Openembedded Core Discussions
 help / color / mirror / Atom feed
* [OE-core][walnascar 00/19] Patch review
@ 2025-07-02  3:11 Steve Sakoman
  2025-07-02  3:11 ` [OE-core][walnascar 01/19] linux/generate-cve-exclusions: use data from CVEProject Steve Sakoman
                   ` (18 more replies)
  0 siblings, 19 replies; 21+ messages in thread
From: Steve Sakoman @ 2025-07-02  3:11 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for walnascar and have comments back by
end of day Thursday, July 4

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/1924

The following changes since commit f359677709aba80735a38578475a34e1b83d321c:

  tcf-agent: correct the SRC_URI (2025-06-30 09:11:01 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Bruce Ashfield (3):
  linux-yocto/6.12: revert riscv config sync
  linux-yocto/6.12: update to v6.12.31
  linux-yocto/6.12: libbpf: silence maybe-uninitialized warning from
    clang

Daniel Turull (3):
  linux/generate-cve-exclusions: use data from CVEProject
  linux/cve-exclusion: Execute the script after changing to the new data
    source
  cve-exclusions: correct cve status for 5 entries

Mathieu Dubois-Briand (2):
  linux/cve-exclusion: Update exclusions after kernel update
  linux/cve-exclusion: Update exclusions after kernel update

Niko Mauno (3):
  cve-exclusion_6.12.inc: Update using current cvelistV5
  linux: cve-exclusions: Fix false negatives
  linux: cve-exclusions: Amend terminology

Peter Marko (4):
  linux/cve-exclusion: update with latest cvelistV5
  linux/cve-exclusion: correct fixed-version calculation
  linux/cve-exclusion: update exclusions after script fixes
  linux/cve-exclusion: do not shift first_affected

Randy MacLeod (1):
  linux: add CVE_STATUS for a chrome* bug

Ross Burton (3):
  linux/generate-cve-exclusions: show the name and version of the data
    source
  linux-yocto: refresh CVE exclusions
  linux-yocto: refresh CVE exclusion list for 6.12.31

 meta/recipes-kernel/linux/cve-exclusion.inc   |   125 +
 .../linux/cve-exclusion_6.12.inc              | 13028 ++++++++++++----
 .../linux/generate-cve-exclusions.py          |   122 +-
 .../linux/linux-yocto-rt_6.12.bb              |     6 +-
 .../linux/linux-yocto-tiny_6.12.bb            |     6 +-
 meta/recipes-kernel/linux/linux-yocto_6.12.bb |    28 +-
 6 files changed, 9931 insertions(+), 3384 deletions(-)

-- 
2.43.0



^ permalink raw reply	[flat|nested] 21+ messages in thread
* [OE-core][walnascar 00/19] Patch review
@ 2025-08-26 13:40 Steve Sakoman
  0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2025-08-26 13:40 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for walnascar and have comments back by
end of day Thursday, August 28

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/2268

The following changes since commit 4b785d2d416944a78bf4c09e85a508ae80e35ca4:

  linux-firmware: fix FILES to drop RDEPENDS on full package (2025-08-20 13:27:57 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Archana Polampalli (10):
  gst-devtools: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-libav: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-bad: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-base: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-good: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-plugins-ugly: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-python: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-rtsp-server: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0-vaapi: upgrade 1.24.12 -> 1.24.13
  gstreamer1.0: upgrade 1.24.12 -> 1.24.13

Michael Halstead (2):
  yocto-uninative: Update to 4.8 for GCC 15.1
  yocto-uninative: Update to 4.9 for glibc 2.42

Peter Marko (7):
  gnutls: mark CVE-2025-32989 and CVE-2025-32990 as fixed
  libarchive: patch CVE-2025-5916
  libarchive: patch CVE-2025-5917
  libarchive: patch CVE-2025-5918
  binutils: set status for CVE-2025-8224
  cve-update-db-native: fix fetcher for CVEs missing nodes
  vim: upgrade 9.1.1198 -> 9.1.1652

