linux/meta-openembedded.git, branch nanbield

libssh: upgrade 0.10.5 -> 0.10.6

2024-01-17T00:29:51+00:00

0001-libgcrypt.c-Fix-prototype-of-des3_encrypt-des3_decry.patch 0001-tests-CMakeLists.txt-do-not-search-ssh-sshd-commands.patch refreshed for 0.10.6 Changelog: ========== * Fix CVE-2023-6004: Command injection using proxycommand * Fix CVE-2023-48795: Potential downgrade attack using strict kex * Fix CVE-2023-6918: Missing checks for return values of MD functions * Fix ssh_send_issue_banner() for CMD(PowerShell) * Avoid passing other events to callbacks when poll is called recursively (#202) * Allow @ in usernames when parsing from URI composes Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 1bea2e8c3053e7ecffb04adaaded54555f2afa0b) Signed-off-by: Armin Kuster

redis: upgrade 6.2.13 -> 6.2.14

2024-01-17T00:28:54+00:00

Upgrade urgency SECURITY: See security fixes below. Security fixes: (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup. Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit 5b34766daadf8f1e8ef3d55b24e0037c4d0727f5) Signed-off-by: Armin Kuster

samba: upgrade 4.18.8 -> 4.18.9

2024-01-17T00:28:29+00:00

This is the latest stable release of the Samba 4.18 release series. It contains the security-relevant bugfix CVE-2018-14628: Wrong ntSecurityDescriptor values for "CN=Deleted Objects" allow read of object tombstones over LDAP (Administrator action required!) https://www.samba.org/samba/security/CVE-2018-14628.html Release Notes: https://www.samba.org/samba/history/samba-4.18.9.html Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit f4c3c747d6df6015eb1231f2867ffe43ddb9620e) Signed-off-by: Armin Kuster

postgresql: upgrade 15.4 -> 15.5

2024-01-17T00:28:02+00:00

Refer https://www.postgresql.org/docs/release/15.5/ Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit bcedf9f99ca683764ef19ab008e042c82da616ff) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.3 -> 2.42.4

2024-01-17T00:26:18+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 466370a087534eded974a1eef2a4431dda6900b3) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.2 -> 2.42.3

2024-01-17T00:26:07+00:00

Changelog: =========== - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing "tan". - Do not special case the "sans" font family name. - Fix build failure with libxml2 version 2.12.0 due to an API change. - Fix several crashes and rendering issues. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 1a474db2702c59702c414f4c8ed4487251f10df6) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.1 -> 2.42.2

2024-01-17T00:25:54+00:00

Changelog: ========== - Bump Safari version in user agent header. - Fix CSP regression that broke Unity WebGL applications. - Fix the build with GBM disabled. - Fix several crashes and rendering issues. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 700e3a36fbc70ef7ecd5fa2bc820f0922df5a528) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.0 -> 2.42.1

2024-01-17T00:25:47+00:00

Signed-off-by: Khem Raj (cherry picked from commit 32bae13bb8b8edf6b4af12ee7057493101c5fb14) Signed-off-by: Armin Kuster

mariadb: Upgrade to 10.11.6

2024-01-17T00:22:02+00:00

Remove one patch as the logic is included in the new version [1] [2]. Upgrade mariadb to 10.11.6 [3]. [1] https://github.com/MariaDB/server/commit/f4cec369a392c8a6056207012992ad4a5639965a [2] https://github.com/MariaDB/server/commit/cd5808eb8da13c5626d4bdeb452cef6ada29cb1d [3] https://mariadb.com/kb/en/mariadb-10-11-6-release-notes/ Signed-off-by: Mingli Yu Signed-off-by: Khem Raj (cherry picked from commit 702cf1dc114d7c65cde4fe1d3f19a3314fccb7ff) Signed-off-by: Armin Kuster

nginx: upgrade 1.25.2 -> 1.25.3

2024-01-17T00:21:40+00:00

Changelog: =========== https://nginx.org/en/CHANGES *) Change: improved detection of misbehaving clients when using HTTP/2. *) Feature: startup speedup when using a large number of locations. Thanks to Yusuke Nojima. *) Bugfix: a segmentation fault might occur in a worker process when using HTTP/2 without SSL; the bug had appeared in 1.25.1. *) Bugfix: the "Status" backend response header line with an empty reason phrase was handled incorrectly. *) Bugfix: memory leak during reconfiguration when using the PCRE2 library. Thanks to ZhenZhong Wu. *) Bugfixes and improvements in HTTP/3. Signed-off-by: Meenali Gupta Signed-off-by: Khem Raj (cherry picked from commit dc4bef4648ea5ff73230ff2d343f498c93bd333b) Signed-off-by: Armin Kuster