linux/meta-openembedded.git/meta-oe/recipes-extended, branch scarthgap-next

minifi-cpp: patch spdlog CVE-2025-6140

2025-08-02T17:37:04+00:00

Same patch as in spdlog recipe. Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

redis: fix CVE-2025-32023

2025-08-02T17:13:18+00:00

Upstream-Status: Backport from https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

libconfig: correct the SRC_URI

2025-07-11T00:23:37+00:00

The old SRC_URI is not available. Signed-off-by: Guocai He Signed-off-by: Armin Kuster

libblockdev: fix CVE-2025-6019

2025-07-06T23:47:13+00:00

CVE-2025-6019: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system. Refer: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

canutils: use https instead of git protocol

2025-06-23T21:03:17+00:00

The git server at git.pengutronix.de no longer supports the git protocol, so switch to https. Signed-off-by: Bastian Krause Signed-off-by: Armin Kuster

libsocketcan: use https instead of git protocol

2025-06-23T21:03:14+00:00

The git server at git.pengutronix.de no longer supports the git protocol, so switch to https. Signed-off-by: Bastian Krause Signed-off-by: Armin Kuster

redis: upgrade 7.2.7 -> 7.2.8

2025-06-23T20:57:55+00:00

ChangeLog: https://github.com/redis/redis/releases/tag/7.2.8 Update urgency: SECURITY: There are security fixes in the release. Security fixes ================== * (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers Bug fixes ================= * #12817, #12905 Fix race condition issues between the main thread and module threads * #13863 RANDOMKEY - infinite loop during client pause * #13877 ShardID inconsistency when both primary and replica support it Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

can-utils: handle CAN_ERR_CNT correctly

2025-05-21T13:17:20+00:00

If CAN_ERR_CNT is set, the snprintf_can_error_frame() bails out, as it cannot decode CAN_ERR_CNT. Signed-off-by: Jeroen Hofstee Signed-off-by: Armin Kuster

libmodbus: ignore CVE-2023-26793 and CVE-2024-34244

2025-05-17T18:11:21+00:00

See discussions in closed/rejected issues linked from NVD CVE reports: * CVE-2023-26793: https://github.com/stephane/libmodbus/issues/683#issuecomment-2615601890 * CVE-2024-34244: https://github.com/stephane/libmodbus/issues/743#issuecomment-2222214256 Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

can-utils: fix printing / reading timestamps

2025-05-17T18:11:18+00:00

Backport a patch to correctly handle 64bit timestamps. Signed-off-by: Jeroen Hofstee Signed-off-by: Armin Kuster