summaryrefslogtreecommitdiff
path: root/meta/recipes-extended/cpio/cpio_2.11.bb
diff options
context:
space:
mode:
authorBian Naimeng <biannm@cn.fujitsu.com>2014-12-08 13:45:07 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2014-12-31 10:17:00 +0000
commitf5c196fdde79402119ae1893c6150b4bfbc137a1 (patch)
treef38f3b64ebf9b935169968204d34fda5f9371c85 /meta/recipes-extended/cpio/cpio_2.11.bb
parent695d14dc92d7de89ae02dac0928f184519b8b57d (diff)
downloadopenembedded-core-f5c196fdde79402119ae1893c6150b4bfbc137a1.tar.gz
openembedded-core-f5c196fdde79402119ae1893c6150b4bfbc137a1.tar.bz2
openembedded-core-f5c196fdde79402119ae1893c6150b4bfbc137a1.zip
cpio: fix bug CVE-2014-9112 for cpio-2.11
Obtain detain from following URL. http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d (From OE-Core rev: 9a32da05f5a9bc62c592fd2d6057dc052e363261) Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/recipes-extended/cpio/cpio_2.11.bb')
-rw-r--r--meta/recipes-extended/cpio/cpio_2.11.bb3
1 files changed, 2 insertions, 1 deletions
diff --git a/meta/recipes-extended/cpio/cpio_2.11.bb b/meta/recipes-extended/cpio/cpio_2.11.bb
index 5f88b30f1e..c42db6f352 100644
--- a/meta/recipes-extended/cpio/cpio_2.11.bb
+++ b/meta/recipes-extended/cpio/cpio_2.11.bb
@@ -3,9 +3,10 @@ include cpio_v2.inc
LICENSE = "GPLv3"
LIC_FILES_CHKSUM = "file://COPYING;md5=f27defe1e96c2e1ecd4e0c9be8967949"
-PR = "r4"
+PR = "r5"
SRC_URI += "file://remove-gets.patch \
+ file://fix-memory-overrun.patch \
"
SRC_URI[md5sum] = "1112bb6c45863468b5496ba128792f6c"