]> code.ossystems Code Review - openembedded-core.git/commitdiff
patch: add CVE tags to patches
authorRoss Burton <ross.burton@intel.com>
Tue, 3 Sep 2019 15:59:05 +0000 (16:59 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 6 Sep 2019 13:51:18 +0000 (14:51 +0100)
These patches improve CVE fixes but trip up patch status sanity checks, so add
CVE tags to them.

Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-devtools/patch/patch/0001-Don-t-leak-temporary-file-on-failed-ed-style-patch.patch
meta/recipes-devtools/patch/patch/0001-Don-t-leak-temporary-file-on-failed-multi-file-ed.patch

index 9891526e4e9690b230bad0ded0a8e788a506cdef..78345e925e454f549821aaf89263385e5911b9c0 100644 (file)
@@ -17,6 +17,7 @@ https://savannah.gnu.org/bugs/index.php?53820
 
 Fixes: 123eaff0d5d1 ("Fix arbitrary command execution in ed-style patches (CVE-2018-1000156)")
 
+CVE: CVE-2018-1000156
 Upstream-Status: Backport [http://git.savannah.gnu.org/cgit/patch.git/commit/?id=19599883ffb6a450d2884f081f8ecf68edbed7ee]
 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 ---
index d6a219a1b19a696ca0ff7e01e759861f1be55706..8ffffef47ef6e070be67ac3fb8ef5090f5fbaa1b 100644 (file)
@@ -17,6 +17,7 @@ https://savannah.gnu.org/bugs/index.php?53820
 Fixes: 123eaff0d5d1 ("Fix arbitrary command execution in ed-style patches (CVE-2018-1000156)")
 Fixes: 19599883ffb6 ("Don't leak temporary file on failed ed-style patch")
 
+CVE: CVE-2018-1000156
 Upstream-Status: Backport [http://git.savannah.gnu.org/cgit/patch.git/commit/?id=369dcccdfa6336e5a873d6d63705cfbe04c55727]
 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 ---