mirror of
https://git.yoctoproject.org/poky
synced 2026-07-16 15:57:04 +00:00
Li Zhou
3e3507d02e
libarchive: Updated libarchive packages fix security vulnerability Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. (From OE-Core master rev: e64a961e9c5e94e643896e4b68b85bd5b4c27470) (From OE-Core rev: c944c1ee3f039979d93022bbbd76f61f57b1577f) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>