Commit Graph

70371 Commits

Author SHA1 Message Date
Bruce Ashfield
f8d46c04af linux-yocto/6.1: update to v6.1.36
Updating  to the latest korg -stable release that comprises
the following commits:

    a1c449d00ff8 Linux 6.1.36
    29429a1f5871 smb: move client and server files to common directory fs/smb
    9d3e4bca4b92 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
    81d4078f7a42 x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
    679354bea008 KVM: arm64: Restore GICv2-on-GICv3 functionality
    6ab9468d3eea vhost_net: revert upend_idx only on retriable error
    454e4f391a14 vhost_vdpa: tell vqs about the negotiated
    1af1cd7be370 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
    022f2306d94f drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
    aa88042218aa drm/exynos: vidi: fix a wrong error return
    711f727f7bab null_blk: Fix: memory release when memory_backed=1
    f6076a1386c9 ARM: dts: Fix erroneous ADS touchscreen polarities
    1d1baefacdb4 i2c: mchp-pci1xxxx: Avoid cast to incompatible function type
    8e3257599409 ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256
    cfa01235b5ed ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted
    570583c6251a s390/purgatory: disable branch profiling
    c2888c460db2 gfs2: Don't get stuck writing page onto itself under direct I/O
    878dad66b9b5 ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x
    1c97025d441f ASoC: nau8824: Add quirk to active-high jack-detect
    5cc506e9b3e5 soundwire: qcom: add proper error paths in qcom_swrm_startup()
    2839e0b64e65 soundwire: dmi-quirks: add new mapping for HP Spectre x360
    ee4d36a14d3f ASoC: simple-card: Add missing of_node_put() in case of error
    e701fb0a5d5b ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag
    06b9522ca831 spi: lpspi: disable lpspi module irq in DMA mode
    39a77f005f8a s390/cio: unregister device when the only path is gone
    552a24eb7168 arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW
    4de58b7c14c0 arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW
    2e8ebf1a44cb Input: soc_button_array - add invalid acpi_index DMI quirk handling
    ba0cc7a2e508 nvme: improve handling of long keep alives
    06d9ec407f76 nvme: check IO start time when deciding to defer KA
    8a72260619ca nvme: double KA polling frequency to avoid KATO with TBKAS on
    c8f988c37a6b usb: gadget: udc: fix NULL dereference in remove()
    3f6391062d0b btrfs: fix an uninitialized variable warning in btrfs_log_inode
    a2c3e9bfc02c nfcsim.c: Fix error checking for debugfs_create_dir
    a05df0643120 media: cec: core: don't set last_initiator if tx in progress
    f37956a140d1 media: cec: core: disable adapter in cec_devnode_unregister
    9d8ac2726cff smb3: missing null check in SMB2_change_notify
    3e8458c5b205 arm64: Add missing Set/Way CMO encodings
    8428f4c00d8c HID: wacom: Add error check to wacom_parse_and_register()
    aaa50510adb7 scsi: target: iscsi: Prevent login threads from racing between each other
    0357259cb103 gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()
    8592ada80ea5 gpio: sifive: add missing check for platform_get_irq
    cb1108e17493 gpiolib: Fix GPIO chip IRQ initialization restriction
    90714f7ed760 arm64: dts: rockchip: fix nEXTRST on SOQuartz
    e51abd4808f9 arm64: dts: rockchip: Enable GPU on SOQuartz CM4
    ec3d0f12e728 revert "net: align SO_RCVMARK required privileges with SO_MARK"
    b2e2f9c0939f sch_netem: acquire qdisc lock in netem_change()
    0434277b72a4 platform/x86/amd/pmf: Register notify handler only if SPS is enabled
    2d580c73afdc selftests: forwarding: Fix race condition in mirror installation
    eff07bf11841 io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr
    1b7b048c228e bpf: Force kprobe multi expected_attach_type for kprobe_multi link
    fc3afb337814 bpf/btf: Accept function names that contain dots
    22cc989f2b10 Revert "net: phy: dp83867: perform soft reset and retain established link"
    3e04743dbacf netfilter: nfnetlink_osf: fix module autoload
    abd3afddbf9e netfilter: nf_tables: disallow updates of anonymous sets
    c34b22038543 netfilter: nf_tables: reject unbound chain set before commit phase
    46f801ab5fb9 netfilter: nf_tables: reject unbound anonymous set before commit phase
    b60c0ce0ff31 netfilter: nf_tables: disallow element updates of bound anonymous sets
    0d836f917520 netfilter: nft_set_pipapo: .walk does not deal with generations
    d60be2da67d1 netfilter: nf_tables: drop map element references from preparation phase
    df27be7c1530 netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
    891cd2edddc7 netfilter: nf_tables: fix chain binding transaction logic
    f5b6dbec26f1 be2net: Extend xmit workaround to BE3 chip
    50f689918db4 net: dsa: mt7530: fix handling of LLDP frames
    a50f84af215e net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
    a4e4c7190126 net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
    7fd2e9a69e83 ipvs: align inner_mac_header for encapsulation
    6d1eec1f2dd7 mmc: usdhi60rol0: fix deferred probing
    7e10fff13353 mmc: sh_mmcif: fix deferred probing
    565b8bd2905d mmc: sdhci-acpi: fix deferred probing
    645f89ee3e3e mmc: owl: fix deferred probing
    251101c32a01 mmc: omap_hsmmc: fix deferred probing
    0057a905de5c mmc: omap: fix deferred probing
    f73b380518b2 mmc: mvsdio: fix deferred probing
    4806f6b6b7a3 mmc: mtk-sd: fix deferred probing
    d28b7a87332f net: qca_spi: Avoid high load if QCA7000 is not available
    1d4dd09f13a9 sfc: use budget for TX completions
    0bbb8164ed07 net/mlx5: DR, Fix wrong action data allocation in decap action
    b062caf4f73b xfrm: Linearize the skb after offloading if needed.
    fff9a18e0128 selftests: net: fcnal-test: check if FIPS mode is enabled
    0793ead2ff2c selftests: net: vrf-xfrm-tests: change authentication and encryption algos
    6919634176cd selftests: net: tls: check if FIPS mode is enabled
    ac5671d10060 bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable.
    8bb51cdc4fc2 xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
    d9a0b1a53c79 bpf: Fix verifier id tracking of scalars on spill
    461fc3391c52 bpf: track immediate values written to stack by BPF_ST instruction
    b36ba84f09a1 KVM: arm64: PMU: Restore the host's PMUSERENR_EL0
    c803e91600be xfrm: Ensure policies always checked on XFRM-I input path
    94e81817f080 xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
    8ea03341f78a xfrm: Treat already-verified secpath entries as optional
    43489b2cba5a ieee802154: hwsim: Fix possible memory leaks
    caddcdf2a999 mmc: meson-gx: fix deferred probing
    1a2793a25a60 memfd: check for non-NULL file_seals in memfd_create() syscall
    364fdcbb035b x86/mm: Avoid using set_pgd() outside of real PGD pages
    cbfee3d9d5c0 nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
    24f473769e7e io_uring/poll: serialize poll linked timer start with poll removal
    2d80c85fa404 arm64: dts: rockchip: Fix rk356x PCIe register and range mappings
    277a7c23b590 regmap: spi-avmm: Fix regmap_bus max_raw_write
    b385b1d28e4e regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
    ad5daeaa3d57 spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan()
    21945b7a868f wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0
    1dfca388fc7c bpf: ensure main program has an extable
    03b2149d5aca mmc: sunxi: fix deferred probing
    8b8756324c5b mmc: bcm2835: fix deferred probing
    1db5a39a904e mmc: sdhci-spear: fix deferred probing
    f1b17198e45b mmc: mmci: stm32: fix max busy timeout calculation
    6c2af0fd8301 mmc: meson-gx: remove redundant mmc_request_done() call from irq context
    687d34c57807 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
    3dd0041c41da mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS
    0d7a4e6589a0 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
    7b162a18d332 cgroup: Do not corrupt task iteration when rebinding subsystem
    c2c46a70282f mptcp: consolidate fallback and non fallback state machine
    1d3127542665 mptcp: fix possible list corruption on passive MPJ
    b747e755986a mptcp: fix possible divide by zero in recvmsg()
    b7bb71dfb541 mptcp: handle correctly disconnect() failures
    1d9dc9bed999 io_uring/net: disable partial retries for recvmsg with cmsg
    4d729cc67b05 io_uring/net: clear msg_controllen on partial sendmsg retry
    4db49d59a89c PCI: hv: Add a per-bus mutex state_lock
    091d03d19859 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
    5c09925b1879 PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
    da2fff20d92d Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
    a74a9d9b756a PCI: hv: Fix a race condition bug in hv_pci_query_relations()
    ba803d7ac18a Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
    191cb913293a Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
    4f7e702b74f7 KVM: Avoid illegal stage2 mapping on invalid memory slot
    390aeb5ae7c0 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
    8e63b1fd24a8 nilfs2: fix buffer corruption due to concurrent device reads
    d5d7cde2ad19 scripts: fix the gfp flags header path in gfp-translate
    4a89bfb1a142 writeback: fix dereferencing NULL mapping->host on writeback_page_template
    1fed1f851346 selftests: mptcp: join: fix "userspace pm add & remove address"
    53e096bcaeac selftests: mptcp: join: skip fail tests if not supported
    f17459121c37 selftests: mptcp: join: skip userspace PM tests if not supported
    f40a7ded34c9 selftests: mptcp: join: skip test if iptables/tc cmds fail
    bce23d125434 selftests: mptcp: sockopt: skip TCP_INQ checks if not supported
    157dcb20000b selftests: mptcp: diag: skip listen tests if not supported
    755c8857abde selftests/mount_setattr: fix redefine struct mount_attr build error
    94851666aff4 selftests: mptcp: join: skip MPC backups tests if not supported
    fe1f28db73f7 selftests: mptcp: join: skip fullmesh flag tests if not supported
    6313c493e3c9 selftests: mptcp: join: skip backup if set flag on ID not supported
    efb4f6c2dd4c selftests: mptcp: join: skip implicit tests if not supported
    dd6c284a3430 selftests: mptcp: join: support RM_ADDR for used endpoints or not
    695cce2f2cf5 selftests: mptcp: join: skip Fastclose tests if not supported
    0381f30735e2 selftests: mptcp: join: support local endpoint being tracked or not
    1c0d9b4b4745 selftests: mptcp: join: skip check if MIB counter not supported
    e35edb09e53e selftests: mptcp: join: helpers to skip tests
    4d65ec947d24 selftests: mptcp: join: use 'iptables-legacy' if available
    44d3366bf4b9 selftests: mptcp: lib: skip if not below kernel version
    c5bdd8eb8e7d selftests: mptcp: userspace pm: skip if not supported
    733bf9d80d95 selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable
    bfe225dec643 selftests: mptcp: sockopt: skip getsockopt checks if not supported
    103b4e62de32 selftests: mptcp: sockopt: relax expected returned size
    61c1bf0666a9 selftests: mptcp: pm nl: skip fullmesh flag checks if not supported
    41f7f7f6e43e selftests: mptcp: pm nl: remove hardcoded default limits
    e79e5e7642ad selftests: mptcp: connect: skip disconnect tests if not supported
    cba0db9c1586 selftests: mptcp: connect: skip transp tests if not supported
    9ead68270b29 selftests: mptcp: lib: skip if missing symbol
    4bed22c6876b selftests: mptcp: join: fix ShellCheck warnings
    a032ccca15e1 selftests: mptcp: remove duplicated entries in usage
    0c6552f83725 tick/common: Align tick period during sched_timer setup
    854156d12caa ksmbd: validate session id and tree id in the compound request
    c86211159bc3 ksmbd: fix out-of-bound read in smb2_write
    9650cf70ec9d ksmbd: validate command payload size
    0fd4ac3773c3 tpm_crb: Add support for CRB devices based on Pluton
    a46fa5696613 tpm, tpm_tis: Claim locality in interrupt handler
    2e7ad879e1b0 mm: Fix copy_from_user_nofault().
    4ed740c6482f ata: libata-scsi: Avoid deadlock on rescan after device resume
    c4465bff4d2f tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
    17732fed852a tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms
    9bcac453890b drm/amd/display: fix the system hang while disable PSR
    e538342002cb drm/amd/display: Add wrapper to call planes and stream update
    8d855bc67630 drm/amd/display: Use dc_update_planes_and_stream

(From OE-Core rev: a15a00443a7a7d78586a5b4e18d03ef0bdef6b7e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 326b34c6cef90a88cf5bb9538a0d93595e7c4c9c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-01 06:17:27 -10:00
Mingli Yu
452cc7b484 ruby: Fix CVE-2023-36617
Backport two patches [1] [2] to fix CVE-2023-36617 [3].

[1] 9010ee2536
[2] 9d7bcef1e6
[3] https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/

(From OE-Core rev: 403a24f02600e2462e8ccfbb42651e15e002bd2e)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-01 06:17:27 -10:00
Mingli Yu
d89de300d0 cups: Fix CVE-2023-34241
Backport patch [1] to fix CVE-2023-34241.

[1] 9809947a95

(From OE-Core rev: 0048a87ec9442f1f9480d57ccfeeaa79ec171f04)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-01 06:17:27 -10:00
Peter Marko
38c70c430f python3: ignore CVE-2023-36632
This CVE shouldn't have been filed as the "exploit" is described in the
documentation as how the library behaves.

(From OE-Core rev: 3e7f736fa07a132d4fe42a59baaabe565238da21)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c652f094d86c4efb7ff99accba63b8169493ab18)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-01 06:17:27 -10:00
Peter Marko
53929c40c5 libjpeg-turbo: patch CVE-2023-2804
Relevant links:
* linked fronm NVD:
  * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1492586118
* follow-up analysis:
  * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1496473989
  * picked commits fix all issues mentioned in this analysis

(From OE-Core rev: 473058bf65ac98f644b1ffd4d5190ee782b824a5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-01 06:17:27 -10:00
Michael Opdenacker
c4c2de9a57 ref-manual: LTS releases now supported for 4 years
(From yocto-docs rev: 60bcf303631054a1caa7ed1e22516a261b884fde)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Lee Chee Yang
80320195c3 migration-guides: add release notes for 4.0.11
(From yocto-docs rev: 2487fb9065f497a3cd7f5077665a6f4815a7faef)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Lee Chee Yang
07a485973d migration-guides: add release notes for 4.0.10
(From yocto-docs rev: c8c20ff5267669b712628408967c087dac179563)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Michael Opdenacker
366a7ebc22 conf.py: add macro for Mitre CVE links
Useful for CVEs that are not found (yet) on https://nvd.nist.gov/

(From yocto-docs rev: 4b8f2dddf85ca4be6bacad65f3893c9f593f7e18)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Mingli Yu
9cfa17a577 acpica: Update SRC_URI
Update the SRC_URI to fix the do_fetch warning.
 $ wget https://acpica.org/sites/acpica/files/acpica-unix-20220331.tar.gz
--2023-07-19 02:45:33--  https://acpica.org/sites/acpica/files/acpica-unix-20220331.tar.gz
Resolving acpica.org... 20.29.206.128
Connecting to acpica.org|20.29.206.128|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/overview.html [following]
--2023-07-19 02:45:33--  https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/overview.html
Resolving www.intel.com... 23.72.14.54
Connecting to www.intel.com|23.72.14.54|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2023-07-19 02:45:34 ERROR 403: Forbidden.

 $ wget https://downloadmirror.intel.com/774879/acpica-unix-20220331.tar.gz
--2023-07-19 02:46:04--  https://downloadmirror.intel.com/774879/acpica-unix-20220331.tar.gz
Resolving downloadmirror.intel.com... 18.164.154.85, 18.164.154.5, 18.164.154.74, ...
Connecting to downloadmirror.intel.com|18.164.154.85|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1911044 (1.8M) [application/gzip]
Saving to: ‘acpica-unix-20220331.tar.gz’

acpica-unix-20220331.tar.gz           100%[=========================================================================>]   1.82M  1.61MB/s    in 1.1s

2023-07-19 02:46:06 (1.61 MB/s) - ‘acpica-unix-20220331.tar.gz’ saved [1911044/1911044]

(From OE-Core rev: 4724b382d183a2b3b8426c77c23b368f509411e7)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Richard Purdie
7995f780f9 gcc-testsuite: Fix ppc cpu specification
After this change in qemu:

c7e89de132

there is no 'max' cpu model on ppc. Drop it to clean up ppc gcc testsuite failures.

In order for this to work we do need to pull in the alternative cpu option from
QEMU_EXTRAOPTIONS on powerpc.

(From OE-Core rev: ea3143b243bb979f9b89f01fc2e7826cac0a7d75)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c447f2b21b20fb2b1829d540af2cc0bf8242700c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Ross Burton
9d9f199ad8 machine/arch-arm64: add -mbranch-protection=standard
Enable branch protection (PAC/BTI) for all aarch64 builds.  This was
previously enabled at a global level in the GCC build, but that breaks
the gcc test suite.

(From OE-Core rev: 63ce207e15bdee7708754a178a19fca64c4c0ee9)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8905639d1cdc5ce809cc5ecd9672f5e86bf8a579)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Ross Burton
151fd33bbe gcc: don't pass --enable-standard-branch-protection
By changing the default code generation of GCC we're inadvertently
breaking the GCC test suite, which has ~120K+ more failures when run for
aarch64 compared to x86-64.

This was because the generated code fragments included the BTI
instructions, which the test case wasn't expecting.  We can't tell the
tests globally to run without branch protection, as that will break the
tests which also turn it on.

Remove the enabling of branch protection by standard in GCC, we'll
enable it in the tune files instead.

(From OE-Core rev: 81351d984bc6238e9b901ae83c0de6e3d3463c77)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bb4b9017db6a893ed054a2d2ad4cc671dec09c42)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Ross Burton
a809b0d5dc tiff: upgrade to 4.5.1
Also remove old CVE_CHECK_IGNOREs which are no longer needed due to CPE
updates.

This is a backport from master. Mickledore had one extra CVE patch that
was not on master at the time of upgrade, so it had to be manually
removed here.

(From OE-Core rev: 309b58071d14406ccdf90342f0a33285dc83c87c)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Natasha Bailey <nat.bailey@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Trevor Gamblin
b3d4ea6522 vim: upgrade 9.0.1527 -> 9.0.1592
Fixes:

https://nvd.nist.gov/vuln/detail/CVE-2023-2609
d1ae836 patch 9.0.1531: crash when register contents ends up being invalid
https://nvd.nist.gov/vuln/detail/CVE-2023-2610
ab9a2d8 patch 9.0.1532: crash when expanding "~" in substitute causes very long text

(From OE-Core rev: 5893c605060983db08a4b2d19b1dbfef23f9910d)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Bruce Ashfield
62b021012a linux-yocto/5.15: update to v5.15.120
Updating  to the latest korg -stable release that comprises
the following commits:

    d54cfc420586 Linux 5.15.120
    c06edf13f4cf nubus: Partially revert proc_create_single_data() conversion
    6e65fa33edf5 parisc: Delete redundant register definitions in <asm/assembly.h>
    b4d8f8900021 drm/amdgpu: Validate VM ioctl flags.
    26eb191bf5a0 scripts/tags.sh: Resolve gtags empty index generation
    989b4a753c7e perf symbols: Symbol lookup with kcore can fail if multiple segments match stext
    87f51cf60e3e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe"
    6a28f3490d3d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
    67ce7724637c HID: wacom: Use ktime_t rather than int when dealing with timestamps
    347732317749 bpf: ensure main program has an extable
    d874cf9799a9 can: isotp: isotp_sendmsg(): fix return error fix on TX path
    27d03d15bb8b x86/smp: Use dedicated cache-line for mwait_play_dead()
    d6c745ca4fc5 x86/microcode/AMD: Load late on both threads too
    9052349685e9 drm/amdgpu: Set vmbo destroy after pt bo is created
    796481bedc3e mm, hwpoison: when copy-on-write hits poison, take page offline
    6713b8f11aa0 mm, hwpoison: try to recover from copy-on write faults
    b46021ab8304 mptcp: consolidate fallback and non fallback state machine
    42ff95b4bd11 mptcp: fix possible divide by zero in recvmsg()

(From OE-Core rev: 5209c9db1a918aa06c5d37163742efc59bb4503b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Bruce Ashfield
50644d5458 linux-yocto/5.15: update to v5.15.119
Updating  to the latest korg -stable release that comprises
the following commits:

    4af60700a60c Linux 5.15.119
    10fbd2e04e40 act_mirred: remove unneded merge conflict markers
    2230b3f874d9 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
    907a069ec38f x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
    7949f83f7ecc vhost_net: revert upend_idx only on retriable error
    fdac0aa4a175 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
    f012d3037c15 drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
    a44b4230d2ba drm/exynos: vidi: fix a wrong error return
    79b4125bce96 ARM: dts: Fix erroneous ADS touchscreen polarities
    9684c4fdeeca s390/purgatory: disable branch profiling
    3c4d87e9fa8a ASoC: nau8824: Add quirk to active-high jack-detect
    d77eac1b14e0 soundwire: dmi-quirks: add new mapping for HP Spectre x360
    53ad4af4ec90 ASoC: simple-card: Add missing of_node_put() in case of error
    bb45dc7b67c5 spi: lpspi: disable lpspi module irq in DMA mode
    f8d9d8f1727d s390/cio: unregister device when the only path is gone
    e10d15fdfced Input: soc_button_array - add invalid acpi_index DMI quirk handling
    26bde09a1512 nvme: double KA polling frequency to avoid KATO with TBKAS on
    e3bbc148377d usb: gadget: udc: fix NULL dereference in remove()
    cce681383d34 nfcsim.c: Fix error checking for debugfs_create_dir
    8a5ddd1430d4 media: cec: core: don't set last_initiator if tx in progress
    01cf989090da arm64: Add missing Set/Way CMO encodings
    f97b16c0a538 HID: wacom: Add error check to wacom_parse_and_register()
    e8bdb1f88699 scsi: target: iscsi: Prevent login threads from racing between each other
    1cc379d53b66 gpio: sifive: add missing check for platform_get_irq
    497d40140865 gpiolib: Fix GPIO chip IRQ initialization restriction
    7973c4b3b97d gpio: Allow per-parent interrupt data
    c1a2b52d999e sch_netem: acquire qdisc lock in netem_change()
    3138c85031e8 selftests: forwarding: Fix race condition in mirror installation
    b7db41a86541 bpf/btf: Accept function names that contain dots
    0f8d81254fd6 Revert "net: phy: dp83867: perform soft reset and retain established link"
    57130334da4e netfilter: nfnetlink_osf: fix module autoload
    53defc6ecff4 netfilter: nf_tables: disallow updates of anonymous sets
    2f2f9eaa6da1 netfilter: nf_tables: reject unbound chain set before commit phase
    2938e7d582d7 netfilter: nf_tables: reject unbound anonymous set before commit phase
    baa3ec1b31f5 netfilter: nf_tables: disallow element updates of bound anonymous sets
    45eb6944d0f5 netfilter: nft_set_pipapo: .walk does not deal with generations
    4004f12aaca8 netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
    314a8697d080 netfilter: nf_tables: fix chain binding transaction logic
    1328e8d4c3ee be2net: Extend xmit workaround to BE3 chip
    768f94c5f639 net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
    aa528e7d379f net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
    efea112a87b6 ipvs: align inner_mac_header for encapsulation
    24d7d9aee03d mmc: usdhi60rol0: fix deferred probing
    d1e08bed0307 mmc: sh_mmcif: fix deferred probing
    34c4906b9a06 mmc: sdhci-acpi: fix deferred probing
    41f1e8dab08d mmc: owl: fix deferred probing
    b86ca9e08ca9 mmc: omap_hsmmc: fix deferred probing
    445a9568dec1 mmc: omap: fix deferred probing
    840deb8d1418 mmc: mvsdio: fix deferred probing
    92f73c4f927c mmc: mtk-sd: fix deferred probing
    aedecd013d2c net: qca_spi: Avoid high load if QCA7000 is not available
    156dd06fb337 xfrm: Linearize the skb after offloading if needed.
    d967bd7ea6cc selftests: net: fcnal-test: check if FIPS mode is enabled
    964cfdfd4b4f xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
    25e89fa7b5a8 bpf: Fix verifier id tracking of scalars on spill
    0b180495f6b0 bpf: track immediate values written to stack by BPF_ST instruction
    3229a29e95f5 xfrm: Ensure policies always checked on XFRM-I input path
    d055ee18cab8 xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
    491ce3c1d98a xfrm: Treat already-verified secpath entries as optional
    0ce3d0c068d9 ieee802154: hwsim: Fix possible memory leaks
    29672dc47d99 mmc: meson-gx: fix deferred probing
    9bac4a2b7326 memfd: check for non-NULL file_seals in memfd_create() syscall
    103734b429b9 x86/mm: Avoid using set_pgd() outside of real PGD pages
    793d0224bb60 nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
    96987c383c2b io_uring/net: disable partial retries for recvmsg with cmsg
    25a543ca3005 io_uring/net: clear msg_controllen on partial sendmsg retry
    34a7e5021a43 io_uring/net: save msghdr->msg_control for retries
    b07bb2914ada writeback: fix dereferencing NULL mapping->host on writeback_page_template
    3c46a240ddba regmap: spi-avmm: Fix regmap_bus max_raw_write
    4796d9b06917 regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
    ba9952e2f50b ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
    acee272283f4 mmc: mmci: stm32: fix max busy timeout calculation
    999173f295cc mmc: meson-gx: remove redundant mmc_request_done() call from irq context
    00010b52c705 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
    4a557910bbed cgroup: Do not corrupt task iteration when rebinding subsystem
    815b24401165 PCI: hv: Add a per-bus mutex state_lock
    34e21b8ff3e6 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
    7d852ca7af37 PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
    5e0d33cc7813 Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
    ac0df91c7d98 PCI: hv: Fix a race condition bug in hv_pci_query_relations()
    80c5d97b4aa1 Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
    4d31eb2e266c Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
    953dd7e2df81 KVM: Avoid illegal stage2 mapping on invalid memory slot
    1d6c93206839 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
    b12011cea56b nilfs2: fix buffer corruption due to concurrent device reads
    485f6be2549c selftests: mptcp: join: skip check if MIB counter not supported
    64cb73ea77ab selftests: mptcp: join: use 'iptables-legacy' if available
    979a941d7ed3 selftests: mptcp: pm nl: remove hardcoded default limits
    ac65930751c4 selftests/mount_setattr: fix redefine struct mount_attr build error
    726d033133e7 selftests: mptcp: lib: skip if not below kernel version
    b28fc26683b4 selftests: mptcp: lib: skip if missing symbol
    024a24e5d4dd tick/common: Align tick period during sched_timer setup
    3c1aa91b37f9 drm/amd/display: Add wrapper to call planes and stream update
    eea850c025b5 drm/amd/display: Use dc_update_planes_and_stream
    fb7c68bbccad drm/amd/display: Add minimal pipe split transition state
    b5f0e898f674 tpm, tpm_tis: Claim locality in interrupt handler
    39e787253720 tracing: Add tracing_reset_all_online_cpus_unlocked() function
    5a24be76af79 drm/amd/display: fix the system hang while disable PSR

(From OE-Core rev: 35f0fb05f8be017e906626aa1060a81d4ca8e1c1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Kai Kang
52d27f0f91 webkitgtk: 2.38.5 -> 2.38.6
Update webkitgtk from 2.38.5 to 2.38.6. It fixes CVE-2023-27932 and
CVE-2023-27954.

What’s new in the WebKitGTK 2.38.6 release?

* Enable the Asynchronous Clipboard API to make certain pages work (e.g.
  GithHub started recently requiring it).
* Support :has() CSS selectors in content filters.
* Apply basic font properties as font variation settings.
* The Bubblewrap sandbox no longer requires setting an application
  identifier via GApplication to operate correctly. Using GApplication
  is still recommended, but optional.
* Improvements to the GStreamer multimedia playback, in particular
  around MSE, WebRTC, and seeking.
* Fix the build with journald support enabled when using elogind instead
  of the systemd libraries.
* Fix the build with Link-Time Optimization enabled (-flto=auto).
* Fix context menus not working in the remote Web Inspector.
* Fix usage of the remote Web Inspector over HTTP.
* Fix debug logs not being emitted in release builds.
* Fix several crashes and rendering issues.

