linux/poky.git, branch yocto-3.1.15

bind: update to 9.11.36

2022-03-11T23:44:42+00:00

Security Fixes The lame-ttl option controls how long named caches certain types of broken responses from authoritative servers (see the security advisory for details). This caching mechanism could be abused by an attacker to significantly degrade resolver performance. The vulnerability has been mitigated by changing the default value of lame-ttl to 0 and overriding any explicitly set value with 0, effectively disabling this mechanism altogether. ISC's testing has determined that doing that has a negligible impact on resolver performance while also preventing abuse. Administrators may observe more traffic towards servers issuing certain types of broken responses than in previous BIND 9 releases, depending on client query patterns. (CVE-2021-25219) ISC would like to thank Kishore Kumar Kothapalli of Infoblox for bringing this vulnerability to our attention. [GL #2899] (From OE-Core rev: 8906aa9ec0a80b0f8998fb793f4e9491b3179179) Signed-off-by: Ralph Siemsen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

perf-tests: add bash into RDEPENDS (v5.12-rc5+)

2022-03-11T23:44:42+00:00

Upstream commit: commit 1dc481c0b0cf18d3952d93a73c4ece90dec277f0 Author: Leo Yan Date: Sat Mar 20 18:45:54 2021 +0800 perf test: Change to use bash for daemon test When executing the daemon test on Arm64 and x86 with Debian (Buster) distro, both skip the test case with the log: Changes tools/perf/tests/shell/daemon.sh to be explicitly bash (it was already required, but was just skipped on various distros). We add it into our RDEPENDS for perf-tests to fixup 5.12+ builds. We already have relatively heavy RDEPENDS for perf tests (python3), so adding bash into the RDEPENDS isn't signifcant even for older perf builds that use the same recipe. (cherry picked from commit 159cdb159ad0e9d3ed73cfc07f9acd5c0b608e7b) (From OE-Core rev: 0cfc604b48155ed4129bcc056610f32caf1a93b4) Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Add backports for two CVEs from upstream

2022-03-11T23:44:42+00:00

Based on commit from master (From OE-Core rev: a5bb7cc568d5da3633f3854295b0ebe46a2dd863) Signed-off-by: Richard Purdie (cherry picked from commit 6ae14b4ff7a655b48c6d99ac565d12bf8825414f) Signed-off-by: Sana Kazi Signed-off-by: Sana Kazi Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

vim: Update to 8.2.4524 for further CVE fixes

2022-03-11T23:44:42+00:00

Includes CVE-2022-0696, CVE-2022-0714, CVE-2022-0729. (From OE-Core rev: b7fa41cda88bffa5345d5b9768774cdf28f62b7b) Signed-off-by: Richard Purdie (cherry picked from commit 0d29988958e48534a0076307bb2393a3c1309e03) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

sstate: inside the threadedpool don't write to the shared localdata

2022-03-11T23:44:42+00:00

When inside the threadedpool we make a copy of the localdata to avoid some race condition, so we need to use this new localdata2 and stop write the shared localdata. (From OE-Core rev: 604146a242c3d5f5a9872bb756910f4bd1b58406) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie (cherry picked from commit 90fe6948a9df0b43c58120a9358adb3da1ceb5b9) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

systemd: Ensure uid/gid ranges are set deterministically

2022-03-11T23:44:42+00:00

meson.build will fall back to greping /etc/login.defs for values of these if they're not set. Different distros set them (Centos 7/8 does, Ubuntu does not) so output was not deterministic. Avoid this by setting to the default values. We now match the vaules from login.defs from shadow. (From OE-Core rev: 56f57c70fb87beb9a7181df8cb5e7a4a0b5a184a) Signed-off-by: Richard Purdie (cherry picked from commit 77a6ac0ac266d71e4fe67fd332662081f30cd7bf) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

asciidoc: update git repository

2022-03-11T23:44:42+00:00

The asciidoc-py3 repository has been renamed to asciidoc-py. (From OE-Core rev: 6b899f694ec57bb3c6254d59ac5c51378579c014) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

poky.conf: Bump version for 3.1.15 release

2022-03-10T16:40:45+00:00

(From meta-yocto rev: b835745e548e81255b78650a433ea14858efe603) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

poky.conf: update tested distros

2022-03-10T16:40:45+00:00

add fedora-35, opensuseleap-15.3 and almalinux-8.5 (From meta-yocto rev: 70ef17e11efa774e8b756b4bf3b428f3e010c1c5) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

linux-yocto: update genericx86* to v5.4.178

2022-03-10T16:40:45+00:00

(From meta-yocto rev: 72167ca6e94601773e708741a5914c639317a267) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie