diff options
| author |   Ross Burton <ross.burton@intel.com> | 2019-11-04 12:27:13 +0000 |
|---|---|---|
| committer |   Armin Kuster <akuster808@gmail.com> | 2019-11-10 14:16:17 -0800 |
| commit | 41b1d53cea0302f1c3954c6ab048366c908cf754 (patch) | |
| tree | 1c0168d8ce32983f92f1ecad8a6fb4f2d7222329 | |
| parent | 90b4b7dd19526e8aba79cf469dcc2c05401f36cc (diff) | |
| download | openembedded-core-contrib-41b1d53cea0302f1c3954c6ab048366c908cf754.tar.gz | |
patch: the CVE-2019-13638 fix also handles CVE-2018-20969
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch b/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch index f60dfe879a..d13d419f51 100644 --- a/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch +++ b/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch @@ -6,8 +6,8 @@ Subject: [PATCH] Invoke ed directly instead of using the shell * src/pch.c (do_ed_script): Invoke ed directly instead of using a shell command to avoid quoting vulnerabilities. -CVE: CVE-2019-13638 -Upstream-Status: Backport[https://git.savannah.gnu.org/cgit/patch.git/patch/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0] +CVE: CVE-2019-13638 CVE-2018-20969 +Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/patch.git/patch/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0] Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> --- |