Openembedded Core Discussions
 help / color / mirror / Atom feed
From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 0/6] Patch review
Date: Wed, 16 Apr 2025 13:14:09 -0700	[thread overview]
Message-ID: <cover.1744834364.git.steve@sakoman.com> (raw)

Please review this set of changes for scarthgap and have comments back by
end of day Friday, April 18

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/1409

The following changes since commit 9de38ac99c2b19f549c00ea5277faf621c6f4e65:

  patch.py: set commituser and commitemail for addNote (2025-04-11 06:47:51 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

Ashish Sharma (3):
  binutils: Fix CVE-2025-1176
  binutils: patch CVE-2025-1178 & CVE-2024-57360
  binutils: patch CVE-2025-1181

Peter Marko (1):
  libarchive: upgrade 3.7.4 -> 3.7.9

Vijay Anusuri (1):
  openssh: Fix for CVE-2025-32728

Vishwas Udupa (1):
  openssl: rewrite ptest installation

 .../openssh/openssh/CVE-2025-32728.patch      |  44 +++
 .../openssh/openssh_9.6p1.bb                  |   1 +
 .../openssl/openssl/run-ptest                 |  19 +-
 .../openssl/openssl_3.2.4.bb                  |  67 ++--
 .../binutils/binutils-2.42.inc                |   5 +
 .../binutils/binutils/CVE-2024-57360.patch    |  75 ++++
 .../binutils/binutils/CVE-2025-1176.patch     | 156 ++++++++
 .../binutils/binutils/CVE-2025-1178.patch     |  38 ++
 .../binutils/binutils/CVE-2025-1181-pre.patch | 151 ++++++++
 .../binutils/binutils/CVE-2025-1181.patch     | 345 ++++++++++++++++++
 .../libarchive/CVE-2024-20696.patch           | 115 ------
 .../libarchive/CVE-2024-48957.patch           |  36 --
 .../libarchive/CVE-2024-48958.patch           |  40 --
 .../CVE-2025-1632_CVE-2025-25724.patch        |  83 -----
 .../libarchive/libarchive/configurehack.patch |   4 +-
 ...ibarchive_3.7.4.bb => libarchive_3.7.9.bb} |  12 +-
 16 files changed, 866 insertions(+), 325 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2025-32728.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2024-57360.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1176.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1178.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1181-pre.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1181.patch
 delete mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2024-20696.patch
 delete mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2024-48957.patch
 delete mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2024-48958.patch
 delete mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-1632_CVE-2025-25724.patch
 rename meta/recipes-extended/libarchive/{libarchive_3.7.4.bb => libarchive_3.7.9.bb} (84%)

-- 
2.43.0



             reply	other threads:[~2025-04-16 20:14 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-04-16 20:14 Steve Sakoman [this message]
2025-04-16 20:14 ` [OE-core][scarthgap 1/6] openssh: Fix for CVE-2025-32728 Steve Sakoman
2025-04-16 20:36   ` Richard Purdie
2025-04-16 20:14 ` [OE-core][scarthgap 2/6] binutils: Fix CVE-2025-1176 Steve Sakoman
2025-04-16 20:14 ` [OE-core][scarthgap 3/6] binutils: patch CVE-2025-1178 & CVE-2024-57360 Steve Sakoman
2025-04-16 20:14 ` [OE-core][scarthgap 4/6] binutils: patch CVE-2025-1181 Steve Sakoman
2025-04-16 20:14 ` [OE-core][scarthgap 5/6] libarchive: upgrade 3.7.4 -> 3.7.9 Steve Sakoman
2025-04-16 20:14 ` [OE-core][scarthgap 6/6] openssl: rewrite ptest installation Steve Sakoman
  -- strict thread matches above, loose matches on Subject: below --
2025-10-29 20:11 [OE-core][scarthgap 0/6] Patch review Steve Sakoman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1744834364.git.steve@sakoman.com \
    --to=steve@sakoman.com \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox