mbox

[mickledore,0/9] Patch review

Message ID cover.1694179812.git.steve@sakoman.com
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut

Message

Steve Sakoman Sept. 8, 2023, 1:46 p.m. UTC 
Please review this set of changes for mickledore and have comments back by
end of day Tuesday, September 12

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5856

The following changes since commit 981fa51afe040550c7c351fff028553d4bbbd1ca:

  vim: update obsolete comment (2023-08-29 06:47:33 -1000)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/mickledore-nut

Alexander Kanavin (2):
  python3: upgrade 3.11.2 -> 3.11.3
  python3: update 3.11.3 -> 3.11.4

Chee Yang Lee (2):
  libssh2: fix CVE-2020-22218
  python3: update to 3.11.5

Kai Kang (2):
  webkitgtk: fix CVE-2023-32439
  webkitgtk: fix CVE-2023-32435

Michael Halstead (1):
  yocto-uninative: Update to 4.3

Sakib Sajal (1):
  go: upgrade 1.20.6 -> 1.20.7

Yogita Urade (1):
  nghttp2: fix CVE-2023-35945

 meta/conf/distro/include/yocto-uninative.inc  |   8 +-
 .../go/{go-1.20.6.inc => go-1.20.7.inc}       |   2 +-
 ...e_1.20.6.bb => go-binary-native_1.20.7.bb} |   6 +-
 ..._1.20.6.bb => go-cross-canadian_1.20.7.bb} |   0
 ...{go-cross_1.20.6.bb => go-cross_1.20.7.bb} |   0
 ...osssdk_1.20.6.bb => go-crosssdk_1.20.7.bb} |   0
 ...o-native_1.20.6.bb => go-native_1.20.7.bb} |   0
 ...runtime_1.20.6.bb => go-runtime_1.20.7.bb} |   0
 .../go/{go_1.20.6.bb => go_1.20.7.bb}         |   0
 ...-search-system-for-headers-libraries.patch |   2 +-
 ...e-stdin-I-O-errors-same-way-as-maste.patch |  12 +-
 ...-use-prefix-value-from-build-configu.patch |   2 +-
 ...tutils-prefix-is-inside-staging-area.patch |   2 +-
 .../python/python3/makerace.patch             |   8 +-
 .../{python3_3.11.2.bb => python3_3.11.5.bb}  |   2 +-
 .../webkit/webkitgtk/CVE-2023-32435.patch     |  59 +++++++
 .../webkit/webkitgtk/CVE-2023-32439.patch     | 128 +++++++++++++++
 meta/recipes-sato/webkit/webkitgtk_2.38.6.bb  |   2 +
 .../libssh2/libssh2/CVE-2020-22218.patch      |  34 ++++
 .../recipes-support/libssh2/libssh2_1.10.0.bb |   1 +
 .../nghttp2/nghttp2/CVE-2023-35945.patch      | 151 ++++++++++++++++++
 .../recipes-support/nghttp2/nghttp2_1.52.0.bb |   1 +
 22 files changed, 398 insertions(+), 22 deletions(-)
 rename meta/recipes-devtools/go/{go-1.20.6.inc => go-1.20.7.inc} (90%)
 rename meta/recipes-devtools/go/{go-binary-native_1.20.6.bb => go-binary-native_1.20.7.bb} (78%)
 rename meta/recipes-devtools/go/{go-cross-canadian_1.20.6.bb => go-cross-canadian_1.20.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-cross_1.20.6.bb => go-cross_1.20.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-crosssdk_1.20.6.bb => go-crosssdk_1.20.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-native_1.20.6.bb => go-native_1.20.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-runtime_1.20.6.bb => go-runtime_1.20.7.bb} (100%)
 rename meta/recipes-devtools/go/{go_1.20.6.bb => go_1.20.7.bb} (100%)
 rename meta/recipes-devtools/python/{python3_3.11.2.bb => python3_3.11.5.bb} (99%)
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2023-32435.patch
 create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2023-32439.patch
 create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2020-22218.patch
 create mode 100644 meta/recipes-support/nghttp2/nghttp2/CVE-2023-35945.patch