[OE-core][dunfell 0/5] Patch review

Steve Sakoman
2023-12-19T13:48:39Z

Please review this set of changes for dunfell and have comments back by
end of day Thursday, December 21

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6348

The following changes since commit 55157aa2f8b157b1cc63e1134d9eba6db0cf16da:

build-appliance-image: Update to dunfell head revision (2023-12-11 05:13:51 -1000)

are available in the Git repository at:

https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Bhabu Bindu (1):
glibc: Fix CVE-2023-4813

Lee Chee Yang (2):
perl: fix CVE-2023-31484/47038/47100
binutils: Fix CVE-2023-25584

Vijay Anusuri (1):
libxml2: Backport fix for CVE-2021-3516

Vivek Kumbhar (1):
libsndfile: fix CVE-2021-4156 heap out-of-bounds read in src/flac.c in
flac_buffer_copy

.../glibc/glibc/CVE-2023-4813.patch | 986 ++++++++++++++++++
meta/recipes-core/glibc/glibc_2.31.bb | 1 +
.../libxml/libxml2/CVE-2021-3516.patch | 35 +
meta/recipes-core/libxml/libxml2_2.9.10.bb | 1 +
.../binutils/binutils-2.34.inc | 1 +
.../binutils/binutils/CVE-2023-25584.patch | 530 ++++++++++
.../perl/files/CVE-2023-31484.patch | 27 +
.../perl/files/CVE-2023-47038.patch | 121 +++
meta/recipes-devtools/perl/perl_5.30.1.bb | 2 +
.../libsndfile1/CVE-2021-4156.patch | 30 +
.../libsndfile/libsndfile1_1.0.28.bb | 1 +
11 files changed, 1735 insertions(+)
create mode 100644 meta/recipes-core/glibc/glibc/CVE-2023-4813.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2021-3516.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2023-25584.patch
create mode 100644 meta/recipes-devtools/perl/files/CVE-2023-31484.patch
create mode 100644 meta/recipes-devtools/perl/files/CVE-2023-47038.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2021-4156.patch

--
2.34.1