mbox

[walnascar,00/14] Patch review

Message ID cover.1748446235.git.steve@sakoman.com
State Not Applicable, archived
Delegated to: Steve Sakoman
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut

Message

Steve Sakoman May 28, 2025, 3:33 p.m. UTC 
Please review this set of changes for walnascar and have comments back by
end of day Friday, May 30

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/1673

The following changes since commit 17affdaa600896282e07fb4d64cb23195673baa1:

  build-appliance-image: Update to walnascar head revision (2025-05-23 08:43:13 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/walnascar-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/walnascar-nut

Deepesh Varatharajan (1):
  binutils: Fix CVE-2025-1178

Gyorgy Sarvari (1):
  libmatchbox: upgrade 1.13 -> 1.14

Harish Sadineni (1):
  binutils: Fix CVE-2025-1180

Peter Marko (8):
  sqlite3: patch CVE-2025-3277
  sqlite3: patch CVE-2025-29088
  sqlite3: mark CVE-2025-29087 as patched
  ofono: patch CVE-2024-7537
  xz: patch CVE-2025-31115
  binutils: drop obsolete CVE_STATUS
  binutils: mark CVE-2025-1153 as fixed
  libarchive: upgrade 3.7.8 -> 3.7.9

Wang Mingyu (1):
  epiphany: upgrade 48.0 -> 48.3

Yash Shinde (1):
  gcc: fix incorrect preprocessor line numbers in large files

Yi Zhao (1):
  python3-pygobject: RDEPENDS on gobject-introspection

 .../ofono/ofono/CVE-2024-7537.patch           |  59 +++
 meta/recipes-connectivity/ofono/ofono_2.15.bb |   1 +
 .../binutils/binutils-2.44.inc                |   4 +-
 .../binutils/0015-CVE-2025-1178.patch         |  33 ++
 .../binutils/binutils/CVE-2025-1180.patch     | 165 ++++++
 meta/recipes-devtools/gcc/gcc-14.2.inc        |   1 +
 ...-incorrect-preprocessor-line-numbers.patch | 475 ++++++++++++++++++
 .../python/python3-pygobject_3.52.2.bb        |   1 +
 ...ibarchive_3.7.8.bb => libarchive_3.7.9.bb} |   4 +-
 .../xz/xz/CVE-2025-31115-01.patch             |  29 ++
 .../xz/xz/CVE-2025-31115-02.patch             | 152 ++++++
 .../xz/xz/CVE-2025-31115-03.patch             |  98 ++++
 .../xz/xz/CVE-2025-31115-04.patch             |  56 +++
 meta/recipes-extended/xz/xz_5.6.4.bb          |   4 +
 .../{epiphany_48.0.bb => epiphany_48.3.bb}    |   2 +-
 ...ibmatchbox_1.13.bb => libmatchbox_1.14.bb} |   2 +-
 .../sqlite/sqlite3/CVE-2025-29088.patch       | 179 +++++++
 .../sqlite/sqlite3/CVE-2025-3277.patch        |  29 ++
 meta/recipes-support/sqlite/sqlite3_3.48.0.bb |   5 +-
 19 files changed, 1292 insertions(+), 7 deletions(-)
 create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7537.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0015-CVE-2025-1178.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1180.patch
 create mode 100644 meta/recipes-devtools/gcc/gcc/0028-fix-incorrect-preprocessor-line-numbers.patch
 rename meta/recipes-extended/libarchive/{libarchive_3.7.8.bb => libarchive_3.7.9.bb} (91%)
 create mode 100644 meta/recipes-extended/xz/xz/CVE-2025-31115-01.patch
 create mode 100644 meta/recipes-extended/xz/xz/CVE-2025-31115-02.patch
 create mode 100644 meta/recipes-extended/xz/xz/CVE-2025-31115-03.patch
 create mode 100644 meta/recipes-extended/xz/xz/CVE-2025-31115-04.patch
 rename meta/recipes-gnome/epiphany/{epiphany_48.0.bb => epiphany_48.3.bb} (94%)
 rename meta/recipes-graphics/libmatchbox/{libmatchbox_1.13.bb => libmatchbox_1.14.bb} (95%)
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2025-29088.patch
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch