summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/foomatic
diff options
context:
space:
mode:
authorArmin Kuster <akuster@mvista.com>2016-07-31 08:30:17 -0700
committerRichard Purdie <richard.purdie@linuxfoundation.org>2016-08-01 12:14:38 +0100
commitc96f149679a6d48d7cd669426c78488751acada1 (patch)
treea10e5a329e119321d3caec96a1cee9c5145f7671 /meta/recipes-extended/foomatic
parentf73006031ef8bca7b8851724832c6f37ed63ec89 (diff)
downloadpoky-c96f149679a6d48d7cd669426c78488751acada1.tar.gz
foomatic-filters: Security fix CVE-2015-8560
CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character (From OE-Core rev: c8b0b69a28bb4a6d88a6c2ecf2b89144b21ffe6d) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/foomatic')
-rw-r--r--meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch23
-rw-r--r--meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb3
2 files changed, 26 insertions, 0 deletions
diff --git a/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch
new file mode 100644
index 0000000000..dc973c4592
--- /dev/null
+++ b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch
@@ -0,0 +1,23 @@
1Upstream-Status: Backport
2
3
4http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419
5
6Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters.
7
8CVE: CVE-2015-8560
9Signed-off-by: Armin Kuster <akuster@mvista.com>
10
11Index: util.c
12===================================================================
13--- a/util.c
14+++ b/util.c
15@@ -31,7 +31,7 @@
16 #include <assert.h>
17
18
19-const char* shellescapes = "|<>&!$\'\"#*?()[]{}";
20+const char* shellescapes = "|;<>&!$\'\"#*?()[]{}";
21
22 const char * temp_dir()
23 {
diff --git a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
index 0cffedd660..497d2bf357 100644
--- a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
+++ b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
@@ -17,6 +17,9 @@ LIC_FILES_CHKSUM = "file://${WORKDIR}/foomatic-filters-${PV}/COPYING;md5=393a5ca
17 17
18SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz" 18SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
19 19
20SRC_URI += "file://CVE-2015-8560.patch \
21 "
22
20SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896" 23SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"
21SRC_URI[sha256sum] = "a2e2e53e502571e88eeb9010c45a0d54671f15707ee104f5c9c22b59ea7a33e3" 24SRC_URI[sha256sum] = "a2e2e53e502571e88eeb9010c45a0d54671f15707ee104f5c9c22b59ea7a33e3"
22 25