kirkstone merge request: July 4th

The following changes since commit 45bddd258a3d1ded925faf8389e01bb948dc7f5b:

   poppler: fix CVE-2025-43903 (2025-05-25 14:48:44 -0400)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded kirkstone-next

for you to fetch changes up to 058249f9a836e3aa866436aa6e37d6d48ff768fd:

   libssh: fix CVE-2025-5318 (2025-07-02 20:42:48 -0400)

----------------------------------------------------------------
Ashish Sharma (1):
       tcpdump: patch CVE-2024-2397

Bastian Krause (2):
       libsocketcan: use https instead of git protocol
       canutils: use https instead of git protocol

Chen Qi (3):
       protobuf: fix ptest with python PACKAGECONFIG enabled
       python3-protobuf: fix RDEPENDS
       protobuf: fix CVE-2025-4565

Hitendra Prajapati (1):
       libssh: fix CVE-2025-5318

Jason Schonberg (1):
       xfce4 update HOMEPAGEs

Jiaying Song (1):
       python3-aiohttp: fix CVE-2024-42367

Leonard Anderweit (1):
       lmsensors: Fix build without sensord

Sana Kazi (1):
       imagemagick: Fix CVE vulnerablities

Vijay Anusuri (2):
       proftpd: Fix CVE-2024-57392
       redis: Fix CVE-2025-21605

Yogita Urade (5):
       syslog-ng: fix CVE-2024-47619
       postgresql: upgrade 14.17 -> 14.18
       mariadb: fix CVE-2023-52968
       mariadb: fix CVE-2023-52969 and CVE-2023-52970
       mariadb: fix CVE-2024-21096

  .../recipes-daemons/proftpd/files/CVE-2024-57392.patch          | 42 +
  meta-networking/recipes-daemons/proftpd/proftpd_1.3.7c.bb |    1 +
  .../recipes-support/tcpdump/tcpdump/CVE-2024-2397.patch         | 126 +
  meta-networking/recipes-support/tcpdump/tcpdump_4.99.4.bb |    1 +
  meta-oe/recipes-bsp/lm_sensors/lmsensors_3.6.0.bb |    5 +-
  meta-oe/recipes-dbs/mysql/mariadb.inc                           | 12 +-
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52968.patch          | 106 +
  .../mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0001.patch     | 502 ++
  .../mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0002.patch     | 168 +
  .../mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0003.patch     | 470 ++
  .../mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0004.patch     | 1785 
+++++++
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0001.patch     | 1392 
+++++
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0002.patch     | 38 +
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0003.patch     | 138 +
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0004.patch     | 7729 
+++++++++++++++++++++++++++
  meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0005.patch     | 1431 
+++++
  .../0001-configure.ac-bypass-autoconf-2.69-version-check.patch |    4 +-
  .../postgresql/{postgresql_14.17.bb => postgresql_14.18.bb} |    2 +-
  meta-oe/recipes-devtools/protobuf/protobuf/CVE-2025-4565.patch  | 376 ++
  meta-oe/recipes-devtools/protobuf/protobuf/run-ptest |    2 +-
  meta-oe/recipes-devtools/protobuf/protobuf_3.19.6.bb |    4 +-
  .../recipes-extended/redis/redis-7.0.13/CVE-2025-21605.patch    | 62 +
  meta-oe/recipes-extended/redis/redis_7.0.13.bb |    1 +
  meta-oe/recipes-extended/socketcan/canutils_4.0.6.bb |    2 +-
  meta-oe/recipes-extended/socketcan/libsocketcan_0.0.12.bb |    2 +-
  meta-oe/recipes-support/imagemagick/files/CVE-2021-20309.patch  | 25 +
  meta-oe/recipes-support/imagemagick/files/CVE-2021-20310.patch  | 31 +
  meta-oe/recipes-support/imagemagick/files/CVE-2021-3610.patch   | 26 +
  meta-oe/recipes-support/imagemagick/files/CVE-2022-0284.patch   | 34 +
  meta-oe/recipes-support/imagemagick/files/CVE-2022-2719.patch   | 136 +
  meta-oe/recipes-support/imagemagick/files/fix-cipher-leak.patch | 178 +
  meta-oe/recipes-support/imagemagick/imagemagick_7.0.10.bb       | 19 +-
  meta-oe/recipes-support/libssh/libssh/CVE-2025-5318.patch       | 31 +
  meta-oe/recipes-support/libssh/libssh_0.8.9.bb |    1 +
  meta-oe/recipes-support/syslog-ng/files/CVE-2024-47619.patch    | 286 +
  meta-oe/recipes-support/syslog-ng/syslog-ng_3.36.1.bb |    1 +
  .../python/python3-aiohttp/CVE-2024-42367.patch                 | 65 +
  meta-python/recipes-devtools/python/python3-aiohttp_3.8.6.bb |    1 +
  meta-python/recipes-devtools/python/python3-protobuf_3.20.3.bb |    1 +
  meta-xfce/recipes-apps/xfce4-notifyd/xfce4-notifyd_0.6.3.bb |    2 +-
  .../xfce4-screenshooter/xfce4-screenshooter_1.9.10.bb |    2 +-
  .../xfce4-mpc-plugin/xfce4-mpc-plugin_0.5.2.bb |    2 +-
  .../recipes-panel-plugins/battery/xfce4-battery-plugin_1.1.4.bb |    2 +-
  .../calculator/xfce4-calculator-plugin_0.7.1.bb |    2 +-
  .../recipes-panel-plugins/clipman/xfce4-clipman-plugin_1.6.2.bb |    2 +-
  .../recipes-panel-plugins/cpufreq/xfce4-cpufreq-plugin_1.2.7.bb |    2 +-
  .../cpugraph/xfce4-cpugraph-plugin_1.2.6.bb |    2 +-
  .../datetime/xfce4-datetime-plugin_0.8.1.bb |    2 +-
  .../diskperf/xfce4-diskperf-plugin_2.7.0.bb |    2 +-
  meta-xfce/recipes-panel-plugins/eyes/xfce4-eyes-plugin_4.6.0.bb |    2 +-
  .../recipes-panel-plugins/fsguard/xfce4-fsguard-plugin_1.1.2.bb |    2 +-
  .../recipes-panel-plugins/genmon/xfce4-genmon-plugin_4.1.1.bb |    2 +-
  .../mailwatch/xfce4-mailwatch-plugin_1.3.0.bb |    2 +-
  .../recipes-panel-plugins/mount/xfce4-mount-plugin_1.1.5.bb |    2 +-
  .../recipes-panel-plugins/netload/xfce4-netload-plugin_1.4.0.bb |    2 +-
  .../recipes-panel-plugins/notes/xfce4-notes-plugin_1.9.0.bb |    2 +-
  .../recipes-panel-plugins/places/xfce4-places-plugin_1.8.1.bb |    2 +-
  .../recipes-panel-plugins/sensors/xfce4-sensors-plugin_1.4.3.bb |    2 +-
  .../smartbookmark/xfce4-smartbookmark-plugin_0.5.2.bb |    2 +-
  .../systemload/xfce4-systemload-plugin_1.3.1.bb |    2 +-
  .../time-out/xfce4-time-out-plugin_1.1.2.bb |    2 +-
  .../recipes-panel-plugins/timer/xfce4-timer-plugin_1.7.1.bb |    2 +-
  .../recipes-panel-plugins/verve/xfce4-verve-plugin_2.0.1.bb |    2 +-
  .../recipes-panel-plugins/wavelan/xfce4-wavelan-plugin_0.6.2.bb |    2 +-
  .../weather/xfce4-weather-plugin_0.11.0.bb |    2 +-
  meta-xfce/recipes-panel-plugins/xkb/xfce4-xkb-plugin_0.8.2.bb |    2 +-
  .../archive/thunar-archive-plugin_0.4.0.bb |    2 +-
  .../xfce4-power-manager/xfce4-power-manager_4.16.0.bb |    2 +-
  68 files changed, 15254 insertions(+), 40 deletions(-)
  create mode 100644 
meta-networking/recipes-daemons/proftpd/files/CVE-2024-57392.patch
  create mode 100644 
meta-networking/recipes-support/tcpdump/tcpdump/CVE-2024-2397.patch
  create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52968.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0001.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0002.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0003.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2023-52969-CVE-20230-52970-0004.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0001.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0002.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0003.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0004.patch
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/CVE-2024-21096-0005.patch
  rename meta-oe/recipes-dbs/postgresql/{postgresql_14.17.bb => 
postgresql_14.18.bb} (84%)
  create mode 100644 
meta-oe/recipes-devtools/protobuf/protobuf/CVE-2025-4565.patch
  create mode 100644 
meta-oe/recipes-extended/redis/redis-7.0.13/CVE-2025-21605.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/CVE-2021-20309.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/CVE-2021-20310.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/CVE-2021-3610.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/CVE-2022-0284.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/CVE-2022-2719.patch
  create mode 100644 
meta-oe/recipes-support/imagemagick/files/fix-cipher-leak.patch
  create mode 100644 
meta-oe/recipes-support/libssh/libssh/CVE-2025-5318.patch
  create mode 100644 
meta-oe/recipes-support/syslog-ng/files/CVE-2024-47619.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-aiohttp/CVE-2024-42367.patch