[OE-core][kirkstone 00/18] Patch review

[Steve Sakoman <steve@sakoman.com>]

Please review this set of changes for kirkstone and have comments back by
end of day Tuesday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5481

The following changes since commit 6e0d694ea1eb5d478dc7508d181c3a820098ee5f:

  uninative: Upgrade to 4.0 to include latest gcc 13.1.1 (2023-06-09 06:04:24 -1000)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut

Andrew Jeffery (1):
  Revert "ipk: Decode byte data to string in manifest handling"

Bruce Ashfield (5):
  linux-yocto/5.15: update to v5.15.109
  linux-yocto/5.15: update to v5.15.110
  linux-yocto/5.15: update to v5.15.111
  linux-yocto/5.15: update to v5.15.112
  linux-yocto/5.15: update to v5.15.113

Chen Qi (1):
  openssh: fix CVE-2023-28531

Deepthi Hemraj (1):
  glibc: stable 2.35 branch updates

Ian Ray (1):
  systemd-systemctl: support instance expansion in WantedBy

Jan Vermaete (1):
  cve-update-nvd2-native: added the missing http import

Marta Rybczynska (1):
  cve-update-nvd2-native: new CVE database fetcher

Qiu Tingting (1):
  e2fsprogs: fix ptest bug for second running

Randy MacLeod (1):
  vim: upgrade 9.0.1429 -> 9.0.1527

Sanjay Chitroda (1):
  cups: Fix CVE-2023-32324

Yogita Urade (4):
  webkitgtk: fix CVE-2022-46691
  webkitgtk: fix CVE-2022-46699
  webkitgtk: fix CVE-2022-42867
  webkitgtk: fix CVE-2022-46700

 meta/classes/cve-check.bbclass                |   4 +-
 meta/lib/oe/package_manager/ipk/manifest.py   |   2 +-
 ...-destination-constraints-for-smartca.patch |  35 ++
 .../openssh/openssh_8.9p1.bb                  |   1 +
 meta/recipes-core/glibc/glibc-version.inc     |   2 +-
 .../glibc/glibc/CVE-2023-0687.patch           |  82 -----
 meta/recipes-core/glibc/glibc_2.35.bb         |   1 -
 .../meta/cve-update-nvd2-native.bb            | 334 ++++++++++++++++++
 .../systemd/systemd-systemctl/systemctl       |   9 +-
 .../e2fsprogs/e2fsprogs/run-ptest             |   1 +
 .../e2fsprogs/e2fsprogs_1.46.5.bb             |   3 +
 meta/recipes-extended/cups/cups.inc           |   1 +
 .../cups/cups/CVE-2023-32324.patch            |  36 ++
 .../linux/linux-yocto-rt_5.15.bb              |   6 +-
 .../linux/linux-yocto-tiny_5.15.bb            |   6 +-
 meta/recipes-kernel/linux/linux-yocto_5.15.bb |  26 +-
 .../webkit/webkitgtk/CVE-2022-42867.patch     | 104 ++++++
 .../webkit/webkitgtk/CVE-2022-46691.patch     |  43 +++
 .../webkit/webkitgtk/CVE-2022-46699.patch     | 136 +++++++
 .../webkit/webkitgtk/CVE-2022-46700.patch     |  67 ++++
 meta/recipes-sato/webkit/webkitgtk_2.36.8.bb  |   4 +
 meta/recipes-support/vim/vim.inc              |   4 +-
 22 files changed, 792 insertions(+), 115 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssh/openssh/0001-upstream-include-destination-constraints-for-smartca.patch
 delete mode 100644 meta/recipes-core/glibc/glibc/CVE-2023-0687.patch
 create mode 100644 meta/recipes-core/meta/cve-update-nvd2-native.bb
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2023-32324.patch
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2022-42867.patch
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2022-46691.patch
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2022-46699.patch
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2022-46700.patch

-- 
2.34.1