mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-14 03:57:15 +00:00
Leon Anavi
166a07306b
Upgrade to release 4.4.2 with security fixes: - Fixed shell command injection through file names in the edit command and Cmd.run_editor(). A file name containing shell syntax such as $(...) or backticks was interpreted by the shell instead of being passed to the editor as-is. On Windows, run_editor() now raises ValueError for an editor or file path containing a double quote, which cannot be passed safely to cmd.exe. - The persistent history file is now readable and writable only by its owner (mode 0600 on POSIX), since history can contain secrets typed as command arguments. The permissions of an existing history file are tightened the next time history is saved. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories