Please review this set of changes for kirkstone and have comments back by end of day Thursday, December 11
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/2836 The following changes since commit 80c7fd87fd95a79c6eb5f41b95cf70ccc70d9615: systemd-bootchart: update SRC_URI branch (2025-12-01 07:13:56 -0800) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut Hitendra Prajapati (2): libxml2: Security fix for CVE-2025-7425 openssh: fix CVE-2025-61984 Peter Marko (2): libpng: patch CVE-2025-66293 libmicrohttpd: disable experimental code by default .../openssh/openssh/CVE-2025-61984.patch | 98 +++ .../openssh/openssh_8.9p1.bb | 1 + .../libxml/libxml2/CVE-2025-7425.patch | 802 ++++++++++++++++++ meta/recipes-core/libxml/libxml2_2.9.14.bb | 1 + .../libpng/files/CVE-2025-66293-01.patch | 60 ++ .../libpng/files/CVE-2025-66293-02.patch | 125 +++ .../libpng/libpng_1.6.39.bb | 2 + .../libmicrohttpd/libmicrohttpd_0.9.76.bb | 3 + 8 files changed, 1092 insertions(+) create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2025-61984.patch create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-7425.patch create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2025-66293-01.patch create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2025-66293-02.patch -- 2.43.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#227447): https://lists.openembedded.org/g/openembedded-core/message/227447 Mute This Topic: https://lists.openembedded.org/mt/116702433/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
