Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-5.0.2 2024-06-24T13:49:29+00:00 2024-06-24T13:49:29+00:00 Steve Sakoman steve@sakoman.com 2024-06-24T13:47:53+00:00 urn:sha1:f7def85be9f99dcb4ba488bead201f670304379b (From OE-Core rev: 803cc32e72b4fc2fc28d92090e61f5dd288a10cb) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-19T15:34:58+00:00 Alexander Kanavin alex.kanavin@gmail.com 2024-04-19T12:19:35+00:00 urn:sha1:f0a906d661afad6a2d82e1a4a28bf9fd26de1700 (From OE-Core rev: f3e6d0dc315dc915d8029a0d84a12f74ca5d62f5) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 64c026024b1c86797de338760b9f29d7e949926c) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-19T15:34:58+00:00 Felix Nilsson felixn@axis.com 2024-06-12T02:39:09+00:00 urn:sha1:b1a0ca3cab726d6578196a7d29660ec1ca0fec66 Handle errors when SHLVL isn't set. (From OE-Core rev: 7ef2c9ab669785e5e073d6f925f1a3f447fc31d9) Signed-off-by: Felix Nilsson <felixn@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5df53fcfe3b70a5312fced3fcc1ba6290f2ee794) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-14T12:19:22+00:00 Robert Joslyn robert.joslyn@redrectangle.org 2024-05-27T19:55:41+00:00 urn:sha1:6a8b1d85e7ec93704e6476dd4ee45bbbace7983a When newlib and libgloss were updated to 4.3.0, SRC_URI was updated to append a fix-rs6000-cflags.patch file when building on PowerPC, but this file was not added to the repo. Remove appending the missing patch. (From OE-Core rev: 71231580e9e5d0060a0ea41d29152d43846a00f1) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 64561d8b81233a19df5f51d26dfbcd15835bec1f) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-14T12:19:22+00:00 Soumya Sambu soumya.sambu@windriver.com 2024-06-07T12:41:23+00:00 urn:sha1:750ceb4b76b3e37e7bc041a8612d6ebe57d78cac wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28085 (From OE-Core rev: b40a77416f73955833faeddf6091a99ff9837199) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Peter Marko peter.marko@siemens.com 2024-05-25T10:48:37+00:00 urn:sha1:1d751a0e8316329206a8900b06357e0961393b28 This hash is ahead of the tag, so adapt PV accordingly. (From OE-Core rev: c94e46019a7d443ccc4763ba16d87e7e97abe977) (From OE-Core rev: 54cbf43e55ec3373f8c2612b787166da35028fd3) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Soumya Sambu soumya.sambu@windriver.com 2024-05-25T10:48:36+00:00 urn:sha1:c78f26dbfdbd5eb33a5459961001dd99f4fa6c3f ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45918 (From OE-Core rev: 6573995adf4cfd48b036f8463b39f3864fcfd85b) (From OE-Core rev: 5385b15345dddc958fc961246e56b962db735276) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Peter Marko peter.marko@siemens.com 2024-05-22T21:20:53+00:00 urn:sha1:50b275818210e1c67b3ff9a38b942137987942a2 Single executable ttyrun is taken ouf of s390-tools repository containing ton of other helper tools. CVEs are not assigned to executables, but to whole components. Historically there also already exists one CVE for s390-tools. Most of the CVEs will not be for ttyrun, but this is the way how to get notified even if most we get will have to be ignored. (From oe-core rev: df28547387c2c122aef3e5326b216ec3f4d3caa7) (From OE-Core rev: 9e07ff39c1b2794d6de7f8d14cdf47707db50f5a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-05-23T15:55:01+00:00 Adriaan Schmidt adriaan.schmidt@siemens.com 2024-05-06T11:48:15+00:00 urn:sha1:bef4fd23a015857b6218a3f6c00b8d571e921daa backport upstream commit 592dcdcf243576bd2517d3da9bc18990de08e37e to fix packaging when building with --enable-systemd=no (From OE-Core rev: c0708adce620bcce5e503851fa6598bd941276eb) Signed-off-by: Adriaan Schmidt <adriaan.schmidt@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-05-23T15:55:01+00:00 Peter Marko peter.marko@siemens.com 2024-05-06T07:45:48+00:00 urn:sha1:8205ff560c722e93f0116add68be92793b73cf30 The license per [1] is LGPL-2.1-or-later and [2] converted last LGPL-2.1-only references. License-Update: corrected from LGPL-2.1-only to LGPL-2.1-or-later based on [1] and [2] [1] https://www.gnu.org/software/libc/ [2] https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=273a835fe7c685cc54266bb8b502787bad5e9bae (From OE-Core rev: 939140fa7201ae0e7d365648c2ff5629e4c25ff9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b7ad15a59d048ca7561a03cb0fc8e2c24680ce5c) Signed-off-by: Steve Sakoman <steve@sakoman.com>