Please review this set of patches for kirkstone and have comments back by end of day Tuesday.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5234 The following changes since commit 15c07dff384ce4fb0e90f4f32c182a82101a1c82: go: fix CVE-2023-24537 Infinite loop in parsing (2023-04-21 03:57:50 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut Archana Polampalli (1): nasm: fix CVE-2022-44370 Bruce Ashfield (3): linux-yocto/5.15: update to v5.15.106 linux-yocto/5.15: update to v5.15.107 linux-yocto/5.15: update to v5.15.108 Christoph Lauer (1): populate_sdk_base: add zip options Deepthi Hemraj (1): glibc: stable 2.35 branch updates. Joe Slater (1): ghostscript: fix CVE-2023-29979 Mingli Yu (1): ruby: Fix CVE-2023-28755 Pascal Bach (1): cmake: add CMAKE_SYSROOT to generated toolchain file Ross Burton (1): xserver-xorg: backport fix for CVE-2023-1393 Virendra Thakur (1): qemu: Whitelist CVE-2023-0664 Yogita Urade (2): xorg-lib-common: Add variable to set tarball type libxpm: upgrade 3.5.13 -> 3.5.15 meta/classes/cmake.bbclass | 5 + meta/classes/populate_sdk_base.bbclass | 4 +- meta/recipes-core/glibc/glibc-version.inc | 2 +- .../nasm/nasm/CVE-2022-44370.patch | 104 ++++++++++++++++++ meta/recipes-devtools/nasm/nasm_2.15.05.bb | 1 + meta/recipes-devtools/qemu/qemu.inc | 5 + .../ruby/ruby/CVE-2023-28755.patch | 68 ++++++++++++ meta/recipes-devtools/ruby/ruby_3.1.3.bb | 1 + .../ghostscript/cve-2023-28879.patch | 60 ++++++++++ .../ghostscript/ghostscript_9.55.0.bb | 1 + .../{libxpm_3.5.13.bb => libxpm_3.5.15.bb} | 8 +- .../xorg-lib/xorg-lib-common.inc | 3 +- ...posite-Fix-use-after-free-of-the-COW.patch | 46 ++++++++ .../xorg-xserver/xserver-xorg_21.1.7.bb | 3 +- .../linux/linux-yocto-rt_5.15.bb | 6 +- .../linux/linux-yocto-tiny_5.15.bb | 6 +- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 ++--- 17 files changed, 323 insertions(+), 26 deletions(-) create mode 100644 meta/recipes-devtools/nasm/nasm/CVE-2022-44370.patch create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2023-28755.patch create mode 100644 meta/recipes-extended/ghostscript/ghostscript/cve-2023-28879.patch rename meta/recipes-graphics/xorg-lib/{libxpm_3.5.13.bb => libxpm_3.5.15.bb} (67%) create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-composite-Fix-use-after-free-of-the-COW.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#180543): https://lists.openembedded.org/g/openembedded-core/message/180543 Mute This Topic: https://lists.openembedded.org/mt/98580969/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
