| Message ID | cover.1667356805.git.steve@sakoman.com |
|---|---|
| State | Not Applicable, archived |
| Headers | show
Return-Path: <steve@sakoman.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
aws-us-west-2-korg-lkml-1.web.codeaurora.org
Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org
(localhost.localdomain [127.0.0.1])
by smtp.lore.kernel.org (Postfix) with ESMTP id 0D85CC433FE
for <webhook@archiver.kernel.org>; Wed, 2 Nov 2022 02:42:32 +0000 (UTC)
Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com
[209.85.214.172])
by mx.groups.io with SMTP id smtpd.web12.1979.1667356942236447095
for <openembedded-core@lists.openembedded.org>;
Tue, 01 Nov 2022 19:42:22 -0700
Authentication-Results: mx.groups.io;
dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112
header.b=bXuIqiAt;
spf=softfail (domain: sakoman.com, ip: 209.85.214.172,
mailfrom: steve@sakoman.com)
Received: by mail-pl1-f172.google.com with SMTP id d24so15305455pls.4
for <openembedded-core@lists.openembedded.org>;
Tue, 01 Nov 2022 19:42:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sakoman-com.20210112.gappssmtp.com; s=20210112;
h=content-transfer-encoding:mime-version:message-id:date:subject:to
:from:from:to:cc:subject:date:message-id:reply-to;
bh=9CUoH96QfdLByyZdc9JBKhwhKlP79zPCJ1z5SGgTj6c=;
b=bXuIqiAtp3w3GEsPek4iEH5gtcVnd+3qbKkCG6yIID4GMwHds6pPBQpAvknQdJF28/
316WGHdnufmpyntJqZJcZYcKxIuigqybtqQP8eR8e1p1dXXAUc/kfsYiuYvtbKv+84oT
Dhge5FjmcqQmMIMFks7INFFLl40pQPcQZvkUMCIgifx418s950kG0f+B4GZgMUL3pLgy
N3vP+W0WjBbQaaPEHGEjWXVgBz23NRXk/+SKARlieoRaWLv0GsbfNtAVX2qXX/Bjh5j7
uCmsNx/Ai0IZlbbVTDE8OZGXU9l20/9YpqjN5gxaAh94m+5YIyiZ+6HkLnWsXCPV0+2b
wnpw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:mime-version:message-id:date:subject:to
:from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9CUoH96QfdLByyZdc9JBKhwhKlP79zPCJ1z5SGgTj6c=;
b=YydXcWrkg6zPjAhVHPvCBIzy6utE8EZco/d2plEvWvOwfBFAVGCyapPTCgdSyEseGX
Ty+WaZNrZGAEyeW+5BpH/SXbOtu3EelBTv5Q2wAlaKixOrN07ACAwEaL807qPv7mbL7O
qi8wEytadcysvBUN9OsTLcjsrKuh+C4BqIdM9Lg+MWr+1TfxteDHG6/JClkqIXdrOYNY
4XYJqrYeQdpRfc5CmNKmuuftxym0oLTkehL4yZddkauIsUvJ+qE2j4nkwye7nN0ksdhi
oMTWJiHbOAt8veDzlKvBk4qvX3iWdwtuzhjTBK+zzc8mIZ+4mK0yQ0UTnT6eD3Jk3vVY
UnKw==
X-Gm-Message-State: ACrzQf2XzxtykcXIUihow7Eb/OkD7LahW+Mqc4TazpYcfmGKbJdmv++v
582Ljl9sxvHbzH/4bTGfae/Wzv9BY4nPlHyM
X-Google-Smtp-Source:
AMsMyM6UtNAocgmt1P78gcIYM7pbhN7RZhuvCyB01BNEr5jrbNidqWjTI6IgyNwAWLRZWynq9NPNtg==
X-Received: by 2002:a17:902:aa44:b0:186:7a6b:7bbd with SMTP id
c4-20020a170902aa4400b001867a6b7bbdmr22822536plr.78.1667356941037;
Tue, 01 Nov 2022 19:42:21 -0700 (PDT)
Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net.
[72.253.6.214])
by smtp.gmail.com with ESMTPSA id
d18-20020a170902e15200b00186da904da0sm1462846pla.154.2022.11.01.19.42.19
for <openembedded-core@lists.openembedded.org>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 01 Nov 2022 19:42:20 -0700 (PDT)
From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][langdale 00/20] Patch review
Date: Tue, 1 Nov 2022 16:41:50 -1000
Message-Id: <cover.1667356805.git.steve@sakoman.com>
X-Mailer: git-send-email 2.25.1
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
List-Id: <openembedded-core.lists.openembedded.org>
X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by
aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for
<openembedded-core@lists.openembedded.org>; Wed, 02 Nov 2022 02:42:32 -0000
X-Groupsio-URL:
https://lists.openembedded.org/g/openembedded-core/message/172540
|
Please review this set of patches for langdale and have comments back by end of day Friday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4401 The following changes since commit d40f7ddcfbdd5cb1d9f96271fefddf67e9044bb9: openssl: Fix SSL_CERT_FILE to match ca-certs location (2022-10-26 23:01:13 +0100) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/langdale-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/langdale-nut Hitendra Prajapati (1): openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption Jan-Simon Moeller (1): buildtools-tarball: export certificates to python and curl Jeremy Puhlman (1): qemu-native: Add PACKAGECONFIG option for jack Joshua Watt (2): runqemu: Do not perturb script environment runqemu: Fix gl-es argument from causing other arguments to be ignored Kai Kang (1): mesa: only apply patch to fix ALWAYS_INLINE for native Liam Beguin (1): meson: make wrapper options sub-command specific Qiu, Zheng (1): tiff: fix a typo for CVE-2022-2953.patch Ross Burton (6): libx11: apply the fix for CVE-2022-3554 xserver-xorg: ignore CVE-2022-3553 as it is XQuartz-specific xserver-xorg: backport fixes for CVE-2022-3550 and CVE-2022-3551 tiff: fix a number of CVEs qemu: backport the fix for CVE-2022-3165 pango: upgrade 1.50.9 -> 1.50.10 Teoh Jay Shen (1): vim: Upgrade 9.0.0598 -> 9.0.0614 Vyacheslav Yurkov (1): overlayfs: Allow not used mount points wangmy (4): meson: upgrade 0.63.2 -> 0.63.3 mtools: upgrade 4.0.40 -> 4.0.41 ifupdown: upgrade 0.8.37 -> 0.8.39 gnutls: upgrade 3.7.7 -> 3.7.8 meta/classes-recipe/overlayfs.bbclass | 6 +- meta/lib/oe/overlayfs.py | 6 +- .../openssl/openssl/CVE-2022-3358.patch | 55 ++ .../openssl/openssl_3.0.5.bb | 1 + ...{ifupdown_0.8.37.bb => ifupdown_0.8.39.bb} | 2 +- meta/recipes-core/meta/buildtools-tarball.bb | 2 + .../meson/meson/meson-wrapper | 21 +- .../{meson_0.63.2.bb => meson_0.63.3.bb} | 2 +- .../mtools/disable-hardcoded-configs.patch | 6 +- .../{mtools_4.0.40.bb => mtools_4.0.41.bb} | 2 +- meta/recipes-devtools/qemu/qemu.inc | 2 + .../qemu/qemu/CVE-2022-3165.patch | 59 ++ meta/recipes-graphics/mesa/mesa.inc | 4 +- .../{pango_1.50.9.bb => pango_1.50.10.bb} | 2 +- ...ak-in-XRegisterIMInstantiateCallback.patch | 57 ++ .../recipes-graphics/xorg-lib/libx11_1.8.1.bb | 1 + .../xorg-xserver/xserver-xorg.inc | 2 + ...possible-memleaks-in-XkbGetKbdByName.patch | 63 ++ ...ntedString-against-request-length-at.patch | 38 + .../xorg-xserver/xserver-xorg_21.1.4.bb | 2 + ...-of-TIFFTAG_INKNAMES-and-related-TIF.patch | 266 +++++++ ...fcrop-S-option-Make-decision-simpler.patch | 36 + ...-incompatibility-of-Z-X-Y-z-options-.patch | 59 ++ ...ines-require-a-larger-buffer-fixes-2.patch | 653 ++++++++++++++++++ .../libtiff/files/CVE-2022-2953.patch | 2 +- meta/recipes-multimedia/libtiff/tiff_4.4.0.bb | 5 +- .../{gnutls_3.7.7.bb => gnutls_3.7.8.bb} | 2 +- meta/recipes-support/vim/vim.inc | 4 +- scripts/runqemu | 28 +- 29 files changed, 1356 insertions(+), 32 deletions(-) create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2022-3358.patch rename meta/recipes-core/ifupdown/{ifupdown_0.8.37.bb => ifupdown_0.8.39.bb} (97%) rename meta/recipes-devtools/meson/{meson_0.63.2.bb => meson_0.63.3.bb} (98%) rename meta/recipes-devtools/mtools/{mtools_4.0.40.bb => mtools_4.0.41.bb} (93%) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2022-3165.patch rename meta/recipes-graphics/pango/{pango_1.50.9.bb => pango_1.50.10.bb} (94%) create mode 100644 meta/recipes-graphics/xorg-lib/libx11/0001-fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xkb-proof-GetCountedString-against-request-length-at.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-Revised-handling-of-TIFFTAG_INKNAMES-and-related-TIF.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-S-option-Make-decision-simpler.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-disable-incompatibility-of-Z-X-Y-z-options-.patch create mode 100644 meta/recipes-multimedia/libtiff/files/0001-tiffcrop-subroutines-require-a-larger-buffer-fixes-2.patch rename meta/recipes-support/gnutls/{gnutls_3.7.7.bb => gnutls_3.7.8.bb} (97%)