Ralph Siemsen 30eb28dd02 xz: fix CVE-2022-1271 ...

Malicious filenames can make xzgrep to write to arbitrary files
or (with a GNU sed extension) lead to arbitrary code execution.

Upstream-Status: Backport [https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch]
CVE: CVE-2022-1271

(From OE-Core rev: 97bf86ccde4417daec8ef3945071a50a09134bc6)

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-04-10 08:31:17 +01:00

..

classes

u-boot: Fix condition for install_spl_helper

2022-04-05 22:23:40 +01:00

conf

bitbake.conf: Drop unexports from a different era

2022-04-05 10:49:36 +01:00

files

files: overlayfs-etc: add overlay mount options to preinit

2022-03-11 06:56:02 +00:00

lib

package_manager: sign DEB package feeds

2022-04-05 22:25:13 +01:00

recipes-bsp

keymaps: Clean up license handling

2022-04-01 23:11:37 +01:00

recipes-connectivity

connman-conf: ignore eth0 in qemu in a way that is not sysvinit-specific

2022-04-08 17:49:58 +01:00

recipes-core

build-appliance-image: Update to master head revision

2022-04-05 22:28:11 +01:00

recipes-devtools

pseudo: Fix handling of absolute links

2022-04-05 22:23:40 +01:00

recipes-example/rust-hello-world

rustfmt: remove the recipe

2021-12-08 20:22:11 +00:00

recipes-extended

xz: fix CVE-2022-1271

2022-04-10 08:31:17 +01:00

recipes-gnome

gobject-introspection: fix default search path for girdir

2022-03-31 17:52:58 +01:00

recipes-graphics

libsdl2: Disable libunwind dependency in native builds

2022-04-05 22:24:33 +01:00

recipes-kernel

depmodwrapper-cross: Fix missing $

2022-04-05 22:23:40 +01:00

recipes-multimedia

tiff: backport CVE fixes:

2022-03-23 12:13:50 +00:00

recipes-rt

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

recipes-sato

webkitgtk: Depend on virtual/egl instead of virtual/libgl

2022-03-24 17:45:29 +00:00

recipes-support

vim: Upgrade 8.2.4524 -> 8.2.4681

2022-04-05 10:49:36 +01:00

site

ppc/siteinfo: Fix differences between musl and glibc

2022-03-15 08:40:09 +00:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00