Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

stable kirk updates #439

Merged
merged 4 commits into from
May 30, 2024
Merged

stable kirk updates #439

merged 4 commits into from
May 30, 2024

Conversation

ricardosalveti
Copy link
Member

No description provided.

Relevant changes:
- 0560b8489 ITS#10094 libldap/OpenSSL: fix setting ciphersuites
- 3a08bebf4 nss: Backport fix CVE-2023-0767
- b93ba321e uriparser: upgrade 0.9.6 -> 0.9.8
- d02d0149c mbedtls: upgrade 2.28.7->2.28.8
- 5085c443d php: upgrade 8.1.22 -> 8.1.28
- 31d0f0267 libssh: Fix CVE CVE-2023-6004
- 9c9224811 nss: patch CVE-2024-0743
- 8c7363cd3 nss: patch CVE-2023-5388
- 6952dfc09 libeigen: Update GPL-3.0-only to GPL-2.0-only
- 85102dd2d nginx: fix CVE-2023-44487
- 70b217ecc python3-pyyaml-include: Drop pytest --automake

Signed-off-by: Ricardo Salveti <[email protected]>
Relevant changes:
- e0a1ed7aa1 initscripts: Add custom mount args for /var/lib
- 9e3a2e143e systemd-systemctl: Fix WantedBy processing
- c850931590 classes: go-mod: do not pack go mod cache
- b611c77e48 go.bbclass: fix path to linker in native Go builds
- 69128ca669 go: Always pass interpreter to linker
- d91af23e4f binutils: Rename CVE-2022-38126 patch to CVE-2022-35205
- 601b81350c openssl: patch CVE-2024-4603
- 1ee5ba41ca libarchive: fix CVE-2024-26256
- f85d5dfc91 libpciaccess: Remove duplicated license entry
- 10b57ae56e glibc: Update to latest on stable 2.35 branch
- ce2d6ba5d6 gstreamer1.0-plugins-bad: fix CVE-2023-50186
- adaebd54ea bluez5: Fix CVE-2023-27349 CVE-2023-50229 & CVE-2023-50230
- cc2d927520 xserver-xorg: fix CVE-2024-31083
- 32fc43f0c3 xserver-xorg: fix CVE-2024-31082
- 24fd9b6756 ppp: Add RSA-MD in LICENSE
- 3743a82162 libarchive: fix multiple security vulnerabilities in pax writer
- 4e4681b26e kernel.bbclass: check, if directory exists before removing empty module directory
- dcbca1aedd linux-yocto/5.15: cfg: remove obselete CONFIG_NFSD_V3 option
- 22c349296e linux-yocto/5.15: update CVE exclusions (5.15.157)
- 9c5ac29187 linux-yocto/5.15: update to v5.15.157
- 239e0631d9 linux-yocto/5.15: update CVE exclusions (5.15.156)
- 3b229158f1 linux-yocto/5.15: update to v5.15.156
- 286d5418b4 linux-yocto/5.15: update CVE exclusions (5.15.155)
- d34a2df7a7 linux-yocto/5.15: update to v5.15.155
- 2a4c110a9c linux-yocto/5.15: update CVE exclusions (5.15.153)
- 611cec2700 linux-yocto/5.15: update to v5.15.153
- a3a17801a9 linux-yocto/5.15: update CVE exclusions (5.15.152)
- 4545591ac3 linux-yocto/5.15: update to v5.15.152
- a77933a5a6 linux-yocto/5.15: update CVE exclusions (5.15.151)
- 32f2aba4c4 linux-yocto/5.15: update to v5.15.151
- e0b77aa347 python3: Upgrade 3.10.13 -> 3.10.14
- 1456b30996 less: backport Debian patch for CVE-2024-32487
- 60b34c3435 ncurses: Fix CVE-2023-45918
- ebe4a21911 gstreamer1.0-plugins-bad: fix CVE-2023-44446
- e261dfd6e5 gstreamer1.0-plugins-bad: fix CVE-2024-0444
- 996c03dfb5 ofono: fix CVE-2023-4233
- 51cf006ac7 ofono: fix CVE-2023-4234

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti ricardosalveti requested a review from a team May 29, 2024 23:09
@ricardosalveti ricardosalveti added the ok-to-test Requires OK for testing to proceed label May 29, 2024
@quaresmajose
Copy link
Member

I have a fix for this foundriesio/meta-lmp#1456

@quaresmajose
Copy link
Member

we can also update the go mixin layer to get the 1.22.3

Relevant changes:
- 46a67b9 go: upgrade 1.22.2 -> 1.22.3

Signed-off-by: Ricardo Salveti <[email protected]>
Relevant changes:
- eaf2c05ff bsp: fru-print: move upstream branch to main
- cb987dee3 base: docker-compose: adapt to oe-core 328bea56 backport
- 9e90c2397 base: optee-os-fio: 3.21.0: update to 9048d3d28
- f26d61830 base: optee-os-fio: switch tree to codelinaro
- aa65df9b4 base: rc: composeapp: Bump version to 3787eda
- cf35c0158 base: rs: Bump aklite version to c1e78acc

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti
Copy link
Member Author

All good now.

@ricardosalveti ricardosalveti merged commit 95f4c58 into foundriesio:main May 30, 2024
54 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ok-to-test Requires OK for testing to proceed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants