linux/meta-el-common.git/recipes-extended, branch pyro

shadow: fix for CVE-2016-6252

2017-08-29T11:37:48+00:00

Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. References: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6252 Upstream fix: https://github.com/shadow-maint/shadow/commit/1d5a926cc2d6078d23a96222b1ef3e558724dad1 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

libarchive: fix for CVE-2016-10349, CVE-2016-10350

2017-08-29T11:35:58+00:00

CVE-2016-10349: The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Fixed by: https://github.com/libarchive/libarchive/commit/88eb9e1d73fef46f04677c25b1697b8e25777ed3 CVE-2016-10350: The archive_read_format_cab_read_header function in archive_read_support_format _cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Fixed by: https://github.com/libarchive/libarchive/commit/88eb9e1d73fef46f04677c25b1697b8e25777ed3 References: ========== https://security-tracker.debian.org/tracker/CVE-2016-10349 https://security-tracker.debian.org/tracker/CVE-2016-10350 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

libarchive: fix for CVE-2017-5601

2017-08-29T11:35:44+00:00

An error in the lha_read_file_header_1() in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive. References: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5601 https://secuniaresearch.flexerasoftware.com//secunia_research/2017-3 Upstream patch: https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

ltp: remove patches integrated in poky

2016-04-13T08:07:49+00:00

Signed-off-by: Tudor Florea

ltp: make bbappend file independent of the version

2016-03-30T07:13:58+00:00

Signed-off-by: Tudor Florea Signed-off-by: Mihaela Martinas

libuio: remove libuio

2016-02-04T11:47:33+00:00

Remove libuio since an updated version exists in meta-oe which is a dependency to this layer. Also remove run-ptest since it is empty. Signed-off-by: Nora Björklund Signed-off-by: Martin Borg

ltp: upgrade ltp to version 20150903

2016-01-28T08:56:24+00:00

Upgrade so changes apply to the version used in poky (master). Signed-off-by: Nora Björklund Signed-off-by: Martin Borg

ltp: Fix test_proc_kill hanging

2015-12-17T14:56:00+00:00

Signed-off-by: Catalina Focsa Signed-off-by: George Nita

ltp: Add periodic output

2015-12-15T02:30:12+00:00

Signed-off-by: Iulian Popa Signed-off-by: Tudor Florea

Initial commit

2015-10-28T12:30:10+00:00

result of splitting up meta-enea Signed-off-by: Adrian Dudau