diff options
| author | Siddharth <sdoshi@mvista.com> | 2023-05-12 03:59:42 +0530 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2023-05-25 05:49:26 -1000 |
| commit | ed5cd048aec8c7dc417143ee569b57c83fc0d7cc (patch) | |
| tree | 4f4148a96d3b329738d094f13bbbbebb3235b606 /meta/classes/pypi.bbclass | |
| parent | 1824a583fa72cd1debe39cc0cf352171b3a795a3 (diff) | |
| download | poky-ed5cd048aec8c7dc417143ee569b57c83fc0d7cc.tar.gz | |
curl: ammend fix for CVE-2023-27534 to fix error when ssh is enabled
The upstream patch for CVE-2023-27534 does three things:
1) creates new path with dynbuf(dynamic buffer)
2) solves the tilde error which causes CVE-2023-27534
3) modifies the below added functionality to not add a trailing "/" to the user home dir if it already ends with one with dynbuf.
dynbuf functionalities are added in curl in later versions and are not essential to fix the vulnerability but does add extra feature in later versions.
This patch completes the 3rd task of the patch which was implemented without using dynbuf
Upstream-Status: Backport from [https://github.com/curl/curl/commit/6c51adeb71da076c5c40a45e339e06bb4394a86b]
(From OE-Core rev: df489f644e41108cf0e2ff55af7ce5e9bca40471)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/classes/pypi.bbclass')
0 files changed, 0 insertions, 0 deletions