All of lore.kernel.org
 help / color / mirror / Atom feed
* [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3
@ 2022-05-13 13:35 Davide Gardenal
  2022-05-13 15:53 ` [OE-core] " Steve Sakoman
  0 siblings, 1 reply; 5+ messages in thread
From: Davide Gardenal @ 2022-05-13 13:35 UTC (permalink / raw)
  To: openembedded-core; +Cc: Davide Gardenal

This minor version include fixes for several CVEs

CVE: CVE-2022-1292
CVE: CVE-2022-1343
CVE: CVE-2022-1434
CVE: CVE-2022-1473

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
---
Updates:
    -v2 add kirkstone tag in the title
---
 .../openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb}              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} (99%)

diff --git a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
similarity index 99%
rename from meta/recipes-connectivity/openssl/openssl_3.0.2.bb
rename to meta/recipes-connectivity/openssl/openssl_3.0.3.bb
index a809666aa7..fd88ae807d 100644
--- a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb
+++ b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
@@ -18,7 +18,7 @@ SRC_URI:append:class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[sha256sum] = "98e91ccead4d4756ae3c9cde5e09191a8e586d9f4d50838e7ec09d6411dfdb63"
+SRC_URI[sha256sum] = "ee0078adcef1de5f003c62c80cc96527721609c6f3bb42b7795df31f8b558c0b"
 
 inherit lib_package multilib_header multilib_script ptest perlnative
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
-- 
2.32.0



^ permalink raw reply related	[flat|nested] 5+ messages in thread

* Re: [OE-core] [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3
  2022-05-13 13:35 [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3 Davide Gardenal
@ 2022-05-13 15:53 ` Steve Sakoman
  2022-05-13 15:56   ` Davide Gardenal
  0 siblings, 1 reply; 5+ messages in thread
From: Steve Sakoman @ 2022-05-13 15:53 UTC (permalink / raw)
  To: Davide Gardenal; +Cc: openembedded-core, Davide Gardenal, Richard Purdie

On Fri, May 13, 2022 at 3:35 AM Davide Gardenal
<davidegarde2000@gmail.com> wrote:
>
> This minor version include fixes for several CVEs
>
> CVE: CVE-2022-1292
> CVE: CVE-2022-1343
> CVE: CVE-2022-1434
> CVE: CVE-2022-1473
>
> Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
> ---
> Updates:
>     -v2 add kirkstone tag in the title

Actually, since master is also at version 3.0.2 this patch will have
to go to master first.  I'll then backport it.

In cases like this you should probably tag [master][kirkstone] so
Richard and I both take notice.

Steve

> ---
>  .../openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb}              | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-connectivity/openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} (99%)
>
> diff --git a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> similarity index 99%
> rename from meta/recipes-connectivity/openssl/openssl_3.0.2.bb
> rename to meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> index a809666aa7..fd88ae807d 100644
> --- a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> @@ -18,7 +18,7 @@ SRC_URI:append:class-nativesdk = " \
>             file://environment.d-openssl.sh \
>             "
>
> -SRC_URI[sha256sum] = "98e91ccead4d4756ae3c9cde5e09191a8e586d9f4d50838e7ec09d6411dfdb63"
> +SRC_URI[sha256sum] = "ee0078adcef1de5f003c62c80cc96527721609c6f3bb42b7795df31f8b558c0b"
>
>  inherit lib_package multilib_header multilib_script ptest perlnative
>  MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> --
> 2.32.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#165563): https://lists.openembedded.org/g/openembedded-core/message/165563
> Mute This Topic: https://lists.openembedded.org/mt/91080703/3620601
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [steve@sakoman.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [OE-core] [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3
  2022-05-13 15:53 ` [OE-core] " Steve Sakoman
@ 2022-05-13 15:56   ` Davide Gardenal
  2022-05-13 16:57     ` Steve Sakoman
  0 siblings, 1 reply; 5+ messages in thread
From: Davide Gardenal @ 2022-05-13 15:56 UTC (permalink / raw)
  To: Steve Sakoman; +Cc: openembedded-core, Davide Gardenal, Richard Purdie


[-- Attachment #1.1: Type: text/plain, Size: 2735 bytes --]

I see, I’m sorry but I haven’t checked master because I’m working on kirkstone right now, next time I’ll do it.

