<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 25 May 2017 at 10:23, Wenlin Kang <span dir="ltr"><<a href="mailto:wenlin.kang@windriver.com" target="_blank">wenlin.kang@windriver.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">Fix the follow CVE.<br>
CVE-2017-7864<br>
CVE-2017-7858<br>
CVE-2017-7857<br>
CVE-2017-8105<br>
CVE-2017-8287</div></blockquote></div><br>How many of these are fixed in the 2.8 release, which we should be upgrading to instead of backporting patches as oe-core is now open for upgrades.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>