linux/poky.git, branch yocto-4.0.21

build-appliance-image: Update to kirkstone head revision

2024-09-07T12:42:08+00:00

(From OE-Core rev: c40a3fec49942ac6d25ba33e57e801a550e252c9) Signed-off-by: Steve Sakoman

poky.conf: bump version for 4.0.21

2024-09-07T12:38:17+00:00

(From meta-yocto rev: 10911ca9695f096a6415ac026d6aefe3ea78adea) Signed-off-by: Steve Sakoman

wireless-regdb: upgrade 2024.05.08 -> 2024.07.04

2024-09-07T12:38:17+00:00

(From OE-Core rev: f1dc8f8b95aeba1edb92d960074538239d9f643d) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit b460d2d55a35450564ea04255153b0a3bf715530) Signed-off-by: Steve Sakoman

apr: upgrade 1.7.2 -> 1.7.5

2024-09-07T12:38:17+00:00

Refreshed patch 0001-configure-Remove-runtime-test-for-mmap-that-can-map-.patch Includes security fix CVE-2023-49582 changelog: https://downloads.apache.org/apr/CHANGES-APR-1.7 (From OE-Core rev: 4eb12d8683bd22b6503a64070b81b52f0d2f373a) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

python3: Security fix for CVE-2024-8088

2024-09-07T12:38:17+00:00

CVE fixed: - CVE-2024-8088: python: cpython: denial of service in zipfile Upstream-Status: Backport from https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db (From OE-Core rev: 295addec33c83443423a3ef87905c3a70f44a4e7) Signed-off-by: Rohini Sangam Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman

sqlite3: Rename patch for CVE-2022-35737

2024-09-07T12:38:17+00:00

The patch "0001-sqlite-Increased-the-size-of-loop-variables-in-the-printf-implementation.patch" fixes CVE-2022-35737. (From OE-Core rev: 9a875873e566a6673a65a8264fd0868c568e2a2c) Signed-off-by: Vrushti Dabhi Signed-off-by: Steve Sakoman

sqlite3: CVE-ID correction for CVE-2023-7104

2024-09-07T12:38:17+00:00

- The commit [https://sqlite.org/src/info/0e4e7a05c4204b47] ("Fix a buffer overread in the sessions extension that could occur when processing a corrupt changeset.") fixes CVE-2023-7104 instead of CVE-2022-46908. - Hence, corrected the CVE-ID in CVE-2023-7104.patch. - Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-7104 (From OE-Core rev: 9d7f21f3d0ae24d0005076396e9a929bb32d648e) Signed-off-by: Vrushti Dabhi Signed-off-by: Steve Sakoman

qemu: fix CVE-2024-7409

2024-09-07T12:38:17+00:00

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-7409 Upstream Patches: https://github.com/qemu/qemu/commit/fb1c2aaa981e0a2fa6362c9985f1296b74f055ac https://github.com/qemu/qemu/commit/c8a76dbd90c2f48df89b75bef74917f90a59b623 https://gitlab.com/qemu-project/qemu/-/commit/b9b72cb3ce15b693148bd09cef7e50110566d8a0 https://gitlab.com/qemu-project/qemu/-/commit/3e7ef738c8462c45043a1d39f702a0990406a3b3 (From OE-Core rev: d84ab04dc66cb83638f96fcd2f4c67e67489c410) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

grub: fs/fat: Don't error when mtime is 0

2024-09-04T12:57:57+00:00

A issue was found when I run "runqemu genericx86-64 ovmf", grub failed to boot, it's a known issue has been fixed in grub upstream, backport the fix. (From OE-Core rev: 6992437d725f9cc88da4261814b69aaadc5ef0f2) Signed-off-by: Ming Liu Signed-off-by: Richard Purdie (cherry picked from commit 51eab4bb0cae46c9c32d28986eb97badf47594b7) Signed-off-by: Chaitanya Vadrevu Signed-off-by: Steve Sakoman

cryptodev-module: Fix build for linux 5.10.220

2024-09-04T12:57:57+00:00

Upstream-Status: Backport [https://github.com/cryptodev-linux/cryptodev-linux/commit/157a624d7a892ea5fb2df4bbd4e71c008adbecb7] (From OE-Core rev: 047ee2fe7bc9920038213d014a920518a264ef17) Signed-off-by: Hugo SIMELIERE Signed-off-by: Steve Sakoman