mbox

[mickledore,0/5] Patch review

Message ID cover.1698766338.git.steve@sakoman.com
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut

Message

Steve Sakoman Oct. 31, 2023, 3:35 p.m. UTC 
Please review this set of patches for mickledore and have comments back by
end of day Thursday, November 2

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6123

The following changes since commit e9ca1405b732720ff72d379e0262a78bfd2e7d53:

  busybox: Set PATH in syslog initscript (2023-10-19 04:34:38 -1000)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/mickledore-nut

Peter Marko (1):
  openssl: Upgrade 3.1.3 -> 3.1.4

Xiangyu Chen (4):
  grub2: fix CVE-2023-4692
  grub2: fix CVE-2023-4693
  shadow: Fix CVE-2023-4641
  linux-yocto: make sure the pahole-native available before
    do_kernel_configme

 .../grub/files/CVE-2023-4692.patch            |  98 ++++++++++++
 .../grub/files/CVE-2023-4693.patch            |  63 ++++++++
 meta/recipes-bsp/grub/grub2.inc               |   2 +
 .../{openssl_3.1.3.bb => openssl_3.1.4.bb}    |   2 +-
 .../shadow/files/CVE-2023-4641.patch          | 147 ++++++++++++++++++
 meta/recipes-extended/shadow/shadow.inc       |   1 +
 meta/recipes-kernel/linux/linux-yocto.inc     |   5 +-
 7 files changed, 316 insertions(+), 2 deletions(-)
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2023-4692.patch
 create mode 100644 meta/recipes-bsp/grub/files/CVE-2023-4693.patch
 rename meta/recipes-connectivity/openssl/{openssl_3.1.3.bb => openssl_3.1.4.bb} (99%)
 create mode 100644 meta/recipes-extended/shadow/files/CVE-2023-4641.patch

Comments

Richard Purdie Oct. 31, 2023, 3:55 p.m. UTC | #1 
On Tue, 2023-10-31 at 05:35 -1000, Steve Sakoman wrote:
> Please review this set of patches for mickledore and have comments back by
> end of day Thursday, November 2
> 
> Passed a-full on autobuilder:
> 
> https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6123
> 
> The following changes since commit e9ca1405b732720ff72d379e0262a78bfd2e7d53:
> 
>   busybox: Set PATH in syslog initscript (2023-10-19 04:34:38 -1000)
> 
> are available in the Git repository at:
> 
>   https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut
>   https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/mickledore-nut
> 
> Peter Marko (1):
>   openssl: Upgrade 3.1.3 -> 3.1.4
> 
> Xiangyu Chen (4):
>   grub2: fix CVE-2023-4692
>   grub2: fix CVE-2023-4693
>   shadow: Fix CVE-2023-4641
>   linux-yocto: make sure the pahole-native available before
>     do_kernel_configme
> 

Some of these are not in nanbield :/

Cheers,

Richard
Steve Sakoman Oct. 31, 2023, 4:15 p.m. UTC | #2 
On Tue, Oct 31, 2023 at 5:55 AM Richard Purdie
<richard.purdie@linuxfoundation.org> wrote:
>
> On Tue, 2023-10-31 at 05:35 -1000, Steve Sakoman wrote:
> > Please review this set of patches for mickledore and have comments back by
> > end of day Thursday, November 2
> >
> > Passed a-full on autobuilder:
> >
> > https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6123
> >
> > The following changes since commit e9ca1405b732720ff72d379e0262a78bfd2e7d53:
> >
> >   busybox: Set PATH in syslog initscript (2023-10-19 04:34:38 -1000)
> >
> > are available in the Git repository at:
> >
> >   https://git.openembedded.org/openembedded-core-contrib stable/mickledore-nut
> >   https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/mickledore-nut
> >
> > Peter Marko (1):
> >   openssl: Upgrade 3.1.3 -> 3.1.4
> >
> > Xiangyu Chen (4):
> >   grub2: fix CVE-2023-4692
> >   grub2: fix CVE-2023-4693
> >   shadow: Fix CVE-2023-4641
> >   linux-yocto: make sure the pahole-native available before
> >     do_kernel_configme
> >
>
> Some of these are not in nanbield :/

I guess I better start working on nanbield too then!

Steve