Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=kirkstone-next 2026-01-15T16:46:30+00:00 2026-01-15T16:46:30+00:00 Vijay Anusuri vanusuri@mvista.com 2025-12-05T10:10:51+00:00 urn:sha1:1421bf8d3b64f88abde6bf4349e4a71a0fda5d75 Upstream-Status: Backport [https://github.com/SSSD/sssd/commit/a0336f4cd69c25b3d501a3d361d3d286c00da4d2] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Scott Murray <scott.murray@konsulko.com> 2024-05-05T12:37:19+00:00 Soumya Sambu soumya.sambu@windriver.com 2024-04-22T02:50:45+00:00 urn:sha1:353078bc06c8b471736daab6ed193e30d533d1f1 A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. References: https://nvd.nist.gov/vuln/detail/CVE-2023-3758 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-07-21T23:47:30+00:00 Jeremy A. Puhlman jpuhlman@mvista.com 2022-06-30T16:31:23+00:00 urn:sha1:c29ef97c84f076652e429e6c5a982f3a2f61f64e Nothing in getting installed in ${datadir}/lib, it is all going to ${prefix}/lib. setuptools pulls in ${libdir}/* so for the base lib case of ${prefix}/lib the build works. If libdir is something else lib64 for example, its still ending up in ${prefix}/lib and it fails to build. Set value to correct path as it is being installed. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> 2022-07-21T23:47:24+00:00 Jeremy A. Puhlman jpuhlman@mvista.com 2022-07-01T17:23:09+00:00 urn:sha1:ab90048862b71c6097fc4ee048fe25d8c056587a Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> 2022-07-21T23:46:46+00:00 Davide Gardenal davidegarde2000@gmail.com 2022-07-18T11:28:23+00:00 urn:sha1:7e3596e848efc740a81cce5c2e547a551efbbb66 CVE-2018-16838 is patched in our version of sssd but it doesn't have a vulnerable version range in the NVD database, that's why it needs to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> 2022-05-23T14:54:29+00:00 Armin Kuster akuster808@gmail.com 2022-05-02T16:36:56+00:00 urn:sha1:9301e39d19d6c3f72ef24cd900855fbadca79177 Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 20c13f6335165d693f7f3270c829b3069dbbad66) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-04-13T20:45:44+00:00 Joe Slater joe.slater@windriver.com 2022-04-13T18:36:39+00:00 urn:sha1:93f2146211001ee3cf697d8428969cc3069ed6ba Use convert-spdx-licenses.py to update LICENSE in recipes. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-04-07T17:26:45+00:00 Davide Gardenal davidegarde2000@gmail.com 2022-04-04T12:57:53+00:00 urn:sha1:498ca39cd69db8da0a03b30a865535d1ab047367 Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-04-02T18:21:42+00:00 Armin Kuster akuster808@gmail.com 2022-04-01T16:53:00+00:00 urn:sha1:2be1d069ec4b60be3d486021301e0e0990565cc6 Use python3-native to use 2to3 Fix build issue on some hosts with this error: (result, consumed) = self._buffer_decode(data, self.errors, final) | UnicodeDecodeError: 'utf-8' codec can't decode byte 0xd8 in position 152: invalid continuation byte Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-04-02T18:21:42+00:00 Robert Yang liezhi.yang@windriver.com 2022-03-29T21:51:12+00:00 urn:sha1:0c41d792cf837d56f496b891bb9fe8b72354b8d1 Modify LICENSE for ding-libs and libmhash. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>