Commit Graph

70541 Commits

Author SHA1 Message Date
Bruce Ashfield
01a3aa8cec linux-yocto/5.15: update to v5.15.129
Updating  to the latest korg -stable release that comprises
the following commits:

    9e43368a3393 Linux 5.15.129
    d48016d74836 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
    1c41cd30d5cd mm: memory-failure: fix unexpected return value in soft_offline_page()
    0712721e4f4f mm: memory-failure: kill soft_offline_free_page()
    efd02b5cadd5 dma-buf/sw_sync: Avoid recursive lock during fence signal
    8dbf913520c4 pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
    f1c0402b8e22 clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
    10bc3eddc605 scsi: core: raid_class: Remove raid_component_add()
    d3d57cdbfda4 scsi: snic: Fix double free in snic_tgt_create()
    ef56cc8889be can: raw: add missing refcount for memory leak fix
    930f3f164964 drm/i915: Fix premature release of request's reusable memory
    3cb86cc565df cgroup/cpuset: Free DL BW in case can_attach() fails
    ffff4fc4bad7 sched/deadline: Create DL BW alloc, free & check overflow interface
    86aa90795979 cgroup/cpuset: Iterate only if DEADLINE tasks are present
    43d8cbfefa7c sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
    d0eb4917f4d3 sched/cpuset: Bring back cpuset_mutex
    918879de0e23 cgroup/cpuset: Rename functions dealing with DEADLINE accounting
    78efab71a649 torture: Fix hang during kthread shutdown phase
    c8fb97dd7fe6 nfsd: use vfs setgid helper
    01966511868e nfs: use vfs setgid helper
    a7a1849899aa x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
    ad79f943c869 x86/fpu: Invalidate FPU state correctly on exec()
    b190cf1f277a drm/display/dp: Fix the DP DSC Receiver cap size
    c8aab333d41a drm/vmwgfx: Fix shader stage validation
    b53ed415163e PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
    60ba1bfa036a media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
    544cd10defa1 of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
    f1d4a5881856 of: unittest: Fix EXPECT for parse_phandle_with_args_map() test
    ce66cd478636 radix tree: remove unused variable
    898c8c5b1114 lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
    ff90a4c6edf8 batman-adv: Hold rtnl lock during MTU update via netlink
    ea38c0d9aaa2 batman-adv: Fix batadv_v_ogm_aggr_send memory leak
    7f3f72eb8f5b batman-adv: Fix TT global entry leak when client roamed back
    f7667b49880a batman-adv: Do not get eth header before batadv_check_management_packet
    3f9312dd7581 batman-adv: Don't increase MTU when set by user
    cde5a240d72d batman-adv: Trigger events for auto adjusted MTU
    22426e1ce679 selinux: set next pointer before attaching to list
    711595bfdccf nfsd: Fix race to FREE_STATEID and cl_revoked
    bd1697e12230 NFS: Fix a use after free in nfs_direct_join_group()
    5f642613746e mm: add a call to flush_cache_vmap() in vmap_pfn()
    440c10034b4d ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
    5cc7d81cf576 clk: Fix slab-out-of-bounds error in devm_clk_release()
    0f72859acfa2 NFSv4: Fix dropped lock for racing OPEN and delegation return
    9c025420fef2 ibmveth: Use dcbf rather than dcbfl
    7e546bd08943 Revert "KVM: x86: enable TDP MMU by default"
    67af12f5582b net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
    4451457d61e0 net/ncsi: make one oem_gma function for all mfr id
    f683f4be802b bonding: fix macvlan over alb bond support
    0fa8046e923a net: remove bond_slave_has_mac_rcu()
    f0ec97fca629 rtnetlink: Reject negative ifindexes in RTM_NEWLINK
    00247cfd2b69 rtnetlink: return ENODEV when ifname does not exist and group is given
    75cfb7de44e5 netfilter: nf_tables: fix out of memory error handling
    f22954f8c58f netfilter: nf_tables: flush pending destroy work before netlink notifier
    ff34403fef98 net/sched: fix a qdisc modification with ambiguous command request
    30624ea3f8b6 igc: Fix the typo in the PTM Control macro
    f697c3ead109 igb: Avoid starting unnecessary workqueues
    d7823d752ce1 ice: fix receive buffer size miscalculation
    ace1b0ae3097 net: validate veth and vxcan peer ifindexes
    335be585416d net: bcmgenet: Fix return value check for fixed_phy_register()
    60a5034584ea net: bgmac: Fix return value check for fixed_phy_register()
    5b52c9ba42c0 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
    2bad37b6f675 dccp: annotate data-races in dccp_poll()
    9b015360e86f sock: annotate data-races around prot->memory_pressure
    c52c6c0223e1 octeontx2-af: SDP: fix receive link config
    ce6e2b14bc09 tracing: Fix memleak due to race between current_tracer and trace
    ef748360ba91 tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
    fdf5804d7475 can: raw: fix lockdep issue in raw_release()
    278fccf587dd drm/amd/display: check TG is non-null before checking if enabled
    a955e6a0e39d drm/amd/display: do not wait for mpc idle if tg is disabled
    e0bd4f0c60b4 can: raw: fix receiver memory leak
    b832174b7f89 jbd2: fix a race when checking checkpoint buffer busy
    9c31bb2684f8 jbd2: remove journal_clean_one_cp_list()
    d91783e6864a jbd2: remove t_checkpoint_io_list
    a0ab49e7a758 ALSA: pcm: Fix potential data race at PCM memory allocation helpers
    2e56d380daa9 fbdev: fix potential OOB read in fast_imageblit()
    14163f4a4fa6 fbdev: Fix sys_imageblit() for arbitrary image widths
    5b60bd9081a9 fbdev: Improve performance of sys_imageblit()
    166f0bf4560b MIPS: cpu-features: Use boot_cpu_type for CPU type based features
    8f106e97409d MIPS: cpu-features: Enable octeon_cache by cpu_type
    d1d0b239f974 fs: dlm: fix mismatch of plock results from userspace
    77d334c44681 fs: dlm: use dlm_plock_info for do_unlock_close
    f9a33cc7d946 fs: dlm: change plock interrupted message to debug again
    7ac088841ffb fs: dlm: add pid to debug log
    df9c842ab0a4 dlm: replace usage of found with dedicated list iterator variable
    33e9c610e337 dlm: improve plock logging if interrupted
    d9ce077f8b1f PCI: acpiphp: Reassign resources on bridge if necessary
    8cc8645dd3e1 xprtrdma: Remap Receive buffers after a reconnect
    91a707507e83 NFSv4: fix out path in __nfs4_get_acl_uncached
    323b830eebd1 NFSv4.2: fix error handling in nfs42_proc_getxattr
    5de0a325c45e objtool/x86: Fix SRSO mess

(From OE-Core rev: aeddbeb2a3c82fe7ed639bfcca3bff3998e31f7a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:27 -10:00
Bruce Ashfield
a26883dd2e linux-yocto/5.15: update to v5.15.128
Updating  to the latest korg -stable release that comprises
the following commits:

    5ddfe5cc8716 Linux 5.15.128
    9080f4fcc202 x86/srso: Correct the mitigation status when SMT is disabled
    484eefc6ff9c objtool/x86: Fixup frame-pointer vs rethunk
    55f1cbeaa159 x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
    fa24cd0fbcb7 x86/srso: Disable the mitigation on unaffected configurations
    aa0777ce0d3d x86/CPU/AMD: Fix the DIV(0) initial fix attempt
    bbe585239d4f x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
    19f23d16b0e0 x86/static_call: Fix __static_call_fixup()
    df6495f203a7 x86/srso: Explain the untraining sequences a bit more
    43548590ad7e x86/cpu: Cleanup the untrain mess
    035e906bfc93 x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
    19c1c0499650 x86/cpu: Rename original retbleed methods
    f77dbb90962b x86/cpu: Clean up SRSO return thunk mess
    f624ce6c7fc2 x86/ibt: Add ANNOTATE_NOENDBR
    f1171d455d94 objtool: Add frame-pointer-specific function ignore
    08f7cfd44f77 x86/alternative: Make custom return thunk unconditional
    0d810eff090c x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
    8089aae6020e x86/cpu: Fix __x86_return_thunk symbol type
    5b28fda5fdee mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
    e8c5081da2cc net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
    431db3f48c28 virtio-net: set queues after driver_ok
    d39fc9b94dc0 af_unix: Fix null-ptr-deref in unix_stream_sendpage().
    9a4d8dc706c2 arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
    6b64974e02ea exfat: check if filename entries exceeds max filename length
    6065b3017107 netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
    a00c5d2c208b drm/amd: flush any delayed gfxoff on suspend entry
    d578c919deb7 drm/qxl: fix UAF on handle creation
    ff09f9e671ff mmc: block: Fix in_flight[issue_type] value error
    b803fedb6e50 mmc: wbsd: fix double mmc_free_host() in wbsd_init()
    961f7ce16223 cifs: Release folio lock on fscache read hit.
    cc3f194f46e7 ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.
    18e27df4f2b4 serial: 8250: Fix oops for port->pm on uart_change_pm()
    e9b8ee715dbc riscv: uaccess: Return the number of bytes effectively not copied
    b2a331abcb03 ALSA: hda/realtek - Remodified 3k pull low procedure
    dfb9676ed25b soc: aspeed: socinfo: Add kfree for kstrdup
    c5ac7522a8db ASoC: meson: axg-tdm-formatter: fix channel slot allocation
    fd346ef1cd2d ASoC: rt5665: add missed regulator_bulk_disable
    e878458d820c ARM: dts: imx: Set default tuning step for imx6sx usdhc
    430c29a54e4a arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
    03522d73a498 bus: ti-sysc: Flush posted write on enable before reset
    578371ce0d7f net: do not allow gso_size to be set to GSO_BY_FRAGS
    5fc4fd3f3eb8 sock: Fix misuse of sk_under_memory_pressure()
    fc3d82d295d1 net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
    f11c2802e143 i40e: fix misleading debug logs
    5ba2b936f3e1 iavf: fix FDIR rule fields masks validation
    ae6834689fd6 team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    0ffbc341cfae net: phy: broadcom: stub c45 read/write for 54810
    bf221e5e4b19 netfilter: nft_dynset: disallow object maps
    9177869b85dd ipvs: fix racy memcpy in proc_do_sync_threshold
    1adaec4758d1 netfilter: nf_tables: deactivate catchall elements in next generation
    82109740d610 netfilter: nf_tables: fix false-positive lockdep splat
    b2f6d73395cb drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
    7207ee323afa selftests: mirror_gre_changes: Tighten up the TTL test match
    c2a6ffe3f1a3 net: phy: fix IRQ-based wake-on-lan over hibernate / power off
    8e5e967348ca xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
    075448a2eb75 xfrm: add NULL check in xfrm_update_ae_params
    e1e04cc2ef2c ip_vti: fix potential slab-use-after-free in decode_session6
    a1639a82ce14 ip6_vti: fix slab-use-after-free in decode_session6
    44b3d4096700 xfrm: fix slab-use-after-free in decode_session6
    a465ace883ac net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
    fed1cd2cd3aa net: af_key: fix sadb_x_filter validation
    1960f468078b net: xfrm: Fix xfrm_address_filter OOB read
    080dedb1cad8 i2c: designware: Handle invalid SMBus block data response length value
    416c538684bd i2c: designware: Correct length byte validation logic
    b966e9e1e250 btrfs: fix BUG_ON condition in btrfs_cancel_balance
    77698e6ff6f0 tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms
    2a5234464383 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
    8ef25fb13494 powerpc/rtas_flash: allow user copy to flash block cache objects
    bb70e2b70f8d fbdev: mmp: fix value check in mmphw_probe()
    184f1b68bb99 i2c: hisi: Only handle the interrupt of the driver's transfer
    c4e671dae50e i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
    b99f490ea87e cifs: fix potential oops in cifs_oplock_break
    a5ae5a81bc19 vduse: Use proper spinlock for IRQ injection
    5b7d5c2dd664 virtio-mmio: don't break lifecycle of vm_dev
    edf3b5aadb25 btrfs: move out now unused BG from the reclaim list
    170773563ef6 ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
    4ffbfe1c980f ARM: dts: imx6sll: fixup of operating points
    e2ff5cf681a8 mmc: sunxi: fix deferred probing
    f93e8c5a7bd9 mmc: bcm2835: fix deferred probing
    4eeba5d476fe USB: dwc3: fix use-after-free on core driver unbind
    a78fe5c9d8d5 USB: dwc3: qcom: fix NULL-deref on suspend
    8a6b7534020d tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
    701bb5fee7c3 tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms
    fa254ab7d02d tty: serial: fsl_lpuart: Add i.MXRT1050 support
    20351ddb1f41 usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume()
    31a0e60fe16b USB: dwc3: gadget: drop dead hibernation code
    d9e004104e45 usb: dwc3: Fix typos in gadget.c
    2fa487a94667 usb: dwc3: Remove DWC3 locking during gadget suspend/resume
    7dfb384e76ee usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect
    d3c82f24ee69 drm/amd/display: fix access hdcp_workqueue assert
    0ba6c7ba081e drm/amd/display: phase3 mst hdcp for multiple displays
    99c444d3c3c4 drm/amd/display: save restore hdcp state when display is unplugged from mst hub
    4f1beb75f652 ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
    f84c2ca3490c igc: read before write to SRRCTL register
    9fa82f031af8 iio: addac: stx104: Fix race condition when converting analog-to-digital
    d31d04ec404c iio: addac: stx104: Fix race condition for stx104_write_raw()
    89a007f3a383 iio: stx104: Move to addac subdirectory
    cadf8f2d7c9d iio: adc: stx104: Implement and utilize register structures
    6089d354346f iio: adc: stx104: Utilize iomap interface
    565b96d9a7ab iio: add addac subdirectory
    49b830d75f03 ring-buffer: Do not swap cpu_buffer during resize process
    6657ecbcc39c powerpc/kasan: Disable KCOV in KASAN code
    8703b26387e1 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
    5ed4dbc13726 ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
    c7d8b5f46f06 fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
    3a00ec562f8c fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
    e7799bb4dbe2 fs/ntfs3: Enhance sanity check while generating attr_list
    ef568da1fd84 drm/amdgpu: Fix potential fence use-after-free v2
    5720c7e185d4 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
    548a6b64b3c0 Bluetooth: L2CAP: Fix use-after-free
    302d04596364 watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
    2ea70379e4f4 firewire: net: fix use after free in fwnet_finish_incoming_packet()
    97fd1c8e9c5a pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
    85e888150075 gfs2: Fix possible data races in gfs2_show_options()
    eafb79d2448a usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
    7bdb4c963049 usb: chipidea: imx: don't request QoS for imx8ulp
    25decbbb66e4 thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx()
    776b34615a29 media: platform: mediatek: vpu: fix NULL ptr dereference
    cb174344bf85 usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
    1676748aa290 media: v4l2-mem2mem: add lock to protect parameter num_rdy
    985086704267 smb: client: fix warning in cifs_smb3_do_mount()
    a3f252436e57 ovl: check type and offset of struct vfsmount in ovl_entry
    1a650d3ccd79 RDMA/mlx5: Return the firmware result upon destroying QP/RQ
    9631d88503ab HID: add quirk for 03f0:464a HP Elite Presenter Mouse
    4921792e04f2 drm/amdgpu: install stub fence into potential unused fence pointers
    fd41646d4350 HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard
    ff10cd3e9b3a dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
    e9ce774052ee ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
    7d53d1e4765c iopoll: Call cpu_relax() in busy loops
    ca66e9dd98ef ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
    cc1590830859 PCI: tegra194: Fix possible array out of bounds access
    e2d10f1de1fa net: tls: avoid discarding data on record close
    9a15ca893909 net/tls: Multi-threaded calls to TX tls_dev_del
    2d93157b7e2d net/tls: Perform immediate device ctx cleanup when possible
    51222e1c77a1 macsec: use DEV_STATS_INC()
    3d64a232e4d9 macsec: Fix traffic counters/statistics
    396a1921406a selftests: forwarding: tc_actions: Use ncat instead of nc
    d61a0886d336 selftests: forwarding: tc_actions: cleanup temporary files when test is aborted
    a798977df6d0 mmc: sdhci-f-sdh30: Replace with sdhci_pltfm

(From OE-Core rev: 3ad11a93139845060e970045a03f6476da5e5795)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:27 -10:00
Bruce Ashfield
59ca15aa58 linux-yocto/5.15: update to v5.15.127
Updating  to the latest korg -stable release that comprises
the following commits:

    f6f7927ac664 Linux 5.15.127
    c597d8cb0d33 timers/nohz: Last resort update jiffies on nohz_full IRQ entry
    b4d36e6c5dc4 timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped
    c3b954a51b64 tick: Detect and fix jiffies update stall
    af99918f0e39 sch_netem: fix issues in netem_change() vs get_dist_table()
    5d094d4e7b99 alpha: remove __init annotation from exported page_is_ram()
    f8d6d25756ea scsi: qedf: Fix firmware halt over suspend and resume
    85db1cd1744e scsi: qedi: Fix firmware halt over suspend and resume
    e70469c28953 scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
    6bc7f4c8c27d scsi: core: Fix possible memory leak if device_add() fails
    461f8ac666fa scsi: snic: Fix possible memory leak if device_add() fails
    171e117cdc0a scsi: 53c700: Check that command slot is not NULL
    7a792b3d888a scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
    0f52d7b78251 scsi: core: Fix legacy /proc parsing buffer overflow
    b757ef99df39 netfilter: nf_tables: report use refcount overflow
    9bdbbcf9d148 nvme-rdma: fix potential unbalanced freeze & unfreeze
    d68f8ef6ef70 nvme-tcp: fix potential unbalanced freeze & unfreeze
    ae6e21f8bb2a btrfs: set cache_block_group_error if we find an error
    314135b7bae9 btrfs: reject invalid reloc tree root keys with stack dump
    69dd147de419 btrfs: exit gracefully if reloc roots don't match
    c40d4b60c58d btrfs: don't stop integrity writeback too early
    555e126dd30b ibmvnic: Handle DMA unmapping of login buffs in release functions
    34fcc823823a ibmvnic: Unmap DMA login rsp buffer on send login fail
    cee62753cf2e ibmvnic: Enforce stronger sanity checks on login response
    27e8db8380eb net/mlx5: Skip clock update work when device is in error state
    f638fc2f7377 net/mlx5: Allow 0 for total host VFs
    086a80eb6213 dmaengine: mcf-edma: Fix a potential un-allocated memory access
    7e1dc94b2d50 nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
    608a4327c257 nexthop: Make nexthop bucket dump more efficient
    4457300cfd84 nexthop: Fix infinite nexthop dump when using maximum nexthop ID
    91307347d632 net: hns3: add wait until mac link down
    094310eb2b93 net: hns3: refactor hclge_mac_link_status_wait for interface reuse
    1ae9703c2e32 net: phy: at803x: remove set/get wol callbacks for AR8032
    7d496cd83a9d RDMA/umem: Set iova in ODP flow
    f78a4238a873 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
    26a27dd76054 drm/rockchip: Don't spam logs in atomic check
    918c1e6843b7 IB/hfi1: Fix possible panic during hotplug remove
    df21468bfdc8 iavf: fix potential races for FDIR filters
    b1f985cf1c52 drivers: net: prevent tun_build_skb() to exceed the packet size limit
    f239c9e1d98b dccp: fix data-race around dp->dccps_mss_cache
    49a1fee22fae bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    789fcd94c9ca xsk: fix refcount underflow in error path
    e95808121953 tunnels: fix kasan splat when generating ipv4 pmtu error
    7903311b2cec net/packet: annotate data-races around tp->status
    f4614e379bf9 mISDN: Update parameter type of dsp_cmx_send()
    3961761af392 bpf, sockmap: Fix bug that strp_done cannot be called
    20d53895d5c0 bpf, sockmap: Fix map type error in sock_map_del_link
    a09c258cfa77 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
    85af0b226c0b selftests: forwarding: tc_flower: Relax success criterion
    7b3fa99526f9 selftests: forwarding: Switch off timeout
    e410f85ebca9 selftests: forwarding: Skip test when no interfaces are specified
    4a4499452620 selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
    b8d216e9c607 selftests: forwarding: ethtool: Skip when using veth pairs
    b9dfb80d9fb2 selftests: forwarding: Add a helper to skip test when using veth pairs
    b973eb76dff3 selftests/rseq: Fix build with undefined __weak
    b8b8db5857d4 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
    4c6767c8bf5e x86: Move gds_ucode_mitigated() declaration to header
    f919cbc90441 x86/speculation: Add cpu_show_gds() prototype
    9290ef14c96b x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
    829409510d00 x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
    c41a22b93d7c x86/srso: Fix build breakage with the LLVM linker
    c2372b1559d4 usb: typec: tcpm: Fix response to vsafe0V event
    f776b94ccdf0 usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
    00cc14b52d6f usb: dwc3: Properly handle processing of pending events
    7a11d1e2625b usb-storage: alauda: Fix uninit-value in alauda_check_media()
    945e1b3c361b misc: rtsx: judge ASPM Mode to set PETXCFG Reg
    03eebad96233 binder: fix memory leak in binder_init()
    a8e2ae6296d5 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
    2df8ae1e42b8 iio: cros_ec: Fix the allocation size for cros_ec_command
    a7cedc2b7612 io_uring: correct check for O_TMPFILE
    697bc234632c selftests/bpf: Fix sk_assign on s390x
    127277262110 selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code
    ee701208f4cc selftests/bpf: make test_align selftest more robust
    683d2969a082 bpf: aggressively forget precise markings during state checkpointing
    2516deeb872a bpf: stop setting precise in current state
    c47d0178ad86 bpf: allow precision tracking for programs with subprogs
    3645510cf926 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
    36a3b560c78d radix tree test suite: fix incorrect allocation size for pthreads
    8d10284243b7 hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
    3ad4ba2b6112 drm/amd/display: check attr flag before set cursor degamma on DCN3+
    621204fca047 drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
    64e6253f6489 drm/nouveau/gr: enable memory loads on helper invocation on all channels
    bcd9eeb3a309 riscv,mmio: Fix readX()-to-delay() ordering
    57772ae9b339 dmaengine: pl330: Return DMA_PAUSED when transaction is paused
    3ca8f5c733c4 ipv6: adjust ndisc_is_useropt() to also return true for PIO
    6cde60777675 mmc: moxart: read scr register without changing byte order
    3f00757ab416 wireguard: allowedips: expand maximum node depth
    aeb974907642 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    595679098bdc ksmbd: validate command request size

(From OE-Core rev: b0dc6cea72d2c61babef286effbc2019b39dc3ea)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:27 -10:00
Bruce Ashfield
032cb67e67 linux-yocto/5.15: update to v5.15.126
Updating  to the latest korg -stable release that comprises
the following commits:

    24c4de4069cb Linux 5.15.126
    aeb4db8ab7f1 PM: sleep: wakeirq: fix wake irq arming
    b5d3a4251bd2 PM / wakeirq: support enabling wake-up irq after runtime_suspend called
    a36b522767f3 soundwire: fix enumeration completion
    7996facaf0ee soundwire: bus: pm_runtime_request_resume on peripheral attachment
    c91c07ae0849 selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
    1cdb50faf7f7 selftests/rseq: check if libc rseq support is registered
    0f1f471b91f4 drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
    5058c1444040 powerpc/mm/altmap: Fix altmap boundary check
    eb7a5e4d14c8 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
    70643e98cbc3 mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
    1796b492f8cc mtd: rawnand: rockchip: fix oobfree offset and description
    f6807b62fb0e mtd: rawnand: omap_elm: Fix incorrect type in assignment
    596be6716bc5 ext2: Drop fragment support
    0ccfe21949bc fs: Protect reconfiguration of sb read-write from racing writes
    27d0f755d649 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
    fbe5a2fed815 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
    afd9a31b5aa4 fs/sysv: Null check to prevent null-ptr-deref bug
    80ec112c1996 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
    0d6f639f1dcd file: reinstate f_pos locking optimization for regular files
    b44d28b98f18 bpf, cpumap: Make sure kthread is running before map update returns
    8089eb93d678 drm/ttm: check null pointer before accessing when swapping
    ef0d07c66843 open: make RESOLVE_CACHED correctly test for O_TMPFILE
    c81bdf8f9f2b bpf: Disable preemption in bpf_event_output
    ae07cfe2b099 rbd: prevent busy loop when requesting exclusive lock
    7978bcca4c1f wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
    32ca6a55e10e net: tap_open(): set sk_uid from current_fsuid()
    4ed3eed99ee6 net: tun_chr_open(): set sk_uid from current_fsuid()
    adacc3a954fa arm64: dts: stratix10: fix incorrect I2C property for SCL signal
    b92c88009da1 mtd: rawnand: meson: fix OOB available bytes for ECC
    b0875c583e41 mtd: spinand: toshiba: Fix ecc_get_status
    1c33ca1e1974 exfat: release s_lock before calling dir_emit()
    8a34a242cf03 exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
    a74878207b02 x86/CPU/AMD: Do not leak quotient data after a division by 0
    b8f029fc4075 firmware: arm_scmi: Drop OF node reference in the transport channel setup
    287c2c8677ed ceph: defer stopping mdsc delayed_work
    98b521d10e73 USB: zaurus: Add ID for A-300/B-500/C-700
    cd6872f2cf56 libceph: fix potential hang in ceph_osdc_notify()
    e5f5b4a89809 scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
    212a9a3c67be scsi: zfcp: Defer fc_rport blocking until after ADISC response
    dac382725394 tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
    4517782e1bc3 tcp_metrics: annotate data-races around tm->tcpm_net
    e842a68667d4 tcp_metrics: annotate data-races around tm->tcpm_vals[]
    d3184bea4ace tcp_metrics: annotate data-races around tm->tcpm_lock
    9a7367cbe33d tcp_metrics: annotate data-races around tm->tcpm_stamp
    6f6bd67f4894 tcp_metrics: fix addr_same() helper
    b0acbcf1e7a1 prestera: fix fallback to previous version on same major version
    d6d9d0f5a5e0 net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
    c999fb1039dd net/mlx5: fs_core: Make find_closest_ft more generic
    32ef2c0c6cf1 vxlan: Fix nexthop hash size
    1bb54a21f4d9 ip6mr: Fix skb_under_panic in ip6mr_cache_report()
    64e3affee288 s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
    a0da2684db18 net: dcb: choose correct policy to parse DCB_ATTR_BCN
    193333229aac net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
    766c9dd00c5f net: korina: handle clk prepare error in korina_probe()
    6cecfdf65053 net: ll_temac: fix error checking of irq_of_parse_and_map()
    3761ff4f8670 net: ll_temac: Switch to use dev_err_probe() helper
    5c534640a7da bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
    79c3d81c9ad1 net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
    9edf7955025a net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
    262430dfc618 net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
    b58d34068fd9 bpf, cpumap: Handle skb as well when clean up ptr_ring
    f04f6d9b3b06 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
    2c55d4941518 net: add missing data-race annotation for sk_ll_usec
    e934c50c48e2 net: add missing data-race annotations around sk->sk_peek_off
    fdd8d8d54d6a net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
    98f0d1db3a27 net: add missing READ_ONCE(sk->sk_sndbuf) annotation
    0d1047b77b23 net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
    6c058a1f67f0 net: annotate data-races around sk->sk_max_pacing_rate
    2950c5ac65b3 qed: Fix scheduling in a tasklet while getting stats
    a19952dbb5b6 qed: Fix kernel-doc warnings
    6d8c259f4827 mISDN: hfcpci: Fix potential deadlock on &hc->lock
    8dedcc6af341 net: sched: cls_u32: Fix match key mis-addressing
    675d29de69c7 perf test uprobe_from_different_cu: Skip if there is no gcc
    0f6e3d8d7f91 net: dsa: fix value check in bcm_sf2_sw_probe()
    047508edd602 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
    cc9ebceaa6d0 bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
    8f9a04c742e1 net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
    00cecb0a8f9e net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
    4c224ea31bed wifi: cfg80211: Fix return value in scan logic
    8e72db3ffa5d KVM: s390: fix sthyi error handling
    809edb4262f0 word-at-a-time: use the same return type for has_zero regardless of endianness
    b7880809d75d arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
    804e72062be4 iommu/arm-smmu-v3: Document nesting-related errata
    744e6b80b830 iommu/arm-smmu-v3: Add explicit feature for nesting
    fd86b5944215 iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
    2de9f3dcfe63 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
    a850fa85d477 arm64: errata: Add detection for TRBE write to out-of-range
    073699df4a09 arm64: errata: Add workaround for TSB flush failures
    44b45e8161a5 net/mlx5: Free irqs only on shutdown callback
    40601542c43c perf: Fix function pointer case
    c12fa4ac8997 io_uring: gate iowait schedule on having pending requests

(From OE-Core rev: 0cb9289e67ad5da4c9612daf74aa8ff51c3c9c75)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:26 -10:00
Bruce Ashfield
20c319e388 linux-yocto/5.15: update to v5.15.125
Updating  to the latest korg -stable release that comprises
the following commits:

    c275eaaaa342 Linux 5.15.125
    754e0c7c4a30 x86: fix backwards merge of GDS/SRSO bit
    b14a3924c267 xen/netback: Fix buffer overrun triggered by unusual packet
    153f9a7b02d4 x86/srso: Tie SBPB bit setting to microcode patch detection
    df4c3823cba5 x86/srso: Fix return thunks in generated code
    0071b17eb66b x86/srso: Add IBPB on VMEXIT
    5398faac76a6 x86/srso: Add IBPB
    c24aaa7dde5f x86/srso: Add SRSO_NO support
    4e9115e194a8 x86/srso: Add IBPB_BRTYPE support
    b35087763a44 x86/srso: Add a Speculative RAS Overflow mitigation
    c3b4c644525e x86/cpu, kvm: Add support for CPUID_80000021_EAX
    236dd7133394 x86/bugs: Increase the x86 bugs vector size to two u32s
    0242a8bdef56 Documentation/x86: Fix backwards on/off logic about YMM support
    27a72e350869 x86/mm: Initialize text poking earlier
    d0317b9502ea mm: Move mm_cachep initialization to mm_init()
    8e4c2530879d x86/mm: Use mm_alloc() in poking_init()
    13ec5cb4c113 x86/mm: fix poking_init() for Xen PV guests
    3e90080d5665 x86/xen: Fix secondary processors' FPU initialization
    348741a9e4d3 KVM: Add GDS_NO support to KVM
    59d78655f808 x86/speculation: Add Kconfig option for GDS
    0cc5643b63ae x86/speculation: Add force option to GDS mitigation
    348a89e20184 x86/speculation: Add Gather Data Sampling mitigation
    a094d3b30967 x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
    59f2739111ca x86/fpu: Mark init functions __init
    bb9c20d903f6 x86/fpu: Remove cpuinfo argument from init functions
    de8b7ce4c533 x86/init: Initialize signal frame size late
    041d929233bb init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
    8ae795ed6115 init: Invoke arch_cpu_finalize_init() earlier
    7e270cebaffd init: Remove check_bugs() leftovers
    285384ac24c3 um/cpu: Switch to arch_cpu_finalize_init()
    6ea421786426 sparc/cpu: Switch to arch_cpu_finalize_init()
    21a1fc8d13d8 sh/cpu: Switch to arch_cpu_finalize_init()
    dfeb371a2707 mips/cpu: Switch to arch_cpu_finalize_init()
    4baf46a3ba00 m68k/cpu: Switch to arch_cpu_finalize_init()
    8c8165cd25cf ia64/cpu: Switch to arch_cpu_finalize_init()
    de8c592cc5a1 ARM: cpu: Switch to arch_cpu_finalize_init()
    75da6209d3ba x86/cpu: Switch to arch_cpu_finalize_init()
    0774fc2177c3 init: Provide arch_cpu_finalize_init()

(From OE-Core rev: 50889a1a67a33d1d42f4095d323e4c73ca22c2c8)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:26 -10:00
Joe Slater
2854a664cc file: fix call to localtime_r()
Depending on the version of glibc, localtime_r() must
be preceded by a call to tzset() or it will ignore any
value of TZ in the environment.  This problem will only
be seen when building file-native on outdated hosts.

(From OE-Core rev: c99d7fc46a1070b1c659ed16fbff6a3553aaf209)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 791145f3064d7807630d3591b9e7c7b2dc37152c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:26 -10:00
Colin McAllister
1f28cde891 libwebp: Fix CVE-2023-5129
Add patch for Libwebp 1.3.1 to fix CVE-2023-5129.

(From OE-Core rev: 852068debb268669699ad9a8dbe44907a19aa482)

Signed-off-by: Colin McAllister <colinmca242@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:26 -10:00
Yash Shinde
bd19b162aa glibc: fix CVE-2023-4806
Upstream-Status: Backport [https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=973fe93a5675c42798b2161c6f29c01b0e243994]

(From OE-Core rev: 7591adeb37f9156266ef98b639073e986e3a49f5)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-04 05:21:26 -10:00
Roland Hieber
a61e021c65 ref-manual: point outdated link to the new location
(From yocto-docs rev: 08e04026d57450ea9496cdf8bf50c2f1fb033af5)

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Roland Hieber
452b89685d template: fix typo in section header
(From yocto-docs rev: 3afbb4b438f306c22ab15d8b64cdd1161c282703)

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
175ff0b5fa dev-manual: licenses: mention SPDX for license compliance
(From yocto-docs rev: 7082ce69f50094052df6e6134eb74c2721ecf147)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
CC: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
c50eae0a3e contributor-guide: recipe-style-guide: add Upstream-Status
(From yocto-docs rev: 52459e2ee09d5e79bacb69b64cb7755ddc8082ab)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
452511f674 dev-manual: new-recipe.rst fix inconsistency with contributor guide
This document was suggesting a way to version pre-releases
which doesn't match the latest recommendations from the
contributor guide.

(From yocto-docs rev: bb74a9f83b84fa0d2836ed09175cac3c671b1042)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
473d725a5f dev-manual: disk-space: improve wording for obsolete sstate cache files
Replace "duplicate" by "obsolete", more appropriate.
"duplicate" probably comes from the "--remove-duplicated"
option of the sstate-cache-management.sh script.

Improve other sentences too.

(From yocto-docs rev: e893d66999a97732780ff2b1ba6fb7e6e9d2eff7)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Richard Purdie <richard.purdie@linuxfoundation.org>
CC: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Michael Opdenacker
20bbfa89c3 sdk-manual: extensible.rst: fix multiple formatting issues
Take advantage of this edit to also fix alignment
issues in the sources.

(From yocto-docs rev: 6d17f91c3078b5aeb6fa4acab8c9a0ff8e962fa5)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Jaeyoon Jung
cd0c6173a3 cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig
Variable overrides in KCONFIG_CONFIG_COMMAND do not work as expected due
to double quote mismatches. The issue is reproducible in an environment
where gold is the default linker. Below is an example snippet of
run.do_terminal generated by do_menuconfig.

do_terminal() {
exec sh -c "make menuconfig   CC="aarch64-webos-linux-gcc ..."
LD="aarch64-webos-linux-ld.bfd ..."
...
}

Although LD override is set to bfd correctly, it is not passed to make
and make menuconfig ends up with messages like:
| gold linker is not supported as it is not capable of linking the kernel proper.
| scripts/Kconfig.include:56: Sorry, this linker is not supported.

(From OE-Core rev: 9c483765db762dbe8020423c8778518612b7e5f7)

(From OE-Core rev: 75f8485d7862b08e2f96f919e992d203df6c8d9c)

Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d4664d2b79)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Chen Qi
6e379bfb8e gcc-crosssdk: ignore MULTILIB_VARIANTS in signature computation
The gcc_multilib_setup function is a function that is run at the
do_configure step, so it's counted into the signature computation.
The MULTILIB_VARIANTS this function uses is also extracted to be
taken into consideration. After the change of setting MULTILIB_VARIANTS
explictly vardeps on MULTILIBS, the change of MULTILIBS changes the
signature, thus causing rebuilding. However, in case of gcc-crosssdk,
the setting of multilib should have no effect on it, as it's used
to build nativesdk packages, not the target packages. So ignore
MULTILIB_VARIANTS in signature computation. This fixes oe-selftest
case sstatetests.SStateHashSameSigs2.test_sstate_nativesdk_samesigs_multilib.

(From OE-Core rev: 537c71162a711dec32a63a657c4b101269a3e267)

(From OE-Core rev: 6b87f7c9e955abe5833820ee7eda9d525c77d2ea)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Chen Qi
8420a581fd multilib.conf: explicitly make MULTILIB_VARIANTS vardeps on MULTILIBS
This patch is to ensure recipes get rebuilt correctly and avoid
incorrect sstate cache reuse when toggling multilib.

The following steps show one example of such incorrect sstate cache reuse.
1. enable multilib && bitbake <some_image> -c populate_sdk
2. disable multilib && bitbake <some_image> -c populate_sdk

The error message is as below:
Error:
 Problem: conflicting requests
   - nothing provides binutils-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
   - nothing provides gcc-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
   - nothing provides gdb-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk
 (try to add '--skip-broken' to skip uninstallable packages)

We get this error because packagegroup-cross-canadian recipe is
not rebuilt when it should be.

Current codes have tracked the dependency to MULTILIB_VARIANTS, as
shown in the following chain:
RDEPENDS:packagegroup-cross-canadian-intel-x86-64 ->
all_multilib_tune_values -> MULTILIB_VARIANTS.

However, MULTILIB_VARIANTS cannot automatically depend on MULTILIBS.
See some results from 'bitbake-dumpsigs' below:
List of dependencies for variable MULTILIB_VARIANTS is ['extend_variants']
Variable MULTILIB_VARIANTS value is ${@extend_variants(d,'MULTILIBS','multilib')}

It's obvious that the value of MULTILIB_VARIANTS depend on the
value of MULTILIBS, so let's set this dependency manually.

(From OE-Core rev: 9f47d8eb51816d16078a23c0cef4d697555f913f)

(From OE-Core rev: 8ed254dd5e44d0685e5b952f724af08d75ce3d9d)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Lee Chee Yang
6b44e2fb62 ffmpeg: 5.1.2 -> 5.1.3
drop patch which is already part of 5.1.3.

0001-avcodec-rpzaenc-stop-accessing-out-of-bounds-frame.patch(CVE-2022-3964):
1eb002596e

0001-avcodec-smcenc-stop-accessing-out-of-bounds-frame.patch(CVE-2022-3965):
293dc39bca

ffmpeg-fix-vulkan.patch :  7268323193

(From OE-Core rev: aeee19cda946b67f33c7b7c02c86513676bc89bd)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:44 -10:00
Lee Chee Yang
9936e86de8 bind: update to 9.18.19
release notes:
https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19

Security Fixes

Previously, sending a specially crafted message over the control channel
could cause the packet-parsing code to run out of available stack
memory, causing named to terminate unexpectedly. This has been fixed.
(CVE-2023-3341)

ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for bringing
this vulnerability to our attention. [GL #4152]

A flaw in the networking code handling DNS-over-TLS queries could cause
named to terminate unexpectedly due to an assertion failure under
significant DNS-over-TLS query load. This has been fixed.
(CVE-2023-4236)

ISC would like to thank Robert Story from USC/ISI Root Server Operations
for bringing this vulnerability to our attention. [GL #4242]

Removed Features

The dnssec-must-be-secure option has been deprecated and will be removed
in a future release. [GL #4263]

Feature Changes

If the server command is specified, nsupdate now honors the nsupdate -v
option for SOA queries by sending both the UPDATE request and the
initial query over TCP. [GL #1181]

Bug Fixes

The value of the If-Modified-Since header in the statistics channel was
not being correctly validated for its length, potentially allowing an
authorized user to trigger a buffer overflow. Ensuring the statistics
channel is configured correctly to grant access exclusively to
authorized users is essential (see the statistics-channels block
definition and usage section). [GL #4124]

This issue was reported independently by Eric Sesterhenn of X41 D-Sec
GmbH and Cameron Whitehead.

The Content-Length header in the statistics channel was lacking proper
bounds checking. A negative or excessively large value could potentially
trigger an integer overflow and result in an assertion failure. [GL

This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH.

Several memory leaks caused by not clearing the OpenSSL error stack were
fixed. [GL #4159]

This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH.

The introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs
UPDATE policies accidentally caused named to return SERVFAIL responses
to deletion requests for non-existent PTR and SRV records. This has been
fixed. [GL #4280]

The stale-refresh-time feature was mistakenly disabled when the server
cache was flushed by rndc flush. This has been fixed. [GL #4278]

BIND’s memory consumption has been improved by implementing dedicated
jemalloc memory arenas for sending buffers. This optimization ensures
that memory usage is more efficient and better manages the return of
memory pages to the operating system. [GL #4038]

Previously, partial writes in the TLS DNS code were not accounted for
correctly, which could have led to DNS message corruption. This has been
fixed. [GL #4255]

Known Issues

There are no new known issues with this release. See above for a list of
all known issues affecting this BIND 9 branch.

(From OE-Core rev: 663397edba278184a736e97aa602d3f96d2d937a)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Wang Mingyu
87a2a74faf bind: upgrade 9.18.17 -> 9.18.18
Changelog:
============
 Deprecate the 'dialup' and 'heartbeat-interval' options.
 Ignore 'max-zone-ttl' on 'dnssec-policy insecure'.
 Return REFUSED to GSS-API TKEY requests if GSS-API support is not configured.
 Mark a primary server as temporarily unreachable if the TCP connection attempt times out.
 Don't process detach and close netmgr events when the netmgr has been paused.

(cherry-pick from commit e78ec619beea6e541b2d83a5dc845ce57ff12564)

(From OE-Core rev: 3cb92c8746f589ef74e337e5866378e04a8133ef)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Narpat Mali
22af10c1b1 python3-git: upgrade 3.1.32 -> 3.1.37
The delta between 3.1.32 & 3.1.37 contains the CVE-2023-40590 and
CVE-2023-41040 fixes and other bugfixes.

Changelog:
==========
- WIP Quick doc by @LeoDaCoda in #1608
- Partial clean up wrt mypy and black by @bodograumann in #1617
- Disable merge_includes in config writers by @bodograumann in #1618
- feat: full typing for "progress" parameter in Repo class by @madebylydia in #1634
- Fix CVE-2023-40590 by @EliahKagan in #1636
- #1566 Creating a lock now uses python built-in "open()" method to work arou… by @HageMaster3108 in #1619
- util: close lockfile after opening successfully by @skshetry in #1639
- Bump actions/checkout from 3 to 4 by @dependabot in #1643
- Fix 'Tree' object has no attribute '_name' when submodule path is normal path by @CosmosAtlas in #1645
- Fix CVE-2023-41040 by @facutuesca in #1644
- Only make config more permissive in tests that need it by @EliahKagan in #1648
- Added test for PR #1645 submodule path by @CosmosAtlas in #1647
- Fix Windows environment variable upcasing bug by @EliahKagan in #1650
- Improve Python version and OS compatibility, fixing deprecations by @EliahKagan in #1654
- Better document env_case test/fixture and cwd by @EliahKagan in #1657
- Remove spurious executable permissions by @EliahKagan in #1658
- Fix up checks in Makefile and make them portable by @EliahKagan in #1661
- Fix URLs that were redirecting to another license by @EliahKagan in #1662
- Assorted small fixes/improvements to root dir docs by @EliahKagan in #1663
- Use venv instead of virtualenv in test_installation by @EliahKagan in #1664
- Omit py_modules in setup by @EliahKagan in #1665
- Don't track code coverage temporary files by @EliahKagan in #1666
- Configure tox by @EliahKagan in #1667
- Format tests with black and auto-exclude untracked paths by @EliahKagan in #1668
- Upgrade and broaden flake8, fixing style problems and bugs by @EliahKagan in #1673
- Fix rollback bug in SymbolicReference.set_reference by @EliahKagan in #1675
- Remove @NoEffect annotations by @EliahKagan in #1677
- Add more checks for the validity of refnames by @facutuesca in #1672

Note that the changes to the license file are just removal of excess whitespace
(the extra blank line at the end, and spaces appearing at the end of lines).

References:
https://github.com/gitpython-developers/GitPython/releases
https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst
e1af18377f

(From OE-Core rev: 931af3758a2d79aea534ab6d23db392ede7cc1bb)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Yash Shinde
516a45c114 glibc: fix CVE-2023-4527
Upstream-Status: Backport[https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=4ea972b7edd7e36610e8cde18bf7a8149d7bac4f]

(From OE-Core rev: 04926dc555a0a75cd2c59729b351a997b018cdbc)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Ross Burton
75a96da596 linux-yocto: update CVE exclusions
(From OE-Core rev: 51ce40e9f994bcce5cd484dff5346b4dd2bff1fc)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Sanjay Chitroda
529fa41487 curl: Add CVE-2023-28320 follow-up fix
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-28320
https://security-tracker.debian.org/tracker/CVE-2023-28320

Upstream Patch:
Introduced by: https://github.com/curl/curl/commit/3c49b405de4f (curl-7_9_8)
Fixed by: https://github.com/curl/curl/commit/13718030ad4b (curl-8_1_0)
Follow-up: https://github.com/curl/curl/commit/f446258f0269 (curl-8_1_0)

(From OE-Core rev: 5d6d4768693f9baa9b801e87d4d2aed0d9792613)

Signed-off-by: Sanjay Chitroda <sanjay.chitroda@einfochips.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-29 04:33:43 -10:00
Chen Qi
0fb8a7bac1 cmake.bbclass: fix allarch override syntax
The override syntax should be ":allarch" instead of "_allarch".

(From OE-Core rev: 72d3ecb22fea59d2520997b3f0a0651557d69ae7)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bea74c9942a3bb4f71aca0f722b4a7306ae52fb4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Richard Purdie
e031f2e336 vim: Upgrade 9.0.1664 -> 9.0.1894
This includes multiple CVE fixes.

The license change is due to changes in maintainership, the license
itself is unchanged.

(From OE-Core rev: a90e3d1bac7c965e357103c05bf31fd804b87c0b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 91e66b93a0c0928f0c2cfe78e22898a6c9800f34)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Archana Polampalli
fdeb73d660 vim: upgrade 9.0.1592 -> 9.0.1664
Fixes:
https://nvd.nist.gov/vuln/detail/CVE-2023-3896
8154e642a (tag: v9.0.1664) patch 9.0.1664: divide by zero when scrolling with 'smoothscroll' set

(From OE-Core rev: a63a84591bdfc7bb0a7ae125a47122f3693a1334)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4a1ab744142c9229f03a359b45e5e89a1fbae0d3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Yogita Urade
190a134f8e qemu: fix CVE-2023-3354
A flaw was found in the QEMU built-in VNC server. When a client connects
to the VNC server, QEMU checks whether the current number of connections
crosses a certain threshold and if so, cleans up the previous connection.
If the previous connection happens to be in the handshake phase and fails,
QEMU cleans up the connection again, resulting in a NULL pointer dereference
issue. This could allow a remote unauthenticated client to cause a denial
of service.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-3354

(From OE-Core rev: 8f0b34f7ad5ef842d60c9b93ce2c6142d3249890)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Martin Jansa
6ebb52f027 gcc: backport a fix for ICE caused by CVE-2023-4039.patch
* see:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111418
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111411

(From OE-Core rev: c49f6b9dc8436322359029fecb90b23d639a2100)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Ross Burton
992074032e gcc: Fix -fstack-protector issue on aarch64
This series of patches fixes deficiencies in GCC's -fstack-protector
implementation for AArch64 when using dynamically allocated stack space.
This is CVE-2023-4039.  See:

https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf

for more details.

(From OE-Core rev: 0cb253565c863aa1f677084a440294fe2a03beb0)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Siddharth Doshi
42d270eeed gdb: Fix CVE-2023-39128
Note: The Fix needs to be pushed in gdb rather than bintuils-gdb as we are
disabling gdb in binutils configure.

Upstream-Status: Backport from [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=033bc52bb6190393c8eed80925fa78cc35b40c6d]
CVE: CVE-2023-39128
(From OE-Core rev: 173d7ab67f14fc6d8b5d46e1c1de39d20965d6e9)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Sanjana
192ba3d46c binutils: Fix CVE-2023-39128
Avoid buffer overflow in ada_decode.

(From OE-Core rev: a6587352b4d204134443430b2ddc605f25a5ae3f)

Signed-off-by: Sanjana <sanjanasanju1608@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Yogita Urade
31176477ce dropbear: fix CVE-2023-36328
Integer Overflow vulnerability in mp_grow in libtom libtommath before
commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to
execute arbitrary code and cause a denial of service (DoS).

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-36328
https://github.com/libtom/libtommath/pull/546

(From OE-Core rev: e2fe2c2066b066b1561eaba7bd7f27d4079c3cd6)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-20 05:23:02 -10:00
Michael Opdenacker
2bd4e2392b dev-manual: disk-space: mention faster "find" command to trim sstate cache
[YOCTO #15182]

(From yocto-docs rev: 0bcd2ca98870f4d5bb8c2677fda260da548787d6)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Yoann CONGAL <yoann.congal@smile.fr>
Reported-by: Randy MacLeod <randy.macleod@windriver.com>
Reported-by: Josef Holzmayr <jester@theyoctojester.info>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Opdenacker
1c54f85cf9 manuals: add new contributor guide
(From yocto-docs rev: 77f20d1594db42818aac9a7a92865def8fb7ec36)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Yoann Congal
ca4a09f897 dev-manual: remove unsupported :term: markup inside markup
":term:`Initramfs`" in bold text appears verbatim (no link is created).

The term link is present elsewhere in the text so remove the extra
markup.

(From yocto-docs rev: fc8e220290414dab45299d0ac829c8c461b1903c)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Opdenacker
da107c5031 ref-manual: system-requirements: update supported distros
- Update according to changes in SANITY_TESTED_DISTROS
  (meta-poky/conf/distro/poky.conf)

- No longer declare as "Supported" the distributions versions
  which are End of Life for their vendors, as some of them
  (Ubuntu for example) ship updates to subscribers only,
  which the Yocto Project has no access to.

- List distribution versions which were previously tested
  for the branch of the Yocto Project being considered.

(From yocto-docs rev: fd5113b7e20844a44a2c9da37e1bc10034d46cfe)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Lee Chee Yang
654df67339 migration-guides: add release notes for 4.0.12
(From yocto-docs rev: b84954c7d53fe86d6228a2450de5c0d9ea9f0960)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Lee Chee Yang
89afc321b5 migration-guides: add release notes for 4.2.3
(From yocto-docs rev: d81b671a7868903b60035ba56a05c714b0d731f1)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Michael Halstead
40b0b3989c yocto-uninative: Update to 4.3
Add in stable updates to glibc 2.38 to fix malloc bugs

(From OE-Core rev: 055b7acd73a591cb529629a780558cc0f5b19456)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 39f987fcb20ad7c0e45425b9f508d463c50ce0c1)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Sakib Sajal
1b98e3f744 go: upgrade 1.20.6 -> 1.20.7
Upgrade to latest 1.20.x release [1]:

$ git log --oneline go1.20.6..go1.20.7 origin/release-branch.go1.20
adb775e309 (tag: go1.20.7, origin/release-branch.go1.20) [release-branch.go1.20] go1.20.7
659f2a2207 [release-branch.go1.20] crypto/tls: restrict RSA keys in certificates to <= 8192 bits
10d85fa0f6 [release-branch.go1.20] cmd/asm, cmd/internal/obj: generate proper atomic ops for riscv64
bd3a1f24e7 [release-branch.go1.20] net: tolerate permission errors in interface tests
6211a024b4 [release-branch.go1.20] cmd/compile: on PPC64, fix sign/zero extension when masking

[1] https://github.com/golang/go/compare/go1.20.6...go1.20.7

Upgrade include fix for CVE-2023-29409 CVE-2023-39533

(cherry picked from commit 039324d917ed124228a14ac1effdd66b27d9e82b)

(From OE-Core rev: 8397964d5a8d995a06c5c2a34883047546edc077)

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:26 -10:00
Chee Yang Lee
6ae9654ab5 python3: update to 3.11.5
upgrade include fix for CVE-2023-40217

Release notes:
https://docs.python.org/3/whatsnew/changelog.html#python-3-11-5-final

(From OE-Core rev: 4a3e3042a0cef3a215d286b0f32be293c3948d1e)

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Alexander Kanavin
8b372c7d4e python3: update 3.11.3 -> 3.11.4
upgrade include fix for CVE-2023-24329

(cherry picked from commit f7f163ebe8c53de4314d04595c1fbcc7af2deccc )

(From OE-Core rev: 8687de9f20bde7aba118a50342848031adfb7641)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Alexander Kanavin
b2e008f2d4 python3: upgrade 3.11.2 -> 3.11.3
(cherry picked from commit 7d5bb3a4690ef61a1fee21773b4717e829789e32)

(From OE-Core rev: a991fe85dca51ddf36994666e14e69839dd694b2)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Kai Kang
1b290ab11c webkitgtk: fix CVE-2023-32435
Backport and rebase patch to fix CVE-2023-32435 for webkitgtk 2.38.6:

* drop the patches for the files WasmAirIRGenerator64.cpp and
  WasmAirIRGeneratorBase.h which are involved in 2.40.0
* drop test cases as well

CVE: CVE-2023-32435

(From OE-Core rev: c54f98d35f2cb276dc49a5ccd4813ccc34c6f668)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Kai Kang
97e50bbe64 webkitgtk: fix CVE-2023-32439
Backport patch to fix CVE-2023-32439 for webkitgtk.

CVE: CVE-2023-32439

(From OE-Core rev: 71edb4ec115208950ae5da5305b5fd75823121ec)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Yogita Urade
1dc70a8da5 nghttp2: fix CVE-2023-35945
Envoy is a cloud-native high-performance edge/middle/service
proxy. Envoy’s HTTP/2 codec may leak a header map and
bookkeeping structures upon receiving `RST_STREAM` immediately
followed by the `GOAWAY` frames from an upstream server. In
nghttp2, cleanup of pending requests due to receipt of the
`GOAWAY` frame skips de-allocation of the bookkeeping structure
and pending compressed header. The error return [code path] is
taken if connection is already marked for not sending more
requests due to `GOAWAY` frame. The clean-up code is right after
the return statement, causing memory leak. Denial of service
through memory exhaustion. This vulnerability was patched in
versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-35945
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r

(From OE-Core rev: 18277a43f7fd6522a67f194f40595bc378468733)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Chee Yang Lee
643cbec1d9 libssh2: fix CVE-2020-22218
(From OE-Core rev: ff2288cd466c46c4e2cac24498b260037dba5071)

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-13 06:21:25 -10:00
Etienne Cordonnier
eaadbc79bb vim: update obsolete comment
vim 8.3 has been out for a long time, so this comment is obsolete.
However we still need UPSTREAM_VERSION_UNKNOWN, since we ignore
the last digit of the upstream version number.

Test result:
$ devtool check-upgrade-status vim
  ...
  INFO: vim                       9.0.1592        UNKNOWN         Tom Rini <trini@konsulko.com> c0370529c027abc5b1698d53fcfb8c02a0c515da

(From OE-Core rev: 65f5de85c3f488136d1ec2b1f7fe8d8426d6c5b3)

(From OE-Core rev: 981fa51afe040550c7c351fff028553d4bbbd1ca)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 868a19357841470eb55fb7f1c4ab1af09dea99ed)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-09-04 04:13:25 -10:00