linux/poky.git/meta, branch yocto-3.1.13

build-appliance-image: Update to dunfell head revision

2021-12-14T22:49:36+00:00

(From OE-Core rev: 90a07178ea26be453d101c2e8b33d3a0f437635d) Signed-off-by: Richard Purdie

selftest: skip virgl test on centos 8 entirely

2021-12-14T22:49:22+00:00

With the sdl frontend, qemu isn't able to even boot fully, so let's skip the test early. (From OE-Core rev: 74bb94a7d249b5c53f3e1d15688a3a323fc8e828) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

selftest/devtool: Check branch in git fetch

2021-12-14T22:49:22+00:00

The commit 'meta/scripts: Manual git url branch additions (dc53fe75cc)' forget the url branch= parameter in the devtool git fetch test. (From OE-Core rev: 7d26bdcfef6473f64c73e8507bce334e010c3cad) Signed-off-by: Stefan Herbrechtsmeier Signed-off-by: Richard Purdie (cherry picked from commit 1419168a58a5caf99e24ada08c9ab639344a78b4) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

lttng-modules: do not search in non-existing folder during install

2021-12-14T22:49:22+00:00

When CONFIG_TRACEPOINTS is not enabled in kernel config - module compilation is skipped, which causes the ${D}/${nonarch_base_libdir} not to be created. This fails later in do_install:append() due to the fact that find command in executed for non-existing folder. Check for folder existence before find command in executed. (From OE-Core rev: db8a8b53f440f37731c7c5db9561ac46ef59d891) Signed-off-by: Andrey Zhizhikin Signed-off-by: Richard Purdie (cherry picked from commit de0aa1700ed4e6f04b0a233eb1f6d2ac598e7ed8) Signed-off-by: Aníbal Limón Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

busybox: Fix multiple security issues in awk

2021-12-14T22:49:22+00:00

CVE-2021-423xx-awk.patch fixes below listed CVEs for busybox: CVE-2021-42378, CVE-2021-42379, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386 (From OE-Core rev: 37a92e6d4399cdb36d24b988d77aa41b1e205a90) Signed-off-by: Sana Kazi Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gcc: Add CVE-2021-37322 to the list of CVEs to ignore

2021-12-14T22:49:22+00:00

The CVE applies to binutils 2.26 and not to gcc so ignore there. (From OE-Core rev: 71a6d3c31775c6b2db38e194992e0ffce637c827) Signed-off-by: Richard Purdie Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libgcrypt: solve CVE-2021-33560 and CVE-2021-40528

2021-12-14T22:49:22+00:00

This change fixes patches for two issues reported in a research paper [1]: a side channel attack (*) and a cross-configuration attack (**). In this commit we add a fix for (*) that wasn't marked as a CVE initially upstream. A fix of (**) previosly available in OE backports is in fact fixing CVE-2021-40528, not CVE-2021-33560 as marked in the commit message. We commit the accual fix for CVE-2021-33560 and rename the existing fix with the correct CVE-2021-40528. For details of the mismatch and the timeline see [2] (fix of the documentation) and [3] (the related ticket upstream). [1] https://eprint.iacr.org/2021/923.pdf [2] https://dev.gnupg.org/rCb118681ebc4c9ea4b9da79b0f9541405a64f4c13 [3] https://dev.gnupg.org/T5328#149606 (From OE-Core rev: 0ce5c68933b52d2cfe9eea967d24d57ac82250c3) Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cve-extra-exclusions: add db CVEs to exclusion list

2021-12-14T22:49:22+00:00

Since Oracle relicensed bdb, the open source community is slowly but surely replacing bdb with supported and open source friendly alternatives. As a result these CVEs are unlikely to ever be fixed. (From OE-Core rev: 15ccac9307a8a3a69ea7e9e611688dbb63df32aa) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie (cherry picked from commit 679fc70f907fb221f4541ebf30c1610e937209b7) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

cmake: FindGTest: Add target for gmock library

2021-12-08T20:28:01+00:00

`googlemock` has been absorbed into the [googletest](https://github.com/google/googletest) project and is built and installed from the same source tree. `googletest` has provided a CMake Config-file Package starting with GTest 1.8.1. `find_package(GTest ...)` by default dispatches first to CMake Find Module. Starting with CMake commit 2327b4330cce157d616ff8b611b3e77568d00351 in CMake v3.20.0 the module dispatches onward to the Config-file Package so that the same targets are available. In pre v3.20.0 versions of CMake however the Find Module masks the targets provided by the upstream `GTest` package. Update `Modules/FindGTest.cmake` to provide the same targets as the CMake Config-file Package and backwards compatible targets and result variables. (From OE-Core rev: 3b05fb01ec0e51c85d8ed62618467e57be91b928) Signed-off-by: Eero Aaltonen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

oeqa/parselogs: Fix quoting

2021-12-08T20:28:01+00:00

Fix deprecation warnings about invalid escape sequences. (From OE-Core rev: 3f23e40581f90b6a7c5a280e049a0188b8be8d75) Signed-off-by: Richard Purdie (cherry picked from commit 43542614395150e8fa34133ba0fc7ee90f215bcb) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie