linux/poky.git/meta/recipes-bsp, branch yocto-3.1.18

efivar: change branch name to main

2022-07-15T11:29:17+00:00

Upstream has changed branch name to main from master. Change SRC_URI accordingly. (From OE-Core rev: f7af3c555d9ddef54264fa7da911507bca3eecb4) Signed-off-by: Anuj Mittal Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub2: CVE-2021-3981 Incorrect permission in grub.cfg allow unprivileged user to read the file content

2022-07-08T07:27:20+00:00

Source: https://git.savannah.gnu.org/cgit/grub.git/ MR: 116495 Type: Security Fix Disposition: Backport from https://git.savannah.gnu.org/cgit/grub.git/diff/util/grub-mkconfig.in?id=0adec29674561034771c13e446069b41ef41e4d4 ChangeID: fce3d59e50320bef247bb981352051b8f953a4fc Description: CVE-2021-3981 grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content. Affects "grub2 < 2.06" (From OE-Core rev: fd9dc688ead5cf0225cba94c380a618e332d548f) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

u-boot: Correct the SRC_URI

2022-04-22T22:39:12+00:00

This avoids a redirect. (From OE-Core rev: 4da46e0423a7003fb689a8b6a03f5924b8f22cb9) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie (cherry picked from commit 879bc5098943cf6977c32555ac31cb21be7b46ae) Signed-off-by: Steve Sakoman (cherry picked from commit 2233e83da4fab1d6d34517f6ebf5860f4fd5b2a1) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: ignore CVE-2021-46705

2022-04-09T07:27:11+00:00

This is specific to SUSE Linux. (From OE-Core rev: 10e12faf6172f399da7b3d73a33bd908aa8f32b3) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 594baef3b08d40fbbf1899f4cadeb9931c035c1a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: add a fix for a crash in scripts

2022-03-02T00:21:37+00:00

This patch adds a fix for a crash in grub's script handling. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: 79ce9059f716546a7d6f4562ba194aedd90c22cd) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: avoid a NULL pointer dereference

2022-03-02T00:21:37+00:00

This patch adds a fix for a NULL pointer dereference in grub's commands/ls. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: 6666dccd33178445f3c4fe277354393efb70285a) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: add a fix for a NULL pointer dereference

2022-03-02T00:21:37+00:00

This patch adds a fix for a NULL pointer dereference in grub's script/execute. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: ddf62ae472c3c26af7a4c91e4216c8d5ba4604ac) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: fix incorrect use of a negative value

2022-03-02T00:21:37+00:00

This patch adds a fix for an incorrect use of a negative value in grub's util/glue-efi. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: de1fe600212ff6d460bdc672d7ca0e13afbe7514) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: add a fix for an incorrect cast

2022-03-02T00:21:37+00:00

This patch adds a fix for incorrect casting from signed to unsigned in grub's util/grub-editenv. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: 906ecdc9efbc1b4025c2c7a9797ebd374f8508af) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: add a fix for NULL pointer dereference

2022-03-02T00:21:37+00:00

This patch adds a fix for a NULL pointer dereference in grub's util/grub-install. It is a part of a security series [1]. [1] https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html (From OE-Core rev: 35310bcfd53752081ed600e77f58ca3fb8db46ac) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie