-
Notifications
You must be signed in to change notification settings - Fork 229
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
useradd/groupadd report warning #938
Comments
@ikerexxe @alejandro-colomar Could you please help here? |
What are those patch names? Also, the CVE is fixed in 4.14, right? |
I think it would be nice to have an explanation of who you are referring to by "we". Are you referring to a well-known distribution? Or are you the developer of some homemade distribution?
I don't have access to those patches. Have they been upstreamed? If so, can you provide a link their commit hashes?
Yes, so either they rebase to 4.14, or they manually port that patch. |
Patches names are below. Yes it is fixed in 4.14 Below is the commit hash link. In meta-openembedded mailing list discussion was happened and they merged in the upstream kirkstone and as well as in master. https://lists.openembedded.org/g/openembedded-core/message/180212 |
Yes i am the developer of well-known distribution. Yes they have upstreamed and fixed in 4.14 version. In meta-openembedded mailing list discussion was happened and they merged in the upstream kirkstone and as well as in master. https://lists.openembedded.org/g/openembedded-core/message/180212 |
At this point I have read this topic two times and I don't understand where the problem lies. You mention two patches that I thought were missing in your distribution, but apparently they have already been backported. So, what are you looking for? Can you state the problem in another terms? |
@ikerexxe Below warning is observed though below CVE is already available in our code kirkstone branch. "configuration error - unknown item 'SYSLOG_SU_ENAB' (notify administrator)" CVE-2023-29383.patch what could be the reason that this warning is coming? |
Taking a look at the openembedded distribution email that you sent it seems like they have another patch to silence those warnings:
However, the only other commit that is referenced is e5905c4, and from a first glance that doesn't seem to fix the issue. I'd recommend you to reply to that email to understand how they "fixed" the problem. |
This is the another patch 0001-Overhaul-valid_field.patch which also have in our code but still issue is coming. |
useradd/groupadd report errors as below:
We are using this shadow library in our application.
When we compile our application we get below warning in log.do_prepare_recipe_sysroot
"configuration error - unknown item 'SYSLOG_SU_ENAB' (notify administrator)"
"configuration error - unknown item 'SYSLOG_SG_ENAB' (notify administrator)"
above warning is observed though below CVE is already available in our code kirkstone branch.
CVE-2023-29383.patch
0001-Overhaul-valid_field.patch.
The text was updated successfully, but these errors were encountered: