On 09/26/2017 10:43 AM, Chen Qi wrote:
Backport patches to fix the following CVEs.

CVE-2017-14054
CVE-2017-14055
CVE-2017-14056
CVE-2017-14057
CVE-2017-14058
CVE-2017-14059
CVE-2017-14169
CVE-2017-14170
CVE-2017-14171
CVE-2017-14222
CVE-2017-14223
CVE-2017-14225

I'd rather just update to 3.3.4. A lot less patch clutter, a lot less chance of an important fix (CVE or not) having been missed, and it's rather unlikely there's something that breaks compared to 3.3.3, as feature development happens in a separate master branch.

Alex
--
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Reply via email to