diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-16 15:15:08 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-25 06:20:37 -0800 |
| commit | 78e33c0f8b9e1160d23d95fe0fa006ca59d72217 (patch) | |
| tree | 89fb6595338504f17c6e282a72f89e713f9fdbd9 /documentation | |
| parent | 61587111989252119cce4c1c26503e986f9efd7a (diff) | |
| download | poky-78e33c0f8b9e1160d23d95fe0fa006ca59d72217.tar.gz | |
rsync: fix CVE-2024-12088
A flaw was found in rsync. When using the `--safe-links` option, rsync fails to
properly verify if a symbolic link destination contains another symbolic link within it.
This results in a path traversal vulnerability, which may lead to arbitrary file write
outside the desired directory.
(From OE-Core rev: dad4a83c011310872cce07fc4141e66a98439cb1)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'documentation')
0 files changed, 0 insertions, 0 deletions