{"push_id":986616304,"size":5,"distinct_size":5,"ref":"refs/heads/jethro","head":"646a8cfa5398a22062541ba9c98539180ba85d58","before":"e56aba3a822f072f8ed2062a691762a4a970a3f0","commits":[{"sha":"4fe0654253d7444f2c445a30b06623cef036b2bb","author":{"email":"65ab3e867b262c6052b2aaec32dae97b24ac0759@mvista.com","name":"Armin Kuster"},"message":"uclibc: Security fix CVE-2016-2224\n\nCVE-2016-2224 Do not follow compressed items forever.\n\nThis change is being provide to comply to Yocto compatiblity.\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>","distinct":true,"url":"https://api.github.com/repos/openembedded/openembedded-core/commits/4fe0654253d7444f2c445a30b06623cef036b2bb"},{"sha":"093d76f3f4a385aae46304bd572ce1545c6bcf33","author":{"email":"65ab3e867b262c6052b2aaec32dae97b24ac0759@mvista.com","name":"Armin Kuster"},"message":"uclibc: Security fix CVE-2016-2225\n\nCVE-2016-2225 Make sure to always terminate decoded string\n\nThis change is being provide to comply to Yocto compatiblility.\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>","distinct":true,"url":"https://api.github.com/repos/openembedded/openembedded-core/commits/093d76f3f4a385aae46304bd572ce1545c6bcf33"},{"sha":"c691ce99bd2d249d6fdc4ad58300719488fea12c","author":{"email":"65ab3e867b262c6052b2aaec32dae97b24ac0759@mvista.com","name":"Armin Kuster"},"message":"libgcrypt: Security fix CVE-2015-7511\n\nCVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves\n\naffects libgcrypt < 1.6.5\n\nPatch 1 is a dependancy patch. simple macro name change.\nPatch 2 is the cve fix.\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>","distinct":true,"url":"https://api.github.com/repos/openembedded/openembedded-core/commits/c691ce99bd2d249d6fdc4ad58300719488fea12c"},{"sha":"ca7cbcf22558349f0b43ed7dc84ad38d7c178c55","author":{"email":"65ab3e867b262c6052b2aaec32dae97b24ac0759@mvista.com","name":"Armin Kuster"},"message":"qemu: Security fix CVE-2016-2197\n\nCVE-2016-2197 Qemu: ide: ahci null pointer dereference when using FIS CLB engines\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>","distinct":true,"url":"https://api.github.com/repos/openembedded/openembedded-core/commits/ca7cbcf22558349f0b43ed7dc84ad38d7c178c55"},{"sha":"646a8cfa5398a22062541ba9c98539180ba85d58","author":{"email":"65ab3e867b262c6052b2aaec32dae97b24ac0759@mvista.com","name":"Armin Kuster"},"message":"qemu: Security fix CVE-2016-2198\n\nCVE-2016-2198 Qemu: usb: ehci null pointer dereference in ehci_caps_write\n\nSigned-off-by: Armin Kuster <akuster@mvista.com>","distinct":true,"url":"https://api.github.com/repos/openembedded/openembedded-core/commits/646a8cfa5398a22062541ba9c98539180ba85d58"}]}