[oe-commits] [openembedded-core] branch pyro updated (5f02b43 -> 4ca4e78)

[git at git.openembedded.org]

This is an automated email from the git hooks/post-receive script.

rpurdie pushed a change to branch pyro
in repository openembedded-core.

    from 5f02b43  oeqa/selftest: lock down Meson git revision for reliability
     new e0f0a72  cve-check-tool: backport a patch to make CVE checking work
     new e0e1414  cve-check.bbclass: make warning contain CVE IDs
     new c5a5017  binutils: Fix CVE-2017-8392
     new bab6667  rpcbind: Fix CVE-2017-8779
     new ae0e014  binutils: fix CVE-2017-6969 in readelf
     new 6040b87  ghostscript: CVE-2016-8602, CVE-2017-7975
     new 6fed7cd  ghostscript: CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2017-9216
     new 172f76a  libxslt: Fix CVE-2017-5029
     new b262000  binutils: fix CVE-2017-7209 in readelf
     new 4ca4e78  binutils: fix CVE-2017-7210

The 10 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 meta/classes/cve-check.bbclass                     |   9 +-
 meta/recipes-devtools/binutils/binutils-2.28.inc   |   6 +
 ...-lookup-of-file-line-information-for-erro.patch |  75 +++++++
 ...segfault-in-_bfd_dwarf2_find_nearest_line.patch |  33 +++
 .../binutils/binutils/CVE-2017-6969.patch          |  57 ++++++
 .../binutils/binutils/CVE-2017-6969_2.patch        | 122 ++++++++++++
 .../binutils/binutils/CVE-2017-7209.patch          |  62 ++++++
 .../binutils/binutils/CVE-2017-7210.patch          |  71 +++++++
 .../cve-check-tool/cve-check-tool_5.6.4.bb         |   1 +
 ...are-computed-vs-expected-sha256-digit-str.patch |  52 +++++
 .../ghostscript/ghostscript/CVE-2016-7977.patch    |  33 +++
 .../ghostscript/ghostscript/CVE-2016-7978.patch    |  30 +++
 .../ghostscript/ghostscript/CVE-2016-7979.patch    |  48 +++++
 .../ghostscript/ghostscript/CVE-2016-8602.patch    |  47 +++++
 .../ghostscript/ghostscript/CVE-2017-7975.patch    |  36 ++++
 .../ghostscript/ghostscript/CVE-2017-9216.patch    |  36 ++++
 .../ghostscript/ghostscript_9.20.bb                |   6 +
 ...r-all-svc_getargs-calls-with-svc_freeargs.patch | 221 +++++++++++++++++++++
 meta/recipes-extended/rpcbind/rpcbind_0.2.4.bb     |   1 +
 ...for-integer-overflow-in-xsltAddTextString.patch |  80 ++++++++
 meta/recipes-support/libxslt/libxslt_1.1.29.bb     |   1 +
 21 files changed, 1023 insertions(+), 4 deletions(-)
 create mode 100644 meta/recipes-devtools/binutils/binutils/0017-bfd-Improve-lookup-of-file-line-information-for-erro.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0018-PR-21409-segfault-in-_bfd_dwarf2_find_nearest_line.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-6969.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-6969_2.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-7209.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-7210.patch
 create mode 100644 meta/recipes-devtools/cve-check-tool/files/0001-update-Compare-computed-vs-expected-sha256-digit-str.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2016-7977.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2016-7978.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2016-7979.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2017-9216.patch
 create mode 100644 meta/recipes-extended/rpcbind/rpcbind/0001-rpcbind-pair-all-svc_getargs-calls-with-svc_freeargs.patch
 create mode 100644 meta/recipes-support/libxslt/libxslt/0001-Check-for-integer-overflow-in-xsltAddTextString.patch

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.