[OE-core][langdale 00/22] Patch review

[Steve Sakoman <steve@sakoman.com>]

Please review this set of patches for langdale and have comments back by
end of day Monday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4566

The following changes since commit 30cdb7fbec8e9cf5c5a25e28a1102fa562a7f6c2:

  create-spdx: default share_src for shared sources (2022-11-25 06:16:14 -1000)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/langdale-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/langdale-nut

Bruce Ashfield (11):
  linux-yocto/5.15: update to v5.15.74
  linux-yocto/5.15: update to v5.15.76
  linux-yocto/5.15: update to v5.15.78
  linux-yocto/5.15: fix CONFIG_CRYPTO_CCM mismatch warnings
  linux-yocto/5.19: update to v5.19.16
  linux-yocto/5.19: update to v5.19.17
  linux-yocto/5.19: cfg: intel and vesa updates
  linux-yocto/5.19: security.cfg: remove configs which have been dropped
  linux-yocto/5.19: fix CONFIG_CRYPTO_CCM mismatch warnings
  linux-yocto/5.19: fix elfutils run-backtrace-native-core ptest failure
  kern-tools: integrate ZFS speedup patch

Chen Qi (3):
  kernel.bbclass: make KERNEL_DEBUG_TIMESTAMPS work at rebuild
  dhcpcd: fix to work with systemd
  resolvconf: make it work

Dmitry Baryshkov (2):
  linux-firmware: upgrade 20221012 -> 20221109
  linux-firmware: add new fw file to ${PN}-qcom-adreno-a530

Enrico Jörns (1):
  sstatesig: emit more helpful error message when not finding sstate
    manifest

Narpat Mali (2):
  ffmpeg: fix for CVE-2022-3964
  ffmpeg: fix for CVE-2022-3965

Polampalli, Archana (1):
  libpam: fix CVE-2022-28321

Qiu, Zheng (1):
  tiff: Security fix for CVE-2022-3970

Tim Orling (1):
  mirrors.bbclass: update CPAN_MIRROR

 meta/classes-global/mirrors.bbclass           |   3 +-
 meta/classes-recipe/kernel.bbclass            |   8 +
 meta/lib/oe/sstatesig.py                      |   6 +-
 .../dhcpcd/dhcpcd_9.4.1.bb                    |   1 +
 ...mprove-the-sitation-of-working-with-.patch |  82 +++++++
 ...01-avoid-using-m-option-for-readlink.patch |  37 ++++
 .../resolvconf/resolvconf_1.91.bb             |   9 +-
 .../pam/libpam/CVE-2022-28321-0002.patch      | 205 ++++++++++++++++++
 meta/recipes-extended/pam/libpam_1.5.2.bb     |   1 +
 .../kern-tools/kern-tools-native_git.bb       |   2 +-
 ...20221012.bb => linux-firmware_20221109.bb} |   6 +-
 .../linux/linux-yocto-rt_5.15.bb              |   6 +-
 .../linux/linux-yocto-rt_5.19.bb              |   6 +-
 .../linux/linux-yocto-tiny_5.15.bb            |   6 +-
 .../linux/linux-yocto-tiny_5.19.bb            |   6 +-
 meta/recipes-kernel/linux/linux-yocto_5.15.bb |  26 +--
 meta/recipes-kernel/linux/linux-yocto_5.19.bb |  26 +--
 ...c-stop-accessing-out-of-bounds-frame.patch |  89 ++++++++
 ...c-stop-accessing-out-of-bounds-frame.patch | 108 +++++++++
 .../recipes-multimedia/ffmpeg/ffmpeg_5.1.2.bb |   6 +-
 .../libtiff/files/CVE-2022-3970.patch         |  39 ++++
 meta/recipes-multimedia/libtiff/tiff_4.4.0.bb |   1 +
 22 files changed, 629 insertions(+), 50 deletions(-)
 create mode 100644 meta/recipes-connectivity/dhcpcd/files/0001-20-resolv.conf-improve-the-sitation-of-working-with-.patch
 create mode 100644 meta/recipes-connectivity/resolvconf/resolvconf/0001-avoid-using-m-option-for-readlink.patch
 create mode 100644 meta/recipes-extended/pam/libpam/CVE-2022-28321-0002.patch
 rename meta/recipes-kernel/linux-firmware/{linux-firmware_20221012.bb => linux-firmware_20221109.bb} (99%)
 create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-avcodec-rpzaenc-stop-accessing-out-of-bounds-frame.patch
 create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-avcodec-smcenc-stop-accessing-out-of-bounds-frame.patch
 create mode 100644 meta/recipes-multimedia/libtiff/files/CVE-2022-3970.patch

-- 
2.25.1