linux/meta-openembedded.git/meta-oe/recipes-extended, branch hardknott

redis: add back missing patch

2021-12-27T22:44:57+00:00

Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

Use old override syntax

2021-11-16T13:30:44+00:00

- can-utils and dstat recipes were using the colon override syntax introduced in honister - revert back to underline override notation Signed-off-by: Otto Esko Signed-off-by: Armin Kuster

recipes: Update SRC_URI branch and protocols

2021-11-13T15:45:48+00:00

This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster

redis: upgrade 6.2.2 -> 6.2.6

2021-11-02T03:29:40+00:00

refer https://redis.io/, this upgrade container sereval CVE fixes. Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

redis: fix sereval CVEs

2021-10-29T04:14:44+00:00

Fixes CVEs: CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32675 CVE-2021-32687 CVE-2021-32762 CVE-2021-41099 Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

can-utils: rrecommend iproute2 to make it possible to configure can interfaces

2021-09-26T23:12:02+00:00

This replicates the fix from canutils.bb, for the same issue. See the link in the comment for details. Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj (cherry picked from commit 020b87add3368b259662c5994a5a9d7edaa58085) Signed-off-by: Armin Kuster

redis: fix CVE-2021-32761

2021-09-07T19:53:53+00:00

Backport from version 6.2.5. Signed-off-by: Joe Slater Signed-off-by: Armin Kuster

dlt-daemon: update from 2.18.6 to 2.18.7

2021-09-04T17:39:29+00:00

- add an upstream proposed patch 317.patch to fix a build failure with enabled systemd binding Signed-off-by: Gianfranco Costamagna Signed-off-by: Gianfranco Costamagna Signed-off-by: Khem Raj (cherry picked from commit 01fa60898c2fe65f327bea2f84aaca00aef3f371) [Stable version, bug fix only] Signed-off-by: Scott Murray Signed-off-by: Armin Kuster

polkit: fix CVE-2021-3560

2021-08-21T17:40:27+00:00

Backport a patch [1] to fix CVE-2021-3560. [1] https://gitlab.freedesktop.org/polkit/polkit/-/commit/a04d13affe0fa53ff618e07aa8f57f4c0e3b9b81 Signed-off-by: Mingli Yu Signed-off-by: Khem Raj (cherry picked from commit b65c646b25a2652de02ba2adbbef942b5b475e7f) Signed-off-by: Armin Kuster

redis: fix CVE-2021-32625

2021-08-14T18:43:12+00:00

CVE: CVE-2021-32625 Upstream-Status: Backport [e9a1438ac4c52aa68dfa2a8324b6419356842116] Fix integer overflow in STRALGO LCS (CVE-2021-32625) (#9011) An integer overflow bug in Redis version 6.0 or newer can be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. Signed-off-by: Tony Tascioglu Signed-off-by: Armin Kuster