linux/poky.git/meta/recipes-bsp/grub/files, branch masterMirror of git.yoctoproject.org/pokyhttps://git.enea.com/cgit/linux/poky.git/atom?h=master2025-11-07T13:31:53+00:00The poky repository master branch is no longer being updated.2025-11-07T13:31:53+00:00Richard Purdierichard.purdie@linuxfoundation.org2025-11-07T13:31:53+00:00urn:sha1:8c22ff0d8b70d9b12f0487ef696a7e915b9e3173
You can either:
a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs
b) use the new bitbake-setup
You can find information about either approach in our documentation:
https://docs.yoctoproject.org/
Note that "poky" the distro setting is still available in meta-yocto as
before and we continue to use and maintain that.
Long live Poky!
Some further information on the background of this change can be found
in: https://lists.openembedded.org/g/openembedded-architecture/message/2179
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub2: fix CVE-2024-567382025-09-11T10:31:56+00:00Ross Burtonross.burton@arm.com2025-09-09T14:31:18+00:00urn:sha1:1d2edd90f41d16880cb2e6a02f377068cd90ed73
Backport an algorithmic change to grub_crypto_memcmp() so that it
completes in constant time and thus isn't susceptible to side-channel
attacks.
(From OE-Core rev: 30a1cc225a2bd5d044bf608d863a67df3f9c03be)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2025-0678 and CVE-2025-11252025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:10:00+00:00urn:sha1:42b745435f94b6dfe364ec0ca44653d2ed88ff62
Cherry-pick patch mentioning these CVEs.
(From OE-Core rev: 9d0422bfb97c01e4326dcad59a1fe8842d4cec90)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-06892025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:59+00:00urn:sha1:ce5affae93543a0f031b279914fd61fc556f6ed2
Cherry-pick patch mentioning these CVEs.
(From OE-Core rev: 0fa593382a01d1dbeb6c697d422c1a186027f573)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2024-45778 and CVE-2024-457792025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:58+00:00urn:sha1:5b95c74b817f9aaf9266825b7098e7c036574a3d
Cherry-pick patch mentioning these CVEs.
(From OE-Core rev: 4e624e4737510f65a1dbbf31676eb6a4326aca72)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2025-11182025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:57+00:00urn:sha1:570958575aa5f10f80e4457ee937fc2e85d50f29
Cherry-pick patch mentioning this CVE.
(From OE-Core rev: 16739e8eb936ba1ed9f48cffca848691f258bcd5)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2025-06902025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:56+00:00urn:sha1:77c34724006ce5339c5a88b4b26ac04278ebb80a
Cherry-pick patch mentioning this CVE.
(From OE-Core rev: e4c372c5078f60a980e8161ea88cee2e3b7f9626)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2024-457772025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:55+00:00urn:sha1:2ec98a38025b12beb53561f6476ea33b7120e24c
Cherry-pick patch mentioning this CVE.
(From OE-Core rev: c08e2e4e8b04107723702e0e97124642fb82f92f)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2024-457762025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:54+00:00urn:sha1:cdc079c02934e61d9d6576277b8f2d71127c183f
Cherry-pick patch mentioning this CVE.
(From OE-Core rev: f2cd97d9312f233a604d62a662a93a2d7d8ab3f3)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub: patch CVE-2025-06222025-03-13T11:00:36+00:00Peter Markopeter.marko@siemens.com2025-03-11T18:09:53+00:00urn:sha1:1ab99590d7f38255b090ee2c01fe7e1ca03466f5
Cherry-pick patch mentioning this CVE.
(From OE-Core rev: 13fafdaa6958bd4cf1ff350caf355c8c41a80e47)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>