linux/meta-openembedded.git/meta-oe, branch dunfell

c-ares: Backport fix for CVE-2024-25629

2024-04-02T12:12:59+00:00

Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/a804c04ddc8245fc8adf0e92368709639125e183] References: https://nvd.nist.gov/vuln/detail/CVE-2024-25629 https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q https://security-tracker.debian.org/tracker/CVE-2024-25629 Signed-off-by: Ashish Sharma Signed-off-by: Armin Kuster

postgresql: Update to 12.18

2024-04-02T12:12:59+00:00

Minor security and bugfix release. Fixes CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL Additional information is available in the release notes: https://www.postgresql.org/docs/release/12.18/ Signed-off-by: Matthias Schmitz Signed-off-by: Armin Kuster

libuv: fix CVE-2024-24806

2024-03-03T21:38:27+00:00

Upstream-Status: Backport[https://github.com/libuv/libuv/commit/0f2d7e784a256b54b2385043438848047bc2a629] Upstream-Status: Backport[https://github.com/libuv/libuv/commit/3530bcc30350d4a6ccf35d2f7b33e23292b9de70]> Signed-off-by: Hugo SIMELIERE Signed-off-by: Armin Kuster

nodejs: Set CVE_PRODUCT to "node.js"

2024-03-03T21:38:27+00:00

Set CVE_PRODUCT to 'node.js' for nodjs recipe Signed-off-by: virendra thakur Signed-off-by: Armin Kuster

linuxptp: fix do_compile error

2024-03-03T21:38:27+00:00

with make 4.4, linuxptp do_compile will failed with error: In file included from clock.c:35: missing.h:61:9: error: redeclaration of enumerator 'HWTSTAMP_TX_ONESTEP_P2P' 61 | HWTSTAMP_TX_ONESTEP_P2P = 3, | ^~~~~~~~~~~~~~~~~~~~~~~ In file included from clock.c:21: /buildarea2/WRLCD_Regression/Rerun/build_dir/11201532-build_scp_world_Feature_Test/qemux86-64-standard-std-OE/build/tmp-glibc/work/core2-64-wrs-linux/linuxptp/3.1.1-r0/recipe-sysroot/usr/include/linux/net_tstamp.h:128:9: note: previous definition of 'HWTSTAMP_TX_ONESTEP_P2P' with type 'enum hwtstamp_tx_types' 128 | HWTSTAMP_TX_ONESTEP_P2P, | Following change of make 4.4 changes behavior of shell function: * WARNING: Backward-incompatibility! Previously makefile variables marked as export were not exported to commands started by the $(shell ...) function. Now, all exported variables are exported to $(shell ...). Signed-off-by: Changqing Li Signed-off-by: Khem Raj Backport of commit 05c1003c4 ("linuxptp: fix do_compile error"). This is present in dunfell/kirkstone as well. If net_tstamp.h of the build host disagrees with net_tstamp.h of the OE kernel or I remove the build host's net_tstamp.h do_compile fails. Changed Upstream Status to Backport with the git sha as the commit is now applied upstream. Signed-off-by: Max Krummenacher Signed-off-by: Armin Kuster

openwsman: Change download branch from master to main.

2024-03-03T21:38:27+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Joao Marcos Costa Backported from Kirkstone (cherry-picked from commit 84425db660a30570044e334509e174e5c92173ed) Signed-off-by: Armin Kuster

postgresql: Update to 12.17

2024-01-16T12:31:14+00:00

Minor security and bugfix release. Addresses the following CVEs: CVE-2023-5868: Memory disclosure in aggregate function calls CVE-2023-5869: Buffer overrun from integer overflow in array modification CVE-2023-5870: Role pg_signal_backend can signal certain superuser processes Additional information is available in the release notes: https://www.postgresql.org/docs/release/12.17/ Signed-off-by: Robert Joslyn Signed-off-by: Armin Kuster

opensc: Fix CVE-2023-40661

2024-01-16T12:31:14+00:00

Upstream-Status: Backport[https://salsa.debian.org/opensc-team/opensc/-/commit/8026fb4ca0ed53d970c6c497252eb264d4192d50] Signed-off-by: virendra thakur Signed-off-by: Armin Kuster

opensc: Fix CVE-2023-40660

2024-01-16T12:31:14+00:00

Upstream-Status: Backport [https://salsa.debian.org/opensc-team/opensc/-/commit/940e8bc764047c873f88bb1396933a5368d03533] Signed-off-by: virendra thakur Signed-off-by: Armin Kuster

spirv-tools: Use main branch for all repos

2023-12-17T20:36:42+00:00

The master branch has been removed in all of the repos used in SRC_URI. Switch to the main branch instead. Signed-off-by: Frieder Schrempf Signed-off-by: Armin Kuster