Re: [OE-core] [PATCH] procps:Fix CVE-2018-1122-1123

2018-06-26 Thread akuster808
On 06/26/2018 12:35 AM, Hong Liu wrote: > 1.0001-top-Do-not-default-to-the-cwd-in-configs_read.patch fixed CVE-2018-1122 > > 2.0001-ps-output.c-Fix-outbuf-overflows-in-pr_args-etc.patch fixed > CVE-2018-1123 > --- > ...put.c-Fix-outbuf-overflows-in-pr_args-etc.patch | 84 + >

Re: [OE-core] [PATCH] procps:Fix CVE-2018-1122-1123

2018-06-26 Thread akuster808
On 06/26/2018 04:27 AM, Burton, Ross wrote: > It appears that these are fixed in 3.3.15, so let's just upgrade to > that and get all the other security fixes too. But I can take this for Sumo if I don't update too. - armin > Ross > > On 26 June 2018 at 08:35, Hong Liu wrote: >>

Re: [OE-core] [PATCH] procps:Fix CVE-2018-1122-1123

2018-06-26 Thread Burton, Ross
It appears that these are fixed in 3.3.15, so let's just upgrade to that and get all the other security fixes too. Ross On 26 June 2018 at 08:35, Hong Liu wrote: > 1.0001-top-Do-not-default-to-the-cwd-in-configs_read.patch fixed CVE-2018-1122 > >

[OE-core] [PATCH] procps:Fix CVE-2018-1122-1123

2018-06-26 Thread Hong Liu
1.0001-top-Do-not-default-to-the-cwd-in-configs_read.patch fixed CVE-2018-1122 2.0001-ps-output.c-Fix-outbuf-overflows-in-pr_args-etc.patch fixed CVE-2018-1123 --- ...put.c-Fix-outbuf-overflows-in-pr_args-etc.patch | 84 + ...Do-not-default-to-the-cwd-in-configs_read.patch | 101