linux/poky.git, branch dunfell-23.0.4

build-appliance-image: Update to dunfell head revision

2020-11-25T23:25:40+00:00

(From OE-Core rev: b885888df67eb5cdb3b82f4f0a07369a449e223b) Signed-off-by: Richard Purdie

qemu: fix CVE-2020-24352

2020-11-24T13:17:59+00:00

(From OE-Core rev: 7610ffec71e20556bde32f00a08c4c5a40cd31ce) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: fix CVE-2020-27619

2020-11-24T13:17:59+00:00

(From OE-Core rev: 001ee91818642ddac7c1b8e5236baa5c4c542b72) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: whitelist CVE-2020-15523

2020-11-24T13:17:59+00:00

This CVE is issue on _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath. Since it is .dll issue (on windows only), hence whitelist it. https://bugs.python.org/issue29778 (From OE-Core rev: c216431d0704bd8be237e860bbdc32be34a82aee) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

bison: update to 3.5.4 for CVE-2020-14150

2020-11-24T13:17:59+00:00

Release notes: https://lists.gnu.org/archive/html/info-gnu/2020-04/msg00000.html (From OE-Core rev: 6e1647fe60004bd4989a65824f0bf02d37f5aeba) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libproxy: fix CVE-2020-26154

2020-11-24T13:17:58+00:00

(From OE-Core rev: 9b5ae61015637c1bf790a0700069da9e65bafefc) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: add ldconfig rdepends for python3-ctypes

2020-11-22T13:27:37+00:00

The ctypes module needs to use "ldconfig -p" to find the library path and it simply has below logic if no ldconfig installed. except OSError: pass Before the patch: >>> from ctypes.util import find_library >>> lib_path = find_library('archive') >>> print(lib_path) None After the patch: >>> from ctypes.util import find_library >>> lib_path = find_library('archive') >>> print(lib_path) libarchive.so.13 (From OE-Core rev: 84e1a32096db9deb98d282a652beec95dbfe80f1) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie (cherry picked from commit ddb96902a124a6e1f035f0fd868b0139989bc1bc) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

glib-2.0: correct build with latest meson

2020-11-22T13:27:37+00:00

(From OE-Core rev: b95d8fa49f26d48e821017e555f90887974c89b7) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 6a91d2b7d463abfd8f39a9f9d5ddde40a939d6e3) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ptest-runner: Backport patch to fix inappropriate ioctl error

2020-11-22T13:27:37+00:00

The srcrev bump is actually bring single commit [1] on top of 2.4.0 which fixes ptest runs with messges like ERROR: Unable to detach from controlling tty, Inappropriate ioctl for device [1] https://git.yoctoproject.org/cgit/cgit.cgi/ptest-runner2/commit/?id=834670317bd3f6e427e1ac461c07ada6b8936dfd (From OE-Core rev: a724eeeead28cbe7cfb8ffbcf40f6ac29e22ff61) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 791da075619139fa55751f8013c73d2fbf0cf64c) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ptest-runner: fix upstream version check

2020-11-22T13:27:37+00:00

(From OE-Core rev: 83e9731584de86662c009201873759d1b1b3c317) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit fd180d21ec907726b2fcd7709b93cb8e464390d5) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie