[OE-core][walnascar 00/13] Patch review

[Steve Sakoman <steve@sakoman.com>]

Please review this set of changes for walnascar and have comments back by
end of day Friday, July 18

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/2030

The following changes since commit 4225c9abbc68e1a29a54927a9c8e1fe12208e5b4:

  ltp: backport patch to fix compilation error for Skylake -march=x86-64-v3 (2025-07-11 09:55:25 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Archana Polampalli (1):
  gdk-pixbuf: fix CVE-2025-7345

Deepesh Varatharajan (3):
  binutils: stable 2.44 branch updates
  binutils: Fix CVE-2025-5245
  binutils: Fix CVE-2025-7545

Divya Chellam (3):
  libxml2: fix CVE-2025-6021
  libxml2: Fix CVE-2025-49794 & CVE-2025-49796
  libxml2: fix CVE-2025-49795

Jiaying Song (1):
  ruby-ptest : some ptest fixes

Peter Marko (3):
  busybox: apply patch for CVE-2023-39810
  curl: ignore CVE-2025-4947 and CVE-2025-5025
  iputils: patch CVE-2025-48964

Yash Shinde (1):
  binutils: Fix CVE-2025-7546

Yi Zhao (1):
  kea: set correct permissions for /var/run/kea

 .../kea/files/kea-dhcp-ddns.service           |   1 +
 .../kea/files/kea-dhcp4.service               |   1 +
 .../kea/files/kea-dhcp6.service               |   1 +
 .../busybox/busybox/CVE-2023-39810.patch      | 136 +++++++++++++
 meta/recipes-core/busybox/busybox_1.37.0.bb   |   1 +
 .../CVE-2025-49794_CVE-2025-49796.patch       | 189 ++++++++++++++++++
 .../libxml/libxml2/CVE-2025-49795.patch       |  75 +++++++
 .../libxml/libxml2/CVE-2025-6021.patch        |  59 ++++++
 meta/recipes-core/libxml/libxml2_2.13.8.bb    |   3 +
 .../binutils/binutils-2.44.inc                |   5 +-
 .../binutils/0018-CVE-2025-5245.patch         |  38 ++++
 .../binutils/0018-CVE-2025-7546.patch         |  58 ++++++
 .../binutils/0019-CVE-2025-7545.patch         |  39 ++++
 ..._rm_r_no_permissions-test-under-root.patch |  32 +++
 meta/recipes-devtools/ruby/ruby/run-ptest     |   2 +-
 meta/recipes-devtools/ruby/ruby_3.4.4.bb      |   5 +-
 .../iputils/iputils/CVE-2025-48964.patch      |  99 +++++++++
 .../iputils/iputils_20240905.bb               |   1 +
 .../gdk-pixbuf/gdk-pixbuf/CVE-2025-7345.patch |  55 +++++
 .../gdk-pixbuf/gdk-pixbuf_2.42.12.bb          |   1 +
 meta/recipes-support/curl/curl_8.12.1.bb      |   2 +
 21 files changed, 800 insertions(+), 3 deletions(-)
 create mode 100644 meta/recipes-core/busybox/busybox/CVE-2023-39810.patch
 create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-49794_CVE-2025-49796.patch
 create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-49795.patch
 create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0018-CVE-2025-5245.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0018-CVE-2025-7546.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0019-CVE-2025-7545.patch
 create mode 100644 meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch
 create mode 100644 meta/recipes-extended/iputils/iputils/CVE-2025-48964.patch
 create mode 100644 meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf/CVE-2025-7345.patch

-- 
2.43.0