Gatesgarth isn't maintained anymore but it was pointed out that it's missing an important fix. I tested it along with a few others and didn't see any issue.
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2536 Thanks, Anuj The following changes since commit d47b7cdc3508343349f3bb3eacb2dc3227dd94d2: build-appliance-image: Update to gatesgarth head revision (2021-05-06 11:20:38 +0100) are available in the Git repository at: git://push.openembedded.org/openembedded-core-contrib anujm/gatesgarth Anatol Belski (1): tar: Fix CVE-2021-20193 Richard Purdie (3): lib/package_manager: Use shutil.copy instead of bb.utils.copyfile for intercepts kernel: Fix interaction when packaging disabled kernel-devicetree: Fix interaction when packaging disabled meta/classes/kernel-devicetree.bbclass | 11 +- meta/classes/kernel.bbclass | 2 + meta/lib/oe/package_manager/__init__.py | 2 +- .../tar/tar/CVE-2021-20193.patch | 133 ++++++++++++++++++ meta/recipes-extended/tar/tar_1.32.bb | 1 + 5 files changed, 144 insertions(+), 5 deletions(-) create mode 100644 meta/recipes-extended/tar/tar/CVE-2021-20193.patch -- 2.31.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#155703): https://lists.openembedded.org/g/openembedded-core/message/155703 Mute This Topic: https://lists.openembedded.org/mt/85405041/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-