| Summary: | readline 6.3 has open CVE | ||
|---|---|---|---|
| Product: | [Build System, Metadata & Runtime] OE-Core | Reporter: | Elena Reshetova <elena.reshetova> |
| Component: | core | Assignee: | Armin Kuster <akuster> |
| Status: | VERIFIED FIXED | QA Contact: | Alexandru Roman <alexandru.costinx.roman> |
| Severity: | normal | ||
| Priority: | Medium+ | CC: | bluelightning, bogdanx.a.voiculescu, meta.mr.watcher, meta.watcher, patrick.ohly, sona.sarmadi |
| Version: | unspecified | ||
| Target Milestone: | 2.0.1 | ||
| Hardware: | x86 | ||
| OS: | Multiple | ||
| Whiteboard: | |||
| OS type for building Yocto: | --- | Type of Regression: | --- |
| Verified: | Documentation change: | No (bug/feature does not impact docs) | |
|
Description
Elena Reshetova
2015-10-29 12:18:19 UTC
Further details: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2524 https://bugzilla.redhat.com/show_bug.cgi?id=1077023 RH assessed this one as low severity, FWIW. The CVSS score is low. I recommend that we address this issue in a future update possible via a package update. this change is already in jethro. http://cgit.openembedded.org/openembedded-core/commit/meta/recipes-core/readline/readline-6.3/readline63-003.patch?h=jethro&id=02be728762c77962f9c3034cd7995ad51afaee95 Verified on jethro 2.0.1 : dd0ba9ea4a11ab15348d4fe3574e4b28784db82f |