Joe Slater 67afd9ead6 ghostscript: CVE-2017-9727, -9835, -11714 ...

CVE-2017-9727: make bounds check in gx_ttfReader__Read more robust
CVE-2017-9835: bounds check the array allocations methods
CVE-2017-11714: prevent trying to reloc a freed object

(From OE-Core rev: 2eae91f9fa1cfdd3f0e6111956c8f193fd0db69f)

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-23 08:47:03 +01:00

..

acpica

acpitests: Remove as unmaintained

2017-07-17 14:01:37 +01:00

asciidoc

asciidoc: drop distutils inherit, not actually required

2017-05-16 14:08:29 +01:00

at

at: reduce local pending patches

2017-07-21 22:51:38 +01:00

bash

bash: 4.3.30 -> 4.4

2017-08-18 23:46:37 +01:00

bc

bc: separate B and S

2015-01-16 23:08:25 +00:00

blktool

blktool: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

bzip2

openssl/fontconfig/bzip2: Use relative symlinks instead of absolute ones (using a new class)

2017-02-09 10:52:03 +00:00

chkconfig

chkconfig: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cpio

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

cracklib

cracklib: Apply patch to fix CVE-2016-6318

2016-09-24 07:30:10 +01:00

cronie

cronie: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cups

cups: upgrade to 2.2.4

2017-07-27 22:36:53 +01:00

cwautomacros

cwautomacros: cleanup buildpath in autogen.sh

2015-10-01 07:43:34 +01:00

diffutils

diffutils: upgrade to 3.6

2017-07-27 22:36:53 +01:00

ed

ed: update to 1.14.2

2017-05-23 17:45:36 +01:00

ethtool

ethtool: Upgrade to 4.11

2017-07-17 14:01:39 +01:00

findutils

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

foomatic

foomatic-filters: Security fixes CVE-2015-8327

2016-08-01 12:11:21 +01:00

gawk

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

ghostscript

ghostscript: CVE-2017-9727, -9835, -11714

2017-08-23 08:47:03 +01:00

go-examples

go: Add recipes for golang compilers and tools

2017-03-10 15:51:55 +00:00

gperf

gperf: upgrade to 3.1

2017-08-13 09:27:37 +01:00

grep

grep: upgrade to 3.1

2017-07-06 14:38:14 +01:00

groff

groff: replace "perl -w" with "use warnings"

2017-04-10 23:00:43 +01:00

gzip

gzip: add ptest

2017-06-12 15:08:30 +01:00

hdparm

hdparm: Upgrade to 9.52

2017-06-09 17:12:14 +01:00

images

core-image-lsb-sdk: Lower IMAGE_OVERHEAD_FACTOR

2017-03-01 23:27:11 +00:00

iptables

iptables: Apply 0001-fix-build-with-musl.patch unconditionally

2017-06-28 20:55:08 +01:00

iputils

iputils: do not build or install manpages

2016-10-28 16:15:19 +01:00

less

less: 481 -> 487

2016-12-08 10:31:29 +00:00

libaio

libaio: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

libarchive

libarchive: Remove xz packageconfig --with-lzmadec option

2017-08-17 00:21:15 +01:00

libidn

libidn: Fix hardened build with musl

2017-05-25 23:59:31 +01:00

libnsl

meta: Add/fix missing Upstream-Status to patches

2017-06-27 10:38:43 +01:00

libsolv

libsolv: upgrade to 0.6.28

2017-07-21 22:51:38 +01:00

libtirpc

libtirpc: upgrade to 1.0.2

2017-07-21 22:51:38 +01:00

libuser

libuser: replace fedorahosted.org SRC_URI with pagure.io source

2017-04-05 23:22:12 +01:00

lighttpd

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

logrotate

logrotate: fix systemd service not found while multilib

2017-08-18 23:46:37 +01:00

lsb

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-16 00:03:13 +01:00

lsof

lsof: update SRC_URI

2017-07-08 13:34:46 +01:00

ltp

ltp: Skip the filedependency scan

2017-08-18 10:40:26 +01:00

lzip

lzip: Upgrade 1.18 -> 1.19

2017-06-06 19:52:26 +01:00

man

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

man-pages

man-pages: Upgrade to 4.11

2017-06-09 17:12:14 +01:00

mc

mc: unify curses initialization

2017-08-18 10:40:27 +01:00

mdadm

recipes: Replace "cp -a" with "cp -R --no-dereference --preserve=mode, links"

2017-06-06 19:02:43 +01:00

mingetty

mingetty: fix SRC_URI

2015-02-03 14:53:52 +00:00

minicom

minicom: upgrade to 2.7.1

2017-05-18 14:01:47 +01:00

mktemp

mktemp: Move installed files only when needed

2017-03-22 11:35:20 +00:00

msmtp

msmtp: update to 1.6.6

2016-11-30 15:48:09 +00:00

net-tools

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

newt

libnewt: 0.52.19 -> 0.52.20

2017-06-23 11:44:13 +01:00

packagegroups

mailx: remove the recipe

2017-06-28 15:52:17 +01:00

pam

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

parted

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

pax

pax: Fix build with gcc7

2017-05-11 16:59:18 +01:00

pbzip2

pbzip2: fix LIC_FILES_CHKSUM following 1.1.12 -> 1.1.13 upgrade

2016-04-14 10:58:34 +01:00

perl

libxml-namespacesupport-perl: Upgrade 1.11 -> 1.12

2017-06-06 19:52:26 +01:00

pigz

pigz: set downloadfilename

2017-02-23 12:49:51 -08:00

pixz

pixz: enable optional building of manpages

2016-10-28 16:15:20 +01:00

procps

procps: fix ALTERNATIVE_PRIORITY to avoid conflict

2017-03-17 16:53:05 +00:00

psmisc

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

quota

quota_4.03.bb: set CVE_PRODUCT to linux_diskquota

2017-07-24 09:13:31 +01:00

rpcbind

rpcbind: Fix CVE-2017-8779

2017-05-25 23:59:32 +01:00

screen

screen: upgrade to 4.6.1

2017-08-18 10:40:26 +01:00

sed

sed: changes to support merged /usr

2017-06-14 10:18:30 +01:00

shadow

shadow: fix CVE-2017-12424

2017-08-18 10:40:26 +01:00

slang

slang: fix terminfo related problems

2017-08-13 09:27:37 +01:00

stat

stat: fix security issues

2016-05-19 09:05:20 +01:00

stress

meta: Add/fix missing Upstream-Status to patches

2017-06-27 10:38:43 +01:00

sudo

sudo: upgrade to 1.8.20p2

2017-07-27 22:36:53 +01:00

sysklogd

sysklogd: Improve build and fix runtime crash

2017-07-08 13:34:45 +01:00

sysstat

sysstat: fix creating configuration file for /var/log/sa

2017-08-16 00:03:14 +01:00

tar

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

tcp-wrappers

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

texi2html

texi2html: Add a dependency on perl

2017-06-23 11:44:14 +01:00

texinfo

texinfo: Avoid a problem with a dependency on perl(Locale::gettext_xs)

2017-08-17 00:21:14 +01:00

texinfo-dummy-native

texinfo-dummy-native: set SUMMARY instead of DESCRIPTION

2015-11-16 11:39:38 +00:00

time

time: BBCLASSEXTEND to native and nativesdk

2017-01-19 22:47:22 +00:00

tzcode

tzcode-native: quote ${CC}

2017-06-28 20:55:08 +01:00

tzdata

tzdata: Install zone1970.tab

2017-06-23 11:44:13 +01:00

unzip

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-16 00:03:13 +01:00

watchdog

watchdog: Add RCONFLICTS to watchdog-keepalive and split RDEPENDS

2017-02-15 20:06:42 -08:00

wget

wget: Security fix CVE-2017-6508

2017-08-18 23:46:37 +01:00

which

which: fix it so the manpage will respect alternatives

2017-03-17 16:53:04 +00:00

xdg-utils

meta: add comments to explain autotools-brokensep use

2016-04-29 07:58:45 +01:00

xinetd

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-16 00:03:13 +01:00

xz

xz: upgrade to 5.2.3

2017-02-15 20:06:41 -08:00

zip

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-16 00:03:13 +01:00