Please review this set of changes for dunfell and have comments back by end of day Thursday, September 14.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5868 The following changes since commit c953ccba6c2a334cc58a97eee073bdb51a68f1d3: linux/cve-exclusion: remove obsolete manual entries (2023-08-31 04:26:32 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Anuj Mittal (4): glibc/check-test-wrapper: don't emit warnings from ssh selftest/cases/glibc.py: increase the memory for testing oeqa/utils/nfs: allow requesting non-udp ports selftest/cases/glibc.py: switch to using NFS over TCP Ashish Sharma (1): qemu: Backport fix CVE-2023-3180 Michael Halstead (2): yocto-uninative: Update to 4.3 resulttool/resultutils: allow index generation despite corrupt json Priyal Doshi (1): rootfs-post: remove traling blanks from tasks Richard Purdie (2): oeqa/target/ssh: Ensure EAGAIN doesn't truncate output oeqa/runtime/ltp: Increase ltp test output timeout Shubham Kulkarni (1): openssh: Securiry fix for CVE-2023-38408 Staffan Rydén (1): kernel: Fix path comparison in kernel staging dir symlinking Vijay Anusuri (2): bind: Backport fix for CVE-2023-2828 qemu: Backport fix for CVE-2023-0330 meta/classes/kernel.bbclass | 7 +- meta/classes/rootfs-postcommands.bbclass | 6 +- meta/classes/rootfsdebugfiles.bbclass | 2 +- meta/conf/distro/include/yocto-uninative.inc | 8 +- meta/lib/oeqa/core/target/ssh.py | 3 + meta/lib/oeqa/runtime/cases/ltp.py | 2 +- meta/lib/oeqa/selftest/cases/glibc.py | 6 +- meta/lib/oeqa/utils/nfs.py | 4 +- .../bind/bind/CVE-2023-2828.patch | 166 +++++ .../recipes-connectivity/bind/bind_9.11.37.bb | 1 + .../openssh/openssh/CVE-2023-38408-01.patch | 189 ++++++ .../openssh/openssh/CVE-2023-38408-02.patch | 581 ++++++++++++++++++ .../openssh/openssh/CVE-2023-38408-03.patch | 171 ++++++ .../openssh/openssh/CVE-2023-38408-04.patch | 34 + .../openssh/openssh/CVE-2023-38408-05.patch | 194 ++++++ .../openssh/openssh/CVE-2023-38408-06.patch | 73 +++ .../openssh/openssh/CVE-2023-38408-07.patch | 125 ++++ .../openssh/openssh/CVE-2023-38408-08.patch | 315 ++++++++++ .../openssh/openssh/CVE-2023-38408-09.patch | 38 ++ .../openssh/openssh/CVE-2023-38408-10.patch | 39 ++ .../openssh/openssh/CVE-2023-38408-11.patch | 307 +++++++++ .../openssh/openssh/CVE-2023-38408-12.patch | 120 ++++ .../openssh/openssh_8.2p1.bb | 12 + .../glibc/glibc/check-test-wrapper | 2 +- meta/recipes-devtools/qemu/qemu.inc | 4 +- ...-2023-0330.patch => CVE-2023-0330_1.patch} | 0 .../qemu/qemu/CVE-2023-0330_2.patch | 135 ++++ .../qemu/qemu/CVE-2023-3180.patch | 49 ++ scripts/lib/resulttool/resultutils.py | 6 +- 29 files changed, 2579 insertions(+), 20 deletions(-) create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2023-2828.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-01.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-02.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-03.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-04.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-05.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-06.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-07.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-08.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-09.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-10.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-11.patch create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-38408-12.patch rename meta/recipes-devtools/qemu/qemu/{CVE-2023-0330.patch => CVE-2023-0330_1.patch} (100%) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-0330_2.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-3180.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#187515): https://lists.openembedded.org/g/openembedded-core/message/187515 Mute This Topic: https://lists.openembedded.org/mt/101315151/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-