linux/poky.git/meta/recipes-bsp, branch hardknott

grub2: fix CVE-2021-3981

2022-01-14T09:34:04+00:00

(From OE-Core rev: f06da194871fec7c4586a9141314f2760292d6d0) Signed-off-by: Yongxin Liu Signed-off-by: Richard Purdie (cherry picked from commit bb554d14142f93c39fd1516a31757006531c348f) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

meta: add explicit branch and protocol to SRC_URI

2021-11-21T11:40:35+00:00

Add branch name explicitly to SRC_URI where it's not defined and switch to using https protocol for Github projects. The change was made using convert-srcuri script in scripts/contrib. (From OE-Core rev: ab781d4e3fa7425d96ea770ddfd0f01f62018c5b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

grub: Exclude CVE-2019-14865 from cve-check

2021-05-30T07:19:35+00:00

The CVE only applies to RHEL. (From OE-Core rev: a1130182a086eebeff5dfc5bebc708a3191fb5be) Signed-off-by: Richard Purdie

grub2: Add CVE whitelist entries for issues fixed in 2.06

2021-05-30T07:19:35+00:00

We're using a pre-release version of 2.06 so these issues are fixed but continue to show up in the checks since it is pre-2.06 and the CPE entries are "before but excluding 2.06". Adding these will clean up CVE reports until the 2.06 release comes out. (From OE-Core rev: 07451418e8ffef608e05b981bf7516bef5450d49) Signed-off-by: Richard Purdie

grub2.inc: remove '-O2' from CFLAGS

2021-05-15T16:18:21+00:00

It fails to boot grub after upgrade grub to 2.06. According to description in https://bugzilla.yoctoproject.org/show_bug.cgi?id=14367 it is introduced by a commit to fix CVE. So remove option '-O2' from CFLAGS rather than revert the commit to avoid the failure. [YOCTO #14367] CC: Tony Battersby (From OE-Core rev: 7520bd4f72d550052774042c542a3d3ee874b363) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie (cherry picked from commit 69805629b8f47fd46a37b7c5cc435982e2ac3d1d) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

u-boot: Move definitions to common locations

2021-04-06T10:36:51+00:00

Move some definitions from u-boot.inc into uboot-config.bbclass and similarly from kernel-fitimage.bbclass into uboot-sign.bbclass, so that they can be useful when signing the U-boot proper fitimage, for a verified-boot SPL. (From OE-Core rev: cc6c3e31526d3b6ef3a87ba5e548fcad7483bd51) Signed-off-by: Klaus Heinrich Kiwi Signed-off-by: Richard Purdie

grub2: Enable on riscv32

2021-03-30T23:06:23+00:00

Update the patch as submitted upstream to grub2 (From OE-Core rev: a1ce702bb5317712083ae32332051c36923c4a50) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

grub-efi: Re-introduce lost cast to long

2021-03-28T21:28:27+00:00

This cast was accidentally dropped in https://git.savannah.gnu.org/cgit/grub.git/commit/?id=2bf40e9e5be9808b17852e688eead87acff14420 (From OE-Core rev: c032297695e9e4bb4d0fb12dc883044bdfa870f2) Signed-off-by: Khem Raj Cc: Alistair Francis Signed-off-by: Richard Purdie

grub2: Disable for RISCV32

2021-03-28T21:28:27+00:00

A full working port is not available yet, until such time disable it (From OE-Core rev: a8a8b7f3db955bbdb1abfce1e0be004521348669) Signed-off-by: Khem Raj Cc: Alistair Francis Signed-off-by: Richard Purdie

u-boot: Fix CVE-2021-27097, CVE-2021-27138

2021-03-23T22:51:25+00:00

Backport fixes for CVE-2021-27097 and CVE-2021-27138 as well as a precursor fdt validation fix that allows using the upstream patches for the CVEs without significant rebasing. Note that the additional upstream changes to add new U-Boot fit image tests have been left out to keep the patch count down. Those tests are currently not used for ptest or oe-selftest, so it is believed their absence should not be problematic. (From OE-Core rev: b6c2df341d7e6da5defca9a5567fdb7212489efa) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie