From 065ebeb3e15311d0d45385e15bf557b1c95b1669 Mon Sep 17 00:00:00 2001 From: Mariano Lopez Date: Fri, 8 Jan 2016 12:03:58 +0000 Subject: Add "CVE:" tag to current patches in OE-core The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. Signed-off-by: Mariano Lopez Signed-off-by: Ross Burton --- meta/recipes-extended/cpio/cpio-2.12/0001-Fix-CVE-2015-1197.patch | 1 + meta/recipes-extended/cpio/cpio-2.8/avoid_heap_overflow.patch | 1 + 2 files changed, 2 insertions(+) (limited to 'meta/recipes-extended/cpio') diff --git a/meta/recipes-extended/cpio/cpio-2.12/0001-Fix-CVE-2015-1197.patch b/meta/recipes-extended/cpio/cpio-2.12/0001-Fix-CVE-2015-1197.patch index 8f719ad8d6..5c999197ff 100644 --- a/meta/recipes-extended/cpio/cpio-2.12/0001-Fix-CVE-2015-1197.patch +++ b/meta/recipes-extended/cpio/cpio-2.12/0001-Fix-CVE-2015-1197.patch @@ -11,6 +11,7 @@ Author: Vitezslav Cizek Bug-Debian: https://bugs.debian.org/774669 Upstream-Status: Pending +CVE: CVE-2015-1197 Signed-off-by: Robert Yang Signed-off-by: Alexander Kanavin diff --git a/meta/recipes-extended/cpio/cpio-2.8/avoid_heap_overflow.patch b/meta/recipes-extended/cpio/cpio-2.8/avoid_heap_overflow.patch index 49a7cf52a6..a31573510a 100644 --- a/meta/recipes-extended/cpio/cpio-2.8/avoid_heap_overflow.patch +++ b/meta/recipes-extended/cpio/cpio-2.8/avoid_heap_overflow.patch @@ -1,4 +1,5 @@ Upstream-Status: Inappropriate [bugfix: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0624] +CVE: CVE-2010-0624 This patch avoids heap overflow reported by : http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0624 -- cgit 1.2.3-korg