CaROS/poky
3
1
Fork 0
mirror of https://git.yoctoproject.org/git/poky synced 2026-01-04 16:10:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

foomatic-filters: Security fixes CVE-2015-8327

Browse Source 
CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character

(From OE-Core rev: 986f7fbe37a48d050611f08f7160ed96755ac3dc)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Armin Kuster 2016-07-31 08:30:18 -07:00 committed by Richard Purdie
parent e07ebd001b
commit 2db1d3b76d
2 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
meta/recipes-extended/foomatic/foomatic-filters-4.0.17/CVE-2015-8327.patch Normal file
View File

@ -0,0 +1,23 @@
Upstream-Status: Backport
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7406
Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters.
CVE: CVE-2015-8327
Signed-off-by: Armin Kuster <akuster@mvista.com>
Index: util.c
===================================================================
--- a/util.c
+++ b/util.c
@@ -31,7 +31,7 @@
#include <assert.h>
-const char* shellescapes = "|;<>&!$\'\"#*?()[]{}";
+const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}";
const char * temp_dir()
{

1
meta/recipes-extended/foomatic/foomatic-filters_4.0.17.bb
View File

@ -18,6 +18,7 @@ LIC_FILES_CHKSUM = "file://${WORKDIR}/foomatic-filters-${PV}/COPYING;md5=393a5ca
SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
SRC_URI += "file://CVE-2015-8560.patch \
file://CVE-2015-8327.patch \
"
SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"