]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
projects / thirdparty / openembedded / openembedded-core-contrib.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0a6e3a9) | patch
libarchive: Security Advisory - libarchive - CVE-2015-2304
authorLi Zhou <li.zhou@windriver.com>
Fri, 24 Apr 2015 07:36:36 +0000 (15:36 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 28 Apr 2015 06:56:56 +0000 (07:56 +0100)
commitaee1b2acfb229482b3c93ae75249d9addb1fc68c
tree74b91d87dbaebfd55d7058d3721bb9e965ed51b5tree
parent0a6e3a9d69359ad64467dc29d8665ee7f425fbf9commit | diff
libarchive: Security Advisory - libarchive - CVE-2015-2304

libarchive: Updated libarchive packages fix security vulnerability

Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio"
program part of the libarchive project, is susceptible to a directory
traversal vulnerability via absolute paths.

(From OE-Core rev: e64a961e9c5e94e643896e4b68b85bd5b4c27470)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/libarchive/libarchive/0001-Add-ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS-option.patch [new file with mode: 0644] blob
meta/recipes-extended/libarchive/libarchive_3.1.2.bb diff | blob | blame | history
Mirror of git://git.openembedded.org/openembedded-core-contrib