Rajeshkumar Ramasamy bf8139e03b glib-networking: fix CVE-2025-60018 ...

glib-networking's OpenSSL backend fails to properly check the return
value of a call to BIO_write(), resulting in an out of bounds read.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60018

Upstream-patch:
4dd540505d

(From OE-Core rev: e5ef6337416135d3c9d311c870ee72928aa75620)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-10-24 06:23:39 -07:00

..

base-files

base-files: Drop /bin/sh dependency

2025-02-14 06:38:54 -08:00

base-passwd

sysroot user management postinsts: run with /bin/sh -e to report errors when they happen

2024-01-27 08:20:02 +00:00

busybox

busybox: patch CVE-2025-46394

2025-10-13 12:42:57 -07:00

coreutils

coreutils: fix CVE-2025-5278

2025-06-25 08:35:09 -07:00

dbus

dbus-glib: fix build with gcc-15

2025-09-01 08:30:56 -07:00

dbus-wait

dbus-wait: bump srcrev

2024-01-07 12:24:57 +00:00

dropbear

dropbear: patch CVE-2025-47203

2025-08-22 05:59:54 -07:00

ell

ell: upgrade 0.63 -> 0.64

2024-05-03 06:12:21 -07:00

expat

expat: follow-up for CVE-2024-8176

2025-10-13 12:42:58 -07:00

fts

fts: Fix typo in summary

2023-04-27 14:41:31 +01:00

gettext

gettext: fix a parallel build issue

2024-07-23 06:05:47 -07:00

glib-2.0

glib-2.0: patch CVE-2025-6052

2025-09-01 08:30:56 -07:00

glib-networking

glib-networking: fix CVE-2025-60018

2025-10-24 06:23:39 -07:00

glibc

glibc: fix CVE-2025-8058

2025-08-04 07:55:07 -07:00

ifupdown

ifupdown: install missing directories

2023-06-28 23:02:50 +01:00

images

build-appliance-image: Update to scarthgap head revision

2025-10-13 12:48:55 -07:00

init-ifupdown

init-ifupdown: modify interfaces for busybox

2024-04-12 17:27:53 +01:00

initrdscripts

initramfs-framework: fix typos

2024-08-26 05:18:44 -07:00

initscripts

initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

2025-05-02 08:20:12 -07:00

kbd

kbd: update license

2024-04-14 06:28:02 +01:00

libcgroup

libcgroup_3.1.0: fix build on non-systemd systems

2024-05-23 08:55:01 -07:00

libxcrypt

libxcrypt: correct the check for a working libucontext.h

2024-07-03 06:28:37 -07:00

libxml

libxml2: ignore CVE-2025-8732

2025-08-22 05:59:55 -07:00

meta

Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"

2025-05-02 08:20:12 -07:00

musl

musl: doesn't support riscv32

2024-01-19 00:16:42 +00:00

ncurses

ncurses: Pin to C17 standard

2025-09-01 08:30:56 -07:00

netbase

netbase: upgrade 6.3 -> 6.4

2022-11-08 22:47:16 +00:00

newlib

libgloss: Do not apply non-existent patch

2024-06-14 05:19:22 -07:00

os-release

os-release: Fix VERSION_CODENAME in case it is empty

2024-08-26 05:18:44 -07:00

ovmf

ovmf-native: remove .pyc files from install

2025-01-09 06:25:36 -08:00

packagegroups

packagegroup-core-boot: recommend ifupdown

2024-04-12 17:27:53 +01:00

psplash

psplash: upgrade to latest revision

2023-12-06 22:55:49 +00:00

readline

readline: Apply patches from readline-8.2-patches

2024-03-30 22:25:43 +00:00

seatd

seatd: upgrade 0.7.0 -> 0.8.0

2023-09-26 10:35:27 +01:00

sysfsutils

sysfsutils: don't install to base_libdir

2023-06-21 18:38:25 +01:00

systemd

systemd: backport fix for handle USE_NLS from master

2025-09-30 08:01:59 -07:00

sysvinit

sysvinit: backport patch for fixing one issue of pidof

2024-11-26 06:11:30 -08:00

ttyrun

ttyrun: define CVE_PRODUCT

2024-06-05 05:57:12 -07:00

udev

udev-extraconf: fix network.sh script did not configure hotplugged interfaces

2024-11-26 06:11:30 -08:00

update-rc.d

update-rc.d: add +git to PV

2024-06-05 05:57:12 -07:00

util-linux

util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool

2025-09-30 08:01:59 -07:00

volatile-binds

volatile-binds: Calculate the name of the /var/lib service

2023-10-30 08:50:46 +00:00

zlib

zlib: upgrade 1.3 -> 1.3.1

2024-02-16 15:14:26 +00:00