mbox series

dunfell merge request: June 23rd

Message ID a1efe910-35a9-1b45-6c17-5eccc74bca3e@gmail.com
State New
Headers show
Series dunfell merge request: June 23rd | expand

Pull-request

https://git.openembedded.org/meta-openembedded dunfell-next

Message

akuster808 June 23, 2023, 11:03 a.m. UTC 
The following changes since commit 116bfe8d5e5851e7fc5424f40da8691a19c5b5ee:

   nodejs: make 14.18.1 available but not default (2023-05-16 07:09:25 
-0400)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to 6334241447e461f849035c47f071fa4a2125fee1:

   c-ares: CVE-2023-31147 Insufficient randomness in generation of DNS 
query IDs (2023-06-23 06:58:18 -0400)

----------------------------------------------------------------
Hitendra Prajapati (2):
       c-ares: CVE-2023-31130 fix Buffer Underwrite
       c-ares: CVE-2023-31147 Insufficient randomness in generation of 
DNS query IDs

Martin Jansa (1):
       nodejs: fix native node-gyp to work with python-3.11

Samuli Piippo (1):
       spirv-tools: switch from master branch to main for re2

Vijay Anusuri (3):
       openldap: Fix CVE-2023-2953
       c-ares: fix CVE-2022-4904 & Update SRC_URI branch and protocols
       python3-cryptography: fix CVE-2023-23931

schitrod=cisco.com@lists.openembedded.org (1):
       gnulib: Update recipe name to 2018-12-18

  .../nodejs/nodejs/python-3.11-invalid-mode-rU.patch            | 46 ++
  meta-oe/recipes-devtools/nodejs/nodejs_12.22.12.bb             | 1 +
  meta-oe/recipes-graphics/spir/spirv-tools_git.bb               | 2 +-
  meta-oe/recipes-support/c-ares/c-ares/CVE-2022-4904.patch      | 67 +++
  meta-oe/recipes-support/c-ares/c-ares/CVE-2023-31130.patch     | 329 
+++++++++++++
  meta-oe/recipes-support/c-ares/c-ares/CVE-2023-31147.patch     | 717 
++++++++++++++++++++++++++++
  meta-oe/recipes-support/c-ares/c-ares_1.18.1.bb                | 6 +-
  .../gnulib/{gnulib_2018-03-07.03.bb => gnulib_2018-12-18.bb} |   0
  .../recipes-support/openldap/openldap/CVE-2023-2953-1.patch    | 30 ++
  .../recipes-support/openldap/openldap/CVE-2023-2953-2.patch    | 76 +++
  meta-oe/recipes-support/openldap/openldap_2.4.57.bb            | 2 +
  .../python/python3-cryptography/CVE-2023-23931.patch           | 45 ++
  .../recipes-devtools/python/python3-cryptography_2.8.bb        | 1 +
  13 files changed, 1320 insertions(+), 2 deletions(-)
  create mode 100644 
meta-oe/recipes-devtools/nodejs/nodejs/python-3.11-invalid-mode-rU.patch
  create mode 100644 
meta-oe/recipes-support/c-ares/c-ares/CVE-2022-4904.patch
  create mode 100644 
meta-oe/recipes-support/c-ares/c-ares/CVE-2023-31130.patch
  create mode 100644 
meta-oe/recipes-support/c-ares/c-ares/CVE-2023-31147.patch
  rename meta-oe/recipes-support/gnulib/{gnulib_2018-03-07.03.bb => 
gnulib_2018-12-18.bb} (100%)
  create mode 100644 
meta-oe/recipes-support/openldap/openldap/CVE-2023-2953-1.patch
  create mode 100644 
meta-oe/recipes-support/openldap/openldap/CVE-2023-2953-2.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-cryptography/CVE-2023-23931.patch