linux/meta-nfv-access-common.git/recipes-core, branch develop

busybox: Drop bbappend, no longer useful

2021-07-20T10:52:51+00:00

- CONFIG_CHRT=y * rootfs: chrt is provided by util-linux; * installer: not used; - CONFIG_HTTPD et al. * rootfs: httpd is provided by apache2; * installer: not used, web-server embedded in web-installer; - CONFIG_TASKSET et al. * rootfs: taskset is provided by util-linux; * installer: not used; - CONFIG_FEATURE_TAR_NOPRESERVE_TIME=y * already upstream in hardknott; The size impact is very small (<2% for the busybox package), but it gets our busybox .config closer to upstream defconfig, all the configuration differences now being handled in one place in meta-enea-virtualization. Change-Id: I0effffdb43c122c996de247f7fb5158de104ed23 Signed-off-by: Alexandru Avadanii

Upgrade to gatesgarth

2021-03-24T11:06:58+00:00

This is an initial commit, containing quick fixes and hacks to allow building the images. All these issues will be re-evaluated and fixed properly in their own commits. Signed-off-by: Adrian Dudau

systemd: fix for CVE-2017-15908

2018-03-13T09:11:23+00:00

Infinite loop in the dns_packet_read_type_window() function Upstream patch: https://github.com/systemd/systemd/commit/8aeadf3052a2130b88d5bccf5439890e1034f28d Signed-off-by: Sona Sarmadi Signed-off-by: Martin Borg

Drop CVE patches that have been fixed in upstream poky/rocko

2018-02-28T08:33:50+00:00

Signed-off-by: Martin Borg

packagegroup-core-tools-debug: Drop bbappend

2018-01-22T13:27:26+00:00

Neither rsync not systemtap are debug tools, so they have no place in this packagegroup. Signed-off-by: Adrian Dudau Signed-off-by: Martin Borg

systemd: Drop duplicat CVE patches

2017-11-24T14:06:10+00:00

This patch has already been applied in upstream poky/pyro. Signed-off-by: Adrian Dudau

libxml: Remove CVE fixes

2017-11-24T14:06:10+00:00

These have been fixed already in upstream poky/pyro. Signed-off-by: Adrian Dudau

systemd: CVE-2017-1000082

2017-10-04T07:58:01+00:00

refuse to load units with errors If a unit has a statement such as User=0day where the username exists but is strictly speaking invalid, the unit will be started as the root user instead. Backport a patch from upstream to mitigate this by refusing to start units such as this. (From OE-Core rev: a6eaef0f179a341c0b96bb30aaec2d80862a11d6) Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082 Backport from: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=pyro&id=b7e7b5e294f944c27fb1d2be61c0cf38f6c81ba8 Signed-off-by: Ross Burton Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

libxml2: CVE-2017-8872

2017-09-26T13:38:55+00:00

Out-of-bounds read in htmlParseTryOrFinish Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8872 Backported from: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=pyro&id=d2b60efe20f4d9dce03f8f351715b103a85b7338 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

systemd: CVE-2017-9445

2017-09-26T13:37:50+00:00

Out-of-bounds write in systemd-resolved due to allocating too small buffer in dns_packet_new References: https://bugzilla.redhat.com/attachment.cgi?id=1290017 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau