linux/poky.git/meta/recipes-core, branch yocto-4.0.9

systemd: fix wrong nobody-group assignment

2023-03-28T21:31:54+00:00

The generated /etc/group file had a wrong group name for nobody-group which was nobody with same id as nogroup groupd. This was leading to duplcate groups, with same ids and different names. More can be read on this link: https://bugzilla.yoctoproject.org/show_bug.cgi?id=11766 (From OE-Core rev: 08ab1f02da65ee9815115e6a1cdb51ffed10a2dc) Signed-off-by: Piotr Łobacz Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit d69fccf2e5d108dd7c6059310924588d36a45865) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

systemd: fix CVE-2022-4415

2023-03-28T21:31:53+00:00

Backport from v250-stable branch (v250.9) (From OE-Core rev: 2e502df0610cd65c7e2897458ee8a25359614f1a) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

base-files: Drop localhost.localdomain from hosts file

2023-03-23T22:45:34+00:00

This was likely something we took inspiration from elsewhere with. It was added in: https://git.openembedded.org/openembedded/commit/packages/netbase/netbase/hosts?id=c8e5702127e507e82e6f68a4b8c546803accea9d in 2005. Debian added this entry around 2004 and discussed and dropped it in 2005: https://lists.debian.org/debian-devel/2005/10/msg00559.html resulting in: https://salsa.debian.org/installer-team/netcfg/-/commit/3c15ee521b2b8f47b34ccc7f610523cd284f2221 We should drop this for some of the reasons in those threads, it doesn't seem to be doing anything too helpful and isn't what most applications expect. (From OE-Core rev: 7df46e003ea76cf7d5b7263f23bd6e6a781bd22c) Signed-off-by: Richard Purdie (cherry picked from commit e730d005fa8aec07f9ae25c58d4566eaa92a6997) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

buildtools-tarball: Handle spaces within user $PATH

2023-03-23T22:45:34+00:00

The environment-setup script generated by the recipe was not quoting the user existing PATH when updating it causing the export command to fail. Add necessary double quotes around $PATH. (From OE-Core rev: c9bf05d819fc27cb2943d138e2376b69140727b4) Signed-off-by: Kenfe-Mickael Laventure Signed-off-by: Alexandre Belloni (cherry picked from commit 2d4c032bf3187aaa953a0c33a999074e695f54bb) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

glibc: Add missing binutils dependency

2023-03-23T22:45:34+00:00

glibc has it's dependencies handled more manually due to it's place in the toolchain bootstrap. It depends upon the compiler and indirectly through that to binutils. This did mean that if binutils changes and the compiler does not, sstate and hash equivalence could mean that glibc wouldn't rebuild. Add a direct dependency on binutils that if it changes, it forces glibc to rebuild, as it should. (From OE-Core rev: de967efc52b858fd51b857d8de731692287430d7) Signed-off-by: Richard Purdie (cherry picked from commit c4a7b3decff636292f5e76e95406a22b6fe4a994) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

systemd: add group sgx to udev package

2023-03-20T17:20:44+00:00

>From NEWS for v250: * Device nodes for the Software Guard eXtension enclaves (sgx_vepc) are now also owned by the system group "sgx". >From NEWS for v248: * Intel SGX enclave device nodes (which expose a security feature of newer Intel CPUs) will now be owned by a new system group "sgx". Fixes following journal error entry during startup: /lib/udev/rules.d/50-udev-default.rules:43 Unknown group 'sgx', ignoring This is seen already on kirkstone. (From OE-Core rev: 3fd47697df858d4093d9cb4c6a378fc07aa4d064) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit bab455cd9b1b82e778f8523a767eb281edf6689e) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

glibc: Security fix for CVE-2023-0687

2023-03-20T17:20:44+00:00

Backport from https://sourceware.org/git/?p=glibc.git;a=patch;h=801af9fafd4689337ebf27260aa115335a0cb2bc (From OE-Core rev: eadf28a0640c9b714bfa8081626641a7d3d30537) Signed-off-by: Shubham Kulkarni Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

busybox: Fix depmod patch

2023-03-09T13:19:03+00:00

The original patch was actually allowing .debug modules though which was in-correct. This change blocks the parsing of .debug modules (which is correct). As noted in [YOCTO #15022] this should address the empty modules.dep when using the BusyBox depmod. (From OE-Core rev: 49bddef864768bbf339513414b42a820f861bdb7) Signed-off-by: Saul Wold Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 339c3c3abe8d405cfe7b3f34db9b3547bcaaf878) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

dbus: upgrade 1.14.4 -> 1.14.6

2023-03-09T13:19:02+00:00

Denial of service fixes: • Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin) Other fixes: • When connected to a dbus-broker, stop dbus-monitor from incorrectly replying to Peer method calls that were sent to the dbus-broker with a NULL destination (dbus#301, Kai A. Hiller) • Fix out-of-bounds varargs read in the dbus-daemon's config-parser. This is not attacker-triggerable and appears to be harmless in practice, but is technically undefined behaviour and is detected as such by AddressSanitizer. (dbus!357, Evgeny Vereshchagin) • Avoid a data race in multi-threaded use of DBusCounter (dbus#426, Ralf Habacker) • Fix a crash with some glibc versions when non-auditable SELinux events are logged (dbus!386, Jeremi Piotrowski) • If dbus_message_demarshal() runs out of memory while validating a message, report it as NoMemory rather than InvalidArgs (dbus#420, Simon McVittie) • Use C11 _Alignof if available, for better standards-compliance (dbus!389, Khem Raj) • Stop including an outdated copy of pkg.m4 in the git tree (dbus!365, Simon McVittie) • Documentation: · Consistently use Gitlab bug reporting URL (dbus!372, Marco Trevisan) • Tests fixes: · Fix the test-apparmor-activation test after dbus#416 (dbus!380, Dave Jones) Internal changes: • Fix CI builds with recent git versions (dbus#447, Simon McVittie) (From OE-Core rev: be5d5919242d6d26bdb1e70b83aab88949ffe0eb) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit 31245df3061c1a913bffe5e11ad6ac7fa9c83915) Signed-off-by: Steve Sakoman (cherry picked from commit 83e9bd1507fd5f79c680dde30b0f66df84cde6b0) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

build-appliance-image: Update to kirkstone head revision

2023-02-27T23:39:10+00:00

(From OE-Core rev: b20e2134daec33fbb8ce358d984751d887752bd5) Signed-off-by: Richard Purdie