 meta/conf/distro/include/yocto-uninative.inc  |  10 +-
 .../recipes-core/meta/cve-update-db-native.bb |   2 +-
 .../binutils/binutils-2.44.inc                |   1 +
 .../0001-Improve-lseek-handling-2564.patch    | 319 ++++++++++++++++++
 .../libarchive/libarchive/CVE-2025-5916.patch | 111 ++++++
 .../libarchive/libarchive/CVE-2025-5917.patch |  49 +++
 .../libarchive/CVE-2025-5918-01.patch         | 217 ++++++++++++
 .../libarchive/CVE-2025-5918-02.patch         |  51 +++
 .../libarchive/libarchive_3.7.9.bb            |   5 +
 ...ols_1.24.12.bb => gst-devtools_1.24.13.bb} |   2 +-
 ...24.12.bb => gstreamer1.0-libav_1.24.13.bb} |   2 +-
 ...bb => gstreamer1.0-plugins-bad_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-base_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-good_1.24.13.bb} |   2 +-
 ...b => gstreamer1.0-plugins-ugly_1.24.13.bb} |   2 +-
 ...4.12.bb => gstreamer1.0-python_1.24.13.bb} |   2 +-
 ...bb => gstreamer1.0-rtsp-server_1.24.13.bb} |   2 +-
 ...24.12.bb => gstreamer1.0-vaapi_1.24.13.bb} |   2 +-
 ...1.0_1.24.12.bb => gstreamer1.0_1.24.13.bb} |   2 +-
 meta/recipes-support/gnutls/gnutls_3.8.10.bb  |   3 +
 ...src-Makefile-improve-reproducibility.patch |  10 +-
 .../vim/files/disable_acl_header_check.patch  |  12 +-
 .../vim/files/no-path-adjust.patch            |   2 +-
 meta/recipes-support/vim/vim.inc              |   7 +-
 24 files changed, 788 insertions(+), 31 deletions(-)
 create mode 100644 meta/recipes-extended/libarchive/libarchive/0001-Improve-lseek-handling-2564.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5916.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5917.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5918-01.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5918-02.patch
 rename meta/recipes-multimedia/gstreamer/{gst-devtools_1.24.12.bb => gst-devtools_1.24.13.bb} (95%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-libav_1.24.12.bb => gstreamer1.0-libav_1.24.13.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-bad_1.24.12.bb => gstreamer1.0-plugins-bad_1.24.13.bb} (98%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-base_1.24.12.bb => gstreamer1.0-plugins-base_1.24.13.bb} (98%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-good_1.24.12.bb => gstreamer1.0-plugins-good_1.24.13.bb} (97%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-ugly_1.24.12.bb => gstreamer1.0-plugins-ugly_1.24.13.bb} (94%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-python_1.24.12.bb => gstreamer1.0-python_1.24.13.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-rtsp-server_1.24.12.bb => gstreamer1.0-rtsp-server_1.24.13.bb} (90%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-vaapi_1.24.12.bb => gstreamer1.0-vaapi_1.24.13.bb} (95%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0_1.24.12.bb => gstreamer1.0_1.24.13.bb} (97%)

-- 
2.43.0



^ permalink raw reply	[flat|nested] 21+ messages in thread

end of thread, other threads:[~2025-08-26 13:41 UTC | newest]

Thread overview: 21+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-07-02  3:11 [OE-core][walnascar 00/19] Patch review Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 01/19] linux/generate-cve-exclusions: use data from CVEProject Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 02/19] linux/cve-exclusion: Execute the script after changing to the new data source Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 03/19] linux/cve-exclusion: Update exclusions after kernel update Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 04/19] cve-exclusions: correct cve status for 5 entries Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 05/19] linux/cve-exclusion: update with latest cvelistV5 Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 06/19] linux/cve-exclusion: correct fixed-version calculation Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 07/19] linux/cve-exclusion: update exclusions after script fixes Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 08/19] linux/cve-exclusion: do not shift first_affected Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 09/19] linux/cve-exclusion: Update exclusions after kernel update Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 10/19] linux: add CVE_STATUS for a chrome* bug Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 11/19] cve-exclusion_6.12.inc: Update using current cvelistV5 Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 12/19] linux: cve-exclusions: Fix false negatives Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 13/19] linux: cve-exclusions: Amend terminology Steve Sakoman
2025-07-02  3:11 ` [OE-core][walnascar 14/19] linux/generate-cve-exclusions: show the name and version of the data source Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 15/19] linux-yocto: refresh CVE exclusions Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 16/19] linux-yocto/6.12: revert riscv config sync Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 17/19] linux-yocto/6.12: update to v6.12.31 Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 18/19] linux-yocto: refresh CVE exclusion list for 6.12.31 Steve Sakoman
2025-07-02  3:12 ` [OE-core][walnascar 19/19] linux-yocto/6.12: libbpf: silence maybe-uninitialized warning from clang Steve Sakoman
  -- strict thread matches above, loose matches on Subject: below --
2025-08-26 13:40 [OE-core][walnascar 00/19] Patch review Steve Sakoman

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox