]> code.ossystems Code Review - openembedded-core.git/commitdiff
libarchive: rename patch to reflect CVE
authorRoss Burton <ross.burton@intel.com>
Tue, 3 Nov 2015 16:30:24 +0000 (16:30 +0000)
committerRobert Yang <liezhi.yang@windriver.com>
Tue, 8 Dec 2015 08:18:12 +0000 (00:18 -0800)
This patch is a CVE fix, so rename it to help CVE detection tools identify it as
such.

(From OE-Core master rev: 3fd05ce1f709cbbd8fdeb1dbfdffbd39922eca6e)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
meta/recipes-extended/libarchive/libarchive/libarchive-CVE-2015-2304.patch [moved from meta/recipes-extended/libarchive/libarchive/0001-Add-ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS-option.patch with 100% similarity]
meta/recipes-extended/libarchive/libarchive_3.1.2.bb

index aaa325535b2bc547c6a74f23e293813b8a9f4ac9..716db9aff0dcee77ff370c35c49b49a86155f5ae 100644 (file)
@@ -32,7 +32,7 @@ PACKAGECONFIG[nettle] = "--with-nettle,--without-nettle,nettle,"
 SRC_URI = "http://libarchive.org/downloads/libarchive-${PV}.tar.gz \
            file://libarchive-CVE-2013-0211.patch \
            file://pkgconfig.patch \
-           file://0001-Add-ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS-option.patch \
+           file://libarchive-CVE-2015-2304.patch \
            file://mkdir.patch \
            "