* [OE-core][kirkstone 00/11] Patch review
@ 2023-01-12 2:33 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2023-01-12 2:33 UTC (permalink / raw)
To: openembedded-core
Please review these patches for kirkstone and have comments back by
end of day Friday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4779
The following changes since commit 96d9b5ba9bdb394c2a0b67bf0067a01578178e50:
oeqa/concurrencytest: Add number of failures to summary output (2023-01-04 05:08:37 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Alexander Kanavin (2):
libarchive: upgrade 3.6.1 -> 3.6.2
devtool: process local files only for the main branch
Changqing Li (1):
base.bbclass: Fix way to check ccache path
Hitendra Prajapati (1):
systemd: CVE-2022-45873 deadlock in systemd-coredump via a crash with
a long backtrace
Jose Quaresma (2):
Revert "gstreamer1.0: disable flaky gstbin:test_watch_for_state_change
test"
gstreamer1.0: Fix race conditions in gstbin tests
Luis (1):
rm_work.bbclass: use HOSTTOOLS 'rm' binary exclusively
Martin Jansa (1):
systemd: backport another change from v252 to fix build with
CVE-2022-45873.patch
Narpat Mali (1):
ffmpeg: fix for CVE-2022-3109
Pavel Zhukov (1):
oeqa/rpm.py: Increase timeout and add debug output
Wang Mingyu (1):
bind: upgrade 9.18.9 -> 9.18.10
.../devtool/devtool-test-local/file3 | 1 +
.../devtool/devtool-test-local_6.03.bb | 3 +
.../devtool/devtool-test-localonly.bb | 3 +
.../devtool/devtool-test-localonly/file3 | 1 +
meta/classes/base.bbclass | 2 +-
meta/classes/rm_work.bbclass | 15 +-
meta/lib/oeqa/runtime/cases/rpm.py | 23 +-
...1-avoid-start-failure-with-bind-user.patch | 0
...d-V-and-start-log-hide-build-options.patch | 0
...ching-for-json-headers-searches-sysr.patch | 0
.../bind/{bind-9.18.9 => bind-9.18.10}/bind9 | 0
.../{bind-9.18.9 => bind-9.18.10}/conf.patch | 0
.../generate-rndc-key.sh | 0
...t.d-add-support-for-read-only-rootfs.patch | 0
.../make-etc-initd-bind-stop-work.patch | 0
.../named.service | 0
.../bind/{bind_9.18.9.bb => bind_9.18.10.bb} | 2 +-
...w-json_variant_dump-to-return-an-err.patch | 60 ++++
.../systemd/systemd/CVE-2022-45873.patch | 124 ++++++++
meta/recipes-core/systemd/systemd_250.5.bb | 2 +
.../libarchive/CVE-2022-36227.patch | 42 ---
...ibarchive_3.6.1.bb => libarchive_3.6.2.bb} | 8 +-
...-vp3-Add-missing-check-for-av_malloc.patch | 44 +++
.../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 3 +-
...005-bin-Fix-race-conditions-in-tests.patch | 300 ++++++++++++++++++
...bin-test_watch_for_state_change-test.patch | 107 -------
.../gstreamer/gstreamer1.0_1.20.5.bb | 2 +-
scripts/lib/devtool/standard.py | 38 ++-
28 files changed, 590 insertions(+), 190 deletions(-)
create mode 100644 meta-selftest/recipes-test/devtool/devtool-test-local/file3
create mode 100644 meta-selftest/recipes-test/devtool/devtool-test-localonly/file3
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/0001-avoid-start-failure-with-bind-user.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/0001-named-lwresd-V-and-start-log-hide-build-options.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/bind-ensure-searching-for-json-headers-searches-sysr.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/bind9 (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/conf.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/generate-rndc-key.sh (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/init.d-add-support-for-read-only-rootfs.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/make-etc-initd-bind-stop-work.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.9 => bind-9.18.10}/named.service (100%)
rename meta/recipes-connectivity/bind/{bind_9.18.9.bb => bind_9.18.10.bb} (97%)
create mode 100644 meta/recipes-core/systemd/systemd/0001-shared-json-allow-json_variant_dump-to-return-an-err.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2022-45873.patch
delete mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2022-36227.patch
rename meta/recipes-extended/libarchive/{libarchive_3.6.1.bb => libarchive_3.6.2.bb} (92%)
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-avcodec-vp3-Add-missing-check-for-av_malloc.patch
create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0/0005-bin-Fix-race-conditions-in-tests.patch
delete mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0/0005-tests-remove-gstbin-test_watch_for_state_change-test.patch
--
2.25.1
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2023-06-11 16:02 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2023-06-11 16:02 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5438
The following changes since commit 717b9f18a51e9c9fd5a471238aa2ea4de439ef17:
kernel-devicetree: recursively search for dtbs (2023-05-30 04:06:12 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
C. Andy Martin (1):
systemd-networkd: backport fix for rm unmanaged wifi
Hitendra Prajapati (1):
sysstat: Fix CVE-2023-33204
Michael Halstead (2):
uninative: Upgrade to 3.10 to support gcc 13
uninative: Upgrade to 4.0 to include latest gcc 13.1.1
Narpat Mali (1):
python3-requests: fix for CVE-2023-32681
Omkar Patil (1):
curl: Correction for CVE-2023-27536
Peter Marko (1):
openssl: Upgrade 3.0.8 -> 3.0.9
Richard Purdie (1):
selftest/reproducible: Allow native/cross reuse in test
Riyaz Khan (1):
openssh: Remove BSD-4-clause contents completely from codebase
Soumya (1):
perl: fix CVE-2023-31484
Vivek Kumbhar (1):
go: fix CVE-2023-24539 html/template improper sanitization of CSS
values
meta/conf/distro/include/yocto-uninative.inc | 8 +-
meta/lib/oeqa/selftest/cases/reproducible.py | 4 +-
...401bdd77ca54be6867a154cc01e0d72612e0.patch | 984 ++++++++++++++++++
.../openssh/openssh_8.9p1.bb | 1 +
...1-Configure-do-not-tweak-mips-cflags.patch | 2 +-
.../openssl/openssl/CVE-2023-0464.patch | 225 ----
.../openssl/openssl/CVE-2023-0465.patch | 56 -
.../openssl/openssl/CVE-2023-0466.patch | 50 -
.../{openssl_3.0.8.bb => openssl_3.0.9.bb} | 5 +-
...nly-managed-configs-on-reconfigure-o.patch | 358 +++++++
meta/recipes-core/systemd/systemd_250.5.bb | 1 +
meta/recipes-devtools/go/go-1.17.13.inc | 1 +
.../go/go-1.18/CVE-2023-24539.patch | 53 +
.../perl/files/CVE-2023-31484.patch | 29 +
meta/recipes-devtools/perl/perl_5.34.1.bb | 1 +
.../python3-requests/CVE-2023-32681.patch | 63 ++
.../python/python3-requests_2.27.1.bb | 2 +
.../sysstat/sysstat/CVE-2023-33204.patch | 80 ++
.../sysstat/sysstat_12.4.5.bb | 5 +-
.../curl/curl/CVE-2023-27536.patch | 3 +-
20 files changed, 1586 insertions(+), 345 deletions(-)
create mode 100644 meta/recipes-connectivity/openssh/openssh/7280401bdd77ca54be6867a154cc01e0d72612e0.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2023-0464.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2023-0465.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2023-0466.patch
rename meta/recipes-connectivity/openssl/{openssl_3.0.8.bb => openssl_3.0.9.bb} (97%)
create mode 100644 meta/recipes-core/systemd/systemd/0001-network-remove-only-managed-configs-on-reconfigure-o.patch
create mode 100644 meta/recipes-devtools/go/go-1.18/CVE-2023-24539.patch
create mode 100644 meta/recipes-devtools/perl/files/CVE-2023-31484.patch
create mode 100644 meta/recipes-devtools/python/python3-requests/CVE-2023-32681.patch
create mode 100644 meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch
--
2.34.1
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2023-12-21 2:09 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2023-12-21 2:09 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Friday, December 22
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6355
The following changes since commit eea685e1caafd8e8121006d3f8b5d0b8a4f2a933:
