[pull] master from buildroot:master #162
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![pull[bot]](https://avatars.githubusercontent.com/in/12910?s=60&v=4){kind=small}
Fixes the following security issues: - CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents - CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice - CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap - CVE-2024-31083: User-after-free in ProcRenderAddGlyphs For more details, see thee security page of Xorg: https://www.x.org/wiki/Development/Security/ Signed-off-by: Waldemar Brodkorb <[email protected]> [Peter: add actual list of CVEs] Signed-off-by: Peter Korsgaard <[email protected]>
Release notes: - https://www.postgresql.org/docs/release/16.4/ - https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/ Fixes CVE-2024-7348: - https://www.postgresql.org/support/security/CVE-2024-7348/ Signed-off-by: Scott Fan <[email protected]> Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Scott Fan <[email protected]> Signed-off-by: Peter Korsgaard <[email protected]>
Replace the group name 'nogroup' with 'nobody' in the default ProFTPD configuration file. This fixes the following error when starting the server: proftpd[110]: fatal: Group: Unknown group 'nogroup' on line 30 of '/etc/proftpd.conf' Fixes: 0d887cc ("system: replace nogroup with nobody") Signed-off-by: Mattia Narducci <[email protected]> Signed-off-by: Peter Korsgaard <[email protected]>
To fix build issues with modern Python versions, commit 8012a86 ("package/norm: use external waf") switched the norm package from using its internal waf copy to using our external waf package. Then, in fd56231 ("package/waf: bump to v2.1.1"), we updated out external waf to a newer version, which breaks the API around ArgParse, see upstream commit: https://gitlab.com/ita1024/waf/-/commit/bd5c22d484734f7c1b77e16c91a10c7a44fa6c8a: This causes breakage when building the norm package. Fabrice had already submitted patches upstream, to both the "protolib" project (which is used as a submodule in norm) and to the "norm" project. These pull requests are still pending, but let's backport the patches that seem reasonable and that fix the build issue. Fixes: http://autobuild.buildroot.net/results/f005d513434d42d26e601096b94b4070586118b2/ Signed-off-by: Thomas Petazzoni <[email protected]> Signed-off-by: Peter Korsgaard <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )