summaryrefslogtreecommitdiff
path: root/meta/recipes-extended/grep/grep_2.19.bb
diff options
context:
space:
mode:
authorSona Sarmadi <sona.sarmadi@enea.com>2015-09-16 16:31:42 +0200
committerRichard Purdie <richard.purdie@linuxfoundation.org>2016-01-30 12:01:42 +0000
commitfb3e73fb2536b718dfce0e7b126f75464b9874aa (patch)
treeb964fe3a197a50425bc97a6d827357c1b20847fb /meta/recipes-extended/grep/grep_2.19.bb
parent61bee3f813127c91d75a2af5197bdc874483a1fd (diff)
downloadopenembedded-core-fb3e73fb2536b718dfce0e7b126f75464b9874aa.tar.gz
openembedded-core-fb3e73fb2536b718dfce0e7b126f75464b9874aa.tar.bz2
openembedded-core-fb3e73fb2536b718dfce0e7b126f75464b9874aa.zip
grep2.19: CVE-2015-1345
Fixes heap-based buffer overflow flaw in grep. Affected versions are: grep 2.19 through 2.21 Removed THANKS.in changes from upstream patch since this file does not exist in version 2.19. Replaced tab with spaces in SRC_URI as well. Upstream fix: http://git.sv.gnu.org/cgit/grep.git/commit/?id= 83a95bd8c8561875b948cadd417c653dbe7ef2e2 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
Diffstat (limited to 'meta/recipes-extended/grep/grep_2.19.bb')
-rw-r--r--meta/recipes-extended/grep/grep_2.19.bb4
1 files changed, 3 insertions, 1 deletions
diff --git a/meta/recipes-extended/grep/grep_2.19.bb b/meta/recipes-extended/grep/grep_2.19.bb
index 9c162cca49..d60ce5e389 100644
--- a/meta/recipes-extended/grep/grep_2.19.bb
+++ b/meta/recipes-extended/grep/grep_2.19.bb
@@ -5,7 +5,9 @@ SECTION = "console/utils"
LICENSE = "GPLv3"
LIC_FILES_CHKSUM = "file://COPYING;md5=8006d9c814277c1bfc4ca22af94b59ee"
-SRC_URI = "${GNU_MIRROR}/grep/grep-${PV}.tar.xz"
+SRC_URI = "${GNU_MIRROR}/grep/grep-${PV}.tar.xz \
+ file://grep2.19-CVE-2015-1345.patch \
+ "
SRC_URI[md5sum] = "ac732142227d9fe9567d71301e127979"
SRC_URI[sha256sum] = "6388295be48cfcaf7665d9cd3914e6625ea000e9414132bfefd45cf1d8eec34d"