build-appliance-image: Update to kirkstone head revision (2023-12-15 04:01:10 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Poonam Jadhav (1):
curl: Fix CVE-2023-46218
Richard Purdie (1):
testimage: Exclude wtmp from target-dumper commands
Soumya Sambu (2):
go: Fix CVE-2023-39326
perl: update 5.34.1 -> 5.34.3
Sourav Pramanik (1):
qemu: Fix CVE-2023-5088
Trevor Gamblin (1):
python3-ptest: skip test_storlines
Vijay Anusuri (2):
ghostscript: Backport fix for CVE-2023-46751
openssh: backport Debian patch for CVE-2023-48795
Yoann Congal (1):
externalsrc: Ensure SRCREV is processed before accessing SRC_URI
mark.yang (2):
ffmpeg: fix for CVE-2022-3964
ffmpeg: fix for CVE-2022-3965
meta/classes/externalsrc.bbclass | 4 +
meta/classes/testimage.bbclass | 2 +-
.../openssh/openssh/CVE-2023-48795.patch | 476 ++++++++++++++++++
.../fix-authorized-principals-command.patch | 30 ++
.../openssh/openssh_8.9p1.bb | 2 +
meta/recipes-devtools/go/go-1.17.13.inc | 1 +
.../go/go-1.20/CVE-2023-39326.patch | 182 +++++++
...ile-check-the-file-if-patched-or-not.patch | 4 +-
...{perlcross_1.3.7.bb => perlcross_1.5.2.bb} | 2 +-
.../perl/{perl_5.34.1.bb => perl_5.34.3.bb} | 2 +-
...orlines-skip-due-to-load-variability.patch | 32 ++
.../python/python3_3.10.13.bb | 1 +
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2023-5088.patch | 112 +++++
.../ghostscript/CVE-2023-46751.patch | 41 ++
.../ghostscript/ghostscript_9.55.0.bb | 1 +
...c-stop-accessing-out-of-bounds-frame.patch | 2 +-
...c-stop-accessing-out-of-bounds-frame.patch | 1 +
.../curl/curl/CVE-2023-46218.patch | 52 ++
meta/recipes-support/curl/curl_7.82.0.bb | 1 +
20 files changed, 943 insertions(+), 6 deletions(-)
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2023-48795.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/fix-authorized-principals-command.patch
create mode 100644 meta/recipes-devtools/go/go-1.20/CVE-2023-39326.patch
rename meta/recipes-devtools/perl-cross/{perlcross_1.3.7.bb => perlcross_1.5.2.bb} (92%)
rename meta/recipes-devtools/perl/{perl_5.34.1.bb => perl_5.34.3.bb} (99%)
create mode 100644 meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-5088.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2023-46751.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-46218.patch
--
2.34.1
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2024-03-04 15:23 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624 Steve Sakoman
` (10 more replies)
0 siblings, 11 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Wednesday, March 6
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6640
The following changes since commit cca0971a7d92d823cc0c2b16cf14a7b2ed8ecb61:
kernel: make LOCALVERSION consistent between recipes (2024-02-27 03:51:58 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Alexander Sverdlin (1):
linux-firmware: upgrade 20231030 -> 20231211
Dhairya Nagodra (1):
dbus: Add missing CVE_PRODUCT
Munehisa Kamata (1):
kernel.bbclass: Set pkg-config variables for building modules
Peter Marko (1):
glibc: ignore CVE-2023-0687
Poonam Jadhav (1):
qemu: Fix CVE-2023-42467
Priyal Doshi (1):
tzdata : Upgrade to 2024a
Ross Burton (1):
cve_check: cleanup logging
Soumya Sambu (1):
bind: Upgrade 9.18.19 -> 9.18.24
Vijay Anusuri (2):
less: Fix for CVE-2022-48624
qemu: Fix for CVE-2024-24474
Vivek Kumbhar (1):
qemu: Backport fix CVE-2023-6693
meta/classes/kernel.bbclass | 7 ++
meta/lib/oe/cve_check.py | 13 ++--
.../bind/{bind_9.18.19.bb => bind_9.18.24.bb} | 2 +-
meta/recipes-core/dbus/dbus_1.14.8.bb | 2 +-
meta/recipes-core/glibc/glibc_2.35.bb | 2 +-
meta/recipes-devtools/qemu/qemu.inc | 5 ++
.../qemu/qemu/CVE-2023-42467.patch | 46 ++++++++++++
.../qemu/qemu/CVE-2023-6693.patch | 74 +++++++++++++++++++
.../qemu/qemu/CVE-2024-24474.patch | 44 +++++++++++
...lock-desriptor-to-set-the-block-size.patch | 54 ++++++++++++++
...ero-and-changes-limited-to-bits-8-15.patch | 67 +++++++++++++++++
.../less/less/CVE-2022-48624.patch | 41 ++++++++++
meta/recipes-extended/less/less_600.bb | 1 +
meta/recipes-extended/timezone/timezone.inc | 6 +-
...20231030.bb => linux-firmware_20231211.bb} | 7 +-
15 files changed, 355 insertions(+), 16 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.18.19.bb => bind_9.18.24.bb} (97%)
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-6693.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2024-24474.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch
create mode 100644 meta/recipes-extended/less/less/CVE-2022-48624.patch
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231030.bb => linux-firmware_20231211.bb} (99%)
--
2.34.1
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 02/11] glibc: ignore CVE-2023-0687 Steve Sakoman
` (9 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Vijay Anusuri <vanusuri@mvista.com>
Upstream-Status: Backport [https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144]
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../less/less/CVE-2022-48624.patch | 41 +++++++++++++++++++
meta/recipes-extended/less/less_600.bb | 1 +
2 files changed, 42 insertions(+)
create mode 100644 meta/recipes-extended/less/less/CVE-2022-48624.patch
diff --git a/meta/recipes-extended/less/less/CVE-2022-48624.patch b/meta/recipes-extended/less/less/CVE-2022-48624.patch
new file mode 100644
index 0000000000..409730bd4f
--- /dev/null
+++ b/meta/recipes-extended/less/less/CVE-2022-48624.patch
@@ -0,0 +1,41 @@
+From c6ac6de49698be84d264a0c4c0c40bb870b10144 Mon Sep 17 00:00:00 2001
+From: Mark Nudelman <markn@greenwoodsoftware.com>
+Date: Sat, 25 Jun 2022 11:54:43 -0700
+Subject: [PATCH] Shell-quote filenames when invoking LESSCLOSE.
+
+Upstream-Status: Backport [https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144]
+CVE: CVE-2022-48624
+Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
+---
+ filename.c | 10 ++++++++--
+ 1 file changed, 8 insertions(+), 2 deletions(-)
+
+diff --git a/filename.c b/filename.c
+index 5824e385..dff20c08 100644
+--- a/filename.c
++++ b/filename.c
+@@ -972,6 +972,8 @@ close_altfile(altfilename, filename)
+ {
+ #if HAVE_POPEN
+ char *lessclose;
++ char *qfilename;
++ char *qaltfilename;
+ FILE *fd;
+ char *cmd;
+ int len;
+@@ -986,9 +988,13 @@ close_altfile(altfilename, filename)
+ error("LESSCLOSE ignored; must contain no more than 2 %%s", NULL_PARG);
+ return;
+ }
+- len = (int) (strlen(lessclose) + strlen(filename) + strlen(altfilename) + 2);
++ qfilename = shell_quote(filename);
++ qaltfilename = shell_quote(altfilename);
++ len = (int) (strlen(lessclose) + strlen(qfilename) + strlen(qaltfilename) + 2);
+ cmd = (char *) ecalloc(len, sizeof(char));
+- SNPRINTF2(cmd, len, lessclose, filename, altfilename);
++ SNPRINTF2(cmd, len, lessclose, qfilename, qaltfilename);
++ free(qaltfilename);
++ free(qfilename);
+ fd = shellcmd(cmd);
+ free(cmd);
+ if (fd != NULL)
diff --git a/meta/recipes-extended/less/less_600.bb b/meta/recipes-extended/less/less_600.bb
index f68281ac93..f88127a9e3 100644
--- a/meta/recipes-extended/less/less_600.bb
+++ b/meta/recipes-extended/less/less_600.bb
@@ -27,6 +27,7 @@ DEPENDS = "ncurses"
SRC_URI = "http://www.greenwoodsoftware.com/${BPN}/${BPN}-${PV}.tar.gz \
file://CVE-2022-46663.patch \
+ file://CVE-2022-48624.patch \
"
SRC_URI[sha256sum] = "6633d6aa2b3cc717afb2c205778c7c42c4620f63b1d682f3d12c98af0be74d20"
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 02/11] glibc: ignore CVE-2023-0687
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 03/11] qemu: Fix for CVE-2024-24474 Steve Sakoman
` (8 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Peter Marko <peter.marko@siemens.com>
This CVE was backported to glibc 2.35 branch 9 months ago.
NVD recently updated CPE and it appeared in kirkstone cve reports.
https://sourceware.org/git/?p=glibc.git;a=log;h=refs/heads/release/2.35/master
gmon: Fix allocated buffer overflow (bug 29444)
https://sourceware.org/git/?p=glibc.git;a=commit;h=f2820e478c68a73a38f81512cc38beeee220212a
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/glibc/glibc_2.35.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-core/glibc/glibc_2.35.bb b/meta/recipes-core/glibc/glibc_2.35.bb
index 21cd99dfdd..3ec6610d01 100644
--- a/meta/recipes-core/glibc/glibc_2.35.bb
+++ b/meta/recipes-core/glibc/glibc_2.35.bb
@@ -24,7 +24,7 @@ CVE_CHECK_IGNORE += "CVE-2019-1010025"
CVE_CHECK_IGNORE += "CVE-2023-4527"
# To avoid these in cve-check reports since the recipe version did not change
-CVE_CHECK_IGNORE += "CVE-2023-4813 CVE-2023-4806 CVE-2023-4911 CVE-2023-5156"
+CVE_CHECK_IGNORE += "CVE-2023-0687 CVE-2023-4813 CVE-2023-4806 CVE-2023-4911 CVE-2023-5156"
DEPENDS += "gperf-native bison-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 03/11] qemu: Fix for CVE-2024-24474
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 02/11] glibc: ignore CVE-2023-0687 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 04/11] qemu: Backport fix CVE-2023-6693 Steve Sakoman
` (7 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Vijay Anusuri <vanusuri@mvista.com>
Upstream-Status: Backport
[https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52]
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2024-24474.patch | 44 +++++++++++++++++++
2 files changed, 45 insertions(+)
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2024-24474.patch
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc
index c5fb9b1eab..18752af274 100644
--- a/meta/recipes-devtools/qemu/qemu.inc
+++ b/meta/recipes-devtools/qemu/qemu.inc
@@ -103,6 +103,7 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \
file://CVE-2021-3638.patch \
file://CVE-2023-1544.patch \
file://CVE-2023-5088.patch \
+ file://CVE-2024-24474.patch \
"
UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar"
diff --git a/meta/recipes-devtools/qemu/qemu/CVE-2024-24474.patch b/meta/recipes-devtools/qemu/qemu/CVE-2024-24474.patch
new file mode 100644
index 0000000000..e890fe56cf
--- /dev/null
+++ b/meta/recipes-devtools/qemu/qemu/CVE-2024-24474.patch
@@ -0,0 +1,44 @@
+From 77668e4b9bca03a856c27ba899a2513ddf52bb52 Mon Sep 17 00:00:00 2001
+From: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Date: Wed, 13 Sep 2023 21:44:09 +0100
+Subject: [PATCH] esp: restrict non-DMA transfer length to that of available
+ data
+
+In the case where a SCSI layer transfer is incorrectly terminated, it is
+possible for a TI command to cause a SCSI buffer overflow due to the
+expected transfer data length being less than the available data in the
+FIFO. When this occurs the unsigned async_len variable underflows and
+becomes a large offset which writes past the end of the allocated SCSI
+buffer.
+
+Restrict the non-DMA transfer length to be the smallest of the expected
+transfer length and the available FIFO data to ensure that it is no longer
+possible for the SCSI buffer overflow to occur.
+
+Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1810
+Reviewed-by: Thomas Huth <thuth@redhat.com>
+Message-ID: <20230913204410.65650-3-mark.cave-ayland@ilande.co.uk>
+Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+
+Upstream-Status: Backport [https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52]
+CVE: CVE-2024-24474
+Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
+---
+ hw/scsi/esp.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/hw/scsi/esp.c b/hw/scsi/esp.c
+index 4218a6a96054..9b11d8c5738a 100644
+--- a/hw/scsi/esp.c
++++ b/hw/scsi/esp.c
+@@ -759,7 +759,8 @@ static void esp_do_nodma(ESPState *s)
+ }
+
+ if (to_device) {
+- len = MIN(fifo8_num_used(&s->fifo), ESP_FIFO_SZ);
++ len = MIN(s->async_len, ESP_FIFO_SZ);
++ len = MIN(len, fifo8_num_used(&s->fifo));
+ esp_fifo_pop_buf(&s->fifo, s->async_buf, len);
+ s->async_buf += len;
+ s->async_len -= len;
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 04/11] qemu: Backport fix CVE-2023-6693
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (2 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 03/11] qemu: Fix for CVE-2024-24474 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 05/11] qemu: Fix CVE-2023-42467 Steve Sakoman
` (6 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Vivek Kumbhar <vkumbhar@mvista.com>
Upstream-Status: Backport [https://gitlab.com/qemu-project/qemu/-/commit/2220e8189fb94068dbad333228659fbac819abb0]
Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2023-6693.patch | 74 +++++++++++++++++++
2 files changed, 75 insertions(+)
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-6693.patch
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc
index 18752af274..d3e6ced988 100644
--- a/meta/recipes-devtools/qemu/qemu.inc
+++ b/meta/recipes-devtools/qemu/qemu.inc
@@ -104,6 +104,7 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \
file://CVE-2023-1544.patch \
file://CVE-2023-5088.patch \
file://CVE-2024-24474.patch \
+ file://CVE-2023-6693.patch \
"
UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar"
diff --git a/meta/recipes-devtools/qemu/qemu/CVE-2023-6693.patch b/meta/recipes-devtools/qemu/qemu/CVE-2023-6693.patch
new file mode 100644
index 0000000000..b91f2e6902
--- /dev/null
+++ b/meta/recipes-devtools/qemu/qemu/CVE-2023-6693.patch
@@ -0,0 +1,74 @@
+From 2220e8189fb94068dbad333228659fbac819abb0 Mon Sep 17 00:00:00 2001
+From: Jason Wang <jasowang@redhat.com>
+Date: Tue, 2 Jan 2024 11:29:01 +0800
+Subject: [PATCH] virtio-net: correctly copy vnet header when flushing TX
+
+When HASH_REPORT is negotiated, the guest_hdr_len might be larger than
+the size of the mergeable rx buffer header. Using
+virtio_net_hdr_mrg_rxbuf during the header swap might lead a stack
+overflow in this case. Fixing this by using virtio_net_hdr_v1_hash
+instead.
+
+Reported-by: Xiao Lei <leixiao.nop@zju.edu.cn>
+Cc: Yuri Benditovich <yuri.benditovich@daynix.com>
+Cc: qemu-stable@nongnu.org
+Cc: Mauro Matteo Cascella <mcascell@redhat.com>
+Fixes: CVE-2023-6693
+Fixes: e22f0603fb2f ("virtio-net: reference implementation of hash report")
+Reviewed-by: Michael Tokarev <mjt@tls.msk.ru>
+Signed-off-by: Jason Wang <jasowang@redhat.com>
+
+Upstream-Status: Backport [https://gitlab.com/qemu-project/qemu/-/commit/2220e8189fb94068dbad333228659fbac819abb0]
+CVE: CVE-2023-6693
+Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com>
+---
+ hw/net/virtio-net.c | 13 +++++++++----
+ 1 file changed, 9 insertions(+), 4 deletions(-)
+
+diff --git a/hw/net/virtio-net.c b/hw/net/virtio-net.c
+index e1f474883..42e66697f 100644
+--- a/hw/net/virtio-net.c
++++ b/hw/net/virtio-net.c
+@@ -600,6 +600,11 @@ static void virtio_net_set_mrg_rx_bufs(VirtIONet *n, int mergeable_rx_bufs,
+
+ n->mergeable_rx_bufs = mergeable_rx_bufs;
+
++ /*
++ * Note: when extending the vnet header, please make sure to
++ * change the vnet header copying logic in virtio_net_flush_tx()
++ * as well.
++ */
+ if (version_1) {
+ n->guest_hdr_len = hash_report ?
+ sizeof(struct virtio_net_hdr_v1_hash) :
+@@ -2520,7 +2525,7 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
+ ssize_t ret;
+ unsigned int out_num;
+ struct iovec sg[VIRTQUEUE_MAX_SIZE], sg2[VIRTQUEUE_MAX_SIZE + 1], *out_sg;
+- struct virtio_net_hdr_mrg_rxbuf mhdr;
++ struct virtio_net_hdr_v1_hash vhdr;
+
+ elem = virtqueue_pop(q->tx_vq, sizeof(VirtQueueElement));
+ if (!elem) {
+@@ -2537,7 +2542,7 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
+ }
+
+ if (n->has_vnet_hdr) {
+- if (iov_to_buf(out_sg, out_num, 0, &mhdr, n->guest_hdr_len) <
++ if (iov_to_buf(out_sg, out_num, 0, &vhdr, n->guest_hdr_len) <
+ n->guest_hdr_len) {
+ virtio_error(vdev, "virtio-net header incorrect");
+ virtqueue_detach_element(q->tx_vq, elem, 0);
+@@ -2545,8 +2550,8 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
+ return -EINVAL;
+ }
+ if (n->needs_vnet_hdr_swap) {
+- virtio_net_hdr_swap(vdev, (void *) &mhdr);
+- sg2[0].iov_base = &mhdr;
++ virtio_net_hdr_swap(vdev, (void *) &vhdr);
++ sg2[0].iov_base = &vhdr;
+ sg2[0].iov_len = n->guest_hdr_len;
+ out_num = iov_copy(&sg2[1], ARRAY_SIZE(sg2) - 1,
+ out_sg, out_num,
+--
+2.34.1
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 05/11] qemu: Fix CVE-2023-42467
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (3 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 04/11] qemu: Backport fix CVE-2023-6693 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 06/11] dbus: Add missing CVE_PRODUCT Steve Sakoman
` (5 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Poonam Jadhav <ppjadhav456@gmail.com>
1. scsi-disk: allow MODE SELECT block descriptor to set the block size
Link: https://github.com/qemu/qemu/commit/356c4c441ec01910314c5867c680bef80d1dd373
The MODE SELECT command can contain an optional block descriptor that can be used
to set the device block size. If the block descriptor is present then update the
block size on the SCSI device accordingly.
This allows CDROMs to be used with A/UX which requires a CDROM drive which is
capable of switching from a 2048 byte sector size to a 512 byte sector size.
2. scsi-disk: ensure block size is non-zero and changes limited to bits 8-15
Link: https://github.com/qemu/qemu/commit/55794c904df723109b228da28b5db778e0df3110
The existing code assumes that the block size can be generated from p[1] << 8
in multiple places which ignores the top and bottom 8 bits. If the block size
is allowed to be set to an arbitrary value then this causes a mismatch
between the value written by the guest in the block descriptor and the value
subsequently read back using READ CAPACITY causing the guest to generate
requests that can crash QEMU.
For now restrict block size changes to bits 8-15 and also ignore requests to
set the block size to 0 which causes the SCSI emulation to crash in at least
one place with a divide by zero error.
3. Disallow block sizes smaller than 512 [CVE-2023-42467]
Link: https://gitlab.com/qemu-project/qemu/-/commit/7cfcc79b0ab800959716738aff9419f53fc68c9c
We are doing things like
nb_sectors /= (s->qdev.blocksize / BDRV_SECTOR_SIZE);
in the code here (e.g. in scsi_disk_emulate_mode_sense()), so if
the blocksize is smaller than BDRV_SECTOR_SIZE (=512), this crashes
with a division by 0 exception. Thus disallow block sizes of 256
bytes to avoid this situation.
Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-devtools/qemu/qemu.inc | 3 +
.../qemu/qemu/CVE-2023-42467.patch | 46 +++++++++++++
...lock-desriptor-to-set-the-block-size.patch | 54 +++++++++++++++
...ero-and-changes-limited-to-bits-8-15.patch | 67 +++++++++++++++++++
4 files changed, 170 insertions(+)
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc
index d3e6ced988..ad6b310137 100644
--- a/meta/recipes-devtools/qemu/qemu.inc
+++ b/meta/recipes-devtools/qemu/qemu.inc
@@ -105,6 +105,9 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \
file://CVE-2023-5088.patch \
file://CVE-2024-24474.patch \
file://CVE-2023-6693.patch \
+ file://scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch \
+ file://scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch \
+ file://CVE-2023-42467.patch \
"
UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar"
diff --git a/meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch b/meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch
new file mode 100644
index 0000000000..d53683faa7
--- /dev/null
+++ b/meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch
@@ -0,0 +1,46 @@
+From 7cfcc79b0ab800959716738aff9419f53fc68c9c Mon Sep 17 00:00:00 2001
+From: Thomas Huth <thuth@redhat.com>
+Date: Mon, 25 Sep 2023 11:18:54 +0200
+Subject: [PATCH] hw/scsi/scsi-disk: Disallow block sizes smaller than 512
+ [CVE-2023-42467]
+
+We are doing things like
+
+ nb_sectors /= (s->qdev.blocksize / BDRV_SECTOR_SIZE);
+
+in the code here (e.g. in scsi_disk_emulate_mode_sense()), so if
+the blocksize is smaller than BDRV_SECTOR_SIZE (=512), this crashes
+with a division by 0 exception. Thus disallow block sizes of 256
+bytes to avoid this situation.
+
+Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1813
+CVE: 2023-42467
+Signed-off-by: Thomas Huth <thuth@redhat.com>
+Message-ID: <20230925091854.49198-1-thuth@redhat.com>
+Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+
+CVE: CVE-2023-42467
+Upstream-Status: Backport [https://gitlab.com/qemu-project/qemu/-/commit/7cfcc79b0ab800959716738aff9419f53fc68c9c]
+Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
+---
+ hw/scsi/scsi-disk.c | 5 +++--
+ 1 file changed, 3 insertions(+), 2 deletions(-)
+
+diff --git a/hw/scsi/scsi-disk.c b/hw/scsi/scsi-disk.c
+index e0d79c7966c..477ee2bcd47 100644
+--- a/hw/scsi/scsi-disk.c
++++ b/hw/scsi/scsi-disk.c
+@@ -1628,9 +1628,10 @@ static void scsi_disk_emulate_mode_select(SCSIDiskReq *r, uint8_t *inbuf)
+ * Since the existing code only checks/updates bits 8-15 of the block
+ * size, restrict ourselves to the same requirement for now to ensure
+ * that a block size set by a block descriptor and then read back by
+- * a subsequent SCSI command will be the same
++ * a subsequent SCSI command will be the same. Also disallow a block
++ * size of 256 since we cannot handle anything below BDRV_SECTOR_SIZE.
+ */
+- if (bs && !(bs & ~0xff00) && bs != s->qdev.blocksize) {
++ if (bs && !(bs & ~0xfe00) && bs != s->qdev.blocksize) {
+ s->qdev.blocksize = bs;
+ trace_scsi_disk_mode_select_set_blocksize(s->qdev.blocksize);
+ }
+--
diff --git a/meta/recipes-devtools/qemu/qemu/scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch b/meta/recipes-devtools/qemu/qemu/scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch
new file mode 100644
index 0000000000..d8e48d07dd
--- /dev/null
+++ b/meta/recipes-devtools/qemu/qemu/scsi-disk-allow-MODE-SELECT-block-desriptor-to-set-the-block-size.patch
@@ -0,0 +1,54 @@
+From 356c4c441ec01910314c5867c680bef80d1dd373 Mon Sep 17 00:00:00 2001
+From: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Date: Wed, 22 Jun 2022 11:53:12 +0100
+Subject: [PATCH] scsi-disk: allow MODE SELECT block descriptor to set the
+ block size
+
+The MODE SELECT command can contain an optional block descriptor that can be used
+to set the device block size. If the block descriptor is present then update the
+block size on the SCSI device accordingly.
+
+This allows CDROMs to be used with A/UX which requires a CDROM drive which is
+capable of switching from a 2048 byte sector size to a 512 byte sector size.
+
+Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Message-Id: <20220622105314.802852-13-mark.cave-ayland@ilande.co.uk>
+Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+
+Comment: Patch is refreshed
+Upstream-Status: Backport [https://github.com/qemu/qemu/commit/356c4c441ec01910314c5867c680bef80d1dd373]
+Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
+---
+ hw/scsi/scsi-disk.c | 6 ++++++
+ hw/scsi/trace-events | 1 +
+ 2 files changed, 7 insertions(+)
+
+diff --git a/hw/scsi/scsi-disk.c b/hw/scsi/scsi-disk.c
+index db27e834dae3..f5cdb9ad4b54 100644
+--- a/hw/scsi/scsi-disk.c
++++ b/hw/scsi/scsi-disk.c
+@@ -1616,6 +1616,12 @@ static void scsi_disk_emulate_mode_select(SCSIDiskReq *r, uint8_t *inbuf)
+ goto invalid_param;
+ }
+
++ /* Allow changing the block size */
++ if (bd_len && p[6] != (s->qdev.blocksize >> 8)) {
++ s->qdev.blocksize = p[6] << 8;
++ trace_scsi_disk_mode_select_set_blocksize(s->qdev.blocksize);
++ }
++
+ len -= bd_len;
+ p += bd_len;
+
+diff --git a/hw/scsi/trace-events b/hw/scsi/trace-events
+index 8e927ff62de1..ab238293f0da 100644
+--- a/hw/scsi/trace-events
++++ b/hw/scsi/trace-events
+@@ -338,6 +338,7 @@scsi_disk_dma_command_READ(uint64_t lba, uint32_t len) "Read (sector %" PRId64 ", count %u)"
+ scsi_disk_dma_command_WRITE(const char *cmd, uint64_t lba, int len) "Write %s(sector %" PRId64 ", count %u)"
+ scsi_disk_new_request(uint32_t lun, uint32_t tag, const char *line) "Command: lun=%d tag=0x%x data=%s"
+ scsi_disk_aio_sgio_command(uint32_t tag, uint8_t cmd, uint64_t lba, int len, uint32_t timeout) "disk aio sgio: tag=0x%x cmd=0x%x (sector %" PRId64 ", count %d) timeout=%u"
++scsi_disk_mode_select_set_blocksize(int blocksize) "set block size to %d"
+
+ # scsi-generic.c
+ scsi_generic_command_complete_noio(void *req, uint32_t tag, int statuc) "Command complete %p tag=0x%x status=%d"
diff --git a/meta/recipes-devtools/qemu/qemu/scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch b/meta/recipes-devtools/qemu/qemu/scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch
new file mode 100644
index 0000000000..1e1be683fc
--- /dev/null
+++ b/meta/recipes-devtools/qemu/qemu/scsi-disk-ensure-block-size-is-non-zero-and-changes-limited-to-bits-8-15.patch
@@ -0,0 +1,67 @@
+From 55794c904df723109b228da28b5db778e0df3110 Mon Sep 17 00:00:00 2001
+From: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Date: Sat, 30 Jul 2022 13:26:56 +0100
+Subject: [PATCH] scsi-disk: ensure block size is non-zero and changes limited
+ to bits 8-15
+
+The existing code assumes that the block size can be generated from p[1] << 8
+in multiple places which ignores the top and bottom 8 bits. If the block size
+is allowed to be set to an arbitrary value then this causes a mismatch
+between the value written by the guest in the block descriptor and the value
+subsequently read back using READ CAPACITY causing the guest to generate
+requests that can crash QEMU.
+
+For now restrict block size changes to bits 8-15 and also ignore requests to
+set the block size to 0 which causes the SCSI emulation to crash in at least
+one place with a divide by zero error.
+
+Fixes: 356c4c441e ("scsi-disk: allow MODE SELECT block descriptor to set the block size")
+Closes: https://gitlab.com/qemu-project/qemu/-/issues/1112
+Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
+Message-Id: <20220730122656.253448-3-mark.cave-ayland@ilande.co.uk>
+Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
+
+Comment: Patch is refreshed
+Upstream-Status: Backport [https://github.com/qemu/qemu/commit/55794c904df723109b228da28b5db778e0df3110]
+Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
+---
+ hw/scsi/scsi-disk.c | 18 ++++++++++++++----
+ 1 file changed, 14 insertions(+), 4 deletions(-)
+
+diff --git a/hw/scsi/scsi-disk.c b/hw/scsi/scsi-disk.c
+index 3027ac3b1ed6..efee6739f9ad 100644
+--- a/hw/scsi/scsi-disk.c
++++ b/hw/scsi/scsi-disk.c
+@@ -1532,7 +1532,7 @@ static void scsi_disk_emulate_mode_select(SCSIDiskReq *r, uint8_t *inbuf)
+ int cmd = r->req.cmd.buf[0];
+ int len = r->req.cmd.xfer;
+ int hdr_len = (cmd == MODE_SELECT ? 4 : 8);
+- int bd_len;
++ int bd_len, bs;
+ int pass;
+
+ /* We only support PF=1, SP=0. */
+@@ -1617,9 +1617,19 @@ static void scsi_disk_emulate_mode_select(SCSIDiskReq *r, uint8_t *inbuf)
+ }
+
+ /* Allow changing the block size */
+- if (bd_len && p[6] != (s->qdev.blocksize >> 8)) {
+- s->qdev.blocksize = p[6] << 8;
+- trace_scsi_disk_mode_select_set_blocksize(s->qdev.blocksize);
++ if (bd_len) {
++ bs = p[5] << 16 | p[6] << 8 | p[7];
++
++ /*
++ * Since the existing code only checks/updates bits 8-15 of the block
++ * size, restrict ourselves to the same requirement for now to ensure
++ * that a block size set by a block descriptor and then read back by
++ * a subsequent SCSI command will be the same
++ */
++ if (bs && !(bs & ~0xff00) && bs != s->qdev.blocksize) {
++ s->qdev.blocksize = bs;
++ trace_scsi_disk_mode_select_set_blocksize(s->qdev.blocksize);
++ }
+ }
+
+ len -= bd_len;
+
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 06/11] dbus: Add missing CVE_PRODUCT
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (4 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 05/11] qemu: Fix CVE-2023-42467 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 07/11] cve_check: cleanup logging Steve Sakoman
` (4 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Dhairya Nagodra <dnagodra@cisco.com>
- The current recipe only contains one (out of three) valid product
names for dbus package in NVD.
- This could result in reporting of lesser number CVEs than actual.
- Added missing names to get a proper list.
Signed-off-by: Dhairya Nagodra <dnagodra@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/dbus/dbus_1.14.8.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-core/dbus/dbus_1.14.8.bb b/meta/recipes-core/dbus/dbus_1.14.8.bb
index 4da307ecb3..f03e5c2d2e 100644
--- a/meta/recipes-core/dbus/dbus_1.14.8.bb
+++ b/meta/recipes-core/dbus/dbus_1.14.8.bb
@@ -184,4 +184,4 @@ do_install:class-nativesdk() {
}
BBCLASSEXTEND = "native nativesdk"
-CVE_PRODUCT += "d-bus_project:d-bus"
+CVE_PRODUCT += "d-bus_project:d-bus freedesktop:dbus freedesktop:libdbus"
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 07/11] cve_check: cleanup logging
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (5 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 06/11] dbus: Add missing CVE_PRODUCT Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 08/11] bind: Upgrade 9.18.19 -> 9.18.24 Steve Sakoman
` (3 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Ross Burton <ross.burton@arm.com>
Primarily list the number of patches found, useful when debugging.
Also clean up some bad escaping that caused warnings and use
re.IGNORECASE instead of manually doing case-insenstive rang matches.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 10acc75b7f3387b968bacd51aade6a8dc11a463f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/lib/oe/cve_check.py | 13 ++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)
diff --git a/meta/lib/oe/cve_check.py b/meta/lib/oe/cve_check.py
index 65b1358ffc..ca2b393116 100644
--- a/meta/lib/oe/cve_check.py
+++ b/meta/lib/oe/cve_check.py
@@ -73,20 +73,19 @@ def get_patched_cves(d):
import re
import oe.patch
- pn = d.getVar("PN")
- cve_match = re.compile("CVE:( CVE\-\d{4}\-\d+)+")
+ cve_match = re.compile(r"CVE:( CVE-\d{4}-\d+)+")
# Matches the last "CVE-YYYY-ID" in the file name, also if written
# in lowercase. Possible to have multiple CVE IDs in a single
# file name, but only the last one will be detected from the file name.
# However, patch files contents addressing multiple CVE IDs are supported
# (cve_match regular expression)
-
- cve_file_name_match = re.compile(".*([Cc][Vv][Ee]\-\d{4}\-\d+)")
+ cve_file_name_match = re.compile(r".*(CVE-\d{4}-\d+)", re.IGNORECASE)
patched_cves = set()
- bb.debug(2, "Looking for patches that solves CVEs for %s" % pn)
- for url in oe.patch.src_patches(d):
+ patches = oe.patch.src_patches(d)
+ bb.debug(2, "Scanning %d patches for CVEs" % len(patches))
+ for url in patches:
patch_file = bb.fetch.decodeurl(url)[2]
# Check patch file name for CVE ID
@@ -94,7 +93,7 @@ def get_patched_cves(d):
if fname_match:
cve = fname_match.group(1).upper()
patched_cves.add(cve)
- bb.debug(2, "Found CVE %s from patch file name %s" % (cve, patch_file))
+ bb.debug(2, "Found %s from patch file name %s" % (cve, patch_file))
# Remote patches won't be present and compressed patches won't be
# unpacked, so say we're not scanning them
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 08/11] bind: Upgrade 9.18.19 -> 9.18.24
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (6 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 07/11] cve_check: cleanup logging Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 09/11] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
` (2 subsequent siblings)
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Soumya Sambu <soumya.sambu@windriver.com>
Includes security fixes for - CVE-2023-4408, CVE-2023-5517,
CVE-2023-5679, CVE-2023-50868 and CVE-2023-50387
Changelog:
=========
https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.24/CHANGES
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../bind/{bind_9.18.19.bb => bind_9.18.24.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/bind/{bind_9.18.19.bb => bind_9.18.24.bb} (97%)
diff --git a/meta/recipes-connectivity/bind/bind_9.18.19.bb b/meta/recipes-connectivity/bind/bind_9.18.24.bb
similarity index 97%
rename from meta/recipes-connectivity/bind/bind_9.18.19.bb
rename to meta/recipes-connectivity/bind/bind_9.18.24.bb
index a829cc566d..fbbebe89ad 100644
--- a/meta/recipes-connectivity/bind/bind_9.18.19.bb
+++ b/meta/recipes-connectivity/bind/bind_9.18.24.bb
@@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \
file://0001-avoid-start-failure-with-bind-user.patch \
"
-SRC_URI[sha256sum] = "115e09c05439bebade1d272eda08fa88eb3b60129edef690588c87a4d27612cc"
+SRC_URI[sha256sum] = "709d73023c9115ddad3bab65b6c8c79a590196d0d114f5d0ca2533dbd52ddf66"
UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/"
# follow the ESV versions divisible by 2
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 09/11] linux-firmware: upgrade 20231030 -> 20231211
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (7 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 08/11] bind: Upgrade 9.18.19 -> 9.18.24 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 10/11] tzdata : Upgrade to 2024a Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 11/11] kernel.bbclass: Set pkg-config variables for building modules Steve Sakoman
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0caafdbbf4e7dc84b919afe14f7cb8c46a9e4ac2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
...nux-firmware_20231030.bb => linux-firmware_20231211.bb} | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231030.bb => linux-firmware_20231211.bb} (99%)
diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
similarity index 99%
rename from meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb
rename to meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
index a42e5ed825..48e83cb34b 100644
--- a/meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb
+++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
@@ -147,7 +147,7 @@ LIC_FILES_CHKSUM = "file://LICENCE.Abilis;md5=b5ee3f410780e56711ad48eadc22b8bc \
"
# WHENCE checksum is defined separately to ease overriding it if
# class-devupstream is selected.
-WHENCE_CHKSUM = "ceb5248746d24d165b603e71b288cf75"
+WHENCE_CHKSUM = "3113c4ea08e5171555f3bf49eceb5b07"
# These are not common licenses, set NO_GENERIC_LICENSE for them
# so that the license files will be copied from fetched source
@@ -231,7 +231,7 @@ SRC_URI:class-devupstream = "git://git.kernel.org/pub/scm/linux/kernel/git/firmw
# Pin this to the 20220509 release, override this in local.conf
SRCREV:class-devupstream ?= "b19cbdca78ab2adfd210c91be15a22568e8b8cae"
-SRC_URI[sha256sum] = "c98d200fc4a3120de1a594713ce34e135819dff23e883a4ed387863ba25679c7"
+SRC_URI[sha256sum] = "96af7e4b5eabd37869cdb3dcbb7ab36911106d39b76e799fa1caab16a9dbe8bb"
inherit allarch
@@ -242,7 +242,8 @@ do_compile() {
}
do_install() {
- oe_runmake 'DESTDIR=${D}' 'FIRMWAREDIR=${nonarch_base_libdir}/firmware' install
+ # install-nodedup avoids rdfind dependency
+ oe_runmake 'DESTDIR=${D}' 'FIRMWAREDIR=${nonarch_base_libdir}/firmware' install-nodedup
cp GPL-2 LICEN[CS]E.* WHENCE ${D}${nonarch_base_libdir}/firmware/
}
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 10/11] tzdata : Upgrade to 2024a
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (8 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 09/11] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 11/11] kernel.bbclass: Set pkg-config variables for building modules Steve Sakoman
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Priyal Doshi <pdoshi@mvista.com>
Signed-off-by: Priyal Doshi <pdoshi@mvista.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 5abbd0abf992ce8d11f3ae31fb1d83d97f5319fa)
Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-extended/timezone/timezone.inc | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/meta/recipes-extended/timezone/timezone.inc b/meta/recipes-extended/timezone/timezone.inc
index 2774e5e730..4734adcc08 100644
--- a/meta/recipes-extended/timezone/timezone.inc
+++ b/meta/recipes-extended/timezone/timezone.inc
@@ -6,7 +6,7 @@ SECTION = "base"
LICENSE = "PD & BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=c679c9d6b02bc2757b3eaf8f53c43fba"
-PV = "2023d"
+PV = "2024a"
SRC_URI =" http://www.iana.org/time-zones/repository/releases/tzcode${PV}.tar.gz;name=tzcode;subdir=tz \
http://www.iana.org/time-zones/repository/releases/tzdata${PV}.tar.gz;name=tzdata;subdir=tz \
@@ -16,5 +16,5 @@ S = "${WORKDIR}/tz"
UPSTREAM_CHECK_URI = "http://www.iana.org/time-zones"
-SRC_URI[tzcode.sha256sum] = "e9a5f9e118886d2de92b62bb05510a28cc6c058d791c93bd6b84d3292c3c161e"
-SRC_URI[tzdata.sha256sum] = "dbca21970b0a8b8c0ceceec1d7b91fa903be0f6eca5ae732b5329672232a08f3"
+SRC_URI[tzcode.sha256sum] = "80072894adff5a458f1d143e16e4ca1d8b2a122c9c5399da482cb68cba6a1ff8"
+SRC_URI[tzdata.sha256sum] = "0d0434459acbd2059a7a8da1f3304a84a86591f6ed69c6248fffa502b6edffe3"
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 11/11] kernel.bbclass: Set pkg-config variables for building modules
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
` (9 preceding siblings ...)
2024-03-04 15:23 ` [OE-core][kirkstone 10/11] tzdata : Upgrade to 2024a Steve Sakoman
@ 2024-03-04 15:23 ` Steve Sakoman
10 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-03-04 15:23 UTC (permalink / raw)
To: openembedded-core
From: Munehisa Kamata <kamatam@amazon.com>
[Backport cd2072e5d953 from the master without HOSTPKG_CONFIG setting]
The pkg-config workaround has been applied for kernel image building, but
not for module building. So pkg-config variables are different between
do_compile and do_compile_kernelmodules tasks. It may unnecessary trigger
rebuilding of a few host tools at the later task.
Especially when CONFIG_DEBUG_INFO_BTF is enabled in the kernel, it may even
trigger rebuilding vmlinux at do_compile_kernelmodules due to the rebuilt
host tools such as certs/extract-cert or objtool (on x86). This eventually
creates an inconsistent set of kernel binaries.
Here is the repro steps:
- Check out nanbield on x86
- The unexpected rebuild happens on kirkstone or possibly earlier
- Ensure that pahole is available (e.g. via meta-oe)
- Set KERNEL_DEBUG to "True" to properly set up PAHOLE
e.g.
$ export KERNEL_DEBUG="True"
$ export BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} KERNEL_DEBUG"
- Enable CONFIG_DEBUG_INFO_BTF=y
e.g.
$ bitbake -c menuconfig virtual/kernel
-> Kernel hacking
-> Compile-time checks and compiler options
-> Generate BTF typeinfo
- Build the kernel
e.g.
$ bitbake virtual/kernel
The BTF information in the resulting bzImage and kernel modules are
inconsistent, because the module's BTF information is generated using the
"second" vmlinux that doesn't have the identical BTF to the "first" vmlinux.
These modules can't be loaded at runtime due to the BTF mismatch.
This also leads to a build-id mismatch between the installed bzImage and
vmlinux since the bzImage is created from the first vmlinux, but the
installed vmlinux is the second one.
$ eu-readelf -n tmp/work/qemux86_64-poky-linux/linux-yocto/6.5.13+git/image/boot/{bzImage*,vmlinux*} | grep "Build ID"
Build ID: 4a0d62ee7fef0244950f0f604253729875bea493
Build ID: fb99b3d91399dbe42bf67ddee59e0f5a0c7f74d9
To avoid the unexpected rebuilding that results in such inconsistency, set
the same pkg-config variables when building kernel and modules. For kernel
5.19 and above, simply set the HOSTPKG_CONFIG in the make command line.
Signed-off-by: Munehisa Kamata <kamatam@amazon.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/kernel.bbclass | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass
index 96e41b5192..dbd89057f3 100644
--- a/meta/classes/kernel.bbclass
+++ b/meta/classes/kernel.bbclass
@@ -396,6 +396,13 @@ addtask transform_kernel after do_compile before do_install
do_compile_kernelmodules() {
unset CFLAGS CPPFLAGS CXXFLAGS LDFLAGS MACHINE
+
+ # setup native pkg-config variables (kconfig scripts call pkg-config directly, cannot generically be overriden to pkg-config-native)
+ export PKG_CONFIG_DIR="${STAGING_DIR_NATIVE}${libdir_native}/pkgconfig"
+ export PKG_CONFIG_PATH="$PKG_CONFIG_DIR:${STAGING_DATADIR_NATIVE}/pkgconfig"
+ export PKG_CONFIG_LIBDIR="$PKG_CONFIG_DIR"
+ export PKG_CONFIG_SYSROOT_DIR=""
+
if [ "${KERNEL_DEBUG_TIMESTAMPS}" != "1" ]; then
# kernel sources do not use do_unpack, so SOURCE_DATE_EPOCH may not
# be set....
--
2.34.1
^ permalink raw reply related [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2024-08-13 12:16 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2024-08-13 12:16 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Thursday, August 15
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/7236
The following changes since commit 2721f84ba755ceea5780e44feb0713ad8c4d0217:
lttng-modules: Upgrade 2.13.9 -> 2.13.14 (2024-08-02 12:10:02 -0700)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Archana Polampalli (4):
ghostscript: fix CVE-2024-29511
ghostscript: fix CVE-2024-29509
ghostscript: fix CVE-2024-29506
go: fix CVE-2024-24791
Hitendra Prajapati (1):
busybox: CVE-2023-42364, CVE-2023-42365, CVE-2023-42366 fixes
Peter Marko (1):
libyaml: Update status of CVE-2024-35328
Richard Purdie (1):
cve_check: Use a local copy of the database during builds
Ross Burton (1):
python3-pycryptodome(x): use python_setuptools_build_meta build class
Soumya Sambu (1):
python3-certifi: Fix CVE-2024-39689
Vijay Anusuri (1):
orc: upgrade 0.4.32 -> 0.4.39
Yogita Urade (1):
ofono: fix CVE-2023-2794
meta/classes/cve-check.bbclass | 7 +-
.../ofono/ofono/CVE-2023-2794-0001.patch | 37 ++
.../ofono/ofono/CVE-2023-2794-0002.patch | 32 ++
.../ofono/ofono/CVE-2023-2794-0003.patch | 44 +++
.../ofono/ofono/CVE-2023-2794-0004.patch | 127 +++++++
meta/recipes-connectivity/ofono/ofono_1.34.bb | 4 +
.../busybox/CVE-2023-42364_42365-1.patch | 197 ++++++++++
.../busybox/CVE-2023-42364_42365-2.patch | 96 +++++
.../busybox/busybox/CVE-2023-42366.patch | 36 ++
meta/recipes-core/busybox/busybox_1.35.0.bb | 3 +
.../meta/cve-update-nvd2-native.bb | 18 +-
meta/recipes-devtools/go/go-1.17.13.inc | 1 +
.../go/go-1.21/CVE-2024-24791.patch | 359 ++++++++++++++++++
.../orc/{orc_0.4.32.bb => orc_0.4.39.bb} | 2 +-
.../python3-certifi/CVE-2024-39689.patch | 69 ++++
.../python/python3-certifi_2021.10.8.bb | 1 +
.../python/python3-pycryptodome_3.14.1.bb | 2 +-
.../python/python3-pycryptodomex_3.14.1.bb | 2 +-
.../ghostscript/CVE-2024-29506.patch | 45 +++
.../ghostscript/CVE-2024-29509.patch | 45 +++
.../ghostscript/CVE-2024-29511-0001.patch | 100 +++++
.../ghostscript/CVE-2024-29511-0002.patch | 219 +++++++++++
.../ghostscript/ghostscript_9.55.0.bb | 4 +
meta/recipes-support/libyaml/libyaml_0.2.5.bb | 3 +
24 files changed, 1442 insertions(+), 11 deletions(-)
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-2794-0001.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-2794-0002.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-2794-0003.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2023-2794-0004.patch
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2023-42364_42365-1.patch
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2023-42364_42365-2.patch
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2023-42366.patch
create mode 100644 meta/recipes-devtools/go/go-1.21/CVE-2024-24791.patch
rename meta/recipes-devtools/orc/{orc_0.4.32.bb => orc_0.4.39.bb} (92%)
create mode 100644 meta/recipes-devtools/python/python3-certifi/CVE-2024-39689.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2024-29506.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2024-29509.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2024-29511-0001.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2024-29511-0002.patch
--
2.34.1
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2025-01-15 14:37 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2025-01-15 14:37 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Friday, January 17
Passed a-full on autobuilder:
https://valkyrie.yoctoproject.org/#/builders/29/builds/809
The following changes since commit a270d4c957259761bcc7382fcc54642a02f9fc7d:
build-appliance-image: Update to kirkstone head revision (2025-01-09 08:49:38 -0800)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Archana Polampalli (3):
go: Fix CVE-2024-34155
go: Fix CVE-2024-34156
go: Fix CVE-2024-34158
Divya Chellam (1):
ruby: fix CVE-2024-49761
Peter Marko (1):
gstreamer1.0: ignore CVEs fixed in plugins recipes
Yogita Urade (6):
ofono: fix CVE-2024-7539
ofono: fix CVE-2024-7543
ofono: fix CVE-2024-7544
ofono: fix CVE-2024-7545
ofono: fix CVE-2024-7546
ofono: fix CVE-2024-7547
.../ofono/ofono/CVE-2024-7539.patch | 88 +++
.../ofono/ofono/CVE-2024-7543.patch | 30 +
.../ofono/ofono/CVE-2024-7544.patch | 30 +
.../ofono/ofono/CVE-2024-7545.patch | 32 +
.../ofono/ofono/CVE-2024-7546.patch | 30 +
.../ofono/ofono/CVE-2024-7547.patch | 29 +
meta/recipes-connectivity/ofono/ofono_1.34.bb | 6 +
meta/recipes-devtools/go/go-1.17.13.inc | 3 +
.../go/go-1.21/CVE-2024-34155.patch | 71 +++
.../go/go-1.21/CVE-2024-34156.patch | 150 +++++
.../go/go-1.21/CVE-2024-34158.patch | 205 +++++++
.../ruby/ruby/CVE-2024-49761-0001.patch | 391 ++++++++++++
.../ruby/ruby/CVE-2024-49761-0002.patch | 104 ++++
.../ruby/ruby/CVE-2024-49761-0003.patch | 85 +++
.../ruby/ruby/CVE-2024-49761-0004.patch | 71 +++
.../ruby/ruby/CVE-2024-49761-0005.patch | 51 ++
.../ruby/ruby/CVE-2024-49761-0006.patch | 79 +++
.../ruby/ruby/CVE-2024-49761-0007.patch | 561 ++++++++++++++++++
.../ruby/ruby/CVE-2024-49761-0008.patch | 107 ++++
.../ruby/ruby/CVE-2024-49761-0009.patch | 46 ++
meta/recipes-devtools/ruby/ruby_3.1.3.bb | 9 +
.../gstreamer/gstreamer1.0_1.20.7.bb | 9 +
22 files changed, 2187 insertions(+)
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7539.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7543.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7544.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7545.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7546.patch
create mode 100644 meta/recipes-connectivity/ofono/ofono/CVE-2024-7547.patch
create mode 100644 meta/recipes-devtools/go/go-1.21/CVE-2024-34155.patch
create mode 100644 meta/recipes-devtools/go/go-1.21/CVE-2024-34156.patch
create mode 100644 meta/recipes-devtools/go/go-1.21/CVE-2024-34158.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0001.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0002.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0003.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0004.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0005.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0006.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0007.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0008.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2024-49761-0009.patch
--
2.43.0
^ permalink raw reply [flat|nested] 18+ messages in thread
* [OE-core][kirkstone 00/11] Patch review
@ 2025-07-09 15:19 Steve Sakoman
0 siblings, 0 replies; 18+ messages in thread
From: Steve Sakoman @ 2025-07-09 15:19 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments bach by
end of day Friday, July 11
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/1983
The following changes since commit 78055e8b6a9ea5063658886c5b5d22821d689fc5:
xwayland: fix CVE-2025-49180 (2025-07-05 06:12:53 -0700)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Bruce Ashfield (1):
linux-yocto/5.15: update to v5.15.186
Changqing Li (3):
libsoup-2.4: refresh CVE-2025-4969.patch
libsoup-2.4: fix CVE-2025-4945
libsoup: fix CVE-2025-4945
Chen Qi (1):
coreutils: fix CVE-2025-5278
Divya Chellam (3):
libarchive: fix CVE-2025-5915
libarchive: fix CVE-2025-5916
libarchive: fix CVE-2025-5917
Hitendra Prajapati (1):
libxml2: fix CVE-2025-6021
Yogita Urade (2):
curl: fix CVE-2024-11053
curl: fix CVE-2025-0167
.../coreutils/coreutils/CVE-2025-5278.patch | 113 +++
meta/recipes-core/coreutils/coreutils_9.0.bb | 1 +
.../libxml/libxml2/CVE-2025-6021.patch | 56 ++
meta/recipes-core/libxml/libxml2_2.9.14.bb | 1 +
.../libarchive/libarchive/CVE-2025-5915.patch | 217 +++++
.../libarchive/libarchive/CVE-2025-5916.patch | 116 +++
.../libarchive/libarchive/CVE-2025-5917.patch | 54 ++
.../libarchive/libarchive_3.6.2.bb | 3 +
.../linux/linux-yocto-rt_5.15.bb | 6 +-
.../linux/linux-yocto-tiny_5.15.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +-
.../curl/curl/CVE-2024-11053-0001.patch | 340 ++++++++
.../curl/curl/CVE-2024-11053-0002.patch | 746 ++++++++++++++++++
.../curl/curl/CVE-2025-0167.patch | 175 ++++
meta/recipes-support/curl/curl_7.82.0.bb | 3 +
.../libsoup/libsoup-2.4/CVE-2025-4945.patch | 117 +++
.../libsoup/libsoup-2.4/CVE-2025-4969.patch | 54 +-
.../libsoup/libsoup-2.4_2.74.2.bb | 1 +
.../libsoup/libsoup/CVE-2025-4945.patch | 118 +++
meta/recipes-support/libsoup/libsoup_3.0.7.bb | 1 +
20 files changed, 2093 insertions(+), 61 deletions(-)
create mode 100644 meta/recipes-core/coreutils/coreutils/CVE-2025-5278.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5915.patch
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5916.patch
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2025-5917.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2024-11053-0001.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2024-11053-0002.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-0167.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4945.patch
create mode 100644 meta/recipes-support/libsoup/libsoup/CVE-2025-4945.patch
--
2.43.0
^ permalink raw reply [flat|nested] 18+ messages in thread
end of thread, other threads:[~2025-07-09 15:19 UTC | newest]
Thread overview: 18+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-03-04 15:23 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 02/11] glibc: ignore CVE-2023-0687 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 03/11] qemu: Fix for CVE-2024-24474 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 04/11] qemu: Backport fix CVE-2023-6693 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 05/11] qemu: Fix CVE-2023-42467 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 06/11] dbus: Add missing CVE_PRODUCT Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 07/11] cve_check: cleanup logging Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 08/11] bind: Upgrade 9.18.19 -> 9.18.24 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 09/11] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 10/11] tzdata : Upgrade to 2024a Steve Sakoman
2024-03-04 15:23 ` [OE-core][kirkstone 11/11] kernel.bbclass: Set pkg-config variables for building modules Steve Sakoman
-- strict thread matches above, loose matches on Subject: below --
2025-07-09 15:19 [OE-core][kirkstone 00/11] Patch review Steve Sakoman
2025-01-15 14:37 Steve Sakoman
2024-08-13 12:16 Steve Sakoman
2023-12-21 2:09 Steve Sakoman
2023-06-11 16:02 Steve Sakoman
2023-01-12 2:33 Steve Sakoman
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox