| Message ID | 20220324090901.7061-1-mikko.rapeli@bmw.de |
|---|---|
| Headers | show |
| Series | polkit: switch from mozjs to duktape javascript engine | expand |
v2 of first patch applied the second patch does not apply, Can you send full series rebased on top of master next ? On Thu, Mar 24, 2022 at 2:09 AM Mikko Rapeli <mikko.rapeli@bmw.de> wrote: > > From: Mikko Rapeli <mikko.rapeli@bmw.de> > > polkit 0.121 will contain support for duktape but the patch applies > to 0.119 already so use it to get rid of mozjs and free 20 Mb of space. > Pick some CVE patches from master while at it. > > Mikko Rapeli (2): > polkit: add patches for CVE-2021-4034 and CVE-2021-4115 > polkit: switch from mozjs to duktape javascript engine > > ...l-privilege-escalation-CVE-2021-4034.patch | 82 + > ...0002-CVE-2021-4115-GHSL-2021-077-fix.patch | 86 + > .../0002-jsauthority-port-to-mozjs-91.patch | 38 - > ...ded-support-for-duktape-as-JS-engine.patch | 3460 +++++++++++++++++ > ...re-to-call-JS_Init-and-JS_ShutDown-e.patch | 63 - > .../recipes-extended/polkit/polkit_0.119.bb | 8 +- > 6 files changed, 3633 insertions(+), 104 deletions(-) > create mode 100644 meta-oe/recipes-extended/polkit/polkit/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch > create mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-CVE-2021-4115-GHSL-2021-077-fix.patch > delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-jsauthority-port-to-mozjs-91.patch > create mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-Added-support-for-duktape-as-JS-engine.patch > delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-jsauthority-ensure-to-call-JS_Init-and-JS_ShutDown-e.patch > > -- > 2.20.1 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#96183): https://lists.openembedded.org/g/openembedded-devel/message/96183 > Mute This Topic: https://lists.openembedded.org/mt/89995316/1997914 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- >
From: Mikko Rapeli <mikko.rapeli@bmw.de> polkit 0.121 will contain support for duktape but the patch applies to 0.119 already so use it to get rid of mozjs and free 20 Mb of space. Pick some CVE patches from master while at it. Mikko Rapeli (2): polkit: add patches for CVE-2021-4034 and CVE-2021-4115 polkit: switch from mozjs to duktape javascript engine ...l-privilege-escalation-CVE-2021-4034.patch | 82 + ...0002-CVE-2021-4115-GHSL-2021-077-fix.patch | 86 + .../0002-jsauthority-port-to-mozjs-91.patch | 38 - ...ded-support-for-duktape-as-JS-engine.patch | 3460 +++++++++++++++++ ...re-to-call-JS_Init-and-JS_ShutDown-e.patch | 63 - .../recipes-extended/polkit/polkit_0.119.bb | 8 +- 6 files changed, 3633 insertions(+), 104 deletions(-) create mode 100644 meta-oe/recipes-extended/polkit/polkit/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch create mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-CVE-2021-4115-GHSL-2021-077-fix.patch delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-jsauthority-port-to-mozjs-91.patch create mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-Added-support-for-duktape-as-JS-engine.patch delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-jsauthority-ensure-to-call-JS_Init-and-JS_ShutDown-e.patch