[OE-core][dunfell 0/5] Patch review

Steve Sakoman
2024-04-10T13:11:08Z

Please review this set of changes for dunfell and have comments back by
end of day Friday, April 12

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6774

The following changes since commit 47ce772102b45db14dc21112367534ea1c37e33c:

perf: bump PR to deal with sstate corruption on autobuilder (2024-04-02 05:46:56 -1000)

are available in the Git repository at:

https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Ashish Sharma (3):
go: Backport fix for CVE-2024-24784
xserver-xorg: Backport fix for CVE-2024-31081
xserver-xorg: Backport fix for CVE-2024-31080

Colin McAllister (1):
licenses.conf: Add missing LGPLv2.0+ license

Vijay Anusuri (1):
ncurses: Backport fix for CVE-2023-50495

meta/conf/licenses.conf | 1 +
.../ncurses/files/CVE-2023-50495.patch | 79 +++++++
meta/recipes-core/ncurses/ncurses_6.2.bb | 1 +
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2024-24784.patch | 205 ++++++++++++++++++
.../xserver-xorg/CVE-2024-31080.patch | 49 +++++
.../xserver-xorg/CVE-2024-31081.patch | 47 ++++
.../xorg-xserver/xserver-xorg_1.20.14.bb | 2 +
8 files changed, 385 insertions(+)
create mode 100644 meta/recipes-core/ncurses/files/CVE-2023-50495.patch
create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2024-24784.patch
create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-31080.patch
create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-31081.patch

--
2.34.1