foomatic-filters: Security fix CVE-2015-8560
CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character (From OE-Core rev: 94d89ab75efbac4486c581a53cbd90e843c3fde4) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
parent
f5a7cd40f0
commit
e07ebd001b
|
@ -0,0 +1,23 @@
|
||||||
|
Upstream-Status: Backport
|
||||||
|
|
||||||
|
|
||||||
|
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419
|
||||||
|
|
||||||
|
Hand applied change to util.c. Fix was for cups-filters but also applied to foomatic-filters.
|
||||||
|
|
||||||
|
CVE: CVE-2015-8560
|
||||||
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
||||||
|
|
||||||
|
Index: util.c
|
||||||
|
===================================================================
|
||||||
|
--- a/util.c
|
||||||
|
+++ b/util.c
|
||||||
|
@@ -31,7 +31,7 @@
|
||||||
|
#include <assert.h>
|
||||||
|
|
||||||
|
|
||||||
|
-const char* shellescapes = "|<>&!$\'\"#*?()[]{}";
|
||||||
|
+const char* shellescapes = "|;<>&!$\'\"#*?()[]{}";
|
||||||
|
|
||||||
|
const char * temp_dir()
|
||||||
|
{
|
|
@ -17,6 +17,9 @@ LIC_FILES_CHKSUM = "file://${WORKDIR}/foomatic-filters-${PV}/COPYING;md5=393a5ca
|
||||||
|
|
||||||
SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
|
SRC_URI = "http://www.openprinting.org/download/foomatic/foomatic-filters-${PV}.tar.gz"
|
||||||
|
|
||||||
|
SRC_URI += "file://CVE-2015-8560.patch \
|
||||||
|
"
|
||||||
|
|
||||||
SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"
|
SRC_URI[md5sum] = "b05f5dcbfe359f198eef3df5b283d896"
|
||||||
SRC_URI[sha256sum] = "a2e2e53e502571e88eeb9010c45a0d54671f15707ee104f5c9c22b59ea7a33e3"
|
SRC_URI[sha256sum] = "a2e2e53e502571e88eeb9010c45a0d54671f15707ee104f5c9c22b59ea7a33e3"
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue