Skip to content

flex & gnutls fixes

Jussi Kukkonen openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4gnutls: Backport certificate check fixmeta/recipes-support/gnutls/gnutls/CVE-2016-7444.patch meta/recipes-support/gnutls/gnutls_3.5.3.bb+36 -00 replies
2/4flex: Update upstream check urimeta/recipes-devtools/flex/flex_2.6.0.bb+2 -00 replies
3/4flex: Backport buffer overflow fixmeta/recipes-devtools/flex/flex/CVE-2016-6354.patch meta/recipes-devtools/flex/flex_2.6.0.bb+60 -00 replies
4/4depexp: Close UI with error message on NoProvider eventbitbake/lib/bb/ui/depexp.py+24 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/4] flex & gnutls fixes

Backported cve fixes for flex and gnutls.

Also minor improvement to error handling in depexp.

- Jussi

The following changes since commit b9d6a7cc234f44e44e5421191924b7463e9c0a9d:

bitbake: main: Check bitbake server-only port is a number (2016-10-09 12:33:26 +0100)

are available in the git repository at:

git://git.yoctoproject.org/poky-contrib jku/m4-fixes
http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=jku/m4-fixes

Jussi Kukkonen (4):
gnutls: Backport certificate check fix
flex: Update upstream check uri
flex: Backport buffer overflow fix
depexp: Close UI with error message on NoProvider event

 bitbake/lib/bb/ui/depexp.py                        | 24 +++++++++
 .../recipes-devtools/flex/flex/CVE-2016-6354.patch | 59 ++++++++++++++++++++++
 meta/recipes-devtools/flex/flex_2.6.0.bb           |  3 ++
 .../gnutls/gnutls/CVE-2016-7444.patch              | 35 +++++++++++++
 meta/recipes-support/gnutls/gnutls_3.5.3.bb        |  1 +
 5 files changed, 122 insertions(+)
 create mode 100644 meta/recipes-devtools/flex/flex/CVE-2016-6354.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2016-7444.patch
Signature · 1 line
2.1.4