All of lore.kernel.org
 help / color / mirror / Atom feed
* [OE-core][walnascar 00/19] Patch review
@ 2025-07-02  3:11 Steve Sakoman
  2025-07-02  3:11 ` [OE-core][walnascar 01/19] linux/generate-cve-exclusions: use data from CVEProject Steve Sakoman
                   ` (18 more replies)
  0 siblings, 19 replies; 21+ messages in thread
From: Steve Sakoman @ 2025-07-02  3:11 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for walnascar and have comments back by
end of day Thursday, July 4

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/1924

The following changes since commit f359677709aba80735a38578475a34e1b83d321c:

  tcf-agent: correct the SRC_URI (2025-06-30 09:11:01 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Bruce Ashfield (3):
  linux-yocto/6.12: revert riscv config sync
  linux-yocto/6.12: update to v6.12.31
  linux-yocto/6.12: libbpf: silence maybe-uninitialized warning from
    clang

Daniel Turull (3):
  linux/generate-cve-exclusions: use data from CVEProject
  linux/cve-exclusion: Execute the script after changing to the new data
    source
  cve-exclusions: correct cve status for 5 entries

Mathieu Dubois-Briand (2):
  linux/cve-exclusion: Update exclusions after kernel update
  linux/cve-exclusion: Update exclusions after kernel update

Niko Mauno (3):
  cve-exclusion_6.12.inc: Update using current cvelistV5
  linux: cve-exclusions: Fix false negatives
  linux: cve-exclusions: Amend terminology

Peter Marko (4):
  linux/cve-exclusion: update with latest cvelistV5
  linux/cve-exclusion: correct fixed-version calculation
  linux/cve-exclusion: update exclusions after script fixes
  linux/cve-exclusion: do not shift first_affected

Randy MacLeod (1):
  linux: add CVE_STATUS for a chrome* bug

Ross Burton (3):
  linux/generate-cve-exclusions: show the name and version of the data
    source
  linux-yocto: refresh CVE exclusions
  linux-yocto: refresh CVE exclusion list for 6.12.31

 meta/recipes-kernel/linux/cve-exclusion.inc   |   125 +
 .../linux/cve-exclusion_6.12.inc              | 13028 ++++++++++++----
 .../linux/generate-cve-exclusions.py          |   122 +-
 .../linux/linux-yocto-rt_6.12.bb              |     6 +-
 .../linux/linux-yocto-tiny_6.12.bb            |     6 +-
 meta/recipes-kernel/linux/linux-yocto_6.12.bb |    28 +-
 6 files changed, 9931 insertions(+), 3384 deletions(-)

-- 
2.43.0



^ permalink raw reply	[flat|nested] 21+ messages in thread
* [OE-core][walnascar 00/19] Patch review
@ 2025-08-26 13:40 Steve Sakoman
  0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2025-08-26 13:40 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for walnascar and have comments back by
end of day Thursday, August 28

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/2268

The following changes since commit 4b785d2d416944a78bf4c09e85a508ae80e35ca4:

  linux-firmware: fix FILES to drop RDEPENDS on full package (2025-08-20 13:27:57 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Archana Polampalli (10):
  gst-devtools: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-libav: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-bad: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-base: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-good: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-ugly: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-python: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-rtsp-server: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-vaapi: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0: upgrade 1.24.12 -> 1.24.13

Michael Halstead (2):
  yocto-uninative: Update to 4.8 for GCC 15.1
  yocto-uninative: Update to 4.9 for glibc 2.42

Peter Marko (7):
  gnutls: mark CVE-2025-32989 and CVE-2025-32990 as fixed
  libarchive: patch CVE-2025-5916
  libarchive: patch CVE-2025-5917
  libarchive: patch CVE-2025-5918
  binutils: set status for CVE-2025-8224
  cve-update-db-native: fix fetcher for CVEs missing nodes
  vim: upgrade 9.1.1198 -> 9.1.1652

