Commit Graph

78165 Commits

Author SHA1 Message Date
Peter Marko
c00fb3ce44 glib-2.0: patch CVE-2025-6052
Backport commits from [1] which references this CVE.

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4681

(From OE-Core rev: a96c84cb861cb550ddcabd2396a74b00f0035ba4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Peter Marko
d2cf21799c glib-2.0: update 2.84.2 -> 2.84.4
Overview of changes in GLib 2.84.4, 2025-08-08
==============================================
* Bugs fixed:
  - #3716 (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through
    glib/gfileutils.c via get_tmp_file() (Michael Catanzaro)
  - #3721 GFile leak in g_local_file_set_display_name during error handling
    (Philip Withnall, Michael Catanzaro)
  - !4668 Backport !4667 “Incorrect output parameter handling in closure helper
    of g_settings_bind_with_mapping_closures” to glib-2-84
  - !4675 Backport !4674 “gfileutils: fix computation of temporary file name” to
    glib-2-84
  - !4679 Backport !4677 and !4678 “Fix GFile leak in
    g_local_file_set_display_name()” to glib-2-84
  - !4697 Backport !4696 “gthreadpool: Catch pool_spawner creation failure” to
    glib-2-84
  - !4705 Backport !4702 “gio/filenamecompleter: Fix leaks” to glib-2-84
  - !4711 Backport !4708 “gfilenamecompleter: Fix g_object_unref() of undefined
    value” to glib-2-84

Overview of changes in GLib 2.84.3, 2025-06-13
==============================================
* Bugs fixed:
  - !4656 Backport !4655 “gstring: Fix overflow check when expanding the string”
    to glib-2-84

!4656 solves first half of CVE-2025-6052

(From OE-Core rev: 8d5df566ef2c3d342ca0eb2421b4a583b02969da)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Praveen Kumar
dddd1ac1a4 glib-2.0: update 2.84.1 -> 2.84.2
Overview of changes in GLib 2.84.2, 2025-05-20
==============================================

* Bugs fixed:
  - !4576 Backport !4575 “gclosure: fix ATOMIC_CHANGE_FIELD to read vint
    atomically” to glib-2-84
  - !4595 Backport !4582 “Windows: fix wrong typelib path” to glib-2-84
  - !4614 Backport "gstring: carefully handle gssize parameters"
  - !4616 Backport !4613 “Update macOS job for new CI runner” to glib-2-84
  - !4623 Backport !4617 “gdate: Call tzset before localtime_r” to glib-2-84
  - !4639 Backport -Wsign-conversion fixes for g_get_locale_variants() from
    !4590 to glib-2-84
  - !4640 Backport !4620 “glocalfile: Disable faccessat()-based query_exists on
    Android” to glib-2-84

(From OE-Core rev: 3deb6b59f3fa91d4fa755f49dad4ac62c3a518fb)

(From OE-Core rev: 45419176357954027607c7f92fd5ad11b5e87a42)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Markus Volk
abd47e5eee glib-2.0: update 2.84.0 -> 2.84.1
- remove backport patch

Overview of changes in GLib 2.84.1, 2025-04-03
==============================================

* Fix test failure when building against gobject-introspection ≥1.83.4 (#3634,
  work by Philip Withnall)

* Bugs fixed:
  - #3630 2.84.0 build failure on Linux: ../gio/gnetworkmonitornetlink.c:47:10:
    fatal error: netlink/netlink_route.h: No such file or directory (Philip
    Withnall)
  - #3634 test failure with gobject-introspection 1.83.4: warning: element
    doc:format from state 3 is unknown, ignoring (Philip Withnall)
  - #3636 gio/trash does not handle special characters well
  - #3642 `g_cancellable_connect()` documentation incorrect (Marco Trevisan
    (Treviño))
  - #3643 g_cancellable_connect(): is it safe to unref cancellable from
    callback? (Marco Trevisan (Treviño))
  - #3649 Crash with some registry key values in GWin32AppInfo (Philip Withnall)
  - !4484 Memory sanitizer fixes
  - !4489 gobject: Be consistent in using atomic logic to handle the
    GParamSpecPool
  - !4541 gsettings: Port docs to gi-docgen format, add missing annotations and
    make various improvements
  - !4544 tests: Don't install runner scripts without installed_tests
  - !4545 Update French translation
  - !4547 Update Catalan translation
  - !4548 Update Turkish translation
  - !4551 Updated Danish translation
  - !4552 Update Persian translation
  - !4553 docs: Document GSignalFlags members added after 2.0
  - !4554 Update Indonesian translation
  - !4555 tests: Add a test for g_object_freeze_notify() being called too often
  - !4557 gfileinfo: Slightly expand docs for
    g_file_info_get_attribute_as_string()
  - !4558 gi: Dynamically set doc-format
  - !4561 tests: Various fixes to create temporary files in /tmp rather than the
    build directory
  - !4562 gdbusnameowning: Convert docs to gi-docgen linking syntax
  - !4563 giounix-private: Fix macro for checking for epoll_create1()
  - !4565 Fix LGPL in header
  - !4567 gutils: make documentation of g_set_prgname() clearer
  - !4568 docs: Add some detail
  - !4569 Update Romanian translation
  - !4570 gspawn-win32: Fix potential integer overflows in argv handling
  - !4571 gvarianttype: Improve docs on type validation

* Translation updates:
  - Catalan (Jordi Mas)
  - Danish (Ask Hjorth Larsen)
  - French (Vincent Chatelain)
  - Indonesian (Andika Triwidada)
  - Persian (Danial Behzadi)
  - Romanian (Antonio Marin)
  - Turkish (Sabri Ünal)

(From OE-Core rev: 676b9acbe94f055a351da3bdcfbe457411e1877c)

(From OE-Core rev: d818b5952001bacd4dbb24ea475df33e50bc1b53)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

This upgrade fixes CVE-2025-4056

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
906ca66083 elfutils: Fix CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils
0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the
component eu-strip. The manipulation leads to denial of service. The attack needs to
be approached locally. The exploit has been disclosed to the public and may be used.
The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is
recommended to apply a patch to fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1377
https://ubuntu.com/security/CVE-2025-1377

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=fbf1df9ca286de3323ae541973b08449f8d03aba

(From OE-Core rev: 36436f0996d3a84fe6a59434dec1a92704110602)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
92ad2bf885 elfutils: Fix CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192.
This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c
of the component eu-strip. The manipulation leads to denial of service. It is possible
to launch the attack on the local host. The complexity of an attack is rather high. The
exploitation appears to be difficult. The exploit has been disclosed to the public and
may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is
recommended to apply a patch to fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1376
https://ubuntu.com/security/CVE-2025-1376

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918

(From OE-Core rev: 603881e34e3bbb7435f0ae91553036eef7f1cb06)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
f9e6c1011a elfutils: Fix CVE-2025-1372
A vulnerability was found in GNU elfutils 0.192. It has been declared as critical.
Affected by this vulnerability is the function dump_data_section/print_string_section
of the file readelf.c of the component eu-readelf. The manipulation of the argument
z/x leads to buffer overflow. An attack has to be approached locally. The exploit
has been disclosed to the public and may be used. The identifier of the patch is
73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix
this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1372
https://ubuntu.com/security/CVE-2025-1372

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=73db9d2021cab9e23fd734b0a76a612d52a6f1db

(From OE-Core rev: 76c57e74071f8f2f312d5c62e1f7a1ac74db54be)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
f199f5e3a6 elfutils: Fix CVE-2025-1371
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic.
This vulnerability affects the function handle_dynamic_symtab of the file readelf.c
of the component eu-read. The manipulation leads to null pointer dereference.
Attacking locally is a requirement. The exploit has been disclosed to the public and
may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It
is recommended to apply a patch to fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1371
https://ubuntu.com/security/CVE-2025-1371

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=b38e562a4c907e08171c76b8b2def8464d5a104a

(From OE-Core rev: 36a322934f6f7dc8d0890c531d68c0f7de69be13)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
17c3ea7ff8 elfutils: Fix CVE-2025-1365
A vulnerability, which was classified as critical, was found in GNU elfutils
0.192. This affects the function process_symtab of the file readelf.c of the
component eu-readelf. The manipulation of the argument D/a leads to buffer
overflow. Local access is required to approach this attack. The exploit has
been disclosed to the public and may be used. The identifier of the patch is
5e5c0394d82c53e97750fe7b18023e6f84157b81. It is recommended to apply a patch
to fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1365
https://ubuntu.com/security/CVE-2025-1365

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=5e5c0394d82c53e97750fe7b18023e6f84157b81

(From OE-Core rev: deb03581745a0722e1a52a8d4ee63cdc863ad014)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Soumya Sambu
26ec7d6e30 elfutils: Fix CVE-2025-1352
A vulnerability has been found in GNU elfutils 0.192 and classified as critical.
This vulnerability affects the function __libdw_thread_tail in the library
libdw_alloc.c of the component eu-readelf. The manipulation of the argument w
leads to memory corruption. The attack can be initiated remotely. The complexity
of an attack is rather high. The exploitation appears to be difficult. The exploit
has been disclosed to the public and may be used. The name of the patch is
2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to
fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1352
https://ubuntu.com/security/CVE-2025-1352

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=2636426a091bd6c6f7f02e49ab20d4cdc6bfc753

(From OE-Core rev: 9f104c2005975c1dce6e67b23e34ab5a2e8f85ab)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-26 06:33:14 -07:00
Steve Sakoman
db04028d90 build-appliance-image: Update to walnascar head revision
(From OE-Core rev: 347cb0861dde58613541ce692778f907943a60ea)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
yocto-5.2.3 walnascar-5.2.3
2025-08-15 09:11:26 -07:00
Steve Sakoman
675e3f2e3c poky.conf: bump version for 5.2.3
(From meta-yocto rev: ce011415ab4e583a4545cd91aceff4190225f31d)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-15 09:08:20 -07:00
Peter Marko
ae3cd7bd8a dropbear: patch CVE-2025-47203
Pick patch per Debian security page [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-47203

(From OE-Core rev: b109c117e68bf44f623124ea1bb2468f3657665c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-15 09:06:40 -07:00
Antonin Godard
2dc7ee3894 ref-manual/classes.rst: document the testexport class
This class has been in OE-Core for a while but never documented in the
reference manual. Add some description for it and link to the existing
documentation on it.

(From yocto-docs rev: e664a70adb5bc19041b3b5f553fb90dcddff99d0)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 362a331255525fc853dab3af4ec905c417fabb0b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Antonin Godard
022c3a59bf ref-manual/variables.rst: document SPL_DTB_BINARY
This variable is part of uboot-sign but not documented.

(From yocto-docs rev: ce4a0ec193301ed5373bab02938355ba222d2804)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 05eb461cb1da76ad9cbaf634da7f47447b3f6765)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Antonin Godard
d5a1a8231e ref-manual/variables.rst: document the FIT_CONF_PREFIX variable
Added by commit 7892ee3dc37d ("kernel-fitimage: allow overriding FIT
configuration prefix") in OE-Core, but never documented.

(From yocto-docs rev: 1b6a3610d5d24580de34b7821413b0f1ea52b508)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860891492b96eb127af5e7bab6348fca12167c68)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Erik Lindsten
24ba9a5370 overview-manual/yp-intro.rst: fix broken link to article
(From yocto-docs rev: 2255bff51dc38897243fe48b28fa9773fb6a4e6d)

Signed-off-by: Erik Lindsten <erik@awto.se>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b9680ad83ad3fc5e2b87594f7c62c057134d198b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Antonin Godard
353d1a0b28 ref-manual/system-requirements.rst: update supported distributions
Update the distributions to match the list of workers on the
Autobuilder. This list was generated with the help of
yocto-autobuilder-helper/scripts/yocto-supported-distros.

Also:

- Sort the lists alphabetically.
- Decrease spacing between entries for readability.

(From yocto-docs rev: 378bceec8f5a57d4961df178c141f627e48f0235)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Jiaying Song
6c48d4b799 ca-certificates: correct the SRC_URI
The original tarball URL is no longer valid, as it has been moved to an archive
location. This update points to the new location.

(From OE-Core rev: 69090e41eb0a8b92e0684d391966f9627bfe5195)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Gyorgy Sarvari
d78c6bb1d6 gnutls: upgrade 3.8.9 -> 3.8.10
Skip compress-cert-conf test when running ptests, because it requires
gnutls to be compiled with brotli PACKAGECONFIG, however brotli is not
part of oe-core.

Changelog: https://gitlab.com/gnutls/gnutls/-/blob/master/NEWS

(From OE-Core rev: 2ad41436acdc5f37803ade51c98ae0dc06103e45)

(From OE-Core rev: 26207963abdaeb7767e15c5fdb51b8396c80ab71)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Peter Marko
39bb9e606b glibc: stable 2.41 branch updates
$ git log --oneline 6e489c17f827317bcf8544efefa65f13b5a079dc..e7c419a2957590fb657900fc92a89708f41abd9d
e7c419a295 (origin/release/2.41/master, release/2.41/master) iconv: iconv -o should not create executable files (bug 33164)
1e16d0096d posix: Fix double-free after allocation failure in regcomp (bug 33185)

Add CVE-2025-8058 to CVE ignore list as this is (bug 33185) commit.

(From OE-Core rev: af3e5e432d9bf1e5811ea92f3e29c0874b6b9405)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Praveen Kumar
170d5d0523 python3: fix CVE-2025-8194
There is a defect in the CPython “tarfile” module affecting the
“TarFile” extraction and entry enumeration APIs. The tar implementation
would process tar archives with negative offsets without error,
resulting in an infinite loop and deadlock during the parsing of
maliciously crafted tar archives. This vulnerability can be mitigated
by including the following patch after importing the “tarfile” module:
https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8194

Upstream-patch:
cdae923ffe

(From OE-Core rev: c0f1143ca3f189fc6346a445a381829aed78aae8)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:58 -07:00
Peter Marko
50b9a96551 sqlite3: patch CVE-2025-6965
Pick patch [1] mentioned in NVD report [2] from github mirror [3].

[1] https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-6965
[3] c52e9d97d4

(From OE-Core rev: de442af2a5a08518e61d0c76484a3099bac6d46d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:57 -07:00
Zhang Peng
49a7cd5a14 avahi: fix CVE-2024-52615
CVE-2024-52615:
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area
DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-52615]
[https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g]

Upstream patches:
[4e2e1ea090]

(From OE-Core rev: 455f3a936874e62b57d50cc1b84dc816e35312af)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-13 08:42:57 -07:00
Antonin Godard
b642d6a4a9 ref-manual/classes.rst: drop obsolete QA errors
Drop after commit 068d38214307 ("insane: remove obsolete QA errors")
from OE-Core.

(From yocto-docs rev: 698253a6c95beb1219b7fed8a90d02fb6ddc5111)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e5667ae2da1805327ecfff68300c0c460da49b91)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:25 -07:00
Antonin Godard
a3d790db2e ref-manual/classes.rst: insane: drop cve_status_not_in_db
This was dropped by commit 452e605b55ad ("cve-check: annotate CVEs
during analysis").

(From yocto-docs rev: 4c94ef90e01b6aa7e7eaae8776135b615d0d6069)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 55aedec94dce3e3c0541ffaea666cff02d63a708)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Robert P. J. Day
d1b7a5884b variables.rst: remove references to obsolete tar packaging
The tar packaging format was removed some time ago. Also, add some
minor grammatical tweaking.

(From yocto-docs rev: d62599595f68b75e5bf885367ca1f01a6d63bb3d)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8e9fd1ca232f3c1e8be51cb881a68b4745ee548a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Marco Cavallini
d029bf3af2 dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
After compact vsdisk you have to detach it before exiting
  otherwise the vdisk remains attached.

  DISKPART> select vdisk file="<path_to_VHDX_file>"
  DISKPART> attach vdisk readonly
  DISKPART> compact vdisk
  DISKPART> detach     <------------ new missing command
  DISKPART> exit

(From yocto-docs rev: 141eca08167d7e61a87dbe6e516e7f445d6bb417)

Signed-off-by: Marco Cavallini <m.cavallini@koansoftware.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1cc65ddf1a074f61fe5a63d222f3079b7fcb4c1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Lee Chee Yang
ae082ab427 migration-guides: add release notes for 5.0.11
(From yocto-docs rev: 8343e69a59966a16b4351966ec44652e89bdb3e3)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b5f6113cd95107132aac74b8f0e6e4895b7b0e90)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Lee Chee Yang
39de392272 migration-guides: add release notes for 5.2.2
(From yocto-docs rev: 7b99a4c8339b78437c9bd2af316fed1c4ee4ef94)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b1a19a8864ad248b712a6f2485320269b461005b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Antonin Godard
b13e4549a0 dev-manual/start.rst: remove basic setup for hash equivalence
Quoting Alexander Kanavin [1]:

> 1. BB_HASHSERVE and BB_SIGNATURE_HANDLER do not set up or start a
> server, they set up the hash equivalence client built into bitbake.
>
> 2. The above client configuration (used by poky) also starts a private
> server that is specific to a particular build directory. So hash equiv
> information would not be shared between multiple build directories,
> and this will cause sstate mismatches (as reported in the bug), if
> sstate is shared.

This setup does not shed light on the potential of the hash equivalence
feature. So for now, remove this basic setup, and later rework the
concepts (or create a new) document that explains how to set up a hash
equivalence server shared between builds.

[1]: https://lore.kernel.org/r/CANNYZj_kvLsZG3sgH+nPu9B=pqWBU785w0SGHGdQqB4UW-DtmA@mail.gmail.com

Suggested-by: Alexander Kanavin <alex.kanavin@gmail.com>
(From yocto-docs rev: 71c8b839e2621a048361d5518104099fee0f9e52)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 231fc9e710ab34db60263f8ae01d4f5970579203)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Jiaying Song
5f382d6f05 ltp: Skip semctl08 when __USE_TIME64_REDIRECTS is defined
When __USE_TIME64_REDIRECTS is defined, glibc redirects struct semid_ds
to a 64-bit time-safe version that omits the sem_otime_high and
sem_ctime_high fields. As a result, the case becomes invalid, leading to
incorrect behavior.

This patch adds a check to skip the test when __USE_TIME64_REDIRECTS is
defined, ensuring the test only runs when the semid_ds structurally
matches semid64_ds and the *_high fields are accessible.

(From OE-Core rev: 8bea495b4945e24b43398f40d634d7fdb73e981a)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Praveen Kumar
62a191de8f bind: upgrade 9.20.9 -> 9.20.11
Overview of changes in bind 9.20.11
==================================
Security Fixes:
1. Fix a possible assertion failure when stale-answer-client-timeout is set to 0.
2. In specific circumstances the named resolver process could exit with an
   assertion failure when stale answers were enabled and the stale-answer-client-timeout
   configuration option was set to 0. This has been fixed. (CVE-2025-40777) [GL #5372]

For additional feature changes and bug fixes, please see:
https://downloads.isc.org/isc/bind9/9.20.11/doc/arm/html/notes.html#notes-for-bind-9-20-11

(From OE-Core rev: 32920c292d96d3f66e50e5cd55bb05bd3adc01e8)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Praveen Kumar
c210410a51 git: upgrade 2.49.0 -> 2.49.1
Git v2.49.1 Release Notes
=========================
This release merges up the fixes that appear in v2.43.7, v2.44.4,
v2.45.4, v2.46.4, v2.47.3, and v2.48.2 to address the following CVEs:
CVE-2025-27613, CVE-2025-27614, CVE-2025-46334, CVE-2025-46835,
CVE-2025-48384, CVE-2025-48385, and CVE-2025-48386. See the release
notes for v2.43.7 for details.

It also contains some updates to various CI bits to work around and/or
to adjust to the deprecation of use of Ubuntu 20.04 GitHub Actions CI,
updates to to Fedora base image.

(From OE-Core rev: e46903948f991eeec49567b585c7c31f3ece742a)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:24 -07:00
Aleksandar Nikolic
9f8f3b7302 scripts/install-buildtools: Update to 5.2.2
Update to the 5.2.2 release of the 5.2 series for buildtools

(From OE-Core rev: 9574617a89be544a855c3309e4fcedf34d689eaf)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Hongxu Jia
9843a3fc47 dpkg: fix CVE-2025-6297
Backport a patch from upstream to fix CVE-2025-6297 [1]

[1] https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=98c623c8d6814ae46a3b30ca22e584c77d47d86b

(From OE-Core rev: aeb49aa2bab1b6ed633922c8df24aacb6a90dcb6)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Peter Marko
b0b4503cb8 libxml2: patch CVE-2025-6170
Pick commit referencing this CVE from 2.13 branch.

(From OE-Core rev: 1dab0ba31fd09911d4fa707c1318bb0e83f46cdd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Chen Qi
762f845d3d coreutils: fix CVE-2025-5278
Backport patch to fix CVE-2025-5278.

(From OE-Core rev: 239cadfd4642e7f7ad4c76df2eb70f16021c3164)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Peter Marko
b9ef51c44e ncurses: patch CVE-2025-6141
Pick relevant part of snapshot commit 20250329, see [1].

That has:
add a buffer-limit check in postprocess_termcap (report/testcase by
Yifan Zhang).

[1] https://invisible-island.net/ncurses/NEWS.html#index-t20250329

(From OE-Core rev: 408f1d820616d2bf73cbd319b911885d79d3ca9d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Richard Purdie
c9d46475eb bitbake: utils: Optimise signal/sigmask performance
Running "time bitbake -pP idle" with a valid cache shows around 800,000
calls to enum creation from python's signal.py. We don't care about this
overhead and it adversely affects cache load time quite badly.

Try and use _signal directly, falling back to signal, which avoids
this overhead we don't need and makes cache loading much faster.

(Bitbake rev: 710f98844ae30416bdf6a01b655df398b49574ec)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ee5fce67ce35b025c68aa61e2e758903269ee346)
Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 09:12:23 -07:00
Yash Shinde
b4ecf098a6 rust: Fix malformed hunk header in rustix patch
The rv32-cargo-rustix-0.38.38-fix.patch file contains a malformed hunk
header at line 83 (@ -71,10 +71,10 @@), where a single '@' is used
instead of the required '@@'. Due to this, the subsequent hunks are not
applied during patching.

This causes a compilation error in the rustix crate:

error[E0603]: constant import `FICLONE` is private
   --> vendor/rustix-0.38.37/src/fs/ioctl.rs:82:57
    |
82  |     const OPCODE: ioctl::Opcode = ioctl::Opcode::old(c::FICLONE as ioctl::RawOpcode);
    |                                                         ^^^^^^^ private constant import

Fixing the hunk header ensures the patch is applied correctly and
resolves the build issue.

(From OE-Core rev: 2e5234204922d08eba18812d297f469779d80c82)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Jinfeng Wang
95504518be mtools: upgrade 4.0.48 -> 4.0.49
New version includes check for overlong file names, see [1].

[1] https://lists.gnu.org/archive/html/info-mtools/2025-06/msg00005.html

(From OE-Core rev: e4e5738597567b574b18f2ffdf60e2b41951c42a)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>

(From OE-Core rev: 044c2bceefcc12262cb2421e8f1da5f6c2ed9f72)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Vijay Anusuri
9fda10902d xserver-xorg: upgrade 21.1.6 -> 21.1.18
xorg-server 21.1.17
This release contains the fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

   * CVE-2025-49175
   * CVE-2025-49176
   * CVE-2025-49177
   * CVE-2025-49178
   * CVE-2025-49179
   * CVE-2025-49180

Additionally, this release includes a fix for CVE-2022-49737 which was
issued after the fix was merged back in 2022 and several other various fixes.

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html

xorg-server 21.1.18
This release contains an additional fix for CVE-2025-49176 from June 17
security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html

(From OE-Core rev: 5cefb53aa0e19cceb35bcb46cdfee3cfa27b8e94)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a59b385184fb3a548dc27310fd04d64351d8dfba)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Deepesh Varatharajan
a7ed2f7521 glibc: stable 2.41 branch updates
$ git log --oneline 0c76c951620f9e12df2a89b2c684878b55bb6795..6e489c17f827317bcf8544efefa65f13b5a079dc
6e489c17f8 Fix error reporting (false negatives) in SGID tests
11e634ccf3 support: Pick group in support_capture_subprogram_self_sgid if UID == 0
61e461ed0c sparc: Fix sparc32 Fix argument passing to __libc_start_main (BZ 32981)

Testing Results:
            Before     After   Diff
PASS         5803      5813    +10
XPASS        4         4        0
FAIL         266       257     -9
XFAIL        16        16       0
UNSUPPORTED  164       161     -3

6e489c17f8 Fix error reporting (false negatives) in SGID tests
Improved SGID test handling by unifying error reporting and using secure temporary directories.
Replaced non-standard exit codes and fixed premature exits to avoid masking failures.
These changes reduced false negatives, increasing overall test pass rates.

UNSUPPORTED tests changes
-UNSUPPORTED: stdlib/tst-secure-getenv
-UNSUPPORTED: elf/tst-env-setuid-static
-UNSUPPORTED: elf/tst-env-setuid-tunables

FAILed tests changes
+FAIL: elf/tst-env-setuid-tunables
-FAIL: stdio-common/tst-printf-format-d-int
-FAIL: stdio-common/tst-printf-format-d-long
-FAIL: stdio-common/tst-printf-format-sn-ushort
-FAIL: stdio-common/tst-printf-format-v-short
-FAIL: stdio-common/tst-printf-format-v-ushort
-FAIL: stdio-common/tst-printf-format-vas-double-f
-FAIL: stdio-common/tst-printf-format-vas-double-g
-FAIL: stdio-common/tst-printf-format-vas-double-g-mem
-FAIL: stdio-common/tst-printf-format-vas-int

PASSed tests changes
+PASS: stdlib/tst-secure-getenv
+PASS: elf/tst-env-setuid-static
+PASS: stdio-common/tst-printf-format-d-int
+PASS: stdio-common/tst-printf-format-d-long
+PASS: stdio-common/tst-printf-format-sn-ushort
+PASS: stdio-common/tst-printf-format-v-short
+PASS: stdio-common/tst-printf-format-v-ushort
+PASS: stdio-common/tst-printf-format-vas-double-f
+PASS: stdio-common/tst-printf-format-vas-double-g
+PASS: stdio-common/tst-printf-format-vas-double-g-mem
+PASS: stdio-common/tst-printf-format-vas-int

(From OE-Core rev: 771be16db8c5cb90da0cc5544861ee70859a1ad5)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Peter Marko
1511eafe50 go: upgrade 1.24.4 -> 1.24.5
Upgrade to latest 1.24.x release [1]:

$ git --no-pager log --oneline go1.24.4..go1.24.5
9d828e80fa (tag: go1.24.5) [release-branch.go1.24] go1.24.5
825eeee3f7 [release-branch.go1.24] cmd/go: disable support for multiple vcs in one module
dbf30d88f3 [release-branch.go1.24] cmd/link: permit a larger size BSS reference to a smaller DATA symbol
6b51660c8c [release-branch.go1.24] runtime: set mspan limit field early and eagerly
cc604130c8 [release-branch.go1.24] runtime: prevent mutual deadlock between GC stopTheWorld and suspendG
21b488bb60 [release-branch.go1.24] runtime: handle system goroutines later in goroutine profiling
e038690847 [release-branch.go1.24] cmd/go/internal/fips140: ignore GOEXPERIMENT on error
1575127ef8 [release-branch.go1.24] runtime: add missing unlock in sysReserveAlignedSbrk
7d08a16fba [release-branch.go1.24] cmd/compile/internal/ssa: fix PPC64 merging of (AND (S[RL]Dconst ...)
5f2cbe1f64 [release-branch.go1.24] cmd/compile: do nil check before calling duff functions, on arm64 and amd64

Fixes CVE-2025-4674 [2].

[1] https://github.com/golang/go/compare/go1.24.4...go1.24.5
[2] https://groups.google.com/g/golang-announce/c/gTNJnDXmn34

(From OE-Core rev: a3cc5038ea10a4857627e6f4de25bdc43023a349)

(From OE-Core rev: 631afac9d81346a5d5b2e2a073ad4664c780e9af)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Peter Marko
a32c417118 orc: set CVE_PRODUCT
There are new CVEs reported for this recipe which are not for this
componene, but for a component with same name from apache.

sqlite> select vendor, product, id, count(*) from products where product like 'orc' group by vendor, product, id;
apache|orc|CVE-2018-8015|1
apache|orc|CVE-2025-47436|4
gstreamer|orc|CVE-2024-40897|1

(From OE-Core rev: 4367e4cc527278b7e9edc08752014e71566e0068)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 08:42:34 -07:00
Bruce Ashfield
8fe20edf8a linux-yocto/6.12: update CVE exclusions (6.12.38)
Data pulled from: https://github.com/CVEProject/cvelistV5

(From OE-Core rev: cfd35327706a0fbebbab8bfffc72af0bfe385758)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 00087de9bcdd96a75ec143abb7b8312c815eca53)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-24 12:36:37 -07:00
Bruce Ashfield
2179c39870 linux-yocto/6.12: update to v6.12.38
Updating linux-yocto/6.12 to the latest korg -stable release that comprises
the following commits:

    259f4977409c Linux 6.12.38
    faac2abe895d x86/CPU/AMD: Properly check the TSA microcode
    fbad404f04d7 Linux 6.12.37
    0029b3c1320b x86/process: Move the buffer clearing before MONITOR
    331cfdd27429 x86/microcode/AMD: Add TSA microcode SHAs
    d5d66e31fd9a KVM: SVM: Advertise TSA CPUID bits to guests
    7a0395f6607a x86/bugs: Add a Transient Scheduler Attacks mitigation
    0720e436e594 x86/bugs: Rename MDS machinery to something more generic
    4c443046d8c9 mm: userfaultfd: fix race of userfaultfd_move and swap cache
    ead91de35d9c mm/vmalloc: fix data race in show_numa_info()
    679bf9a0ccb8 powerpc/kernel: Fix ppc_save_regs inclusion in build
    c782f98eef14 usb: typec: displayport: Fix potential deadlock
    f65ad436e4bc platform/x86: think-lmi: Fix sysfs group cleanup
    5805edbea588 platform/x86: think-lmi: Fix kobject cleanup
    b11397bf9ade platform/x86: think-lmi: Create ksets consecutively
    f5fe094f35a3 riscv: cpu_ops_sbi: Use static array for boot_data
    d8ca2036f30d powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    53892dc68693 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
    5f28563f0c68 optee: ffa: fix sleep in atomic context
    ccdc472b4df6 Logitech C-270 even more broken
    4c37963d67fb i2c/designware: Fix an initialization issue
    c745744a8231 dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    631f9de9a7f4 cifs: all initializations for tcon should happen in tcon_info_alloc
    7b02e09fc0ba smb: client: fix readdir returning wrong type with POSIX extensions
    7cb875016032 usb: acpi: fix device link removal
    c68a27bbebbd usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
    3b1407caac17 usb: dwc3: Abort suspend on soft disconnect failure
    27199ab79079 usb: cdnsp: Fix issue with CV Bad Descriptor test
    b68e355a6132 usb: cdnsp: do not disable slot for disabled slot
    46f758928156 Input: iqs7222 - explicitly define number of external channels
    dbdd2a232019 Input: xpad - support Acer NGR 200 Controller
    195597e0beb3 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    8bfd11dae3fb xhci: dbc: Flush queued requests before stopping dbc
    9f3b2e497deb xhci: dbctty: disable ECHO flag by default
    fbebc2254af8 usb: xhci: quirk for data loss in ISOC transfers
    9f7589318928 Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
    8caccd2eac33 usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
    1a81dfc9d10a NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    5e110e867941 drm/xe: Allow dropping kunit dependency as built-in
    994b0bc2a0e8 drm/xe/bmg: Update Wa_22019338487
    beb89ada5715 IB/mlx5: Fix potential deadlock in MR deregistration
    f6588557023e RDMA/mlx5: Fix cache entry update on dereg error
    f94c422157f3 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
    cdd9862252a0 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    e036efbe5822 add a string-to-qstr constructor
    42c5a4b47d4a rcu: Return early if callback is not specified
    c40b207cafd0 mtd: spinand: fix memory leak of ECC engine conf
    18ff4ed6a33a ACPICA: Refuse to evaluate a method if arguments are missing
    327997afbb5e wifi: ath6kl: remove WARN on bad firmware input
    1b1026563999 wifi: mac80211: drop invalid source address OCB frames
    3e554f115374 aoe: defer rexmit timer downdev work to workqueue
    7296c938df24 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    3d546c8b1070 regulator: fan53555: add enable_time support and soft-start times
    2ec1cc322a01 ASoC: amd: yc: update quirk data for HP Victus
    39e36a744ec3 powerpc: Fix struct termio related ioctl macros
    19bd7597858d genirq/irq_sim: Initialize work context pointers properly
    c584b9b62c0c platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
    f8155ee19ddc ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    c24c06bd14f2 ata: pata_cs5536: fix build on 32-bit UML
    3ce57d493dd8 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    f42b8e575395 ALSA: sb: Force to disable DMAs once when DMA mode is changed
    c5e0af68c899 ALSA: sb: Don't allow changing the DMA mode during operations
    3f6ce8433a90 drm/msm: Fix another leak in the submit error path
    0eaa495b3d57 drm/msm: Fix a fence leak in submit error path
    c0527f7534c0 scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
    790ce73721ab sched_ext: Make scx_group_set_weight() always update tg->scx.weight
    7ccaa5fa5d25 drm/amdgpu/mes: add missing locking in helper functions
    238a218d422e arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on
    646442758910 drm/amd/display: Add more checks for DSC / HUBP ONO guarantees
    81ebb8d755d9 drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13
    710deaff6aeb drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
    b47a1f9323c2 drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause
    4f77d8f8a93e drm/simpledrm: Do not upcast in release helpers
    acf9ab15ec97 selinux: change security_compute_sid to return the ssid or tsid on match
    6d0b588614c4 drm/xe/guc: Explicitly exit CT safe mode on unwind
    ff6482fb4589 drm/xe/guc: Dead CT helper
    e595433c6399 drm/xe: Replace double space with single space after comma
    0dadcd17e212 drm/xe: move DPT l2 flush to a more sensible place
    1883a83695fe drm/xe: Allow bo mapping on multiple ggtts
    ce1ef3b64ef7 drm/xe: add interface to request physical alignment for buffer objects
    98e5c71e7e74 drm/xe: Move DSB l2 flush to a more sensible place
    e5f01b2b6771 drm/xe: Fix DSB buffer coherency
    61628111e74f mfd: exynos-lpass: Fix another error handling path in exynos_lpass_probe()
    e0fefe9bc07e netfs: Fix oops in write-retry from mis-resetting the subreq iterator
    c2a952fb41cc remoteproc: k3-r5: Refactor sequential core power up/down operations
    b14a64c1a97f remoteproc: k3-r5: Use devm_rproc_add() helper
    0ea3572c15ad remoteproc: k3-r5: Use devm_ioremap_wc() helper
    e392148f7fa0 remoteproc: k3-r5: Use devm_kcalloc() helper
    f802fb717dfd remoteproc: k3-r5: Add devm action to release reserved memory
    5eec92eb4fe7 remoteproc: k3: Call of_node_put(rmem_np) only once in three functions
    5b6eb04c0552 ubsan: integer-overflow: depend on BROKEN to keep this out of CI
    f3a472b91408 arm64: dts: qcom: sm8650: add the missing l2 cache node
    5a867d09f533 arm64: dts: renesas: white-hawk-single: Improve Ethernet TSN description
    7f0e93324122 arm64: dts: renesas: Factor out White Hawk Single board support
    b9baad894b27 arm64: dts: renesas: Use interrupts-extended for Ethernet PHYs
    d8b92a122aed arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2
    67b3bb57fa17 arm64: dts: qcom: sm8650: change labels to lower-case
    4265682c29c9 bpf: Do not include stack ptr register in precision backtracking bookkeeping
    c5474a7b04cc bpf: use common instruction history across all states
    be1e0287ac78 hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
    bac4641756c2 hisi_acc_vfio_pci: bugfix cache write-back issue
    ea405fb41449 scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
    6857cbf0e4b3 scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask
    ae082dbcef5b scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure
    8912b139a8d4 f2fs: zone: fix to calculate first_zoned_segno correctly
    ffbbe11577b7 f2fs: zone: introduce first_zoned_segno in f2fs_sb_info
    58330262213a f2fs: decrease spare area for pinned files for zoned devices
    81fdecac3f2c iommu: ipmmu-vmsa: avoid Wformat-security warning
    7d151bf9bd2b RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
    7e48e3ddf9e3 wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers
    3fffbb8d33de wifi: ath12k: Handle error cases during extended skb allocation
    316060297e20 wifi: ath12k: fix skb_ext_desc leak in ath12k_dp_tx() error path
    b77a5ecb3d3b bonding: Mark active offloaded xfrm_states
    b24c3c5b421e ACPI: thermal: Execute _SCP before reading trip points
    0c44a4095803 ACPI: thermal: Fix stale comment regarding trip points
    da45b381aafa ASoC: tas2764: Reinit cache on part reset
    d1f8358c5d35 ASoC: tas2764: Extend driver to SN012776
    9468bcd92d64 gfs2: Don't start unnecessary transactions during log flush
    519aed5bdab7 gfs2: Move gfs2_trans_add_databufs
    a2562bdd35e9 sched/fair: Fixup wake_up_sync() vs DELAYED_DEQUEUE
    3edcabcfc253 sched/fair: Add new cfs_rq.h_nr_runnable
    0cc4721a7182 sched/fair: Rename h_nr_running into h_nr_queued
    2dc82f0d781b btrfs: fix wrong start offset for delalloc space release during mmap write
    5ff2ed0f0aca btrfs: prepare btrfs_page_mkwrite() for large folios
    cde7f9407884 gfs2: deallocate inodes in gfs2_create_inode
    8e753fc3d5fb gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc
    24ae2de15bda gfs2: Move gfs2_dinode_dealloc
    4f66983aeb02 gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
    7df46e6f8847 gfs2: Add GLF_PENDING_REPLY flag
    fbb2d296d4ad gfs2: Decode missing glock flags in tracepoints
    9649fec0f9c2 gfs2: Prevent inode creation race
    af2ce45c2824 gfs2: Rename dinode_demise to evict_behavior
    862ca0b49f1a gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE
    170af4314e4d gfs2: Initialize gl_no_formal_ino earlier
    33b65fcec79e kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
    b70cda91569a kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
    a55f301e607c kunit: qemu_configs: sparc: use Zilog console
    8a039506c032 crypto: zynqmp-sha - Add locking
    d78f79a2c1ff spinlock: extend guard with spinlock_bh variants
    9a0b8ef2a91b crypto: iaa - Do not clobber req->base.data
    e23ac0026624 crypto: iaa - Remove dst_null support
    3f4adfc58700 arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma
    2ba9db22d72a smb: client: fix race condition in negotiate timeout by using more precise timing
    4db893a9bf9e amd-xgbe: do not double read link status
    a553afd91f55 net/sched: Always pass notifications when child class becomes empty
    56aebaaa3adc nui: Fix dma_mapping_error() check
    446ac00b86be rose: fix dangling neighbour pointers in rose_rt_device_down()
    16858ab7fd61 enic: fix incorrect MTU comparison in enic_change_mtu()
    6074bff08ac2 amd-xgbe: align CL37 AN sequence as per databook
    f358d949cea2 lib: test_objagg: Set error message in check_expect_hints_stats()
    50c86c094533 netfs: Fix i_size updating
    9b55b7bdb0bb smb: client: set missing retry flag in cifs_writev_callback()
    590eb2574929 smb: client: set missing retry flag in cifs_readv_callback()
    cd8c8c20de3b smb: client: set missing retry flag in smb2_writev_callback()
    3eb39038dca3 igc: disable L1.2 PCI-E link substate to avoid performance issue
    9a36715cd6bc idpf: convert control queue mutex to a spinlock
    018ff57fd79c idpf: return 0 size for RSS key if not supported
    6a17e0d27fbe drm/i915/gsc: mei interrupt top half should be in irq disabled context
    5a7ae7bebdc4 drm/i915/gt: Fix timeline left held on VMA alloc error
    510a6095d754 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
    3f6932ef2537 smb: client: fix warning when reconnecting channel
    6a5348dbd745 drm/bridge: aux-hpd-bridge: fix assignment of the of_node
    800a6bde38f9 platform/mellanox: mlxreg-lc: Fix logic error in power state check
    206e2dca0ee5 platform/x86: dell-wmi-sysman: Fix class device unregistration
    8d6b2f704f6e platform/x86: dell-sysman: Directly use firmware_attributes_class
    48edcece52e0 platform/x86: think-lmi: Fix class device unregistration
    1cef9e9e0090 platform/x86: think-lmi: Directly use firmware_attributes_class
    b36faa83285f platform/x86: firmware_attributes_class: Simplify API
    b5c180ec1fbc platform/x86: firmware_attributes_class: Move include linux/device/class.h
    1958bccfa47a platform/x86: hp-bioscfg: Fix class device unregistration
    0386a68f959a platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    5df3b870bc38 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    431e58d56fcb nvmet: fix memory leak of bio integrity
    f0fee863a7cb nvme: Fix incorrect cdw15 value in passthru error logging
    9d4064787d8d drm/i915/selftests: Change mock_request() to return error pointers
    3832ddc2fae8 spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    0a38b1836894 drm/exynos: fimd: Guard display clock control with runtime PM calls
    dbd187e8c18c dpaa2-eth: fix xdp_rxq_info leak
    91a6b86d5845 ethernet: atl1: Add missing DMA mapping error checks and count errors
    735ac80fa913 btrfs: use btrfs_record_snapshot_destroy() during rmdir
    bfd5c9e83d89 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    1728fef7ca37 btrfs: record new subvolume in parent dir earlier to avoid dir logging races
    d6d806004605 btrfs: fix inode lookup error handling during log replay
    401d098f92ea btrfs: fix invalid inode pointer dereferences during log replay
    0502d1127436 btrfs: return a btrfs_inode from read_one_inode()
    56e9882ba22f btrfs: return a btrfs_inode from btrfs_iget_logging()
    7ac790dc2ba0 btrfs: fix iteration of extrefs during log replay
    e4c3176acecf btrfs: fix missing error handling when searching for inode refs during log replay
    381c1c121979 Bluetooth: Prevent unintended pause by checking if advertising is active
    b611a5bf44e2 platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    4bbdb8dd35b4 platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
    bd69049f981d RDMA/mlx5: Fix vport loopback for MPV device
    3d8d401d3333 RDMA/mlx5: Fix CC counters query for MPV
    a33a0c15b762 RDMA/mlx5: Fix HW counters query for non-representor devices
    e4ff9dedeb56 scsi: ufs: core: Fix spelling of a sysfs attribute name
    b1abc5ab47d6 scsi: sd: Fix VPD page 0xb7 length check
    218ae6bfe253 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    350dae778b63 scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    864a54c1243e NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    3c94212b57be nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    93fccfa71c66 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    9d2ef890e499 RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
    f5fe78cfcba1 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    896e0d9337b5 arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    31405510a48d firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context
    2c07fd0eada8 firmware: arm_ffa: Move memory allocation outside the mutex locking
    076fa20b4f57 firmware: arm_ffa: Fix memory leak by freeing notifier callback node
    9ff95ed0371a drm/v3d: Disable interrupts before resetting the GPU
    ca40e57b22a0 mtk-sd: reset host->mrq on prepare_data() error
    3419bc6a7b65 mtk-sd: Prevent memory corruption from DMA map failure
    cfbdcabab2fb mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    5581e694d3a1 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    ea20568895c1 Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
    e4d19e5d71b2 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    dae12bc688b8 iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
    a99f80c88a97 Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    44bb1e13b454 Bluetooth: MGMT: set_mesh: update LE scan interval and window
    3672fe9d1ed6 Bluetooth: hci_sync: revert some mesh modifications
    0698a2eb7d89 Bluetooth: HCI: Set extended advertising data synchronously
    50345c93698e mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    ec9be081c577 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    cf7235914dc4 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    9546118ba789 net: libwx: fix the incorrect display of the queue number
    75705b44e0b9 vsock/vmci: Clear the vmci transport packet properly when initializing it
    e036b72d6a16 net: txgbe: request MISC IRQ in ndo_open
    a54280b0eb99 s390/pci: Do not try re-enabling load/store if device is disabled
    2640c230aac4 s390/pci: Fix stale function handles in error handling
    bc68bc356334 virtio-net: ensure the received length does not exceed allocated size
    892f6ed9a4a3 virtio-net: xsk: rx: fix the frame's length check
    bd6c1932ac9c rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    ee61aec8529e rtc: pcf2127: fix SPI command byte for PCF2131
    669e6c723b32 rtc: pcf2127: add missing semicolon after statement

(From OE-Core rev: 3f64922f2b3e69f06325cb0fa71cca12d65f3474)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8119f6a9983d3d6ba909a0c8ba916213db87270c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-24 12:36:37 -07:00
Mark Hatle
652d4c17b8 linux-yocto/6.12: riscv: Enable TUNE_FEATURES based KERNEL_FEATURES
Allow the risc-v TUNE_FEATURES to select specific ISA (kconfig) selections
in the kernel config via config fragments selected by KERNEL_FEATURES.

This allows the following items to be selected dynamically:

    CONFIG_ARCH_RV32I
    CONFIG_ARCH_RV64I
    CONFIG_FPU
    CONFIG_RISCV_ISA_C
    CONFIG_RISCV_ISA_V
    CONFIG_RISCV_ISA_ZBB
    CONFIG_RISCV_ISA_ZICBOM
    CONFIG_RISCV_ISA_ZICBOZ
    CONFIG_TOOLCHAIN_NEEDS_EXPLICIT_ZICSR_ZIFENCEI

Note: Some ISA options, such as CONFIG_RISCV_ISA_C may be reenabled by other
options such as CONFIG_EFI.  This is properly reported by the configuration
tooling.

(From OE-Core rev: 9296d038106aebfb66e3a76c4444597e2e1a2263)

Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 45a1b5aa6abc9007d0d87efc2d740b5564a209dd)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-24 12:36:37 -07:00
Richard Purdie
361e35893a linux-yocto-6.12: Update CVE list for 6.12.36
(From OE-Core rev: 92937e7ae4f25f38cb82146bb9c756d85be5e3d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 70f8975e142345a11905d6949f2ef4071baa8e77)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-24 12:36:37 -07:00