dunfell merge request: March 19th


Armin Kuster
 

The following changes since commit 87571345059f82fb7599e3aa82e6fdcfbd361098:

  zeromq: 4.3.2 -> 4.3.4 (2023-02-22 11:24:23 -0500)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to 7ae42df58f2bcc730153715c3339a6875b0b2497:

  xterm: Remove undeclared variables introduced by backport (2023-03-18 16:16:42 -0400)

----------------------------------------------------------------
Chris Rogers (1):
      xterm: Remove undeclared variables introduced by backport

Poonam Jadhav (4):
      nodejs: Fix CVE-2022-32212
      nodejs: Fix CVE-2022-35255
      nodejs: Fix CVE-2022-43548
      nodejs: Fix CVEs for nodejs

Priyal Doshi (1):
      open-vm-tools: Security fix for CVE-2022-31676

 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-32212.patch     | 133 +
 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-35255.patch     | 237 ++
 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-43548.patch     | 214 ++
 meta-oe/recipes-devtools/nodejs/nodejs/CVE-llhttp.patch         | 4348 +++++++++++++++++++++++++++
 meta-oe/recipes-devtools/nodejs/nodejs_12.22.12.bb |    4 +
 meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 21 +-
 ...1-Properly-check-authorization-on-incoming-guestOps-re.patch | 39 +
 meta-oe/recipes-support/open-vm-tools/open-vm-tools_11.0.1.bb |    1 +
 8 files changed, 4982 insertions(+), 15 deletions(-)
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-32212.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-35255.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-43548.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-llhttp.patch
 create mode 100644 meta-oe/recipes-support/open-vm-tools/open-vm-tools/0001-Properly-check-authorization-on-incoming-guestOps-re.patch


Khem Raj
 

applied thanks.

On Sun, Mar 19, 2023 at 5:08 AM akuster808 <akuster808@...> wrote:

The following changes since commit 87571345059f82fb7599e3aa82e6fdcfbd361098:

zeromq: 4.3.2 -> 4.3.4 (2023-02-22 11:24:23 -0500)

are available in the Git repository at:

https://git.openembedded.org/meta-openembedded dunfell-next

for you to fetch changes up to 7ae42df58f2bcc730153715c3339a6875b0b2497:

xterm: Remove undeclared variables introduced by backport (2023-03-18
16:16:42 -0400)

----------------------------------------------------------------
Chris Rogers (1):
xterm: Remove undeclared variables introduced by backport

Poonam Jadhav (4):
nodejs: Fix CVE-2022-32212
nodejs: Fix CVE-2022-35255
nodejs: Fix CVE-2022-43548
nodejs: Fix CVEs for nodejs

Priyal Doshi (1):
open-vm-tools: Security fix for CVE-2022-31676

meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-32212.patch | 133 +
meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-35255.patch | 237 ++
meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-43548.patch | 214 ++
meta-oe/recipes-devtools/nodejs/nodejs/CVE-llhttp.patch | 4348
+++++++++++++++++++++++++++
meta-oe/recipes-devtools/nodejs/nodejs_12.22.12.bb | 4 +
meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch | 21 +-
...1-Properly-check-authorization-on-incoming-guestOps-re.patch | 39 +
meta-oe/recipes-support/open-vm-tools/open-vm-tools_11.0.1.bb | 1 +
8 files changed, 4982 insertions(+), 15 deletions(-)
create mode 100644
meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-32212.patch
create mode 100644
meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-35255.patch
create mode 100644
meta-oe/recipes-devtools/nodejs/nodejs/CVE-2022-43548.patch
create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-llhttp.patch
create mode 100644
meta-oe/recipes-support/open-vm-tools/open-vm-tools/0001-Properly-check-authorization-on-incoming-guestOps-re.patch