Hi, Thanks to the POODLE attack there's a slew of CVEs, so we integrated the new libssl release. As we're going to run another RC, merge some other security or low-impact patches too.
Ross The following changes since commit ccf5a4d2342c4fd40e4e0b332ea7e34e0bf175d4: build-appliance-image: Update to dizzy head revision (2014-10-11 08:11:17 +0100) are available in the git repository at: git://git.yoctoproject.org/poky-contrib ross/mut for you to fetch changes up to 723a5dc4f839767d35ed9148433c10ec1ad0abe4: gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869 (2014-10-16 22:23:44 +0100) ---------------------------------------------------------------- Hongxu Jia (2): wic/bootimg-pcbios.py: checking the existance of syslinux file: add wrapper to nativesdk-file Kai Kang (3): gnupg: CVE-2013-4242 readline: Security Advisory - readline - CVE-2014-2524 gnupg_1.4.7: add package config libusb Paul Eggleton (2): python: force off_t size to 8 to enable large file support openssh: avoid screen sessions being killed on disconnect with systemd Peter Urbanec (1): sstate.bbclass: Fix up white space lost in last commit. Ross Burton (1): openssl: upgrade to 1.0.1j Wenlin Kang (1): mtools: fix broken /usr/bin/lz Wenzong Fan (1): sstate.bbclass: specify func dirs for sstate_hardcode_path Yue Tao (2): gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-4358 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869 meta/classes/sstate.bbclass | 45 +++--- .../openssh/openssh/sshd@.service | 1 + .../{openssl_1.0.1i.bb => openssl_1.0.1j.bb} | 4 +- .../readline/readline-6.3/readline63-003 | 43 ++++++ meta/recipes-core/readline/readline_6.3.bb | 2 + meta/recipes-devtools/file/file_5.18.bb | 5 + .../mtools/mtools/fix-broken-lz.patch | 23 ++++ meta/recipes-devtools/mtools/mtools_3.9.9.bb | 4 +- meta/recipes-devtools/python/python_2.7.3.bb | 3 + ...t-parameters-from-SPS-whenever-it-changes.patch | 145 ++++++++++++++++++++ ...rror-concealment-when-SPS-and-slices-are-.patch | 33 +++++ .../gstreamer/gst-ffmpeg_0.10.13.bb | 2 + .../gnupg/gnupg-1.4.7/CVE-2013-4242.patch | 62 +++++++++ meta/recipes-support/gnupg/gnupg_1.4.7.bb | 2 + scripts/lib/wic/plugins/source/bootimg-pcbios.py | 11 +- 15 files changed, 361 insertions(+), 24 deletions(-) rename meta/recipes-connectivity/openssl/{openssl_1.0.1i.bb => openssl_1.0.1j.bb} (92%) create mode 100644 meta/recipes-core/readline/readline-6.3/readline63-003 create mode 100644 meta/recipes-devtools/mtools/mtools/fix-broken-lz.patch create mode 100644 meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-set-parameters-from-SPS-whenever-it-changes.patch create mode 100644 meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-skip-error-concealment-when-SPS-and-slices-are-.patch create mode 100644 meta/recipes-support/gnupg/gnupg-1.4.7/CVE-2013-4242.patch Hongxu Jia (2): wic/bootimg-pcbios.py: checking the existance of syslinux file: add wrapper to nativesdk-file Kai Kang (3): gnupg: CVE-2013-4242 readline: Security Advisory - readline - CVE-2014-2524 gnupg_1.4.7: add package config libusb Paul Eggleton (2): python: force off_t size to 8 to enable large file support openssh: avoid screen sessions being killed on disconnect with systemd Peter Urbanec (1): sstate.bbclass: Fix up white space lost in last commit. Ross Burton (1): openssl: upgrade to 1.0.1j Wenlin Kang (1): mtools: fix broken /usr/bin/lz Wenzong Fan (1): sstate.bbclass: specify func dirs for sstate_hardcode_path Yue Tao (2): gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-4358 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869 meta/classes/sstate.bbclass | 45 +++--- .../openssh/openssh/sshd@.service | 1 + .../{openssl_1.0.1i.bb => openssl_1.0.1j.bb} | 4 +- .../readline/readline-6.3/readline63-003 | 43 ++++++ meta/recipes-core/readline/readline_6.3.bb | 2 + meta/recipes-devtools/file/file_5.18.bb | 5 + .../mtools/mtools/fix-broken-lz.patch | 23 ++++ meta/recipes-devtools/mtools/mtools_3.9.9.bb | 4 +- meta/recipes-devtools/python/python_2.7.3.bb | 3 + ...t-parameters-from-SPS-whenever-it-changes.patch | 145 ++++++++++++++++++++ ...rror-concealment-when-SPS-and-slices-are-.patch | 33 +++++ .../gstreamer/gst-ffmpeg_0.10.13.bb | 2 + .../gnupg/gnupg-1.4.7/CVE-2013-4242.patch | 62 +++++++++ meta/recipes-support/gnupg/gnupg_1.4.7.bb | 2 + scripts/lib/wic/plugins/source/bootimg-pcbios.py | 11 +- 15 files changed, 361 insertions(+), 24 deletions(-) rename meta/recipes-connectivity/openssl/{openssl_1.0.1i.bb => openssl_1.0.1j.bb} (92%) create mode 100644 meta/recipes-core/readline/readline-6.3/readline63-003 create mode 100644 meta/recipes-devtools/mtools/mtools/fix-broken-lz.patch create mode 100644 meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-set-parameters-from-SPS-whenever-it-changes.patch create mode 100644 meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-skip-error-concealment-when-SPS-and-slices-are-.patch create mode 100644 meta/recipes-support/gnupg/gnupg-1.4.7/CVE-2013-4242.patch -- 1.7.10.4 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core