linux/poky.git/meta/recipes-devtools/dmidecode, branch kirkstone

dmidecode: fixup for CVE-2023-30630

2023-08-19T15:56:58+00:00

The previous CVE-2023-30630_1.patch picked only the patch "dmidecode: Write the whole dump file at once" d8cfbc808f. But there was a refactoring which does not allow to cherry-pick it fast forward. Resolving this conflict was not correctly done. The patch was: + u32 len; + u8 *table; ... - if (!(opt.flags & FLAG_QUIET)) - pr_comment("Writing %d bytes to %s.", crafted[0x05], - opt.dumpfile); - write_dump(0, crafted[0x05], crafted, opt.dumpfile, 1); + dmi_table_dump(crafted, crafted[0x05], table, len); It looks like the variables len and table have been added without initialization. Now this problem is solved by applying the previous refactoring as well. Patch 1 gets replaced by Patch 1a and Patch 1b. Patch 2..4 are rebased without changes. (From OE-Core rev: ea069a94a213cc153528aebfc387f30215566cc7) Signed-off-by: Adrian Freihofer Signed-off-by: Steve Sakoman

dmidecode: fix CVE-2023-30630

2023-08-02T14:47:13+00:00

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. References: https://nvd.nist.gov/vuln/detail/CVE-2023-30630 https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00016.html https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00017.html Backport: fixes fuzz in the CVE-2023-30630_2.patch in kirkstone (From OE-Core rev: 4f83427a0a01e8285c9eb42d2a635d1ff7b23779) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman (cherry picked from commit f92e59a0894145a828dc9ac74bf8c7a9355e0587) Signed-off-by: Dhairya Nagodra Signed-off-by: Steve Sakoman

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION

2021-02-26T15:21:21+00:00

Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: bb05814335e7101bfd8df0a11dc18a044e867bed) Signed-off-by: Dorinda Bassey Signed-off-by: Richard Purdie

dmidecode: upgrade 3.2 -> 3.3

2020-11-03T08:21:11+00:00

(From OE-Core rev: 528790d8a79f9d7234c877ff07c12f53057b6d20) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

dmidecode: fix the Upstream-Status in a custom patch

2018-11-23T23:35:19+00:00

(From OE-Core rev: c2d8081216b03c7f26063ca9f971661e76550464) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

dmidecode: update to 3.2

2018-11-23T23:35:18+00:00

Also, replace a sed hack with a proper patch. (From OE-Core rev: bdde940c05490d3128721e4f5eb67d456e7cc323) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

dmidecode: correct docdir

2018-06-27T12:55:21+00:00

Without this, the package clutters up the root of /usr/share/doc. (From OE-Core rev: af4f0d44acef328245dfe1bd102bb5e61293ee2d) Signed-off-by: Christopher Larson Signed-off-by: Richard Purdie

dmidecode: update to 3.1

2017-06-28T14:52:18+00:00

(From OE-Core rev: dc1110ba6a3a4958da7a16f01343666ce5c75aaf) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

dmidecode: Explicitly set EXTRA_OEMAKE as required

2016-02-10T16:06:24+00:00

This recipe currently relies on EXTRA_OEMAKE having been set to "-e MAKEFLAGS=" in bitbake.conf to operate. It is necessary to make this explicit so that the default in bitbake.conf can be changed. (From OE-Core rev: ca35d45a3a208e2c5eaa64c2a19989fca202bbfc) Signed-off-by: Mike Crowe Signed-off-by: Richard Purdie