On 9/10/20 12:55 PM, Denys Dmytriyenko wrote:
On Thu, Sep 10, 2020 at 08:46:36AM -0700, Khem Raj wrote:
On Wed, Sep 9, 2020 at 6:16 PM Denys Dmytriyenko wrote:
From: Denys Dmytriyenko
There's one commit on top of 1.11 release that fixes builds against kernel
5.9-rc1+.
Signed-off-by:
From: Kai Kang
v2:
* forgot to add the systemd service files
Kai Kang (1):
dhcpcd: 9.1.4 -> 9.2.0
.../{dhcpcd_9.1.4.bb => dhcpcd_9.2.0.bb} | 19 +++
.../dhcpcd/files/dhcpcd.service | 10 ++
.../dhcpcd/files/dhcpcd@.service | 15
From: Kai Kang
Upgrade dhcpcd from 9.1.4 to 9.2.0. And add systemd services files
dhcpcd.service and dhcpcd@.service from Fedora:
https://src.fedoraproject.org/rpms/dhcpcd/tree/master
Signed-off-by: Kai Kang
---
.../{dhcpcd_9.1.4.bb => dhcpcd_9.2.0.bb} | 19 +++
Signed-off-by: Zang Ruochen
---
meta/recipes-devtools/bison/{bison_3.7.1.bb => bison_3.7.2.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/bison/{bison_3.7.1.bb => bison_3.7.2.bb} (94%)
diff --git a/meta/recipes-devtools/bison/bison_3.7.1.bb
Signed-off-by: Zang Ruochen
---
.../atk/{at-spi2-core_2.36.0.bb => at-spi2-core_2.36.1.bb}| 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-support/atk/{at-spi2-core_2.36.0.bb =>
at-spi2-core_2.36.1.bb} (89%)
diff --git
On Thu, 2020-09-10 at 21:53 +0100, Ross Burton wrote:
> From: Ross Burton
You forgot to update your email somewhere? :)
Thanks,
Anuj
>
> Instead of having a config.cache that overrides the system site
> files,
> simply set the values in CACHED_CONFIGUREVARS. We can also drop the
> mkstemp
On Thu, Sep 10, 2020 at 1:54 PM Ross Burton wrote:
>
> From: Ross Burton
>
> Instead of having a config.cache that overrides the system site files,
> simply set the values in CACHED_CONFIGUREVARS. We can also drop the
> mkstemp check as the configure.ac assumes it works, leaving just
>
Further to 5b2fd1c724
Also a few remaining references (DISTRO_PN_ALIAS, RECIPE_MAINTAINER).
Signed-off-by: Douglas Royds
---
meta/conf/distro/include/distro_alias.inc | 4
meta/conf/distro/include/tcmode-default.inc | 2 --
meta/conf/layer.conf | 2 +-
3 files changed, 1 insertion(+), 7
Add some debug logging when fetching the CVE data.
Signed-off-by: Ross Burton
---
meta/recipes-core/meta/cve-update-db-native.bb | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-core/meta/cve-update-db-native.bb
Backport a patch from upstream to fix CVE-2020-14364.
Signed-off-by: Ross Burton
---
meta/recipes-devtools/qemu/qemu.inc | 7 +-
.../qemu/qemu/usb-fix-setup_len-init.patch| 89 +++
2 files changed, 93 insertions(+), 3 deletions(-)
create mode 100644
This import isn't used anymore, so remove it.
Signed-off-by: Ross Burton
---
meta/recipes-core/meta/cve-update-db-native.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-core/meta/cve-update-db-native.bb
b/meta/recipes-core/meta/cve-update-db-native.bb
index
Instead of inventing a new task to fetch the CVE data, use the existing
fetch task.
Signed-off-by: Ross Burton
---
meta/classes/cve-check.bbclass | 2 +-
meta/recipes-core/meta/cve-update-db-native.bb | 9 +
2 files changed, 6 insertions(+), 5 deletions(-)
diff --git
On Thu, 10 Sep 2020 at 21:01, Sakib Sajal wrote:
> Upstream-Status: Backport [b946434f2659a182afc17e155be6791ebfb302eb]
>
> Signed-off-by: Sakib Sajal
The commit message needs your SOB, but the US and another SOB of yours
need to be in the patch header.
Ross
-=-=-=-=-=-=-=-=-=-=-=-
Links: You
From: Ross Burton
Instead of having a config.cache that overrides the system site files,
simply set the values in CACHED_CONFIGUREVARS. We can also drop the
mkstemp check as the configure.ac assumes it works, leaving just
nanosleep.
Signed-off-by: Ross Burton
---
Upstream-Status: Backport [b946434f2659a182afc17e155be6791ebfb302eb]
Signed-off-by: Sakib Sajal
---
meta/recipes-devtools/qemu/qemu.inc | 1 +
...sb-fix-setup_len-init-CVE-2020-14364.patch | 88 +++
2 files changed, 89 insertions(+)
create mode 100644
On Thu, Sep 10, 2020 at 08:46:36AM -0700, Khem Raj wrote:
> On Wed, Sep 9, 2020 at 6:16 PM Denys Dmytriyenko wrote:
> >
> > From: Denys Dmytriyenko
> >
> > There's one commit on top of 1.11 release that fixes builds against kernel
> > 5.9-rc1+.
> >
> > Signed-off-by: Denys Dmytriyenko
> > ---
On 9/10/20 10:11 AM, Jon Mason wrote:
> On Thu, Sep 10, 2020 at 12:57 AM Mark Hatle
> wrote:
>>
>>
>>
>> On 9/9/20 6:29 PM, Jon Mason wrote:
>>> On Wed, Sep 9, 2020 at 6:55 PM Mark Hatle
>>> wrote:
On 9/9/20 5:45 PM, Jon Mason wrote:
> Set BASE_LIB for all arm64 systems
On Wed, Sep 9, 2020 at 6:16 PM Denys Dmytriyenko wrote:
>
> From: Denys Dmytriyenko
>
> There's one commit on top of 1.11 release that fixes builds against kernel
> 5.9-rc1+.
>
> Signed-off-by: Denys Dmytriyenko
> ---
> v2 - append SRCPV to PV
>
> meta/recipes-kernel/cryptodev/cryptodev.inc |
On Thu, Sep 10, 2020 at 12:57 AM Mark Hatle
wrote:
>
>
>
> On 9/9/20 6:29 PM, Jon Mason wrote:
> > On Wed, Sep 9, 2020 at 6:55 PM Mark Hatle
> > wrote:
> >>
> >>
> >>
> >> On 9/9/20 5:45 PM, Jon Mason wrote:
> >>> Set BASE_LIB for all arm64 systems to be lib64 by default. This can be
> >>>
From: Kai Kang
Upgrade dhcpcd from 9.1.4 to 9.2.0. And add systemd services files
dhcpcd.service and dhcpcd@.service from Fedora:
https://src.fedoraproject.org/rpms/dhcpcd/tree/master
Signed-off-by: Kai Kang
---
.../{dhcpcd_9.1.4.bb => dhcpcd_9.2.0.bb} | 20 +++
1 file
The following changes since commit 0d4d0df6084cce3c3d9051db88f3199a030d3352:
linux-firmware: update 20200721 -> 20200817 (2020-09-01 05:45:54 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next
It avoids init to crash when kernel cmdline contains a string with
spaces inside, like that:
dyndbg="file drivers/usb/core/hub.c +pltf"
Signed-off-by: Christophe Guibout
---
.../initrdscripts/initramfs-framework/init | 13 +
1 file changed, 13 insertions(+)
diff --git
From: Konrad Weihmann
Currently in NVD DB an item popped up, which hasn't set baseMetricV2.
Let the parser handle it as an optional item.
In case use baseMetricV2 before baseMetricV3
(From OE-Core rev: 77f119baf6f4b85194a9b26d8442ddc7fb3bb97c)
Signed-off-by: Konrad Weihmann
Signed-off-by:
From: Jaewon Lee
Adding back the python wrapper and adding a patch to use OEPYTHON3HOME
instead of PYTHONHOME if set, for python3.
If we add back the wrapper as is, we would see the following error that
we also see in Thud:
ImportError: No module named site
OpenEmbedded requires 'python' to be
From: Hongxu Jia
(From OE-Core rev: a6e098e2e5932781b9c1012825bc86bc08382931)
Signed-off-by: Hongxu Jia
Signed-off-by: Richard Purdie
(cherry picked from commit 6e16ef0c2e0ec2bbb862231cd84e7650bd5789af)
Signed-off-by: Jeremy A. Puhlman
---
meta/recipes-support/iso-codes/iso-codes_4.1.bb | 2
The locale binary reported incorrect locale lists in relocated toolchains
as some path references were not relocated by this patch. Fix this missing
relocations so the locale binary correctly reports the locales.
(From OE-Core rev: f7a6a72880009380ae81bc7fc863921a26811c8c)
(From OE-Core rev:
We no longer expect a "python" binary in PATH so update the eSDK's
expectations to match. This was the only failure on autobuilder test
systems with python missing.
(From OE-Core rev: 946ce21b10dcad506edcaadb4e4242c049e4c316)
Signed-off-by: Richard Purdie
---
From: Charles-Antoine Couret
Utils can not detect GCC 10 correctly due to wrong regex.
It generates this error "ERROR: Can't get compiler version from gcc --version
output"
Sub-version numbers should be 1 or more digits instead of 1 only.
(From OE-Core rev:
traceback2 adds traceback for python2. Rather than depend on traceback2, we're
python3 only so just use traceback.
This caused breakage in oe-selftest -j which uses testtools on the autobuilder
using buildtools-tarball.
[YOCTO #13652]
(From OE-Core rev: ee80a06c107375e3cf0d246ea17c09dda4536dab)
From: Khem Raj
This supports glibc upto 2.32 which is now rolling into distributions
(From OE-Core rev: 622371678ddb013fc456eaf75def26fc4e142d15)
(From OE-Core rev: 4543eeacd65eebe74ff3a44182915a732ba26e47)
Signed-off-by: Khem Raj
Signed-off-by: Richard Purdie
---
We need binutils to look at our ld.so.conf file within the SDK to ensure
we search the SDK's libdirs as well as those from the host system.
There add a patch which passes in the directory to the code using a define,
then add it to a section we relocate in a similar way to the way we relocate
the
This avoids the seeing broken replacements like:
oe-selftest-centos/build/build-st-926tools/sysroots/x86_64-pokysdk-linux/etc/ssl/certs/ca-certificates.crt
which understandably break builds.
(From OE-Core rev: 04ee0e8b95cd8ed890374e0007f976684206b630)
(Cherry-picked from
do_install fails on newer versions of make with interesting and hard to
debug errors. Disablle parallle make install as a workaround. Later verisons
of attr in newer releases don't have the issue.
(From OE-Core rev: 6043b9a2ea879f8960897b11eb947801508a94da)
(From OE-Core rev:
From: Liwei Song
export OPENSSL_CONF to aviod SDK openssl can not find openssl.cnf.
(From OE-Core rev: 0aaf3dd17dcde959e9c0d62543cb91c9b33551b4)
(From OE-Core rev: 63d8569b2c9f66e8123e2672a7f8fb8e7cc1f0b4)
(From OE-Core rev: e733a5f3b0e3c3b8a830db5ae99b3fc6b7e56921)
Signed-off-by: Liwei Song
From: Jeremy Puhlman
virtual/crypt-native is assume provided in bitbake.conf, so
buildtools-extended-tarball shoud provide crypt since it doesn't
use the host's headers/libraries.
[YOCTO #13714]
(From OE-Core rev: da948b25d5ef452fb35275d108e18d2a2829f4fb)
(From OE-Core rev:
From: Jeremy Puhlman
Builds like native-openjdk, really wants a to link
some tools against the static version. Since when
using the extended tarball, its the only place to
get it, add the library.
(From OE-Core rev: 59c4a3fdbbfd5a6aaba7e0a1675dcd5866a7f3a4)
(From OE-Core rev:
Similarly to 04ee0e8b95cd8ed890374e0007f976684206b630, ensure only full
build paths are replaced in the environment to avoid breaking buildtools.
(From OE-Core rev: be07d93a4f59d4563f2d064be1997b39f05e9f0e)
Signed-off-by: Richard Purdie
---
meta/lib/oeqa/selftest/cases/signing.py | 4 +++-
1
We need to search our own libdirs, then fall back to the system ones as our
customised dynamic loader will. Have ld.so.conf reflect that.
This ensures that binutils finds libraries here when linking too.
(From OE-Core rev: ab729c362684474a8346e5256d636200826feb47)
(From OE-Core rev:
From: Khem Raj
(From OE-Core rev: 2cca75155baec8358939e2aae822e256bed4cfe0)
Signed-off-by: Khem Raj
Signed-off-by: Richard Purdie
---
...linux-user-remove-host-stime-syscall.patch | 62 +++
meta/recipes-devtools/qemu/qemu_3.0.0.bb | 1 +
2 files changed, 63
We want to test the SDK with PATH from the original host, not with our own
tools injected via HOSTTOOLS. It even uses some tools which aren't in
HOSTTOOLS.
This is necessary after changing the SDK to not reset PATH to the system
default which is bad for other reasons and brings the testing into
In the SDK we need the plain symlinks and don't use alternative providers.
When these are missing the toolchain can work incorrectly so fix this.
(From OE-Core rev: 0c06cfaa016d06cc56d80dc1c244a938f3d38a3c)
(From OE-Core rev: 0d299c5dc04407d2d54574157f4014f50f2d0468)
(From OE-Core rev:
The eSDK installation code checks installed locales with the locale command
which is
from glibc-utils. Add this so that we find the correct locales from the
buildtools.
(From OE-Core rev: 7d35e4bc6ff94a2d03c48827d7d60a6855c9029d)
(From OE-Core rev: d99b6432decec0964ac0e08698abc782c9b114f5)
From: Jeremy Puhlman
(From OE-Core rev: 6467eb4461f3cab16cab2ba63154c92fc2adacef)
(From OE-Core rev: 848c61a07f691638fa529bbe0f0ff1dfded4a967)
Signed-off-by: Jeremy Puhlman
Signed-off-by: Richard Purdie
---
meta/recipes-core/meta/buildtools-extended-tarball.bb | 1 +
1 file changed, 1
From: Tim Orling
* For buildtools-extended-tarball, where we are adding all of build-essentials
to the nativesdk, we need additional perl modules for autoconf and automake.
(From OE-Core rev: f0f766160663407ea7683d31bbf5f011accc9ba2)
(From OE-Core rev:
From: Tim Orling
* For some aging distros, such as CentOS 7, the native version
of gcc is simply too ancient and is a constant source of
headaches for moving forward.
* Add an extended version of buildtools-tarball which adds all
of build-essential, so that the host is now modernized and
From: Steve Sakoman
The autobuilder has been experiencing SSL: CERTIFICATE_VERIFY_FAILED
errors during error report uploads when using buildtools due to looking
for certs in /opt/poky
(From OE-Core rev: 197f1d5d14b8e57295f5a81c03c86abba5328614)
(From OE-Core rev:
From: Changqing Li
There is race condition when multi qemu starting with slirp,
add lockfile for each port to avoid problem like:
runqemu - ERROR - Failed to run qemu: qemu-system-x86_64: Could not set up host
forwarding rule 'tcp::2323-:23'
[YOCTO #13364]
(From OE-Core rev:
We should be using python3 here, it was missed in the conversion. Spotted on
autobuilder tests failing on systems with python missing.
(From OE-Core rev: db07b09196022078346aadd565760240b7da6a71)
Signed-off-by: Richard Purdie
---
meta/classes/populate_sdk_ext.bbclass | 2 +-
1 file changed, 1
(From OE-Core rev: 4281342a04078990bb0a110760ff2dc053eccc93)
(From OE-Core rev: 665ef4274e0261bb8351c8d4fd2c8496a2dc27e7)
Signed-off-by: Richard Purdie
(cherry picked from commit 61d4d3d5a9f27e0fbf1d7ed6db818a779643b8f3)
Signed-off-by: Armin Kuster
Signed-off-by: Richard Purdie
---
From: Michael Halstead
Allow sstate use in Tumbleweed and other distros as they update glibc.
(From OE-Core rev: ccb374c279b260b1fd3460f6bfd1567240816055)
Signed-off-by: Richard Purdie
---
meta/conf/distro/include/yocto-uninative.inc | 10 +-
1 file changed, 5 insertions(+), 5
Trying to create a clean PATH breaks cases where we install a buildtools tarball
on hosts to provide newer versions of gcc. Rework the fix for #8698 to clean up
directories in PATH which don't exist isntead. Do it with python as the shell
version was too fraught with corner cases.
(From OE-Core
From: Konrad Weihmann
Currently in NVD DB an item popped up, which hasn't set baseMetricV2.
Let the parser handle it as an optional item.
In case use baseMetricV2 before baseMetricV3
Signed-off-by: Konrad Weihmann
Signed-off-by: Richard Purdie
---
(From OE-Core rev: 4281342a04078990bb0a110760ff2dc053eccc93)
Signed-off-by: Richard Purdie
(cherry picked from commit 61d4d3d5a9f27e0fbf1d7ed6db818a779643b8f3)
Signed-off-by: Armin Kuster
Signed-off-by: Richard Purdie
---
meta/conf/distro/include/maintainers.inc | 1 +
1 file changed, 1
This test keeps failing on the autobuilder and is proving extremely
annoying. It works much better in later releases but for zeus and
earlier, lets just stop running it as it doesn't really tell us
anything useful at this point, nobody has any plans to improve
the distro exclusions or otherwise
traceback2 adds traceback for python2. Rather than depend on traceback2, we're
python3 only so just use traceback.
This caused breakage in oe-selftest -j which uses testtools on the autobuilder
using buildtools-tarball.
[YOCTO #13652]
(From OE-Core rev: ee80a06c107375e3cf0d246ea17c09dda4536dab)
Similarly to 04ee0e8b95cd8ed890374e0007f976684206b630, ensure only full
build paths are replaced in the environment to avoid breaking buildtools.
Signed-off-by: Richard Purdie
---
meta/lib/oeqa/selftest/cases/signing.py | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git
This avoids the seeing broken replacements like:
oe-selftest-centos/build/build-st-926tools/sysroots/x86_64-pokysdk-linux/etc/ssl/certs/ca-certificates.crt
which understandably break builds.
(From OE-Core rev: 04ee0e8b95cd8ed890374e0007f976684206b630)
(Cherry-picked from
From: Khem Raj
This supports glibc upto 2.32 which is now rolling into distributions
(From OE-Core rev: 622371678ddb013fc456eaf75def26fc4e142d15)
Signed-off-by: Khem Raj
Signed-off-by: Richard Purdie
---
meta/conf/distro/include/yocto-uninative.inc | 10 +-
1 file changed, 5
do_install fails on newer versions of make with interesting and hard to
debug errors. Disablle parallle make install as a workaround. Later verisons
of attr in newer releases don't have the issue.
(From OE-Core rev: 6043b9a2ea879f8960897b11eb947801508a94da)
Signed-off-by: Richard Purdie
---
We want to test the SDK with PATH from the original host, not with our own
tools injected via HOSTTOOLS. It even uses some tools which aren't in
HOSTTOOLS.
This is necessary after changing the SDK to not reset PATH to the system
default which is bad for other reasons and brings the testing into
From: Tim Orling
* For some aging distros, such as CentOS 7, the native version
of gcc is simply too ancient and is a constant source of
headaches for moving forward.
* Add an extended version of buildtools-tarball which adds all
of build-essential, so that the host is now modernized and
From: Tim Orling
* For buildtools-extended-tarball, where we are adding all of build-essentials
to the nativesdk, we need additional perl modules for autoconf and automake.
(From OE-Core rev: f0f766160663407ea7683d31bbf5f011accc9ba2)
(From OE-Core rev:
Trying to create a clean PATH breaks cases where we install a buildtools tarball
on hosts to provide newer versions of gcc. Rework the fix for #8698 to clean up
directories in PATH which don't exist isntead. Do it with python as the shell
version was too fraught with corner cases.
(From OE-Core
From: Jeremy Puhlman
virtual/crypt-native is assume provided in bitbake.conf, so
buildtools-extended-tarball shoud provide crypt since it doesn't
use the host's headers/libraries.
[YOCTO #13714]
(From OE-Core rev: da948b25d5ef452fb35275d108e18d2a2829f4fb)
(From OE-Core rev:
We need binutils to look at our ld.so.conf file within the SDK to ensure
we search the SDK's libdirs as well as those from the host system.
There add a patch which passes in the directory to the code using a define,
then add it to a section we relocate in a similar way to the way we relocate
the
The locale binary reported incorrect locale lists in relocated toolchains
as some path references were not relocated by this patch. Fix this missing
relocations so the locale binary correctly reports the locales.
(From OE-Core rev: f7a6a72880009380ae81bc7fc863921a26811c8c)
(From OE-Core rev:
From: Liwei Song
export OPENSSL_CONF to aviod SDK openssl can not find openssl.cnf.
(From OE-Core rev: 0aaf3dd17dcde959e9c0d62543cb91c9b33551b4)
(From OE-Core rev: 63d8569b2c9f66e8123e2672a7f8fb8e7cc1f0b4)
Signed-off-by: Liwei Song
Signed-off-by: Richard Purdie
---
We need to search our own libdirs, then fall back to the system ones as our
customised dynamic loader will. Have ld.so.conf reflect that.
This ensures that binutils finds libraries here when linking too.
(From OE-Core rev: ab729c362684474a8346e5256d636200826feb47)
Signed-off-by: Richard Purdie
In the SDK we need the plain symlinks and don't use alternative providers.
When these are missing the toolchain can work incorrectly so fix this.
(From OE-Core rev: 0c06cfaa016d06cc56d80dc1c244a938f3d38a3c)
(From OE-Core rev: 0d299c5dc04407d2d54574157f4014f50f2d0468)
Signed-off-by: Richard
From: Jeremy Puhlman
(From OE-Core rev: 6467eb4461f3cab16cab2ba63154c92fc2adacef)
Signed-off-by: Jeremy Puhlman
Signed-off-by: Richard Purdie
---
meta/recipes-core/meta/buildtools-extended-tarball.bb | 1 +
1 file changed, 1 insertion(+)
diff --git
The eSDK installation code checks installed locales with the locale command
which is
from glibc-utils. Add this so that we find the correct locales from the
buildtools.
(From OE-Core rev: 7d35e4bc6ff94a2d03c48827d7d60a6855c9029d)
(From OE-Core rev: d99b6432decec0964ac0e08698abc782c9b114f5)
From: Steve Sakoman
The autobuilder has been experiencing SSL: CERTIFICATE_VERIFY_FAILED
errors during error report uploads when using buildtools due to looking
for certs in /opt/poky
(From OE-Core rev: 197f1d5d14b8e57295f5a81c03c86abba5328614)
(From OE-Core rev:
From: Jeremy Puhlman
Builds like native-openjdk, really wants a to link
some tools against the static version. Since when
using the extended tarball, its the only place to
get it, add the library.
(From OE-Core rev: 59c4a3fdbbfd5a6aaba7e0a1675dcd5866a7f3a4)
(From OE-Core rev:
On Thu, 10 Sep 2020 at 04:03, Yu, Mingli wrote:
> +Upstream-Status: Submitted [qemu-devel mailing list]
https://lists.nongnu.org/archive/cgi-bin/namazu.cgi?query=unknown_lock_type=Search%21=qemu-devel=20=normal=score
doesn't find this patch, can you link to it please?
Ross
On Wed, 2020-09-09 at 19:21 -0400, Jon Mason wrote:
> On Wed, Sep 9, 2020 at 6:59 PM Mark Hatle
> wrote:
> > I like the direction of this work, but one comment.. (down below)
> >
> > On 9/9/20 5:45 PM, Jon Mason wrote:
> > > Migrate the settings in tune-cortexa55.inc to arch-armv8-
> > > 2a.inc.
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/178
Upstream patch:
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/178
Upstream patch:
On 10.09.2020 03:07, Khem Raj wrote:
On 9/9/20 1:11 AM, Ovidiu Panait wrote:
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
On Thu, Sep 10, 2020 at 1:53 AM Khem Raj wrote:
>
>
>
> On 9/7/20 2:17 PM, Andrey Zhizhikin wrote:
> > On Mon, Sep 7, 2020 at 5:28 PM akuster808 wrote:
> >>
> >>
> >>
> >> On 9/4/20 1:39 AM, Andrey Zhizhikin wrote:
> >>> Hello Armin,
> >>>
> >>> On Tue, Sep 1, 2020 at 5:23 PM akuster wrote:
>
79 matches
Mail list logo
