mbox series

[meta-oe,0/6] 3rd series for meta-openembedded master

Message ID 20241224124417.2547005-1-peter.marko@siemens.com
Headers show
Series 3rd series for meta-openembedded master | expand

Message

Peter Marko Dec. 24, 2024, 12:44 p.m. UTC 
This time backporting patches and again some CVE_STATUS handling.

Peter Marko (6):
  apache2: ignore CVE-1999-1237
  rtmpdump: mark CVE-2015-8270, CVE-2015-8271 and CVE-2015-8272 as fixed
  rtmpdump: add +git to PV
  libconfuse: patch CVE-2022-40320
  opusfile: patch CVE-2022-47021
  synergy: patch CVE-2020-15117

 .../opusfile/opusfile/CVE-2022-47021.patch    | 44 +++++++++++++++++
 .../opusfile/opusfile_0.12.bb                 |  2 +
 .../rtmpdump/rtmpdump_2.4.bb                  |  5 ++
 .../libconfuse/files/CVE-2022-40320.patch     | 42 ++++++++++++++++
 .../libconfuse/libconfuse_3.3.bb              |  1 +
 .../synergy/synergy/CVE-2020-15117.patch      | 48 +++++++++++++++++++
 .../recipes-support/synergy/synergy_git.bb    |  1 +
 .../recipes-httpd/apache2/apache2_2.4.62.bb   |  1 +
 8 files changed, 144 insertions(+)
 create mode 100644 meta-multimedia/recipes-multimedia/opusfile/opusfile/CVE-2022-47021.patch
 create mode 100755 meta-oe/recipes-support/libconfuse/files/CVE-2022-40320.patch
 create mode 100644 meta-oe/recipes-support/synergy/synergy/CVE-2020-15117.patch