All of lore.kernel.org
 help / color / mirror / Atom feed
From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/14] Patch review
Date: Tue, 21 Jan 2025 19:02:56 -0800	[thread overview]
Message-ID: <cover.1737514842.git.steve@sakoman.com> (raw)

Please review this set of changes for scarthgap and have comments back by
end of day Thursday, January 23

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/856

The following changes since commit 92eea72a25e553c698bee9e3f551a5880bd4631c:

  systemd: enable create-log-dirs (2025-01-13 06:16:07 -0800)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

Aleksandar Nikolic (1):
  scripts/install-buildtools: Update to 5.0.6

Alexis Lothoré (1):
  oeqa/ssh: allow to retrieve raw, unformatted ouput

Catalin Popescu (1):
  Revert "bluez5: remove configuration files from install task"

Chen Qi (1):
  libgfortran: fix buildpath QA issue

Divya Chellam (1):
  wget: fix CVE-2024-10524

Esben Haabendal (1):
  pulseaudio: fix webrtc audio depdency

Hitendra Prajapati (1):
  ofono: Fix multiple CVEs

Peter Marko (4):
  socat: patch CVE-2024-54661
  ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542
  ofono: patch CVE-2023-4232
  ofono: patch CVE-2023-4235

Ross Burton (2):
  classes/nativesdk: also override TUNE_PKGARCH
  classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package
    architecture

Zhang Peng (1):
  avahi: fix CVE-2024-52616

 meta/classes-recipe/nativesdk.bbclass         |   1 +
 meta/classes-recipe/qemu.bbclass              |   8 +-
 meta/lib/oeqa/core/target/ssh.py              |  16 +-
 meta/recipes-connectivity/avahi/avahi_0.8.bb  |   1 +
 .../avahi/files/CVE-2024-52616.patch          | 104 +++++++++
 meta/recipes-connectivity/bluez5/bluez5.inc   |   8 +
 .../ofono/ofono/CVE-2023-4232.patch           |  31 +++
 .../ofono/ofono/CVE-2023-4235.patch           |  38 ++++
 .../ofono/ofono/CVE-2024-7539.patch           |  88 ++++++++
 ...024-7540_CVE-2024-7541_CVE-2024-7542.patch |  52 +++++
 .../ofono/ofono/CVE-2024-7543.patch           |  30 +++
 .../ofono/ofono/CVE-2024-7544.patch           |  30 +++
 .../ofono/ofono/CVE-2024-7545.patch           |  32 +++
 .../ofono/ofono/CVE-2024-7546.patch           |  30 +++
 .../ofono/ofono/CVE-2024-7547.patch           |  29 +++
 meta/recipes-connectivity/ofono/ofono_2.4.bb  |   9 +
 .../socat/files/CVE-2024-54661.patch          | 113 ++++++++++
 .../socat/socat_1.8.0.0.bb                    |   1 +
 meta/recipes-devtools/gcc/gcc-testsuite.inc   |   4 +-
 meta/recipes-devtools/gcc/libgfortran.inc     |   2 +-
 .../wget/wget/CVE-2024-10524.patch            | 197 ++++++++++++++++++
 meta/recipes-extended/wget/wget_1.21.4.bb     |   1 +
 .../pulseaudio/pulseaudio.inc                 |   2 +-
 scripts/install-buildtools                    |   4 +-
 24 files changed, 811 insertions(+), 20 deletions(-)
 create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2024-52616.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-4232.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-4235.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7539.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7540_CVE-2024-7541_CVE-2024-7542.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7543.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7544.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7545.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7546.patch
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7547.patch
 create mode 100644 meta/recipes-connectivity/socat/files/CVE-2024-54661.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2024-10524.patch

-- 
2.43.0



             reply	other threads:[~2025-01-22  3:03 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-01-22  3:02 Steve Sakoman [this message]
2025-01-22  3:02 ` [OE-core][scarthgap 01/14] wget: fix CVE-2024-10524 Steve Sakoman
2025-01-22  3:02 ` [OE-core][scarthgap 02/14] ofono: Fix multiple CVEs Steve Sakoman
2025-01-22  3:02 ` [OE-core][scarthgap 03/14] avahi: fix CVE-2024-52616 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 04/14] socat: patch CVE-2024-54661 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 05/14] ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 06/14] ofono: patch CVE-2023-4232 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 07/14] ofono: patch CVE-2023-4235 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 08/14] scripts/install-buildtools: Update to 5.0.6 Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 09/14] oeqa/ssh: allow to retrieve raw, unformatted ouput Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 10/14] Revert "bluez5: remove configuration files from install task" Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 11/14] classes/nativesdk: also override TUNE_PKGARCH Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 12/14] classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 13/14] pulseaudio: fix webrtc audio depdency Steve Sakoman
2025-01-22  3:03 ` [OE-core][scarthgap 14/14] libgfortran: fix buildpath QA issue Steve Sakoman
  -- strict thread matches above, loose matches on Subject: below --
2025-05-30 21:21 [OE-core][scarthgap 00/14] Patch review Steve Sakoman
2025-04-23 13:20 Steve Sakoman
2025-02-11 20:08 Steve Sakoman
2024-09-04 21:32 Steve Sakoman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1737514842.git.steve@sakoman.com \
    --to=steve@sakoman.com \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.