From e8c96131d952f7812a8f8a53845c0ba709192d86 Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Sun, 31 Jan 2016 14:27:05 -0800 Subject: git: Security fix CVE-2015-7545 CVE-2015-7545 git: arbitrary code execution via crafted URLs (From OE-Core rev: 1e0780427bad448c5b3644134b581ecf1d53af84) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- meta/recipes-devtools/git/git_2.5.0.bb | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'meta/recipes-devtools/git/git_2.5.0.bb') diff --git a/meta/recipes-devtools/git/git_2.5.0.bb b/meta/recipes-devtools/git/git_2.5.0.bb index de686c2b24..792f258388 100644 --- a/meta/recipes-devtools/git/git_2.5.0.bb +++ b/meta/recipes-devtools/git/git_2.5.0.bb @@ -9,3 +9,11 @@ SRC_URI[tarball.md5sum] = "3bc9b0a803ae8ec6c5316cc64f0b7f78" SRC_URI[tarball.sha256sum] = "8fa13ba8434ff83d24f57f831d55dbb9046434c266641180a37744facfce72ac" SRC_URI[manpages.md5sum] = "134b049e51420a336049aac21c88a75a" SRC_URI[manpages.sha256sum] = "745e4e797fe5061e781c880d370b1beb480199127da5acaf4e376e0b09d4d685" + +SRC_URI += "\ + file://0008-CVE-2015-7545-1.patch \ + file://0009-CVE-2015-7545-2.patch \ + file://0010-CVE-2015-7545-3.patch \ + file://0011-CVE-2015-7545-4.patch \ + file://0012-CVE-2015-7545-5.patch \ + " -- cgit v1.2.3-54-g00ecf