Kai Kang 4b22a21b4e readline: Security Advisory - readline - CVE-2014-2524 ...

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3
allows local users to create or overwrite arbitrary files via a symlink
attack on a /var/tmp/rltrace.[PID] file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524

(From OE-Core rev: a4fa519de008ccd5b9411fcb1880e0a64383ce9c)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-10-23 16:13:31 +01:00

..

base-files

base-files: do_install.sigdata: remove the depends on DATE

2014-03-27 09:42:05 +00:00

base-passwd

base-passwd: sed installed file instead of original

2014-02-28 14:01:12 +00:00

busybox

busybox: fix a sh link wrong

2014-04-09 09:53:14 +01:00

console-tools

console-tools: Remove floating runtime dependency on flex

2014-05-29 13:42:19 +01:00

coreutils

coreutils: fix search paths for libstdbuf.so

2014-04-04 11:53:52 +01:00

dbus

ptest: Work from PTEST_ENABLED, not DISTRO_FEATURES

2014-06-17 08:58:54 +01:00

dbus-wait

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

dropbear

dropbear: upgrade to 2014.63

2014-03-02 17:25:28 +00:00

eglibc

eglibc: CVE-2014-5119 fix

2014-09-29 12:02:39 +01:00

expat

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

feed-config

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

gettext

gettext-0.16.1: kill target m4 macros from sysroot

2014-03-19 14:19:07 +00:00

glib-2.0

ptest: Work from PTEST_ENABLED, not DISTRO_FEATURES

2014-06-17 08:58:54 +01:00

glib-networking

Add missing SUMMARY values

2014-01-02 12:50:18 +00:00

images

build-appliance-image: Update to daisy head revision

2014-06-23 12:21:07 +01:00

init-ifupdown

recipes: bump PRs

2014-03-05 17:36:37 +00:00

initrdscripts

initrdscripts: add install scripts with a second rootfs

2014-03-31 22:53:46 +01:00

initscripts

initscripts: Fix PR reversal

2014-05-29 13:42:19 +01:00

jpeg

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

kbd

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

libcgroup

libcgroup: Add bison-native and flex-native in depends

2014-02-02 22:37:41 +00:00

libxml

libxml2: fix python packaging for nativesdk

2014-10-09 21:17:32 +01:00

meta

package-index.bb: use the new python indexing routines

2014-02-14 12:30:19 +00:00

ncurses

ncurses: use lnr instead of python code

2014-03-07 14:58:45 +00:00

netbase

netbase: upgrade to 5.2

2014-01-10 15:16:48 +00:00

packagegroups

packagegroup-core-tools-testapps: Move GLTOOLS to X11GLTOOLS

2014-03-31 22:53:45 +01:00

psplash

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

readline

readline: Security Advisory - readline - CVE-2014-2524

2014-10-23 16:13:31 +01:00

sysfsutils

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

systemd

systemd: update a uclibc specific patch to avoid segment fault

2014-06-10 17:12:19 +01:00

sysvinit

sysvinit: fix the bootlogd init script header

2014-04-05 23:24:01 +01:00

uclibc

uclibc: Set MULTILIB_DIR based on baselib

2014-05-29 13:42:22 +01:00

udev

udev: update init script for conditional probing of platform bus

2014-07-25 18:01:24 +01:00

update-rc.d

update-rc.d: fix to handle priority numbers correctly

2014-06-10 17:12:18 +01:00

util-linux

util-linux: add sulogin to alternatives list

2014-06-10 17:12:18 +01:00

zlib

zlib: Add ptest

2013-11-29 09:52:56 +00:00