From cdd7ca2947fdc2ae4c880beec59b44535982ce0a Mon Sep 17 00:00:00 2001 From: Ricardo Salveti Date: Wed, 29 May 2024 20:02:20 -0300 Subject: [PATCH 1/4] lmp-base: update meta-openembedded layer Relevant changes: - 0560b8489 ITS#10094 libldap/OpenSSL: fix setting ciphersuites - 3a08bebf4 nss: Backport fix CVE-2023-0767 - b93ba321e uriparser: upgrade 0.9.6 -> 0.9.8 - d02d0149c mbedtls: upgrade 2.28.7->2.28.8 - 5085c443d php: upgrade 8.1.22 -> 8.1.28 - 31d0f0267 libssh: Fix CVE CVE-2023-6004 - 9c9224811 nss: patch CVE-2024-0743 - 8c7363cd3 nss: patch CVE-2023-5388 - 6952dfc09 libeigen: Update GPL-3.0-only to GPL-2.0-only - 85102dd2d nginx: fix CVE-2023-44487 - 70b217ecc python3-pyyaml-include: Drop pytest --automake Signed-off-by: Ricardo Salveti --- lmp-base.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lmp-base.xml b/lmp-base.xml index aa61f8b8..fcd95d69 100644 --- a/lmp-base.xml +++ b/lmp-base.xml @@ -11,7 +11,7 @@ - + From 457038dd4d9ea8e179bbdad51a5cb89bdded27b2 Mon Sep 17 00:00:00 2001 From: Ricardo Salveti Date: Wed, 29 May 2024 20:06:00 -0300 Subject: [PATCH 2/4] lmp-base: update openembedded-core layer Relevant changes: - e0a1ed7aa1 initscripts: Add custom mount args for /var/lib - 9e3a2e143e systemd-systemctl: Fix WantedBy processing - c850931590 classes: go-mod: do not pack go mod cache - b611c77e48 go.bbclass: fix path to linker in native Go builds - 69128ca669 go: Always pass interpreter to linker - d91af23e4f binutils: Rename CVE-2022-38126 patch to CVE-2022-35205 - 601b81350c openssl: patch CVE-2024-4603 - 1ee5ba41ca libarchive: fix CVE-2024-26256 - f85d5dfc91 libpciaccess: Remove duplicated license entry - 10b57ae56e glibc: Update to latest on stable 2.35 branch - ce2d6ba5d6 gstreamer1.0-plugins-bad: fix CVE-2023-50186 - adaebd54ea bluez5: Fix CVE-2023-27349 CVE-2023-50229 & CVE-2023-50230 - cc2d927520 xserver-xorg: fix CVE-2024-31083 - 32fc43f0c3 xserver-xorg: fix CVE-2024-31082 - 24fd9b6756 ppp: Add RSA-MD in LICENSE - 3743a82162 libarchive: fix multiple security vulnerabilities in pax writer - 4e4681b26e kernel.bbclass: check, if directory exists before removing empty module directory - dcbca1aedd linux-yocto/5.15: cfg: remove obselete CONFIG_NFSD_V3 option - 22c349296e linux-yocto/5.15: update CVE exclusions (5.15.157) - 9c5ac29187 linux-yocto/5.15: update to v5.15.157 - 239e0631d9 linux-yocto/5.15: update CVE exclusions (5.15.156) - 3b229158f1 linux-yocto/5.15: update to v5.15.156 - 286d5418b4 linux-yocto/5.15: update CVE exclusions (5.15.155) - d34a2df7a7 linux-yocto/5.15: update to v5.15.155 - 2a4c110a9c linux-yocto/5.15: update CVE exclusions (5.15.153) - 611cec2700 linux-yocto/5.15: update to v5.15.153 - a3a17801a9 linux-yocto/5.15: update CVE exclusions (5.15.152) - 4545591ac3 linux-yocto/5.15: update to v5.15.152 - a77933a5a6 linux-yocto/5.15: update CVE exclusions (5.15.151) - 32f2aba4c4 linux-yocto/5.15: update to v5.15.151 - e0b77aa347 python3: Upgrade 3.10.13 -> 3.10.14 - 1456b30996 less: backport Debian patch for CVE-2024-32487 - 60b34c3435 ncurses: Fix CVE-2023-45918 - ebe4a21911 gstreamer1.0-plugins-bad: fix CVE-2023-44446 - e261dfd6e5 gstreamer1.0-plugins-bad: fix CVE-2024-0444 - 996c03dfb5 ofono: fix CVE-2023-4233 - 51cf006ac7 ofono: fix CVE-2023-4234 Signed-off-by: Ricardo Salveti --- lmp-base.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lmp-base.xml b/lmp-base.xml index fcd95d69..8b976048 100644 --- a/lmp-base.xml +++ b/lmp-base.xml @@ -17,5 +17,5 @@ - + From 86d5f5645464f0a9fd49ea6f40c3c6219d6d16df Mon Sep 17 00:00:00 2001 From: Ricardo Salveti Date: Thu, 30 May 2024 13:27:56 -0300 Subject: [PATCH 3/4] lmp-base: update meta-lts-mixins-go layer Relevant changes: - 46a67b9 go: upgrade 1.22.2 -> 1.22.3 Signed-off-by: Ricardo Salveti --- lmp-base.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lmp-base.xml b/lmp-base.xml index 8b976048..5df05004 100644 --- a/lmp-base.xml +++ b/lmp-base.xml @@ -12,7 +12,7 @@ - + From a4832783ddb700cff6af69735a62ca6ec43ed602 Mon Sep 17 00:00:00 2001 From: Ricardo Salveti Date: Thu, 30 May 2024 13:26:24 -0300 Subject: [PATCH 4/4] lmp-base: update meta-lmp layer Relevant changes: - eaf2c05ff bsp: fru-print: move upstream branch to main - cb987dee3 base: docker-compose: adapt to oe-core 328bea56 backport - 9e90c2397 base: optee-os-fio: 3.21.0: update to 9048d3d28 - f26d61830 base: optee-os-fio: switch tree to codelinaro - aa65df9b4 base: rc: composeapp: Bump version to 3787eda - cf35c0158 base: rs: Bump aklite version to c1e78acc Signed-off-by: Ricardo Salveti --- lmp-base.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lmp-base.xml b/lmp-base.xml index 5df05004..25890ae9 100644 --- a/lmp-base.xml +++ b/lmp-base.xml @@ -9,7 +9,7 @@ - +