Backport the CVE patch from the usptream:
https://gitlab.com/gnutls/gnutls.git
commit 29ee67c205855e848a0a26e6d0e4f65b6b943e0a
Signed-off-by: Zhixiong Chi
---
.../gnutls/gnutls/CVE-2020-24659.patch| 117 ++
meta/recipes-support/gnutls/gnutls_3.6.13.bb | 1 +
2 files
Backport the CVE patch from the usptream:
https://gitlab.com/gnutls/gnutls.git
commit 29ee67c205855e848a0a26e6d0e4f65b6b943e0a
Signed-off-by: Zhixiong Chi
---
.../gnutls/gnutls/CVE-2020-24659.patch| 117 ++
meta/recipes-support/gnutls/gnutls_3.6.14.bb | 1 +
2 files
Avoid a potential SEGV during program termination.
Backported the patch form:
https://gitlab.com/procps-ng/procps/-/commit/d37f85c269fbb6e905802ffdbce0ba4173ba21a9
Signed-off-by: Zhixiong Chi
---
...ntial-SEGV-during-program-terminatio.patch | 61 +++
meta/recipes-extended
Hi,
Please ignore this rr, I will resend the V2.
Thanks.
On 2020/9/11 下午2:58, Zhixiong Chi wrote:
> Avoid a potential SEGV during program termination.
> Backported the patch form:
> https://gitlab.com/procps-ng/procps/-/commit/d37f85c269fbb6e905802ffdbce0ba4173ba21a9
>
> Signed-o
Avoid a potential SEGV during program termination.
Backported the patch form:
https://gitlab.com/procps-ng/procps.git
commit d37f85c269fbb6e905802ffdbce0ba4173ba21a9
commit ed34b1228ed08fbfdbf6f1a61ca7ca62448ccd86
Signed-off-by: Zhixiong Chi
---
...ntial-SEGV-during-program-terminatio.patch
Backport the CVE patches from the glibc upstream:
git://sourceware.org/git/glibc.git
commit 681900d29683722b1cb0a8e565a0585846ec5a61
commit 228edd356f03bf62dcf2b1335f25d43c602ee68d
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-29562.patch | 155 ++
.../glibc
This patch fix the stack overflow issue for recursive call
and the segment fault issue.
Backport the two CVE pathces from the binutils upstream:
commit 336bfbeb1848f4b9558456fdcf283ee8a32d7fd1
commit 063c511bd79281f33fd33f0964541a73511b9e2b
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils
This patch fix the stack overflow issue for recursive call
and the segment fault issue.
Backport the two CVE pathces from the binutils upstream:
commit 336bfbeb1848f4b9558456fdcf283ee8a32d7fd1
commit 063c511bd79281f33fd33f0964541a73511b9e2b
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils
version and the application usage.
(LOCAL REV: NOT UPSTREAM) -- Send to oe-core on 20191106
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b
application usage.
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
index e73ffe7b17..a284521c1e
Sorry, I will send the V3 to use the relative link.
Thanks.
On 2019年11月07日 05:43, Richard Purdie wrote:
On Wed, 2019-11-06 at 02:32 -0800, Zhixiong Chi wrote:
Since the Sun RPC is deprecated in glibc, the rpc header files
are not provided any more, but it allows alternative RPC
application usage.
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb | 14 ++
1 file changed, 14 insertions(+)
diff --git a/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
b/meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb
index e73ffe7b17..a284521c1e
On 2019年11月08日 09:33, Khem Raj wrote:
On Wed, Nov 6, 2019 at 9:54 PM Zhixiong Chi wrote:
Since the Sun RPC is deprecated in glibc, the rpc header files
are not provided any more, but it allows alternative RPC
implementations, such as TIRPC or rpcsvc-proto, to be used.
So we create the
ee
to the end of the sink function, so that we can correct the value and fix
the memory leak issue.
Signed-off-by: Zhixiong Chi
---
...e-rcp-couldn-t-copy-subdirectory-iss.patch | 90 +++
.../inetutils/inetutils_1.9.4.bb | 1 +
2 files changed, 91 insertions(+)
create
ee
to the end of the sink function, so that we can correct the value and fix
the memory leak issue.
Signed-off-by: Zhixiong Chi
---
...e-rcp-couldn-t-copy-subdirectory-iss.patch | 90 +++
.../inetutils/inetutils_1.9.4.bb | 1 +
2 files changed, 91 insertions(+)
create
Ping...
I sent this patch to the inetutils upstream mail list several days ago
but no response so far.
So will it be merged next steps for oe-core?
Thanks.
On 2019年12月24日 14:35, Zhixiong Chi wrote:
Since snprintf doesn't support the same src and dst address, it will get
the wrong r
applying this patch, the ptest doesn't be failed.
Signed-off-by: Zhixiong Chi
---
...rely-on-all-filesystems-providing-a-.patch | 108 ++
meta/recipes-extended/pam/libpam_1.5.2.bb | 1 +
2 files changed, 109 insertions(+)
create mode 100644
meta/recipes-extended/pam/libpam
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit d93769405996dfc11d216ddbe415946617b5a494
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1751.patch | 70 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit ddc650e9b3dc916eab417ce9f79e67337b05035c
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1752.patch | 66 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backport the CVE patch from upstream:
git://sourceware.org/git/glibc.git
commit ddc650e9b3dc916eab417ce9f79e67337b05035c
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-1752.patch | 66 +++
meta/recipes-core/glibc/glibc_2.30.bb | 1 +
2 files changed
Backprot CVE patch from the upstream:
https://github.com/gcc-mirror/gcc.git [commit f98495d]
https://nvd.nist.gov/vuln/detail/CVE-2018-12886
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gcc/gcc-8.3.inc | 1 +
...spilling-of-stack-protector-guard-s-.patch | 813
n the recursive loop to get the correct path of file and directory.
Even though there will be memory leak, the allocated static area memory
will be released after process exited.
Signed-off-by: Zhixiong Chi
---
.../0001-Fix-the-rcp-copy-issue.patch | 38 +++
.../inet
n the recursive loop to get the correct path of file and directory.
Even though there will be memory leak, the allocated static area memory
will be released after process exited.
Signed-off-by: Zhixiong Chi
---
.../0001-Fix-the-rcp-copy-issue.patch | 38 +++
.../inet
Backport the CVE patch from upstream:
[https://sourceware.org/git/gitweb.cgi?p=glibc.git;
a=patch;h=9333498794cde1d5cca518badf79533a24114b6f]
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-10029.patch | 128 ++
meta/recipes-core/glibc/glibc_2.30.bb
Backport the CVE patch from upstream:
[https://sourceware.org/git/gitweb.cgi?p=glibc.git;
a=patch;h=9333498794cde1d5cca518badf79533a24114b6f]
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-10029.patch | 128 ++
meta/recipes-core/glibc/glibc_2.31.bb
Backport the CVE patch from the upstream:
git://sourceware.org/git/glibc.git
commit 79a4fa341b8a89cb03f84564fd72abaa1a2db394
commit beea361050728138b82c57dda0c4810402d342b9
Signed-off-by: Zhixiong Chi
---
.../glibc/glibc/CVE-2020-6096-1.patch | 193 ++
.../glibc/glibc
On 2020/7/14 上午12:27, Khem Raj wrote:
>
>
> On 7/12/20 10:52 PM, Zhixiong Chi wrote:
>> Backport the CVE patch from the upstream:
>> git://sourceware.org/git/glibc.git
>> commit 79a4fa341b8a89cb03f84564fd72abaa1a2db394
>> commit beea361050728138b82c57dda0c
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.12.inc | 1 +
.../go/go-1.12/CVE-2020-16845.patch | 110 ++
2 files changed
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2020-16845.patch | 110 ++
2 files changed
Backport CVE patch from the upstream:
https://github.com/golang/go.git
commit 027d7241ce050d197e7fabea3d541ffbe3487258
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2020-16845.patch | 110 ++
2 files changed
: Zhixiong Chi
---
.../expat/expat-2.1.0/expat-CVE-2015-1283.patch| 58 ++
meta/recipes-core/expat/expat.inc | 4 +-
2 files changed, 61 insertions(+), 1 deletion(-)
create mode 100644
meta/recipes-core/expat/expat-2.1.0/expat-CVE-2015-1283.patch
diff --git
: Zhixiong Chi
---
.../expat/expat-2.1.0/expat-CVE-2015-1283.patch| 62 ++
meta/recipes-core/expat/expat.inc | 4 +-
2 files changed, 65 insertions(+), 1 deletion(-)
create mode 100644
meta/recipes-core/expat/expat-2.1.0/expat-CVE-2015-1283.patch
diff --git
Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi
---
...ject-a-Credential-with
Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi
---
...parameter-set-with
Add CVE-2016-4477 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi
---
...parameter-set-with
Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi
---
...ject-a-Credential-with
://bugzilla.maptools.org/show_bug.cgi?id=2546
Patch from:
https://github.com/vadz/libtiff/commit/45c68450bef8ad876f310b495165c513cad8b67d
Signed-off-by: Zhixiong Chi
---
.../libtiff/files/CVE-2016-3658.patch | 111 +
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb
github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3
Signed-off-by: Zhixiong Chi
---
.../libtiff/files/CVE-2016-9540.patch | 60 ++
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb | 1 +
2 files changed, 61 insertions(+)
create mode 1
Signed-off-by: Zhixiong Chi
---
.../libtiff/files/CVE-2016-9539.patch | 60 ++
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb | 1 +
2 files changed, 61 insertions(+)
create mode 100644 meta/recipes-multimedia/libtiff/files/CVE-2016-9539.patch
diff --git a/meta
Add debug_lock option to show lock diagnostic information instead of
outputing directly.
We can enable it with using "./configure ... --enable-debug_lock".
Signed-off-by: Zhixiong Chi
---
.../db/db/db-add-debug-lock-option.patch | 144 +
meta/recipes-
Add debug_lock option to show lock diagnostic information instead of
outputing directly.
We can enable it with using "./configure ... --enable-debug_lock".
Signed-off-by: Zhixiong Chi
---
.../db/db/db-add-debug-lock-option.patch | 151 +
meta/recipes-
Changes:
1. add upstream-status and sob
2.modify the error in .bb file
On 2015年07月07日 16:17, Zhixiong Chi wrote:
Add debug_lock option to show lock diagnostic information instead of
outputing directly.
We can enable it with using "./configure ... --enable-debug_lock".
Signed-off-by
Oh, I'm sorry for making a mistake, and it should be upstream-status:
pending.
On 2015年07月11日 06:29, Burton, Ross wrote:
On 7 July 2015 at 09:17, Zhixiong Chi <mailto:zhixiong@windriver.com>> wrote:
+Index: db-6.0.30/dist/configure
Don't patch generated file
Add null pointer checking for rpmpsmStage() function in lib/psm.c
Signed-off-by: Zhixiong Chi
---
.../rpm/rpm/rpm-fix-segment-fault-in-psm.patch | 34 ++
meta/recipes-devtools/rpm/rpm_5.4.14.bb| 1 +
2 files changed, 35 insertions(+)
create mode 100644
Modify the dhcp.inc with using the variable ${PN} instead of direct
packagename, so that the content will not be override after expanding
while we build the lib32-dhcp package with FILES_${PN}-_append.
Signed-off-by: Zhixiong Chi
---
meta/recipes-connectivity/dhcp/dhcp.inc | 14
mqv.c verify.cquery.c query.c
verify.c(headerIsEntry)
rpmVerifyScript()->rpmpsmScriptStage()->rpmpsmStage()->
rpmtxnCommit(rpmtsGetRdb(ts)->db_txn);
verify.cpsm.c psm.c psm.c
Signed-off-by: Zhixiong Chi
---
...b-b
x27;s, and mktemp XXX.pdf(do not
have to be the trailing character for 'X')
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/mktemp/mktemp_1.7.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-extended/mktemp/mktemp_1.7.bb
b/meta/recipes-extended/
rom
<https://github.com/WindRiver-OpenSourceLabs/overc-installer>
Signed-off-by: Bruce Ashfield
Signed-off-by: Zhixiong Chi
---
meta/recipes-connectivity/avahi/avahi.inc | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta/recipes-connectivity/avahi/avahi.inc
b/meta/recipes-co
Based as security reason, the system must limit users to
simultaneous system logins, or a site-defined number.
To avoid overwriting the /etc/security/limits.conf file after
upgrading this rpm package, we will define the file as
CONFFILES of package libpam-runtime.
Signed-off-by: Zhixiong Chi
://release.debian.org/proposed-updates/stable_diffs/unzip_6.0-16+deb8u3.debdiff
Bug-Debian: https://bugs.debian.org/847486
Bug-Ubuntu: https://launchpad.net/bugs/1643750
(LOCAL REV: NOT UPSTREAM) --send to oe-core on 20170222
Signed-off-by: Zhixiong Chi
---
.../18-cve-2014-9913-unzip-buffer-overflow.patch
pm command frpm rpm-native
instead.
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/build-compare/build-compare_git.bb | 5 +
1 file changed, 5 insertions(+)
diff --git a/meta/recipes-devtools/build-compare/build-compare_git.bb
b/meta/recipes-devtools/build-compare/build-compare_gi
n will not install any M4 macros that
conflict with autoconf-archive.
At the same time, set the RDEPENDS for gnome-common.
Signed-off-by: Zhixiong Chi
---
meta/recipes-gnome/gnome/gnome-common_3.18.0.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-gnome/gnome/gnome-common_3.18.0.
On 2017年04月12日 19:04, Jussi Kukkonen wrote:
On 12 April 2017 at 13:52, Zhixiong Chi <mailto:zhixiong@windriver.com>> wrote:
After updating the autoconf-archive version to 2016.09.16,
autoconf-archive
installs the same ax_*.m4 macros that gnome-common installs. So
off-by: Zhixiong Chi
---
meta/recipes-extended/bash/bash_4.3.30.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb
b/meta/recipes-extended/bash/bash_4.3.30.bb
index e398e87..b40059f 100644
--- a/meta/recipes-extended/bash/bash_4.3.30.bb
+++ b/meta/r
E-2016-0634
Signed-off-by: Zhixiong Chi
---
meta/recipes-extended/bash/bash_4.3.30.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb
b/meta/recipes-extended/bash/bash_4.3.30.bb
index e398e87..b40059f 100644
--- a/meta/recipes-extended/bash/bash_4.3
'' failed.
Signed-off-by: Zhixiong Chi
---
...-ensure-rpm2cpio-call-rpm-relocation-code.patch | 25 ++
meta/recipes-devtools/rpm/rpm_5.4.16.bb| 1 +
2 files changed, 26 insertions(+)
create mode 100644
meta/recipes-devtools/rpm/rpm/rpm-ensure-rpm2cpio-ca
Backport the CVE patch from the upstream
commit 3f635fb43389b54f682fc9ed2acc0b2aaf4a923d
Signed-off-by: Zhixiong Chi
---
...e-unsigned-Jcc-instructions-on-size-.patch | 223 ++
meta/recipes-core/glibc/glibc_2.29.bb | 1 +
2 files changed, 224 insertions(+)
create mode
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/npth/npth_1.5.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/npth/npth_1.5.bb
b/meta/recipes-support/npth/npth_1.5.bb
index e7db6ae1b4..8f42a1a2f9 100644
--- a/meta/recipes-support/npth
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/liburcu/liburcu_0.10.1.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/liburcu/liburcu_0.10.1.bb
b/meta/recipes-support/liburcu/liburcu_0.10.1.bb
index 459c04a7a1..9d5b28b33d 100644
--- a/meta
The checksums of gettext were changing based on whether or not java
and javac were installed. This patch makes gettext recipes independant
of Java components.
Signed-off-by: Zhixiong Chi
---
...ke-gettext-independant-of-java-components.patch | 88 ++
meta/recipes-core
The checksums of gettext were changing based on whether or not java
and javac were installed. This patch makes gettext recipes independant
of Java components.
Signed-off-by: Zhixiong Chi
---
.../gettext-disable-javacomp-setting.patch | 104 +
meta/recipes-core
nstead?
It seems that even though we pass JAVAC=xxx to configure, it still is
possible to be overrided
by the m4 file in gnulib-m4/javacomp.m4 while compiling.
Thanks.
Ross
On 10 May 2018 at 10:10, Zhixiong Chi wrote:
The checksums of gettext were changing based on whether or not java
and
Backport two CVE patches from the upstream
https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=summary
commit 5460617d1567657621107d895ee2dd83bc1f88f2
commit cd66c0e584c6d692bc8347b5e72723d02b8a8ada
Signed-off-by: Zhixiong Chi
---
meta/recipes-core/glibc/glibc/CVE-2017-18269.patch | 178
the '-delete' action no longer complains about disappeared files
when the '-ignore_readdir_race' option is given, too. That action
will also returns true in such a case now.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 145 +
Backport the CVE patch from the upstream
https://github.com/curl/curl/commit/57d299a499155d4b327e341c6024e293b0418243.patch
https://curl.haxx.se/docs/CVE-2018-14618.html
https://nvd.nist.gov/vuln/detail/CVE-2018-14618
Signed-off-by: Zhixiong Chi
---
.../curl/curl/CVE-2018-14618.patch
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
On 2018年09月18日 18:10, Burton, Ross wrote:
On Tue, 18 Sep 2018 at 10:01, Zhixiong Chi wrote:
++Upstream-Status: Pending
++cherry-picked patch from https://sourceware.org/bugzilla/show_bug.cgi?id=18945
Sounds like the status should be:
Upstream-Status: Submitted
[https://sourceware.org
Signed-off-by: Zhixiong Chi
---
meta/recipes-devtools/gdb/gdb-8.2.inc | 1 +
.../gdb/gdb/gdbserver-ctrl-c-handling.patch | 26 +++
2 files changed, 27 insertions(+)
create mode 100644
meta/recipes-devtools/gdb/gdb/gdbserver-ctrl-c-handling.patch
diff --git a/me
/show_bug.cgi?id=23685
The one is for CVE-2018-17358 and CVE-2018-17359, and the another
is for CVE-2018-17360.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 2 +
.../binutils/binutils/CVE-2018-17358.patch| 144 ++
.../binutils/binutils/CVE
/show_bug.cgi?id=23685
The one is for CVE-2018-17358 and CVE-2018-17359, and the another
is for CVE-2018-17360.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 2 +
.../binutils/binutils/CVE-2018-17358.patch| 144 ++
.../binutils/binutils/CVE
Backport the CVE patches from the binutils upstream.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 4 +
.../binutils/binutils/CVE-2018-18309.patch| 304 ++
.../binutils/binutils/CVE-2018-18605.patch| 47 +++
.../binutils/binutils/CVE
Backport the CVE patches from the binutils upstream.
