diff options
| author | Minjae Kim <flowergom@gmail.com> | 2021-03-27 15:21:39 +0900 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-04-06 22:45:36 +0100 |
| commit | f0fdeea6657f0fdb9224ca25c0f01e0e1c724427 (patch) | |
| tree | 1328a4a92cc8764f767ba2771c11c016e297a25d /meta/recipes-devtools/git/git.inc | |
| parent | 4ea2ccd7e9f74df8346e35022dea107f4e00ef86 (diff) | |
| download | poky-f0fdeea6657f0fdb9224ca25c0f01e0e1c724427.tar.gz | |
git: fix CVE-2021-21300
checkout: fix bug that makes checkout follow symlinks in leading path
Upstream-Status: Acepted [https://github.com/git/git/commit/684dd4c2b414bcf648505e74498a608f28de4592]
CVE: CVE-2021-21300
(From OE-Core rev: 8293d5d1529629bd13028bdde1fa99da30313bac)
Signed-off-by: Minjae Kim <flowergom@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/git/git.inc')
| -rw-r--r-- | meta/recipes-devtools/git/git.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/meta/recipes-devtools/git/git.inc b/meta/recipes-devtools/git/git.inc index ae463061d8..738a429875 100644 --- a/meta/recipes-devtools/git/git.inc +++ b/meta/recipes-devtools/git/git.inc | |||
| @@ -8,7 +8,9 @@ DEPENDS = "openssl curl zlib expat" | |||
| 8 | PROVIDES_append_class-native = " git-replacement-native" | 8 | PROVIDES_append_class-native = " git-replacement-native" |
| 9 | 9 | ||
| 10 | SRC_URI = "${KERNELORG_MIRROR}/software/scm/git/git-${PV}.tar.gz;name=tarball \ | 10 | SRC_URI = "${KERNELORG_MIRROR}/software/scm/git/git-${PV}.tar.gz;name=tarball \ |
| 11 | ${KERNELORG_MIRROR}/software/scm/git/git-manpages-${PV}.tar.gz;name=manpages" | 11 | ${KERNELORG_MIRROR}/software/scm/git/git-manpages-${PV}.tar.gz;name=manpages \ |
| 12 | file://CVE-2021-21300.patch \ | ||
| 13 | " | ||
| 12 | 14 | ||
| 13 | S = "${WORKDIR}/git-${PV}" | 15 | S = "${WORKDIR}/git-${PV}" |
| 14 | 16 | ||