Kai Kang bacc6575a9 readline: Security Advisory - readline - CVE-2014-2524 ...

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3
allows local users to create or overwrite arbitrary files via a symlink
attack on a /var/tmp/rltrace.[PID] file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524

(From OE-Core rev: 0e95eef8817f51504dcc50d855dcbef172cfc897)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-10-18 16:14:04 +02:00

..

base-files

base-files: set dynamic COLUMNS via resize command

2014-08-06 10:23:40 +01:00

base-passwd

base-passwd: install passwd and group atomically

2014-07-10 17:38:32 +01:00

busybox

syslog: Change unused variable declaration LOCAL=0 to LOG_LOCAL=1

2014-09-29 12:12:43 +01:00

console-tools

console-tools: Remove floating runtime dependency on flex

2014-04-24 17:55:13 +01:00

coreutils

coreutils: selinux/flask.h should respect to with_selinux

2014-09-29 12:12:42 +01:00

dbus

dbus-test: fix incorrect checksum

2014-06-24 19:54:11 +01:00

dbus-wait

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

dropbear

dropbear: add pam modules dependencies

2014-09-16 22:14:04 +01:00

expat

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

feed-config

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

gettext

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

glib-2.0

glib-2.0: fix mount detection

2014-09-10 11:33:25 +01:00

glib-networking

glib-networking: Inherit gettext

2014-08-15 18:21:48 +01:00

glibc

glibc: remove bad patch snippet that eglibc forward ported

2014-10-10 16:44:33 +01:00

images

build-appliance-image: Update to dizzy head revision

2014-10-11 08:11:17 +01:00

init-ifupdown

recipes: bump PRs

2014-03-05 17:36:37 +00:00

initrdscripts

init-install: Skip CDROM devices during probe

2014-08-02 09:26:17 +01:00

initscripts

initscripts: mask several init scripts

2014-09-03 11:09:06 +01:00

jpeg

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

kbd

kbd: Upgrade to 2.0.2

2014-07-17 12:28:51 +01:00

libcgroup

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

libxml

recipes: Remove references to eglibc

2014-09-01 18:03:05 +01:00

meta

meta-environment: Deal with machines which change TARGET_OS

2014-10-06 15:15:51 +01:00

ncurses

ncurses: enable-pc-files requires PKG_CONFIG_LIBDIR existed

2014-10-10 18:18:02 +01:00

netbase

netbase: upgrade to 5.2

2014-01-10 15:16:48 +00:00

os-release

os-release: Adding a new recipe for operating system identification

2014-09-10 11:33:24 +01:00

packagegroups

packagegroup-core-standalone-sdk-target: Add libgcov-dev to on device SDK

2014-09-29 12:12:43 +01:00

psplash

psplash: mask psplash in case of systemd

2014-09-03 11:09:07 +01:00

readline

readline: Security Advisory - readline - CVE-2014-2524

2014-10-18 16:14:04 +02:00

sysfsutils

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

systemd

systemd: disable resolv.conf symlink unless resolved is enabled

2014-09-29 12:12:42 +01:00

sysvinit

sysvinit: allow stack size configuration from rcS

2014-08-11 10:53:05 +01:00

uclibc

uclibc: Support systemd builds

2014-08-27 12:12:32 +01:00

udev

meta: fix RDEPNEDS for the test related pkgs

2014-08-28 15:12:44 +01:00

update-rc.d

update-rc.d: fix to handle priority numbers correctly

2014-06-01 14:29:30 +01:00

util-linux

util-linux: break out new package util-linux-findfs

2014-07-26 08:51:41 +01:00

volatile-binds

volatile-binds: use ${PN} for SYSTEMD_SERVICE

2014-09-29 12:12:44 +01:00

zlib

zlib: obey LDFLAGS for tests

2014-09-22 13:04:21 +01:00