git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit

author	Vijay Anusuri <vanusuri@mvista.com>
	Thu, 23 Nov 2023 03:37:05 +0000 (09:07 +0530)
committer	Steve Sakoman <steve@sakoman.com>
	Mon, 27 Nov 2023 15:44:27 +0000 (05:44 -1000)
commit	a53d446c289f07854e286479cd7e4843ddd0ee8c
tree	cc4298e1ab22eb99f573795a3dec2ffe42a1d6c8	tree
parent	a939696d7c70c42e404ec30a9d75e5ea4f742c78	commit \| diff

shadow: backport patch to fix CVE-2023-29383

The fix of CVE-2023-29383.patch contains a bug that it rejects all
characters that are not control ones, so backup another patch named
"0001-Overhaul-valid_field.patch" from upstream to fix it.

(From OE-Core rev: ab48ab23de6f6bb1f05689c97724140d4bef8faa)

Upstream-Status: Backport
[https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d
&
https://github.com/shadow-maint/shadow/commit/2eaea70111f65b16d55998386e4ceb4273c19eb4]

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

meta/recipes-extended/shadow/files/0001-Overhaul-valid_field.patch	[new file with mode: 0644]	blob
meta/recipes-extended/shadow/files/CVE-2023-29383.patch	[new file with mode: 0644]	blob
meta/recipes-extended/shadow/shadow.inc		diff \| blob \| blame \| history