Commit Graph

49240 Commits

Author SHA1 Message Date
Soumya Sambu
9f0a8901d1 libwebp: Fix CVE-2023-4863
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187
allowed a remote attacker to perform an out of bounds memory write via
a crafted HTML page.

Removed CVE-2023-5129.patch as CVE-2023-5129 is duplicate of CVE-2023-4863.

CVE: CVE-2023-4863

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-4863
https://security-tracker.debian.org/tracker/CVE-2023-4863
https://bugzilla.redhat.com/show_bug.cgi?id=2238431#c12

(From OE-Core rev: dbef9bf56fec551b6d1428fcefdadb500172940a)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-14 06:49:11 -10:00
Sanjana
f9a95adda5 binutils: Fix CVE-2022-47010
(From OE-Core rev: 3fd5701a861aa263ad1d912bfd44d4d5826d11a1)

Signed-off-by: Sanjana <Sanjana.Venkatesh@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-14 06:49:11 -10:00
Steve Sakoman
d8d6d921fa build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 0eb8e67aa6833df0cde29833568a70e65c21d7e5)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-03 04:34:41 -10:00
Peter Marko
f966e16c3b glibc: ignore CVE-2023-4527
This vulnerability was introduced in 2.36, so 2.35 is not vulnerable.

(From OE-Core rev: bf60773c882483f4bfe49e89be8e2f85f78b212b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-03 04:26:13 -10:00
Vijay Anusuri
83d53dc031 tiff: CVE patch correction for CVE-2023-3576
- The commit [881a070194]
fixes CVE-2023-3576
- Hence, renamed the CVE-2023-3618-1.patch to CVE-2023-3576.patch
- Reference: https://security-tracker.debian.org/tracker/CVE-2023-3576
             https://security-tracker.debian.org/tracker/CVE-2023-3618

(From OE-Core rev: 63daa00279c0c3a8650d6e08a68cc32a2b98d843)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-03 04:26:13 -10:00
Peter Marko
f948c66f75 libxml2: Patch CVE-2023-45322
Backport patch for gitlab issue mentioned in NVD CVE report.
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/583
Backport also one of 14 patches for older issue with similar errors
to have clean cherry-pick without patch fuzz.
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/344

The CVE is disputed because the maintainer does not think that
errors after memory allocation failures are not critical enough
to warrant a CVE ID.
This patch will formally fix reported error case, trying to backport
another 13 patches and resolve conflicts would be probably overkill
due to disputed state.
This CVE was ignored on master branch (as diputed).

(From OE-Core rev: d29a89412b37995857269d617e16ada116f14270)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-03 04:26:13 -10:00
Fahad Arslan
b1ddd4178d linux-firmware: create separate packages
This is backport of commit dfb7d2c426 from poky master.

This is in continuation of earlier commit:
3ddddfc14f
linux-firmware: create separate package for cirrus and cnm firmwares

And creates separate sub packages for firmwares corresponding to following list of
licenses:
LICENSE.amphion_vpu
LICENCE.cw1200
LICENSE.ice_enhanced
LICENCE.mediatek
LICENCE.microchip
LICENCE.moxa
LICENSE.nxp_mc_firmware
LICENCE.OLPC
LICENCE.phanfw
LICENCE.qla2xxx
LICENCE.ti-keystone
LICENCE.wl1251
LICENCE.xc4000
LICENCE.xc5000
LICENCE.xc5000c

(From OE-Core rev: c110e5708465a6becc611acf97f166302a17ebdf)

(From OE-Core rev: 56503e3e80603de3b69acef2f6d32836bc9e5e5d)

Signed-off-by: Fahad Arslan <fahad.arslan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:26 -10:00
Fahad Arslan
95b430be16 linux-firmware: create separate package for cirrus and cnm firmwares
This is cherry-pick of commit 3ddddfc14f from
poky master.

Some licenses only allow usage of corresponding firmwares when a specific
hardware is present. This requires split of such firmwares from linux-firmware
package to firmware specific sub package. As this split is based off of
licensing, it makes sense to group firmware blobs having the same license in the
same package. This commit is a first step in this direction, and creates
separate packages for cirrus and cnm firmware.

(From OE-Core rev: 53d9d8789efc701609a5a1e985287344c2209d62)

(From OE-Core rev: 9b556e63ba3e89e83ba6e2647656a1fa6def87a4)

Signed-off-by: Fahad Arslan <fahad.arslan@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:26 -10:00
Niko Mauno
e46e74cd90 package_rpm: Allow compression mode override
Commit 4a4d5f78a6 ("package_rpm: use zstd
instead of xz") changed the rpm package compressor from 'xz' to 'zstd'
which results in decompression failure with BusyBox-provided 'rpm2cpio'
applet and 'rpm' applet when given the '-i' (Install package) option:

  rpm2cpio: no gzip/bzip2/xz magic

Introduce a variable which makes it possible to use a different
compression mode, making it possible to override the default value for
example like

  RPMBUILD_COMPMODE = "${@'w6T%d.xzdio' % int(d.getVar('XZ_THREADS'))}"

to enable rpm decompression without including the full rpm package in
the resulting root filesystem.

(From OE-Core rev: a40d9258148e28cbee2168c93179cd4c1232fb62)

(From OE-Core rev: ad4ea9f225b0dd6396088cc70b34f886c5fa62b4)

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:26 -10:00
Peter Marko
f35f1aaf22 openssl: Upgrade 3.0.11 -> 3.0.12
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3011-and-openssl-3012-24-oct-2023

Major changes between OpenSSL 3.0.11 and OpenSSL 3.0.12 [24 Oct 2023]
* Mitigate incorrect resize handling for symmetric cipher keys and IVs. (CVE-2023-5363)

(From OE-Core rev: 5cf9f9426de71a35b06c7b4b9b092f22243676fb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:25 -10:00
Archana Polampalli
715fc203c2 curl: fix CVE-2023-38546
A flaw was found in the Curl package. This flaw allows an attacker to insert
cookies into a running program using libcurl if the specific series of conditions are met.

(From OE-Core rev: 9c0c09b81594979aafd74511366316419d23046e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:25 -10:00
Archana Polampalli
e9a7427077 curl: fix CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.

(From OE-Core rev: 44971c945a615d07c91100f514377f7247796334)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:25 -10:00
Steve Sakoman
6f022adb5c cve-exclusion_5.10.inc: update for 5.10.197
(From OE-Core rev: effa2f7a7424e0f25eaf3680326164e859378332)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-11-01 05:01:25 -10:00
Siddharth Doshi
a6f551f516 vim: Upgrade 9.0.2009 -> 9.0.2048
This includes CVE fix for CVE-2023-5535.

(From OE-Core rev: 7681436190354b5c5b6c3a82b3094badd81113de)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Siddharth Doshi
fb38c59633 libx11: Security Fix for CVE-2023-43785, CVE-2023-43786 and CVE-2023-43787
CVE's Fixed:
CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms()
CVE-2023-43786: libX11: stack exhaustion from infinite recursion in PutSubImage()
CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow

(From OE-Core rev: 8175d023c203d524d011d8947f90fbd02786c6db)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Meenali Gupta
386672ff8c linux-firmware: upgrade 20230625 -> 20230804
License-Update: additional firmwares

upgrade include fix for CVE-2023-20569 CVE-2022-40982 CVE-2023-20593

Changelog:
      https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/

References:
      https://nvd.nist.gov/vuln/detail/CVE-2023-20569
      https://nvd.nist.gov/vuln/detail/CVE-2022-40982
      https://nvd.nist.gov/vuln/detail/CVE-2023-20593

(From OE-Core rev: d3f1448246c9711f4f23f2e12c664e0ba3ae3f02)

Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Peter Marko
e06868eff3 zlib: patch CVE-2023-45853
Backport commit merged to develop branch from PR linked in NVD report:
* https://nvd.nist.gov/vuln/detail/CVE-2023-45853
* https://github.com/madler/zlib/pull/843

(From OE-Core rev: 6e265e44febbb6fdf85c7926b9a64b731c98d814)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Vijay Anusuri
024fa046fc gawk: backport Debian patch to fix CVE-2023-4156
Upstream-Status: Backport
[https://git.launchpad.net/ubuntu/+source/gawk/tree/debian/patches?h=ubuntu/jammy-security
&
https://git.savannah.gnu.org/gitweb/?p=gawk.git;a=commitdiff;h=e709eb829448ce040087a3fc5481db6bfcaae212]

(From OE-Core rev: 0547b60d3485c2e3853e5a9e0a3e051882b283f3)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Lee Chee Yang
7725c28871 qemu: ignore RHEL specific CVE-2023-2680
(From OE-Core rev: a1256b8fa415002eee78427cc292b866570ee267)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-25 04:45:50 -10:00
Quentin Schulz
72ddfbc89a uboot-extlinux-config.bbclass: fix missed override syntax migration
uboot-extlinux-config allows to specify multiple "labels" (entries in a
menu, à-la grub) and each of them have their own values for some fields.
Each "base" variable, e.g. UBOOT_EXTLINUX_FDT can be overridden for each
label. This is done via the OVERRIDES mechanism based on the label name,
e.g. UBOOT_EXTLINUX_FDT:linux if linux is a label.

However, OVERRIDES doesn't contain the label globally because it's only
necessary in one task. Therefore, the OVERRIDES itself is modified
within the task. This means that the sigdata will not be told the
dependency on UBOOT_EXTLINUX_FDT:linux, because it cannot know about it.

For this reason, we need to explicitly specify which variables this task
depends on via vardeps varflag for the task.

This was done in the past, but we missed updating it during the override
syntax migration so the cache wouldn't get invalidated if someone
modifies UBOOT_EXTLINUX_FDT:linux from a configuration file or a
bbappend for example.

Let's fix this by migrating it to the new syntax.

(From OE-Core rev: 5570e49791b770271f176a4deeb5f6f1a028cb4a)

Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b4dd9d873508128adbbf5ff6cf0a3df3d2ffbcf6)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:36 -10:00
Siddharth Doshi
36a2a0129a libxpm: upgrade to 3.5.17
This release fixes the following CVEs:

- CVE-2023-43788
- CVE-2023-43789

(From OE-Core rev: 1475a47239d77a368bcec69f12e5a63f8bebe14f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:36 -10:00
Siddharth Doshi
6da1e21e9a tiff: Security fix for CVE-2023-40745
Upstream-Status: Backport from [4fc16f649f]
CVE: CVE-2023-40745
(From OE-Core rev: f1aa2dd493c01e18ee0f534ff00523a1274f9066)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:36 -10:00
Hitendra Prajapati
24e9fed15a libtiff: Add fix for tiffcrop CVE-2023-1916
Add fix for tiffcrop tool CVE-2023-1916 [1].

A flaw was found in tiffcrop, a program distributed by the libtiff
package. A specially crafted tiff file can lead to an out-of-bounds
read in the extractImageSection function in tools/tiffcrop.c, resulting
in a denial of service and limited information disclosure. This issue
affects libtiff versions 4.x.

The tool is no longer part of newer libtiff distributions, hence the
fix is rejected by upstream in [2]. The backport is still applicable
to older versions of libtiff, pick the CVE fix from ubuntu 20.04 [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-1916
[2] https://gitlab.com/libtiff/libtiff/-/merge_requests/535
[3] https://packages.ubuntu.com/source/focal-updates/tiff

(From OE-Core rev: 4d3e7f9a157e56a4a8ffb4d16fd6401a22851307)

Signed-off-by: Marek Vasut <marex@denx.de>

Upstream-Status: Backport from 848434a81c && https://gitlab.com/libtiff/libtiff/-/merge_requests/535
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:36 -10:00
Armin Kuster
f550a63161 binutils: CVE-2022-48063
Source: Binutils
MR: 128800
Type: Security Fix
Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd
ChangeID: ab04e4ec62d054c90d94f82230adb2342ce1ee1b
Description:

Affects binutils < 2.40

(From OE-Core rev: 80a8d16a4038868469b4583404b6f73e12bae0f1)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:36 -10:00
Deepthi Hemraj
8391218990 binutils: Fix CVE-2022-47011
(From OE-Core rev: 5ff2e3c880705c2e920a4a61a5165810fadd7b84)

Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:35 -10:00
Deepthi Hemraj
bdcc4c9909 binutils: Fix CVE-2022-47008
(From OE-Core rev: 3a299d1610bf085790017569de090b0a41cf809b)

Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:35 -10:00
Chaitanya Vadrevu
4b721dc5c8 binutils: Mark CVE-2022-47696 as patched
(From OE-Core rev: bc480221d8091be460a1b8c4d023b9841e1df3c2)

Signed-off-by: Chaitanya Vadrevu <chaitanya.vadrevu@ni.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:35 -10:00
Chaitanya Vadrevu
455b08d0a9 binutils: Mark CVE-2022-47673 as patched
(From OE-Core rev: 96fe4b522a35f75a7d2b597d7e650dfc7ae82e27)

Signed-off-by: Chaitanya Vadrevu <chaitanya.vadrevu@ni.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:35 -10:00
Chaitanya Vadrevu
4537f28311 binutils: Fix CVE-2022-47695
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=3d3af4ba39e892b1c544d667ca241846bc3df386]

(From OE-Core rev: 4d4732c2e295fea610d266fa12bae3cc01f93dfa)

Signed-off-by: Chaitanya Vadrevu <chaitanya.vadrevu@ni.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-21 05:21:35 -10:00
Khem Raj
f989613808 apt: add missing <cstdint> for uint16_t
(From OE-Core rev: 2572b32e729831762790ebfbf930a1140657faea)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8c46ded67df2d830c8bbf5f7b82d75db81d797e2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Lee Chee Yang
3f174130d3 python3-urllib3: 1.26.15 -> 1.26.17
1.26.17 (2023-10-02)
Added the Cookie header to the list of headers to strip from requests
when redirecting to a different host. As before, different headers can
be set via Retry.remove_headers_on_redirect. (CVE-2023-43804)

1.26.16 (2023-05-23)
Fixed thread-safety issue where accessing a PoolManager with many
distinct origins would cause connection pools to be closed while
requests are in progress (#2954)

(From OE-Core rev: 27a1de55a46b7b313eb2a6370e9d779a7cd49154)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Wang Mingyu
43e36aec34 python3-urllib3: upgrade 1.26.14 -> 1.26.15
Changelog:
==========
* Fix socket timeout value when "HTTPConnection" is reused ('#2645 <https://github.com/urllib3/urllib3/issues/2645>'__)
* Remove "!" character from the unreserved characters in IPv6 Zone ID parsing
  ('#2899 <https://github.com/urllib3/urllib3/issues/2899>'__)
* Fix IDNA handling of '\x80' byte ('#2901 <https://github.com/urllib3/urllib3/issues/2901>'__)

(From OE-Core rev: a335ccbcc9913e79bfe958c41690b7efa189ae93)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8e062efbac29a81831c3060bcae601dc533d65dd)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Tim Orling
c0b54da555 python3-urllib3: upgrade 1.26.13 -> 1.26.14
https://github.com/urllib3/urllib3/blob/1.26.14/CHANGES.rst#12614-2023-01-11

1.26.14 (2023-01-11)
    Fixed parsing of port 0 (zero) returning None, instead of 0. (#2850)
    Removed deprecated getheaders() calls in contrib module.

(From OE-Core rev: aefb7af6b56269d45170beb99e6c878bf2448b78)

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 55ab1bf20e6893088acb6460e9004dac8e205559)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Alexander Kanavin
cc936073a4 python3-urllib3: upgrade 1.26.12 -> 1.26.13
(From OE-Core rev: e8ae3247795d9333f6252bbec85a8e09c0c9cb48)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b18552f69a2eb8900981a10ba386dc4f862b29c3)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
wangmy
36e8271ca0 python3-urllib3: upgrade 1.26.11 -> 1.26.12
(From OE-Core rev: 69a610b440b5e9e92931e43bd1c75230bb99f03e)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit cb05578af3ace6e3983f93e16d9ad1ac2a65fbe2)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Alexander Kanavin
49ebeb4b0d python3-urllib3: upgrade 1.26.10 -> 1.26.11
(From OE-Core rev: d83b4afc17839b6c11b540aabf056647ddacb587)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dbe07ff87e2cb1a8276e69a43c7cdbb9ae6e5493)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
wangmy
73d81d2908 python3-urllib3: upgrade 1.26.9 -> 1.26.10
Add dependence python3-logging.

Changelog:
=========
* Removed support for Python 3.5
* Fixed an issue where a "ProxyError" recommending configuring the proxy as HTTP
  instead of HTTPS could appear even when an HTTPS proxy wasn't configured.

(From OE-Core rev: d9f200b931e48d957b721005f0140ef3fff55af3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a8a26a92dfe367472daf086a33a1b30ff6d17540)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Siddharth Doshi
9d5d4218ec vim: Upgrade 9.0.1894 -> 9.0.2009
This includes CVE fix for CVE-2023-5441.

(From OE-Core rev: 6c88137d4ab36054ac97cff0457d78ef503f383e)

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Yash Shinde
e77b551dbf binutils: Fix CVE-2022-45703
(From OE-Core rev: b2fa5b29462a16b238f8a6a40886b45aa483e963)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Yash Shinde
600b508c37 binutils: Fix CVE-2022-44840
(From OE-Core rev: 7a42ae332ebde565cc7c6fca568563f076bd26ba)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Hitendra Prajapati
2a2ea5ac75 xdg-utils: Fix CVE-2022-4055
Upstream-Status: Backport from f67c4d1f8b

(From OE-Core rev: fc4eecb6143b2b32a374388248b41c1d95b33968)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Hitendra Prajapati
de59761cbb libtiff: fix CVE-2022-40090 improved IFD-Loop handling
Upstream-Status: Backport from c7caec9a4d

(From OE-Core rev: 1effa609b5b527eb9afa5a2c529bdc0b317e4be0)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00
Peter Marko
fcb2375417 glibc: Update to latest on stable 2.35 branch
Adresses CVE-2023-4911.

