[OE-core][dunfell 00/20] Patch review

Steve Sakoman
2022-02-03T19:51:00Z

Please review this set of patches for dunfell.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3182

The following changes since commit f3be01483b01c88f8c4ba24ca73ccf1bcc33665c:

build-appliance-image: Update to dunfell head revision (2022-01-27 16:16:08 +0000)

are available in the Git repository at:

git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Alexander Kanavin (1):
libusb1: correct SRC_URI

Joshua Watt (5):
tzdata: Remove BSD License specifier
e2fsprogs: Use specific BSD license variant
glib-2.0: Use specific BSD license variant
shadow: Use specific BSD license variant
libcap: Use specific BSD license variant

Marek Vasut (1):
binutils: Backport Include members in the variable table used when
resolving DW_AT_specification tags.

Marta Rybczynska (2):
grub: add a fix for CVE-2020-25632
grub: add a fix for CVE-2020-25647

Minjae Kim (1):
ghostscript: fix CVE-2021-45949

Peter Kjellerstedt (1):
sstate: A third fix for for touching files inside pseudo

Purushottam Choudhary (1):
systemd: Fix CVE-2021-3997

Ranjitsinh Rathod (1):
util-linux: Fix for CVE-2021-3995 and CVE-2021-3996

Ross Burton (2):
lsof: correct LICENSE
shadow-sysroot: sync license with shadow

Rudolf J Streif (1):
linux-firmware: Add CLM blob to linux-firmware-bcm4373 package

Steve Sakoman (4):
glibc: update to lastest 2.31 release HEAD
expat: fix CVE-2022-23852
expat: add missing Upstream-status, CVE tag and sign-off to
CVE-2021-46143.patch
common-licenses: add Spencer-94

meta/classes/sstate.bbclass | 14 +-
meta/files/common-licenses/Spencer-94 | 12 +
.../grub/files/CVE-2020-25632.patch | 90 +++++
.../grub/files/CVE-2020-25647.patch | 119 +++++++
meta/recipes-bsp/grub/grub2.inc | 2 +
.../expat/expat/CVE-2021-46143.patch | 6 +
.../expat/expat/CVE-2022-23852.patch | 33 ++
meta/recipes-core/expat/expat_2.2.9.bb | 1 +
meta/recipes-core/glib-2.0/glib.inc | 2 +-
meta/recipes-core/glibc/glibc-version.inc | 2 +-
meta/recipes-core/glibc/glibc_2.31.bb | 1 +
.../systemd/systemd/CVE-2021-3997-1.patch | 65 ++++
.../systemd/systemd/CVE-2021-3997-2.patch | 101 ++++++
.../systemd/systemd/CVE-2021-3997-3.patch | 266 +++++++++++++++
...-fsync-after-removing-directory-tree.patch | 35 ++
...children-split-out-body-of-directory.patch | 318 ++++++++++++++++++
meta/recipes-core/systemd/systemd_244.5.bb | 5 +
.../util-linux/util-linux/CVE-2021-3995.patch | 139 ++++++++
.../util-linux/util-linux/CVE-2021-3996.patch | 226 +++++++++++++
...ude-strutils-cleanup-strto-functions.patch | 270 +++++++++++++++
.../util-linux/util-linux_2.35.1.bb | 3 +
.../binutils/binutils-2.34.inc | 1 +
...in-the-variable-table-used-when-reso.patch | 32 ++
meta/recipes-devtools/e2fsprogs/e2fsprogs.inc | 2 +-
.../ghostscript/CVE-2021-45949.patch | 65 ++++
...tack-limits-after-function-evalution.patch | 51 +++
.../ghostscript/ghostscript_9.52.bb | 2 +
meta/recipes-extended/lsof/lsof_4.91.bb | 2 +-
.../shadow/shadow-sysroot_4.6.bb | 2 +-
meta/recipes-extended/shadow/shadow.inc | 2 +-
meta/recipes-extended/timezone/timezone.inc | 2 +-
.../linux-firmware/linux-firmware_20211216.bb | 1 +
meta/recipes-support/libcap/libcap_2.32.bb | 2 +-
meta/recipes-support/libusb/libusb1_1.0.22.bb | 4 +-
34 files changed, 1863 insertions(+), 15 deletions(-)
create mode 100644 meta/files/common-licenses/Spencer-94
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25632.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-25647.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2022-23852.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-1.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-2.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2021-3997-3.patch
create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-optionally-fsync-after-removing-directory-tree.patch
create mode 100644 meta/recipes-core/systemd/systemd/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3995.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-3996.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/include-strutils-cleanup-strto-functions.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0018-Include-members-in-the-variable-table-used-when-reso.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2021-45949.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/check-stack-limits-after-function-evalution.patch

--
2.25.1