mbox series

scarthgap merge request: Aug 25

Message ID 38e13100-d14c-4b90-87a9-e181e7d3690c@gmail.com
State New
Headers show
Series scarthgap merge request: Aug 25 | expand

Pull-request

https://git.openembedded.org/meta-openembedded scarthgap-next

Message

Armin Kuster Aug. 25, 2024, 8:52 p.m. UTC 
The following changes since commit 64c481d017c1b5b5eae619a367a5e8fa00f1b156:

   libjs-jquery-icheck: Correct LIC_FILES_CHKSUM (2024-08-14 10:19:55 -0400)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded scarthgap-next

for you to fetch changes up to 1235dd4ed4a57e67683c045ad76b6a0f9e896b45:

   python3-twisted: Fix CVE-2024-41671 (2024-08-25 15:15:10 -0400)

----------------------------------------------------------------
Adrian Freihofer (1):
       networkmanager: remove modemmanager rdepends

Ashish Sharma (1):
       nginx: Backport fix for CVE-2024-7347

Esben Haabendal (1):
       netplan: add missing runtime dependencies

Peter Marko (2):
       libndp: Patch CVE-2024-5564
       squid: patch CVE-2024-37894

Soumya Sambu (2):
       gtk+: Fix CVE-2024-6655
       python3-twisted: Fix CVE-2024-41671

Wang Mingyu (1):
       cjson: upgrade 1.7.17 -> 1.7.18

Yogita Urade (2):
       poppler: CVE-2024-6239
       krb5: fix CVE-2024-26458 and CVE-2024-26461

  .../networkmanager/networkmanager_1.46.0.bb |    2 +-
  .../recipes-daemons/squid/files/CVE-2024-37894.patch            | 36 +
  meta-networking/recipes-daemons/squid/squid_6.9.bb |    1 +
  .../meta-python/recipes-connectivity/netplan/netplan_1.0.bb |    1 +
  .../krb5/krb5/CVE-2024-26458_CVE-2024-26461.patch               | 207 
+++++
  meta-oe/recipes-connectivity/krb5/krb5_1.21.3.bb |    1 +
  meta-oe/recipes-connectivity/libndp/libndp/CVE-2024-5564.patch  | 48 +
  meta-oe/recipes-connectivity/libndp/libndp_1.8.bb |    1 +
  .../recipes-devtools/cjson/{cjson_1.7.17.bb => cjson_1.7.18.bb} |    2 +-
  meta-oe/recipes-gnome/gtk+/gtk+/CVE-2024-6655.patch             | 40 +
  meta-oe/recipes-gnome/gtk+/gtk+_2.24.33.bb |    1 +
  .../recipes-support/poppler/poppler/CVE-2024-6239-0001.patch    | 1275 
+++++++++++++++++++++++++++
  .../recipes-support/poppler/poppler/CVE-2024-6239-0002.patch    | 111 +++
  meta-oe/recipes-support/poppler/poppler_23.04.0.bb |    2 +
  .../python/python3-twisted/CVE-2024-41671-0001.patch            | 89 ++
  .../python/python3-twisted/CVE-2024-41671-0002.patch            | 251 
++++++
  meta-python/recipes-devtools/python/python3-twisted_24.3.0.bb |    5 +
  meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-1.patch  | 34 +
  meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-2.patch  | 52 ++
  meta-webserver/recipes-httpd/nginx/nginx.inc |    2 +
  20 files changed, 2159 insertions(+), 2 deletions(-)
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2024-37894.patch
  create mode 100644 
meta-oe/recipes-connectivity/krb5/krb5/CVE-2024-26458_CVE-2024-26461.patch
  create mode 100644 
meta-oe/recipes-connectivity/libndp/libndp/CVE-2024-5564.patch
  rename meta-oe/recipes-devtools/cjson/{cjson_1.7.17.bb => 
cjson_1.7.18.bb} (97%)
  create mode 100644 meta-oe/recipes-gnome/gtk+/gtk+/CVE-2024-6655.patch
  create mode 100644 
meta-oe/recipes-support/poppler/poppler/CVE-2024-6239-0001.patch
  create mode 100644 
meta-oe/recipes-support/poppler/poppler/CVE-2024-6239-0002.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0001.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0002.patch
  create mode 100644 
meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-1.patch
  create mode 100644 
meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-2.patch

Comments

Khem Raj Aug. 26, 2024, 6:20 p.m. UTC | #1 
This is merged, Thanks Armin

On Sun, Aug 25, 2024 at 1:52 PM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit 64c481d017c1b5b5eae619a367a5e8fa00f1b156:
>
>    libjs-jquery-icheck: Correct LIC_FILES_CHKSUM (2024-08-14 10:19:55 -0400)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded scarthgap-next
>
> for you to fetch changes up to 1235dd4ed4a57e67683c045ad76b6a0f9e896b45:
>
>    python3-twisted: Fix CVE-2024-41671 (2024-08-25 15:15:10 -0400)
>
> ----------------------------------------------------------------
> Adrian Freihofer (1):
>        networkmanager: remove modemmanager rdepends
>
> Ashish Sharma (1):
>        nginx: Backport fix for CVE-2024-7347
>
> Esben Haabendal (1):
>        netplan: add missing runtime dependencies
>
> Peter Marko (2):
>        libndp: Patch CVE-2024-5564
>        squid: patch CVE-2024-37894
>
> Soumya Sambu (2):
>        gtk+: Fix CVE-2024-6655
>        python3-twisted: Fix CVE-2024-41671
>
> Wang Mingyu (1):
>        cjson: upgrade 1.7.17 -> 1.7.18
>
> Yogita Urade (2):
>        poppler: CVE-2024-6239
>        krb5: fix CVE-2024-26458 and CVE-2024-26461
>
>   .../networkmanager/networkmanager_1.46.0.bb |    2 +-
>   .../recipes-daemons/squid/files/CVE-2024-37894.patch            | 36 +
>   meta-networking/recipes-daemons/squid/squid_6.9.bb |    1 +
>   .../meta-python/recipes-connectivity/netplan/netplan_1.0.bb |    1 +
>   .../krb5/krb5/CVE-2024-26458_CVE-2024-26461.patch               | 207
> +++++
>   meta-oe/recipes-connectivity/krb5/krb5_1.21.3.bb |    1 +
>   meta-oe/recipes-connectivity/libndp/libndp/CVE-2024-5564.patch  | 48 +
>   meta-oe/recipes-connectivity/libndp/libndp_1.8.bb |    1 +
>   .../recipes-devtools/cjson/{cjson_1.7.17.bb => cjson_1.7.18.bb} |    2 +-
>   meta-oe/recipes-gnome/gtk+/gtk+/CVE-2024-6655.patch             | 40 +
>   meta-oe/recipes-gnome/gtk+/gtk+_2.24.33.bb |    1 +
>   .../recipes-support/poppler/poppler/CVE-2024-6239-0001.patch    | 1275
> +++++++++++++++++++++++++++
>   .../recipes-support/poppler/poppler/CVE-2024-6239-0002.patch    | 111 +++
>   meta-oe/recipes-support/poppler/poppler_23.04.0.bb |    2 +
>   .../python/python3-twisted/CVE-2024-41671-0001.patch            | 89 ++
>   .../python/python3-twisted/CVE-2024-41671-0002.patch            | 251
> ++++++
>   meta-python/recipes-devtools/python/python3-twisted_24.3.0.bb |    5 +
>   meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-1.patch  | 34 +
>   meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-2.patch  | 52 ++
>   meta-webserver/recipes-httpd/nginx/nginx.inc |    2 +
>   20 files changed, 2159 insertions(+), 2 deletions(-)
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2024-37894.patch
>   create mode 100644
> meta-oe/recipes-connectivity/krb5/krb5/CVE-2024-26458_CVE-2024-26461.patch
>   create mode 100644
> meta-oe/recipes-connectivity/libndp/libndp/CVE-2024-5564.patch
>   rename meta-oe/recipes-devtools/cjson/{cjson_1.7.17.bb =>
> cjson_1.7.18.bb} (97%)
>   create mode 100644 meta-oe/recipes-gnome/gtk+/gtk+/CVE-2024-6655.patch
>   create mode 100644
> meta-oe/recipes-support/poppler/poppler/CVE-2024-6239-0001.patch
>   create mode 100644
> meta-oe/recipes-support/poppler/poppler/CVE-2024-6239-0002.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0001.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0002.patch
>   create mode 100644
> meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-1.patch
>   create mode 100644
> meta-webserver/recipes-httpd/nginx/files/CVE-2024-7347-2.patch
>