From a753d3d8884b96baad5ed1a03335a81586420b86 Mon Sep 17 00:00:00 2001 From: Andre McCurdy Date: Tue, 14 Apr 2015 19:53:53 -0700 Subject: busybox: remove CVE-2014-9645 patch (already upstream in 1.23.x) The CVE-2014-9645 fix was merged in Busybox prior to the 1.23.0 release [1]. The fix was then reworked in Busybox 1.23.1, in such a way that the original change was no longer required [2]. Although oe-core's CVE-2014-9645 patch still applies cleanly to Busybox 1.23.1 and 1.23.2, applying it partially reverts the second version of the upstream fix. [1] http://git.busybox.net/busybox/commit/modutils/modprobe.c?h=1_23_stable&id=4e314faa0aecb66717418e9a47a4451aec59262b [2] http://git.busybox.net/busybox/commit/modutils/modprobe.c?h=1_23_stable&id=1ecfe811fe2f70380170ef7d820e8150054e88ca Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie --- meta/recipes-core/busybox/busybox_1.23.2.bb | 1 - 1 file changed, 1 deletion(-) (limited to 'meta/recipes-core/busybox/busybox_1.23.2.bb') diff --git a/meta/recipes-core/busybox/busybox_1.23.2.bb b/meta/recipes-core/busybox/busybox_1.23.2.bb index 0af292df6f..b1b90327dd 100644 --- a/meta/recipes-core/busybox/busybox_1.23.2.bb +++ b/meta/recipes-core/busybox/busybox_1.23.2.bb @@ -30,7 +30,6 @@ SRC_URI = "http://www.busybox.net/downloads/busybox-${PV}.tar.bz2;name=tarball \ file://login-utilities.cfg \ file://recognize_connmand.patch \ file://busybox-cross-menuconfig.patch \ - file://CVE-2014-9645_busybox_reject_module_names_with_slashes.patch \ " SRC_URI[tarball.md5sum] = "7925683d7dd105aabe9b6b618d48cc73" -- cgit 1.2.3-korg