All of lore.kernel.org
 help / color / mirror / Atom feed
* [OE-core][kirkstone 00/32] Patch review
@ 2023-01-23  2:20 Steve Sakoman
  2023-01-23  2:20 ` [OE-core][kirkstone 01/32] go: fix CVE-2022-41717 Excessive memory use in got server Steve Sakoman
                   ` (31 more replies)
  0 siblings, 32 replies; 33+ messages in thread
From: Steve Sakoman @ 2023-01-23  2:20 UTC (permalink / raw)
  To: openembedded-core

Please review this set of patches for kirkstone and have comments back by
end of day Tuesday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4815

The following changes since commit 34de16fd86775c0f2ede1670fec90217e4d11776:

  gtk-icon-cache: Fix GTKIC_CMD if-else condition (2023-01-16 04:41:29 -1000)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut

Alex Kiernan (1):
  classes: image: Set empty weak default IMAGE_LINGUAS

Alexander Kanavin (5):
  libksba: update 1.6.2 -> 1.6.3
  linux-firmware: upgrade 20221109 -> 20221214
  xwayland: upgrade 22.1.5 -> 22.1.7
  xserver-xorg: upgrade 21.1.4 -> 21.1.6
  selftest/virgl: use pkg-config from the host

Antonin Godard (2):
  busybox: always start do_compile with orig config files
  busybox: rm temporary files if do_compile was interrupted

Benoît Mauduit (1):
  lib/oe/reproducible: Use git log without gpg signature

Bruce Ashfield (5):
  linux-yocto/5.15: ltp and squashfs fixes
  linux-yocto/5.15: fix perf build with clang
  linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off
  linux-yocto/5.15: update to v5.15.84
  linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user
    copy

Chen Qi (2):
  dhcpcd: backport two patches to fix runtime error
  libseccomp: fix typo in DESCRIPTION

He Zhe (1):
  lttng-modules: update 2.13.7 -> 2.13.8

Hitendra Prajapati (1):
  go: fix CVE-2022-41717 Excessive memory use in got server

Jan Kircher (1):
  toolchain-scripts: compatibility with unbound variable protection

Jermain Horsman (1):
  cve-check: write the cve manifest to IMGDEPLOYDIR

Khem Raj (1):
  tiff: Add packageconfig knob for webp

Marta Rybczynska (1):
  cve-update-db-native: avoid incomplete updates

Narpat Mali (1):
  ffmpeg: fix for CVE-2022-3341

Pavel Zhukov (1):
  gcc: Refactor linker patches and fix linker on arm with usrmerge

Petr Kubizňák (1):
  harfbuzz: remove bindir only if it exists

Quentin Schulz (1):
  cairo: fix CVE patches assigned wrong CVE number

Randy MacLeod (1):
  vim: upgrade 9.0.0947 -> 9.0.1211

Ross Burton (1):
  cve-update-db-native: show IP on failure

Sandeep Gundlupet Raju (2):
  kernel-fitimage: Adjust order of dtb/dtbo files
  kernel-fitimage: Allow user to select dtb when multiple dtb exists

Saul Wold (1):
  at: Change when files are copied

Steve Sakoman (1):
  Revert "libksba: fix CVE-2022-47629"

 meta/classes/cve-check.bbclass                |   6 +-
 meta/classes/image.bbclass                    |   3 +-
 meta/classes/kernel-fitimage.bbclass          |  21 +-
 meta/classes/toolchain-scripts.bbclass        |   2 +-
 meta/lib/oe/reproducible.py                   |   3 +-
 meta/lib/oeqa/selftest/cases/runtime_test.py  |   2 +-
 .../dhcpcd/dhcpcd_9.4.1.bb                    |   2 +
 ...low-getrandom-sysctl-for-newer-glibc.patch |  30 ++
 ...sep-Allow-newfstatat-syscall-as-well.patch |  31 ++
 meta/recipes-core/busybox/busybox.inc         |  26 +-
 .../recipes-core/meta/cve-update-db-native.bb |  88 ++++--
 meta/recipes-devtools/gcc/gcc-11.3.inc        |   1 -
 ...rm-add-armv9-a-architecture-to-march.patch |  89 +++---
 ...AMIC_LINKER-and-UCLIBC_DYNAMIC_LINKE.patch | 269 +++++++++++++-----
 ...s-fix-v4bx-to-linker-to-support-EABI.patch |  10 +-
 ...019-nios2-Define-MUSL_DYNAMIC_LINKER.patch |  25 --
 meta/recipes-devtools/go/go-1.17.13.inc       |   1 +
 .../go/go-1.18/CVE-2022-41717.patch           |  89 ++++++
 meta/recipes-extended/at/at_3.2.5.bb          |   6 +-
 .../cairo/cairo/CVE-2019-6461.patch           |  46 +--
 .../cairo/cairo/CVE-2019-6462.patch           |  46 ++-
 .../harfbuzz/harfbuzz_4.0.1.bb                |   6 +-
 ...possible-memleaks-in-XkbGetKbdByName.patch |  63 ----
 ...ntedString-against-request-length-at.patch |  38 ---
 ...-xorg_21.1.4.bb => xserver-xorg_21.1.6.bb} |   4 +-
 ...{xwayland_22.1.5.bb => xwayland_22.1.7.bb} |   2 +-
 ...20221109.bb => linux-firmware_20221214.bb} |   4 +-
 .../linux/linux-yocto-rt_5.15.bb              |   6 +-
 .../linux/linux-yocto-tiny_5.15.bb            |   6 +-
 meta/recipes-kernel/linux/linux-yocto_5.15.bb |  26 +-
 ...ules_2.13.7.bb => lttng-modules_2.13.8.bb} |   2 +-
 ...ec-Add-check-for-avformat_new_stream.patch |  67 +++++
 .../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb |   3 +-
 meta/recipes-multimedia/libtiff/tiff_4.3.0.bb |   1 +
 ...overflow-in-the-CRL-signature-parser.patch |  72 -----
 .../libksba/ksba-add-pkgconfig-support.patch  |   6 +-
 .../{libksba_1.6.2.bb => libksba_1.6.3.bb}    |   5 +-
 .../libseccomp/libseccomp_2.5.3.bb            |   2 +-
 meta/recipes-support/vim/vim.inc              |   4 +-
 39 files changed, 662 insertions(+), 451 deletions(-)
 create mode 100644 meta/recipes-connectivity/dhcpcd/files/0001-privsep-Allow-getrandom-sysctl-for-newer-glibc.patch
 create mode 100644 meta/recipes-connectivity/dhcpcd/files/0002-privsep-Allow-newfstatat-syscall-as-well.patch
 delete mode 100644 meta/recipes-devtools/gcc/gcc/0019-nios2-Define-MUSL_DYNAMIC_LINKER.patch
 create mode 100644 meta/recipes-devtools/go/go-1.18/CVE-2022-41717.patch
 delete mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch
 delete mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-proof-GetCountedString-against-request-length-at.patch
 rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.4.bb => xserver-xorg_21.1.6.bb} (80%)
 rename meta/recipes-graphics/xwayland/{xwayland_22.1.5.bb => xwayland_22.1.7.bb} (95%)
 rename meta/recipes-kernel/linux-firmware/{linux-firmware_20221109.bb => linux-firmware_20221214.bb} (99%)
 rename meta/recipes-kernel/lttng/{lttng-modules_2.13.7.bb => lttng-modules_2.13.8.bb} (94%)
 create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-avformat-nutdec-Add-check-for-avformat_new_stream.patch
 delete mode 100644 meta/recipes-support/libksba/libksba/0001-Fix-an-integer-overflow-in-the-CRL-signature-parser.patch
 rename meta/recipes-support/libksba/{libksba_1.6.2.bb => libksba_1.6.3.bb} (86%)

-- 
2.25.1



^ permalink raw reply	[flat|nested] 33+ messages in thread

end of thread, other threads:[~2023-01-23  2:22 UTC | newest]

Thread overview: 33+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-01-23  2:20 [OE-core][kirkstone 00/32] Patch review Steve Sakoman
2023-01-23  2:20 ` [OE-core][kirkstone 01/32] go: fix CVE-2022-41717 Excessive memory use in got server Steve Sakoman
2023-01-23  2:20 ` [OE-core][kirkstone 02/32] ffmpeg: fix for CVE-2022-3341 Steve Sakoman
2023-01-23  2:20 ` [OE-core][kirkstone 03/32] cve-update-db-native: avoid incomplete updates Steve Sakoman
2023-01-23  2:20 ` [OE-core][kirkstone 04/32] cve-update-db-native: show IP on failure Steve Sakoman
2023-01-23  2:20 ` [OE-core][kirkstone 05/32] cve-check: write the cve manifest to IMGDEPLOYDIR Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 06/32] cairo: fix CVE patches assigned wrong CVE number Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 07/32] lttng-modules: update 2.13.7 -> 2.13.8 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 08/32] Revert "libksba: fix CVE-2022-47629" Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 09/32] libksba: update 1.6.2 -> 1.6.3 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 10/32] linux-firmware: upgrade 20221109 -> 20221214 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 11/32] xwayland: upgrade 22.1.5 -> 22.1.7 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 12/32] xserver-xorg: upgrade 21.1.4 -> 21.1.6 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 13/32] linux-yocto/5.15: ltp and squashfs fixes Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 14/32] linux-yocto/5.15: fix perf build with clang Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 15/32] linux-yocto/5.15: libbpf: Fix build warning on ref_ctr_off Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 16/32] linux-yocto/5.15: update to v5.15.84 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 17/32] linux-yocto/5.15: powerpc: Fix reschedule bug in KUAP-unlocked user copy Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 18/32] vim: upgrade 9.0.0947 -> 9.0.1211 Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 19/32] gcc: Refactor linker patches and fix linker on arm with usrmerge Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 20/32] classes: image: Set empty weak default IMAGE_LINGUAS Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 21/32] busybox: always start do_compile with orig config files Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 22/32] busybox: rm temporary files if do_compile was interrupted Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 23/32] kernel-fitimage: Adjust order of dtb/dtbo files Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 24/32] kernel-fitimage: Allow user to select dtb when multiple dtb exists Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 25/32] tiff: Add packageconfig knob for webp Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 26/32] harfbuzz: remove bindir only if it exists Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 27/32] dhcpcd: backport two patches to fix runtime error Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 28/32] libseccomp: fix typo in DESCRIPTION Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 29/32] toolchain-scripts: compatibility with unbound variable protection Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 30/32] at: Change when files are copied Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 31/32] lib/oe/reproducible: Use git log without gpg signature Steve Sakoman
2023-01-23  2:21 ` [OE-core][kirkstone 32/32] selftest/virgl: use pkg-config from the host Steve Sakoman

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.