Compare commits

...

787 Commits

Author SHA1 Message Date
Lee Chee Yang
58f9b898da migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 398a2a080361eb22b9c447dbde31fca58bf4e0bb)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
e60019c6eb dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: a48ab61034d50be1026b939112f4a5c58bed7b88)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7794952de8 dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: 4c64db73fa68b6dbc11fe4b64452b0d6b7ee0280)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7bb35f44d9 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 8d7b549d095c2ca04d4c7ff5a92f6de9fceb8496)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Richard Purdie
c3b734f0a7 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: e2994ca0076ec99038790e7a40936236a5078135)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
ff118ede82 contributor-guide/recipe-style-guide.rst: explain difference between layer and recipe license(s)
Explain that the LICENSE set in a recipe does not apply to the recipe
file itself, but to the underlying software. The license of the recipe
file is the license provided in the layer itself. Give OpenEmbedded-Core
as an example for this.

Fixes [YOCTO #14410]

(From yocto-docs rev: 6799b1be5d48f4bf5dcd0b16c2dbc2e297d4ecd9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b8a56b8b2e8c0417b2f7204f80c79b05d95e9ce4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
d5bcc413d0 ref-manual/variables.rst: document the CCACHE_TOP_DIR variable
Added by commit 35d7fe73bba1 ("ccache.bbclass: Make it can be shared
between different builds") in OE-Core.

Fixes [YOCTO #16052]

(From yocto-docs rev: e4f5ba7bb34586cd7bee7f0fe69c39b36dabb357)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 550ef8340b550f8d4e9c3d0672190dc09592c621)
Fix conflicts: CCLD variable in master not on kirkstone.
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
72eb266009 overview-manual: convert YP-flow-diagram.png to SVG
Based on diagrams/poky-buildprocess/Pokyarch_diag.svg, replace the PNG
graphic for the YP flow to an SVG graphic.

(From yocto-docs rev: 2983418bec7a2faeaae4e831b8f642ff0cd95980)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d2aaf54bee49295bdf81021648cb27499930edc6)
Fix conflicts (different alignment on master, keep one from kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
d66f9ee0ef overview-manual/yp-intro.rst: fix SDK type in bullet list
The YP generates an SDK by default, which can be meta-toolchain, an
image-specific one, or an extensible SDK (eSDK). Don't be specific in
this bullet list.

(From yocto-docs rev: 3c455c5a2892611d2323610170f9600ceb953f6c)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f02c64286504353e97c7e5fe5c0d193776469ad1)
Fix conflict (#. on master, 7. on kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
5489d2b5b6 ref-manual/release-process.rst: add a "Development Cycle" section
Add a new section to release-process.rst to document the development
cycle of each release and namely the milestones and feature freeze
occuring after M3.

Fixes [YOCTO #15979]

(From yocto-docs rev: f7888e3c3267ec7c39374f694f86088598bea649)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77c04cc5944acda7575546a7434e014e4a75ba58)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e3fdce60c0 test-manual/ptest.rst: detail the exit code and output requirements
A ptest must emit at least one test result on the console, as this is
required by the testimage class (which ignores the exit code).
ptest-runner on the other hand, ignore the output and only cares about
the exit code.

Add these two items as requirements for a ptest to be valid.

Fixes [YOCTO #15832]

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 916be11467d87d39e4ad5ea218237258523f3953)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9292f61d7ba89598c89033ea7ee3b11a20d873f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
a4aa1bc237 ref-manual/classes.rst: document the image-container class
Add documentation for the image-container class, which is a simple class
to generate an image suitable for creating a container.

This answers in part to questions asked in [YOCTO #14368].

It also adds documentation for IMAGE_CONTAINER_NO_DUMMY, which was added
in OE-Core with commit f0645e172bb8 ("image-container.bbclass: Error if
not using linux-dummy").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cebe8ff0508e0fc2de8378a1cf93eb8054e12699)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6ce00e5875eb3469fefd55cc22acaaeaf620053a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
cb99d0b1c5 Add a new "Security" section
The current security-related documentation is a bit hard to find and
hidden within the development manual. However these are processes that
are not part of a development task but is rather a vulnerability
reporting process.

Create a new "Security" section in the documentation to gather this
information. This will be directly visible in the sidebar when opening
the documentation.

Split the previous security-subjects.rst document into 2 documents:

- security-team.rst: defines the roles of the security teams and its
  members.

- reporting-vulnerabilities.rst: guide to report vulnerabilities to the
  security team.

The plan is to backport these documents to active releases. As a
consequence, this section should be free of instructions and information
that only make sense for a specific release. It should _not_ contain
documents on how to enable security features with Yocto on target
devices, this is unrelated and can be left in the development manual
(for example: dev-manual/vulnerabilities.rst to deal with CVEs).

(From yocto-docs rev: 3fd0f37d708d88534dd6dbb51dc264911c349352)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 81e14ca2d5cff9e2104c556655144b069633790c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e1c9a5d58f ref-manual/svg/releases.svg: mark whinlatter as current release
Whinlatter is the new current Yocto Project release, mark it as an
active one. Move it as released in December 2025.

(From yocto-docs rev: 7f6dff5c3d549cbd5040c15261bdb38a54dbd69e)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6f8e97c6e529f3c47f45f34d9e04e3ad7bddd587)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
0071164ce8 ref-manual/svg/releases.svg: mark styhead and walnascar EOL
Walnascar has stopped being updated a while ago, and Styhead is EOL
since May 2025.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 2425f0cf64c35b9f7d0676dd31c2ea94fcdb3a31)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 834de77b543de43ee3c1c12ca1d6277e67e126de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
10233e97f7 overview-manual/yp-intro.rst: link to YP members and participants
Instead of a fixed list of commercial vendors, link to existing lists on
the YP website.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 69ad32040baf8ca7c79265fd83041b3241353e2d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9d394db4f88b66500e4d5a2a518d25f08a0c9472)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
941d1d47c1 overview-manual/yp-intro.rst: change removed ECOSYSTEM to ABOUT
The ABOUT tab is where the members/participants are listed now.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 8e216cd6e17fe4bc367c11d2ad3e3d7a29701af8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a8a8d810f0505529aaaa90678e03152c8ac0c00b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Richard Purdie
5abd143cb5 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 036f76ea35c49a78d612093dcd8eb1fac7ded8d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:42 +00:00
Paul Barker
71ae82a596 poky.conf: Bump version for 4.0.33 release
(From meta-yocto rev: 677379f21941363d50f9d946963542b4ccb7e27c)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:26 +00:00
Khem Raj
6f2c1098a6 oeqa: Use 2.14 release of cpio instead of 2.13
2.13 may not be buildable with latest compilers without patching

