linux/poky.git/meta/recipes-extended, branch honister

shadow-native: Simplify and fix syslog disable patch

2022-04-27T23:14:00+00:00

Shadow is happily spamming the host syslog with messages and shouldn't be which suggests the patch isn't working. Redo it to work at the configure level which is simpler and hopefully more effective. This is a squashed cherry-pick of commit 8f181686 (shadow-native: Simplify and fix syslog disable patch) and commit e1f21d0d (shadow: Disable the use of syslog() for the native tools). (From OE-Core rev: d411ea3114cde55ae68a2d437e854c5b17f78131) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

xz: fix CVE-2022-1271

2022-04-22T15:12:18+00:00

Malicious filenames can make xzgrep to write to arbitrary files or (with a GNU sed extension) lead to arbitrary code execution. Upstream-Status: Backport [https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch] CVE: CVE-2022-1271 (From OE-Core rev: dd6239a0f6173115968278cfd58a5efa228aee7d) Signed-off-by: Ralph Siemsen Signed-off-by: Richard Purdie (cherry picked from commit 97bf86ccde4417daec8ef3945071a50a09134bc6) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

unzip: fix CVE-2021-4217

2022-04-22T15:12:18+00:00

Avoid a null pointer dereference. (From OE-Core rev: 57b608a3c37d24b2d407b178b16136c1ff65b2c4) Signed-off-by: Joe Slater Signed-off-by: Alexandre Belloni (cherry picked from commit 36db85b9b127e5a9f5d3d6e428168cf597ab95f3) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ghostscript: fix CVE-2021-3781

2022-03-22T22:18:56+00:00

(From OE-Core rev: c9c5254345249b8a2c53e80cec3c469ca6fc1099) Signed-off-by: Chee Yang Lee Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

asciidoc: update git repository

2022-03-10T16:39:50+00:00

The asciidoc-py3 repository has been renamed to asciidoc-py. (From OE-Core rev: 16215377a33f7ebcce3c48bc31c83f8c512d9f49) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit f78dd3f4c5f0cd738783e75f3796e1da2a2a2ba1) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cups: Add --with-dbusdir to EXTRA_OECONF for deterministic build

2022-03-10T16:39:50+00:00

The configure checks /etc/dbus-1 and set DBUSDIR is null: if test -d /etc/dbus-1 -a "x$DBUSDIR" = x; then DBUSDIR="/etc/dbus-1" fi So that the build resutl would be different w/o /etc/dbus-1: /etc/dbus-1/system.d/cups.conf (Only exists when DBUSDIR is set) Add --with-dbusdir to EXTRA_OECONF to fix the issue (From OE-Core rev: a5adc91b6cebf7a006805e01fcf20ca4cb9a9a6a) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie (cherry picked from commit 0e4b2464138601c4c20882c001ef11eef5100395) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

zip: modify when match.S is built

2022-03-10T16:39:50+00:00

Use the correct $CPP to test if *.S are buildable, but do not build match.S because it is not PIC code. (From OE-Core rev: 1c80e0bf1cd8ed171b6ec029d41bc923f1104a7b) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie (cherry picked from commit 58b16da805b774465f15c8bee59f8361a47ccd4e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ghostscript: fix CVE-2021-45949

2022-03-10T16:39:50+00:00

(From OE-Core rev: aebdb079eba5426253c5709e1ea20b97a302b556) Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libarchive : update to 3.5.3

2022-03-10T16:39:50+00:00

Libarchive 3.5.3 is a security release Security Fixes: extended fix for following symlinks when processing the fixup list (#1566, #1617, CVE-2021-31566) fix invalid memory access and out of bounds read in RAR5 reader (#1491, #1492, #1493, CVE-2021-36976) (From OE-Core rev: 4f4a32a7f9ab3306f0de26bedf6b77f3aba86cf4) Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libarchive: upgrade 3.5.1 -> 3.5.2

2022-03-10T16:39:50+00:00

(From OE-Core rev: f8f39cd5757907d50444203e0e6e2c5ed0a47152) (From OE-Core rev: d2e9f293a719cd612c667877735d1de08454e3ac) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie