]> code.ossystems Code Review - openembedded-core.git/commit
systemd: fix CVE-2018-15687
authorGeorge McCollister <george.mccollister@gmail.com>
Mon, 25 Feb 2019 16:37:07 +0000 (10:37 -0600)
committerArmin Kuster <akuster808@gmail.com>
Sat, 23 Mar 2019 01:55:04 +0000 (18:55 -0700)
commit3e8ba9af58253ed9db0f0376a8e2966e45ee089e
treef5e3b5831e5724dd6e87bea86c66a32825e8ed23
parent06bf145cee24b677ab076498fe8399126971bc43
systemd: fix CVE-2018-15687

Backport patch to fix the following CVE.

CVE: CVE-2018-15687

Based on thud commit eeb621aa19f690971caf862290a172a115578ba1
The patch in the thud commit doesn't compile against 237. Use the
version of this patch,  CVE-2018-15687.patch from
systemd_237-3ubuntu10.13.debian.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
meta/recipes-core/systemd/systemd/0001-chown-recursive-let-s-rework-the-recursive-logic-to-.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd_237.bb