From 8d93dec85fa50503999deb1c9e94b34e62e8e00b Mon Sep 17 00:00:00 2001 From: Vijay Anusuri Date: Tue, 21 May 2024 16:33:51 +0530 Subject: [PATCH] binutils: Rename CVE-2022-38126 patch to CVE-2022-35205 CVE-2022-38126 has been marked "REJECT" in the CVE List by NVD. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-38126 As commit changes in 0016-CVE-2022-38126.patch fixes CVE-2022-35205. Hence renamed the patch. Link: https://ubuntu.com/security/CVE-2022-35205 (From OE-Core rev: d91af23e4fef0f1999c18fc3a43085b70e98dfd5) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- meta/recipes-devtools/binutils/binutils-2.38.inc | 2 +- .../{0016-CVE-2022-38126.patch => 0016-CVE-2022-35205.patch} | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) rename meta/recipes-devtools/binutils/binutils/{0016-CVE-2022-38126.patch => 0016-CVE-2022-35205.patch} (94%) diff --git a/meta/recipes-devtools/binutils/binutils-2.38.inc b/meta/recipes-devtools/binutils/binutils-2.38.inc index bbe7bb57b2..4a8831b534 100644 --- a/meta/recipes-devtools/binutils/binutils-2.38.inc +++ b/meta/recipes-devtools/binutils/binutils-2.38.inc @@ -34,7 +34,7 @@ SRC_URI = "\ file://0013-Avoid-as-info-race-condition.patch \ file://0014-CVE-2019-1010204.patch \ file://0015-CVE-2022-38533.patch \ - file://0016-CVE-2022-38126.patch \ + file://0016-CVE-2022-35205.patch \ file://0017-CVE-2022-38127-1.patch \ file://0017-CVE-2022-38127-2.patch \ file://0017-CVE-2022-38127-3.patch \ diff --git a/meta/recipes-devtools/binutils/binutils/0016-CVE-2022-38126.patch b/meta/recipes-devtools/binutils/binutils/0016-CVE-2022-35205.patch similarity index 94% rename from meta/recipes-devtools/binutils/binutils/0016-CVE-2022-38126.patch rename to meta/recipes-devtools/binutils/binutils/0016-CVE-2022-35205.patch index 8200e28a81..a582df4466 100644 --- a/meta/recipes-devtools/binutils/binutils/0016-CVE-2022-38126.patch +++ b/meta/recipes-devtools/binutils/binutils/0016-CVE-2022-35205.patch @@ -9,8 +9,9 @@ Subject: [PATCH] Replace a run-time assertion failure with a warning message message. Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e3e5ae049371a27fd1737aba946fe26d06e029b5] - +CVE: CVE-2022-35205 Signed-off-by: Pgowda +Signed-off-by: Vijay Anusuri --- binutils/dwarf.c | 7 ++++++-