diff options
| author |   Yue Tao <Yue.Tao@windriver.com> | 2014-04-14 12:41:17 +0800 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-05-21 09:08:09 +0100 |
| commit | 25a212d0154906e7a05075d015dbc1cfdfabb73a (patch) | |
| tree | b1f47e99e76f850fd7cd9be17f6bf5b2dd294922 /meta/recipes-extended/screen/screen_4.0.3.bb | |
| parent | a419ad43a5b3aa5bc3aa095af4d79abe4c24b0d7 (diff) | |
| download | openembedded-core-25a212d0154906e7a05075d015dbc1cfdfabb73a.tar.gz | |
Screen: fix for Security Advisory CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with
world-readable permissions, which might allow local users to obtain
sensitive session information.
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Diffstat (limited to 'meta/recipes-extended/screen/screen_4.0.3.bb')
| -rw-r--r-- | meta/recipes-extended/screen/screen_4.0.3.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/screen/screen_4.0.3.bb b/meta/recipes-extended/screen/screen_4.0.3.bb index 5850560fe4..a0aa15c0d3 100644 --- a/meta/recipes-extended/screen/screen_4.0.3.bb +++ b/meta/recipes-extended/screen/screen_4.0.3.bb @@ -20,6 +20,7 @@ SRC_URI = "${GNU_MIRROR}/screen/screen-${PV}.tar.gz;name=tarball \ ${DEBIAN_MIRROR}/main/s/screen/screen_4.0.3-14.diff.gz;name=patch \ file://configure.patch \ file://fix-parallel-make.patch \ + file://screen-4.0.3-CVE-2009-1214.patch \ ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)}" PAM_SRC_URI = "file://screen.pam" |