Roy Li def79f5f31 elfutils: Security Advisory - CVE-2015-0255 ...

Directory traversal vulnerability in the read_long_names function in
libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers
to write to arbitrary files to the root directory via a / (slash) in a
crafted archive, as demonstrated using the ar program.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9447

(From OE-Core rev: 4a65944b89a76f18c8ff6e148f17508882d387cf)

(From OE-Core rev: 5eda84a62201461b9c69498ec35585d2c8142dec)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-06-28 09:44:06 +01:00

..

classes

sstate: Use SSTATE_DIR for FILESPATH

2015-06-28 09:44:04 +01:00

conf

bitbake.conf: add sed-native to ASSUME_PROVIDED

2015-05-15 18:12:49 +01:00

files

toolchain-shar-template.sh: Make relocation optional.

2015-02-24 17:41:43 +00:00

lib

split_and_strip_files: regroup hardlinks to make build deterministic

2015-05-15 18:13:38 +01:00

recipes-bsp

pcmciautils: fix for parallel build

2015-06-28 09:44:06 +01:00

recipes-connectivity

openssl: remove 3 patches

2015-06-28 09:44:05 +01:00

recipes-core

libxml2: remove libxml2-CVE-2014-3660.patch

2015-06-28 09:44:05 +01:00

recipes-devtools

elfutils: Security Advisory - CVE-2015-0255

2015-06-28 09:44:06 +01:00

recipes-extended

texinfo: remove enumerate_greater_than_ten.patch

2015-06-28 09:44:05 +01:00

recipes-gnome

libffi: Use proper compiler define for linux platform

2015-05-15 18:12:41 +01:00

recipes-graphics

libxfont: Security Advisory - libxfont - CVE-2015-1804

2015-05-15 18:12:48 +01:00

recipes-kernel

lttng-modules: remove bio-bvec-iter.patch

2015-06-28 09:44:05 +01:00

recipes-lsb4

libpng12: upgrade to 1.2.52

2015-01-07 23:35:01 +00:00

recipes-multimedia

alsa-utils: Remove double dependency on udev

2015-05-15 18:12:46 +01:00

recipes-qt

qt4: add patch for BMP denial-of-service vulnerability

2015-03-09 15:58:00 +00:00

recipes-rt

rt-tests: fix gzip command

2015-02-15 21:58:25 +00:00

recipes-sato

webkit-gtk: disable JIT for armv5/armv6

2015-03-25 12:39:37 +00:00

recipes-support

curl: Fix wrong assumption about sizeof off_t on largefile systems

2015-06-28 09:44:06 +01:00

site

siteinfo: account for 32 and 64 bit arm

2014-12-23 10:18:17 +00:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

meta/recipes.txt: add recipes-lsb4

2013-04-10 09:23:17 +01:00