From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0D85CC433FE for ; Wed, 2 Nov 2022 02:42:32 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web12.1979.1667356942236447095 for ; Tue, 01 Nov 2022 19:42:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=bXuIqiAt; spf=softfail (domain: sakoman.com, ip: 209.85.214.172, mailfrom: steve@sakoman.com) Received: by mail-pl1-f172.google.com with SMTP id d24so15305455pls.4 for ; Tue, 01 Nov 2022 19:42:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=9CUoH96QfdLByyZdc9JBKhwhKlP79zPCJ1z5SGgTj6c=; b=bXuIqiAtp3w3GEsPek4iEH5gtcVnd+3qbKkCG6yIID4GMwHds6pPBQpAvknQdJF28/ 316WGHdnufmpyntJqZJcZYcKxIuigqybtqQP8eR8e1p1dXXAUc/kfsYiuYvtbKv+84oT Dhge5FjmcqQmMIMFks7INFFLl40pQPcQZvkUMCIgifx418s950kG0f+B4GZgMUL3pLgy N3vP+W0WjBbQaaPEHGEjWXVgBz23NRXk/+SKARlieoRaWLv0GsbfNtAVX2qXX/Bjh5j7 uCmsNx/Ai0IZlbbVTDE8OZGXU9l20/9YpqjN5gxaAh94m+5YIyiZ+6HkLnWsXCPV0+2b wnpw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=9CUoH96QfdLByyZdc9JBKhwhKlP79zPCJ1z5SGgTj6c=; b=YydXcWrkg6zPjAhVHPvCBIzy6utE8EZco/d2plEvWvOwfBFAVGCyapPTCgdSyEseGX Ty+WaZNrZGAEyeW+5BpH/SXbOtu3EelBTv5Q2wAlaKixOrN07ACAwEaL807qPv7mbL7O qi8wEytadcysvBUN9OsTLcjsrKuh+C4BqIdM9Lg+MWr+1TfxteDHG6/JClkqIXdrOYNY 4XYJqrYeQdpRfc5CmNKmuuftxym0oLTkehL4yZddkauIsUvJ+qE2j4nkwye7nN0ksdhi oMTWJiHbOAt8veDzlKvBk4qvX3iWdwtuzhjTBK+zzc8mIZ+4mK0yQ0UTnT6eD3Jk3vVY UnKw== X-Gm-Message-State: ACrzQf2XzxtykcXIUihow7Eb/OkD7LahW+Mqc4TazpYcfmGKbJdmv++v 582Ljl9sxvHbzH/4bTGfae/Wzv9BY4nPlHyM X-Google-Smtp-Source: AMsMyM6UtNAocgmt1P78gcIYM7pbhN7RZhuvCyB01BNEr5jrbNidqWjTI6IgyNwAWLRZWynq9NPNtg== X-Received: by 2002:a17:902:aa44:b0:186:7a6b:7bbd with SMTP id c4-20020a170902aa4400b001867a6b7bbdmr22822536plr.78.1667356941037; Tue, 01 Nov 2022 19:42:21 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id d18-20020a170902e15200b00186da904da0sm1462846pla.154.2022.11.01.19.42.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 01 Nov 2022 19:42:20 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][langdale 00/20] Patch review Date: Tue, 1 Nov 2022 16:41:50 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 02 Nov 2022 02:42:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/172540 Please review this set of patches for langdale and have comments back by end of day Friday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4401 The following changes since commit d40f7ddcfbdd5cb1d9f96271fefddf67e9044bb9: openssl: Fix SSL_CERT_FILE to match ca-certs location (2022-10-26 23:01:13 +0100) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/langdale-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/langdale-nut Hitendra Prajapati (1): openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption Jan-Simon Moeller (1): buildtools-tarball: export certificates to python and curl Jeremy Puhlman (1): qemu-native: Add PACKAGECONFIG option for jack Joshua Watt (2): runqemu: Do not perturb script environment runqemu: Fix gl-es argument from causing other arguments to be ignored Kai Kang (1): mesa: only apply patch to fix ALWAYS_INLINE for native Liam Beguin (1): meson: make wrapper options sub-command specific Qiu, Zheng (1): tiff: fix a typo for CVE-2022-2953.patch Ross Burton (6): libx11: apply the fix for CVE-2022-3554 xserver-xorg: ignore CVE-2022-3553 as it is XQuartz-specific xserver-xorg: backport fixes for CVE-2022-3550 and CVE-2022-3551 tiff: fix a number of CVEs qemu: backport the fix for CVE-2022-3165 pango: upgrade 1.50.9 -> 1.50.10 Teoh Jay Shen (1): vim: Upgrade 9.0.0598 -> 9.0.0614 Vyacheslav Yurkov (1): overlayfs: Allow not used mount points wangmy (4): meson: upgrade 0.63.2 -> 0.63.3 mtools: upgrade 4.0.40 -> 4.0.41 ifupdown: upgrade 0.8.37 -> 0.8.39 gnutls: upgrade 3.7.7 -> 3.7.8 meta/classes-recipe/overlayfs.bbclass | 6 +- meta/lib/oe/overlayfs.py | 6 +- .../openssl/openssl/CVE-2022-3358.patch | 55 ++ .../openssl/openssl_3.0.5.bb | 1 + ...{ifupdown_0.8.37.bb => ifupdown_0.8.39.bb} | 2 +- meta/recipes-core/meta/buildtools-tarball.bb | 2 + .../meson/meson/meson-wrapper | 21 +- .../{meson_0.63.2.bb => meson_0.63.3.bb} | 2 +- .../mtools/disable-hardcoded-configs.patch | 6 +- .../{mtools_4.0.40.bb => mtools_4.0.41.bb} | 2 +- meta/recipes-devtools/qemu/qemu.inc | 2 + .../qemu/qemu/CVE-2022-3165.patch | 59 ++ meta/recipes-graphics/mesa/mesa.inc | 4 +- .../{pango_1.50.9.bb => pango_1.50.10.bb} | 2 +- ...ak-in-XRegisterIMInstantiateCallback.patch | 57 ++ .../recipes-graphics/xorg-lib/libx11_1.8.1.bb | 1 + .../xorg-xserver/xserver-xorg.inc | 2 + ...possible-memleaks-in-XkbGetKbdByName.patch | 63 ++ ...ntedString-against-request-length-at.patch | 38 + .../xorg-xserver/xserver-xorg_21.1.4.bb | 2 + ...-of-TIFFTAG_INKNAMES-and-related-TIF.patch | 266 +++++++ ...fcrop-S-option-Make-decision-simpler.patch | 36 + ...-incompatibility-of-Z-X-Y-z-options-.patch | 59 ++ ...ines-require-a-larger-buffer-fixes-2.patch | 653 ++++++++++++++++++ .../libtiff/files/CVE-2022-2953.patch | 2 +- meta/recipes-multimedia/libtiff/tiff_4.4.0.bb | 5 +- .../{gnutls_3.7.7.bb => gnutls_3.7.8.bb} | 2 +- meta/recipes-support/vim/vim.inc | 4 +- scripts/runqemu | 28 +- 29 files changed, 1356 insertions(+), 32 deletions(-) create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2022-3358.patch rename meta/recipes-core/ifupdown/{ifupdown_0.8.37.bb => ifupdown_0.8.39.bb} (97%) rename meta/recipes-devtools/meson/{meson_0.63.2.bb => meson_0.63.3.bb} (98%) rename meta/recipes-devtools/mtools/{mtools_4.0.40.bb => mtools_4.0.41.bb} (93%) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2022-3165.patch rename meta/recipes-graphics/pango/{pango_1.50.9.bb => pango_1.50.10.bb} (94%) create mode 100644 meta/recipes-graphics/xorg-lib/libx11/0001-fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-proof-GetCountedString-against-request-length-at.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-Revised-handling-of-TIFFTAG_INKNAMES-and-related-TIF.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-S-option-Make-decision-simpler.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-disable-incompatibility-of-Z-X-Y-z-options-.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-subroutines-require-a-larger-buffer-fixes-2.patch rename meta/recipes-support/gnutls/{gnutls_3.7.7.bb => gnutls_3.7.8.bb} (97%) -- 2.25.1