Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead-next 2025-01-16T14:17:32+00:00 2025-01-16T14:17:32+00:00 Peter Marko peter.marko@siemens.com 2024-12-20T15:36:28+00:00 urn:sha1:528404955f09b85fbebbcab1e900f8190c14531f Solves CVE-2024-9781 Release notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 2d3988f7b611f0ccf0ea4dff8fb7bd15b4dc8860) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2025-01-16T14:17:32+00:00 Peter Marko peter.marko@siemens.com 2024-12-19T20:49:00+00:00 urn:sha1:89723804873935d11bd7892794a494edd8750060 Per [1] this is a problem of applications using memcached inproperly. This should not be a CVE against php-memcached, but for whatever software the issue was actually found in. php-memcached and libmemcached provide a VERIFY_KEY flag if they're too lazy to filter untrusted user input. [1] https://github.com/php-memcached-dev/php-memcached/issues/519 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 889ccce6848276fa68b3736b345552a533bc6bd2) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2025-01-16T14:17:32+00:00 Peter Marko peter.marko@siemens.com 2024-12-19T20:48:57+00:00 urn:sha1:2c4308f0d81b596d93de5575aa2e82da73dd7f7a It is fixed by [1] since 0.15.3. NVD tracks this CVE as version-less. [1] https://cgit.freedesktop.org/spice/spice-gtk/commit/?id=efbf867bb88845d5edf839550b54494b1bb752b9 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7e17f8cec02d20813fb8368ccc1c5ae27b291383) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2025-01-16T14:17:32+00:00 Peter Marko peter.marko@siemens.com 2024-12-19T20:48:53+00:00 urn:sha1:3bca579274f5ff8fce35dffb686502ef08f4973b NVD tracks this as version-less CVE for spice. It was fixed by [1] and [2] included in 0.13.2. [1] https://gitlab.freedesktop.org/spice/spice/-/commit/6b32af3e1746988bb5a5123263bcf61b65e5be7e [2] https://gitlab.freedesktop.org/spice/spice/-/commit/359ac42a7ac02dcd1013757559292006647cd5c4 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 073e8452748132a93103e5db32dc9980c84d201c) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2025-01-16T14:17:32+00:00 Benjamin Bouvier benjamin.bouvier@ekinops.com 2024-12-13T07:47:32+00:00 urn:sha1:a6aa620c1acd41184da2c4dcb975268ce4eb0f49 Add exact CPE name (from NVD database) in CVE_PRODUCT in order to ensure CVE filtering and not be disturb by futur potential false-positive CVEs. Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d03002f19cc56a7386db5a88217c59ea71fded05) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2025-01-16T14:17:32+00:00 Ghislain Mangé ghislain.mange@smile.fr 2024-12-02T10:58:47+00:00 urn:sha1:df6844bc84e8ce3cf39ad4d548a099867c11b0ee Conditionnal inherit may be missed when PACKAGECONFIG qt5 is activated after this inherit, eg in .bbappend. see patch [0] [0]: https://lists.openembedded.org/g/bitbake-devel/message/16815 Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 97318e27ebf9f528acf77fb0759c332bd83adb4b) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-11-19T21:13:27+00:00 Khem Raj raj.khem@gmail.com 2024-10-10T05:08:07+00:00 urn:sha1:b66ff5fec301fd5bca890a73f81c4c11e31a7f5f includes the CFLAGS used to build the package in the binary via PACKAGE_CONFIGURE_INVOCATION which then includes the absolute build path via (eg.) the -ffile-prefix-map flag. Here we remove using variables like PACKAGE_CONFIGURE_INVOCATION in code Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 70c663b7ae90283d25ca3704852ca96aa808e31a) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-11-19T21:13:26+00:00 Ghislain Mangé ghislain.mange@smile.fr 2024-10-02T13:29:46+00:00 urn:sha1:c68342eca392d527b98f97ac424d51bf34ce0846 ENABLE_STTD is a typo, correct option is ENABLE_ZSTD. This patches the following CMake warning in do_configure: Manually-specified variables were not used by the project: ENABLE_STTD After, do_configure does not show the warning. Github issue: https://github.com/openembedded/meta-openembedded/issues/845 Reported-by: Ludovic Jozeau <ludovic.jozeau@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 15758538ee4de90c146199ef831205f942786c8f) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-11-19T21:13:26+00:00 alperak alperyasinak1@gmail.com 2024-10-01T16:57:43+00:00 urn:sha1:2734b7804dae45e24f0c9d569d858803fa330962 Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 56010090ef75da2a3d564e16ee046a709da4a650) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-11-19T21:13:21+00:00 Yi Zhao yi.zhao@windriver.com 2024-09-23T10:35:11+00:00 urn:sha1:bbe628f5ee7166cf0d6e986d3c0c5d818a1cf48f ChangeLog: https://github.com/the-tcpdump-group/tcpslice/blob/tcpslice-1.8/CHANGES Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>