From 7c8b4f88a5173ffaeb6a607232dbe02b291447eb Mon Sep 17 00:00:00 2001 From: David Michael Date: Sat, 3 Aug 2019 15:56:49 +0000 Subject: [PATCH] bump(metadata/glsa): sync with upstream --- .../portage-stable/metadata/glsa/Manifest | 30 ++++---- .../metadata/glsa/Manifest.files.gz | Bin 442809 -> 443284 bytes .../metadata/glsa/glsa-201906-01.xml | 50 +++++++++++++ .../metadata/glsa/glsa-201908-01.xml | 69 ++++++++++++++++++ .../metadata/glsa/glsa-201908-02.xml | 54 ++++++++++++++ .../metadata/glsa/timestamp.chk | 2 +- .../metadata/glsa/timestamp.commit | 2 +- 7 files changed, 190 insertions(+), 17 deletions(-) create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201906-01.xml create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-01.xml create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-02.xml diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest index 99ebfbfbc1..0a6f491c72 100644 --- a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest @@ -1,23 +1,23 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 -MANIFEST Manifest.files.gz 442809 BLAKE2B 4b7b795575911222fd7fe1e9f9900ced88b7957d15e08d5881ee7e2c91f556beb375085e3842469d53d9c216f6709039908e138283d8726731c25b7aa33c7861 SHA512 ad93d050cf3a9d3cfb5dbce463c01bff4a31f205a3d2773382f89e603197645720db7bb4b45496d26f019ef9161b89ce5d0e4aacd87f89dff11d9c1126c34c46 -TIMESTAMP 2019-04-25T12:38:57Z +MANIFEST Manifest.files.gz 443284 BLAKE2B 24919ac10412f9b00a154077aa3622b6287002f3ca6c6ce41b9dc188e5a3fbe6270e9e94c4d7b17f66e6e4d6cad9250e459897ed52412efbc9dcf09ef673d16e SHA512 fa2eb00f68c25c2fbc1cebc5a053e0da1e8a554cb5db4bf38187ca24071873c7fdf6659c6bb2f5a4c74c591043d21a65999f7ff50b5d2e61317903c2e7499822 +TIMESTAMP 2019-08-03T15:09:02Z -----BEGIN PGP SIGNATURE----- -iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlzBqmFfFIAAAAAALgAo +iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAl1Fo45fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY -klBddRAApp+I8/ZRSb23UWFHzE3qFH1Ai+R4R0KWeJjJG/tG3Sv8iLIWaHES/VIz -06VSmJfuVZNrvQM/O3e93q/7RIne7Zc6f1Xu+dZ/khadIw+A47t/3CG1n85s9VxA -G8sm6qNjMvfZtkXC/12JyzdkA87RDLkVXO/emVVXlsDomC35qCd6ZhYRpcoCLl/C -dLh0UT12lbacJPOby5Q0MSNQgJ+1hFltwZ1ltQ4ATYMpFguX6f0RU1nhYv4E8hM1 -ABNqLpQbFWhHUxmYgNK5hN7M7SMMgOIYVvpRof4RwNF+kay5JVkTnCDdayErAjkd -0A+aL/zatDXx1HyYjVRh39lKnw7aukQyyNzn6N+jpznsVvb8BJvhsiTl1h46134l -a/RPfS4MwDH9fZHtwraZloR59BUTKYzuKie/pfMIdL/tPTAPqCeCSiDG9PROwIcV -pz/fC6oXQYf/qZbIJOr6Z8jFE5dp4CSY3ubKEBKWY/NMthZ7z3gmofiUUvNAibzi -1/1hOF0vVhND9yfF7p9mQxbBBO498xfhqSPAGYYct+XgWSVcPWzIm73f7p5kznxM -D10IcXPwWsmX4e9iqu1vS1NNmxHH6lNDbLx+uIBDnlZL8rJ0GfMmHgKgBo4v+K8A -x0SE72Ocl9O0524GhNk0lD9SsxsrRrdcsMj8T9LuSwrxMJIZIFI= -=GeEM +klAmfw//WiUkJtGO6f70EEkJWmF+jMQG+j1EynZt7Pf7AqyiwiOXiIC8kEG+oJSO +DpE/0uzCgDFiwl2IXcjLVU06Dhsl+FhGr1yi3hvnBBmzealhObW114A6J/3T0Xig +pheXUGPWCbPpTiPb51Xf+ZuAemzMlL40FzNLH/jZWnStBSucmWuBOZXvZgtR6Kvd +39oT/xte46BpJzddJ3npX8aLOI03p42YGlfw3R3zI0KTrYtIWlq+5Ebjxput5H2d +eZb0azrM07TwyLTpwqkKNwfmAFrrFT0B+b1zsiE20hwEmo1+0o3daHcLjEAblwee +DeSKntSg7PDvWE8vwCPNFnmnbBw78gpC0bidRcv+z48vv6+GPGoBaDcBiozAa+x1 +OVENHoztc08j1Lv9FJqTJx0yPLnQsie9R5x4C92rFqOyKPDlUGEw0aQweWoQQBOD +ls4q9XV9P3wc+pilTrzxEo/2Yu1J3AHCI3TsQ4ZZjPgK+WPkRZeyeqEM/Yp4450j +/K/Dc47XXr2NiHxQMkf0Ytm/IatVemhntzdovKTNzoPqKiSsI3NwNvxNRb4pV3SI +xTpM/ildMGEAy2X6KDHk6U8+FQjXIuy2Mn007qkPzGMxAPY9wC1l8/KL/tC7usJ3 +0JsXCUW/zHLdoLR3O99fPKI+u7W+Rrn5zWpUQ9xQQgTJ0p/8uek= +=Omq0 -----END PGP SIGNATURE----- diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz index 30f8c1bd500410802d3e7e217e1dff94fe559bc8..abb8796b4a9f46ee96a06433caeff0b3ee9311de 100644 GIT binary patch delta 6225 zcmV-X7_R5JgBz5G8-RoXgaU*Egam{IvWb`Xpp zp@GnlfSLV6=kPunEblQ%98m8#m#?5 zLI$+dxfB3C_3I0O(V&70pCE!AU1Z50p4RsigRApG5Djz`T+5D<^RrFi3yep)QzXJt zo@jkuvL-7urD%XCDbwhvvS;I0(cHOD3IDC&6s+uy3dvy_M420Yu5lnT}1MbqME@<@0O#J%e& zji^jL+m{=mQd+1%uWfR5$}|RR_UVp{{l`V7qT;k(X#|g&LvwY-oeCI# z)z}(OzPu>KV7q{Kojw=oOs{P{S$M(2O+Jv^iw6Our7kAOckQ%lrKls>9=g*hFBXH& zdGgz2in%py{Bfwb{f@PL;&i(olz3Wk%o^N(P`Dct=@MU6myQNHCyGd4%9; zE3w8A{y*DoKdtX6Mthr(Hm zDK$A&j8GEA&=EAX@N+51ko7^aBjsl%J(8u7a7*X&-~bI(W~d{^9uWR|!uIU~)>BHuRJ) zD9uE+9bckUcXP_N8UhcHSjZLAxEb_XP0?}Nxr!r~y)`lp!L=>|ppE8gTT}@@=={nR zx;8&oE(L$YcJrsW_3LE%dRk%oPHR-hbvcvP^>uIZe*#O%xe5ZRhSIlMX;NI*MwTlq z)dJ>F)WgxH8!!sctS?!C;;iO4A7uw`)y59xlr>0lQ6zg_lii*8(hVfLTM8-(8v(}L z%j8M{b-5wR)ldssV8>(G#8cpwlAAi2^QqKCu6sBSKX{hwYj0mg4S@AJr3+?R!a%>^ zipSI;e|0KIYQf5@`t#HJW>RwHUszt>$9}8F#?=_I&NKP#Xu@bdia3%uBE|Ddi;f&c zWRZJgdqEEwJq1TUE*>2hfSQC9sxkwBspjFD2$%cjz<^Wv6BJ8go@zIful90ap1g8Z zW!?2qIGv-~x_%r}Hgu-?QTBsECb?%#$=VBVe0|37!uU+;j`Ci9PRgkt*kE2qTp?{y& ze`WU?fEG#j7SG%qvK*<}agCk$wfPKV37*43t@D2pDZ6(Rs(ABOhGbQ{x-o5`=AmDfB?RbbtAX(- zxr02(Agc?M$A8*``CnB0#4pLm)n3uISm9OjxyW`=rE97l{fQ|R z0UF(1G+if~QXoV~Lgf9Y-f4dMzP=%d8|)la%bk+;=9bQQ1lv;<=}|bBJhBEOfAWfC zr-ypXkv9(bHm}cF)<^1N&DO>A!R=$Rg036Gyf~bM8NSSbIRJTDdK|+20+opy# ztVMg;*|<{k!!ot`Z+&5tsmdlH`Sj! zEX9ZMPn&4c-a6<9pzj3xtJ!59aIOFmRmqz`<-^LOUcR0>q`#XURjqzmvI)7DO$<-?!Rn{A-%3=)#a}gelbMb{o$Va9!nys#m)`l{#l2f2aQ8X?<7K zrMx*k#OrH)pz_TuPpqr8jwke3&JF@bbbp#RVl@v6c&UW#zBV!o^K8%O`upR0qOfAI9mbzOa^fc|KP zQ#4NHXjzAmtIq6`QTJ@BxbvjxzNV<|i(O<*ShSZY5$HH;O<{By-8Hu>f4Iy)IQqbM?J498gmjZIs#3$h9h+_ z9?1@n1`uk%b}A|2(1zz2wbph4J?e<57{+runr=Ge>d2N#d zVhnd|6aTf%wU)?PLWe9WRc{E?jmI~Nyl^`i-Q9tef1eh&n5zBEGHISly>+;?I`v?7 z6Lf75?{+{xz^3wbf}JTD%-fA(ufi2Q66W?bzJb(W)WhLt<&DOjJNUb5U3DJV;xv#5 zhU(LCJ|CXefA@Z3i*M=~wO6@h$t4dS%&CA-cZX%k+Ke)?M46nix{}gXiae64^&C&` z1?&1-s#)sN^+wYfHM@E+!X&}e`^&|G@iU~?HEV;jcrdHQ^pXviY)Sm6-el*pfviozp8*my! zyV5U|f7VIu02#m@6jGo*N}5_cwt;yQT?(P2gJri(jGZ_zx**G5j)emdoG^_`M5u~R z^g04ORN$b9|9G~(t7>5Qs~af&I65(uL_zpnRjk0Fik6VB{WacZ4q98DiOWJUN~)A! zO+4?18k+iVDi5yLuNETbR0Oaos6)XEGLPFOe~h0GkSF4(^yOZv3r9aW@z(X_P!wml ztx$Ohq+2^=m&>b^!;M_VndW{bZQ8-WWEO{uVG-emTb->$NpzE90vJTLR$Tq+cAS*V z08(-pTq0AAgP$J`3dOth`vcyJANCW$1E(|F%2gW_5s@@K8*sQ(+!V~2&c;n#;QZUN}kE*MgtmRzv; z`b+sh-$p+g(1aiqDzV#KMlD;_SGEr=MM)x6B9LfBM!-Hb$#nl?J6fN;Pw}1>6wL+J zpc`X3m762KQhM+s%CIL-a`}Mef3-&5fAr-Qa&i2p1d(zdhdQ{n-G;;OTkR!<2(oKG zRYUg?wF`9zI7@9j#Qxt@}YRuQe(*(%zQMkJ9f85dC zYS~T*qaA|XWGW@BTe^a%7fSy`z@H6tP%7U)c1ftweqK8fw`e{v> zzeV>r%C!kH`&za=2UyzF99+d;yF;JIvQsq@9@=S-)wivk2$-MLxizXuif%-6E`KW@ z%FE_*fxIfp%bZ=vP+bbZLUCrle>4YsWfV1h=Pa75`iw0H0n~w)8q>>pig+<};mdtl zvK@Pymnx0(mQM{cUH_|OFPUouzVYY2eEyw~oo^E|pk9uFJaVeqo?5$``7u0Y+dKnS zNEnt`SJm`AD}bBZ?$p}z<{YVe%}WBi&qT@s!Kz%NLHkt4ZK-bH1dTTnTiYO<2%{HY(F){i4#c$>bObdq4;+LEvwbyuwpGB&_F zKh6sC7CN}p!Zd(BG1>|t0@)XrQMv{tf6m|jmJFk1QO=tQj-QwCk?>=O%MA+kySjd6 z(rZfQ6;Zj&LxaQy#*(>qbr%qn7m$}^w?qcutuHL)g%Wi^W$Y+r{L-4r1{GLbkFO6; ztNc_x?|#*`fp4t{O^r)EVe`#&gWtfZlRdSw?~YUi@H)7M>Z23NBn%f{RmwUdAaPx8 zyN8F1>6Cf*wFrq?=mJtGIG#$*c=SBt9whyx&X*Ot1|xq?4KS6A0;{O{FPooqH;%>g z<}_XIFK4ZZzZSnp9jR~CaFRIy$iJs{_wnIr)gO27Hy<*JiN1T8d$QPV<8id(xHc&f z;6Pl`Tc}7iw;SG7mx*!i4Sp^f)jm)G@XQB4ZM!^CdI-v^1^@e_8+tv$y{5ql%wbNG%%-f`rh8@;tnagI*xRK*rrF?X5GO~0in@3T-Rl< z>cz%IXpf#kUUE4z)gk=Q?X`O#iyJl3~?$#VP@OJ5<#=Tqh%Rmz&62J0OfqemJ&oBDZFV)K-0@ z#9KJ<@Ke=X!d305Js22B-8@hR80g4qz!mC*L74pTw0_ub;f1&Olgg!#7XZ($&TwGD zURQr!fJ0611oSnK9o-R#yt}BHEot)-ba4^7`u7KaDyq6p1lGiNITF?Iy*O1&H61F} zesP!V8mk)&Hvjccl)XDZLew&kbP_c$o=d9Ym8GUhMFB0V(I4ESCFg0RbwAms&tWUX zDXGs=YQi|TJKIogaWr?!bR(pY+Ega8h?5<((3H)0r7(TGi9cE+Z+MF+s&Kx(CWgUr zE0>bBmr=b26n}{-&P~y=W0$tGbkHkmQt}(+Pjwq|X2llWjB`M`_^F^DN`SRu@ z=24$(BXBQ8O73YVw7bR5o8ojO`?5C`d(;@%trykbs2m9!c38X29f3m8)#HmZd#cOB zQFF_mw9F;i%@5_`T%@{XYw8uzK6Gq;v_{H1lade}tbgr+B{>@kE_0#v^W_i-2toK5 z@@-u|KBeh41>`}@TFSd2a@f69+m=tF89C5f9@E9corLs$yQgCt-VH&j-h;ASDiS$p0~LTWs^0dOmcoRm@c-zcbYPR`M`NRWD+v2l2V1h-7lAPIYe?im$Ds? z;}|!yvwuPak)%q659XkDqX;fTZUM0QK0ct+?+MvIY}`c|j^|dCQ#~qf&4zNyIOZbq zeY>rYKyp6hxfdmQ#D^TVV81}mM+vpmTRILMw&QraQ+Zzpm(wMkAl;0Rp<84Q_D)V} z%gPA~ufDuq$Z9DLNi}K zo(hcu)^W2Mk+@VGb1w-Jj_i&XO^UbOQ>AXyHh6s?Z^wcJ_qio=RoM}Jo}Xxs|{VgUNVG|tyjCUsmI-U!KtqkYcl zw)hNcvMMJsUK&YBrjvsQieEBabR_PWS)UGRn3Si)Nsic%vkaonTsgigkD0f}B~wyY z$_Y>7aFd3^$@lKsS$A3Jws{<}IBO#0KdQtCJI;qE{o!f-`1zc#o47j{F5O;4>3^~X zAPbR3OM;8*K5VV=HPx@LStqx;HHx~nHIaBuP2q0ML(-FF5Wi%LNce=nF4WPUP0Hht zhu2klQ5Og}sT=9_iy$a-3$LQ7v?