Skip to content

Dizzy next for .3

Armin Kuster openembedded-core 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest25 patches 3 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/25neard: fix the install path in init scriptsmeta/recipes-connectivity/neard/neard.inc+1 -10 replies
2/25tzcode: update to 2015dmeta/recipes-extended/tzcode/tzcode-native_2015d.bb+11 -00 replies
3/25tzdata: update to 2015dmeta/recipes-extended/tzdata/tzdata_2015d.bb+6 -00 replies
4/25curl: several security fixesmeta/recipes-support/curl/curl/CVE-2015-3143.patch meta/recipes-support/curl/curl/CVE-2015-3144.patch meta/recipes-support/curl/curl/CVE-2015-3145.patch+153 -00 replies
5/25curl: add a few missing security fixesmeta/recipes-support/curl/curl/CVE-2014-3707.patch meta/recipes-support/curl/curl/CVE-2014-8150.patch meta/recipes-support/curl/curl/CVE-2015-3153.patch +1 more+541 -00 replies
6/25squashfs-tools: build and install unsquashfs as wellmeta/recipes-devtools/squashfs-tools/squashfs-tools_4.3.bb+2 -10 replies
7/25perf: add LIBNUMA_DEFINESmeta/recipes-kernel/perf/perf.bb+3 -10 replies
8/25license.bbclass: set dirs for do_populate_lic_setscenemeta/classes/license.bbclass+2 -00 replies
9/25libsndfile: Security Advisory - libsndfile - CVE-2014-9496meta/recipes-multimedia/libsndfile/files/0001-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch meta/recipes-multimedia/libsndfile/files/0001-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch meta/recipes-multimedia/libsndfile/libsndfile1_1.0.25.bb+264 -10 replies
10/25qt4: add patch for BMP denial-of-service vulnerabilitymeta/recipes-qt/qt4/qt4-4.8.6.inc meta/recipes-qt/qt4/qt4-4.8.6/0034-Fix-a-division-by-zero-when-processing-malformed-BMP.patch+45 -00 replies
11/25ppp: Security Advisory - CVE-2015-3310meta/recipes-connectivity/ppp/ppp/fix-CVE-2015-3310.patch meta/recipes-connectivity/ppp/ppp_2.4.6.bb+30 -00 replies
12/25qemu: fix CVE-2015-3456meta/recipes-devtools/qemu/qemu/qemu-CVE-2015-3456.patch meta/recipes-devtools/qemu/qemu_2.1.0.bb+93 -00 replies
13/25glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflowmeta/recipes-core/glibc/glibc/CVE-2015-1781-resolv-nss_dns-dns-host.c-buffer-overf.patch meta/recipes-core/glibc/glibc_2.20.bb+46 -00 replies
14/25gpgme: fix CVE-2014-3564meta/recipes-support/gpgme/gpgme-1.4.3/gpgme-fix-CVE-2014-3564.patch meta/recipes-support/gpgme/gpgme_1.4.3.bb+59 -10 replies
15/25e2fsprogs: install populate-extfs.shmeta/recipes-devtools/e2fsprogs/e2fsprogs_1.42.9.bb+2 -00 replies
16/25mesa: update --with-llvm-shared-libs configure optionmeta/recipes-graphics/mesa/mesa.inc+1 -10 replies
17/25test-dependencies.sh: strip only .bb suffixscripts/test-dependencies.sh+2 -20 replies
18/25unzip: Security Advisory -CVE-2014-9636 and CVE-2015-1315meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch meta/recipes-extended/unzip/unzip/unzip-6.0_overflow3.diff meta/recipes-extended/unzip/unzip_6.0.bb+451 -10 replies
19/25unzip: fix four CVE defectsmeta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch +2 more+278 -00 replies
20/25dbus: CVE-2015-0245: prevent forged ActivationFailuremeta/recipes-core/dbus/dbus.inc meta/recipes-core/dbus/dbus/CVE-2015-0245-prevent-forged-ActivationFailure.patch+49 -00 replies
21/25linux-firmware: Package Marvell pci8897 and usb8897 firmwaremeta/recipes-kernel/linux-firmware/linux-firmware_git.bb+16 -30 replies
22/25unzip: drop 12-cve-2014-9636-test-compr-eb.patchmeta/recipes-extended/unzip/unzip/12-cve-2014-9636-test-compr-eb.patch meta/recipes-extended/unzip/unzip_6.0.bb+0 -460 replies
23/25rpm: Fix CVE-2014-8118meta/recipes-devtools/rpm/rpm/rpm-CVE-2014-8118.patch meta/recipes-devtools/rpm/rpm_4.11.2.bb+44 -00 replies
24/25rpm: Fix CVE-2013-6435meta/recipes-devtools/rpm/rpm/rpm-CVE-2013-6435.patch meta/recipes-devtools/rpm/rpm_4.11.2.bb+110 -00 replies
25/25libxml2: Security Advisory - libxml2 - CVE-2015-1819meta/recipes-core/libxml/libxml2.inc meta/recipes-core/libxml/libxml2/0001-CVE-2015-1819-Enforce-the-reader-to-run-in-constant-.patch+182 -00 replies

