From 2683d8287d6878868d3aa15ce6e6a80ce28d8737 Mon Sep 17 00:00:00 2001 From: Zhixiong Chi Date: Tue, 16 Oct 2018 00:55:04 -0700 Subject: binutils: fix three CVE issues Backport the CVE patches from the upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git; h=30838132997e6a3cfe3ec11c58b32b22f6f6b102 h=cf93e9c2cf8f8b2566f8fc86e961592b51b5980d [BZ 23686] https://sourceware.org/bugzilla/show_bug.cgi?id=23686 [BZ 23685] https://sourceware.org/bugzilla/show_bug.cgi?id=23685 The one is for CVE-2018-17358 and CVE-2018-17359, and the another is for CVE-2018-17360. Signed-off-by: Zhixiong Chi Signed-off-by: Richard Purdie --- meta/recipes-devtools/binutils/binutils-2.31.inc | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta/recipes-devtools/binutils/binutils-2.31.inc') diff --git a/meta/recipes-devtools/binutils/binutils-2.31.inc b/meta/recipes-devtools/binutils/binutils-2.31.inc index 76add0fe4b..27a643d765 100644 --- a/meta/recipes-devtools/binutils/binutils-2.31.inc +++ b/meta/recipes-devtools/binutils/binutils-2.31.inc @@ -41,6 +41,8 @@ SRC_URI = "\ file://0019-Improved-robustness.-Return-FALSE-in-case-of-NULL-po.patch \ file://0020-Make-sure-global-symbol-is-not-an-indirect-or-warnin.patch \ file://0021-PLT-information-was-still-being-generated-when-symbo.patch \ + file://CVE-2018-17358.patch \ + file://CVE-2018-17360.patch \ " S = "${WORKDIR}/git" -- cgit 1.2.3-korg