From: George McCollister <george.mccollister@gmail.com>
To: openembedded-core@lists.openembedded.org
Subject: [sumo][PATCH 0/8] systemd: fix CVEs
Date: Mon, 25 Feb 2019 10:37:05 -0600 [thread overview]
Message-ID: <cover.1551111341.git.george.mccollister@gmail.com> (raw)
Apply CVE patches to systemd. Backport changes from thud when possible
otherwise use patches from:
https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.13
The following changes since commit 31f0c5e59c7fb0ae0915de584fbfcf3d95bbb061:
testsdk: Improvements to the json logging (2018-12-07 10:56:32 +0000)
are available in the git repository at:
git://github.com/gmccollister/openembedded-core sumo-cve-fixes
https://github.com/gmccollister/openembedded-core/tree/sumo-cve-fixes
Chen Qi (2):
systemd: fix CVE-2018-15686
systemd: fix CVE-2018-15688
George McCollister (5):
systemd: fix CVE-2018-15687
systemd: Security fix CVE-2018-16864
systemd: Security fix CVE-2018-16865
systemd: fix CVE-2018-6954
systemd: fix CVE-2019-6454
Marcus Cooper (1):
systemd: Security fix CVE-2018-16866
...sive-let-s-rework-the-recursive-logic-to-.patch | 252 +++
...eserializing-state-always-use-read_line-L.patch | 250 +++
...sure-we-have-enough-space-for-the-DHCP6-o.patch | 39 +
...n-t-resolve-pathnames-when-traversing-rec.patch | 643 +++++++
.../systemd/systemd/0002-Make-tmpfiles-safe.patch | 1828 ++++++++++++++++++++
...-not-store-the-iovec-entry-for-process-co.patch | 193 +++
...ld-set-a-limit-on-the-number-of-fields-1k.patch | 60 +
...ote-set-a-limit-on-the-number-of-fields-i.patch | 79 +
...nal-fix-out-of-bounds-read-CVE-2018-16866.patch | 49 +
.../systemd/systemd/CVE-2019-6454.patch | 210 +++
...e-receive-an-invalid-dbus-message-ignore-.patch | 61 +
meta/recipes-core/systemd/systemd_237.bb | 11 +
12 files changed, 3675 insertions(+)
create mode 100644 meta/recipes-core/systemd/systemd/0001-chown-recursive-let-s-rework-the-recursive-logic-to-.patch
create mode 100644 meta/recipes-core/systemd/systemd/0001-core-when-deserializing-state-always-use-read_line-L.patch
create mode 100644 meta/recipes-core/systemd/systemd/0001-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
create mode 100644 meta/recipes-core/systemd/systemd/0001-tmpfiles-don-t-resolve-pathnames-when-traversing-rec.patch
create mode 100644 meta/recipes-core/systemd/systemd/0002-Make-tmpfiles-safe.patch
create mode 100644 meta/recipes-core/systemd/systemd/0024-journald-do-not-store-the-iovec-entry-for-process-co.patch
create mode 100644 meta/recipes-core/systemd/systemd/0025-journald-set-a-limit-on-the-number-of-fields-1k.patch
create mode 100644 meta/recipes-core/systemd/systemd/0026-journal-remote-set-a-limit-on-the-number-of-fields-i.patch
create mode 100644 meta/recipes-core/systemd/systemd/0027-journal-fix-out-of-bounds-read-CVE-2018-16866.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2019-6454.patch
create mode 100644 meta/recipes-core/systemd/systemd/sd-bus-if-we-receive-an-invalid-dbus-message-ignore-.patch
--
2.11.0
next reply other threads:[~2019-02-25 16:38 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-02-25 16:37 George McCollister [this message]
2019-02-25 16:37 ` [sumo][PATCH 1/8] systemd: fix CVE-2018-15686 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 2/8] systemd: fix CVE-2018-15687 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 3/8] systemd: fix CVE-2018-15688 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 4/8] systemd: Security fix CVE-2018-16864 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 5/8] systemd: Security fix CVE-2018-16865 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 6/8] systemd: Security fix CVE-2018-16866 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 7/8] systemd: fix CVE-2018-6954 George McCollister
2019-02-25 16:37 ` [sumo][PATCH 8/8] systemd: fix CVE-2019-6454 George McCollister
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1551111341.git.george.mccollister@gmail.com \
--to=george.mccollister@gmail.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.