Re: [OE-core][master][kirkstone][PATCH v2] grub2: fix several CVEs

2022-08-16 Thread Yongxin Liu
Any comments? Thanks, Yongxin > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Yongxin Liu > Sent: Friday, August 5, 2022 10:42 > To: richard.pur...@linuxfoundation.org; st...@sakoman.com; op

[OE-core][master][kirkstone][PATCH v2] grub2: fix several CVEs

2022-08-04 Thread Yongxin Liu
-read-operation-.patch video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch Signed-off-by: Yongxin Liu --- V1->V2: Remove CVE-2022-28736 related patches. CVE-2022-28736 related patches conflict with some grub patches in meta-secure-core layers. So remove those patches. Untill we fin

Re: [OE-core][PATCH] grub2: fix several CVEs

2022-07-29 Thread Yongxin Liu
-grub_loader_set_ex.patch Will send V2. Thanks, Yongxin > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Yongxin Liu > Sent: Thursday, July 28, 2022 10:08 > To: richard.pur...@linuxfoundation.org; openembedded- > c...@list

Re: [OE-core][PATCH] grub2: fix several CVEs -- Also applies to kirkstone

2022-07-29 Thread Yongxin Liu
> -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Yongxin Liu > Sent: Friday, July 29, 2022 20:48 > To: MacLeod, Randy ; openembedded- > c...@lists.openembedded.org; st...@sakoman.com > Subject: Re: [OE-co

Re: [OE-core][PATCH] grub2: fix several CVEs -- Also applies to kirkstone

2022-07-29 Thread Yongxin Liu
ed there as well. > ../Randy > > On 2022-07-27 22:08, Yongxin Liu wrote: > > Backport CVE patches from upstream to fix: > >CVE-2021-3695 > >CVE-2021-3696 > >CVE-2021-3697 > >CVE-2022-28733 > >CVE-2022-28734 > >CVE-2022-2873

[OE-core][PATCH] grub2: fix several CVEs

2022-07-27 Thread Yongxin Liu
-Abort-sooner-if-a-read-operation-.patch video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch loader-efi-chainloader-Simplify-the-loader-state.patch commands-boot-Add-API-to-pass-context-to-loader.patch Signed-off-by: Yongxin Liu --- ...g-Drop-greyscale-support-to-fix-heap.patch | 179

Re: [OE-core][PATCH] grub2: fix CVE-2021-3981

2022-01-06 Thread Yongxin Liu
Thanks Richard for your explanation. The upgrade patch is not a must-have. @Mittal, Anuj Could you help to cherry pick the following patch from master to branch hardknott? commit bb554d14142f93c39fd1516a31757006531c348f Author: Yongxin Liu Date: 2021-12-27 14:54 grub2: fix CVE-2021-3981

Re: [OE-core][PATCH] grub2: fix CVE-2021-3981

2022-01-05 Thread Yongxin Liu
off-by: Richard Purdie to branch hardknott also? Or do I need to send those patches again for hardknott? Thanks, Yongxin > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Yongxin Liu > Sent: Monday, December

[OE-core][PATCH] grub2: fix CVE-2021-3981

2021-12-26 Thread Yongxin Liu
Signed-off-by: Yongxin Liu --- ...onfig-Restore-umask-for-the-grub.cfg.patch | 49 +++ meta/recipes-bsp/grub/grub2.inc | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta/recipes-bsp/grub/files/CVE-2021-3981-grub-mkconfig-Restore-umask-for-the

Re: [OE-core][PATCH] meta/recipes-bsp: Add recipe for Slim Bootloader

2021-12-15 Thread Yongxin Liu
> -Original Message- > From: Ross Burton > Sent: Wednesday, December 15, 2021 18:47 > To: Alexander Kanavin > Cc: Liu, Yongxin ; Konrad Weihmann > ; openembedded-core@lists.openembedded.org; > richard.pur...@linuxfoundation.org > Subject: Re: [OE-core][PATCH] meta/recipes-bsp: Add recip

Re: [OE-core][PATCH] meta/recipes-bsp: Add recipe for Slim Bootloader

2021-12-14 Thread Yongxin Liu
der > > On 15.12.21 08:16, Yongxin Liu wrote: > > Slim Bootloader is an open-source boot firmware running on Intel x86 > > architecture. > > > > Currently it supports qemu, apl(Apollo Lake), cfl(Coffee Lake), > > cml(Comet Lake), tgl(Tiger Lake), and ehl(Elkhar

[OE-core][PATCH] meta/recipes-bsp: Add recipe for Slim Bootloader

2021-12-14 Thread Yongxin Liu
ctly to flash, please refer to https://slimbootloader.github.io/index.html for more instructions. Signed-off-by: Yongxin Liu --- ...d-private-key-check-for-PKCS8-format.patch | 28 .../build-EDK2-BaseTools-with-bitbake.patch | 70 +++ ...limbootloader-BaseTools-with-bitbak

Re: [OE-core][PATCH] mesa: Allow building the iris driver

2021-02-23 Thread Yongxin Liu
gt; [Please note: This e-mail is from an EXTERNAL e-mail address] > > Hi, > > 2021. 02. 24. 1:31 keltezéssel, Yongxin Liu írta: > > > > Iris driver supports Broadwell and newer (Gen8+) for very low CPU > overhead. > > > > With this patch, user can add PACKA

Re: [OE-core][PATCH] mesa: Allow building the iris driver

2021-02-23 Thread Yongxin Liu
0.3.2-r0/build/meson-logs/meson-log.txt for this. The driver can be found in build directory: mesa/2_20.3.2-r0/image/usr/lib64/dri/iris_dri.so Thanks, Yongxin > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of

[OE-core][PATCH] mesa: Allow building the iris driver

2021-02-18 Thread Yongxin Liu
Signed-off-by: Yongxin Liu --- meta/recipes-graphics/mesa/mesa.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-graphics/mesa/mesa.inc b/meta/recipes-graphics/mesa/mesa.inc index cb075a8b89..72e22d654e 100644 --- a/meta/recipes-graphics/mesa/mesa.inc +++ b/meta/recipes

[OE-core][PATCH] linux-firmware: move ibt-misc to the end of ibt packages

2020-07-10 Thread Yongxin Liu
After commit 3ca1d3fa1d ("linux-firmware: fix the wrong file path for ibt-misc"), if we don't change the location of ibt-misc in PACKAGES, ibt-misc will include all ibt files and make other individual ibt package empty. Signed-off-by: Yongxin Liu --- meta/recipes-kernel/linux

[OE-core][PATCH] linux-firmware: fix the wrong file path for ibt-misc

2020-07-07 Thread Yongxin Liu
Signed-off-by: Yongxin Liu --- meta/recipes-kernel/linux-firmware/linux-firmware_20200619.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20200619.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20200619.bb index

[OE-core][PATCH] linux-firmware: add ice for Intel E800 series driver

2020-06-17 Thread Yongxin Liu
Signed-off-by: Yongxin Liu --- meta/recipes-kernel/linux-firmware/linux-firmware_20200519.bb | 9 + 1 file changed, 9 insertions(+) diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20200519.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20200519.bb index

[OE-core] [PATCH] ltp: Add "udevadm trigger" before swap verification in mkswap01.sh

2019-11-12 Thread Yongxin Liu
Swap verification sometimes fails due to race condition with udev. This is a known issue: https://github.com/linux-test-project/ltp/issues/458. "udevadm trigger" forces udev to sync up device events with kernel. Signed-off-by: Yongxin Liu --- ...-Add-udevadm-trigger-before-swap-veri

[OE-core] [PATCH] systemd: Fix invalid argument of pstore log entry

2019-11-07 Thread Yongxin Liu
Fix "systemd-pstore: Failed to log pstore entry: Invalid argument" by backporting 1b3156edd291e0882d80a695d035dd30521345d1 from upstream. Signed-off-by: Yongxin Liu --- .../systemd/0001-pstore-fix-use-after-free.patch | 39 ++ meta/recipes-core/systemd/syst

[OE-core] [PATCH] init-install-efi.sh: don't assume the fixed location of efi loader

2019-03-27 Thread Yongxin Liu
Currently, it is true that efi loader is in the same device as the rootfs image. But the script doesn't work when efi loader and rootfs image are in different live devices. This change makes the script work in this situation. Signed-off-by: Yongxin Liu --- .../initrdscripts/files/init-in

[OE-core] [PATCH] wic/bootimg-efi.py: add new source parameter "initrd_rename"

2019-03-27 Thread Yongxin Liu
When using initrd in bootloader configuration file, we may want the name of initrd to be fixed. However, the actual name of initrd may change and depend on distro/machine's name. "initrd_rename" gives user a chance to rename initrd in final wic image. Signed-off-by: Yongxin Liu -

[OE-core] [PATCH] sstate: add intel-microcode to SSTATE_DUPWHITELIST

2018-08-22 Thread Yongxin Liu
intel-microcode multilib recipes can generate identical overlapping files: microcode.cpio. Signed-off-by: Yongxin Liu --- meta/classes/sstate.bbclass | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/classes/sstate.bbclass b/meta/classes/sstate.bbclass index c0e54a398d

[OE-core] [PATCH] kdump: start kdump.service after basic.target

2018-07-30 Thread Yongxin Liu
ff-by: Yongxin Liu --- meta/recipes-kernel/kexec/kexec-tools/kdump.service | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-kernel/kexec/kexec-tools/kdump.service b/meta/recipes-kernel/kexec/kexec-tools/kdump.service index 4e65a46ac4..013c5a62b3 100644 --- a/meta/recipes-kernel/