<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Thanks</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Sent from <a href="https://go.microsoft.com/fwlink/?LinkId=550986">
Mail</a> for Windows 10</p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="border:none;padding:0in"><b>From: </b><a href="mailto:martin.jansa@gmail.com">Martin Jansa</a><br>
<b>Sent: </b>Monday, September 23, 2019 2:23 PM<br>
<b>To: </b><a href="mailto:shuagr@microsoft.com">Shubham Agrawal</a><br>
<b>Cc: </b><a href="mailto:openembedded-core@lists.openembedded.org">openembedded-core@lists.openembedded.org</a><br>
<b>Subject: </b>Re: [OE-core] [”OE-core][thud][PATCH”] elfutils: CVE fix for elfutils</p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On Mon, Sep 23, 2019 at 09:14:11PM +0000, shuagr97@gmail.com wrote:</p>
<p class="MsoNormal">> From: Shubham Agrawal <shuagr@microsoft.com></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Drop the quotes in the e-mail subject.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> </p>
<p class="MsoNormal">> CVE: CVE-2019-7664.patch</p>
<p class="MsoNormal">> CVE: CVE-2019-7665.patch</p>
<p class="MsoNormal">> </p>
<p class="MsoNormal">> Sign off: Shubham Agrawal <shuagr@microsoft.com></p>
<p class="MsoNormal">> ---</p>
<p class="MsoNormal">> meta/recipes-devtools/elfutils/elfutils_0.175.bb | 2 +</p>
<p class="MsoNormal">> .../elfutils/files/CVE-2019-7664.patch | 65 +++++++++</p>
<p class="MsoNormal">> .../elfutils/files/CVE-2019-7665.patch | 154 +++++++++++++++++++++</p>
<p class="MsoNormal">> 3 files changed, 221 insertions(+)</p>
<p class="MsoNormal">> create mode 100644 meta/recipes-devtools/elfutils/files/CVE-2019-7664.patch</p>
<p class="MsoNormal">> create mode 100644 meta/recipes-devtools/elfutils/files/CVE-2019-7665.patch</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">....</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> +diff --git a/libelf/ChangeLog b/libelf/ChangeLog</p>
<p class="MsoNormal">> +index 68c4fbd..892e6e7 100644</p>
<p class="MsoNormal">> +--- a/libelf/ChangeLog</p>
<p class="MsoNormal">> ++++ b/libelf/ChangeLog</p>
<p class="MsoNormal">> +@@ -1,3 +1,16 @@</p>
<p class="MsoNormal">> ++<<<<<<< HEAD</p>
<p class="MsoNormal">> ++=======</p>
<p class="MsoNormal">> ++2019-01-16 Mark Wielaard <mark@klomp.org></p>
<p class="MsoNormal">> ++</p>
<p class="MsoNormal">> ++ * note_xlate.h (elf_cvt_note): Check n_namesz and n_descsz don't</p>
<p class="MsoNormal">> ++ overflow note_len into note header.</p>
<p class="MsoNormal">> ++</p>
<p class="MsoNormal">> ++2018-11-17 Mark Wielaard <mark@klomp.org></p>
<p class="MsoNormal">> ++</p>
<p class="MsoNormal">> ++ * elf32_updatefile.c (updatemmap): Make sure to call convert</p>
<p class="MsoNormal">> ++ function on a properly aligned destination.</p>
<p class="MsoNormal">> ++</p>
<p class="MsoNormal">> ++>>>>>>> e65d91d... libelf: Correct overflow check in note_xlate.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">You should resolve these conflicts (or drop the ChangeLog updates</p>
<p class="MsoNormal">completely from the backports as they will conflict with any other</p>
<p class="MsoNormal">backport as well.</p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>