Davide

> Il giorno 13 mag 2022, alle ore 17:53, Steve Sakoman <steve@sakoman.com> ha scritto:
> 
> On Fri, May 13, 2022 at 3:35 AM Davide Gardenal
> <davidegarde2000@gmail.com <mailto:davidegarde2000@gmail.com>> wrote:
>> 
>> This minor version include fixes for several CVEs
>> 
>> CVE: CVE-2022-1292
>> CVE: CVE-2022-1343
>> CVE: CVE-2022-1434
>> CVE: CVE-2022-1473
>> 
>> Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com <mailto:davide.gardenal@huawei.com>>
>> ---
>> Updates:
>> -v2 add kirkstone tag in the title
> 
> Actually, since master is also at version 3.0.2 this patch will have
> to go to master first. I'll then backport it.
> 
> In cases like this you should probably tag [master][kirkstone] so
> Richard and I both take notice.
> 
> Steve
> 
>> ---
>> .../openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>> rename meta/recipes-connectivity/openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} (99%)
>> 
>> diff --git a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> similarity index 99%
>> rename from meta/recipes-connectivity/openssl/openssl_3.0.2.bb
>> rename to meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> index a809666aa7..fd88ae807d 100644
>> --- a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb
>> +++ b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> @@ -18,7 +18,7 @@ SRC_URI:append:class-nativesdk = " \
>> file://environment.d-openssl.sh \
>> "
>> 
>> -SRC_URI[sha256sum] = "98e91ccead4d4756ae3c9cde5e09191a8e586d9f4d50838e7ec09d6411dfdb63"
>> +SRC_URI[sha256sum] = "ee0078adcef1de5f003c62c80cc96527721609c6f3bb42b7795df31f8b558c0b"
>> 
>> inherit lib_package multilib_header multilib_script ptest perlnative
>> MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
>> --
>> 2.32.0
>> 
>> 
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#165563): https://lists.openembedded.org/g/openembedded-core/message/165563 <https://lists.openembedded.org/g/openembedded-core/message/165563>
>> Mute This Topic: https://lists.openembedded.org/mt/91080703/3620601 <https://lists.openembedded.org/mt/91080703/3620601>
>> Group Owner: openembedded-core+owner@lists.openembedded.org <mailto:openembedded-core+owner@lists.openembedded.org>
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub <https://lists.openembedded.org/g/openembedded-core/unsub> [steve@sakoman.com <mailto:steve@sakoman.com>]
>> -=-=-=-=-=-=-=-=-=-=-=-


[-- Attachment #1.2: Type: text/html, Size: 11824 bytes --]

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 4392 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [OE-core] [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3
  2022-05-13 15:56   ` Davide Gardenal
@ 2022-05-13 16:57     ` Steve Sakoman
  2022-05-13 18:41       ` Davide Gardenal
  0 siblings, 1 reply; 5+ messages in thread
From: Steve Sakoman @ 2022-05-13 16:57 UTC (permalink / raw)
  To: Davide Gardenal; +Cc: openembedded-core, Davide Gardenal, Richard Purdie

On Fri, May 13, 2022 at 5:56 AM Davide Gardenal
<davidegarde2000@gmail.com> wrote:
>
> I see, I’m sorry but I haven’t checked master because I’m working on kirkstone right now, next time I’ll do it.

No worries.  If you don't catch it I probably will :-)

BTW, I really appreciate your help with CVEs!

Steve

>
> Davide
>
> Il giorno 13 mag 2022, alle ore 17:53, Steve Sakoman <steve@sakoman.com> ha scritto:
>
> On Fri, May 13, 2022 at 3:35 AM Davide Gardenal
> <davidegarde2000@gmail.com> wrote:
>
>
> This minor version include fixes for several CVEs
>
> CVE: CVE-2022-1292
> CVE: CVE-2022-1343
> CVE: CVE-2022-1434
> CVE: CVE-2022-1473
>
> Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
> ---
> Updates:
> -v2 add kirkstone tag in the title
>
>
> Actually, since master is also at version 3.0.2 this patch will have
> to go to master first. I'll then backport it.
>
> In cases like this you should probably tag [master][kirkstone] so
> Richard and I both take notice.
>
> Steve
>
> ---
> .../openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> rename meta/recipes-connectivity/openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} (99%)
>
> diff --git a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> similarity index 99%
> rename from meta/recipes-connectivity/openssl/openssl_3.0.2.bb
> rename to meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> index a809666aa7..fd88ae807d 100644
> --- a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
> @@ -18,7 +18,7 @@ SRC_URI:append:class-nativesdk = " \
> file://environment.d-openssl.sh \
> "
>
> -SRC_URI[sha256sum] = "98e91ccead4d4756ae3c9cde5e09191a8e586d9f4d50838e7ec09d6411dfdb63"
> +SRC_URI[sha256sum] = "ee0078adcef1de5f003c62c80cc96527721609c6f3bb42b7795df31f8b558c0b"
>
> inherit lib_package multilib_header multilib_script ptest perlnative
> MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> --
> 2.32.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#165563): https://lists.openembedded.org/g/openembedded-core/message/165563
> Mute This Topic: https://lists.openembedded.org/mt/91080703/3620601
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [steve@sakoman.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [OE-core] [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3
  2022-05-13 16:57     ` Steve Sakoman
@ 2022-05-13 18:41       ` Davide Gardenal
  0 siblings, 0 replies; 5+ messages in thread
From: Davide Gardenal @ 2022-05-13 18:41 UTC (permalink / raw)
  To: Steve Sakoman; +Cc: openembedded-core, Davide Gardenal, Richard Purdie

[-- Attachment #1: Type: text/plain, Size: 2796 bytes --]

I’m always glad to help :)

> Il giorno 13 mag 2022, alle ore 18:57, Steve Sakoman <steve@sakoman.com> ha scritto:
> 
> On Fri, May 13, 2022 at 5:56 AM Davide Gardenal
> <davidegarde2000@gmail.com> wrote:
>> 
>> I see, I’m sorry but I haven’t checked master because I’m working on kirkstone right now, next time I’ll do it.
> 
> No worries.  If you don't catch it I probably will :-)
> 
> BTW, I really appreciate your help with CVEs!
> 
> Steve
> 
>> 
>> Davide
>> 
>> Il giorno 13 mag 2022, alle ore 17:53, Steve Sakoman <steve@sakoman.com> ha scritto:
>> 
>> On Fri, May 13, 2022 at 3:35 AM Davide Gardenal
>> <davidegarde2000@gmail.com> wrote:
>> 
>> 
>> This minor version include fixes for several CVEs
>> 
>> CVE: CVE-2022-1292
>> CVE: CVE-2022-1343
>> CVE: CVE-2022-1434
>> CVE: CVE-2022-1473
>> 
>> Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
>> ---
>> Updates:
>> -v2 add kirkstone tag in the title
>> 
>> 
>> Actually, since master is also at version 3.0.2 this patch will have
>> to go to master first. I'll then backport it.
>> 
>> In cases like this you should probably tag [master][kirkstone] so
>> Richard and I both take notice.
>> 
>> Steve
>> 
>> ---
>> .../openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>> rename meta/recipes-connectivity/openssl/{openssl_3.0.2.bb => openssl_3.0.3.bb} (99%)
>> 
>> diff --git a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> similarity index 99%
>> rename from meta/recipes-connectivity/openssl/openssl_3.0.2.bb
>> rename to meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> index a809666aa7..fd88ae807d 100644
>> --- a/meta/recipes-connectivity/openssl/openssl_3.0.2.bb
>> +++ b/meta/recipes-connectivity/openssl/openssl_3.0.3.bb
>> @@ -18,7 +18,7 @@ SRC_URI:append:class-nativesdk = " \
>> file://environment.d-openssl.sh \
>> "
>> 
>> -SRC_URI[sha256sum] = "98e91ccead4d4756ae3c9cde5e09191a8e586d9f4d50838e7ec09d6411dfdb63"
>> +SRC_URI[sha256sum] = "ee0078adcef1de5f003c62c80cc96527721609c6f3bb42b7795df31f8b558c0b"
>> 
>> inherit lib_package multilib_header multilib_script ptest perlnative
>> MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
>> --
>> 2.32.0
>> 
>> 
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#165563): https://lists.openembedded.org/g/openembedded-core/message/165563
>> Mute This Topic: https://lists.openembedded.org/mt/91080703/3620601
>> Group Owner: openembedded-core+owner@lists.openembedded.org
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [steve@sakoman.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>> 
>> 


[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 4392 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2022-05-13 18:41 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-05-13 13:35 [kirkstone][PATCH v2] openssl: minor security upgrade 3.0.2 -> 3.0.3 Davide Gardenal
2022-05-13 15:53 ` [OE-core] " Steve Sakoman
2022-05-13 15:56   ` Davide Gardenal
2022-05-13 16:57     ` Steve Sakoman
2022-05-13 18:41       ` Davide Gardenal

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.