From b7f79fbf23488b954987dfc4aa867e42bdce7fee Mon Sep 17 00:00:00 2001 From: Purushottam Choudhary Date: Fri, 21 Jan 2022 18:37:33 +0530 Subject: systemd: Fix CVE-2021-3997 Add patches to fix CVE-2021-3997. Add additional below mentioned patches which are required to fix CVE: 1. rm-rf-optionally-fsync-after-removing-directory-tree.patch 2. rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch Link: http://archive.ubuntu.com/ubuntu/pool/main/s/systemd/systemd_245.4-4ubuntu3.15.debian.tar.xz Signed-off-by: Purushottam Choudhary Signed-off-by: Purushottam Choudhary Signed-off-by: Steve Sakoman --- meta/recipes-core/systemd/systemd_244.5.bb | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'meta/recipes-core/systemd/systemd_244.5.bb') diff --git a/meta/recipes-core/systemd/systemd_244.5.bb b/meta/recipes-core/systemd/systemd_244.5.bb index b6f5a47d63..66446e2a7c 100644 --- a/meta/recipes-core/systemd/systemd_244.5.bb +++ b/meta/recipes-core/systemd/systemd_244.5.bb @@ -28,6 +28,11 @@ SRC_URI += "file://touchscreen.rules \ file://network-merge-link_drop-and-link_detach_from_manager.patch \ file://network-also-drop-requests-when-link-enters-linger-state.patch \ file://network-fix-Link-reference-counter-issue.patch \ + file://rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch \ + file://rm-rf-optionally-fsync-after-removing-directory-tree.patch \ + file://CVE-2021-3997-1.patch \ + file://CVE-2021-3997-2.patch \ + file://CVE-2021-3997-3.patch \ " # patches needed by musl -- cgit 1.2.3-korg