[OE-core] [PATCH 1/1] apt: fix for CVE-2014-0478

Chong Lu Chong.Lu at windriver.com
Fri Sep 26 01:41:52 UTC 2014


On 09/26/2014 12:23 AM, Burton, Ross wrote:
> On 25 September 2014 10:09, Chong Lu <Chong.Lu at windriver.com> wrote:
>> +++ b/meta/recipes-devtools/apt/apt-0.9.9.4/apt-0.9.9.4-CVE-2014-0478.patch
>> @@ -0,0 +1,188 @@
>> +This patch comes from:
>> +https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=73;filename=apt_0.9.7.9%2Bdeb7u2.debdiff;att=1;bug=749795
>> +
>> +diff -uarN apt-0.9.9.4-org/cmdline/apt-get.cc apt-0.9.9.4/cmdline/apt-get.cc
> This should have Upstream-Status and Signed-off-by tags.
>
> Ross
>
>

OK. I will resend a V2.

Best Regards
Chong




More information about the Openembedded-core mailing list