mbox

[dunfell,00/20] Pull request (cover letter only)

Message ID cover.1644946036.git.steve@sakoman.com
State Not Applicable, archived
Headers show

Pull-request

git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next

Message

Steve Sakoman Feb. 15, 2022, 5:28 p.m. UTC
The following changes since commit f3be01483b01c88f8c4ba24ca73ccf1bcc33665c:

  build-appliance-image: Update to dunfell head revision (2022-01-27 16:16:08 +0000)

are available in the Git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next

Alexander Kanavin (1):
  libusb1: correct SRC_URI

Joshua Watt (5):
  tzdata: Remove BSD License specifier
  e2fsprogs: Use specific BSD license variant
  glib-2.0: Use specific BSD license variant
  shadow: Use specific BSD license variant
  libcap: Use specific BSD license variant

Marek Vasut (1):
  binutils: Backport Include members in the variable table used when
    resolving DW_AT_specification tags.

Marta Rybczynska (2):
  grub: add a fix for CVE-2020-25632
  grub: add a fix for CVE-2020-25647

Minjae Kim (1):
  ghostscript: fix CVE-2021-45949

Peter Kjellerstedt (1):
  sstate: A third fix for for touching files inside pseudo

Purushottam Choudhary (1):
  systemd: Fix CVE-2021-3997

Ranjitsinh Rathod (1):
  util-linux: Fix for CVE-2021-3995 and CVE-2021-3996

Ross Burton (2):
  lsof: correct LICENSE
  shadow-sysroot: sync license with shadow

Rudolf J Streif (1):
  linux-firmware: Add CLM blob to linux-firmware-bcm4373 package

Steve Sakoman (4):
  glibc: update to lastest 2.31 release HEAD
  expat: fix CVE-2022-23852
  expat: add missing Upstream-status, CVE tag and sign-off to
    CVE-2021-46143.patch
  common-licenses: add Spencer-94

 meta/classes/sstate.bbclass                   |  14 +-
 meta/files/common-licenses/Spencer-94         |  12 +
 .../grub/files/CVE-2020-25632.patch           |  90 +++++
 .../grub/files/CVE-2020-25647.patch           | 119 +++++++
 meta/recipes-bsp/grub/grub2.inc               |   2 +
 .../expat/expat/CVE-2021-46143.patch          |   6 +
 .../expat/expat/CVE-2022-23852.patch          |  33 ++
 meta/recipes-core/expat/expat_2.2.9.bb        |   1 +
 meta/recipes-core/glib-2.0/glib.inc           |   2 +-
 meta/recipes-core/glibc/glibc-version.inc     |   2 +-
 meta/recipes-core/glibc/glibc_2.31.bb         |   1 +
 .../systemd/systemd/CVE-2021-3997-1.patch     |  65 ++++
 .../systemd/systemd/CVE-2021-3997-2.patch     | 101 ++++++
 .../systemd/systemd/CVE-2021-3997-3.patch     | 266 +++++++++++++++
 ...-fsync-after-removing-directory-tree.patch |  35 ++
 ...children-split-out-body-of-directory.patch | 318 ++++++++++++++++++
 meta/recipes-core/systemd/systemd_244.5.bb    |   5 +
 .../util-linux/util-linux/CVE-2021-3995.patch | 139 ++++++++
 .../util-linux/util-linux/CVE-2021-3996.patch | 226 +++++++++++++
 ...ude-strutils-cleanup-strto-functions.patch | 270 +++++++++++++++
 .../util-linux/util-linux_2.35.1.bb           |   3 +
 .../binutils/binutils-2.34.inc                |   1 +
 ...in-the-variable-table-used-when-reso.patch |  32 ++
 meta/recipes-devtools/e2fsprogs/e2fsprogs.inc |   2 +-
 .../ghostscript/CVE-2021-45949.patch          |  65 ++++
 ...tack-limits-after-function-evalution.patch |  51 +++
 .../ghostscript/ghostscript_9.52.bb           |   2 +
 meta/recipes-extended/lsof/lsof_4.91.bb       |   2 +-
 .../shadow/shadow-sysroot_4.6.bb              |   2 +-
 meta/recipes-extended/shadow/shadow.inc       |   2 +-
 meta/recipes-extended/timezone/timezone.inc   |   2 +-
 .../linux-firmware/linux-firmware_20211216.bb |   1 +
 meta/recipes-support/libcap/libcap_2.32.bb    |   2 +-
 meta/recipes-support/libusb/libusb1_1.0.22.bb |   4 +-
 34 files changed, 1863 insertions(+), 15 deletions(-)
 create mode 100644 meta/files/common-licenses/Spencer-94
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25632.patch
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25647.patch
 create mode 100644 meta/recipes-core/expat/expat/CVE-2022-23852.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-1.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-2.patch
 create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-3.patch
 create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-optionally-fsync-after-removing-directory-tree.patch
 create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3995.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3996.patch
 create mode 100644 meta/recipes-core/util-linux/util-linux/include-strutils-cleanup-strto-functions.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0018-Include-members-in-the-variable-table-used-when-reso.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2021-45949.patch
 create mode 100644 meta/recipes-extended/ghostscript/ghostscript/check-stack-limits-after-function-evalution.patch

