[dunfell,07/18] libsolv: update tag for missing CVEs

Message ID	c021f2d03e0dbe1fdf82446d42dbb3095999cde3.1638555254.git.steve@sakoman.com
State	Accepted, archived
Commit	371c247a78da64fefb0daa166e90c4fdd0745eed
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.216.41, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][dunfell 07/18] libsolv: update tag for missing CVEs Date: Fri, 3 Dec 2021 08:18:54 -1000 Message-Id: <c021f2d03e0dbe1fdf82446d42dbb3095999cde3.1638555254.git.steve@sakoman.com> In-Reply-To: <cover.1638555254.git.steve@sakoman.com> References: <cover.1638555254.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[dunfell,01/18] cve-extra-exclusions: add db CVEs to exclusion list \| expand [dunfell,01/18] cve-extra-exclusions: add db CVEs to exclusion list [dunfell,02/18] glib-2.0: Add security fixes [dunfell,03/18] busybox: Fix for CVE-2021-42374 [dunfell,04/18] busybox: Fix for CVE-2021-42376 [dunfell,05/18] vim: fix CVE-2021-3968 and CVE-2021-3973 [dunfell,06/18] ncurses: Fix for CVE-2021-39537 [dunfell,07/18] libsolv: update tag for missing CVEs [dunfell,08/18] bind: update to 9.11.33 [dunfell,09/18] bind: update to 9.11.34 [dunfell,10/18] bind: update to 9.11.35 [dunfell,11/18] libdnf: Backport bugfix for upgrade calc [dunfell,12/18] dnf: Backport bugfix for upgrade [dunfell,13/18] libunwind: Backport a fix for -fno-common option to compile [dunfell,14/18] buildhistory: Fix srcrevs output [dunfell,15/18] oeqa/parselogs: Fix quoting [dunfell,16/18] cmake: FindGTest: Add target for gmock library [dunfell,17/18] scripts/checklayer/common.py: Fixed a minor grammatical error [dunfell,18/18] README.OE-Core.md: update URLs

Message ID

c021f2d03e0dbe1fdf82446d42dbb3095999cde3.1638555254.git.steve@sakoman.com

State

Accepted, archived

Commit

371c247a78da64fefb0daa166e90c4fdd0745eed

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][dunfell 07/18] libsolv: update tag for missing CVEs
Date: Fri,  3 Dec 2021 08:18:54 -1000
Message-Id: 
 <c021f2d03e0dbe1fdf82446d42dbb3095999cde3.1638555254.git.steve@sakoman.com>
In-Reply-To: <cover.1638555254.git.steve@sakoman.com>
References: <cover.1638555254.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[dunfell,01/18] cve-extra-exclusions: add db CVEs to exclusion list | expand

Commit Message

Steve Sakoman Dec. 3, 2021, 6:18 p.m. UTC

From: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>

It seems like CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and
CVE-2021-33938 are pointing to same patch as CVE-2021-3200

So add CVE tag inside the patch file which is the remedy for
CVE-2021-33928, CVE-2021-33929, CVE-2021-33930 and CVE-2021-33938

Link:
https://ubuntu.com/security/CVE-2021-3200
https://ubuntu.com/security/CVE-2021-33928
https://ubuntu.com/security/CVE-2021-33929
https://ubuntu.com/security/CVE-2021-33930
https://ubuntu.com/security/CVE-2021-33938

Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-extended/libsolv/files/CVE-2021-3200.patch | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch b/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch
index 74164ab495..cc8f53cefd 100644
--- a/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch
+++ b/meta/recipes-extended/libsolv/files/CVE-2021-3200.patch
@@ -11,9 +11,14 @@  been added.
 (Jobs may point inside the whatproviedes array, so we must not invalidate this
 area.)
 
-Upstream-Status: Backport 
-https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec
+Upstream-Status: Backport [https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec]
 CVE: CVE-2021-3200
+CVE: CVE-2021-33928
+CVE: CVE-2021-33929
+CVE: CVE-2021-33930
+CVE: CVE-2021-33938
+Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
+
 Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
 ---
  ext/testcase.c | 21 +++++++++++++++++++++

[dunfell,07/18] libsolv: update tag for missing CVEs

Commit Message

Patch