summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch10
-rw-r--r--meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch46
-rw-r--r--meta/recipes-extended/sysstat/sysstat_12.7.4.bb (renamed from meta/recipes-extended/sysstat/sysstat_12.6.2.bb)11
3 files changed, 10 insertions, 57 deletions
diff --git a/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch b/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch
index 4067bb983b..84383f955f 100644
--- a/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch
+++ b/meta/recipes-extended/sysstat/sysstat/0001-configure.in-remove-check-for-chkconfig.patch
@@ -1,7 +1,7 @@
1From 1590cc614aaf0fb81cd804414d6c9d5a9227352c Mon Sep 17 00:00:00 2001 1From 1590cc614aaf0fb81cd804414d6c9d5a9227352c Mon Sep 17 00:00:00 2001
2From: Wenlin Kang <wenlin.kang@windriver.com> 2From: Wenlin Kang <wenlin.kang@windriver.com>
3Date: Tue, 5 Nov 2019 16:16:44 +0800 3Date: Tue, 5 Nov 2019 16:16:44 +0800
4Subject: [PATCH] configure.in: remove check for chkconfig 4Subject: [PATCH] configure.ac: remove check for chkconfig
5 5
6chkconfig can't work on cross-platform, so should remove check for it. 6chkconfig can't work on cross-platform, so should remove check for it.
7 7
@@ -9,13 +9,13 @@ Upstream-Status: Inappropriate [ embedded specific ]
9 9
10Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> 10Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
11--- 11---
12 configure.in | 3 ++- 12 configure.ac | 3 ++-
13 1 file changed, 2 insertions(+), 1 deletion(-) 13 1 file changed, 2 insertions(+), 1 deletion(-)
14 14
15diff --git a/configure.in b/configure.in 15diff --git a/configure.ac b/configure.ac
16index 48b9a31..cedeb43 100644 16index 48b9a31..cedeb43 100644
17--- a/configure.in 17--- a/configure.ac
18+++ b/configure.in 18+++ b/configure.ac
19@@ -42,7 +42,8 @@ AC_SUBST(VER_JSON) 19@@ -42,7 +42,8 @@ AC_SUBST(VER_JSON)
20 AC_SUBST(VER_XML) 20 AC_SUBST(VER_XML)
21 21
diff --git a/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch b/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch
deleted file mode 100644
index a7b51f3217..0000000000
--- a/meta/recipes-extended/sysstat/sysstat/CVE-2023-33204.patch
+++ /dev/null
@@ -1,46 +0,0 @@
1From 0764cb56df4a5afdf04980c9eb6735f789f5aa42 Mon Sep 17 00:00:00 2001
2From: Pavel Kopylov <pkopylov@cloudlinux.com>
3Date: Wed, 17 May 2023 11:33:45 +0200
4Subject: [PATCH] Fix an overflow which is still possible for some values.
5
6CVE: CVE-2023-33204
7Upstream-Status: Backport [https://github.com/sysstat/sysstat/commit/954ff2e2673c]
8
9Backport Changes:
10Adopt additional changes as per following merge commit of pull request:
11https://github.com/sysstat/sysstat/commit/6f8dc568e6ab
12
13Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
14Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
15---
16 common.c | 14 ++++++++------
17 1 file changed, 8 insertions(+), 6 deletions(-)
18
19diff --git a/common.c b/common.c
20index a3d31a5..138920c 100644
21--- a/common.c
22+++ b/common.c
23@@ -447,15 +447,17 @@ int check_dir(char *dirname)
24 void check_overflow(unsigned int val1, unsigned int val2,
25 unsigned int val3)
26 {
27- if ((unsigned long long) val1 * (unsigned long long) val2 *
28- (unsigned long long) val3 > UINT_MAX) {
29+ if ((val1 != 0) && (val2 != 0) && (val3 != 0) &&
30+ (((unsigned long long)UINT_MAX / (unsigned long long)val1 <
31+ (unsigned long long)val2) ||
32+ ((unsigned long long)UINT_MAX / ((unsigned long long)val1 *
33+ (unsigned long long)val2) < (unsigned long long)val3))) {
34 #ifdef DEBUG
35- fprintf(stderr, "%s: Overflow detected (%llu). Aborting...\n",
36- __FUNCTION__, (unsigned long long) val1 * (unsigned long long) val2 *
37- (unsigned long long) val3);
38+ fprintf(stderr, "%s: Overflow detected (%u,%u,%u). Aborting...\n",
39+ __FUNCTION__, val1, val2, val3);
40 #endif
41 exit(4);
42- }
43+ }
44 }
45
46 #ifndef SOURCE_SADC
diff --git a/meta/recipes-extended/sysstat/sysstat_12.6.2.bb b/meta/recipes-extended/sysstat/sysstat_12.7.4.bb
index 335ddd5746..134fd5cf96 100644
--- a/meta/recipes-extended/sysstat/sysstat_12.6.2.bb
+++ b/meta/recipes-extended/sysstat/sysstat_12.7.4.bb
@@ -1,25 +1,24 @@
1SUMMARY = "System performance tools" 1SUMMARY = "System performance tools"
2DESCRIPTION = "The sysstat utilities are a collection of performance monitoring tools for Linux." 2DESCRIPTION = "The sysstat utilities are a collection of performance monitoring tools for Linux."
3HOMEPAGE = "http://sebastien.godard.pagesperso-orange.fr/" 3HOMEPAGE = "https://sysstat.github.io/"
4LICENSE = "GPL-2.0-or-later" 4LICENSE = "GPL-2.0-or-later"
5SECTION = "console/utils" 5SECTION = "console/utils"
6 6
7SRC_URI = "http://pagesperso-orange.fr/sebastien.godard/${BP}.tar.xz \ 7SRC_URI = "git://github.com/sysstat/sysstat.git;protocol=https;branch=master \
8 file://99_sysstat \ 8 file://99_sysstat \
9 file://sysstat.service \ 9 file://sysstat.service \
10 file://0001-configure.in-remove-check-for-chkconfig.patch \ 10 file://0001-configure.in-remove-check-for-chkconfig.patch \
11 file://CVE-2023-33204.patch \
12 " 11 "
13 12
14LIC_FILES_CHKSUM = "file://COPYING;md5=a23a74b3f4caf9616230789d94217acb" 13LIC_FILES_CHKSUM = "file://COPYING;md5=a23a74b3f4caf9616230789d94217acb"
15 14
16SRC_URI[sha256sum] = "3e77134aedaa6fc57d9745da67edfd8990e19adee71ac47196229261c563fb48" 15SRCREV = "1df0d61306ae826c896a5cf6f665d58c671c0498"
17UPSTREAM_CHECK_URI = "http://sebastien.godard.pagesperso-orange.fr/download.html" 16S = "${WORKDIR}/git"
18 17
19DEPENDS += "base-passwd" 18DEPENDS += "base-passwd"
20 19
21# autotools-brokensep as this package doesn't use automake 20# autotools-brokensep as this package doesn't use automake
22inherit autotools-brokensep gettext systemd upstream-version-is-even 21inherit autotools-brokensep gettext systemd
23 22
24PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" 23PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}"
25PACKAGECONFIG[lm-sensors] = "--enable-sensors,--disable-sensors,lmsensors,lmsensors-libsensors" 24PACKAGECONFIG[lm-sensors] = "--enable-sensors,--disable-sensors,lmsensors,lmsensors-libsensors"