linux/poky.git/meta/recipes-core/ovmf, branch halstead/hashclient

ovmf: set CVE_STATUS for a few CVEs

2024-04-08T16:35:35+00:00

For all those CVE-2019-xxxxx CVEs, following the links in NVD, we can see they have all been fixed. For CVE-2014-4859 and CVE-2014-4860, there's no useful links in NVD, but according to the following two links, they have also been fixed. https://security-tracker.debian.org/tracker/CVE-2014-4859 https://security-tracker.debian.org/tracker/CVE-2014-4860 (From OE-Core rev: 62f1e5d1bb8df17aaa14265a7acf60e5b44b53b5) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

ovmf: update 202308 -> 202402

2024-04-08T11:55:21+00:00

RP: The upgrade covers these security issues: CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237 (From OE-Core rev: 46763f78344547a3126b536695077c9e7e60c9d6) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ovmf: set CVE_STATUS for CVE-2014-8271

2024-04-08T10:01:09+00:00

CVE-2014-8271 has an unusual versioning, svn_16280, which breaks the version comparison and gives us warning like below: Failed to compare 202308 < svn_16280 for CVE-2014-8271 The fix has been there since 2014, our current version has included the fix. (From OE-Core rev: fdd74b3f3e3a8a07a6107e6ef07198ebe63d2bc8) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

ovmf: set CVE_PRODUCT and CVE_VERSION

2024-04-04T13:05:03+00:00

Set CVE_PRODUCT and CVE_VERSION for ovmf. NVD uses 'edk2' and the version should be the date only. Here's an example: https://nvd.nist.gov/vuln/detail/CVE-2023-45232 (From OE-Core rev: 7d11e4d55c9de23edbf5ba21d7ee007bab20c38a) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

ovmf: drop PE, PR from /usr/src/debug paths

2023-11-20T15:30:52+00:00

(From OE-Core rev: d12ee54263e3a2ed8b1a84b72a2a1423fe09c3cf) Signed-off-by: Martin Jansa Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ovmf: update edk2-stable202305 -> edk2-stable202308

2023-09-18T07:53:10+00:00

(From OE-Core rev: 48878248d39d7e0bf66f33051f7ecef49c14e1e1) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

meta: add missing summaries for image recipes

2023-07-30T08:16:52+00:00

(From OE-Core rev: ff6f67f8fa6a5601a4203000ed039252aea1ef93) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ovmf: update 202302 -> 202305

2023-06-27T15:23:40+00:00

(From OE-Core rev: 175927cedffbd9fe5815219984d8b3c4be56ad98) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ovmf: update 202211 -> 202302

2023-05-22T09:53:47+00:00

(From OE-Core rev: 8cdea67a68896a9e5964ffcd3dff2ca465ef5675) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ovmf: update edk2-stable202208 -> edk2-stable202211

2022-12-21T10:16:31+00:00

(From OE-Core rev: f59ac932a6114eb662109ba958e591c34c93801c) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie