linux/poky.git/meta/recipes-bsp, branch walnascar

grub2: mark CVE-2024-2312 as not applicable

2025-09-25T19:25:52+00:00

This issue is specific to the peimage module that Ubuntu add, and is not an upstream issue. (From OE-Core rev: 8d2fe3f403e6435e1ffe122a6776381090752d8a) (From OE-Core rev: 37c224f51817a948f2558f78eec23a3b1df1cb24) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

grub2: fix CVE-2024-56738

2025-09-25T19:25:51+00:00

Backport an algorithmic change to grub_crypto_memcmp() so that it completes in constant time and thus isn't susceptible to side-channel attacks. (From OE-Core rev: 30a1cc225a2bd5d044bf608d863a67df3f9c03be) (From OE-Core rev: f346b4e49a20023028238a810e0597b1c9f38d62) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

lrzsz: Fix build with gcc-15

2025-03-27T11:19:04+00:00

(From OE-Core rev: 565bfe5d2af9fe8d70886d5ac529d62dd0bc055c) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

lrzsz: Drop setting md5sum for SRC_URI

2025-03-25T21:20:41+00:00

Its deprecated (From OE-Core rev: c323495407410996fac690fe5c1caf243ee2e2c0) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

grub2: Add GRUB_MKIMAGE_OPTS for configurable grub-mkimage options

2025-03-24T17:29:16+00:00

Introduce the GRUB_MKIMAGE_OPTS variable to allow additional options to be passed to grub-mkimage, making its behavior more configurable. (for example, this allows disabling shim lock when necessary). Update do_mkimage to use ${GRUB_MKIMAGE_OPTS}. This change reduce the need for hardcoded modifications and makes future adjustments easier. (From OE-Core rev: a6147adefcba7aae3f4eb8ed76d6a94315cafe61) Signed-off-by: Valeria Petrov Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

opensbi: Do not inherit autotools bbclass

2025-03-24T17:29:16+00:00

This package is built using simple makefiles, therefore using autotools bbclass is not right and moreover it is now a hard error in core (From OE-Core rev: 3754ebfc0ef127922bce24c5afde4306541ce2f4) Signed-off-by: Khem Raj Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

pciutils: work around pseudo symlink creation race

2025-03-20T11:29:04+00:00

Richard managed to reproduce a pseudo bug that pciutils in a minimal test case[1] which confirmed that it was the symlink creation causing issues. The pciutils Makefile has several installation targets: - install: binaries, manpages, shared library - install-lib: headers, library symlinks, shared library We need to run both targets to install the full set of files we want to be installed, but notably they both create the .so symlink and as they're running in parallel this is what triggers the bug in pseudo. Until the bug has been resolved (or the Makefiles don't duplicate rules), just run the two targets separately. [ YOCTO #14957 ] [1] https://lore.kernel.org/openembedded-core/20250319133457.806384-1-richard.purdie@linuxfoundation.org/T/#u (From OE-Core rev: a5fc49fafe910a25be7372c82bfbd7876871ce3f) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

grub: patch CVE-2025-0678 and CVE-2025-1125

2025-03-13T11:00:36+00:00

Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 9d0422bfb97c01e4326dcad59a1fe8842d4cec90) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689

2025-03-13T11:00:36+00:00

Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 0fa593382a01d1dbeb6c697d422c1a186027f573) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub: patch CVE-2024-45778 and CVE-2024-45779

2025-03-13T11:00:36+00:00

Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 4e624e4737510f65a1dbbf31676eb6a4326aca72) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie