applying this patch, the ptest doesn't be failed.
Signed-off-by: Zhixiong Chi
Signed-off-by: Luca Ceresoli
(cherry picked from commit 549e54ad6a175359b0a57987ccdab8989df9d3a9)
---
...rely-on-all-filesystems-providing-a-.patch | 108 ++
meta/recipes-extended/pam/libpam_1.5.2.bb
applying this patch, the ptest doesn't be failed.
Signed-off-by: Zhixiong Chi
---
...rely-on-all-filesystems-providing-a-.patch | 108 ++
meta/recipes-extended/pam/libpam_1.5.2.bb | 1 +
2 files changed, 109 insertions(+)
create mode 100644
meta/recipes-extended/pam/libpam
Backport the CVE patches from the glibc upstream:
git://sourceware.org/git/glibc.git
commit 681900d29683722b1cb0a8e565a0585846ec5a61
commit 228edd356f03bf62dcf2b1335f25d43c602ee68d
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-29562.patch | 155 ++
.../glibc
Avoid a potential SEGV during program termination.
Backported the patch form:
https://gitlab.com/procps-ng/procps.git
commit d37f85c269fbb6e905802ffdbce0ba4173ba21a9
commit ed34b1228ed08fbfdbf6f1a61ca7ca62448ccd86
Signed-off-by: Zhixiong Chi
---
...ntial-SEGV-during-program-terminatio.patch
Hi,
Please ignore this rr, I will resend the V2.
Thanks.
On 2020/9/11 下午2:58, Zhixiong Chi wrote:
> Avoid a potential SEGV during program termination.
> Backported the patch form:
> https://gitlab.com/procps-ng/procps/-/commit/d37f85c269fbb6e905802ffdbce0ba4173ba21a9
>
> Signed-o
Avoid a potential SEGV during program termination.
Backported the patch form:
https://gitlab.com/procps-ng/procps/-/commit/d37f85c269fbb6e905802ffdbce0ba4173ba21a9
Signed-off-by: Zhixiong Chi
---
...ntial-SEGV-during-program-terminatio.patch | 61 +++
meta/recipes-extended
Backport the CVE patch from the usptream:
https://gitlab.com/gnutls/gnutls.git
commit 29ee67c205855e848a0a26e6d0e4f65b6b943e0a
Signed-off-by: Zhixiong Chi
---
.../gnutls/gnutls/CVE-2020-24659.patch| 117 ++
meta/recipes-support/gnutls/gnutls_3.6.14.bb | 1 +
2 files
Backport the CVE patch from the usptream:
https://gitlab.com/gnutls/gnutls.git
commit 29ee67c205855e848a0a26e6d0e4f65b6b943e0a
Signed-off-by: Zhixiong Chi
---
.../gnutls/gnutls/CVE-2020-24659.patch| 117 ++
meta/recipes-support/gnutls/gnutls_3.6.13.bb | 1 +
2 files
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2020-16845.patch | 110 ++
2 files changed
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2020-16845.patch | 110 ++
2 files changed
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.12.inc | 1 +
.../go/go-1.12/CVE-2020-16845.patch | 110 ++
2 files changed
On 2020/7/14 上午12:27, Khem Raj wrote:
>
>
> On 7/12/20 10:52 PM, Zhixiong Chi wrote:
>> Backport the CVE patch from the upstream:
>> git://sourceware.org/git/glibc.git
>> commit 79a4fa341b8a89cb03f84564fd72abaa1a2db394
>> commit beea361050728138b82c57dda0c
Backport the CVE patch from the upstream:
git://sourceware.org/git/glibc.git
commit 79a4fa341b8a89cb03f84564fd72abaa1a2db394
commit beea361050728138b82c57dda0c4810402d342b9
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-6096-1.patch | 193 ++
.../glibc/glibc
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit ddc650e9b3dc916eab417ce9f79e67337b05035c
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1752.patch | 66 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit ddc650e9b3dc916eab417ce9f79e67337b05035c
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1752.patch | 66 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit d93769405996dfc11d216ddbe415946617b5a494
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1751.patch | 70 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backport the CVE patch from upstream:
[https://sourceware.org/git/gitweb.cgi?p=glibc.git;
a=patch;h=9333498794cde1d5cca518badf79533a24114b6f]
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-10029.patch | 128 ++
meta/recipes-core/glibc/glibc_2.30.bb
Backport the CVE patch from upstream:
[https://sourceware.org/git/gitweb.cgi?p=glibc.git;
a=patch;h=9333498794cde1d5cca518badf79533a24114b6f]
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-10029.patch | 128 ++
meta/recipes-core/glibc/glibc_2.31.bb
Ping...
I sent this patch to the inetutils upstream mail list several days ago
but no response so far.
So will it be merged next steps for oe-core?
Thanks.
On 2019年12月24日 14:35, Zhixiong Chi wrote:
Since snprintf doesn't support the same src and dst address, it will get
the wrong r
ee
to the end of the sink function, so that we can correct the value and fix
the memory leak issue.
Signed-off-by: Zhixiong Chi
---
...e-rcp-couldn-t-copy-subdirectory-iss.patch | 90 +++
.../inetutils/inetutils_1.9.4.bb | 1 +
2 files changed, 91 insertions(+)
create
ee
to the end of the sink function, so that we can correct the value and fix
the memory leak issue.
Signed-off-by: Zhixiong Chi
---
...e-rcp-couldn-t-copy-subdirectory-iss.patch | 90 +++
.../inetutils/inetutils_1.9.4.bb | 1 +
2 files changed, 91 insertions(+)
create
On 2019年11月08日 09:33, Khem Raj wrote:
On Wed, Nov 6, 2019 at 9:54 PM Zhixiong Chi wrote:
Since the Sun RPC is deprecated in glibc, the rpc header files
are not provided any more, but it allows alternative RPC
implementations, such as TIRPC or rpcsvc-proto, to be used.
So we create the
application usage.
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
index e73ffe7b17..a284521c1e
Sorry, I will send the V3 to use the relative link.
Thanks.
On 2019年11月07日 05:43, Richard Purdie wrote:
On Wed, 2019-11-06 at 02:32 -0800, Zhixiong Chi wrote:
Since the Sun RPC is deprecated in glibc, the rpc header files
are not provided any more, but it allows alternative RPC
application usage.
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
index e73ffe7b17..a284521c1e
version and the application usage.
(LOCAL REV: NOT UPSTREAM) -- Send to oe-core on 20191106
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b
This patch fix the stack overflow issue for recursive call
and the segment fault issue.
Backport the two CVE pathces from the binutils upstream:
commit 336bfbeb1848f4b9558456fdcf283ee8a32d7fd1
commit 063c511bd79281f33fd33f0964541a73511b9e2b
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils
This patch fix the stack overflow issue for recursive call
and the segment fault issue.
Backport the two CVE pathces from the binutils upstream:
commit 336bfbeb1848f4b9558456fdcf283ee8a32d7fd1
commit 063c511bd79281f33fd33f0964541a73511b9e2b
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils
n the recursive loop to get the correct path of file and directory.
Even though there will be memory leak, the allocated static area memory
will be released after process exited.
Signed-off-by: Zhixiong Chi
---
.../0001-Fix-the-rcp-copy-issue.patch | 38 +++
.../inet
n the recursive loop to get the correct path of file and directory.
Even though there will be memory leak, the allocated static area memory
will be released after process exited.
Signed-off-by: Zhixiong Chi
---
.../0001-Fix-the-rcp-copy-issue.patch | 38 +++
.../inet
Backprot CVE patch from the upstream:
https://github.com/gcc-mirror/gcc.git [commit f98495d]
https://nvd.nist.gov/vuln/detail/CVE-2018-12886
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gcc/gcc-8.3.inc | 1 +
...spilling-of-stack-protector-guard-s-.patch | 813
f-by: Zhixiong Chi
---
meta/recipes-devtools/gcc/gcc-8.3.inc | 1 +
.../gcc/gcc-8.3/0042-PR-debug-86964.patch | 94 +++
2 files changed, 95 insertions(+)
create mode 100644 meta/recipes-devtools/gcc/gcc-8.3/0042-PR-debug-86964.patch
diff --git a/meta/recipes-devtools/gcc/gcc
Please ignore it. I will send V2.
Thanks.
On 2019年05月28日 15:56, Zhixiong Chi wrote:
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gcc/gcc-8.3.inc | 1 +
.../gcc/gcc-8.3/0042-PR-debug-86964.patch | 94 +++
2 files changed, 95 insertions(+)
create
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gcc/gcc-8.3.inc | 1 +
.../gcc/gcc-8.3/0042-PR-debug-86964.patch | 94 +++
2 files changed, 95 insertions(+)
create mode 100644 meta/recipes-devtools/gcc/gcc-8.3/0042-PR-debug-86964.patch
diff --git a/meta
e better to add that dependency to the packages which need it?
Ross
On Thu, 7 Mar 2019 at 06:53, Zhixiong Chi wrote:
Add the libgcc package into the initramfs image to avoid multithread
function error in the userspace(eg: pthread_cancel).
Signed-off-by: Zhixiong Chi
---
meta/recipes-core/im
Add the libgcc package into the initramfs image to avoid multithread
function error in the userspace(eg: pthread_cancel).
Signed-off-by: Zhixiong Chi
---
meta/recipes-core/images/core-image-minimal-initramfs.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes
Backport the CVE patch from the upstream
commit 3f635fb43389b54f682fc9ed2acc0b2aaf4a923d
Signed-off-by: Zhixiong Chi
---
...e-unsigned-Jcc-instructions-on-size-.patch | 223 ++
meta/recipes-core/glibc/glibc_2.29.bb | 1 +
2 files changed, 224 insertions(+)
create mode
Backport the CVE patches from the binutils upstream.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 4 +
.../binutils/binutils/CVE-2018-18309.patch| 304 ++
.../binutils/binutils/CVE-2018-18605.patch| 47 +++
.../binutils/binutils/CVE
Backport the CVE patches from the binutils upstream.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 4 +
.../binutils/binutils/CVE-2018-18309.patch| 304 ++
.../binutils/binutils/CVE-2018-18605.patch| 47 +++
.../binutils/binutils/CVE
/show_bug.cgi?id=23685
The one is for CVE-2018-17358 and CVE-2018-17359, and the another
is for CVE-2018-17360.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 2 +
.../binutils/binutils/CVE-2018-17358.patch| 144 ++
.../binutils/binutils/CVE
/show_bug.cgi?id=23685
The one is for CVE-2018-17358 and CVE-2018-17359, and the another
is for CVE-2018-17360.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 2 +
.../binutils/binutils/CVE-2018-17358.patch| 144 ++
.../binutils/binutils/CVE
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
On 2018年09月18日 18:10, Burton, Ross wrote:
On Tue, 18 Sep 2018 at 10:01, Zhixiong Chi wrote:
++Upstream-Status: Pending
++cherry-picked patch from https://sourceware.org/bugzilla/show_bug.cgi?id=18945
Sounds like the status should be:
Upstream-Status: Submitted
[https://sourceware.org
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
Backport the CVE patch from the upstream
https://github.com/curl/curl/commit/57d299a499155d4b327e341c6024e293b0418243.patch
https://curl.haxx.se/docs/CVE-2018-14618.html
https://nvd.nist.gov/vuln/detail/CVE-2018-14618
Signed-off-by: Zhixiong Chi
---
.../curl/curl/CVE-2018-14618.patch
Backport the CVE patch from the upstream:
https://sourceware.org/git/?p=elfutils.git;a=commit;
h=29e31978ba51c1051743a503ee325b5ebc03d7e9
Signed-off-by: Zhixiong Chi
---
.../elfutils/elfutils_0.173.bb| 1 +
.../elfutils/files/CVE-2018-16062.patch | 79
Backport patch from the upstream
https://github.com/shadow-maint/shadow/commit/
1d5a926cc2d6078d23a96222b1ef3e558724dad1
Signed-off-by: Zhixiong Chi
---
.../shadow/files/CVE-2016-6252.patch | 48 +++
meta/recipes-extended/shadow/shadow.inc | 1 +
2 files changed
eeded
any more.
Thanks.
On 2018年08月18日 05:30, Richard Purdie wrote:
On Fri, 2018-08-17 at 01:54 -0700, Zhixiong Chi wrote:
When we add the nativesdk-glibc-locale dependence for libc-glibc, if
the SDK_OS
is mingw32, it will broken the building with the following error:
NOTE: Resolving any missing
'nativesdk-glibc']
mingw32 SDK_OS doesn't need to depend on nativesdk-glibc-locale.
Signed-off-by: Zhixiong Chi
---
meta/classes/populate_sdk_base.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes/populate_sdk_base.bbclass
b/meta/classe
Signed-off-by: Zhixiong Chi
---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk.py
index 153b07d76b..5d7e4ed2ac 100644
--- a/meta/lib/oe/sdk.py
+++ b/meta/lib/oe/sdk.py
@@ -88,6 +88,10 @@ class Sdk(object, metaclass=ABCMeta
Sorry for that, I will resend the v2 later.
Thanks.
On 2018年08月17日 16:29, Anuj Mittal wrote:
On 08/17/2018 12:29 PM, Zhixiong Chi wrote:
Signed-off-by: Zhixiong Chi > ---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk
Signed-off-by: Zhixiong Chi
---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk.py
index 153b07d76b..5d7e4ed2ac 100644
--- a/meta/lib/oe/sdk.py
+++ b/meta/lib/oe/sdk.py
@@ -88,6 +88,10 @@ class Sdk(object, metaclass=ABCMeta
'nativesdk-glibc']
mingw32 SDK_OS doesn't need to depend on nativesdk-glibc-locale.
Signed-off-by: Zhixiong Chi
---
meta/classes/populate_sdk_base.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes/populate_sdk_base.bbclass
b/meta/classe
Stop the nspr-config scripts conflicting in a multilib case.
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nspr/nspr_4.19.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nspr/nspr_4.19.bb
b/meta/recipes-support/nspr/nspr_4.19.bb
index
Issue: LIN10-4485
Error: Transaction check error:
file /usr/share/pkgconfig/mobile-broadband-provider-info.pc from install of \
lib32-mobile-broadband-provider-info-dev.core2_32 conflicts with file from
package \
mobile-broadband-provider-info-dev.core2_64
Signed-off-by: Zhixiong Chi
G 8
> #define EVENT__SIZEOF_LONG 4
< #define EVENT__SIZEOF_PTHREAD_T 8
> #define EVENT__SIZEOF_PTHREAD_T 4
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libevent/libevent_2.1.8.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libevent/libev
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nss/nss_3.38.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nss/nss_3.38.bb
b/meta/recipes-support/nss/nss_3.38.bb
index f3e5170a89..4f53b55f05 100644
--- a/meta/recipes-support/nss/nss_3.38.bb
Signed-off-by: Zhixiong Chi
---
.../mobile-broadband-provider-info_git.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git
a/meta/recipes-connectivity/mobile-broadband-provider-info/mobile-broadband-provider-info_git.bb
b/meta/recipes-connectivity
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libevent/libevent_2.1.8.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libevent/libevent_2.1.8.bb
b/meta/recipes-support/libevent/libevent_2.1.8.bb
index 83ce4644cf..0f91e05a6c 100644
--- a
If multilib scripts are more than one file, the variable
ALTERNATIVE_${PN} will be overrode. Finally, there will be only
one symbol link file.
Signed-off-by: Zhixiong Chi
---
meta/classes/multilib_script.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes
Stop the nspr-config scripts conflicting in a multilib case.
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nspr/nspr_4.19.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nspr/nspr_4.19.bb
b/meta/recipes-support/nspr/nspr_4.19.bb
index
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libcheck/libcheck_0.12.0.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libcheck/libcheck_0.12.0.bb
b/meta/recipes-support/libcheck/libcheck_0.12.0.bb
index e646d43968..cb97201580 100644
--- a
Regenerate the patch to avoid patch fuzz warning.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 20 +--
1 file changed, 10 insertions(+), 10 deletions(-)
diff --git
a/meta/recipes-extended/findutils/findutils/0001-find-make-delete-honour-the
Regenerate the patch to avoid patch fuzz warning.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 29 ++-
1 file changed, 16 insertions(+), 13 deletions(-)
diff --git
a/meta/recipes-extended/findutils/findutils/0001-find-make-delete-honour-the
lete-honour-the-ignore_readdir_race-opti.patch
On Tue, Jun 19, 2018 at 12:25 PM Zhixiong Chi
mailto:zhixiong@windriver.com>> wrote:
the '-delete' action no longer complains about disappeared files
when the '-ignore_readdir_race' option is given, too. That ac
the '-delete' action no longer complains about disappeared files
when the '-ignore_readdir_race' option is given, too. That action
will also returns true in such a case now.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 145 +
Backport two CVE patches from the upstream
https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=summary
commit 5460617d1567657621107d895ee2dd83bc1f88f2
commit cd66c0e584c6d692bc8347b5e72723d02b8a8ada
Signed-off-by: Zhixiong Chi
---
meta/recipes-core/glibc/glibc/CVE-2017-18269.patch | 178
nstead?
It seems that even though we pass JAVAC=xxx to configure, it still is
possible to be overrided
by the m4 file in gnulib-m4/javacomp.m4 while compiling.
Thanks.
Ross
On 10 May 2018 at 10:10, Zhixiong Chi wrote:
The checksums of gettext were changing based on whether or not java
and
The checksums of gettext were changing based on whether or not java
and javac were installed. This patch makes gettext recipes independant
of Java components.
Signed-off-by: Zhixiong Chi
---
.../gettext-disable-javacomp-setting.patch | 104 +
meta/recipes-core
The checksums of gettext were changing based on whether or not java
and javac were installed. This patch makes gettext recipes independant
of Java components.
Signed-off-by: Zhixiong Chi
---
...ke-gettext-independant-of-java-components.patch | 88 ++
meta/recipes-core
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/liburcu/liburcu_0.10.1.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/liburcu/liburcu_0.10.1.bb
b/meta/recipes-support/liburcu/liburcu_0.10.1.bb
index 459c04a7a1..9d5b28b33d 100644
--- a/meta
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/npth/npth_1.5.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/npth/npth_1.5.bb
b/meta/recipes-support/npth/npth_1.5.bb
index e7db6ae1b4..8f42a1a2f9 100644
--- a/meta/recipes-support/npth
NTCONFIG_CACHE_ENV} fc-cache
${FONTCONFIG_CACHE_PARAMS}
fi
--
2.13.0
--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
<mailto:Openembedded-core@lists.openembedded.org>
http://lists.openembedded.org/mailman/listinfo/openembedded-core
<http://lists.openembedded.org/mailman/listinfo/openembedded-core>
--
-
Thanks,
Zhixiong Chi
Tel: +86-10-8477-7036
--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
execution, arbitrary file writes, or other attacks.
Backport the patch from:
https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8
https://nvd.nist.gov/vuln/detail/CVE-2017-16544
Signed-off-by: Zhixiong Chi
---
.../busybox/busybox/busybox-CVE-2017-16544.patch | 42
-Status: Backport
+
+Signed-off-by: Zhixiong Chi
+
+Index: git/malloc/Makefile
+===
+--- git.orig/malloc/Makefile 2017-09-04 17:34:06.758018978 +0800
git/malloc/Makefile2017-11-20 14:57:43.440337572 +0800
+@@ -35,6 +35,7
pgrade patch pending
that bumps it
> to 77f921dac17c5fa99bd9e926d926c327982895f7.
It's currently in the glibc master branch only (ie hasn't been
backported to the 2.26 release branch).
--
-
Thanks,
Zhixiong Chi
Tel: +86-10-8477-7036
--
_
: Backport
+
+Signed-off-by: Zhixiong Chi
+
+Index: git/malloc/Makefile
+===
+--- git.orig/malloc/Makefile 2017-09-04 17:34:06.758018978 +0800
git/malloc/Makefile2017-11-20 14:57:43.440337572 +0800
+@@ -34,6 +34,7
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017-13090
https://nvd.nist.gov/vuln/detail/CVE-2017-6508
Signed-off-by: Zhixiong Chi
---
.../recipes-extended/wget/wget
Please ignore this, I will update the subject with the patch.
Thanks.
On 2017年10月31日 17:48, Zhixiong Chi wrote:
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017-13090
https://nvd.nist.gov/vuln/detail/CVE-2017-6508
Signed-off-by: Zhixiong Chi
---
.../recipes-extended/wget/wget
On 2017年10月31日 17:13, Alexander Kanavin wrote:
On 10/31/2017 11:02 AM, Zhixiong Chi wrote:
Patches from:
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=d892291fb8ace4c3b734ea5125770989c215df3f
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba
t/wget.git/patch/?id=d892291fb8ace4c3b734ea5125770989c215df3f
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba
CVE: CVE-2017-13089 CVE-2017-13090
Signed-off-by: Zhixiong Chi
---
.../wget/wget/wget-CVE-2017-13089.patch| 36
.../wget/wget/wget-
5562545b5562f6d12a4ef991fae158bf4ccf92b6
CVE: CVE-2017-14502
Signed-off-by: Zhixiong Chi
---
.../libarchive/libarchive/CVE-2017-14502.patch | 37 ++
.../libarchive/libarchive_3.3.2.bb | 1 +
2 files changed, 38 insertions(+)
create mode 100644
meta/recipes-extended/libarchive
5562545b5562f6d12a4ef991fae158bf4ccf92b6
CVE: CVE-2017-14502
Signed-off-by: Zhixiong Chi
---
.../libarchive/libarchive/CVE-2017-14502.patch | 35 ++
.../libarchive/libarchive_3.3.2.bb | 1 +
2 files changed, 36 insertions(+)
create mode 100644
meta/recipes-extended/libarchive
Rebase it to the master branch for glibc 2.26.
On 2017年09月05日 12:29, Zhixiong Chi wrote:
The patch in this Bugzilla entry was requested by a customer:
https://sourceware.org/bugzilla/show_bug.cgi?id=4578
https://www.sourceware.org/bugzilla/show_bug.cgi?id=19282
If a thread happens to
__libc_fork() code reset dl_load_lock, but it also needed to reset
dl_load_write_lock.
Signed-off-by: Zhixiong Chi
---
...bc-reset-dl-load-write-lock-after-forking.patch | 37 ++
.../0028-Bug-4578-add-ld.so-lock-while-fork.patch | 57 ++
meta/recipes-core/glibc
On 2017年08月14日 00:35, Khem Raj wrote:
On Sun, Aug 13, 2017 at 1:36 AM, Richard Purdie
wrote:
On Fri, 2017-08-11 at 11:16 +0800, Zhixiong Chi wrote:
The patch in this Bugzilla entry was requested by a customer:
https://sourceware.org/bugzilla/show_bug.cgi?id=4578
https
__libc_fork() code reset dl_load_lock, but it also needed to reset
dl_load_write_lock.
