Skip to contentSkip to conversation

package/iucode-tool: security bump to version 2.2

PATCH New Bernd Kuhls 3 participants 5 messages Oct 7, 2017 – Oct 17, 2017

lore
Share & tools
lore

Bernd Kuhls

author
#0 lore raw

PATCH 1/2 package/iucode-tool: security bump to version 2.2

Version 2.1.1 fixed CVE-2017-0357:
https://gitlab.com/iucode-tool/iucode-tool/commit/657ce44ac462bcec35a3e12f9e7f53ca92ae62b7

Dropped IUCODE_TOOL_CONF_ENV after version 2.2 added a configure check for libargp:
https://gitlab.com/iucode-tool/iucode-tool/commit/b14bed6771e7ab48371b272a0c68dd017767142a

Added hash for license file.

Signed-off-by Bernd Kuhls <[email protected]>
---
 package/iucode-tool/iucode-tool.hash | 3 ++-
 package/iucode-tool/iucode-tool.mk   | 3 +--
 2 files changed, 3 insertions(+), 3 deletions(-)
package/iucode-tool/iucode-tool.hash +2 -1
index c1f3bef045..1dab8de978 100644
@@ -1,2 +1,3 @@
 # Locally computed
-sha256	33271652032f20f866a212bc98ea01a8db65c4ac839fa820aa23da974fd6ff62	iucode-tool_1.5.tar.xz
+sha256 9810daf925b8a9ca244adc4e1916bcab65601c9ebe87e91c2281f78055982971  iucode-tool_2.2.tar.xz
+sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6  COPYING
package/iucode-tool/iucode-tool.mk +1 -2
index e8ae36cede..fb746c3cb8 100644
@@ -4,11 +4,10 @@
 #
 ################################################################################
 
-IUCODE_TOOL_VERSION = 1.5
+IUCODE_TOOL_VERSION = 2.2
 IUCODE_TOOL_SOURCE = iucode-tool_$(IUCODE_TOOL_VERSION).tar.xz
 IUCODE_TOOL_SITE = https://gitlab.com/iucode-tool/releases/raw/master
 ifeq ($(BR2_PACKAGE_ARGP_STANDALONE),y)
-IUCODE_TOOL_CONF_ENV = LIBS="-largp"
 IUCODE_TOOL_DEPENDENCIES = argp-standalone
 endif
 IUCODE_TOOL_LICENSE = GPL-2.0+
Signature · 1 line
2.11.0
author
#1 lore raw

PATCH 2/2 package/intel-microcode: bump to version 20170707

Signed-off-by Bernd Kuhls <[email protected]>
---
 package/intel-microcode/intel-microcode.hash | 2 +-
 package/intel-microcode/intel-microcode.mk   | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)
package/intel-microcode/intel-microcode.hash +1 -1
index 8f0a3fc84d..5ccfd51466 100644
@@ -1,2 +1,2 @@
 # Locally computed
-sha256 2f77fd2d87403b754d01a66c78a36a8b8ffc16dc3c50fb7aa2c4cd4da7f681a3  microcode-20170511.tgz
+sha256 4fd44769bf52a7ac11e90651a307aa6e56ca6e1a814e50d750ba8207973bee93  microcode-20170707.tgz
package/intel-microcode/intel-microcode.mk +2 -2
index 831e6c0940..7ad3bba3d2 100644
@@ -4,9 +4,9 @@
 #
 ################################################################################
 
-INTEL_MICROCODE_VERSION = 20170511
+INTEL_MICROCODE_VERSION = 20170707
 INTEL_MICROCODE_SOURCE = microcode-$(INTEL_MICROCODE_VERSION).tgz
-INTEL_MICROCODE_SITE = http://downloadmirror.intel.com/26798/eng
+INTEL_MICROCODE_SITE = http://downloadmirror.intel.com/26925/eng
 INTEL_MICROCODE_STRIP_COMPONENTS = 0
 INTEL_MICROCODE_LICENSE = PROPRIETARY
 INTEL_MICROCODE_LICENSE_FILES = license.txt
Signature · 1 line
2.11.0
#2 lore raw

PATCH 1/2 package/iucode-tool: security bump to version 2.2

In reply to Bernd Kuhls

Hello,

Quoted 7 lines · Bernd Kuhls

Version 2.1.1 fixed CVE-2017-0357:
https://gitlab.com/iucode-tool/iucode-tool/commit/657ce44ac462bcec35a3e12f9e7f53ca92ae62b7

Dropped IUCODE_TOOL_CONF_ENV after version 2.2 added a configure check for libargp:
https://gitlab.com/iucode-tool/iucode-tool/commit/b14bed6771e7ab48371b272a0c68dd017767142a

Quoted 7 lines

Added hash for license file.

Signed-off-by Bernd Kuhls <[email protected]>
---
 package/iucode-tool/iucode-tool.hash | 3 ++-
 package/iucode-tool/iucode-tool.mk   | 3 +--
 2 files changed, 3 insertions(+), 3 deletions(-)

Both applied. Thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com
#3 lore raw

PATCH 1/2 package/iucode-tool: security bump to version 2.2

In reply to Bernd Kuhls
Quoted 5 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Bernd" == Bernd Kuhls <[email protected]> writes:

Version 2.1.1 fixed CVE-2017-0357:
https://gitlab.com/iucode-tool/iucode-tool/commit/657ce44ac462bcec35a3e12f9e7f53ca92ae62b7

Quoted 7 lines

Dropped IUCODE_TOOL_CONF_ENV after version 2.2 added a configure check for libargp:
https://gitlab.com/iucode-tool/iucode-tool/commit/b14bed6771e7ab48371b272a0c68dd017767142a

Added hash for license file.

Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2017.02.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard
#4 lore raw

PATCH 1/2 package/iucode-tool: security bump to version 2.2

In reply to Bernd Kuhls
Quoted 5 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Bernd" == Bernd Kuhls <[email protected]> writes:

Version 2.1.1 fixed CVE-2017-0357:
https://gitlab.com/iucode-tool/iucode-tool/commit/657ce44ac462bcec35a3e12f9e7f53ca92ae62b7

Quoted 7 lines

Dropped IUCODE_TOOL_CONF_ENV after version 2.2 added a configure check for libargp:
https://gitlab.com/iucode-tool/iucode-tool/commit/b14bed6771e7ab48371b272a0c68dd017767142a

Added hash for license file.

Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2017.08.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard