Skip to content

stable kirk updates#439

Merged
ricardosalveti merged 4 commits intofoundriesio:mainfrom
ricardosalveti:main
May 30, 2024
Merged

stable kirk updates#439
ricardosalveti merged 4 commits intofoundriesio:mainfrom
ricardosalveti:main

Conversation

@ricardosalveti
Copy link
Copy Markdown
Member

No description provided.

Relevant changes:
- 0560b8489 ITS#10094 libldap/OpenSSL: fix setting ciphersuites
- 3a08bebf4 nss: Backport fix CVE-2023-0767
- b93ba321e uriparser: upgrade 0.9.6 -> 0.9.8
- d02d0149c mbedtls: upgrade 2.28.7->2.28.8
- 5085c443d php: upgrade 8.1.22 -> 8.1.28
- 31d0f0267 libssh: Fix CVE CVE-2023-6004
- 9c9224811 nss: patch CVE-2024-0743
- 8c7363cd3 nss: patch CVE-2023-5388
- 6952dfc09 libeigen: Update GPL-3.0-only to GPL-2.0-only
- 85102dd2d nginx: fix CVE-2023-44487
- 70b217ecc python3-pyyaml-include: Drop pytest --automake

Signed-off-by: Ricardo Salveti <[email protected]>
Relevant changes:
- e0a1ed7aa1 initscripts: Add custom mount args for /var/lib
- 9e3a2e143e systemd-systemctl: Fix WantedBy processing
- c850931590 classes: go-mod: do not pack go mod cache
- b611c77e48 go.bbclass: fix path to linker in native Go builds
- 69128ca669 go: Always pass interpreter to linker
- d91af23e4f binutils: Rename CVE-2022-38126 patch to CVE-2022-35205
- 601b81350c openssl: patch CVE-2024-4603
- 1ee5ba41ca libarchive: fix CVE-2024-26256
- f85d5dfc91 libpciaccess: Remove duplicated license entry
- 10b57ae56e glibc: Update to latest on stable 2.35 branch
- ce2d6ba5d6 gstreamer1.0-plugins-bad: fix CVE-2023-50186
- adaebd54ea bluez5: Fix CVE-2023-27349 CVE-2023-50229 & CVE-2023-50230
- cc2d927520 xserver-xorg: fix CVE-2024-31083
- 32fc43f0c3 xserver-xorg: fix CVE-2024-31082
- 24fd9b6756 ppp: Add RSA-MD in LICENSE
- 3743a82162 libarchive: fix multiple security vulnerabilities in pax writer
- 4e4681b26e kernel.bbclass: check, if directory exists before removing empty module directory
- dcbca1aedd linux-yocto/5.15: cfg: remove obselete CONFIG_NFSD_V3 option
- 22c349296e linux-yocto/5.15: update CVE exclusions (5.15.157)
- 9c5ac29187 linux-yocto/5.15: update to v5.15.157
- 239e0631d9 linux-yocto/5.15: update CVE exclusions (5.15.156)
- 3b229158f1 linux-yocto/5.15: update to v5.15.156
- 286d5418b4 linux-yocto/5.15: update CVE exclusions (5.15.155)
- d34a2df7a7 linux-yocto/5.15: update to v5.15.155
- 2a4c110a9c linux-yocto/5.15: update CVE exclusions (5.15.153)
- 611cec2700 linux-yocto/5.15: update to v5.15.153
- a3a17801a9 linux-yocto/5.15: update CVE exclusions (5.15.152)
- 4545591ac3 linux-yocto/5.15: update to v5.15.152
- a77933a5a6 linux-yocto/5.15: update CVE exclusions (5.15.151)
- 32f2aba4c4 linux-yocto/5.15: update to v5.15.151
- e0b77aa347 python3: Upgrade 3.10.13 -> 3.10.14
- 1456b30996 less: backport Debian patch for CVE-2024-32487
- 60b34c3435 ncurses: Fix CVE-2023-45918
- ebe4a21911 gstreamer1.0-plugins-bad: fix CVE-2023-44446
- e261dfd6e5 gstreamer1.0-plugins-bad: fix CVE-2024-0444
- 996c03dfb5 ofono: fix CVE-2023-4233
- 51cf006ac7 ofono: fix CVE-2023-4234

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti ricardosalveti requested a review from a team May 29, 2024 23:09
@ricardosalveti ricardosalveti added the ok-to-test Requires OK for testing to proceed label May 29, 2024
@quaresmajose
Copy link
Copy Markdown
Member

I have a fix for this foundriesio/meta-lmp#1456

@quaresmajose
Copy link
Copy Markdown
Member

we can also update the go mixin layer to get the 1.22.3

Relevant changes:
- 46a67b9 go: upgrade 1.22.2 -> 1.22.3

Signed-off-by: Ricardo Salveti <[email protected]>
Relevant changes:
- eaf2c05ff bsp: fru-print: move upstream branch to main
- cb987dee3 base: docker-compose: adapt to oe-core 328bea56 backport
- 9e90c2397 base: optee-os-fio: 3.21.0: update to 9048d3d28
- f26d61830 base: optee-os-fio: switch tree to codelinaro
- aa65df9b4 base: rc: composeapp: Bump version to 3787eda
- cf35c0158 base: rs: Bump aklite version to c1e78acc

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti
Copy link
Copy Markdown
Member Author

All good now.

@ricardosalveti ricardosalveti merged commit 95f4c58 into foundriesio:main May 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Requires OK for testing to proceed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants