Hi Stewards and all:

  I collect current patch lists in devel mail list. Those patch contributors request to add them for 201902 stable tag. Because we have enter into Soft Feature Freeze, I want to collect your feedback for them. If any patches are missing, please reply this mail to add them.

 

Feature List (under review):

https://edk2.groups.io/g/devel/topic/patch_v3_0_1_add_pcd_to/69401948 [PATCH v3 0/1] Add PCD to disable safe string constraint assertions (solution under discussion)

https://edk2.groups.io/g/devel/message/54122 [PATCH 1/1] ShellPkg: Add support for input with separately reported modifiers (under review, is this a feature or bug in the disucssion)

 

Bug List (reviewed):

https://edk2.groups.io/g/devel/message/54416 [PATCH v2 00/10] Fix false negative issue in DxeImageVerificationHandler(CVE-2019-14575)

https://edk2.groups.io/g/devel/message/54523 [PATCH v1][edk2-stable202002] MdeModulePkg/SdMmcPciHcDxe: Fix double PciIo Unmap in TRB creation (CVE-2019-14587)

https://edk2.groups.io/g/devel/message/54510 [PATCH v6 0/2] Enhancement and Fixes to BaseHashApiLib

https://edk2.groups.io/g/devel/message/53703 [PATCH V2] UefiCpuPkg RegisterCpuFeaturesLib: Match data type and format specifier

https://edk2.groups.io/g/devel/message/53577 [PATCH v1 1/1] ShellPkg: acpiview: Remove duplicate ACPI structure size definitions

https://edk2.groups.io/g/devel/message/54192 [PATCH v2 1/1] ShellPkg: acpiview: Validate ACPI table 'Length' field

 

Bug List (under review)

https://edk2.groups.io/g/devel/message/54361 [PATCH 1/1] NetworkPkg/ArpDxe: Recycle invalid ARP packets(CVE-2019-14559)

https://edk2.groups.io/g/devel/message/54569 [PATCH v3] NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559)

https://edk2.groups.io/g/devel/message/54448 [PATCH v1 1/1] ShellPkg: acpiview: Prevent infinite loop if structure length is 0

 

Thanks

Liming