Ross Burton 2eccfb8b45 grub2: fix CVE-2024-56738 ...

Backport an algorithmic change to grub_crypto_memcmp() so that it
completes in constant time and thus isn't susceptible to side-channel
attacks.

(From OE-Core rev: 319210be147ec57518c237cb705857aeda9943e6)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 30a1cc225a2bd5d044bf608d863a67df3f9c03be)
Signed-off-by: Shubham Pushpkar <spushpka@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-09-22 13:17:52 -07:00

..

classes

cve-check: Add missing call to exit_if_errors

2025-08-22 05:59:54 -07:00

classes-global

sanity.bbclass: skip check_userns for non-local uid

2025-01-09 06:25:36 -08:00

classes-recipe

uboot: Allow for customizing installed/deployed file names

2025-07-07 07:42:58 -07:00

conf

default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue

2025-09-09 09:08:09 -07:00

files

meta: Enable '-o pipefail' for the SDK installer

2025-03-05 06:03:47 -08:00

lib

default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue

2025-09-09 09:08:09 -07:00

recipes-bsp

grub2: fix CVE-2024-56738

2025-09-22 13:17:52 -07:00

recipes-connectivity

wpa-supplicant: fix CVE-2022-37660

2025-09-22 13:17:52 -07:00

recipes-core

dbus-glib: fix build with gcc-15

2025-09-01 08:30:56 -07:00

recipes-devtools

rpm: keep leading `/' from sed operation

2025-09-09 09:08:09 -07:00

recipes-extended

libpam: fix CVE-2024-10963

2025-09-09 09:08:09 -07:00

recipes-gnome

gdk-pixbuf: fix CVE-2025-7345

2025-07-21 09:07:21 -07:00

recipes-graphics

cairo: fix build with gcc-15 on host

2025-08-22 05:59:55 -07:00

recipes-kernel

linux-libc-headers: Fix invalid conversion in cn_proc.h

2025-08-04 07:55:07 -07:00

recipes-multimedia

pulseaudio: Add audio group explicitly

2025-09-09 09:08:09 -07:00

recipes-rt

rt-tests: rt_bmark.py: fix TypeError

2024-08-06 19:11:18 -07:00

recipes-sato

puzzles: ignore three new CVEs for a different puzzles

2025-03-15 06:40:07 -07:00

recipes-support

curl: update CVE_STATUS for CVE-2025-5025

2025-09-09 09:08:09 -07:00

site

site: remove at-spi2-core values

2023-09-02 07:45:29 +01:00

COPYING.MIT

…

recipes.txt

…