2685 2012-07-03 17:06:54 +0000 Recipe security upgrades for 1.2.2 2012-07-05 15:15:18 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core 1.2.1 x86 Multiple RESOLVED INVALID Medium normal 1.2.2 1 scott.a.garman scott.a.garman jessica.zhang meta.mr.watcher meta.watcher --- --- --- oldest_to_newest 22759 0 scott.a.garman 2012-07-03 17:06:54 +0000 It's too late to get these into 1.2.1, but these recipes will need to get upgraded for 1.2.2: openssl: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2333 libpng: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3048 xinetd: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0862 libxml2: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1025 22836 1 jessica.zhang 2012-07-05 14:43:08 +0000 Please file 4 separate bugs since each pacakge is owned by different people 22842 2 scott.a.garman 2012-07-05 15:15:18 +0000 I've now filed separate bugs for these, so I'm closing this one. openssl - bug #2701 xinetd - bug #2702 libxml2 - bug #2703 I was mistaken about libpng, the version we ship is actually safe.