Archana Polampalli 78e33c0f8b rsync: fix CVE-2024-12088 ...

A flaw was found in rsync. When using the `--safe-links` option, rsync fails to
properly verify if a symbolic link destination contains another symbolic link within it.
This results in a path traversal vulnerability, which may lead to arbitrary file write
outside the desired directory.

(From OE-Core rev: dad4a83c011310872cce07fc4141e66a98439cb1)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-01-25 06:20:37 -08:00

..

classes

cve_check: Use a local copy of the database during builds

2024-11-09 05:53:57 -08:00

classes-global

sanity.bbclass: skip check_userns for non-local uid

2025-01-09 06:25:36 -08:00

classes-recipe

classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture

2025-01-24 07:59:39 -08:00

conf

tune-cortexa32: set tune feature as armv8a

2024-11-26 06:11:30 -08:00

files

toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails

2024-11-26 06:11:30 -08:00

lib

oeqa/ssh: allow to retrieve raw, unformatted ouput

2025-01-24 07:59:39 -08:00

recipes-bsp

recipes-bsp: usbutils: Fix usb-devices command using busybox

2024-10-18 06:04:41 -07:00

recipes-connectivity

Revert "bluez5: remove configuration files from install task"

2025-01-24 07:59:39 -08:00

recipes-core

systemd: enable create-log-dirs

2025-01-18 06:26:45 -08:00

recipes-devtools

rsync: fix CVE-2024-12088

2025-01-25 06:20:37 -08:00

recipes-extended

wget: fix CVE-2024-10524

2025-01-24 07:59:38 -08:00

recipes-gnome

gcr: Fix LICENSE

2024-09-19 05:11:35 -07:00

recipes-graphics

builder: set CVE_PRODUCT

2024-12-06 05:50:25 -08:00

recipes-kernel

linux-yocto/6.6: update to v6.6.69

2025-01-18 06:26:45 -08:00

recipes-multimedia

pulseaudio: fix webrtc audio depdency

2025-01-24 07:59:39 -08:00

recipes-rt

rt-tests: rt_bmark.py: fix TypeError

2024-08-06 19:11:18 -07:00

recipes-sato

rxvt-unicode.inc: disable the terminfo installation by setting TIC to :

2024-12-09 06:54:14 -08:00

recipes-support

libgcrypt: Fix building error with '-O2' in sysroot path

2024-12-06 05:50:25 -08:00

site

site: remove at-spi2-core values

2023-09-02 07:45:29 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00