Commit Graph

76040 Commits

Author SHA1 Message Date
Antonin Godard
f57dc43765 Fix dead links that use the DISTRO macro
After introducing the DISTRO_LATEST_TAG and DISTRO_REL_LATEST_TAG
macros, use them in links that currently use DISTRO/DISTRO_REL_TAG. When
building for the tip of a branch, this will replace the current A.B.999
in links to the latest existing tag.

The links were found across the documentation by running 'grep -r
"http.*5\.2\.999"' inside the _build/html output after building the
docs.

[YOCTO #14802]

(From yocto-docs rev: f264569312ffa8a4ad1f9e2022b4eaa14aeb3099)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 29be069ebbf2c55d72fc51d99ed5a558af37c05e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
c0e00b017f poky.yaml: introduce DISTRO_LATEST_TAG
Introduce the DISTRO_LATEST_TAG macro, which should always point to the
latest existing tag in the documentation, unlike DISTRO which may point
to A.B.999 to represent the tip of a branch.

This variable is needed to fix dead links in the documentation that
currently use the DISTRO macro.

Also, make DISTRO_REL_TAG use the DISTRO macro directly, to avoid
repetition, and add a DISTRO_REL_LATEST_TAG macro that has the same role
as DISTRO_LATEST_TAG but with "yocto-" prepended to it.

In set_versions.py, run the "git describe --abbrev=0 --tags
--match='yocto-*'" command to get the latest existing tag on the
currently checked out commit. Fallback to ourversion in case we didn't
find any.

(From yocto-docs rev: 6554f50b3fb424a746ba4136fad7510e950f4b3b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a85b0e500c94921f77fa7b7dbb877e4945f96d1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Andrew Kreimer
51a68b0a42 manuals: remove repeated word
The word "modern" appears twice, remove the extra one.

(From yocto-docs rev: c3671cbddaa3c0df195a5cd01d50e26cb6dbcbe4)

Signed-off-by: Andrew Kreimer <algonell@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
55ab189a41 ref-manual/variables.rst: improve the PKGV documentation
It may be confusing for users that source control information is not
present in the BitBake environment. Document it as a warning block.

(From yocto-docs rev: ba0a321e5c623a9c716be7a451fdd60fae5b26b4)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
7f14a57770 ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference
When building for nativesdk recipes, HOST_CC_ARCH equals SDK_CC_ARCH,
not BUILDSDK_CC_ARCH which doesn't exist.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 50cf8b92b6f37ecc7f696f6687980e68cb8286e5)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 08fc3446cb13b5bd8781874d2d996899ce12b082)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
293f96d1ac ref-manual/variables.rst: document HOST_*_ARCH variables
These variables control the flags for the assembler, compiler and
linker, but depend on the context.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cfc7bce0b7368a6ecfaef7c7df6222f1a6076e9b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f8eb33569a5e8cadc036855e2d95eee77e627cb4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
883ce37143 ref-manual/variables.rst: document missing SDK_*_ARCH variables
These variables control the flags for the assembler, compiler and linker
when building for nativesdk recipes.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 028bdce97d62e200e032da6d0c54c0c4109e5a97)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c08f6d3c8aee86264c069b7c30850cb02de76076)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
4553386396 ref-manual/variables.rst: add missing documentation for BUILD_* variables
These toolchain variables are used in a native context. Some of the
BUILD_* variables missed documentation. Also, some of the base commands
were also not there so document them.

Some of existing BUILD_* variable documentation were missing the note
about their usage in a native context, so add it too so that all BUILD_*
variables are documented the same way.

[YOCTO #15719]

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: f16a641086a7c3546b599a5996c4f7a6db04967e)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 87103afa1cb6690e9aaa87ca1f23e45eaaa359ac)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
b90aaa6b65 ref-manual/variables.rst: add manpage links for toolchain variables
Use the :manpage: role to provide links to common toolchain utilities.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: f021874bff4e7d30419371564fef41fcfd6d6976)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7023e5f176efde05a6798476712c8a4e006a6b0d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
7d29579a31 documentation/conf.py: define a manpage url
By defining the manpages_url we can use the :manpage: role in the
documentation for providing links to manpages. See:
https://www.sphinx-doc.org/en/master/usage/configuration.html#confval-manpages_url

Replace existing manpages links to use this role.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: f5c964f41ed0f9a9740769e40aabf543df274c03)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4e63cd74cd1a330ea5e96bb04243a90f607b2857)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
5377678cf5 ref-manual/variables.rst: document autotools class related variables
Document the AUTOTOOLS_SCRIPT_PATH and the CONFIGURE_SCRIPT variables.

(From yocto-docs rev: 1065f57bc029e58570de6bb28062c17130e8a102)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
28435a6464 ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name
This variable affects the watchdog-config recipe, not the watchdog
recipe.

(From yocto-docs rev: 619ab9da0c3a121776bbbedc55c64a4e9631e497)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d3350c38910c47c76ed17f24579120013589ca1f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Lee Chee Yang
6a94b068e9 migration-guides: add release notes for 5.0.8
(From yocto-docs rev: dee872d147abc18bba550a172bd04b0d3b587c39)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7494df521ed9c70e877dbdef1adfe38ad717682f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Lee Chee Yang
7d2ea4dd74 migration-guides: add release notes for 5.1.4
(From yocto-docs rev: 4fa9953b69a4f6b19dff8d762ba30ebc50449798)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f7c8fdfdfef0cac529594af5bdb72e53b29262fe)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
2932eee2c2 overview-manual/concepts: add UNPACKDIR in the directory description
Mention that UNPACKDIR is used as a location to unpack the source code,
and that S is the final location of the source code. This is
deliberately vague, because as there are multiple instances of how these
directories can be defined and used.

The proper explanation of how the UNPACKDIR and S directories interact
is left to the reference manual, under the UNPACKDIR variable
description.

(From yocto-docs rev: 85e738e4c0e62f69699fff4bb0482ee3e3121496)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 39ca56c3a3a5218ca73c7ced212b2ee89428a2d1)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
abf5cda84c overview-manual/concepts: remove PR from the build dir list
PR was removed by cc83e4548465 ("bitbake.conf: Drop PE and PR from
WORKDIR and STAMP") on OE-Core.

(From yocto-docs rev: 05a7235cfa9a3d899395c80a1a8caae8b3b3eba9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d7a1038ee7c8c463623f0996963f9e8f29d40555)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
a10c7a4eb9 overview-manual: convert analysis-for-package-splitting.png to svg
- Convert the png file to an SVG file
- Add the UNPACKDIR reference.
- Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf:
  Drop PE and PR from WORKDIR and STAMP") on OE-Core.
- Change S value to BP (equal to ${BPN}-${PV}, but more accurate).

(From yocto-docs rev: 2836f36e6e9fd42801b129232fc9e7db35ea7136)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 18832dd1e90ad85916b1f757271493ddfd3eb432)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
d67f7ffa79 overview-manual: convert configuration-compile-autoreconf.png to svg
- Convert the png file to an SVG file
- Add the UNPACKDIR reference.
- Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf:
  Drop PE and PR from WORKDIR and STAMP") on OE-Core.
- Change S value to BP (equal to ${BPN}-${PV}, but more accurate).

(From yocto-docs rev: 272056be6e32d1b6cd2b7064ab764a55474721b5)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 91b53f4d1de5b9669cbb8d7fc741ba9c08c31f94)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
0b16a741f1 overview-manual: convert patching.png to svg
- Convert the png file to an SVG file.
- Add the new UNPACKDIR directory to the image.
- Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf:
  Drop PE and PR from WORKDIR and STAMP") on OE-Core.
- Change S value to BP (equal to ${BPN}-${PV}, but more accurate).-

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 508d65d5eb1759caa926aa8a4634679647e2b121)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 3aa3af6d5214b47555c4c2b16e9c720122e16fa4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Antonin Godard
8f152ba3ce overview-manual: convert source-fetching.png to svg and fix UNPACKDIR
- Convert the png file to an SVG file.
- Add the new UNPACKDIR directory to the image.
- Remove ${PR} from WORKDIR value, after cc83e4548465 ("bitbake.conf:
  Drop PE and PR from WORKDIR and STAMP") on OE-Core.
- Change S value to BP (equal to ${BPN}-${PV}, but more accurate).-

This fixes [YOCTO #15730].

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 404a0fb167402e13d3a4ce5aba23aa22a78a0c06)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 27725e4e7bf4d5fe7ad222de077cc693b9205b17)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Daniel Turull
5ad0c3ae5b cve-check: fix debug message
Debug level was not added as a parameter, causing a warning.

(From OE-Core rev: 182a915fc733791d4583b956df2e62aa35613f5c)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-25 12:37:57 +01:00
Steve Sakoman
70dc28ac28 build-appliance-image: Update to styhead head revision
(From OE-Core rev: 2d94f4b8a852dc761f89e5106347e239382df5fb)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:09:10 -07:00
Steve Sakoman
6a5ba188b7 poky.conf: bump version for 5.1.4
(From meta-yocto rev: a8774f23c1f1270b2965cb472632491a3572f89b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:06:30 -07:00
Makarios Christakis
915e5e4d94 icu: Adjust ICU_DATA_DIR path on big endian targets
On big-endian systems the preprocessor define ICU_DATA_DIR
is currently being set to a path ending with the ${PV} of
the recipe.

The PV version string has changed to a '-' separator
since oe-core commit cebe8439cdc656d53355506a31a3782312bf03c5
whereas the build system installs the data files into a
path ending with the dot-separated version of ICU.

This causes the ICU data file to not be detected at runtime,
consequently breaking any dependant applications.

We therefore substitute ${PV} with the dot-separated version
string of ICU, as returned from the icu_install_folder function,
on the ICU_DATA_DIR define on big-endian targets.

(From OE-Core rev: 1689c4fe872540c48af07b482e65646928eaf516)

Signed-off-by: Makarios Christakis <makchrbiz@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 28cdc0110def011e3d690da1d591076385267ef7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:06:30 -07:00
Peter Marko
d5986042ac xserver-xorg: mark CVEs fixed in 21.1.16 as fixed
These are tracked as versionless redhat CVEs in NVD DB.

(From OE-Core rev: ffa253cba600ab7fa3334e1d4b2b300a352da966)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:06:30 -07:00
Peter Marko
6277999680 openssh: patch CVE-2025-26465
Pick commit:
0832aac795

(From OE-Core rev: 0d77609f814dec344535c5674f71a043a4e718e5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:06:30 -07:00
Peter Marko
2b1149f032 openssh: patch CVE-2025-26466
Pick commit:
6ce00f0c2e

(From OE-Core rev: ec3912dcaaab85f1ac8907aa5b0b536c32540ff1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-22 07:06:30 -07:00
Vijay Anusuri
9ddadbdeb4 xserver-xorg: upgrade 21.1.15 -> 21.1.16
Includes security fix

  * CVE-2025-26594
  * CVE-2025-26595
  * CVE-2025-26596
  * CVE-2025-26597
  * CVE-2025-26598
  * CVE-2025-26599
  * CVE-2025-26600
  * CVE-2025-26601

Ref: https://lists.x.org/archives/xorg-announce/2025-February/003584.html
     https://lists.x.org/archives/xorg-announce/2025-February/003585.html

(From OE-Core rev: a0989930949689dd971dea61e851b548af86a1bf)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b5491688a045e52b2a1a00d04b746ed6af456784)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Ross Burton
53141014c1 xserver-xf86-config: remove obsolete configuration files
For reasons we have explicit xorg.conf files for a number of the qemu
machines, but not all of them. These mainly disabled screen blanking
(which is now down with a separate fragment) but also explictly set the
device driver to fbdev which meant they didn't use the modesettings
driver as they should (with the virtio framebuffer from qemu).

This is the root cause of why the xserver 21.1.16 upgrade doesn't work
on a number of machines: the /sys probing changed and the fbdev driver
now refuses to use the PCI framebuffer device as there are better
drivers, but we've explictly told xorg to use the wrong driver.

For more details, see https://gitlab.freedesktop.org/xorg/xserver/-/issues/1798.

(From OE-Core rev: 73f39fe8a5367ad905002df03e10fbf59b8f8921)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8c8039bf4c2d011e3d12c970ce45036b184902a9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Ross Burton
4a642b1ae7 xserver-xf86-config: add a configuration fragment to disable screen blanking
Add a configuration fragment that disables screen blanking, and add it
to all qemu machines.

(From OE-Core rev: 72855767daa515a451ea7ebe3412479cb7bafdc6)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 780a5ccaa51d5aed18200883a686387e70847e4b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Wang Mingyu
a3b990b1f1 xserver-xorg: upgrade 21.1.14 -> 21.1.15
(From OE-Core rev: a97e23fe412b8b382f718f73c5a8b12f26208661)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ba94110d70ebfb1b4798ecf05389f7ea602b1f55)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Vijay Anusuri
ef138b1296 libtasn1: upgrade 4.19.0 -> 4.20.0
* Noteworthy changes in release 4.20.0 (2025-02-01) [stable]
- The release tarball is now reproducible.
- We publish a minimal source-only tarball generated by 'git archive'.
- Update gnulib files and various build/maintenance fixes.
- Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET
OF elements

License-Update: file COPYING.LESSER renamed to COPYING.LESSERv2 & Copyright year updated to 2025

(From OE-Core rev: 7e79c2dd6cb3b10780219675cf908eaf37046bec)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
d65cbfb15b xwayland: upgrade 21.1.4 -> 21.1.6
Handle following CVEs:
* CVE-2025-26594
* CVE-2025-26595
* CVE-2025-26596
* CVE-2025-26597
* CVE-2025-26598
* CVE-2025-26599
* CVE-2025-26600
* CVE-2025-26601

(From OE-Core rev: 57c278ec18eb2daba8bed1ea96f924491e11a78e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
d5bb46337d grub: patch CVE-2025-0678 and CVE-2025-1125
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: d0283e421e41b6775f40a51de6018c2c5cfda61f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
373e83b89c grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: 0a2cb15d6953a809135bea69609673d068f46df1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
51a7eb1192 grub: patch CVE-2024-45778 and CVE-2024-45779
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: 9ecee5f950f249d982b307bbdbe0e13e55f27b24)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
7b009013fc grub: patch CVE-2025-1118
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: def610a1298ad7b8c98185a2b4c46f2c7173a950)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
9079bae6d1 grub: patch CVE-2025-0690
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: ab56d0eb79b40f5e60af20dadcda1b0239fe020e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
bce8588104 grub: patch CVE-2024-45777
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: bfebaeb1705d072eb6b42a6dfe9bff4829a49a33)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
c9c5246e9f grub: patch CVE-2024-45776
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: ba19a6126d315c964214e7ca89895ea1ba8b4a15)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
845904fa23 grub: patch CVE-2025-0622
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: aeefadfda0e98d0b3369c4abc98485774e1fe562)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
1867cc36c7 grub: patch CVE-2024-45775
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 0ae686de6aefb10d961cd8965dba8a02d1c977c6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
00b1c0f58a grub: patch CVE-2024-45774
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: e956e7437aa95e006547c3a92271b64c25252a50)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
88680b5de2 grub: patch CVE-2025-0624
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 29778ceddd775c47d722ecf1cc587c6526202d0b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
63b8665d9c grub: patch CVE-2024-45783
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 7c18697372444ef9e4df03b7c9de7b8da7f4f600)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
43dc093c92 grub: patch CVE-2024-45780
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 3c33dbc32859ce45743c507120317a562b1a897d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
8c9962a6fd grub: patch CVE-2024-45782 and CVE-2024-56737
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: 3b497db0bff69c8e7a4f5466b155d1c84051cc59)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
01aac7e940 grup: patch CVE-2024-45781
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: ef41ef5730d08371d1eb03f94fa9357edf26889f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
039f52ed9c grub: backport strlcpy function
It is used to fix multiple CVEs.

(From OE-Core rev: 48cf877397b82449f171190a33a8e723512b8227)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00
Peter Marko
eafe151f69 grub: drop obsolete CVE statuses
CVE-2021-46705 was needed only with 2.06
CVE-2023-4692 and CVE-2023-4693 were fixed in NVD DB meanwhile

(From OE-Core rev: 7d35eefd2290bad78199354157e5d275ceda0ce2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:44:47 -07:00