{6IRKnLFNC5)*U4QK;cy?k1C7<2^LwUgbkbab# z* zjd@wPT$S#|YP$h!FP&x$taax}Wo@}3txbSbZjgf??XN%JbnySBM}`Ka0Dlwy!f~}B z%?6w`l?W&4I@;D8LroJ0e9F5kuOpk&O+Y&sQY~f2NQNd8r9a`V`kKDJ@gOu-vI-$| zr6hIs)InUIW%As-$gWDqN_9S6BH=uox>W&afMkjcNVFSwa;KX_eCTbZ@ecoo*piD> z+A&43>J@OSI9!TE*sP}Bet#)=-qd{AJz04@Ndp6F8@q1`i5wS2dcIx1EE@B=n^PXO z1Hm@QCm8lCS7R}q+)zPw-hIE_+2Quu6rrY7b3@k0n2tg=*Nv-z7@`Yzs*)!1v6^^1XTV6`K~-Zg@;FI5F7=bvto75=`q}1u zi}KEZos=e^ftI+M<$raT#Uv!{OMh!>q>G4}iH=6elWnuUNn6Aq8H~%t5*-A1iF%7~ z+lDL~{UW%o(=Glk&aJsW7ZuKY0QKW|ZLVlpLxxbB3y^j1wKKAhRxeX!dd+Et7nh2# zE7%)awQmUx4QsUBQmp?``GMe~M|&_QL^ZkzA4^!(t+S{7ygEJ9xVig%8+G5~FaP$h v|NbBU`7i(U_rLxz|MvImkN^GW`@jDC!*Bl2AAkJy?|=C}4k#u+x77>)dO9+g delta 5713 zcmV-X7Ov@(ha0(r8-RoXgaU*Egam{IvfgEt^R0S9PG1Cl|*JnW=2LxE4Oevt|UiRwZ%#4v>gF8OwqTEoA>H8 z6Hr9g#IGxLU=+zrsW2-NfdJTmS6+eFTXqie3 zL1?LSDF9sc>kELM*7p>HtMft-4RjP-%Z`%slTG0Zj7PdtB*Idj zXk9N^lOT$Aw3EaI#7~!bs|G56kp{v)$X(|wQ|FdN(5lxKW|4|NtFD_h=>Da=kkS#$ zWfdKyb)7go;viY~JE=LY1=t(zX%SrjB35cV88@J{OgggOn7Y)Hjh|0X>xW61UpdiT z>8dd@*KaA8N(Dx#Q1vemppeuwaFfb1^^&%E>$t#8(x!QI3Mv@!X#og-oUKbqbG1kp zwWV98BLcO3=o$rgrMRv+E_p{$$NS&@Rso)!Y3OahvmK{Wp*p;1TKr5N3GacpcRjfg zm8oa@awAkq3pMDqO|Gg;W3XnQ?#S4GTx2RLPV1FM@F*!XS6AGrpt5RRBS@*xpKjuh z-f4VOI8aoL7o`|%7x1pr=OUfywXG)$FL=1g2am;Q1b1N+cU0kE7UJijHV74e23K6m&b$tNO{0az zDj%NKH%@3OuQyp6EK45%LQWmIxrhfHLI~f}dN7 zHIDHA*>3x3eNQpk+k`A#kKOaAQR1x$Z=&>9U$pp3^s&44XoNaf{u%gXy70Me?QBV@ z$*E$5k|>6bps9tQOF@RD4~iWrKQrl(Tm>4F5O!Mz>x1)u>Om-A?3yvpr|K@qmCNp{ z1Na@1M5p=3bxM%c9O>MY>k_kJM43<{t2cDI^5eocPYGOPyOk2GHg{NNq*m=75S1V} zc)5a4D2P9FY`&S4GACYfiz{GLd$TOQ{IcCJEX58;R}JIdX2(l8&Fgf}l-RzdYmcp{ zLAtX!q4Ju4mNI~|0r<|(R`~aa|i(uCNpf zm_tzyN1JZIC_uBmWCgObnxj6-4&JJb9m*+dkmRCB^1PmQcj8MoknCbX)*x5>lwj3;?E*hHD~R?wbPxPUR;kmc%^8ZYE#t<-k07<*LfM z>!ENuN40hRIHqjqMD?TW2ZhY(o;4+F&%B9$)5~WQTz#`CFJ5>Otv<8E}<)%JgegA6$C!+4|U=%lQO+>;+mSG@KGn3f;W12qp0jD)0&%+4(TKB=~NQ^ z$d{_oh9By(kZxk!b83s!xOp=H`&)NY##OG@a(Aom5l)#OZSGmWc?04FzgrmE8SoqbN{N-Js7M0_i9h zX)`ZPR?gd#HHvS6w|eNksy@SqI`NxHsn6f5P9(VtA~s!*fZ%XCT-LR&Hl4a6Qjo}G z6u{Vu?(XBdDoh!Fb4)4AAJSHL$zra5A#+JT^OPc2Lm`7hnje{jn55Bza@K)gt=d}q zRnOqxzCxtR;s-9$JAhk}{BV@$mPkI6dq<&&H*aM~RFDicGm*nGWuV`EH)7d(|(P?{oT26T)h*Muo&T+n?K4x_RoR^rf z1~&n+m(Z~W85{YxqL0MIwp$`mFBTeFPLkFsDZvR*Q&vz|=9dJr1|S)F`M$m(h#Tx2 zRm+`{_U4w(cm&&17U_{Wmp!ruBLUKvVX_7jfAr?fDO>A!R=S3c036Gyf~bKoOPO$L zRJK7cK|+20+opy#tXX^7*|<{*xINw0?YF-&B9nuoNH0KW(B(fA#bj912Rg07p5~tV#5=Qz=l%7x(PAlPOk1l; z4G|z8$>17Ys;nwU1o%|;3MWBeGd8r!zHhbD_}4U5(S_l(5vEY1+ig5gz;%%$s$T8( zRO+08boLKV>$|GX`OWDeUSI12g>Pnge_~y&bv&WRa&{0fqWjal5vzGnz*8<|9UjBS zl^dDQt$0p?{W!f*92>e^uNp|v**og|$gj(Bdvx)fmF`ibsK2JK9Dyu7`?RbAY%h`- zF(reFc~kYU*`_hE+8r81g5q4S;ySk7Dg*@qX1D?FoCh(VdP_5GXeLSP>D*%ze*zEc z*#uNQsbtFVe;=OKk4|%aS7reVsSv1YmX*Ic3l}%ZEPvV~raF+OL}g1@pWKI7Z88Nl z=r4)sWX+osbMYm?mz~Ttrcy#g+Gy#|=j811V22Y0fDuPzX~tuWe(|?d3|2Jp(bRbA z!qW@ab@ibF`lA_6);N`;WgSMYf2zqRqwd*MapyUw`DvlCq49xo3&V zVUP+f=074(0G2grEz9s8G_!TCr=KQ&;xhl>=mX!ir;sxc&YOf$lp6l+f7s+5J}2Pi zo{?|kphT(5v(6L zPm$SOJTG>V*ET62#&E|rfAL@2Tx*GxBy`B4QuT&F-FSQ>%L})Y(cK+b>Gx@Ii>cac zl1cLv>aD}A)u{)wo1klhc(()k0XCJd6YNaMVBT&NdlfG0kubNf@eQN~qaF@F3vV>; z+`->f>#Fm>7N>zkFjSw8^ZD?!zV{Pbd{fUTy~rgyUGm_;R0V{(e>*Ho)@GEECCcQC zm31m@rN|?xTF>#*o!sY=9c1~u*?9+7Q!}hf3UMc+Y7_yu)kyN`nNUWO8+#)`mEl+A z;~HO{N#&JPHo@E0wq{C+AQkr%SlMg66YblFo3}$@tq|~T~ zf^=Osi;6f*WtHWAf3(R*Q+xOBKb@`i(>s0JTsht71>g+DCO5@D+uvH56iq0u5=M!q zO>L}`6JQg`uI{fRjRCa%EcLS<1v@88WX??04AOqNgLJHJJNmGl*HZX6Ze@h{Bbg=BUiLp-(j4sHs zmt*Dt1Sd@65)rDR6TOZA4;45l;y<3P@2VOY{^|xwKaNfeB~cK5R}m|4sG=pLYk!Tm znS$1q_2jZpjFKwlR};_sp@ydZo63Xh^{a(Qor(Z91$8KRLFRG0gz@_U@~eXPa=4MpIMdwEQ=4`$Fqy^SVpv4D;Z|qMQ4-yx zm;eTmtrb_lx*aDaGk}y_2A9ZG3Ep(f7h~Ah0WqCAUshXgEtjr<|J53K)0bDs#qpmKM9O^}>fqXT z8xFs3f3=qsB1o?N6b;=+)GpK=;3T#25c}uD6k4fXn#>H9JiBEMpN9}aa!`=a`sxe;=Pm@T(rSw^o ztfRZfukb4PcpWji5^b_jM)Qz>EPIuGj}e~oWHJgpxM@HbWK2k5Eg2EQZCqAch- zn?RKNN%YX^LO-o3^Ec}rN4YjZW?##;b%3Q!&B0atwLA1DS$3*M!b7X}Sbf{tiGcY@ zom-=tr07O8=kmAmp}cG^7s#ukyiCc34ArFoEEH$egS>H1$Gd&yiQ@QpwB<&+ z{cP=S=Ev~lZSxFRAz@f%T}9LPqyTPeyHjh=n{%Y@H7^P5K2K5>2v+494cezVZcB9o zC+}bp(G;0WVs?-E@Vq8uWGlg1BH}7?e>u`k@VfODyE4y-*tg9zYqO;CmbtigQI}h~ zTQMjV1E4!pH%*%~Qo(*#el#N~Hdg%e<$7AGTTnSvHCah>{?-pq>&Fo=yiH$CI;UXZ z+LEvwbyuwpGB&_FJ|t*=L7$yc-bst+NmppsPbE1wti(mt?vI z6MyP&e@lkZvMA@x1jo-y_(=G%!