diff options
| author | Chen Qi <Qi.Chen@windriver.com> | 2017-08-16 18:28:10 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-08-17 10:04:30 +0100 |
| commit | 896495d4d2a9751e6e013a3498293b2443d7d809 (patch) | |
| tree | 10b8bcbad37497cc31f620991b6ab12a67dd46ed /scripts/lib/scriptpath.py | |
| parent | 86838f1c06002a62ded12a9a66d1eb82093c85a9 (diff) | |
| download | openembedded-core-896495d4d2a9751e6e013a3498293b2443d7d809.tar.gz openembedded-core-896495d4d2a9751e6e013a3498293b2443d7d809.tar.bz2 openembedded-core-896495d4d2a9751e6e013a3498293b2443d7d809.zip | |
shadow: fix CVE-2017-12424
Backport a patch to fix CVE-2017-12424.
In shadow before 4.5, the newusers tool could be made to manipulate
internal data structures in ways unintended by the authors.
Reference link: https://nvd.nist.gov/vuln/detail/CVE-2017-12424
CVE: CVE-2017-12424
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/scriptpath.py')
0 files changed, 0 insertions, 0 deletions