[oe] [PATCH 2/2] audit: Add linux_audit to CVE_PRODUCT

2024-07-16 Thread Matsunaga-Shinji via lists.openembedded.org
linux_audit is also a valid CVE_PRODUCT for audit, e.g., https://nvd.nist.gov/vuln/detail/CVE-2015-5186. Signed-off-by: Shinji Matsunaga Signed-off-by: Shunsuke Tokumoto --- meta-oe/recipes-security/audit/audit_4.0.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe

[oe] [PATCH 1/2] audit: Fix CVE_PRODUCT

2024-07-16 Thread Matsunaga-Shinji via lists.openembedded.org
Fix "audit" set in CVE_PRODUCT to "linux:audit" to detect only vulnerabilities where the vendor is "linux". Currently, CVE_PRODUCT also detects vulnerabilities where the vendor is "visionsoft", which are unrelated to the "audit" in this recipe. https://www.opencve.io/cve?vendor=visionsoft&produc

Re: [oe] [meta-oe][RFC PATCH] include-what-you-use: new recipe

2024-07-16 Thread Khem Raj
On Tue, Jul 16, 2024 at 7:57 AM Christian Eggers wrote: > > Hi Khem, > > > On Tuesday, 16 July 2024, 15:45:54 CEST, Khem Raj wrote: > > On Tue, Jul 16, 2024 at 1:08 AM Christian Eggers wrote: > > > > > On Monday, 15 July 2024, 16:18:14 CEST, Khem Raj wrote: > > > > On Mon, Jul 15, 2024 at 5:18 AM

Re: [oe] [meta-oe][RFC PATCH] include-what-you-use: new recipe

2024-07-16 Thread Christian Eggers
Hi Khem, On Tuesday, 16 July 2024, 15:45:54 CEST, Khem Raj wrote: > On Tue, Jul 16, 2024 at 1:08 AM Christian Eggers wrote: > > > On Monday, 15 July 2024, 16:18:14 CEST, Khem Raj wrote: > > > On Mon, Jul 15, 2024 at 5:18 AM Christian Eggers via > > lists.openembedded.org > > > wrote: > > > > >

Re: [oe] [meta-oe][RFC PATCH] include-what-you-use: new recipe

2024-07-16 Thread Khem Raj
On Tue, Jul 16, 2024 at 1:08 AM Christian Eggers wrote: > On Monday, 15 July 2024, 16:18:14 CEST, Khem Raj wrote: > > On Mon, Jul 15, 2024 at 5:18 AM Christian Eggers via > lists.openembedded.org > > wrote: > > > > > Based on proposal send previously here: > > > https://lists.yoctoproject.org/g/

[oe] [meta-oe][PATCH] vbxguestdrivers: upgrade 7.0.18 -> 7.0.20

2024-07-16 Thread Gianfranco
Signed-off-by: Gianfranco Costamagna Signed-off-by: Gianfranco Costamagna --- .../{vboxguestdrivers_7.0.18.bb => vboxguestdrivers_7.0.20.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/vboxguestdrivers/{vboxguestdrivers_7.0.18.bb => vboxguestdrivers_7.

[oe] [meta-oe][PATCH] nss: update 3.101 > 3.102

2024-07-16 Thread Markus Volk
Signed-off-by: Markus Volk --- meta-oe/recipes-support/nss/{nss_3.101.bb => nss_3.102.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/nss/{nss_3.101.bb => nss_3.102.bb} (99%) diff --git a/meta-oe/recipes-support/nss/nss_3.101.bb b/meta-oe/recipes-suppor

[oe][meta-webserver][PATCH 1/1] apache2: Upgrade 2.4.60 -> 2.4.61

2024-07-16 Thread Polampalli, Archana via lists.openembedded.org
From: Archana Polampalli Security fixes: CVE-2024-39884 Apache HTTP Server: source code disclosure with handlers configured via AddType Changelog: https://github.com/apache/httpd/blob/2.4.61/CHANGES https://httpd.apache.org/security/vulnerabilities_24.html Signed-off-by: Archana Polampalli --

[oe] [meta-gnome][PATCH] geary: update 44.1 -> 46.0

2024-07-16 Thread Markus Volk
- Remove 0001-meson-Use-PKG_CONFIG_SYSROOT_DIR-when-using-pkg-conf.patch Using it pulls buildpath into the client library and thus breaks reproducibility - Add a patch to fix more reproducibility issues - Add soup3 dependency - inherit gsettings - remove CFLAGS:append, tested to be working with

Re: [oe] [meta-oe][RFC PATCH] include-what-you-use: new recipe

2024-07-16 Thread Christian Eggers
On Monday, 15 July 2024, 16:18:14 CEST, Khem Raj wrote: > On Mon, Jul 15, 2024 at 5:18 AM Christian Eggers via lists.openembedded.org > wrote: > > > Based on proposal send previously here: > > https://lists.yoctoproject.org/g/yocto/topic/recipe_for/83279588 > > > > This recipe depends on meta-cla

[oe] [meta-oe][scarthgap][PATCH] openbox: fix crash on alt+tab with fullscreen app

2024-07-16 Thread Yoann Congal via lists.openembedded.org
From: Alexandre Videgrain Apply an openbox patch to openbox recipe to fix crashes on alt+tab with fullscreen app. Github issue: https://github.com/openembedded/meta-openembedded/issues/837 Signed-off-by: Alexandre Videgrain Suggested-by: Ludovic Jozeau Signed-off-by: Yoann Congal Signed-off-