Purushottam Choudhary dee8235c61 shadow: whitelist CVE-2013-4235 ...

This CVE is about TOCTOU (time-of-check time-of-use)
race condition when copying and removing directory trees
which had very low severity problem and marked as closed
and won't fix. Therefore whitelisted CVE-2013-4235.
Master, gatesgarth and dunfell all have shadow version 4.81.
Hence, this is applicable for master, gatesgarth and dunfell.
Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658

(From OE-Core rev: 1474dcb84c925603736bafbe9fc802a99a014a39)

Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b1c6cd87bee6b019619dc5728fd6c36bc87ed696)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-03-28 22:31:55 +01:00

..

files

shadow: upgrade 4.8 -> 4.8.1

2020-02-21 17:48:09 +00:00

shadow_4.8.1.bb

shadow: whitelist CVE-2013-4235

2021-03-28 22:31:55 +01:00

shadow-securetty_4.6.bb

shadow: upgrade 4.2.1 -> 4.6

2018-07-30 12:44:35 +01:00

shadow-sysroot_4.6.bb

libtools-cross/shadow-sysroot: Use nopackages inherit

2020-10-06 23:14:25 +01:00

shadow.inc

shadow: upgrade 4.8 -> 4.8.1

2020-02-21 17:48:09 +00:00