Openembedded Core Discussions
 help / color / mirror / Atom feed
* [honister][PATCH 00/17] Review request
@ 2021-11-16 16:31 Anuj Mittal
  2021-11-16 16:31 ` [honister][PATCH 01/17] avahi: update CVE id fixed by local-ping.patch Anuj Mittal
                   ` (16 more replies)
  0 siblings, 17 replies; 19+ messages in thread
From: Anuj Mittal @ 2021-11-16 16:31 UTC (permalink / raw)
  To: openembedded-core

Please review these changes for honister. No issues seen on autobuilder.

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2930

Thanks,

Anuj

The following changes since commit d2cba06c27c87c64423636153c0f186c5f45b147:

  glibc-version.inc: remove branch= from GLIBC_GIT_URI (2021-11-12 10:57:32 +0800)

are available in the Git repository at:

  git://push.openembedded.org/openembedded-core-contrib anujm/honister

Bruce Ashfield (4):
  linux-yocto/5.14: update to v5.14.16
  linux-yocto/5.10: update to v5.10.77
  linux-yocto/5.14: update to v5.14.17
  linux-yocto/5.10: update to v5.10.78

Chen Qi (1):
  avahi: update CVE id fixed by local-ping.patch

Jon Mason (1):
  scripts/lib/wic/help.py: Update Fedora Kickstart URLs

Kai Kang (2):
  squashfs-tools: follow-up fix for CVE-2021-41072
  convert-srcuri.py: use regex to check space in SRC_URI

Peter Kjellerstedt (1):
  insane.bbclass: Add a check for directories that are expected to be
    empty

Richard Purdie (6):
  mirrors: Add uninative mirror on kernel.org
  scripts/oe-package-browser: Fix after overrides change
  scripts/oe-package-browser: Handle no packages being built
  wpa-supplicant: Match package override to PACKAGES for pkg_postinst
  uninative: Add version to uninative tarball name
  mirrors: Add kernel.org sources mirror for downloads.yoctoproject.org

Ross Burton (2):
  vim: fix CVE-2021-3796, CVE-2021-3872, and CVE-2021-3875
  vim: add patch number to CVE-2021-3778 patch

 meta/classes/insane.bbclass                   | 30 ++++++
 meta/classes/mirrors.bbclass                  |  2 +
 meta/classes/uninative.bbclass                |  2 +-
 meta/conf/distro/include/yocto-uninative.inc  |  3 +-
 meta/conf/documentation.conf                  |  2 +
 .../avahi/files/local-ping.patch              |  1 +
 .../wpa-supplicant/wpa-supplicant_2.9.bb      |  2 +-
 .../squashfs-tools/CVE-2021-41072.patch       |  6 +-
 .../linux/linux-yocto-rt_5.10.bb              |  6 +-
 .../linux/linux-yocto-rt_5.14.bb              |  6 +-
 .../linux/linux-yocto-tiny_5.10.bb            |  8 +-
 .../linux/linux-yocto-tiny_5.14.bb            |  8 +-
 meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 ++---
 meta/recipes-kernel/linux/linux-yocto_5.14.bb | 26 ++---
 ...28-using-freed-memory-when-replacing.patch | 83 ++++++++++++++++
 ...llegal-memory-access-if-buffer-name-.patch | 86 ++++++++++++++++
 ...ml_get-error-after-search-with-range.patch | 72 ++++++++++++++
 ...nvalid-memory-access-when-scrolling-.patch | 97 +++++++++++++++++++
 .../vim/files/CVE-2021-3778.patch             | 37 ++++---
 meta/recipes-support/vim/vim.inc              |  8 +-
 scripts/contrib/convert-srcuri.py             |  8 +-
 scripts/lib/wic/help.py                       |  4 +-
 scripts/oe-pkgdata-browser                    |  8 +-
 23 files changed, 464 insertions(+), 65 deletions(-)
 create mode 100644 meta/recipes-support/vim/files/0002-patch-8.2.3428-using-freed-memory-when-replacing.patch
 create mode 100644 meta/recipes-support/vim/files/0003-patch-8.2.3487-illegal-memory-access-if-buffer-name-.patch
 create mode 100644 meta/recipes-support/vim/files/0004-patch-8.2.3489-ml_get-error-after-search-with-range.patch
 create mode 100644 meta/recipes-support/vim/files/0005-patch-8.2.3564-invalid-memory-access-when-scrolling-.patch

-- 
2.33.1



^ permalink raw reply	[flat|nested] 19+ messages in thread
* [honister][PATCH 00/17] Review request
@ 2021-12-14  1:20 Anuj Mittal
  0 siblings, 0 replies; 19+ messages in thread
From: Anuj Mittal @ 2021-12-14  1:20 UTC (permalink / raw)
  To: openembedded-core

Please review these changes for honister. No issues seen while testing
on autobuilder.

