summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix dead links that use the DISTRO macrostyheadAntonin Godard2025-05-259-12/+12
| | | | | | | | | | | | | | | | | | | | After introducing the DISTRO_LATEST_TAG and DISTRO_REL_LATEST_TAG macros, use them in links that currently use DISTRO/DISTRO_REL_TAG. When building for the tip of a branch, this will replace the current A.B.999 in links to the latest existing tag. The links were found across the documentation by running 'grep -r "http.*5\.2\.999"' inside the _build/html output after building the docs. [YOCTO #14802] (From yocto-docs rev: f264569312ffa8a4ad1f9e2022b4eaa14aeb3099) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 29be069ebbf2c55d72fc51d99ed5a558af37c05e) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* poky.yaml: introduce DISTRO_LATEST_TAGAntonin Godard2025-05-252-2/+25
| | | | | | | | | | | | | | | | | | | | | | | | | Introduce the DISTRO_LATEST_TAG macro, which should always point to the latest existing tag in the documentation, unlike DISTRO which may point to A.B.999 to represent the tip of a branch. This variable is needed to fix dead links in the documentation that currently use the DISTRO macro. Also, make DISTRO_REL_TAG use the DISTRO macro directly, to avoid repetition, and add a DISTRO_REL_LATEST_TAG macro that has the same role as DISTRO_LATEST_TAG but with "yocto-" prepended to it. In set_versions.py, run the "git describe --abbrev=0 --tags --match='yocto-*'" command to get the latest existing tag on the currently checked out commit. Fallback to ourversion in case we didn't find any. (From yocto-docs rev: 6554f50b3fb424a746ba4136fad7510e950f4b3b) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit a85b0e500c94921f77fa7b7dbb877e4945f96d1e) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* manuals: remove repeated wordAndrew Kreimer2025-05-251-1/+1
| | | | | | | | | | The word "modern" appears twice, remove the extra one. (From yocto-docs rev: c3671cbddaa3c0df195a5cd01d50e26cb6dbcbe4) Signed-off-by: Andrew Kreimer <algonell@gmail.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: improve the PKGV documentationAntonin Godard2025-05-251-0/+17
| | | | | | | | | | It may be confusing for users that source control information is not present in the BitBake environment. Document it as a warning block. (From yocto-docs rev: ba0a321e5c623a9c716be7a451fdd60fae5b26b4) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK referenceAntonin Godard2025-05-251-2/+1
| | | | | | | | | | | | | When building for nativesdk recipes, HOST_CC_ARCH equals SDK_CC_ARCH, not BUILDSDK_CC_ARCH which doesn't exist. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: 50cf8b92b6f37ecc7f696f6687980e68cb8286e5) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 08fc3446cb13b5bd8781874d2d996899ce12b082) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: document HOST_*_ARCH variablesAntonin Godard2025-05-251-0/+27
| | | | | | | | | | | | | These variables control the flags for the assembler, compiler and linker, but depend on the context. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: cfc7bce0b7368a6ecfaef7c7df6222f1a6076e9b) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit f8eb33569a5e8cadc036855e2d95eee77e627cb4) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: document missing SDK_*_ARCH variablesAntonin Godard2025-05-251-0/+15
| | | | | | | | | | | | | These variables control the flags for the assembler, compiler and linker when building for nativesdk recipes. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: 028bdce97d62e200e032da6d0c54c0c4109e5a97) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit c08f6d3c8aee86264c069b7c30850cb02de76076) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: add missing documentation for BUILD_* variablesAntonin Godard2025-05-251-20/+230
| | | | | | | | | | | | | | | | | | | | These toolchain variables are used in a native context. Some of the BUILD_* variables missed documentation. Also, some of the base commands were also not there so document them. Some of existing BUILD_* variable documentation were missing the note about their usage in a native context, so add it too so that all BUILD_* variables are documented the same way. [YOCTO #15719] Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: f16a641086a7c3546b599a5996c4f7a6db04967e) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 87103afa1cb6690e9aaa87ca1f23e45eaaa359ac) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: add manpage links for toolchain variablesAntonin Godard2025-05-251-9/+11
| | | | | | | | | | | | Use the :manpage: role to provide links to common toolchain utilities. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: f021874bff4e7d30419371564fef41fcfd6d6976) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 7023e5f176efde05a6798476712c8a4e006a6b0d) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* documentation/conf.py: define a manpage urlAntonin Godard2025-05-254-4/+6
| | | | | | | | | | | | | | | | By defining the manpages_url we can use the :manpage: role in the documentation for providing links to manpages. See: https://www.sphinx-doc.org/en/master/usage/configuration.html#confval-manpages_url Replace existing manpages links to use this role. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: f5c964f41ed0f9a9740769e40aabf543df274c03) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 4e63cd74cd1a330ea5e96bb04243a90f607b2857) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: document autotools class related variablesAntonin Godard2025-05-251-0/+17
| | | | | | | | | Document the AUTOTOOLS_SCRIPT_PATH and the CONFIGURE_SCRIPT variables. (From yocto-docs rev: 1065f57bc029e58570de6bb28062c17130e8a102) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe nameAntonin Godard2025-05-251-2/+2
| | | | | | | | | | | | This variable affects the watchdog-config recipe, not the watchdog recipe. (From yocto-docs rev: 619ab9da0c3a121776bbbedc55c64a4e9631e497) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit d3350c38910c47c76ed17f24579120013589ca1f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: add release notes for 5.0.8Lee Chee Yang2025-05-252-1/+227
| | | | | | | | | | (From yocto-docs rev: dee872d147abc18bba550a172bd04b0d3b587c39) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 7494df521ed9c70e877dbdef1adfe38ad717682f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: add release notes for 5.1.4Lee Chee Yang2025-05-252-0/+138
| | | | | | | | | | (From yocto-docs rev: 4fa9953b69a4f6b19dff8d762ba30ebc50449798) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit f7c8fdfdfef0cac529594af5bdb72e53b29262fe) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual/concepts: add UNPACKDIR in the directory descriptionAntonin Godard2025-05-251-6/+9
| | | | | | | | | | | | | | | | | | Mention that UNPACKDIR is used as a location to unpack the source code, and that S is the final location of the source code. This is deliberately vague, because as there are multiple instances of how these directories can be defined and used. The proper explanation of how the UNPACKDIR and S directories interact is left to the reference manual, under the UNPACKDIR variable description. (From yocto-docs rev: 85e738e4c0e62f69699fff4bb0482ee3e3121496) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 39ca56c3a3a5218ca73c7ced212b2ee89428a2d1) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual/concepts: remove PR from the build dir listAntonin Godard2025-05-251-3/+0
| | | | | | | | | | | | PR was removed by cc83e4548465 ("bitbake.conf: Drop PE and PR from WORKDIR and STAMP") on OE-Core. (From yocto-docs rev: 05a7235cfa9a3d899395c80a1a8caae8b3b3eba9) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit d7a1038ee7c8c463623f0996963f9e8f29d40555) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual: convert analysis-for-package-splitting.png to svgAntonin Godard2025-05-253-1/+1863
| | | | | | | | | | | | | | | - Convert the png file to an SVG file - Add the UNPACKDIR reference. - Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf: Drop PE and PR from WORKDIR and STAMP") on OE-Core. - Change S value to BP (equal to ${BPN}-${PV}, but more accurate). (From yocto-docs rev: 2836f36e6e9fd42801b129232fc9e7db35ea7136) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 18832dd1e90ad85916b1f757271493ddfd3eb432) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual: convert configuration-compile-autoreconf.png to svgAntonin Godard2025-05-253-1/+1498
| | | | | | | | | | | | | | | - Convert the png file to an SVG file - Add the UNPACKDIR reference. - Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf: Drop PE and PR from WORKDIR and STAMP") on OE-Core. - Change S value to BP (equal to ${BPN}-${PV}, but more accurate). (From yocto-docs rev: 272056be6e32d1b6cd2b7064ab764a55474721b5) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 91b53f4d1de5b9669cbb8d7fc741ba9c08c31f94) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual: convert patching.png to svgAntonin Godard2025-05-253-1/+1225
| | | | | | | | | | | | | | | | - Convert the png file to an SVG file. - Add the new UNPACKDIR directory to the image. - Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf: Drop PE and PR from WORKDIR and STAMP") on OE-Core. - Change S value to BP (equal to ${BPN}-${PV}, but more accurate).- Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: 508d65d5eb1759caa926aa8a4634679647e2b121) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 3aa3af6d5214b47555c4c2b16e9c720122e16fa4) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual: convert source-fetching.png to svg and fix UNPACKDIRAntonin Godard2025-05-253-1/+1095
| | | | | | | | | | | | | | | | | | - Convert the png file to an SVG file. - Add the new UNPACKDIR directory to the image. - Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf: Drop PE and PR from WORKDIR and STAMP") on OE-Core. - Change S value to BP (equal to ${BPN}-${PV}, but more accurate).- This fixes [YOCTO #15730]. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: 404a0fb167402e13d3a4ce5aba23aa22a78a0c06) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 27725e4e7bf4d5fe7ad222de077cc693b9205b17) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: fix debug messageDaniel Turull2025-05-251-4/+4
| | | | | | | | | Debug level was not added as a parameter, causing a warning. (From OE-Core rev: 182a915fc733791d4583b956df2e62aa35613f5c) Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to styhead head revisionyocto-5.1.4styhead-5.1.4Steve Sakoman2025-03-221-1/+1
| | | | | | (From OE-Core rev: 2d94f4b8a852dc761f89e5106347e239382df5fb) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: bump version for 5.1.4Steve Sakoman2025-03-221-1/+1
| | | | | | (From meta-yocto rev: a8774f23c1f1270b2965cb472632491a3572f89b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* icu: Adjust ICU_DATA_DIR path on big endian targetsMakarios Christakis2025-03-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | On big-endian systems the preprocessor define ICU_DATA_DIR is currently being set to a path ending with the ${PV} of the recipe. The PV version string has changed to a '-' separator since oe-core commit cebe8439cdc656d53355506a31a3782312bf03c5 whereas the build system installs the data files into a path ending with the dot-separated version of ICU. This causes the ICU data file to not be detected at runtime, consequently breaking any dependant applications. We therefore substitute ${PV} with the dot-separated version string of ICU, as returned from the icu_install_folder function, on the ICU_DATA_DIR define on big-endian targets. (From OE-Core rev: 1689c4fe872540c48af07b482e65646928eaf516) Signed-off-by: Makarios Christakis <makchrbiz@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 28cdc0110def011e3d690da1d591076385267ef7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: mark CVEs fixed in 21.1.16 as fixedPeter Marko2025-03-221-0/+4
| | | | | | | | | These are tracked as versionless redhat CVEs in NVD DB. (From OE-Core rev: ffa253cba600ab7fa3334e1d4b2b300a352da966) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: patch CVE-2025-26465Peter Marko2025-03-222-0/+167
| | | | | | | | | | Pick commit: https://github.com/openssh/openssh-portable/commit/0832aac79517611dd4de93ad0a83577994d9c907 (From OE-Core rev: 0d77609f814dec344535c5674f71a043a4e718e5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: patch CVE-2025-26466Peter Marko2025-03-222-0/+37
| | | | | | | | | | Pick commit: https://github.com/openssh/openssh-portable/commit/6ce00f0c2ecbb9f75023dbe627ee6460bcec78c2 (From OE-Core rev: ec3912dcaaab85f1ac8907aa5b0b536c32540ff1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: upgrade 21.1.15 -> 21.1.16Vijay Anusuri2025-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Includes security fix * CVE-2025-26594 * CVE-2025-26595 * CVE-2025-26596 * CVE-2025-26597 * CVE-2025-26598 * CVE-2025-26599 * CVE-2025-26600 * CVE-2025-26601 Ref: https://lists.x.org/archives/xorg-announce/2025-February/003584.html https://lists.x.org/archives/xorg-announce/2025-February/003585.html (From OE-Core rev: a0989930949689dd971dea61e851b548af86a1bf) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b5491688a045e52b2a1a00d04b746ed6af456784) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xf86-config: remove obsolete configuration filesRoss Burton2025-03-155-200/+0
| | | | | | | | | | | | | | | | | | | | | | For reasons we have explicit xorg.conf files for a number of the qemu machines, but not all of them. These mainly disabled screen blanking (which is now down with a separate fragment) but also explictly set the device driver to fbdev which meant they didn't use the modesettings driver as they should (with the virtio framebuffer from qemu). This is the root cause of why the xserver 21.1.16 upgrade doesn't work on a number of machines: the /sys probing changed and the fbdev driver now refuses to use the PCI framebuffer device as there are better drivers, but we've explictly told xorg to use the wrong driver. For more details, see https://gitlab.freedesktop.org/xorg/xserver/-/issues/1798. (From OE-Core rev: 73f39fe8a5367ad905002df03e10fbf59b8f8921) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8c8039bf4c2d011e3d12c970ce45036b184902a9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xf86-config: add a configuration fragment to disable screen blankingRoss Burton2025-03-152-0/+13
| | | | | | | | | | | | Add a configuration fragment that disables screen blanking, and add it to all qemu machines. (From OE-Core rev: 72855767daa515a451ea7ebe3412479cb7bafdc6) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 780a5ccaa51d5aed18200883a686387e70847e4b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: upgrade 21.1.14 -> 21.1.15Wang Mingyu2025-03-151-1/+1
| | | | | | | | | | (From OE-Core rev: a97e23fe412b8b382f718f73c5a8b12f26208661) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ba94110d70ebfb1b4798ecf05389f7ea602b1f55) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libtasn1: upgrade 4.19.0 -> 4.20.0Vijay Anusuri2025-03-151-4/+3
| | | | | | | | | | | | | | | | * Noteworthy changes in release 4.20.0 (2025-02-01) [stable] - The release tarball is now reproducible. - We publish a minimal source-only tarball generated by 'git archive'. - Update gnulib files and various build/maintenance fixes. - Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET OF elements License-Update: file COPYING.LESSER renamed to COPYING.LESSERv2 & Copyright year updated to 2025 (From OE-Core rev: 7e79c2dd6cb3b10780219675cf908eaf37046bec) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xwayland: upgrade 21.1.4 -> 21.1.6Peter Marko2025-03-151-1/+5
| | | | | | | | | | | | | | | | | Handle following CVEs: * CVE-2025-26594 * CVE-2025-26595 * CVE-2025-26596 * CVE-2025-26597 * CVE-2025-26598 * CVE-2025-26599 * CVE-2025-26600 * CVE-2025-26601 (From OE-Core rev: 57c278ec18eb2daba8bed1ea96f924491e11a78e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-0678 and CVE-2025-1125Peter Marko2025-03-152-0/+88
| | | | | | | | | Cherry-pick patch mentioning these CVEs. (From OE-Core rev: d0283e421e41b6775f40a51de6018c2c5cfda61f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and ↵Peter Marko2025-03-152-0/+378
| | | | | | | | | | | CVE-2025-0689 Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 0a2cb15d6953a809135bea69609673d068f46df1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45778 and CVE-2024-45779Peter Marko2025-03-152-0/+56
| | | | | | | | | Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 9ecee5f950f249d982b307bbdbe0e13e55f27b24) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-1118Peter Marko2025-03-152-0/+38
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: def610a1298ad7b8c98185a2b4c46f2c7173a950) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-0690Peter Marko2025-03-152-0/+74
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: ab56d0eb79b40f5e60af20dadcda1b0239fe020e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45777Peter Marko2025-03-152-0/+58
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: bfebaeb1705d072eb6b42a6dfe9bff4829a49a33) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45776Peter Marko2025-03-152-0/+40
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: ba19a6126d315c964214e7ca89895ea1ba8b4a15) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-0622Peter Marko2025-03-154-0/+117
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: aeefadfda0e98d0b3369c4abc98485774e1fe562) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45775Peter Marko2025-03-152-0/+39
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: 0ae686de6aefb10d961cd8965dba8a02d1c977c6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45774Peter Marko2025-03-152-0/+38
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: e956e7437aa95e006547c3a92271b64c25252a50) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2025-0624Peter Marko2025-03-152-0/+85
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: 29778ceddd775c47d722ecf1cc587c6526202d0b) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45783Peter Marko2025-03-152-0/+40
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: 7c18697372444ef9e4df03b7c9de7b8da7f4f600) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45780Peter Marko2025-03-152-0/+94
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: 3c33dbc32859ce45743c507120317a562b1a897d) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: patch CVE-2024-45782 and CVE-2024-56737Peter Marko2025-03-152-0/+37
| | | | | | | | | Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 3b497db0bff69c8e7a4f5466b155d1c84051cc59) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grup: patch CVE-2024-45781Peter Marko2025-03-152-0/+36
| | | | | | | | | Cherry-pick patch mentioning this CVE. (From OE-Core rev: ef41ef5730d08371d1eb03f94fa9357edf26889f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: backport strlcpy functionPeter Marko2025-03-152-0/+69
| | | | | | | | | It is used to fix multiple CVEs. (From OE-Core rev: 48cf877397b82449f171190a33a8e723512b8227) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: drop obsolete CVE statusesPeter Marko2025-03-151-3/+0
| | | | | | | | | | CVE-2021-46705 was needed only with 2.06 CVE-2023-4692 and CVE-2023-4693 were fixed in NVD DB meanwhile (From OE-Core rev: 7d35eefd2290bad78199354157e5d275ceda0ce2) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>