]> code.ossystems Code Review - openembedded-core.git/commit
cups: whitelist CVE-2018-6553
authorSteve Sakoman <steve@sakoman.com>
Wed, 18 Nov 2020 15:25:22 +0000 (05:25 -1000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 1 Jan 2021 11:55:26 +0000 (11:55 +0000)
commite30fd2421da579b7d1e799c7d267395026a780dc
tree9e65a9cca3d935acd78d98bfac65d1050bb6517c
parent33beb4fc5f23206ccb2f8d81e0135bbc575e238d
cups: whitelist CVE-2018-6553

This an Ububtu specific issue:

The CUPS AppArmor profile incorrectly confined the dnssd backend
due to use of hard links. A local attacker could possibly use this
issue to escape confinement. This flaw affects versions prior to
2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1
in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS,
 and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 22e89983a8f83a369d83bc67e4f3492bc50db648)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-extended/cups/cups.inc