Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap-5.0.9 2025-04-16T13:41:24+00:00 2025-04-16T13:41:24+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-04-02T11:45:33+00:00 urn:sha1:0b1e8f405cfbc8afd4f4517ed78e28af517896df This upgrade addresses CVEs: CVE-2025-27835 CVE-2025-27832 CVE-2025-27831 CVE-2025-27836 CVE-2025-27830 CVE-2025-27833 CVE-2025-27833 CVE-2025-27834 Changelog: https://ghostscript.readthedocs.io/en/gs10.05.0/News.html (From OE-Core rev: 2c851f74fa72c30d447d59d450eb9bc036404f55) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-11-26T14:11:30+00:00 Hitendra Prajapati hprajapati@mvista.com 2024-11-14T06:15:22+00:00 urn:sha1:03e5a3f5f5cbc0d59dbb83e66d0ee29faf5654d9 avoid-host-contamination.patch refreshed for 10.04.0 Changelog: =========== - addresses CVEs: CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955, CVE-2024-46956 - add protection for device selection from PostScript input. - efforts in code hygiene and maintainability continue. - The usual round of bug fixes, compatibility changes, and incremental improvements. - add the capability to build with the Tesseract OCR engine. (From OE-Core rev: a0c802e9b1d8400589aede20e52f40d10a344314) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-07-12T12:47:20+00:00 Hitendra Prajapati hprajapati@mvista.com 2024-07-08T06:28:40+00:00 urn:sha1:262cb8eb147844e746464f97c12f772d1c33563e avoid-host-contamination.patch refreshed for 10.03.1 Below patches are no longer needed as it's included in this upgrade. 1. CVE-2024-29510.patch 2. CVE-2024-33869-0001.patch 3. CVE-2024-33869-0002.patch 4. CVE-2024-33870.patch 5. CVE-2024-33871.patch 6. configure.ac-add-option-to-explicitly-disable-neon.patch other patch release to address security bugs: CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511 (From OE-Core rev: 9a424fbcdc0c792ff3b99bf0e8a5e380582f53bc) (From OE-Core rev: 2a19132aca9d62be0d1e58444b0a8881456311dc) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Archana Polampalli archana.polampalli@windriver.com 2024-05-29T05:42:25+00:00 urn:sha1:96b48c195a60ef6de2a43a66a8fa61b6a4baff10 (From OE-Core rev: 202b2b0a5c447baf7d84c19b7829a81a846413d9) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Archana Polampalli archana.polampalli@windriver.com 2024-05-29T05:42:24+00:00 urn:sha1:0c079e62fbfa8f1b3ac436b62d4234698f4fab97 (From OE-Core rev: c28281b7e105536cdf61eef8fe81d85ff2a42e4f) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Archana Polampalli archana.polampalli@windriver.com 2024-05-29T05:42:23+00:00 urn:sha1:235050fbfa70877fd61cd3a5ee059d9958c56ff7 (From OE-Core rev: d24e9c6c1016fbe8522f647aca76d93ab9cc5a41) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Archana Polampalli archana.polampalli@windriver.com 2024-05-29T05:42:22+00:00 urn:sha1:3a3c1f7dc6bba4414872639132a5bc91781e607d (From OE-Core rev: b95a08ec9f70a0b21f5fc239eda1857cea54702f) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-02-24T16:10:23+00:00 Simone Weiß simone.p.weiss@posteo.com 2024-02-18T22:32:32+00:00 urn:sha1:2bcd651a0871a2a3789c2f2907cb372ad45d9b14 Set CVE_STATUS as none of the issues apply against the versions used in the recipes. (From OE-Core rev: cea8c8bf73e84133f566d1c2ca0637494f2d7afe) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2024-02-08T10:59:06+00:00 Kai Kang kai.kang@windriver.com 2024-02-07T08:08:23+00:00 urn:sha1:2d4d362de10479004990e89ae9e72bd48a752dfb The license of ghostscript has switched to Affero GPL since version 9.07 via commit: * 3cc5318 Switch Ghostscript/GhostPDL to Affero GPL https://github.com/ArtifexSoftware/ghostpdl/commit/3cc5318 Correct it with `AGPL-3.0-or-later`. (From OE-Core rev: 7dec33a8026d9aa96177060b13bb63d74eeb4855) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2023-11-13T11:38:03+00:00 Markus Volk f_l_k@t-online.de 2023-11-12T12:08:09+00:00 urn:sha1:9d830bb2ea43c5954b61b233aafae7e1ce89469d libgs is eg. needed to build ghostscript support for gimp also install the data target (From OE-Core rev: cedd211d8b73076d1ef6f32af1c59e87a436d637) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>