From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.windriver.com (mail.windriver.com [147.11.1.11]) by mail.openembedded.org (Postfix) with ESMTP id EC9F56DBF6 for ; Thu, 5 Dec 2013 23:52:50 +0000 (UTC) Received: from ALA-HCA.corp.ad.wrs.com (ala-hca.corp.ad.wrs.com [147.11.189.40]) by mail.windriver.com (8.14.5/8.14.5) with ESMTP id rB5NqoNn025314 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 5 Dec 2013 15:52:50 -0800 (PST) Received: from msp-mhatle-lx2.wrs.com (172.25.34.61) by ALA-HCA.corp.ad.wrs.com (147.11.189.50) with Microsoft SMTP Server (TLS) id 14.2.347.0; Thu, 5 Dec 2013 15:52:50 -0800 From: Mark Hatle To: Date: Thu, 5 Dec 2013 17:52:13 -0600 Message-ID: X-Mailer: git-send-email 1.8.1.2.545.g2f19ada MIME-Version: 1.0 X-Originating-IP: [172.25.34.61] Subject: [PATCH 0/6][master] Fix various CVE X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Dec 2013 23:52:51 -0000 Content-Type: text/plain Each of the patches in this set fix various CVE items. This is the matching set for the dora commits sent earlier, only for master. They all still apply. The following changes since commit 300760193c6bcfd20f1d4908f912bebd53e86281: tcl: fix tclConfig.sh to point to the correct private headers (2013-12-05 16:48:17 +0000) are available in the git repository at: git://git.yoctoproject.org/poky-contrib mhatle/master-CVE http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=mhatle/master-CVE Baogen Shang (2): libtiff: CVE-2013-4232 libtiff: CVE-2013-4243 Li Wang (1): xinetd: CVE-2013-4342 Ming Liu (1): libtiff: fix CVE-2013-1960 Yue Tao (2): acpid: CVE-2011-1159 icu: CVE-2013-2924 meta/recipes-bsp/acpid/acpid.inc | 3 +- .../acpid/acpid/set_socket_noblock.patch | 10 ++ .../xinetd/xinetd/xinetd-CVE-2013-4342.patch | 32 +++++ meta/recipes-extended/xinetd/xinetd_2.3.15.bb | 1 + .../libtiff/files/libtiff-CVE-2013-1960.patch | 151 +++++++++++++++++++++ .../libtiff/files/libtiff-CVE-2013-4232.patch | 15 ++ .../libtiff/files/libtiff-CVE-2013-4243.patch | 40 ++++++ meta/recipes-multimedia/libtiff/tiff_4.0.3.bb | 5 +- ...fer_length_check_to_UTF_16_or_32_detector.patch | 33 +++++ meta/recipes-support/icu/icu_51.2.bb | 1 + 10 files changed, 289 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-bsp/acpid/acpid/set_socket_noblock.patch create mode 100644 meta/recipes-extended/xinetd/xinetd/xinetd-CVE-2013-4342.patch create mode 100644 meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-1960.patch create mode 100644 meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4232.patch create mode 100644 meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4243.patch create mode 100644 meta/recipes-support/icu/icu-51.2/add_buffer_length_check_to_UTF_16_or_32_detector.patch -- 1.8.3.4