openembedded-core.git/meta/recipes-core, branch daisy Mirror of openembedded-core eglibc: security fix CVE-2015-7547 2016-04-11T21:00:48+00:00 Javier Viguera javier.viguera@digi.com 2016-04-06T09:34:50+00:00 a4e80e831cd13e6418af0d770c5dbd5b9270eaa5 CVE-2015-7547: getaddrinfo() stack-based buffer overflow Backport patch from GLIBC-2.20 to EGLIBC-2.19. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
CVE-2015-7547: getaddrinfo() stack-based buffer overflow

Backport patch from GLIBC-2.20 to EGLIBC-2.19.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to daisy head revision 2015-05-13T12:27:45+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2015-05-13T12:27:45+00:00 5a577ec878a15f3caaf4893b819825ffb8c81266 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
systemd: fix /var/log/journal ownership 2015-05-12T14:45:41+00:00 Jonathan Liu net147@gmail.com 2015-03-12T09:18:56+00:00 e64cee7ccf9dedbadc3a63e4ed3eb15172ef4403 The ownership needs to be explicitly set otherwise it inherits the user and group id of the build user. (From OE-Core rev: 0752c79282b1cc9699743e719518e6c341d50a3a) Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Conflicts: meta/recipes-core/systemd/systemd_219.bb Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
The ownership needs to be explicitly set otherwise it inherits the user
and group id of the build user.

(From OE-Core rev: 0752c79282b1cc9699743e719518e6c341d50a3a)

Signed-off-by: Jonathan Liu <net147@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Saul Wold <sgw@linux.intel.com>

Conflicts:
	meta/recipes-core/systemd/systemd_219.bb
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
eglibc: fix two security issues. 2015-05-01T11:34:38+00:00 Armin Kuster akuster808@gmail.com 2015-04-29T17:44:27+00:00 fed4d140da67fc51d54b02df83882177f6ddab10 The includes two CVE fixes: CVE-2012-3406 CVE-2014-7817 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
The includes two CVE fixes:
CVE-2012-3406
CVE-2014-7817

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
coreutils: parse-datetime: CVE-2014-9471 2015-05-01T11:34:06+00:00 Sona Sarmadi sona.sarmadi@enea.com 2015-04-29T09:02:20+00:00 0b13fbf3f9b4419141445b381ffa9445af6e52ab Memory corruption flaw in parse_datetime() Reference https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9471 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Maxin B. John <maxin.john@enea.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Memory corruption flaw in parse_datetime()

Reference
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9471

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
systemd: backport patch to fix reading journal backwards 2015-02-06T14:48:29+00:00 Jonathan Liu net147@gmail.com 2015-01-07T03:15:39+00:00 85029adf4f2dbf2d100f1d1b41c7a7323afc008b Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> 
Signed-off-by: Jonathan Liu <net147@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
build-appliance-image: Update to daisy head revision 2014-11-06T14:27:00+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2014-11-06T14:27:00+00:00 1c7a2d764c9a5df4f1d249f34c9dacfc09c0071c Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
readline: Patch for readline multikey dispatch issue 2014-11-06T11:39:41+00:00 Saul Wold sgw@linux.intel.com 2014-11-06T05:08:54+00:00 5ef447d243e5c4954e00d49a4c499dc3fd691725 Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to daisy head revision 2014-11-05T23:28:10+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2014-11-05T23:28:10+00:00 d1729495a19bda411fa84310ecf6c0ac3073ce36 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
readline: Security Advisory - readline - CVE-2014-2524 2014-10-23T15:11:50+00:00 Kai Kang kai.kang@windriver.com 2014-10-15T05:56:24+00:00 a4fa519de008ccd5b9411fcb1880e0a64383ce9c The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> 
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3
allows local users to create or overwrite arbitrary files via a symlink
attack on a /var/tmp/rltrace.[PID] file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>