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3027

Thanks,

Anuj

The following changes since commit b8fa0c446ecb3f65d7c134426a07c6244959cdf7:

  libdrm: upgrade 2.4.108 -> 2.4.109 (2021-12-09 09:17:26 +0800)

are available in the Git repository at:

  git://push.openembedded.org/openembedded-core-contrib anujm/honister

Anuj Mittal (1):
  python3: upgrade 3.9.7 -> 3.9.9

Bruce Ashfield (4):
  linux-yocto/5.14: update to v5.14.21
  linux-yocto/5.10: update to v5.10.82
  linux-yocto-rt/5.10: update to -rt56
  kern-tools: bug fixes and kgit-gconfig

Changqing Li (1):
  openssh: fix CVE-2021-41617

Mingli Yu (3):
  ncurses: fix CVE-2021-39537
  bind: fix CVE-2021-25219
  packagedata.py: silence a DeprecationWarning

Richard Purdie (1):
  gcc: Add CVE-2021-37322 to the list of CVEs to ignore

Ross Burton (3):
  runqemu: check the qemu PID has been set before kill()ing it
  oe/license: implement ast.NodeVisitor.visit_Constant
  license.bbclass: implement ast.NodeVisitor.visit_Constant

Stefan Herbrechtsmeier (2):
  recipetool: Set master branch only as fallback
  selftest/devtool: Check branch in git fetch

Steve Sakoman (1):
  cve-extra-exclusions: add db CVEs to exclusion list

Thomas Perrot (1):
  uboot-sign: fix the concatenation when multiple U-BOOT configurations
    are specified

 meta/classes/license.bbclass                  |  4 +
 meta/classes/uboot-sign.bbclass               | 16 +++-
 .../distro/include/cve-extra-exclusions.inc   |  9 ++-
 meta/lib/oe/license.py                        |  6 ++
 meta/lib/oe/packagedata.py                    |  2 +-
 meta/lib/oeqa/selftest/cases/devtool.py       |  5 +-
 .../bind/bind-9.16.20/CVE-2021-25219-1.patch  | 76 +++++++++++++++++++
 .../bind/bind-9.16.20/CVE-2021-25219-2.patch  | 65 ++++++++++++++++
 .../recipes-connectivity/bind/bind_9.16.20.bb |  2 +
 .../openssh/openssh/CVE-2021-41617.patch      | 48 ++++++++++++
 .../openssh/openssh_8.7p1.bb                  |  1 +
 .../ncurses/files/CVE-2021-39537.patch        | 65 ++++++++++++++++
 meta/recipes-core/ncurses/ncurses_6.2.bb      |  1 +
 meta/recipes-devtools/gcc/gcc-11.2.inc        |  3 +
 ...-detection-of-mips-architecture-for-.patch | 20 +++--
 .../{python3_3.9.7.bb => python3_3.9.9.bb}    |  2 +-
 .../kern-tools/kern-tools-native_git.bb       |  5 +-
 .../linux/linux-yocto-rt_5.10.bb              |  6 +-
 .../linux/linux-yocto-rt_5.14.bb              |  6 +-
 .../linux/linux-yocto-tiny_5.10.bb            |  8 +-
 .../linux/linux-yocto-tiny_5.14.bb            |  8 +-
 meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++---
 meta/recipes-kernel/linux/linux-yocto_5.14.bb | 26 +++----
 scripts/lib/recipetool/create.py              | 15 ++--
 scripts/runqemu                               |  3 +-
 25 files changed, 358 insertions(+), 68 deletions(-)
 create mode 100644 meta/recipes-connectivity/bind/bind-9.16.20/CVE-2021-25219-1.patch
 create mode 100644 meta/recipes-connectivity/bind/bind-9.16.20/CVE-2021-25219-2.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2021-41617.patch
 create mode 100644 meta/recipes-core/ncurses/files/CVE-2021-39537.patch
 rename meta/recipes-devtools/python/{python3_3.9.7.bb => python3_3.9.9.bb} (99%)

-- 
2.33.1



^ permalink raw reply	[flat|nested] 19+ messages in thread

end of thread, other threads:[~2021-12-14  1:21 UTC | newest]

Thread overview: 19+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-11-16 16:31 [honister][PATCH 00/17] Review request Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 01/17] avahi: update CVE id fixed by local-ping.patch Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 02/17] mirrors: Add uninative mirror on kernel.org Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 03/17] squashfs-tools: follow-up fix for CVE-2021-41072 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 04/17] vim: fix CVE-2021-3796, CVE-2021-3872, and CVE-2021-3875 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 05/17] vim: add patch number to CVE-2021-3778 patch Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 06/17] linux-yocto/5.14: update to v5.14.16 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 07/17] linux-yocto/5.10: update to v5.10.77 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 08/17] linux-yocto/5.14: update to v5.14.17 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 09/17] linux-yocto/5.10: update to v5.10.78 Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 10/17] convert-srcuri.py: use regex to check space in SRC_URI Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 11/17] scripts/oe-package-browser: Fix after overrides change Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 12/17] scripts/oe-package-browser: Handle no packages being built Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 13/17] wpa-supplicant: Match package override to PACKAGES for pkg_postinst Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 14/17] scripts/lib/wic/help.py: Update Fedora Kickstart URLs Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 15/17] uninative: Add version to uninative tarball name Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 16/17] mirrors: Add kernel.org sources mirror for downloads.yoctoproject.org Anuj Mittal
2021-11-16 16:31 ` [honister][PATCH 17/17] insane.bbclass: Add a check for directories that are expected to be empty Anuj Mittal
  -- strict thread matches above, loose matches on Subject: below --
2021-12-14  1:20 [honister][PATCH 00/17] Review request Anuj Mittal

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox