[oe-commits] [openembedded-core] branch thud updated (2bf6098 -> aad245e)

Mon Jul 29 22:51:06 UTC 2019

This is an automated email from the git hooks/post-receive script.

rpurdie pushed a change to branch thud
in repository openembedded-core.

    from 2bf6098  uboot-sign.bbclass: Remove tab indentations in python code
     add f3ba6ce  scripts: Remove deprecated imp module usage
     add c60f9c4  opkg: add --ignore-recommends flag
     add 13ba663  OpkgPM: use --add-ignore-recommends to process BAD_RECOMMENDATIONS
     add 2cfcb3b  libsdl: CVE fixes
     add 276567b  gstreamer1.0-plugins-base: fix CVE-2019-9928
     add 6cba048  libarchive: integrate security fixes
     add 7c0b2d2  bzip2: fix CVE-2019-12900
     add cf5d29d  ghostscript: Fix 3 CVEs
     add f5cf064  libcroco: fix CVE-2017-7961
     add aad245e  expat: fix CVE-2018-20843

No new revisions were added by this update.

Summary of changes:
 meta/lib/oe/package_manager.py                     |  41 +--
 meta/lib/oe/rootfs.py                              |   2 -
 meta/recipes-core/expat/expat/CVE-2018-20843.patch |  26 ++
 meta/recipes-core/expat/expat_2.2.6.bb             |   1 +
 ...-libopkg-add-add-ignore-recommends-option.patch | 260 ++++++++++++++++++
 meta/recipes-devtools/opkg/opkg_0.3.6.bb           |   1 +
 .../bzip2/bzip2-1.0.6/CVE-2019-12900.patch         |  33 +++
 .../fix-regression-CVE-2019-12900.patch            |  82 ++++++
 meta/recipes-extended/bzip2/bzip2_1.0.6.bb         |   2 +
 .../ghostscript/CVE-2019-3835-0001.patch           |  99 +++++++
 .../ghostscript/CVE-2019-3835-0002.patch           |  71 +++++
 .../ghostscript/CVE-2019-3835-0003.patch           | 295 +++++++++++++++++++++
 .../ghostscript/CVE-2019-3835-0004.patch           | 167 ++++++++++++
 .../ghostscript/CVE-2019-3838-0001.patch           |  34 +++
 .../ghostscript/CVE-2019-3838-0002.patch           |  30 +++
 .../ghostscript/ghostscript_9.26.bb                |   6 +
 .../libarchive/libarchive/CVE-2018-1000877.patch   |  38 +++
 .../libarchive/libarchive/CVE-2018-1000878.patch   |  79 ++++++
 .../libarchive/libarchive/CVE-2018-1000879.patch   |  50 ++++
 .../libarchive/libarchive/CVE-2018-1000880.patch   |  44 +++
 .../libarchive/libarchive/CVE-2019-1000019.patch   |  59 +++++
 .../libarchive/libarchive/CVE-2019-1000020.patch   |  61 +++++
 .../libarchive/libarchive_3.3.3.bb                 |   6 +
 .../libsdl/libsdl-1.2.15/CVE-2019-7572.patch       | 114 ++++++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7574.patch       |  68 +++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7575.patch       |  81 ++++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7576.patch       |  80 ++++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7577.patch       | 123 +++++++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7578.patch       |  64 +++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7635.patch       |  63 +++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7637.patch       | 192 ++++++++++++++
 .../libsdl/libsdl-1.2.15/CVE-2019-7638.patch       |  38 +++
 meta/recipes-graphics/libsdl/libsdl_1.2.15.bb      |   9 +
 .../gstreamer1.0-plugins-base/CVE-2019-9928.patch  |  33 +++
 .../gstreamer/gstreamer1.0-plugins-base_1.14.4.bb  |   1 +
 .../libcroco/libcroco/CVE-2017-7961.patch          |  45 ++++
 meta/recipes-support/libcroco/libcroco_0.6.12.bb   |   4 +-
 scripts/lib/scriptutils.py                         |  11 +-
 scripts/pythondeps                                 |   8 +-
 39 files changed, 2368 insertions(+), 53 deletions(-)
 create mode 100644 meta/recipes-core/expat/expat/CVE-2018-20843.patch
 create mode 100644 meta/recipes-devtools/opkg/opkg/0001-libopkg-add-add-ignore-recommends-option.patch
 create mode 100644 meta/recipes-extended/bzip2/bzip2-1.0.6/CVE-2019-12900.patch
 create mode 100644 meta/recipes-extended/bzip2/bzip2-1.0.6/fix-regression-CVE-2019-12900.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3835-0001.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3835-0002.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3835-0003.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3835-0004.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3838-0001.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-3838-0002.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2018-1000877.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2018-1000878.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2018-1000879.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2018-1000880.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2019-1000019.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2019-1000020.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7572.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7574.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7575.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7576.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7577.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7578.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7635.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7637.patch
 create mode 100644 meta/recipes-graphics/libsdl/libsdl-1.2.15/CVE-2019-7638.patch
 create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2019-9928.patch
 create mode 100644 meta/recipes-support/libcroco/libcroco/CVE-2017-7961.patch

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.