linux/meta-el-common.git/recipes-devtools, branch kirkstone

Update layer for kirkstone build

2022-08-02T07:44:43+00:00

Change-Id: Iaf8381bd4e43bdbcae44325627ed99ebec3f6a34 Signed-off-by: Bogdan Oprescu

python: Remove CVE patches

2019-08-09T11:21:57+00:00

The following patches were fixed in upstream: CVE-2018-1060 CVE-2018-1061 Change-Id: I063270d94aa1214ded8c51842cfada3410bbe70c Signed-off-by: Adrian Mangeac

python: fix for CVE-2018-1060 & CVE-2018-1061

2018-09-14T08:12:35+00:00

References: https://bugs.python.org/issue32981 https://nvd.nist.gov/vuln/detail/CVE-2018-1060 https://nvd.nist.gov/vuln/detail/CVE-2018-1061 Patch is taken from https://github.com/python/cpython/tree/2.7 Change-Id: I3c561499076480c344fe7d34d2edea84615ac9fa Signed-off-by: Sona Sarmadi

qemu: Drop CVE patches

2018-03-01T09:38:09+00:00

The CVEs have been fixed in upstream poky/rocko. Signed-off-by: Martin Borg

Drop CVE patches that have been fixed in upstream poky/rocko

2018-02-28T08:33:50+00:00

Signed-off-by: Martin Borg

DPKG: Fix and test case for CVE-2017-8283

2017-12-14T14:31:54+00:00

Directory Traversal Vulnerability References: https://nvd.nist.gov/vuln/detail/CVE-2017-8283 http://www.securityfocus.com/bid/98064/info Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

run-postinsts: don't call update-rc.d if systemd is present

2017-12-06T10:43:12+00:00

This patch removes the call to update-rc.d in order to fix the console login issue for the Cavium board. Signed-off-by: Gabriel Ionescu Signed-off-by: Adrian Dudau

run-postinsts: Disable dpkg --configure for debs to fix boot lockup

2017-11-22T10:46:21+00:00

When a board boots for the first time, it executes run-postinsts.service and dpkg-configure.service. Since both services run dpkg --configure, it sometimes results in locking up the login service. This patch disables the execution of dpkg --configure from run-postinsts by removing the deb keyword from the list of scanned packet types. Signed-off-by: Gabriel Ionescu Signed-off-by: Adrian Dudau

qemu: CVE-2017-5931

2017-09-18T11:54:31+00:00

Fixes integer overflow in in handling virtio-crypto requests Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931 Signed-off-by: Sona Sarmadi Signed-off-by: Martin Borg

qemu: CVE-2017-8309

2017-08-29T11:32:58+00:00

Qemu built with the Audio subsystem support is vulnerable to a host memory leakage issue. It could occur if a guest user was to repeatedly start and stop audio capture. A privileged user inside guest could use this flaw to exhaust host memory, resulting in DoS. Reference: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-8309 Upstream patch: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau