linux/poky.git, branch dunfell-23.0.13

build-appliance-image: Update to dunfell head revision

2021-12-14T22:49:36+00:00

(From OE-Core rev: 90a07178ea26be453d101c2e8b33d3a0f437635d) Signed-off-by: Richard Purdie

selftest: skip virgl test on centos 8 entirely

2021-12-14T22:49:22+00:00

With the sdl frontend, qemu isn't able to even boot fully, so let's skip the test early. (From OE-Core rev: 74bb94a7d249b5c53f3e1d15688a3a323fc8e828) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

selftest/devtool: Check branch in git fetch

2021-12-14T22:49:22+00:00

The commit 'meta/scripts: Manual git url branch additions (dc53fe75cc)' forget the url branch= parameter in the devtool git fetch test. (From OE-Core rev: 7d26bdcfef6473f64c73e8507bce334e010c3cad) Signed-off-by: Stefan Herbrechtsmeier Signed-off-by: Richard Purdie (cherry picked from commit 1419168a58a5caf99e24ada08c9ab639344a78b4) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

recipetool: Set master branch only as fallback

2021-12-14T22:49:22+00:00

The commit 'meta/scripts: Manual git url branch additions (dc53fe75cc)' sets the branch= parameter too early to master and thereby breaks the -B/--srcbranch option. ERROR: branch= parameter and -B/--srcbranch option cannot both be specified - use one or the other (From OE-Core rev: 2bc6deb34aee7542d7086c24b166083c562a6a01) Signed-off-by: Stefan Herbrechtsmeier Signed-off-by: Richard Purdie (cherry picked from commit 34ece8030e7a6a100b5e3e7b94e6c786c0e199a6) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

runqemu: check the qemu PID has been set before kill()ing it

2021-12-14T22:49:22+00:00

If runqemu is killed, check that we have a valid PID for the qemu before sending a kill() to it. [ YOCTO #14651 ] (From OE-Core rev: 7f95eb486a2d07cf0c821d5301fd670de34fe2d1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 0f3afbd3a6a6bef668612f818517df7543c0a683) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

lttng-modules: do not search in non-existing folder during install

2021-12-14T22:49:22+00:00

When CONFIG_TRACEPOINTS is not enabled in kernel config - module compilation is skipped, which causes the ${D}/${nonarch_base_libdir} not to be created. This fails later in do_install:append() due to the fact that find command in executed for non-existing folder. Check for folder existence before find command in executed. (From OE-Core rev: db8a8b53f440f37731c7c5db9561ac46ef59d891) Signed-off-by: Andrey Zhizhikin Signed-off-by: Richard Purdie (cherry picked from commit de0aa1700ed4e6f04b0a233eb1f6d2ac598e7ed8) Signed-off-by: Aníbal Limón Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

wic:direct.py: ignore invalid mountpoints during fstab update

2021-12-14T22:49:22+00:00

wic fstab-update creates invalid entries for partitons that are not supposed to be mounted from userspace eg u-boot partitions. The following lines were added to fstab on a rock-pi-4: /dev/mmcblk1p1 loader1 vfat defaults 0 0 /dev/mmcblk1p2 reserved1 vfat defaults 0 0 /dev/mmcblk1p3 reserved2 vfat defaults 0 0 /dev/mmcblk1p4 loader2 vfat defaults 0 0 /dev/mmcblk1p5 atf vfat defaults 0 0 /dev/mmcblk1p6 /boot vfat defaults 0 0 With this patch only valid entries should be added /dev/mmcblk1p6 /boot vfat defaults 0 0 (From OE-Core rev: 3c8e50b073a1505cc3586ca51dfe1e75338feafc) Signed-off-by: MarkusVolk Signed-off-by: Richard Purdie (cherry picked from commit 7aa678ce804c21dc1dc51b9be442671bc33c4041) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

busybox: Fix multiple security issues in awk

2021-12-14T22:49:22+00:00

CVE-2021-423xx-awk.patch fixes below listed CVEs for busybox: CVE-2021-42378, CVE-2021-42379, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386 (From OE-Core rev: 37a92e6d4399cdb36d24b988d77aa41b1e205a90) Signed-off-by: Sana Kazi Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gcc: Add CVE-2021-37322 to the list of CVEs to ignore

2021-12-14T22:49:22+00:00

The CVE applies to binutils 2.26 and not to gcc so ignore there. (From OE-Core rev: 71a6d3c31775c6b2db38e194992e0ffce637c827) Signed-off-by: Richard Purdie Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libgcrypt: solve CVE-2021-33560 and CVE-2021-40528

2021-12-14T22:49:22+00:00

This change fixes patches for two issues reported in a research paper [1]: a side channel attack (*) and a cross-configuration attack (**). In this commit we add a fix for (*) that wasn't marked as a CVE initially upstream. A fix of (**) previosly available in OE backports is in fact fixing CVE-2021-40528, not CVE-2021-33560 as marked in the commit message. We commit the accual fix for CVE-2021-33560 and rename the existing fix with the correct CVE-2021-40528. For details of the mismatch and the timeline see [2] (fix of the documentation) and [3] (the related ticket upstream). [1] https://eprint.iacr.org/2021/923.pdf [2] https://dev.gnupg.org/rCb118681ebc4c9ea4b9da79b0f9541405a64f4c13 [3] https://dev.gnupg.org/T5328#149606 (From OE-Core rev: 0ce5c68933b52d2cfe9eea967d24d57ac82250c3) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie