Please review this set of patches for dunfell and have comments back by end of day Wednesday.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4950 The following changes since commit daaee6fcb0d201f041678af433d8e1cd6f924d09: build-appliance-image: Update to dunfell head revision (2023-02-13 07:48:21 +0000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Alexander Kanavin (1): oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with a signal Antonin Godard (2): busybox: always start do_compile with orig config files busybox: rm temporary files if do_compile was interrupted Hitendra Prajapati (1): git: CVE-2022-23521 gitattributes parsing integer overflow Martin Jansa (1): meta: remove True option to getVar and getVarFlag calls (again) Mikko Rapeli (1): oeqa context.py: fix --target-ip comment to include ssh port number Omkar Patil (1): sudo: Fix CVE-2023-22809 Pawel Zalewski (1): classes/fs-uuid: Fix command output decoding issue Richard Purdie (3): nativesdk: Handle chown/chgrp calls in nativesdk do_install tasks make-mod-scripts: Ensure kernel build output is deterministic libc-locale: Fix on target locale generation Ross Burton (3): quilt: fix intermittent failure in faildiff.test quilt: use upstreamed faildiff.test fix git: ignore CVE-2022-41953 Steve Sakoman (1): qemu: Fix slirp determinism issue Vivek Kumbhar (1): qemu: fix CVE-2021-3929 nvme DMA reentrancy issue leads to use-after-free meta/classes/fs-uuid.bbclass | 2 +- meta/classes/image.bbclass | 2 +- meta/classes/libc-package.bbclass | 1 + meta/classes/license_image.bbclass | 2 +- meta/classes/nativesdk.bbclass | 2 + meta/lib/oeqa/runtime/context.py | 4 +- meta/lib/oeqa/utils/qemurunner.py | 11 +- meta/recipes-core/busybox/busybox.inc | 27 +- .../git/files/CVE-2022-23521.patch | 367 ++++++++++++++++++ meta/recipes-devtools/git/git.inc | 4 +- meta/recipes-devtools/go/go_1.14.bb | 4 +- .../qemu/qemu-system-native_4.2.0.bb | 2 +- meta/recipes-devtools/qemu/qemu.inc | 3 + .../qemu/qemu/CVE-2021-3929.patch | 78 ++++ meta/recipes-devtools/qemu/qemu_4.2.0.bb | 4 +- meta/recipes-devtools/quilt/quilt.inc | 1 + .../quilt/quilt/faildiff-order.patch | 41 ++ .../sudo/files/CVE-2023-22809.patch | 113 ++++++ meta/recipes-extended/sudo/sudo_1.8.32.bb | 1 + .../make-mod-scripts/make-mod-scripts_1.0.bb | 2 +- scripts/lib/devtool/menuconfig.py | 2 +- scripts/nativesdk-intercept/chgrp | 27 ++ scripts/nativesdk-intercept/chown | 27 ++ 23 files changed, 702 insertions(+), 25 deletions(-) create mode 100644 meta/recipes-devtools/git/files/CVE-2022-23521.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3929.patch create mode 100644 meta/recipes-devtools/quilt/quilt/faildiff-order.patch create mode 100644 meta/recipes-extended/sudo/files/CVE-2023-22809.patch create mode 100755 scripts/nativesdk-intercept/chgrp create mode 100755 scripts/nativesdk-intercept/chown -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#177460): https://lists.openembedded.org/g/openembedded-core/message/177460 Mute This Topic: https://lists.openembedded.org/mt/97097210/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-