u-boot: move CVE patches out of the common .inc file

An external layer might use the u-boot*.inc files but have a different
base version for which the CVE patches don't apply.

Move the CVE patches in the leaf recipe.

See related patch in kirkstone:
[kirkstone][PATCH] u-boot: move CVE patch out of u-boot-common.inc
https://lists.openembedded.org/g/openembedded-core/topic/117385432

(From OE-Core rev: f4ced8ff03147dd532a88cf3ce08d61fab057522)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Yoann Congal
2026-02-24 10:29:19 +01:00
committed by Richard Purdie
parent ce6c389607
commit ef014bdb96
2 changed files with 11 additions and 11 deletions

View File

@@ -14,17 +14,7 @@ PE = "1"
# repo during parse
SRCREV = "866ca972d6c3cabeaf6dbac431e8e08bb30b3c8e"
SRC_URI = "git://source.denx.de/u-boot/u-boot.git;protocol=https;branch=master \
file://CVE-2024-57254.patch \
file://CVE-2024-57255.patch \
file://CVE-2024-57256.patch \
file://CVE-2024-57257.patch \
file://CVE-2024-57258-1.patch \
file://CVE-2024-57258-2.patch \
file://CVE-2024-57258-3.patch \
file://CVE-2024-57259.patch \
file://CVE-2024-42040.patch \
"
SRC_URI = "git://source.denx.de/u-boot/u-boot.git;protocol=https;branch=master"
S = "${WORKDIR}/git"
B = "${WORKDIR}/build"

View File

@@ -3,3 +3,13 @@ require u-boot.inc
DEPENDS += "bc-native dtc-native python3-pyelftools-native"
SRC_URI += "file://CVE-2024-57254.patch \
file://CVE-2024-57255.patch \
file://CVE-2024-57256.patch \
file://CVE-2024-57257.patch \
file://CVE-2024-57258-1.patch \
file://CVE-2024-57258-2.patch \
file://CVE-2024-57258-3.patch \
file://CVE-2024-57259.patch \
file://CVE-2024-42040.patch \
"