mbox series

walnscar merge request: July 27th

Message ID 4341066e-e2d3-4636-b0e2-76cb44047e18@gmail.com
State New
Headers show
Series walnscar merge request: July 27th | expand

Pull-request

https://git.openembedded.org/meta-openembedded walnascar-next

Message

akuster808 July 27, 2025, 6:40 p.m. UTC 
The following changes since commit c009244a045923a9dfc32d7f2996cb61629870f6:

   udisks2: Hardening measure of CVE-2025-6019 (2025-07-06 19:23:22 -0400)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded walnascar-next

for you to fetch changes up to dca497d728792e3cb655c78455c2d649af312ce8:

   ][PATCH] ufs-utils: fix crash for ufs-utils list_bsg (2025-07-27 
14:35:10 -0400)

----------------------------------------------------------------
Jiaying Song (1):
       python3-aiohttp: fix CVE-2025-53643

Martin Jansa (1):
       xmlsec1: fix build with gnutls or openssl PACKAGECONFIG not enabled

Peter Marko (4):
       libcoap: patch CVE-2024-31031
       spdlog: patch CVE-2025-6140
       minifi-cpp: patch spdlog CVE-2025-6140
       poco: patch CVE-2025-6375

Praveen Kumar (2):
       syslog-ng: upgrade 4.8.1 -> 4.8.2
       python3-tornado: upgrade 6.4.2 -> 6.5

Wang Mingyu (1):
       mbedtls: upgrade 3.6.3 -> 3.6.3.1

Yi Zhao (1):
       ][PATCH] ufs-utils: fix crash for ufs-utils list_bsg

Yogita Urade (2):
       poppler: upgrade 25.04.0 -> 25.06.0
       mariadb: upgrade 11.4.5 -> 11.4.6

gudni (1):
       mbedtls: upgrade 3.6.3.1 -> 3.6.4

  ...1-ufs_cmds-fix-full_path-buffer-size-in-find_bsg_devic.patch | 39 +++
  meta-filesystems/recipes-utils/ufs-utils/ufs-utils_4.13.5.bb    | 1 +
  .../mbedtls/{mbedtls_3.6.3.bb => mbedtls_3.6.4.bb} |   7 +-
  .../recipes-devtools/libcoap/libcoap/CVE-2024-31031.patch       | 82 +++++
  meta-networking/recipes-devtools/libcoap/libcoap_4.3.4.bb       | 1 +
  .../{mariadb-native_11.4.5.bb => mariadb-native_11.4.6.bb} |   0
  meta-oe/recipes-dbs/mysql/mariadb.inc                           | 4 +-
  .../mariadb/0001-Add-missing-includes-cstdint-and-cstdio.patch  | 40 +--
  meta-oe/recipes-dbs/mysql/mariadb/3871.patch                    | 29 --
  meta-oe/recipes-dbs/mysql/mariadb/mm_malloc.patch               | 23 --
  .../recipes-dbs/mysql/{mariadb_11.4.5.bb => mariadb_11.4.6.bb} |   0
  meta-oe/recipes-extended/minifi-cpp/files/CVE-2025-6140.patch   | 46 +++
  meta-oe/recipes-extended/minifi-cpp/minifi-cpp_0.99.1.bb        | 1 +
  meta-oe/recipes-support/poco/poco/CVE-2025-6375.patch           | 34 ++
  meta-oe/recipes-support/poco/poco_1.13.3.bb                     | 1 +
  .../poppler/{poppler_25.04.0.bb => poppler_25.06.0.bb} |   2 +-
  meta-oe/recipes-support/spdlog/spdlog/CVE-2025-6140.patch       | 46 +++
  meta-oe/recipes-support/spdlog/spdlog_1.15.0.bb                 | 4 +-
  .../syslog-ng/{syslog-ng_4.8.1.bb => syslog-ng_4.8.2.bb} |   2 +-
  meta-oe/recipes-support/xmlsec1/xmlsec1_1.3.7.bb                | 2 +-
  .../python/python3-aiohttp/CVE-2025-53643.patch                 | 526 
++++++++++++++++++++++++++++
  meta-python/recipes-devtools/python/python3-aiohttp_3.11.16.bb  | 2 +
  .../python/{python3-tornado_6.4.2.bb => python3-tornado_6.5.bb} |   2 +-
  23 files changed, 806 insertions(+), 88 deletions(-)
  create mode 100644 
meta-filesystems/recipes-utils/ufs-utils/files/0001-ufs_cmds-fix-full_path-buffer-size-in-find_bsg_devic.patch
  rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_3.6.3.bb 
=> mbedtls_3.6.4.bb} (94%)
  create mode 100644 
meta-networking/recipes-devtools/libcoap/libcoap/CVE-2024-31031.patch
  rename meta-oe/recipes-dbs/mysql/{mariadb-native_11.4.5.bb => 
mariadb-native_11.4.6.bb} (100%)
  delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/3871.patch
  delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/mm_malloc.patch
  rename meta-oe/recipes-dbs/mysql/{mariadb_11.4.5.bb => 
mariadb_11.4.6.bb} (100%)
  create mode 100644 
meta-oe/recipes-extended/minifi-cpp/files/CVE-2025-6140.patch
  create mode 100644 meta-oe/recipes-support/poco/poco/CVE-2025-6375.patch
  rename meta-oe/recipes-support/poppler/{poppler_25.04.0.bb => 
poppler_25.06.0.bb} (96%)
  create mode 100644 
meta-oe/recipes-support/spdlog/spdlog/CVE-2025-6140.patch
  rename meta-oe/recipes-support/syslog-ng/{syslog-ng_4.8.1.bb => 
syslog-ng_4.8.2.bb} (98%)
  create mode 100644 
meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-53643.patch
  rename meta-python/recipes-devtools/python/{python3-tornado_6.4.2.bb 
=> python3-tornado_6.5.bb} (93%)

Comments

Khem Raj July 27, 2025, 7:13 p.m. UTC | #1 
merged now, thanks.

On Sun, Jul 27, 2025 at 11:40 AM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit c009244a045923a9dfc32d7f2996cb61629870f6:
>
>    udisks2: Hardening measure of CVE-2025-6019 (2025-07-06 19:23:22 -0400)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded walnascar-next
>
> for you to fetch changes up to dca497d728792e3cb655c78455c2d649af312ce8:
>
>    ][PATCH] ufs-utils: fix crash for ufs-utils list_bsg (2025-07-27
> 14:35:10 -0400)
>
> ----------------------------------------------------------------
> Jiaying Song (1):
>        python3-aiohttp: fix CVE-2025-53643
>
> Martin Jansa (1):
>        xmlsec1: fix build with gnutls or openssl PACKAGECONFIG not enabled
>
> Peter Marko (4):
>        libcoap: patch CVE-2024-31031
>        spdlog: patch CVE-2025-6140
>        minifi-cpp: patch spdlog CVE-2025-6140
>        poco: patch CVE-2025-6375
>
> Praveen Kumar (2):
>        syslog-ng: upgrade 4.8.1 -> 4.8.2
>        python3-tornado: upgrade 6.4.2 -> 6.5
>
> Wang Mingyu (1):
>        mbedtls: upgrade 3.6.3 -> 3.6.3.1
>
> Yi Zhao (1):
>        ][PATCH] ufs-utils: fix crash for ufs-utils list_bsg
>
> Yogita Urade (2):
>        poppler: upgrade 25.04.0 -> 25.06.0
>        mariadb: upgrade 11.4.5 -> 11.4.6
>
> gudni (1):
>        mbedtls: upgrade 3.6.3.1 -> 3.6.4
>
>   ...1-ufs_cmds-fix-full_path-buffer-size-in-find_bsg_devic.patch | 39 +++
>   meta-filesystems/recipes-utils/ufs-utils/ufs-utils_4.13.5.bb    | 1 +
>   .../mbedtls/{mbedtls_3.6.3.bb => mbedtls_3.6.4.bb} |   7 +-
>   .../recipes-devtools/libcoap/libcoap/CVE-2024-31031.patch       | 82 +++++
>   meta-networking/recipes-devtools/libcoap/libcoap_4.3.4.bb       | 1 +
>   .../{mariadb-native_11.4.5.bb => mariadb-native_11.4.6.bb} |   0
>   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 4 +-
>   .../mariadb/0001-Add-missing-includes-cstdint-and-cstdio.patch  | 40 +--
>   meta-oe/recipes-dbs/mysql/mariadb/3871.patch                    | 29 --
>   meta-oe/recipes-dbs/mysql/mariadb/mm_malloc.patch               | 23 --
>   .../recipes-dbs/mysql/{mariadb_11.4.5.bb => mariadb_11.4.6.bb} |   0
>   meta-oe/recipes-extended/minifi-cpp/files/CVE-2025-6140.patch   | 46 +++
>   meta-oe/recipes-extended/minifi-cpp/minifi-cpp_0.99.1.bb        | 1 +
>   meta-oe/recipes-support/poco/poco/CVE-2025-6375.patch           | 34 ++
>   meta-oe/recipes-support/poco/poco_1.13.3.bb                     | 1 +
>   .../poppler/{poppler_25.04.0.bb => poppler_25.06.0.bb} |   2 +-
>   meta-oe/recipes-support/spdlog/spdlog/CVE-2025-6140.patch       | 46 +++
>   meta-oe/recipes-support/spdlog/spdlog_1.15.0.bb                 | 4 +-
>   .../syslog-ng/{syslog-ng_4.8.1.bb => syslog-ng_4.8.2.bb} |   2 +-
>   meta-oe/recipes-support/xmlsec1/xmlsec1_1.3.7.bb                | 2 +-
>   .../python/python3-aiohttp/CVE-2025-53643.patch                 | 526
> ++++++++++++++++++++++++++++
>   meta-python/recipes-devtools/python/python3-aiohttp_3.11.16.bb  | 2 +
>   .../python/{python3-tornado_6.4.2.bb => python3-tornado_6.5.bb} |   2 +-
>   23 files changed, 806 insertions(+), 88 deletions(-)
>   create mode 100644
> meta-filesystems/recipes-utils/ufs-utils/files/0001-ufs_cmds-fix-full_path-buffer-size-in-find_bsg_devic.patch
>   rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_3.6.3.bb
> => mbedtls_3.6.4.bb} (94%)
>   create mode 100644
> meta-networking/recipes-devtools/libcoap/libcoap/CVE-2024-31031.patch
>   rename meta-oe/recipes-dbs/mysql/{mariadb-native_11.4.5.bb =>
> mariadb-native_11.4.6.bb} (100%)
>   delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/3871.patch
>   delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/mm_malloc.patch
>   rename meta-oe/recipes-dbs/mysql/{mariadb_11.4.5.bb =>
> mariadb_11.4.6.bb} (100%)
>   create mode 100644
> meta-oe/recipes-extended/minifi-cpp/files/CVE-2025-6140.patch
>   create mode 100644 meta-oe/recipes-support/poco/poco/CVE-2025-6375.patch
>   rename meta-oe/recipes-support/poppler/{poppler_25.04.0.bb =>
> poppler_25.06.0.bb} (96%)
>   create mode 100644
> meta-oe/recipes-support/spdlog/spdlog/CVE-2025-6140.patch
>   rename meta-oe/recipes-support/syslog-ng/{syslog-ng_4.8.1.bb =>
> syslog-ng_4.8.2.bb} (98%)
>   create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-53643.patch
>   rename meta-python/recipes-devtools/python/{python3-tornado_6.4.2.bb
> => python3-tornado_6.5.bb} (93%)
>