mbox series

[meta-oe,00/11] upgrade recipes to solve CVEs

Message ID 20241220153629.2499631-1-peter.marko@siemens.com
Headers show
Series upgrade recipes to solve CVEs | expand

Message

Marko, Peter Dec. 20, 2024, 3:36 p.m. UTC
This solves CVEs for meta-openembedded master which can be solved
by recipe version upgrades.

Peter Marko (11):
  opensc: upgrade 0.25.1 -> 0.26.0
  opensc: mark CVE-2024-8443 as fixed
  memcached: add UPSTREAM_CHECK_URI
  memcached: upgrade 1.6.17 -> 1.6.33
  php: upgrade 8.2.20 -> 8.2.26
  libmemcached: remove recipe for version 1.0.7
  libmemcached: merge inc into bb
  libmemcached: ignore CVE-2023-27478
  sassc: ignore CVE-2022-43357
  wireshark: upgrade 4.2.8 -> 4.2.9
  weechat: upgrade 4.0.4 -> 4.5.0

 ...01-use-pkg-config-for-gcrypt-instead.patch |  37 ------
 .../{weechat_4.0.4.bb => weechat_4.5.0.bb}    |   8 +-
 .../libmemcached/libmemcached.inc             |  17 ---
 .../libmemcached/libmemcached_1.0.18.bb       |  21 +++-
 .../libmemcached/libmemcached_1.0.7.bb        |   4 -
 .../0001-Fix-function-protypes.patch          | 110 ------------------
 .../memcached-add-hugetlbfs-check.patch       |  13 ++-
 ...emcached_1.6.17.bb => memcached_1.6.33.bb} |   5 +-
 ...{wireshark_4.2.7.bb => wireshark_4.2.9.bb} |   2 +-
 ...ext-opcache-config.m4-enable-opcache.patch |   4 +-
 ...d-php.m4-don-t-unset-cache-variables.patch |   2 +-
 ...-host-specific-info-from-header-file.patch |   2 +-
 ...har-Makefile.frag-Fix-phar-packaging.patch |   4 +-
 ...ext-imap-config.m4-fix-include-paths.patch |   4 +-
 ...p-don-t-use-broken-wrapper-for-mkdir.patch |   3 +-
 .../php/php/0010-iconv-fix-detection.patch    |   2 +-
 .../php/{php_8.2.20.bb => php_8.2.26.bb}      |   2 +-
 .../{opensc_0.25.1.bb => opensc_0.26.0.bb}    |   6 +-
 meta-oe/recipes-support/sass/sassc_git.bb     |   2 +
 19 files changed, 53 insertions(+), 195 deletions(-)
 delete mode 100644 meta-networking/recipes-irc/weechat/weechat/0001-use-pkg-config-for-gcrypt-instead.patch
 rename meta-networking/recipes-irc/weechat/{weechat_4.0.4.bb => weechat_4.5.0.bb} (79%)
 delete mode 100644 meta-networking/recipes-support/libmemcached/libmemcached.inc
 delete mode 100644 meta-networking/recipes-support/libmemcached/libmemcached_1.0.7.bb
 delete mode 100644 meta-networking/recipes-support/memcached/memcached/0001-Fix-function-protypes.patch
 rename meta-networking/recipes-support/memcached/{memcached_1.6.17.bb => memcached_1.6.33.bb} (93%)
 rename meta-networking/recipes-support/wireshark/{wireshark_4.2.7.bb => wireshark_4.2.9.bb} (97%)
 rename meta-oe/recipes-devtools/php/{php_8.2.20.bb => php_8.2.26.bb} (99%)
 rename meta-oe/recipes-support/opensc/{opensc_0.25.1.bb => opensc_0.26.0.bb} (87%)