linux/meta-openembedded.git/meta-oe, branch kirkstoneMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=kirkstone2026-05-01T14:01:07+00:00imagemagick: Fix CVE-2025-689502026-05-01T14:01:07+00:00Naman Jainnamanj1@kpit.com2026-04-27T06:33:33+00:00urn:sha1:1da9d7f2f941e81e51829d3ee0cd6ec3e4cc00b8
ImageMagick is free and open-source software used for editing and
manipulating digital images. Prior to version 7.1.2-12, Magick fails
to check for circular references between two MVGs, leading to a
stack overflow. This is a DoS vulnerability, and any situation that
allows reading the mvg file will be affected.
Version 7.1.2-12 fixes the issue.
This is a minimal patch required for this cve.
Signed-off-by: Naman Jain <namanj1@kpit.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
ttf-vlgothic: fix SRC_URI2026-04-23T18:14:07+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:15+00:00urn:sha1:9839ca14b5ac72e277baed016de9bc917bd122b3
The old one stopped working.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
unicode-ucd: fix license hash (again)2026-04-23T18:13:56+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:14+00:00urn:sha1:4c87c798b2f27881099e4f783ce04a2538bbe515
The unicode license changed slightly once again (copyright year updated),
which makes the do_fetch task to fall back to a mirror.
Update the hashes.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libubox: fix SRC_URI2026-04-23T18:13:44+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:13+00:00urn:sha1:6b8a7a37f5c797cbcb3e387770c2a12b6073c29b
It seems the project's git repo doesn't allow anonymous ssh fetch anymore.
Switch to https.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
ttf-sazanami: fix SRC_URI2026-04-23T18:13:33+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:12+00:00urn:sha1:0fbebc0f50af348e73387f66fd95384a22a87022
The previous one stopped working.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
sblim-sfcc: fix SRC_URI2026-04-23T18:13:23+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:11+00:00urn:sha1:d4c1325afe2c38d1901ad632069d3a1e4d2dd0f9
The previous one stopped working.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libsodium: fix SRC_URI2026-04-23T18:13:11+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:10+00:00urn:sha1:a9c7197dea534d66cfc63280f398ad98ee764ed4
The tarball was moved to a subfolder on the source server.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
driverctl: fix SRC_URI2026-04-23T18:13:00+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:09+00:00urn:sha1:fb3df370dd1744446575a442569ceeaca02c483a
Anonymous fetch with ssh stopped working from gitlab apparently - switch to https.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
ipc-run: fix SRC_URI2026-04-23T18:12:40+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:07+00:00urn:sha1:d24dd3a91acd63377b39674643fa40b5cbe008e8
The source branch was renamed from master to main.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
dnfdragora: fix SRC_URI2026-04-23T18:12:28+00:00Gyorgy Sarvariskandigraun@gmail.com2026-04-20T15:49:06+00:00urn:sha1:47123fc42db2670eee0791b73fd0083b43329cc3
The source branch was renamed from master to main.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>