[prev in list] [next in list] [prev in thread] [next in thread]
List: openembedded-core
Subject: [OE-core] [PATCH][master][krogoth 2/2] foomatic-filters: Security fixes CVE-2015-8327
From: Armin Kuster <akuster808 () gmail ! com>
Date: 2016-07-31 15:30:18
Message-ID: 1469979018-18008-2-git-send-email-akuster808 () gmail ! com
[Download RAW message or body]
From: Armin Kuster <akuster@mvista.com>
CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal \
shell escape character
this time with the recipe changes.
(From OE-Core rev: 62d6876033476592a8ca35f4e563c996120a687b)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
.../foomatic-filters-4.0.17/CVE-2015-8327.patch | 23 ++++++++++++++++++++++
.../foomatic/foomatic-filters_4.0.17.bb | 1 +
2 files changed, 24 insertions(+)
create mode 100644 meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch
diff --git a/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch \
b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch new file \
mode 100644 index 0000000..aaedc88
--- /dev/null
+++ b/meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch
@@ -0,0 +1,23 @@
+Upstream-Status: Backport
+
+
+http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7406
+
+Hand applied change to util.c. Fix was for cups-filters but also applied to \
foomatic-filters. +
+CVE: CVE-2015-8327
+Signed-off-by: Armin Kuster <akuster@mvista.com>
+
+Index: util.c
+===================================================================
+--- a/util.c
++++ b/util.c
+@@ -31,7 +31,7 @@
+ #include <assert.h>
+
+
+-const char* shellescapes = "|;<>&!$\'\"#*?()[]{}";
++const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}";
+
+ const char * temp_dir()
+ {
diff --git a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb \
b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb index 497d2bf..3f439e7 \
100644
--- a/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
+++ b/meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
@@ -18,6 +18,7 @@ LIC_FILES_CHKSUM = \
"file://${WORKDIR}/foomatic-filters-${PV}/COPYING;md5=393a5ca SRC_URI = \
"http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
SRC_URI += "file://CVE-2015-8560.patch \
+ file://CVE-2015-8327.patch \
"
SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"
--
2.3.5
--
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic