On Wednesday 26 June 2019 at 15:21:08 +0100, Mike Crowe wrote: > It looks like not all the parts required for fixing CVE-2011-5325 made > it into oe-core master before the recipe was upgraded to the upstream > fixed version. > > The partial fix meant that symlinks deemed unsafe enough to delay were > never actually realized. This backport from upstream fixes the > problem.
Grrr, I managed to send the version that lacked the [sumo] prefix. :( Sorry. Mike. -- _______________________________________________ Openembedded-core mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-core
