This is really helpful. I think we could automate it for other releases too.
On Thu, Nov 13, 2025 at 12:38 PM Gyorgy Sarvari via lists.openembedded.org <[email protected]> wrote: > You might have noticed that I have included ptest results in this PR's > description - I intend to make this a regular thing for Kirkstone > releases for now. These tests were compiled and executed using the > default toolchain, on qemux86-64. > > From the next release I plan to attach the ptest logs to the actual > workflow execution, but for now it is only hosted on my own server (it > won't stay there forever, but I plan to keep the link alive at least > until the next release, or so). > > The current set includes all ptest-enabled recipes, except for 6: > > psqlodbc > python3-execnet > libnet-dns-sec-perl-ptest > libnet-ssleay-perl-ptest > nftables-ptest > clutter-1.0-ptest > > These are not working as they should, usually they are missing some > RDEPENDS, and they also require some arcane settings which I couldn't > yet figure out completely. I plan to spend more time on these also in > the near future, but if anyone would like to fix any of them up, that > would help a lot really. > > In case you would like to have the tests executed on a different > toolchain/target combination also, I'm open for that - but if it doesn't > work out of the box, I might need some help with the fixup. > > Just as I closed my previous email: if you have any question or > comments, please let me know. Thank you. > > On 11/13/25 21:34, Gyorgy Sarvari via lists.openembedded.org wrote: > > Hello, > > > > This new Kirkstone Pull Request contains many CVE and ptest > > fixes - thank you all who contributed to this release. > > > > arm build logs: > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19295298643/job/55175680474 > > aarch64 build logs: > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19295436972/job/55176140854 > > x86 build logs: > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19295439984/job/55176150598 > > x86-64 build logs: > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19260539512/job/55064120322 > > YP compatibility check logs: > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19295447503/job/55176174138 > > ptest build and run results (x86-64, gcc+glibc): > https://github.com/OldManYellsAtCloud/meta-oe-test/actions/runs/19297105771 > > ptest logs (change the placeholders): sarvari $dot me $slash yocto > $slash ptest-kirkstone-2025-11.tar.gz > > > > Please let me know if you have any questions or comments. > > > > Thank you > > > > --- > > > > The following changes since commit > 96fbc156364fd78530d2bfbe1b8a77789f52997d: > > > > collectd: set working SRC_URI (2025-10-02 15:16:50 +0200) > > > > are available in the Git repository at: > > > > git://git.openembedded.org/meta-openembedded-contrib > stable/kirkstone-nut > > > > for you to fetch changes up to 07ac1890c843b374c27e150f1a2e53ad3db2a8e4: > > > > libssh: fix CVE-2025-8277 (2025-11-11 08:50:50 +0100) > > > > ---------------------------------------------------------------- > > Alexandre Truong (1): > > evince: Update status for CVE-2011-0433 and CVE-2011-5244 > > > > Archana Polampalli (2): > > tcpreplay: fix CVE-2025-9157 > > tcpreplay: fix CVE-2025-51006 > > > > Changqing Li (1): > > keyutils: fix ptest failed since "+++ Can't Determine Endianness" > > > > Chen Qi (1): > > frr: add CVE_PRODUCT > > > > Derek Straka (1): > > python3-typeguard: update ptest dependencies > > > > Divya Chellam (3): > > mariadb: fix CVE-2025-21490 > > jq: fix CVE-2025-9403 > > mariadb: fix CVE-2025-30722 > > > > Gyorgy Sarvari (86): > > ace: ignore CVE-2009-1147 > > apache2: ignore irrelevant CVEs > > civetweb: patch CVE-2020-27304 > > dovecot: patch CVE-2022-30550 > > dovecot: patch CVE-2021-33515 > > botan: patch CVE-2022-43705 > > botan: patch CVE-2024-39312 > > botan: patch CVE-2024-50382 and CVE-2024-50383 > > iperf2: ignore irrelevant CVEs > > zlog: patch CVE-2021-43521 > > zchunk: patch CVE-2023-46228 > > webmin: patch CVE-2017-15644, CVE-2017-15645 and CVE-2017-15646 > > webmin: patch CVE-2017-17089 > > webmin: patch CVE-2019-15642 > > webmin: patch CVE-2022-0824 > > webmin: patch CVE-2022-0829 > > apache2: ignore CVE-2025-3891 > > faad2: patch CVE-2021-32272 > > faad2: patch CVE-2021-32273 > > faad2: patch CVE-2021-32274 and CVE-2021-32277 > > faad2: patch CVE-2021-32278 > > cli11: fix ptests > > fmt: fix ptests > > function2: fix ptests > > kernel-selftest: fix ptest > > keyutils: add missing ptest dependencies > > libdbi-perl: fix ptests > > libjcat: fix ptests > > libmanette: fix ptests > > libxml++-5.0: fix ptests > > pv: fix ptests > > sdbus-c++: fix ptest script output > > python3-ujson: fix run-ptest script > > python3-soupsieve: fix ptests > > python3-betamax: fix ptests > > python3-yarl: fix ptests (and make it compatible with current > python) > > cryptsetup: extend licenses with Apache and CC0 > > zchunk: add ptest support > > wavpack: patch CVE-2016-10169 > > netkit-telnet: patch CVE-2022-39028 > > renderdoc: patch CVE-2023-33863, CVE-2023-33864 and CVE-2023-33865 > > squid: patch CVE-2021-46784 > > squid: patch CVE-2022-41317 > > squid: patch CVE-2022-41318 > > squid: patch CVE-2023-46724 > > squid: patch CVE-2025-59362 > > squid: fix esi PACKAGECONFIG > > python3-py-cpuinfo: fix ptests > > python3-requests-toolbelt: disable tests with expired certificate > > python3-pint: fix ptests > > python3-gevent: fix syntax error in cve patch > > python3-gunicorn: add patch work with geventlet > > klibc: patch CVE-2021-31870 > > klibc: patch CVE-2021-31871 > > klibc: patch CVE-2021-31872 > > klibc: patch CVE-2021-31873 > > gattlib: ignore CVE-2019-6498 > > iptraf-ng: patch CVE-2024-52949 > > keepalived: patch CVE-2021-44225 > > libxml-libxml-perl: fix ptests > > libunix-statgrab: fix ptests > > libtest-harness-perl: fix ptests > > python3-scapy: fix ptests > > freediameter: fix run-ptest reporting > > net-snmp: fix ptests > > sshfs-fuse: fix ptests > > fuse3: fix ptests > > libopenmpt: fix ptests > > libauthen-sasl-perl: fix ptest > > libconfig-autoconf-perl: fix ptests > > libcrypt-openssl-guess-perl: fix ptests > > libdbd-sqlite-perl: fix ptests > > libfile-slurper-perl: fix ptests > > libmime-types-perl: fix ptests > > libencode-perl: fix ptests > > mongodb: add tzdata to runtime dependencies > > poco: fix ptests > > ostree: fix ptests > > libxml++: fix ptests > > python3-aspectlib: fix ptests > > libnet-dns-perl: fix ptests > > gimp: ignore CVE-2007-3741 > > inotify-tools: add PASS/FAIL status to run-ptest script > > gimp: patch CVE-2022-30067 > > gimp: patch CVE-2022-32990 > > poco: remove mongodb from ptest RDEPENDS > > > > Khem Raj (4): > > libteam: Add missing dependencies revealed by ptests > > oprofile: Fix failing ptests > > python3-whoosh: Fix an intermittent ptest > > openl2tp: Fix ptests > > > > Nikhil R (1): > > inotify-tools: add ptest support for inotify-tools > > > > Ninette Adhikari (3): > > xsp: CVE status update for CVE-2006-2658 > > st: Update status for CVE-2017-16224 > > influxdb: Update CVE status for CVE-2019-10329 > > > > Peter Marko (6): > > emlog: set CVE_PRODUCT > > squid: mark CVE-2025-54574 as patched > > dash: set CVE_PRODUCT > > id3lib: mark CVE-2007-4460 as fixed > > hostapd: patch CVE-2025-24912 > > hostapd: patch CVE-2022-37660 > > > > Praveen Kumar (2): > > yasm: fix CVE-2024-22653 > > cjson: upgrade 1.7.18 -> 1.7.19 > > > > Rajeshkumar Ramasamy (3): > > open-vm-tools: fix CVE-2025-41244 > > libssh: fix CVE-2025-4878 > > libssh: fix CVE-2025-8277 > > > > Sana Kazi (1): > > cryptsetup: Update the license field > > > > Saravanan (2): > > udisks2: fix CVE-2025-8067 > > fio: fix CVE-2025-10823 > > > > Soumya Sambu (3): > > iniparser: Fix CVE-2025-0633 > > python3-pillow: Fix CVE-2024-28219 > > python3-aiohttp: Fix CVE-2024-23829 > > > > Vijay Anusuri (11): > > vorbis-tools: Fix CVE-2023-43361 > > redis: Fix CVE-2025-27151 > > redis: Fix CVE-2025-32023 > > redis: Fix CVE-2025-48367 > > redis: Fix CVE-2025-46817 > > redis: Fix CVE-2025-46818 > > redis: Fix CVE-2025-46819 > > redis: Fix CVE-2025-49844 > > proftpd: Fix CVE-2023-48795 > > unbound: Fix for CVE-2022-30698 and CVE-2022-30699 > > unbound: Fix CVE-2022-3204 > > > > Wentao Zhang (1): > > jemalloc: include the missing shell scripts and source the > corresponds shell scripts for some test cases. > > > > Yi Zhao (1): > > mbedtls: upgrade 2.28.9 -> 2.28.10 > > > > Yogita Urade (2): > > poppler: fix CVE-2025-43718 > > poppler: fix CVE-2025-52885 > > > > Zhang Peng (2): > > frr: fix CVE-2024-31949 > > opensc: fix CVE-2023-5992 > > > > simoneScaravati (1): > > fbida: fix make fbpdf build optional > > > > virendra thakur (1): > > imagemagick: Fix CVE-2022-28463 > > > > .../sshfs-fuse/sshfs-fuse/run-ptest | 9 + > > .../sshfs-fuse/sshfs-fuse_3.7.3.bb | 2 + > > .../recipes-support/fuse/fuse3/run-ptest | 1 + > > .../recipes-support/fuse/fuse3_3.10.5.bb | 3 + > > .../recipes-gimp/gimp/gimp/CVE-2022-30067.patch | 64 + > > .../recipes-gimp/gimp/gimp/CVE-2022-32990-1.patch | 97 + > > .../recipes-gimp/gimp/gimp/CVE-2022-32990-2.patch | 178 ++ > > .../recipes-gimp/gimp/gimp/CVE-2022-32990-3.patch | 35 + > > meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb | 10 +- > > meta-gnome/recipes-gnome/evince/evince_42.3.bb | 4 + > > .../klibc/files/CVE-2021-31870.patch | 45 + > > .../klibc/files/CVE-2021-31871.patch | 34 + > > .../klibc/files/CVE-2021-31872.patch | 70 + > > .../klibc/files/CVE-2021-31873.patch | 43 + > > meta-initramfs/recipes-devtools/klibc/klibc.inc | 4 + > > .../libopenmpt/libopenmpt_0.6.2.bb | 1 + > > ...issing-include-utf8.h-to-codec_skeleton.c.patch | 28 + > > .../vorbis-tools/vorbis-tools/CVE-2023-43361.patch | 57 + > > .../vorbis-tools/vorbis-tools_1.4.2.bb | 3 +- > > .../0001-Sanitize-upload-filename-like-URL.patch | 27 + > > ...-example-Upload-to-temporary-directory-an.patch | 90 + > > .../recipes-connectivity/civetweb/civetweb_git.bb | 2 + > > .../{mbedtls_2.28.9.bb => mbedtls_2.28.10.bb} | 4 +- > > .../keepalived/keepalived/CVE-2021-44225.patch | 41 + > > .../recipes-daemons/keepalived/keepalived_2.2.2.bb | 1 + > > .../proftpd/files/CVE-2023-48795.patch | 751 +++++++ > > .../recipes-daemons/proftpd/proftpd_1.3.7c.bb | 1 + > > ...correct-and-unnecessary-xmlSetFeature-cal.patch | 35 + > > .../squid/files/CVE-2021-46784.patch | 133 ++ > > .../squid/files/CVE-2022-41317.patch | 26 + > > .../squid/files/CVE-2022-41318.patch | 45 + > > .../squid/files/CVE-2023-46724.patch | 41 + > > .../squid/files/CVE-2023-5824.patch | 2 +- > > .../squid/files/CVE-2025-59362.patch | 51 + > > .../recipes-daemons/squid/squid_4.15.bb | 6 + > > .../python/python3-scapy/run-ptest | 7 + > > .../recipes-devtools/python/python3-scapy_2.4.5.bb | 13 + > > .../netkit-telnet/files/CVE-2022-39028.patch | 72 + > > .../netkit-telnet/netkit-telnet_0.17.bb | 1 + > > .../recipes-protocols/freediameter/files/run-ptest | 2 +- > > .../recipes-protocols/frr/frr/CVE-2024-31949.patch | 153 ++ > > meta-networking/recipes-protocols/frr/frr_8.2.2.bb | 3 + > > .../recipes-protocols/net-snmp/net-snmp_5.9.3.bb | 6 +- > > .../recipes-protocols/openl2tp/openl2tp/run-ptest | 7 +- > > .../recipes-protocols/openl2tp/openl2tp_1.8.bb | 1 + > > ...ndling-passdbs-with-identical-driver-args.patch | 137 ++ > > ...tp-server-connection-Fix-STARTTLS-command.patch | 76 + > > .../recipes-support/dovecot/dovecot_2.3.14.bb | 2 + > > .../open-vm-tools/CVE-2025-41244.patch | 124 ++ > > .../open-vm-tools/open-vm-tools_11.3.5.bb | 1 + > > .../tcpreplay/tcpreplay/CVE-2025-51006.patch | 97 + > > .../tcpreplay/tcpreplay/CVE-2025-9157.patch | 44 + > > .../recipes-support/tcpreplay/tcpreplay_4.4.4.bb | 4 +- > > .../unbound/unbound/CVE-2022-30698_30699.patch | 627 ++++++ > > .../unbound/unbound/CVE-2022-3204.patch | 221 ++ > > .../recipes-support/unbound/unbound_1.15.0.bb | 2 + > > .../meta-python/recipes-dbs/mongodb/mongodb_git.bb | 1 + > > .../recipes-benchmark/fio/fio/CVE-2025-10823.patch | 37 + > > meta-oe/recipes-benchmark/fio/fio_3.30.bb | 2 + > > meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb | 3 + > > meta-oe/recipes-connectivity/ace/ace_6.5.12.bb | 3 + > > .../recipes-connectivity/gattlib/gattlib_git.bb | 3 + > > .../hostapd/hostapd/CVE-2022-37660-01.patch | 249 +++ > > .../hostapd/hostapd/CVE-2022-37660-02.patch | 111 + > > .../hostapd/hostapd/CVE-2022-37660-03.patch | 762 +++++++ > > .../hostapd/hostapd/CVE-2022-37660-04.patch | 85 + > > .../hostapd/hostapd/CVE-2025-24912-01.patch | 79 + > > .../hostapd/hostapd/CVE-2025-24912-02.patch | 70 + > > .../recipes-connectivity/hostapd/hostapd_2.10.bb | 6 + > > meta-oe/recipes-core/emlog/emlog.inc | 2 + > > meta-oe/recipes-core/libxml/libxml++-5.0/run-ptest | 4 + > > meta-oe/recipes-core/libxml/libxml++-5.0_5.0.1.bb | 7 + > > .../libxml/libxml++/libxml++_ptest.patch | 78 - > > meta-oe/recipes-core/libxml/libxml++/run-ptest | 5 +- > > meta-oe/recipes-core/libxml/libxml++_2.42.1.bb | 12 +- > > .../sdbus-c++/sdbus-c++-1.0.0/run-ptest | 12 +- > > ...lue-barriers-to-avoid-compiler-induced-si.patch | 67 + > > ...0001-Address-various-name-constraint-bugs.patch | 749 +++++++ > > ...cate_Store_In_Memory-c-tor-that-takes-a-v.patch | 31 + > > ...ediates-can-sign-their-own-OCSP-responses.patch | 36 + > > ...-validation-of-authority-of-delegation-re.patch | 106 + > > .../botan/botan/0004-review-comments.patch | 28 + > > meta-oe/recipes-crypto/botan/botan_2.19.1.bb | 9 +- > > .../recipes-crypto/cryptsetup/cryptsetup_2.4.3.bb | 6 +- > > meta-oe/recipes-dbs/influxdb/influxdb_1.8.10.bb | 3 + > > meta-oe/recipes-dbs/mysql/mariadb.inc | 2 + > > .../recipes-dbs/mysql/mariadb/CVE-2025-21490.patch | 96 + > > .../recipes-dbs/mysql/mariadb/CVE-2025-30722.patch | 176 ++ > > .../cjson/cjson/CVE-2025-57052.patch | 33 - > > .../cjson/{cjson_1.7.18.bb => cjson_1.7.19.bb} | 3 +- > > .../iptraf/iptraf-ng/CVE-2024-52949.patch | 218 ++ > > meta-oe/recipes-devtools/iptraf/iptraf-ng_1.2.1.bb | 1 + > > meta-oe/recipes-devtools/jemalloc/files/run-ptest | 29 +- > > .../recipes-devtools/jemalloc/jemalloc_5.2.1.bb | 7 +- > > meta-oe/recipes-devtools/jq/jq/CVE-2025-9403.patch | 49 + > > meta-oe/recipes-devtools/jq/jq_git.bb | 1 + > > meta-oe/recipes-devtools/perl/libdbi-perl_1.643.bb | 6 +- > > .../yasm/yasm/CVE-2024-22653.patch | 32 + > > meta-oe/recipes-devtools/yasm/yasm_git.bb | 1 + > > meta-oe/recipes-extended/ostree/ostree/run-ptest | 13 +- > > ...rent-locales-in-remote-gpg-list-keys-test.patch | 102 + > > meta-oe/recipes-extended/ostree/ostree_2021.6.bb | 2 + > > .../redis/redis-7.0.13/CVE-2025-27151.patch | 32 + > > .../redis/redis-7.0.13/CVE-2025-32023.patch | 215 ++ > > .../redis/redis-7.0.13/CVE-2025-46817.patch | 101 + > > .../redis/redis-7.0.13/CVE-2025-46818.patch | 283 +++ > > .../redis/redis-7.0.13/CVE-2025-46819.patch | 161 ++ > > .../redis/redis-7.0.13/CVE-2025-48367.patch | 111 + > > .../redis/redis-7.0.13/CVE-2025-49844.patch | 35 + > > meta-oe/recipes-extended/redis/redis_7.0.13.bb | 7 + > > ...uffer-overflow-at-zlog_conf_build_with_fi.patch | 25 + > > meta-oe/recipes-extended/zlog/zlog_1.2.15.bb | 4 +- > > .../libjcat/install_missing_ptest_binary.patch | 25 + > > meta-oe/recipes-gnome/libjcat/libjcat_0.1.11.bb | 5 + > > meta-oe/recipes-graphics/fbida/fbida_2.14.bb | 5 + > > .../files/0007-make-fbpdf-build-optional.patch | 102 + > > .../renderdoc/CVE-2023-33863-33864-33865-1.patch | 71 + > > .../renderdoc/CVE-2023-33863-33864-33865-2.patch | 72 + > > .../renderdoc/CVE-2023-33863-33864-33865-3.patch | 160 ++ > > .../renderdoc/CVE-2023-33863-33864-33865-4.patch | 28 + > > .../renderdoc/CVE-2023-33863-33864-33865-5.patch | 40 + > > .../recipes-graphics/renderdoc/renderdoc_1.13.bb | 12 +- > > meta-oe/recipes-graphics/suckless/st_0.8.5.bb | 3 + > > .../kernel-selftest/kernel-selftest.bb | 2 +- > > .../kernel-selftest/kernel-selftest/run-ptest | 8 +- > > meta-oe/recipes-kernel/oprofile/oprofile_1.4.0.bb | 9 +- > > .../0001-Check-return-value-of-ltp_data.patch | 31 + > > ...-SBR-frame-length-to-960-and-1024-samples.patch | 87 + > > ...001-fix-heap-buffer-overflow-in-mp4read.c.patch | 37 + > > ...ix-stack-buffer-overflow-in-stringin-ftyp.patch | 28 + > > meta-oe/recipes-multimedia/faad2/faad2_2.8.8.bb | 7 +- > > meta-oe/recipes-multimedia/id3lib/id3lib_3.8.3.bb | 3 + > > .../wavpack/wavpack/CVE-2016-10169.patch | 27 + > > .../recipes-multimedia/wavpack/wavpack_4.60.1.bb | 4 +- > > meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb | 3 + > > ...ox.inc.sh-update-regex-for-getting-endian.patch | 35 + > > .../recipes-security/keyutils/keyutils_1.6.1.bb | 3 +- > > meta-oe/recipes-shells/dash/dash_0.5.11.5.bb | 2 + > > meta-oe/recipes-support/cli11/cli11/run-ptest | 5 + > > meta-oe/recipes-support/cli11/cli11_1.9.1.bb | 11 +- > > meta-oe/recipes-support/fmt/fmt/run-ptest | 5 + > > meta-oe/recipes-support/fmt/fmt_8.1.1.bb | 10 +- > > .../recipes-support/function2/function2/run-ptest | 3 + > > .../recipes-support/function2/function2_4.2.0.bb | 9 +- > > .../imagemagick/files/CVE-2022-28463.patch | 26 + > > .../imagemagick/imagemagick_7.0.10.bb | 1 + > > .../iniparser/iniparser/CVE-2025-0633.patch | 38 + > > meta-oe/recipes-support/iniparser/iniparser_4.1.bb | 1 + > > .../inotify-tools/inotify-tools/run-ptest | 15 + > > .../inotify-tools/inotify-tools_3.22.1.0.bb | 16 +- > > .../libmanette/libmanette/run-ptest | 10 + > > .../recipes-support/libmanette/libmanette_0.2.6.bb | 7 +- > > .../libssh/libssh/CVE-2025-4878-1.patch | 2196 > ++++++++++++++++++++ > > .../libssh/libssh/CVE-2025-4878-2.patch | 33 + > > .../libssh/libssh/CVE-2025-8277-1.patch | 57 + > > .../libssh/libssh/CVE-2025-8277-2.patch | 50 + > > .../libssh/libssh/CVE-2025-8277-3.patch | 50 + > > meta-oe/recipes-support/libssh/libssh_0.8.9.bb | 5 + > > meta-oe/recipes-support/libteam/libteam_1.31.bb | 8 +- > > .../opensc/files/CVE-2023-5992-0001.patch | 359 ++++ > > .../opensc/files/CVE-2023-5992-0002.patch | 269 +++ > > .../opensc/files/CVE-2023-5992-0003.patch | 41 + > > .../opensc/files/CVE-2023-5992-0004.patch | 109 + > > .../opensc/files/CVE-2023-5992-0005.patch | 63 + > > .../opensc/files/CVE-2023-5992-0006.patch | 118 ++ > > .../opensc/files/CVE-2023-5992-0007.patch | 50 + > > .../opensc/files/CVE-2023-5992-0008.patch | 37 + > > .../opensc/files/CVE-2023-5992-0009.patch | 123 ++ > > .../opensc/files/CVE-2023-5992-0010.patch | 75 + > > meta-oe/recipes-support/opensc/opensc_0.22.0.bb | 10 + > > ...se-96-bit-IV-with-aes-256-gcm-to-fix-4347.patch | 26 + > > meta-oe/recipes-support/poco/poco/run-ptest | 18 +- > > meta-oe/recipes-support/poco/poco_1.11.2.bb | 20 +- > > .../poppler/poppler/CVE-2025-43718.patch | 31 + > > .../poppler/poppler/CVE-2025-52885.patch | 30 + > > meta-oe/recipes-support/poppler/poppler_22.04.0.bb | 2 + > > meta-oe/recipes-support/pv/pv_1.6.20.bb | 2 +- > > .../udisks/udisks2/CVE-2025-8067.patch | 37 + > > meta-oe/recipes-support/udisks/udisks2_2.9.4.bb | 4 +- > > ...overflow-errors-in-malformed-zchunk-files.patch | 105 + > > meta-oe/recipes-support/zchunk/zchunk/run-ptest | 139 ++ > > meta-oe/recipes-support/zchunk/zchunk_1.2.0.bb | 14 +- > > .../libauthen/libauthen-sasl-perl_2.16.bb | 4 + > > .../files/0001-correct-libperl-regex.patch | 42 + > > .../libconfig/libconfig-autoconf-perl_0.319.bb | 16 +- > > .../libcrypt/libcrypt-openssl-guess-perl_0.15.bb | 1 + > > .../recipes-perl/libdb/libdbd-sqlite-perl_1.68.bb | 3 + > > .../recipes-perl/libencode/libencode-perl_3.17.bb | 2 + > > .../libfile/libfile-slurper-perl_0.013.bb | 5 + > > .../libmime/libmime-types-perl_2.17.bb | 2 +- > > meta-perl/recipes-perl/libnet/files/run-ptest | 6 + > > .../recipes-perl/libnet/libnet-dns-perl_1.33.bb | 11 +- > > .../libstatgrab/libunix-statgrab_0.112.bb | 4 + > > .../libtest/libtest-harness-perl_3.44.bb | 12 + > > .../libxml/libxml-libxml-perl_2.0134.bb | 2 + > > .../python/python3-aiohttp/CVE-2024-23829.patch | 344 +++ > > .../python/python3-aiohttp_3.8.6.bb | 1 + > > .../0001-fix-failing-ptests.patch | 54 + > > .../python/python3-aspectlib_1.5.2.bb | 1 + > > .../fix-direct-calls-to-test-fixtures.patch | 41 + > > .../python/python3-betamax/fix-failing-ptest.patch | 44 + > > .../python/python3-betamax/run-ptest | 6 + > > .../python/python3-betamax_0.8.1.bb | 2 + > > .../python/python3-gevent/CVE-2023-41419.patch | 2 +- > > ...ventlet-worker-ALREADY_HANDLED-WSGI_LOCAL.patch | 54 + > > .../python/python3-gunicorn_20.1.0.bb | 3 +- > > .../python/python3-pillow/CVE-2024-28219.patch | 43 + > > .../python/python3-pillow_9.4.0.bb | 1 + > > .../recipes-devtools/python/python3-pint/run-ptest | 3 +- > > .../recipes-devtools/python/python3-pint_0.19.1.bb | 6 +- > > .../python/python3-py-cpuinfo_8.0.0.bb | 1 + > > .../python/python3-requests-toolbelt/run-ptest | 2 +- > > .../update_tests_for_latest_libxml.patch | 162 ++ > > .../python/python3-soupsieve_2.3.1.bb | 1 + > > .../python/python3-typeguard_2.13.3.bb | 1 + > > .../python/python3-ujson/run-ptest | 2 +- > > ...terminstic-test_minimize_dfa-test-as-XFAI.patch | 29 + > > .../python/python3-whoosh_2.7.4.bb | 2 + > > ...square-bracket-handling-in-URL-netloc-882.patch | 138 ++ > > .../recipes-devtools/python/python3-yarl_1.7.2.bb | 3 +- > > .../recipes-httpd/apache2/apache2_2.4.65.bb | 21 + > > ...-permissions-check-when-saving-allowed-cr.patch | 25 + > > ...Escape-potentially-malicious-HTTP-headers.patch | 53 + > > .../0001-Foreign-module-may-need-a-check.patch | 27 + > > .../0001-HTML-escape-command-description.patch | 29 + > > ...t-names-cannot-contact-special-characters.patch | 26 + > > .../recipes-webadmin/webmin/webmin_1.850.bb | 7 +- > > 227 files changed, 13948 insertions(+), 198 deletions(-) > > create mode 100644 > meta-gnome/recipes-gimp/gimp/gimp/CVE-2022-30067.patch > > create mode 100644 > meta-gnome/recipes-gimp/gimp/gimp/CVE-2022-32990-1.patch > > create mode 100644 > meta-gnome/recipes-gimp/gimp/gimp/CVE-2022-32990-2.patch > > create mode 100644 > meta-gnome/recipes-gimp/gimp/gimp/CVE-2022-32990-3.patch > > create mode 100644 > meta-initramfs/recipes-devtools/klibc/files/CVE-2021-31870.patch > > create mode 100644 > meta-initramfs/recipes-devtools/klibc/files/CVE-2021-31871.patch > > create mode 100644 > meta-initramfs/recipes-devtools/klibc/files/CVE-2021-31872.patch > > create mode 100644 > meta-initramfs/recipes-devtools/klibc/files/CVE-2021-31873.patch > > create mode 100644 > meta-multimedia/recipes-multimedia/vorbis-tools/vorbis-tools/0001-Added-missing-include-utf8.h-to-codec_skeleton.c.patch > > create mode 100644 > meta-multimedia/recipes-multimedia/vorbis-tools/vorbis-tools/CVE-2023-43361.patch > > create mode 100644 > meta-networking/recipes-connectivity/civetweb/civetweb/0001-Sanitize-upload-filename-like-URL.patch > > create mode 100644 > meta-networking/recipes-connectivity/civetweb/civetweb/0002-handle_form-example-Upload-to-temporary-directory-an.patch > > rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_2.28.9.bb > => mbedtls_2.28.10.bb} (96%) > > create mode 100644 > meta-networking/recipes-daemons/keepalived/keepalived/CVE-2021-44225.patch > > create mode 100644 > meta-networking/recipes-daemons/proftpd/files/CVE-2023-48795.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/0001-ESI-Drop-incorrect-and-unnecessary-xmlSetFeature-cal.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/CVE-2021-46784.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/CVE-2022-41317.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/CVE-2022-41318.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/CVE-2023-46724.patch > > create mode 100644 > meta-networking/recipes-daemons/squid/files/CVE-2025-59362.patch > > create mode 100644 > meta-networking/recipes-netkit/netkit-telnet/files/CVE-2022-39028.patch > > create mode 100644 > meta-networking/recipes-protocols/frr/frr/CVE-2024-31949.patch > > create mode 100644 > meta-networking/recipes-support/dovecot/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch > > create mode 100644 > meta-networking/recipes-support/dovecot/dovecot/0001-lib-smtp-smtp-server-connection-Fix-STARTTLS-command.patch > > create mode 100644 > meta-networking/recipes-support/open-vm-tools/open-vm-tools/CVE-2025-41244.patch > > create mode 100644 > meta-networking/recipes-support/tcpreplay/tcpreplay/CVE-2025-51006.patch > > create mode 100644 > meta-networking/recipes-support/tcpreplay/tcpreplay/CVE-2025-9157.patch > > create mode 100644 > meta-networking/recipes-support/unbound/unbound/CVE-2022-30698_30699.patch > > create mode 100644 > meta-networking/recipes-support/unbound/unbound/CVE-2022-3204.patch > > create mode 100644 > meta-oe/recipes-benchmark/fio/fio/CVE-2025-10823.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2022-37660-01.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2022-37660-02.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2022-37660-03.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2022-37660-04.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2025-24912-01.patch > > create mode 100644 > meta-oe/recipes-connectivity/hostapd/hostapd/CVE-2025-24912-02.patch > > create mode 100644 meta-oe/recipes-core/libxml/libxml++-5.0/run-ptest > > delete mode 100644 > meta-oe/recipes-core/libxml/libxml++/libxml++_ptest.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0001-Add-more-value-barriers-to-avoid-compiler-induced-si.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0001-Address-various-name-constraint-bugs.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0001-add-Certificate_Store_In_Memory-c-tor-that-takes-a-v.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0002-FIX-intermediates-can-sign-their-own-OCSP-responses.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0003-FIX-missing-validation-of-authority-of-delegation-re.patch > > create mode 100644 > meta-oe/recipes-crypto/botan/botan/0004-review-comments.patch > > create mode 100644 > meta-oe/recipes-dbs/mysql/mariadb/CVE-2025-21490.patch > > create mode 100644 > meta-oe/recipes-dbs/mysql/mariadb/CVE-2025-30722.patch > > delete mode 100644 > meta-oe/recipes-devtools/cjson/cjson/CVE-2025-57052.patch > > rename meta-oe/recipes-devtools/cjson/{cjson_1.7.18.bb => > cjson_1.7.19.bb} (85%) > > create mode 100644 > meta-oe/recipes-devtools/iptraf/iptraf-ng/CVE-2024-52949.patch > > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2025-9403.patch > > create mode 100644 > meta-oe/recipes-devtools/yasm/yasm/CVE-2024-22653.patch > > create mode 100644 > meta-oe/recipes-extended/ostree/ostree/tests-account-for-different-locales-in-remote-gpg-list-keys-test.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-27151.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-32023.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-46817.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-46818.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-46819.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-48367.patch > > create mode 100644 > meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-49844.patch > > create mode 100644 > meta-oe/recipes-extended/zlog/zlog/0001-Fix-stack-buffer-overflow-at-zlog_conf_build_with_fi.patch > > create mode 100644 > meta-oe/recipes-gnome/libjcat/libjcat/install_missing_ptest_binary.patch > > create mode 100644 > meta-oe/recipes-graphics/fbida/files/0007-make-fbpdf-build-optional.patch > > create mode 100644 > meta-oe/recipes-graphics/renderdoc/renderdoc/CVE-2023-33863-33864-33865-1.patch > > create mode 100644 > meta-oe/recipes-graphics/renderdoc/renderdoc/CVE-2023-33863-33864-33865-2.patch > > create mode 100644 > meta-oe/recipes-graphics/renderdoc/renderdoc/CVE-2023-33863-33864-33865-3.patch > > create mode 100644 > meta-oe/recipes-graphics/renderdoc/renderdoc/CVE-2023-33863-33864-33865-4.patch > > create mode 100644 > meta-oe/recipes-graphics/renderdoc/renderdoc/CVE-2023-33863-33864-33865-5.patch > > create mode 100644 > meta-oe/recipes-multimedia/faad2/faad2/0001-Check-return-value-of-ltp_data.patch > > create mode 100644 > meta-oe/recipes-multimedia/faad2/faad2/0001-Restrict-SBR-frame-length-to-960-and-1024-samples.patch > > create mode 100644 > meta-oe/recipes-multimedia/faad2/faad2/0001-fix-heap-buffer-overflow-in-mp4read.c.patch > > create mode 100644 > meta-oe/recipes-multimedia/faad2/faad2/0001-mp4read.c-fix-stack-buffer-overflow-in-stringin-ftyp.patch > > create mode 100644 > meta-oe/recipes-multimedia/wavpack/wavpack/CVE-2016-10169.patch > > create mode 100644 > meta-oe/recipes-security/keyutils/files/0001-tests-toolbox.inc.sh-update-regex-for-getting-endian.patch > > create mode 100644 meta-oe/recipes-support/cli11/cli11/run-ptest > > create mode 100644 meta-oe/recipes-support/fmt/fmt/run-ptest > > create mode 100644 meta-oe/recipes-support/function2/function2/run-ptest > > create mode 100644 > meta-oe/recipes-support/imagemagick/files/CVE-2022-28463.patch > > create mode 100644 > meta-oe/recipes-support/iniparser/iniparser/CVE-2025-0633.patch > > create mode 100644 > meta-oe/recipes-support/inotify-tools/inotify-tools/run-ptest > > create mode 100644 > meta-oe/recipes-support/libmanette/libmanette/run-ptest > > create mode 100644 > meta-oe/recipes-support/libssh/libssh/CVE-2025-4878-1.patch > > create mode 100644 > meta-oe/recipes-support/libssh/libssh/CVE-2025-4878-2.patch > > create mode 100644 > meta-oe/recipes-support/libssh/libssh/CVE-2025-8277-1.patch > > create mode 100644 > meta-oe/recipes-support/libssh/libssh/CVE-2025-8277-2.patch > > create mode 100644 > meta-oe/recipes-support/libssh/libssh/CVE-2025-8277-3.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0001.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0002.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0003.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0004.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0005.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0006.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0007.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0008.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0009.patch > > create mode 100644 > meta-oe/recipes-support/opensc/files/CVE-2023-5992-0010.patch > > create mode 100644 > meta-oe/recipes-support/poco/poco/0001-fix-test-Use-96-bit-IV-with-aes-256-gcm-to-fix-4347.patch > > create mode 100644 > meta-oe/recipes-support/poppler/poppler/CVE-2025-43718.patch > > create mode 100644 > meta-oe/recipes-support/poppler/poppler/CVE-2025-52885.patch > > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2025-8067.patch > > create mode 100644 > meta-oe/recipes-support/zchunk/zchunk/0001-Handle-overflow-errors-in-malformed-zchunk-files.patch > > create mode 100644 meta-oe/recipes-support/zchunk/zchunk/run-ptest > > create mode 100644 > meta-perl/recipes-perl/libconfig/files/0001-correct-libperl-regex.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-aiohttp/CVE-2024-23829.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-aspectlib/0001-fix-failing-ptests.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-betamax/fix-direct-calls-to-test-fixtures.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-betamax/fix-failing-ptest.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-gunicorn/eventlet-worker-ALREADY_HANDLED-WSGI_LOCAL.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-pillow/CVE-2024-28219.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-soupsieve/update_tests_for_latest_libxml.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-whoosh/0001-Mark-non-determinstic-test_minimize_dfa-test-as-XFAI.patch > > create mode 100644 > meta-python/recipes-devtools/python/python3-yarl/0001-Correct-square-bracket-handling-in-URL-netloc-882.patch > > create mode 100644 > meta-webserver/recipes-webadmin/webmin/files/0001-Add-missing-permissions-check-when-saving-allowed-cr.patch > > create mode 100644 > meta-webserver/recipes-webadmin/webmin/files/0001-Escape-potentially-malicious-HTTP-headers.patch > > create mode 100644 > meta-webserver/recipes-webadmin/webmin/files/0001-Foreign-module-may-need-a-check.patch > > create mode 100644 > meta-webserver/recipes-webadmin/webmin/files/0001-HTML-escape-command-description.patch > > create mode 100644 > meta-webserver/recipes-webadmin/webmin/files/0001-Object-names-cannot-contact-special-characters.patch > > > > > > > > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#121699): https://lists.openembedded.org/g/openembedded-devel/message/121699 Mute This Topic: https://lists.openembedded.org/mt/116281359/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
