<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Thanks a lot Joshua and sorry for the hassle.<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px"><font face="Tahoma"></font>
<div style="font-size:13px">
<div><font face="Tahoma" size="2"><span lang="en-US">
<div style="margin:0">BR,</div>
<div style="margin:0"><i>Awais</i></div>
</span></font></div>
</div>
<font face="Tahoma"></font></div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF256602"><font face="Tahoma" size="2" color="#000000"><b>From:</b> Joshua Lock [joshuagloe@gmail.com]<br>
<b>Sent:</b> Monday, January 11, 2016 4:14 PM<br>
<b>To:</b> Belal, Awais<br>
<b>Cc:</b> akuster808; openembedded-core@lists.openembedded.org<br>
<b>Subject:</b> Re: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 8 January 2016 at 10:45, Belal, Awais <span dir="ltr">
&lt;<a href="mailto:Awais_Belal@mentor.com" target="_blank">Awais_Belal@mentor.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
Hi Armin,<br>
<br>
Thanks a lot.<br>
<br>
Can you please share the diff? I am just asking because Joshua is seeing the same sort of issue with the fido branch while my local setup does not complain there either.<span class=""><br>
</span></blockquote>
<div><br>
</div>
<div>I've cherry-picked the change from Armin's branch onto my joshuagl/fido-next branch.<br>
<br>
</div>
<div>Thanks,<br>
<br>
</div>
<div>Joshua <br>
</div>
<div><br>
&nbsp;</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<span class="">BR,<br>
Awais<br>
<br>
________________________________________<br>
From: akuster808 [<a href="mailto:akuster808@gmail.com" target="_blank">akuster808@gmail.com</a>]<br>
</span>Sent: Friday, January 08, 2016 7:32 AM<br>
<div class="HOEnZb">
<div class="h5">To: Belal, Awais<br>
Cc: <a href="mailto:openembedded-core@lists.openembedded.org" target="_blank">openembedded-core@lists.openembedded.org</a><br>
Subject: Re: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
<br>
Awais,<br>
<br>
<br>
<br>
hand applied. merged and pushed to<br>
<br>
<a href="http://git.yoctoproject.org/poky-contrib.git" rel="noreferrer" target="_blank">git.yoctoproject.org/poky-contrib.git</a> akuster/dizzy-next<br>
<br>
thanks,<br>
Armin<br>
<br>
On 01/07/2016 01:56 AM, Belal, Awais wrote:<br>
&gt; Hi Armin,<br>
&gt;<br>
&gt; With dizzy-next from your fork<br>
&gt;<br>
&gt; awais@alpha:~/yocto/build-dizzy-akuster$ bitbake -c patch grub<br>
&gt; Parsing recipes: 100% |##############################################################| Time: 00:00:46<br>
&gt; Parsing of 1458 .bb files complete (0 cached, 1458 parsed). 1914 targets, 66 skipped, 0 masked, 0 errors.<br>
&gt; NOTE: Resolving any missing task queue dependencies<br>
&gt;<br>
&gt; Build Configuration:<br>
&gt; BB_VERSION&nbsp; &nbsp; &nbsp; &nbsp; = &quot;1.24.0&quot;<br>
&gt; BUILD_SYS&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= &quot;x86_64-linux&quot;<br>
&gt; NATIVELSBSTRING&nbsp; &nbsp;= &quot;Ubuntu-14.04&quot;<br>
&gt; TARGET_SYS&nbsp; &nbsp; &nbsp; &nbsp; = &quot;x86_64-poky-linux&quot;<br>
&gt; MACHINE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= &quot;amdfalconx86&quot;<br>
&gt; DISTRO&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = &quot;poky&quot;<br>
&gt; DISTRO_VERSION&nbsp; &nbsp; = &quot;1.7.3&quot;<br>
&gt; TUNE_FEATURES&nbsp; &nbsp; &nbsp;= &quot;dbfp4&quot;<br>
&gt; TARGET_FPU&nbsp; &nbsp; &nbsp; &nbsp; = &quot;&quot;<br>
&gt; meta<br>
&gt; meta-yocto<br>
&gt; meta-yocto-bsp&nbsp; &nbsp; = &quot;akuster/dizzy-next:4807ff0ca0abf085e6b81257534a4a62fde88d16&quot;<br>
&gt; common<br>
&gt; meta-amdfalconx86 = &quot;(detachedfromorigin/dizzy):84ae10ad68c7b253ab87558c5a6df057c9a84f08&quot;<br>
&gt; meta-oe<br>
&gt; meta-python&nbsp; &nbsp; &nbsp; &nbsp;= &quot;(detachedfromorigin/dizzy):7f1df52e9409edcc4d4cd5f34694f8740f56e1bf&quot;<br>
&gt;<br>
&gt; NOTE: Preparing runqueue<br>
&gt; NOTE: Executing SetScene Tasks<br>
&gt; NOTE: Executing RunQueue Tasks<br>
&gt; NOTE: Tasks Summary: Attempted 10 tasks of which 0 didn't need to be rerun and all succeeded.<br>
&gt; awais@alpha:~/yocto/build-dizzy-akuster$ ls tmp/work/dbfp4-poky-linux/grub/2.00-r1/<br>
&gt; 0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch<br>
&gt; 0001-parse_dhcp_vendor-Add-missing-const-qualifiers.patch<br>
&gt; check-if-liblzma-is-disabled.patch<br>
&gt; fix-endianness-problem.patch<br>
&gt; fix-issue-with-flex-2.5.37.patch<br>
&gt; grub-2.00<br>
&gt; grub-2.00-add-oe-kernel.patch<br>
&gt; grub-2.00-fpmath-sse-387-fix.patch<br>
&gt; grub2-remove-sparc64-setup-from-x86-builds.patch<br>
&gt; grub-install.in.patch<br>
&gt; remove-gets.patch<br>
&gt; temp<br>
&gt; awais@alpha:~/yocto/build-dizzy-akuster$<br>
&gt;<br>
&gt; Pretty odd what's happening :)<br>
&gt;<br>
&gt; BR,<br>
&gt; Awais<br>
&gt;<br>
&gt; ________________________________________<br>
&gt; From: akuster808 [<a href="mailto:akuster808@gmail.com" target="_blank">akuster808@gmail.com</a>]<br>
&gt; Sent: Wednesday, January 06, 2016 10:15 PM<br>
&gt; To: Belal, Awais<br>
&gt; Cc: <a href="mailto:openembedded-core@lists.openembedded.org" target="_blank">openembedded-core@lists.openembedded.org</a><br>
&gt; Subject: Re: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
&gt;<br>
&gt; Awais,<br>
&gt;<br>
&gt; this is what I am seeing.<br>
&gt;<br>
&gt; NOTE: Executing RunQueue Tasks<br>
&gt; ERROR: Command Error: exit status: 1&nbsp; Output:<br>
&gt; Applying patch 0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch<br>
&gt; patching file grub-core/lib/crypto.c<br>
&gt; Hunk #1 FAILED at 470.<br>
&gt; 1 out of 1 hunk FAILED -- rejects in file grub-core/lib/crypto.c<br>
&gt; patching file grub-core/normal/auth.c<br>
&gt; Hunk #1 FAILED at 174.<br>
&gt; 1 out of 1 hunk FAILED -- rejects in file grub-core/normal/auth.c<br>
&gt; Patch 0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch does<br>
&gt; not apply (enforce with -f)<br>
&gt; ERROR: Function failed: patch_do_patch<br>
&gt; ERROR: Logfile of failure stored in:<br>
&gt; /home/akuster/oss/maint/mylayers/poky/build/tmp/work/i586-poky-linux/grub/2.00-r1/temp/log.do_patch.3029<br>
&gt; ERROR: Task 1<br>
&gt; (/home/akuster/oss/maint/mylayers/poky/meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a>,<br>
&gt; do_patch) failed with exit code '1'<br>
&gt;<br>
&gt;<br>
&gt; I am using my contrib akuster/dizzy-next.<br>
&gt;<br>
&gt; I will hand fixup the changes. please give me a few days.<br>
&gt;<br>
&gt; - armin<br>
&gt;<br>
&gt;<br>
&gt; On 01/06/2016 01:43 AM, Belal, Awais wrote:<br>
&gt;&gt; Ping!<br>
&gt;&gt;<br>
&gt;&gt; BR,<br>
&gt;&gt; Awais<br>
&gt;&gt;<br>
&gt;&gt; ________________________________________<br>
&gt;&gt; From: <a href="mailto:openembedded-core-bounces@lists.openembedded.org" target="_blank">
openembedded-core-bounces@lists.openembedded.org</a> [<a href="mailto:openembedded-core-bounces@lists.openembedded.org" target="_blank">openembedded-core-bounces@lists.openembedded.org</a>] on behalf of Belal, Awais<br>
&gt;&gt; Sent: Monday, January 04, 2016 12:53 PM<br>
&gt;&gt; To: akuster808<br>
&gt;&gt; Cc: <a href="mailto:openembedded-core@lists.openembedded.org" target="_blank">
openembedded-core@lists.openembedded.org</a><br>
&gt;&gt; Subject: Re: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
&gt;&gt;<br>
&gt;&gt; Hi Armin,<br>
&gt;&gt;<br>
&gt;&gt; Odd, applies cleanly on dizzy for me. Can you please share the patch log?<br>
&gt;&gt;<br>
&gt;&gt; On a scratch build dir, I get the following:<br>
&gt;&gt; --------------------------------------------------------------<br>
&gt;&gt; awais@alpha:~/yocto/build-dizzy$ bitbake -c patch grub<br>
&gt;&gt; Parsing recipes: 100% |#############################################################| Time: 00:00:36<br>
&gt;&gt; Parsing of 1458 .bb files complete (0 cached, 1458 parsed). 1914 targets, 66 skipped, 0 masked, 0 errors.<br>
&gt;&gt; NOTE: Resolving any missing task queue dependencies<br>
&gt;&gt;<br>
&gt;&gt; Build Configuration:<br>
&gt;&gt; BB_VERSION&nbsp; &nbsp; &nbsp; &nbsp; = &quot;1.24.0&quot;<br>
&gt;&gt; BUILD_SYS&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= &quot;x86_64-linux&quot;<br>
&gt;&gt; NATIVELSBSTRING&nbsp; &nbsp;= &quot;Ubuntu-14.04&quot;<br>
&gt;&gt; TARGET_SYS&nbsp; &nbsp; &nbsp; &nbsp; = &quot;x86_64-poky-linux&quot;<br>
&gt;&gt; MACHINE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= &quot;amdfalconx86&quot;<br>
&gt;&gt; DISTRO&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = &quot;poky&quot;<br>
&gt;&gt; DISTRO_VERSION&nbsp; &nbsp; = &quot;1.7.3&quot;<br>
&gt;&gt; TUNE_FEATURES&nbsp; &nbsp; &nbsp;= &quot;dbfp4&quot;<br>
&gt;&gt; TARGET_FPU&nbsp; &nbsp; &nbsp; &nbsp; = &quot;&quot;<br>
&gt;&gt; meta<br>
&gt;&gt; meta-yocto<br>
&gt;&gt; meta-yocto-bsp&nbsp; &nbsp; = &quot;(detachedfromorigin/dizzy):6d34267e0a13e10ab91b60590b27a2b5ba3b7da6&quot;<br>
&gt;&gt; common<br>
&gt;&gt; meta-amdfalconx86 = &quot;(detachedfromorigin/dizzy):84ae10ad68c7b253ab87558c5a6df057c9a84f08&quot;<br>
&gt;&gt; meta-oe<br>
&gt;&gt; meta-python&nbsp; &nbsp; &nbsp; &nbsp;= &quot;(detachedfromorigin/dizzy):7f1df52e9409edcc4d4cd5f34694f8740f56e1bf&quot;<br>
&gt;&gt;<br>
&gt;&gt; NOTE: Preparing runqueue<br>
&gt;&gt; NOTE: Executing SetScene Tasks<br>
&gt;&gt; NOTE: Executing RunQueue Tasks<br>
&gt;&gt; NOTE: Tasks Summary: Attempted 10 tasks of which 0 didn't need to be rerun and all succeeded.<br>
&gt;&gt; awais@alpha:~/yocto/build-dizzy$<br>
&gt;&gt; --------------------------------------------------------------<br>
&gt;&gt;<br>
&gt;&gt; BR,<br>
&gt;&gt; Awais<br>
&gt;&gt;<br>
&gt;&gt; ________________________________________<br>
&gt;&gt; From: akuster808 [<a href="mailto:akuster808@gmail.com" target="_blank">akuster808@gmail.com</a>]<br>
&gt;&gt; Sent: Monday, January 04, 2016 7:13 AM<br>
&gt;&gt; To: Belal, Awais<br>
&gt;&gt; Cc: <a href="mailto:openembedded-core@lists.openembedded.org" target="_blank">
openembedded-core@lists.openembedded.org</a><br>
&gt;&gt; Subject: Re: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
&gt;&gt;<br>
&gt;&gt; On 12/31/15 5:38 AM, Belal, Awais wrote:<br>
&gt;&gt; Awais,<br>
&gt;&gt;<br>
&gt;&gt;&gt; Ping!<br>
&gt;&gt; This patch does not apply to the current dizzy branch.<br>
&gt;&gt;<br>
&gt;&gt; is there a dependency patch I missed to apply?<br>
&gt;&gt;<br>
&gt;&gt; regards,<br>
&gt;&gt; Armin<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; BR,<br>
&gt;&gt;&gt; Awais<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; ________________________________________<br>
&gt;&gt;&gt; From: <a href="mailto:openembedded-core-bounces@lists.openembedded.org" target="_blank">
openembedded-core-bounces@lists.openembedded.org</a> [<a href="mailto:openembedded-core-bounces@lists.openembedded.org" target="_blank">openembedded-core-bounces@lists.openembedded.org</a>] on behalf of Belal, Awais<br>
&gt;&gt;&gt; Sent: Wednesday, December 23, 2015 4:20 PM<br>
&gt;&gt;&gt; To: <a href="mailto:openembedded-core@lists.openembedded.org" target="_blank">
openembedded-core@lists.openembedded.org</a><br>
&gt;&gt;&gt; Subject: [OE-core] [dizzy][PATCH] grub2: Fix CVE-2015-8370<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; <a href="http://git.savannah.gnu.org/cgit/grub.git/commit/?id=451d80e52d851432e109771bb8febafca7a5f1f2" rel="noreferrer" target="_blank">
http://git.savannah.gnu.org/cgit/grub.git/commit/?id=451d80e52d851432e109771bb8febafca7a5f1f2</a><br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Signed-off-by: Awais Belal &lt;<a href="mailto:awais_belal@mentor.com" target="_blank">awais_belal@mentor.com</a>&gt;<br>
&gt;&gt;&gt; ---<br>
&gt;&gt;&gt;&nbsp; ...E-2015-8370-Grub2-user-pass-vulnerability.patch | 52 &#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;&#43;<br>
&gt;&gt;&gt;&nbsp; meta/recipes-bsp/grub/<a href="http://grub-efi_2.00.bb" rel="noreferrer" target="_blank">grub-efi_2.00.bb</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|&nbsp; 1 &#43;<br>
&gt;&gt;&gt;&nbsp; meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|&nbsp; 1 &#43;<br>
&gt;&gt;&gt;&nbsp; 3 files changed, 54 insertions(&#43;)<br>
&gt;&gt;&gt;&nbsp; create mode 100644 meta/recipes-bsp/grub/files/0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; diff --git a/meta/recipes-bsp/grub/files/0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch b/meta/recipes-bsp/grub/files/0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch<br>
&gt;&gt;&gt; new file mode 100644<br>
&gt;&gt;&gt; index 0000000..f9252e9<br>
&gt;&gt;&gt; --- /dev/null<br>
&gt;&gt;&gt; &#43;&#43;&#43; b/meta/recipes-bsp/grub/files/0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch<br>
&gt;&gt;&gt; @@ -0,0 &#43;1,52 @@<br>
&gt;&gt;&gt; &#43;Upstream-Status: Accepted<br>
&gt;&gt;&gt; &#43;Signed-off-by: Awais Belal &lt;<a href="mailto:awais_belal@mentor.com" target="_blank">awais_belal@mentor.com</a>&gt;<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;From 451d80e52d851432e109771bb8febafca7a5f1f2 Mon Sep 17 00:00:00 2001<br>
&gt;&gt;&gt; &#43;From: Hector Marco-Gisbert &lt;<a href="mailto:hecmargi@upv.es" target="_blank">hecmargi@upv.es</a>&gt;<br>
&gt;&gt;&gt; &#43;Date: Wed, 16 Dec 2015 04:57:18 &#43;0000<br>
&gt;&gt;&gt; &#43;Subject: Fix security issue when reading username and password<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;This patch fixes two integer underflows at:<br>
&gt;&gt;&gt; &#43;&nbsp; * grub-core/lib/crypto.c<br>
&gt;&gt;&gt; &#43;&nbsp; * grub-core/normal/auth.c<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;CVE-2015-8370<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;Signed-off-by: Hector Marco-Gisbert &lt;<a href="mailto:hecmargi@upv.es" target="_blank">hecmargi@upv.es</a>&gt;<br>
&gt;&gt;&gt; &#43;Signed-off-by: Ismael Ripoll-Ripoll &lt;<a href="mailto:iripoll@disca.upv.es" target="_blank">iripoll@disca.upv.es</a>&gt;<br>
&gt;&gt;&gt; &#43;Also-By: Andrey Borzenkov &lt;<a href="mailto:arvidjaar@gmail.com" target="_blank">arvidjaar@gmail.com</a>&gt;<br>
&gt;&gt;&gt; &#43;---<br>
&gt;&gt;&gt; &#43;diff --git a/grub-core/lib/crypto.c b/grub-core/lib/crypto.c<br>
&gt;&gt;&gt; &#43;index 010e550..683a8aa 100644<br>
&gt;&gt;&gt; &#43;--- a/grub-core/lib/crypto.c<br>
&gt;&gt;&gt; &#43;&#43;&#43;&#43; b/grub-core/lib/crypto.c<br>
&gt;&gt;&gt; &#43;@@ -470,7 &#43;470,8 @@ grub_password_get (char buf[], unsigned buf_size)<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;if (key == '\b')<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;{<br>
&gt;&gt;&gt; &#43;-&nbsp; &nbsp; &nbsp; &nbsp; cur_len--;<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; if (cur_len)<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; cur_len--;<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;continue;<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;}<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;diff --git a/grub-core/normal/auth.c b/grub-core/normal/auth.c<br>
&gt;&gt;&gt; &#43;index c6bd96e..8615c48 100644<br>
&gt;&gt;&gt; &#43;--- a/grub-core/normal/auth.c<br>
&gt;&gt;&gt; &#43;&#43;&#43;&#43; b/grub-core/normal/auth.c<br>
&gt;&gt;&gt; &#43;@@ -174,8 &#43;174,11 @@ grub_username_get (char buf[], unsigned buf_size)<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;if (key == '\b')<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;{<br>
&gt;&gt;&gt; &#43;-&nbsp; &nbsp; &nbsp; &nbsp; cur_len--;<br>
&gt;&gt;&gt; &#43;-&nbsp; &nbsp; &nbsp; &nbsp; grub_printf (&quot;\b&quot;);<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; if (cur_len)<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; cur_len--;<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; grub_printf (&quot;\b&quot;);<br>
&gt;&gt;&gt; &#43;&#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;continue;<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp;}<br>
&gt;&gt;&gt; &#43;<br>
&gt;&gt;&gt; &#43;--<br>
&gt;&gt;&gt; &#43;cgit v0.9.0.2<br>
&gt;&gt;&gt; diff --git a/meta/recipes-bsp/grub/<a href="http://grub-efi_2.00.bb" rel="noreferrer" target="_blank">grub-efi_2.00.bb</a> b/meta/recipes-bsp/grub/<a href="http://grub-efi_2.00.bb" rel="noreferrer" target="_blank">grub-efi_2.00.bb</a><br>
&gt;&gt;&gt; index 7674255..6822e7a 100644<br>
&gt;&gt;&gt; --- a/meta/recipes-bsp/grub/<a href="http://grub-efi_2.00.bb" rel="noreferrer" target="_blank">grub-efi_2.00.bb</a><br>
&gt;&gt;&gt; &#43;&#43;&#43; b/meta/recipes-bsp/grub/<a href="http://grub-efi_2.00.bb" rel="noreferrer" target="_blank">grub-efi_2.00.bb</a><br>
&gt;&gt;&gt; @@ -30,6 &#43;30,7 @@ SRC_URI = &quot;<a href="ftp://ftp.gnu.org/gnu/grub/grub-${PV}.tar.gz" rel="noreferrer" target="_blank">ftp://ftp.gnu.org/gnu/grub/grub-${PV}.tar.gz</a> \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;file://grub-2.00-add-oe-kernel.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;file://grub-efi-fix-with-glibc-2.20.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;file://0001-parse_dhcp_vendor-Add-missing-const-qualifiers.patch \<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;file://0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;<br>
&gt;&gt;&gt;&nbsp; SRC_URI[md5sum] = &quot;e927540b6eda8b024fb0391eeaa4091c&quot;<br>
&gt;&gt;&gt;&nbsp; SRC_URI[sha256sum] = &quot;65b39a0558f8c802209c574f4d02ca263a804e8a564bc6caf1cd0fd3b3cc11e3&quot;<br>
&gt;&gt;&gt; diff --git a/meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a> b/meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a><br>
&gt;&gt;&gt; index d4df676..94b6da9 100644<br>
&gt;&gt;&gt; --- a/meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a><br>
&gt;&gt;&gt; &#43;&#43;&#43; b/meta/recipes-bsp/grub/<a href="http://grub_2.00.bb" rel="noreferrer" target="_blank">grub_2.00.bb</a><br>
&gt;&gt;&gt; @@ -25,6 &#43;25,7 @@ SRC_URI = &quot;<a href="ftp://ftp.gnu.org/gnu/grub/grub-${PV}.tar.gz" rel="noreferrer" target="_blank">ftp://ftp.gnu.org/gnu/grub/grub-${PV}.tar.gz</a> \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; file://fix-endianness-problem.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; file://grub2-remove-sparc64-setup-from-x86-builds.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; file://0001-parse_dhcp_vendor-Add-missing-const-qualifiers.patch \<br>
&gt;&gt;&gt; &#43;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; file://0001-Fix-CVE-2015-8370-Grub2-user-pass-vulnerability.patch \<br>
&gt;&gt;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt;&nbsp; SRC_URI[md5sum] = &quot;e927540b6eda8b024fb0391eeaa4091c&quot;<br>
&gt;&gt;&gt; --<br>
&gt;&gt;&gt; 1.9.1<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; --<br>
&gt;&gt;&gt; _______________________________________________<br>
&gt;&gt;&gt; Openembedded-core mailing list<br>
&gt;&gt;&gt; <a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
&gt;&gt;&gt; <a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">
http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
&gt;&gt;<br>
&gt;&gt; --<br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; Openembedded-core mailing list<br>
&gt;&gt; <a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
&gt;&gt; <a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">
http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
&gt;&gt;<br>
--<br>
_______________________________________________<br>
Openembedded-core mailing list<br>
<a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
<a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>