diff options
| author | Purushottam Choudhary <Purushottam.Choudhary@kpit.com> | 2021-03-03 16:20:38 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-03-28 22:31:55 +0100 |
| commit | dee8235c61e2f466418ec44dd3155d9dc7592615 (patch) | |
| tree | f5ab0f090802e83c53aad896448d53b87349bafc /meta | |
| parent | e4720d0883be897ff13a223cd67c36377233a238 (diff) | |
| download | poky-dee8235c61e2f466418ec44dd3155d9dc7592615.tar.gz | |
shadow: whitelist CVE-2013-4235
This CVE is about TOCTOU (time-of-check time-of-use)
race condition when copying and removing directory trees
which had very low severity problem and marked as closed
and won't fix. Therefore whitelisted CVE-2013-4235.
Master, gatesgarth and dunfell all have shadow version 4.81.
Hence, this is applicable for master, gatesgarth and dunfell.
Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658
(From OE-Core rev: 1474dcb84c925603736bafbe9fc802a99a014a39)
Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b1c6cd87bee6b019619dc5728fd6c36bc87ed696)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
| -rw-r--r-- | meta/recipes-extended/shadow/shadow_4.8.1.bb | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/meta/recipes-extended/shadow/shadow_4.8.1.bb b/meta/recipes-extended/shadow/shadow_4.8.1.bb index c975395ff8..ff4aad926f 100644 --- a/meta/recipes-extended/shadow/shadow_4.8.1.bb +++ b/meta/recipes-extended/shadow/shadow_4.8.1.bb | |||
| @@ -6,5 +6,6 @@ BUILD_LDFLAGS_append_class-target = " ${@bb.utils.contains('DISTRO_FEATURES', 'p | |||
| 6 | 6 | ||
| 7 | BBCLASSEXTEND = "native nativesdk" | 7 | BBCLASSEXTEND = "native nativesdk" |
| 8 | 8 | ||
| 9 | 9 | # Severity is low and marked as closed and won't fix. | |
| 10 | 10 | # https://bugzilla.redhat.com/show_bug.cgi?id=884658 | |
| 11 | CVE_CHECK_WHITELIST += "CVE-2013-4235" | ||