[OE-core][dunfell 00/16] Patch review

Steve Sakoman
2023-02-20T22:20:32Z

Please review this set of patches for dunfell and have comments back by
end of day Wednesday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4950

The following changes since commit daaee6fcb0d201f041678af433d8e1cd6f924d09:

build-appliance-image: Update to dunfell head revision (2023-02-13 07:48:21 +0000)

are available in the Git repository at:

https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Alexander Kanavin (1):
oeqa/qemurunner: do not use Popen.poll() when terminating runqemu with
a signal

Antonin Godard (2):
busybox: always start do_compile with orig config files
busybox: rm temporary files if do_compile was interrupted

Hitendra Prajapati (1):
git: CVE-2022-23521 gitattributes parsing integer overflow

Martin Jansa (1):
meta: remove True option to getVar and getVarFlag calls (again)

Mikko Rapeli (1):
oeqa context.py: fix --target-ip comment to include ssh port number

Omkar Patil (1):
sudo: Fix CVE-2023-22809

Pawel Zalewski (1):
classes/fs-uuid: Fix command output decoding issue

Richard Purdie (3):
nativesdk: Handle chown/chgrp calls in nativesdk do_install tasks
make-mod-scripts: Ensure kernel build output is deterministic
libc-locale: Fix on target locale generation

Ross Burton (3):
quilt: fix intermittent failure in faildiff.test
quilt: use upstreamed faildiff.test fix
git: ignore CVE-2022-41953

Steve Sakoman (1):
qemu: Fix slirp determinism issue

Vivek Kumbhar (1):
qemu: fix CVE-2021-3929 nvme DMA reentrancy issue leads to
use-after-free

meta/classes/fs-uuid.bbclass | 2 +-
meta/classes/image.bbclass | 2 +-
meta/classes/libc-package.bbclass | 1 +
meta/classes/license_image.bbclass | 2 +-
meta/classes/nativesdk.bbclass | 2 +
meta/lib/oeqa/runtime/context.py | 4 +-
meta/lib/oeqa/utils/qemurunner.py | 11 +-
meta/recipes-core/busybox/busybox.inc | 27 +-
.../git/files/CVE-2022-23521.patch | 367 ++++++++++++++++++
meta/recipes-devtools/git/git.inc | 4 +-
meta/recipes-devtools/go/go_1.14.bb | 4 +-
.../qemu/qemu-system-native_4.2.0.bb | 2 +-
meta/recipes-devtools/qemu/qemu.inc | 3 +
.../qemu/qemu/CVE-2021-3929.patch | 78 ++++
meta/recipes-devtools/qemu/qemu_4.2.0.bb | 4 +-
meta/recipes-devtools/quilt/quilt.inc | 1 +
.../quilt/quilt/faildiff-order.patch | 41 ++
.../sudo/files/CVE-2023-22809.patch | 113 ++++++
meta/recipes-extended/sudo/sudo_1.8.32.bb | 1 +
.../make-mod-scripts/make-mod-scripts_1.0.bb | 2 +-
scripts/lib/devtool/menuconfig.py | 2 +-
scripts/nativesdk-intercept/chgrp | 27 ++
scripts/nativesdk-intercept/chown | 27 ++
23 files changed, 702 insertions(+), 25 deletions(-)
create mode 100644 meta/recipes-devtools/git/files/CVE-2022-23521.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3929.patch
create mode 100644 meta/recipes-devtools/quilt/quilt/faildiff-order.patch
create mode 100644 meta/recipes-extended/sudo/files/CVE-2023-22809.patch
create mode 100755 scripts/nativesdk-intercept/chgrp
create mode 100755 scripts/nativesdk-intercept/chown

--
2.34.1