linux/poky.git/meta/recipes-bsp, branch kirkstone-4.0.18

u-boot: Move UBOOT_INITIAL_ENV back to u-boot.inc

2024-03-12T14:06:19+00:00

Commit cc6c3e31526d ("u-boot: Move definitions to common locations") moved UBOOT_INITIAL_ENV to uboot-config.bbclass, but it should be kept at u-boot.inc because it encodes ${PN} in it, which should be set by the U-Boot recipe. Currently, whatever inherits uboot-config bbclass will fill-in its own PN, which would change the content of UBOOT_INITIAL_ENV per-package. Cc: Klaus Heinrich Kiwi Cc: Marek Vasut Fixes: cc6c3e31526d ("u-boot: Move definitions to common locations") (From OE-Core rev: 18b76259d27dc045f621cd512582c37e8bbab45c) Signed-off-by: Fabio Estevam Backported from master: 0b0c4b37d318b86f100512476ffd861e0ce1f47e Signed-off-by: Fabio Estevam Signed-off-by: Steve Sakoman

grub: fix CVE-2023-4693

2023-12-03T02:36:56+00:00

Upstream-Status: Backport from https://git.savannah.gnu.org/gitweb/?p=grub.git;a=commit;h=0ed2458cc4eff6d9a9199527e2a0b6d445802f94 (From OE-Core rev: 1bbbba098dba85ec1b875512d75f7eca9026e781) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

grub: fix CVE-2023-4692

2023-11-28T15:00:32+00:00

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved. References: https://nvd.nist.gov/vuln/detail/CVE-2023-4692 https://bugzilla.redhat.com/show_bug.cgi?id=2236613 (From OE-Core rev: c89835b37366dde6c74f8221fd5a295ecabf8225) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

efivar: backport 5 patches to fix build with gold

2023-09-09T02:09:41+00:00

* LDFLAGS += "-fuse-ld=bfd" in the recipe doesn't work and it still fails to build with ld-is-gold in DISTRO_FEATURES removal of this line sent to master in: https://lists.openembedded.org/g/openembedded-core/message/185167 * the most important ones are the 1st which removes --add-needed and the last which removes src/include/workarounds.mk completely while 2-4 patches just update src/include/workarounds.mk for the last one to apply cleanly * alternatively we can bump SRCREV to latest 38 as master did in: https://git.openembedded.org/openembedded-core/commit/?id=4df808c616f847d90203582fd950a49bb8360dd0 which brings 23 commits, but instead of adding 5 more patches allows to remove 5 (From OE-Core rev: d5c7ec0be32aa75fa7973840adf5251d22018766) Signed-off-by: Martin Jansa Signed-off-by: Steve Sakoman

grub: submit determinism.patch upstream

2023-07-12T15:11:38+00:00

(From OE-Core rev: 846d8097fed9498fab7120ed61a962ff2c15746a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 61947762e410c685f667e0af6440fb8a33cd6777) Signed-off-by: Steve Sakoman

v86d: Improve kernel dependency

2023-07-12T15:11:38+00:00

Working with enabling SPDX, an issue was observerd where v86d wasn't rebuilding when the kernel was changed from linux-yocto to linux-yocto-rt. This is due to the code in sstatesig.py which was seeing the RRECOMMENDS on a kernel module and ignoring the DEPENDS. The v86d is technically a kernel module since it uses kernel header files. There are two ways to address this, we could inherit the module-base class and the dependency code does the correct thing. It appears the code doesn't look into STAGING_KERNEL_DIR though and doesn't use the kernel sources. We can therefore drop the DEPENDS and the code will the do the correct thing. (From OE-Core rev: b842b8b51e0819eebf1fb3a2359b8c06863e553a) Signed-off-by: Richard Purdie (cherry picked from commit 37ccd11cb0b89416b8e23160445186269b6c0c8a) Signed-off-by: Steve Sakoman

pm-utils: fix multilib conflictions

2023-07-01T18:37:24+00:00

It fails to instal pm-utils and lib32-pm-utils at same time: Error: Transaction test error: file /usr/bin/pm-is-supported conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-hibernate conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-powersave conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-suspend conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 file /usr/sbin/pm-suspend-hybrid conflicts between attempted installs of lib32-pm-utils-1.4.1-r1.corei7_32 and pm-utils-1.4.1-r1.corei7_64 All of the conflicted files either is script which source a file in ${libdir}, or a link file to some file in ${libdir}. Compare the content of installed files in ${libdir} exclude binaries, only the paths of ${libdir} diff. So re-define libdir with ${nonarch_libdir} to fix the conflicts. (From OE-Core rev: 7d99987f76c58ec1f9ee5efffee0705b2c542ad7) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie (cherry picked from commit f836541bcfdbf033a37537530b4e3b87b0a7f003) Signed-off-by: Steve Sakoman

efibootmgr: update compilation with musl

2022-12-23T23:05:50+00:00

Since the commit 005b6aba89eaf1b79fdd7565dd028fdd9bbfcc7d (efivar: add musl libc compatibility) efibootmgr compiles with musl too. Update the variable to take that into account. (From OE-Core rev: ada5e64a97d5f269886772540e0bb0c324088b21) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: backport patches to fix CVE-2022-28736

2022-12-13T15:23:34+00:00

(From OE-Core rev: 01be69264e4bf66cd1cb5acf949263d955171fc4) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub2: backport patch to fix CVE-2022-2601 CVE-2022-3775

2022-12-07T15:02:45+00:00

Backport patch from upstream to solve CVE-2022-2601 CVE-2022-3775 dependency: font: Fix size overflow in grub_font_get_glyph_internal() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=9c76ec09ae08155df27cd237eaea150b4f02f532) Backport patch from upstream to fix following CVEs: CVE-2022-2601: font: Fix several integer overflows in grub_font_construct_glyph() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=768e1ef2fc159f6e14e7246e4be09363708ac39e) CVE-2022-3775: font: Fix an integer underflow in blit_comb() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=992c06191babc1e109caf40d6a07ec6fdef427af) (From OE-Core rev: 0fc6693ab4f2f4b231b80c9675acea4e54b973f0) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie