linux/meta-openembedded.git, branch stable/kirkstone-nut

indent: fix CVE-2023-40305

2023-11-03T14:52:59+00:00

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Reference: https://savannah.gnu.org/bugs/index.php?64503 Signed-off-by: Yogita Urade Signed-off-by: Armin Kuster

packagegroup-meta-multimedia: restore x11 restriction for projucer

2023-11-03T14:51:09+00:00

* it was removed in: https://git.openembedded.org/meta-openembedded/commit/?id=deb11a823c32d4090b3724a589641810e06df6bc * but still needed as shown in world build without x11 in DISTRO_FEATURES: ERROR: Nothing RPROVIDES 'projucer' (but /OE/build/luneos-nanbield/meta-openembedded/meta-multimedia/recipes-multimedia/packagegroups/packagegroup-meta-multimedia.bb RDEPENDS on or otherwise requires it) projucer was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES) NOTE: Runtime target 'projucer' is unbuildable, removing... Missing or unbuildable dependency chain was: ['projucer'] Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

mbedtls: upgrade 3.4.0 -> 3.5.0

2023-11-03T14:49:47+00:00

* Includes security fix for CVE-2023-43615 - Buffer overread in TLS stream cipher suites * Includes security fix for CVE-2023-45199 - Buffer overflow in TLS handshake parsing with ECDH * Includes aesce compilation fixes Full changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.5.0 The extra patch fixes x86 32-bit builds. Signed-off-by: Beniamin Sandu Signed-off-by: Armin Kuster

suiteparse: Adapt to upstream branch name changes

2023-11-03T14:49:44+00:00

meta-oe master branch already made this change. Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster

python-blivet: Adapt to upstream branch name changes

2023-11-03T14:49:40+00:00

Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster

grubby: Update branchname to match upstream

2023-11-03T14:49:37+00:00

meta-oe master already made this change along with others. Update the branchname to match upstream repository changes to allow fetching to continue to work. Drop unneeded duplicate semicolon too. Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster

ntfs-3g-ntfsprogs: Upgrade 2022.5.17 to 2022.10.3

2023-11-03T14:48:35+00:00

Changes: Rejected zero-sized runs Avoided merging runlists with no runs Fix CVE-2022-40284 Dunfell and master both have latest version of ntfs-3g-ntfsprogs 2022.10.3. Therefore, upgrade the version on kirkstone too. Signed-off-by: Omkar Patil Signed-off-by: Khem Raj (cherry picked from commit 5d5e8854718dab02c2737e3faf288f830a514841) Signed-off-by: Sana Kazi Signed-off-by: Armin Kuster

mbedtls: upgrade 2.28.2 -> 2.28.5

2023-10-17T13:07:38+00:00

This release includes security fix for CVE-2023-43615. Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5 Signed-off-by: Yi Zhao [Minor tweak to get it to apply] Signed-off-by: Armin Kuster

nginx: add configure option

2023-10-17T12:53:00+00:00

Support --with-http_xslt_module configure option via a PACKAGECONFIG option. The option is not added to the defaults. Signed-off-by: Joe Slater Signed-off-by: Khem Raj (cherry picked from commit e0ac8eec48ddddc93751cfcdef2557998bfe91c8) Signed-off-by: Armin Kuster

mbedtls: set up /usr/bin/hello as alternative

2023-10-17T12:52:32+00:00

As mbedtls installs this rather generically-named /usr/bin/hello binary, it conflicts with the one provided by lmbench, hence set it up as an alternative to avoid conflicts when both are installed to rootfs or SDK. Signed-off-by: Denys Dmytriyenko Signed-off-by: Khem Raj Signed-off-by: Armin Kuster