Zhixiong Chi 9ef73fbeba bash: CVE-2016-0634 ...

A vulnerability was found in a way bash expands the $HOSTNAME.
Injecting the hostname with malicious code would cause it to run
each time bash expanded \h in the prompt string.

Porting patch from <https://ftp.gnu.org/gnu/bash/bash-4.3-patches/
bash43-047> to solve CVE-2016-0634

CVE: CVE-2016-0634

(From OE-Core rev: 7dd6aa1a4bf6e9fc8a1998cda6ac5397bb5cd5cb)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-05-12 08:51:09 +01:00

..

acpica

acpica: fix upstream version check

2017-04-29 11:17:23 +01:00

asciidoc

asciidoc: set CLEANBROKEN to fix rebuild

2016-09-22 11:13:24 +01:00

at

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

bash

bash: CVE-2016-0634

2017-05-12 08:51:09 +01:00

bc

bc: separate B and S

2015-01-16 23:08:25 +00:00

blktool

blktool: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

byacc

byacc: 20161202 -> 20170201

2017-05-12 08:51:09 +01:00

bzip2

openssl/fontconfig/bzip2: Use relative symlinks instead of absolute ones (using a new class)

2017-02-09 10:52:03 +00:00

chkconfig

chkconfig: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cpio

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

cracklib

cracklib: Apply patch to fix CVE-2016-6318

2016-09-24 07:30:10 +01:00

cronie

cronie: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cups

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

cwautomacros

cwautomacros: cleanup buildpath in autogen.sh

2015-10-01 07:43:34 +01:00

diffutils

diffutils: Fix build with gcc7

2017-05-11 16:59:18 +01:00

ed

ed: update SRC_URI to yoctoproject mirror

2017-04-12 15:09:58 +01:00

ethtool

ethtool: Switch to download mirror

2017-04-05 23:22:13 +01:00

findutils

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

foomatic

foomatic-filters: Security fixes CVE-2015-8327

2016-08-01 12:11:21 +01:00

gawk

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

ghostscript

ghostscript : CVE-2016-10219, CVE-2016-10220, CVE-2017-5951

2017-04-29 11:17:23 +01:00

go-examples

go: Add recipes for golang compilers and tools

2017-03-10 15:51:55 +00:00

gperf

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

grep

grep: do_configure: fix "Argument list too long"

2017-04-14 09:47:08 +01:00

groff

groff: replace "perl -w" with "use warnings"

2017-04-10 23:00:43 +01:00

gzip

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

hdparm

hdparm: 9.50 -> 9.51

2017-02-15 20:06:43 -08:00

images

core-image-lsb-sdk: Lower IMAGE_OVERHEAD_FACTOR

2017-03-01 23:27:11 +00:00

iptables

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

iputils

iputils: do not build or install manpages

2016-10-28 16:15:19 +01:00

less

less: 481 -> 487

2016-12-08 10:31:29 +00:00

libaio

libaio: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

libarchive

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

libidn

libidn: Fix build with gcc7

2017-05-11 16:59:18 +01:00

libsolv

libsolv: switch on ENABLE_COMPLEX_DEPS

2017-05-11 16:59:18 +01:00

libtirpc

libtirpc: Enable des APIs for musl

2017-05-11 16:59:18 +01:00

libuser

libuser: replace fedorahosted.org SRC_URI with pagure.io source

2017-04-05 23:22:12 +01:00

lighttpd

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

logrotate

Revert "logrotate: set downloadfilename"

2017-04-21 08:22:08 +01:00

lsb

lsbtest: add option --ignoreos to rpm install command

2017-04-29 11:17:23 +01:00

lsof

lsof: remove EXTRA_OEMAKE workaround

2016-09-03 09:58:40 +01:00

ltp

ltp: fix an incorrect macro checking

2017-04-19 10:18:43 +01:00

lzip

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

mailx

mailx: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

man

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

man-pages

man-pages: 4.08 -> 4.09

2017-02-15 20:06:42 -08:00

mc

mc: replace "perl -w" with "use warnings"

