Commit Graph

69294 Commits

Author SHA1 Message Date
Bruce Ashfield
ff90622dfc linux-yocto/5.15: update to v5.15.196
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    cc5ec87693063 Linux 5.15.196
    59c78e8fddc1f PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
    83a563fab563f net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
    c5d116862dd3e usb: gadget: f_acm: Refactor bind path to use __free()
    185193a4714aa usb: gadget: f_ncm: Refactor bind path to use __free()
    d44e82f46cd0e usb: gadget: Introduce free_usb_request helper
    97fc7aa654e30 usb: gadget: Store endpoint pointer in usb_request
    02fbea0864fd4 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    9b82da54a0305 xfs: always warn about deprecated mount options
    b57a3760d12bd devcoredump: Fix circular locking dependency with devcd->mutex.
    11300f645870a PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    61d6249ea441b PCI: rcar-host: Drop PMSR spinlock
    9e14fb714ebf5 PCI: rcar: Finish transition to L1 state in rcar_pcie_config_access()
    97ab6a90c72d9 PCI: tegra194: Handle errors in BPMP response
    13981b0555ab4 f2fs: fix wrong block mapping for multi-devices
    ba88a53d7f5df NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    8004d4b8cbf1b vfs: Don't leak disconnected dentries on umount
    0157c469edac2 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    c6fa15fa94016 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    0e143e87264db wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    ddcfc52965c19 PCI: j721e: Fix programming sequence of "strap" settings
    2ddb51e228192 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    cfd1aa3e2b71f fuse: fix livelock in synchronous file put from fuseblk workers
    a39f70d63f437 fuse: allocate ff->release_args only if release is needed
    6012804a77860 padata: Reset next CPU when reorder sequence wraps around
    38d702a06487c iio: imu: inv_icm42600: Simplify pm_runtime setup
    be16df3c3c5dd PM: runtime: Add new devm functions
    0f9f51390c866 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    f35ab1ba853ab iio: imu: inv_icm42600: use = { } instead of memset()
    8e69c8f3ae1c5 NFSD: Fix last write offset handling in layoutcommit
    0570c78e6c707 NFSD: Minor cleanup in layoutcommit processing
    68d615f4b00ab NFSD: Rework encoding and decoding of nfsd4_deviceid
    2dc2bc27578c3 xfs: fix log CRC mismatches between i386 and other architectures
    71f9402044636 xfs: rename the old_crc variable in xlog_recover_process
    6e7f06895db6e s390/cio: Update purge function to unregister the unused subchannels
    dc9f91f849860 arm64: errata: Apply workarounds for Neoverse-V3AE
    a6ef05314d5a8 arm64: cputype: Add Neoverse-V3AE definitions
    1bff561ebe700 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    ad2be44882716 most: usb: hdm_probe: Fix calling put_device() before device initialization
    578eb18cd111a most: usb: Fix use-after-free in hdm_disconnect
    cee4ab233f895 mei: me: add wildcat lake P DID
    2670932f24657 comedi: fix divide-by-zero in comedi_buf_munge()
    97a71d277e759 binder: remove "invalid inc weak" check
    55c7290b1a2af xhci: dbc: enable back DbC in resume if it was enabled before suspend
    6d0edbdb0bf72 usb: raw-gadget: do not limit transfer length
    f9bfb3fc7ffa3 usb/core/quirks: Add Huawei ME906S to wakeup quirk
    1a5afa2b586ee USB: serial: option: add Telit FN920C04 ECM compositions
    443bc87ec125a USB: serial: option: add Quectel RG255C
    57bb21f4e7b1d USB: serial: option: add UNISOC UIS7720
    2c651b835b9f6 net: ravb: Ensure memory write completes before ringing TX doorbell
    a63ab2c3c48a2 net: usb: rtl8150: Fix frame padding
    09bba278ccde2 vsock: fix lock inversion in vsock_assign_transport()
    93b1ab422f196 ocfs2: clear extent cache after moving/defragmenting extents
    f2ef52fbdc5f0 MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    5666bcc3c00f7 Revert "cpuidle: menu: Avoid discarding useful information"
    f49962e51a428 net: bonding: fix possible peer notify event loss or dup issue
    03e80a4b04ef1 sctp: avoid NULL dereference when chunk data buffer is missing
    8a2375b0e9b89 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    c42dbdcde7220 dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    00daafde87d2e net: enetc: correct the value of ENETC_RXB_TRUESIZE
    e7a8c57671a1f rtnetlink: Allow deleting FDB entries in user namespace
    bde6afe89ac15 net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
    7cd416cc0220c net: add ndo_fdb_del_bulk
    31017cda9928e net: rtnetlink: add bulk delete support flag
    a36130f7921c9 net: netlink: add NLM_F_BULK delete request modifier
    40ffa6a8c1907 net: rtnetlink: use BIT for flag values
    fc69b00561e49 net: rtnetlink: add helper to extract msg type's kind
    a6c202c341624 m68k: bitops: Fix find_*_bit() signatures
    1701af4d10b4f hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    2a112cdd66f5a hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    450ac1c490f8d dlm: check for defined force value in dlm_lockspace_release
    9df3c241fbf69 hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    418e48cab99c5 hfs: validate record offset in hfsplus_bmap_alloc
    c135b8dca6552 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    725522af093ff hfs: make proper initalization of struct hfs_find_data
    b92904866b9f3 hfs: clear offset and space out of valid records in b-tree node
    25f09699edd36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    45ec13d6ce557 exec: Fix incorrect type for ret
    3324e5e3ac97a Revert "perf test: Don't leak workload gopipe in PERF_RECORD_*"
    ae9ad3b673252 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    7ab44236b32ed hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    736159f7b296d ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    3c77e994e4ecd ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    fdccb3adc59d7 sched/fair: Fix pelt lost idle time detection
    15fda76f7a57a sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    343e991e2596a drm/amd/powerplay: Fix CIK shutdown temperature
    d38aec7cd3502 riscv: kprobes: Fix probe address validation
    6a90c8381c333 net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    50b2fb48a4733 net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    a6b33d9edf260 net: usb: use eth_hw_addr_set() instead of ether_addr_copy()
    bab04baafc1c5 tls: don't rely on tx_work during send()
    09b1c01df5d46 tls: always set record_type in tls_process_cmsg
    669d389ed231b tls: wait for async encrypt in case of error during latter iterations of sendmsg
    2cb75c87428e0 net: tls: wait for async completion on last message
    4de9057aebb15 splice, net: Add a splice_eof op to file-ops and socket-ops
    01abf7b445062 tg3: prevent use of uninitialized remote_adv and local_adv variables
    c43fe40e67d69 tcp: fix tcp_tso_should_defer() vs large RTT
    14c9047ad5165 amd-xgbe: Avoid spurious link down messages during interface toggle
    402b6985e872b net/ip6_tunnel: Prevent perpetual tunnel growth
    1095322a7e014 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    5b9c949c66846 doc: fix seg6_flowlabel path
    06477bbe26e04 net: dlink: handle dma_map_single() failure properly
    97760193e892b can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    aca91cae0c917 dax: skip read lock assertion for read-only filesystems
    77711d850bed7 HID: multitouch: fix sticky fingers
    a510364e8cac0 cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    9699fd9e13df2 crypto: rockchip - Fix dma_unmap_sg() nents value
    df808a1f1550b drm/exynos: exynos7_drm_decon: remove ctx->suspended
    d6a3c53eebd1f drm/exynos: exynos7_drm_decon: properly clear channels during bind
    0e212fdcea59c drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    4b354a29166a3 blk-crypto: fix missing blktrace bio split events
    5918d914a3a67 media: lirc: Fix error handling in lirc_register()
    ddb9a92a999b6 media: rc: Directly use ida_free()
    723e7084497ef media: s5p-mfc: remove an unused/uninitialized variable
    78f6eaf14fe3d btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    2e9e10657b041 ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    14476553253b2 jbd2: ensure that all ongoing I/O complete before freeing blocks
    34033f75d0ccb r8152: add error handling in rtl8152_driver_init

(From OE-Core rev: 35316957236f12cda3a164d85177ecb4dc5fa434)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Bruce Ashfield
f1a1393dd0 linux-yocto/5.15: update to v5.15.195
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    ac56c046adf41 Linux 5.15.195
    636e7d6bdf205 selftests: mptcp: join: validate C-flag + def limit
    4b9b376856a95 mptcp: pm: in-kernel: usable client side with C-flag
    946771c2a2b11 mm/slab: make __free(kfree) accept error pointers
    81d0664bed91a media: pci: ivtv: Add check for DMA map result
    71285c029dcc4 xen/events: Update virq_to_irq on migration
    9c1df18612fbb media: pci: ivtv: Add missing check after DMA map
    66c8a83bf1de2 media: pci/ivtv: switch from 'pci_' to 'dma_' API
    55a954a54ffc8 arm64: mte: Do not flag the zero page as PG_mte_tagged
    26ea9b6a93a54 media: cx18: Add missing check after DMA map
    cb044864188cc media: switch from 'pci_' to 'dma_' API
    9339cf38762ce writeback: Avoid excessively long inode switching times
    6483eabc195dc writeback: Avoid softlockup when switching many inodes
    9b902f370b93e cramfs: Verify inode mode when loading from disk
    5c64e8be2a7ef fs: Add 'initramfs_options' to set initramfs mount options
    c3b654021931d pid: Add a judgment for ns null in pid_nr_ns
    1d144b4cdde08 minixfs: Verify inode mode when loading from disk
    3fb4c19233a0e minmax.h: remove some #defines that are only expanded once
    092036da9b6d5 minmax.h: simplify the variants of clamp()
    64394017d091a minmax.h: move all the clamp() definitions after the min/max() ones
    4942fcc84a1ee minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    5011c410f9670 minmax.h: reduce the #define expansion of min(), max() and clamp()
    b7ae5d8baa5ca minmax.h: update some comments
    2524736951b23 minmax.h: add whitespace around operators and after commas
    82b39b1090b0e minmax: fix up min3() and max3() too
    b1094b4b54b0f minmax: improve macro expansion and type checking
    3854a23090858 minmax: simplify min()/max()/clamp() implementation
    89f6bf22d039a minmax: don't use max() in situations that want a C constant expression
    e035ca130ff7f minmax: make generic MIN() and MAX() macros available everywhere
    4b5dda7f8b02a minmax: simplify and clarify min_t()/max_t() implementation
    3d1169785a9c1 minmax: add a few more MIN_T/MAX_T users
    e73a9333cdaee minmax: avoid overly complicated constant expressions in VM code
    9ed1e4221cb67 minmax: fix indentation of __cmp_once() and __clamp_once()
    d16b73f6c5939 minmax: deduplicate __unconst_integer_typeof()
    e3774f3281ed1 minmax: Introduce {min,max}_array()
    9c88de0e0c1e5 arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    d238fee82dd83 btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    f2bd5493ef501 fscontext: do not consume log entries when returning -EMSGSIZE
    f550466949e82 locking: Introduce __cleanup() based infrastructure
    a0e54bd8d7ea7 dm: fix NULL pointer dereference in __dm_suspend()
    95dd33361061f tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    41acc922c7811 ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    71a0ba7fdaf8d net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    32097a08ab5de mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    21d79eac5f953 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    715f4914fdd3e mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    5d327391f9faf media: mc: Clear minor number before put device
    fbfc745db628d Squashfs: reject negative file sizes in squashfs_read_inode()
    2ec88c3d9f8fe Squashfs: add additional inode sanity checking
    49f3a867d948c ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    44cee8ef325c0 ASoC: codecs: wcd934x: Simplify with dev_err_probe
    e0ce3ed1048a4 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    6836714a08756 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    a4e7273a45e85 ext4: free orphan info with kvfree
    505e69f76ac49 ext4: guard against EA inode refcount underflow in xattr update
    b975b3607605f ext4: correctly handle queries for metadata mappings
    32702f1ce389f ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    95a21611b14ae ext4: verify orphan file size is not too big
    550e0bccec100 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    8c5b1200596ce NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    735457683e235 mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    fff24a9c116d2 x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    46a986888a149 x86/umip: Check that the instruction opcode is at least two bytes
    eaa16de419692 spi: cadence-quadspi: Flush posted register writes before DAC access
    5a6c760bc332f spi: cadence-quadspi: Flush posted register writes before INDAC access
    f104a67b28053 PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    870457e7b7229 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    5533169bb2539 PCI/AER: Support errors introduced by PCIe r6.0
    09adece72b8c8 PCI/AER: Fix missing uevent on recovery when a reset is requested
    1f06b4864177b PCI/ERR: Fix uevent on failure to recover
    a645ca21de09e PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    690f307a81954 PCI/sysfs: Ensure devices are powered for config reads
    b167bfa432e3c rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    aaaa92ab55f13 rtc: interface: Fix long-standing race when setting alarm
    fa1bdbefe1f46 rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    c19b29291f21c memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    e5caecea44a7a mmc: core: SPI mode remove cmd7
    e614975f9b5df mtd: rawnand: fsmc: Default to autodetect buswidth
    971009a25fb8b sparc: fix error handling in scan_one_device()
    365282fc60155 sparc64: fix hugetlb for sun4u
    1cd60e0d0fb8f sctp: Fix MAC comparison to be constant-time
    d906e61d4d81b scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    9ee5eb3d09217 pwm: berlin: Fix wrong register in suspend/resume
    40c86afc81b51 powerpc/pseries/msi: Fix potential underflow and leak issue
    7bb05500a3ad3 powerpc/powernv/pci: Fix underflow and leak issue
    aa18f55365e93 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    6195d15fe4888 parisc: don't reference obsolete termio struct for TC* constants
