[pull] master from buildroot:master #342
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![pull[bot]](https://avatars.githubusercontent.com/in/12910?s=60&v=4){kind=small}
Fixes the following security vulnerabilities: [CVE-2024-56171] Use-after-free in xmlSchemaIDCFillNodeTables https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 [CVE-2025-24928] Stack-buffer-overflow in xmlSnprintfElements https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 Null-deref in xmlPatMatch https://gitlab.gnome.org/GNOME/libxml2/-/issues/861 https://www.openwall.com/lists/oss-security/2025/02/18/2 Drop now upstreamed patches: https://gitlab.gnome.org/GNOME/libxml2/-/commit/fc72e0833a4e5724aef604e2fd9adb1014cb4844 https://gitlab.gnome.org/GNOME/libxml2/-/commit/539663626b91567159a70791c0f2b3b167135e9b Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
For release note, see: https://github.com/facebook/zstd/releases/tag/v1.5.7 This commit also removes the package patch, included in release. Signed-off-by: Nuno Gonçalves <nunog@fr24.com> [Julien: add link to release note] Signed-off-by: Julien Olivain <ju.o@free.fr>
For release note, see: https://hg.mozilla.org/projects/nss/file/1d23a5e8931c4b1929e76519eeb50e468927e677/doc/rst/releases/nss_3_108.rst Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> [Julien: fix broken release note url] Signed-off-by: Julien Olivain <ju.o@free.fr>
See here for a changelog: https://valgrind.org/docs/manual/dist.news.html Patches 0003/0004 are applied upstream and so got removed here. Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/eclipse-zenoh/zenoh-pico/releases/tag/1.2.1 Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/eclipse-zenoh/zenoh-c/releases/tag/1.2.1 Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
The bug could lead to incorrect "critical error" reports if that uninitialized memory happened to contain a value that interpreted as an int was above the critical threshold. It affected primarily scripts running approximately one second or longer, because access happens by timer. Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
PIDFILE was set incorrectly, watchdogd writes its PID file to /var/run/watchdogd/pid (note the slash), which is not configurable without patching. Restructure the rest of the script to match current style while at it. Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.1)
Can you help keep this open source service alive? 💖 Please sponsor : )