mirror of
https://git.yoctoproject.org/poky
synced 2026-09-12 06:49:32 +02:00
586e5ddf269e701828d989f9ac421109e6c08ae6
76364 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Roland Kovacs
|
586e5ddf26 |
gnutls: Backport fix for CVE-2026-33846
Backport patch [1] referenced in [2]. The difference in upstream and the backport is skipping of intermediate patch [3] which essentially just aliases `session->internals.handshake_recv_buffer -> recv_buf'. NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-33846 [1] |
||
|
Peter Marko
|
260984ba5e |
busybox: patch CVE-2024-58251
Pick patch applied by Debian [1]. I did not find any reference on busybox mailing list that this patch was submitted. Submitting patch for someone else would be inappropriate, and busybox is currently known to be very inactive, hence the unwanted Pending Upstream-Status status. Also note that the related busybox bugreport [2] is currently not public, so it is possible that it was submitted there. [1] https://sources.debian.org/patches/busybox/1:1.37.0-10.1/netstat-sanitize-argv0-for-p-CVE-2024-58251.patch/ [2] https://bugs.busybox.net/show_bug.cgi?id=15922 (From OE-Core rev: 6c0b6e39336686590820dce96913f143a45edadf) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Chen Qi <Qi.Chen@windriver.com> (cherry picked from commit 7261144785aa508377c995e52d7e2410a814f00b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> (cherry picked from commit 8f344d46b96fb16632501749dc39b97aa3e11836) Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
b13a89f19d |
python3-git: fix CVE_PRODUCT
Using the pypi.bbclass default CPE of python:GitPython detects no CVEs. With CVE_PRODUCT = "gitpython_project:gitpython" we properly detect 9 CVEs, with 4 unpatched. WARNING: python3-git-3.1.42-r0 do_cve_check: Found unpatched CVEs: CVE-2026-42215, CVE-2026-42284, CVE-2026-44243, CVE-2026-44244 Note: The original commit targeted python3-git_3.1.43.bb. This is adjusted for Scarthgap, where the recipe version is 3.1.42. (From OE-Core rev: 0c9e81e2b248c15054c8a847f043aea994b8adbe) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3a6af75a33b4e007f0d3a247b6a149e32d51e510) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Hetvi Thakar
|
ba7e6744c6 |
libssh2: Fix CVE-2026-58051
Backport the upstream fix for CVE-2026-58051 using the
commit in [1].
The CVE advisory [2] describes an uninitialized
publickey-list entry cleanup issue affecting libssh2
through 1.11.1.
[1]
|
||
|
Bruce Ashfield
|
1cd648c9ed |
linux-yocto/6.6: fix tiny build
Integrating the following commit(s) to linux-yocto/6.6:
1/1 [
Author: Bruce Ashfield
Email: bruce.ashfield@gmail.com
Subject: pinctrl: core: include gpio/driver.h for struct gpio_chip
Date: Tue, 18 Aug 2026 14:34:22 -0400
Stable commit f53dd26462b8e ("pinctrl: remove pinctrl_gpio_direction_output()")
[ upstream 45d2055b0067 ] changed pinctrl_gpio_direction_input/output() to take
a struct gpio_chip * and dereference gc->base. Those functions are compiled
unconditionally, but in 6.6 core.c the struct gpio_chip definition is only
pulled in via "../gpio/gpiolib.h" under #ifdef CONFIG_GPIOLIB. Configurations
with CONFIG_PINCTRL=y and CONFIG_GPIOLIB=n (e.g. linux-yocto-tiny on x86, built
with --allnoconfig) therefore fail to build:
drivers/pinctrl/core.c: error: invalid use of undefined type 'struct gpio_chip'
Include <linux/gpio/driver.h> directly so struct gpio_chip is always a complete
type, matching how mainline core.c has included it since commit ec963d04ca865
("pinctrl: provide new GPIO-to-pinctrl glue helpers"), present in 6.12/6.18 but
not 6.6.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]
(From OE-Core rev: fb5ca655981bdae70aefda823a5bdb9fd01b137a)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Bruce Ashfield
|
b03c6042db |
linux-yocto/6.6: update to v6.6.151
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
d27334b2888c1 Linux 6.6.151
5b75a6e292b82 usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path
da302460e1516 drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info
dcaba7b281724 ALSA: hda: codecs: hdmi: disable keep-alive before audio format change
84351f1239034 drm/i915/hdcp: check streams[] bounds before overflow
d7bec2276b606 drm/i915/hdcp: require monotonically increasing seq_num_v
214b63a6df022 drm/i915/hdcp: Move to using intel_display in intel_hdcp
d1ba0459d8d0c drm/i915/hdcp: migrate away from kdev_to_i915() in bind/unbind
b02ed4c9099a6 drm/i915/fbc: Extract intel_fbc_has_fences()
c6eb2d615210b sctp: close UDP tunnel sockets during netns teardown
d2c3760b45f2f mptcp: pm: userspace: fix use-after-free in get_local_id
6b6dcc679df19 mptcp: pm: use addr entry for get_local_id
19b0ae625755d mptcp: add mptcp_userspace_pm_lookup_addr helper
805b79892a92f mptcp: pm: avoid code duplication to lookup endp
cb9c9ec479e0b ceph: fix refcount leak in ceph_readdir()
2cda8a74c91de ceph: print cluster fsid and client global_id in all debug logs
c30406c39a665 libceph: add doutc and *_client debug macros support
bf5c4a8b24acb can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
1107f5959c035 can: use skb hash instead of private variable in headroom
66700c0719675 sctp: avoid auth_enable sysctl UAF during netns teardown
ac649bd51e7fc sysctl: treewide: constify ctl_table_header::ctl_table_arg
c268331845ee0 wifi: brcmfmac: drain bus_reset work on device removal
1335161f85026 wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
b516ac892bcb3 wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)
64af6534a085f wifi: ath6kl: fix use-after-free in aggr_reset_state()
47ef04cd13d38 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
fa00d8070d85d media: v4l: async: Set owner for async sub-devices
e38f054f0af98 netfilter: nf_tables: clone set on flush only
d94b82d452ca2 rxrpc: Fix irq-disabled in local_bh_enable()
f9fa11cdd5bf2 media: imx219: Fix maximum frame length in lines
af4fd77d3430f media: i2c: imx219: Rename VTS to FRM_LENGTH
b0f5471b0a69a media: i2c: imx219: Calculate crop rectangle dynamically
cdeb114ed964c media: i2c: imx219: Group functions by purpose
f2f85e5ff17e3 media: i2c: imx219: Drop IMX219_VTS_* macros
bc24c30f403a2 media: i2c: imx219: Don't store the current mode in the imx219 structure
912762e93e6d2 media: i2c: imx219: Access height from active format in imx219_set_ctrl
6598ac1721c3a drm/i915/vrr: require valid min/max vfreq for VRR
c8420f048c152 drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()
aa31b60d6c4ec drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions
926a4e2301060 drm/tegra: fbdev: Remove offset into framebuffer memory
d6c50b6605db0 drm/fb-helper: Allocate and release fb_info in single place
07f8aaffee705 usb: typec: ucsi: Fix race condition and ordering in port unregistration
c888e052a09ef usb: typec: ucsi: split connector lock classes
3a9e3344d1e51 usb: typec: ucsi: Only enable supported notifications
3118bb872c7df usb: gadget: f_tcm: synchronize delayed set_alt with teardown
f5307073303ad drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
4c37112f1af90 drm: renesas: Move RZ/G2L MIPI DSI driver to rz-du
eed56f105a7f7 usb: musb: omap2430: Do not put borrowed of_node in probe
e56ccb286bc48 usb: musb: omap2430: clean up probe error handling
bbd2a25bbb415 Revert "ia64: Make acpi_cpufreq_cpu_exit return void"
16da33cb36e66 gpio: pch: use raw_spinlock_t for the register lock
95f702e372964 firmware: stratix10-svc: fix memory leaks and list corruption bugs
be106f7855f03 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
69cb5825d9988 mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
6277e85777710 iommu/sva: move x86 disable check before allocation
9de51b5dbcdfd ata: ahci: Make ahci_ignore_port() handle empty mask_port_map
0158829969820 ata: libahci_platform: Do not set mask_port_map when not needed
95b3f23d63249 HID: logitech-dj: Fix maxfield check in DJ short report validation
b517ca5c6346f spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX
4e0f669e2951b drm/vmwgfx: validate external BO copy bounds for both stride paths
1bbe7751f5eba drm/vmwgfx: use check_add_overflow for shader size+offset bound
036e16ada9538 drm/vmwgfx: bound DMA command body size against suffix pointer
2666cddf0dd21 drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
c1c22fca0a089 drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
7eae011829f94 drm/vmwgfx: reject DX_BIND_QUERY without a DX context
21bbe38faee4a drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
2040b7e39027c drm/amdkfd: hold event_mutex while checkpointing CRIU events
dec688cfa18c3 drm/amdkfd: Handle invalid event type in CRIU event restore
8924e2594a15b drm/amdkfd: fix QID bit leak in pqm_create_queue()
ce813614f63b0 drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
668441cff9e05 drm/amdgpu: cap GTT size to physical RAM on APUs
ef3fa445edc03 drm/amdgpu: restore UMD profile pstate after runtime resume
8112f0a9396e3 drm/mediatek: ovl_adaptor: balance component registrations
f5802be65535f drm/vc4: Zero the tile state data array before each BIN job
2f2291a119e9a drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
13bd7cf63610a drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs
3c9d12561601f can: ctucanfd: mark error-active controller status valid
4c453560d3c29 can: ctucanfd: handle bus error interrupts
4a666e648c6bd can: ctucanfd: unmap BAR0 using base address
bfc20e429de9b can: ctucanfd: use self-test mode for PRESUME_ACK
5bdd69e8301b1 can: ctucanfd: add missing MODULE_DEVICE_TABLE()
6067c878e38d0 can: peak_usb: validate uCAN receive record lengths
525640b93d3e5 can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
825c903ca3c98 can: peak_usb: add bounds check for USB channel index
ae588e5b9cc26 can: softing: fw_parse(): validate firmware record spans
695aea154bb2d can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
b954b108891e5 can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
30b0b76918834 can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking
194d67e92197e can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
5e2fd705c92e9 can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure
0ef136ba05210 can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
ce8125566b1d0 can: ems_usb: validate CPC message lengths
29bc050802ded can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured
a8a1f9ac3d763 i2c: imx: Cancel hrtimer before clearing slave pointer
b9f6f4883b9ac i2c: imx: Fix slave registration race and error handling
14429dc1c756c i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
2b760e8f0ead0 ice: fix memory leak in ice_lbtest_prepare_rings()
5dd5485189c07 ice: wait for reset completion in ice_resume()
736e972f3f8a3 net: openvswitch: fix skb leak on flow key update failure during ct
27b3eb4fc407e net: openvswitch: fix skb leak on flow key update failure during recirculation
0310d1fa7f9de net: openvswitch: fix potential UAF on meter attach failure
1f1a8ca58641b phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
bf3985016cc09 phy: zynqmp: use read-modify-write for SERDES scrambler bypass
9a83affa2fa14 phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
dd25bd9b0f368 s390/zcrypt: Validate length for CCA ECC private key requests
406b317ea2b50 s390/zcrypt: Validate length for CCA AES cipher key requests
b505dcc8307d6 s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
aca18289c86f2 s390/dasd: Fix undersized format-check buffer
e156c70c505c6 s390/dasd: Fix potential NULL pointer dereference
4e48168825818 s390/qeth: Check CAP_NET_ADMIN for private ioctls
a92df2b3d7a33 power: supply: bq25890: fix the -10 C NTC lookup entry
a57082657fa5b cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
83467180e0579 gpio: pca953x: fix cache_only and IRQ state on restore_context() failure
b7c2c5c886873 i2c: amd-mp2: Unregister callback on adapter add failure
d20f04fb30bdf hwmon: (pmbus/core) notify on the hwmon device, not the i2c client
c985e96fa3e3a hwmon: (npcm750-pwm-fan): stop fan timer on device detach
546221b86ceeb sctp: prevent peer transport count overflow
61baa5020b0af sctp: reject stale cookies with mismatched verification tags
49e5b25a0b74d scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
03bfd969f2f72 selftests/clone3: fix wild pointer access of getline due to missing init
7ecb40609362c selftests/mm: fix potential wild pointer access of getline due to missing init
fc673c4eb23dd spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure
47cef9b4445d2 tracing/filters: Fix false positive match in regex_match_full()
d61ee2a27dfd5 tracing: Check return value of __register_event() in trace_module_add_events()
ee41b00858ca6 ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
42887be7c4cf2 vxlan: use pskb_network_may_pull() in route_shortcircuit()
d08e8ac13f2e2 vxlan: use neigh_ha_snapshot() in route_shortcircuit()
cbb154b2d71ef vxlan: unclone skb head before modifying eth header in route_shortcircuit()
2355c8c26d2aa vxlan: re-fetch eth header after route_shortcircuit()
4b9601595e8b6 um: vector: fix use-after-free in vector_mmsg_rx()
f020d756b3139 powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
6d98c70fe0ba8 net: ipv6: clear suppressed fib6 rule result
159ad90cb929c net: bridge: stop fast-leave after deleting a port group
f978048326570 mm/page_reporting: use system_freezable_wq to fix UAF during suspend
1819f82dee766 binfmt_misc: reject a flag character as the field delimiter
25e5a3fe4f15e wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
d7940bb6a8e7a tipc: avoid use-after-free in poll trace queue dumps
661ff9c0cfbe0 netfilter: ipset: do not update comments from kernel-side hash adds
5a42f162b8570 net/smc: fix socket use-after-free during link group termination
44af98cc7d5ef ipvs: do not propagate one-packet flag to synced conns
31089f4eab42e igbvf: Fix leak in TX DMA error cleanup
5c477b7a205fb e1000: fix memory leak in e1000_probe()
dc390138a0a31 dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
56ac3e7c90f6b ALSA: usb-audio: Clamp frame size in implicit-feedback mode
3852974608f53 ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
29a4c29943631 ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
49eccef6d6e1c ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
3d3339f71807b ata: libata-eh: Increase STANDBY IMMEDIATE timeout
2f840c7980bcf ASoC: tas2562: fix broken entries in the volume lookup table
f56d1aac72394 ASoC: tas2562: fix DVC coefficient write order
e84d2e53a05c7 ALSA: ump: fix double free of out_cvts on rawmidi error
e8b784a3f4fba ALSA: pcm: wake linked drain waiters on unlink
20aad5c443848 ALSA: lx6464es: fix period byte count for 16-bit streams
49bc7741cd276 ALSA: 6fire: Fix UAF at error handling during probe
487e437b8f092 bpf: lwt: Fix dst reference leak on reroute failure
b7ad105d46acd Bluetooth: HIDP: validate numbered report payloads
46ca5ab39737d Bluetooth: HIDP: reject frames without a transaction header
86ed4dd6548cc Bluetooth: mgmt: fix UAF in pair command cancellation
a9e7c2609b0cb Bluetooth: mgmt: fix pending command UAF in EIR updates
c348057dc7066 Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read()
45bf3df5b32e5 audit: fix potential use-after-free in audit_del_rule()
17099fad5ef92 audit: fix potential integer overflow in audit_log_n_string()
93942b5772e0e sctp: validate Adaptation Indication parameter length
f00ef8efd4144 KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
0a95abe964400 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
78d9648e7e960 KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
6664a5aea4531 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
451ee0f9ca1e1 tracing/probes: Reject $arg0 in meta argument expansion
421e447b53c70 mm/vmstat: fold stranded per-cpu node stats when a node comes online
62e1c2741a4d9 mm/hugetlb: fix list corruption in allocate_file_region_entries()
01504da375f5b mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
a583806ae9697 pinctrl: bm1880: add missing select GENERIC_PINCONF
e8b3d09aa8889 erofs: cap LZMA stream pool size
929f6396baade pinctrl: devicetree: don't free uninitialized dev_name on error path
9d5de82acf289 pinctrl: microchip-sgpio: add missing select REGMAP_MMIO
c39643ad99fea rhashtable: clear stale iter->p on table restart
27210d433a8c5 ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
67aaec2a1fdce ksmbd: fix use-after-free in __close_file_table_ids()
fb27b7b7b7bb4 ksmbd: return success for deferred final close
e382a4efeeae6 qede: sync udp_tunnel ports outside qede_lock in the recovery path
228757a2988c6 octeontx2-pf: Set correct sequence for carrier off and tx queue stop
272eafaf16258 net: dsa: mt7530: error out on failed reads in MT7531 PHY polling
aecd00c33b509 accel/qaic: use sizeof(*trans_hdr) for transaction length check
481737704eee0 tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
2ba4c5cc30313 can: isotp: check register_netdevice_notifier() error in module init
128fe7596adcd net: sxgbe: check descriptor ring allocation failures
3563e2486dcd5 net: sxgbe: free TX rings on RX allocation failure
8f7812821ed7a scsi: target: Clear cmd_cnt when initial counter enrollment fails
1b42d05f1c590 scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
107d3d6c17910 scsi: ufs: core: Cancel RTC work in active-active suspend
3c60a8b4037dc scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
ba99aed7bad80 net: phylink: put link_gpio if phylink_create fails
716d47531e740 Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync
64d1645f26aa4 Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
759303b0012cc Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists
c31be902ccbbb Bluetooth: btintel: Validate length before parsing diagnostics TLV
38a9a30614cc7 Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos
fd4c1e301bdec Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
cc1d39946d62b Bluetooth: ISO: clear iso_data always when detaching conn from hcon
68c5b240dba96 hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
ff558072d199c wifi: mac80211: validate individual TWT params before driver setup
961d80c6389d9 powerpc/boot: Fix treeboot-akebono CPU node lookup check
1792fcda01785 powerpc/boot: Fix treeboot-currituck CPU node lookup check
3382cf66522df powerpc/boot: Fix simpleboot CPU node lookup check
ab8549d5b8f02 hwmon: (adt7470) Fix PWM auto temp state array and bounds check
d328175045176 hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
c11d1bc785f2a hwmon: (adt7470) Use cached PWM frequency value
97fac8440c9ae hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
40a3117650f9d hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()
1a42bd72a6620 hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
0c89e5ae2655f hwmon: (adt7470) Fix cache updated before hardware write on I2C error
f114a8aa7905a hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
cf2dcde228456 forcedeth: fix UAF of txrx_stats in nv_remove
b60702104b45d net: bridge: mrp: fix Option TLV length in MRP_Test frames
25b528816f5d8 hwmon: (nct6775-core) Prevent access to unsupported weight registers
f5ecaa7ea7686 net: do not send ICMP/NDISC Redirects when peer allocation fails
70ad543ce81f3 hwmon: (nzxt-smart2) DMA-align output buffer
4eed33c7db5c0 hwmon: (lm90) Only report alarms if driver is ready
9a87dfaa05c3c hwmon: (nct6775-core) Fix number of temperature registers for NCT6116
a7b05d5eefc37 spi: spi-cadence: Move TX FIFO full busy-wait into FIFO
6b0fbc3fb7b71 spi: spi-cadence: supports transmission with bits_per_word of 16 and 32
593636dcdf20e smb: client: fix buffer leaks in SMB1 read and write
e50a6523a6035 scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
c97b5265cc477 scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
7567f06abdefb scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
870b4535f958a pinctrl-amd: Don't clear S4 wake bits at probe
76dd48886eeeb rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
8e48d7ab1e019 rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
b19b5d2e042c2 netfilter: nft_payload: fix mask build for partial field offload
35c53f9b7839a ipvs: do not mangle ICMP replies for non-first fragments
cdc55d6ca3a8f ipvs: fix places with wrong packet offsets
b3869d9b54e76 ipvs: fix the checksum validations
d1c4acc119ea0 sched: Add task_struct->faults_disabled_mapping
24683fea1f06b netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
55fb23f8bd744 assoc_array: trim the final shortcut word using the current chunk end
bd0f976ef89dc keys: make keyring key-chunk byte order agree with keyring_diff_objects()
d1933e03e8c74 keys: fix out-of-bounds read in keyring_get_key_chunk()
c28d2ae71b706 drm/mediatek: Check CRTC state before freeing
63eea41759fd6 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
8bba4129dc5c0 phy: zynqmp: fix runtime PM leak on probe allocation failure
599516163bb33 phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
badff0ff5b20a phy-zynqmp: Postpone getting clock rate until actually needed
18577e77c2c8a btrfs: zoned: fix deadlock between metadata writeback and transaction commit
c031ef8093f41 ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup
b6f1706afb59f ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
c1fadd611cc58 ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources()
55f3fc9c544c7 ahci: Introduce ahci_ignore_port() helper
e43eb5d7cedf3 ata: libahci_platform: support non-consecutive port numbers
ee53aae5d7d31 ata: sata_mv: accept 1 or 2 resources in platform probe
778ccbded2c87 dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()
27806fe7b9701 dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
9ae18a4b22ac3 pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151
91b40862a0200 thunderbolt: Prevent XDomain delayed work use-after-free on disconnect
35283a7b3468c soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
1c8c6ac4d9f7d HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
968e84f5c0dca HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
b802ff2a0467d HID: logitech-dj: Standardise hid_report_enum variable nomenclature
299d5728a7312 gve: fix Rx queue stall on alloc failure
95651461cf77c net: mpls: initialize rtm_tos in mpls_getroute()
06a1273ce7213 netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge()
da1f7306c8f28 netfilter: nf_conntrack_expect: restore helper propagation via expectation
(From OE-Core rev: addc18b3b8b4c85c7d39bc3cd7fb312f5c4ff183)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Bruce Ashfield
|
09b541c432 |
linux-yocto/6.6: update to v6.6.150
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:
6436c12a2ced8 Linux 6.6.150
6703dba1d14cb x86/bugs: Make Safe-RET robust against interrupt injection
4c34a21ff85ce Revert "x86/bugs: Make Safe-RET robust against interrupt injection"
80dfb0405055d Linux 6.6.149
608c8f5dccaaf x86/bugs: Make Safe-RET robust against interrupt injection
aa0e49877a2e6 Linux 6.6.148
60283726f2845 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
299e2a6eb501c rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link
410f8e562e37d udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
45bd023c7a4ec ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
62f61129621ce ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
4b4a3e7ef7bb6 mm/damon/core: disallow overlapping input ranges for damon_set_regions()
b585facbafbb5 mm/damon/core: validate ranges in damon_set_regions()
1d5ad6c5a2109 coredump: fix pidfs file refcount leak in umh_coredump_setup
ce409086174b0 KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
40d790e0e7d01 KVM: Introduce vcpu->wants_to_run
9168176894332 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
96ac6c08f2c19 net: ipa: fix SMEM state handle leaks in SMP2P init
6124bd7850736 net: macb: drop in-flight Tx SKBs on close
4cb4b4dd8853c ata: libata-core: Reject an invalid concurrent positioning ranges count
148d7ec0a3a98 octeontx2-pf: fix SQB pointer leak on init failure
9409e18ffe737 ipmi: fix refcount leak in i_ipmi_request()
07e82e2825e3b bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
3fb2d026fb0de bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
3a4627d4cd977 bootconfig: do not put quotes on cmdline items unless necessary
e9c5b03208507 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
207d3ebf36f65 gpio: mt7621: avoid corruption of shared interrupt trigger state
2636d061bc237 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
e57a4845b0da6 gpio: tegra: do not call pinctrl for GPIO direction
f53dd26462b8e pinctrl: remove pinctrl_gpio_direction_output()
2e276b14b6d37 net: mana: Validate the packet length reported by the NIC
3cfaac77b3c32 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
4714e95f5d61c wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
25acb6711da6f tracing/user_events: Fix use-after-free in user_event_mm_dup()
017ea3f38a2d6 workqueue: Add system_percpu_wq and system_dfl_wq
e0d8c1d9232f0 workqueue: Factor out init_cpu_worker_pool()
a5dd47ea3904d Input: ims-pcu - fix firmware leak in async update
5e7cd480fb691 firmware_loader: introduce __free() cleanup hanler
ac99781115d37 dm-verity: make error counter atomic
949f14390fe48 dm-verity: avoid double increment of &use_bh_wq_enabled
45ead2e598cc8 ovl: use linked upper dentry in copy-up tmpfile
a442c258320b6 NFS: Charge unstable writes by request size, not folio size
98e9a7bfd3a45 nfs: remove dead code for the old swap over NFS implementation
016ef0f6ca4bc i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
9d9c1f10f5642 i2c: imx: separate atomic, dma and non-dma use case
e4908b3bed755 platform/x86: dell-laptop: fix missing cleanups in init error path
14b586152bb49 platform/x86: dell-smbios: Move request functions for reuse
2733b5dcb5a4b dmaengine: dw-edma-pcie: Reject devices without driver data
ac710b2f4f2fe dmaengine: dw-edma: Fix confusing cleanup.h syntax
5cfa46154e0c9 dma: dw-edma: Fix build warning in dw_edma_pcie_probe()
f12885fe1bdb0 taskstats: retain dead thread stats in TGID queries
ee14a2d7f07e0 taskstats: fill_stats_for_tgid: use for_each_thread()
d26f0b293b437 mtd: rawnand: Pause continuous reads at block boundaries
f83ba55179c27 mtd: rawnand: Ensure all continuous terms are always in sync
9db680306555c mtd: rawnand: Add a helper for calculating a page index
8d94813696095 mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages
fc2214723b45d SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
18387968cff28 SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
844520b33c805 sunrpc: allocate a separate bvec array for socket sends
43ffd230b9cc1 NFSD: pass nfsd_file to nfsd_iter_read()
4fee43759b489 netfilter: nft_fib: reject fib expression on the netdev egress hook
7cd3fee7b361e netfilter: nf_tables: remove register tracking infrastructure
363e37bebbbd5 netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
e64a48c50a1ff netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
0d713c11de5da netfilter: nf_conntrack_sip: remove net variable shadowing
5d4d93f9bfbc9 selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
d787e4c3acdf7 lsm: infrastructure management of the sock security
047e813324eac netfilter: nft_set_pipapo: don't leak bad clone into future transaction
744dc9a47a845 netfilter: nft_set_pipapo: move cloning of match info to insert/removal path
fad1685df350f netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone
840daa6bc4d12 netfilter: nft_set_pipapo: merge deactivate helper into caller
8e264996d95f9 netfilter: nft_set_pipapo: prepare walk function for on-demand clone
7583b0d84ca27 netfilter: nft_set_pipapo: make pipapo_clone helper return NULL
dde6b54848a51 netfilter: nft_set_pipapo: move prove_locking helper around
385e2a9360cc6 netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
233f357bf424a ASoC: mediatek: mt8183: Check runtime resume during probe
6e2ee6eacc3ec ASoC: mediatek: mt8192: Check runtime resume during probe
5f2ae0405ff50 ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
074371b2d5b0e ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb
21fc21eb477d8 ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()
e63067d8f4bdb ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()
81051a495a9a2 ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link
fafb2e08741b2 fbdev: efifb: fix memory leak in efifb_probe()
d2ac7ab193810 fbdev/efifb: Replace references to global screen_info by local pointer
e2007df69e606 octeontx2-vf: clear stale mailbox IRQ state before request_irq()
e60543f29ffb7 octeontx2-pf: clear stale mailbox IRQ state before request_irq()
d205563ee9e1e octeontx2: Annotate mmio regions as __iomem
fde25641cbddd VDUSE: avoid leaking information to userspace
680a38322b404 vduse: take out allocations from vduse_dev_alloc_coherent
0a0f90adebc0b vduse: remove unused vaddr parameter of vduse_domain_free_coherent
6b8d37b1998f0 vduse: Use fixed 4KB bounce pages for non-4KB page size
c656e6a312322 rxrpc: Fix socket notification race
dc31e0a74e34a rxrpc: Fix notification vs call-release vs recvmsg
77433b730970c rxrpc: Use irq-disabling spinlocks between app and I/O thread
95051b9f962a7 rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack
12876864f9de5 tipc: restrict socket queue dumps in enqueue tracepoints
03a0e49a2e38e fbcon: Use correct type for vc_resize() return value
43fbdd21723f8 fbcon: Rename struct fbcon_ops to struct fbcon_par
0337cdba0c477 rxrpc: serialize kernel accept preallocation with socket teardown
4a7e71d5bf93c rxrpc: Pull out certain app callback funcs into an ops table
b9f12329ef221 afs: Turn the afs_addr_list address array into an array of structs
815a1eb356f2a afs: Annotate struct afs_addr_list with __counted_by
c071d94d3fb9f serial: max310x: implement gpio_chip::get_direction()
10a9d4fde5478 serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)
a8367b6f84234 ALSA: hda: Fix cached processing coefficient verbs
2874c1ae0640c ALSA: hda: conexant: Remove mic bias threshold override
2ef69871b313a i2c: i801: fix hardware state machine corruption in error path
36eb77f14b4e6 audit: fix recursive locking deadlock in audit_dupe_exe()
df550e88009a6 audit: use 'unsigned int' instead of 'unsigned'
26f32cae6496c audit: widen ino fields to u64
3ff7d33398419 VFS/audit: introduce kern_path_parent() for audit
6709fc381d53f i2c: davinci: Unregister cpufreq notifier on probe failure
16381bda90b26 fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
0db56e7eae932 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
583fa6925df3e udmabuf: Do not create malformed scatterlists
9ceebbd6f9eb5 iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
5337eebdf8c5d bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
d65e397a1fd6e bpf: drop bpf_lsm_getselfattr from hook list
2efa9f57d089a net: pcs: xpcs: fix SGMII state reading
80f7dac8c9f93 io_uring/rw: fix missing ERESTARTSYS conversion in read paths
cafa53d3272c6 drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources
67ce8034dc027 exfat: validate cluster allocation bits of the allocation bitmap
4462ac3d90e89 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
a16eaaf7c0b0c openvswitch: fix GSO userspace truncation underflow
b7cb5bf085547 ksmbd: validate ACE size against SID sub-authorities
6d9d7aa4a2c99 ksmbd: bound DACL dedup walk to copied ACEs
f4fcd0c1a243d ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
e31fada514378 ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
8b386b6a24f61 net: qrtr: ns: Raise node count limit to 512
160d3f0d7a556 ipv6: ndisc: fix NULL deref in accept_untracked_na()
ef40d94114693 i40e: remove read access to debugfs files
67bc3647e418e drm/amdgpu: fix aperture mapping leak
bdfc7f1e0900e drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
52f9a58829643 drm/amdgpu: fix division by zero with invalid uvd dimensions
b1d05cc61dfa6 drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
bbbe6a2a8d8dc drm/amdgpu/vcn4: avoid rereading IB param length
a07430abd556d drm/amdgpu/vce: fix integer overflow in image size
256d6f4803a93 drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
6c8b9c1f03c71 drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
c59b57c2e0c8c drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
ab05af6c345bc drm/amdgpu/gfx8: drop unecessary BUG_ON()
96b6d68f2b5a2 drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
793cdf17ddf9d drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
ff4fc24da7531 drm/amd/pm: make pp_features read-only when scpm is enabled
5bc8fc1d2ff80 vxlan: mdb: Fix source list corruption on a failed replace
b07d87b31631e tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
e6493a4d1ee17 pppoe: reload header pointer after dev_hard_header()
36dc6d6964a3b mctp: serial: handle zero-length frames to prevent rx buffer overflow
5bbf0cd9b6a70 mac802154: llsec: reject frames shorter than the authentication tag
bd7110f0caa32 mac802154: hold an interface reference across the scan worker
896a9512d0d83 ila: reload IPv6 header after pskb_may_pull in checksum adjust
0f33178ec690a ice: use READ_ONCE() to access cached PHC time
5c833074b549e ksmbd: defer destroy_previous_session() until after NTLM authentication
14995c4250f04 rbd: Reset positive result codes to zero in object map update path
c674751ea5918 proc: Fix broken error paths for namespace links
e054dcd990d81 net: hip04: fix RX buffer leak on build_skb failure
3f4fe26c20c30 net/x25: fix use-after-free in x25_kill_by_neigh()
23658b350b410 net/iucv: fix use-after-free of a severed iucv_path
8bb111f87ded6 net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
2abdacc927c92 geneve: require CAP_NET_ADMIN in the device netns for changelink
eb3836eab4748 net: slip: serialize receive against buffer reallocation
b3793d7dccb19 vxlan: require CAP_NET_ADMIN in the device netns for changelink
8d931a75a38b9 phonet: pep: fix use-after-free in pep_get_sb()
ae045ad927c24 iommu/vt-d: Disallow SVA if page walk is not coherent
3d0dd138a06c7 ftrace: Add global mutex to serialize trace_parser access
330249609b707 fscrypt: Add missing superblock check in find_or_insert_direct_key()
b98fad81f1202 fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
e4563e07ef5c9 binfmt_elf_fdpic: only honour the first PT_INTERP
fc1010e7e0204 libceph: remove debugfs files before client teardown
b8a9fb6bf806f libceph: reject zero bucket types in crush_decode
0591a15815b49 libceph: Reject monmaps advertising zero monitors
9d37aec9ffe4e libceph: refresh auth->authorizer_buf{,_len} after authorizer update
c46d82c47afc9 libceph: guard missing CRUSH type name lookup
05c90e059269f libceph: Fix multiplication overflow in decode_new_up_state_weight()
340e0386aa39d libceph: bound get_version reply decode to front len
9081c71796724 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
fedeb4468987b sctp: don't free the ASCONF's own transport in DEL-IP processing
3422658308d16 mptcp: only set DATA_FIN when a mapping is present
3cb65da64af9a mptcp: decrement subflows counter on failed passive join
8e558bcaf1076 Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
8000a5f4d1d19 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
bdf9de52c09e9 tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
da0a33d41409d tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
707720ab00c81 tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
08259252e0d36 tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
f9e6dfe341fb3 tracing: Fix resource leak on mmiotrace trace_pipe close
faaf951351842 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
ddcf2064d7ec5 intel_th: fix MSC output device reference leak
441559d4c595f mei: bus: access mei_device under device_lock on cleanup
1096397c31f6b serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
42710bb9946a0 serial: sc16is7xx: implement gpio get_direction() callback
b061bb4dca49f comedi: comedi_parport: deal with premature interrupt
fac60fefe8766 x86/boot/compressed: Disable jump tables
7344c84e32413 cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
1d6e915400157 LoongArch: Fix oops during single-step debugging
f8b7d5ba99ab0 platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
0f19d54e2524f binfmt_misc: set have_execfd only once the interpreter is opened
c62bb00caba66 exec: fix unsigned loop counter wrap in transfer_args_to_stack()
2894bd8c68e97 Bluetooth: RFCOMM: Fix session UAF in set_termios
e4fa2c5c261d7 Bluetooth: hci_sync: Protect UUID list traversal
e126aaf82380c staging: rtl8723bs: fix inverted HT40 secondary channel offset
b9d9a4cd2e59d staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
b7d1d8cb1bdca wifi: brcmfmac: make release_scratchbuffers idempotent
ef2ee5f820c3e wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
f2a72f47c5fb4 wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
584c8954ad55f wifi: wilc1000: validate assoc response length before subtracting header
eb42c3c8fd479 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
d4558c1407821 wifi: ath6kl: fix OOB access from firmware ADDBA window size
fb40d03ed792a ALSA: seq: close a re-opened queue timer in the destructor
450dbb3024199 media: vpif_capture: fix OF node reference imbalance
a9cd0e8fb0b21 media: vivid: check for vb2_is_busy() when toggling caps
783f26368b7f5 media: vivid: add vivid_update_reduced_fps()
d912d5b14356c media: vimc: fix reference leak on failed device registration
32623707968be media: vidtv: fix reference leak on failed device registration
697b81e9c4b5b media: vb2: use ssize_t for vb2_read/vb2_write
9a998cc1c3487 media: v4l2-ctrls: validate HEVC active reference counts
ef78c8c02a46a media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
4ecf0cc0cf590 media: ti: vpe: unwind v4l2 device registration on probe error
cb0502d299784 media: tegra-video: vi: fix invalid u32 return value in format lookup
4872161e6fbe4 media: sun4i-csi: Return queued buffers on start_streaming() failure
37ff63c5d7119 media: stm32: dcmi: unregister notifier on probe failure
134c979dd721e media: saa7134: Fix a possible memory leak in saa7134_video_init1
465dc8e71d2db media: rtl2832_sdr: Return queued buffers on start_streaming() failure
9acd5bbbe1df8 media: rtl2832: fix use-after-free in rtl2832_remove()
4ca9c9f12b1bc media: radio-si476x: Unregister v4l2_device on probe failure
f2f9fcacd8195 media: pwc: Return queued buffers on start_streaming() failure
a56e7641e09bd media: pwc: Drain fill_buf on start_streaming() failure
46715fecc38a2 media: pci: dm1105: Free allocated workqueue
9ed0184435a16 media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding
690cdda752f3d media: nxp: imx8-isi: Fix potential out-of-bounds issues
ff5f7c2686dc4 media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path
1eee561d764d5 media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure
549dd1afce2cf media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
1d58229b330b7 media: msi2500: Return queued buffers on start_streaming() failure
c6cd08a71a630 media: meson: vdec: Fix memory leak in error path of vdec_open
d59af4652d999 media: marvell-cam: fix missing pci_disable_device() on remove
8fbdca4c99f68 media: cx23885: add ioremap return check and cleanup
a373f1a5137e9 media: cx231xx: fix devres lifetime
2ee8327c85b3a media: cedrus: skip invalid H.264 reference list entries
e6db514875abc media: cedrus: Fix missing cleanup in error path
d7bb9e62c0f28 media: cedrus: clean up media device on probe failure
8e1c938f08e79 media: cec: seco: unregister adapter on IR probe failure
f522a7f05f21a media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
877686a74ecdc media: airspy: Return queued buffers on start_streaming() failure
9f0ee411fc2d7 drm/vc4: Prevent shader BO mappings from becoming writable
5ff94e1279176 drm/vmwgfx: Validate vmw_surface_metadata::array_size
51eeef1949c11 drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
ba8bf1dcbb447 drm/amd/display: set new_stream to NULL after release
f02c9e1588d49 drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
1615811cd365e drm/amdgpu: Fix VFCT bus number matching with soft filter
edd2edaca52ad drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
f014702fbd48d drm/i915/gem: Do not leak siblings[] on proto context error
32c1a2afa90dd drm/i915: Return NULL on error in active_instance
f6212bc1bbd93 drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
01dfea84df919 drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
2eb06c88426b6 drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
9fc2a017c5d59 drm/virtio: bound EDID block reads to the response buffer
f9922828a4ebd drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
790aeed9df5c1 drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips
85eedff5f0c4a drm/amdkfd: Check bounds in allocate_event_notification_slot
ec26f6cdcc0ee drm/radeon: fix r100_copy_blit for large BOs
3ed109a721761 drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
4a27275d27597 drm/i915/gem: Add missing nospec on parallel submit slot
2473ac314387a drm/nouveau: fix reversed error cleanup order in ucopy functions
3f190956404da drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
f0d81d85e7fff drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
4b606f32b38a6 drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
c3fae34d6cb0c drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)
bdf0508b1e678 drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
53937a2787d29 drm/dp/mst: fix buffer overflows in sideband chunk accumulation
22d9f7fc1aaab drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
c18d46d9830c2 drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
f14d66e4b5022 drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
ee762f684eefa bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
2cec93b60e36b ice: fix LAG recipe to profile association
b05b6bd1abf49 net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
f110b4526f576 net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
0317492024148 net/mlx5e: Report zero bandwidth for non-ETS traffic classes
43c287ce77eaf net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
4b95e1f0d6e63 net: qrtr: restrict socket creation to the initial network namespace
9f55eab598de4 hinic: remove unused ethtool RSS user configuration buffers
5d3427016234e ppp: annotate data races in ppp_generic
97562e355e3da ppp: enable TX scatter-gather
1d03e26ef1d7f ppp: convert to percpu netstats
c71962f300912 ppp: use IFF_NO_QUEUE in virtual interfaces
72e2ccfe39633 ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
c34fbb0e85f0f octeontx2-vf: set TC flower flag on MCAM entry allocation
e99309df721e3 net: stmmac: enable the MAC on link up for all supported speeds
b664b326e1674 net: stmmac: reset residual action in L3L4 filters on delete
ba351ae1028df net: stmmac: fix l3l4 filter rejecting unsupported offload requests
f02334a9e378f tipc: fix u16 MTU truncation in media and bearer MTU validation
92492743e9573 iomap: correct the range of a partial dirty clear
667b6e52048ea vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
ec2e157fc9678 sctp: auth: verify auth requirement when auth_chunk is NULL
4528678f70e07 net: dpaa: fix mode setting
f72c312af6c78 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
490011a38f437 net: bridge: vlan: fix vlan range dumps starting with pvid
ec2f2f62e4386 amt: make the head writable before rewriting the L2 header
9005b221cb1f9 amt: re-read skb header pointers after every pull
137e4710da626 wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
2b1882cf313ae wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
4fd85fd237350 wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
b09508dd7bc4a wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
23a2b98e754da wifi: mt76: mt7915: guard HE capability lookups
f9c669d9f4cac tipc: fix infinite loop in __tipc_nl_compat_dumpit
c0936c131a716 nexthop: initialize extack in nh_res_bucket_migrate()
b3c733eaae7f3 gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
54dfe30a562fd selftests: openvswitch: add config file
963b4ee31b1b0 selftests: af_unix: add USER_NS config
eca8949e40612 selftest: af_unix: Add Kconfig file.
def321ca6b32d tls: device: push pending open record on splice EOF
b255d8cd6cc68 sctp: validate stream count in sctp_process_strreset_inreq()
649c6d37a38fb pds_core: check for workqueue allocation failure
646b58b543f3b pds_core: fix auxiliary device add/del races
37924f5c0e955 pds_core: order completion reads after the ownership check
f79c7afdad473 pds_core: yield the CPU while waiting for the adminq to drain
5a365f1e42344 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
a02c0ac672d95 amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
3794cfb80b550 pds_core: reject component parameter in legacy firmware update
70f70a4c419db wifi: mac80211: recalculate TIM when a station enters power save
3078d82e7fe90 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
1e31d2394e0db iommu/amd: Bound the early ACPI HID map
a3f47d7c75dda wifi: mwifiex: bound uAP association event IEs to the event buffer
f4834132773f1 wan: wanxl: Only reset hardware after BAR mapping
6dbd428119cb1 nfp: Check resource mutex allocation
329589417214d wifi: mac80211: tear down new links on vif update error path
ab7faf5a172eb iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
915012e923316 dpaa2-eth: put MAC endpoint device on disconnect
1f4ca61b7a93d dpaa2-switch: put MAC endpoint device on disconnect
1e2e2d9806944 rds: drop incoming messages that cross network namespace boundaries
2a4bad24ac529 bonding: fix devconf_all NULL dereference when IPv6 is disabled
80ec024d53a05 net/packet: avoid fanout hook re-registration after unregister
8de58bfa26e02 Bluetooth: btusb: validate Realtek vendor event length
112525534ab5c hwmon: occ: validate poll response sensor blocks
5b439f39f33ec smb: client: validate DFS referral PathConsumed
7e3abf8ace7f0 hwmon: (asus-ec-sensors) add missed handle for ENOMEM
12111669ba089 hwmon: (asus-ec-sensors) fix EC read intervals
e73827d99021d hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
c035b1198906d usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
0a070d5ad7986 wifi: iwlwifi: mvm: fix read in wake packet notification handler
dafd46a720939 wifi: iwlwifi: mvm: validate SAR GEO response payload size
42a82b509a6d5 ASoC: cs35l56: Use complete_all() to signal init_completion
34c26cc9ab74c ASoC: cs35l56: Fix potential probe() deadlock
cbd3a027f2488 ASoC: cs35l56: Don't use devres to unregister component
3958f6dab9f60 ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
3ddb0d3e36507 ASoC: tas2781: bound firmware description string parsing
92bedc0455552 btrfs: free mapping node on duplicate reloc root insert
646c14273df83 btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
5acfa18de66b6 wifi: carl9170: fix buffer overflow in rx_stream failover path
7ed0dce8613c9 wifi: carl9170: fix OOB read from off-by-two in TX status handler
f74e34e66379e wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
1c690f7c4c5b3 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
69ac7ba3a3df6 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
b7d633c7c9232 firewire: net: Fix fragmented datagram reassembly
d0833f2d44de6 wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
c78424ca50868 wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
69a6a4f60b2da wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
2e47b91b9b402 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
185c0880397ae hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
0975c42ed2a3b hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
e6e1e0f3050d1 hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
e517e207300ed wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
7f184ca38a908 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
6192a3f77c97d usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
f2ac9e32369b4 RISC-V: KVM: Serialize virtual interrupt pending state updates
9aa3b4223df5a Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
7dc44840ca3cf crypto: rsa-pkcs1pad: Don't WARN on an empty digest
d8d18d251049a USB: serial: option: add TDTECH MT5710-CN
1420c23c6d59d USB: serial: keyspan_pda: fix data loss on receive throttling
ee57992c053a6 USB: serial: io_edgeport: cap received transmit credits
f92bdb3df3b2e USB: serial: ftdi_sio: add support for E+H FXA291
4e116372b7a4f usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
1a1d7158420df usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
e07751d0527cc usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
ec52db6cac5df USB: gadget: fsl-udc: fix device name leak on probe failure
29f3cd27ec350 USB: gadget: snps-udc: fix device name leak on probe failure
994afccfdcceb usb: gadget: printer: fix infinite loop in printer_read()
380b4bef46c2e usb: gadget: f_midi: cancel pending IN work before freeing the midi object
e2b2740f1242b usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
fc5cc9e194b96 usb: chipidea: fix usage_count leak when autosuspend_delay is negative
37691a2fe7646 USB: storage: add NO_ATA_1X quirk for Longmai USB Key
e165a1d295e7e wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
d6eee7cd078aa mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
0b4414e43e086 sctp: fix auth_hmacs array size in struct sctp_cookie
531dbb5bb98e5 net/sched: act_tunnel_key: Defer dst_release to RCU callback
f6141a52180e6 drm/i915/selftests: Fix GT PM sort comparators
2c307126ed8e7 ksmbd: validate compound request size before reading StructureSize2
0f72fc9659d7f ksmbd: pin conn during async oplock break notification
b8f591ee8b9f7 can: j1939: fix lockless local-destination check
7ffe529e71274 bpf, sockmap: Reject unhashed UDP sockets on sockmap update
315b7d610b93f powerpc/vtime: Initialize starttime at boot for native accounting
986cb66d37e57 powerpc/time: Prepare to stop elapsing in dynticks-idle
b8c31ebdd22f1 sched/vtime: Get rid of generic vtime_task_switch() implementation
8506eaaa6481b drm/i915/gt: use correct selftest config symbol
437637f5ff3f5 smb/client: handle overlapping allocated ranges in fallocate
5a3945e8dea6c Bluetooth: hci_qca: Clear memdump state on invalid dump size
b56f2ecafc08f Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
8bc83f9ef6789 Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
70354dbb5f72d Bluetooth: qca: fix NVM tag length underflow in TLV parser
fd2049eec99e8 ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
4c6e64cae2b2d ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
29f289ef8b5a0 ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
b99eafbc644b4 ata: sata_dwc_460ex: use platform_get_irq()
fbe7df5d3a3ae ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
4dc0e63abf8bc net/iucv: take a reference on the socket found in afiucv_hs_rcv()
8150b5365f026 ipv4: fib: free fib_alias with kfree_rcu() on insert error path
4bb84e964ff0f ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
91fdc18783459 firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
5143f863f864a ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
0404b5b0f33b5 ASoC: cs42l43: Correct report for forced microphone jack
4cb0783d612ca ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
4b1add0fd9600 ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
20c308d9a5772 wifi: cfg80211: bound element ID read when checking non-inheritance
f50a2b9e57a75 wifi: brcmfmac: initialize SDIO data work before cleanup
be9dfcb0654c1 wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
a17f5d27cca22 wifi: cfg80211: reject unsupported PMSR FTM location requests
44ea65d779e2d wifi: cfg80211: validate PMSR FTM preamble range
642d8373c4c58 wifi: cfg80211: validate PMSR measurement type data
2d372cb06387b wifi: nl80211: validate nested MBSSID IE blobs
fa9592ef7de11 wifi: nl80211: free RNR data on MBSSID mismatch
25c3b85af3fc4 wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
d497b7566e749 wifi: libertas: fix memory leak in helper_firmware_cb()
82c5a30a66e2a wifi: mac80211_hwsim: clamp virtio RX length before skb_put
f75b9a2a9d833 wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
3368457b4871a wifi: cfg80211: cancel sched scan results work on unregister
d9d9cc21cc900 xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
df6856c2dda91 xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
2bc90b4535fd7 RDMA/irdma: Prevent overflows in memory contiguity checks
367958515c99f selftests/alsa: Fix memory leak in find_controls error path
ffe21a3545b43 mtd: fix double free and WARN_ON in add_mtd_device() error paths
36e91a58397ca RDMA/siw: publish QP after initialization
8bf715284f08a RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp
2fcf86887f9a5 RDMA/hns: Fix potential integer overflow in mhop hem cleanup
0e861c8a69671 RDMA/erdma: initialize ret for empty receive WR lists
fb46d134e1b86 RDMA/irdma: Prevent rereg_mr for non-mem regions
0ccb86d5631ca RDMA/umem: Add helpers for umem dmabuf revoke lock
5f38a3ec57a7c RDMA/umem: Add pinned revocable dmabuf import interface
559b236086abc RDMA/umem: Move umem dmabuf revoke logic into helper function
76a3fb857bd2d RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
dfb905d933d86 RDMA/umem: Introduce an option to revoke DMABUF umem
7cf6776ce4418 RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device
e33760e076105 RDMA/cma: Fix hardware address comparison length in netevent callback
86f5ea90f73bb firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
b3d39b0379960 btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
33878ba25e263 btrfs: reject free space cache with more entries than pages
5e23b8ec04e26 mtd: nand: mtk-ecc: stop on ECC idle timeouts
9a797e0dc7667 mtd: mtdswap: remove debugfs stats file on teardown
dfa535c94406c IB/mad: Drop unmatched RMPP responses before reassembly
e9ea1f148a94a arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
f97776607d0d3 Input: ims-pcu - fix logic error in packet reset
40bbbf2e91fd6 Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
6e3cb82fcd2f4 xprtrdma: Clear receive-side ownership pointers on release
abeff53233b98 gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
5592a207e158b accel/ivpu: Reject firmware log with size smaller than header
5b12de6229d66 dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
0b05eca9589f6 can: isotp: serialize TX state transitions under so->rx_lock
0b811c4bbe3ec can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
18b45251e74e3 can: bcm: track a single source interface for ANYDEV timeout/throttle ops
5f246b96ab475 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
60d8a7942f4ed can: bcm: fix stale rx/tx ops after device removal
84aa4807816e4 can: bcm: add missing device refcount for CAN filter removal
7d966cdee0069 can: bcm: validate frame length in bcm_rx_setup() for RTR replies
52f06e7603780 can: bcm: extend bcm_tx_lock usage for data and timer updates
8b2783172d92e can: bcm: fix CAN frame rx/tx statistics
a7eb6db1cd3f7 can: bcm: add locking when updating filter and timer values
6f4be73880302 KVM: x86/mmu: Fix use-after-free on vendor module reload
af56298e9d86e KVM: nVMX: Hide shadow VMCS right after VMCLEAR
35e77467610c4 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
1f140d2953901 seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
69ae8730e657a seqlock: Allow KASAN to fail optimizing
4f292febac9bc seqlock: Cure some more scoped_seqlock() optimization fails
c90b043ff068c platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
55ec4d9ee783b platform/x86/amd/pmc: Don't log during intermediate wakeups
30e439a141d2c drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
a715cf4de28eb selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs
37ad2bb11e9de bpf: Fix ld_{abs,ind} failure path analysis in subprogs
b10a696411722 platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug
(From OE-Core rev: 8d7664577ca7d2b0c420231aac5fd094b8bedfbf)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Hetvi Thakar
|
81c4f97c54 |
python3-mako: Fix CVE-2026-41205
This patch applies the upstream fix as referenced in [2], using
the commit shown in [1].
The backport makes Template URI normalization strip all leading
slashes, preventing a double-slash URI from bypassing the path
traversal check while keeping Mako at version 1.3.2.
[1]
|
||
|
Eilís 'pidge' Ní Fhlannagáin
|
ce5d6b9653 |
ovmf: fix tpm PACKAGECONFIG to use TPM2_ENABLE
The tpm PACKAGECONFIG passed "-D TPM_ENABLE=TRUE/FALSE", but ovmf
renamed that macro to TPM2_ENABLE in edk2 commit 4de8d61bcec0
("OvmfPkg: rework TPM configuration", first released in
edk2-stable202202). Since then TPM_ENABLE has been an unknown macro
that edk2 ignores, so TPM2 support was never compiled in, even for
MACHINEs with 'tpm'/'tpm2' in MACHINE_FEATURES.
Use TPM2_ENABLE (as defined in
OvmfPkg/Include/Dsc/OvmfTpmDefines.dsc.inc and consumed by
OvmfPkgX64.dsc) so the tpm PACKAGECONFIG actually enables TPM2 support.
The same commit also added a separate TPM1_ENABLE macro (TPM 1.2
support, default TRUE), but its dsc.inc snippets are only included
inside OvmfPkgX64.dsc's "!if $(TPM2_ENABLE) == TRUE" block, so it has
no effect unless TPM2_ENABLE is TRUE. No separate PACKAGECONFIG knob is
needed.
(From OE-Core rev: e01b71bd0e69226399902ea4b0c58dae24ab70c3)
Signed-off-by: Eilís 'pidge' Ní Fhlannagáin <pidge@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d6b434455544e5922d75ba07a74490e6a6df7a0c)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Jaipaul Cheernam
|
011c32f047 |
expat: set CVE_STATUS for CVE-2026-72522
CVE-2026-72522 is an out-of-bounds read and infinite loop vulnerability in
Expat's *_toUtf16 functions caused by mis-classifying low surrogates as
high surrogates.
Our Yocto configuration is not affected by this vulnerability:
- Expat is compiled with EXPAT_CHAR_TYPE=char (8-bit character representation).
- Neither XML_UNICODE nor XML_UNICODE_WCHAR_T is defined.
- The vulnerable *_toUtf16 functions are only invoked when Expat's internal
character type is 16-bit (ushort or wchar_t).
- In 8-bit mode, Expat handles conversion using *_toUtf8 functions even when
parsing UTF-16 encoded XML inputs, rendering the vulnerable code path
unreachable.
Reference:
[1] https://nvd.nist.gov/vuln/detail/CVE-2026-72522
[2]
|
||
|
Darsh Kelaiya
|
7be1953871 |
python3-git: fix CVE-2026-44244
This patch applies the upstream 3.1.49 backport for CVE-2026-44244. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commits are referenced in [3] and [4]. [1] |
||
|
Darsh Kelaiya
|
96afd71237 |
python3-git: fix CVE-2026-44243
This patch applies the upstream 3.1.48 backport for CVE-2026-44243. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commits are referenced in [3] and [4]. [1] |
||
|
Darsh Kelaiya
|
1e39c2a5e3 |
python3-git: fix CVE-2026-42284
This patch applies the upstream 3.1.47 backport for
CVE-2026-42284. The upstream fix merge is referenced in [1],
and the public CVE advisory is referenced in [2].
[1]
|
||
|
Tim Orling
|
ab57645a22 |
python3-pycryptodomex: fix CVE_PRODUCT
With this change, 1 Patched CVE is properly reported: * CVE-2023-52323 (From OE-Core rev: c130a84998e9d22a5a228acc677676620853bb57) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c2a2ae48add874f41c5b60ca90ba3a26ebb0fe38) The current pypi default "python:pycryptodomex" has no matching NVD CPE or configuration identity. Use "pycryptodome:pycryptodomex", the active NVD dictionary CPE and configuration identity for the packaged distribution, so CVE-2023-52323 is properly reported as patched. Note: The original commit targeted python3-pycryptodomex_3.23.0.bb. This is adjusted for Scarthgap, where the recipe version is 3.20.0. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
f65ce1d326 |
python3-wheel: fix CVE_PRODUCT
The proper CVE_PRODUCT is "wheel_project:wheel".
BEFORE: python:wheel -> 1 CVE
AFTER: wheel_project:wheel -> 2 CVEs
* Both are patched at 0.42.0.
- CVE-2022-40898 — DoS in wheel CLI via malicious input. Affects <0.38.1.
- CVE-2026-24049 — malicious wheel file can modify permissions of arbitrary
files. Affects 0.40.0–<0.46.2; covered by the existing
CVE-2026-24049.patch.
Note: The original commit targeted python3-wheel_0.47.0.bb. This is
adjusted for Scarthgap, where the recipe version is 0.42.0.
AI-Generated: Claude Sonnet 5
(From OE-Core rev: 6125825144dac3f5aea440307e4b6b7e76d5333a)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fe55278e01bbe434452191109278b436bf008ebc)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Tim Orling
|
73e1a3a8a5 |
python3-pycryptodome: fix CVE_PRODUCT
With this change, 2 Patched CVEs are properly reported: * CVE-2018-15560 * CVE-2023-52323 (From OE-Core rev: e33fa15f9e6c73de3d6ca11d0ebd98c600d24d2e) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f8a88010edc6edbb168cbc31aa5df847a328661c) The current pypi default "python:pycryptodome" is deprecated and does not match current NVD configuration criteria. Use "pycryptodome:pycryptodome", the active NVD dictionary CPE and configuration identity for the packaged source, so two patched CVE records are reported. Note: The original commit targeted python3-pycryptodome_3.23.0.bb. This is adjusted for Scarthgap, where the recipe version is 3.20.0. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
6e376f5f1a |
python3-numpy: fix CVE_PRODUCT
Without this change, 0 CVEs are reported.
With this change, 8 Patched CVEs are reported:
* CVE-2014-1858
* CVE-2014-1859
* CVE-2017-12852
* CVE-2019-6446
* CVE-2021-33430
* CVE-2021-34141
* CVE-2021-41495
* CVE-2021-41496
This can be verified with a query like:
$ cat .../core-image-ptest-python3-numpy-*.rootfs.sbom-cve-check.yocto.json \
| jq '.package[] | select(.name == "python3-numpy") \
| .issue[] | {id: .id, status: .status}'
(From OE-Core rev: 5e73d32ea99d8e909bfb861a9f9c291c39497233)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ad623e71fadeddcb0b70bba8fbf28c75a976e596)
The current "python3-numpy" mapping has no matching NVD CPE or
configuration identity, so eight source-aligned CVE records are missed.
Use "numpy:numpy", the active NVD dictionary CPE and configuration
identity for the packaged NumPy source.
Note: The original commit targeted python3-numpy_2.5.2.bb. This is
adjusted for Scarthgap, where the recipe version is 1.26.4.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||
|
Tim Orling
|
7a00748477 |
python3-attrs: fix CVE_PRODUCT
No new CVEs are caught, but attrs_project:attrs matches the upstream NVD dictionary CPE. The pypi.bbclass default "python:attrs" generates the wrong product identity for the packaged attrs source. This changes the generated product identity, but the Scarthgap cve-check database snapshot has no current CVE report delta. Note: The original commit targeted python3-attrs_26.1.0.bb. This is adjusted for Scarthgap, where the recipe version is 23.2.0. AI-Generated: Claude Sonnet 5 (From OE-Core rev: dbed62df037003f1200003c6d7a590574b8f6d33) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bc07eddb82fe42ecf86e685450ec0b5c9d3a9ce1) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
26a34ca08b |
python3-dbusmock: fix CVE_PRODUCT
Recipe (PV): python3-dbusmock (0.31.1) Before -> After: python:python-dbusmock -> python-dbusmock_project:python-dbusmock Newly caught CVEs: CVE-2015-1326 (.pyc code exec via AddTemplate) Status: patched (fixed 0.15.1) Note: The original commit targeted python3-dbusmock_0.38.1.bb. This is adjusted for Scarthgap, where the recipe version is 0.31.1. AI-Generated: Claude Sonnet 5 (From OE-Core rev: b64bc962ffe320ff3ceebc62584bf05955cd08ad) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0405d7d4e476964239e1c27c987ec9c12372e95f) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
9c548130d4 |
python3-click: fix CVE_PRODUCT
Recipe (PV): python3-click (8.1.7) Before -> After python:click -> palletsprojects:click Newly caught: CVE-2026-7246 (command injection in click.edit()) Status: unpatched (fixed 8.3.3) Note: The original commit targeted python3-click_8.4.2.bb. This is adjusted for Scarthgap, where the recipe version is 8.1.7. The unrelated DESCRIPTION cleanup from the original commit is intentionally omitted. AI-Generated: Claude Sonnet 5 (From OE-Core rev: 0aa95f67c7e0363b59faa9d9bb60ee7c2d09b137) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 30357a26d7ce490725d1b0ac3375047d00595a5c) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Tim Orling
|
492fbe84e8 |
python3-babel: fix CVE_PRODUCT
Recipe (PV): python3-babel (2.14.0) Before -> After: python:Babel -> pocoo:babel Newly caught CVEs: CVE-2021-42771 (locale .dat deserialization RCE) Status: patched (fixed 2.9.1) Note: The original commit targeted python3-babel_2.18.0.bb. This is adjusted for Scarthgap, where the recipe version is 2.14.0. AI-Generated: Claude Sonnet 5 (From OE-Core rev: 27c524d5c69993338612461831f7aec054eb4d00) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 134175fa92b85e639dc4646d9a88eeaba0fae4d3) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Jakub Szczudlo (Nokia)
|
35a3f1bb5d |
gnutls: fix for CVE-2026-42011
Backport patches to fix CVE-2026-42011 and extend test for it References: https://nvd.nist.gov/vuln/detail/CVE-2026-42011 Upstream fix: |
||
|
Jakub Szczudlo (Nokia)
|
815238195b |
gnutls: fix CVE-2026-42010
Backport patch to fix CVE-2026-42010.
References:
https://nvd.nist.gov/vuln/detail/CVE-2026-42010
Upstream fix:
|
||
|
Peter Marko
|
5f2d0ad996 |
alsa-lib: patch CVE-2026-56109
Pick patch listed in NVD CVE report. (From OE-Core rev: 1f7cd9a1c65bfc1a4dbba3830d7092acf02174fd) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Peter Marko
|
13d8cd57a7 |
libevent: set status for CVE-2026-63380
Per [1] this only affects 2.2.1-alpha. Also [2] markes their versions as not-affected. [1] https://github.com/libevent/libevent/security/advisories/GHSA-3rpf-frgx-xq34 [2] https://security-tracker.debian.org/tracker/CVE-2026-63380 (From OE-Core rev: 7447b6ffb1ef18cecd7d45d2e397018dfa54c78d) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Ross Burton
|
1e77c861bc |
libevent: upgrade 2.1.12 -> 2.1.13
Security Fixes (evtag, evrpc): Fix an out-of-bounds read in decode_tag_internal. (Found by Brubbish. GHSA-fj29-64w6-73h6) Fix an integer overflow in evtag_unmarshal_header. (Found by Brubbish. GHSA-45c6-qx49-89m8) Security Fixes (evhttp): Discard HTTP trailers, to prevent header smuggling attacks. (Found by sebastianosrt. GHSA-2gmv-p5m7-98p6) Restrict HTTP header parsing to prevent request smuggling. (Originally reported by xclow3n; and then by kodareef5, nstaller0490, AsafMeizneer, and yaotushaozhu. GHSA-q39v-w2g7-gr8j.) Treat CRLF and %00 more strictly in HTTP headers, to prevent parser mismatch attacks. (Reported by xclow3n and AsafMeizner. See GHSA-q39v-w2g7-gr8j, GHSA-jcwh-pvf2-73p2.) Fix a heap out-of-bound write that could occur when using AF_UNIX sockets and compiling libevent with -DNDEBUG. (Found by mat-mo. GHSA-cvq5-vrvr-j338) Security fixes (evbuffer, bufferevent): Fixed a dangling pointer in evbuffer_add_reference. (Found by DarkaMaul. GHSA-c2pj-cg4r-88c8) Security fixes (evdns): Fix an out-of-bounds write in dnsname_to_labels when building a DNS response of 2^16 bytes. (Found by sectroyer. GHSA-58rx-7448-jw47) Security fixes (example code): Avoid using strcpy() in sample/http-server.c. (Reported by sectroyer. GHSA-5rgj-2c58-7jrc.) (From OE-Core rev: e6f3c20b057b809676f1df947fcbd3d6e927e894) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 9ae7030db6f5c415de94b6d85eaac418ae1e0f7b) Full release notes: * https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable Removed github style user references. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Pratik Farkase
|
235c6f7619 |
libevent: merge inherit statements
Merge the separate inherit statements into a single one for improved readability and consistency with OE style. No functional change intended. (From OE-Core rev: d7da98bea1a60b2f31806c9f2dd4f499737b22ad) Signed-off-by: Pratik Farkase <pratik.farkase@est.tech> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 99792ab6ba188a7623804e587edf8de23690ad3f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Ross Burton
|
8cddf22d4d |
libevent: use libtool to install test binaries
If libtool builds a binary it's best to use libtool to install it, as otherwise you might install a wrapper script or need to make assumptions about where libtool has put the real binary (as this isn't always .libs) (From OE-Core rev: 9d8cfd0d991cc03afe26983abe16dcb5ca341898) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 1dc0e5e240adf61561c899108d2fb5be71e648e4) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Vijay Anusuri
|
4e5fdf25e3 |
libxfont2: Fix CVE-2026-56003
Pick patch according to [2] [1] https://nvd.nist.gov/vuln/detail/CVE-2026-56003 [2] https://security-tracker.debian.org/tracker/CVE-2026-56003 (From OE-Core rev: 0590e69f65ec1da5d545faec44fdfa8be8a03631) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Vijay Anusuri
|
bd2ef0458c |
libxfont2: Fix CVE-2026-56002
Pick patch according to [2] [1] https://nvd.nist.gov/vuln/detail/CVE-2026-56002 [2] https://security-tracker.debian.org/tracker/CVE-2026-56002 (From OE-Core rev: 1b47a4e636bbda15b00379ac7a732ffade7a6274) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Vijay Anusuri
|
28e31d5c6b |
libxfont2: Fix CVE-2026-56001
Pick patch according to [2] [1] https://nvd.nist.gov/vuln/detail/CVE-2026-56001 [2] https://security-tracker.debian.org/tracker/CVE-2026-56001 (From OE-Core rev: 78e09979d47a03846afa7c52758e6f24ac659627) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Jaipaul Cheernam
|
04cc7f252d |
util-linux: Fix CVE-2026-3184
Reference:
[1] https://nvd.nist.gov/vuln/detail/CVE-2026-3184
[2]
|
||
|
Vijay Anusuri
|
c71dd3cb0d |
p11-kit: Fix CVE-2026-13757
Pick patch according to [2] [1] https://nvd.nist.gov/vuln/detail/cve-2026-13757 [2] https://ubuntu.com/security/CVE-2026-13757 (From OE-Core rev: 1233224dcb13924b1366775a71fdf0ce72e3a589) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Hetvi Thakar
|
abef4d0701 |
python3-idna: Fix CVE-2026-45409
This patch applies the complete upstream fix chain for CVE-2026-45409. Commit [1] introduces early domain-length rejection required by [2]. Commit [2] is the v3.14 fix identified by [5], and commit [3] extends the protection to per-label conversions and codec support to complete the v3.15 fix described in [4]. [1] https://github.com/kjd/idna/commit/c0dda4501df5 [2] https://github.com/kjd/idna/commit/628fef84d3ed [3] https://github.com/kjd/idna/commit/e1cb465b6376 [4] https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx [5] https://security-tracker.debian.org/tracker/CVE-2026-45409 (From OE-Core rev: 09773d9d1b44dfe868913b6bb142a728529f62cb) Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Anil Dongare
|
3ffe50e092 |
apt: mark CVE-2011-3374 as not-applicable-config
Details: https://security-tracker.debian.org/tracker/CVE-2011-3374 The vulnerability is a design-level flaw in the legacy apt-key utility regarding the global trust model of GPG keys. This is marked as not-applicable-config because apt-key net-update is disabled by default, and Debian vendor configuration does not define the archive keyring URI required to use that path. Ignore this CVE in this recipe due to this configuration. (From OE-Core rev: fea209d2e34efbd3bc3dc5af0f6df61f6a8a4353) Signed-off-by: Anil Dongare <adongare@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> [YC: made commit title more precise. net-update is disabled by default here: https://salsa.debian.org/apt-team/apt/-/blob/2.6.1/cmdline/apt-key.in?ref_type=tags#L179 ] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Trevor Woerner
|
b2c16f1e69 |
toaster-manual: spell the json code-block language in lower case
Pygments resolves either spelling, so nothing renders differently. Every other block in the documentation uses the lower-case form. AI-Generated: codex/claude opus 5 (xhigh) (From yocto-docs rev: 728c63c050c22ad1469d9efa5d81e96c42f83c93) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Link: https://patch.msgid.link/20260831021255.4064163-4-twoerner@gmail.com Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 3bc15cadd98b071e16cd4a806f284cbfc94fd408) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Trevor Woerner
|
4db046100a |
dev-manual: quote the values in two recipe examples
Both fail to parse. AI-Generated: codex/claude opus 5 (xhigh) (From yocto-docs rev: 8ce3614d2cc4494b1c8bf88452eeed4d3f1e586c) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Link: https://patch.msgid.link/20260831021255.4064163-3-twoerner@gmail.com Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit fc81d055ab85d2d55d440f20f442b552d1374a26) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Trevor Woerner
|
bab7cf95b3 |
ref-manual: fix a typo in the QB_SMP description
AI-Generated: codex/claude opus 5 (xhigh) (From yocto-docs rev: 476df69c65d09418cd994801eae6cc6b9d141a92) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Link: https://patch.msgid.link/20260831021255.4064163-2-twoerner@gmail.com Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 1c923f5f6f3f9b2df6285d07bef56e95f05daf4f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Trevor Woerner
|
e8c7805f25 |
ref-manual: drop the full stop from the QB_SMP example
The full stop belongs to the sentence, not to the value. BitBake rejects the line as printed. AI-Generated: codex/claude opus 5 (xhigh) (From yocto-docs rev: 320203114a8af9ea9a32b1b23b28c35e4521e15d) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Link: https://patch.msgid.link/20260831021255.4064163-1-twoerner@gmail.com Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 45ad427bc86566d47ff5213e9826a8e81cef412f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Robert P. J. Day
|
33f791f326 |
documentation: use "https" protocol for git.yoctoproject.org
Since the git protocol is not supported anymore, change all references to "git.yoctoproject.org" to use https instead. This is a simple textual substitution across the various manuals. (From yocto-docs rev: c41b8dae58522bad38a2c65df6cadfbe40a29d4e) Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Link: https://patch.msgid.link/a297f905-8632-7861-aff1-cfdf143e7548@crashcourse.ca Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit abf31bc25d542048f4c07504f3363e93eba9bb61) [ag: fix minor conflicts] Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Antonin Godard
|
1003ae5fab |
ref-manual: add new vex class
Add a brief description on the new vex.bbclass that is used to generate metadata needed by external tools to check for vulnerabilities. (From yocto-docs rev: a380de04498f1340ad9b7aea15d7a6a90edb703c) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 32cf3414f5ed127f59119e38639bc8dbd57b7891) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Richard Purdie
|
07c7fba6d0 |
build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 048f2f8e8864ae5861afe95ea52efc0354bfc18c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Hetvi Thakar
|
00e6a3df8c |
patch: Fix CVE-2026-56288
This patch applies the upstream fix referenced by NVD in [2], using the commit shown in [1]. [1] https://cgit.git.savannah.gnu.org/cgit/patch.git/commit/?id=e6d6a4e021660679d7fc9150f981d4920f722313 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-56288 (From OE-Core rev: 1b1e13055b4eed838e1411d91dea46de08e1d72f) Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a30cd69993f9f48d5cf55e57181e49171f0a1b7a) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Hetvi Thakar
|
f03efa1107 |
patch: Fix CVE-2026-56289
This patch applies the upstream fix referenced by NVD in [2], using the commit shown in [1]. [1] https://cgit.git.savannah.gnu.org/cgit/patch.git/commit/?id=faba04ef4f2b410257f76c1b9dc85e350929c4b9 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-56289 (From OE-Core rev: b1540647185015c99fbf421d889547a6c10e7e29) Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 48c1aa91e829a87c398e8c012cde45cd8c1aab0a) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
dc97ef25ad |
vim: Security Fix for CVE-2026-57456
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-57456 [2] https://security-tracker.debian.org/tracker/CVE-2026-57456 (From OE-Core rev: 146c6244fdc0647f6c24b92cc8410da02645ee96) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
b3092dd954 |
vim: Security Fix for CVE-2026-59858
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-59858 [2] https://security-tracker.debian.org/tracker/CVE-2026-59858 (From OE-Core rev: 7a9e6b91121683b4694d11138f148bfdd3e6f97a) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
4d706214f7 |
vim: Security Fix for CVE-2026-59857
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-59857 [2] https://security-tracker.debian.org/tracker/CVE-2026-59857 (From OE-Core rev: 65c4b003cddf3a2489118a04c3caec37c8256df7) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
7d5a2907dd |
vim: Security Fix for CVE-2026-59856
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-59856 [2] https://security-tracker.debian.org/tracker/CVE-2026-59856 (From OE-Core rev: fbffe073ee8694f5c69e2f84aee356d5d02238f5) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
7a38ffe737 |
vim: Security Fix for CVE-2026-57455
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-57455 [2] https://security-tracker.debian.org/tracker/CVE-2026-57455 (From OE-Core rev: 91c8229fe73a22fdd07cec3db56fee2f281f1942) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|
Siddharth Doshi
|
d4b6cf3a61 |
vim: Security Fix for CVE-2026-57452
Picking patch as per [1], and same patch is mentioned in [2] References: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-57452 [2] https://security-tracker.debian.org/tracker/CVE-2026-57452 (From OE-Core rev: 140b752df903df36a10ffeb1f2bca7b2e3bb8a06) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |