Please review this set of changes for kirkstone and have comments back by end of day Friday, September 15.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5876 The following changes since commit 47a1dd7f389e3cf4ac2dc5fc21dccc870aafab4a: sysklogd: fix integration with systemd-journald (2023-09-05 13:34:12 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut Meenali Gupta (1): flac: fix CVE-2020-22219 Michael Halstead (1): yocto-uninative: Update to 4.3 Narpat Mali (1): python3-pygments: Fix CVE-2022-40896 Siddharth Doshi (1): gdb: Fix CVE-2023-39128 Soumya Sambu (1): libxml2: Fix CVE-2023-39615 Yogita Urade (3): dropbear: fix CVE-2023-36328 qemu: fix CVE-2021-3638 webkitgtk: fix CVE-2022-48503 meta/conf/distro/include/yocto-uninative.inc | 8 +- meta/recipes-core/dropbear/dropbear.inc | 1 + .../dropbear/dropbear/CVE-2023-36328.patch | 144 +++++++++++ .../libxml/libxml2/CVE-2023-39615-0001.patch | 37 +++ .../libxml/libxml2/CVE-2023-39615-0002.patch | 72 ++++++ meta/recipes-core/libxml/libxml2_2.9.14.bb | 2 + meta/recipes-devtools/gdb/gdb.inc | 1 + .../gdb/gdb/0011-CVE-2023-39128.patch | 75 ++++++ .../python3-pygments/CVE-2022-40896.patch | 124 ++++++++++ .../python/python3-pygments_2.11.2.bb | 2 + meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3638.patch | 88 +++++++ .../flac/files/CVE-2020-22219.patch | 197 +++++++++++++++ meta/recipes-multimedia/flac/flac_1.3.4.bb | 1 + .../webkit/webkitgtk/CVE-2022-48503.patch | 225 ++++++++++++++++++ meta/recipes-sato/webkit/webkitgtk_2.36.8.bb | 1 + 16 files changed, 975 insertions(+), 4 deletions(-) create mode 100644 meta/recipes-core/dropbear/dropbear/CVE-2023-36328.patch create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2023-39615-0001.patch create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2023-39615-0002.patch create mode 100644 meta/recipes-devtools/gdb/gdb/0011-CVE-2023-39128.patch create mode 100644 meta/recipes-devtools/python/python3-pygments/CVE-2022-40896.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3638.patch create mode 100644 meta/recipes-multimedia/flac/files/CVE-2020-22219.patch create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2022-48503.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#187595): https://lists.openembedded.org/g/openembedded-core/message/187595 Mute This Topic: https://lists.openembedded.org/mt/101338047/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-