]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: a419ad4) | patch
Screen: fix for Security Advisory CVE-2009-1214
authorYue Tao <Yue.Tao@windriver.com>
Mon, 14 Apr 2014 04:41:17 +0000 (12:41 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 21 May 2014 08:08:09 +0000 (09:08 +0100)
commit25a212d0154906e7a05075d015dbc1cfdfabb73a
treeb1f47e99e76f850fd7cd9be17f6bf5b2dd294922tree | snapshot
parenta419ad43a5b3aa5bc3aa095af4d79abe4c24b0d7commit | diff
Screen: fix for Security Advisory CVE-2009-1214

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with
world-readable permissions, which might allow local users to obtain
sensitive session information.

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
meta/recipes-extended/screen/screen-4.0.3/screen-4.0.3-CVE-2009-1214.patch [new file with mode: 0644] blob
meta/recipes-extended/screen/screen_4.0.3.bb diff | blob | history
Mirror of the official openembedded-core repository