 meta/conf/distro/include/yocto-uninative.inc  |  10 +-
 .../recipes-core/meta/cve-update-db-native.bb |   2 +-
 .../binutils/binutils-2.44.inc                |   1 +
 .../0001-Improve-lseek-handling-2564.patch    | 319 ++++++++++++++++++
 .../libarchive/libarchive/CVE-2025-5916.patch | 111 ++++++
 .../libarchive/libarchive/CVE-2025-5917.patch |  49 +++
 .../libarchive/CVE-2025-5918-01.patch         | 217 ++++++++++++
 .../libarchive/CVE-2025-5918-02.patch         |  51 +++
 .../libarchive/libarchive_3.7.9.bb            |   5 +
 ...ols_1.24.12.bb => gst-devtools_1.24.13.bb} |   2 +-
 ...24.12.bb => gstreamer1.0-libav_1.24.13.bb} |   2 +-
 ...bb => gstreamer1.0-plugins-bad_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-base_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-good_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-ugly_1.24.13.bb} |   2 +-
 ...4.12.bb => gstreamer1.0-python_1.24.13.bb} |   2 +-
 ...bb => gstreamer1.0-rtsp-server_1.24.13.bb} |   2 +-
 ...24.12.bb => gstreamer1.0-vaapi_1.24.13.bb} |   2 +-
 ...1.0_1.24.12.bb => gstreamer1.0_1.24.13.bb} |   2 +-
 meta/recipes-support/gnutls/gnutls_3.8.10.bb  |   3 +
 ...src-Makefile-improve-reproducibility.patch |  10 +-
 .../vim/files/disable_acl_header_check.patch  |  12 +-
 .../vim/files/no-path-adjust.patch            |   2 +-
 meta/recipes-support/vim/vim.inc              |   7 +-
 24 files changed, 788 insertions(+), 31 deletions(-)
 create mode 100644 meta/recipes-extended/libarchive/libarchive/0001-Improve-lseek-handling-2564.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5916.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5917.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5918-01.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5918-02.patch
 rename meta/recipes-multimedia/gstreamer/{gst-devtools_1.24.12.bb => gst-devtools_1.24.13.bb} (95%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-libav_1.24.12.bb => gstreamer1.0-libav_1.24.13.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-bad_1.24.12.bb => gstreamer1.0-plugins-bad_1.24.13.bb} (98%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-base_1.24.12.bb => gstreamer1.0-plugins-base_1.24.13.bb} (98%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-good_1.24.12.bb => gstreamer1.0-plugins-good_1.24.13.bb} (97%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-ugly_1.24.12.bb => gstreamer1.0-plugins-ugly_1.24.13.bb} (94%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-python_1.24.12.bb => gstreamer1.0-python_1.24.13.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-rtsp-server_1.24.12.bb => gstreamer1.0-rtsp-server_1.24.13.bb} (90%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-vaapi_1.24.12.bb => gstreamer1.0-vaapi_1.24.13.bb} (95%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0_1.24.12.bb => gstreamer1.0_1.24.13.bb} (97%)

-- 
2.43.0



^ permalink raw reply	[flat|nested] 21+ messages in thread

end of thread, other threads:[~2025-08-26 13:41 UTC | newest]

Thread overview: 21+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-07-02  3:11 [OE-core][walnascar 00/19] Patch review Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 01/19] linux/generate-cve-exclusions: use data from CVEProject Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 02/19] linux/cve-exclusion: Execute the script after changing to the new data source Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 03/19] linux/cve-exclusion: Update exclusions after kernel update Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 04/19] cve-exclusions: correct cve status for 5 entries Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 05/19] linux/cve-exclusion: update with latest cvelistV5 Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 06/19] linux/cve-exclusion: correct fixed-version calculation Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 07/19] linux/cve-exclusion: update exclusions after script fixes Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 08/19] linux/cve-exclusion: do not shift first_affected Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 09/19] linux/cve-exclusion: Update exclusions after kernel update Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 10/19] linux: add CVE_STATUS for a chrome* bug Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 11/19] cve-exclusion_6.12.inc: Update using current cvelistV5 Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 12/19] linux: cve-exclusions: Fix false negatives Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 13/19] linux: cve-exclusions: Amend terminology Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 14/19] linux/generate-cve-exclusions: show the name and version of the data source Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 15/19] linux-yocto: refresh CVE exclusions Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 16/19] linux-yocto/6.12: revert riscv config sync Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 17/19] linux-yocto/6.12: update to v6.12.31 Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 18/19] linux-yocto: refresh CVE exclusion list for 6.12.31 Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 19/19] linux-yocto/6.12: libbpf: silence maybe-uninitialized warning from clang Steve Sakoman
  -- strict thread matches above, loose matches on Subject: below --
2025-08-26 13:40 [OE-core][walnascar 00/19] Patch review Steve Sakoman

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.