summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--meta-oe/recipes-connectivity/zabbix/zabbix/0001-Fix-configure.ac.patch2
-rw-r--r--meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch36
-rw-r--r--meta-oe/recipes-connectivity/zabbix/zabbix_5.2.5.bb (renamed from meta-oe/recipes-connectivity/zabbix/zabbix_4.4.6.bb)10
3 files changed, 7 insertions, 41 deletions
diff --git a/meta-oe/recipes-connectivity/zabbix/zabbix/0001-Fix-configure.ac.patch b/meta-oe/recipes-connectivity/zabbix/zabbix/0001-Fix-configure.ac.patch
index af14a1a56c..97339d3ff9 100644
--- a/meta-oe/recipes-connectivity/zabbix/zabbix/0001-Fix-configure.ac.patch
+++ b/meta-oe/recipes-connectivity/zabbix/zabbix/0001-Fix-configure.ac.patch
@@ -1,5 +1,7 @@
1uname can not get version of kernel correctly while cross compile 1uname can not get version of kernel correctly while cross compile
2 2
3Upstream-Status: Inappropriate [configuration]
4
3Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> 5Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
4--- 6---
5 configure.ac | 2 +- 7 configure.ac | 2 +-
diff --git a/meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch b/meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch
deleted file mode 100644
index 2eec4bf327..0000000000
--- a/meta-oe/recipes-connectivity/zabbix/zabbix/CVE-2020-15803.patch
+++ /dev/null
@@ -1,36 +0,0 @@
1From 4943334fd9bf7dffd49f9e86251ad40b3efe2135 Mon Sep 17 00:00:00 2001
2From: Wang Mingyu <wangmy@cn.fujitsu.com>
3Date: Fri, 11 Dec 2020 17:02:20 +0900
4Subject: [PATCH] Fix bug for CVE-2020-15803
5
6Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
7---
8 frontends/php/include/classes/html/CIFrame.php | 7 +++++++
9 1 file changed, 7 insertions(+)
10
11diff --git a/frontends/php/include/classes/html/CIFrame.php b/frontends/php/include/classes/html/CIFrame.php
12index 32220cd..70f2ab5 100644
13--- a/frontends/php/include/classes/html/CIFrame.php
14+++ b/frontends/php/include/classes/html/CIFrame.php
15@@ -29,6 +29,7 @@ class CIFrame extends CTag {
16 $this->setHeight($height);
17 $this->setScrolling($scrolling);
18 $this->setId($id);
19+ $this->setSandbox();
20 }
21
22 public function setSrc($value = null) {
23@@ -69,4 +70,10 @@ class CIFrame extends CTag {
24 $this->setAttribute('scrolling', $value);
25 return $this;
26 }
27+
28+ private function setSandbox() {
29+ if (ZBX_IFRAME_SANDBOX !== false) {
30+ $this->setAttribute('sandbox', ZBX_IFRAME_SANDBOX);
31+ }
32+ }
33 }
34--
352.25.1
36
diff --git a/meta-oe/recipes-connectivity/zabbix/zabbix_4.4.6.bb b/meta-oe/recipes-connectivity/zabbix/zabbix_5.2.5.bb
index 98a31879c4..2bbfec9dcf 100644
--- a/meta-oe/recipes-connectivity/zabbix/zabbix_4.4.6.bb
+++ b/meta-oe/recipes-connectivity/zabbix/zabbix_5.2.5.bb
@@ -23,14 +23,13 @@ DEPENDS = "libevent libpcre openldap virtual/libiconv zlib"
23 23
24PACKAGE_ARCH = "${MACHINE_ARCH}" 24PACKAGE_ARCH = "${MACHINE_ARCH}"
25 25
26SRC_URI = "http://jaist.dl.sourceforge.net/project/zabbix/ZABBIX%20Latest%20Stable/${PV}/${BPN}-${PV}.tar.gz \ 26SRC_URI = "https://cdn.zabbix.com/zabbix/sources/stable/5.2/${BPN}-${PV}.tar.gz \
27 file://0001-Fix-configure.ac.patch \ 27 file://0001-Fix-configure.ac.patch \
28 file://zabbix-agent.service \ 28 file://zabbix-agent.service \
29 file://CVE-2020-15803.patch \
30" 29"
31 30
32SRC_URI[md5sum] = "e666539220be93b1af38e40f5fbb1f79" 31SRC_URI[md5sum] = "e90822716c5c241890f6fed1588b5451"
33SRC_URI[sha256sum] = "22bb28e667424ad4688f47732853f4241df0e78a7607727b043d704ba726ae0e" 32SRC_URI[sha256sum] = "ce0d9745a8b9154e87d6906edd0fce7b7ec298acd34a0543ea53d1a5f2f14bc5"
34 33
35inherit autotools-brokensep linux-kernel-base pkgconfig systemd useradd 34inherit autotools-brokensep linux-kernel-base pkgconfig systemd useradd
36 35
@@ -58,7 +57,8 @@ EXTRA_OECONF = " \
58 --with-zlib \ 57 --with-zlib \
59 --with-libpthread \ 58 --with-libpthread \
60 --with-libevent \ 59 --with-libevent \
61 --with-libpcre \ 60 --with-libpcre=${STAGING_EXECPREFIXDIR} \
61 --with-iconv=${STAGING_EXECPREFIXDIR} \
62" 62"
63CFLAGS_append = " -lldap -llber -pthread" 63CFLAGS_append = " -lldap -llber -pthread"
64 64