Comments

Ranjitsinh Rathod Feb. 16, 2022, 7:34 a.m. UTC | #1
May I know by when this will be available on dunfell branch?

Thanks,
Ranjitsinh

On Tue, 15 Feb, 2022, 10:59 pm Steve Sakoman, <steve@sakoman.com> wrote:

> The following changes since commit
> f3be01483b01c88f8c4ba24ca73ccf1bcc33665c:
>
>   build-appliance-image: Update to dunfell head revision (2022-01-27
> 16:16:08 +0000)
>
> are available in the Git repository at:
>
>   git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next
>
> http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next
>
> Alexander Kanavin (1):
>   libusb1: correct SRC_URI
>
> Joshua Watt (5):
>   tzdata: Remove BSD License specifier
>   e2fsprogs: Use specific BSD license variant
>   glib-2.0: Use specific BSD license variant
>   shadow: Use specific BSD license variant
>   libcap: Use specific BSD license variant
>
> Marek Vasut (1):
>   binutils: Backport Include members in the variable table used when
>     resolving DW_AT_specification tags.
>
> Marta Rybczynska (2):
>   grub: add a fix for CVE-2020-25632
>   grub: add a fix for CVE-2020-25647
>
> Minjae Kim (1):
>   ghostscript: fix CVE-2021-45949
>
> Peter Kjellerstedt (1):
>   sstate: A third fix for for touching files inside pseudo
>
> Purushottam Choudhary (1):
>   systemd: Fix CVE-2021-3997
>
> Ranjitsinh Rathod (1):
>   util-linux: Fix for CVE-2021-3995 and CVE-2021-3996
>
> Ross Burton (2):
>   lsof: correct LICENSE
>   shadow-sysroot: sync license with shadow
>
> Rudolf J Streif (1):
>   linux-firmware: Add CLM blob to linux-firmware-bcm4373 package
>
> Steve Sakoman (4):
>   glibc: update to lastest 2.31 release HEAD
>   expat: fix CVE-2022-23852
>   expat: add missing Upstream-status, CVE tag and sign-off to
>     CVE-2021-46143.patch
>   common-licenses: add Spencer-94
>
>  meta/classes/sstate.bbclass                   |  14 +-
>  meta/files/common-licenses/Spencer-94         |  12 +
>  .../grub/files/CVE-2020-25632.patch           |  90 +++++
>  .../grub/files/CVE-2020-25647.patch           | 119 +++++++
>  meta/recipes-bsp/grub/grub2.inc               |   2 +
>  .../expat/expat/CVE-2021-46143.patch          |   6 +
>  .../expat/expat/CVE-2022-23852.patch          |  33 ++
>  meta/recipes-core/expat/expat_2.2.9.bb        |   1 +
>  meta/recipes-core/glib-2.0/glib.inc           |   2 +-
>  meta/recipes-core/glibc/glibc-version.inc     |   2 +-
>  meta/recipes-core/glibc/glibc_2.31.bb         |   1 +
>  .../systemd/systemd/CVE-2021-3997-1.patch     |  65 ++++
>  .../systemd/systemd/CVE-2021-3997-2.patch     | 101 ++++++
>  .../systemd/systemd/CVE-2021-3997-3.patch     | 266 +++++++++++++++
>  ...-fsync-after-removing-directory-tree.patch |  35 ++
>  ...children-split-out-body-of-directory.patch | 318 ++++++++++++++++++
>  meta/recipes-core/systemd/systemd_244.5.bb    |   5 +
>  .../util-linux/util-linux/CVE-2021-3995.patch | 139 ++++++++
>  .../util-linux/util-linux/CVE-2021-3996.patch | 226 +++++++++++++
>  ...ude-strutils-cleanup-strto-functions.patch | 270 +++++++++++++++
>  .../util-linux/util-linux_2.35.1.bb           |   3 +
>  .../binutils/binutils-2.34.inc                |   1 +
>  ...in-the-variable-table-used-when-reso.patch |  32 ++
>  meta/recipes-devtools/e2fsprogs/e2fsprogs.inc |   2 +-
>  .../ghostscript/CVE-2021-45949.patch          |  65 ++++
>  ...tack-limits-after-function-evalution.patch |  51 +++
>  .../ghostscript/ghostscript_9.52.bb           |   2 +
>  meta/recipes-extended/lsof/lsof_4.91.bb       |   2 +-
>  .../shadow/shadow-sysroot_4.6.bb              |   2 +-
>  meta/recipes-extended/shadow/shadow.inc       |   2 +-
>  meta/recipes-extended/timezone/timezone.inc   |   2 +-
>  .../linux-firmware/linux-firmware_20211216.bb |   1 +
>  meta/recipes-support/libcap/libcap_2.32.bb    |   2 +-
>  meta/recipes-support/libusb/libusb1_1.0.22.bb |   4 +-
>  34 files changed, 1863 insertions(+), 15 deletions(-)
>  create mode 100644 meta/files/common-licenses/Spencer-94
>  create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25632.patch
>  create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25647.patch
>  create mode 100644 meta/recipes-core/expat/expat/CVE-2022-23852.patch
>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-1.patch
>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-2.patch
>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-3.patch
>  create mode 100644
> meta/recipes-core/systemd/systemd/rm-rf-optionally-fsync-after-removing-directory-tree.patch
>  create mode 100644
> meta/recipes-core/systemd/systemd/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch
>  create mode 100644
> meta/recipes-core/util-linux/util-linux/CVE-2021-3995.patch
>  create mode 100644
> meta/recipes-core/util-linux/util-linux/CVE-2021-3996.patch
>  create mode 100644
> meta/recipes-core/util-linux/util-linux/include-strutils-cleanup-strto-functions.patch
>  create mode 100644
> meta/recipes-devtools/binutils/binutils/0018-Include-members-in-the-variable-table-used-when-reso.patch
>  create mode 100644
> meta/recipes-extended/ghostscript/ghostscript/CVE-2021-45949.patch
>  create mode 100644
> meta/recipes-extended/ghostscript/ghostscript/check-stack-limits-after-function-evalution.patch
>
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#161757):
> https://lists.openembedded.org/g/openembedded-core/message/161757
> Mute This Topic: https://lists.openembedded.org/mt/89166126/6360406
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> ranjitsinhrathod1991@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>
Steve Sakoman Feb. 16, 2022, 2:26 p.m. UTC | #2
On Tue, Feb 15, 2022 at 9:34 PM Ranjitsinh Rathod
<ranjitsinhrathod1991@gmail.com> wrote:
>
> May I know by when this will be available on dunfell branch?

It should be available now!

Steve

> On Tue, 15 Feb, 2022, 10:59 pm Steve Sakoman, <steve@sakoman.com> wrote:
>>
>> The following changes since commit f3be01483b01c88f8c4ba24ca73ccf1bcc33665c:
>>
>>   build-appliance-image: Update to dunfell head revision (2022-01-27 16:16:08 +0000)
>>
>> are available in the Git repository at:
>>
>>   git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next
>>   http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next
>>
>> Alexander Kanavin (1):
>>   libusb1: correct SRC_URI
>>
>> Joshua Watt (5):
>>   tzdata: Remove BSD License specifier
>>   e2fsprogs: Use specific BSD license variant
>>   glib-2.0: Use specific BSD license variant
>>   shadow: Use specific BSD license variant
>>   libcap: Use specific BSD license variant
>>
>> Marek Vasut (1):
>>   binutils: Backport Include members in the variable table used when
>>     resolving DW_AT_specification tags.
>>
>> Marta Rybczynska (2):
>>   grub: add a fix for CVE-2020-25632
>>   grub: add a fix for CVE-2020-25647
>>
>> Minjae Kim (1):
>>   ghostscript: fix CVE-2021-45949
>>
>> Peter Kjellerstedt (1):
>>   sstate: A third fix for for touching files inside pseudo
>>
>> Purushottam Choudhary (1):
>>   systemd: Fix CVE-2021-3997
>>
>> Ranjitsinh Rathod (1):
>>   util-linux: Fix for CVE-2021-3995 and CVE-2021-3996
>>
>> Ross Burton (2):
>>   lsof: correct LICENSE
>>   shadow-sysroot: sync license with shadow
>>
>> Rudolf J Streif (1):
>>   linux-firmware: Add CLM blob to linux-firmware-bcm4373 package
>>
>> Steve Sakoman (4):
>>   glibc: update to lastest 2.31 release HEAD
>>   expat: fix CVE-2022-23852
>>   expat: add missing Upstream-status, CVE tag and sign-off to
>>     CVE-2021-46143.patch
>>   common-licenses: add Spencer-94
>>
>>  meta/classes/sstate.bbclass                   |  14 +-
>>  meta/files/common-licenses/Spencer-94         |  12 +
>>  .../grub/files/CVE-2020-25632.patch           |  90 +++++
>>  .../grub/files/CVE-2020-25647.patch           | 119 +++++++
>>  meta/recipes-bsp/grub/grub2.inc               |   2 +
>>  .../expat/expat/CVE-2021-46143.patch          |   6 +
>>  .../expat/expat/CVE-2022-23852.patch          |  33 ++
>>  meta/recipes-core/expat/expat_2.2.9.bb        |   1 +
>>  meta/recipes-core/glib-2.0/glib.inc           |   2 +-
>>  meta/recipes-core/glibc/glibc-version.inc     |   2 +-
>>  meta/recipes-core/glibc/glibc_2.31.bb         |   1 +
>>  .../systemd/systemd/CVE-2021-3997-1.patch     |  65 ++++
>>  .../systemd/systemd/CVE-2021-3997-2.patch     | 101 ++++++
>>  .../systemd/systemd/CVE-2021-3997-3.patch     | 266 +++++++++++++++
>>  ...-fsync-after-removing-directory-tree.patch |  35 ++
>>  ...children-split-out-body-of-directory.patch | 318 ++++++++++++++++++
>>  meta/recipes-core/systemd/systemd_244.5.bb    |   5 +
>>  .../util-linux/util-linux/CVE-2021-3995.patch | 139 ++++++++
>>  .../util-linux/util-linux/CVE-2021-3996.patch | 226 +++++++++++++
>>  ...ude-strutils-cleanup-strto-functions.patch | 270 +++++++++++++++
>>  .../util-linux/util-linux_2.35.1.bb           |   3 +
>>  .../binutils/binutils-2.34.inc                |   1 +
>>  ...in-the-variable-table-used-when-reso.patch |  32 ++
>>  meta/recipes-devtools/e2fsprogs/e2fsprogs.inc |   2 +-
>>  .../ghostscript/CVE-2021-45949.patch          |  65 ++++
>>  ...tack-limits-after-function-evalution.patch |  51 +++
>>  .../ghostscript/ghostscript_9.52.bb           |   2 +
>>  meta/recipes-extended/lsof/lsof_4.91.bb       |   2 +-
>>  .../shadow/shadow-sysroot_4.6.bb              |   2 +-
>>  meta/recipes-extended/shadow/shadow.inc       |   2 +-
>>  meta/recipes-extended/timezone/timezone.inc   |   2 +-
>>  .../linux-firmware/linux-firmware_20211216.bb |   1 +
>>  meta/recipes-support/libcap/libcap_2.32.bb    |   2 +-
>>  meta/recipes-support/libusb/libusb1_1.0.22.bb |   4 +-
>>  34 files changed, 1863 insertions(+), 15 deletions(-)
>>  create mode 100644 meta/files/common-licenses/Spencer-94
>>  create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25632.patch
>>  create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25647.patch
>>  create mode 100644 meta/recipes-core/expat/expat/CVE-2022-23852.patch
>>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-1.patch
>>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-2.patch
>>  create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-3.patch
>>  create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-optionally-fsync-after-removing-directory-tree.patch
>>  create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch
>>  create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3995.patch
>>  create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3996.patch
>>  create mode 100644 meta/recipes-core/util-linux/util-linux/include-strutils-cleanup-strto-functions.patch
>>  create mode 100644 meta/recipes-devtools/binutils/binutils/0018-Include-members-in-the-variable-table-used-when-reso.patch
>>  create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2021-45949.patch
>>  create mode 100644 meta/recipes-extended/ghostscript/ghostscript/check-stack-limits-after-function-evalution.patch
>>
>> --
>> 2.25.1
>>
>>
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#161757): https://lists.openembedded.org/g/openembedded-core/message/161757
>> Mute This Topic: https://lists.openembedded.org/mt/89166126/6360406
>> Group Owner: openembedded-core+owner@lists.openembedded.org
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ranjitsinhrathod1991@gmail.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>>