diff options
| author | Divya Chellam <divya.chellam@windriver.com> | 2025-05-30 17:22:09 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-07-10 10:47:31 +0100 |
| commit | 58238ee55c9e6aff8ad811a4d6bcbe7a83a3d733 (patch) | |
| tree | f4f6e7b31f50e07fd2f1a4e75407d6bd197bebeb | |
| parent | ffe1dcbdcadc4566b11e184d5fcbeed81579bc78 (diff) | |
| download | poky-58238ee55c9e6aff8ad811a4d6bcbe7a83a3d733.tar.gz | |
screen: update 5.0.0 -> 5.0.1
This includes CVE-fix for CVE-2025-46805, CVE-2025-46804,
CVE-2025-46803, CVE-2025-46802 and CVE-2025-23395.
Changelog:
=========
https://cgit.git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.5.0.1
* Fixes:
- CVE-2025-46805: do NOT send signals with root privileges
- CVE-2025-46804: avoid file existence test information leaks
- CVE-2025-46803: apply safe PTY default mode of 0620
- CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
- CVE-2025-23395: reintroduce lf_secreopen() for logfile
- buffer overflow due bad strncpy()
- uninitialized variables warnings
- typos
- combining char handling that could lead to a segfault
(From OE-Core rev: 9e608022b287bfdb4f547f5e2d418536758bc82f)
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-extended/screen/screen_5.0.1.bb (renamed from meta/recipes-extended/screen/screen_5.0.0.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-extended/screen/screen_5.0.0.bb b/meta/recipes-extended/screen/screen_5.0.1.bb index fec5663fc2..69f4098519 100644 --- a/meta/recipes-extended/screen/screen_5.0.0.bb +++ b/meta/recipes-extended/screen/screen_5.0.1.bb | |||
| @@ -20,7 +20,7 @@ SRC_URI = "${GNU_MIRROR}/screen/screen-${PV}.tar.gz \ | |||
| 20 | ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'file://screen.pam', '', d)} \ | 20 | ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'file://screen.pam', '', d)} \ |
| 21 | " | 21 | " |
| 22 | 22 | ||
| 23 | SRC_URI[sha256sum] = "f04a39d00a0e5c7c86a55338808903082ad5df4d73df1a2fd3425976aed94971" | 23 | SRC_URI[sha256sum] = "2dae36f4db379ffcd14b691596ba6ec18ac3a9e22bc47ac239789ab58409869d" |
| 24 | 24 | ||
| 25 | inherit autotools-brokensep texinfo | 25 | inherit autotools-brokensep texinfo |
| 26 | 26 | ||