diff options
| author |   Yongxin Liu <yongxin.liu@windriver.com> | 2020-10-28 11:18:06 +0800 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-10-30 12:37:53 +0000 |
| commit | 67329184985a03534f11f95e9df5f9fb2305a261 (patch) | |
| tree | f992565d2ab30ecb01e83ff054e0151227d8e981 /meta/recipes-bsp/grub/grub2.inc | |
| parent | d3114ca369792201a5316c1ede29eb72f0868d35 (diff) | |
| download | openembedded-core-contrib-67329184985a03534f11f95e9df5f9fb2305a261.tar.gz | |
grub: fix several CVEs in grub 2.04
Backport patches from https://git.savannah.gnu.org/git/grub.git
to fix some CVEs. Here is the list.
CVE-2020-14308:
0001-calloc-Make-sure-we-always-have-an-overflow-checking.patch
0002-lvm-Add-LVM-cache-logical-volume-handling.patch
0003-calloc-Use-calloc-at-most-places.patch
CVE-2020-14309, CVE-2020-14310, CVE-2020-14311:
0004-safemath-Add-some-arithmetic-primitives-that-check-f.patch
0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
CVE-2020-15706:
0006-script-Remove-unused-fields-from-grub_script_functio.patch
0007-script-Avoid-a-use-after-free-when-redefining-a-func.patch
CVE-2020-15707:
0008-linux-Fix-integer-overflows-in-initrd-size-handling.patch
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-bsp/grub/grub2.inc')
| -rw-r--r-- | meta/recipes-bsp/grub/grub2.inc | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc index 345554e7af..7c53193ebd 100644 --- a/meta/recipes-bsp/grub/grub2.inc +++ b/meta/recipes-bsp/grub/grub2.inc @@ -19,6 +19,14 @@ SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \ file://grub-module-explicitly-keeps-symbole-.module_license.patch \ file://0001-grub.d-10_linux.in-add-oe-s-kernel-name.patch \ file://CVE-2020-10713.patch \ + file://0001-calloc-Make-sure-we-always-have-an-overflow-checking.patch \ + file://0002-lvm-Add-LVM-cache-logical-volume-handling.patch \ + file://0003-calloc-Use-calloc-at-most-places.patch \ + file://0004-safemath-Add-some-arithmetic-primitives-that-check-f.patch \ + file://0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch \ + file://0006-script-Remove-unused-fields-from-grub_script_functio.patch \ + file://0007-script-Avoid-a-use-after-free-when-redefining-a-func.patch \ + file://0008-linux-Fix-integer-overflows-in-initrd-size-handling.patch \ " SRC_URI[md5sum] = "5ce674ca6b2612d8939b9e6abed32934" SRC_URI[sha256sum] = "f10c85ae3e204dbaec39ae22fa3c5e99f0665417e91c2cb49b7e5031658ba6ea" |