From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][kirkstone 00/42] Pull request (cover letter only)
Date: Tue, 24 Jan 2023 16:30:07 -1000 [thread overview]
Message-ID: <cover.1674613569.git.steve@sakoman.com> (raw)
The following changes since commit 4760fac939a6204e3cb7dcd3699cd9a2508f9dee:
devtool: process local files only for the main branch (2023-01-12 04:56:26 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-next
Alex Kiernan (1):
classes: image: Set empty weak default IMAGE_LINGUAS
Alexander Kanavin (5):
libksba: update 1.6.2 -> 1.6.3
linux-firmware: upgrade 20221109 -> 20221214
xwayland: upgrade 22.1.5 -> 22.1.7
xserver-xorg: upgrade 21.1.4 -> 21.1.6
selftest/virgl: use pkg-config from the host
Antonin Godard (2):
busybox: always start do_compile with orig config files
busybox: rm temporary files if do_compile was interrupted
Benoît Mauduit (1):
lib/oe/reproducible: Use git log without gpg signature
Bhabu Bindu (1):
qemu: Fix CVE-2022-4144
Bruce Ashfield (5):
linux-yocto/5.15: ltp and squashfs fixes
linux-yocto/5.15: fix perf build with clang
linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off
linux-yocto/5.15: update to v5.15.84
linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user
copy
Chen Qi (2):
dhcpcd: backport two patches to fix runtime error
libseccomp: fix typo in DESCRIPTION
Daniel Gomez (1):
gtk-icon-cache: Fix GTKIC_CMD if-else condition
He Zhe (1):
lttng-modules: update 2.13.7 -> 2.13.8
Hitendra Prajapati (1):
go: fix CVE-2022-41717 Excessive memory use in got server
Jan Kircher (1):
toolchain-scripts: compatibility with unbound variable protection
Jermain Horsman (1):
cve-check: write the cve manifest to IMGDEPLOYDIR
KARN JYE LAU (1):
freetype:update mirror site.
Khem Raj (1):
tiff: Add packageconfig knob for webp
Marta Rybczynska (1):
cve-update-db-native: avoid incomplete updates
Martin Jansa (1):
ffmpeg: refresh patches to apply cleanly
Narpat Mali (4):
python3-setuptools: fix for CVE-2022-40897
python3-wheel: fix for CVE-2022-40898
python3-git: fix for CVE-2022-24439
ffmpeg: fix for CVE-2022-3341
Pavel Zhukov (1):
gcc: Refactor linker patches and fix linker on arm with usrmerge
Petr Kubizňák (1):
harfbuzz: remove bindir only if it exists
Quentin Schulz (1):
cairo: fix CVE patches assigned wrong CVE number
Randy MacLeod (1):
vim: upgrade 9.0.0947 -> 9.0.1211
Ross Burton (1):
cve-update-db-native: show IP on failure
Sandeep Gundlupet Raju (2):
kernel-fitimage: Adjust order of dtb/dtbo files
kernel-fitimage: Allow user to select dtb when multiple dtb exists
Saul Wold (1):
at: Change when files are copied
Steve Sakoman (1):
Revert "libksba: fix CVE-2022-47629"
Vivek Kumbhar (1):
openssl: fix CVE-2022-3996 double locking leads to denial of service
Yash Shinde (1):
glibc: stable 2.35 branch updates.
Yogita Urade (1):
libksba: fix CVE-2022-47629
meta/classes/cve-check.bbclass | 6 +-
meta/classes/gtk-icon-cache.bbclass | 2 +-
meta/classes/image.bbclass | 3 +-
meta/classes/kernel-fitimage.bbclass | 21 +-
meta/classes/toolchain-scripts.bbclass | 2 +-
meta/lib/oe/reproducible.py | 3 +-
meta/lib/oeqa/selftest/cases/runtime_test.py | 2 +-
.../dhcpcd/dhcpcd_9.4.1.bb | 2 +
...low-getrandom-sysctl-for-newer-glibc.patch | 30 ++
...sep-Allow-newfstatat-syscall-as-well.patch | 31 ++
.../openssl/openssl/CVE-2022-3996.patch | 43 ++
.../openssl/openssl_3.0.7.bb | 1 +
meta/recipes-core/busybox/busybox.inc | 26 +-
meta/recipes-core/glibc/glibc-version.inc | 2 +-
.../recipes-core/meta/cve-update-db-native.bb | 88 +++-
meta/recipes-devtools/gcc/gcc-11.3.inc | 1 -
...rm-add-armv9-a-architecture-to-march.patch | 89 ++--
...AMIC_LINKER-and-UCLIBC_DYNAMIC_LINKE.patch | 269 +++++++---
...s-fix-v4bx-to-linker-to-support-EABI.patch | 10 +-
...019-nios2-Define-MUSL_DYNAMIC_LINKER.patch | 25 -
meta/recipes-devtools/go/go-1.17.13.inc | 1 +
.../go/go-1.18/CVE-2022-41717.patch | 89 ++++
...-git-CVE-2022-24439-fix-from-PR-1518.patch | 97 ++++
...-git-CVE-2022-24439-fix-from-PR-1521.patch | 488 ++++++++++++++++++
.../python/python3-git_3.1.27.bb | 4 +
...-of-whitespace-to-search-backtrack.-.patch | 31 ++
.../python/python3-setuptools_59.5.0.bb | 1 +
...tential-DoS-attack-via-WHEEL_INFO_RE.patch | 32 ++
.../python/python3-wheel_0.37.1.bb | 4 +-
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2022-4144.patch | 99 ++++
meta/recipes-extended/at/at_3.2.5.bb | 6 +-
.../cairo/cairo/CVE-2019-6461.patch | 46 +-
.../cairo/cairo/CVE-2019-6462.patch | 46 +-
.../freetype/freetype_2.11.1.bb | 2 +-
.../harfbuzz/harfbuzz_4.0.1.bb | 6 +-
...possible-memleaks-in-XkbGetKbdByName.patch | 63 ---
...ntedString-against-request-length-at.patch | 38 --
...-xorg_21.1.4.bb => xserver-xorg_21.1.6.bb} | 4 +-
...{xwayland_22.1.5.bb => xwayland_22.1.7.bb} | 2 +-
...20221109.bb => linux-firmware_20221214.bb} | 4 +-
.../linux/linux-yocto-rt_5.15.bb | 6 +-
.../linux/linux-yocto-tiny_5.15.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +-
...ules_2.13.7.bb => lttng-modules_2.13.8.bb} | 2 +-
...c-stop-accessing-out-of-bounds-frame.patch | 19 +-
...c-stop-accessing-out-of-bounds-frame.patch | 7 +-
...-vp3-Add-missing-check-for-av_malloc.patch | 12 +-
...ec-Add-check-for-avformat_new_stream.patch | 67 +++
.../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 3 +-
meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 1 +
.../libksba/ksba-add-pkgconfig-support.patch | 6 +-
.../{libksba_1.6.2.bb => libksba_1.6.3.bb} | 2 +-
.../libseccomp/libseccomp_2.5.3.bb | 2 +-
meta/recipes-support/vim/vim.inc | 4 +-
55 files changed, 1479 insertions(+), 404 deletions(-)
create mode 100644 meta/recipes-connectivity/dhcpcd/files/0001-privsep-Allow-getrandom-sysctl-for-newer-glibc.patch
create mode 100644 meta/recipes-connectivity/dhcpcd/files/0002-privsep-Allow-newfstatat-syscall-as-well.patch
create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2022-3996.patch
delete mode 100644 meta/recipes-devtools/gcc/gcc/0019-nios2-Define-MUSL_DYNAMIC_LINKER.patch
create mode 100644 meta/recipes-devtools/go/go-1.18/CVE-2022-41717.patch
create mode 100644 meta/recipes-devtools/python/python3-git/0001-python3-git-CVE-2022-24439-fix-from-PR-1518.patch
create mode 100644 meta/recipes-devtools/python/python3-git/0001-python3-git-CVE-2022-24439-fix-from-PR-1521.patch
create mode 100644 meta/recipes-devtools/python/python3-setuptools/0001-Limit-the-amount-of-whitespace-to-search-backtrack.-.patch
create mode 100644 meta/recipes-devtools/python/python3-wheel/0001-Fixed-potential-DoS-attack-via-WHEEL_INFO_RE.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2022-4144.patch
delete mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch
delete mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-proof-GetCountedString-against-request-length-at.patch
rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.4.bb => xserver-xorg_21.1.6.bb} (80%)
rename meta/recipes-graphics/xwayland/{xwayland_22.1.5.bb => xwayland_22.1.7.bb} (95%)
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20221109.bb => linux-firmware_20221214.bb} (99%)
rename meta/recipes-kernel/lttng/{lttng-modules_2.13.7.bb => lttng-modules_2.13.8.bb} (94%)
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-avformat-nutdec-Add-check-for-avformat_new_stream.patch
rename meta/recipes-support/libksba/{libksba_1.6.2.bb => libksba_1.6.3.bb} (94%)
--
2.25.1
next reply other threads:[~2023-01-25 2:30 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-01-25 2:30 Steve Sakoman [this message]
2023-01-26 16:34 ` [OE-core][kirkstone 00/42] Pull request (cover letter only) Steve Sakoman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1674613569.git.steve@sakoman.com \
--to=steve@sakoman.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox