diff options
| author | Robert Yang <liezhi.yang@windriver.com> | 2015-03-26 02:18:09 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-03-31 22:24:30 +0100 |
| commit | 18661937e4ec39e2a520a714ba5605dd7c90a41e (patch) | |
| tree | 51bc9c060e71b43c27fb2ae960a32a9a462cbcca /scripts/cp-noerror | |
| parent | c1d31cf2c7b99ebe05416c3449899180ef7a7156 (diff) | |
| download | poky-18661937e4ec39e2a520a714ba5605dd7c90a41e.tar.gz | |
cpio: fix CVE-2015-1197
Additional directory traversal vulnerability via symlinks
cpio CVE-2015-1197
Initial report:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
Upstream report:
https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html
And fix the indent in SRC_URI.
[YOCTO #7182]
(From OE-Core rev: 87d8c11e7504210e377cb6201e672d32048e000c)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/cp-noerror')
0 files changed, 0 insertions, 0 deletions