Fan Xin
520b37dd0b
gettext: Upgrade 0.19.4 -> 0.19.6
...
(From OE-Core rev: d22e6d2a2d73112f21820289621d560c54f93d76)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-22 16:08:51 +00:00
Fan Xin
be9f7f960c
ltp: Upgrade 20150420 -> 20150903
...
1. Upgrade from 20150420 to 20150903
https://github.com/linux-test-project/ltp/releases/tag/20150903
2. Replace the patch file 0001-replace-inline-with-static-inline-for-gcc-5.x.patch due to the ltp original source code is changed.
(From OE-Core rev: 8e40d9d79bfffa8bc4b1dfd20e78e1554f6c9b00)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-16 12:12:16 +00:00
Fan Xin
8bba7ded7b
curl: upgrade to 7.45
...
(From OE-Core rev: 32076a55fec1f01f84fe84aefc9300fae25f2519)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-16 12:12:15 +00:00
Fan Xin
df183525a5
wget: Upgrade 1.16.3 -> 1.17
...
(From OE-Core rev: 39fe71fb632a899fb348d531c3e4c3d5923f54d6)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-16 12:12:15 +00:00
Fan Xin
2b2774bd00
sudo: upgrade to 1.8.15
...
1. upgrade to 1.8.15
2. delete patch file due to the bug has been fixed in sudo 1.8.15
(http://bugzilla.sudo.ws/show_bug.cgi?id=708 )
(From OE-Core rev: 2180280e63aece8fb45686e1b5dd01430ce478fe)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-12 23:42:53 +00:00
Fan Xin
35c28e33f9
libpcre: upgrade to 8.38
...
This is the latest release in the 8.xx series.
It fixes 46 bugs as listed:
http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
Vulnerabilities from CVE-2015-8380 to CVE-2015-8395 have been fixed in 8.38.
(From OE-Core rev: e29091d9c80ca2cbe631dde9e893dffea91d4c6d)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-08 10:20:53 +00:00
Fan Xin
012ca02e17
wpa-supplicant: upgrade to 2.5
...
wpa-supplicant: upgrade to 2.5
1. upgrade to 2.5
2. remove eight patches since they have been applied in 2.5
3. update SRC_URI, HOMEPAGE and BUGTRACKER to use w1.fi instead
(From OE-Core rev: 80af821d1240a1fc2b32379b75801571db562657)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-12-01 21:32:08 +00:00
Fan Xin
d31f89bd81
wpa-supplicant: Fix CVE-2015-4141, CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146
...
wpa-supplicant: backport patch to fix CVE-2015-4141,
CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146
Backport patch to fix CVE-2015-4141, CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146.
This patch is originally from:
For CVE-2015-4141:
http://w1.fi/security/2015-2/0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
For CVE-2015-4143:
http://w1.fi/security/2015-4/0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
http://w1.fi/security/2015-4/0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
For CVE-2015-4144 and CVE-2015-4145:
http://w1.fi/security/2015-4/0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
http://w1.fi/security/2015-4/0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
For CVE-2015-4146:
http://w1.fi/security/2015-4/0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch
(From OE-Core rev: ce16e95de05db24e4e4132660d793cc7b1d890b9)
Signed-off-by: Fan Xin <fan.xin at jp.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-08-09 00:13:59 -07:00
fan.xin
563269fd1e
wpa-supplicant: Fix CVE-2015-4142
...
wpa-supplicant: backport patch to fix CVE-2015-4142
Backport patch to fix CVE-2015-4142. This patch is originally from:
http://w1.fi/security/2015-3/0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
(From OE-Core rev: 61f2a6a18dcda22d7b0e236f9150674bff2764a7)
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2015-07-01 15:40:00 +01:00
Fan Xin