Reviews trailers per patch

1 of 25 patches has a Reviewed-by or Acked-by.

PatchBen Shelton
1/25
2/25
3/25
4/25
5/25
6/25
7/25
8/25
9/25
10/25
11/25
12/25
13/25R-b
14/25
15/25
16/25
17/25
18/25
19/25
20/25
21/25
22/25
23/25
24/25
25/25

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH 00/25] Dizzy next for .3

Please consider these for the 1.7.3 release

The following changes since commit 5f0d25152bac2d3798663a4ebfdd2df24060f153:

openssl: upgrade to 1.0.1p (2015-07-15 15:25:43 +0100)

are available in the git repository at:

git://git.yoctoproject.org/poky-contrib akuster/dizzy-next
http://git.yoctoproject.org/cgit.cgi//log/?h=akuster/dizzy-nex

Andre McCurdy (1):
mesa: update --with-llvm-shared-libs configure option

Armin Kuster (3):
tzcode: update to 2015d
tzdata: update to 2015d
curl: add a few missing security fixes

Cristian Iorga (1):
neard: fix the install path in init scripts

Haris Okanovic (1):
glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

Jonathan Liu (1):
qt4: add patch for BMP denial-of-service vulnerability

Jussi Kukkonen (1):
dbus: CVE-2015-0245: prevent forged ActivationFailure

Kai Kang (2):
qemu: fix CVE-2015-3456
gpgme: fix CVE-2014-3564

Leonardo Sandoval (2):
rpm: Fix CVE-2014-8118
rpm: Fix CVE-2013-6435

Martin Jansa (3):
squashfs-tools: build and install unsquashfs as well
e2fsprogs: install populate-extfs.sh test-dependencies.sh: strip only .bb suffix

Maxin B. John (1):
curl: several security fixes

Ng Wei Tee (1):
linux-firmware: Package Marvell pci8897 and usb8897 firmware

Robert Yang (2):
perf: add LIBNUMA_DEFINES
license.bbclass: set dirs for do_populate_lic_setscene

Roy Li (4):
ppp: Security Advisory - CVE-2015-3310
unzip: Security Advisory -CVE-2014-9636 and CVE-2015-1315
unzip: fix four CVE defects
unzip: drop 12-cve-2014-9636-test-compr-eb.patch

Yue Tao (2):
libsndfile: Security Advisory - libsndfile - CVE-2014-9496
libxml2: Security Advisory - libxml2 - CVE-2015-1819

 meta/classes/license.bbclass                       |   2 +
 meta/recipes-connectivity/neard/neard.inc          |   2 +-
 .../ppp/ppp/fix-CVE-2015-3310.patch                |  29 ++
 meta/recipes-connectivity/ppp/ppp_2.4.6.bb         |   1 +
 meta/recipes-core/dbus/dbus.inc                    |   1 +
 ...015-0245-prevent-forged-ActivationFailure.patch |  48 +++
 ...81-resolv-nss_dns-dns-host.c-buffer-overf.patch |  43 +++
 meta/recipes-core/glibc/glibc_2.20.bb              |   3 +
 meta/recipes-core/libxml/libxml2.inc               |   1 +
 ...19-Enforce-the-reader-to-run-in-constant-.patch | 181 +++++++++
 .../recipes-devtools/e2fsprogs/e2fsprogs_1.42.9.bb |   2 +
 .../qemu/qemu/qemu-CVE-2015-3456.patch             |  92 +++++
 meta/recipes-devtools/qemu/qemu_2.1.0.bb           |   1 +
 .../rpm/rpm/rpm-CVE-2013-6435.patch                | 109 ++++++
 .../rpm/rpm/rpm-CVE-2014-8118.patch                |  43 +++
 meta/recipes-devtools/rpm/rpm_4.11.2.bb            |   2 +
 .../squashfs-tools/squashfs-tools_4.3.bb           |   3 +-
 .../recipes-extended/tzcode/tzcode-native_2015d.bb |  11 +
 meta/recipes-extended/tzdata/tzdata_2015d.bb       |   6 +
 .../06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch  | 402 ++++++++++++++++++++
 .../unzip/09-cve-2014-8139-crc-overflow.patch      |  52 +++
 .../unzip/10-cve-2014-8140-test-compr-eb.patch     |  33 ++
 .../unzip/11-cve-2014-8141-getzip64data.patch      | 144 +++++++
 .../unzip/unzip/unzip-6.0_overflow3.diff           |  45 +++
 meta/recipes-extended/unzip/unzip_6.0.bb           |   8 +-
 meta/recipes-graphics/mesa/mesa.inc                |   2 +-
 .../linux-firmware/linux-firmware_git.bb           |  19 +-
 meta/recipes-kernel/perf/perf.bb                   |   4 +-
 ...src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch | 211 +++++++++++
 ...c-Fix-two-potential-buffer-read-overflows.patch |  49 +++
 .../libsndfile/libsndfile1_1.0.25.bb               |   5 +-
 meta/recipes-qt/qt4/qt4-4.8.6.inc                  |   1 +
 ...ion-by-zero-when-processing-malformed-BMP.patch |  44 +++
 meta/recipes-support/curl/curl/CVE-2014-3707.patch | 416 +++++++++++++++++++++
 meta/recipes-support/curl/curl/CVE-2014-8150.patch |  29 ++
 meta/recipes-support/curl/curl/CVE-2015-3143.patch |  38 ++
 meta/recipes-support/curl/curl/CVE-2015-3144.patch |  45 +++
 meta/recipes-support/curl/curl/CVE-2015-3145.patch |  70 ++++
 meta/recipes-support/curl/curl/CVE-2015-3153.patch |  90 +++++
 meta/recipes-support/curl/curl_7.37.1.bb           |   6 +
 .../gpgme-1.4.3/gpgme-fix-CVE-2014-3564.patch      |  56 +++
 meta/recipes-support/gpgme/gpgme_1.4.3.bb          |   4 +-
 scripts/test-dependencies.sh                       |   4 +-
 43 files changed, 2345 insertions(+), 12 deletions(-)
 create mode 100644 meta/recipes-connectivity/ppp/ppp/fix-CVE-2015-3310.patch
 create mode 100644 meta/recipes-core/dbus/dbus/CVE-2015-0245-prevent-forged-ActivationFailure.patch
 create mode 100644 meta/recipes-core/glibc/glibc/CVE-2015-1781-resolv-nss_dns-dns-host.c-buffer-overf.patch
 create mode 100644 meta/recipes-core/libxml/libxml2/0001-CVE-2015-1819-Enforce-the-reader-to-run-in-constant-.patch
 create mode 100644 meta/recipes-devtools/qemu/qemu/qemu-CVE-2015-3456.patch
 create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-CVE-2013-6435.patch
 create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-CVE-2014-8118.patch
 create mode 100644 meta/recipes-extended/tzcode/tzcode-native_2015d.bb
 create mode 100644 meta/recipes-extended/tzdata/tzdata_2015d.bb
 create mode 100644 meta/recipes-extended/unzip/unzip/06-unzip60-alt-iconv-utf8_CVE-2015-1315.patch
 create mode 100644 meta/recipes-extended/unzip/unzip/09-cve-2014-8139-crc-overflow.patch
 create mode 100644 meta/recipes-extended/unzip/unzip/10-cve-2014-8140-test-compr-eb.patch
 create mode 100644 meta/recipes-extended/unzip/unzip/11-cve-2014-8141-getzip64data.patch
 create mode 100644 meta/recipes-extended/unzip/unzip/unzip-6.0_overflow3.diff
 create mode 100644 meta/recipes-multimedia/libsndfile/files/0001-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
 create mode 100644 meta/recipes-multimedia/libsndfile/files/0001-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch
 create mode 100644 meta/recipes-qt/qt4/qt4-4.8.6/0034-Fix-a-division-by-zero-when-processing-malformed-BMP.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2014-3707.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2014-8150.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2015-3143.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2015-3144.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2015-3145.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2015-3153.patch
 create mode 100644 meta/recipes-support/gpgme/gpgme-1.4.3/gpgme-fix-CVE-2014-3564.patch
Signature · 1 line
1.9.1

Read the cover letter in its thread