Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=langdale-next 2023-02-15T13:02:50+00:00 2023-02-15T13:02:50+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-02-15T11:09:18+00:00 urn:sha1:30f4c2b3ae182513b967185e06bc8409a0ee6092 * https://opensource.apple.com/tarballs/mDNSResponder/mDNSResponder-${PV}.tar.gz is just redirect to unsafe github archives which are regenerated from time to time. * We do have src-uri-bad QA check which prevents to use github archives in SRC_URI since 2019: https://github.com/openembedded/openembedded-core/commit/21f84fcdd659544437fe393285c407e1e9432043 but this cannot catch such redirects, see: $ wget https://opensource.apple.com/tarballs/mDNSResponder/mDNSResponder-878.30.4.tar.gz --2023-01-31 10:06:02-- https://opensource.apple.com/tarballs/mDNSResponder/mDNSResponder-878.30.4.tar.gz Resolving opensource.apple.com (opensource.apple.com)... 17.253.73.203, 17.253.73.206, 2a01:b740:a26:f000::5, ... Connecting to opensource.apple.com (opensource.apple.com)|17.253.73.203|:443... connected. HTTP request sent, awaiting response... 302 Redirect Location: https://github.com/apple-oss-distributions/mDNSResponder/archive/refs/tags/mDNSResponder-878.30.4.tar.gz [following] --2023-01-31 10:06:02-- https://github.com/apple-oss-distributions/mDNSResponder/archive/refs/tags/mDNSResponder-878.30.4.tar.gz Resolving github.com (github.com)... 140.82.121.3 Connecting to github.com (github.com)|140.82.121.3|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://codeload.github.com/apple-oss-distributions/mDNSResponder/tar.gz/refs/tags/mDNSResponder-878.30.4 [following] --2023-01-31 10:06:02-- https://codeload.github.com/apple-oss-distributions/mDNSResponder/tar.gz/refs/tags/mDNSResponder-878.30.4 Resolving codeload.github.com (codeload.github.com)... 140.82.121.10 Connecting to codeload.github.com (codeload.github.com)|140.82.121.10|:443... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [application/x-gzip] Saving to: ?mDNSResponder-878.30.4.tar.gz? * The tarball was regenerated recently as discussed in: https://github.com/orgs/community/discussions/45830 * Use top-level directory in S to fix DEBUG_PREFIX_MAP usage like the version in master does, the only exception here is that there still was top-level Makefile (which fails to set VER with: Makefile:26: *** missing separator. Stop. so use the simple one like newer version in master) * it's already included in master as part of version upgrade in: https://github.com/openembedded/meta-openembedded/commit/ec96eb577bd518b89e2e7834bd569ba269df458f Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-02-11T17:03:50+00:00 Narpat Mali narpat.mali@windriver.com 2023-02-08T17:34:24+00:00 urn:sha1:3c0581d3879212e97388bfb8531e9ae613733a48 References: https://nvd.nist.gov/vuln/detail/CVE-2022-44792 https://nvd.nist.gov/vuln/detail/CVE-2022-44793 Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5ae6f9434f44a57389a3f52dce17da6fe5928e1f) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-02-11T17:00:59+00:00 Khem Raj raj.khem@gmail.com 2023-01-18T22:40:50+00:00 urn:sha1:f6bdd48158fc6141353e331bd3ff9ad50508b492 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ee0de616df82937191613c85f9df7e872b99ed6f) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-10-13T02:19:27+00:00 Yi Zhao yi.zhao@windriver.com 2022-10-13T02:12:18+00:00 urn:sha1:9628ca83c20c0fce6b20461785f4324fc42ef274 CVE-2022-37032: An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-37032 Patch from: https://github.com/FRRouting/frr/commit/066770ac1c69ee5b484bb82581b22ad0423b004d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-10-04T16:29:47+00:00 Khem Raj raj.khem@gmail.com 2022-10-04T16:27:39+00:00 urn:sha1:111e73d7128ec7d0fc2720b3a7a9ec714f14a061 clang errors out linking lto objects riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules This is something needs to be addressed in clang for riscv as of now disable lto for rv32/rv64 when using clang Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-10-04T06:48:07+00:00 Vyacheslav Yurkov v.yurkov@precitec.de 2022-10-04T05:27:07+00:00 urn:sha1:3d65e0460ca72ac6b9a91fc2a5fd1cf6665cdeb9 open62541 (http://open62541.org) is an open source and free implementation of OPC Unified Architecture according to IEC62541 standard The patch exclude git-related files from installation directory Upstream-Status: Accepted https://github.com/open62541/open62541/commit/a0328d4cb527f9778a262fc4a6b42bfbdffc38e9 Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-09-29T20:32:15+00:00 Yi Zhao yi.zhao@windriver.com 2022-09-24T06:40:35+00:00 urn:sha1:f6846875916e6e1c6db825685cf4dfa2e9a24749 Backport patches to fix build error with --disable-ospfapi and CVE-2022-37035. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-09-01T20:09:22+00:00 Khem Raj raj.khem@gmail.com 2022-09-01T20:06:45+00:00 urn:sha1:26af1e567341502b51f4d762434eaedff8673d2e Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-09-01T17:55:23+00:00 Khem Raj raj.khem@gmail.com 2022-09-01T17:53:08+00:00 urn:sha1:d8c94d06cfaa98436344dfe80085d5d0f505873b Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-08-30T07:14:58+00:00 Khem Raj raj.khem@gmail.com 2022-08-30T06:31:24+00:00 urn:sha1:4e3e97ed27fea414951254c0b9989f2edd36da0e Signed-off-by: Khem Raj <raj.khem@gmail.com>