|
[dunfell 03/12] unzip: fix CVE-2021-4217
From: Joe Slater <joe.slater@...>
Avoid a null pointer dereference.
Signed-off-by: Joe Slater <joe.slater@...>
Signed-off-by: Alexandre Belloni
From: Joe Slater <joe.slater@...>
Avoid a null pointer dereference.
Signed-off-by: Joe Slater <joe.slater@...>
Signed-off-by: Alexandre Belloni
|
By
Steve Sakoman
·
#167419
·
|
|
[dunfell 02/12] golang: CVE-2021-31525 net/http: panic in ReadRequest and ReadResponse when reading a very large header
From: Hitendra Prajapati <hprajapati@...>
Source: https://github.com/argoheyard/lang-net
MR: 114874
Type: Security Fix
Disposition: Backport from
From: Hitendra Prajapati <hprajapati@...>
Source: https://github.com/argoheyard/lang-net
MR: 114874
Type: Security Fix
Disposition: Backport from
|
By
Steve Sakoman
·
#167418
·
|
|
[dunfell 01/12] golang: CVE-2022-24675 encoding/pem: fix stack overflow in Decode
From: Hitendra Prajapati <hprajapati@...>
Source: https://go-review.googlesource.com/c/go
MR: 117551
Type: Security Fix
Disposition: Backport from
From: Hitendra Prajapati <hprajapati@...>
Source: https://go-review.googlesource.com/c/go
MR: 117551
Type: Security Fix
Disposition: Backport from
|
By
Steve Sakoman
·
#167417
·
|
|
[dunfell 00/12] Patch review
Please review this set of patches for dunfell and have comments back by end
of day Monday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3844
With
Please review this set of patches for dunfell and have comments back by end
of day Monday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3844
With
|
By
Steve Sakoman
·
#167416
·
|
|
[PATCH] openssl: Upgrade 3.0.3 -> 3.0.4
Includes a fix for CVE-2022-2068.
Signed-off-by: Richard Purdie <richard.purdie@...>
---
...1-Configure-do-not-tweak-mips-cflags.patch | 10 +++++-----
Includes a fix for CVE-2022-2068.
Signed-off-by: Richard Purdie <richard.purdie@...>
---
...1-Configure-do-not-tweak-mips-cflags.patch | 10 +++++-----
|
By
Richard Purdie
·
#167415
·
|
|
Re: [PATCH 2/2] cve-check: hook cleanup to the BuildCompleted event, not CookerExit
Without the index file I was running into the issue of merging fragment files from different builds
in the same directory (different images, the world build etc). I can see the following solutions:
1.
Without the index file I was running into the issue of merging fragment files from different builds
in the same directory (different images, the world build etc). I can see the following solutions:
1.
|
By
Marta Rybczynska
·
#167414
·
|
|
Re: [PATCH] base.bbclass: Add sstate-cache dependency to GCCVERSION
No, it wouldn't. It doesn't address the manjority of my concerns.
The native recipes shouldn't depend on the SDK gcc version either.
I don't believe that is the issue. I don't have "nativesdk-mgen",
No, it wouldn't. It doesn't address the manjority of my concerns.
The native recipes shouldn't depend on the SDK gcc version either.
I don't believe that is the issue. I don't have "nativesdk-mgen",
|
By
Richard Purdie
·
#167413
·
|
|
Re: [PATCH] base.bbclass: Add sstate-cache dependency to GCCVERSION
Would setting dependency to SDKGCCVERSION be more acceptable? That way native recipes will not depend on target gcc version.
>I'm guessing what has happened in your case is that a
>TMPDIR as reused
Would setting dependency to SDKGCCVERSION be more acceptable? That way native recipes will not depend on target gcc version.
>I'm guessing what has happened in your case is that a
>TMPDIR as reused
|
By
Tomasz Dziendzielski
·
#167412
·
|
|
[PATCH] cve-extra-exclusions: Clean up and ignore three CVEs (2xqemu and nasm)
Remove obsolete comments/data from the file. Add in three CVEs to ignore.
Two are qemu CVEs which upstream aren't particularly intersted in and aren't
serious issues. Also ignore the nasm CVE found
Remove obsolete comments/data from the file. Add in three CVEs to ignore.
Two are qemu CVEs which upstream aren't particularly intersted in and aren't
serious issues. Also ignore the nasm CVE found
|
By
Richard Purdie
·
#167411
·
|
|
Re: [PATCH 0/3] V3 /proc/pressure buildstats
Unfortunately I suspect this has broken the performance worker testing:
https://autobuilder.yoctoproject.org/typhoon/#/builders/132/builds/427/steps/11/logs/stdio
Cheers,
Richard
Unfortunately I suspect this has broken the performance worker testing:
https://autobuilder.yoctoproject.org/typhoon/#/builders/132/builds/427/steps/11/logs/stdio
Cheers,
Richard
|
By
Richard Purdie
·
#167410
·
|
|
[PATCH] ncurses: use GitHub mirror, not Debian's packaging
The GitHub mirror of ncurses is updated daily, whereas the Debian
packaging repository is only updated when they do an upgrade.
Signed-off-by: Ross Burton <ross.burton@...>
---
The GitHub mirror of ncurses is updated daily, whereas the Debian
packaging repository is only updated when they do an upgrade.
Signed-off-by: Ross Burton <ross.burton@...>
---
|
By
Ross Burton
·
#167409
·
|
|
Re: [PATCH] runqueue: add cpu/io pressure regulation
This looks like a good start, thanks. There are a few things which will
need cleaning up in here as this is pretty performance sensitive code
(try a "time bitbake world -n" to see what I
This looks like a good start, thanks. There are a few things which will
need cleaning up in here as this is pretty performance sensitive code
(try a "time bitbake world -n" to see what I
|
By
Richard Purdie
·
#167408
·
|
|
Re: [PATCH] glibc-tests: not clear BBCLASSEXTEND
Thanks. I test it on core-image-minimal with multilib enabled.
And 132 test cases of lib32-glibc-tests run, 121 PASS, 10 FAIL and 1 SKIP.
Regards,
Kai
--
Kai Kang
Wind River Linux
Thanks. I test it on core-image-minimal with multilib enabled.
And 132 test cases of lib32-glibc-tests run, 121 PASS, 10 FAIL and 1 SKIP.
Regards,
Kai
--
Kai Kang
Wind River Linux
|
By
Kai Kang
·
#167407
·
|
|
Re: [PATCH] gstreamer1.0: upgrade 1.20.2 -> 1.20.3
I think we can also simply wait for AUH to process the full set
automatically (which will happen tomorrow), then you or anyone else
interested can simply pick the patches off this mailing list, or
I think we can also simply wait for AUH to process the full set
automatically (which will happen tomorrow), then you or anyone else
interested can simply pick the patches off this mailing list, or
|
By
Alexander Kanavin
·
#167406
·
|
|
Re: [PATCH] package_manager/ipk: do not pipe stderr to stdout
Thanks for the information - perhaps this should be added to the commit message?
Does this change discard things that appear on stderr completely, or
does it still go somewhere where it can be seen
Thanks for the information - perhaps this should be added to the commit message?
Does this change discard things that appear on stderr completely, or
does it still go somewhere where it can be seen
|
By
Alexander Kanavin
·
#167405
·
|
|
Re: [PATCH] gstreamer1.0: upgrade 1.20.2 -> 1.20.3
Thank you for reminding.
I will upgrade the framework as a whole and submit it again.
--
Best Regards
---------------------------------------------------
Wang Mingyu
Development
Thank you for reminding.
I will upgrade the framework as a whole and submit it again.
--
Best Regards
---------------------------------------------------
Wang Mingyu
Development
|
By
wangmy
·
#167404
·
|
|
Re: [PATCH] runqueue: add cpu/io pressure regulation
Hi Aryaman,
Aryaman Gupta <aryaman.gupta@...> escreveu no dia quarta, 29/06/2022 à(s) 21:10:
We can jump when the user does not provide any default values or if they provide the maximum
if
Hi Aryaman,
Aryaman Gupta <aryaman.gupta@...> escreveu no dia quarta, 29/06/2022 à(s) 21:10:
We can jump when the user does not provide any default values or if they provide the maximum
if
|
By
Jose Quaresma
·
#167403
·
|
|
[PATCH] oe-selftest-image: Ensure the image has sftp as well as dropbear
We need sftp so that scp works with recent openssh. Use the packagegroup
instead of a direct dependency to ensure this.
Signed-off-by: Richard Purdie <richard.purdie@...>
---
We need sftp so that scp works with recent openssh. Use the packagegroup
instead of a direct dependency to ensure this.
Signed-off-by: Richard Purdie <richard.purdie@...>
---
|
By
Richard Purdie
·
#167402
·
|
|
Re: [PATCH] gstreamer1.0: upgrade 1.20.2 -> 1.20.3
Hi wangmy,
This doesn't work, gstreamer is a framework so when you update one element you need to update all of them.
Jose
wangmy <wangmy@...> escreveu no dia quinta, 30/06/2022 à(s) 05:20:
--
Best
Hi wangmy,
This doesn't work, gstreamer is a framework so when you update one element you need to update all of them.
Jose
wangmy <wangmy@...> escreveu no dia quinta, 30/06/2022 à(s) 05:20:
--
Best
|
By
Jose Quaresma
·
#167401
·
|
|
[PATCH] sudo: upgrade 1.9.11p2 -> 1.9.11p3
Changelog:
==========
- Fixed "connection reset" errors on AIX when running shell scripts with the
intercept or log_subcmds sudoers options enabled. Bug #1034.
- Fixed very slow execution of shell
Changelog:
==========
- Fixed "connection reset" errors on AIX when running shell scripts with the
intercept or log_subcmds sudoers options enabled. Bug #1034.
- Fixed very slow execution of shell
|
By
wangmy
·
#167400
·
|