Signed-off-by: Zhixiong Chi
---
.../binutils/binutils-2.31.inc| 4 +
.../binutils/binutils/CVE-2018-18309.patch| 304 ++
.../binutils/binutils/CVE-2018-18605.patch| 47 +++
.../binutils/binutils/CVE
t/wget.git/patch/?id=d892291fb8ace4c3b734ea5125770989c215df3f
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba
CVE: CVE-2017-13089 CVE-2017-13090
Signed-off-by: Zhixiong Chi
---
.../wget/wget/wget-CVE-2017-13089.patch| 36
.../wget/wget/wget-
On 2017年10月31日 17:13, Alexander Kanavin wrote:
On 10/31/2017 11:02 AM, Zhixiong Chi wrote:
Patches from:
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=d892291fb8ace4c3b734ea5125770989c215df3f
http://git.savannah.gnu.org/cgit/wget.git/patch/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017-13090
https://nvd.nist.gov/vuln/detail/CVE-2017-6508
Signed-off-by: Zhixiong Chi
---
.../recipes-extended/wget/wget
Please ignore this, I will update the subject with the patch.
Thanks.
On 2017年10月31日 17:48, Zhixiong Chi wrote:
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017
Among other things, fix CVE-2017-13089 CVE-2017-13090 CVE-2017-6508
External References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13089
https://nvd.nist.gov/vuln/detail/CVE-2017-13090
https://nvd.nist.gov/vuln/detail/CVE-2017-6508
Signed-off-by: Zhixiong Chi
---
.../recipes-extended/wget/wget
: Backport
+
+Signed-off-by: Zhixiong Chi
+
+Index: git/malloc/Makefile
+===
+--- git.orig/malloc/Makefile 2017-09-04 17:34:06.758018978 +0800
git/malloc/Makefile2017-11-20 14:57:43.440337572 +0800
+@@ -34,6 +34,7
pgrade patch pending
that bumps it
> to 77f921dac17c5fa99bd9e926d926c327982895f7.
It's currently in the glibc master branch only (ie hasn't been
backported to the 2.26 release branch).
--
-
Thanks,
Zhixiong Chi
Tel: +86-10-8477-7036
--
_
-Status: Backport
+
+Signed-off-by: Zhixiong Chi
+
+Index: git/malloc/Makefile
+===
+--- git.orig/malloc/Makefile 2017-09-04 17:34:06.758018978 +0800
git/malloc/Makefile2017-11-20 14:57:43.440337572 +0800
+@@ -35,6 +35,7
execution, arbitrary file writes, or other attacks.
Backport the patch from:
https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8
https://nvd.nist.gov/vuln/detail/CVE-2017-16544
Signed-off-by: Zhixiong Chi
---
.../busybox/busybox/busybox-CVE-2017-16544.patch | 42
NTCONFIG_CACHE_ENV} fc-cache
${FONTCONFIG_CACHE_PARAMS}
fi
--
2.13.0
--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
<mailto:Openembedded-core@lists.openembedded.org>
http://lists.openembedded.org/mailman/listinfo/openembedded-core
<http://lists.openembedded.org/mailman/listinfo/openembedded-core>
--
-
Thanks,
Zhixiong Chi
Tel: +86-10-8477-7036
--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
lete-honour-the-ignore_readdir_race-opti.patch
On Tue, Jun 19, 2018 at 12:25 PM Zhixiong Chi
mailto:zhixiong@windriver.com>> wrote:
the '-delete' action no longer complains about disappeared files
when the '-ignore_readdir_race' option is given, too. That ac
Regenerate the patch to avoid patch fuzz warning.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 29 ++-
1 file changed, 16 insertions(+), 13 deletions(-)
diff --git
a/meta/recipes-extended/findutils/findutils/0001-find-make-delete-honour-the
Regenerate the patch to avoid patch fuzz warning.
Signed-off-by: Zhixiong Chi
---
...-honour-the-ignore_readdir_race-opti.patch | 20 +--
1 file changed, 10 insertions(+), 10 deletions(-)
diff --git
a/meta/recipes-extended/findutils/findutils/0001-find-make-delete-honour-the
Stop the nspr-config scripts conflicting in a multilib case.
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nspr/nspr_4.19.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nspr/nspr_4.19.bb
b/meta/recipes-support/nspr/nspr_4.19.bb
index
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libcheck/libcheck_0.12.0.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libcheck/libcheck_0.12.0.bb
b/meta/recipes-support/libcheck/libcheck_0.12.0.bb
index e646d43968..cb97201580 100644
--- a
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libevent/libevent_2.1.8.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libevent/libevent_2.1.8.bb
b/meta/recipes-support/libevent/libevent_2.1.8.bb
index 83ce4644cf..0f91e05a6c 100644
--- a
If multilib scripts are more than one file, the variable
ALTERNATIVE_${PN} will be overrode. Finally, there will be only
one symbol link file.
Signed-off-by: Zhixiong Chi
---
meta/classes/multilib_script.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nss/nss_3.38.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nss/nss_3.38.bb
b/meta/recipes-support/nss/nss_3.38.bb
index f3e5170a89..4f53b55f05 100644
--- a/meta/recipes-support/nss/nss_3.38.bb
Signed-off-by: Zhixiong Chi
---
.../mobile-broadband-provider-info_git.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git
a/meta/recipes-connectivity/mobile-broadband-provider-info/mobile-broadband-provider-info_git.bb
b/meta/recipes-connectivity
Issue: LIN10-4485
Error: Transaction check error:
file /usr/share/pkgconfig/mobile-broadband-provider-info.pc from install of \
lib32-mobile-broadband-provider-info-dev.core2_32 conflicts with file from
package \
mobile-broadband-provider-info-dev.core2_64
Signed-off-by: Zhixiong Chi
G 8
> #define EVENT__SIZEOF_LONG 4
< #define EVENT__SIZEOF_PTHREAD_T 8
> #define EVENT__SIZEOF_PTHREAD_T 4
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/libevent/libevent_2.1.8.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/libevent/libev
Stop the nspr-config scripts conflicting in a multilib case.
Signed-off-by: Zhixiong Chi
---
meta/recipes-support/nspr/nspr_4.19.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-support/nspr/nspr_4.19.bb
b/meta/recipes-support/nspr/nspr_4.19.bb
index
'nativesdk-glibc']
mingw32 SDK_OS doesn't need to depend on nativesdk-glibc-locale.
Signed-off-by: Zhixiong Chi
---
meta/classes/populate_sdk_base.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes/populate_sdk_base.bbclass
b/meta/classe
Signed-off-by: Zhixiong Chi
---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk.py
index 153b07d76b..5d7e4ed2ac 100644
--- a/meta/lib/oe/sdk.py
+++ b/meta/lib/oe/sdk.py
@@ -88,6 +88,10 @@ class Sdk(object, metaclass=ABCMeta
Sorry for that, I will resend the v2 later.
Thanks.
On 2018年08月17日 16:29, Anuj Mittal wrote:
On 08/17/2018 12:29 PM, Zhixiong Chi wrote:
Signed-off-by: Zhixiong Chi > ---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk
Signed-off-by: Zhixiong Chi
---
meta/lib/oe/sdk.py | 4
1 file changed, 4 insertions(+)
diff --git a/meta/lib/oe/sdk.py b/meta/lib/oe/sdk.py
index 153b07d76b..5d7e4ed2ac 100644
--- a/meta/lib/oe/sdk.py
+++ b/meta/lib/oe/sdk.py
@@ -88,6 +88,10 @@ class Sdk(object, metaclass=ABCMeta
'nativesdk-glibc']
mingw32 SDK_OS doesn't need to depend on nativesdk-glibc-locale.
Signed-off-by: Zhixiong Chi
---
meta/classes/populate_sdk_base.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes/populate_sdk_base.bbclass
b/meta/classe
1 - 100 of 118 matches
Mail list logo
