mbox series

Styhead merge request: Feb 4th

Message ID 11f7608b-0790-4b0f-96c4-398e92f761f7@gmail.com
State New
Headers show
Series Styhead merge request: Feb 4th | expand

Pull-request

https://git.openembedded.org/meta-openembedded styhead-next

Message

akuster808 Feb. 4, 2025, 10:36 p.m. UTC 
The following changes since commit 74b08dcbb1d0f4600527602804544c9d63697ebc:

   libmodule-build-tiny-perl: fix QA Issue: TMPDIR [buildpaths] 
(2025-01-16 09:17:32 -0500)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded styhead-next

for you to fetch changes up to 6851cbf026088a13b2b45f684838d3dc4d7ccfdd:

   lapack: fix buildpaths in ptest also when CBLAS is enabled 
(2025-02-04 14:29:37 -0800)

----------------------------------------------------------------
Hieu Van Nguyen (1):
       gphoto2: Fix /usr/bin/gphoto2 runtime error

Jörg Sommer (2):
       libtinyxml: set CVE product to tinyxml
       libtinyxml2: set CVE product to tinyxml2

Khem Raj (1):
       mpd: Upgrade mpd to 0.23.16

Martin Jansa (2):
       lapack: add PACKAGECONFIG for cblas
       lapack: fix buildpaths in ptest also when CBLAS is enabled

Peter Marko (11):
       libtinyxml: patch CVE-2021-42260
       libtinyxml: patch CVE-2023-34194
       procmail: patch CVE-2014-3618
       procmail: patch CVE-2017-16844.
       audiofile: fix multiple CVEs
       audiofile: patch CVE-2017-6829
       audiofile: fix multiple CVEs
       audiofile: patch CVE-2017-6831
       audiofile: patch CVE-2017-6839
       vorbis-tools: patch CVE-2023-43361
       audiofile: mark CVE-2020-18781 as patched

Zhang Peng (1):
       lapack: fix TMPDIR reference in do_package_qa

  .../mpd/0001-meson.build-support-building-with-ICU-76.patch     | 52 
------------
  .../musicpd/{mpd_0.23.15.bb => mpd_0.23.16.bb} |   3 +-
  .../vorbis-tools/vorbis-tools/CVE-2023-43361.patch              | 38 
+++++++++
  .../recipes-multimedia/vorbis-tools/vorbis-tools_1.4.2.bb       | 1 +
  meta-oe/recipes-devtools/lapack/lapack_3.12.0.bb                | 43 
++++++++++
  meta-oe/recipes-graphics/gphoto2/gphoto2_2.5.28.bb              | 6 +-
  meta-oe/recipes-multimedia/audiofile/audiofile_0.3.6.bb         | 5 ++
  .../files/0004-Always-check-the-number-of-coefficients.patch    | 46 
++++++++++
  ...05-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch | 43 
++++++++++
  .../0006-Check-for-multiplication-overflow-in-sfconvert.patch   | 79 
+++++++++++++++++
  .../0007-Actually-fail-when-error-occurs-in-parseFormat.patch   | 46 
++++++++++
  ...8-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch | 126 
++++++++++++++++++++++++++++
  .../recipes-support/libtinyxml/libtinyxml/CVE-2021-42260.patch  | 27 
++++++
  .../recipes-support/libtinyxml/libtinyxml/CVE-2023-34194.patch  | 31 
+++++++
  meta-oe/recipes-support/libtinyxml/libtinyxml_2.6.2.bb          | 6 +-
  meta-oe/recipes-support/libtinyxml2/libtinyxml2_10.0.0.bb       | 1 +
  meta-oe/recipes-support/procmail/procmail/CVE-2014-3618.patch   | 29 
+++++++
  meta-oe/recipes-support/procmail/procmail/CVE-2017-16844.patch  | 20 +++++
  meta-oe/recipes-support/procmail/procmail_3.22.bb               | 5 +-
  19 files changed, 547 insertions(+), 60 deletions(-)
  delete mode 100644 
meta-multimedia/recipes-multimedia/musicpd/mpd/0001-meson.build-support-building-with-ICU-76.patch
  rename meta-multimedia/recipes-multimedia/musicpd/{mpd_0.23.15.bb => 
mpd_0.23.16.bb} (97%)
  create mode 100644 
meta-multimedia/recipes-multimedia/vorbis-tools/vorbis-tools/CVE-2023-43361.patch
  create mode 100644 
meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
  create mode 100644 
meta-oe/recipes-multimedia/audiofile/files/0005-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  create mode 100644 
meta-oe/recipes-multimedia/audiofile/files/0006-Check-for-multiplication-overflow-in-sfconvert.patch
  create mode 100644 
meta-oe/recipes-multimedia/audiofile/files/0007-Actually-fail-when-error-occurs-in-parseFormat.patch
  create mode 100644 
meta-oe/recipes-multimedia/audiofile/files/0008-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  create mode 100644 
meta-oe/recipes-support/libtinyxml/libtinyxml/CVE-2021-42260.patch
  create mode 100644 
meta-oe/recipes-support/libtinyxml/libtinyxml/CVE-2023-34194.patch
  create mode 100644 
meta-oe/recipes-support/procmail/procmail/CVE-2014-3618.patch
  create mode 100644 
meta-oe/recipes-support/procmail/procmail/CVE-2017-16844.patch

Comments

Khem Raj Feb. 5, 2025, 4:24 a.m. UTC | #1 
Merged now thanks Armin

On Tue, Feb 4, 2025 at 2:36 PM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit 74b08dcbb1d0f4600527602804544c9d63697ebc:
>
>    libmodule-build-tiny-perl: fix QA Issue: TMPDIR [buildpaths]
> (2025-01-16 09:17:32 -0500)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded styhead-next
>
> for you to fetch changes up to 6851cbf026088a13b2b45f684838d3dc4d7ccfdd:
>
>    lapack: fix buildpaths in ptest also when CBLAS is enabled
> (2025-02-04 14:29:37 -0800)
>
> ----------------------------------------------------------------
> Hieu Van Nguyen (1):
>        gphoto2: Fix /usr/bin/gphoto2 runtime error
>
> Jörg Sommer (2):
>        libtinyxml: set CVE product to tinyxml
>        libtinyxml2: set CVE product to tinyxml2
>
> Khem Raj (1):
>        mpd: Upgrade mpd to 0.23.16
>
> Martin Jansa (2):
>        lapack: add PACKAGECONFIG for cblas
>        lapack: fix buildpaths in ptest also when CBLAS is enabled
>
> Peter Marko (11):
>        libtinyxml: patch CVE-2021-42260
>        libtinyxml: patch CVE-2023-34194
>        procmail: patch CVE-2014-3618
>        procmail: patch CVE-2017-16844.
>        audiofile: fix multiple CVEs
>        audiofile: patch CVE-2017-6829
>        audiofile: fix multiple CVEs
>        audiofile: patch CVE-2017-6831
>        audiofile: patch CVE-2017-6839
>        vorbis-tools: patch CVE-2023-43361
>        audiofile: mark CVE-2020-18781 as patched
>
> Zhang Peng (1):
>        lapack: fix TMPDIR reference in do_package_qa
>
>   .../mpd/0001-meson.build-support-building-with-ICU-76.patch     | 52
> ------------
>   .../musicpd/{mpd_0.23.15.bb => mpd_0.23.16.bb} |   3 +-
>   .../vorbis-tools/vorbis-tools/CVE-2023-43361.patch              | 38
> +++++++++
>   .../recipes-multimedia/vorbis-tools/vorbis-tools_1.4.2.bb       | 1 +
>   meta-oe/recipes-devtools/lapack/lapack_3.12.0.bb                | 43
> ++++++++++
>   meta-oe/recipes-graphics/gphoto2/gphoto2_2.5.28.bb              | 6 +-
>   meta-oe/recipes-multimedia/audiofile/audiofile_0.3.6.bb         | 5 ++
>   .../files/0004-Always-check-the-number-of-coefficients.patch    | 46
> ++++++++++
>   ...05-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch | 43
> ++++++++++
>   .../0006-Check-for-multiplication-overflow-in-sfconvert.patch   | 79
> +++++++++++++++++
>   .../0007-Actually-fail-when-error-occurs-in-parseFormat.patch   | 46
> ++++++++++
>   ...8-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch | 126
> ++++++++++++++++++++++++++++
>   .../recipes-support/libtinyxml/libtinyxml/CVE-2021-42260.patch  | 27
> ++++++
>   .../recipes-support/libtinyxml/libtinyxml/CVE-2023-34194.patch  | 31
> +++++++
>   meta-oe/recipes-support/libtinyxml/libtinyxml_2.6.2.bb          | 6 +-
>   meta-oe/recipes-support/libtinyxml2/libtinyxml2_10.0.0.bb       | 1 +
>   meta-oe/recipes-support/procmail/procmail/CVE-2014-3618.patch   | 29
> +++++++
>   meta-oe/recipes-support/procmail/procmail/CVE-2017-16844.patch  | 20 +++++
>   meta-oe/recipes-support/procmail/procmail_3.22.bb               | 5 +-
>   19 files changed, 547 insertions(+), 60 deletions(-)
>   delete mode 100644
> meta-multimedia/recipes-multimedia/musicpd/mpd/0001-meson.build-support-building-with-ICU-76.patch
>   rename meta-multimedia/recipes-multimedia/musicpd/{mpd_0.23.15.bb =>
> mpd_0.23.16.bb} (97%)
>   create mode 100644
> meta-multimedia/recipes-multimedia/vorbis-tools/vorbis-tools/CVE-2023-43361.patch
>   create mode 100644
> meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
>   create mode 100644
> meta-oe/recipes-multimedia/audiofile/files/0005-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
>   create mode 100644
> meta-oe/recipes-multimedia/audiofile/files/0006-Check-for-multiplication-overflow-in-sfconvert.patch
>   create mode 100644
> meta-oe/recipes-multimedia/audiofile/files/0007-Actually-fail-when-error-occurs-in-parseFormat.patch
>   create mode 100644
> meta-oe/recipes-multimedia/audiofile/files/0008-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
>   create mode 100644
> meta-oe/recipes-support/libtinyxml/libtinyxml/CVE-2021-42260.patch
>   create mode 100644
> meta-oe/recipes-support/libtinyxml/libtinyxml/CVE-2023-34194.patch
>   create mode 100644
> meta-oe/recipes-support/procmail/procmail/CVE-2014-3618.patch
>   create mode 100644
> meta-oe/recipes-support/procmail/procmail/CVE-2017-16844.patch
>