glib-2.0: Fix CVE-2021-27219

The upstream patches are only in glib >= 2.66.6 and >= 2.67.3 and won't
be backported. This patch is developed based on the upstream patch set
and consulting teh backports recently made by Ubuntu for the 2.64.6
series.

(From OE-Core rev: 513d2a82cc9574983d017a2c0b2de87e181befa5)

Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Anatol Belski
2021-03-15 13:29:42 +00:00
committed by Richard Purdie
parent 9b9bcb8443
commit a633251fc8
2 changed files with 1445 additions and 0 deletions

File diff suppressed because it is too large Load Diff

View File

@@ -18,6 +18,7 @@ SRC_URI = "${GNOME_MIRROR}/glib/${SHRT_VER}/glib-${PV}.tar.xz \
file://0001-gio-tests-resources.c-comment-out-a-build-host-only-.patch \
file://tzdata-update.patch \
file://CVE-2020-35457.patch \
file://CVE-2021-27219.patch \
"
SRC_URI_append_class-native = " file://relocate-modules.patch"