On Sun, 2021-02-21 at 16:22 -0300, Klaus Heinrich Kiwi wrote: > Das U-Boot 2021.4-rc1 has the following commit: > > commit 3f04db891a353f4b127ed57279279f851c6b4917 > Author: Simon Glass <[email protected]> > Date: Mon Feb 15 17:08:12 2021 -0700 > > image: Check for unit addresses in FITs > > Using unit addresses in a FIT is a security risk. Add a check for > this and disallow it. > > CVE-2021-27138 > > Adjust the kernel-fitimage.bbclass accordingly to not use unit > addresses. This changte is required before we can bump U-Boot to 2021.4. > > Signed-off-by: Klaus Heinrich Kiwi <[email protected]> > --- > meta/classes/kernel-fitimage.bbclass | 40 ++++++++++++++-------------- > 1 file changed, 20 insertions(+), 20 deletions(-)
This caused some tests to fail: https://autobuilder.yoctoproject.org/typhoon/#/builders/79/builds/1855/steps/15/logs/stdio Do we need to update the tests as well? Cheers, Richard
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#148429): https://lists.openembedded.org/g/openembedded-core/message/148429 Mute This Topic: https://lists.openembedded.org/mt/80807575/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
