diff options
-rw-r--r-- | meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch | 10 | ||||
-rw-r--r-- | meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch | 46 | ||||
-rw-r--r-- | meta/recipes-extended/sysstat/sysstat_12.7.4.bb (renamed from meta/recipes-extended/sysstat/sysstat_12.6.2.bb) | 11 |
3 files changed, 10 insertions, 57 deletions
diff --git a/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch b/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch index 4067bb983b..84383f955f 100644 --- a/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch +++ b/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch | |||
@@ -1,7 +1,7 @@ | |||
1 | From 1590cc614aaf0fb81cd804414d6c9d5a9227352c Mon Sep 17 00:00:00 2001 | 1 | From 1590cc614aaf0fb81cd804414d6c9d5a9227352c Mon Sep 17 00:00:00 2001 |
2 | From: Wenlin Kang <wenlin.kang@windriver.com> | 2 | From: Wenlin Kang <wenlin.kang@windriver.com> |
3 | Date: Tue, 5 Nov 2019 16:16:44 +0800 | 3 | Date: Tue, 5 Nov 2019 16:16:44 +0800 |
4 | Subject: [PATCH] configure.in: remove check for chkconfig | 4 | Subject: [PATCH] configure.ac: remove check for chkconfig |
5 | 5 | ||
6 | chkconfig can't work on cross-platform, so should remove check for it. | 6 | chkconfig can't work on cross-platform, so should remove check for it. |
7 | 7 | ||
@@ -9,13 +9,13 @@ Upstream-Status: Inappropriate [ embedded specific ] | |||
9 | 9 | ||
10 | Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> | 10 | Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> |
11 | --- | 11 | --- |
12 | configure.in | 3 ++- | 12 | configure.ac | 3 ++- |
13 | 1 file changed, 2 insertions(+), 1 deletion(-) | 13 | 1 file changed, 2 insertions(+), 1 deletion(-) |
14 | 14 | ||
15 | diff --git a/configure.in b/configure.in | 15 | diff --git a/configure.ac b/configure.ac |
16 | index 48b9a31..cedeb43 100644 | 16 | index 48b9a31..cedeb43 100644 |
17 | --- a/configure.in | 17 | --- a/configure.ac |
18 | +++ b/configure.in | 18 | +++ b/configure.ac |
19 | @@ -42,7 +42,8 @@ AC_SUBST(VER_JSON) | 19 | @@ -42,7 +42,8 @@ AC_SUBST(VER_JSON) |
20 | AC_SUBST(VER_XML) | 20 | AC_SUBST(VER_XML) |
21 | 21 | ||
diff --git a/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch b/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch deleted file mode 100644 index a7b51f3217..0000000000 --- a/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch +++ /dev/null | |||
@@ -1,46 +0,0 @@ | |||
1 | From 0764cb56df4a5afdf04980c9eb6735f789f5aa42 Mon Sep 17 00:00:00 2001 | ||
2 | From: Pavel Kopylov <pkopylov@cloudlinux.com> | ||
3 | Date: Wed, 17 May 2023 11:33:45 +0200 | ||
4 | Subject: [PATCH] Fix an overflow which is still possible for some values. | ||
5 | |||
6 | CVE: CVE-2023-33204 | ||
7 | Upstream-Status: Backport [https://github.com/sysstat/sysstat/commit/954ff2e2673c] | ||
8 | |||
9 | Backport Changes: | ||
10 | Adopt additional changes as per following merge commit of pull request: | ||
11 | https://github.com/sysstat/sysstat/commit/6f8dc568e6ab | ||
12 | |||
13 | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> | ||
14 | Signed-off-by: Sanjay Chitroda <schitrod@cisco.com> | ||
15 | --- | ||
16 | common.c | 14 ++++++++------ | ||
17 | 1 file changed, 8 insertions(+), 6 deletions(-) | ||
18 | |||
19 | diff --git a/common.c b/common.c | ||
20 | index a3d31a5..138920c 100644 | ||
21 | --- a/common.c | ||
22 | +++ b/common.c | ||
23 | @@ -447,15 +447,17 @@ int check_dir(char *dirname) | ||
24 | void check_overflow(unsigned int val1, unsigned int val2, | ||
25 | unsigned int val3) | ||
26 | { | ||
27 | - if ((unsigned long long) val1 * (unsigned long long) val2 * | ||
28 | - (unsigned long long) val3 > UINT_MAX) { | ||
29 | + if ((val1 != 0) && (val2 != 0) && (val3 != 0) && | ||
30 | + (((unsigned long long)UINT_MAX / (unsigned long long)val1 < | ||
31 | + (unsigned long long)val2) || | ||
32 | + ((unsigned long long)UINT_MAX / ((unsigned long long)val1 * | ||
33 | + (unsigned long long)val2) < (unsigned long long)val3))) { | ||
34 | #ifdef DEBUG | ||
35 | - fprintf(stderr, "%s: Overflow detected (%llu). Aborting...\n", | ||
36 | - __FUNCTION__, (unsigned long long) val1 * (unsigned long long) val2 * | ||
37 | - (unsigned long long) val3); | ||
38 | + fprintf(stderr, "%s: Overflow detected (%u,%u,%u). Aborting...\n", | ||
39 | + __FUNCTION__, val1, val2, val3); | ||
40 | #endif | ||
41 | exit(4); | ||
42 | - } | ||
43 | + } | ||
44 | } | ||
45 | |||
46 | #ifndef SOURCE_SADC | ||
diff --git a/meta/recipes-extended/sysstat/sysstat_12.6.2.bb b/meta/recipes-extended/sysstat/sysstat_12.7.4.bb index 335ddd5746..134fd5cf96 100644 --- a/meta/recipes-extended/sysstat/sysstat_12.6.2.bb +++ b/meta/recipes-extended/sysstat/sysstat_12.7.4.bb | |||
@@ -1,25 +1,24 @@ | |||
1 | SUMMARY = "System performance tools" | 1 | SUMMARY = "System performance tools" |
2 | DESCRIPTION = "The sysstat utilities are a collection of performance monitoring tools for Linux." | 2 | DESCRIPTION = "The sysstat utilities are a collection of performance monitoring tools for Linux." |
3 | HOMEPAGE = "http://sebastien.godard.pagesperso-orange.fr/" | 3 | HOMEPAGE = "https://sysstat.github.io/" |
4 | LICENSE = "GPL-2.0-or-later" | 4 | LICENSE = "GPL-2.0-or-later" |
5 | SECTION = "console/utils" | 5 | SECTION = "console/utils" |
6 | 6 | ||
7 | SRC_URI = "http://pagesperso-orange.fr/sebastien.godard/${BP}.tar.xz \ | 7 | SRC_URI = "git://github.com/sysstat/sysstat.git;protocol=https;branch=master \ |
8 | file://99_sysstat \ | 8 | file://99_sysstat \ |
9 | file://sysstat.service \ | 9 | file://sysstat.service \ |
10 | file://0001-configure.in-remove-check-for-chkconfig.patch \ | 10 | file://0001-configure.in-remove-check-for-chkconfig.patch \ |
11 | file://CVE-2023-33204.patch \ | ||
12 | " | 11 | " |
13 | 12 | ||
14 | LIC_FILES_CHKSUM = "file://COPYING;md5=a23a74b3f4caf9616230789d94217acb" | 13 | LIC_FILES_CHKSUM = "file://COPYING;md5=a23a74b3f4caf9616230789d94217acb" |
15 | 14 | ||
16 | SRC_URI[sha256sum] = "3e77134aedaa6fc57d9745da67edfd8990e19adee71ac47196229261c563fb48" | 15 | SRCREV = "1df0d61306ae826c896a5cf6f665d58c671c0498" |
17 | UPSTREAM_CHECK_URI = "http://sebastien.godard.pagesperso-orange.fr/download.html" | 16 | S = "${WORKDIR}/git" |
18 | 17 | ||
19 | DEPENDS += "base-passwd" | 18 | DEPENDS += "base-passwd" |
20 | 19 | ||
21 | # autotools-brokensep as this package doesn't use automake | 20 | # autotools-brokensep as this package doesn't use automake |
22 | inherit autotools-brokensep gettext systemd upstream-version-is-even | 21 | inherit autotools-brokensep gettext systemd |
23 | 22 | ||
24 | PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" | 23 | PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" |
25 | PACKAGECONFIG[lm-sensors] = "--enable-sensors,--disable-sensors,lmsensors,lmsensors-libsensors" | 24 | PACKAGECONFIG[lm-sensors] = "--enable-sensors,--disable-sensors,lmsensors,lmsensors-libsensors" |