Recommended
Type:
Patch
Released:
Dec 26, 2024 Updated: Jan 2, 2025
Hot patches to fix the following CVEs:
* Userspace
CVE-2022-24439
CVE-2022-4144
CVE-2023-38403
CVE-2023-40267
CVE-2023-4421
CVE-2023-7250
CVE-2024-26306
CVE-2024-38474
CVE-2024-38475
CVE-2024-38476
CVE-2024-45490
CVE-2024-45491
CVE-2024-45492
CVE-2024-52533
CVE-2024-54661
CVE-2024-8932
* Kernel linux-yocto:
CVE-2019-25162
CVE-2021-47194
CVE-2022-48686
CVE-2021-47521
CVE-2021-47571
CVE-2024-0565
CVE-2021-33631
CVE-2023-5717
CVE-2023-6932
CVE-2023-6040
Hot patch
10 patches for oe-core layer
6 patches for meta-openembedded layer
1 patch for wrlinux (For kernel linux-yocto)
Wind River Linux LTS 19
* For oe-core layer
$ cd layers/oe-core
$ tar xzvf /path/to/oe-core-lts19-rcpl32.tar.gz
$ git am oe-core-lts19-rcpl32/00*.patch
$ rm -fr oe-core-lts19-rcpl32/
* For meta-openembedded layer
$ cd layers/meta-openembedded
$ tar xzvf /path/to/meta-openembedded-lts19-rcpl32.tar.gz
$ git am meta-openembedded-lts19-rcpl32/00*.patch
$ rm -fr meta-openembedded-lts19-rcpl32/
* For wrlinux layer (For kernel linux-yocto)
$ cd layers/wrlinux
$ git am /path/to/0001-linux-yocto-Fix-CVEs.patch
- Apply to a local product mirror
Apply these patches to a local product mirror will work for all subsequent projects, then you don't have to apply them to every project.
$ cd /path/to/local-mirror/WRLinux-lts-19-Core/
* For oe-core layer
$ git clone --branch WRLINUX_10_19_LTS oe-core.git oe-core-clone
$ cd oe-core-clone
$ tar xzvf /path/to/oe-core-lts19-rcpl32.tar.gz
$ git am oe-core-lts19-rcpl32/00*.patch
$ git push
$ cd ../; rm -fr oe-core-clone
* For meta-openembedded layer
$ git clone --branch WRLINUX_10_19_LTS meta-openembedded.git meta-openembedded-clone
$ cd meta-openembedded-clone
$ tar xzvf /path/to/meta-openembedded-lts19-rcpl32.tar.gz
$ git am meta-openembedded-lts19-rcpl32/00*.patch
$ git push
$ cd ../; rm -fr meta-openembedded-clone
* For wrlinux layer
$ git clone --branch WRLINUX_10_19_LTS wrlinux.git wrlinux-clone
$ cd wrlinux-clone
$ git am /path/to/0001-linux-yocto-Fix-CVEs.patch
$ git push
$ cd ../; rm -fr wrlinux-clone
