diff options
| author |   Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> | 2021-12-02 15:48:04 +0530 |
|---|---|---|
| committer |   Steve Sakoman <steve@sakoman.com> | 2021-12-06 04:48:48 -1000 |
| commit | 371c247a78da64fefb0daa166e90c4fdd0745eed (patch) | |
| tree | bd775df0306e21fcd979646cf242ed751a238246 | |
| parent | abe9e7aec3b3363927eed014775145c55710fa07 (diff) | |
| download | openembedded-core-371c247a78da64fefb0daa166e90c4fdd0745eed.tar.gz | |
libsolv: update tag for missing CVEs
It seems like CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and
CVE-2021-33938 are pointing to same patch as CVE-2021-3200
So add CVE tag inside the patch file which is the remedy for
CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and CVE-2021-33938
Link:
https://ubuntu.com/security/CVE-2021-3200
https://ubuntu.com/security/CVE-2021-33928
https://ubuntu.com/security/CVE-2021-33929
https://ubuntu.com/security/CVE-2021-33930
https://ubuntu.com/security/CVE-2021-33938
Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-extended/libsolv/files/CVE-2021-3200.patch | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch b/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch index 74164ab495..cc8f53cefd 100644 --- a/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch +++ b/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch @@ -11,9 +11,14 @@ been added. (Jobs may point inside the whatproviedes array, so we must not invalidate this area.) -Upstream-Status: Backport -https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec +Upstream-Status: Backport [https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec] CVE: CVE-2021-3200 +CVE: CVE-2021-33928 +CVE: CVE-2021-33929 +CVE: CVE-2021-33930 +CVE: CVE-2021-33938 +Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> + Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> --- ext/testcase.c | 21 +++++++++++++++++++++ |