[OE-core] [thud][PATCH] libcroco: Fix two CVEs

2019-10-21 Thread Muminul Islam
CVE: CVE-2017-8834 CVE-2017-8871 Signed-off-by: Muminul Islam --- .../libcroco/libcroco/CVE-2017-8834_71.patch | 38 +++ .../libcroco/libcroco_0.6.12.bb | 1 + 2 files changed, 39 insertions(+) create mode 100644 meta/recipes-support/libcroco/libcroco/CVE-2017

[OE-core] [thud][PATCH] systemd: Security fixes for CVE

2019-10-16 Thread Muminul Islam
CVE: CVE-2019-3842 CVE-2019-3843 CVE-2019-3844 Upstream-Status: Backport Signed-off-by: Muminul Islam --- .../systemd/systemd/CVE-2019-3842.patch | 59 + .../systemd/systemd/CVE-2019-3843_p1.patch| 227 ++ .../systemd/systemd/CVE-2019-3843_p2.patch| 174

[OE-core] [thud][PATCH] curl: Security fix for CVE-2019-5481

2019-10-16 Thread Muminul Islam
CVE: CVE-2019-5481 Upstream-Status: Backport Signed-off-by: Muminul Islam --- .../curl/curl/CVE-2019-5481.patch | 52 +++ meta/recipes-support/curl/curl_7.61.0.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta/recipes-support/curl/curl/CVE

[OE-core] [thud][PATCH v4] libsolv: Security fix for CVEs:

2019-10-11 Thread Muminul Islam
Signed-off-by: Muminul Islam CVE: CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 Upstream-Status: Backport Cherry picked from https://github.com/openSUSE/libsolv/pull/291/commits --- ...0003-Fix-Dereference-of-null-pointer.patch | 33 .../0004-Fix-Add-va_end-before-return.patch | 36

[OE-core] [thud][PATCH v3] libsolv: Security fix for CVEs:

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam CVE: CVE-2018-20532, CVE-2018-20533, CVE-2018-20534 Upstream-Status: Backport Cherry picked from https://github.com/openSUSE/libsolv/pull/291/commits --- ...0003-Fix-Dereference-of-null-pointer.patch | 33 .../0004-Fix-Add-va_end-before-return.patch | 36

[OE-core] [thud][PATCH v2] curl: Security fix for CVE-2019-5482

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../curl/curl/CVE-2019-5482.patch | 68 +++ meta/recipes-support/curl/curl_7.61.0.bb | 1 + 2 files changed, 69 insertions(+) create mode 100644 meta/recipes-support/curl/curl/CVE-2019-5482.patch diff --git a/meta/recipes

[OE-core] [thud][PATCH v4] glibc: Security fix for cve

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam CVE: CVE-2019-6488, CVE-2019-7309 Upstream-Status: Backport --- .../glibc/glibc/CVE-2019-6488.patch | 274 ++ .../glibc/glibc/CVE-2019-7309.patch | 207 + meta/recipes-core/glibc/glibc_2.28.bb | 2 + 3 files

[OE-core] [thud][PATCH v3] glibc: Security fix for cve

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam CVE: CVE-2019-6488, CVE-2019-7309 Upstream-Status: Backport --- .../glibc/glibc/CVE-2019-6488.patch | 274 ++ .../glibc/glibc/CVE-2019-7309.patch | 207 + meta/recipes-core/glibc/glibc_2.28.bb | 2 + 3 files

[OE-core] [thud][PATCH v2] glibc: Security fix for cve

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../glibc/glibc/CVE-2019-6488.patch | 269 ++ .../glibc/glibc/CVE-2019-7309.patch | 202 + meta/recipes-core/glibc/glibc_2.28.bb | 2 + 3 files changed, 473 insertions(+) create mode 100644 meta/recipes

[OE-core] [thud][PATCH] glibc: Security fis for cve

2019-10-07 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../glibc/glibc/CVE-2019-6488.patch | 269 ++ .../glibc/glibc/CVE-2019-7309.patch | 202 + meta/recipes-core/glibc/glibc_2.28.bb | 2 + 3 files changed, 473 insertions(+) create mode 100644 meta/recipes

[OE-core] [thud][PATCH] curl: Security fix for CVE-2019-5482

2019-10-04 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../curl/curl/CVE-2019-5482.patch | 65 +++ meta/recipes-support/curl/curl_7.61.0.bb | 1 + 2 files changed, 66 insertions(+) create mode 100644 meta/recipes-support/curl/curl/CVE-2019-5482.patch diff --git a/meta/recipes

[OE-core] [thud][PATCH v2] libsolv: Security fix for CVEs:

2019-10-03 Thread Muminul Islam
Signed-off-by: Muminul Islam --- ...0003-Fix-Dereference-of-null-pointer.patch | 26 +++ .../0004-Fix-Add-va_end-before-return.patch | 28 .../libsolv/0005-Fix-Memory-leaks.patch | 151 ++ .../libsolv/0006-Fix-testsolv-segfault.patch | 33 .../libsolv/0007

[OE-core] [thud][PATCH v2] pango: Security fix for CVE

2019-09-25 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../pango/pango/CVE-2019-1010238.patch| 39 +++ meta/recipes-graphics/pango/pango_1.42.4.bb | 1 + 2 files changed, 40 insertions(+) create mode 100644 meta/recipes-graphics/pango/pango/CVE-2019-1010238.patch diff --git a/meta/recipes

[OE-core] [thud][PATCH] pango: Security fix for CVE

2019-09-25 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../pango/pango/CVE-2019-1010238.patch| 36 +++ meta/recipes-graphics/pango/pango_1.42.4.bb | 1 + 2 files changed, 37 insertions(+) create mode 100644 meta/recipes-graphics/pango/pango/CVE-2019-1010238.patch diff --git a/meta/recipes

[OE-core] [thud][PATCH] libsolv: Security fix for CVEs:

2019-09-20 Thread Muminul Islam
Signed-off-by: Muminul Islam --- ...0003-Fix-Dereference-of-null-pointer.patch | 26 +++ .../0004-Fix-Add-va_end-before-return.patch | 28 .../libsolv/0005-Fix-Memory-leaks.patch | 151 ++ .../libsolv/0006-Fix-testsolv-segfault.patch | 33 .../libsolv/0007

[OE-core] [thud][PATCH v5] gcc: Security fix for CVE:

2019-09-19 Thread Muminul Islam
Signed-off-by: Muminul Islam --- meta/recipes-devtools/gcc/gcc-8.2.inc | 3 + .../gcc/gcc-8.2/CVE-2019-15847_p1.patch | 223 ++ .../gcc/gcc-8.2/CVE-2019-15847_p2.patch | 47 .../gcc/gcc-8.2/CVE-2019-15847_p3.patch | 38 +++ 4 files changed, 311

[OE-core] [thud][PATCH v4] gcc: CVE fix for gcc

2019-09-17 Thread Muminul Islam
Signed-off-by: Muminul Islam --- meta/recipes-devtools/gcc/gcc-8.2.inc | 3 + .../gcc/gcc-8.2/CVE-2019-15847_p1.patch | 222 ++ .../gcc/gcc-8.2/CVE-2019-15847_p2.patch | 47 .../gcc/gcc-8.2/CVE-2019-15847_p3.patch | 38 +++ 4 files changed, 310

[OE-core] [thud][PATCH v3] gcc: CVE fix for gcc

2019-09-17 Thread Muminul Islam
Signed-off-by: Muminul Islam --- meta/recipes-devtools/gcc/gcc-8.2.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-devtools/gcc/gcc-8.2.inc b/meta/recipes-devtools/gcc/gcc-8.2.inc index 866a77558b..65fd29d943 100644 --- a/meta/recipes-devtools/gcc/gcc-8.2.inc +++ b/meta

[OE-core] [thud][PATCH v2] gcc: CVE fix for gcc

2019-09-16 Thread Muminul Islam
Signed-off-by: Muminul Islam --- meta/recipes-devtools/gcc/gcc-8.2.inc | 2 + .../gcc/gcc/0042-CVE-2019-15847_1.patch | 570 .../gcc/gcc/0043-CVE-2019-15847_2.patch | 640 ++ 3 files changed, 1212 insertions(+) create mode 100644 meta

[OE-core] [thud][PATCH] gcc: CVE fix

2019-09-16 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../gcc/gcc/CVE-2019-15847.patch | 642 ++ meta/recipes-devtools/gcc/gcc_8.2.bb | 4 + 2 files changed, 646 insertions(+) create mode 100644 meta/recipes-devtools/gcc/gcc/CVE-2019-15847.patch diff --git a/meta/recipes

[OE-core] [thud][PATCH v2] libxslt: Cve fix CVE-2019-11068

2019-09-12 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../libxslt/libxslt/CVE-2019-11068.patch | 128 ++ .../recipes-support/libxslt/libxslt_1.1.32.bb | 1 + 2 files changed, 129 insertions(+) create mode 100644 meta/recipes-support/libxslt/libxslt/CVE-2019-11068.patch diff --git a/meta

[OE-core] [thud][PATCH] CVE fix for libxslt

2019-09-12 Thread Muminul Islam
Signed-off-by: Muminul Islam --- .../libxslt/libxslt/CVE-2019-11068.patch | 128 ++ .../recipes-support/libxslt/libxslt_1.1.32.bb | 1 + 2 files changed, 129 insertions(+) create mode 100644 meta/recipes-support/libxslt/libxslt/CVE-2019-11068.patch diff --git a/meta