<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-devtools, branch mickledore</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=mickledore</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=mickledore'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2023-11-17T02:49:15+00:00</updated>
<entry>
<title>nlohmann-json: Add ptest support</title>
<updated>2023-11-17T02:49:15+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2023-11-10T11:52:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=aa5e8edabbc414d8ec1b2ad63c8743c7baf99626'/>
<id>urn:sha1:aa5e8edabbc414d8ec1b2ad63c8743c7baf99626</id>
<content type='text'>
* Backport 2 patches [1] [2] to fix the build failure under tests dir.

* Fetch the test data during do_fetch phase to avoid internet access
during test as some tests need test data.
 # ./run-ptest
PASS: test-algorithms_cpp11
PASS: test-allocator_cpp11
PASS: test-alt-string_cpp11
PASS: test-assert_macro_cpp11
PASS: test-binary_formats_cpp11
[snip]
PASS: test-unicode5_cpp11
PASS: test-user_defined_input_cpp11
PASS: test-windows_h_cpp11
PASS: test-wstring_cpp11

[1] https://github.com/nlohmann/json/commit/6cec5aefc97ad219b6fd5a4132f88f7c8f6800ee
[2] https://github.com/nlohmann/json/commit/660d0b58565073975d6f5d94365d6cbf150a4cf8

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
(cherry picked from commit 013b4d50432a3eba08a9cb54b9edf6b25a6378a8)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>cpuid: fix do_install</title>
<updated>2023-11-17T02:49:15+00:00</updated>
<author>
<name>Changqing Li</name>
<email>changqing.li@windriver.com</email>
</author>
<published>2023-11-13T06:17:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a26ff3abec9590e08dcc086425981beba564250d'/>
<id>urn:sha1:a26ff3abec9590e08dcc086425981beba564250d</id>
<content type='text'>
Fix do_install to make cpuid-doc installed correctly

Signed-off-by: Changqing Li &lt;changqing.li@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>nlohmann-json: Avoid usage of nobranch=1</title>
<updated>2023-11-17T02:49:15+00:00</updated>
<author>
<name>Sourav Pramanik</name>
<email>sourav.pramanik@kpit.com</email>
</author>
<published>2023-11-13T06:11:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=7753dcdf9cab1ef2710d3af0d976564c5685a2d2'/>
<id>urn:sha1:7753dcdf9cab1ef2710d3af0d976564c5685a2d2</id>
<content type='text'>
The usage of nobranch=1 in SRC_URI allows using unprotected branches.

This change updates the real branch name in place of nobranch=1.

Signed-off-by: Sourav Kumar Pramanik &lt;pramanik.souravkumar@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
(cherry picked from commit eec3c65b8136fe492f3be81ab62717d7c8922d04)
Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>nodejs: Upgrade 18.17.1 -&gt; 18.18.2</title>
<updated>2023-11-17T02:49:15+00:00</updated>
<author>
<name>Archana Polampalli</name>
<email>archana.polampalli@windriver.com</email>
</author>
<published>2023-11-07T10:05:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=5529546039e77320668396a24ff22cf7d9568b6a'/>
<id>urn:sha1:5529546039e77320668396a24ff22cf7d9568b6a</id>
<content type='text'>
Update to latest release of latest LTS 18 release

The following CVEs are fixed in this release:
    CVE-2023-44487
    CVE-2023-45143
    CVE-2023-38552
    CVE-2023-39333

License-Update: [1] [2]
 [1] https://github.com/nodejs/node/commit/06513585dc9bad6e9deb00d5f30bf3af0930295d
 [2] https://github.com/nodejs/node/commit/fbe89e632005e06ecafa7a34f75a0ac01ad3b885

Signed-off-by: Archana Polampalli &lt;archana.polampalli@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>grpc: fix CVE-2023-33953</title>
<updated>2023-09-19T11:22:00+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2023-09-14T04:00:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=5862e1090d9e928008d50e1acf557f94a9672adb'/>
<id>urn:sha1:5862e1090d9e928008d50e1acf557f94a9672adb</id>
<content type='text'>
Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>grpc: fix CVE-2023-32732</title>
<updated>2023-09-19T11:22:00+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2023-09-14T04:00:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=105cf623137fb61290a816e1629ee83793abd907'/>
<id>urn:sha1:105cf623137fb61290a816e1629ee83793abd907</id>
<content type='text'>
Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: fix CVE-2023-37732</title>
<updated>2023-09-03T14:43:56+00:00</updated>
<author>
<name>Soumya</name>
<email>soumya.sambu@windriver.com</email>
</author>
<published>2023-08-18T14:38:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=41fffef6b044b2722aa13f7e7648a3f848231851'/>
<id>urn:sha1:41fffef6b044b2722aa13f7e7648a3f848231851</id>
<content type='text'>
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c
and /elf/elf.c, which allows the attacker to cause a denial of service via a
crafted file.

References:
https://github.com/yasm/yasm/issues/233
https://nvd.nist.gov/vuln/detail/CVE-2023-37732

Signed-off-by: Soumya &lt;soumya.sambu@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>nodejs: upgrade 18.16.1 -&gt; 18.17.1</title>
<updated>2023-08-31T13:09:24+00:00</updated>
<author>
<name>Polampalli, Archana</name>
<email>archana.polampalli@windriver.com</email>
</author>
<published>2023-08-29T11:35:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a01d5db9c309f7c76ec6e427b5e5770d552c6858'/>
<id>urn:sha1:a01d5db9c309f7c76ec6e427b5e5770d552c6858</id>
<content type='text'>
Update to latest release of latest LTS 18 release

License-Update: [1] [2] [3]

The following CVEs are fixed in this release:
    CVE-2023-32002
    CVE-2023-32006
    CVE-2023-32559

[1] https://github.com/nodejs/node/commit/0cfdb3affa518bf55cfd8120f0286099fabfb22a
[2] https://github.com/nodejs/node/commit/2ea6e030038d86376dea748f702ed14018f99aba
[3] https://github.com/nodejs/node/commit/261e1d23d11053b373ea51745f6c1187440c2b08

https://github.com/nodejs/node/releases/tag/v18.17.1

Signed-off-by: Archana Polampalli &lt;archana.polampalli@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>php: Upgrade to 8.2.8</title>
<updated>2023-08-11T14:36:04+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2023-08-11T10:53:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=ed9dde18500145525f7e238dddc0e9adf880f610'/>
<id>urn:sha1:ed9dde18500145525f7e238dddc0e9adf880f610</id>
<content type='text'>
php 8.2.7 is a security release and the php 8.2.8 is a bug fix release
and more details at [1].

[1] https://www.php.net/ChangeLog-8.php#8.2.7

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>yajl: Fix CVE-2023-33460</title>
<updated>2023-08-11T14:35:57+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2023-08-11T10:04:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=52ca385fc15bbbc8816ab487e1a703596b7db1e2'/>
<id>urn:sha1:52ca385fc15bbbc8816ab487e1a703596b7db1e2</id>
<content type='text'>
Backport 2 patches [1] [2] to fix CVE-2023-33460.

[1] https://github.com/openEuler-BaseService/yajl/commit/3d65cb0c6db4d433e5e42ee7d91d8a04e21337cf
[2] https://github.com/openEuler-BaseService/yajl/commit/23a122eddaa28165a6c219000adcc31ff9a8a698

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
</feed>
