[OE-core] [dunfell][PATCH] postgresql: Fix CVE-2022-2625

2022-10-16 Thread Hitendra Prajapati
Upstream-Status: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=5579726bd60a6e7afb04a3548bced348cd5ffd89 Description: CVE-2022-2625 postgresql: Extension scripts replace objects not belonging to the extension. Signed-off-by: Hitendra Prajapati --- .../post

[OE-core] [PATCH] vulkan-loader: Move libvulkan.so to main package

2022-10-16 Thread Tom Hochstein
Since libvulkan.so is commonly loaded dynamically, put it in the main package. Signed-off-by: Tom Hochstein --- meta/recipes-graphics/vulkan/vulkan-loader_1.3.216.0.bb | 5 + 1 file changed, 5 insertions(+) diff --git a/meta/recipes-graphics/vulkan/vulkan-loader_1.3.216.0.bb b/meta/recipes

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Jacob Kroon
On 10/16/22 14:05, Alexander Kanavin wrote: On Sun, 16 Oct 2022 at 09:56, Jacob Kroon wrote: I do think it is reasonable to ask for not being mail-bombed with machine generated emails. I am asking for either to: * put them on a separate mailing list * merge them into one email If keeping core

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Bruce Ashfield
On Sun, Oct 16, 2022 at 9:57 AM Bruce Ashfield wrote: > > > On Sun, Oct 16, 2022 at 8:05 AM Alexander Kanavin > wrote: > >> On Sun, 16 Oct 2022 at 09:56, Jacob Kroon wrote: >> > I do think it is reasonable to ask for not being mail-bombed with >> > machine generated emails. >> > >> > I am askin

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Bruce Ashfield
On Sun, Oct 16, 2022 at 8:05 AM Alexander Kanavin wrote: > On Sun, 16 Oct 2022 at 09:56, Jacob Kroon wrote: > > I do think it is reasonable to ask for not being mail-bombed with > > machine generated emails. > > > > I am asking for either to: > > * put them on a separate mailing list > > * merge

[OE-core] OE-core CVE metrics for langdale on Sun 16 Oct 2022 03:30:01 AM HST

2022-10-16 Thread Steve Sakoman
Branch: langdale New this week: 1 CVEs CVE-2022-3358 (CVSS3: 7.5 HIGH): openssl:openssl-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3358 * Removed this week: 0 CVEs Full list: Found 3 unpatched CVEs CVE-2022-3352 (CVSS3: 7.8 HIGH): vim https://web.nvd.nist.gov/view/vuln/d

[OE-core] OE-core CVE metrics for kirkstone on Sun 16 Oct 2022 03:00:01 AM HST

2022-10-16 Thread Steve Sakoman
Branch: kirkstone New this week: 2 CVEs CVE-2021-36369 (CVSS3: 7.5 HIGH): dropbear https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36369 * CVE-2022-3358 (CVSS3: 7.5 HIGH): openssl:openssl-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3358 * Removed this week: 11 CVE

[OE-core] OE-core CVE metrics for dunfell on Sun 16 Oct 2022 02:30:01 AM HST

2022-10-16 Thread Steve Sakoman
Branch: dunfell New this week: 4 CVEs CVE-2020-27918 (CVSS3: 7.8 HIGH): webkitgtk https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27918 * CVE-2021-36369 (CVSS3: 7.5 HIGH): dropbear https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36369 * CVE-2022-2928 (CVSS3: 7.5 HIGH): dhcp

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Alexander Kanavin
On Sun, 16 Oct 2022 at 09:56, Jacob Kroon wrote: > I do think it is reasonable to ask for not being mail-bombed with > machine generated emails. > > I am asking for either to: > * put them on a separate mailing list > * merge them into one email > > If keeping core updated still is "Alex's problem

[OE-core] OE-core CVE metrics for master on Sun 16 Oct 2022 02:00:01 AM HST

2022-10-16 Thread Steve Sakoman
Branch: master New this week: 1 CVEs CVE-2022-3358 (CVSS3: 7.5 HIGH): openssl:openssl-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3358 * Removed this week: 0 CVEs Full list: Found 3 unpatched CVEs CVE-2022-3352 (CVSS3: 7.8 HIGH): vim https://web.nvd.nist.gov/view/vuln/det

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Jacob Kroon
Hi Alex, On 10/16/22 09:24, Alexander Kanavin wrote: We are asking for help here with version updates. Specifically that you take at least some of these reports and act on them. If you don’t want to do this, fine, but demanding that those reports are not produced because deleting them inconven

Re: [OE-core] [AUH] acpid: upgrading to 2.0.34 SUCCEEDED

2022-10-16 Thread Alexander Kanavin
We are asking for help here with version updates. Specifically that you take at least some of these reports and act on them. If you don’t want to do this, fine, but demanding that those reports are not produced because deleting them inconveniences you is both unreasonable and antagonizing. Keeping