On 09/26/2017 03:43 PM, Alexander Kanavin wrote:
On 09/26/2017 10:43 AM, Chen Qi wrote:
Backport patches to fix the following CVEs.
CVE-2017-14054
CVE-2017-14055
CVE-2017-14056
CVE-2017-14057
CVE-2017-14058
CVE-2017-14059
CVE-2017-14169
CVE-2017-14170
CVE-2017-14171
CVE-2017-14222
CVE-2017-14223
CVE-2017-14225
I'd rather just update to 3.3.4. A lot less patch clutter, a lot less
chance of an important fix (CVE or not) having been missed, and it's
rather unlikely there's something that breaks compared to 3.3.3, as
feature development happens in a separate master branch.
Alex
I agree with you. I have tried to do the upgrade, and it's easy.
However, at the current stage, it's unlikely for an upgrade patch to be
accepted. That's why I did the backport.
Best Regards,
Chen Qi
--
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core
