linux/meta-openembedded.git/meta-oe, branch mickledore-net

lmsensors: do not pull in unneeded perl modules for run-time dependencies

2023-08-03T20:46:11+00:00

Signed-off-by: Beniamin Sandu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

yasm: fix CVE-2023-31975

2023-07-25T11:15:34+00:00

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-31975 https://github.com/yasm/yasm/issues/210 Upstream patches: https://github.com/yasm/yasm/commit/b2cc5a1693b17ac415df76d0795b15994c106441 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

yaml-cpp: Fix cmake export

2023-07-25T11:14:34+00:00

Signed-off-by: Jasper Orschulko Signed-off-by: Armin Kuster

gnulib: Update SRC_URI

2023-07-25T11:13:43+00:00

Update the SRC_URI to fix the do_fetch warning. Signed-off-by: Mingli Yu Signed-off-by: Armin Kuster

dialog: Update the SRC_URI

2023-07-25T11:13:33+00:00

Update the SRC_URI to fix the do_fetch error. Signed-off-by: Mingli Yu Signed-off-by: Armin Kuster

nodejs: upgrade 18.14.2 -> 18.16.1

2023-07-25T11:13:21+00:00

Refresh 0001-Disable-running-gyp-files-for-bundled-deps.patch against 18.16.1 License-Update: Add missing licenses for Ada [1] BSD, Simduf [2] BSD, posteject [3] MIT [1] https://github.com/nodejs/node/commit/0bc4c17e5705ea042cda392343d7301bb91873ed [2] https://github.com/nodejs/node/commit/c9845fc3341fcdce298ad7f1630e329d71a6e746 [3] https://github.com/nodejs/node/commit/4aaec0726694ad0d3cb05d7f2593a90363c32f32 The list of the CVEs are fixed in this relase: CVE-2023-30581 CVE-2023-30585 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 https://github.com/nodejs/node/releases/tag/v18.16.1 https://github.com/nodejs/node/releases/tag/v18.16.0 https://github.com/nodejs/node/releases/tag/v18.15.0 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

libgpiod: modify RDEPENDS for ptest

2023-07-25T11:12:13+00:00

The current use of RDEPENDS to add a dependency on bats results in the QA warning/error lib32-libgpiod package lib32-libgpiod-ptest-dev - suspicious values 'bats-dev' in RRECOMMENDS [multilib] when building lib32-libgpiod with ptest not enabled. We add the dependency only if ptest is enabled. Signed-off-by: Joe Slater Signed-off-by: Khem Raj (cherry picked from commit 9904bd6a24ed9327bd05926ba28f9c2ea49e34dd) Signed-off-by: Armin Kuster

c-ares: upgrade 1.19.0 -> 1.19.1

2023-07-16T19:15:41+00:00

https://c-ares.org/changelog.html c-ares version 1.19.1 - May 22 2023 Security: CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service CVE-2023-31147 Moderate. Insufficient randomness in generation of DNS query IDs CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton() CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross compilation Bug fixes: Fix uninitialized memory warning in test Turn off IPV6_V6ONLY on Windows to allow IPv4-mapped IPv6 addresses ares_getaddrinfo() should allow a port of 0 Fix memory leak in ares_send() on error Fix comment style in ares_data.h Remove unneeded ifdef for Windows Fix typo in ares_init_options.3 Re-add support for Watcom compiler Sync ax_pthread.m4 with upstream Windows: Invalid stack variable used out of scope for HOSTS path Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support Signed-off-by: Chee Yang Lee Signed-off-by: Armin Kuster

rabbitmq-c: Fix CVE-2023-35789

2023-07-16T19:15:37+00:00

affects <= 0.13.0 Signed-off-by: Chee Yang Lee Signed-off-by: Armin Kuster

opencv: Fix for CVE-2023-2617

2023-06-23T12:02:41+00:00

A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547. Signed-off-by: Soumya Signed-off-by: Armin Kuster