Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-4.0.29 2025-06-13T15:42:35+00:00 2025-06-13T15:42:35+00:00 Divya Chellam divya.chellam@windriver.com 2025-06-09T10:10:27+00:00 urn:sha1:50475a377af20298fe3f18cd81c261ffe851bcf8 A minor information leak when running Screen with setuid-root privileges allosw unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0. Reference: https://security-tracker.debian.org/tracker/CVE-2025-46804 Upstream-patch: https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=e0eef5aac453fa98a2664416a56c50ad1d00cb30 (From OE-Core rev: fa14b05383a322f5fe751c81e8c6f1a8a1df8c9e) Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-06-13T15:42:35+00:00 Divya Chellam divya.chellam@windriver.com 2025-06-09T10:10:26+00:00 urn:sha1:145b1ddb2bcd208280a249fa9e8709d21787ee35 For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. Reference: https://security-tracker.debian.org/tracker/CVE-2025-46802 Upstream-patch: https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=049b26b22e197ba3be9c46e5c193032e01a4724a (From OE-Core rev: b4074e06ff0531481dbb3788a5c1bf9e013b6239) Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-06-04T16:06:31+00:00 Hitendra Prajapati hprajapati@mvista.com 2025-05-29T05:09:14+00:00 urn:sha1:14d260ab2503c75c78f2c4b1e0d6e8b6e287959b Upstream-Status: Backport from https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=161f85b98b7e1d5e4893aeed20f4cdb5e3dfaaa4 (From OE-Core rev: b25b0f785e0b7650e31a45a92be196be6b76ea78) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2023-04-26T14:03:21+00:00 Hitendra Prajapati hprajapati@mvista.com 2023-04-20T08:48:30+00:00 urn:sha1:d19f7ddf5a54625dc500eee8baeddb792795c754 Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/screen.git/commit/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7 (From OE-Core rev: cf6348b5778c9409fc330808effc69e9939e6857) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2022-02-20T16:45:25+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2022-02-18T17:15:36+00:00 urn:sha1:b0130fcf91daee0d905af755302fabe608da141c An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2022-02-10T10:32:08+00:00 wangmy wangmy@fujitsu.com 2022-02-08T08:28:42+00:00 urn:sha1:3fb9966b4fee3c74c0af2e9ff55fa4d5459756c0 CVE-2021-26937.patch removed since it is included in 4.9.0 Changelog: ========= * Hardstatus option for used encoding (escape string '%e') * OpenBSD uses native openpty() from its utils.h * Fixes: - fix combining char handling that could lead to a segfault - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030) - make screen exit code be 0 when checking --help - session names limit is 80 symbols (bug #61534) - option -X ignores specified user in multiuser env (bug #37437) - a lot of reformations/fixes/cleanups (man page and source code) (From OE-Core rev: 8247097d2313ceb73bab1621d61b8aa3fb59095e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>