From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.web09.23648.1610915910310067359 for ; Sun, 17 Jan 2021 12:38:30 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20161025 header.b=BNe3qoY0; spf=pass (domain: gmail.com, ip: 209.85.210.178, mailfrom: schnitzeltony@gmail.com) Received: by mail-pf1-f178.google.com with SMTP id o20so574823pfu.0 for ; Sun, 17 Jan 2021 12:38:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=zybFsrDnZhCVDsYilVCXM4v+nl4pkF6tC0fl9i5zAEc=; b=BNe3qoY0MDaQ9Qn2oS06TG9JcnIbiSZiB6JevjOnRjNBa4+fZizT2zfTW54/YeY2dN 7GBwhRrjRW4YTFTpS2uwfJcpq8gnGbE6adRH7pNAUFOzDBrmJ2n1n8DMWCAjXrKY86UA uocTwtiKwIQUjgILE3NY5hWhG3idmSRjcUvKWtKma3KY0ZCg+yvx81Sh6KYDv+mWosJ8 1NHU/zoBQ05eFIFj/zNZ2Nl9ECEtRHtid2Fvm3ZIDt6OOltAoCUw5jTYuk8zGxgwZKoL WvSoKbJWwkpQtHBQGyDqBl42ayVADVRaefQrLgFb32siQFRrfY8fYVu91bH+mKoIKN1i j/Ww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=zybFsrDnZhCVDsYilVCXM4v+nl4pkF6tC0fl9i5zAEc=; b=gh8NDJwQzIysvzUxHHu6YKbe2er09Js7CdpzGp6q/UA9Ck9ATZ2F9ER3WFzQ++P3Pw wZ7QmVb0fJC6VLCTYcjYiCG6tJ0K04Hv63lFio0AhCa6M89erONLW2JBxNLXFKrIgL3l zzXBu1fmmuLVeIUqVSaJoUmxt59khFU3UcGHy3BlvWYi1OeatEVJyDAQFDKoIz88zytp WWui3RLC2pqRvYz12zX1zTmNm0P95RUlrYJq2gSFLrWwT55a9Cb/7RABRZKIJw+Kb9Wy LyQlstHuW8irqnk+yQC2a+FmV1EXvWj1oNaX0wjOiU856bRKlM4ayhDDfaM9oTGJXCx2 BTsw== X-Gm-Message-State: AOAM530UUnaZAHy3vRu2Q2aXU466HKq2JiNefxaoNkStLw1X52jJd68w hpl2afO6chRwE+K3Hp4lTHgFhU+tFusQPW7llnA= X-Google-Smtp-Source: ABdhPJzIu8iwddaQh1zFO1kHql+2XvfgeRylh71OHoQSq8JnrV+EHTz91lN7wK40dKyyOs0qOkCBWYtUYfHw8yBzfvE= X-Received: by 2002:a65:5283:: with SMTP id y3mr22964723pgp.174.1610915909920; Sun, 17 Jan 2021 12:38:29 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?B?QW5kcmVhcyBNw7xsbGVy?= Date: Sun, 17 Jan 2021 21:38:18 +0100 Message-ID: Subject: Re: [oe] [dunfell 00/28] Patch review Jan 17th To: akuster Cc: openembeded-devel Content-Type: text/plain; charset="UTF-8" On Sun, Jan 17, 2021 at 6:46 PM akuster wrote: > > Here is the next batch for Dunfell. Please review and have comments back by Wednesday. > > The following changes since commit f2d02cb71eaff8eb285a1997b30be52486c160ae: > > python3-pyinotify: Add missing ctypes dependency (2020-11-15 11:13:25 -0800) > > are available in the Git repository at: > > git://git.openembedded.org/meta-openembedded-contrib stable/dunfell-nut > http://cgit.openembedded.org/meta-openembedded-contrib/log/?h=stable/dunfell-nut > > Armin Kuster (5): > wireguard-module: fix build issue with 5.4 kernel > mariadb: update to 10.4.17 for cve fixes > lua: update to 5.3.6 > nss: Security fix CVE-2020-12401 > wireshark: Several securtiy fixes > > Chenxi Mao (1): > geoclue: select avahi-daemon if nmea enabled > > Gianfranco (1): > dlt-daemon: add upstream patch to fix CVE-2020-29394 > > Khem Raj (4): > nodejs: Fix build with icu 67.1 > nodejs: Upgrade to 12.18.3 > nodejs: Fix arm32/thumb builds with clang > nodejs: Update to 12.19.0 > > Leon Anavi (1): > php: Upgrade 7.4.4 -> 7.4.9 > > Max Kellermann (1): > php: remove the failing ${D}/${TMPDIR} code > > Roland Hieber (1): > pcsc-lite: provide pcsc-lite-lib-native explicitly for native build > > Sakib Sajal (1): > apache2: upgrade v2.4.43 -> v2.4.46 > > Sean Nyekjaer (1): > nodejs: 12.19.1 -> 12.20.1 > > Stacy Gaikovaia (1): > nodejs: 12.19.0 -> 12.19.1 > > Wang Mingyu (1): > zabbix: CVE-2020-15803 Security Advisory > > Wenlin Kang (2): > lua: fix CVE-2020-15945 > lua: fix CVE-2020-24371 > > Zang Ruochen (1): > mcpp: Normalize the patch format of CVE > > Zheng Ruoqin (4): > samba: CVE-2020-14318 Security Advisory > samba: CVE-2020-14383 Security Advisory > php: CVE-2020-7070 > php: CVE-2020-7069 > > jabdoa2 (2): > libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer > libsdl2-mixer: set --disable-music-ogg-shared to link statically > > viatsk (1): > tcpdump: Patch for CVE-2020-8037 > > .../samba/samba/CVE-2020-14318.patch | 142 +++++++++++++++ > .../samba/samba/CVE-2020-14383.patch | 112 ++++++++++++ > .../samba/samba_4.10.18.bb | 2 + > ...NC_-START-END-were-backported-to-5.4.patch | 29 +++ > .../wireguard-module_1.0.20200401.bb | 3 +- > ...ping-don-t-allocate-a-too-large-buff.patch | 70 ++++++++ > .../recipes-support/tcpdump/tcpdump_4.9.3.bb | 1 + > ...wireshark_3.2.7.bb => wireshark_3.2.10.bb} | 2 +- > .../zabbix/zabbix/CVE-2020-15803.patch | 36 ++++ > .../zabbix/zabbix_4.4.6.bb | 1 + > ...e_10.4.12.bb => mariadb-native_10.4.17.bb} | 0 > meta-oe/recipes-dbs/mysql/mariadb.inc | 6 +- > ...-breakage-from-lock_guard-error-6161.patch | 32 ---- > .../mariadb/0001-Fix-library-LZ4-lookup.patch | 19 +- > .../mysql/mariadb/c11_atomics.patch | 24 ++- > .../configure.cmake-fix-valgrind.patch | 10 +- > .../mariadb/fix-a-building-failure.patch | 13 +- > .../mysql/mariadb/fix-arm-atomic.patch | 13 +- > ...Lists.txt-fix-gen_lex_hash-not-found.patch | 12 +- > ...akeLists.txt-fix-do_populate_sysroot.patch | 10 +- > ...{mariadb_10.4.12.bb => mariadb_10.4.17.bb} | 0 > ...rriers-cannot-be-active-during-sweep.patch | 90 ++++++++++ > .../lua/lua/CVE-2020-15945.patch | 167 ++++++++++++++++++ > .../lua/{lua_5.3.5.bb => lua_5.3.6.bb} | 8 +- > .../mcpp/files/CVE-2019-14274.patch | 34 ++++ > .../mcpp/files/ice-mcpp.patch | 31 ---- > meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb | 3 +- > ...gister-r7-because-llvm-now-issues-an.patch | 53 ++++++ > ...-passing-multiple-libs-to-pkg_config.patch | 41 ----- > ...allow-use-of-system-installed-brotli.patch | 66 ------- > ...Install-both-binaries-and-use-libdir.patch | 28 ++- > .../{nodejs_12.14.1.bb => nodejs_12.20.1.bb} | 12 +- > .../php/php/CVE-2020-7069.patch | 158 +++++++++++++++++ > .../php/php/CVE-2020-7070.patch | 24 +++ > .../php/php/debian-php-fixheader.patch | 27 +-- > .../php/{php_7.4.4.bb => php_7.4.9.bb} | 16 +- > .../dlt-daemon/dlt-daemon/275.patch | 38 ++++ > .../dlt-daemon/dlt-daemon_2.18.4.bb | 1 + > .../libsdl/libsdl2-mixer_2.0.4.bb | 2 +- > .../geoclue/geoclue_2.5.3.bb | 2 +- > .../nss/nss/CVE-2020-12401.patch | 52 ++++++ > meta-oe/recipes-support/nss/nss_3.51.1.bb | 1 + > .../pcsc-lite/pcsc-lite_1.8.26.bb | 1 + > .../{apache2_2.4.43.bb => apache2_2.4.46.bb} | 4 +- > 44 files changed, 1111 insertions(+), 285 deletions(-) > create mode 100644 meta-networking/recipes-connectivity/samba/samba/CVE-2020-14318.patch > create mode 100644 meta-networking/recipes-connectivity/samba/samba/CVE-2020-14383.patch > create mode 100644 meta-networking/recipes-kernel/wireguard/files/0001-compat-SYM_FUNC_-START-END-were-backported-to-5.4.patch > create mode 100644 meta-networking/recipes-support/tcpdump/tcpdump/0001-PPP-When-un-escaping-don-t-allocate-a-too-large-buff.patch > rename meta-networking/recipes-support/wireshark/{wireshark_3.2.7.bb => wireshark_3.2.10.bb} (96%) > create mode 100644 meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch > rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.4.12.bb => mariadb-native_10.4.17.bb} (100%) > delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/0001-Fix-build-breakage-from-lock_guard-error-6161.patch > rename meta-oe/recipes-dbs/mysql/{mariadb_10.4.12.bb => mariadb_10.4.17.bb} (100%) > create mode 100644 meta-oe/recipes-devtools/lua/lua/0001-Fixed-bug-barriers-cannot-be-active-during-sweep.patch > create mode 100644 meta-oe/recipes-devtools/lua/lua/CVE-2020-15945.patch > rename meta-oe/recipes-devtools/lua/{lua_5.3.5.bb => lua_5.3.6.bb} (87%) > create mode 100644 meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch > create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0001-Remove-use-of-register-r7-because-llvm-now-issues-an.patch > delete mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0001-build-allow-passing-multiple-libs-to-pkg_config.patch > delete mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/0002-build-allow-use-of-system-installed-brotli.patch > rename meta-oe/recipes-devtools/nodejs/{nodejs_12.14.1.bb => nodejs_12.20.1.bb} (94%) > create mode 100644 meta-oe/recipes-devtools/php/php/CVE-2020-7069.patch > create mode 100644 meta-oe/recipes-devtools/php/php/CVE-2020-7070.patch > mode change 100755 => 100644 meta-oe/recipes-devtools/php/php/debian-php-fixheader.patch > rename meta-oe/recipes-devtools/php/{php_7.4.4.bb => php_7.4.9.bb} (97%) > create mode 100644 meta-oe/recipes-extended/dlt-daemon/dlt-daemon/275.patch > create mode 100644 meta-oe/recipes-support/nss/nss/CVE-2020-12401.patch > rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.43.bb => apache2_2.4.46.bb} (98%) > Hi Armin, maybe you take the graphviz patches into account I just sent out. As said in cover letter: graphviz is broken currently Cheers Andreas