<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-extended/libsolv/files, branch dunfell-23.0.20</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-23.0.20</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-23.0.20'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2022-03-31T20:09:33+00:00</updated>
<entry>
<title>libsolv: fix CVE: CVE-2021-44568-71 and CVE-2021-44573-77</title>
<updated>2022-03-31T20:09:33+00:00</updated>
<author>
<name>Steve Sakoman</name>
<email>steve@sakoman.com</email>
</author>
<published>2022-03-22T17:49:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e779ccdf4e75f3fe6f0d68b6973bff311003b8a7'/>
<id>urn:sha1:e779ccdf4e75f3fe6f0d68b6973bff311003b8a7</id>
<content type='text'>
The existing patch for CVE-2021-3200 also fixes CVE-2021-44568 through
CVE-2021-44671 and CVE-2021-44573 through CVE-2021-44677, so update
CVE tags in patch to reflect this.

Reference:

https://github.com/openSUSE/libsolv/issues/426

(From OE-Core rev: 3096134d25fc4cf9bd18839838a62a6c89344e31)

Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsolv: update tag for missing CVEs</title>
<updated>2021-12-08T20:28:01+00:00</updated>
<author>
<name>Ranjitsinh Rathod</name>
<email>ranjitsinh.rathod@kpit.com</email>
</author>
<published>2021-12-02T10:18:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=643c3b7bf36a28699def24d85f54823e099c9649'/>
<id>urn:sha1:643c3b7bf36a28699def24d85f54823e099c9649</id>
<content type='text'>
It seems like CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and
CVE-2021-33938 are pointing to same patch as CVE-2021-3200

So add CVE tag inside the patch file which is the remedy for
CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and CVE-2021-33938

Link:
https://ubuntu.com/security/CVE-2021-3200
https://ubuntu.com/security/CVE-2021-33928
https://ubuntu.com/security/CVE-2021-33929
https://ubuntu.com/security/CVE-2021-33930
https://ubuntu.com/security/CVE-2021-33938

(From OE-Core rev: 371c247a78da64fefb0daa166e90c4fdd0745eed)

Signed-off-by: Ranjitsinh Rathod &lt;ranjitsinh.rathod@kpit.com&gt;
Signed-off-by: Ranjitsinh Rathod &lt;ranjitsinhrathod1991@gmail.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsolv: fix CVE-2021-3200</title>
<updated>2021-08-18T17:00:19+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2021-08-10T03:45:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=7f702f6e67c53616e2e1dd34cdb0a9307480b631'/>
<id>urn:sha1:7f702f6e67c53616e2e1dd34cdb0a9307480b631</id>
<content type='text'>
(From OE-Core rev: e8e06e4175c010a7dc0a4e3598b70b89d43f8475)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
