Please review this set of changes for kirkstone and have comments back by end of day Thursday, November 14
Passed a-full on autobuilder: https://valkyrie.yoctoproject.org/#/builders/29/builds/426 The following changes since commit 2e8819c0b9ada2b600aecc40c974a18eb7c0a666: xmlto: backport a patch to fix build with gcc-14 on host (2024-11-05 14:15:16 -0800) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut Alexandre Belloni (1): pseudo: Update to pull in fd leak fix Archana Polampalli (1): ghostscript: fix CVE-2023-46361 Khem Raj (1): pseudo: Disable LFS on 32bit arches Ola x Nilsson (1): patch.py: Use shlex instead of deprecated pipe Peter Marko (4): curl: patch CVE-2024-9681 gstreamer1.0: ignore CVE-2024-0444 expat: patch CVE-2024-50602 glib-2.0: patch regression of CVE-2023-32665 Philip Lorenz (1): cmake: Fix sporadic issues when determining compiler internals Richard Purdie (10): pseudo: Update to pull in linux-libc-headers race fix pseudo: Switch back to the master branch pseudo: Update to include logic fix pseudo: Update to pull in syncfs probe fix pseudo: Update to pull in gcc14 fix and missing statvfs64 intercept pseudo: Update to pull in fchmodat fix pseudo: Update to pull in python 3.12+ fix pseudo: Fix to work with glibc 2.40 pseudo: Update to include open symlink handling bugfix pseudo: Fix envp bug and add posix_spawn wrapper meta/lib/oe/patch.py | 11 ++- .../expat/expat/CVE-2024-50602-01.patch | 56 ++++++++++++ .../expat/expat/CVE-2024-50602-02.patch | 38 +++++++++ meta/recipes-core/expat/expat_2.5.0.bb | 2 + ...aliser-Convert-endianness-of-offsets.patch | 68 +++++++++++++++ meta/recipes-core/glib-2.0/glib-2.0_2.72.3.bb | 1 + meta/recipes-devtools/cmake/cmake.inc | 1 + ...mpilerABI-Strip-pipe-from-compile-fl.patch | 52 ++++++++++++ .../pseudo/files/glibc238.patch | 23 ++--- meta/recipes-devtools/pseudo/pseudo_git.bb | 11 ++- .../ghostscript/CVE-2023-46361.patch | 32 +++++++ .../ghostscript/ghostscript_9.55.0.bb | 1 + .../gstreamer/gstreamer1.0_1.20.7.bb | 3 + .../curl/curl/CVE-2024-9681.patch | 85 +++++++++++++++++++ meta/recipes-support/curl/curl_7.82.0.bb | 1 + 15 files changed, 362 insertions(+), 23 deletions(-) create mode 100644 meta/recipes-core/expat/expat/CVE-2024-50602-01.patch create mode 100644 meta/recipes-core/expat/expat/CVE-2024-50602-02.patch create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/0001-gvariant-serialiser-Convert-endianness-of-offsets.patch create mode 100644 meta/recipes-devtools/cmake/cmake/0001-CMakeDetermineCompilerABI-Strip-pipe-from-compile-fl.patch create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2023-46361.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2024-9681.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#207073): https://lists.openembedded.org/g/openembedded-core/message/207073 Mute This Topic: https://lists.openembedded.org/mt/109548858/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
