starlingx/tools
Code Issues Proposed changes

glib2: CVE-2019-12450: fix file_copy_fallback

Browse Source 
Fix file_copy_fallback does not restrict file permissions.

Fix is provided by Centos RPMs:
glib2-2.56.1-7.el7.x86_64.rpm
glib2-devel-2.56.1-7.el7.x86_64.rpm
glib2-doc-2.56.1-7.el7.noarch.rpm

Test:
Build. Deploy AIO-SX. Run reproducer.

Closes-Bug: 1902995
Change-Id: Ie1545c462f27b38737071a1e211164a8e0b3a0d0
Signed-off-by: Michel Thebeau <Michel.Thebeau@windriver.com>
This commit is contained in:
Michel Thebeau
2020-11-02 16:03:54 -05:00
parent 33648c9b34
commit 5da494a631
8 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
centos-mirror-tools/config/centos/flock/rpms_centos3rdparties.lst
View File

@@ -14,8 +14,6 @@ docker-ce-cli-18.09.6-3.el7.x86_64.rpm
# elfutils-libelf-0.176-2.el7.x86_64.rpm provided by mock
# elfutils-libelf-devel-0.176-2.el7.x86_64.rpm provided by mock
# elfutils-libs-0.176-2.el7.x86_64.rpm provided by mock
# glib2-2.56.1-2.el7.x86_64.rpm provided by mock
glib2-devel-2.56.1-2.el7.x86_64.rpm
gsettings-desktop-schemas-3.28.0-2.el7.x86_64.rpm
gssproxy-0.7.0-21.el7.x86_64.rpm
# ima-evm-utils-1.1-2.el7.x86_64.rpm provided by mock