mirror of
https://git.yoctoproject.org/poky
synced 2026-02-28 04:19:40 +01:00
This is a followup patch to incomplete CVE-2014-6271 fix code execution via specially-crafted environment Change-Id: Ibb0a587ee6e09b8174e92d005356e822ad40d4ed (From OE-Core rev: 76a2d6b83472995edbe967aed80f0fcbb784b3fc) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 lines
712 B
Bash
21 lines
712 B
Bash
require bash.inc
|
|
|
|
# GPLv2+ (< 4.0), GPLv3+ (>= 4.0)
|
|
LICENSE = "GPLv3+"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
|
|
|
|
SRC_URI = "${GNU_MIRROR}/bash/${BPN}-${PV}.tar.gz;name=tarball \
|
|
file://execute_cmd.patch;striplevel=0 \
|
|
file://mkbuiltins_have_stringize.patch \
|
|
file://build-tests.patch \
|
|
file://test-output.patch \
|
|
file://cve-2014-6271.patch;striplevel=0 \
|
|
file://cve-2014-7169.patch \
|
|
file://run-ptest \
|
|
"
|
|
|
|
SRC_URI[tarball.md5sum] = "81348932d5da294953e15d4814c74dd1"
|
|
SRC_URI[tarball.sha256sum] = "afc687a28e0e24dc21b988fa159ff9dbcf6b7caa92ade8645cc6d5605cd024d4"
|
|
|
|
BBCLASSEXTEND = "nativesdk"
|