linux/poky.git/meta/recipes-bsp, branch hardknott-next

grub: Exclude CVE-2019-14865 from cve-check

2021-05-30T07:19:35+00:00

The CVE only applies to RHEL. (From OE-Core rev: a1130182a086eebeff5dfc5bebc708a3191fb5be) Signed-off-by: Richard Purdie

grub2: Add CVE whitelist entries for issues fixed in 2.06

2021-05-30T07:19:35+00:00

We're using a pre-release version of 2.06 so these issues are fixed but continue to show up in the checks since it is pre-2.06 and the CPE entries are "before but excluding 2.06". Adding these will clean up CVE reports until the 2.06 release comes out. (From OE-Core rev: 07451418e8ffef608e05b981bf7516bef5450d49) Signed-off-by: Richard Purdie

grub2.inc: remove '-O2' from CFLAGS

2021-05-15T16:18:21+00:00

It fails to boot grub after upgrade grub to 2.06. According to description in https://bugzilla.yoctoproject.org/show_bug.cgi?id=14367 it is introduced by a commit to fix CVE. So remove option '-O2' from CFLAGS rather than revert the commit to avoid the failure. [YOCTO #14367] CC: Tony Battersby (From OE-Core rev: 7520bd4f72d550052774042c542a3d3ee874b363) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie (cherry picked from commit 69805629b8f47fd46a37b7c5cc435982e2ac3d1d) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

u-boot: Move definitions to common locations

2021-04-06T10:36:51+00:00

Move some definitions from u-boot.inc into uboot-config.bbclass and similarly from kernel-fitimage.bbclass into uboot-sign.bbclass, so that they can be useful when signing the U-boot proper fitimage, for a verified-boot SPL. (From OE-Core rev: cc6c3e31526d3b6ef3a87ba5e548fcad7483bd51) Signed-off-by: Klaus Heinrich Kiwi Signed-off-by: Richard Purdie

grub2: Enable on riscv32

2021-03-30T23:06:23+00:00

Update the patch as submitted upstream to grub2 (From OE-Core rev: a1ce702bb5317712083ae32332051c36923c4a50) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

grub-efi: Re-introduce lost cast to long

2021-03-28T21:28:27+00:00

This cast was accidentally dropped in https://git.savannah.gnu.org/cgit/grub.git/commit/?id=2bf40e9e5be9808b17852e688eead87acff14420 (From OE-Core rev: c032297695e9e4bb4d0fb12dc883044bdfa870f2) Signed-off-by: Khem Raj Cc: Alistair Francis Signed-off-by: Richard Purdie

grub2: Disable for RISCV32

2021-03-28T21:28:27+00:00

A full working port is not available yet, until such time disable it (From OE-Core rev: a8a8b7f3db955bbdb1abfce1e0be004521348669) Signed-off-by: Khem Raj Cc: Alistair Francis Signed-off-by: Richard Purdie

u-boot: Fix CVE-2021-27097, CVE-2021-27138

2021-03-23T22:51:25+00:00

Backport fixes for CVE-2021-27097 and CVE-2021-27138 as well as a precursor fdt validation fix that allows using the upstream patches for the CVEs without significant rebasing. Note that the additional upstream changes to add new U-Boot fit image tests have been left out to keep the patch count down. Those tests are currently not used for ptest or oe-selftest, so it is believed their absence should not be problematic. (From OE-Core rev: b6c2df341d7e6da5defca9a5567fdb7212489efa) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie

grub: upgrade 2.04 -> 2.06~rc1

2021-03-20T18:54:56+00:00

2.06 RC1 release have a number of CVEs fixed: CVE-2020-15705 CVE-2021-3418 CVE-2020-27749 CVE-2021-20233 CVE-2021-20225 CVE-2020-25647 CVE-2020-25632 CVE-2020-27779 CVE-2020-14372 CVE-2020-15707 CVE-2020-15706 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-14308 CVE-2020-10713 CVE-2014-4607 Dropped backported patches. (From OE-Core rev: 36a59d63619c2225fe48aa1d8fb1cdabedfffc03) Signed-off-by: Richard Purdie

u-boot: Add support for building for qemuriscv32

2021-03-14T16:33:59+00:00

(From OE-Core rev: a9666fbfe2dcb43fe9e8fd78e357eaacd99ca75e) Signed-off-by: Alistair Francis Signed-off-by: Richard Purdie