From: Wang Mingyu <wangmy@...> Changelog: ========== - Security - call setgroups before setuid or setgid - harden systemd service (https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_

From: Preeti Sachan <preeti.sachan@...> Remove branch 2.2.x from SRC_URI as fluidsynth github removed the branch. The SRCREV is on master branch. Signed-off-by: Preeti Sachan <preeti.sachan@...> Signe

From: Chen Qi <Qi.Chen@...> The current handling of /etc/resolv.conf by NM has some problems. When networkd is not configuring network, and there's 'ip=dhcp' in kernel command line, the /run/NetworkMa

From: Hermes Zhang <chenhuiz@...> The kernel_add_regdb should run before do_compile to make it take effect. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@...> Signed-off-by: Armin Kuster <akus

From: Chee Yang Lee <chee.yang.lee@...> Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands

From: Chee Yang Lee <chee.yang.lee@...> Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands

From: Changqing Li <changqing.li@...> This upgrade include fix for CVE-2022-3647 Signed-off-by: Changqing Li <changqing.li@...> Signed-off-by: Khem Raj <raj.khem@...> Signed-off-by: Chee Yang Lee <che

From: Changqing Li <changqing.li@...> This upgrade include fix for CVE-2022-3647 Signed-off-by: Changqing Li <changqing.li@...> Signed-off-by: Khem Raj <raj.khem@...> Signed-off-by: Chee Yang Lee <che

From: Chee Yang Lee <chee.yang.lee@...> Signed-off-by: Chee Yang Lee <chee.yang.lee@...> Signed-off-by: Armin Kuster <akuster808@...> --- .../fwupd/fwupd/CVE-2022-3287.patch | 218 ++++++++++++++++++ m

From: Chee Yang Lee <chee.yang.lee@...> backport patch from debian Signed-off-by: Chee Yang Lee <chee.yang.lee@...> Signed-off-by: Armin Kuster <akuster808@...> --- .../zsh/zsh/CVE-2021-45444_1.patch

From: Mathieu Dubois-Briand <mbriand@...> These CVEs only affect libnssdbm, compiled when --enable-legacy-db is used. https://bugzilla.mozilla.org/show_bug.cgi?id=1360782#c6 https://bugzilla.mozilla.o

From: Mathieu Dubois-Briand <mbriand@...> Signed-off-by: Mathieu Dubois-Briand <mbriand@...> Signed-off-by: Khem Raj <raj.khem@...> (cherry picked from commit 8e0432fd54a1412a67dc1f9c33f5f6afbb860a62)

From: Chen Qi <Qi.Chen@...> The current location has no effect, because NetworkManager is not looking for config files there. In meson.build, we have: nm_pkglibdir = join_paths(nm_prefix, 'lib', nm_na

From: Chen Qi <Qi.Chen@...> Without this patch, even if dhcpcd is enabled, the NetworkManager cannot find it. Below are the messages from NetworkMananger: dhcp: init: DHCP client 'dhcpcd' not availabl

From: Alexander Stein <alexander.stein@...> When cleaning the package during rebuild in base_do_configure() 'make clean' deletes docs/dool.1. This files comes from source repository but can't be recre

From: Kai Kang <kai.kang@...> It fails to install postfix and lib32-postfix at same time: | Error: Transaction test error: | file /etc/postfix/sample-main.cf conflicts between attempted installs of li

From: Wang Mingyu <wangmy@...> Changelog: ========== - Add smcroutectl batch support, issue #189. Based on the IPC support added in issue #185 - Fix #178: invalid systemd daemon type Simple/Notify vs

From: Khem Raj <raj.khem@...> It currently ends up using native python3-config which adds native paths to compiler includes which is not what we want. Signed-off-by: Khem Raj <raj.khem@...> (cherry pi

From: Khem Raj <raj.khem@...> Ensures that waf detects and uses it correctly Signed-off-by: Khem Raj <raj.khem@...> (cherry picked from commit 3b7f98f52b58ec48bda9a6a64c0be507ccfb6463) Signed-off-by:

From: Khem Raj <raj.khem@...> It uses python3-config during build to grok the python specific includedirs, therefore its important to ensure that target specific python3-config is used, otherwise curr