Signed-off-by: Zhixiong Chi
---
.../0001-Bug-4578-add-ld.so-lock-while-fork.patch | 57 ++
...bc-reset-dl-load-write-lock-after-forking.patch | 37 ++
meta/recipes-core/glibc
/grub.git commit
f797ec85a02c0137a739fba7ee3f40d063bb7ade
ac8cac1dac50daaf1c390d701cca3b55e16ee768
CVE: CVE-2017-9763
Signed-off-by: Zhixiong Chi
---
meta/recipes-bsp/grub/files/CVE-2017-9763.patch| 252 +
.../grub-core-fs-ext2-use-shifts-rather-than.patch | 105
Please ignore this, I will resent one updated patch.
Thanks.
On 2017年07月06日 16:40, Zhixiong Chi wrote:
Issue: LIN9-4520
The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before
2013-11-12, allows remote attackers to cause a denial of service
(excessive stack use and application crash
://git.savannah.gnu.org/cgit/grub.git commit
f797ec85a02c0137a739fba7ee3f40d063bb7ade
ac8cac1dac50daaf1c390d701cca3b55e16ee768
CVE: CVE-2017-9763
Signed-off-by: Zhixiong Chi
---
meta/recipes-bsp/grub/files/CVE-2017-9763.patch| 252 +
.../grub-core-fs-ext2-use-shifts-rather-than.patch
E-2016-0634
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/bash/bash_4.3.30.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb
b/meta/recipes-extended/bash/bash_4.3.30.bb
index e398e87..b40059f 100644
--- a/meta/recipes-extended/bash/bash_4.3
off-by: Zhixiong Chi
---
meta/recipes-extended/bash/bash_4.3.30.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb
b/meta/recipes-extended/bash/bash_4.3.30.bb
index e398e87..b40059f 100644
--- a/meta/recipes-extended/bash/bash_4.3.30.bb
+++ b/meta/r
On 2017年04月12日 19:04, Jussi Kukkonen wrote:
On 12 April 2017 at 13:52, Zhixiong Chi <mailto:zhixiong@windriver.com>> wrote:
After updating the autoconf-archive version to 2016.09.16,
autoconf-archive
installs the same ax_*.m4 macros that gnome-common installs. So
n will not install any M4 macros that
conflict with autoconf-archive.
At the same time, set the RDEPENDS for gnome-common.
Signed-off-by: Zhixiong Chi
---
meta/recipes-gnome/gnome/gnome-common_3.18.0.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-gnome/gnome/gnome-common_3.18.0.
pm command frpm rpm-native
instead.
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/build-compare/build-compare_git.bb | 5 +
1 file changed, 5 insertions(+)
diff --git a/meta/recipes-devtools/build-compare/build-compare_git.bb
b/meta/recipes-devtools/build-compare/build-compare_gi
://release.debian.org/proposed-updates/stable_diffs/unzip_6.0-16+deb8u3.debdiff
Bug-Debian: https://bugs.debian.org/847486
Bug-Ubuntu: https://launchpad.net/bugs/1643750
(LOCAL REV: NOT UPSTREAM) --send to oe-core on 20170222
Signed-off-by: Zhixiong Chi
---
.../18-cve-2014-9913-unzip-buffer-overflow.patch
Signed-off-by: Zhixiong Chi
---
.../libtiff/files/CVE-2016-9539.patch | 60 ++
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb | 1 +
2 files changed, 61 insertions(+)
create mode 100644 meta/recipes-multimedia/libtiff/files/CVE-2016-9539.patch
diff --git a/meta
github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3
Signed-off-by: Zhixiong Chi
---
.../libtiff/files/CVE-2016-9540.patch | 60 ++
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb | 1 +
2 files changed, 61 insertions(+)
create mode 1
1 - 100 of 118 matches
Mail list logo