    ef84ddf89dab4 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    c2b88b66bc359 lib/genalloc: fix device leak in of_gen_pool_get()
    4ce6902cc67d7 KEYS: trusted_tpm1: Compare HMAC values in constant time
    e94c99c026179 iommu/vt-d: PRS isn't usable if PDS isn't supported
    d202d1ac609bc iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    3ed42a6686f4f init: handle bootloader identifier in kernel parameters
    06d81ce319242 iio: frequency: adf4350: Fix prescaler usage.
    0016356ebd6a3 iio: dac: ad5421: use int type to store negative error codes
    c71fd8dcb7ae6 iio: dac: ad5360: use int type to store negative error codes
    8df273ef0f5ad fs/ntfs3: Fix a resource leak bug in wnd_extend()
    459d819648fe6 crypto: atmel - Fix dma_unmap_sg() direction
    ad4e8f9bdbef1 cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    83b594504d64f copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    816bb8b4e5c46 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    d3a9a8e1275eb btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    184b0aab791a5 drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    a812fc67d8855 media: i2c: mt9v111: fix incorrect type for ret
    e57d98c02ec84 firmware: meson_sm: fix device leak at probe
    0c2ac5a03a209 xen/manage: Fix suspend error path
    6f8e37bff9119 xen/events: Cleanup find_virq() return codes
    846f911295b2a ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    267801317911b arm64: dts: qcom: msm8916: Add missing MDSS reset
    3a0f197dd8e5f ACPI: debug: fix signedness issues in read/write helpers
    85580cbac5d4b ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    e28616ca3d67e bpf: Avoid RCU context warning when unpinning htab with internal structs
    28112b3d86b15 gpio: wcd934x: mark the GPIO controller as sleeping
    512aa949666ef gpio: wcd934x: Remove duplicate assignment of of_gpio_n_cells
    33e49de5dc09b tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    df58651968f82 crypto: essiv - Check ssize for decryption and in-place encryption
    4331a0ba2d15c bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    fa391f17a819f drm/amd/display: Properly disable scaling on DCE6
    cc857ceb2b3b4 drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    736153f3c4933 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    32ee65934d6b7 drm/amdgpu: Add additional DCE6 SCL registers
    057764172fcc6 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    b2986d63303d3 mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    e3602ddfcc2f9 mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    325425b0d066f tools build: Align warning options with perf
    b1d073728ef60 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    eb85ad5f23268 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    dbceedc0213e7 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    4c918f9d1cccc drm/vmwgfx: Fix Use-after-free in validation
    fb5df8006adde drm/vmwgfx: Copy DRM hash-table code into driver
    4139b1e435e3f s390/cio: unregister the subchannel while purging
    2dbf27f672c03 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    6ba7e73cafd15 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    c1f8a7e6efe58 scsi: mvsas: Use sas_task_find_rq() for tagging
    77798c6e94fd2 scsi: mvsas: Delete mvs_tag_init()
    43c3e8ce2f5f0 scsi: libsas: Add sas_task_find_rq()
    9ecd496233772 cpufreq: tegra186: Set target frequency for all cpus in policy
    bb78ef6dc7470 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    7d9eee92ed67a clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    b7e5c59f3b097 perf test: Don't leak workload gopipe in PERF_RECORD_*
    24e296d087f7d perf session: Fix handling when buffer exceeds 2 GiB
    3e97394445a0f rtc: x1205: Fix Xicor X1205 vendor prefix
    8dac32c17b01c perf util: Fix compression checks returning -1 as bool
    250cd976bbda0 clk: at91: peripheral: fix return value
    fcb3b7c30486d libperf event: Ensure tracing data is multiple of 8 sized
    1450bbb0ccd7f perf evsel: Avoid container_of on a NULL leader
    2977f02ee25a1 iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    86e23d78ec177 clocksource/drivers/clps711x: Fix resource leaks in error paths
    ed43bf13a6ac8 fs: always return zero on success from replace_fd()
    70322caf9f193 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    8a4dd74fe413d bus: fsl-mc: Check return value of platform_get_resource()
    d77ef2f621cd1 pinctrl: check the return value of pinmux_ops::get_function_name()
    e63aade22a33e Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    9eed157e5e27f Input: atmel_mxt_ts - allow reset GPIO to sleep
    972cbba5cd384 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    547e123e9d342 mm: hugetlb: avoid soft lockup when mprotect to large memory area
    26b1bfbd84172 ext4: fix checks for orphan inodes
    3901ae3c75a11 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    8fcc7315a10a8 net: nfc: nci: Add parameter validation for packet data
    1d1847812a1a5 fs: udf: fix OOB read in lengthAllocDescs handling
    a44f61f878f32 uio_hv_generic: Let userspace take care of interrupt mask
    61d38b5ce2782 Squashfs: fix uninit-value in squashfs_get_parent
    21c58835634df Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    5aa9b88560281 net: dlink: handle copy_thresh allocation failure
    7973555560eb0 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    3fa52104e4797 nfp: fix RSS hash key size when RSS is not supported
    0eddc0e5aebcc drivers/base/node: fix double free in register_one_node()
    827c8efa0d1af ocfs2: fix double free in user_cluster_connect()
    d76b099011fa0 hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    eb682b765533d Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    54f8ef1a970a8 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    5c06bc0b44ed8 RDMA/siw: Always report immediate post SQ errors
    8f67d2506f0ca usb: vhci-hcd: Prevent suspending virtually attached devices
    a89253eb4e648 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    1d79471414d7b ipvs: Defer ip_vs_ftp unregister during netns cleanup
    eb5da8e9db25a NFSv4.1: fix backchannel max_resp_sz verification check
    cef047e0a55cb coresight: trbe: Return NULL pointer for allocation failures
    0e9ec3bab4622 remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    58ce0b1bc2711 sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    b43c208c40179 sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    37547d8e6eba8 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    1857cdca12c4a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    59424dc0d0e04 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    4acb786042da4 wifi: ath10k: avoid unnecessary wait for service ready message
    c6d3da43b8540 Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    c15829a1fb0b0 IB/sa: Fix sa_local_svc_timeout_ms read race
    d77fb0bdce411 RDMA/core: Resolve MAC of next-hop device without ARP support
    77edaeb4dde29 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    523d184a495be scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    ce75dfd1748e7 scsi: qla2xxx: edif: Fix incorrect sign of error code
    54ded576045ef ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    248776651cef4 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    795c8dbc82827 RDMA/cm: Rate limit destroy CM ID timeout error message
    1bdb3bc5bfd33 drivers/base/node: handle error properly in register_one_node()
    eeeaa4b5a5f52 watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    6a9c2fcf6de54 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    581ba44117ed7 iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    f6b36cfd25cba fs: ntfs3: Fix integer overflow in run_unpack()
    95e29db33b5f7 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    dea9c8c9028c9 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    fbd79072f1cab ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    125527db41805 pps: fix warning in pps_register_cdev when register device fail
    f77e91b4283b5 misc: genwqe: Fix incorrect cmd field being reported in error
    c2024c8abd742 usb: gadget: configfs: Correctly set use_os_string at bind
    fe9fdc066c8cf usb: phy: twl6030: Fix incorrect type for ret
    650368aacbc78 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    82448110ee625 tcp: fix __tcp_close() to only send RST when required
    14ebe743b9647 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    94aa9bf2ddfcb wifi: mwifiex: send world regulatory domain to driver
    8b3589d7a763a drm/amdgpu: Power up UVD 3 for FW validation (v2)
    e00d07d780b3d ALSA: lx_core: use int type to store negative error codes
    39d0e7fd73efb media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    916c7891b59b9 scsi: myrs: Fix dma_alloc_coherent() error check
    eef5ef400893f scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    e0e0ce06f3571 usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    2cd9c97ad5529 drm/radeon/r600_cs: clean up of dead code in r600_cs
    666da97c49c2d i2c: designware: Add disabling clocks when probe fails
    90fb83f7863b6 i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    31660d4d93057 thermal/drivers/qcom/lmh: Add missing IRQ includes
    32240232b2a3b thermal/drivers/qcom: Make LMH select QCOM_SCM
    ae7b1443f4746 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    0b515a2839980 smp: Fix up and expand the smp_call_function_many() kerneldoc
    6d8b1a21fd5c3 bpf: Explicitly check accesses to bpf_sock_addr
    e822f368f758a selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    7ac8f7a186451 i3c: master: svc: Recycle unused IBI slot
    11269c08013f4 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    ebf97395b0a0b pwm: tiehrpwm: Fix corner case in clock divisor calculation
    cc2b2a8c18a96 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    3c8ceb2d4dbdb firmware: firmware: meson-sm: fix compile-test default
    5cfaadc902249 pinctrl: renesas: Use int type to store negative error codes
    45052d922054c PM: sleep: core: Clear power.must_resume in noirq suspend error path
    22863772e94fd block: use int to store blk_stack_limits() return value
    a04120b2d187b regulator: scmi: Use int type to store negative error codes
    2927ef93169a0 ARM: at91: pm: fix MCKx restore routine
    4b97e99b87a77 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    29db98243205b pinctrl: meson-gxl: add missing i2c_d pinmux
    8b063076fa7e1 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    1955c776a6077 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    ce780f740cf44 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    3a502b0eefcfc libbpf: Fix reuse of DEVMAP
    c6552fac71990 regmap: Remove superfluous check for !config in __regmap_init()
    64f14b1ab6f39 x86/vdso: Fix output operand size of RDPID
    5d01f2b815682 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    90ea4c0484ebb coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    0ddd59d58b597 selftests: arm64: Check fread return value in exec_target
    cf038b6bb9ed5 filelock: add FL_RECLAIM to show_fl_flags() macro
    c1db864270eb7 net/9p: fix double req put in p9_fd_cancelled
    3fe58fa612052 minmax: add in_range() macro
    bd903c25b652c crypto: rng - Ensure set_ent is always present
    46263a0b687a0 platform/x86: int3472: Check for adev == NULL
    823671bb8b05d driver core/PM: Set power.no_callbacks along with power.no_pm
    53dab62cda6e7 staging: axis-fifo: flush RX FIFO on read errors
    82e0bb28a060c staging: axis-fifo: fix maximum TX packet length check
    e18cfcb828ed2 serial: stm32: allow selecting console when the driver is module
    48685b39f2fed hid: fix I2C read buffer overflow in raw_event() for mcp2221
    c094712e40488 perf subcmd: avoid crash in exclude_cmds when excludes is empty
    0eb762f420b25 dm-integrity: limit MAX_TAG_SIZE to 255
    8ed134c2520d7 wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    6c7c5b465a7b8 USB: serial: option: add SIMCom 8230C compositions
    663faf1179db9 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    3f876cd47ed8b media: tuner: xc5000: Fix use-after-free in xc5000_release
    3fdeb807b93d0 media: tunner: xc5000: Refactor firmware load
    c3ad8c30b6b10 udp: Fix memory accounting leak.
    20fc1431bcdf4 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
    71c52b073922d media: rc: fix races with imon_disconnect()
    120e221b4bbe9 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    ddc79fba132b8 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    9407809b44dc6 iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support

(From OE-Core rev: a6b566b362d8d4f200d48bfa4c97297c45c9443e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Aleksandar Nikolic
1d5c8af9c4 scripts/install-buildtools: Update to 4.0.32
Update to the 4.0.32 release of the 4.0 series for buildtools

(From OE-Core rev: 7c3f192e5f29eb54c1aa64d31b92255d13e4605a)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic22@pm.me>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9a24d18f40 inetutils: patch CVE-2026-24061
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-24061

(From OE-Core rev: 042f02ff7072e9cf4b02a335d1d3186d68ba669b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Vijay Anusuri
7cdc92f5cb openssl: upgrade 3.0.18 -> 3.0.19
This release incorporates the following bug fixes and mitigations:

Fixed Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467)
Fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160)
Fixed Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418)
Fixed Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion. (CVE-2025-69419)
Fixed Missing ASN1_TYPE validation in TS_RESP_verify_response() function. (CVE-2025-69420)
Fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex() function. (CVE-2025-69421)
Fixed Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795)
Fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function. (CVE-2026-22796)

Changelog:
https://github.com/openssl/openssl/blob/openssl-3.0.19/NEWS.md

Refreshed CVE-2023-50781 patches for openssl-3.0.19

Reference: https://openssl-library.org/news/secadv/20260127.txt

(From OE-Core rev: 9b419ead79a1c137ba98d86969fd29808d6da49e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
99c192aae2 expat: patch CVE-2026-25210
Pick patches from [1].

[1] https://github.com/libexpat/libexpat/pull/1075

(From OE-Core rev: 406471f765fd1ce6bc5aab51c724476684e40d21)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
3a7aa79ca2 expat: patch CVE-2026-24515
Pick fix commit from PR linked in NVD report.

(From OE-Core rev: e3c0ac137e50d35e83e8e4ed2c4e09f2eb9d3bca)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
a8c5e5e573 libxml2: add follow-up patch for CVE-2026-0992
References:
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
* https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/377

(From OE-Core rev: 957244b2861f394237b8a3ec4d549d5118627955)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9998d74d24 libxml2: patch CVE-2026-0992
Pick patch which closed [1].
Adapt for missing xmlCatalogPrintDebug per [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
[2] 728869809e

(From OE-Core rev: efef4d450500eb3a43b9f1f399ca84f9ca837d8b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
bd6c85cfa6 libxml2: patch CVE-2026-0990
Pick patch which closed [1].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018

(From OE-Core rev: 3af64204dec407546bed8f1dc0cb8b4a1501e471)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
e7b549ecaa python3: patch CVE-2025-12084
Pick patch for this CVE merged into 3.10 branch.

(From OE-Core rev: 8888cd14eb102574d530b6c683ce5beaad1aaa39)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
4ad238e9c1 python3: patch CVE-2025-13837
Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: cfbac1d5edae4b0204ec4c01b5f710d100ceb2ad)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
ad756dec39 zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

(From OE-Core rev: 1bdcd62d34b0b060b0e1e5142c5f3e7075f21cc2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Lee Chee Yang
58f9b898da migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 398a2a080361eb22b9c447dbde31fca58bf4e0bb)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
e60019c6eb dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: a48ab61034d50be1026b939112f4a5c58bed7b88)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7794952de8 dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: 4c64db73fa68b6dbc11fe4b64452b0d6b7ee0280)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7bb35f44d9 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 8d7b549d095c2ca04d4c7ff5a92f6de9fceb8496)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Richard Purdie
c3b734f0a7 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: e2994ca0076ec99038790e7a40936236a5078135)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
ff118ede82 contributor-guide/recipe-style-guide.rst: explain difference between layer and recipe license(s)
Explain that the LICENSE set in a recipe does not apply to the recipe
file itself, but to the underlying software. The license of the recipe
file is the license provided in the layer itself. Give OpenEmbedded-Core
as an example for this.

Fixes [YOCTO #14410]

(From yocto-docs rev: 6799b1be5d48f4bf5dcd0b16c2dbc2e297d4ecd9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b8a56b8b2e8c0417b2f7204f80c79b05d95e9ce4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
yocto-4.0.33 kirkstone-4.0.33
2026-01-26 18:54:18 +00:00
Antonin Godard
d5bcc413d0 ref-manual/variables.rst: document the CCACHE_TOP_DIR variable
Added by commit 35d7fe73bba1 ("ccache.bbclass: Make it can be shared
between different builds") in OE-Core.

Fixes [YOCTO #16052]

(From yocto-docs rev: e4f5ba7bb34586cd7bee7f0fe69c39b36dabb357)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 550ef8340b550f8d4e9c3d0672190dc09592c621)
Fix conflicts: CCLD variable in master not on kirkstone.
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
72eb266009 overview-manual: convert YP-flow-diagram.png to SVG
Based on diagrams/poky-buildprocess/Pokyarch_diag.svg, replace the PNG
graphic for the YP flow to an SVG graphic.

(From yocto-docs rev: 2983418bec7a2faeaae4e831b8f642ff0cd95980)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d2aaf54bee49295bdf81021648cb27499930edc6)
Fix conflicts (different alignment on master, keep one from kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
d66f9ee0ef overview-manual/yp-intro.rst: fix SDK type in bullet list
The YP generates an SDK by default, which can be meta-toolchain, an
image-specific one, or an extensible SDK (eSDK). Don't be specific in
this bullet list.

(From yocto-docs rev: 3c455c5a2892611d2323610170f9600ceb953f6c)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f02c64286504353e97c7e5fe5c0d193776469ad1)
Fix conflict (#. on master, 7. on kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
5489d2b5b6 ref-manual/release-process.rst: add a "Development Cycle" section
Add a new section to release-process.rst to document the development
cycle of each release and namely the milestones and feature freeze
occuring after M3.

