From: "Andreas Müller" <schnitzeltony@gmail.com>
To: akuster <akuster808@gmail.com>
Cc: openembeded-devel <openembedded-devel@lists.openembedded.org>
Subject: Re: [oe] [dunfell 00/28] Patch review Jan 17th
Date: Sun, 17 Jan 2021 21:38:18 +0100 [thread overview]
Message-ID: <CALbNGRRUDhOSUiqAPBeTiuRofNy8Z0tUcq0n4=HQ3RqM_DzHBA@mail.gmail.com> (raw)
In-Reply-To: <cover.1610905441.git.akuster808@gmail.com>
On Sun, Jan 17, 2021 at 6:46 PM akuster <akuster808@gmail.com> wrote:
>
> Here is the next batch for Dunfell. Please review and have comments back by Wednesday.
>
> The following changes since commit f2d02cb71eaff8eb285a1997b30be52486c160ae:
>
> python3-pyinotify: Add missing ctypes dependency (2020-11-15 11:13:25 -0800)
>
> are available in the Git repository at:
>
> git://git.openembedded.org/meta-openembedded-contrib stable/dunfell-nut
> http://cgit.openembedded.org/meta-openembedded-contrib/log/?h=stable/dunfell-nut
>
> Armin Kuster (5):
> wireguard-module: fix build issue with 5.4 kernel
> mariadb: update to 10.4.17 for cve fixes
> lua: update to 5.3.6
> nss: Security fix CVE-2020-12401
> wireshark: Several securtiy fixes
>
> Chenxi Mao (1):
> geoclue: select avahi-daemon if nmea enabled
>
> Gianfranco (1):
> dlt-daemon: add upstream patch to fix CVE-2020-29394
>
> Khem Raj (4):
> nodejs: Fix build with icu 67.1
> nodejs: Upgrade to 12.18.3
> nodejs: Fix arm32/thumb builds with clang
> nodejs: Update to 12.19.0
>
> Leon Anavi (1):
> php: Upgrade 7.4.4 -> 7.4.9
>
> Max Kellermann (1):
> php: remove the failing ${D}/${TMPDIR} code
>
> Roland Hieber (1):
> pcsc-lite: provide pcsc-lite-lib-native explicitly for native build
>
> Sakib Sajal (1):
> apache2: upgrade v2.4.43 -> v2.4.46
>
> Sean Nyekjaer (1):
> nodejs: 12.19.1 -> 12.20.1
>
> Stacy Gaikovaia (1):
> nodejs: 12.19.0 -> 12.19.1
>
> Wang Mingyu (1):
> zabbix: CVE-2020-15803 Security Advisory
>
> Wenlin Kang (2):
> lua: fix CVE-2020-15945
> lua: fix CVE-2020-24371
>
> Zang Ruochen (1):
> mcpp: Normalize the patch format of CVE
>
> Zheng Ruoqin (4):
> samba: CVE-2020-14318 Security Advisory
> samba: CVE-2020-14383 Security Advisory
> php: CVE-2020-7070
> php: CVE-2020-7069
>
> jabdoa2 (2):
> libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer
> libsdl2-mixer: set --disable-music-ogg-shared to link statically
>
> viatsk (1):
> tcpdump: Patch for CVE-2020-8037
>
> .../samba/samba/CVE-2020-14318.patch | 142 +++++++++++++++
> .../samba/samba/CVE-2020-14383.patch | 112 ++++++++++++
> .../samba/samba_4.10.18.bb | 2 +
> ...NC_-START-END-were-backported-to-5.4.patch | 29 +++
> .../wireguard-module_1.0.20200401.bb | 3 +-
> ...ping-don-t-allocate-a-too-large-buff.patch | 70 ++++++++
> .../recipes-support/tcpdump/tcpdump_4.9.3.bb | 1 +
> ...wireshark_3.2.7.bb => wireshark_3.2.10.bb} | 2 +-
> .../zabbix/zabbix/CVE-2020-15803.patch | 36 ++++
> .../zabbix/zabbix_4.4.6.bb | 1 +
> ...e_10.4.12.bb => mariadb-native_10.4.17.bb} | 0
> meta-oe/recipes-dbs/mysql/mariadb.inc | 6 +-
> ...-breakage-from-lock_guard-error-6161.patch | 32 ----
> .../mariadb/0001-Fix-library-LZ4-lookup.patch | 19 +-
> .../mysql/mariadb/c11_atomics.patch | 24 ++-
> .../configure.cmake-fix-valgrind.patch | 10 +-
> .../mariadb/fix-a-building-failure.patch | 13 +-
> .../mysql/mariadb/fix-arm-atomic.patch | 13 +-
> ...Lists.txt-fix-gen_lex_hash-not-found.patch | 12 +-
> ...akeLists.txt-fix-do_populate_sysroot.patch | 10 +-
> ...{mariadb_10.4.12.bb => mariadb_10.4.17.bb} | 0
> ...rriers-cannot-be-active-during-sweep.patch | 90 ++++++++++
> .../lua/lua/CVE-2020-15945.patch | 167 ++++++++++++++++++
> .../lua/{lua_5.3.5.bb => lua_5.3.6.bb} | 8 +-
> .../mcpp/files/CVE-2019-14274.patch | 34 ++++
> .../mcpp/files/ice-mcpp.patch | 31 ----
> meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb | 3 +-
> ...gister-r7-because-llvm-now-issues-an.patch | 53 ++++++
> ...-passing-multiple-libs-to-pkg_config.patch | 41 -----
> ...allow-use-of-system-installed-brotli.patch | 66 -------
> ...Install-both-binaries-and-use-libdir.patch | 28 ++-
> .../{nodejs_12.14.1.bb => nodejs_12.20.1.bb} | 12 +-
> .../php/php/CVE-2020-7069.patch | 158 +++++++++++++++++
> .../php/php/CVE-2020-7070.patch | 24 +++
> .../php/php/debian-php-fixheader.patch | 27 +--
> .../php/{php_7.4.4.bb => php_7.4.9.bb} | 16 +-
> .../dlt-daemon/dlt-daemon/275.patch | 38 ++++
> .../dlt-daemon/dlt-daemon_2.18.4.bb | 1 +
> .../libsdl/libsdl2-mixer_2.0.4.bb | 2 +-
> .../geoclue/geoclue_2.5.3.bb | 2 +-
> .../nss/nss/CVE-2020-12401.patch | 52 ++++++
> meta-oe/recipes-support/nss/nss_3.51.1.bb | 1 +
> .../pcsc-lite/pcsc-lite_1.8.26.bb | 1 +
> .../{apache2_2.4.43.bb => apache2_2.4.46.bb} | 4 +-
> 44 files changed, 1111 insertions(+), 285 deletions(-)
> create mode 100644 meta-networking/recipes-connectivity/samba/samba/CVE-2020-14318.patch
> create mode 100644 meta-networking/recipes-connectivity/samba/samba/CVE-2020-14383.patch
> create mode 100644 meta-networking/recipes-kernel/wireguard/files/0001-compat-SYM_FUNC_-START-END-were-backported-to-5.4.patch
> create mode 100644 meta-networking/recipes-support/tcpdump/tcpdump/0001-PPP-When-un-escaping-don-t-allocate-a-too-large-buff.patch
> rename meta-networking/recipes-support/wireshark/{wireshark_3.2.7.bb => wireshark_3.2.10.bb} (96%)
> create mode 100644 meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch
> rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.4.12.bb => mariadb-native_10.4.17.bb} (100%)
> delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/0001-Fix-build-breakage-from-lock_guard-error-6161.patch
> rename meta-oe/recipes-dbs/mysql/{mariadb_10.4.12.bb => mariadb_10.4.17.bb} (100%)
> create mode 100644 meta-oe/recipes-devtools/lua/lua/0001-Fixed-bug-barriers-cannot-be-active-during-sweep.patch
> create mode 100644 meta-oe/recipes-devtools/lua/lua/CVE-2020-15945.patch
> rename meta-oe/recipes-devtools/lua/{lua_5.3.5.bb => lua_5.3.6.bb} (87%)
> create mode 100644 meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch
> create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0001-Remove-use-of-register-r7-because-llvm-now-issues-an.patch
> delete mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0001-build-allow-passing-multiple-libs-to-pkg_config.patch
> delete mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0002-build-allow-use-of-system-installed-brotli.patch
> rename meta-oe/recipes-devtools/nodejs/{nodejs_12.14.1.bb => nodejs_12.20.1.bb} (94%)
> create mode 100644 meta-oe/recipes-devtools/php/php/CVE-2020-7069.patch
> create mode 100644 meta-oe/recipes-devtools/php/php/CVE-2020-7070.patch
> mode change 100755 => 100644 meta-oe/recipes-devtools/php/php/debian-php-fixheader.patch
> rename meta-oe/recipes-devtools/php/{php_7.4.4.bb => php_7.4.9.bb} (97%)
> create mode 100644 meta-oe/recipes-extended/dlt-daemon/dlt-daemon/275.patch
> create mode 100644 meta-oe/recipes-support/nss/nss/CVE-2020-12401.patch
> rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.43.bb => apache2_2.4.46.bb} (98%)
>
Hi Armin,
maybe you take the graphviz patches into account I just sent out. As
said in cover letter: graphviz is broken currently
Cheers
Andreas
next prev parent reply other threads:[~2021-01-17 20:38 UTC|newest]
Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-01-17 17:45 [dunfell 00/28] Patch review Jan 17th akuster
2021-01-17 17:45 ` [dunfell 01/28] tcpdump: Patch for CVE-2020-8037 akuster
2021-01-17 17:46 ` [dunfell 02/28] dlt-daemon: add upstream patch to fix CVE-2020-29394 akuster
2021-01-17 17:46 ` [dunfell 03/28] pcsc-lite: provide pcsc-lite-lib-native explicitly for native build akuster
2021-01-17 17:46 ` [dunfell 04/28] wireguard-module: fix build issue with 5.4 kernel akuster
2021-01-17 17:46 ` [dunfell 05/28] mcpp: Normalize the patch format of CVE akuster
2021-01-17 17:46 ` [dunfell 06/28] zabbix: CVE-2020-15803 Security Advisory akuster
2021-01-17 17:46 ` [dunfell 07/28] samba: CVE-2020-14318 " akuster
2021-01-17 17:46 ` [dunfell 08/28] samba: CVE-2020-14383 " akuster
2021-01-17 17:46 ` [dunfell 09/28] php: Upgrade 7.4.4 -> 7.4.9 akuster
2021-01-17 17:46 ` [dunfell 10/28] php: remove the failing ${D}/${TMPDIR} code akuster
2021-01-17 17:46 ` [dunfell 11/28] php: CVE-2020-7070 akuster
2021-01-17 17:46 ` [dunfell 12/28] php: CVE-2020-7069 akuster
2021-01-17 17:46 ` [dunfell 13/28] apache2: upgrade v2.4.43 -> v2.4.46 akuster
2021-01-17 17:46 ` [dunfell 14/28] mariadb: update to 10.4.17 for cve fixes akuster
2021-01-17 17:46 ` [dunfell 15/28] lua: fix CVE-2020-15945 akuster
2021-01-17 17:46 ` [dunfell 16/28] lua: fix CVE-2020-24371 akuster
2021-01-17 17:46 ` [dunfell 17/28] lua: update to 5.3.6 akuster
2021-01-17 17:46 ` [dunfell 18/28] nss: Security fix CVE-2020-12401 akuster
2021-01-17 17:46 ` [dunfell 19/28] wireshark: Several securtiy fixes akuster
2021-01-17 17:46 ` [dunfell 20/28] nodejs: Fix build with icu 67.1 akuster
2021-01-17 17:46 ` [dunfell 21/28] nodejs: Upgrade to 12.18.3 akuster
2021-01-17 17:46 ` [dunfell 22/28] nodejs: Fix arm32/thumb builds with clang akuster
2021-01-17 17:46 ` [dunfell 23/28] nodejs: Update to 12.19.0 akuster
2021-01-17 17:46 ` [dunfell 24/28] nodejs: 12.19.0 -> 12.19.1 akuster
2021-01-17 17:46 ` [dunfell 25/28] nodejs: 12.19.1 -> 12.20.1 akuster
2021-01-17 17:46 ` [dunfell 26/28] libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer akuster
2021-01-17 17:46 ` [dunfell 27/28] libsdl2-mixer: set --disable-music-ogg-shared to link statically akuster
2021-01-17 17:46 ` [dunfell 28/28] geoclue: select avahi-daemon if nmea enabled akuster
2021-01-17 20:38 ` Andreas Müller [this message]
2021-01-18 4:09 ` [oe] [dunfell 00/28] Patch review Jan 17th akuster
2021-01-18 10:12 ` Diego Santa Cruz
2021-01-18 16:34 ` akuster
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CALbNGRRUDhOSUiqAPBeTiuRofNy8Z0tUcq0n4=HQ3RqM_DzHBA@mail.gmail.com' \
--to=schnitzeltony@gmail.com \
--cc=akuster808@gmail.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.