Commit Graph

75450 Commits

Author SHA1 Message Date
Bruce Ashfield
6d4a516d71 linux-yocto/6.6: update to v6.6.100
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    dbcb8d8e4163 Linux 6.6.100
    3ee59c38ae73 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
    48e879184320 nvmem: layouts: u-boot-env: remove crc32 endianness conversion
    35542cbe66c6 i2c: omap: fix deprecated of_property_read_bool() use
    056b65a02edc Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params"
    c148b7282808 Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error"
    b9e50a5169b0 ASoC: fsl_sai: Force a software reset when starting in consumer mode
    8f2852c1d7aa regulator: pwm-regulator: Manage boot-on with disabled PWM channels
    cad3ec23e398 regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
    7e5ec0059e4d i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
    a7b84035baa8 i2c: omap: Fix an error handling path in omap_i2c_probe()
    caa86f8b6c30 i2c: omap: Add support for setting mux
    6cfbff5f8dc9 usb: dwc3: qcom: Don't leave BCR asserted
    824fa25c85e8 usb: hub: Don't try to recover devices lost during warm reset.
    668c7b47a5ee usb: hub: Fix flushing of delayed work used for post resume purposes
    71f5c98d2931 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
    15fea75a7886 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    d5024dc5e644 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
    dc6a664089f1 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
    4cb17b11c8af ipv6: make addrconf_wq single threaded
    496efa228f0d sched: Change nr_uninterruptible type to unsigned long
    f371ad6471ee Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
    74bb4de32d92 rxrpc: Fix transmission of an abort in response to an abort
    7692bde89006 rxrpc: Fix recv-recv race of completed call
    7ff2d83ecf26 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
    7b0d42318393 net: bridge: Do not offload IGMP/MLD messages
    bb515c413064 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
    1f3a429c21e0 tls: always refresh the queue when reading sock
    007142a263db hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
    bd3051a81621 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    76179961c423 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
    dcbc346f50a0 ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    6a213143e0ea net/mlx5: Correctly set gso_size when LRO is used
    ab94e7af363a Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
    4ceefc9c31e7 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    f3323b18e3cc Bluetooth: SMP: If an unallowed command is received consider it a failure
    32e624912eed Bluetooth: hci_sync: fix connectable extended advertising when using static random address
    c4f16f6b071a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
    5dd6a441748d usb: net: sierra: check for no status endpoint
    27591d926191 ice: add NULL check in eswitch lag check
    eda5e38cc4dd hwmon: (corsair-cpro) Validate the size of the received input buffer
    c18726607c8a selftests: net: increase inter-packet timeout in udpgro.sh
    167006f73005 wifi: cfg80211: remove scan request n_channels counted_by
    a2f02a87fe21 nvme: fix misaccounting of nvme-mpath inflight I/O
    ec158d05eaa9 net: phy: Don't register LEDs for genphy
    5d95fbbfaa8f nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
    2baaf5bbab2a smb: client: fix use-after-free in cifs_oplock_break
    62dcd9d6e61c rpl: Fix use-after-free in rpl_do_srh_inline().
    fbe48f06e641 net/sched: sch_qfq: Fix race condition on qfq_aggregate
    21033b49cf09 block: fix kobject leak in blk_unregister_queue
    c20dd7e8f359 net: emaclite: Fix missing pointer increment in aligned_read()
    bc016b7842f6 cachefiles: Fix the incorrect return value in __cachefiles_write()
    e7be679124ba bpf: Reject %p% format string in bprintf-like helpers
    12e023df10b6 soundwire: amd: fix for clearing command status register
    84830e033bd2 soundwire: amd: fix for handling slave alerts after link is down
    673ee92bd2d3 comedi: Fix initialization of data for instructions that write to subdevice
    10f9024a8c82 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
    63390b856178 comedi: Fix some signed shift left operations
    c9d3d9667443 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
    8a3637027cee comedi: das6402: Fix bit shift out of bounds
    adb7df8a8f9d comedi: das16m1: Fix bit shift out of bounds
    955e8835855f comedi: aio_iiro_16: Fix bit shift out of bounds
    7e470d8efd10 comedi: pcl812: Fix bit shift out of bounds
    8d8519aedbf1 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    6471d4b4ac61 iio: adc: max1363: Reorder mode_list[] entries
    edff26d038d2 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    dda42f23a8f5 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
    329a80adc0e5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
    d93b20c88e5e soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    15a0a5de4950 smb: client: fix use-after-free in crypt_message when using async crypto
    0c7b20f7785c s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
    600f55da8d90 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
    d510116c80b3 net: libwx: properly reset Rx ring descriptor
    027701180a7b net: libwx: fix the using of Rx buffer DMA
    3c91a56762b1 net: libwx: remove duplicate page_pool_put_full_page()
    e30c5fa723dc mmc: sdhci_am654: Workaround for Errata i2312
    7ac120c00c5a mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
    5bfd0078f738 mmc: bcm2835: Fix dma_unmap_sg() nents value
    4206824af6dd memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    928f3a277f2c isofs: Verify inode mode when loading from disk
    4bb016438335 dmaengine: nbpfaxi: Fix memory corruption in probe()
    2bae35acbb6e af_packet: fix soft lockup issue caused by tpacket_snd()
    67ea5f37b203 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    e51cf5d4aa98 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
    645af2f069d6 arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
    bec18ebcf05c arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
    33eba752d9de net/mlx5: Update the list of the PCI supported devices
    29db3339db0e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
    d48845afa083 io_uring/poll: fix POLLERR handling
    c855b9aa093a ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
    56f99fdb0b8d drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
    823d79890048 tracing/osnoise: Fix crash in timerlat_dump_stack()
    6bc94f20a4c3 tracing: Add down_write(trace_event_sem) when adding trace event
    6ba89b382be4 tracing/probes: Avoid using params uninitialized in parse_btf_arg()
    0e5017d84d65 HID: core: do not bypass hid_hw_raw_request
    a1c0b87b7682 HID: core: ensure __hid_request reserves the report ID as the first byte
    fcda39a9c5b8 HID: core: ensure the allocated report buffer can contain the reserved report ID
    469a39a33a99 dm-bufio: fix sched in atomic context
    82b29ee8ba90 spi: Add check for 8-bit transfer with 8 IO mode support
    415d4966cb54 pch_uart: Fix dma_sync_sg_for_device() nents value
    db44a558b3af Input: xpad - set correct controller type for Acer NGR200
    0f6f30f5b01a nvmem: imx-ocotp: fix MAC address byte length
    0cd051cb5852 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    dc52aff53465 thunderbolt: Fix wake on connect at runtime
    e6a2ff56b06e i2c: stm32: fix the device used for the DMA map
    58bdd5160184 usb: gadget: configfs: Fix OOB read on empty string write
    ec35a7125d94 usb: musb: fix gadget state on disconnect
    311c434f5d76 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    909d80414869 USB: serial: option: add Foxconn T99W640
    84c320060d53 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    ad2437f4abca phy: tegra: xusb: Disable periodic tracking on Tegra234
    491175c139e5 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
    5367cdeb75cb phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

(From OE-Core rev: cf70911ca46d3f9980d475369d9f15343b6e52e2)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
a65c2420fd linux-yocto/6.6: update to v6.6.99
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    d96eb99e2f0e Linux 6.6.99
    eaf112069a90 rseq: Fix segfault on registration when rseq_cs is non-zero
    f02f0218be41 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
    97c355989928 ksmbd: fix potential use-after-free in oplock/lease break ack
    8377d7744bdc kasan: remove kasan_find_vm_area() to prevent possible deadlock
    d3927e55c959 smb: client: fix potential race in cifs_put_tcon()
    a4bb7ced4e8f selftests/bpf: adapt one more case in test_lru_map to the new target_free
    f35c825a012d Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
    3ce1d87d1f5d HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    ae915b38e262 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    b71a75739af9 bpf: Adjust free target to avoid global starvation of LRU map
    cd5b424d8322 vt: add missing notification when switching back to text mode
    f4428b2d4c68 btrfs: fix assertion when building free space tree
    2cc5ef01ea03 net: mana: Record doorbell physical address in PF mode
    9f460b235ef3 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    cd4df14f6180 net: usb: qmi_wwan: add SIMCom 8230C composition
    e07c2feb4916 ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
    ee287cf30ffb ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
    50b1e01aa123 io_uring: make fallocate be hashed work
    825088c90357 um: vector: Reduce stack usage in vector_eth_configure()
    8cafaba2f275 atm: idt77252: Add missing `dma_map_error()`
    0d8a9b6dd321 ublk: sanity check add_dev input for underflow
    5909679a82cd bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
    e644935d40cb bnxt_en: Fix DCB ETS validation
    7d4d1993517b net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    5aa8b3a1d8ab can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
    10946f834638 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
    9fa29314eba1 ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
    4a17370da6e4 net: appletalk: Fix device refcount leak in atrtr_create()
    9fbc49429a23 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
    d46186eb7bbd nbd: fix uaf in nbd_genl_connect() error path
    8fc3d7b23d13 raid10: cleanup memleak at raid10_make_request
    df5894014a92 md/raid1: Fix stack memory use after return in raid1_reshape
    d1240029f97a drm/tegra: nvdec: Fix dma_alloc_coherent error check
    5420de65efbe wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
    739296467a59 cifs: all initializations for tcon should happen in tcon_info_alloc
    03c3cd0c3b67 smb: client: fix DFS interlink failover
    d043b5da37fc smb: client: avoid unnecessary reconnects when refreshing referrals
    609a617a97c0 usb: dwc3: Abort suspend on soft disconnect failure
    e3f79e2c9ad1 usb: cdnsp: Fix issue with CV Bad Descriptor test
    ae5b191184ce usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
    7227a8229f43 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
    fd79927c8191 btrfs: fix inode lookup error handling during log replay
    6aea26dc23d5 btrfs: return a btrfs_inode from btrfs_iget_logging()
    e6031107f397 btrfs: remove redundant root argument from fixup_inode_link_count()
    28a36e75d196 btrfs: remove redundant root argument from btrfs_update_inode_fallback()
    ddead3c5ca18 btrfs: remove noinline from btrfs_update_inode()
    c31ee1695b6d netlink: make sure we allow at least one dump skb
    ce2ac2e46719 netlink: Fix rmem check in netlink_broadcast_deliver().
    5b1b8f06b179 erofs: fix to add missing tracepoint in erofs_read_folio()
    4c4f931676b6 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    d903a0fe324e smb: server: make use of rdma_destroy_qp()
    3c0994a3fd93 x86/mm: Disable hugetlb page table sharing on 32-bit
    ee21fbcb87a0 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
    ad9d4db5a8ac pwm: mediatek: Ensure to disable clocks in error path
    37e2911d2ec1 mm/vmalloc: leave lazy MMU mode on PTE mapping error
    f64046ae3401 scripts/gdb: fix interrupts.py after maple tree conversion
    ecf16604f3f0 scripts/gdb: de-reference per-CPU MCE interrupts
    e2e200c98e9f scripts/gdb: fix interrupts display after MCP on x86
    56995226431a mm: fix the inaccurate memory statistics issue for users
    167134042418 maple_tree: fix mt_destroy_walk() on root leaf node
    688bf63ee6ba kallsyms: fix build without execinfo
    c23a41086899 Revert "ACPI: battery: negate current when discharging"
    2e2e9b3d7084 drm/framebuffer: Acquire internal references on GEM handles
    dec7774d0ef9 Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    c6eb4a05af3d usb: gadget: u_serial: Fix race condition in TTY wakeup
    8c290a9d629b drm/gem: Fix race in drm_gem_handle_create_tail()
    db7402d78e7c drm/ttm: fix error handling in ttm_buffer_object_transfer
    c64f5310530b drm/sched: Increment job count before swapping tail spsc queue
    cb4c956a15f8 drm/gem: Acquire references on GEM handles for framebuffers
    ec6392061de6 wifi: prevent A-MSDU attacks in mesh networks
    1d57f7132662 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
    3d82a729530b md/md-bitmap: fix GPF in bitmap_get_stats()
    2ca1db269a8d gre: Fix IPv6 multicast route creation.
    8c8e8d4d7544 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
    20d1d9e7ce69 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
    a18776abc592 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    f536f3b09773 x86/mce: Don't remove sysfs if thresholding sysfs init fails
    cc058adb9beb x86/mce/amd: Fix threshold limit reset
    8e5058a5812e x86/mce/amd: Add default names for MCA banks and blocks
    e2d5c005dfc9 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
    efc1b2b7c1a3 rxrpc: Fix oops due to non-existence of prealloc backlog struct
    ddc4fe078948 Bluetooth: HCI: Set extended advertising data synchronously
    eb952372bf48 perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
    e63032e66bca maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
    432c5363cd6f rxrpc: Fix bug due to prealloc collision
    4c691d1b6b6d net/sched: Abort __tc_modify_qdisc if parent class does not exist
    07b585ae3699 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
    3f61b997fe01 atm: clip: Fix infinite recursive call of clip_push().
    1fb9fb5a4b5c atm: clip: Fix memory leak of struct clip_vcc.
    06935c50cfa3 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
    36cf9bcf09bd net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    0a0d040f12fe net: phy: smsc: Force predictable MDI-X state on LAN87xx
    72c62b4991a2 net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    791c8d6b76c5 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
    d437e8e7dcb9 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
    9d24bb678028 vsock: Fix transport_* TOCTOU
    401239811fa7 vsock: Fix transport_{g2h,h2g} TOCTOU
    81373cd1d72d tcp: Correct signedness in skb remaining space calculation
    be4b8392da79 tipc: Fix use-after-free in tipc_conn_close().
    42262bc4e8ef vsock: fix `vsock_proto` declaration
    55baecb9eb90 netlink: Fix wraparounds of sk->sk_rmem_alloc.
    f9b3d28f1f62 fix proc_sys_compare() handling of in-lookup dentries
    82c0f15c26be pinctrl: amd: Clear GPIO debounce for suspend
    a219fcea8e8e Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
    51e082108345 Bluetooth: hci_sync: Fix not disabling advertising instance
    c604dd2c5e6b ASoC: cs35l56: probe() should fail if the device ID is not recognized
    183bdb89af1b perf: Revert to requiring CAP_SYS_ADMIN for uprobes
    71eb118baf6e perf/core: Fix the WARN_ON_ONCE is out of lock protected region
    407f1073ea23 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    391e5ea5b877 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
    521e9ff0b67c eventpoll: don't decrement ep refcount while still holding the ep mutex

(From OE-Core rev: 5504778cd1c538b6f3c40d3106a3423abdac3203)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
574cc67a0d linux-yocto/6.6: update to v6.6.98
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    9247f4e6573a Linux 6.6.98
    20aa3d519806 x86/CPU/AMD: Properly check the TSA microcode
    59a2de10b81a Linux 6.6.97
    897761d16564 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
    8c1944905855 x86/process: Move the buffer clearing before MONITOR
    6fb766d53f61 x86/microcode/AMD: Add TSA microcode SHAs
    276499bb6944 KVM: SVM: Advertise TSA CPUID bits to guests
    90293047df18 x86/bugs: Add a Transient Scheduler Attacks mitigation
    2b6a5fbe9dc1 x86/bugs: Rename MDS machinery to something more generic
    8a7ac2737211 powerpc/kernel: Fix ppc_save_regs inclusion in build
    63cff9f57e86 usb: typec: displayport: Fix potential deadlock
    4b91b77af24c platform/x86: think-lmi: Fix sysfs group cleanup
    98002f1ac947 platform/x86: think-lmi: Fix kobject cleanup
    cb3e3244d88d platform/x86: think-lmi: Create ksets consecutively
    360546362865 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    73d43c215007 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
    6052862ba31c Logitech C-270 even more broken
    6358cb9c2a31 i2c/designware: Fix an initialization issue
    d8eab407c08d dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    59205a3e93ef smb: client: fix readdir returning wrong type with POSIX extensions
    937f49be49d6 usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
    afbec8c34428 usb: cdnsp: do not disable slot for disabled slot
    c9a841fd2ec2 Input: iqs7222 - explicitly define number of external channels
    2cd5e7c16942 Input: xpad - support Acer NGR 200 Controller
    c16b75aa6fb6 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    881c9274246c xhci: dbc: Flush queued requests before stopping dbc
    897d1170c249 xhci: dbctty: disable ECHO flag by default
    7609899eb6b7 usb: xhci: quirk for data loss in ISOC transfers
    204bdc7a8b7b NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    e3eed0134772 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
    adb29b437fe5 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    a6069306f4e1 platform/x86: hp-bioscfg: Fix class device unregistration
    8570c219cd59 platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    387da3b6d1a9 drm/v3d: Disable interrupts before resetting the GPU
    817662f9bdf8 rcu: Return early if callback is not specified
    d5c1e3f32902 mtd: spinand: fix memory leak of ECC engine conf
    d547779e72ce ACPICA: Refuse to evaluate a method if arguments are missing
    347827bd0c56 wifi: ath6kl: remove WARN on bad firmware input
    5aebb9aa538a wifi: mac80211: drop invalid source address OCB frames
    270d637100f9 aoe: defer rexmit timer downdev work to workqueue
    55dfffc5e947 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    7b9203afeb37 regulator: fan53555: add enable_time support and soft-start times
    a1d10fee0783 ASoC: amd: yc: update quirk data for HP Victus
    871beab5b4f9 powerpc: Fix struct termio related ioctl macros
    ba9117312795 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
    785200516552 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    69283b3fd463 ata: pata_cs5536: fix build on 32-bit UML
    71f89fab5cc9 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    6766316c1a9f ALSA: sb: Force to disable DMAs once when DMA mode is changed
    c7922052c6f2 ALSA: sb: Don't allow changing the DMA mode during operations
    c40ad1c04d30 drm/msm: Fix another leak in the submit error path
    fe2695b2f63b drm/msm: Fix a fence leak in submit error path
    5df2087c9a1e drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
    ad09bb7cbd14 drm/simpledrm: Do not upcast in release helpers
    51ba65860457 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
    847af89aa163 scsi: ufs: core: Add OPP support for scaling clocks and regulators
    95ffe734518d scsi: ufs: core: Fix abnormal scale up after last cmd finish
    9e67044aa9a7 f2fs: fix to zero post-eof page
    d1ccd98eddba f2fs: convert f2fs_vm_page_mkwrite() to use folio
    7ac8a61e5503 f2fs: prevent writing without fallocate() for pinned files
    b43c3050d211 f2fs: add tracepoint for f2fs_vm_page_mkwrite()
    bceae1daf302 x86/traps: Initialize DR6 by writing its architectural reset value
    16254aa985d1 bnxt: properly flush XDP redirect lists
    6310aafd4267 wifi: mac80211: finish link init before RCU publish
    ebca4264c648 wifi: mac80211: Add link iteration macro for link data
    32d0b58079ed wifi: mac80211: chan: chandef is non-NULL for reserved
    bc0819a25e04 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
    64d07a40f853 smb: client: remove \t from TP_printk statements
    3499dcb6c507 btrfs: fix qgroup reservation leak on failure to allocate ordered extent
    ccdd3eaec689 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
    ca7d5aa7ccf0 smb: client: fix race condition in negotiate timeout by using more precise timing
    70b32cba5cfd amd-xgbe: do not double read link status
    f680a4643c6f net/sched: Always pass notifications when child class becomes empty
    5ea2a10be7d7 nui: Fix dma_mapping_error() check
    7a1841c96093 rose: fix dangling neighbour pointers in rose_rt_device_down()
    744cd8baffe8 enic: fix incorrect MTU comparison in enic_change_mtu()
    a133683c0567 amd-xgbe: align CL37 AN sequence as per databook
    f2ca04cbf01d lib: test_objagg: Set error message in check_expect_hints_stats()
    8f4652848b36 igc: disable L1.2 PCI-E link substate to avoid performance issue
    832058110a1d drm/i915/gsc: mei interrupt top half should be in irq disabled context
    40e09506aea1 drm/i915/gt: Fix timeline left held on VMA alloc error
    968a419c9513 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
    0cee638d92ac smb: client: fix warning when reconnecting channel
    33713f7cda3d platform/mellanox: mlxreg-lc: Fix logic error in power state check
    421672fb7f13 platform/x86: dell-wmi-sysman: Fix class device unregistration
    dba37f72aae3 platform/x86: dell-sysman: Directly use firmware_attributes_class
    4074f6a15e95 platform/x86: think-lmi: Fix class device unregistration
    093ee65bdafb platform/x86: think-lmi: Directly use firmware_attributes_class
    ee813c62af62 platform/x86: firmware_attributes_class: Simplify API
    e52b896d5fb7 platform/x86: firmware_attributes_class: Move include linux/device/class.h
    9143d22a09b5 platform/x86: make fw_attr_class constant
    3df1e72b7bfe arm64: dts: qcom: sm8550: add UART14 nodes
    0deb3eb78ebf platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    55a90f82d4ff drm/i915/selftests: Change mock_request() to return error pointers
    822c05444ffa spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    1fc5dc930137 drm/exynos: fimd: Guard display clock control with runtime PM calls
    7e6423f80bd6 dpaa2-eth: fix xdp_rxq_info leak
    31afd307975f ethernet: atl1: Add missing DMA mapping error checks and count errors
    2a7ac29f10d8 btrfs: use btrfs_record_snapshot_destroy() during rmdir
    d77a16802896 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    65d7f92db8a9 btrfs: rename err to ret in btrfs_rmdir()
    2d11d274e2e1 btrfs: fix iteration of extrefs during log replay
    79b025ebc1c0 btrfs: fix missing error handling when searching for inode refs during log replay
    529281206f11 Bluetooth: Prevent unintended pause by checking if advertising is active
    e373354ecfbf platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    d8a1ad180c24 RDMA/mlx5: Fix vport loopback for MPV device
    efb3413f6ba9 RDMA/mlx5: Fix CC counters query for MPV
    301303d14da6 RDMA/mlx5: Fix HW counters query for non-representor devices
    ee9cb28675a5 scsi: ufs: core: Fix spelling of a sysfs attribute name
    39dac98aca12 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    c3ec87fbb00d scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    8ca65fa71024 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    d0877c479f44 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    23a3b32a274a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    edca475158f7 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    3962e5a3845d arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    b935c1e734d2 mtk-sd: reset host->mrq on prepare_data() error
    61cdd6635646 mtk-sd: Prevent memory corruption from DMA map failure
    b3b00e9b03d3 mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    45e9444b3b97 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    24418bc77a66 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    0506547f6e3d Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    8af1406949c1 Bluetooth: MGMT: set_mesh: update LE scan interval and window
    7e88ad41b63e Bluetooth: hci_sync: revert some mesh modifications
    3c0c18ef4c79 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    c4fad2460c17 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    3855b7ace3f9 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    94d0c326cb3e vsock/vmci: Clear the vmci transport packet properly when initializing it
    e7191481d6ae s390/pci: Do not try re-enabling load/store if device is disabled
    80b971be4c37 virtio-net: ensure the received length does not exceed allocated size
    39617dc3fafe rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    5cdd1f73401d rtc: pcf2127: fix SPI command byte for PCF2131
    1cb814dbb03d rtc: pcf2127: add missing semicolon after statement

(From OE-Core rev: b9041a3e6ddc8917eba2af45a8e57f2e48998dc9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Deepesh Varatharajan
be43d55edd glibc: stable 2.39 branch updates
git log --oneline b027d5b145f1b2908f370bdb96dfe40180d0fcb6..58cbbd43fe82910cf8ae9008351b0b0665104500

58cbbd43fe (HEAD -> release/2.39/master, origin/release/2.39/master) x86: Detect Intel Nova Lake Processor
835b1e3379 x86: Detect Intel Wildcat Lake Processor
765534258e nss: Group merge does not react to ERANGE during merge (bug 33361)
7ce7b4b2f4 Rename new tst-sem17 test to tst-sem18
a6ac06abeb Avoid uninitialized result in sem_open when file does not exist
ff6ce67220 elf: handle addition overflow in _dl_find_object_update_1 [BZ #32245]
fffc2df8a3 Optimize __libc_tsd_* thread variable access
83340b35cc i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
5541edb1bd i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
1f17635507 debug: Fix tst-longjmp_chk3 build failure on Hurd
3b6c8ea878 debug: Wire up tst-longjmp_chk3
89596f46e3 i386: Update ___tls_get_addr to preserve vector registers
4c2509882f elf: Preserve _rtld_global layout for the release branch
cf0e7d512d elf: Compile _dl_debug_state separately (bug 33224)
5cd1f4b1a1 elf: Restore support for _r_debug interpositions and copy relocations
97017da5ef elf: Introduce _dl_debug_change_state
5601ad79b7 elf: Introduce separate _r_debug_array variable
24c94ea84e elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
79d84b5da5 elf: Fix handling of symbol versions which hash to zero (bug 29190)
5f5c411132 elf: Second ld.so relocation only if libc.so has been loaded
4c9b1877fd elf: Reorder audit events in dlcose to match _dl_fini (bug 32066)
f407a14ff7 elf: Call la_objclose for proxy link maps in _dl_fini (bug 32065)
e27601b385 elf: Signal la_objopen for the proxy link map in dlmopen (bug 31985)
fef226255d elf: Add the endswith function to <endswith.h>
d21a217fa0 elf: Update DSO list, write audit log to elf/tst-audit23.out
4f145bb35d elf: Switch to main malloc after final ld.so self-relocation
65d86471ce elf: Introduce _dl_relocate_object_no_relro
5434cc2c41 elf: Do not define consider_profiling, consider_symbind as macros
b2d8c6cbe7 elf: rtld_multiple_ref is always true
2b89de7c91 Revert "elf: Run constructors on cyclic recursive dlopen (bug 31986)"
46e3ecad27 elf: Fix map_complete Systemtap probe in dl_open_worker
5f225025db elf: Signal RT_CONSISTENT after relocation processing in dlopen (bug 31986)
d6cc325fcf elf: Signal LA_ACT_CONSISTENT to auditors after RT_CONSISTENT switch
6917fde6f9 elf: Run constructors on cyclic recursive dlopen (bug 31986)
9fa7cc6a0b ldconfig: Move endswithn into a new header file
269e89bd8d x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
62ff85fd09 x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
f0e8d04eef libio: Test for fdopen memory leak without SEEK_END support (bug 31840)
42a8cb7560 Remove memory leak in fdopen (bug 31840)
d1c1f78e9e math: Remove no-mathvec flag
20d2d69a2f Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
c11950503f ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
25c537c3b3 Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
fbdf9680cc Remove <libc-tsd.h>
fca5937510 ctype: Reformat Makefile.
49f0e73fa3 elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
64488b4b31 elf: Extract rtld_setup_phdr function from dl_main
9833fcf7ce elf: Do not add a copy of _dl_find_object to libc.so
fbade65338 arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405)
392e6cf1e8 AArch64: Improve codegen in SVE log1p
3a78a276a3 AArch64: Optimize inverse trig functions
b6ea8902a7 AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]

Testing Results:
            Before     After    Diff
PASS         5080      5099      +19
XPASS        4         4          0
FAIL         119       120       +1
XFAIL        16        16         0
UNSUPPORTED  154       154        0

Testcases changes

testcase-name                                                before           after

debug/tst-longjmp_chk3(new)                                    -               PASS
elf/check-dt-x86-64-plt(new)                                   -               PASS
elf/check-gnu2-tls(new)                                        -               PASS
lf/tst-dlmopen4-nonpic(new)                                    -               PASS
elf/tst-dlmopen4-pic(new)                                      -               PASS
elf/tst-dlopen-auditdup(new)                                   -               PASS
elf/tst-dlopen-constructor-null(new)                           -               PASS
elf/tst-link-map-contiguous-ldso(new)                          -               PASS
elf/tst-link-map-contiguous-libc(new)                          -               PASS
elf/tst-nolink-libc-1(new)                                     -               PASS
elf/tst-nolink-libc-2(new)                                     -               PASS
elf/tst-rtld-no-malloc(new)                                    -               PASS
elf/tst-rtld-no-malloc-audit(new)                              -               PASS
elf/tst-rtld-no-malloc-preload(new)                            -               PASS
elf/tst-tls23(new)                                             -               PASS
elf/tst-version-hash-zero(new)                                 -               PASS
libio/tst-fdopen-seek-failure(new)                             -               PASS
libio/tst-fdopen-seek-failure-mem(new)                         -               PASS
nptl/tst-sem18(new)                                            -               PASS
ctype/tst-ctype-tls-dlmopen(new)                               -               FAIL
ctype/tst-ctype-tls-dlopen-static(new)                         -               FAIL
stdio-common/tst-scanf-bz27650                                FAIL             PASS
elf/ifuncmain8                                                PASS              -

(From OE-Core rev: d60dd826d81bc4c85452826427d710b2bb0ddde9)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
4456c586d1 glib-networking: fix CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return
value of memory allocation routines. An out of memory condition could
potentially result in writing to an invalid memory location.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60019

Upstream-patch:
70df675dd4

(From OE-Core rev: 8c44478c92a8b3d859c7fcecc734ac6bb399277e)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Saravanan
6d7cfb5461 cmake: fix CVE-2025-9301
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9301
https://gitlab.kitware.com/cmake/cmake/-/issues/27135

Upstream-patch:
37e27f71bc

(From OE-Core rev: 5d8a6fb52ca4a7641236712ba51cb322cb1f9f9d)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
2142f17368 openssh: fix CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.

Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61984

Upstream patch:
35d5917652

(From OE-Core rev: 717d4c7609cdce2cc3a65b7ba69c316fa86a9333)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
a7fdce2a68 openssh: fix CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI,
potentially leading to code execution when a ProxyCommand is used.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61985

Upstream patch:
43b3bff47b

(From OE-Core rev: 52d925423b826383d12a97b834475ab5699fd492)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
bf8139e03b glib-networking: fix CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return
value of a call to BIO_write(), resulting in an out of bounds read.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60018

Upstream-patch:
4dd540505d

(From OE-Core rev: e5ef6337416135d3c9d311c870ee72928aa75620)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f0bbacca46 gnupg: mark CVE-2025-30258 as patched
Per NVD report [1] this CVE is fixed by [2].
This commit was backported to 2.4.8 via [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-30258
[2] https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158
[3] da0164efc7

(From OE-Core rev: 88fe1eaa4bcd7c838902d8cdc067276c5f32624d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
2f86700da6 binutils: patch CVE-2025-11083
Pick patch per link in NVD report.

(From OE-Core rev: 155a93a0e0ea52316567b0eaea37b8da4c80d7be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f09c292577 binutils: patch CVE-2025-11082
Pick patch per link in NVD report.

(From OE-Core rev: fe40f3c025d31b262582e0ec9e7b688ae82ee0e6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Saravanan
2ab1bedda9 python3-xmltodict: fix CVE-2025-9375
Reference:
	https://nvd.nist.gov/vuln/detail/CVE-2025-9375
	https://security-tracker.debian.org/tracker/CVE-2025-9375
	https://git.launchpad.net/ubuntu/+source/python-xmltodict/commit/?id=e8110a20e00d80db31d5fc9f8f4577328385d6b6

Upstream-patch:
	ecd456ab88
	f98c90f071

(From OE-Core rev: 30624cce634cade0b030aa71a03be754abbf3da9)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
a04f9ab3a5 qemu: patch CVE-2024-8354
Pick commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2024-8354

(From OE-Core rev: 4bab523ed8ee34e8c09deb631fc82417aa0784b9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Steve Sakoman
f16cffd030 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
yocto-5.0.13 scarthgap-5.0.13
2025-10-13 12:48:55 -07:00
Steve Sakoman
517a1206e0 poky.conf: bump version for 5.0.13
(From meta-yocto rev: 3ff7ca786732390cd56ae92ff4a43aba46a1bf2e)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:46:28 -07:00
Steve Sakoman
2eb674803a oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: b0ce480eca6397fab71082ed202c3cf9dd02456f)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Steve Sakoman
6e74167ad4 selftest/cases/meta_ide.py: use use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: aa7ff5a115f55c092f8ca5badad63734c8f4f5b7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Gyorgy Sarvari
697d7cc740 conf/bitbake.conf: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html .

(From OE-Core rev: ef14bcae0f3f27acdd4e591fac69515aa912f194)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d8c6f01d7467e018aa0ed27a87850d9e4434a47a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
2f0df0334a openssl: upgrade 3.2.4 -> 3.2.6
3.2.6 has fixed 3.2.5 regression which broke python3 ptests so we can
upgrade now. We can also drop CVE-2025-27587 patch which was taken
instead of 3.2.5 upgrade under:
https://github.com/openssl/openssl/pull/28198

Release information:
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3017-and-openssl-3018-30-sep-2025

OpenSSL 3.2.6 is a security patch release. The most severe CVE fixed in this release is Moderate.
This release incorporates the following bug fixes and mitigations:
* Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
* Fix Timing side-channel in SM2 algorithm on 64 bit ARM. (CVE-2025-9231)
* Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

Release information:
https://github.com/openssl/openssl/blob/openssl-3.2/NEWS.md#major-changes-between-openssl-324-and-openssl-325-1-jul-2025

OpenSSL 3.2.5 is a bug fix release.
This release incorporates the following bug fixes and mitigations:
* Miscellaneous minor bug fixes.

(From OE-Core rev: ef6bbf39c10ff7bd8ad36d5d2f59ddd0756e0141)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Aleksandar Nikolic
9dafc77bd8 scripts/install-buildtools: Update to 5.0.12
Update to the 5.0.12 release of the 5.0 series for buildtools

(From OE-Core rev: 2f69dceeebbb67ce06ceda8782a60a71a0ed7f22)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Archana Polampalli
e085cf0d53 go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
 being unexpectedly returned.

(From OE-Core rev: ed6df1883225ec08e637a0d7a15a6a5da4665d8d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8c8680d4c0 ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases
Following are mentioned in commit upgrading the recipe to 6.1.3:
* CVE-2023-49502 CVE-2023-50007 CVE-2023-50008 CVE-2024-31578 CVE-2024-31582

Following are fixed via mentioned commits already in 6.1.1:
* CVE-2023-50009: 162b4c60c8
* CVE-2023-50010: e809c23786
* CVE-2024-31585: 3061bf668f

(From OE-Core rev: 8286570b3baf275ff48c45ca0864348a8d3faa01)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
ac57f3b9d2 tiff: ignore 5 CVEs
These CVEs are for tools which were removed in v4.6.0 via [1] and
re-introduced again in v4.7.0 via [2].

[1] eab89a627f
[2] 9ab54a8580

(From OE-Core rev: faf1e12ae0f9de56402830460315e5be0d13f4a5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Ross Burton
aca68169cc pulseaudio: ignore CVE-2024-11586
As per the linked ticket, this issue is related to an Ubuntu-specific
patch that we don't have.

(From OE-Core rev: dc81fdc6bdf8ab39b7f2fd994d50256430c36558)

(From OE-Core rev: 72e63e44a0c6ad5a408c4dc59a24288c36463439)

(From OE-Core rev: 4cdcb27238be40e815ce5a0b67ce419331079801)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
da7d29485c expat: follow-up for CVE-2024-8176
Expat release 2.7.3 implemented a follow-up for this CVE.
References:
* https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes
* https://security-tracker.debian.org/tracker/CVE-2024-8176
* https://github.com/libexpat/libexpat/pull/1059

(From OE-Core rev: 5bbb9ee52674f5aa6eed5d6cf3f515704092994d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
9fb26deedd ghostscript: patch CVE-2025-59800
Pick commit mentioned in the NVD report.

(From OE-Core rev: a63bb2ccc8294c8a97f5957f1ca9f0a4880713ac)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
0db5ae637d ghostscript: patch CVE-2025-59799
Pick commit mentioned in the NVD report.

(From OE-Core rev: 2f1d5b9ad1af6d2b28e9e7b46aadd879a67b8fc6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
7698e2910d ghostscript: patch CVE-2025-59798
Pick commit mentioned in the NVD report.

(From OE-Core rev: 4a2f47d9541d7a13da7a9ce16bd5088870c45ec4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8a80300d0f gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)

(From OE-Core rev: 7937625a30f6046ba483a000497b15169659f5eb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
bb7e27a5db gstreamer1.0: ignore CVEs fixed in plugins
All these CVEs were fixed in recent commits.

(From OE-Core rev: c5a68886247d4417de4ecaa8460e25e84ab93b0d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Hitendra Prajapati
09dadcefe3 grub2: mark CVE-2024-2312 as not applicable
This issue is specific to the peimage module that Ubuntu add, and is not
an upstream issue.

(From OE-Core rev: 8d2fe3f403e6435e1ffe122a6776381090752d8a)

(From OE-Core rev: d005eda88dad37f31bdc59e45e20b209f3771a26)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Peter Marko
a981860c32 busybox: patch CVE-2025-46394
Pick commit mentioning this CVE.
Additionally fix test broken by the CVE fix.

(From OE-Core rev: e348e10f35cc082ebfe22c890c5f64c4a06dcea3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Adam Blank
fbc7beca68 ref-manual/variables.rst: fix the description of STAGING_DIR
There is no single "recipe-sysroots" directory, but rather many
"recipe-sysroot*" directories.

(From yocto-docs rev: 6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f2d6e228409cb1dd1dbf339c405699ac6d3900be)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Antonin Godard
8e94da9219 ref-manual/structure: document the auto.conf file
Add documentation for auto.conf, which is used by external tools for
automatically setting variables.

(From yocto-docs rev: c16beccd7fa836a6bc77bb0a9d3274508bd3c6ff)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 134e54a75e0144c4629f702c6f43e92ed1f12dce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Talel BELHAJ SALEM
a405b570b3 dev-manual/building.rst: add note about externalsrc variables absolute paths
(From yocto-docs rev: ab776a0348877d8dbf6c37823a65715fe30e34f6)

Signed-off-by: Talel BELHAJ SALEM <bhstalel@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 33166d70b6ad093bd95ffccafc0b07820682f656)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
ec2689b334 ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
Remove some leftover confusing mention of KMACHINE.

(From yocto-docs rev: fd6f21b40b7fb58e7b465bbe97b8308f7a09313d)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 582ee9e0b4930aea03255542b3d3913df19af8b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
77c866901d kernel-dev/common.rst: fix the in-tree defconfig description
The description of the relation between KBUILD_DEFCONFIG and
SRC_URI is reversed. In fact it is the SRC_URI provided
defconfig which will be dropped by the kernel-yocto class
if both are provided.

(From yocto-docs rev: 3dc8212748d014f0b2cd1bb6777404bafe6d5a58)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a808420655a0976ba08f013f468cf80f379b1d89)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
ea119eaa46 expect: fix native build with GCC 15
This does not work for native builds:
  CFLAGS += "-std=gnu17"
The line from native.bbclass gets priority:
  CFLAGS = "${BUILD_CFLAGS}"

From bitbake-getvar -r expect-native CFLAGS
  ...
  append ...poky/meta/recipes-devtools/expect/expect_5.45.4.bb:44
     "-std=gnu17"
  set ...poky/meta/classes-recipe/native.bbclass:44
     "${BUILD_CFLAGS}"
  ...

(From OE-Core rev: 2696c50af9946f425ccaf7d0e7e0eb3fd87c36bb)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Khem Raj
ddda72f2bd expect: Fix build with GCC 15
Stick to C17 standard as GCC 15 switches to C23

(From OE-Core rev: a1ac756f2f55c4f27a95cb8b1e63ee2db06dd327)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
b95695a302 expect: cleanup do_install
Clean up the do_install append, and remove a long-standing unused
variable that appears to be intending to not install the scripts but
would have never actually done that as the relevant override since 2008
has been task-install.  As we've been installing the scripts, keep
instaling them.

(From OE-Core rev: 10a501b3bfe8f73ce2eb15673900df71e547b54d)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
e49d690cf1 expect: don't run aclocal in do_configure
expect has a hand-maintained aclocal.m4 so don't run aclocal, which has the
side effect of not deleting the aclocal.m4 file which pulls in macros.

The build works without this change more through luck and a combination
of behaviours than design.

(From OE-Core rev: 61dbfd66210b090ec8abfbf1f4688e5691299d68)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
357a4beab6 expect: update code for Tcl channel implementation
Tcl 8.4.0 changed the channel implementation, take a patch submitted
upstream to update the code for the new interface and remove the silencing
of the incompatible assignment error which was due to this issue.

(From OE-Core rev: 20cadf7b66f30e8a3b409b4a96eced614ac21013)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
c8a81cd75f expect: Revert "expect-native: fix do_compile failure with gcc-14"
In the meantime there is a cleaner fix on the master branch and we also
need to back-port more patches to support gcc-15 as well.

This reverts commit 8bfdb53247 which is
not in the master branch as a preparation for cherry-picking the newer
fixes from there.

(From OE-Core rev: 4ea89ba363228aa5e16412f85644608f4c645d5f)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Vijay Anusuri
6a8b1708e0 gstreamer1.0-plugins-bad: Fix CVE-2025-3887
Upstream-Status: Backport from
5463f0e097
& bcaab36098

(From OE-Core rev: 7ef632c2a85e42c16b5509edec822705a236cafb)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Yogita Urade
2ce56bd707 tiff: fix CVE-2025-9900
A flaw was found in Libtiff. This vulnerability is a "write-what-where"
condition, triggered when the library processes a specially crafted TIFF
image file.[EOL][EOL]By providing an abnormally large image height value
in the file's metadata, an attacker can trick the library into writing
attacker-controlled color data to an arbitrary memory location. This
memory corruption can be exploited to cause a denial of service (application
crash) or to achieve arbitrary code execution with the permissions of the user.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9900

Upstream patch:
3e0dcf0ec6

(From OE-Core rev: c1303b8eb4e85a031a175867361876a256bfb763)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Antonin Godard
eae801c832 test-manual/yocto-project-compatible.rst: fix a typo
Fix a typo in yocto-project-compatible.rst.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 6b248c541580eadab663f605ce6310302d7a2dae)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a84c234acfedfa714419006c743405e2f9acaedc)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
e9069b0404 contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
There's no need to differentiate crediting contributors from committing
your changes, so let's simply make it the last step of "Commit your
changes" section.

This simply indents the text so it's now part of "Commit your changes"
list instead of the main list in the "Implement and commit changes"
section. Because of this reorganisation, the instruction to use "git
commit --amend" to add the contributors is moved to a note, and the
first few sentences are reworded to better match the wording of other
items in the "Commit your changes" list of instructions.

(From yocto-docs rev: 6ba61d7bc3e641b3d4194f2d99a276f3b29f82b8)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eff4d14e28d323ebfdaeb0c5c805b5f1e2ad153d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
9baa7dfdfd contributor-guide: submit-changes: number instruction list in commit your changes
... so that it's clear that you need to read and follow each and every
instruction in this list.

(From yocto-docs rev: 6dfef402b2785675870d513f4afeed6b7e7a4df1)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c628a489f081925fabaabb5acac6752251150269)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
1b7cb8a80c contributor-guide: submit-changes: reword commit message instructions
This should hopefully make it clearer what is expected from the
contributor.

This follows my understanding of git-commit(1)[1] where the following is
a git commit message:

"""
git commit title

git commit description
"""

I'm putting the "Fixes [YOCTO" line in "body of the commit message" so
it's understood as being different from the git commit description so
that the note admonition allowing us to have an empty commit description
doesn't apply to the "Fixes [YOCTO" line.

[1] https://www.man7.org/linux/man-pages/man1/git-commit.1.html#DISCUSSION

(From yocto-docs rev: f0f9d40a04cba684a476caaa053b6f24ade9fb99)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b84903a760350bd118c56ea9ce4e98039edf6e55)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00