Fixes [YOCTO #15979]

(From yocto-docs rev: f7888e3c3267ec7c39374f694f86088598bea649)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77c04cc5944acda7575546a7434e014e4a75ba58)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e3fdce60c0 test-manual/ptest.rst: detail the exit code and output requirements
A ptest must emit at least one test result on the console, as this is
required by the testimage class (which ignores the exit code).
ptest-runner on the other hand, ignore the output and only cares about
the exit code.

Add these two items as requirements for a ptest to be valid.

Fixes [YOCTO #15832]

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 916be11467d87d39e4ad5ea218237258523f3953)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9292f61d7ba89598c89033ea7ee3b11a20d873f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
a4aa1bc237 ref-manual/classes.rst: document the image-container class
Add documentation for the image-container class, which is a simple class
to generate an image suitable for creating a container.

This answers in part to questions asked in [YOCTO #14368].

It also adds documentation for IMAGE_CONTAINER_NO_DUMMY, which was added
in OE-Core with commit f0645e172bb8 ("image-container.bbclass: Error if
not using linux-dummy").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cebe8ff0508e0fc2de8378a1cf93eb8054e12699)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6ce00e5875eb3469fefd55cc22acaaeaf620053a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
cb99d0b1c5 Add a new "Security" section
The current security-related documentation is a bit hard to find and
hidden within the development manual. However these are processes that
are not part of a development task but is rather a vulnerability
reporting process.

Create a new "Security" section in the documentation to gather this
information. This will be directly visible in the sidebar when opening
the documentation.

Split the previous security-subjects.rst document into 2 documents:

- security-team.rst: defines the roles of the security teams and its
  members.

- reporting-vulnerabilities.rst: guide to report vulnerabilities to the
  security team.

The plan is to backport these documents to active releases. As a
consequence, this section should be free of instructions and information
that only make sense for a specific release. It should _not_ contain
documents on how to enable security features with Yocto on target
devices, this is unrelated and can be left in the development manual
(for example: dev-manual/vulnerabilities.rst to deal with CVEs).

(From yocto-docs rev: 3fd0f37d708d88534dd6dbb51dc264911c349352)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 81e14ca2d5cff9e2104c556655144b069633790c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e1c9a5d58f ref-manual/svg/releases.svg: mark whinlatter as current release
Whinlatter is the new current Yocto Project release, mark it as an
active one. Move it as released in December 2025.

(From yocto-docs rev: 7f6dff5c3d549cbd5040c15261bdb38a54dbd69e)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6f8e97c6e529f3c47f45f34d9e04e3ad7bddd587)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
0071164ce8 ref-manual/svg/releases.svg: mark styhead and walnascar EOL
Walnascar has stopped being updated a while ago, and Styhead is EOL
since May 2025.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 2425f0cf64c35b9f7d0676dd31c2ea94fcdb3a31)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 834de77b543de43ee3c1c12ca1d6277e67e126de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
10233e97f7 overview-manual/yp-intro.rst: link to YP members and participants
Instead of a fixed list of commercial vendors, link to existing lists on
the YP website.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 69ad32040baf8ca7c79265fd83041b3241353e2d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9d394db4f88b66500e4d5a2a518d25f08a0c9472)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
941d1d47c1 overview-manual/yp-intro.rst: change removed ECOSYSTEM to ABOUT
The ABOUT tab is where the members/participants are listed now.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 8e216cd6e17fe4bc367c11d2ad3e3d7a29701af8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a8a8d810f0505529aaaa90678e03152c8ac0c00b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Richard Purdie
5abd143cb5 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 036f76ea35c49a78d612093dcd8eb1fac7ded8d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:42 +00:00
Paul Barker
71ae82a596 poky.conf: Bump version for 4.0.33 release
(From meta-yocto rev: 677379f21941363d50f9d946963542b4ccb7e27c)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:26 +00:00
Khem Raj
6f2c1098a6 oeqa: Use 2.14 release of cpio instead of 2.13
2.13 may not be buildable with latest compilers without patching

(From OE-Core rev: 64d56cf416b31ae92438deefe4028402120ed998)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 406a33f896accc35a9cb6ab156f1e0f42dda67d8)
Backport: Fix [YOCTO #16137] by using the same archive as the cpio
recipe, ensuring the archive is in DL_DIR and so, avoiding reaching
unreliable upstream server.
This upgrade is safe to do because this archive is only use to test that
it compiles.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
74924f0891 pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'
The pseudo update was causing hangs in builds, pull in the fix.

(From OE-Core rev: e514b1ac74ae8a69b15e3459cb3b327a35cabff8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8acdbefd0a148c8b7713f46066ae8489984c5d2d)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
d087748248 pseudo: Update to pull in openat2 and efault return code changes
Pulls in the following fixes:

 * makewrappers: Enable a new efault option
 * ports/linux/openat2: Add dummy wrapper
 * test-syscall: Add a syscall test
 * ports/linux/pseudo_wrappers: Avoid openat2 usage via syscall

which should fix issues with the tar CVE fix on Centos/Alma/Rocky 9 distros
that uses openat2 as well as the efault issue breaking rust based uutils.

