From: Anuj Mittal <anuj.mittal@intel.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH 0/7] Consolidated zeus pull request
Date: Sun, 10 Nov 2019 22:54:09 +0800 [thread overview]
Message-ID: <20191110145416.5171-1-anuj.mittal@intel.com> (raw)
a-full passing on autobuilder for the series.
Adrian Bunk (1):
python3: Upgrade 3.7.4 -> 3.7.5
Joe Slater (1):
libxslt: fix CVE-2019-18197
Ross Burton (4):
libpng: whitelist CVE-2019-17371
procps: whitelist CVE-2018-1121
libsndfile1: whitelist CVE-2018-13419
libpam: set CVE_PRODUCT
Trevor Gamblin (1):
libgcrypt: fix CVE-2019-13627
...lib-as-location-for-site-packages-an.patch | 2 +-
...nt-parse-domains-containing-GH-13079.patch | 132 ------------------
...asename-to-replace-CC-for-checking-c.patch | 2 +-
.../{python3_3.7.4.bb => python3_3.7.5.bb} | 5 +-
meta/recipes-extended/pam/libpam_1.3.1.bb | 2 +
meta/recipes-extended/procps/procps_3.3.15.bb | 9 +-
.../libpng/libpng_1.6.37.bb | 3 +
.../libsndfile/libsndfile1_1.0.28.bb | 4 +
...cdsa-Fix-use-of-nonce-use-larger-one.patch | 128 +++++++++++++++++
...Add-mitigation-against-timing-attack.patch | 70 ++++++++++
.../libgcrypt/libgcrypt_1.8.4.bb | 2 +
.../libxslt/files/CVE-2019-18197.patch | 33 +++++
.../recipes-support/libxslt/libxslt_1.1.33.bb | 1 +
13 files changed, 253 insertions(+), 140 deletions(-)
delete mode 100644 meta/recipes-devtools/python/python3/0001-bpo-34155-Dont-parse-domains-containing-GH-13079.patch
rename meta/recipes-devtools/python/{python3_3.7.4.bb => python3_3.7.5.bb} (98%)
create mode 100644 meta/recipes-support/libgcrypt/files/0001-dsa-ecdsa-Fix-use-of-nonce-use-larger-one.patch
create mode 100644 meta/recipes-support/libgcrypt/files/0001-ecc-Add-mitigation-against-timing-attack.patch
create mode 100644 meta/recipes-support/libxslt/files/CVE-2019-18197.patch
--
2.21.0
next reply other threads:[~2019-11-10 14:54 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-11-10 14:54 Anuj Mittal [this message]
2019-11-10 14:54 ` [PATCH 1/7] libxslt: fix CVE-2019-18197 Anuj Mittal
2019-11-10 14:54 ` [PATCH 2/7] python3: Upgrade 3.7.4 -> 3.7.5 Anuj Mittal
2019-11-10 14:54 ` [PATCH 3/7] libpng: whitelist CVE-2019-17371 Anuj Mittal
2019-11-10 14:54 ` [PATCH 4/7] procps: whitelist CVE-2018-1121 Anuj Mittal
2019-11-10 14:54 ` [PATCH 5/7] libsndfile1: whitelist CVE-2018-13419 Anuj Mittal
2019-11-10 14:54 ` [PATCH 6/7] libpam: set CVE_PRODUCT Anuj Mittal
2019-11-10 14:54 ` [PATCH 7/7] libgcrypt: fix CVE-2019-13627 Anuj Mittal
2019-11-10 15:02 ` ✗ patchtest: failure for Consolidated zeus pull request Patchwork
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20191110145416.5171-1-anuj.mittal@intel.com \
--to=anuj.mittal@intel.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.