Jethro pull request

PATCH In review Armin Kuster 2 participants 3 messages Sep 25, 2016 – Sep 27, 2016

lore

Share & tools

lore

Armin Kuster

author

2016-09-25 15:05 UTC #0 lore raw

cover Jethro pull request

Please consider these changes for Jethro

The following changes since commit c9c85df86cd2270b144fa824ef76adedd3636c8a:

util-linux: Security fix for CVE-2016-5011 (2016-09-23 23:21:43 +0100)

are available in the git repository at:

git://git.openembedded.org/openembedded-core-contrib akuster/jethro-next
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=akuster/jethro-next

Armin Kuster (9):
openssl: Security fix CVE-2016-2180
openssl: Security fix CVE-2016-8181
openssl: Security fix CVE-2016-2182
openssl: Security fix CVE-2016-6304
openssl: Security fix CVE-2016-6303
openssl: Security fix CVE-2016-6304
openssl: Security fix CVE-2016-6303
tzdata: update to 2016f
tzcode-native: update to 2016f

 .../openssl/openssl/CVE-2016-2180.patch            |  44 ++++
 .../openssl/openssl/CVE-2016-2181_p1.patch         |  91 ++++++++
 .../openssl/openssl/CVE-2016-2181_p2.patch         | 239 +++++++++++++++++++++
 .../openssl/openssl/CVE-2016-2181_p3.patch         |  30 +++
 .../openssl/openssl/CVE-2016-2182.patch            |  70 ++++++
 .../openssl/openssl/CVE-2016-6302.patch            |  53 +++++
 .../openssl/openssl/CVE-2016-6303.patch            |  36 ++++
 .../openssl/openssl/CVE-2016-6304.patch            |  75 +++++++
 .../openssl/openssl/CVE-2016-6306.patch            |  71 ++++++
 .../recipes-connectivity/openssl/openssl_1.0.2h.bb |   9 +
 ...code-native_2016e.bb => tzcode-native_2016f.bb} |   8 +-
 .../tzdata/{tzdata_2016e.bb => tzdata_2016f.bb}    |   4 +-
 12 files changed, 724 insertions(+), 6 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-2180.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-2181_p1.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-2181_p2.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-2181_p3.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-2182.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-6302.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-6303.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-6304.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-6306.patch
 rename meta/recipes-extended/tzcode/{tzcode-native_2016e.bb => tzcode-native_2016f.bb} (68%)
 rename meta/recipes-extended/tzdata/{tzdata_2016e.bb => tzdata_2016f.bb} (98%)

Signature · 1 line

2.7.4

Mittal, AnujX

2016-09-26 01:05 UTC #1 lore raw

Hi,

Quoted 21 lines

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Armin Kuster
Sent: Sunday, September 25, 2016 11:05 PM
To: [email protected]; [email protected]
Subject: [OE-core] [PATCH 0/9] Jethro pull request
Please consider these changes for Jethro
The following changes since commit
c9c85df86cd2270b144fa824ef76adedd3636c8a:
util-linux: Security fix for CVE-2016-5011 (2016-09-23 23:21:43 +0100)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contrib akuster/jethro-next
http://cgit.openembedded.org/cgit.cgi/openembedded-core-
contrib/log/?h=akuster/jethro-next

Quoted 5 lines

Armin Kuster (9):
openssl: Security fix CVE-2016-2180
openssl: Security fix CVE-2016-8181
openssl: Security fix CVE-2016-2182
openssl: Security fix CVE-2016-6304

I think there's a typo here. Shouldn't this be CVE-2016-6302?

Quoted 3 lines

openssl: Security fix CVE-2016-6303
openssl: Security fix CVE-2016-6304
openssl: Security fix CVE-2016-6303

And, this CVE-2016-6306?

Quoted 48 lines

tzdata: update to 2016f
tzcode-native: update to 2016f

 .../openssl/openssl/CVE-2016-2180.patch            |  44 ++++
 .../openssl/openssl/CVE-2016-2181_p1.patch         |  91 ++++++++
 .../openssl/openssl/CVE-2016-2181_p2.patch         | 239
+++++++++++++++++++++
 .../openssl/openssl/CVE-2016-2181_p3.patch         |  30 +++
 .../openssl/openssl/CVE-2016-2182.patch            |  70 ++++++
 .../openssl/openssl/CVE-2016-6302.patch            |  53 +++++
 .../openssl/openssl/CVE-2016-6303.patch            |  36 ++++
 .../openssl/openssl/CVE-2016-6304.patch            |  75 +++++++
 .../openssl/openssl/CVE-2016-6306.patch            |  71 ++++++
 .../recipes-connectivity/openssl/openssl_1.0.2h.bb |   9 +
 ...code-native_2016e.bb => tzcode-native_2016f.bb} |   8 +-
 .../tzdata/{tzdata_2016e.bb => tzdata_2016f.bb}    |   4 +-
 12 files changed, 724 insertions(+), 6 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
2180.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
2181_p1.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
2181_p2.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
2181_p3.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
2182.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
6302.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
6303.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
6304.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2016-
6306.patch
 rename meta/recipes-extended/tzcode/{tzcode-native_2016e.bb => tzcode-
native_2016f.bb} (68%)
 rename meta/recipes-extended/tzdata/{tzdata_2016e.bb => tzdata_2016f.bb}

(98%)

--
2.7.4

--
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core

akuster808

author

2016-09-27 15:18 UTC #2 lore raw

Quoted 23 lines · AnujX

Hi,
Quoted 21 lines
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Armin Kuster
Sent: Sunday, September 25, 2016 11:05 PM
To: [email protected]; [email protected]
Subject: [OE-core] [PATCH 0/9] Jethro pull request
Please consider these changes for Jethro
The following changes since commit
c9c85df86cd2270b144fa824ef76adedd3636c8a:
util-linux: Security fix for CVE-2016-5011 (2016-09-23 23:21:43 +0100)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contrib akuster/jethro-next
http://cgit.openembedded.org/cgit.cgi/openembedded-core-
contrib/log/?h=akuster/jethro-next

Quoted 7 lines

Quoted 5 lines
Armin Kuster (9):
openssl: Security fix CVE-2016-2180
openssl: Security fix CVE-2016-8181
openssl: Security fix CVE-2016-2182
openssl: Security fix CVE-2016-6304
I think there's a typo here. Shouldn't this be CVE-2016-6302?

yep.

I will re-spin shortly.

thank,
Armin

Quoted 55 lines

Quoted 4 lines