linux/poky.git/meta/recipes-extended, branch gatesgarth

tar: Fix CVE-2021-20193

2021-09-08T22:54:04+00:00

(From OE-Core rev: 8261f9da2fd9db4d020eb80f44e39cc0f79518c5) Signed-off-by: Anatol Belski Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cve-check: CVE_VERSION_SUFFIX to work with patched release

2021-04-19T11:55:20+00:00

CVE_VERSION_SUFFIX in "patch" to treat version string with suffix "pX" or "patchX" as patched release. also update testcases to cover this changes and set CVE_VERSION_SUFFIX for sudo. (From OE-Core rev: 7e75801c9a76d7bcd2fed3a6522214f483966166) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie (cherry picked from commit 8076815fc2ffc8f632e73527ce2b7d158a29e9ea) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

shadow: whitelist CVE-2013-4235

2021-03-28T21:31:55+00:00

This CVE is about TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees which had very low severity problem and marked as closed and won't fix. Therefore whitelisted CVE-2013-4235. Master, gatesgarth and dunfell all have shadow version 4.81. Hence, this is applicable for master, gatesgarth and dunfell. Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658 (From OE-Core rev: 1474dcb84c925603736bafbe9fc802a99a014a39) Signed-off-by: Sana Kazi Signed-off-by: Richard Purdie (cherry picked from commit b1c6cd87bee6b019619dc5728fd6c36bc87ed696) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

parted: Fix reproducibility issue

2021-03-10T00:24:27+00:00

We don't use tbe BUILDINFO line of host information in the Makefile so remove it for reproducibility. (From OE-Core rev: d068eb7f453aa35eb3339c170a29dbd7a8ae51fe) Signed-off-by: Richard Purdie (cherry picked from commit a9742595fa90d4977fdd8129a4fe4932ddb96a18) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cups: fix CVE-2020-10001

2021-03-10T00:24:26+00:00

A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 (From OE-Core rev: bf8ea2c4d477133196b20a00b4bfb63c7f36de18) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie (cherry picked from commit 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cups: Fix reproducibility issues

2021-03-10T00:24:26+00:00

configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. (From OE-Core rev: 0ede88ee0d5972352d317d1e2c7735b89bffab50) Signed-off-by: Richard Purdie (cherry picked from commit f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

asciidoc: Switch to using the main branch

2021-03-10T00:24:26+00:00

Upstream has renamed the "master" branch to "main". (From OE-Core rev: b03cb7c092754247153e7c8045532aff656c6d1f) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie (cherry picked from commit 05637733cf89a81fd5d787402f5a917f279a1a0d) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

screen: fix CVE-2021-26937

2021-03-10T00:24:25+00:00

Apply patch from Debian to fix CVE-2021-26937. (From OE-Core rev: 4131e1bc7188c5e88b06bcde1efc4de3c2d06c85) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie (cherry picked from commit 6d688cc8672b1830ba10966492ab3f8a12d32e17) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

groff: Fix determinism issue

2021-03-10T00:24:25+00:00

Sometimes bison would regenerate source files and sometimes it would not This is likely related to the patching of generated files by on of the patches. Drop those changes and force the files to regenerate in all cases since we depend on bison-native anyway. This ensures the results are always consistent. (From OE-Core rev: aca1fba185ee3aac9a4631917462e60b5d89eecf) Signed-off-by: Richard Purdie (cherry picked from commit 4449fa226e94f7124215c5ead43aadda7967f3af) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

acpica: Fix reproducibility issues

2021-02-26T15:30:40+00:00

Fixes reproducibility when build acpica yacc sources by instructing bison on how to do the file prefix mapping (From OE-Core rev: 0e5605af9ebbfceffd510e42013d4eaa76c4e820) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie (cherry picked from commit d13a1df7bd173fca3fc2cdf889d5eb487e35d6fd) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie