diff options
| author | Armin Kuster <akuster@mvista.com> | 2016-02-01 09:44:33 -0800 |
|---|---|---|
| committer | Joshua Lock <joshua.g.lock@intel.com> | 2016-02-29 15:05:16 +0000 |
| commit | 4f92365ebfb382509d152dfe6220e225193645f1 (patch) | |
| tree | 8b0887c874ca7460cb29a6bcb402846a2b090345 /meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch | |
| parent | 082031bdd4b5c5d4acea816c95d94a731b7855c2 (diff) | |
| download | openembedded-core-4f92365ebfb382509d152dfe6220e225193645f1.tar.gz openembedded-core-4f92365ebfb382509d152dfe6220e225193645f1.tar.bz2 openembedded-core-4f92365ebfb382509d152dfe6220e225193645f1.zip | |
foomatic-filters: Security fix CVE-2015-8560
CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character
(From OE-Core master rev: 307056ce062bf4063f6effeb4c891c82c949c053)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Diffstat (limited to 'meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch')
| -rw-r--r-- | meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch new file mode 100644 index 0000000000..dc973c4592 --- /dev/null +++ b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8560.patch @@ -0,0 +1,23 @@ +Upstream-Status: Backport + + +http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419 + +Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters. + +CVE: CVE-2015-8560 +Signed-off-by: Armin Kuster <akuster@mvista.com> + +Index: util.c +=================================================================== +--- a/util.c ++++ b/util.c +@@ -31,7 +31,7 @@ + #include <assert.h> + + +-const char* shellescapes = "|<>&!$\'\"#*?()[]{}"; ++const char* shellescapes = "|;<>&!$\'\"#*?()[]{}"; + + const char * temp_dir() + { |