diff options
| author | Catalin Popeanga <Catalin.Popeanga@enea.com> | 2014-10-09 14:24:29 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-10-13 11:18:38 +0100 |
| commit | db7891c164f8522358a850014754eb6a0bd64c2d (patch) | |
| tree | 3664677b2d05743ee12871e92090d5a4c3f491af /meta/recipes-extended/bash/bash_3.2.48.bb | |
| parent | f7dba9940cf6067f4a26de0151c0d5cc029a04f8 (diff) | |
| download | poky-db7891c164f8522358a850014754eb6a0bd64c2d.tar.gz | |
bash: Fix for CVE-2014-7186 and CVE-2014-7187
This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7186
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7187
(From OE-Core daisy rev: 153d1125659df9e5c09e35a58bd51be184cb13c1)
(From OE-Core rev: bdfe1e3770aeee9a1a7c65d4834f1a99820d3140)
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/bash/bash_3.2.48.bb')
| -rw-r--r-- | meta/recipes-extended/bash/bash_3.2.48.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/bash/bash_3.2.48.bb b/meta/recipes-extended/bash/bash_3.2.48.bb index a5417f19cc..2b26ae75c2 100644 --- a/meta/recipes-extended/bash/bash_3.2.48.bb +++ b/meta/recipes-extended/bash/bash_3.2.48.bb | |||
| @@ -15,6 +15,7 @@ SRC_URI = "${GNU_MIRROR}/bash/bash-${PV}.tar.gz;name=tarball \ | |||
| 15 | file://cve-2014-6271.patch;striplevel=0 \ | 15 | file://cve-2014-6271.patch;striplevel=0 \ |
| 16 | file://cve-2014-7169.patch \ | 16 | file://cve-2014-7169.patch \ |
| 17 | file://Fix-for-bash-exported-function-namespace-change.patch \ | 17 | file://Fix-for-bash-exported-function-namespace-change.patch \ |
| 18 | file://cve-2014-7186_cve-2014-7187.patch \ | ||
| 18 | file://run-ptest \ | 19 | file://run-ptest \ |
| 19 | " | 20 | " |
| 20 | 21 | ||