[yocto-security] [OE-core CVE] branch master-next updated. 2018-10-1279-g41cbd4f
cve-notice at lists.openembedded.org
cve-notice at lists.openembedded.org
Mon Mar 18 17:04:07 PDT 2019
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "".
The branch, master-next has been updated
via 41cbd4f03e0187866e0c11a6ab39607295bdb49a (commit)
from 2004d31ead18e750096379d142fe5e89a896ec05 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 41cbd4f03e0187866e0c11a6ab39607295bdb49a
Author: Kai Kang <kai.kang at windriver.com>
Date: Fri Mar 15 04:01:19 2019 -0400
qemu: backport patches to fix cves
CVE: CVE-2018-16872
CVE: CVE-2018-20124
CVE: CVE-2018-20125
CVE: CVE-2018-20126
CVE: CVE-2018-20191
CVE: CVE-2018-20216
Patches 0015-fix-CVE-2018-20124.patch and 0017-fix-CVE-2018-20126.patch
are rebased on current source code. Others are not modified.
Signed-off-by: Kai Kang <kai.kang at windriver.com>
Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
-----------------------------------------------------------------------
Summary of changes:
meta/recipes-devtools/qemu/qemu.inc | 6 ++
.../qemu/qemu/0014-fix-CVE-2018-16872.patch | 85 ++++++++++++++++
.../qemu/qemu/0015-fix-CVE-2018-20124.patch | 60 +++++++++++
.../qemu/qemu/0016-fix-CVE-2018-20125.patch | 54 ++++++++++
.../qemu/qemu/0017-fix-CVE-2018-20126.patch | 113 +++++++++++++++++++++
.../qemu/qemu/0018-fix-CVE-2018-20191.patch | 47 +++++++++
.../qemu/qemu/0019-fix-CVE-2018-20216.patch | 85 ++++++++++++++++
7 files changed, 450 insertions(+)
create mode 100644 meta/recipes-devtools/qemu/qemu/0014-fix-CVE-2018-16872.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0015-fix-CVE-2018-20124.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0016-fix-CVE-2018-20125.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0017-fix-CVE-2018-20126.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0018-fix-CVE-2018-20191.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0019-fix-CVE-2018-20216.patch
hooks/post-receive
--
More information about the yocto-security
mailing list