2017-04-10 23:00:43 +01:00

mdadm

mdadm: Backport and make fixes for building with gcc7

2017-05-11 16:59:18 +01:00

mingetty

mingetty: fix SRC_URI

2015-02-03 14:53:52 +00:00

minicom

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

mktemp

mktemp: Move installed files only when needed

2017-03-22 11:35:20 +00:00

msmtp

msmtp: update to 1.6.6

2016-11-30 15:48:09 +00:00

net-tools

net-tools: Fix build with USE_NLS="no"

2017-04-05 23:22:13 +01:00

newt

libnewt: replace fedorahosted.org SRC_URI with pagure.io source

2017-04-05 23:22:12 +01:00

packagegroups

packagegroup-core-lsb: avoid rebuilding when changing layer config

2017-03-16 22:11:32 +00:00

pam

meta: replace uses of bb.data.expand(VARNAME, d) with d.expand(VARNAME)

2017-03-22 11:35:19 +00:00

parted

parted: fix rss+perf+gold failure on do_compile_ptest_base

2017-03-08 11:52:56 +00:00

pax

pax: Fix build with gcc7

2017-05-11 16:59:18 +01:00

pbzip2

pbzip2: fix LIC_FILES_CHKSUM following 1.1.12 -> 1.1.13 upgrade

2016-04-14 10:58:34 +01:00

perl

libxml-simple-perl/libconvert-asn1-perl: using PERLHOSTLIB

2015-04-27 14:59:47 +01:00

pigz

pigz: set downloadfilename

2017-02-23 12:49:51 -08:00

pixz

pixz: enable optional building of manpages

2016-10-28 16:15:20 +01:00

procps

procps: fix ALTERNATIVE_PRIORITY to avoid conflict

2017-03-17 16:53:05 +00:00

psmisc

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

quota

quota: make compile pass when disable rpc

2016-07-26 08:56:27 +01:00

rpcbind

rpcbind: Remove uneeded patches

2017-05-11 16:59:18 +01:00

screen

screen: update to 4.5.1

2017-03-08 11:52:56 +00:00

sed

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

shadow

util-linux,shadow: Make 'nologin' alternative command

2017-03-22 11:35:20 +00:00

slang

slang: 2.3.1 -> 2.3.1a

2017-03-01 23:27:09 +00:00

stat

stat: fix security issues

2016-05-19 09:05:20 +01:00

stress

stress: add SUMMARY

2015-11-16 11:39:37 +00:00

sudo

sudo: upgrade to 1.8.19p2

2017-03-01 23:27:07 +00:00

sysklogd

sysklogd: use update-alternatives for more manpages

2017-03-17 16:53:04 +00:00

sysstat

sysstat: upgrade to 11.5.4

2017-02-23 12:49:51 -08:00

tar

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

tcp-wrappers

tcp-wrappers: Fix build with musl

2016-01-24 09:40:26 +00:00

texi2html

texi2html: Allow compiling out-of-source

2016-11-06 23:35:34 +00:00

texinfo

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

texinfo-dummy-native

texinfo-dummy-native: set SUMMARY instead of DESCRIPTION

2015-11-16 11:39:38 +00:00

time

time: BBCLASSEXTEND to native and nativesdk

2017-01-19 22:47:22 +00:00

tzcode

tzcode: update to 2017b

2017-03-27 08:15:06 +01:00

tzdata

tzdata: update to 2017b

2017-03-27 08:15:06 +01:00

unzip

unzip: add missing CVE headers to patches

2017-04-14 09:47:08 +01:00

watchdog

watchdog: Add RCONFLICTS to watchdog-keepalive and split RDEPENDS

2017-02-15 20:06:42 -08:00

wget

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

which

which: fix it so the manpage will respect alternatives

2017-03-17 16:53:04 +00:00

xdg-utils

meta: add comments to explain autotools-brokensep use

2016-04-29 07:58:45 +01:00

xinetd

xinetd: Fix build with musl

2016-01-24 09:40:28 +00:00

xz

xz: upgrade to 5.2.3

2017-02-15 20:06:41 -08:00

zip

zip: update SRC_URI

2016-05-19 22:32:07 +01:00