From: "Maxin B. John" <maxin.john@intel.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH 05/12] libtasn1: upgrade to version 4.13
Date: Tue, 23 Jan 2018 16:05:45 +0200 [thread overview]
Message-ID: <1516716352-32735-6-git-send-email-maxin.john@intel.com> (raw)
In-Reply-To: <1516716352-32735-1-git-send-email-maxin.john@intel.com>
Remove backported patch:
CVE-2017-10790.patch
Signed-off-by: Maxin B. John <maxin.john@intel.com>
---
.../gnutls/libtasn1/CVE-2017-10790.patch | 63 ----------------------
.../gnutls/{libtasn1_4.12.bb => libtasn1_4.13.bb} | 5 +-
2 files changed, 2 insertions(+), 66 deletions(-)
delete mode 100644 meta/recipes-support/gnutls/libtasn1/CVE-2017-10790.patch
rename meta/recipes-support/gnutls/{libtasn1_4.12.bb => libtasn1_4.13.bb} (80%)
diff --git a/meta/recipes-support/gnutls/libtasn1/CVE-2017-10790.patch b/meta/recipes-support/gnutls/libtasn1/CVE-2017-10790.patch
deleted file mode 100644
index be84380..0000000
--- a/meta/recipes-support/gnutls/libtasn1/CVE-2017-10790.patch
+++ /dev/null
@@ -1,63 +0,0 @@
-From d8d805e1f2e6799bb2dff4871a8598dc83088a39 Mon Sep 17 00:00:00 2001
-From: Nikos Mavrogiannopoulos <nmav@redhat.com>
-Date: Thu, 22 Jun 2017 16:31:37 +0200
-Subject: [PATCH] _asn1_check_identifier: safer access to values read
-
-Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-
-http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit;h=d8d805e1f2e6799bb2dff4871a8598dc83088a39
-Upstream-Status: Backport
-
-CVE: CVE-2017-10790
-
-Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
-Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
----
- lib/parser_aux.c | 17 ++++++++++++-----
- 1 file changed, 12 insertions(+), 5 deletions(-)
-
-diff --git a/lib/parser_aux.c b/lib/parser_aux.c
-index 976ab38..786ea64 100644
---- a/lib/parser_aux.c
-+++ b/lib/parser_aux.c
-@@ -955,7 +955,7 @@ _asn1_check_identifier (asn1_node node)
- if (p2 == NULL)
- {
- if (p->value)
-- _asn1_strcpy (_asn1_identifierMissing, p->value);
-+ _asn1_str_cpy (_asn1_identifierMissing, sizeof(_asn1_identifierMissing), (char*)p->value);
- else
- _asn1_strcpy (_asn1_identifierMissing, "(null)");
- return ASN1_IDENTIFIER_NOT_FOUND;
-@@ -968,9 +968,15 @@ _asn1_check_identifier (asn1_node node)
- if (p2 && (type_field (p2->type) == ASN1_ETYPE_DEFAULT))
- {
- _asn1_str_cpy (name2, sizeof (name2), node->name);
-- _asn1_str_cat (name2, sizeof (name2), ".");
-- _asn1_str_cat (name2, sizeof (name2), (char *) p2->value);
-- _asn1_strcpy (_asn1_identifierMissing, p2->value);
-+ if (p2->value)
-+ {
-+ _asn1_str_cat (name2, sizeof (name2), ".");
-+ _asn1_str_cat (name2, sizeof (name2), (char *) p2->value);
-+ _asn1_str_cpy (_asn1_identifierMissing, sizeof(_asn1_identifierMissing), (char*)p2->value);
-+ }
-+ else
-+ _asn1_strcpy (_asn1_identifierMissing, "(null)");
-+
- p2 = asn1_find_node (node, name2);
- if (!p2 || (type_field (p2->type) != ASN1_ETYPE_OBJECT_ID) ||
- !(p2->type & CONST_ASSIGN))
-@@ -990,7 +996,8 @@ _asn1_check_identifier (asn1_node node)
- _asn1_str_cpy (name2, sizeof (name2), node->name);
- _asn1_str_cat (name2, sizeof (name2), ".");
- _asn1_str_cat (name2, sizeof (name2), (char *) p2->value);
-- _asn1_strcpy (_asn1_identifierMissing, p2->value);
-+ _asn1_str_cpy (_asn1_identifierMissing, sizeof(_asn1_identifierMissing), (char*)p2->value);
-+
- p2 = asn1_find_node (node, name2);
- if (!p2 || (type_field (p2->type) != ASN1_ETYPE_OBJECT_ID)
- || !(p2->type & CONST_ASSIGN))
---
-1.7.9.5
-
diff --git a/meta/recipes-support/gnutls/libtasn1_4.12.bb b/meta/recipes-support/gnutls/libtasn1_4.13.bb
similarity index 80%
rename from meta/recipes-support/gnutls/libtasn1_4.12.bb
rename to meta/recipes-support/gnutls/libtasn1_4.13.bb
index 7a7571a..2d22386 100644
--- a/meta/recipes-support/gnutls/libtasn1_4.12.bb
+++ b/meta/recipes-support/gnutls/libtasn1_4.13.bb
@@ -11,13 +11,12 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504 \
SRC_URI = "${GNU_MIRROR}/libtasn1/libtasn1-${PV}.tar.gz \
file://dont-depend-on-help2man.patch \
file://0001-stdint.m4-reintroduce-GNULIB_OVERRIDES_WINT_T-check.patch \
- file://CVE-2017-10790.patch \
"
DEPENDS = "bison-native"
-SRC_URI[md5sum] = "5c724bd1f73aaf4a311833e1cd297b21"
-SRC_URI[sha256sum] = "6753da2e621257f33f5b051cc114d417e5206a0818fe0b1ecfd6153f70934753"
+SRC_URI[md5sum] = "ce2ba4d3088119b48e7531a703669c52"
+SRC_URI[sha256sum] = "7e528e8c317ddd156230c4e31d082cd13e7ddeb7a54824be82632209550c8cca"
inherit autotools texinfo binconfig lib_package gtk-doc
--
2.4.0
next prev parent reply other threads:[~2018-01-23 14:04 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-01-23 14:05 [PATCH 00/12] package upgrades Maxin B. John
2018-01-23 14:05 ` [PATCH 01/12] freetype: upgrade to version 2.9 Maxin B. John
2018-01-23 14:02 ` Alexander Kanavin
2018-01-23 14:05 ` [PATCH 02/12] libsoup-2.4: upgrade to version 2.61.2 Maxin B. John
2018-01-23 14:44 ` Burton, Ross
2018-01-24 9:25 ` Maxin B. John
2018-01-23 14:05 ` [PATCH 03/12] ofono: upgrade to version 1.22 Maxin B. John
2018-01-23 14:05 ` [PATCH 04/12] pango: upgrade to version 1.41.0 Maxin B. John
2018-01-23 14:45 ` Burton, Ross
2018-01-23 14:42 ` Alexander Kanavin
2018-01-23 14:54 ` Burton, Ross
2018-01-23 14:05 ` Maxin B. John [this message]
2018-01-23 14:05 ` [PATCH 06/12] puzzles: upgrade to latest commit Maxin B. John
2018-01-23 14:05 ` [PATCH 07/12] sqlite3: upgrade to version 3.22.0 Maxin B. John
2018-01-23 14:05 ` [PATCH 08/12] vte: upgrade to version 0.50.2 Maxin B. John
2018-01-23 14:05 ` [PATCH 09/12] gtk+: upgrade to version 2.24.32 Maxin B. John
2018-01-23 14:05 ` [PATCH 10/12] gtk+3: upgrade to version 3.22.26 Maxin B. John
2018-01-23 14:05 ` [PATCH 11/12] gtk-icon-utils-native: " Maxin B. John
2018-01-23 14:05 ` [PATCH 12/12] atk: upgrade to version 2.26.1 Maxin B. John
2018-01-23 14:06 ` [PATCH 00/12] package upgrades Alexander Kanavin
2018-01-24 9:01 ` Maxin B. John
2018-01-25 7:09 ` Alexander Kanavin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1516716352-32735-6-git-send-email-maxin.john@intel.com \
--to=maxin.john@intel.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.