Joe Slater e6533d1d9e ghostscript: CVE-2017-9727, -9835, -11714 ...

CVE-2017-9727: make bounds check in gx_ttfReader__Read more robust
CVE-2017-9835: bounds check the array allocations methods
CVE-2017-11714: prevent trying to reloc a freed object

(From OE-Core rev: 2eae91f9fa1cfdd3f0e6111956c8f193fd0db69f)

(From OE-Core rev: 1c9e3318791e36d6bc851192a7640ee639f61f23)

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-09-11 22:15:58 +01:00

..

acpica

acpica: fix upstream version check

2017-04-29 11:17:23 +01:00

asciidoc

asciidoc: set CLEANBROKEN to fix rebuild

2016-09-22 11:13:24 +01:00

at

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

bash

bash: CVE-2016-0634

2017-05-18 13:17:44 +01:00

bc

bc: separate B and S

2015-01-16 23:08:25 +00:00

blktool

blktool: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

byacc

byacc: upgrade to 20161202

2017-01-19 22:47:20 +00:00

bzip2

openssl/fontconfig/bzip2: Use relative symlinks instead of absolute ones (using a new class)

2017-02-09 10:52:03 +00:00

chkconfig

chkconfig: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cpio

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

cracklib

cracklib: Apply patch to fix CVE-2016-6318

2016-09-24 07:30:10 +01:00

cronie

cronie: replace fedorahosted.org SRC_URI with github.com source

2017-04-05 23:22:12 +01:00

cups

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

cwautomacros

cwautomacros: cleanup buildpath in autogen.sh

2015-10-01 07:43:34 +01:00

diffutils

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

ed

ed: update SRC_URI to yoctoproject mirror

2017-04-12 15:09:58 +01:00

ethtool

ethtool: Switch to download mirror

2017-04-05 23:22:13 +01:00

findutils

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

foomatic

foomatic-filters: Security fixes CVE-2015-8327

2016-08-01 12:11:21 +01:00

gawk

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

ghostscript

ghostscript: CVE-2017-9727, -9835, -11714

2017-09-11 22:15:58 +01:00

go-examples

go: Add recipes for golang compilers and tools

2017-03-10 15:51:55 +00:00

gperf

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

grep

grep: do_configure: fix "Argument list too long"

2017-04-14 09:47:08 +01:00

groff

groff: replace "perl -w" with "use warnings"

2017-04-10 23:00:43 +01:00

gzip

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

hdparm

hdparm: 9.50 -> 9.51

2017-02-15 20:06:43 -08:00

images

core-image-lsb-sdk: Lower IMAGE_OVERHEAD_FACTOR

2017-03-01 23:27:11 +00:00

iptables

iptables: Apply 0001-fix-build-with-musl.patch unconditionally

2017-07-27 22:36:44 +01:00

iputils

iputils: do not build or install manpages

2016-10-28 16:15:19 +01:00

less

less: 481 -> 487

2016-12-08 10:31:29 +00:00

libaio

libaio: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

libarchive

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

libidn

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

libsolv

libsolv: correctly attribute musl fixing patches

2017-04-11 18:10:18 +01:00

libtirpc

libtirpc: remove stray .orig file from Use-netbsd-queue.h.patch

2016-01-30 11:36:59 +00:00

libuser

libuser: replace fedorahosted.org SRC_URI with pagure.io source

2017-04-05 23:22:12 +01:00

lighttpd

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

logrotate

Revert "logrotate: set downloadfilename"

2017-04-21 08:22:08 +01:00

lsb

lsbtest: add option --ignoreos to rpm install command

2017-04-29 11:17:23 +01:00

lsof

lsof: update SRC_URI

2017-08-29 11:57:28 +01:00

ltp

ltp: Skip the filedependency scan

2017-08-31 17:57:12 +01:00

lzip

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

mailx

mailx: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

man

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

man-pages

man-pages: 4.08 -> 4.09

2017-02-15 20:06:42 -08:00

mc

mc: replace "perl -w" with "use warnings"

2017-04-10 23:00:43 +01:00

mdadm

mdadm: update criteria to build with corosync

2017-03-27 08:15:07 +01:00

mingetty

mingetty: fix SRC_URI

2015-02-03 14:53:52 +00:00

minicom

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

mktemp

mktemp: Move installed files only when needed

2017-03-22 11:35:20 +00:00

msmtp

msmtp: update to 1.6.6

2016-11-30 15:48:09 +00:00

net-tools

net-tools: Fix build with USE_NLS="no"

2017-04-05 23:22:13 +01:00

newt

libnewt: replace fedorahosted.org SRC_URI with pagure.io source

2017-04-05 23:22:12 +01:00

packagegroups

packagegroup-core-lsb: avoid rebuilding when changing layer config

2017-03-16 22:11:32 +00:00

pam

meta: replace uses of bb.data.expand(VARNAME, d) with d.expand(VARNAME)

2017-03-22 11:35:19 +00:00

parted

parted: fix rss+perf+gold failure on do_compile_ptest_base

2017-03-08 11:52:56 +00:00

pax

pax: Fix build with glibc 2.25

2016-12-20 15:22:16 +00:00

pbzip2

pbzip2: fix LIC_FILES_CHKSUM following 1.1.12 -> 1.1.13 upgrade

2016-04-14 10:58:34 +01:00

perl

libxml-simple-perl/libconvert-asn1-perl: using PERLHOSTLIB

2015-04-27 14:59:47 +01:00

pigz

pigz: set downloadfilename

2017-02-23 12:49:51 -08:00

pixz

pixz: enable optional building of manpages

2016-10-28 16:15:20 +01:00

procps

procps: fix ALTERNATIVE_PRIORITY to avoid conflict

2017-03-17 16:53:05 +00:00

psmisc

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

quota

quota_4.03.bb: set CVE_PRODUCT to linux_diskquota

2017-08-29 11:57:28 +01:00

rpcbind

rpcbind: Fix CVE-2017-8779

2017-06-05 23:30:21 +01:00

screen

screen: update to 4.5.1

2017-03-08 11:52:56 +00:00

sed

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

shadow

util-linux,shadow: Make 'nologin' alternative command

2017-03-22 11:35:20 +00:00

slang

slang: 2.3.1 -> 2.3.1a

2017-03-01 23:27:09 +00:00

stat

stat: fix security issues

2016-05-19 09:05:20 +01:00

stress

stress: add SUMMARY

2015-11-16 11:39:37 +00:00

sudo

sudo: upgrade to 1.8.19p2

2017-03-01 23:27:07 +00:00

sysklogd

sysklogd: use update-alternatives for more manpages

2017-03-17 16:53:04 +00:00

sysstat

sysstat: upgrade to 11.5.4

2017-02-23 12:49:51 -08:00

tar

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

tcp-wrappers

tcp-wrappers: Fix build with musl

2016-01-24 09:40:26 +00:00

texi2html

texi2html: Add a dependency on perl

2017-07-27 22:36:44 +01:00

texinfo

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

texinfo-dummy-native

texinfo-dummy-native: set SUMMARY instead of DESCRIPTION

2015-11-16 11:39:38 +00:00

time

time: BBCLASSEXTEND to native and nativesdk

2017-01-19 22:47:22 +00:00

tzcode

tzcode-native: quote ${CC}

2017-07-27 22:36:44 +01:00

tzdata

tzdata: Install zone1970.tab

2017-07-27 22:36:44 +01:00

unzip

unzip: add missing CVE headers to patches

2017-04-14 09:47:08 +01:00

watchdog

watchdog: Add RCONFLICTS to watchdog-keepalive and split RDEPENDS

2017-02-15 20:06:42 -08:00

wget

wget: Security fix CVE-2017-6508

2017-09-11 22:15:58 +01:00

which

which: fix it so the manpage will respect alternatives

2017-03-17 16:53:04 +00:00

xdg-utils

meta: add comments to explain autotools-brokensep use

2016-04-29 07:58:45 +01:00

xinetd

xinetd: Fix build with musl

2016-01-24 09:40:28 +00:00

xz

xz: upgrade to 5.2.3

2017-02-15 20:06:41 -08:00

zip

zip: update SRC_URI

2016-05-19 22:32:07 +01:00