<div dir="ltr"><div>Are we both talking about the same morty-next?</div><div><br></div><div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">docker-shr @ ~/openembedded-core $<span> </span></span>git log origin/morty-next -- meta/recipes-devtools/gcc/gcc-6.4/CVE-2016-4490.patch</div><div>commit a926f3986174b67375c4486e5b3f27ad3b939e28</div><div>Author: Juro Bystricky <<a href="mailto:juro.bystricky@intel.com">juro.bystricky@intel.com</a>></div><div>Date: Thu Mar 1 13:38:08 2018 -0800</div><div><br></div><div> gcc6: Upgrade to 6.4.0 (latest stable series release)</div><div> </div><div> Changed BINV and PV from 6.2.0 to 6.4.0</div><div> Modified BASEURI to load xz tarball instead of bz2</div><div> </div><div> Backported series of patches from <a href="https://github.com/hjl-tools/gcc.git">https://github.com/hjl-tools/gcc.git</a></div><div> branch /hjl/indirect/gcc-6-branch/master which contains</div><div> an IA patch series for security related issues</div><div> </div><div> ubsan-fix-check-empty-string.patch : removed, already applied</div><div> </div><div> Signed-off-by: Juro Bystricky <<a href="mailto:juro.bystricky@intel.com">juro.bystricky@intel.com</a>></div><div>docker-shr @ ~/openembedded-core $ git show -1 a926f3986174b67375c4486e5b3f27ad3b939e28 -M | grep CVE-2016-4490.patch</div><div>diff --git a/meta/recipes-devtools/gcc/gcc-6.2/CVE-2016-4490.patch b/meta/recipes-devtools/gcc/gcc-6.4/CVE-2016-4490.patch</div><div>rename from meta/recipes-devtools/gcc/gcc-6.2/CVE-2016-4490.patch</div><div>rename to meta/recipes-devtools/gcc/gcc-6.4/CVE-2016-4490.patch</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Mar 4, 2018 at 2:26 PM, Richard Purdie <span dir="ltr"><<a href="mailto:richard.purdie@linuxfoundation.org" target="_blank">richard.purdie@linuxfoundation.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Sun, 2018-03-04 at 13:08 +0100, Martin Jansa wrote:<br>
> And the same with<br>
> meta/recipes-devtools/gcc/gcc-<wbr>6.4/CVE-2016-4490.patch<br>
> which isn't included in SRC_URI since:<br>
<br>
</span>As far as I can tell this isn't included in the patch or the<br>
repository?<br>
<br>
Cheers,<br>
<br>
Richard<br>
</blockquote></div><br></div>