linux/poky.git/meta/recipes-devtools/binutils, branch warrior-21.0.3

binutils: fix CVE-2019-17451

2020-01-28T11:15:01+00:00

Backport upstream fix. (From OE-Core rev: 02c54859c009be191958a19a5c3549a6635cc647) Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

binutils: fix CVE-2019-17450

2020-01-28T11:15:01+00:00

Backport upstream fix. (From OE-Core rev: dcd3406c79bdee46fabc2310c9e278918e26ce80) Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

binutils: Fix mips patch which changes default emulation

2019-09-30T15:44:42+00:00

The patch incorrectly removes 'mips_elf32_ntrad_le_vec' from the 'targ_selvecs' replacing it with duplicate entries for 'mips_elf32_ntrad_be_vec'. Correct this so that the default binutils can still handle 'mips_elf32_ntrad_le_vec' binaries. (From OE-Core rev: 21c59450d1c891dadfe1484337bd0a6007a4aa01) Signed-off-by: Nathan Rossi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

binutils: fix CVE-2019-14250 CVE-2019-14444

2019-09-30T15:44:42+00:00

(From OE-Core rev: 41579d569738a23b80d4599fd6ec082488c6cfee) Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

binutils: CVE-2019-9070 is same as CVE-2019-9071

2019-09-30T15:44:41+00:00

See: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89395 (From OE-Core rev: cef180de3684491f1ac4180ddbcc102121222181) (From OE-Core rev: 789be0bd85bfcd6ee27d68fa53f67bd221f8286b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

binutils: fix CVE-2019-12972 CVE-2019-9071

2019-09-30T15:44:41+00:00

(From OE-Core rev: 093f0914f261a27d58ecba9c1e9d3b78a35af012) (From OE-Core rev: 9422bf471953c8e548a369574d960791ceb28a24) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

binutils: fix CVE-2019-9074 CVE-2019-9075 CVE-2019-9076 CVE-2019-9077

2019-05-12T08:13:39+00:00

(From OE-Core rev: 5445c22361b55603f7bd2fabd2d36d280ebee51e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

binutils: set CVE_VERSION

2019-04-01T13:48:44+00:00

PV is 2.32.0 even though the actual release upstream is 2.32. To a human this is insignificant, but to automated tooling it matters. Specifically, cve-check-tool can't identify CVEs that are in 2.32. Set CVE_VERSION for now, which should be removed when PV and the upstream version match again. (From OE-Core rev: 487c8356c22deb29867baf3da74f6d86502d5b3b) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

binutils: fix upstream version check

2019-03-29T08:28:53+00:00

(From OE-Core rev: 326b6a22c85e7b932c7196fca5350a55e21f46f5) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

binutils: Upgrade to binutils 2.32

2019-02-05T13:53:48+00:00

Changes https://sourceware.org/ml/binutils/2019-02/msg00010.html 0007-Add-the-armv5e-architecture-to-binutils.patch is dropped since we armv5 is not a used option anymore in OE armv5te is default, and gcc9 will drop it completely anyway CVE patches were backports from master which is already past of 2.32 release Other dropped patches were partial or full backports as well (From OE-Core rev: b71294c4decf35d544a2c8adb4e67d141841fc68) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie