linux/poky.git/meta/recipes-devtools, branch hardknott

python3-numpy: fix CVE-2021-41496

2022-04-03T19:49:03+00:00

Backport patch [1] to fix CVE-2021-41496. [1] https://github.com/numpy/numpy/commit/271010f1037150e95017f803f4214b8861e528f2 (From OE-Core rev: 9a69897f464432e0b6ef9b8ad5d8110d78a1162a) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

go: update to 1.16.15

2022-04-03T19:49:03+00:00

go1.16.15 (released 2022-03-03) includes a security fix to the regexp/syntax package, as well as bug fixes to the compiler, runtime, the go command, and to the net package. See the Go 1.16.15 milestone on our issue tracker for detai ls. (From OE-Core rev: 3462c7680137a9ef5f683161d39caf19f87a932a) Signed-off-by: Chee Yang Lee Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

gnu-config: update SRC_URI

2022-04-03T19:49:03+00:00

The git repo for gnu-config was changed, so update the SRC_URI accordingly with the new link. (From OE-Core rev: ad18c905273fee91b9b41bbdf32b9e6dbc9cdfd8) Signed-off-by:Minjae Kim Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

unfs3: correct configure option

2022-03-10T16:39:45+00:00

On some new distro like ubuntu21.04, unfs3-native compile failed with error: undefined reference to `xdr_uint32', since new distro has new glibc. >From glibc 2.27 rpc support is dropped, so unfs3 need to link to libtirpc. Here is defination of ac_link: ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' Depended library should be added into LIBS, not LDFLAGS, otherwise, gcc may not load the lib since it is before conftest.$ac_ext during configure. Finally, it results in compile failed. (From OE-Core rev: d0b1807edc10835beff9a55a105ac191b6ac2fe7) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie (cherry picked from commit 27867862c1fee6c0e649286500fa1ab015d57faf) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ruby : update to 3.0.3

2022-03-10T16:39:45+00:00

Do not tweak a file that is no longer installed. Ruby 3.0.3 includes security fixes. CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods CVE-2021-41816: Buffer Overrun in CGI.escape_html CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse Ruby 3.0.2 release includes security fixes. CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP CVE-2021-31799: A command injection vulnerability in RDoc (From OE-Core rev: edb6df08cb47a39918d28c709675d995c9e10031) Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

go: upgrade 1.16.13 -> 1.16.14

2022-03-10T16:39:45+00:00

go 1.16.14 release includes fix for CVE-2022-23806. (From OE-Core rev: 7b5723ae41b7fcdc73a24f04ec0cda4fba8f8622) Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ccache: upgrade 4.2 -> 4.2.1

2022-03-02T00:22:13+00:00

License-Update: add license information of src/third_party/win32/winerror_to_errno.h (From OE-Core rev: f153f42c910c06dd8e812fa9c803964c60e6cfcc) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 12f0aa9533edc7ac5a65b1c165797b049349b19e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

e2fsprogs: backport to fix one regression

2022-03-02T00:22:12+00:00

Backport a patch in 1.46.3 which fix one regression: This is what the changelog says: Fix e2fsck so that the if the s_interval is zero, and the last mount or write time is in the future, it will fix invalid last mount/write timestamps in the superblock. (This was a regression introduced in v1.45.5.) (From OE-Core rev: 9fe70a643a2d8723001421a18b5736e70a1eaa34) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-20196

2022-02-10T13:25:48+00:00

(From OE-Core rev: 3014cb660e7128f65ee2aec004ede39e80cd891d) Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-3930

2022-02-10T13:25:48+00:00

(From OE-Core rev: f0504578174f77ba231c72801fb5a295869a40d1) Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie