This should either be gnutls or openssl, not both. But aside from that, gnutls brings (L)GPLv3 issues and therefore should not be enabled by default. Are you saying that some glib-networking

Changes in this release [1] [1] https://github.com/GNOME/pango/commit/37a427018c92a2bc679ef104097e07a619609c9c Signed-off-by: Khem Raj <raj.khem@...> --- v2: Rebased

Changes in this release [1] [1] https://github.com/libarchive/libarchive/releases/tag/v3.6.1 Signed-off-by: Khem Raj <raj.khem@...> --- v2: Fix subject line to reflect right version

Hi Markus, Please use one commit per component as it is easy to describe. Jose Markus Volk <f_l_k@...> escreveu no dia domingo, 10/04/2022 à(s) 18:29: -- Best regards, José Quaresma

Hi Khem, nitpik in the version on the commit title: -2.6.1 +3.6.1 Jose Khem Raj <raj.khem@...> escreveu no dia domingo, 10/04/2022 à(s) 19:07: -- Best regards, José Quaresma

Hello Steve, Sorry if it wasn't clear, I mentioned it because another patch might be needed to properly fix the CVE. I can't jugde that, simply because I am not familiar with the code in question. It

Changes in this release [1] [1] https://github.com/GNOME/pango/commit/37a427018c92a2bc679ef104097e07a619609c9c Signed-off-by: Khem Raj <raj.khem@...> ---

Changes in this release [1] [1] https://github.com/libarchive/libarchive/releases/tag/v3.6.1 Signed-off-by: Khem Raj <raj.khem@...> --- .../libarchive/{libarchive_3.6.0.bb =>

this fixes authentication issues with geary and tls connection Signed-off-by: Markus Volk <f_l_k@...> --- meta/recipes-core/glib-networking/glib-networking_2.72.0.bb | 2 +-

Branch: honister New this week: 6 CVEs CVE-2019-1010238 (CVSS3: 9.8 CRITICAL): pango:pango-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010238 * CVE-2022-1050 (CVSS3: 8.8 HIGH):

This seems to be an error in the database due to a recent update for this CVE entry. I requested a fix on Friday so hopefully this will disappear next week. Steve

Branch: hardknott New this week: 4 CVEs CVE-2019-1010238 (CVSS3: 9.8 CRITICAL): pango:pango-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010238 * CVE-2022-1050 (CVSS3: 8.8 HIGH):

Branch: dunfell New this week: 4 CVEs CVE-2019-1010238 (CVSS3: 9.8 CRITICAL): pango:pango-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010238 * CVE-2021-20295 (CVSS3: 6.5

Are these not needed by python3-mako and perhaps should be there instead? Cheers, Richard

Branch: master New this week: 4 CVEs CVE-2019-1010238 (CVSS3: 9.8 CRITICAL): pango:pango-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010238 * CVE-2022-1050 (CVSS3: 8.8 HIGH):

There is some issue with this update unfortunately: https://autobuilder.yoctoproject.org/typhoon/#/builders/15/builds/5322/steps/12/logs/stdio Cheers, Richard

Changed how? Do we need to update LICENSE? We need to be more specific than just "license file changed". Cheers, Richard

There are reports of issues with the new libstdc++ from gcc 12. This upgrades to a gcc 12 version of uninative to allow builds on those systems. Gcc 12 isn't finalised so we may need to add a new

Still breaks on the autobuilder