From ed29b7291d45a94271dff9fe8ca3611d6b025e27 Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Fri, 18 Oct 2019 07:35:36 -0700 Subject: ncurses: fix CVE-2019-17594, CVE-2019-17595 Backport changes to tinfo/comp_hash.c, tinfo/parse_entry.c, and progs/dump_entry.c from upstream to fix CVEs. (From OE-Core rev: 7ec70aeb0c6f6080523efa0f983fa36b92cb5558) Signed-off-by: Trevor Gamblin Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- meta/recipes-core/ncurses/ncurses_6.1+20190803.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-core/ncurses/ncurses_6.1+20190803.bb') diff --git a/meta/recipes-core/ncurses/ncurses_6.1+20190803.bb b/meta/recipes-core/ncurses/ncurses_6.1+20190803.bb index a44d78e4fe..e638a3737c 100644 --- a/meta/recipes-core/ncurses/ncurses_6.1+20190803.bb +++ b/meta/recipes-core/ncurses/ncurses_6.1+20190803.bb @@ -3,6 +3,7 @@ require ncurses.inc SRC_URI += "file://0001-tic-hang.patch \ file://0002-configure-reproducible.patch \ file://config.cache \ + file://0001-ncurses-selective-backport-of-20191012-patch.patch \ " # commit id corresponds to the revision in package version SRCREV = "3c9b2677c96c645496997321bf2fe465a5e7e21f" -- cgit v1.2.3-54-g00ecf