]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 0866086) | patch
rsync: backport a patch to fix CVE-2014-9512
authorRoy Li <rongqing.li@windriver.com>
Fri, 24 Apr 2015 02:37:14 +0000 (10:37 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 28 Apr 2015 06:56:00 +0000 (07:56 +0100)
commitf280b4f28231ea5a416266ae022d6e4c4ea91117
treeff23a4bd5a8b7ec4968e095d86d2dd7fe44f495ctree | snapshot
parent0866086c6a9d9f518388f2962db784ab15d49330commit | diff
rsync: backport a patch to fix CVE-2014-9512

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink
attack on a file in the synchronization path.

Backport Complain-if-an-inc-recursive-path-is-not-right-for-i.patch to fix it

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/rsync/rsync-3.1.1/0001-Complain-if-an-inc-recursive-path-is-not-right-for-i.patch [new file with mode: 0644] blob
meta/recipes-devtools/rsync/rsync_3.1.1.bb diff | blob | history
Mirror of the official openembedded-core repository