Commit Graph

9 Commits

Author SHA1 Message Date
Trevor Gamblin
efea2749d2 binutils: fix CVE-2019-17451
Backport upstream fix. No upstream release version of
binutils it yet, so backport the fix independently.

(From OE-Core rev: 3693a0a8b9461521b95613a76b7fd79c86a3bf8f)

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-31 16:09:34 +00:00
Trevor Gamblin
ab808af9fd binutils: fix CVE-2019-17450
Backport upstream fix. No upstream release version of
binutils it yet, so backport the fix independently.

(From OE-Core rev: a4ead72b958ded4941f96741029f4955930ba758)

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-31 16:09:34 +00:00
Alexander Kanavin
e66afddf41 binutils: drop UPSTREAM_VERSION_UNKNOWN
As there is now a new version of binutils,
upstream version check works again.

(From OE-Core rev: c63c7fb890ab356c747d6948ca9e13e0c3b83dfb)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-02 20:22:25 +01:00
Anuj Mittal
7ef44dbd3b binutils: fix CVE-2019-14250 CVE-2019-14444
(From OE-Core rev: abdc51527988afdcfd2db6dc08ebb6083a341be9)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21 21:52:59 +01:00
Anuj Mittal
6beec1687f binutils: fix CVE-2019-12972 CVE-2019-9071
(From OE-Core rev: 093f0914f261a27d58ecba9c1e9d3b78a35af012)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-11 09:32:50 +01:00
Anuj Mittal
71a546aaf3 binutils: fix CVE-2019-9074 CVE-2019-9075 CVE-2019-9076 CVE-2019-9077
(From OE-Core rev: 0e366eda53f6f440708531ed8cb2ac4941ca428f)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-30 12:05:23 +01:00
Ross Burton
d587e20be5 binutils: set CVE_VERSION
PV is 2.32.0 even though the actual release upstream is 2.32.  To a human this
is insignificant, but to automated tooling it matters.  Specifically,
cve-check-tool can't identify CVEs that are in 2.32.

Set CVE_VERSION for now, which should be removed when PV and the upstream
version match again.

(From OE-Core rev: 487c8356c22deb29867baf3da74f6d86502d5b3b)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01 14:48:44 +01:00
Alexander Kanavin
40fe254a3e binutils: fix upstream version check
(From OE-Core rev: 326b6a22c85e7b932c7196fca5350a55e21f46f5)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29 08:28:53 +00:00
Khem Raj
db9bca2b3b binutils: Upgrade to binutils 2.32
Changes
https://sourceware.org/ml/binutils/2019-02/msg00010.html

0007-Add-the-armv5e-architecture-to-binutils.patch is dropped since we
armv5 is not a used option anymore in OE armv5te is default, and gcc9
will drop it completely anyway

CVE patches were backports from master which is already past of 2.32
release

Other dropped patches were partial or full backports as well

(From OE-Core rev: b71294c4decf35d544a2c8adb4e67d141841fc68)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-02-05 13:53:48 +00:00