Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2024-12-15T19:05:09+00:00 2024-12-15T19:05:09+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2024-12-03T08:59:01+00:00 urn:sha1:bc1a812e62b471c410ec9aa982fbb1b436de8890 Changelog: * Compilation fixes for libxml 2.13 * Fix ABR in gsf-vba-dump. * Teach gsf (the tool) to handle odf properties. * Fix integer overflows affecting memory allocation. * Add missing "DocumentStatus" ole2 property. * Avoid some undefined C behaviour in overflow checks. Security fixes: CVE-2024-42415 An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. CVE-2024-36474 An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Reference: [https://gitlab.gnome.org/GNOME/libgsf/-/issues/34] (master rev: 6ed5891c18fc78a69764af0a29ad9b5feefb1aa8) Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-02-09T17:52:09+00:00 Wang Mingyu wangmy@fujitsu.com 2024-02-06T07:36:02+00:00 urn:sha1:016726c5b8d13b75e2082ef7213f16f3deebca7b Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-12-09T08:00:06+00:00 Ross Burton ross.burton@arm.com 2023-12-08T22:32:23+00:00 urn:sha1:103f49b5fc987e7bb8765700d16bd387a33b62ca Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-11T17:26:41+00:00 Markus Volk f_l_k@t-online.de 2023-11-11T13:49:21+00:00 urn:sha1:84f88138586a64da397e0d940f39e039823b0306 It is set to meson by default Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-06T16:49:52+00:00 Markus Volk f_l_k@t-online.de 2023-11-05T20:05:42+00:00 urn:sha1:2d02f287e36961706613ecc67c509ad1177358b8 License changed to LGPL-2.1-only https://gitlab.gnome.org/GNOME/libgsf/-/commit/037c913eb631349c410ef45e49697bf5c46dac8a Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-07-19T13:44:18+00:00 wangmy wangmy@fujitsu.com 2022-07-19T06:13:19+00:00 urn:sha1:83afd6a2f154be055365660e7490df409f072bf1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-03-29T15:28:38+00:00 Wang Mingyu wangmy@fujitsu.com 2022-03-28T09:39:39+00:00 urn:sha1:7f13d5646a6f00904a8262ea4dd14cde79ab8da1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-03-05T01:41:45+00:00 Khem Raj raj.khem@gmail.com 2022-03-04T08:45:08+00:00 urn:sha1:06851c6fdc4de0b21034661039f9932a85b5adde Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-01-05T16:17:18+00:00 Andreas Müller schnitzeltony@gmail.com 2021-12-31T17:29:59+00:00 urn:sha1:436b97d0ca0ffc15e18d9a9196d4948b010b0011 libgsf 1.14.48 * Fix win32 build. * Add "zip64" readable property of GsfInfileZip. Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2021-08-03T17:21:25+00:00 Martin Jansa Martin.Jansa@gmail.com 2021-07-29T15:04:53+00:00 urn:sha1:c61dc077bbd81260e4f167fa2251643ba0ba6974 This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>