Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2025-09-12T00:15:12+00:00 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:32+00:00 urn:sha1:fddaa45a87c80073d13e3a267ba42c510ebd943c CVE-2025-31181: A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31181] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/af96c2c1b20383684b1ec2084dab7936f7053031/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:31+00:00 urn:sha1:732f5800cfe3fd07e144dd7a0348751539bf05fc CVE-2025-31180: A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31180] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b2343fd02c4fff94957f0151b73daa0a1f7fec49/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:30+00:00 urn:sha1:02d046e20dbfde2cfce7c34be2a2ab1af2395f1f CVE-2025-31179: A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31179] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/ed647df512786b3c94429dd5c864715301e03ea5/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:29+00:00 urn:sha1:3d810d7d3bf03241c257a2b6c732cba4e26d9cf2 CVE-2025-31178: A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31178] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b78cc829a18e9436daaa859c96f3970157f3171e/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:28+00:00 urn:sha1:dd4b10de4490da7dc53f74e830e712b8930070d7 CVE-2025-31177: gnuplot is affected by a heap buffer overflow at function utf8_copy_one. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31177] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/226809aebb345e74d371bb43a2b434b490be527a/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:27+00:00 urn:sha1:a3826c4999f8078d9523315a8e25eef9b10d5111 CVE-2025-31176: A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-31176] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b456a3ef618f55a20b3071d336cb20514274f1d4/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-09-12T00:15:12+00:00 Zhang Peng peng.zhang1.cn@windriver.com 2025-09-02T07:44:26+00:00 urn:sha1:9d3537ef42f4dfe2f5626b5cb72f88b11c636294 CVE-2025-3359: A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2025-3359] Upstream patches: [https://sourceforge.net/p/gnuplot/gnuplot-main/ci/a5897feadc4be73b0ffd8458556c47117bd24d03/] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2023-06-21T16:15:20+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-21T16:09:11+00:00 urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415 There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-04-19T16:45:38+00:00 Preeti Sachan preeti.sachan@intel.com 2022-04-19T16:28:25+00:00 urn:sha1:0bb3d4b6a06490edc4226cb89c414b1846cbf3d9 Inherited pkgconfig to fix pngcairo terminal compilation enabled by default with pkgconfig option PACKAGECONFIG[cairo] Signed-off-by: Preeti Sachan <preeti.sachan@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-04-10T17:05:35+00:00 Khem Raj raj.khem@gmail.com 2022-04-09T14:32:01+00:00 urn:sha1:150581b6373b80f96060cc54cfc67873a779ed86 We do not carry recipe for libcerf, so disable it explicitly so the native builds are also a bit more deterministic. Fix a typo in knob to disable wxwidgets Signed-off-by: Khem Raj <raj.khem@gmail.com>