(From OE-Core rev: 34bd08b121f1653907b45eb8d6192a77ef638005)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Sakib Sajal
3bd29f3620 go: fix CVE-2023-24531
Backport required commits to fix CVE-2023-24531.

(From OE-Core rev: 5d80e920c7ceaf091ccace8a3b6781b720abafbf)

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Archana Polampalli
2e660a5be9 qemu: fix CVE-2023-0330
A vulnerability in the lsi53c895a device affects the latest version
of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption
bugs like stack overflow or use-after-free.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-0330

Upstream patches:
b987718bbb

(From OE-Core rev: 3be283237a9e473112430bcb614b25b7ff7e64b2)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-26 05:12:21 -10:00
Quentin Schulz
9ac1631eb7 docs: ref-manual: terms: fix typos in SPDX term
Fixes: 2c53ac40e99a ("ref-manual: terms.rst: add SBOM and SPDX terms")
Cc: Quentin Schulz <foss+yocto@0leil.net>
(From yocto-docs rev: a92b206cec9f17db4bb50eb8e7ca088e55a43e61)

Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Michael Opdenacker
46b5926f8f ref-manual: releases.svg: updates
- Kirkstone is now a 4 year LTS
- Add future Scarthgap LTS
- Update document metadata: license, title

(From yocto-docs rev: 408b722ca330155e770262c7db8494ff897cfdb1)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Thomas Roos
4f1eb64d15 testimage/oeqa: Drop testimage_dump_host functionality
The intent behind these functions was to dump the system state when issues occured
but it has never really worked as we'd planned. Regular monitoring as the build
runs has largely replaced this as that allows a trend to be seen rather than a spot
value which was never really useful. The code is bitrotting and not functioning
correctly so drop it.

[YOCTO #13872]

RP: Reword commit message
(From OE-Core rev: 8d1bc34cffdd9f054e51db4e880747c79bf834fe)

Signed-off-by: Thomas Roos <throos@amazon.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dea37ba49a236029da73d5cfbfc069bffc38b508)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Jose Quaresma
4c02657a44 kernel-module-split: make autoload and probeconf distribution specific
The modules-load.d [1] - Configure kernel modules to load at boot
should install their configuration files in /usr/lib/modules-load.d.

The modprobe.d [2] - Configuration directory for modprobe
should install their configuration files in /lib/modprobe.d

[1] https://man7.org/linux/man-pages/man5/modules-load.d.5.html
[2] https://man7.org/linux/man-pages/man5/modprobe.d.5.html

[YOCTO #12212] https://bugzilla.yoctoproject.org/show_bug.cgi?id=12212

CC: Ola x Nilsson <Ola.x.Nilsson@axis.com>
CC: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
(From OE-Core rev: 6725922eadd093e8ee6a41898b596b5563eab0f3)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 347830e67c5ad72b4da165d644e3add69c20acb8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Jose Quaresma
fcd67ff9cd kernel-module-split: use context manager to open files
(From OE-Core rev: 8fbf05a91667a054083b45632c1f8afb6b8e1367)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fc9c9471952042395bb405e7f6cf507bb2b72f31)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Jose Quaresma
4baf7c63c5 kernel-module-split: install config modules directories only when they are needed
Instaed of allways create the directories and removing it at the if they are
not used, we can just do it when there are modules configuration to be created.
So the best thing to do is install the directories only when necessary.

(From OE-Core rev: 455baf41550431c22047fe718c8eaae71924b23f)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 71460993f350bca3d5a22115fd5551696f955c9f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Jose Quaresma
2210796162 kernel: config modules directories are handled by kernel-module-split
(From OE-Core rev: e5b478fb435c96f6d6e8c2a93d6c54df996957e1)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 38dc75c0e5eb7427ffcf201113fb45e0d5dad453)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Yoann Congal
1b485f13a7 recipetool: Fix inherit in created -native* recipes
native and nativesdk classes are special and must be inherited last :
put them at the end of the gathered classes to inherit.

(From OE-Core rev: 6de7a92c4366f8b15ff97e53be91db31348b3922)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a6614fd800cbe791264aeb102d379ba79bd145c2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Yi Zhao
a4c05306f5 ifupdown: install missing directories
There are four directories in which scripts can be placed which will
always be run for any interface during certain phases of ifup and ifdown
commands:
/etc/network/if-pre-up.d/
/etc/network/if-up.d/
/etc/network/if-down.d/
/etc/network/if-post-down.d/

Even if there are no scripts in these directories, ifup and ifdown
commands will also search these directories by using run-parts command.

Install these directories to fix the following runtime errors:
$ cat /etc/network/interfaces
auto lo
iface lo inet loopback
$ ifdown lo
ifdown: interface lo not configured
$ ifup lo
run-parts: failed to open directory /etc/network/if-up.d: No such file or directory
ifup: failed to bring up lo

(From OE-Core rev: c248473e2d60cfa67c64aa586b404119dec728ff)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 277bc7ab1fedd81f4df578e544ec381c819a10f9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Etienne Cordonnier
2edd5c3846 libxcrypt: fix hard-coded ".so" extension
2 issues:
- the .so extension is hard-coded, and therefore the libxcryt package compiled with
  meta-darwin is empty, because the dylib files are not contained in FILES_${PN}
- nothing actually produces a file libcrypt-*.so (the symlink file is libcrypt.so, without dash), thus
  defining FILES:${PN} manually to contain libcrypt-*.so has no effect.

(From OE-Core rev: 06f8aaf8ee03b07f79e1a17708b5946782e389bd)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7ed6bfa2428b4f1ba7f09d6e9e67c462ff355153)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Alexander Kanavin
1f2b28e9c6 rust-common.bbclass: move musl-specific linking fix from rust-source.inc
This needs to be done for any item that is linked under rustc,
and not just rust itself. Latest python-cryptography exposes the issue.

(From OE-Core rev: 967d847a9815df43d0c92ca61cc544e1fe5dcc03)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d3811228747590ea06e8d68be4785d45ec9c478f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Alexander Kanavin
833cbde6c1 cargo.bbclass: set up cargo environment in common do_compile
cargo_do_compile runs only if the recipe is built using cargo
as the top level tool. Some recipes hide usage of cargo inside setuptools
(or autoconf) and use do_compile definitions specific to those,
and so the environment isn't properly set up.

This was exposed by latest versions of python3-cryptography.

(From OE-Core rev: a1946efdbec608d47f9e992c1b5cf3c671a204fc)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f4ff643a028d7f5670d80861f2ce19ca2d90faa)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Alejandro Hernandez Samaniego
569b57b9d2 baremetal-helloworld: Fix race condition
There was a race condition during the Makefile execution in
between the assemble and compile targets, only the assemble
target had a dependency on creating the build directory.
If the compile target was executed first, an error was thrown
by bitbake since the build directory did not exist yet:

| Assembler messages:
| Fatal error: can't create build/hello_baremetal_aarch64.o:
  No such file or directory

Update the SRCREV to reflect the latest changes serializing
the makefile targets to avoid such race condition from happening.

[YOCTO #15146]

(From OE-Core rev: fe637f795238685f5d8e4e3dbf48235dabb1cc17)

Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9a999af292c7b3dd3bb7c0722cc31624c425f432)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Tom Hochstein
ac2c61dc6b weston: Cleanup and fix x11 and xwayland dependencies
For the x11 backend package config, drop the redundant dependencies
libxcb and cairo. The former is listed twice in the package config,
while the latter is also listed globally.

For the xwayland package config, add the missing dependencies libxcb
and libxcursor. These dependencies are hidden when the x11 backend is
enabled by default. When the default setting is overridden to disable
the x11 backend, the following error occurs:
```
| Run-time dependency xcursor found: NO (tried pkgconfig and cmake)
|
| ../git/xwayland/meson.build:34:2: ERROR: Problem encountered: xwayland requires xcursor which was not found. Or, you can use '-Dxwayland=false'.
```

(From OE-Core rev: d8d60e0a0e838c332f044ecee89b8ad2acae9567)

Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 49f4dd391b408a850d13010c90492c621b7912c3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Alexander Kanavin
ab0bc3a1d6 libproxy: fetch from git
Upstream no longer provides tarballs for newer versions.

(From OE-Core rev: 32b258f5ce261b2576d20e0dac4123fa020642d7)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e971f27cb4ad78b4df3c3bca2948f3cb60d0d5cf)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
24faf1dca9 lttng-ust: upgrade 2.13.5 -> 2.13.6
Changelog:
===========
* Fix: segmentation fault on filter interpretation in "switch" mode
* Fix: `ip` context is expressed as a base-10 field
* Fix: c99: use __asm__ __volatile__
* Fix: c99: static assert: clang build fails due to multiple typedef
* Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time tracepoint.h is included
* Fix: trace events in C++ constructors/destructors
* Fix: trace events in C constructors/destructors
* Fix: use unaligned pointer accesses for lttng_inline_memcpy

(From OE-Core rev: c4bfec4b2f092bd76292ad8a03917514626a3a8f)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 656470b4b0db579308d218d1ece77bdacd168d14)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
b6168e0810 libx11: upgrade 1.8.5 -> 1.8.6
Changelog:
==========
InitExt.c: Add bounds checks for extension request, event, & error codes
Fixes CVE-2023-3138

(From OE-Core rev: 5d6169ec81cc260fccb3b65082100e0ef6102046)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 49b74259b196454d22fcca8b8ecc1c0d41487285)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
b28646b19a libksba: upgrade 1.6.3 -> 1.6.4
Changelog:
Correctly detect CMS write errors.

(From OE-Core rev: 319370ab4031454e9a026a5b7d582fc23882f139)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0296cf63007542c1cb209a4288be1c82aa2ba843)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
9961d808c5 libassuan: upgrade 2.5.5 -> 2.5.6
Changelog:
===========
 * Fix logging of confidential data.  [rA0fc31770fa]
 * Fix memory wiping.  [T5977]
 * Fix macOS build problem.  [T5440,T5610]
 * Upgrade autoconf stuff.

(From OE-Core rev: 569df0fb19ee9199fa9c3d86bb5bb75252b3c663)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 90126be6dc32170c08eb90223b6a6cc06c2133ce)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
17644d51d5 gstreamer1.0: upgrade 1.22.3 -> 1.22.4
Bugfixes:
==========
-   Security fixes for flacparse, dvdspu, and subparse
-   d3d11videosink: Fix error on pause and play
-   decklink: Correctly handle SDK strings on macOS and free strings
    after usage on Linux
-   filesink: Fix buffered mode writing of buffer lists and buffers with
    multiple memories
-   gldownload: handle passthrough without a critical
-   h265parse: Fix framerate handling regression
-   oggdemux: vp8 fixes
-   mp4mux, qtmux, qtdemux: Opus audio mapping fixes
-   pngdec: Fix wrong colours output from 16bit RGB images
-   ptp clock: Work around ptpd bug in default configuration
-   srtpdec: fix critical warnings on shutdown
-   v4l2src: fix support for bayer format
-   v4l2videoenc: support force-keyframe event in v4l2 encoder
-   vtenc: apply DTS offset to ensure DTS <= PTS
-   gst-python: allow more functions to be called before gst_init()
-   cerbero: fix vaapi variant; add qt6 build on windows; ensure errors
    on unguarded use of new APIs, require macOS 10.13
-   packages: ship codecalpha, rtponvif, dvbsubenc, switchbin,
    videosignal plugins; fix pango crash on 32-bit windows
-   various bug fixes, memory leak fixes, and other stability and
    reliability improvements