(From OE-Core rev: 64d56cf416b31ae92438deefe4028402120ed998)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 406a33f896accc35a9cb6ab156f1e0f42dda67d8)
Backport: Fix [YOCTO #16137] by using the same archive as the cpio
recipe, ensuring the archive is in DL_DIR and so, avoiding reaching
unreliable upstream server.
This upgrade is safe to do because this archive is only use to test that
it compiles.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
74924f0891 pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'
The pseudo update was causing hangs in builds, pull in the fix.

(From OE-Core rev: e514b1ac74ae8a69b15e3459cb3b327a35cabff8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8acdbefd0a148c8b7713f46066ae8489984c5d2d)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
d087748248 pseudo: Update to pull in openat2 and efault return code changes
Pulls in the following fixes:

 * makewrappers: Enable a new efault option
 * ports/linux/openat2: Add dummy wrapper
 * test-syscall: Add a syscall test
 * ports/linux/pseudo_wrappers: Avoid openat2 usage via syscall

which should fix issues with the tar CVE fix on Centos/Alma/Rocky 9 distros
that uses openat2 as well as the efault issue breaking rust based uutils.

(From OE-Core rev: edc8c8e0ae511b03cb9d0501d472bb42fbea2c8b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 51f1388dd1679a28ec3ca468cf16aa0ea32bccf9)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Paul Barker
401a9cdd7d pseudo: Add hard sstate dependencies for pseudo-native
Where a task (such as do_package) runs under fakeroot, the corresponding
setscene task (do_package_setscene) will also run under fakeroot when
restoring from sstate. Assuming pseudo is used as the fakeroot
implementation, we need pseudo-native and all its runtime dependencies
to be available in the sysroot before running any setscene tasks under
fakeroot.

We already add a hard dependency from all do_package_setscene tasks to
virtual/fakeroot-native:do_populate_sysroot in base.bbclass, but this
does not cover transitive dependencies. So, extend the dependencies of
pseudo-native:do_populate_sysroot_setscene to ensure that the sqlite3
library is also available in the sysroot before running fakeroot
setscene tasks.

[YOCTO #15963]

(From OE-Core rev: e3c07672d22343cd7ac68cb84716b05ec7cd438b)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c146ca657440550e00bc5e53d13502ef7aa945b)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
42eb45b3a0 pseudo: Update to pull in memleak fix
(From OE-Core rev: d789b03d33d9a0fce335080f667c29ed45515726)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 42137b6f97da0672af365cd841678f39ce5907d2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Robert Yang
3a3b526edb pseudo: 1.9.0 -> 1.9.2
(From OE-Core rev: 2093a9c80e391795abbac8766569583a3547e43b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a42747fd280ce68283e1491971d22273e3bdf2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
8a6b3d82f6 pseudo: Upgrade to version 1.9.1
This brings in:
 * nftw, nftw64: add wrapper
 * ftw, nftw, ftw64, nftw64: add tests
 * Move ftw and ftw64 to calling ntfw and nftw64
 * makewrappers: Introduce 'array' support
 * pseudo_util.c: Avoid warning when we intentionally discard const
 * pseudo_client.c: Fix warning
 * yocto-older-glibc-symbols.path: Add as a reference patch
 * pseudo/pseudo_client: Add wrapper functions to operate correctly with glibc 2.38 onwards
 * configure: Prune PIE flags
 * test/test-parallel-rename.sh: Add parallel rename test
 * test/test-parallel-symlinks.sh: Add parallel symlink test
 * ports/linux/guts: Add .gitignore to ignore generated files

(From OE-Core rev: b3140c624504b19a2b2faec8df89f57a99cefce1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 994e508b2a0ede8b5cc4fe39444cf25dc9a53faf)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Vijay Anusuri
2c23fc4f0e binutils: Fix CVE-2025-1181
import patch from ubuntu to fix
 CVE-2025-1181

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/binutils/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24
&
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=18cc11a2771d9e40180485da9a4fb660c03efac3]

(From OE-Core rev: 55d4b81b15b6eb2e221ff69dc791d2e319fad234)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>

[Yoann Congal: Corrected the second patch SHA1 in URLs "18cc11a..."]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
71966f1bad gnupg: patch CVE-2025-68973
Pick patch from 2.4 branch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-68973

(From OE-Core rev: 403a9bc3da3574d828cfbce805df48d0181eafed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
cd8f4444b2 curl: patch CVE-2025-15224
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15224.html

(From OE-Core rev: db87200a8ae19d40e7a8f038d9fe4e426f159ad3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2bf97e4e41 curl: patch CVE-2025-15079
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15079.html

(From OE-Core rev: 8ce2a761c2f00e9c7782654cf6d6384ccd3f6e16)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
fd21399bac curl: patch CVE-2025-14017
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-14017.html

(From OE-Core rev: ae23e163f7399e957a100dc13d9cd0b829eef2f4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2654f4f66c libarchive: fix CVE-2025-60753 regression
Pick patch from PR mentioned in v3.8.5 release notes.

(From OE-Core rev: dc3d99c419a913e66cb73bf098291c21985b0432)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Hitendra Prajapati
cfb6825c35 python3: fix CVE-2025-13836
Upstream-Status: Backport from 289f29b0fe

(From OE-Core rev: d3bcb5ded27003612ad591764f648e83e91c27ca)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
51201f6c54 libpcap: patch CVE-2025-11964
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11964

(From OE-Core rev: 026c6e7ee386ae09b9a2ef22d69730fc838ddf4f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
a12f120831 libpcap: patch CVE-2025-11961
Pick patch per [1].
Also pick additional preparation patch to apply it cleanly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11961

(From OE-Core rev: 714fb7c711b414407598e3a94b0600fe7f857e38)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
4c8419bebe python3-urllib3: patch CVE-2025-66418
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-66418

(From OE-Core rev: 469fcdd5f07635fa9e308c968126807c1ca09647)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
842275784a dropbear: patch CVE-2019-6111
Pick patch mentioning this CVE number.

(From OE-Core rev: 3a8effd37b83cab3421ee1fe59da232cdf338743)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
46bfac5bd7 cups: allow unknown directives in conf files
Patch for CVE-2025-61915 by mistake causes fatal error on unknown
directives in configuration files.
The default configuration already contains unknown directive in
non-systemd setups:
Unknown directive IdleExitTimeout on line 32 of /etc/cups/cupsd.conf

Backport fix for this from 2.4.x branch which reverts this behavior.

(From OE-Core rev: 6faf1266813efa21503511834cbb12f0d63c82fe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
17f7dd686d cups: patch CVE-2025-61915
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-61915

(From OE-Core rev: 522d8a64335bb3faa7a2ed492fca1bdd665fb236)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
3f703ca1c4 cups: patch CVE-2025-58436
Pick patch from branch 2.4.x corresponding to patch mentioned in [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-58436

(From OE-Core rev: f1014ff6d886312afd55473497934590bc9c78ac)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
15ea9a3dcb qemu: ignore CVE-2025-54566 and CVE-2025-54567
These CVEs are not applicable to version 6.2.x as the vulnerable code
was introduced inly in 10.0.0.

Debian made the analysis, reuse their work.
* https://security-tracker.debian.org/tracker/CVE-2025-54566
* https://security-tracker.debian.org/tracker/CVE-2025-54567

(From OE-Core rev: 616e6c793bd025337aa8b66450408829fdfe59d5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
b06df1f496 glib-2.0: patch CVE-2025-14512
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4935
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3845

(From OE-Core rev: 2fb84f36c77e0d049a71dcfa597a67d297cbfd0a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
32417b8ef7 glib-2.0: patch CVE-2025-14087
Pick commits from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4933
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3834

(From OE-Core rev: 6e1ce2de818d647d69f652ab67c0c2d13860e77b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
0092f97678 glib-2.0: patch CVE-2025-13601
Pick commits from [1] per [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-13601

(From OE-Core rev: eb0e4e0fce9378100e4482fc91d6886d84ef7ec2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
0736fb2025 util-linux: patch CVE-2025-14104
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-14104

(From OE-Core rev: 8f7f1562f6cba3b67cc4301702c03ab31551a155)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Vijay Anusuri
c942cdb057 go: Fix CVE-2025-61729
Upstream-Status: Backport from 3a842bd5c6

(From OE-Core rev: 0057fc49725db8637656fac10631d8f89799bad3)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 07:21:42 -08:00
Vijay Anusuri
690dcd2621 go: Fix CVE-2025-61727
Upstream-Status: Backport from 04db77a423

(From OE-Core rev: dc1d95e3edfeaa5458fc564910ae5c9445a6f942)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 07:21:42 -08:00
Vijay Anusuri
084488d13f go: Update CVE-2025-58187
Upstream-Status: Backport from ca6a5545ba

(From OE-Core rev: 43b3d2b2ef77c97b323b86bd6ee54996c38e46ed)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 07:21:42 -08:00
Jiaying Song
5e7ac0aa43 grub: fix CVE-2025-61661 CVE-2025-61662 CVE-2025-61663 CVE-2025-61664
References:
https://nvd.nist.gov/vuln/detail/CVE-2025-61661
https://nvd.nist.gov/vuln/detail/CVE-2025-61662
https://nvd.nist.gov/vuln/detail/CVE-2025-61663
https://nvd.nist.gov/vuln/detail/CVE-2025-61664

(From OE-Core rev: f2031f39e423b764ccf4003bdee05f30d66fb7ce)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 07:21:42 -08:00
Martin Jansa
37dc9a476a cross.bbclass: Propagate dependencies to outhash
Similar to what native and staging is doing since:
https://git.openembedded.org/openembedded-core/commit/meta/classes/native.bbclass?id=d6c7b9f4f0e61fa6546d3644e27abe3e96f597e2
https://git.openembedded.org/openembedded-core/commit/meta/classes/staging.bbclass?id=1cf62882bbac543960e4815d117ffce0e53bda07

Cross task outputs can call native dependencies and even when cross
recipe output doesn't change it might produce different results when
the called native dependency is changed, e.g. clang-cross-${TARGET_ARCH}
contains symlink to clang binary from clang-native, but when clang-native
outhash is changed, clang-cross-${TARGET_ARCH} will still be considered
equivalent and target recipes aren't rebuilt with new clang binary, see
work around in https://github.com/kraj/meta-clang/pull/1140 to make target
recipes to depend directly not only on clang-cross-${TARGET_ARCH} but
clang-native as well.

I have added a small testcase in meta-selftest which demostrates this issue.
Not included in this change, but will send it if useful.

openembedded-core $ ls -1 meta-selftest/recipes-devtools/hashequiv-test/
print-datetime-link-cross.bb
print-datetime-link-native.bb
print-datetime-native.bb
print-datetime-usecross.bb
print-datetime-usenative.bb

print-datetime-native provides script which prints defined PRINT_DATETIME variable.

print-datetime-link-native and print-datetime-link-cross both provide a symlink to
the script from print-datetime-native.

print-datetime-usenative and print-datetime-usecross are target recipes using the
native and cross versions of print-datetime-link-* recipe.

  # clean build all is rebuilt:
  $ bitbake -k print-datetime-usenative print-datetime-usecross
  WARNING: print-datetime-native-1.0-r0 do_install: print-datetime-native current DATETIME in script is 2025-11-13_20_05
  WARNING: print-datetime-link-native-1.0-r0 do_install: print-datetime-link-native current DATETIME in symlink is 2025-11-13_20_05
  WARNING: print-datetime-link-cross-x86_64-1.0-r0 do_install: print-datetime-link-cross-x86_64 current DATETIME in symlink is 2025-11-13_20_05
  WARNING: print-datetime-usenative-1.0-r0 do_install: print-datetime-usenative current DATETIME from print-datetime-link is 2025-11-13_20_05
  WARNING: print-datetime-usecross-1.0-r0 do_install: print-datetime-usecross current DATETIME from print-datetime-link is 2025-11-13_20_05

  # keep sstate-cache and hashserv.db:
  # print-datetime-usenative is correctly rebuilt, because print-datetime-link-native has different hash (because print-datetime-native hash changed)
  # print-datetime-usecross wasn't rebuilt, because print-datetime-link-cross-x86_64 doesn't include the changed hash of print-datetime-native
  $ bitbake -k print-datetime-usenative print-datetime-usecross
  WARNING: print-datetime-native-1.0-r0 do_install: print-datetime-native current DATETIME in script is 2025-11-13_20_07
  WARNING: print-datetime-link-native-1.0-r0 do_install: print-datetime-link-native current DATETIME in symlink is 2025-11-13_20_07
  WARNING: print-datetime-link-cross-x86_64-1.0-r0 do_install: print-datetime-link-cross-x86_64 current DATETIME in symlink is 2025-11-13_20_07
  WARNING: print-datetime-usenative-1.0-r0 do_install: print-datetime-usenative current DATETIME from print-datetime-link is 2025-11-13_20_07

It's because print-datetime-link-cross-x86_64 depsig doesn't include print-datetime-native signature:

$ cat tmp/work/x86_64-linux/print-datetime-link-cross-x86_64/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
SSTATE_PKGSPEC=sstate:print-datetime-link-cross-x86_64:x86_64-oe-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   32 19fbeb373f781c2504453c1ca04dab018a7bc8388c87f4bbc59589df31523d07 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-cross-x86_64
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
drwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux/print-datetime-link -> ../print-datetime

While print-datetime-link-native doesn't have this issue, because print-datetime-native signature is there:

$ cat tmp/work/x86_64-linux/print-datetime-link-native/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
print-datetime-native: 60f2734a63d708489570ca719413b4662f8368abc9f4760a279a0a5481e4a17b
quilt-native: 65d78a7a5b5cbbf0969798efe558ca28e7ef058f4232fcff266912d16f67a8b8
SSTATE_PKGSPEC=sstate:print-datetime-link-native:x86_64-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   26 3d5458be834b2d0e4c65466b9b877d6028ae2210a56399284a23144818666f10 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-native
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/print-datetime-link -> print-datetime

With the cross.bbclass fix the link-cross recipe has a checksum from native recipe as well:

$ cat tmp/work/x86_64-linux/print-datetime-link-cross-x86_64/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
print-datetime-native: 9ceb6c27342eae6b8da86c84685af38fb8927ccc19979aae75b8b1e444b11c5c
quilt-native: 65d78a7a5b5cbbf0969798efe558ca28e7ef058f4232fcff266912d16f67a8b8
SSTATE_PKGSPEC=sstate:print-datetime-link-cross-x86_64:x86_64-oe-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   32 19fbeb373f781c2504453c1ca04dab018a7bc8388c87f4bbc59589df31523d07 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-cross-x86_64
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
drwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux/print-datetime-link -> ../print-datetime

And print-datetime-usecross is correctly rebuilt whenever print-datetime-native output is different.

(From OE-Core rev: c15faee8854e85e02693a041d88326f30b24ee92)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Aleksandar Nikolic
1e47a3035c scripts/install-buildtools: Update to 4.0.31
Update to the 4.0.31 release of the 4.0 series for buildtools

(From OE-Core rev: c0dacba480b02ea591915f8afbe0b48c10b8be43)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Changqing Li
d35837e3cd libsoup: fix CVE-2025-12105
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/481

(From OE-Core rev: caa6f192df558d5f46c8a0968f72f08c6e59df1d)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Mingli Yu
33cffc4716 libxslt: Fix CVE-2025-11731
Backport patch [1] to fix CVE-2025-11731.

[1] fe508f201e

(From OE-Core rev: 7196077d84cc8d49652b0d6b54963df579ab1a0b)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Yash Shinde
df858d86ed binutils: fix CVE-2025-11840
CVE-2025-11840

PR 33455
[BUG] A SEGV in vfinfo at ldmisc.c:527
A reloc howto set up with EMPTY_HOWTO has a NULL name.  More than one
place emitting diagnostics assumes a reloc howto won't have a NULL
name.

https://sourceware.org/bugzilla/show_bug.cgi?id=33455

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=f6b0f53a36820da91eadfa9f466c22f92e4256e0]

(From OE-Core rev: 85e62aad46eb096cf92907288a3eb1b6f76072c4)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Yash Shinde
c1f7fcc84f binutils: fix CVE-2025-11839
CVE-2025-11839

PR 33448
[BUG] Aborted in tg_tag_type at prdbg.c:2452
Remove call to abort in the DGB debug format printing code, thus allowing
the display of a fuzzed input file to complete without triggering an abort.

https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=12ef7d5b7b02d0023db645d86eb9d0797bc747fe]

(From OE-Core rev: d99979ea5fa475a59d3c21859d3bbbd81e0cdba4)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Libo Chen
9af12b047e go: Fix CVE-2023-39323
Line directives ("//line") can be used to bypass the restrictions on
"//go:cgo_" directives, allowing blocked linker and compiler flags to
be passed during compilation. This can result in unexpected execution
of arbitrary code when running "go build". The line directive requires
the absolute path of the file in which the directive lives, which makes
exploiting this issue significantly more complex.

Made below changes for Go 1.17 backport:
- drop the modifications of test codes

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-39323

Upstream-patch:
e7c142a19d

(From OE-Core rev: 62f4c3aec8f80a259472ce19104596d08741c101)

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Liyin Zhang
652e8fc3b9 rsync: fix CVE-2025-10158
CVE-2025-10158:
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-10158]

Upstream patch:
[797e17fc4a]

(From OE-Core rev: fe4bea86b27551edbe7440ff47041b6d45b2f4e1)

Signed-off-by: Liyin Zhang <liyin.zhang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Kai Kang
cde4ddcfd1 qemu: fix CVE-2025-12464
Backport patch to fix CVE-2025-12464.

Reference: https://gitlab.com/qemu-project/qemu/-/commit/a01344d9d7

(From OE-Core rev: 7ef40090719cab3fb9bda3f87a9d700d9b503e3e)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:54 -08:00
Deepesh Varatharajan
0183740845 binutils: Fix CVE-2025-11494
Since x86 .eh_frame section may reference _GLOBAL_OFFSET_TABLE_, keep
_GLOBAL_OFFSET_TABLE_ if there is dynamic section and the output
.eh_frame section is non-empty.

Backport a patch from upstream to fix CVE-2025-11494
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a]

(From OE-Core rev: aa67c21a07dc180a0582be46e239dafd40017ba0)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:24:53 -08:00
Steve Sakoman
2c05660b21 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 2ed3f8b938579dbbb804e04c45a968cc57761db7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:54:41 -08:00
Steve Sakoman
cb1206dd84 poky.conf: bump version for 4.0.32
(From meta-yocto rev: 77b40877c179ea3ce5c37c7ba1831e9c0e289266)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:37 -08:00
Peter Marko
33d90091be libmicrohttpd: disable experimental code by default
Introduce new packageconfig to explicitly avoid compilation of
experimental code. Note that the code was not compiled by default also
before this patch, this now makes it explicit and makes it possible to
check for the flags in cve-check code.

This is less intrusive change than a patch removing the code which was
rejected in patch review.

This will solve CVE-2025-59777 and CVE-2025-62689 as the vulnerable code
is not compiled by default.
Set appropriate CVE status for these CVEs based on new packageconfig.

(From OE-Core rev: 1d8e646aebe75b8ede51d4de9e0003a822992a33)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:37 -08:00
Hitendra Prajapati
9f461395a8 openssh: fix CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.

Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61984

Upstream-Status: Backport from 35d5917652

(From OE-Core rev: 7ca0c7a4d17c707658669e255689ecd4183c7e9b)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:37 -08:00
Peter Marko
0002d5d082 libpng: patch CVE-2025-66293
Pick patches per nvd report [1] and github advisory [2].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-66293
[2] https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f

(From OE-Core rev: c33ebd0882288a962c089b423cc2468a7c84c2e7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:37 -08:00
Hitendra Prajapati
db73f23fc2 libxml2: Security fix for CVE-2025-7425
CVE-2025-7425
libxslt: heap-use-after-free in xmlFreeID caused by `atype` corruption

Origin: https://launchpad.net/ubuntu/+source/libxml2/2.9.14+dfsg-1.3ubuntu3.6
Ref : https://security-tracker.debian.org/tracker/CVE-2025-7425

Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libxslt/-/issues/140
(From OE-Core rev: cf260bef4495186662b74b8324d01efcfc2121fd)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:36 -08:00
Gyorgy Sarvari
40701465df systemd-bootchart: update SRC_URI branch
The branch was renamed from master to main.

(From OE-Core rev: 80c7fd87fd95a79c6eb5f41b95cf70ccc70d9615)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Archana Polampalli
ba9338d810 go: fix CVE-2025-61724
The Reader.ReadResponse function constructs a response string through repeated
string concatenation of lines. When the number of lines in a response is large,
this can cause excessive CPU consumption.

(From OE-Core rev: 188dbac037809d6e8f0e1667f563fea997ea04b8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Archana Polampalli
46c836aefa go: fix CVE-2025-61723
The processing time for parsing some invalid inputs scales non-linearly with
respect to the size of the input. This affects programs which parse untrusted PEM inputs.

(From OE-Core rev: cfafebef95330e531ab7bb590e5fb566dd5a3dce)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Archana Polampalli
5f8155aefa go: fix CVE-2025-58189
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled
information (the ALPN protocols sent by the client) which is not escaped.

(From OE-Core rev: b3f055df67cf345c9a17c5c1c874c778d538ba9e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Archana Polampalli
dd0a2c2470 go: fix CVE-2025-58187
Due to the design of the name constraint checking algorithm, the processing time
of some inputs scale non-linearly with respect to the size of the certificate.
This affects programs which validate arbitrary certificate chains.

(From OE-Core rev: cea9fcf1b21b1b35b88986b676d712ab8ffa9d67)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Peter Marko
c5794d82b0 libpng: patch CVE-2025-65018
Pick commits per NVD report.

(From OE-Core rev: c46f841cdc8f7c1b0cce7da8fb587f65320a2163)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Peter Marko
169ca8debf libpng: patch CVE-2025-64720
Pick commit per NVD report.

(From OE-Core rev: 9694df176a13eeac174c7da2bcf8243969dbcda6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Peter Marko
5d27e8f05d libpng: patch CVE-2025-64506
Pick commit per NVD report.

(From OE-Core rev: eb4af9b4cea963b650be217d33bc12f560ed84a6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Peter Marko
d492537188 libpng: patch CVE-2025-64505
Pick commit per NVD report.
Add two patches to apply it cleanly.

(From OE-Core rev: 1470546924765d134c83b50e62974f048614b121)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Peter Marko
052e4214aa gnutls: patch CVE-2025-9820
This CVE is announced under [1].
Pick commit which mentions this CVE per [2].

[1] https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18
[2] https://security-tracker.debian.org/tracker/CVE-2025-9820

(From OE-Core rev: 946f776b6f7ceacf76a643c5776b0efedb000efd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 06:56:34 -08:00
Gyorgy Sarvari
c76f44b1da flac: patch seeking bug
While working on audiofile recipe from meta-oe, a test that is using flac
to convert a flac file failed with this particular version of the recipe.

Bisecting the issue pointed to a code snippet that later was modifed with the
patch that is introduced here: in version 1.3.4 there is a bug with seeking
in flac files, returning incorrect pointers.

This backported patch fixes this (and fixes the ptest also, that triggered this).

(From OE-Core rev: ceef3cde9b761b7b5de6f7b6b1fb8e99663af9ca)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Peter Marko
088d1497d5 libarchive: patch CVE-2025-60753
Pick patch from [3] marked in [2] mentioned in [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-60753
[2] https://github.com/libarchive/libarchive/issues/2725
[3] https://github.com/libarchive/libarchive/pull/2787

(From OE-Core rev: e3e9dd59a32541b36d6c1036b8f83af52bef92cd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Peter Marko
22f8da4818 libarchive: patch 3.8.3 security issue 2
Pick patch [2] as listed in [1].

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.3
[2] https://github.com/libarchive/libarchive/pull/2768

(From OE-Core rev: 332f07635ccb4965a001f6536620c9d0b1a9c056)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Peter Marko
4030876db9 libarchive: patch 3.8.3 security issue 1
Pick patch [2] as listed in [1].
To apply it cleanly, add three additional patches from branch patch/3.8.

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.3
[2] https://github.com/libarchive/libarchive/pull/2753

(From OE-Core rev: 201eed780c73335c9278db17fe39fb453e16af08)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Praveen Kumar
c6234dce63 python3: fix CVE-2025-6075
If the value passed to os.path.expandvars() is user-controlled a
performance degradation is possible when expanding environment variables.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-6075

Upstream-patch:
892747b4cf

(From OE-Core rev: 9a7f33d85355ffbe382aa175c04c64541e77b441)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Divya Chellam
6639c7b295 ruby: fix CVE-2024-41123
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS
vulnerabilities when it parses an XML that has many specific characters
such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later
include the patches to fix these vulnerabilities.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-41123

Upstream-patches:
2c39c91a65
4444a04ece
ebc3e85bfa
6cac15d458
e2546e6eca

(From OE-Core rev: 6b2a2e689a69deef6098f6c266542234e46fb24b)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Divya Chellam
7c4bd642e4 ruby: fix CVE-2024-39908
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some
DoS vulnerabilities when it parses an XML that has many specific characters
such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be
impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the
patches to fix these vulnerabilities. Users are advised to upgrade. Users
unable to upgrade should avoid parsing untrusted XML strings.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-39908

Upstream-patches:
f1df7d13b3
d146162e9a
b5bf109a59
b8a5f4cd5c
0af55fa49d
c1b64c174e
9f1415a261
c33ea49810
a79ac8b4b4
67efb5951e
1f1e6e9b40
910e5a2b48

(From OE-Core rev: 6e0b70843422cd7cdb25a9e1520dd64bf701fea6)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Divya Chellam
f58483837c ruby: fix CVE-2024-35176
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a
denial of service vulnerability when it parses an XML that has many
`<`s in an attribute value. Those who need to parse untrusted XMLs
may be impacted to this vulnerability. The REXML gem 3.2.7 or later
include the patch to fix this vulnerability. As a workaround, don't
parse untrusted XMLs.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-35176

Upstream-patch:
4325835f92

(From OE-Core rev: a89fcaf0c3ac2afd95e836bc1356832296135696)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Vijay Anusuri
cdc78fd36f python3-idna: Fix CVE-2024-3651
import patch from debian to fix
  CVE-2024-3651

Upstream-Status: Backport [import from debian 3.3-1+deb12u1
Upstream commit
5beb28b9dd]

(From OE-Core rev: 7359d3cdf2210e81a26d8712769f7e23bfbc1bb7)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 06:50:49 -08:00
Richard Purdie
36165cce68 oe-build-perf-report: relax metadata matching rules
As the poky repository is no longer used, measurements are indexed using
the oe-core commit. But as bitbake, oe-core and meta-yocto are now
retrieved from separate gits, while measuring performances for a given branch
at some time interval, we can get the same commit for oe-core but
different ones for bitbake or meta-yocto. As a consequence, metadata
associated with the same index (oe-core commit) might differ.

To work around this, relax the equality checks for commit, commit_time
and commit_count since they might no longer match.

Ideally we'd group them into separate results but for now, treat them
as being the same.

[Based on work from Mathieu Dubois-Briand but fixed differently]
(From OE-Core rev: ff72b41a3f0bf1820405b8782f0d125cd10e3406)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e7dc42e30c76bf0fbb4d3cc019bbec675bac55fa)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Gyorgy Sarvari
9734a91472 musl: patch CVE-2025-26519
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-26519

Pick the patches that are attached to the musl advisory:
https://www.openwall.com/lists/musl/2025/02/13/1

(From OE-Core rev: e1c1b4b5100e08b63a2e6e5ff608f79e7b202649)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Vijay Anusuri
42d2a2e8cd xwayland: Fix for CVE-2025-62231
Upstream-Status: Backport from 3baad99f9c

(From OE-Core rev: 24a1574d6f61a45ce104ab6ee01697df2575fd51)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Vijay Anusuri
940e5e75b9 xwayland: Fix for CVE-2025-62230
Upstream-Status: Backport from
865089ca70
& 87fe255393

(From OE-Core rev: a481fe0dcca8213eca845d5f1fdde3f0d15c8aed)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Vijay Anusuri
3d559d269a xwayland: Fix for CVE-2025-62229
Upstream-Status: Backport from 5a4286b13f

(From OE-Core rev: 5c6a07f215e00392b1831ed89ac0f8180823e124)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Soumya Sambu
36037789d2 elfutils: Fix CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils
0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the
component eu-strip. The manipulation leads to denial of service. The attack needs to
be approached locally. The exploit has been disclosed to the public and may be used.
The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is
recommended to apply a patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1377

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=fbf1df9ca286de3323ae541973b08449f8d03aba

(From OE-Core rev: e4e8392e688ceb0d8e68fe48118383c031178b5e)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Soumya Sambu
7dd51aea98 elfutils: Fix CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192. This
vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c
of the component eu-strip. The manipulation leads to denial of service. It is
possible to launch the attack on the local host. The complexity of an attack is
rather high. The exploitation appears to be difficult. The exploit has been
disclosed to the public and may be used. The name of the patch is
b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to
fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1376

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918

(From OE-Core rev: 1126e5c1e63b876499c78ac403d1327645edf1c7)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-24 06:57:39 -08:00
Lee Chee Yang
851a3f0c55 migration-guides: add release notes for 4.0.31
(From yocto-docs rev: 4b9df539fa06fb19ed8b51ef2d46e5c56779de81)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 992d0725e8b4fdcdc2e9a101ce51ebef94a00112)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Ross Burton
dacb67f70f documentation: link to the Releases page on yoctoproject.org instead of wiki
We have a machine-generated Releases page[1] which is preferable to the
wiki.

[1] https://www.yoctoproject.org/development/releases/

(From yocto-docs rev: 492619059cbbe2d1ebc347c3e86072f32d7d064a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 46a9172fd17aa518028e35b8c874e74889079094)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Quentin Schulz
232e8ebe3c overview-manual: migrate to SVG + fix typo
The original PNG had a typo (YP-Comptible instead of YP-Compatible).

Instead of patching a PNG, let's migrate to an SVG with the typo already
fixed.

[AG: fix conflicts]

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: bb9887a98bb64ebaa23b772fd0f3c22f13e996e7)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9f3c2a9113b329f7efdd22d3b3fbe272a44bc654)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Quentin Schulz
41c16e82e9 dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
We should recommend using bitbake-getvar command wherever possible as
its output is much less confusing and overwhelming than bitbake -e.

Unfortunately, bitbake-getvar currently doesn't list Python tasks or
functions, unlike bitbake -e, so keep the latter for some corner cases.

[AG: Moroever -> Moreover typo fix]

(From yocto-docs rev: 382c8eee275eb4773d4e2183f5fe19837a6a3b0b)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 41e4e05369c4e028c679749b7b62434327927a09)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Quentin Schulz
cab0ee97d8 ref-manual: variables: migrate the OVERRIDES note to bitbake-getvar
Wherever possible, we should use bitbake-getvar as it's the recommended
tool so let's do that.

(From yocto-docs rev: 7981bc2bd09b2d618563710474525febabaf6103)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2293a3f2767895e9fb5c3e8f3ec11bb4951a7127)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Quentin Schulz
d54b15eba1 kernel-dev: common: migrate bitbake -e to bitbake-getvar
It's recommended to use bitbake-getvar for a few releases now so let's
use that instead of bitbake -e.

While at it, use a cross-reference for "OpenEmbedded Build System".

(From yocto-docs rev: 7f6dc007a888784a678859690dbfddd5a1fe28a0)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 54585646d8220f8de1ba2c7246cb3f2fcbc59583)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Walter Werner SCHNEIDER
2943f88d88 kernel-dev: add disable config example
Makes it more clear that the configuration fragment can also be used to
disable a configuration.

(From yocto-docs rev: c4bfc16b2e13444547342204a6f75fd1cf343533)

Signed-off-by: Walter Werner SCHNEIDER <contact@schnwalter.eu>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d38ef467081ee73bf23f240ace54b849a3a87612)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Robert P. J. Day
9479971ef9 dev-manual/new-recipe.rst: typo, "whith" -> "which"
Fix typo "whith", should be "which".

(From yocto-docs rev: 1a54d05d8bd5484e17cbc060fc57fd2f7afb683f)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f98b25f7f7522cf223beb001cabef870d6dd8c10)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Robert P. J. Day
2cf2a95adb dev-manual/new-recipe.rst: replace 'bitbake -e' with 'bitbake-getvar'
Replace the legacy call to 'bitbake -e' to get the value of a recipe's
variable with the newer call to 'bitbake-getvar'.

(From yocto-docs rev: d7ef362307daf2e8d9b62ec895e080654abfef8b)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit ed7c0766ef5f13b90943a69e64f8e8713d05e864)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Robert P. J. Day
bababfb854 dev-manual/layers.rst: document "bitbake-layers show-machines"
The "show-machines" subcommand is not mentioned in the docs; add it.

[AG: fix conflicts]

(From yocto-docs rev: 09bbdc6bc5f9ae77f120185d1324f1166ac1f9d5)

Signed-off-by: Robert P. J. Day <Crpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b4320cdc4df08c59a24d5247b3895dd602554fa0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Robert P. J. Day
6f01aae51d dev-manual/new-recipe.rst: update "recipetool -h" output
Update the output of "recipetool -h" to include the missing "edit"
subcommand.

(From yocto-docs rev: 2a85eab0c51a78ab00168e23274d479cf3aedb24)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 092d688349b0b6bb10ae6fbbab7d82801964daf5)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Alexander Kanavin
33d61e50c1 goarch.bbclass: do not leak TUNE_FEATURES into crosssdk task signatures
The default assignments look like this:
TARGET_GO386 = "${@go_map_386(d.getVar('TARGET_ARCH'), d.getVar('TUNE_FEATURES'), d)}"

TUNE_FEATURES is a target-specific variable, and so should be used
only for target builds. The change is similar to what is already done
for native packages.

(From OE-Core rev: cfff8e968257c44880caa3605e158764ed5c6a2a)

(From OE-Core rev: 8aad87c12a809d790175b9848f5802d0a28eecac)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Gyorgy Sarvari
9cc35e0f6d babeltrace2: fetch with https protocol
The source doesn't support the default "git" protocol anymore for
anonymous download, causing fetching failures.

