | " | 68 | " |
| 68 | 69 | ||
| 69 | # Fix test case issues | 70 | # Fix test case issues |