{r8r`dwW=GwC%s@rtNi=Al7i17pctySfVq$_vO# zvRfhp@YWZW@%&p0N35y1{SY z)XARO*>^`O0(c$VL-o-KWfF$7uj))XA|P>HZo7wvi|Lek_q7O#TId2&C^()%&Uo}Z z;vSs(OVyVay9OhFss@-!MuAmS{g=&8x*Nyhd2^aB_m`8_#9xbFq>i(1)o_wI0LZ_m zcK7k&X_X&$?>8SZiiy5^nR~L>ZR2sYEaG4x;Tz>f!L3w zx%8Q=`{8N*?D@RiL@NdLrj^Qg0)V-mCO;h8H<4SjL~5%%QsONfc=%`0T*6iDsXZ7NNZmY81{ml_ zYQSacgh816@U(u|ZsCQu_(|nb$P0jHS7$gdVXrGMFTkOucLMqn$d2v^MBZIg&6c!z z3A(rlUH$umpNguk6M;4HU5-RGe9ul5&vG7@<-7(Tf25{KMFB0V(I4ESCFg0RbwA0c z&tc2NDXGs=YQm`7oo%SLIGVdRXLQ?v#e!+(~?*oGOlcMy_WfnD$Y&Ov16CEvvklaYEtqW<*T|4De~{d zy#ssLf0UAxa=7`T&C7gwa}x8Y&$SV_mm($iv=iFhV&_e9x=#DDHx+x-7}%{B)!(Qb z2^)4;yUZPdLe|yei!)o*<>9Eg<^<1(&(d`uTDQ1cV@b4EeUMA6IF*O#yijf3ueIZipOqZ`HQtlW0Z`^p?kT@o*<0 zz2ENX*oJpQkm|Rb>IqSt->*7x>BOr}oLe;7;`+u!?~GJ*NPX*^^S zGOm(RnZVsImvlKqay*x^9gpJ}H?xyM1d*glg%9SScB2T+Lv8`E`940N)9(q{KWyAZ ze;JN-E6S-J6}M(Xt}>3fh34T# z!Yb<6@_DEor59y8xB3kirKdupfVEwcf35X1@Lv*%mdHJk>}_|*CL`o49r)oU{!GZ~ zyW3>sjyP*ujt4=yywO`_P%*P(c2NWVxjvpUBg*2W|nS10TC@6$<{ro zEg*&-yPHAM)oQ_!x_%8?G;VVRa(eB)s-6m#-3Xyl6Z%}1;t3=OSNlk@n$l1ie{+e9 zi^L56D=&$%T=A@fphBTV0>R_XG!NZ2Du^T7yKYw{z|N^n6t(4$39b@xZO@0ve)^e^ z{bOHV$y;ShT^e&Ak{ZkY6X-^6lG;?IYsIETSfFTi?62j{l2;s7Ogg%%LE~Ns5ChN; zrg6S@CQ`?x;f;`NINIl&Zi~;LePk7`X&i3Sa5(wiT|4V83*9!4BNk^(g#1U97-2_!c+wx9 z){mc0eci;}xp3+BB1-2i0GWw2S`u7b_hD;|uc>~0NjkZetx?pqt%<~Qe`*SMYaWuG zEQ9zZTSUSq1a_g0_H0rfhdjKl(u=x4z)9UmuU`Z~nVWePO{G;y^`;WO20;oC$e;S( zj)G?=R#5Wk4KS1kOb_WtxjBwl-*an90xrMngP_m2MFv4dSLE4^XY^sqpHhv0rPZT^ zjr<939r@24n=CVC0@ju>e{fLu>--Xzy8Ii>XFD$7ye+Oz@ow^N_Pj%uakaRE)LdI% zfO|9w|0QpW^Q4Wma%qCf9a8-K`Fq5zi?b_NV5TFO(nufx{kIr$57M60iW{j%InDHKXen&4u(`q*)fu# z$wX)R%fJ2WzyHU7{>wl8{jYz_zy1CC diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201906-01.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201906-01.xml new file mode 100644 index 0000000000..43586e2bcd --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201906-01.xml @@ -0,0 +1,50 @@ + + + + Exim: Remote command execution + A vulnerability in Exim could allow a remote attacker to execute + arbitrary commands. + + exim + 2019-06-06 + 2019-06-06 + 687336 + remote + + + 4.92 + 4.92 + + + +

Exim is a message transfer agent (MTA) designed to be a a highly + configurable, drop-in replacement for sendmail. +

+
+ +

A vulnerability was discovered in how Exim validates recipient addresses + in the deliver_message() function. +

+
+ +

A remote attacker could execute arbitrary commands by sending an email + with a specially crafted recipient address to the affected system. +

+
+ +

There is no known workaround at this time.

+
+ +

All Exim users should upgrade to the latest version:

+ + + # emerge --sync + # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.92" + +
+ + CVE-2019-10149 + + whissi + whissi +
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-01.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-01.xml new file mode 100644 index 0000000000..e2b90baf12 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-01.xml @@ -0,0 +1,69 @@ + + + + Binutils: Multiple vulnerabilities + Multiple vulnerabilities have been found in Binutils, the worst of + which may allow remote attackers to cause a Denial of Service condition. + + binutils + 2019-08-03 + 2019-08-03 + 672904 + 672910 + 674668 + 682698 + 682702 + remote + + + 2.32-r1 + 2.32-r1 + + + +

The GNU Binutils are a collection of tools to create, modify and analyse + binary files. Many of the files use BFD, the Binary File Descriptor + library, to do low-level manipulation. +

+
+ +

Multiple vulnerabilities have been discovered in Binutils. Please review + the referenced CVE identifiers for details. +

+
+ +

A remote attacker, by enticing a user to compile/execute a specially + crafted ELF, object, PE, or binary file, could possibly cause a Denial of + Service condition or have other unspecified impacts. +

+
+ +

There is no known workaround at this time.

+
+ +

All Binutils users should upgrade to the latest version:

+ + + # emerge --sync + # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.32-r1" + +
+ + CVE-2018-10372 + CVE-2018-10373 + CVE-2018-10534 + CVE-2018-10535 + CVE-2018-12641 + CVE-2018-12697 + CVE-2018-12698 + CVE-2018-12699 + CVE-2018-12700 + CVE-2018-13033 + CVE-2018-19931 + CVE-2018-19932 + CVE-2018-20002 + CVE-2018-20651 + + b-man + b-man +
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-02.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-02.xml new file mode 100644 index 0000000000..0c73ede6a3 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201908-02.xml @@ -0,0 +1,54 @@ + + + + libpng: Multiple vulnerabilities + Multiple vulnerabilities have been found in libpng, the worst of + which could result in a Denial of Service condition. + + libpng + 2019-08-03 + 2019-08-03 + 683366 + remote + + + 1.6.37 + 1.6.37 + + + +

libpng is a standard library used to process PNG (Portable Network + Graphics) images. It is used by several programs, including web browsers + and potentially server processes. +

+
+ +

Multiple vulnerabilities have been discovered in libpng. Please review + the CVE identifiers referenced below for details. +

+
+ +

A remote attacker, by enticing a user to process a specially crafted PNG + file, could cause a Denial of Service condition. +

+
+ +

There is no known workaround at this time.

+
+ +

All libpng users should upgrade to the latest version:

+ + + # emerge --sync + # emerge --ask --oneshot --verbose ">=media-libs/libpng-1.6.37" + + +
+ + CVE-2018-14048 + CVE-2018-14550 + CVE-2019-7317 + + BlueKnight + b-man +
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk index d541701583..90b0d14f41 100644 --- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk @@ -1 +1 @@ -Thu, 25 Apr 2019 12:38:53 +0000 +Sat, 03 Aug 2019 15:08:59 +0000 diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit index 41a53add6e..c3813a24eb 100644 --- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit +++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit @@ -1 +1 @@ -42c9d977ba183a5bc173b70ad145977fc6705eda 1556150376 2019-04-24T23:59:36+00:00 +0228c86b4f0e69207e66dbe5822dd7411fb99b01 1564831599 2019-08-03T11:26:39+00:00