From patchwork Thu Aug 8 02:28:37 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47491 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E9DF2C3DA7F for ; Thu, 8 Aug 2024 02:29:03 +0000 (UTC) Received: from mail-pg1-f180.google.com (mail-pg1-f180.google.com [209.85.215.180]) by mx.groups.io with SMTP id smtpd.web10.50953.1723084135268107528 for ; Wed, 07 Aug 2024 19:28:55 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=vLAESxP9; spf=softfail (domain: sakoman.com, ip: 209.85.215.180, mailfrom: steve@sakoman.com) Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-7c1f480593bso383559a12.0 for ; Wed, 07 Aug 2024 19:28:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084134; x=1723688934; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ARe7hP371k3Og3CmWOfaXh0StwbtkCnt0rqnppAwQKg=; b=vLAESxP9guojmshfuG2o5te+hQQL7BCpPPPE3ffwMVvSTmx6IqfapNvXXDaLK9TT4p xb+oNEgi/d/+kbxJgE5Us7avjvCqEFltYQiLDjXNqFoyQSXGGRA8PGzdvpm9Bd9hKqrX ErLbETgrkMbffDGIP7Dg4AA90fqJQLZWokUz8Ed3n6IttlvSVM3uwC+sViihHrXr+1yK DLENIyvFdm2Y5p9OcIV8QfBWsqlbREt2gv9lK9kzDDZoq116ryLq0KOTGr6q3KwM6Dak s9c4dfgwHWszP75+kBX7Eqy6qSNUIiOvB+useNearJhf+7iYBfu9A60gDBJQdl8nmDhj 7iSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084134; x=1723688934; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ARe7hP371k3Og3CmWOfaXh0StwbtkCnt0rqnppAwQKg=; b=E+TZOCtYhby+zK2UKq7fQQMmtP9DENr7zkFPNlAiR43axTdA0V/+sYTThWQoIwqjlb TOCpld5bHeK7ezvLaZ3h7c9mx0qA3tKM6PCKXy7QvYEL4WfN/7Hw1jcBOXczoqPGoF7a Y8A9FoWeU+HRdNbkaw8NrNMHsMMeWrcVgyiVe/x22c3cuH37h3vJrqOg4883RSNR7v7H nPl5P0XkrPVCcCxoZ+HC8yUVanZedtxTZ2Uouee4S3/vD336AJcPDauq09FHfNZPT/+P 1vOMOfWGXzIZBWiJKomNE0MIeBDcV9EsSBeYEGwdwT0TvUv+NN3WUDoHkZqMweIu9SxL INaA== X-Gm-Message-State: AOJu0YzIK2hFoH0BcG6IY3Bd5XsdcIS5xfvCp0SAxaNH8ssmvN7395hT iepSlwuJ0o8haKtEggF1sIaCsgYIFYgYLH64R84/ucMM2JZarvUegc0ekEfQImD8mLnK18gldRt PZhA= X-Google-Smtp-Source: AGHT+IGWk7Z/SWNO/dvzgu1ZqMaUqhWe+ERaj470LUONSx2ksYpr/4Kt3d6//GeRx5cO1sbklazWNg== X-Received: by 2002:a05:6a20:3952:b0:1c6:a048:45a2 with SMTP id adf61e73a8af0-1c6fcf22144mr487907637.24.1723084134438; Wed, 07 Aug 2024 19:28:54 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.28.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:28:54 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 01/10] curl: Patch CVE-2024-6197 Date: Wed, 7 Aug 2024 19:28:37 -0700 Message-Id: <0f172ed0c94d287c96ec465e4724c8b47f846a4c.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203101 From: Peter Marko Picked commit per https://curl.se/docs/CVE-2024-6197.html Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- .../curl/curl/CVE-2024-6197.patch | 24 +++++++++++++++++++ meta/recipes-support/curl/curl_8.7.1.bb | 1 + 2 files changed, 25 insertions(+) create mode 100644 meta/recipes-support/curl/curl/CVE-2024-6197.patch diff --git a/meta/recipes-support/curl/curl/CVE-2024-6197.patch b/meta/recipes-support/curl/curl/CVE-2024-6197.patch new file mode 100644 index 0000000000..0622e70dc8 --- /dev/null +++ b/meta/recipes-support/curl/curl/CVE-2024-6197.patch @@ -0,0 +1,24 @@ +From 3a537a4db9e65e545ec45b1b5d5575ee09a2569d Mon Sep 17 00:00:00 2001 +From: z2_ <88509734+z2-2z@users.noreply.github.com> +Date: Fri, 28 Jun 2024 14:45:47 +0200 +Subject: [PATCH] x509asn1: remove superfluous free() + +CVE: CVE-2024-6197 +Upstream-Status: Backport [https://github.com/curl/curl/commit/3a537a4db9e65e545ec45b1b5d5575ee09a2569d.patch] +Signed-off-by: Peter Marko +--- + lib/vtls/x509asn1.c | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/lib/vtls/x509asn1.c b/lib/vtls/x509asn1.c +index f71ab0b90a5931..1bc4243ddae343 100644 +--- a/lib/vtls/x509asn1.c ++++ b/lib/vtls/x509asn1.c +@@ -393,7 +393,6 @@ utf8asn1str(struct dynbuf *to, int type, const char *from, const char *end) + if(wc >= 0x00000800) { + if(wc >= 0x00010000) { + if(wc >= 0x00200000) { +- free(buf); + /* Invalid char. size for target encoding. */ + return CURLE_WEIRD_SERVER_REPLY; + } diff --git a/meta/recipes-support/curl/curl_8.7.1.bb b/meta/recipes-support/curl/curl_8.7.1.bb index 3fdad6a4cf..136782ffec 100644 --- a/meta/recipes-support/curl/curl_8.7.1.bb +++ b/meta/recipes-support/curl/curl_8.7.1.bb @@ -15,6 +15,7 @@ SRC_URI = " \ file://run-ptest \ file://disable-tests \ file://no-test-timeout.patch \ + file://CVE-2024-6197.patch \ " SRC_URI[sha256sum] = "6fea2aac6a4610fbd0400afb0bcddbe7258a64c63f1f68e5855ebc0c659710cd" From patchwork Thu Aug 8 02:28:38 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47492 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id EB56AC52D6F for ; Thu, 8 Aug 2024 02:29:03 +0000 (UTC) Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171]) by mx.groups.io with SMTP id smtpd.web10.50954.1723084136765128261 for ; Wed, 07 Aug 2024 19:28:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=PlWv29To; spf=softfail (domain: sakoman.com, ip: 209.85.215.171, mailfrom: steve@sakoman.com) Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-7a264a24ea7so364646a12.3 for ; Wed, 07 Aug 2024 19:28:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084136; x=1723688936; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ZBnIIixOCCzk01ikXuKO3ihUm08q6JzghWuAWyE6zms=; b=PlWv29TodkmqMkYDNRUvqvMW11FJYv0lQPKaDDDN+EFKLNORf3sIxMBcK2BRBT4uUP +pJV3BcM3OB99/WzWqq9AFf/Skz7oy8ZLv1DrEYtho7NIFlzwFfwHOFmYRh46TRxlAWo RjcMHG9tvTtWmGWsF2vL3/pp4Al06GwiwtypWsCcTRWCGOv8J3yQle48T7d7lQwoYyN/ ZT1bmey0q11QrDd7P5LGUFP+vgzGSNir22zFYbxvi4jSd5+e1U9D2Q20Ddw6S988pA8H XEnq0Cbj/J2Cfgiocb3U6w3oxyMAGTf6JpsWYDIfE7v13vxFVfCHZI35NQ3URty+HQM0 tVhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084136; x=1723688936; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ZBnIIixOCCzk01ikXuKO3ihUm08q6JzghWuAWyE6zms=; b=C2nSVU3cODKknlmVdMJP2AXIm8ILXMuAPBTWwp5PvgbWt9lbB1wEghWooehlmRGsp+ zXx41kda7miN7X6A6BwR+tt16N/YXgmmvTnVdywDd13Ar2SKVG/wLpSNDPGolkUe7VU5 7WCM9A9FLNquJz73atqUKKG5i6dhgKpKnGS1ovn2kVI6Lc019cCylbw2Cf0HnlJnQaHv 5m7km5f5826Mqql9KTwveCOFxA16LYHMQEFUNUiAIy5VxKbi0CeRHnfqYIZ7Y/dvjZe6 yJkv+0MoLkmZuzBtsktMOfZd7sqseYyjMDsbAWCPjHtho8ezyJ0n5Sybzj+o8YTfSvhn 5G7Q== X-Gm-Message-State: AOJu0YyMATKImfpawM5KIo4VsulzMf1uAIaDwvB+0lpXSY9pqGEonc6q e7p2iRLx7STXuL1Ax53xKigYPQdWeNACUjL/XJ2jVebnZ9Y87OUr6h1EXuUZ4hqwqLG+F68IQNi Z+ZA= X-Google-Smtp-Source: AGHT+IHriw7SJMlXNryQRAWAC8qK+sOMa/27/MaP1VbQpPCKMXZLUl6XVt+KsY4sQGV+7x//+IveOg== X-Received: by 2002:a17:90a:e681:b0:2ca:8baf:abe9 with SMTP id 98e67ed59e1d1-2d1c34944b8mr498408a91.40.1723084135976; Wed, 07 Aug 2024 19:28:55 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.28.55 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:28:55 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 02/10] glibc: cleanup old cve status Date: Wed, 7 Aug 2024 19:28:38 -0700 Message-Id: <35d55934cb6ec24098e4e8679b87066bf3bae6a9.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203102 From: Peter Marko This CVE status should have been removed on version update. CPE says >=2.34 and <2.39 while our version is already 2.39. (From OE-Core rev: b568a8f428e76f75bb8c374983f62822325ebe8a) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman --- meta/recipes-core/glibc/glibc-version.inc | 2 -- 1 file changed, 2 deletions(-) diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc index ad58bebcf1..955b22bc38 100644 --- a/meta/recipes-core/glibc/glibc-version.inc +++ b/meta/recipes-core/glibc/glibc-version.inc @@ -6,5 +6,3 @@ SRCREV_localedef ?= "fab74f31b3811df543e24b6de47efdf45b538abc" GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https" UPSTREAM_CHECK_GITTAGREGEX = "(?P\d+\.\d+(\.(?!90)\d+)*)" - -CVE_STATUS[CVE-2023-4911] = "fixed-version: Fixed in stable branch updates" From patchwork Thu Aug 8 02:28:39 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47495 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 03C66C52D73 for ; Thu, 8 Aug 2024 02:29:04 +0000 (UTC) Received: from mail-pj1-f52.google.com (mail-pj1-f52.google.com [209.85.216.52]) by mx.groups.io with SMTP id smtpd.web10.50957.1723084138173420039 for ; Wed, 07 Aug 2024 19:28:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=t7UBfN3d; spf=softfail (domain: sakoman.com, ip: 209.85.216.52, mailfrom: steve@sakoman.com) Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-2cb63ceff6dso440559a91.1 for ; Wed, 07 Aug 2024 19:28:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084137; x=1723688937; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=IAiNHU4x+jf2llgDOVxeR2LehWq7D9ueFAbs9flje3k=; b=t7UBfN3d3UQwlE4KVRXk9NM3yDbPvv82Za2Wxltvkb2cdwmjN83XIIQdIzDSaHxebl pN2gBYUr48rjEK11P4oeydvyT1QK70qwsiCPcXEut4amwOXsGKUgr64rCAk/IHyrbaok VCNZJnvxcTM+F1EQSxGsqbAJNrjEWCo5ZBDzYVH+I5TZhguUvihQHKzRIhWpsNhgYRlZ HAnkfhkaLWUG5CZAeHSeXK4i0++sKmgaCPSrf0Ki/LMi0Z8CaTgJqAShbYEjVKcodO4d gVu4IbxhhMMFBRkpLn67MMBhpud6JSUW2PXw1J9DOoXUgcrrz1xxHzgQ5ODNc78jIWWs b0RQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084137; x=1723688937; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=IAiNHU4x+jf2llgDOVxeR2LehWq7D9ueFAbs9flje3k=; b=VtU40PKD7e7/8J9CjiSX4Q9+BnoN3WhTF4UkHZScpdZ2j2HZ+1/pA3MJQT/DFZekop WRPdUYUpH2RLCZ0ZdTFMp0B6hNycxFVA/BhTlh0YgDrMFvWVYjDBUi1F14eeUHGwUxFT eR4b/lhBFhshaAw/++seAJRSKp/37AtrHapxNEMoDPWVrg0Ym2ISLT8SxSmdjoqKv7jD Yh0a7c7PGeo/keV3SArix6f3etUEQsEgIXEb6d3z5+/e0riSCIjAZ3MKGAnoBGudlKLr VOzaXK2+LwWLoEd4eQ6zSR6iRuXQj1qrzAAKpB3CuHt9uuHp4MJL5hgLEod7GGrmu1bw D1sg== X-Gm-Message-State: AOJu0YyT7rrO/Arcl702AuFpM/WOEqopG7fE+2XflohBrjc46p9G+y+P RjYHKMwxtPA2r4SPCZDh5shZWfQfzn/hKqvu9YcwYA4uacEK4ImuIXYDos4cfy3WNPjnMihth4A TKB4= X-Google-Smtp-Source: AGHT+IEOY5bLIErnYmRYr6H2ncaR4CXaEbLGWcQp33XgyoWQDwABG626yj7exQs0m7aErwYepfioNQ== X-Received: by 2002:a17:90a:6846:b0:2c9:6d30:81ee with SMTP id 98e67ed59e1d1-2d1c336ef03mr603141a91.8.1723084137510; Wed, 07 Aug 2024 19:28:57 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.28.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:28:57 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 03/10] qemu: set cve status for CVE-2023-6683 Date: Wed, 7 Aug 2024 19:28:39 -0700 Message-Id: <422fc84ddbe46580dc6d647eff62c4dbc8551e63.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203103 From: Peter Marko This CVE is fixed in v8.2.2 with v8.2.1-55-g480a6adc83 https://github.com/qemu/qemu/commit/480a6adc83a7bbc84bfe67229e084603dc061824 Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-devtools/qemu/qemu.inc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 41af9ca045..3643b9a544 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc @@ -74,6 +74,8 @@ CVE_STATUS[CVE-2023-3019] = "cpe-incorrect: Applies only against versions before CVE_STATUS[CVE-2023-5088] = "cpe-incorrect: Applies only against version 8.2.0 and earlier" +CVE_STATUS[CVE-2023-6683] = "cpe-incorrect: Applies only against version 8.2.1 and earlier" + CVE_STATUS[CVE-2023-6693] = "cpe-incorrect: Applies only against version 8.2.0 and earlier" COMPATIBLE_HOST:mipsarchn32 = "null" From patchwork Thu Aug 8 02:28:40 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47494 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 19415C52D7C for ; Thu, 8 Aug 2024 02:29:04 +0000 (UTC) Received: from mail-pg1-f169.google.com (mail-pg1-f169.google.com [209.85.215.169]) by mx.groups.io with SMTP id smtpd.web11.51042.1723084140192916790 for ; Wed, 07 Aug 2024 19:29:00 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Dq2uz8QY; spf=softfail (domain: sakoman.com, ip: 209.85.215.169, mailfrom: steve@sakoman.com) Received: by mail-pg1-f169.google.com with SMTP id 41be03b00d2f7-7a1be7b7bb5so365018a12.0 for ; Wed, 07 Aug 2024 19:29:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084139; x=1723688939; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=aqh2YHH+M+i60ckx/0c1ws7dG4aph/iQ296BjUvyMUg=; b=Dq2uz8QYkx6TC5XjQVpU8fOvA1/BlOfjTZ6a3hw2qLsz4jsiExvDFY+kSzetzcQp9W Zc3USwLFj8IDfJA/6Ud8b1AjKxVJaE5c+Qqraf110wDrCXkmhQmrJvHPdEAHtoo7tU9T 4XISA4WVMnJYgc298OroCfQM1cguKWtm/CEblX0HEqYHk9wyguHwHF2vE3fOkbxFBt2A giiC22NqM3qMowgN7x/v7mD1tVV2wbZX4f/ahUAwxqzBIcRy+Qz2rHlt0kaxL/1LUv8K VaBEfU8w54BvMiSVmToO/hn40l2Hh8ajEHhBo6K9ue1RdfuXxCSsTMi0+S7EnpaO0C8u ppIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084139; x=1723688939; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=aqh2YHH+M+i60ckx/0c1ws7dG4aph/iQ296BjUvyMUg=; b=BbfHUKFr3Ij8xfxOj24Oh1Br1AoEpDcDOT6i+3alB0m4lotK8LYai+SLFi2qY0fXqD gbgdKD4NR4/q200H7nqqLpq4TmnLN5m7eHbneycpmEUX671xujW7MK3Q5hvApeW0BzkQ f6ivFnMshF6JpdPYkArtUJxH5CCDXEs7tChGG6VALIIXMFgk7lwnDS3V9UTsmIMKnXGP CDttmgTBYBXG1VadzIVNviy+4YdWGIVrqXwPpm1PEWmcfg0Kv7jurDYEwvidpZKRHT8M 7S4uO16JbTmXy0u3Je0hkAHmIP90G/KyjeyJSKsfYmX7lLb16F7me7DKjP1ER/YDTGr0 ABMA== X-Gm-Message-State: AOJu0YzovyZm/tDBdkfUUlA2lecINvAo9DnNajUaVj6lTHwjXfN/8087 Ng9WolB9wBm8uSmuqTbsqdLj4zQB+IcsZJQIUjDI17YBE/fg411Jgokp7T9aTwDh2X3BXHzM3JD f/Ac= X-Google-Smtp-Source: AGHT+IHPI/43zTjPgg/znsO9w7IbYfJ727vfeqFdQt//YV4QTADtCzhZ4HGBfqO818GISTzLxmDisg== X-Received: by 2002:a05:6a20:7f99:b0:1be:d1bf:a371 with SMTP id adf61e73a8af0-1c6fcf86502mr422427637.33.1723084139343; Wed, 07 Aug 2024 19:28:59 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.28.58 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:28:59 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 04/10] ffmpeg: fix CVE-2024-31582 Date: Wed, 7 Aug 2024 19:28:40 -0700 Message-Id: <617a9cdba6e2f0bd3ccc24e7bb2fe84e9573fecd.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203104 From: Archana Polampalli Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman --- .../ffmpeg/ffmpeg/CVE-2024-31582.patch | 34 +++++++++++++++++++ .../recipes-multimedia/ffmpeg/ffmpeg_6.1.1.bb | 1 + 2 files changed, 35 insertions(+) create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-31582.patch diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-31582.patch b/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-31582.patch new file mode 100644 index 0000000000..2ade3ab6b1 --- /dev/null +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-31582.patch @@ -0,0 +1,34 @@ +From 1d1a05b393ece9fa3df825bfef3724b7370aefdc Mon Sep 17 00:00:00 2001 +From: Zhao Zhili +Date: Fri, 29 Dec 2023 05:56:43 +0800 +Subject: [PATCH] avfilter/vf_codecview: fix heap buffer overflow + +And improve the performance by a little bit. + +Signed-off-by: Zhao Zhili + +CVE: CVE-2024-31582 + +Upstream-Status: Backport [https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a482e1dc08de35879aa9c74bd2] + +Signed-off-by: Archana Polampalli +--- + libavfilter/vf_codecview.c | 3 --- + 1 file changed, 3 deletions(-) + +diff --git a/libavfilter/vf_codecview.c b/libavfilter/vf_codecview.c +index 55d9c8c..f65ccbd 100644 +--- a/libavfilter/vf_codecview.c ++++ b/libavfilter/vf_codecview.c +@@ -216,9 +216,6 @@ static void draw_block_rectangle(uint8_t *buf, int sx, int sy, int w, int h, ptr + buf[sx + w - 1] = color; + buf += stride; + } +- +- for (int x = sx; x < sx + w; x++) +- buf[x] = color; + } + + static int filter_frame(AVFilterLink *inlink, AVFrame *frame) +-- +2.40.0 diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_6.1.1.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_6.1.1.bb index 06bd36e2e2..05919e6ffd 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_6.1.1.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_6.1.1.bb @@ -29,6 +29,7 @@ SRC_URI = " \ file://vulkan_fix_gcc14.patch \ file://CVE-2023-49502.patch \ file://CVE-2024-31578.patch \ + file://CVE-2024-31582.patch \ " SRC_URI[sha256sum] = "8684f4b00f94b85461884c3719382f1261f0d9eb3d59640a1f4ac0873616f968" From patchwork Thu Aug 8 02:28:41 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47493 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 048BDC52D7D for ; Thu, 8 Aug 2024 02:29:04 +0000 (UTC) Received: from mail-pj1-f41.google.com (mail-pj1-f41.google.com [209.85.216.41]) by mx.groups.io with SMTP id smtpd.web10.50960.1723084141549552917 for ; Wed, 07 Aug 2024 19:29:01 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=c/wkq3eP; spf=softfail (domain: sakoman.com, ip: 209.85.216.41, mailfrom: steve@sakoman.com) Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-2cdadce1a57so433152a91.2 for ; Wed, 07 Aug 2024 19:29:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084141; x=1723688941; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=9NtveZTAI3dqQV+FddKrid4zDPv/P5s/s91mVW5tL1Q=; b=c/wkq3ePCttTM7N78BFvnvqTaxkwYjxJm7lp26kcWV+V5WFz+VLJ5ehY3/YXPPH/tC JypZ2whmfZpPWwjhL/maE9a/LGHtwFl4bqUaGM/yjgWpezg+VUD8f3XPsLeFg1Skxoju gNTioiOfdDPv/q5MOEOTSv5cmdDCrmJwr/YkFXjVJ3SIaU5aJwTPg3Bn5QL95wDDc6Ff Ci5FbrTTxXDL5CRISLZ1VZdkdBVw5MKRf7EIHVj4xhi4J29UjqQL4KuERWZPGIIzP/oF pLet+CXrEONTnWWpk57/uwX1UClWYBW1oRmwYGq9MZgbnzVC5yzpcvEcBajZuLSSbesM zIjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084141; x=1723688941; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=9NtveZTAI3dqQV+FddKrid4zDPv/P5s/s91mVW5tL1Q=; b=XcZJ1oNWfiUV4K7MN4ArqiRD+vQsQvvyGWXo0H/k5iwmtNtWdMs8Q7DSVFFokP+9Z5 3jZxs/Ejn/iBTLu/mhu6YVtjaEf3MrjvSCoLLEE+qJiZS4tEBKXtc09b5qnWIXBMDZpa t8MJue8WHlD356h/z7eyX0ksWyT5eXXZccFH0aC1uCyyDctWft3LDJxdN83aWP3b2T3r ymjAWlXEEdK2QU9do1/OGSL9QrXScfZ42M7thca2ozgpsT/oFhaGS9v1llMjYecj4Dhn Vjwiw1Yp+U4Dy5GyFW4QOv7Bkb07Q5ve/oZcymj6QzhvemZVlRZvpb6X6ScWp17WXEom XgJw== X-Gm-Message-State: AOJu0YxBDObIsfrAvQ+yItDKk0LPAo9PTsQ5W9ZuBPDwk7jHedCQsK6v /0hB/fzheJJVa8NBltOWd22s7G4GvkPXDpGjVMBWIXoKheOxDkCVhXPGmKn9abhi1rOoTqIGNcX CuiU= X-Google-Smtp-Source: AGHT+IHY1mS4SAQNWwnhGizDIuwPHiLP1D1aGYvCxrWQ4qXQcRvruGiVSUpr5gRR3XCyRy2DlyiQWQ== X-Received: by 2002:a17:90a:fd93:b0:2cb:5134:562a with SMTP id 98e67ed59e1d1-2d1c336ef54mr607009a91.7.1723084140892; Wed, 07 Aug 2024 19:29:00 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.00 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:00 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 05/10] nasm: Upgrade 2.16.01 -> 2.16.03 Date: Wed, 7 Aug 2024 19:28:41 -0700 Message-Id: <5b330f3dfe7a37eff5251d2c29d324e90677b33c.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203105 From: Richard Purdie Removes CVE-2022-46456 from reports. (From OE-Core rev: 4a5b6e8dd315b2281afb232410db585d431be00f) Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-devtools/nasm/{nasm_2.16.01.bb => nasm_2.16.03.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/nasm/{nasm_2.16.01.bb => nasm_2.16.03.bb} (88%) diff --git a/meta/recipes-devtools/nasm/nasm_2.16.01.bb b/meta/recipes-devtools/nasm/nasm_2.16.03.bb similarity index 88% rename from meta/recipes-devtools/nasm/nasm_2.16.01.bb rename to meta/recipes-devtools/nasm/nasm_2.16.03.bb index 219cc49360..281f3940e7 100644 --- a/meta/recipes-devtools/nasm/nasm_2.16.01.bb +++ b/meta/recipes-devtools/nasm/nasm_2.16.03.bb @@ -10,7 +10,7 @@ SRC_URI = "http://www.nasm.us/pub/nasm/releasebuilds/${PV}/nasm-${PV}.tar.bz2 \ file://0002-Add-debug-prefix-map-option.patch \ " -SRC_URI[sha256sum] = "35b6ad2ee048d41c4779f073f3efca7762a822b7d2d4ef4e8df24cf65747bb2e" +SRC_URI[sha256sum] = "bef3de159bcd61adf98bb7cc87ee9046e944644ad76b7633f18ab063edb29e57" EXTRA_AUTORECONF:append = " -I autoconf/m4" From patchwork Thu Aug 8 02:28:42 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47496 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 265DBC52D7E for ; Thu, 8 Aug 2024 02:29:04 +0000 (UTC) Received: from mail-pg1-f172.google.com (mail-pg1-f172.google.com [209.85.215.172]) by mx.groups.io with SMTP id smtpd.web11.51045.1723084143114930336 for ; Wed, 07 Aug 2024 19:29:03 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=w5p9hISx; spf=softfail (domain: sakoman.com, ip: 209.85.215.172, mailfrom: steve@sakoman.com) Received: by mail-pg1-f172.google.com with SMTP id 41be03b00d2f7-7b0c9bbddb4so342912a12.3 for ; Wed, 07 Aug 2024 19:29:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084142; x=1723688942; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=2O3QLizVwzvQ2e4nP5WxHz9YJR/ZzYeU2ML0cgixdgk=; b=w5p9hISxnfxJ3WAwSBA101YHcl3MLOrS4nzDhcPXgt4Z5YuVSkbx50RfB3+hqOEnvm m390JJfNTnMFer42ECUSYNPCU2TYJzwRTCsSfH+hbDX9OWy31tDRB83uQUjJXaqxPzBN XjAwQfLMyejNzq8bwLuuef0yFw9aeWqubeq96oHp0aiADCWkdk/BTxwHaGfhutfRQ30Q hyp25o/DOadpRATrYKgR/RxaZvaFb1xYUHSEkixhqmCaInyPcRarTrylxZgCEDxupjpP S/efUVq5ZaOEvpiQhrEBsFGIhh+eAB+7FPWK1lTkMkSgE5k4/lIkLh90pJhzXUGQPDiv Vtlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084142; x=1723688942; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=2O3QLizVwzvQ2e4nP5WxHz9YJR/ZzYeU2ML0cgixdgk=; b=POIrhugJunqOcEf6LbeGQu0ScYK6udtbzybeZljCjXQyCeXLr9P6JeupbY52Nu5XOQ F8Z/MA5pyQs+bTkhZYU04VqvKs9KZTRLoOPcvpNU6L+sghGtmkJdTazqQGxGOwOUdq3C tvcc6br4phhVYA/OOjBbFKafoYbhFPWgN9kHNKT/tAwyNWwxRCxSKE7r9x5SoJnIYrgA 0N9cVt9TutL5P2JFsFY6vJZgjaqAAgaYxljeWsmIwnw6TewmeKa9LheJVru+w6CIV7L1 FdnzPM/z1cNpSX40ACR84gULyK5Xs32Uwdgo276/H1yLqLkvv5A20R/pHi/U2v9YVTuo 5aVw== X-Gm-Message-State: AOJu0YzM3SoKCLic3FTsGCRSi18UeTgXzOHuLJg2DcaCe/cBwGQ1oAt8 C9WnjhvDl2LxKKPR797TricYoi7a/jr21uMAHvTJ9vwSHFmQHvyvAas6fyMfWnh6mxP/wP2tfbi wtPc= X-Google-Smtp-Source: AGHT+IH/NCwygsF8MGDcELmSqRA0IgY27MtTZpun/tFotQeGfyzGZwGDqRBzzIjL9ROicjt7dISNwQ== X-Received: by 2002:a05:6a20:840e:b0:1c4:214c:cc0d with SMTP id adf61e73a8af0-1c6fcf996d2mr382864637.36.1723084142315; Wed, 07 Aug 2024 19:29:02 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.01 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:02 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 06/10] orc: upgrade 0.4.38 -> 0.4.39 Date: Wed, 7 Aug 2024 19:28:42 -0700 Message-Id: <9be9260985e751f90f9432aa68a789bf0a26fb43.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203106 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit bcbaaa9f7d88686915c354fb66682cbe9b1d0536) Signed-off-by: Steve Sakoman --- meta/recipes-devtools/orc/{orc_0.4.38.bb => orc_0.4.39.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/orc/{orc_0.4.38.bb => orc_0.4.39.bb} (92%) diff --git a/meta/recipes-devtools/orc/orc_0.4.38.bb b/meta/recipes-devtools/orc/orc_0.4.39.bb similarity index 92% rename from meta/recipes-devtools/orc/orc_0.4.38.bb rename to meta/recipes-devtools/orc/orc_0.4.39.bb index 5d2296694a..320abf536a 100644 --- a/meta/recipes-devtools/orc/orc_0.4.38.bb +++ b/meta/recipes-devtools/orc/orc_0.4.39.bb @@ -5,7 +5,7 @@ LICENSE = "BSD-2-Clause & BSD-3-Clause" LIC_FILES_CHKSUM = "file://COPYING;md5=1400bd9d09e8af56b9ec982b3d85797e" SRC_URI = "http://gstreamer.freedesktop.org/src/orc/orc-${PV}.tar.xz" -SRC_URI[sha256sum] = "a55a98d4772567aa3faed8fb84d540c3db77eaba16d3e2e10b044fbc9228668d" +SRC_URI[sha256sum] = "33ed2387f49b825fa1b9c3b0072e05f259141b895474ad085ae51143d3040cc0" inherit meson pkgconfig gtk-doc From patchwork Thu Aug 8 02:28:43 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47498 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1830FC3DA7F for ; Thu, 8 Aug 2024 02:29:14 +0000 (UTC) Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.web10.50964.1723084144655118819 for ; Wed, 07 Aug 2024 19:29:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=kRQILNWZ; spf=softfail (domain: sakoman.com, ip: 209.85.216.53, mailfrom: steve@sakoman.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-2cfd1b25aaaso459706a91.0 for ; Wed, 07 Aug 2024 19:29:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084144; x=1723688944; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=KsWE9+TwUtJzUHmEvg7Nj5KkLejuQSG7yVezMKFA4bg=; b=kRQILNWZ8UvsQPUrGLVmA6LbadUV5rXdI6Q8uJ1RguLL9SWMEjtSgtR4Qyr8B9oaKc qdnGKL0BdWFROijybP0XXzhTxv0G8kj8CNdaMj929++Jqtfw4YTrh0ni82lsert2qcnH v+AxoLknaXQWfKmAxxngCdwoawesM+0RSCYxbC/uRU7leV19UqHV7151IY9/5c9mtEj6 uuoJGN0wZm5LNwx8+hVh/1yNjtT7TcpcI7vA6sYal0wczCIZCnPuffu7IUPnSrkZIAhY eV1oBbE5zZDLswnXyUi0n4YYxzjjd0BDyU5qQUpDgUKdolo1fOb5PiJWVOBP9FOhBdJm BFLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084144; x=1723688944; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=KsWE9+TwUtJzUHmEvg7Nj5KkLejuQSG7yVezMKFA4bg=; b=vOt94w1veCvhd96IAUP2mIGHl/PdR1FSw2Qa1TWoIqXxJ7HZnXe7VMMJlj2aJJR/ze yTEvmJRRpdyQdjALGbIaU942w96a+iMJZoHvwTYgXp0nutsDHg4PtkINgHZil/jreCcg FAoxl/ea9T7XWGSsjI/tatrIy4CPwhJyIaWwLvFoCFUQGe4uLEtPV31oFyQXnoH/+o/w KMvxDvFwz7qsmFH0GcBMb3KHpR8m7sk5yWBWTDCETACITq2RLRnQtFf4DYAEtBebV7C7 kW5voLd9uW7gtaEN2QfxNfhjIPykJYU0OcsHd3NqcbX38ejCiBf10zHWTNkGRXZrtkJw uQhw== X-Gm-Message-State: AOJu0YymIF+j3BjkUSN4o9s/fcP2uq/06wOsAzIH2i4MJPSVuf7h8t1F F0s/AIRKP/mxg6SKKxhm7WZEMcuSP5gZJEz14vMD0FFEAMLcGv1S/ieGsKfzuBIj5k6+uXreWvo v2Oc= X-Google-Smtp-Source: AGHT+IGYY8N1mvW5a9MxjFVX6MMSAGEeMiksmBaeIYpXet6TGrQBHzPQgmpSyOWXhdCKVmqEoGe88Q== X-Received: by 2002:a17:90a:9af:b0:2c7:c7e6:eb89 with SMTP id 98e67ed59e1d1-2d1c33fe379mr586283a91.23.1723084143889; Wed, 07 Aug 2024 19:29:03 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.03 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:03 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 07/10] bind: Upgrade 9.18.25 -> 9.18.28 Date: Wed, 7 Aug 2024 19:28:43 -0700 Message-Id: <45fccf634a3ba0f60ee16522b7a767bb778dd984.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203107 From: Ashish Sharma Includes security fixes for: CVE-2024-1975 CVE-2024-1737 CVE-2024-0760 CVE-2024-4076 Changelog: ========= https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.28/CHANGES Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman --- .../bind/{bind_9.18.25.bb => bind_9.18.28.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/bind/{bind_9.18.25.bb => bind_9.18.28.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind_9.18.25.bb b/meta/recipes-connectivity/bind/bind_9.18.28.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.18.25.bb rename to meta/recipes-connectivity/bind/bind_9.18.28.bb index cc35604aba..ca2aef233b 100644 --- a/meta/recipes-connectivity/bind/bind_9.18.25.bb +++ b/meta/recipes-connectivity/bind/bind_9.18.28.bb @@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-avoid-start-failure-with-bind-user.patch \ " -SRC_URI[sha256sum] = "5a4a70432a33d009f0e6e9dbb328aae7a5e27507e98e28bf3c0c6b250ccb2ab3" +SRC_URI[sha256sum] = "e7cce9a165f7b619eefc4832f0a8dc16b005d29e3890aed6008c506ea286a5e7" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2 From patchwork Thu Aug 8 02:28:44 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47497 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 18348C52D6F for ; Thu, 8 Aug 2024 02:29:14 +0000 (UTC) Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.web10.50966.1723084146411404764 for ; Wed, 07 Aug 2024 19:29:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=EnkDyD2A; spf=softfail (domain: sakoman.com, ip: 209.85.216.46, mailfrom: steve@sakoman.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-2cd48ad7f0dso469812a91.0 for ; Wed, 07 Aug 2024 19:29:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084146; x=1723688946; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=jqYbZ+tTsLtAt5K8bpdV6pthf5OwnSsz1Wh6xEk8WlY=; b=EnkDyD2ALfRgnr52VKNr2pbfu8gPveiWUQRZ2mNoc56D2P/OQqssK8CmZDrU++cmWP yu288o223jtc0/vTtAF4Empo2cGVm3WH0eZBO/M+zk6S2nccEUcl7JXB1RbVQhaWmzmV dIt9sLsnCWrnTcmrHABSP42lXBxBXOA6V24MlrrTgDMT/skfvF1YlmKyKazw/iJI99ZA /g4D+AE74bhPGHox64jgW8zzhRR98zGNStdQDpLJviXp8gM+oD0541FiBcstzLrC2k+0 QmmPGe461Naj/z9ifq9sRP8Y1j0ghWCWfDFVg4Pp2FllqbLPvGptgTiJzgbGTITREJds 5nMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084146; x=1723688946; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=jqYbZ+tTsLtAt5K8bpdV6pthf5OwnSsz1Wh6xEk8WlY=; b=aYZN2G9p7Fo0ZFYDiF32Y2AqW0njTQzAmjr5MKu9WhMErFvrwZq+oXkkjIvu3Y/0xO ROL1GxHZsME2KXldZmYI6fYQGnEbBVNcbsq+vcLn+bEtMriVagWmW+YmSse8HDzuYiqj NBsf5euXRCaXG0iHjmMsCLNxB3xxLWv/YZVQuTT1uWPsgnIHRdGji0xLXH5T8yhq4va8 1HeOyOuIHwpNq39AlYlISPrUUd8iR72THd8BRV+PTfvlkfqd8d/+WeRouGXGiCq5IKgx a98bat3v6NNFNjjgJdPessxPXzO4+PXiTXKJGBiifJw74tnOWFWWLS8JKdzgJsJKmNn7 B6Lg== X-Gm-Message-State: AOJu0YyHb8F4wJJ264lR/flFZtGr7alACdQko8PspADORLdv+qlTocgb loR03TjatmGJy1dDzZNveKjwF00gYfNDvWoSivtCo3maQGbS8C/IBawM1Sr0ouyGkulACaXQwsc 4qF0= X-Google-Smtp-Source: AGHT+IHTCO8Tx4LNZHfLq7uZ/+75deOrTmfzCmfpyMXv853NKtcqbWc+tO2TC8lqs/j8+LJjr/d/3A== X-Received: by 2002:a17:90b:3888:b0:2bd:d42b:22dc with SMTP id 98e67ed59e1d1-2d1c346b923mr588761a91.43.1723084145669; Wed, 07 Aug 2024 19:29:05 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.04 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:05 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 08/10] curl: correct the PACKAGECONFIG for native/nativesdk Date: Wed, 7 Aug 2024 19:28:44 -0700 Message-Id: <67b98253ea70a1e2850a78bb101c934093d30937.1723083840.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203108 From: Changqing Li Since commit 148de08220 [ curl: Update from 8.2.1 to 8.3.0 ], --enable-crypto-auth option was removed and split into separate options for basic-auth, bearer-auth, digest-auth, kerberos-auth negotiate-auth, and aws. In this commit, --enable-crypto-auth is removed from EXTRA_OECONF, and the separate options is added into PACKAGECONFIG for target. But not added into PACKAGECONFIG for native/nativesdk, this make curl/git in buildtools not works well to connect basic auth https server. Failed commands: git ls-remote https://xxx(input username/passwd) curl -u name:passwd https://xxx Error: Authentication failed xxx HTTP/1.1 401 Unauthorized Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- meta/recipes-support/curl/curl_8.7.1.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/curl/curl_8.7.1.bb b/meta/recipes-support/curl/curl_8.7.1.bb index 136782ffec..6d2886f70c 100644 --- a/meta/recipes-support/curl/curl_8.7.1.bb +++ b/meta/recipes-support/curl/curl_8.7.1.bb @@ -28,8 +28,8 @@ inherit autotools pkgconfig binconfig multilib_header ptest RANDOM ?= "/dev/urandom" PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)} aws basic-auth bearer-auth digest-auth negotiate-auth libidn openssl proxy random threaded-resolver verbose zlib" -PACKAGECONFIG:class-native = "ipv6 openssl proxy random threaded-resolver verbose zlib" -PACKAGECONFIG:class-nativesdk = "ipv6 openssl proxy random threaded-resolver verbose zlib" +PACKAGECONFIG:class-native = "ipv6 openssl proxy random threaded-resolver verbose zlib aws basic-auth bearer-auth digest-auth negotiate-auth" +PACKAGECONFIG:class-nativesdk = "ipv6 openssl proxy random threaded-resolver verbose zlib aws basic-auth bearer-auth digest-auth negotiate-auth" # 'ares' and 'threaded-resolver' are mutually exclusive PACKAGECONFIG[ares] = "--enable-ares,--disable-ares,c-ares,,,threaded-resolver" From patchwork Thu Aug 8 02:28:45 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47499 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2A71BC52D7C for ; Thu, 8 Aug 2024 02:29:14 +0000 (UTC) Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by mx.groups.io with SMTP id smtpd.web10.50968.1723084148033189176 for ; Wed, 07 Aug 2024 19:29:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Xsr2KUmm; spf=softfail (domain: sakoman.com, ip: 209.85.215.182, mailfrom: steve@sakoman.com) Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-7b396521ff6so413173a12.1 for ; Wed, 07 Aug 2024 19:29:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084147; x=1723688947; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=f0PJEyGS1itnTmJp2yf6j7yUls4Q60LxYMaxUuF2994=; b=Xsr2KUmm7MqEVRqLy+WWRvJdcDhybEq2ByVqobww+FmF1O+IqR+UGsANmA4ViOXN3l 5fkYnG/tEZqLpxs71TwO/DzJYWzVvIr/UCE66USHoK/zhtF60yuy2PR1R8eu96HOgugG z6tcnPRt6nyYmhWgBW2Mw019nqA8EeXJphkAQBK0oDsiplNFEzRMnTZyjJ8zaxorE7Ug OG7IPigI75wP/uqcaWqx4J8KtrbqF2u4ANQsqmVdrzEIIbQ1YYCrRrZpBSiUvFu0vd5k f5Suml+8D0jfCGWZQJ0vopWW5CCW0pIFHi+skxvGT/exXICpTciwqMljxdOSVybwP/+P 0T3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084147; x=1723688947; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=f0PJEyGS1itnTmJp2yf6j7yUls4Q60LxYMaxUuF2994=; b=gPiDJ5MEorXY1k0GwheVQ3C/7xHFjvPA7ka2vV5+QhacONHrLsZ5NPLni2oKglW1IT CZEUT2/itKgRlc33/kEwsiv5x8QYDmgxTBA5LFzyar5dJo4hwCg3LTo8KiU2+pyUIBDT 8fdOT3LpmKSfFO9tkwL/TDXJA/pAcS/bOYDZEUKDdhlla0W0wrLyC1jDyc4/SL9Vi1FP leUXUeIr9WxTBecH/fpOfItOztnXuar2pOg3bFdglTj53Q8jviiaiEh67LkrUdv0O6xD Gc33TlGNK3nOiz3r3vBhIMYFeab5JDE4Pecqs1CwEYDSXVg3WHrJXRpDpuZXpMCwz+yQ W8YQ== X-Gm-Message-State: AOJu0YwHiUJk8LZ24FSa+EvE64xfxMTYt+Tz2iW9GaibVdd04JOjx0G0 dHH5XJbJ43Vc6aLCtBGWVTQtsxmmDTL6Fc9xlFid5DUpJJFGzikJnzo4uqRE85PZ994S7qxkomJ xAXc= X-Google-Smtp-Source: AGHT+IFwAeYoNqgwVUS9ZhnGR5QCn6B2twgNLUOLn4PDno+cUZHFs4VWQ4oyb4+OmipfrSrGKtaMNg== X-Received: by 2002:a05:6a20:3950:b0:1c4:a531:bafd with SMTP id adf61e73a8af0-1c6fcee72d1mr591795637.18.1723084147261; Wed, 07 Aug 2024 19:29:07 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.06 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:07 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 09/10] libmnl: explicitly disable doxygen Date: Wed, 7 Aug 2024 19:28:45 -0700 Message-Id: X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203109 From: Peter Marko libmnl autoconf autodetects doxygen to generate manpages. If doxygen is provided via hosttools, the build fails. Also until now manpages were not needed. So explicitly disable doxygen in configure step. (From OE-Core rev: 8d7bbf4d6936d831e341e9443a6b3711be09c7ab) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman --- meta/recipes-extended/libmnl/libmnl_1.0.5.