linux/poky.git, branch mickledore

build-appliance-image: Update to mickledore head revision

2023-11-14T00:19:27+00:00

(From OE-Core rev: 23b5141400b2c676c806df3308f023f7c04e34e0) Signed-off-by: Steve Sakoman

grub: Fix for CVE-2023-4692 and CVE-2023-4693

2023-11-13T22:22:20+00:00

CVE: CVE-2023-4692 Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass. Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/grub.git/commit/?id=43651027d24e62a7a463254165e1e46e42aecdea] CVE: CVE-2023-4693 There an out-of-bounds read at fs/ntfs.c, a physically present attacker may leverage that by presenting a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack may allow sensitive data cached in memory or EFI variables values to be leaked presenting a high Confidentiality risk. Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/grub.git/commit/?id=0ed2458cc4eff6d9a9199527e2a0b6d445802f94] (From OE-Core rev: 51236150a3740d95e3601499d3918af5a37f8f86) Signed-off-by: Xiangyu Chen Signed-off-by: Alexandre Belloni (cherry picked from commit: a8bc6f041599ce8da275c163c87f155a2f09369c) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman

build-appliance-image: Update to mickledore head revision

2023-11-13T02:41:21+00:00

(From OE-Core rev: 3c35416a8bff3a857004beadbd053d50eca30ce2) Signed-off-by: Steve Sakoman

Revert "oeqa/utils/gitarchive: fix tag computation when creating archive"

2023-11-13T02:38:12+00:00

This reverts commit b0d96ea432196800fedb45e6d1da44a3523fad63. This caused failures on the build performance tests on the autobuilder. (From OE-Core rev: c337b5a45d43eefee171e7043f70cf19e6eb2cce) Signed-off-by: Steve Sakoman

build-appliance-image: Update to mickledore head revision

2023-11-12T21:36:17+00:00

(From OE-Core rev: 0f4cd6a395404352e2f66bdd11a7727c1f117046) Signed-off-by: Steve Sakoman

oeqa/utils/gitarchive: fix tag computation when creating archive

2023-11-12T21:30:08+00:00

Sporadic errors have been observed in autobuilder when trying to store new tests results: error: failed to push some refs to 'push.yoctoproject.org:yocto-testresults' hint: Updates were rejected because the tag already exists in the remote. The new tag name is generated by gitarchive based on known tags from the repository (learnt with git tag). In autobuilder case, this repository is a shallow clone, so git tag only returns most recent tags, which mean we could miss some older tags which exist in remote but not locally. In this case, gitarchive will likely create a tag which already exists in remote, and so will fail to push Fix this tag duplication by using git ls-remote to learn about existing tags instead of git tag. To do so, create a helper ("get_tags") which manages both nominal case (target directory is a git repository with a proper remote) and fallback case (target directory is not from a clone, no remote has been configured) Fixes [YOCTO #15140] (From OE-Core rev: b0d96ea432196800fedb45e6d1da44a3523fad63) Signed-off-by: Alexis Lothoré Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 9cbbe9689866158825a7ae774b7965b41ff5c461) Signed-off-by: Steve Sakoman

Revert "oeqa/utils/gitarchive: fix tag computation when creating archive"

2023-11-12T21:30:07+00:00

This reverts commit 5a0a7da85a3acfd4a20a07478eabefdab60f313a. This caused failres on the build performance tests on the autobuilder. (cherry picked from commit cbfa57a982c0e633e41d3ea00543f87ad818c43a) (From OE-Core rev: 1506737eae894310bb98a82cf43c91f4b17d5878) Signed-off-by: Steve Sakoman

build-appliance-image: Update to mickledore head revision

2023-11-11T18:26:04+00:00

(From OE-Core rev: ae69823d9439ba1995ef48676a2d2236a50fe665) Signed-off-by: Steve Sakoman

poky.conf: bump version for 4.2.4 release

2023-11-11T18:23:01+00:00

(From meta-yocto rev: 62fb88d93c7a706ed191df71dc67f80b47e7c602) Signed-off-by: Steve Sakoman

sudo: upgrade 1.9.13p3 -> 1.9.15p2

2023-11-11T18:23:01+00:00

Upgrade 1.9.13p3 to 1.9.15p2 to fix bugs and CVEs License-update: file removed upstream Drop patch as issue fixed upstream. Changelogs: 1.9.15p2: https://www.sudo.ws/releases/stable/#1.9.15p2 1.9.15p1: https://www.sudo.ws/releases/stable/#1.9.15p1 1.9.15: https://www.sudo.ws/releases/stable/#1.9.15 1.9.14p3: https://www.sudo.ws/releases/stable/#1.9.14p3 1.9.14p2: https://www.sudo.ws/releases/stable/#1.9.14p2 1.9.14p1: https://www.sudo.ws/releases/stable/#1.9.14p1 1.9.14: https://www.sudo.ws/releases/stable/#1.9.14 (From OE-Core rev: 1681813ef11c813d8b7433790dfc60425e31bc63) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman