Please review this set of changes for dunfell and have comments back by end of day Thursday, October 12.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6026 The following changes since commit 9a800a2e2c2b14eab8c1f83cb4ac3b94a70dd23c: glibc: Fix CVE-2023-4911 "Looney Tunables" (2023-10-05 13:10:56 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Hitendra Prajapati (1): xdg-utils: Fix CVE-2022-4055 Julian Haller (2): dbus: Backport fix for CVE-2023-34969 dbus: Add missing CVE_PRODUCT Marek Vasut (2): busybox: Backport CVE-2022-48174 fix cpio: Replace fix wrong CRC with ASCII CRC for large files with upstream backport Shinu Chandran (1): libpcre2 : Follow up fix CVE-2022-1586 Shubham Kulkarni (1): go: Update fix for CVE-2023-24538 & CVE-2023-39318 Sourav Pramanik (1): openssl: Upgrade 1.1.1v -> 1.1.1w Vijay Anusuri (3): cups: Backport fix for CVE-2023-32360 and CVE-2023-4504 gawk: backport Debian patch to fix CVE-2023-4156 ghostscript: Backport fix CVE-2023-43115 .../{openssl_1.1.1v.bb => openssl_1.1.1w.bb} | 2 +- .../busybox/busybox/CVE-2022-48174.patch | 82 +++ meta/recipes-core/busybox/busybox_1.31.1.bb | 1 + meta/recipes-core/dbus/dbus.inc | 3 + .../dbus/dbus/CVE-2023-34969.patch | 96 +++ meta/recipes-devtools/go/go-1.14.inc | 5 +- .../go/go-1.14/CVE-2023-24538-1.patch | 4 +- .../go/go-1.14/CVE-2023-24538-2.patch | 447 ++++++++++++- .../go/go-1.14/CVE-2023-24538_3.patch | 393 ++++++++++++ .../go/go-1.14/CVE-2023-24538_4.patch | 497 +++++++++++++++ .../go/go-1.14/CVE-2023-24538_5.patch | 585 ++++++++++++++++++ ...3-24538-3.patch => CVE-2023-24538_6.patch} | 175 +++++- .../go/go-1.14/CVE-2023-39318.patch | 38 +- ...g-CRC-with-ASCII-CRC-for-large-files.patch | 39 -- ...-calculation-of-CRC-in-copy-out-mode.patch | 58 ++ ...appending-to-archives-bigger-than-2G.patch | 312 ++++++++++ meta/recipes-extended/cpio/cpio_2.13.bb | 3 +- meta/recipes-extended/cups/cups.inc | 2 + .../cups/cups/CVE-2023-32360.patch | 31 + .../cups/cups/CVE-2023-4504.patch | 40 ++ .../gawk/gawk/CVE-2023-4156.patch | 28 + meta/recipes-extended/gawk/gawk_5.0.1.bb | 1 + .../ghostscript/CVE-2023-43115.patch | 62 ++ .../ghostscript/ghostscript_9.52.bb | 1 + .../xdg-utils/xdg-utils/CVE-2022-4055.patch | 165 +++++ .../xdg-utils/xdg-utils_1.1.3.bb | 1 + .../libpcre2/CVE-2022-1586-regression.patch | 30 + .../recipes-support/libpcre/libpcre2_10.34.bb | 1 + 28 files changed, 3041 insertions(+), 61 deletions(-) rename meta/recipes-connectivity/openssl/{openssl_1.1.1v.bb => openssl_1.1.1w.bb} (98%) create mode 100644 meta/recipes-core/busybox/busybox/CVE-2022-48174.patch create mode 100644 meta/recipes-core/dbus/dbus/CVE-2023-34969.patch create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2023-24538_3.patch create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2023-24538_4.patch create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2023-24538_5.patch rename meta/recipes-devtools/go/go-1.14/{CVE-2023-24538-3.patch => CVE-2023-24538_6.patch} (53%) delete mode 100644 meta/recipes-extended/cpio/cpio-2.13/0001-Wrong-CRC-with-ASCII-CRC-for-large-files.patch create mode 100644 meta/recipes-extended/cpio/cpio-2.13/0003-Fix-calculation-of-CRC-in-copy-out-mode.patch create mode 100644 meta/recipes-extended/cpio/cpio-2.13/0004-Fix-appending-to-archives-bigger-than-2G.patch create mode 100644 meta/recipes-extended/cups/cups/CVE-2023-32360.patch create mode 100644 meta/recipes-extended/cups/cups/CVE-2023-4504.patch create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2023-4156.patch create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2023-43115.patch create mode 100644 meta/recipes-extended/xdg-utils/xdg-utils/CVE-2022-4055.patch create mode 100644 meta/recipes-support/libpcre/libpcre2/CVE-2022-1586-regression.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#188898): https://lists.openembedded.org/g/openembedded-core/message/188898 Mute This Topic: https://lists.openembedded.org/mt/101875781/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
