diff options
Diffstat (limited to 'meta/recipes-bsp/grub/grub2.inc')
-rw-r--r-- | meta/recipes-bsp/grub/grub2.inc | 87 |
1 files changed, 86 insertions, 1 deletions
diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc index 2c55852ef0..bea03f4fc1 100644 --- a/meta/recipes-bsp/grub/grub2.inc +++ b/meta/recipes-bsp/grub/grub2.inc | |||
@@ -13,6 +13,11 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" | |||
13 | 13 | ||
14 | CVE_PRODUCT = "grub2" | 14 | CVE_PRODUCT = "grub2" |
15 | 15 | ||
16 | # Applies only to RHEL | ||
17 | CVE_CHECK_WHITELIST += "CVE-2019-14865" | ||
18 | # Applies only to SUSE | ||
19 | CVE_CHECK_WHITELIST += "CVE-2021-46705" | ||
20 | |||
16 | SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \ | 21 | SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \ |
17 | file://0001-Disable-mfpmath-sse-as-well-when-SSE-is-disabled.patch \ | 22 | file://0001-Disable-mfpmath-sse-as-well-when-SSE-is-disabled.patch \ |
18 | file://autogen.sh-exclude-pc.patch \ | 23 | file://autogen.sh-exclude-pc.patch \ |
@@ -28,7 +33,85 @@ SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \ | |||
28 | file://CVE-2020-15706-script-Avoid-a-use-after-free-when-redefining-a-func.patch \ | 33 | file://CVE-2020-15706-script-Avoid-a-use-after-free-when-redefining-a-func.patch \ |
29 | file://CVE-2020-15707-linux-Fix-integer-overflows-in-initrd-size-handling.patch \ | 34 | file://CVE-2020-15707-linux-Fix-integer-overflows-in-initrd-size-handling.patch \ |
30 | file://determinism.patch \ | 35 | file://determinism.patch \ |
31 | " | 36 | file://no-insmod-on-sb.patch \ |
37 | file://CVE-2020-14372_1.patch \ | ||
38 | file://CVE-2020-14372_2.patch \ | ||
39 | file://CVE-2020-14372_3.patch \ | ||
40 | file://CVE-2020-14372_4.patch \ | ||
41 | file://CVE-2020-14372_5.patch \ | ||
42 | file://CVE-2020-14372.patch \ | ||
43 | file://CVE-2020-27779.patch \ | ||
44 | file://CVE-2020-27779_2.patch \ | ||
45 | file://CVE-2020-27779_3.patch \ | ||
46 | file://CVE-2020-27779_4.patch \ | ||
47 | file://CVE-2020-27779_5.patch \ | ||
48 | file://CVE-2020-27779_6.patch \ | ||
49 | file://CVE-2020-27779_7.patch \ | ||
50 | file://CVE-2020-25632.patch \ | ||
51 | file://CVE-2020-25647.patch \ | ||
52 | file://0001-mmap-Fix-memory-leak-when-iterating-over-mapped-memo.patch \ | ||
53 | file://0002-net-net-Fix-possible-dereference-to-of-a-NULL-pointe.patch \ | ||
54 | file://0003-net-tftp-Fix-dangling-memory-pointer.patch \ | ||
55 | file://0004-kern-parser-Fix-resource-leak-if-argc-0.patch \ | ||
56 | file://0005-efi-Fix-some-malformed-device-path-arithmetic-errors.patch \ | ||
57 | file://0006-kern-efi-Fix-memory-leak-on-failure.patch \ | ||
58 | file://0007-kern-efi-mm-Fix-possible-NULL-pointer-dereference.patch \ | ||
59 | file://0008-gnulib-regexec-Resolve-unused-variable.patch \ | ||
60 | file://0009-gnulib-regcomp-Fix-uninitialized-token-structure.patch \ | ||
61 | file://0010-gnulib-argp-help-Fix-dereference-of-a-possibly-NULL-.patch \ | ||
62 | file://0011-gnulib-regexec-Fix-possible-null-dereference.patch \ | ||
63 | file://0012-gnulib-regcomp-Fix-uninitialized-re_token.patch \ | ||
64 | file://0013-io-lzopio-Resolve-unnecessary-self-assignment-errors.patch \ | ||
65 | file://0014-zstd-Initialize-seq_t-structure-fully.patch \ | ||
66 | file://0015-kern-partition-Check-for-NULL-before-dereferencing-i.patch \ | ||
67 | file://0016-disk-ldm-Make-sure-comp-data-is-freed-before-exiting.patch \ | ||
68 | file://0017-disk-ldm-If-failed-then-free-vg-variable-too.patch \ | ||
69 | file://0018-disk-ldm-Fix-memory-leak-on-uninserted-lv-references.patch \ | ||
70 | file://0019-disk-cryptodisk-Fix-potential-integer-overflow.patch \ | ||
71 | file://0020-hfsplus-Check-that-the-volume-name-length-is-valid.patch \ | ||
72 | file://0021-zfs-Fix-possible-negative-shift-operation.patch \ | ||
73 | file://0022-zfs-Fix-resource-leaks-while-constructing-path.patch \ | ||
74 | file://0023-zfs-Fix-possible-integer-overflows.patch \ | ||
75 | file://0024-zfsinfo-Correct-a-check-for-error-allocating-memory.patch \ | ||
76 | file://0025-affs-Fix-memory-leaks.patch \ | ||
77 | file://0026-libgcrypt-mpi-Fix-possible-unintended-sign-extension.patch \ | ||
78 | file://0027-libgcrypt-mpi-Fix-possible-NULL-dereference.patch \ | ||
79 | file://0028-syslinux-Fix-memory-leak-while-parsing.patch \ | ||
80 | file://0029-normal-completion-Fix-leaking-of-memory-when-process.patch \ | ||
81 | file://0030-commands-hashsum-Fix-a-memory-leak.patch \ | ||
82 | file://0031-video-efi_gop-Remove-unnecessary-return-value-of-gru.patch \ | ||
83 | file://0032-video-fb-fbfill-Fix-potential-integer-overflow.patch \ | ||
84 | file://0033-video-fb-video_fb-Fix-multiple-integer-overflows.patch \ | ||
85 | file://0034-video-fb-video_fb-Fix-possible-integer-overflow.patch \ | ||
86 | file://0035-video-readers-jpeg-Test-for-an-invalid-next-marker-r.patch \ | ||
87 | file://0036-gfxmenu-gui_list-Remove-code-that-coverity-is-flaggi.patch \ | ||
88 | file://0037-loader-bsd-Check-for-NULL-arg-up-front.patch \ | ||
89 | file://0038-loader-xnu-Fix-memory-leak.patch \ | ||
90 | file://0039-loader-xnu-Free-driverkey-data-when-an-error-is-dete.patch \ | ||
91 | file://0040-loader-xnu-Check-if-pointer-is-NULL-before-using-it.patch \ | ||
92 | file://0041-util-grub-install-Fix-NULL-pointer-dereferences.patch \ | ||
93 | file://0042-util-grub-editenv-Fix-incorrect-casting-of-a-signed-.patch \ | ||
94 | file://0043-util-glue-efi-Fix-incorrect-use-of-a-possibly-negati.patch \ | ||
95 | file://0044-script-execute-Fix-NULL-dereference-in-grub_script_e.patch \ | ||
96 | file://0045-commands-ls-Require-device_name-is-not-NULL-before-p.patch \ | ||
97 | file://0046-script-execute-Avoid-crash-when-using-outside-a-func.patch \ | ||
98 | file://CVE-2021-3981.patch \ | ||
99 | file://CVE-2021-3695.patch \ | ||
100 | file://CVE-2021-3696.patch \ | ||
101 | file://CVE-2021-3697.patch \ | ||
102 | file://CVE-2022-28733.patch \ | ||
103 | file://CVE-2022-28734.patch \ | ||
104 | file://CVE-2022-28736.patch \ | ||
105 | file://CVE-2022-28735.patch \ | ||
106 | file://font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch \ | ||
107 | file://CVE-2022-2601.patch \ | ||
108 | file://CVE-2022-3775.patch \ | ||
109 | file://CVE-2020-27749.patch \ | ||
110 | file://CVE-2021-20225.patch \ | ||
111 | file://CVE-2021-20233.patch \ | ||
112 | file://CVE-2023-4692.patch \ | ||
113 | file://CVE-2023-4693.patch \ | ||
114 | " | ||
32 | SRC_URI[md5sum] = "5ce674ca6b2612d8939b9e6abed32934" | 115 | SRC_URI[md5sum] = "5ce674ca6b2612d8939b9e6abed32934" |
33 | SRC_URI[sha256sum] = "f10c85ae3e204dbaec39ae22fa3c5e99f0665417e91c2cb49b7e5031658ba6ea" | 116 | SRC_URI[sha256sum] = "f10c85ae3e204dbaec39ae22fa3c5e99f0665417e91c2cb49b7e5031658ba6ea" |
34 | 117 | ||
@@ -47,6 +130,8 @@ GRUBPLATFORM ??= "pc" | |||
47 | 130 | ||
48 | inherit autotools gettext texinfo pkgconfig | 131 | inherit autotools gettext texinfo pkgconfig |
49 | 132 | ||
133 | CFLAGS_remove = "-O2" | ||
134 | |||
50 | EXTRA_OECONF = "--with-platform=${GRUBPLATFORM} \ | 135 | EXTRA_OECONF = "--with-platform=${GRUBPLATFORM} \ |
51 | --disable-grub-mkfont \ | 136 | --disable-grub-mkfont \ |
52 | --program-prefix="" \ | 137 | --program-prefix="" \ |