mbox series

dunfell merge request: March 3rd

Message ID 6155dc8a-5054-4273-84b8-9ac7c5604e8b@gmail.com
State Accepted, archived
Headers show
Series dunfell merge request: March 3rd | expand

Pull-request

https://git.openembedded.org/meta-openembedded dunfell-next

Message

akuster808 March 3, 2024, 9:41 p.m. UTC 
The following changes since commit daa4619fe3fbf8c28f342c4a7163a84a330f7653:

   postgresql: Update to 12.17 (2024-01-16 07:31:14 -0500)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to c74ebbddfd9dbe02d3f7422016324451eb218e1e:

   python3-pillow: Fix for CVE-2023-50447 (2024-03-03 16:38:27 -0500)

----------------------------------------------------------------
Ashish Sharma (1):
       wireshark: Backport fix for CVE-2023-1992

Changqing Li (1):
       linuxptp: fix do_compile error

Hitendra Prajapati (2):
       apache2: upgrade 2.4.57 -> 2.4.58
       wireshark: fix CVE-2024-0208 GVCP dissector crash

Hugo SIMELIERE (1):
       libuv: fix CVE-2024-24806

Khem Raj (1):
       gdm: Add polkit to required distro features

Vijay Anusuri (4):
       squid: backport Debian patch for CVE-2023-46728 and CVE-2023-46846
       squid: Fix for CVE-2023-49285 and CVE-2023-49286
       squid: Backport fix for CVE-2023-50269
       python3-pillow: Fix for CVE-2023-50447

Wang Mingyu (1):
       openwsman: Change download branch from master to main.

virendra thakur (1):
       nodejs: Set CVE_PRODUCT to "node.js"

  meta-gnome/recipes-gnome/gdm/gdm_3.34.1.bb |    2 +-
  meta-networking/recipes-daemons/squid/files/CVE-2023-46728.patch |  
608 ++++++++++++++++++++
  meta-networking/recipes-daemons/squid/files/CVE-2023-46846-pre1.patch 
| 1154 ++++++++++++++++++++++++++++++++++++++
  meta-networking/recipes-daemons/squid/files/CVE-2023-46846.patch |  
169 ++++++
  meta-networking/recipes-daemons/squid/files/CVE-2023-49285.patch |   35 ++
  meta-networking/recipes-daemons/squid/files/CVE-2023-49286.patch |   
87 +++
  meta-networking/recipes-daemons/squid/files/CVE-2023-50269.patch |   62 ++
  meta-networking/recipes-daemons/squid/squid_4.9.bb |    6 +
  meta-networking/recipes-support/wireshark/files/CVE-2023-1992.patch 
|   62 ++
  meta-networking/recipes-support/wireshark/files/CVE-2024-0208.patch 
|   42 ++
  meta-networking/recipes-support/wireshark/wireshark_3.2.18.bb |    2 +
  meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-1.patch |   32 ++
  meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-2.patch |   30 +
  meta-oe/recipes-connectivity/libuv/libuv_1.36.0.bb |    4 +-
  .../linuxptp/0001-makefile-use-conditional-assignment-for-KBUILD_OUTPU.patch |   42 ++
  meta-oe/recipes-connectivity/linuxptp/linuxptp_2.0.1.bb |    1 +
  meta-oe/recipes-devtools/nodejs/nodejs_12.22.12.bb |    2 +
  meta-oe/recipes-devtools/nodejs/nodejs_14.18.1.bb |    2 +
  meta-oe/recipes-extended/openwsman/openwsman_2.6.11.bb |    2 +-
  meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-1.patch |   31 +
  meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-2.patch |   54 ++
  meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-3.patch |   44 ++
  meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb |    3 +
  .../apache2/0011-modules-mappers-config9.m4-Add-server-directory-to-i.patch |   31 -
  meta-webserver/recipes-httpd/apache2/apache2/CVE-2023-45802.patch |  
141 -----
  meta-webserver/recipes-httpd/apache2/{apache2_2.4.57.bb => 
apache2_2.4.58.bb}      |    4 +-
  26 files changed, 2474 insertions(+), 178 deletions(-)
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-46728.patch
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-46846-pre1.patch
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-46846.patch
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-49285.patch
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-49286.patch
  create mode 100644 
meta-networking/recipes-daemons/squid/files/CVE-2023-50269.patch
  create mode 100644 
meta-networking/recipes-support/wireshark/files/CVE-2023-1992.patch
  create mode 100644 
meta-networking/recipes-support/wireshark/files/CVE-2024-0208.patch
  create mode 100644 
meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-1.patch
  create mode 100644 
meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-2.patch
  create mode 100644 
meta-oe/recipes-connectivity/linuxptp/linuxptp/0001-makefile-use-conditional-assignment-for-KBUILD_OUTPU.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-1.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-2.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-3.patch
  delete mode 100644 
meta-webserver/recipes-httpd/apache2/apache2/0011-modules-mappers-config9.m4-Add-server-directory-to-i.patch
  delete mode 100644 
meta-webserver/recipes-httpd/apache2/apache2/CVE-2023-45802.patch
  rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.57.bb => 
apache2_2.4.58.bb} (97%)

Comments

Khem Raj March 3, 2024, 9:55 p.m. UTC | #1 
merged. thanks Armin.

On Sun, Mar 3, 2024 at 1:41 PM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit daa4619fe3fbf8c28f342c4a7163a84a330f7653:
>
>    postgresql: Update to 12.17 (2024-01-16 07:31:14 -0500)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded dunfell-next
>
> for you to fetch changes up to c74ebbddfd9dbe02d3f7422016324451eb218e1e:
>
>    python3-pillow: Fix for CVE-2023-50447 (2024-03-03 16:38:27 -0500)
>
> ----------------------------------------------------------------
> Ashish Sharma (1):
>        wireshark: Backport fix for CVE-2023-1992
>
> Changqing Li (1):
>        linuxptp: fix do_compile error
>
> Hitendra Prajapati (2):
>        apache2: upgrade 2.4.57 -> 2.4.58
>        wireshark: fix CVE-2024-0208 GVCP dissector crash
>
> Hugo SIMELIERE (1):
>        libuv: fix CVE-2024-24806
>
> Khem Raj (1):
>        gdm: Add polkit to required distro features
>
> Vijay Anusuri (4):
>        squid: backport Debian patch for CVE-2023-46728 and CVE-2023-46846
>        squid: Fix for CVE-2023-49285 and CVE-2023-49286
>        squid: Backport fix for CVE-2023-50269
>        python3-pillow: Fix for CVE-2023-50447
>
> Wang Mingyu (1):
>        openwsman: Change download branch from master to main.
>
> virendra thakur (1):
>        nodejs: Set CVE_PRODUCT to "node.js"
>
>   meta-gnome/recipes-gnome/gdm/gdm_3.34.1.bb |    2 +-
>   meta-networking/recipes-daemons/squid/files/CVE-2023-46728.patch |
> 608 ++++++++++++++++++++
>   meta-networking/recipes-daemons/squid/files/CVE-2023-46846-pre1.patch
> | 1154 ++++++++++++++++++++++++++++++++++++++
>   meta-networking/recipes-daemons/squid/files/CVE-2023-46846.patch |
> 169 ++++++
>   meta-networking/recipes-daemons/squid/files/CVE-2023-49285.patch |   35 ++
>   meta-networking/recipes-daemons/squid/files/CVE-2023-49286.patch |
> 87 +++
>   meta-networking/recipes-daemons/squid/files/CVE-2023-50269.patch |   62 ++
>   meta-networking/recipes-daemons/squid/squid_4.9.bb |    6 +
>   meta-networking/recipes-support/wireshark/files/CVE-2023-1992.patch
> |   62 ++
>   meta-networking/recipes-support/wireshark/files/CVE-2024-0208.patch
> |   42 ++
>   meta-networking/recipes-support/wireshark/wireshark_3.2.18.bb |    2 +
>   meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-1.patch |   32 ++
>   meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-2.patch |   30 +
>   meta-oe/recipes-connectivity/libuv/libuv_1.36.0.bb |    4 +-
>   .../linuxptp/0001-makefile-use-conditional-assignment-for-KBUILD_OUTPU.patch |   42 ++
>   meta-oe/recipes-connectivity/linuxptp/linuxptp_2.0.1.bb |    1 +
>   meta-oe/recipes-devtools/nodejs/nodejs_12.22.12.bb |    2 +
>   meta-oe/recipes-devtools/nodejs/nodejs_14.18.1.bb |    2 +
>   meta-oe/recipes-extended/openwsman/openwsman_2.6.11.bb |    2 +-
>   meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-1.patch |   31 +
>   meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-2.patch |   54 ++
>   meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-3.patch |   44 ++
>   meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb |    3 +
>   .../apache2/0011-modules-mappers-config9.m4-Add-server-directory-to-i.patch |   31 -
>   meta-webserver/recipes-httpd/apache2/apache2/CVE-2023-45802.patch |
> 141 -----
>   meta-webserver/recipes-httpd/apache2/{apache2_2.4.57.bb =>
> apache2_2.4.58.bb}      |    4 +-
>   26 files changed, 2474 insertions(+), 178 deletions(-)
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-46728.patch
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-46846-pre1.patch
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-46846.patch
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-49285.patch
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-49286.patch
>   create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2023-50269.patch
>   create mode 100644
> meta-networking/recipes-support/wireshark/files/CVE-2023-1992.patch
>   create mode 100644
> meta-networking/recipes-support/wireshark/files/CVE-2024-0208.patch
>   create mode 100644
> meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-1.patch
>   create mode 100644
> meta-oe/recipes-connectivity/libuv/libuv/CVE-2024-24806-2.patch
>   create mode 100644
> meta-oe/recipes-connectivity/linuxptp/linuxptp/0001-makefile-use-conditional-assignment-for-KBUILD_OUTPU.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-1.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-2.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-pillow/CVE-2023-50447-3.patch
>   delete mode 100644
> meta-webserver/recipes-httpd/apache2/apache2/0011-modules-mappers-config9.m4-Add-server-directory-to-i.patch
>   delete mode 100644
> meta-webserver/recipes-httpd/apache2/apache2/CVE-2023-45802.patch
>   rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.57.bb =>
> apache2_2.4.58.bb} (97%)