dunfell merge request: May 30th


Armin Kuster
 

The following changes since commit 8ff12bfffcf0840d5518788a53d88d708ad3aae0:

  postgresql: Fix build on riscv (2022-04-19 10:15:37 -0700)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to deee226017877d51188e0a46f9e6b93c10ffbb34:

  tcpdump: Add fix for CVE-2018-16301 (2022-05-25 19:34:39 -0700)

----------------------------------------------------------------
Julien STEPHAN (2):
      opencl-icd-loader: switch to main branch
      opencl-headers: switch to main branch

Martin Jansa (2):
      python3-cryptography: backport 3 changes to fix CVE-2020-36242
      ostree: prevent ostree-native depending on target virtual/kernel to provide kernel-module-overlay

Mikko Rapeli (1):
      fuse: set CVE_PRODUCT to "fuse_project:fuse"

Ranjitsinh Rathod (1):
      atftp: Add fix for CVE-2021-41054 and CVE-2021-46671

Riyaz Ahmed Khan (1):
      tcpdump: Add fix for CVE-2018-16301

Sana Kazi (1):
      openjpeg: Whitelist CVE-2020-27844 and CVE-2015-1239

Steve Sakoman (1):
      lua: fix CVE-2022-28805

 meta-filesystems/recipes-support/fuse/fuse3_3.9.2.bb            | 2 +
 meta-filesystems/recipes-support/fuse/fuse_2.9.9.bb             | 2 +
 .../atftp/atftp/0001-fix-buffer-overflow-in-atftpd.patch        | 111 ++++++++++++++++++++++++++++
 ...01-options.c-Proper-fix-for-the-read-past-end-of-array.patch | 48 ++++++++++++
 meta-networking/recipes-daemons/atftp/atftp_0.7.2.bb            | 2 +
 .../recipes-support/tcpdump/tcpdump/CVE-2018-16301.patch        | 111 ++++++++++++++++++++++++++++
 meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb        | 1 +
 meta-oe/recipes-core/opencl-headers/opencl-headers_git.bb       | 2 +-
 meta-oe/recipes-core/opencl-icd-loader/opencl-icd-loader_git.bb | 2 +-
 .../recipes-devtools/lua/lua/0001-lua-fix-CVE-2022-28805.patch  | 73 ++++++++++++++++++
 meta-oe/recipes-devtools/lua/lua/CVE-2022-28805.patch           | 28 +++++++
 meta-oe/recipes-devtools/lua/lua_5.3.6.bb                       | 1 +
 meta-oe/recipes-extended/ostree/ostree_2020.3.bb                | 2 +-
 meta-oe/recipes-graphics/openjpeg/openjpeg_2.3.1.bb             | 14 ++++
 .../python3-cryptography/0001-chunked-update_into-5419.patch    | 99 +++++++++++++++++++++++++
 .../0002-chunking-didn-t-actually-work-5499.patch               | 43 +++++++++++
 ...3-correct-buffer-overflows-cause-by-integer-overflow-i.patch | 37 ++++++++++
 meta-python/recipes-devtools/python/python3-cryptography_2.8.bb | 3 +
 18 files changed, 578 insertions(+), 3 deletions(-)
 create mode 100644 meta-networking/recipes-daemons/atftp/atftp/0001-fix-buffer-overflow-in-atftpd.patch
 create mode 100644 meta-networking/recipes-daemons/atftp/atftp/0001-options.c-Proper-fix-for-the-read-past-end-of-array.patch
 create mode 100644 meta-networking/recipes-support/tcpdump/tcpdump/CVE-2018-16301.patch
 create mode 100644 meta-oe/recipes-devtools/lua/lua/0001-lua-fix-CVE-2022-28805.patch
 create mode 100644 meta-oe/recipes-devtools/lua/lua/CVE-2022-28805.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cryptography/0001-chunked-update_into-5419.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cryptography/0002-chunking-didn-t-actually-work-5499.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cryptography/0003-correct-buffer-overflows-cause-by-integer-overflow-i.patch


Khem Raj
 

merged thanks.

On Mon, May 30, 2022 at 7:07 AM akuster808 <akuster808@...> wrote:

The following changes since commit 8ff12bfffcf0840d5518788a53d88d708ad3aae0:

postgresql: Fix build on riscv (2022-04-19 10:15:37 -0700)

are available in the Git repository at:

https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to deee226017877d51188e0a46f9e6b93c10ffbb34:

tcpdump: Add fix for CVE-2018-16301 (2022-05-25 19:34:39 -0700)

----------------------------------------------------------------
Julien STEPHAN (2):
opencl-icd-loader: switch to main branch
opencl-headers: switch to main branch

Martin Jansa (2):
python3-cryptography: backport 3 changes to fix CVE-2020-36242
ostree: prevent ostree-native depending on target virtual/kernel
to provide kernel-module-overlay

Mikko Rapeli (1):
fuse: set CVE_PRODUCT to "fuse_project:fuse"

Ranjitsinh Rathod (1):
atftp: Add fix for CVE-2021-41054 and CVE-2021-46671

Riyaz Ahmed Khan (1):
tcpdump: Add fix for CVE-2018-16301

Sana Kazi (1):
openjpeg: Whitelist CVE-2020-27844 and CVE-2015-1239

Steve Sakoman (1):
lua: fix CVE-2022-28805

meta-filesystems/recipes-support/fuse/fuse3_3.9.2.bb | 2 +
meta-filesystems/recipes-support/fuse/fuse_2.9.9.bb | 2 +
.../atftp/atftp/0001-fix-buffer-overflow-in-atftpd.patch | 111
++++++++++++++++++++++++++++
...01-options.c-Proper-fix-for-the-read-past-end-of-array.patch | 48
++++++++++++
meta-networking/recipes-daemons/atftp/atftp_0.7.2.bb | 2 +
.../recipes-support/tcpdump/tcpdump/CVE-2018-16301.patch | 111
++++++++++++++++++++++++++++
meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb | 1 +
meta-oe/recipes-core/opencl-headers/opencl-headers_git.bb | 2 +-
meta-oe/recipes-core/opencl-icd-loader/opencl-icd-loader_git.bb | 2 +-
.../recipes-devtools/lua/lua/0001-lua-fix-CVE-2022-28805.patch | 73
++++++++++++++++++
meta-oe/recipes-devtools/lua/lua/CVE-2022-28805.patch | 28
+++++++
meta-oe/recipes-devtools/lua/lua_5.3.6.bb | 1 +
meta-oe/recipes-extended/ostree/ostree_2020.3.bb | 2 +-
meta-oe/recipes-graphics/openjpeg/openjpeg_2.3.1.bb | 14 ++++
.../python3-cryptography/0001-chunked-update_into-5419.patch | 99
+++++++++++++++++++++++++
.../0002-chunking-didn-t-actually-work-5499.patch | 43
+++++++++++
...3-correct-buffer-overflows-cause-by-integer-overflow-i.patch | 37
++++++++++
meta-python/recipes-devtools/python/python3-cryptography_2.8.bb | 3 +
18 files changed, 578 insertions(+), 3 deletions(-)
create mode 100644
meta-networking/recipes-daemons/atftp/atftp/0001-fix-buffer-overflow-in-atftpd.patch
create mode 100644
meta-networking/recipes-daemons/atftp/atftp/0001-options.c-Proper-fix-for-the-read-past-end-of-array.patch
create mode 100644
meta-networking/recipes-support/tcpdump/tcpdump/CVE-2018-16301.patch
create mode 100644
meta-oe/recipes-devtools/lua/lua/0001-lua-fix-CVE-2022-28805.patch
create mode 100644 meta-oe/recipes-devtools/lua/lua/CVE-2022-28805.patch
create mode 100644
meta-python/recipes-devtools/python/python3-cryptography/0001-chunked-update_into-5419.patch
create mode 100644
meta-python/recipes-devtools/python/python3-cryptography/0002-chunking-didn-t-actually-work-5499.patch
create mode 100644
meta-python/recipes-devtools/python/python3-cryptography/0003-correct-buffer-overflows-cause-by-integer-overflow-i.patch