diff options
author | Yue Tao <Yue.Tao@windriver.com> | 2014-04-14 12:41:17 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-05-21 09:08:59 +0100 |
commit | 27aba0a8d91a67e85f6c8ab44e41ff4205224505 (patch) | |
tree | cc3c14b547abd7216b168f6ce1303ae9c7b09c11 /meta/recipes-extended/screen/screen_4.0.3.bb | |
parent | 901a28b66176a63b1b3bb2a1f65fa0bc12f712c9 (diff) | |
download | poky-27aba0a8d91a67e85f6c8ab44e41ff4205224505.tar.gz |
Screen: fix for Security Advisory CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with
world-readable permissions, which might allow local users to obtain
sensitive session information.
(From OE-Core rev: 25a212d0154906e7a05075d015dbc1cfdfabb73a)
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/screen/screen_4.0.3.bb')
-rw-r--r-- | meta/recipes-extended/screen/screen_4.0.3.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/screen/screen_4.0.3.bb b/meta/recipes-extended/screen/screen_4.0.3.bb index 5850560fe4..a0aa15c0d3 100644 --- a/meta/recipes-extended/screen/screen_4.0.3.bb +++ b/meta/recipes-extended/screen/screen_4.0.3.bb | |||
@@ -20,6 +20,7 @@ SRC_URI = "${GNU_MIRROR}/screen/screen-${PV}.tar.gz;name=tarball \ | |||
20 | ${DEBIAN_MIRROR}/main/s/screen/screen_4.0.3-14.diff.gz;name=patch \ | 20 | ${DEBIAN_MIRROR}/main/s/screen/screen_4.0.3-14.diff.gz;name=patch \ |
21 | file://configure.patch \ | 21 | file://configure.patch \ |
22 | file://fix-parallel-make.patch \ | 22 | file://fix-parallel-make.patch \ |
23 | file://screen-4.0.3-CVE-2009-1214.patch \ | ||
23 | ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)}" | 24 | ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)}" |
24 | 25 | ||
25 | PAM_SRC_URI = "file://screen.pam" | 26 | PAM_SRC_URI = "file://screen.pam" |