Please review this set of changes for kirkstone and have comments back by end of day Tuesday, January 23
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6471 The following changes since commit ebd61290a644a6d9f2b3701e0e7ea050636da76c: pybootchartgui: fix 2 SyntaxWarnings (2024-01-16 04:10:03 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut Hitendra Prajapati (2): openssl: fix CVE-2023-6237 Excessive time spent checking invalid RSA public keys pam: fix CVE-2024-22365 pam_namespace misses Peter Marko (1): dropbear: backport patch for CVE-2023-48795 Vijay Anusuri (2): gnutls: Fix for CVE-2024-0553 and CVE-2024-0567 xserver-xorg: Multiple CVE fixes Yogita Urade (1): tiff: fix CVE-2023-6228 .../openssl/openssl/CVE-2023-6237.patch | 127 ++++++++++ .../openssl/openssl_3.0.12.bb | 1 + meta/recipes-core/dropbear/dropbear.inc | 1 + .../dropbear/dropbear/CVE-2023-48795.patch | 234 ++++++++++++++++++ .../pam/libpam/CVE-2024-22365.patch | 62 +++++ meta/recipes-extended/pam/libpam_1.5.2.bb | 1 + .../xserver-xorg/CVE-2023-6816.patch | 55 ++++ .../xserver-xorg/CVE-2024-0229-1.patch | 87 +++++++ .../xserver-xorg/CVE-2024-0229-2.patch | 221 +++++++++++++++++ .../xserver-xorg/CVE-2024-0229-3.patch | 41 +++ .../xserver-xorg/CVE-2024-0229-4.patch | 45 ++++ .../xserver-xorg/CVE-2024-0408.patch | 64 +++++ .../xserver-xorg/CVE-2024-0409.patch | 46 ++++ .../xserver-xorg/CVE-2024-21885.patch | 113 +++++++++ .../xserver-xorg/CVE-2024-21886-1.patch | 74 ++++++ .../xserver-xorg/CVE-2024-21886-2.patch | 57 +++++ .../xorg-xserver/xserver-xorg_21.1.8.bb | 10 + .../libtiff/tiff/CVE-2023-6228.patch | 31 +++ meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 1 + .../gnutls/gnutls/CVE-2024-0553.patch | 125 ++++++++++ .../gnutls/gnutls/CVE-2024-0567.patch | 184 ++++++++++++++ meta/recipes-support/gnutls/gnutls_3.7.4.bb | 2 + 22 files changed, 1582 insertions(+) create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2023-6237.patch create mode 100644 meta/recipes-core/dropbear/dropbear/CVE-2023-48795.patch create mode 100644 meta/recipes-extended/pam/libpam/CVE-2024-22365.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2023-6816.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0229-1.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0229-2.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0229-3.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0229-4.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0408.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-0409.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-21885.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-21886-1.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2024-21886-2.patch create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2023-6228.patch create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2024-0553.patch create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2024-0567.patch -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#194094): https://lists.openembedded.org/g/openembedded-core/message/194094 Mute This Topic: https://lists.openembedded.org/mt/103871922/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