(From OE-Core rev: a071696747ece93409d533a2e966cd59195a056d)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d7bf88db7f2f55540bf7891474a3a28f5681ddbb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Wang Mingyu
be68ef7726 freetype: upgrade 2.13.0 -> 2.13.1
Changelog:
===========
* docs/VERSION.TXT: Add entry for version 2.13.1.
* docs/CHANGES: Updated.
* docs/release, docs/README, builds/macs/README: Updated.
* README, src/base/ftver.rc, builds/windows/vc2010/index.html,
builds/windows/visualc/index.html, builds/windows/visualce/index.html,
builds/wince/vc2005-ce/index.html, builds/wince/vc2008-ce/index.html,
docs/freetype-config.1: s/2.13.0/2.13/1/, s/2130/2131/.
* include/freetype/freetype.h (FREETYPE_PATCH): Set to 1.
* builds/unix/configure.raw (version_info): Set to 26:0:20.
* CMakeLists.txt (VERSION_PATCH): Set to 1.
* subprojects/libpng.wrap, subprojects/zlib.wrap, subprojects/dlg: Updated.

(From OE-Core rev: b89e75cd39ee704e677ab1e770884cd53cd7f1e8)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4447b2db3166bd8c76271f0293931392572c6977)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Alexander Kanavin
cade89d4cf diffutils: update 3.9 -> 3.10
* Noteworthy changes in release 3.10 (2023-05-21) [stable]

** Bug fixes

  cmp/diff can again work with file dates past Y2K38
  [bug introduced in 3.9]

  diff -D no longer fails to output #ifndef lines.
  [bug#61193 introduced in 3.9]

Remove the comment addition from the patch body, as it
increases likelyhood of rebase conflicts, and repeats what
the commit says.

(From OE-Core rev: 21e40166870fadee986fb36be80019d3bcdb69e5)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 925155acc6922f7e9df2afa45e79ad1b2c57ba24)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Changqing Li
ffe2b61053 erofs-utils: fix CVE-2023-33551/CVE-2023-33552
* CVE-2023-33551.patch is for fix CVE-2023-33551.
* CVE-2023-33552-3.patch is upstream patch for fix CVE-2023-33552, since
  the patch context is changed, CVE-2023-33552-1.patch and
  CVE-2023-33552-2.patch is backported.

(From OE-Core rev: 77b5c2f68ea0eef45e77936ce3e7caafa7bd3f54)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Joe Slater
76f54ee71f ghostscript: fix CVE-2023-36664
Combine two commits from git.ghostscript.com/ghostpdl.
The first incompletely addresses the CVE.  The second
addresses defects in the first.

(From OE-Core rev: 8173939cfa4d0be8c0ffaa45e371945b1f7a16ae)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Yogita Urade
4c0213759a dmidecode: fix CVE-2023-30630
Dmidecode before 3.5 allows -dump-bin to overwrite a local file.
This has security relevance because, for example, execution of
Dmidecode via Sudo is plausible.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-30630
https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00016.html
https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00017.html

(From OE-Core rev: f92e59a0894145a828dc9ac74bf8c7a9355e0587)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Chee Yang Lee
02f1740351 python3-requests: fix CVE-2023-32681
(From OE-Core rev: 11b6e64c07df043441824511c931fb0bc9673adc)

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-20 12:10:40 -10:00
Ross Burton
5f453b96a6 cve-update-nvd2-native: actually use API keys
There were vestigal remains of API key support which could be removed,
but as using an API key - in theory - gives the user larger rate limits
it's probably wise to expose it.

If the user has an API key, then set NVDCVE_API_KEY.

(From OE-Core rev: 64784e90c5ff559f4da6faadb970cc7aff549592)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a542de684282bfec79f24ae2f1a2027ffde319d8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-13 06:37:16 -10:00
Ross Burton
9c0e3f39aa cve-update-nvd2-native: log a little more
Add a note of what range we're fetching, and use bb.note() instead of
debug() as messages about retrying shouldn't really be considered debug
logging.

(From OE-Core rev: cc82df9c0ff8ba17196b578e0182a5c726cfbbff)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b64a869b9c5e1d504f1011da16b5c5ff721afbf0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-13 06:37:16 -10:00
Peter Marko
e75d179825 cve-update-nvd2-native: increase retry count
Current 503 errors seem to last several seconds.
In most cases there are two errors and third request succeeds.
However sometimes the outage takes more than time needed
for two retries and third one also fails.

Extend retry count from 3 to 5 to improve the probablity
that the fetcher succeeds.

(From OE-Core rev: 5ca193e287c54bcb17f26e82e61e9446c21cd7e4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f4d118af2360cff7f234102fd5e4b65a6f4146a6)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-13 06:37:16 -10:00
Peter Marko
02ef03c1d6 cve-update-nvd2-native: retry all errors and sleep between retries
Last couple days it is not possible to update NVD DB as servers
are returning lot of errors.
Mostly "HTTP Error 503: Service Unavailable" is observed but
sporadially also some others.

Retrying helps in most cases, so extend retries to all errors.

Additionally add sleep which is recommended by NVD between requests.
These retries are already implemented between successful requests,
but giving servers time between failed ones is important, too.

(From OE-Core rev: 75d2c50a10b8b506096b43a15bca3f06c6734e2f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 88dad8f198baa80af5ab576498f4df6ed639d551)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-13 06:37:15 -10:00