Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=pyro-next 2018-02-09T05:19:16+00:00 2018-02-09T05:19:16+00:00 Armin Kuster akuster808@gmail.com 2018-02-06T07:18:35+00:00 urn:sha1:9eaebc6e783f1394bb5444326cd05a976b3122e9 Includes: wnpa-sec-2018-01, Multiple dissectors could crash. (Bug 14253) CVE-2018-5336 wnpa-sec-2018-02, The MRDISC dissector could crash. (Bug 14299, Bug 13707) CVE-2017-17997 wnpa-sec-2018-03, The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334 wnpa-sec-2018-04, The WCP dissector could crash. (Bug 14251) CVE-2018-5335 Full release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html Signed-off-by: Armin Kuster <akuster808@gmail.com> 2018-02-09T05:19:04+00:00 Armin Kuster akuster@mvista.com 2017-12-19T15:38:46+00:00 urn:sha1:a370c771887107f424c723c0fcb3c246ffe022a4 changed --with-ssh to --with-libssh=DIR includes: wnpa-sec-2017-47 : CVE-2017-17084 The IWARP_MPA dissector could crash. (Bug 14236) wnpa-sec-2017-48 : CVE-2017-17083 The NetBIOS dissector could crash. (Bug 14249) wnpa-sec-2017-49 : CVE-2017-17085 The CIP Safety dissector could crash. (Bug 14250) release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2018-02-09T05:15:39+00:00 Armin Kuster akuster808@gmail.com 2017-10-11T01:43:09+00:00 urn:sha1:d8ce5a7195f1210912c698a135492df1e073447e The following vulnerabilities have been fixed: * [1]wnpa-sec-2017-42 BT ATT dissector crash ([2]Bug 14049) [3]CVE-2017-15192 * [4]wnpa-sec-2017-43 MBIM dissector crash ([5]Bug 14056) [6]CVE-2017-15193 * [7]wnpa-sec-2017-44 DMP dissector crash ([8]Bug 14068) [9]CVE-2017-15191 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-18T19:06:38+00:00 Armin Kuster akuster808@gmail.com 2017-09-01T13:56:34+00:00 urn:sha1:3552877d24845689e7d4e7919ff7b372da70dd40 Change LIC_FILES_CHKSUM from README.linux to COPYING as COPYING contains the license info 2.2.9 security fixes: wnpa-sec-2017-38 MSDP dissector infinite loop (Bug 13933) CVE-2017-13767 wnpa-sec-2017-39 Profinet I/O buffer overrun (Bug 13847) CVE-2017-13766 wnpa-sec-2017-41 IrCOMM dissector buffer overrun (Bug 13929) CVE-2017-13765 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit c6928f15d93a1546c47116b3244893b9f813e6e1) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-18T19:03:02+00:00 Kai Kang kai.kang@windriver.com 2017-08-16T09:41:06+00:00 urn:sha1:d8b55931ce3b120515ec9ab0bc91418a5cb00a7b Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 3ca10e7d924d94d85783dc7440096a7dab72b978) Bug fix only: Including these security fixes: wnpa-sec-2017-13 WBMXL dissector infinite loop (Bug 13477, Bug 13796) CVE-2017-7702, CVE-2017-11410 Note: This is an update for a fix in Wireshark 2.2.6 and 2.0.12. wnpa-sec-2017-28 openSAFETY dissector memory exhaustion (Bug 13649, Bug 13755) CVE-2017-9350, CVE-2017-11411 Note: This is an update for a fix in Wireshark 2.2.7. wnpa-sec-2017-34 AMQP dissector crash. (Bug 13780) CVE-2017-11408 wnpa-sec-2017-35 MQ dissector crash. (Bug 13792) CVE-2017-11407 wnpa-sec-2017-36 DOCSIS infinite loop. (Bug 13797) CVE-2017-11406 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-14T00:16:28+00:00 fan.xin fan.xin@jp.fujitsu.com 2017-06-07T03:09:57+00:00 urn:sha1:b3ccebe5466e662137574b9be40389ef1c7b3dd8 Upgrade wireshark from 2.2.6 to 2.2.7 Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> This update add bug and security fixes. Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352 DOF dissector read overflow (Bug 13608) CVE-2017-9348 DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351 SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346 DNS dissector infinite loop (Bug 13633) CVE-2017-9345 DICOM dissector infinite loop (Bug 13685) CVE-2017-9349 openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350 BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344 MSNIP dissector crash (Bug 13725) CVE-2017-9343 ROS dissector crash (Bug 13637) CVE-2017-9347 RGMP dissector crash (Bug 13646) CVE-2017-9354 IPv6 dissector crash (Bug 13675) CVE-2017-9353 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-04-25T19:55:38+00:00 Armin Kuster akuster@mvista.com 2017-04-13T15:08:22+00:00 urn:sha1:c083405d2afa35cc88d29d97bfbce1d7e267bef2 The following vulnerabilities have been fixed: * [1]wnpa-sec-2017-12 IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703 * [4]wnpa-sec-2017-13 WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702 * [7]wnpa-sec-2017-14 NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700 * [10]wnpa-sec-2017-15 RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705 * [13]wnpa-sec-2017-16 BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701 * [16]wnpa-sec-2017-17 DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704 * [19]wnpa-sec-2017-18 PacketBB dissector crash ([20]Bug 13559) * [21]wnpa-sec-2017-19 SLSK dissector long loop ([22]Bug 13576) * [23]wnpa-sec-2017-20 SIGCOMP dissector infinite loop ([24]Bug 13578) * [25]wnpa-sec-2017-21 WSP dissector infinite loop ([26]Bug 13581) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> 2017-03-24T18:10:17+00:00 Oleksandr Kravchuk oleksandr.kravchuk@pelagicore.com 2017-03-06T09:23:45+00:00 urn:sha1:f1986a5fec86f795d14fa010f85fbc635ab7be06 Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> 2017-03-16T22:34:32+00:00 Oleksandr Kravchuk oleksandr.kravchuk@pelagicore.com 2017-03-13T08:56:35+00:00 urn:sha1:4b4a62ec0760873b96b738751bf9492aa2efb922 Deleted bunch of patches which are not used anymore by any recipe. Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> 2017-02-22T13:31:59+00:00 Joe MacDonald joe_macdonald@mentor.com 2017-02-20T02:44:40+00:00 urn:sha1:4758f0af1461854f558241f36efe752c1089bfc6 Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>