summaryrefslogtreecommitdiffstats
path: root/meta
diff options
context:
space:
mode:
authorSteve Sakoman <steve@sakoman.com>2020-11-18 05:25:22 -1000
committerRichard Purdie <richard.purdie@linuxfoundation.org>2021-01-01 11:55:35 +0000
commit18a3a31131a333029f1096a5dc05b6a4a827544d (patch)
tree271549452f612e618fca40dfee133343b8e8f0f5 /meta
parentac15769c8286a3e4ea4af9eac1ae9c4e7b5f2a6d (diff)
downloadpoky-18a3a31131a333029f1096a5dc05b6a4a827544d.tar.gz
cups: whitelist CVE-2018-6553
This an Ububtu specific issue: The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS (From OE-Core rev: e30fd2421da579b7d1e799c7d267395026a780dc) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 22e89983a8f83a369d83bc67e4f3492bc50db648) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r--meta/recipes-extended/cups/cups.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc
index c5a60bde12..9b4b2a9b13 100644
--- a/meta/recipes-extended/cups/cups.inc
+++ b/meta/recipes-extended/cups/cups.inc
@@ -18,6 +18,9 @@ SRC_URI = "https://github.com/apple/cups/releases/download/v${PV}/${BP}-source.t
18UPSTREAM_CHECK_URI = "https://github.com/apple/cups/releases" 18UPSTREAM_CHECK_URI = "https://github.com/apple/cups/releases"
19UPSTREAM_CHECK_REGEX = "cups-(?P<pver>\d+\.\d+(\.\d+)?)-source.tar" 19UPSTREAM_CHECK_REGEX = "cups-(?P<pver>\d+\.\d+(\.\d+)?)-source.tar"
20 20
21# This is an Ubuntu only issue.
22CVE_CHECK_WHITELIST += "CVE-2018-6553"
23
21LEAD_SONAME = "libcupsdriver.so" 24LEAD_SONAME = "libcupsdriver.so"
22 25
23CLEANBROKEN = "1" 26CLEANBROKEN = "1"