Robert Yang 18661937e4 cpio: fix CVE-2015-1197 ...

Additional directory traversal vulnerability via symlinks
cpio CVE-2015-1197

Initial report:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
Upstream report:
https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html

And fix the indent in SRC_URI.

[YOCTO #7182]

(From OE-Core rev: 87d8c11e7504210e377cb6201e672d32048e000c)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-03-31 22:24:30 +01:00

..

classes

kernel-yocto: allow in-tree defconfigs

2015-03-25 12:39:46 +00:00

conf

tcmode-default: Define one gdb version

2015-03-20 23:55:59 +00:00

files

toolchain-shar-template.sh: Make relocation optional.

2015-02-24 17:41:43 +00:00

lib

package_deb: DpkgIndexer use apt-ftparchive that needs a valid config

2015-03-25 12:39:45 +00:00

recipes-bsp

u-boot-mkimage: remove unnecessary 'protocol=git' from SRC_URI

2015-03-20 11:27:50 +00:00

recipes-connectivity

openssl: 1.0.2 -> 1.0.2a

2015-03-25 12:39:46 +00:00

recipes-core

build-appliance-image: Update to fido head revision

2015-03-25 13:14:35 +00:00

recipes-devtools

patch: fix CVE-2015-1196

2015-03-31 22:24:29 +01:00

recipes-extended

cpio: fix CVE-2015-1197

2015-03-31 22:24:30 +01:00

recipes-gnome

libffi: Upgrade to 3.2.1

2015-01-07 23:35:10 +00:00

recipes-graphics

directfb: define DEPENDS and EXTRA_OECONF via directfb.inc only

2015-03-22 14:42:13 +00:00

recipes-kernel

lttng-modules: Update along 2.6 stable branch

2015-03-25 12:39:49 +00:00

recipes-lsb4

libpng12: upgrade to 1.2.52

2015-01-07 23:35:01 +00:00

recipes-multimedia

gst-player: Add error messages for missing plugins

2015-03-25 12:39:45 +00:00

recipes-qt

qt4: add patch for BMP denial-of-service vulnerability

2015-03-09 15:58:00 +00:00

recipes-rt

rt-tests: fix gzip command

2015-02-15 21:58:25 +00:00

recipes-sato

webkit-gtk: disable JIT for armv5/armv6

2015-03-25 12:39:37 +00:00

recipes-support

libunwind: use xz, because it fails to detect liblzma provided by lzma

2015-03-25 12:39:44 +00:00

site

siteinfo: account for 32 and 64 bit arm

2014-12-23 10:18:17 +00:00

COPYING.GPLv2

…

COPYING.MIT

…

recipes.txt

…