linux/poky.git/meta/recipes-core, branch gatesgarth

build-appliance-image: Update to gatesgarth head revision

2021-05-06T10:20:41+00:00

(From OE-Core rev: d47b7cdc3508343349f3bb3eacb2dc3227dd94d2) Signed-off-by: Richard Purdie

cve-update-db-native: skip on empty cpe23Uri

2021-04-30T13:37:32+00:00

Recently an entry in the NVD DB appeared that looks like that {'vulnerable': True, 'cpe_name': []}. As besides all the vulnerable flag no data is present we would get a KeyError exception on acccess. Use get method on dictionary and return if no meta data is present Also quit if the length of the array after splitting is less than 6 (From OE-Core rev: e9776c55cf251fc884ac3ce4fd6c96769b1d17ff) Signed-off-by: Konrad Weihmann Signed-off-by: Richard Purdie (cherry picked from commit 00ce2796d97de2bc376b038d0ea7969088791d34) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

busybox: fix CVE-2021-28831

2021-04-23T09:41:21+00:00

Backport patch to fix CVE-2021-28831. (From OE-Core rev: 147a08dced5e565f19f4987a3c199780dc00f878) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit e579dbd9a6b2472ca90f411c0b594da9e38c9aca) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cve-update-db-native: consider version suffix when update CVE db

2021-04-19T11:55:20+00:00

some record from NVD can merge or split suffix from version, for example: CVE-2017-15906 "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*" "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:4.7p1:*:*:*:*:*:*:*" in such case include the suffix into version when update local CVE db. (From OE-Core rev: ecb41c87695c483959e2d96fcb6ca7cd92fd7315) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie (cherry picked from commit 13cc68197f81bb7c76fa1abecc5dd720b8bdb8d5) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

glibc: Pull latest 2.32 HEAD

2021-04-19T11:55:20+00:00

New commits: $ git log --format="%h %s" df31c7ca927242d5d4eee97f93a01e23ff47e332..f84949f1c4bbf20e6a1d9a5859cf012cde060ede f84949f1c4 powerpc64: Workaround sigtramp vdso return call 5e43566f0f nscd: Fix double free in netgroupcache [BZ #27462] Note also that additionally CVE-2021-3326 has been whitelisted as it was already present in the previous state. (From OE-Core rev: c11a17a4fc5697216e26d7b39fd873d655e3a586) Signed-off-by: Anatol Belski Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

build-appliance-image: Update to gatesgarth head revision

2021-03-28T21:33:05+00:00

(From OE-Core rev: fdae970656cc421c542af9856bc9ae038c61db13) Signed-off-by: Richard Purdie

build-appliance-image: Drop kernel module handling

2021-03-28T21:31:55+00:00

kernel-devsrc is a dependency of the image so we no longer need the symlink creation code or the module-base inherit/dependency as it is included in that recipe. The KERNEL_VERSION usage was broken anyway as the module usage would have needed a: do_image[depends] += "build-appliance-image:do_configure" which wasn't present so it was indeterminate if KERNEL_VERSION was set correctly. (From OE-Core rev: bb60d68c0cc8b2d1884e8d68966dffc563454c74) Signed-off-by: Richard Purdie (cherry picked from commit a46b43bb67b2f87ec370480e50a2e2d111555b75) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

glib-2.0: Fix CVE-2021-27219

2021-03-28T21:31:55+00:00

The upstream patches are only in glib >= 2.66.6 and >= 2.67.3 and won't be backported. This patch is developed based on the upstream patch set and consulting teh backports recently made by Ubuntu for the 2.64.6 series. (From OE-Core rev: 513d2a82cc9574983d017a2c0b2de87e181befa5) Signed-off-by: Anatol Belski Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

systemd-conf: do not ask for DHCP if configured on kernel command line

2021-03-28T21:31:55+00:00

In cases where we configure the IP address and more on the kernel command line with ip= we should not ask for DHCP with systemd-networkd later on. We have such a setup with our runqemu script. With this match in place we can also deploy this unit on qemu systems. (From OE-Core rev: a321345bee919ff16f6041ded26776da890c395d) Signed-off-by: Stefan Schmidt Signed-off-by: Richard Purdie (cherry picked from commit 8c4981e740c0e630200dbc77c9e3dfd3e43b790b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

systemd: Fix importd requirements comment

2021-03-10T00:24:25+00:00

The comment above the importd config states curl, which does not exist in PACKAGECONFIG. Adding it results in the following error (and then misleading compilation failures): WARNING: systemd-1_244.5-r0 do_configure: QA Issue: systemd: invalid PACKAGECONFIG: curl [invalid-packageconfig] Support for curl is currently enabled through journal-upload: PACKAGECONFIG[journal-upload] = "-Dlibcurl=true,-Dlibcurl=false,curl" While it might be more appropriate to deprecate "journal-upload" in favor of a "curl" PACKAGECONFIG entry, simply fix the importd comment for now by stating upload-journal instead of curl. (From OE-Core rev: e3013d4c9c46bade2f6c38c26b779936e687d57c) Signed-off-by: Vivien Didelot Signed-off-by: Richard Purdie (cherry picked from commit e6a0bced605da58ff43ff06ea6a1d67e84c98d91) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie