Branch: kirkstone New this week: 1 CVEs CVE-2023-28531 (CVSS3: 9.8 CRITICAL): openssh https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28531 * Removed this week: 16 CVEs CVE-2022-48281

Branch: dunfell New this week: 4 CVEs CVE-2022-3515 (CVSS3: 9.8 CRITICAL): gnupg:gnupg-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3515 * CVE-2023-28486 (CVSS3: 5.3 MEDIUM): sudo

Branch: master New this week: 1 CVEs CVE-2023-28531 (CVSS3: 9.8 CRITICAL): openssh https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28531 * Removed this week: 0 CVEs Full list: Found 7

It is worth noting this fix actually resolved a number of latent bugs too. This breakage in reproducibility was as a result of this

It only happened with 5.15 for some reason... Cheers, Richard

Please. There is some issue breaking master-next and I worry it is something which already made it into master as there are only a limited set of possibilities in -next including this. I can't quite

You're right, the commit which fixed the issue: https://github.com/SCons/scons/commit/a4ab466c6df5bd3187e78c36bfa8f68e1fb7659e said #4231 so I went with this less cool number (without noticing that my

I think that should be 4321! Cheers, Richard

Ah, good idea, I'll try that and provide a V2 of this series if it fits.

Sorry for making it not clear. Without this patch, git url that are in the original SRC_URI of the recipe are simply remove from the final SRC_URI under devtool and so it

<richard.purdie@...> wrote: squash away. Looks fine to me. Strange that I'm still not seeing that here, I tested all of my 6.1 and 6.3 updates with that in place! Bruce -- - Thou

Am Sa, 25. Mär 2023 um 19:56:00 +0100 schrieb Markus Volk <f_l_k@...>: During the change I noticed that webkitgtk-4 (built with gtk3) also stores its libs in ${libdir}/webkit2gtk-4.*. If I now

Am Sa, 25. Mär 2023 um 19:38:56 +0100 schrieb Alexander Kanavin <alex.kanavin@...>: core-image-minimal () - Ran 71 tests in 38.845s core-image-minimal - OK - All required tests passed (successes=1,

I thought that would be treated the same as rust-hello-world_git.bb which is in oe-core. Anyway, I don't mind placing it elsewhere, which layer do you think this recipe would land?

<frederic.martinsons@...> wrote: Come to think of it, it's better to use the same type parameter with a special value as in kernel recipes: git://.....;type=cargo-dep;... This would avoid the

Am Sa, 25. Mär 2023 um 19:35:57 +0100 schrieb Alexander Kanavin <alex.kanavin@...>: Will do. I was afraid that webkitgtk-4 is confusing for the gtk3 variant, but named it anyway because meson reports

<frederic.martinsons@...> wrote: What actually happens without this patch, and what does the patch change? The commit message isn't making it clear. Adding special cases based on custom

I don't think this should be going in oe-core, as it's not actually used by anything, or in any automated tests. But you can place it in a separate layer. Alex <frederic.martinsons@...>

Thanks for testing this. mdev-busybox is actually tested only with poky-tiny distro and core-image-minimal image (where it is used by default), so if it doesn't regress there, it's fine. Alex

Can you please name the gtk3 variant webkitgtk-3? I don't like carrying those version suffixes when the older version is going to have a short phaseout period. Alex