mbox series

dunfell merge request: May 5th

Message ID 5ff0489a-9a5b-6a89-e4fd-f73e7c883161@gmail.com
State New
Headers show
Series dunfell merge request: May 5th | expand

Pull-request

https://git.openembedded.org/meta-openembedded dunfell-next

Message

akuster808 May 5, 2023, 10:58 p.m. UTC 
The following changes since commit 7007d14c2558f86a49c2e2acb6154432c2ba4092:

   mariadb: Update to latest lts 10.4.28 (2023-04-06 07:32:45 -0400)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to e39b002df9675776cc99dccdcac07607ce783b15:

   multipath-tools: CVE-2022-41973 Symlink attack multipathd operates 
insecurely (2023-05-05 07:20:59 -0400)

----------------------------------------------------------------
Alex Yao (1):
       lcov: Fix Perl Path

Hitendra Prajapati (1):
       multipath-tools: CVE-2022-41973 Symlink attack multipathd 
operates insecurely

Hugo SIMELIERE (3):
       openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlist
       openvpn: upgrade 2.4.9 -> 2.4.12
       libmodbus: Fix CVE-2022-0367

Viktor Rosendahl (1):
       jsoncpp: Fix broken handling of escape characters

  .../openvpn/{openvpn_2.4.9.bb => openvpn_2.4.12.bb} |   7 +-
  ...1-json_writer-fix-inverted-sense-in-isAnyCharRequiredQ.patch | 52 
++++++++++
  meta-oe/recipes-devtools/jsoncpp/jsoncpp_1.9.2.bb               | 5 +-
  .../recipes-extended/libmodbus/libmodbus/CVE-2022-0367.patch    | 38 
+++++++
  meta-oe/recipes-extended/libmodbus/libmodbus_3.1.6.bb           | 5 +-
  meta-oe/recipes-support/lcov/lcov_1.14.bb                       | 2 +-
  .../recipes-support/multipath-tools/files/CVE-2022-41973.patch  | 154 
++++++++++++++++++++++++++++
  .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
  8 files changed, 262 insertions(+), 5 deletions(-)
  rename meta-networking/recipes-support/openvpn/{openvpn_2.4.9.bb => 
openvpn_2.4.12.bb} (91%)
  create mode 100644 
meta-oe/recipes-devtools/jsoncpp/jsoncpp/0001-json_writer-fix-inverted-sense-in-isAnyCharRequiredQ.patch
  create mode 100644 
meta-oe/recipes-extended/libmodbus/libmodbus/CVE-2022-0367.patch
  create mode 100644 
meta-oe/recipes-support/multipath-tools/files/CVE-2022-41973.patch

Comments

Khem Raj May 6, 2023, 12:29 a.m. UTC | #1 
merged now. thanks Armin

On Fri, May 5, 2023 at 3:58 PM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit 7007d14c2558f86a49c2e2acb6154432c2ba4092:
>
>    mariadb: Update to latest lts 10.4.28 (2023-04-06 07:32:45 -0400)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded dunfell-next
>
> for you to fetch changes up to e39b002df9675776cc99dccdcac07607ce783b15:
>
>    multipath-tools: CVE-2022-41973 Symlink attack multipathd operates
> insecurely (2023-05-05 07:20:59 -0400)
>
> ----------------------------------------------------------------
> Alex Yao (1):
>        lcov: Fix Perl Path
>
> Hitendra Prajapati (1):
>        multipath-tools: CVE-2022-41973 Symlink attack multipathd
> operates insecurely
>
> Hugo SIMELIERE (3):
>        openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlist
>        openvpn: upgrade 2.4.9 -> 2.4.12
>        libmodbus: Fix CVE-2022-0367
>
> Viktor Rosendahl (1):
>        jsoncpp: Fix broken handling of escape characters
>
>   .../openvpn/{openvpn_2.4.9.bb => openvpn_2.4.12.bb} |   7 +-
>   ...1-json_writer-fix-inverted-sense-in-isAnyCharRequiredQ.patch | 52
> ++++++++++
>   meta-oe/recipes-devtools/jsoncpp/jsoncpp_1.9.2.bb               | 5 +-
>   .../recipes-extended/libmodbus/libmodbus/CVE-2022-0367.patch    | 38
> +++++++
>   meta-oe/recipes-extended/libmodbus/libmodbus_3.1.6.bb           | 5 +-
>   meta-oe/recipes-support/lcov/lcov_1.14.bb                       | 2 +-
>   .../recipes-support/multipath-tools/files/CVE-2022-41973.patch  | 154
> ++++++++++++++++++++++++++++
>   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
>   8 files changed, 262 insertions(+), 5 deletions(-)
>   rename meta-networking/recipes-support/openvpn/{openvpn_2.4.9.bb =>
> openvpn_2.4.12.bb} (91%)
>   create mode 100644
> meta-oe/recipes-devtools/jsoncpp/jsoncpp/0001-json_writer-fix-inverted-sense-in-isAnyCharRequiredQ.patch
>   create mode 100644
> meta-oe/recipes-extended/libmodbus/libmodbus/CVE-2022-0367.patch
>   create mode 100644
> meta-oe/recipes-support/multipath-tools/files/CVE-2022-41973.patch
>