[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openembedded-core
Subject:    Re: [OE-core] [V2][PATCH] rpm: fix CVE-2021-3521
From:       "Changqing Li" <changqing.li () windriver ! com>
Date:       2021-12-31 2:18:41
Message-ID: e1cda44a-9c13-07b0-a643-9ec41ff9a1c9 () windriver ! com
[Download RAW message or body]

On 12/31/21 9:51 AM, Mittal, Anuj wrote:
> [Please note: This e-mail is from an EXTERNAL e-mail address]
>
> On Thu, 2021-12-23 at 14:12 +0800, Changqing Li wrote:
>> From: Changqing Li <changqing.li@windriver.com>
>>
>> Signed-off-by: Changqing Li <changqing.li@windriver.com>
>> ---
>>   .../rpm/files/0001-CVE-2021-3521.patch        |=C2=A0 57 +++
>>   .../rpm/files/0002-CVE-2021-3521.patch        |=C2=A0 64 ++++
>>   .../rpm/files/0003-CVE-2021-3521.patch        | 329
>> ++++++++++++++++++
>>   meta/recipes-devtools/rpm/rpm_4.17.0.bb       |=C2=A0=C2=A0 3 +
>>   4 files changed, 453 insertions(+)
>>   create mode 100644 meta/recipes-devtools/rpm/files/0001-CVE-2021-
>> 3521.patch
>>   create mode 100644 meta/recipes-devtools/rpm/files/0002-CVE-2021-
>> 3521.patch
>>   create mode 100644 meta/recipes-devtools/rpm/files/0003-CVE-2021-
>> 3521.patch
>>
>> diff --git a/meta/recipes-devtools/rpm/files/0001-CVE-2021-3521.patch
>> b/meta/recipes-devtools/rpm/files/0001-CVE-2021-3521.patch
>> new file mode 100644
>> index 0000000000..b374583017
>> --- /dev/null
>> +++ b/meta/recipes-devtools/rpm/files/0001-CVE-2021-3521.patch
>> @@ -0,0 +1,57 @@
>> +From 9a6871126f472feea057d5f803505ec8cc78f083 Mon Sep 17 00:00:00
>> 2001
>> +From: Panu Matilainen <pmatilai@redhat.com>
>> +Date: Thu, 30 Sep 2021 09:56:20 +0300
>> +Subject: [PATCH 1/3] Refactor pgpDigParams construction to helper
>> function
>> +
>> +No functional changes, just to reduce code duplication and needed by
>> +the following commits.
>> +
>> +CVE: CVE-2021-3521
>> +Upstream-Staus:
> Should be Upstream-Status. This is triggering build failures for
> master-next.

Sorry,=C2=A0 I will fix this and send a V3

> Thanks,
>
> Anuj


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#160084): https://lists.openembedded.org/g/openembedded-core/message/160084
Mute This Topic: https://lists.openembedded.org/mt/87913937/4454766
Group Owner: openembedded-core+owner@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [openembedded-core@marc.info]
-=-=-=-=-=-=-=-=-=-=-=-



[prev in list] [next in list] [prev in thread] [next in thread]