Signed-off-by: Ola x Nilsson <olani@...> --- meta/conf/distro/time64.conf | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 meta/conf/distro/time64.conf diff --git a/met

libksba: integer overflow may lead to remote code execution. Reference: https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html Upstream fixes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.g

- remove deprecated xvmc PACKAGECONFIG - remove futex.h patch. Code has been reworked, still needed? Note: mesa-22.3.0 will require libperfetto update to v28. Otherwise compi= lation will fail. Signed

Upstream-Status: Backport from https://github.com/libarchive/libarchive/commit/bff38efe8c110469c5080d387bec62a6ca15b1a5 Signed-off-by: Hitendra Prajapati <hprajapati@...> --- .../libarchive/CVE-2022-3

Patch so ppoll is properly redirected to it's 64bit time variant even when source fortification is active. Signed-off-by: Ola x Nilsson <olani@...> --- ...fortify-symbol-for-64-bit-time_t-BZ-.patch |

Check for known symbols that should have been redirected to 64bit variants when -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 are set. Signed-off-by: Ola x Nilsson <olani@...> --- meta/classes-global/ins

Here is my sanity checker that check for glibc symbols that use 32-bit time_t or file offsets. I include one glibc patch that fixes a problem where the redirect for ppoll did not work when fortify_sou

Signed-off-by: Hitendra Prajapati <hprajapati@...> --- .../sysstat/sysstat/CVE-2022-39377.patch | 92 +++++++++++++++++++ .../sysstat/sysstat_12.2.1.bb | 4 +- 2 files changed, 95 insertions(+), 1 delet

-> libksba: fix CVE-2022-3515 -> libksba: integer overflow may lead to remote code execution. -> Reference: -> https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html -> Upstream fixes: -> https:/

I'm very sorry. I sent the meta-oe patch to poky by mistake. Please ignore them. -- Best Regards --------------------------------------------------- Wang Mingyu Development Dept.I Nanjing Fujitsu Nand

From: Wang Mingyu <wangmy@...> Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{python3-web3_5.31.1.bb => python3-web3_5.31.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename met

From: Wang Mingyu <wangmy@...> Changelog: ========= Update vendored double-conversion to 3.2.1 (#570) Fix len integer overflow issue (#567) Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{pyth

From: Wang Mingyu <wangmy@...> Changelog: Remove deprecated function to fix twine check with pkginfo 1.9.0. (#941) Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{python3-twine_4.0.1.bb => pyt

From: Wang Mingyu <wangmy@...> Changelog: ============ Adopt jupyter releaser #806 Use base setup dependency type #805 More CI Cleanup #803 More maintenance cleanup #802 Add project description #801 B

From: Wang Mingyu <wangmy@...> Signed-off-by: Wang Mingyu <wangmy@...> --- .../{python3-protobuf_4.21.9.bb => python3-protobuf_4.21.10.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename m

From: Wang Mingyu <wangmy@...> Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{python3-web3_5.31.1.bb => python3-web3_5.31.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename met

From: Wang Mingyu <wangmy@...> Changelog: ========= Update vendored double-conversion to 3.2.1 (#570) Fix len integer overflow issue (#567) Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{pyth

From: Wang Mingyu <wangmy@...> Changelog: Remove deprecated function to fix twine check with pkginfo 1.9.0. (#941) Signed-off-by: Wang Mingyu <wangmy@...> --- .../python/{python3-twine_4.0.1.bb => pyt

From: Wang Mingyu <wangmy@...> Changelog: ============ Adopt jupyter releaser #806 Use base setup dependency type #805 More CI Cleanup #803 More maintenance cleanup #802 Add project description #801 B

From: Lee Chee Yang <chee.yang.lee@...> Signed-off-by: Lee Chee Yang <chee.yang.lee@...> --- v2: fix fuzz meta/recipes-core/dropbear/dropbear.inc | 1 + .../dropbear/dropbear/CVE-2021-36369.patch | 145