Gyorgy Sarvari dd81ffdb68
ez-ipupdate: patch CVE-2003-0887
Details: https://nvd.nist.gov/vuln/detail/CVE-2003-0887

The vulnerability is about the default (example) configurations,
which place cache files into the /tmp folder, that is world-writeable.
The recommendation would be to place them to a more secure folder.

The recipe however does not install these example configurations,
and as such it is not vulnerable either.

Just to make sure, patch these folders to a non-tmp folder
(and also install that folder, empty).

Some more discussion about the vulnerability:
https://bugzilla.suse.com/show_bug.cgi?id=48161

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 19:54:39 -08:00
..
2025-12-24 13:18:25 -08:00
2023-11-15 09:51:45 -08:00
2023-11-15 09:51:45 -08:00

meta-networking

This layer is intended to be a central point for networking-related packages and configuration. It should be useful directly on top of oe-core and compliments meta-openembedded. It should be primarily useful to the following groups:

  - Anyone building a small networking device (eg. a home router /
    bridge / switch).

  - Anyone wanting to add network services to their device (eg.
    anything that might benefit from a small ftp/tftp server)

Dependencies

This layer depends on:

URI: git://git.openembedded.org/openembedded-core branch: master

For some recipes, the meta-oe layer is required:

URI: git://git.openembedded.org/meta-openembedded subdirectory: meta-oe branch: master

URI: git://git.openembedded.org/meta-openembedded subdirectory: meta-python branch: master

Maintenance

Layer maintainers: Khem Raj raj.khem@gmail.com

Please see the MAINTAINERS file for information on contacting the maintainers of this layer, as well as instructions for submitting patches.