linux/poky.git, branch yocto-5.0.3

build-appliance-image: Update to scarthgap head revision

2024-08-10T13:39:23+00:00

(From OE-Core rev: 236ac1b43308df722a78d3aa20aef065dfae5b2b) Signed-off-by: Steve Sakoman

poky.conf: bump version for 5.0.3

2024-08-10T13:34:25+00:00

(From meta-yocto rev: 9a4b3f7d66c5546855805e284585a550b235c313) Signed-off-by: Steve Sakoman

libpng: update SRC_URI

2024-08-10T13:34:25+00:00

update SRC_URI to fix do_fetch warning: WARNING: libpng-1.6.42-r0 do_fetch: Failed to fetch URL https://downloads.sourceforge.net/project/libpng/libpng16/libpng-1.6.42.tar.xz, attempting MIRRORS if available (From OE-Core rev: aa23e392e379ab7f8cdfc48e1d2d96812f330c74) Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman

libmnl: explicitly disable doxygen

2024-08-10T13:34:25+00:00

libmnl autoconf autodetects doxygen to generate manpages. If doxygen is provided via hosttools, the build fails. Also until now manpages were not needed. So explicitly disable doxygen in configure step. (From OE-Core rev: 8d7bbf4d6936d831e341e9443a6b3711be09c7ab) (From OE-Core rev: fdce1a6f1143edc577f12c7e8fab878ec69c3c9a) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

curl: correct the PACKAGECONFIG for native/nativesdk

2024-08-10T13:34:25+00:00

Since commit 148de08220 [ curl: Update from 8.2.1 to 8.3.0 ], --enable-crypto-auth option was removed and split into separate options for basic-auth, bearer-auth, digest-auth, kerberos-auth negotiate-auth, and aws. In this commit, --enable-crypto-auth is removed from EXTRA_OECONF, and the separate options is added into PACKAGECONFIG for target. But not added into PACKAGECONFIG for native/nativesdk, this make curl/git in buildtools not works well to connect basic auth https server. Failed commands: git ls-remote https://xxx(input username/passwd) curl -u name:passwd https://xxx Error: Authentication failed xxx HTTP/1.1 401 Unauthorized (From OE-Core rev: 67b98253ea70a1e2850a78bb101c934093d30937) Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman

bind: Upgrade 9.18.25 -> 9.18.28

2024-08-10T13:34:25+00:00

Includes security fixes for: CVE-2024-1975 CVE-2024-1737 CVE-2024-0760 CVE-2024-4076 Changelog: ========= https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.28/CHANGES (From OE-Core rev: 45fccf634a3ba0f60ee16522b7a767bb778dd984) Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman

orc: upgrade 0.4.38 -> 0.4.39

2024-08-10T13:34:25+00:00

(From OE-Core rev: 9be9260985e751f90f9432aa68a789bf0a26fb43) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit bcbaaa9f7d88686915c354fb66682cbe9b1d0536) Signed-off-by: Steve Sakoman

nasm: Upgrade 2.16.01 -> 2.16.03

2024-08-10T13:34:25+00:00

Removes CVE-2022-46456 from reports. (From OE-Core rev: 4a5b6e8dd315b2281afb232410db585d431be00f) (From OE-Core rev: 5b330f3dfe7a37eff5251d2c29d324e90677b33c) Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

ffmpeg: fix CVE-2024-31582

2024-08-10T13:34:25+00:00

(From OE-Core rev: 617a9cdba6e2f0bd3ccc24e7bb2fe84e9573fecd) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

qemu: set cve status for CVE-2023-6683

2024-08-10T13:34:25+00:00

This CVE is fixed in v8.2.2 with v8.2.1-55-g480a6adc83 https://github.com/qemu/qemu/commit/480a6adc83a7bbc84bfe67229e084603dc061824 (From OE-Core rev: 422fc84ddbe46580dc6d647eff62c4dbc8551e63) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman