From 986f7fbe37a48d050611f08f7160ed96755ac3dc Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Sun, 31 Jul 2016 08:30:18 -0700 Subject: foomatic-filters: Security fixes CVE-2015-8327 CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- .../foomatic-filters-4.0.17/CVE-2015-8327.patch | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch (limited to 'meta/recipes-extended/foomatic/foomatic-filters-4.0.17') diff --git a/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch new file mode 100644 index 0000000000..aaedc88aa3 --- /dev/null +++ b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch @@ -0,0 +1,23 @@ +Upstream-Status: Backport + + +http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7406 + +Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters. + +CVE: CVE-2015-8327 +Signed-off-by: Armin Kuster + +Index: util.c +=================================================================== +--- a/util.c ++++ b/util.c +@@ -31,7 +31,7 @@ + #include + + +-const char* shellescapes = "|;<>&!$\'\"#*?()[]{}"; ++const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}"; + + const char * temp_dir() + { -- cgit 1.2.3-korg