mbox series

dunfell merge request: Feb 22

Message ID 454042d0-ead3-9a8c-6312-9e4a4ab3f73c@gmail.com
State New
Headers show
Series dunfell merge request: Feb 22 | expand

Pull-request

https://git.openembedded.org/meta-openembedded dunfell-next

Message

akuster808 Feb. 22, 2023, 4:30 p.m. UTC 
The following changes since commit e707e9b7cf5c62bff4fee029965a87b22dd4ccba:

   postfix: upgrade 3.4.23 -> 3.4.27 (2023-01-19 07:49:31 -0500)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to 87571345059f82fb7599e3aa82e6fdcfbd361098:

   zeromq: 4.3.2 -> 4.3.4 (2023-02-22 11:24:23 -0500)

----------------------------------------------------------------
Hitendra Prajapati (2):
       net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer Exception
       krb5: CVE-2022-42898 integer overflow vulnerabilities in PAC parsing

Mathieu Dubois-Briand (3):
       nss: Add missing CVE product
       nss: Whitelist CVEs related to libnssdbm
       nss: Fix CVE-2020-25648

Roger Knecht (1):
       zeromq: 4.3.2 -> 4.3.4

Shubham Kulkarni (1):
       python3-pillow: Security fix for CVE-2022-45198

Wang Mingyu (1):
       apache2: upgrade 2.4.54 -> 2.4.55

  .../net-snmp/net-snmp/CVE-2022-44792-CVE-2022-44793.patch       | 116 
++++++++++++++++++++
  meta-networking/recipes-protocols/net-snmp/net-snmp_5.8.bb      | 1 +
  meta-oe/recipes-connectivity/krb5/krb5/CVE-2022-42898.patch     | 110 
+++++++++++++++++++
  meta-oe/recipes-connectivity/krb5/krb5_1.17.1.bb                | 1 +
  ...1-CMakeLists-txt-Avoid-host-specific-path-to-libsodium.patch | 8 +-
  .../zeromq/{zeromq_4.3.2.bb => zeromq_4.3.4.bb} |   4 +-
  meta-oe/recipes-support/nss/nss/CVE-2020-25648.patch            | 163 
++++++++++++++++++++++++++++
  meta-oe/recipes-support/nss/nss_3.51.1.bb                       | 7 ++
  .../python/python3-pillow/0001-CVE-2022-45198.patch             | 26 +++++
  meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb     | 1 +
  .../apache2/{apache2_2.4.54.bb => apache2_2.4.55.bb} |   2 +-
  11 files changed, 432 insertions(+), 7 deletions(-)
  create mode 100644 
meta-networking/recipes-protocols/net-snmp/net-snmp/CVE-2022-44792-CVE-2022-44793.patch
  create mode 100644 
meta-oe/recipes-connectivity/krb5/krb5/CVE-2022-42898.patch
  rename meta-oe/recipes-connectivity/zeromq/{zeromq_4.3.2.bb => 
zeromq_4.3.4.bb} (87%)
  create mode 100644 meta-oe/recipes-support/nss/nss/CVE-2020-25648.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-pillow/0001-CVE-2022-45198.patch
  rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.54.bb => 
apache2_2.4.55.bb} (99%)

Comments

Khem Raj Feb. 22, 2023, 5:17 p.m. UTC | #1 
merged thanks Armin

On Wed, Feb 22, 2023 at 8:30 AM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit e707e9b7cf5c62bff4fee029965a87b22dd4ccba:
>
>    postfix: upgrade 3.4.23 -> 3.4.27 (2023-01-19 07:49:31 -0500)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded dunfell-next
>
> for you to fetch changes up to 87571345059f82fb7599e3aa82e6fdcfbd361098:
>
>    zeromq: 4.3.2 -> 4.3.4 (2023-02-22 11:24:23 -0500)
>
> ----------------------------------------------------------------
> Hitendra Prajapati (2):
>        net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer Exception
>        krb5: CVE-2022-42898 integer overflow vulnerabilities in PAC parsing
>
> Mathieu Dubois-Briand (3):
>        nss: Add missing CVE product
>        nss: Whitelist CVEs related to libnssdbm
>        nss: Fix CVE-2020-25648
>
> Roger Knecht (1):
>        zeromq: 4.3.2 -> 4.3.4
>
> Shubham Kulkarni (1):
>        python3-pillow: Security fix for CVE-2022-45198
>
> Wang Mingyu (1):
>        apache2: upgrade 2.4.54 -> 2.4.55
>
>   .../net-snmp/net-snmp/CVE-2022-44792-CVE-2022-44793.patch       | 116
> ++++++++++++++++++++
>   meta-networking/recipes-protocols/net-snmp/net-snmp_5.8.bb      | 1 +
>   meta-oe/recipes-connectivity/krb5/krb5/CVE-2022-42898.patch     | 110
> +++++++++++++++++++
>   meta-oe/recipes-connectivity/krb5/krb5_1.17.1.bb                | 1 +
>   ...1-CMakeLists-txt-Avoid-host-specific-path-to-libsodium.patch | 8 +-
>   .../zeromq/{zeromq_4.3.2.bb => zeromq_4.3.4.bb} |   4 +-
>   meta-oe/recipes-support/nss/nss/CVE-2020-25648.patch            | 163
> ++++++++++++++++++++++++++++
>   meta-oe/recipes-support/nss/nss_3.51.1.bb                       | 7 ++
>   .../python/python3-pillow/0001-CVE-2022-45198.patch             | 26 +++++
>   meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb     | 1 +
>   .../apache2/{apache2_2.4.54.bb => apache2_2.4.55.bb} |   2 +-
>   11 files changed, 432 insertions(+), 7 deletions(-)
>   create mode 100644
> meta-networking/recipes-protocols/net-snmp/net-snmp/CVE-2022-44792-CVE-2022-44793.patch
>   create mode 100644
> meta-oe/recipes-connectivity/krb5/krb5/CVE-2022-42898.patch
>   rename meta-oe/recipes-connectivity/zeromq/{zeromq_4.3.2.bb =>
> zeromq_4.3.4.bb} (87%)
>   create mode 100644 meta-oe/recipes-support/nss/nss/CVE-2020-25648.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-pillow/0001-CVE-2022-45198.patch
>   rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.54.bb =>
> apache2_2.4.55.bb} (99%)
>