(From OE-Core rev: edc8c8e0ae511b03cb9d0501d472bb42fbea2c8b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 51f1388dd1679a28ec3ca468cf16aa0ea32bccf9)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Paul Barker
401a9cdd7d pseudo: Add hard sstate dependencies for pseudo-native
Where a task (such as do_package) runs under fakeroot, the corresponding
setscene task (do_package_setscene) will also run under fakeroot when
restoring from sstate. Assuming pseudo is used as the fakeroot
implementation, we need pseudo-native and all its runtime dependencies
to be available in the sysroot before running any setscene tasks under
fakeroot.

We already add a hard dependency from all do_package_setscene tasks to
virtual/fakeroot-native:do_populate_sysroot in base.bbclass, but this
does not cover transitive dependencies. So, extend the dependencies of
pseudo-native:do_populate_sysroot_setscene to ensure that the sqlite3
library is also available in the sysroot before running fakeroot
setscene tasks.

[YOCTO #15963]

(From OE-Core rev: e3c07672d22343cd7ac68cb84716b05ec7cd438b)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c146ca657440550e00bc5e53d13502ef7aa945b)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
42eb45b3a0 pseudo: Update to pull in memleak fix
(From OE-Core rev: d789b03d33d9a0fce335080f667c29ed45515726)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 42137b6f97da0672af365cd841678f39ce5907d2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Robert Yang
3a3b526edb pseudo: 1.9.0 -> 1.9.2
(From OE-Core rev: 2093a9c80e391795abbac8766569583a3547e43b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a42747fd280ce68283e1491971d22273e3bdf2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
8a6b3d82f6 pseudo: Upgrade to version 1.9.1
This brings in:
 * nftw, nftw64: add wrapper
 * ftw, nftw, ftw64, nftw64: add tests
 * Move ftw and ftw64 to calling ntfw and nftw64
 * makewrappers: Introduce 'array' support
 * pseudo_util.c: Avoid warning when we intentionally discard const
 * pseudo_client.c: Fix warning
 * yocto-older-glibc-symbols.path: Add as a reference patch
 * pseudo/pseudo_client: Add wrapper functions to operate correctly with glibc 2.38 onwards
 * configure: Prune PIE flags
 * test/test-parallel-rename.sh: Add parallel rename test
 * test/test-parallel-symlinks.sh: Add parallel symlink test
 * ports/linux/guts: Add .gitignore to ignore generated files

(From OE-Core rev: b3140c624504b19a2b2faec8df89f57a99cefce1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 994e508b2a0ede8b5cc4fe39444cf25dc9a53faf)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Vijay Anusuri
2c23fc4f0e binutils: Fix CVE-2025-1181
import patch from ubuntu to fix
 CVE-2025-1181

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/binutils/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24
&
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=18cc11a2771d9e40180485da9a4fb660c03efac3]

(From OE-Core rev: 55d4b81b15b6eb2e221ff69dc791d2e319fad234)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>

[Yoann Congal: Corrected the second patch SHA1 in URLs "18cc11a..."]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
71966f1bad gnupg: patch CVE-2025-68973
Pick patch from 2.4 branch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-68973

(From OE-Core rev: 403a9bc3da3574d828cfbce805df48d0181eafed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
cd8f4444b2 curl: patch CVE-2025-15224
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15224.html

(From OE-Core rev: db87200a8ae19d40e7a8f038d9fe4e426f159ad3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2bf97e4e41 curl: patch CVE-2025-15079
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15079.html

(From OE-Core rev: 8ce2a761c2f00e9c7782654cf6d6384ccd3f6e16)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
fd21399bac curl: patch CVE-2025-14017
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-14017.html

(From OE-Core rev: ae23e163f7399e957a100dc13d9cd0b829eef2f4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2654f4f66c libarchive: fix CVE-2025-60753 regression
Pick patch from PR mentioned in v3.8.5 release notes.

(From OE-Core rev: dc3d99c419a913e66cb73bf098291c21985b0432)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Hitendra Prajapati
cfb6825c35 python3: fix CVE-2025-13836
Upstream-Status: Backport from 289f29b0fe

(From OE-Core rev: d3bcb5ded27003612ad591764f648e83e91c27ca)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
51201f6c54 libpcap: patch CVE-2025-11964
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11964

(From OE-Core rev: 026c6e7ee386ae09b9a2ef22d69730fc838ddf4f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
a12f120831 libpcap: patch CVE-2025-11961
Pick patch per [1].
Also pick additional preparation patch to apply it cleanly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11961

(From OE-Core rev: 714fb7c711b414407598e3a94b0600fe7f857e38)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
4c8419bebe python3-urllib3: patch CVE-2025-66418
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-66418

(From OE-Core rev: 469fcdd5f07635fa9e308c968126807c1ca09647)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
842275784a dropbear: patch CVE-2019-6111
Pick patch mentioning this CVE number.

(From OE-Core rev: 3a8effd37b83cab3421ee1fe59da232cdf338743)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00