mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-27 21:32:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

webkitgtk: fix CVE-2020-13753

Browse Source 
(From OE-Core rev: c19c4ef4efeebe4df03c06a995a60d1a31c605d8)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Lee Chee Yang
2020-08-07 17:45:19 +08:00
committed by Richard Purdie
parent 24f6a075e5
commit d62a7733e0
2 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
meta/recipes-sato/webkit/webkitgtk/CVE-2020-13753.patch Normal file
View File

@@ -0,0 +1,15 @@
Upstream-Status: Backport [https://trac.webkit.org/changeset/262368/webkit?format=diff&new=262368]
CVE: CVE-2020-13753
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Index: a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp
===================================================================
--- a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp (revision 262367)
+++ b/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp (revision 262368)
@@ -642,5 +642,5 @@
int r;
if (rule.arg)
- r = seccomp_rule_add(seccomp, SCMP_ACT_ERRNO(EPERM), scall, 1, rule.arg);
+ r = seccomp_rule_add(seccomp, SCMP_ACT_ERRNO(EPERM), scall, 1, *rule.arg);
else
r = seccomp_rule_add(seccomp, SCMP_ACT_ERRNO(EPERM), scall, 0);

1
meta/recipes-sato/webkit/webkitgtk_2.28.2.bb
View File

@@ -19,6 +19,7 @@ SRC_URI = "https://www.webkitgtk.org/releases/${BPN}-${PV}.tar.xz \
file://cross-compile.patch \
file://0001-Fix-build-with-musl.patch \
file://include_array.patch \
file://CVE-2020-13753.patch \
"
SRC_URI[md5sum] = "ec0ef870ca37e3a5ebbead2f268a28ec"
SRC_URI[sha256sum] = "b9d23525cfd8d22c37b5d964a9fe9a8ce7583042a2f8d3922e71e6bbc68c30bd"