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/libmnl/libmnl_1.0.5.bb b/meta/recipes-extended/libmnl/libmnl_1.0.5.bb index 748326c0a0..66b30d7f60 100644 --- a/meta/recipes-extended/libmnl/libmnl_1.0.5.bb +++ b/meta/recipes-extended/libmnl/libmnl_1.0.5.bb @@ -11,4 +11,6 @@ SRC_URI[sha256sum] = "274b9b919ef3152bfb3da3a13c950dd60d6e2bcd54230ffeca298d03b4 inherit autotools pkgconfig +EXTRA_OECONF += "--with-doxygen=no" + BBCLASSEXTEND = "native" From patchwork Thu Aug 8 02:28:46 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 47500 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2A765C52D7D for ; Thu, 8 Aug 2024 02:29:14 +0000 (UTC) Received: from mail-pj1-f50.google.com (mail-pj1-f50.google.com [209.85.216.50]) by mx.groups.io with SMTP id smtpd.web10.50969.1723084149547702069 for ; Wed, 07 Aug 2024 19:29:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=y8TXB6bI; spf=softfail (domain: sakoman.com, ip: 209.85.216.50, mailfrom: steve@sakoman.com) Received: by mail-pj1-f50.google.com with SMTP id 98e67ed59e1d1-2cb4b6ecb3dso410041a91.3 for ; Wed, 07 Aug 2024 19:29:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1723084149; x=1723688949; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pu9JWkl/RmHM2trwfSwdaCooBhlMhCZfS/8XhD4MsuU=; b=y8TXB6bIK+GZh6XPwtGMqZAi8CskaPRDr//RXbEgsKDy2TMZyw1PSNeR8BRcDCjY5p lyrGk+eS3ca+BVtlxDyXdirrljIy/7BM05gd4e4IoSXw/W7qOmz7ecZ7F6OonCgiVGu8 883GV+TxMMaVZUF7fpgaDroWhwV1rEJlfYBDpwfTXPkW2FyjoYAdEwkqtuOy9Y5WEy6s dDApx6t59fv9Yw13n/4lNPHiqAybvrERUIALNDWqQohebKMIPoNk4blYWaHtbMQBFEuK suy8PP1bSpuh9gOWt1d6WgZCwI7CjNbP0YmnBBFDN8ws005oEGGc51n8cfQT7kkXv3BZ Y3zA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723084149; x=1723688949; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=pu9JWkl/RmHM2trwfSwdaCooBhlMhCZfS/8XhD4MsuU=; b=YAAMwMJYbW2dsF90O6fjW0f2zpQAvFc6sKYRlyYbITXS/1S+L+tAGecz0WPj5xnrBA Ee+irh3AIgZDm5+2c0iP9QeBcF//ItcqzjO7THMgtXGUf2Pp3LLmglwyqmXLNTPWSWj7 uWEdcsBG00rnF4xQWcaApx79Gckzoh5tP4Zq85GQ/HULtkpjBThe2lsEJBhCG2yp2Kp8 Y3RtsBEhyZCvJDYS6fccQVfmi7ULCnxneyZE1Jyr64ZTqUzIUp33mioGEPOqlNC0QPGw S0eITeV3jFcBEmLu4vmWkA7C7CCP25rYVASsDmAIWs2umK1JiObnXdSBI24lpa37MF2A +/bg== X-Gm-Message-State: AOJu0Yz81anu5vFKRbvDazoETyGU/rlj7RZCdTxPsDoWFciyKlDF+00R JveUyBZJI85KKA9D2ujM+j4GUrQaAp1cIWrgPu4qpJ0fSPIdRsmvJ6NZ/Hy7ucIYLAXP/wXS8fC gbMo= X-Google-Smtp-Source: AGHT+IGzGtAXMyTTKfJ+lbVFCASeG0ciMlEjVCEfIQ+7tzHleiSvkNzSTxDMeXGKFlVPrZFIfpsz3Q== X-Received: by 2002:a17:90a:f186:b0:2c9:999d:a22d with SMTP id 98e67ed59e1d1-2d1c345ae00mr513368a91.30.1723084148832; Wed, 07 Aug 2024 19:29:08 -0700 (PDT) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2d1b3b0c796sm2269198a91.33.2024.08.07.19.29.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Aug 2024 19:29:08 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 10/10] libpng: update SRC_URI Date: Wed, 7 Aug 2024 19:28:46 -0700 Message-Id: X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 08 Aug 2024 02:29:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/203110 From: Changqing Li update SRC_URI to fix do_fetch warning: WARNING: libpng-1.6.42-r0 do_fetch: Failed to fetch URL https://downloads.sourceforge.net/project/libpng/libpng16/libpng-1.6.42.tar.xz, attempting MIRRORS if available Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/libpng/libpng_1.6.42.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.42.bb b/meta/recipes-multimedia/libpng/libpng_1.6.42.bb index cadbe957db..673133bb4a 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.42.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.42.bb @@ -10,7 +10,7 @@ DEPENDS = "zlib" LIBV = "16" -SRC_URI = "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/${BP}.tar.xz" +SRC_URI = "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/${PV}/${BP}.tar.xz" SRC_URI[sha256sum] = "c919dbc11f4c03b05aba3f8884d8eb7adfe3572ad228af972bb60057bdb48450" MIRRORS += "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/ ${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/older-releases/"