Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=nanbield 2024-03-28T17:20:58+00:00 2024-03-28T17:20:58+00:00 Steve Sakoman steve@sakoman.com 2024-03-28T17:17:48+00:00 urn:sha1:7b8aa378d069ee31373f22caba3bd7fc7863f447 (From OE-Core rev: d0e68072d138ccc1fb5957fdc46a91871eb6a3e1) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-22T14:16:34+00:00 Steve Sakoman steve@sakoman.com 2024-03-22T14:12:55+00:00 urn:sha1:7459fda0822eeaefda39170ec9f6bbe74491b39f (From OE-Core rev: 84a70edd2ce791dcd9b8b7a2f436f1d59cb2ea95) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Khem Raj raj.khem@gmail.com 2024-01-30T20:32:19+00:00 urn:sha1:51556868f6919df5349dbbb8c2a366ccd5bf76d0 Autobuilder sees and intermittent failure on strace tests and it occurs quite often therefore bump the size of image as the space requirement is more now with parallel execution enabled. [YOCTO #15370] (From OE-Core rev: 719a155b7f85d4ee623f78c3e85ba987f9142290) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 02d31355b20f8f3e7bd1b71c9412988eca9ec4b4) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-15T00:20:20+00:00 urn:sha1:521775dcd52bbb2fa29e2fd6e4e18223341e41a5 When a CVE is updated to be rejected, matching database entries must be removed. Otherwise: * an incremental update is not equivalent the to an initial download. * rejected CVEs might still appear as Unpatched in cve-check. (From OE-Core rev: 5b17b563908206667a7d14f390bd9b2de897774c) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f276a980b8930b98e6c8f0e1a865d77dfcfe5085) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-15T00:20:19+00:00 urn:sha1:11d9d02cf60444b034636aa2b59ea8438344293e When a CVE is created, it often has no precise version information and this is stored as "-" (matching any version). After an update, version information is added. The previous "-" must be removed, otherwise, the CVE is still "Unpatched" for cve-check. (From OE-Core rev: 67c4d9d27f06a07eac46c0f2cba8cfa1691b0737) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 641ae3f36e09af9932dc33043a0a5fbfce62122e) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-15T00:20:18+00:00 urn:sha1:8d5fb5f5d2328f3a6c7cb4093e1ec00ff8ed6925 Add a URL to the doc of the API used in the function. ... and fix a small typo dabase -> database (From OE-Core rev: c8ae1765e81f9dd8e95a251cfda9e4d820bb5630) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e0157b3b81333a24abd31dbb23a6abebca3e7ba7) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-15T00:20:17+00:00 urn:sha1:cfea74e239d11e86ec664e5f7020acbb7d960f8c CVE_CHECK_DB_FILE is already defined in cve-check.bbclass which is always inherited in cve-update-nvd2-native (There is a check line 40). Remove it to avoid confusion. Otherwise, this should not change anything. (From OE-Core rev: 572ee5512a3d8941c6842af451ca6c9bb75773d3) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e5f3f223885c17b7007c310273fc7c80b90a4105) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-13T15:13:27+00:00 urn:sha1:c98a98ebb36faa2f5b4770a80b06ce431f2f2c95 Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to specify the maximum age of the database for doing an incremental update For older databases, a full re-download is done. With a value of "0", this forces a full-redownload. (From OE-Core rev: 665c880ff8be1b18c2abe8fa878643dfa64b7d3d) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 74c1765111b6610348eae4b7e41d7045ce58ef86) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-20T16:02:50+00:00 Yoann Congal yoann.congal@smile.fr 2024-03-13T15:13:26+00:00 urn:sha1:e1e4d53ce8c3040768ffb166813b82e791c5dc0f attmepts -> attempts (From OE-Core rev: 0c2e186e1ed8a904945066672e8e2af8b2ea284c) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dc18aaeda8e810f9082a0ceac08e5e4275bbd0f7) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-03-16T18:33:21+00:00 Lee Chee Yang chee.yang.lee@intel.com 2024-03-11T08:39:48+00:00 urn:sha1:0d4b501890fbc72118f2f8d31b4c10148be4db8c libxml2 2.11.7 Security [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking libxml2 2.11.6 Regressions threads: Fix --with-thread-alloc xinclude: Fix 'last' pointer in xmlXIncludeCopyNode Bug fixes parser: Fix potential use-after-free in xmlParseCharDataInternal (From OE-Core rev: a0d164d7705034b2c351c518cebad8811ed5026f) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>