Single commit bump:
* c84018a05ae tunables: Terminate if end of input is reached (CVE-2023-4911)

(From OE-Core rev: bca43f95850d395f9dc56644fa1d12910cabb0c5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-07 05:39:59 -10:00
Soumya Sambu
91c3fc996e glibc: Update to latest on stable 2.35 branch
Adresses CVE-2023-4813, CVE-2023-4806, CVE-2023-5156. Added these to CVE_CHECK_IGNORE
to avoid in cve-check reports since the recipe version did not change.

These are the complete list of changes this brings

* 73d4ce728a Document CVE-2023-4806 and CVE-2023-5156 in NEWS
* 17092c0311 Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]*
* 762a747fae io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64
* e3ccb230a9 getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
* 1b9087dcec gethosts: Return EAI_MEMORY on allocation failure
* f5f88f142a gaih_inet: Split result generation into its own function
* a6da106892 gaih_inet: split loopback lookup into its own function
* 8b70d97b08 gaih_inet: make gethosts into a function
* 9098deb96a gaih_inet: separate nss lookup loop into its own function
* ce64e72b7d gaih_inet: Split nscd lookup code into its own function.
* 4897bf7968 gaih_inet: Split simple gethostbyname into its own function
* 571c531b3b gaih_inet: make numeric lookup a separate routine
* 9aad91abe6 gaih_inet: Simplify service resolution
* d02808dee9 getaddrinfo: Fix leak with AI_ALL [BZ #28852]
* f366eaa608 gaih_inet: Simplify canon name resolution
* b126325fc7 nss: Sort tests and tests-container and put one test per line
* 6e867146ee Simplify allocations and fix merge and continue actions [BZ #28931]
* 59ee83b0c2 elf: Move l_init_called_next to old place of l_text_end in link map
* 34b07bdbdd elf: Remove unused l_text_end field from struct link_map
* 02a67e102f elf: Always call destructors in reverse constructor order (bug 30785)
* aeea91fd15 elf: Do not run constructors for proxy objects
* 1d828d5855 elf: Introduce to _dl_call_fini

(From OE-Core rev: be0bca7eaa08948b6c4eabe63e68a6e14d8dad3b)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Martin Jansa
c58c63d48f fontcache.bbclass: avoid native recipes depending on target fontconfig
* this caused liberation-font-native to depend on TUNE_PKGARCH target fontconfig
  because ${MLPREFIX}fontconfig-utils is added to RDEPENDS in anonymous python

* the dependency tree for liberation-font-native got much shorter
  (just quilt-native and liberation-font-native itself):
   2 after/pn-buildlist
  78 before/pn-buildlist

* fixes graphviz-native signature issue as well as detected with sstate-diff-machines.sh

  $ bitbake-diffsigs \
    sstate-after/mako/x86_64-linux/graphviz-native/8.1.0.do_populate_sysroot.sigdata.184d4fd355f1e7a2d7d929ef4b5f62b94e2071df9dd674b2067ec21bfc7bcc1b \
    sstate-after/qemux86-64/x86_64-linux/graphviz-native/8.1.0.do_populate_sysroot.sigdata.35da674d2dbc275bac02869dfce4165466315023910bdef65a6026e2cb942a46
  Hash for task dependency liberation-fonts-native:do_populate_sysroot changed from 310d3da04ad9abf8ee99997e53d1ffa71c2b7d9d60fb0e8de85171a9ab6a77d3 to 048420ad1410c2b8d95498fc3c11681207335a2c722836f1f3e683cc449814da

(From OE-Core rev: 098d4ca85c2bc77949843f117c6e336d5b77271d)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Narpat Mali
3ba8fdef70 python3-jinja2: fix for the ptest result format
The output of python3-jinja2 ptest should follow a unified format as below
result: testname

Reference:
https://wiki.yoctoproject.org/wiki/Ptest

(From OE-Core rev: edfed23716e6240a65f53630bbaf8b7319f0d1ce)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Martin Jansa
ee2bf45810 ccache: fix build with gcc-13
* needed on hosts with gcc-13 for ccache-native

(From OE-Core rev: 6618e5bf994f49ed93bebc4280980e297be6af98)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Bruce Ashfield
c156968a90 linux-yocto/5.10: update to v5.10.197
Updating  to the latest korg -stable release that comprises
the following commits:

    393e225fe8ff Linux 5.10.197
    242c5740dd17 ext4: fix rec_len verify error
    8768583b2509 scsi: pm8001: Setup IRQs on resume
    f4fffa1abb7f scsi: megaraid_sas: Fix deadlock on firmware crashdump
    3753e568d67f ata: libata: disallow dev-initiated LPM transitions to unsupported states
    993bb01d228b i2c: aspeed: Reset the i2c controller when timeout occurs
    f5e303fce3be tracefs: Add missing lockdown check to tracefs_create_dir()
    96afb318ae5d nfsd: fix change_info in NFSv4 RENAME replies
    b3183f5f05cd tracing: Have option files inc the trace array ref count
    ec7eb8b06481 tracing: Have current_trace inc the trace array ref count
    bb3e295a388c drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
    2cdcf6481cb3 mm/filemap: fix infinite loop in generic_file_buffered_read()
    0c5d5f8e0d2b proc: fix a dentry lock race between release_task and lookup
    8db844077ec9 net/sched: Retire rsvp classifier
    7a8f285cb58e drm/amdgpu: fix amdgpu_cs_p1_user_fence
    7390bb377b5f btrfs: release path before inode lookup during the ino lookup ioctl
    3d379dd109f8 btrfs: fix lockdep splat and potential deadlock after failure running delayed items
    c6422e6f173d ovl: fix incorrect fdput() on aio completion
    68308b0a33ed attr: block mode changes of symlinks
    634444dea898 md/raid1: fix error: ISO C90 forbids mixed declarations
    7be3a38f0e37 samples/hw_breakpoint: fix building without module unloading
    d20beafaa69b x86/boot/compressed: Reserve more memory for page tables
    7635020b9bd4 scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
    f99005237684 selftests: tracing: Fix to unmount tracefs for recovering environment
    ae889fffae52 scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
    82910aa5501d drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
    df380d6f5c06 btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
    ab90a3930d39 btrfs: add a helper to read the superblock metadata_uuid
    cc87d2bb391c btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
    e16f5f8cab65 perf tools: Add an option to build without libbfd
    c56095812721 perf jevents: Make build dependency on test JSONs
    4954c5a05494 mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
    b87d03ed6ab7 mtd: rawnand: brcmnand: Allow SoC to provide I/O operations
    5df582915851 kobject: Add sanity check for kset->kobj.ktype in kset_register()
    a3efb2b57e9d media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
    f354456f8df1 serial: cpm_uart: Avoid suspicious locking
    bbe3ff47bf09 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
    6d3a1dd10537 usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
    890d10e6b72f media: pci: cx23885: replace BUG with error return
    2ae53dd15eef media: tuners: qt1010: replace BUG_ON with a regular error
    578b67614ae0 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
    a9def3e9718a media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
    4a9763d2bc4a media: anysee: fix null-ptr-deref in anysee_master_xfer
    c7e5ac737db2 media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
    97fdbdb75034 media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
    6c01ef65de0b media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
    9f3b2b666833 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
    756747d4b439 jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
    6f8b34458948 fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
    4bff1d95ba62 ext2: fix datatype of block number in ext2_xattr_set2()
    7993cfc04148 md: raid1: fix potential OOB in raid1_remove_disk()
    5933cd61399c bus: ti-sysc: Configure uart quirks for k3 SoC
    5475b8bea148 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
    d51d6c42d1e5 ALSA: hda: intel-dsp-cfg: add LunarLake support
    fcfb71848e9e samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
    9726e8dcabae drm/bridge: tc358762: Instruct DSI host to generate HSE packets
    672205c6f2d1 wifi: mac80211_hwsim: drop short frames
    5bf52e431c83 netfilter: ebtables: fix fortify warnings in size_entry_mwt()
    f6f0a687546e alx: fix OOB-read compiler warning
    acf0019b93a6 mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
    c7a8813d91f9 tpm_tis: Resend command to recover from data transfer errors
    0fc7147c6943 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
    03385b243bad wifi: wil6210: fix fortify warnings
    269eb4e1d5ea wifi: mwifiex: fix fortify warning
    08fdbe379022 wifi: ath9k: fix printk specifier
    268a10c9eb0f wifi: ath9k: fix fortify warnings
    8c19ddc21566 crypto: lrw,xts - Replace strlcpy with strscpy
    cfca20009bff devlink: remove reload failed checks in params get/set callbacks
    020ecfa7b676 hw_breakpoint: fix single-stepping when using bpf_overflow_handler
    bfc747fe0725 ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
    dc01bfdc3d91 perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
    560014aefb70 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
    3f72fdb20f6d scftorture: Forgive memory-allocation failure if KASAN
    55887adc76e1 rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
    f8bab887a4ae kernel/fork: beware of __put_task_struct() calling context
    625c12dc04a6 ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
    a6f4129378ca locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
    b7c3cf2f6c42 btrfs: output extra debug info if we failed to find an inline backref
    69ddafc7a7af autofs: fix memory leak of waitqueues in autofs_catatonic_mode
    ff0bfa8f23eb Linux 5.10.196
    2cc1f4986233 Revert "configfs: fix a race in configfs_lookup()"
    5452d1be676c Linux 5.10.195
    d653c35de087 parisc: Drop loops_per_jiffy from per_cpu struct
    1d02ef8c8a1f drm/amd/display: Fix a bug when searching for insert_above_mpcc
    2e18493c4214 kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
    606a0d8ff674 ixgbe: fix timestamp configuration code
    6edf82223fab ipv6: fix ip6_sock_set_addr_preferences() typo
    a5096cc6e783 net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
    03be4412d31e platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
    687031788fb1 platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
    33db24ad811b kcm: Fix memory leak in error path of kcm_sendmsg()
    ed584f1e72d7 r8152: check budget for r8152_poll()
    1e90a93ac484 hsr: Fix uninit-value access in fill_frame_info()
    75f2de75c118 net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
    61054a8ddb17 net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
    d1c6c93c27a4 net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
    fcb9e879a53e kselftest/runner.sh: Propagate SIGTERM to runner child
    d94aac13a102 selftests/kselftest/runner/run_one(): allow running non-executable files
    7c8ddcdab1b9 net: ipv4: fix one memleak in __inet_del_ifa()
    15dabd02a975 bus: mhi: host: Skip MHI reset if device is in RDDM
    de20747ee610 ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
    81d06d1919c9 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
    61fa6a16bb94 scsi: qla2xxx: Flush mailbox commands on chip reset
    b5775b8530b9 scsi: qla2xxx: Fix crash in PCIe error handling
    41a660c204ea scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe
    5c069bce2d67 scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
    e7ed3585d092 arm64: sdei: abort running SDEI handlers during crash
    0b55460c312e ACPI: APEI: explicit init of HEST and GHES in apci_init()
    c6dc2a2e11c2 perf hists browser: Fix the number of entries for 'e' key
    c07e4a4ef36a perf tools: Handle old data in PERF_RECORD_ATTR
    b52a33a9079c perf hists browser: Fix hierarchy mode header
    d72b01d9f96f drm/amd/display: prevent potential division by zero errors
    d68f639ddec4 mtd: rawnand: brcmnand: Fix potential false time out warning
    d00b03126651 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
    c839a24d6ef7 mtd: rawnand: brcmnand: Fix crash during the panic_write
    e76cef3dcdb8 btrfs: use the correct superblock to compare fsid in btrfs_validate_super
    f2873a18c235 btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
    3856e7b11810 fuse: nlookup missing decrement in fuse_direntplus_link
    1d21b03f7738 ata: pata_ftide010: Add missing MODULE_DESCRIPTION
    35a3dec703bb ata: sata_gemini: Add missing MODULE_DESCRIPTION
    b1d63e2bbd5b ext4: add correct group descriptors and reserved GDT blocks to system zone
    6612d5b5350d sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
    97ef9ba7df1c net: hns3: fix the port information display when sfp is absent
    780f60dde296 netfilter: nfnetlink_osf: avoid OOB read
    e89a361d99f6 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
    94a3117efff8 net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload
    e90e70343b24 ip_tunnels: use DEV_STATS_INC()
    2539b28a2b1f idr: fix param name in idr_alloc_cyclic() doc
    0878052579cb s390/zcrypt: don't leak memory if dev_set_name() fails
    d878011b5d93 igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
    417b11433eb1 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
    9444881a375d igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
    46f02fc7f6fb kcm: Destroy mutex in kcm_exit_net()
    746a8df5e4d2 net: sched: sch_qfq: Fix UAF in qfq_dequeue()
    31e08e7fa6a3 af_unix: Fix data race around sk->sk_err.
    90e32f81f9cc af_unix: Fix data-races around sk->sk_shutdown.
    cf29b42766ad af_unix: Fix data-race around unix_tot_inflight.
    b401d7e485b0 af_unix: Fix data-races around user->unix_inflight.
    98e12d075c7f net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
    d47bc5023e54 veth: Fixing transmit return status for dropped packets
    ab9796f43cfc igb: disable virtualization features on 82580
    160fdb4116e7 ipv4: ignore dst hint for multipath routes
    29039819c662 drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
    23d2651372bd drm/i915/gvt: Save/restore HW status to support GVT suspend/resume
    895dc4c47171 net: read sk->sk_family once in sk_mc_loop()
    8edced38dbe5 ipv4: annotate data-races around fi->fib_dead
    ab5c26dc5392 sctp: annotate data-races around sk->sk_wmem_queued
    94d527c3759d net/sched: fq_pie: avoid stalls in fq_pie_timer()
    a2d9d884e84b pwm: lpc32xx: Remove handling of PWM channels
    6909e28cf387 watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
    aec02fba99f8 perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
    28df38af326d x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
    23ec6fc52c14 perf annotate bpf: Don't enclose non-debug code with an assert()
    934d29b9fa91 backlight: gpio_backlight: Drop output GPIO direction check for initial power state
    84f99532152b kconfig: fix possible buffer overflow
    6cc6f79b931f NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
    4185605cd0f7 NFS: Fix a potential data corruption
    2ccab9f82772 soc: qcom: qmi_encdec: Restrict string length in decode
    bf27518fb93f clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
    972acd701b19 clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
    921453672846 dt-bindings: clock: xlnx,versal-clk: drop select:false
    690a22d6c581 pinctrl: cherryview: fix address_space_handler() argument
    b02d1fb74e8b parisc: led: Reduce CPU overhead for disk & lan LED computation
    3add85c962ab parisc: led: Fix LAN receive and transmit LEDs
    2a1cf9fe09d9 lib/test_meminit: allocate pages up to order MAX_ORDER
    6bfa28f441da drm/ast: Fix DRAM init on AST2200
    4aade6c9100a fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
    db8b5a2254c3 scsi: qla2xxx: Remove unsupported ql2xenabledif option
    fd48544f3e03 scsi: qla2xxx: Turn off noisy message log
    931fadf9728d scsi: qla2xxx: Fix erroneous link up failure
    3694f18beaa1 scsi: qla2xxx: fix inconsistent TMF timeout
    4d7da12483e9 scsi: qla2xxx: Fix deletion race condition
    f271e3d64b8b io_uring: break iopolling on signal
    9faa6d0677ec io_uring: break out of iowq iopoll on teardown
    208858d4b08a io_uring: always lock in io_apoll_task_func
    6ffab754d220 net/ipv6: SKB symmetric hash should incorporate transport ports
    26f9ccb7a043 udf: initialize newblock to 0
    06494cd473e0 md/md-bitmap: remove unnecessary local variable in backlog_store()
    5103216b863f tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
    1c4c9191b3f8 usb: typec: tcpci: clear the fault status bit
    beba5051dd34 USB: core: Fix oversight in SuperSpeed initialization
    9d241c5d9a9b USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
    6ceffc2ecf3d USB: core: Change usb_get_device_descriptor() API
    3cef18d13f37 USB: core: Unite old scheme and new scheme descriptor reads
    38e1f2ee82ba usb: typec: bus: verify partner exists in typec_altmode_attention
    b97e3c5e9768 cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
    a1d2e2c670a3 crypto: stm32 - fix loop iterating through scatterlist for DMA
    54d03dc5d1c3 s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
    dc2f60de9a7d pstore/ram: Check start of empty przs during init
    5b1f71c0b95a fsverity: skip PKCS#7 parser when keyring is empty
    a9864e126b73 net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
    c681d477c03d X.509: if signature is unsupported skip validation
    4b8a938e329a dccp: Fix out of bounds access in DCCP error handler
    a4f4a5b41a13 dlm: fix plock lookup when using multiple lockspaces
    9f73fd6972bc parisc: Fix /proc/cpuinfo output for lscpu
    1f03e6dd194e procfs: block chmod on /proc/thread-self/comm
    9a0b35dc3aa0 Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
    3d8d13a174ef ntb: Fix calculation ntb_transport_tx_free_entry()
    c028e90e0de1 ntb: Clean up tx tail index on link down
    3cfdc448e8bf ntb: Drop packets when qp link is down
    ffed0c8fcf04 scsi: mpt3sas: Perform additional retries if doorbell read returns 0
    bf67d43f07b5 Revert "scsi: qla2xxx: Fix buffer overrun"
    27dfaf2ee05e media: dvb: symbol fixup for dvb_attach()
    5a85727239a2 arm64: csum: Fix OoB access in IP checksum code for negative lengths
    b24bebcea556 xtensa: PMU: fix base address for the newer hardware
    8594605a0446 backlight/lv5207lp: Compare against struct fb_info.device
    e2c77841cd8d backlight/bd6107: Compare against struct fb_info.device
    35c56c48737f backlight/gpio_backlight: Compare against struct fb_info.device
    13264260eb66 ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
    5c5f02e16b91 ipmi_si: fix a memleak in try_smi_init()
    5d27baee6cd9 scsi: core: Fix the scsi_set_resid() documentation
    8c90c4e61929 printk: ringbuffer: Fix truncating buffer size min_t cast
    61b918dfb675 ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
    ab192e5e5d3b PM / devfreq: Fix leak in devfreq_dev_release()
    3e39008e9e30 igb: set max size RX buffer when store bad packet is enabled
    8836c266201c skbuff: skb_segment, Call zero copy functions before using skbuff frags
    5541827d13cf netfilter: xt_sctp: validate the flag_info count
    a1b711c370f5 netfilter: xt_u32: validate user space input
    83091f8ac03f netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
    1186eaffd87e igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
    504bb3fc66aa virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
    ea374bdf2374 cpufreq: Fix the race condition while updating the transition_task of policy
    27b75c7203fc dmaengine: ste_dma40: Add missing IRQ check in d40_probe
    cfe215a04a21 um: Fix hostaudio build errors
    eb33921806fc mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
    40d8f9bffed0 mtd: spi-nor: Check bus width while setting QE bit
    71ac2ffd7f80 rpmsg: glink: Add check for kstrdup
    268fce6ec2e0 phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
    6739746f4b81 phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
    88813bd9bbb7 phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
    3a890f993b6c mtd: rawnand: brcmnand: Fix mtd oobsize
    c5d30d6aa83d tracing: Fix race issue between cpu buffer write and swap
    ee519526d58c x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
    15ec7cb55e7d HID: multitouch: Correct devm device reference for hidinput input_dev name
    e38a6f12685d HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
    bdb3cd9dffdf RDMA/siw: Correct wrong debug message
    d006f2cb3c68 RDMA/siw: Balance the reference of cep->kref in the error path
    aa950b9835f2 Revert "IB/isert: Fix incorrect release of isert connection"
    9baf2278b3ee amba: bus: fix refcount leak
    0c6c0280f740 serial: tegra: handle clk prepare error in tegra_uart_hw_init()
    9cce8ef7a6fa scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
    356da2d5c084 scsi: core: Use 32-bit hostnum in scsi_host_lookup()
    629079f502fb cgroup:namespace: Remove unused cgroup_namespaces_init()
    3534ae5f171b media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
    a427ce197e75 media: ov2680: Fix vflip / hflip set functions
    cd7a0e391eb5 media: ov2680: Fix ov2680_bayer_order()
    faf1408a68c8 media: ov2680: Remove auto-gain and auto-exposure controls
    e1552a0b990b media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
    2d29ce41de4d media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
    44c71cbe7c5a USB: gadget: f_mass_storage: Fix unused variable warning
    8f7de8215804 media: go7007: Remove redundant if statement
    3183b0cab7b5 iommu/vt-d: Fix to flush cache of PASID directory table
    4136094df53f iommu/qcom: Disable and reset context bank before programming
    b374b039e066 fsi: aspeed: Reset master errors after CFAM reset
    f8949c06c735 IB/uverbs: Fix an potential error pointer dereference
    10bd5f8ceb3e driver core: test_async: fix an error code
    19138f8cc651 dma-buf/sync_file: Fix docs syntax
    e621dbeb9f91 coresight: tmc: Explicit type conversions to prevent integer overflow
    d7f21ef741a5 scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly
    1198a0e93587 scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly
    d86d85e23e8a scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly
    4ede2ee95b41 x86/APM: drop the duplicate APM_MINOR_DEV macro
    9a26aaea6c21 serial: sprd: Fix DMA buffer leak issue
    6232bd4dca91 serial: sprd: Assign sprd_port after initialized to avoid wrong access
    6d65079c69dc scsi: qla4xxx: Add length check when parsing nlattrs
    b65b13d01b28 scsi: be2iscsi: Add length check when parsing nlattrs
    4df82c6d6e7d scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
    18d49266dd6e scsi: iscsi: Add length check for nlattr payload
    3ef17ca47690 scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
    8356a3ba1083 scsi: RDMA/srp: Fix residual handling
    cc2d5cdb19e3 usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
    5a6f480b2ecc media: mediatek: vcodec: Return NULL if no vdec_fb is found
    43c69dc9a327 media: rkvdec: increase max supported height for H.264
    1e5eac0022f4 scsi: hisi_sas: Fix normally completed I/O analysed as failed
    b6aca9f5ab29 scsi: hisi_sas: Fix warnings detected by sparse
    0d383e555fa6 scsi: hisi_sas: Modify v3 HW SATA completion error processing
    634220605198 scsi: hisi_sas: Modify v3 HW SSP underflow error processing
    d84e5d445af1 scsi: libsas: Introduce more SAM status code aliases in enum exec_status
    519b9e3e5ce7 scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print
    5e5a528c29f0 media: cx24120: Add retval check for cx24120_message_send()
    d13a84874a2e media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
    656423cc56bd media: dib7000p: Fix potential division by zero
    61bc9293da19 drivers: usb: smsusb: fix error handling code in smsusb_init_device
    d8a8f75fce04 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
    5865926da24e media: i2c: tvp5150: check return value of devm_kasprintf()
    6dff92b3fe2f media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
    9d82a58d2af5 NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
    7bc36ac6713e NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
    3f1a2b0b2d57 NFSD: da_addr_body field missing in some GETDEVICEINFO replies
    aaeac3a6b119 fs: lockd: avoid possible wrong NULL parameter
    6d5361618988 jfs: validate max amount of blocks before allocation.
    f08944e3c696 powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
    46ff3bd14b6d nfs/blocklayout: Use the passed in gfp flags
    953c54dfdc5d powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
    e46cc0e42f3f powerpc: Don't include lppaca.h in paca.h
    9837d6a483cf wifi: ath10k: Use RMW accessors for changing LNKCTL
    924d1ab98706 net/mlx5: Use RMW accessors for changing LNKCTL
    37eecd50856a drm/radeon: Use RMW accessors for changing LNKCTL
    ead3dbc92bd4 drm/amdgpu: Use RMW accessors for changing LNKCTL
    2f8269ca8062 powerpc/perf: Convert fsl_emb notifier to state machine callbacks
    d45bf1528b7c powerpc/fadump: reset dump area size if fadump memory reserve fails
    ad83d83dd891 vfio/type1: fix cap_migration information leak
    d8f5613c5c6c clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
    0d81a0546b19 clk: imx8mp: fix sai4 clock
    69795c689e7b PCI/ASPM: Use RMW accessors for changing LNKCTL
    f647b8fe55b1 PCI: pciehp: Use RMW accessors for changing LNKCTL
    ae52f8ba4596 pinctrl: mcp23s08: check return value of devm_kasprintf()
    ef8e561ddb33 PCI: Mark NVIDIA T4 GPUs to avoid bus reset
    344c16a8441e clk: qcom: reset: Use the correct type of sleep/delay based on length
    289f5a88f14a clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
    b3a80429b1cf clk: qcom: gcc-sm8250: use ARRAY_SIZE instead of specifying num_parents
    245759d987b6 ext4: correct grp validation in ext4_mb_good_group
    2aefe3ae098d clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
    74a5f9755aa8 clk: qcom: gcc-sc7180: use ARRAY_SIZE instead of specifying num_parents
    2640d3be822c clk: sunxi-ng: Modify mismatched function name
    c1ff788f731d drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
    13623b966bb6 ipmi:ssif: Fix a memory leak when scanning for an adapter
    6128288d8f55 ipmi:ssif: Add check for kstrdup
    8917591d7247 ALSA: ac97: Fix possible error value of *rac97
    cd062ebe0cb3 of: unittest: Fix overlay type in apply/revert check
    ca7634e5491b bus: ti-sysc: Fix cast to enum warning
    43f561e809aa drm/mediatek: Fix potential memory leak if vmap() fail
    265515548610 bus: ti-sysc: Fix build warning for 64-bit build
    98ef243d5900 audit: fix possible soft lockup in __audit_inode_child()
    69800bc5d7fd drm/msm/a2xx: Call adreno_gpu_init() earlier
    7fcbaf4bdb75 drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
    9b89db24c6b2 smackfs: Prevent underflow in smk_set_cipso()
    9f4017cac70c firmware: meson_sm: fix to avoid potential NULL pointer dereference
    815e42029f6e drm/msm/mdp5: Don't leak some plane state
    a21e73a6d8e0 drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
    524f23b08290 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
    e2d1c9b39721 drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01
    c02917e70a05 drm/armada: Fix off-by-one error in armada_overlay_get_property()
    f41c65f8d05b of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
    883fdbbdbe93 drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
    5f0994e3f271 drm/tegra: Remove superfluous error messages around platform_get_irq()
    4a61d72585af md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
    8563d52a4f61 md/bitmap: don't set max_write_behind if there is no write mostly device
    a15f309eb99c drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
    8e766a94ec2d arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
    36d3e4dedb86 arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
    0eea279e01fe ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
    ed4e48de8962 drm: adv7511: Fix low refresh rate register for ADV7533/5
    61ccdd21679e ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
    e9875d2f2507 ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
    c4c72bf42f48 ARM: dts: s5pv210: adjust node names to DT spec
    bbcea0924b83 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
    a2d6c5e8e703 ARM: dts: s3c64xx: align pinctrl with dtschema
    3f0d83994e98 x86/mm: Fix PAT bit missing from page protection modify mask
    b56309c77d76 drm/etnaviv: fix dumping of active MMU context
    8303282409b3 ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
    031ab0f10e3b ARM: dts: BCM53573: Add cells sizes to PCIe node
    8415d803d840 ARM: dts: BCM53573: Drop nonexistent #usb-cells
    cfc4a78e7054 ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
    36d958ad4088 ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name
    826ef1576996 drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
    967cbc8a23e5 arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller
    71d2d9aa2bd8 soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros
    1356531e9249 soc: qcom: ocmem: Add OCMEM hardware version print
    4bf179f53694 ASoC: stac9766: fix build errors with REGMAP_AC97
    86d89987f099 quota: fix dqput() to follow the guarantees dquot_srcu should provide
    af4ff4748985 quota: add new helper dquot_active()
    905e316e5e99 quota: rename dquot_active() to inode_quota_active()
    a5da2849db58 quota: factor out dquot_write_dquot()
    53805176ec6a drm/bridge: tc358764: Fix debug print parameter order
    abd1c17ef4fb netrom: Deny concurrent connect().
    b08cc6c0396f net/sched: sch_hfsc: Ensure inner classes have fsc curve
    ab04c731a198 hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
    db7a3531662c mlxsw: i2c: Limit single transaction buffer size
    3d36ba3f7e77 mlxsw: i2c: Fix chunk size setting in output mailbox buffer
    7cc9e1dcc1af net: arcnet: Do not call kfree_skb() under local_irq_disable()
    d4f79aa9ee34 wifi: ath9k: use IS_ERR() with debugfs_create_dir()
    50f89daf9e62 Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
    bef85d58f770 wifi: mwifiex: avoid possible NULL skb pointer dereference
    cfce1973ffe0 wifi: ath9k: protect WMI command response buffer replacement with a lock
    ee72b2b1f57e wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
    91d92d897560 samples/bpf: fix broken map lookup probe
    08a6e99a334d wifi: mwifiex: Fix missed return in oob checks failed path
    0c4240d23db5 wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
    0fe11dd3fe05 fs: ocfs2: namei: check return value of ocfs2_add_entry()
    d8f5415d4d49 lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
    a97f221651fc lwt: Fix return values of BPF xmit ops
    97ccf9f19580 hwrng: iproc-rng200 - Implement suspend and resume calls
    49729fc47289 crypto: caam - fix unchecked return value error
    7a97044477c9 ice: ice_aq_check_events: fix off-by-one check when filling buffer
    9b812dcf2b1e selftests/bpf: Clean up fmod_ret in bench_rename test script
    88bc7122dba2 net: tcp: fix unexcepted socket die when snd_wnd is 0
    e87da6a0ac6e Bluetooth: Fix potential use-after-free when clear keys
    6668886ebecc Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
    625bf86bf53e crypto: api - Use work queue in crypto_destroy_instance
    7545292d87db crypto: stm32 - Properly handle pm_runtime_get failing
    323084d77d1f selftests/bpf: fix static assert compilation issue for test_cls_*.c
    a8d69658437c wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
    3fe3923d092e wifi: mwifiex: Fix OOB and integer underflow when rx packets
    5120d93c24bb can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM
    1d6c3017cea5 spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
    ca7ee1b75c36 wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
    791a12102e51 bpf: reject unhashed sockets in bpf_sk_assign
    4d271804f536 udp: re-score reuseport groups when connected sockets are present
    e6e11cbaa1f1 regmap: rbtree: Use alloc_flags for memory allocations
    1d210321de6d hwrng: nomadik - keep clock enabled while hwrng is registered
    f24152c20972 tcp: tcp_enter_quickack_mode() should be static
    b275f0ae3598 bpf: Clear the probe_addr for uprobe
    514116de91c4 bpftool: Use a local bpf_perf_event_value to fix accessing its fields
    920b2f99bcbd cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
    133a1f45b9a6 x86/efistub: Fix PCI ROM preservation in mixed mode
    3de36b8b9bc5 s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
    e06326ff3aae s390/pkey: fix/harmonize internal keyblob headers
    08b1803bfc73 perf/imx_ddr: don't enable counter0 if none of 4 counters are used
    c0e1f9bddcea x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
    0682fc175c82 selftests/resctrl: Close perf value read fd on errors
    f399938a917d selftests/resctrl: Unmount resctrl FS if child fails to run benchmark
    bf1f7aeb5780 selftests/resctrl: Don't leak buffer in fill_cache()
    3ee719b3a026 OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
    066fbd8bc981 refscale: Fix uninitalized use of wait_queue_head_t
    ac96370db7e1 selftests/harness: Actually report SKIP for signal tests
    ac5a73b5d933 tmpfs: verify {g,u}id mount options correctly
    644e93a79056 fs: Fix error checking for d_hash_and_lookup()
    731f39e4a12b eventfd: prevent underflow for eventfd semaphores
    755e86f28ab9 eventfd: Export eventfd_ctx_do_read()
    6b5d585e2302 reiserfs: Check the return value from __getblk()
    5101e2c8a567 Revert "net: macsec: preserve ingress frame ordering"
    ca8f04553ecb udf: Handle error when adding extent to a file
    4ac54312f623 udf: Check consistency of Space Bitmap Descriptor
    42714d3d7097 net: Avoid address overwrite in kernel_connect
    4ded72985bb0 platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications
    0c0547d2a60a tracing: Introduce pipe_cpumask to avoid race on trace_pipes
    99d8d419dd29 ALSA: seq: oss: Fix racy open/close of MIDI devices
    21f47cc15ae1 scsi: storvsc: Always set no_report_opcodes
    5cbc749d11f7 sctp: handle invalid error codes without calling BUG()
    2bdd081a7d7c bnx2x: fix page fault following EEH recovery
    d11a4542889d netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
    7dd6ef1cedca scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
    7a1a7f40adf2 idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
    d399b6ce1ae6 net: usb: qmi_wwan: add Quectel EM05GV2
    bb8a4a36321d vmbus_testing: fix wrong python syntax for integer value comparison
    0ff30413a738 clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
    0111b7bb5143 kprobes: Prohibit probing on CFI preamble symbol
    654e3d27791c security: keys: perform capable check only on privileged operations
    b23cbd3c2518 ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
    331d85f0bc6e ovl: Always reevaluate the file signature for IMA
    357badc01add drm/amd/display: Exit idle optimizations before attempt to access PHY
    de0cdcceaab3 platform/x86: huawei-wmi: Silence ambient light sensor
    8964b32a67e5 platform/x86: intel: hid: Always call BTNL ACPI method
    6b953ee81a45 ASoC: atmel: Fix the 8K sample parameter in I2SC master
    37121461dd47 ASoc: codecs: ES8316: Fix DMIC config
    bc2b0d4d37f1 fs/nls: make load_nls() take a const parameter
    0a584c077967 s390/dasd: fix hanging device after request requeue
    0c96df6913d4 s390/dasd: use correct number of retries for ERP requests
    a5fd143673f3 m68k: Fix invalid .section syntax
    f7700e987f6a vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
    b7cd83cfff56 ethernet: atheros: fix return value check in atl1c_tso_csum()
    16c113426755 ASoC: da7219: Check for failure reading AAD IRQ events
    afa2dbd7d13b ASoC: da7219: Flush pending AAD IRQ when suspending
    efa372af6bfe 9p: virtio: make sure 'offs' is initialized in zc_request
    2f13007fbe66 media: pci: cx23885: fix error handling for cx23885 ATSC boards
    92704dd05521 media: pulse8-cec: handle possible ping error
    9d9cdc32bfce phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
    a8ba2b695955 ARM: dts: imx: Set default tuning step for imx7d usdhc
    678a88ac02e5 ARM: dts: imx: Adjust dma-apbh node name
    6895499b2239 ARM: dts: imx7s: Drop dma-apb interrupt-names
    614c27dfdee0 ARM: dts: imx: update sdma node name format
    d45e2a3d2e4f ASoC: rt5682: Fix a problem with error handling in the io init function of the soundwire
    977baccbbd4e pinctrl: amd: Don't show `Invalid config param` errors
    f1d637b63d8a nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
    0e11bb5ad33d nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
    734c6d3dc7b0 fsi: master-ast-cf: Add MODULE_FIRMWARE macro
    da5dc81ed2b5 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
    9fda2319018c serial: sc16is7xx: fix bug when first setting GPIO direction
    2f982ce208fe serial: sc16is7xx: fix broken port 0 uart init
    bd0ed45dd661 serial: qcom-geni: fix opp vote on shutdown
    c709c7ca020a configfs: fix a race in configfs_lookup()
    746b363bef41 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
    b074fb0fa02e staging: rtl8712: fix race condition
    65bfaf5f9dea HID: wacom: remove the battery when the EKR is off
    542c61470732 usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
    5c4996c22970 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
    d44fa38193c2 USB: serial: option: add FOXCONN T99W368/T99W373 product
    df6696e42e68 USB: serial: option: add Quectel EM05G variant (0x030e)
    f71b0b4a497e modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
    92de8497c342 rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
    1aeb76ffdfc0 net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
    d90e5956c0cc mmc: au1xmmc: force non-modular build and remove symbol_get usage
    c1112a2b54ce ARM: pxa: remove use of symbol_get()
    8c599aa78ce5 erofs: ensure that the post-EOF tails are all zeroed

(From OE-Core rev: e5690db43930efb6166fe398776eac044ce56048)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Bruce Ashfield
ad12417f38 linux-yocto/5.10: update to v5.10.194
Updating  to the latest korg -stable release that comprises
the following commits:

    006d5847646b Linux 5.10.194
    d93ba6e46e5f rcu-tasks: Add trc_inspect_reader() checks for exiting critical section
    3e22624f8fd3 rcu-tasks: Wait for trc_read_check_handler() IPIs
    9190c1f0aed1 rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader
    ad4f8c117b8b rcu: Prevent expedited GP from enabling tick on offline CPU
    268e92252277 Revert "MIPS: Alchemy: fix dbdma2"
    79ea9eb723b7 Revert "drm/amdgpu: install stub fence into potential unused fence pointers"
    be4ccafc077f mhi: pci_generic: Fix implicit conversion warning
    df3427204f1d ARM: module: Use module_init_layout_section() to spot init sections
    b59cfee8d8a2 arm64: module: Use module_init_layout_section() to spot init sections
    943ed7dc5ee4 arm64: module-plts: inline linux/moduleloader.h
    ecd62c85120d module: Expose module_init_layout_section()
    4566606fe3a4 Linux 5.10.193
    b3ac2c1d725b mm,hwpoison: fix printing of page flags
    7f92be110c0f ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
    32f71ef62737 mm: memory-failure: fix unexpected return value in soft_offline_page()
    20c2db79f157 mm: memory-failure: kill soft_offline_free_page()
    406166a3acd7 mm: fix page reference leak in soft_offline_page()
    749630ce9147 mm,hwpoison: refactor get_any_page
    0df5eaab03ed dma-buf/sw_sync: Avoid recursive lock during fence signal
    7592a392b3e1 pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
    91cbf41a9d8b clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
    148a86651caf scsi: core: raid_class: Remove raid_component_add()
    5d02f4320a95 scsi: snic: Fix double free in snic_tgt_create()
    d643d3f322e8 ASoC: rt711: add two jack detection modes
    c7b26063fcae drm/i915: Fix premature release of request's reusable memory
    2d69f68ad409 cgroup/cpuset: Free DL BW in case can_attach() fails
    4603c2a104bc sched/deadline: Create DL BW alloc, free & check overflow interface
    c9546921a4b9 cgroup/cpuset: Iterate only if DEADLINE tasks are present
    5ac05ce56843 sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
    b950133d9a73 sched/cpuset: Bring back cpuset_mutex
    312713e3eae3 cgroup/cpuset: Rename functions dealing with DEADLINE accounting
    b2125926ba66 timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped
    ae4f109b954d tick: Detect and fix jiffies update stall
    c7e91047d345 torture: Fix hang during kthread shutdown phase
    4bc6a4fca1f0 x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
    9e0c0b4ce541 drm/display/dp: Fix the DP DSC Receiver cap size
    8735d1c66c7c drm/vmwgfx: Fix shader stage validation
    ff0639b222e7 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
    da4e9eff0f1e media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
    d2540b5f5aa1 of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
    851f686ed0f5 radix tree: remove unused variable
    3b9a61570bc1 lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
    72e4a5a28ebf batman-adv: Hold rtnl lock during MTU update via netlink
    ee1d443eefb2 batman-adv: Fix batadv_v_ogm_aggr_send memory leak
    0c6da1d84921 batman-adv: Fix TT global entry leak when client roamed back
    6f5d10c0ac60 batman-adv: Do not get eth header before batadv_check_management_packet
    7c0959088366 batman-adv: Don't increase MTU when set by user
    480f2a129d8d batman-adv: Trigger events for auto adjusted MTU
    0dbedf9afee3 selinux: set next pointer before attaching to list
    a54c2048cd75 nfsd: Fix race to FREE_STATEID and cl_revoked
    7c262127d264 NFS: Fix a use after free in nfs_direct_join_group()
    f3c5697aae62 mm: add a call to flush_cache_vmap() in vmap_pfn()
    c9a0e31d9239 clk: Fix slab-out-of-bounds error in devm_clk_release()
    f979b92db1f5 NFSv4: Fix dropped lock for racing OPEN and delegation return
    0a809e01578b ibmveth: Use dcbf rather than dcbfl
    ffde5f9e8876 bonding: fix macvlan over alb bond support
    615ea2603dc8 net: remove bond_slave_has_mac_rcu()
    c8e1e17dee53 rtnetlink: Reject negative ifindexes in RTM_NEWLINK
    7b79dabd639c rtnetlink: return ENODEV when ifname does not exist and group is given
    d64cdb9cb629 netfilter: nf_tables: fix out of memory error handling
    5db1249c70b1 net/sched: fix a qdisc modification with ambiguous command request
    3847137cd167 igb: Avoid starting unnecessary workqueues
    fa7d7a7f007b ice: fix receive buffer size miscalculation
    70dfdbba3070 net: validate veth and vxcan peer ifindexes
    67c8d7ef54df net: bcmgenet: Fix return value check for fixed_phy_register()
    92b20b1569eb net: bgmac: Fix return value check for fixed_phy_register()
    0b39e3070a00 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
    8162b73eef40 dccp: annotate data-races in dccp_poll()
    403cc3e6253d sock: annotate data-races around prot->memory_pressure
    005b6572d039 octeontx2-af: SDP: fix receive link config
    b8205dfed681 tracing: Fix memleak due to race between current_tracer and trace
    9c2ceffd4e36 tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
    0498107394d4 rbd: prevent busy loop when requesting exclusive lock
    5f1697523367 rbd: retrieve and check lock owner twice before blocklisting
    2547026bb8c4 rbd: make get_lock_owner_info() return a single locker or NULL
    145248ebe0b2 libceph, rbd: ignore addr->type while comparing in some cases
    61c303cfb135 drm/amd/display: check TG is non-null before checking if enabled
    b964eb37c020 drm/amd/display: do not wait for mpc idle if tg is disabled
    7e11c58b2620 ALSA: pcm: Fix potential data race at PCM memory allocation helpers
    8c3a4c3b6485 dm integrity: reduce vmalloc space footprint on 32-bit architectures
    4fdfd3d2f09a dm integrity: increase RECALC_SECTORS to improve recalculate speed
    570f52137e9a fbdev: fix potential OOB read in fast_imageblit()
    31131cce2455 fbdev: Fix sys_imageblit() for arbitrary image widths
    209a84a14c0c fbdev: Improve performance of sys_imageblit()
    188edaaaad21 MIPS: cpu-features: Use boot_cpu_type for CPU type based features
    61913b303b31 MIPS: cpu-features: Enable octeon_cache by cpu_type
    bda55fb5ca61 fs: dlm: fix mismatch of plock results from userspace
    c3a1c4d996bf fs: dlm: use dlm_plock_info for do_unlock_close
    d503919895d8 fs: dlm: change plock interrupted message to debug again
    1652bcbf9e71 fs: dlm: add pid to debug log
    e850cd32df9f dlm: replace usage of found with dedicated list iterator variable
    7b44c1f383a1 dlm: improve plock logging if interrupted
    cd689b59129f PCI: acpiphp: Reassign resources on bridge if necessary
    e82757215295 xprtrdma: Remap Receive buffers after a reconnect
    8a64aadc29ba NFSv4: fix out path in __nfs4_get_acl_uncached
    c6aecc29d29e objtool/x86: Fix SRSO mess

(From OE-Core rev: 5bdf0da0372084ca312428f4e2585833fc732e9b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00
Bruce Ashfield
7eefa6dfb6 linux-yocto/5.10: update to v5.10.192
Updating  to the latest korg -stable release that comprises
the following commits:

    1599cb60bace Linux 5.10.192
    0e8139f92304 x86/srso: Correct the mitigation status when SMT is disabled
    23e59874657c objtool/x86: Fixup frame-pointer vs rethunk
    26e3f7690cda x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
    88e16ce7f8a6 x86/srso: Disable the mitigation on unaffected configurations
    69712baf2495 x86/CPU/AMD: Fix the DIV(0) initial fix attempt
    62ebfeb0dcf7 x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
    91b349289ef1 x86/static_call: Fix __static_call_fixup()
    d2be58f9215a x86/srso: Explain the untraining sequences a bit more
    06597b650beb x86/cpu: Cleanup the untrain mess
    e0f50b0e4186 x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
    0676a392539b x86/cpu: Rename original retbleed methods
    8b0ff83e8ad3 x86/cpu: Clean up SRSO return thunk mess
    20e24c8b4c2a x86/ibt: Add ANNOTATE_NOENDBR
    bbbe1b23c7e6 objtool: Add frame-pointer-specific function ignore
    bd3d12e6fda0 x86/alternative: Make custom return thunk unconditional
    043d3bfe0a72 x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
    d5b3c88d153c x86/cpu: Fix __x86_return_thunk symbol type
    5962f64ed2b6 mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
    98c7fe38c41e net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
    9aead733f5e0 virtio-net: set queues after driver_ok
    c080cee93030 af_unix: Fix null-ptr-deref in unix_stream_sendpage().
    7aa165d761e7 netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
    e62de63c63f3 mmc: block: Fix in_flight[issue_type] value error
    9022e9e62db9 mmc: wbsd: fix double mmc_free_host() in wbsd_init()
    6e74926ede96 cifs: Release folio lock on fscache read hit.
    a04ac0c31881 ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.
    bd70d0b28010 serial: 8250: Fix oops for port->pm on uart_change_pm()
    03a7f213af46 ALSA: hda/realtek - Remodified 3k pull low procedure
    b7d1c719842d ASoC: meson: axg-tdm-formatter: fix channel slot allocation
    e761b7e90ac9 ASoC: rt5665: add missed regulator_bulk_disable
    d23dd85903c9 arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
    70626b93d6eb arm64: dts: rockchip: sort nodes/properties on rk3399-rock-4
    7ba9ac0b5a90 arm64: dts: rockchip: fix regulator name on rk3399-rock-4
    fba59a4b55ae arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
    77806f63c317 arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
    1411c3e86e66 arm64: dts: rockchip: use USB host by default on rk3399-rock-pi-4
    eb5b1e932c18 arm64: dts: rockchip: fix supplies on rk3399-rock-pi-4
    73990370d63d bus: ti-sysc: Flush posted write on enable before reset
    0a593e8a9d24 net: do not allow gso_size to be set to GSO_BY_FRAGS
    51bc052db86d sock: Fix misuse of sk_under_memory_pressure()
    773075d38a2f net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
    0a9040dedec2 i40e: fix misleading debug logs
    abe68922d774 team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    526d42c558f5 net: phy: broadcom: stub c45 read/write for 54810
    a7653eaea0a5 netfilter: nft_dynset: disallow object maps
    49f57a9087d1 ipvs: fix racy memcpy in proc_do_sync_threshold
    c8d0d3811e20 drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
    86517421f470 selftests: mirror_gre_changes: Tighten up the TTL test match
    614811692e21 xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
    bd30aa9c7feb xfrm: add NULL check in xfrm_update_ae_params
    0b4d69539fde ip_vti: fix potential slab-use-after-free in decode_session6
    ec23b25e5687 ip6_vti: fix slab-use-after-free in decode_session6
    bafa23638081 xfrm: fix slab-use-after-free in decode_session6
    0f89909c80a9 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
    8b92d03cfcec net: af_key: fix sadb_x_filter validation
    7e50815d2903 net: xfrm: Fix xfrm_address_filter OOB read
    549e4e167a4d i2c: designware: Handle invalid SMBus block data response length value
    bd7bef82ce0e btrfs: fix BUG_ON condition in btrfs_cancel_balance
    483d713ba2f6 tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms
    869ce5e59845 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
    0ba7f969be59 powerpc/rtas_flash: allow user copy to flash block cache objects
    c5f59de36202 fbdev: mmp: fix value check in mmphw_probe()
    268cc9bc54bd i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
    3ff54d904faf virtio-mmio: don't break lifecycle of vm_dev
    b1fe05cc5126 virtio-mmio: Use to_virtio_mmio_device() to simply code
    3b76d9263679 tracing/probes: Fix to update dynamic data counter if fetcharg uses it
    265a979dedb1 tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
    a89054535368 mmc: meson-gx: fix deferred probing
    e8a41b4a5008 mmc: meson-gx: use devm_mmc_alloc_host
    50ed76c9e09b mmc: core: add devm_mmc_alloc_host
    d523ce6f51f1 mmc: sunxi: fix deferred probing
    939a12f29a4b mmc: bcm2835: fix deferred probing
    01dfc61f72a8 USB: dwc3: qcom: fix NULL-deref on suspend
    3e2b5d66e926 usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
    f5c11b45f3f9 usb: cdns3: allocate TX FIFO size according to composite EP number
    a461bcfb36d6 usb: gadget: udc: core: Introduce check_config to verify USB configuration
    a64f5fe493b5 irqchip/mips-gic: Use raw spinlock for gic_lock
    0704666c570d irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
    372f1752b745 bus: mhi: host: Range check CHDBOFF and ERDBOFF
    77944a6f3cf8 bus: mhi: Move host MHI code to "host" directory
    f73891261566 bus: mhi: Add MMIO region length to controller structure
    1cacbb711e32 bus: mhi: Add MHI PCI support for WWAN modems
    436b4232533a iio: addac: stx104: Fix race condition when converting analog-to-digital
    aeecd8d97da7 iio: addac: stx104: Fix race condition for stx104_write_raw()
    f6576d4851fa iio: adc: stx104: Implement and utilize register structures
    9d1609824554 iio: adc: stx104: Utilize iomap interface
    d2ba1f40fc09 dt-bindings: iio: add AD74413R
    c5e580831b2d iio: add addac subdirectory
    bb70fdbfa272 IMA: allow/fix UML builds
    66a3b2a12138 ring-buffer: Do not swap cpu_buffer during resize process
    dd5a12cdf20c powerpc/kasan: Disable KCOV in KASAN code
    9f9eed451176 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
    7a21c2e474ae ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
    b870b9a47fdb drm/amdgpu: Fix potential fence use-after-free v2
    f19add5c7760 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
    2958cf9f805b Bluetooth: L2CAP: Fix use-after-free
    04bb8af40a77 pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
    7c5b2649f6a3 gfs2: Fix possible data races in gfs2_show_options()
    e8f3d96051c1 usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
    7a3a7c6fa0dc usb: chipidea: imx: don't request QoS for imx8ulp
    2caeb722f0ea media: platform: mediatek: vpu: fix NULL ptr dereference
    99d6afa19d6d usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
    e52de26cb374 media: v4l2-mem2mem: add lock to protect parameter num_rdy
    5c094ca99482 FS: JFS: Check for read-only mounted filesystem in txBegin
    2a3f20efe6c9 FS: JFS: Fix null-ptr-deref Read in txBegin
    e778c8b0a9b6 MIPS: dec: prom: Address -Warray-bounds warning
    911b48eec451 fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
    4503f6fc95d6 udf: Fix uninitialized array access for some pathnames
    a2966e0436dd ovl: check type and offset of struct vfsmount in ovl_entry
    73311dd83185 RDMA/mlx5: Return the firmware result upon destroying QP/RQ
    19312bc3ff67 HID: add quirk for 03f0:464a HP Elite Presenter Mouse
    04bd3a362d2f drm/amdgpu: install stub fence into potential unused fence pointers
    04e774fb6789 dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
    cbaebbba722c quota: fix warning in dqgrab()
    8a4f4d47b82f quota: Properly disable quotas when add_dquot_ref() fails
    df907501ba54 iopoll: Call cpu_relax() in busy loops
    940ccc291cca ASoC: Intel: sof_sdw: Add support for Rex soundwire
    b2882c51e6d0 ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
    dbe0f607f84c PCI: tegra194: Fix possible array out of bounds access
    10459ffd56ad ASoC: Intel: sof_sdw: add quirk for LNL RVP
    9f4dd39696c8 ASoC: Intel: sof_sdw: add quirk for MTL RVP
    751c5b6a2315 ALSA: emu10k1: roll up loops in DSP setup code for Audigy
    e6825b30d37f drm/radeon: Fix integer overflow in radeon_cs_parser_init
    e6c0a9728e3a net/mlx5: Skip clock update work when device is in error state
    81cc91bba42b net/mlx5: Move all internal timer metadata into a dedicated struct
    ba2e27e5100d net/mlx5: Refactor init clock function
    e77ef787415b macsec: use DEV_STATS_INC()
    ecf0e627fbbb macsec: Fix traffic counters/statistics
    b630367a608d mmc: sdhci-f-sdh30: Replace with sdhci_pltfm

(From OE-Core rev: 8851b954ba00761fc6dd31561643fecf6749b838)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-05 15:48:49 -10:00