{"push_id":1321251135,"size":15,"distinct_size":15,"ref":"refs/heads/krogoth","head":"de056577cef465d92b4f9be0bc67694228d4d5ca","before":"25d7acef450fd9922ebcd02842eda4c4c654085d","commits":[{"sha":"45bc60015cd465b336e80cac08f16ffb37b53f3a","author":{"name":"Zhixiong Chi","email":"dbe2d9fc5111a7fb44dbfee7c4b720f48ac65399@windriver.com"},"message":"wpa_supplicant: Security Advisory-CVE-2016-4476\n\nAdd CVE-2016-4476 patch for avoiding \\n and \\r characters in passphrase\nparameters, which allows remote attackers to cause a denial of service\n(daemon outage) via a crafted WPS operation.\nPatches came from http://w1.fi/security/2016-1/\n\n(From OE-Core rev: ed610b68f7e19644c89d7131e34c990a02403c62)\n\n(From OE-Core rev: 6ef620c717c43a29f51ccd298c84070552bdfe52)\n\nSigned-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/45bc60015cd465b336e80cac08f16ffb37b53f3a"},{"sha":"b7bb83a4bb9f10aadda598bbccf779791bdc060c","author":{"name":"Zhixiong Chi","email":"dbe2d9fc5111a7fb44dbfee7c4b720f48ac65399@windriver.com"},"message":"wpa_supplicant: Security Advisory-CVE-2016-4477\n\nAdd CVE-2016-4477 patch for avoiding \\n and \\r characters in passphrase\nparameters, which allows remote attackers to cause a denial of service\n(daemon outage) via a crafted WPS operation.\nPatches came from http://w1.fi/security/2016-1/\n\n(From OE-Core rev: d4d4ed5f31c687b2b2b716ff0fb8ca6c7aa29853)\n\n(From OE-Core rev: 9db41b45beae7224ba928f9267046f1b6a8288a0)\n\nSigned-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/b7bb83a4bb9f10aadda598bbccf779791bdc060c"},{"sha":"9fd6b093a4ec49f016accd0186763233e4fc6171","author":{"name":"Dengke Du","email":"45aa13b8ada9609a71e5a24cdc11aadfd85e4211@windriver.com"},"message":"cracklib: Apply patch to fix CVE-2016-6318\n\nFix CVE-2016-6318\n\nBackport from cracklib upstream:\n\nhttps://github.com/cracklib/cracklib/commit/47e5dec521ab6243c9b249dd65b93d232d90d6b1\n\n(From OE-Core rev: bc7691c47f21a7d7549788fe0370c3080fc4dff5)\n\n(From OE-Core rev: 64757265e0122314036e80aa1440c29654c052c0)\n\nSigned-off-by: Dengke Du <dengke.du@windriver.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/9fd6b093a4ec49f016accd0186763233e4fc6171"},{"sha":"9995a7a144bce1bc94208223ed83d9dabe0084f3","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-2178\n\naffects openssl < 1.0.2i\n\n(From OE-Core rev: 2752dba61da730ccd914b7720490754a476d1024)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/9995a7a144bce1bc94208223ed83d9dabe0084f3"},{"sha":"e1e5b18a5e41369a951b724886476d7de825ee44","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-2179\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 8eb58cf801a26ec17dfc67bae2881f0fc03ea49b)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/e1e5b18a5e41369a951b724886476d7de825ee44"},{"sha":"82017f236748c3b84815100a7a4ba5397de1dc7d","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-2180\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 94b44f40fb52f642eeab1211bd5fc57ceba29f7e)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/82017f236748c3b84815100a7a4ba5397de1dc7d"},{"sha":"9fa0bc450068a720b99e5dd2db26cfcc235e4581","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-2181\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 401f3ccd509d012c4b048eb9fcb5d0f4ab5cc7d2)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/9fa0bc450068a720b99e5dd2db26cfcc235e4581"},{"sha":"06ed5c5a1024131d2ff15394dd6fcaf55b599bbc","author":{"name":"Martin Jansa","email":"daa8d5ee5ec708c2e3afd329f3b06dddd8fe2d67@gmail.com"},"message":"useradd: use bindir_native for pseudo PATH\n\n* useradd/userdel functions will fail for recipes which override their target prefix\n  (e.g. to /opt/foo), because it will try to use pseudo from native-sysroot/opt/foo/bin/pseudo\n\n(From OE-Core rev: 96189e71a86c0f4833e8e51d678208fd908bfe30)\n\n(From OE-Core rev: fe20ce64de7a3d8bcd21bb1fc2cfd65563b82767)\n\nSigned-off-by: Martin Jansa <Martin.Jansa@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/06ed5c5a1024131d2ff15394dd6fcaf55b599bbc"},{"sha":"8e5e92193a0924d7019caaaa7c7afaec7c773726","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-2182\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 4be4162d5a03af6a20adc2314575e4d0baa5337a)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/8e5e92193a0924d7019caaaa7c7afaec7c773726"},{"sha":"7026b2b05a231040b1ee571637237c9a5de3aef1","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-6302\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 6d26328bd1d950ddc5ca1cda47da4b8f3d432a1e)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/7026b2b05a231040b1ee571637237c9a5de3aef1"},{"sha":"5f97311702afa5b942f0c3f71cf74292b6eae365","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-6303\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: bb812836c2c8d89da54d905b65487a9f1acd5f3c)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/5f97311702afa5b942f0c3f71cf74292b6eae365"},{"sha":"e08094e604caf1fceb1fba7a4cae0f1937ffe7ef","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-6304\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: ae1db7aea891978e42e5205d2ffc93c16703134c)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/e08094e604caf1fceb1fba7a4cae0f1937ffe7ef"},{"sha":"2b330e5439caa75387dafa90c0315e0fa693eec9","author":{"name":"Armin Kuster","email":"837a3a3c4af7f8fde43510e94e9916b6d48e3def@mvista.com"},"message":"openssl: Security fix CVE-2016-6306\n\naffects openssl < 1.0.1i\n\n(From OE-Core rev: 378e58a93127cbf7c330aa1ae4df9a96681bc410)\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/2b330e5439caa75387dafa90c0315e0fa693eec9"},{"sha":"2ea93e2b1db4a825543e37e68121d63a71c7d6b3","author":{"name":"Khem Raj","email":"f425d3593ccbbf0d59279cc3b76e0c81297bda51@gmail.com"},"message":"useradd.bbclass: Strip trailing ';' in cmd params\n\nWhen there are more than 1 packages in a recipe requiring useradd\nservices, they are concatnated and a ';' is inserted just after\neach of the users being added by the packages. A situation arises\nin cases where this is controlled by PACKAGECONFIG then we add a\n';' separator in the USERADD_PARAM value itself for each packagecofig\nsince we do not know which one will be picked, we end up in situation\nwhere the final string returned from get_all_cmd_params() appears to be\n\na; ; b; c;\n\nand then the logic which uses these cmds triggers with ';' as separator\nbut in this case it will fail after executing useradd 'a' because the next\ncmd it will call will be just a whitespace\n\nThis is highlighted by the systemd patch to add more users as needed\nby systemd 229 components.\n\n(From OE-Core rev: e8d4356c38e3c2aacd6dc49231c73bcb7d597308)\n\n(From OE-Core rev: 4f69a4be79e17ef009351c447694e46b5cb517c2)\n\nSigned-off-by: Khem Raj <raj.khem@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/2ea93e2b1db4a825543e37e68121d63a71c7d6b3"},{"sha":"de056577cef465d92b4f9be0bc67694228d4d5ca","author":{"name":"Maxin B. John","email":"73f64870718fadc722abfb59c9eb413de6771e41@intel.com"},"message":"libarchive: respect disable-acl configuration option\n\nUpdate configure.ac to properly handle --disable-acl option\n\n[YOCTO #9668]\n\n(From OE-Core rev: 84fe3f29f2bdaf98c9beefdfede143084fba093b)\n\n(From OE-Core rev: 687d3b8d54aa3190bbbbc94ae2f91303fccf7c8d)\n\nSigned-off-by: Maxin B. John <maxin.john@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Denys Dmytriyenko <denys@ti.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/madisongh/poky/commits/de056577cef465d92b4f9be0bc67694228d4d5ca"}]}
{"actor":{"display_login":"madisongh"}}