aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-core/systemd/systemd_237.bb
diff options
context:
space:
mode:
authorGeorge McCollister <george.mccollister@gmail.com>2019-02-25 10:37:13 -0600
committerArmin Kuster <akuster808@gmail.com>2019-03-17 12:07:56 -0700
commit02fa4a3117396e85f746ba990b44d47306cd5c92 (patch)
tree9b2b807f08fc3f7b768a934311153d5fa4f54d06 /meta/recipes-core/systemd/systemd_237.bb
parente749c579acbf4c5ddef4c875635af6da89e17d17 (diff)
downloadopenembedded-core-contrib-02fa4a3117396e85f746ba990b44d47306cd5c92.tar.gz
systemd: fix CVE-2019-6454
Apply patches from systemd_237-3ubuntu10.13 to fix CVE-2019-6454. CVE-2019-6454 is an issue in which systemd (PID1) can be crashed with a specially formed D-Bus message. For information see: https://usn.ubuntu.com/3891-1/ https://git.launchpad.net/ubuntu/+source/systemd/commit/?h=applied/ubuntu/bionic-updates&id=d7584b894afcaa8a4a1abb69db2a9c81a6276e80 Signed-off-by: George McCollister <george.mccollister@gmail.com>
Diffstat (limited to 'meta/recipes-core/systemd/systemd_237.bb')
-rw-r--r--meta/recipes-core/systemd/systemd_237.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-core/systemd/systemd_237.bb b/meta/recipes-core/systemd/systemd_237.bb
index bc33fbebdc..a0e5d512e0 100644
--- a/meta/recipes-core/systemd/systemd_237.bb
+++ b/meta/recipes-core/systemd/systemd_237.bb
@@ -63,6 +63,8 @@ SRC_URI += "file://touchscreen.rules \
file://0027-journal-fix-out-of-bounds-read-CVE-2018-16866.patch \
file://0001-tmpfiles-don-t-resolve-pathnames-when-traversing-rec.patch \
file://0002-Make-tmpfiles-safe.patch \
+ file://CVE-2019-6454.patch \
+ file://sd-bus-if-we-receive-an-invalid-dbus-message-ignore-.patch \
"
SRC_URI_append_qemuall = " file://0001-core-device.c-Change-the-default-device-timeout-to-2.patch"