(From OE-Core rev: 4351a427b2ec270ea5e4c698fe4c213036c1241b)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Alexander Kanavin
a916d3a38a xf86-video-intel: correct SRC_URI as freedesktop anongit is down
(From OE-Core rev: 04037a14e1431c4a51f5d51885974732a6108368)

(From OE-Core rev: e2c288a92f06af82559cf33db6c988b9dbc8b7ea)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9649bec517)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Gyorgy Sarvari
b0c11efc8f efibootmgr: update SRC_URI branch
master branch was renamed to main

(From OE-Core rev: 2c5b195e974ac54610d7b50c014752875004b0b9)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Soumya Sambu
478f5eaa61 python3-urllib3: Upgrade 1.26.18 -> 1.26.20
Includes fix for CVE-2024-37891

Changelog:
----------
https://github.com/urllib3/urllib3/blob/1.26.20/CHANGES.rst

(From OE-Core rev: 2e805113fe0488224f05524360eeff729dd12d91)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Vijay Anusuri
748f958fd3 xserver-xorg: Fix for CVE-2025-62231
Upstream-Status: Backport from 3baad99f9c

(From OE-Core rev: 05fe08caa0d4bd30510b496a300731a9754f24b8)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Vijay Anusuri
73e3da5d44 xserver-xorg: Fix for CVE-2025-62230
Upstream-Status: Backport from
865089ca70
& 87fe255393

(From OE-Core rev: 215d63fd22b40148625215aac5c4e7f2629f5814)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Vijay Anusuri
6b397fb207 xserver-xorg: Fix for CVE-2025-62229
Upstream-Status: Backport from 5a4286b13f

(From OE-Core rev: d1d0955ad41827f9c75ae726e7c725d2f82b6d18)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Saquib Iltaf
6ab506f474 rust-cross-canadian: Ignore CVE-2024-43402
Ignore CVE-2024-43402 as its not applicable.

CVEs are specific to Microsoft Windows.

(From OE-Core rev: 3044ae9e6e84faada8c1425238e9e9c3060b1a3a)

Signed-off-by: Saquib Iltaf <saquib.iltaf@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Peter Marko
809b3e9113 curl: ignore CVE-2025-10966
Per [1] this CVE applies only when wolfssl backed is used.
8.17.0 removed WolfSSL support completely.

[1] https://curl.se/docs/CVE-2025-10966.html

(From OE-Core rev: 41c4735658e9ba5322bd06ef50aa3a1edb1f7fd8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-19 08:21:24 -08:00
Jason Schonberg
e2d947b1cc Don't use ftp.gnome.org
http://ftp.gnome.org/pub/gnome redirects to https://download.gnome.org

 bitbake.conf defines ${GNOME_MIRROR} to be https://download.gnome.org/sources/

(From OE-Core rev: 1e1993b72f2b6109ce3d0ef950553b74b2b37b27)

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Praveen Kumar
1dd6d90744 bind: upgrade 9.18.33 -> 9.18.41
This upgrade fixes
CVE-2025-8677,CVE-2025-40778 and CVE-2025-40780.

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/changelog.html

(From OE-Core rev: deca51264991a2f6c6e450f8fa8b4a233280b700)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Hitendra Prajapati
8641f0fec9 go: fix CVE-2024-24783
Upstream-Status: Backport be5b52bea6

(From OE-Core rev: b7d89fae22b317199b8f72978712075078a17005)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Peter Marko
484d31c23d binutils: patch CVE-2025-11413
Pick commit per NVD CVE report.

Note that there were two patches for this, first [1] and then [2].
The second patch moved the original patch to different location.
Cherry-pick of second patch is successful leaving out the code removing
the code from first location, so the patch attached here is not
identical to the upstream commit but is identical to applying both and
merging them to a single patch.

[1] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=1108620d7a521f1c85d2f629031ce0fbae14e331
[2] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0

(From OE-Core rev: 98df728e6136d04af0f4922b7ffbeffb704de395)

(From OE-Core rev: 8d1a830c713a299f67fc512ed8bc0be21be4b9f0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Peter Marko
aaf9219788 binutils: patch CVE-2025-11412
Pick commit per NVD CVE report.

(From OE-Core rev: 6b94ff6c584a31d2b1e06d1e1dc19392d759b4b7)

(From OE-Core rev: 9130f3471f4814979cfdfa66ca118929f240cb30)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Peter Marko
d152607f64 wpa-supplicant: patch CVE-2025-24912
Pick patches as listed in NVD CVE report.

Note that Debian lists one of the patches as introducing the
vulnerability. This is against what the original report [1] says.
Also the commit messages provide hints that the first patch fixes this
issue and second is fixing problem with the first patch.

[1] https://jvn.jp/en/jp/JVN19358384/

(From OE-Core rev: d0907754e0b44c5e41242bc1603278f86101fa31)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Archana Polampalli
0de012f0f6 openssh: fix CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially
leading to code execution when a ProxyCommand is used.

(From OE-Core rev: 5170bd2f8a63bcc310667a327ea2ab96c783c4f6)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Hongxu Jia
c4200e606c u-boot: fix CVE-2024-42040
Backport a patch [1] from upstrem to fix CVE-2024-42040 [2]

[1] 81e5708cc2
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-42040

(From OE-Core rev: f5b980ade1e952a181cb51d60268942095627c0d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-06 07:14:05 -08:00
Steve Sakoman
04b39e5b7e build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 99204008786f659ab03538cd2ae2fd23ed4164c5)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:32:40 -07:00
Steve Sakoman
8d5cd4a310 poky.conf: bump version for 4.0.31
(From meta-yocto rev: 3b2df00345b46479237fe0218675a818249f891c)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:29:24 -07:00
Antonin Godard
59579acac7 ref-manual/classes.rst: document the relative_symlinks class
Added by commit e478550c8cd8 ("openssl/fontconfig/bzip2: Use relative
symlinks instead of absolute ones (using a new class)") in OE-Core.

(From yocto-docs rev: 073f3bca4c374b03398317e7f445d2440a287741)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0dc554eba7d421023ecc68a70b7a19df38628b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
56aa9e3241 ref-manual/classes.rst: gettext: extend the documentation of the class
Mention the use of USE_NLS, INHIBIT_DEFAULT_DEPS and the cross-canadian
class.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 0bbb3eb02881b6ba41d3e77a21345e3520bbedea)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d877e54f1c85cefc00dd674d60f2db81446bd95a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
ea90d0a5b1 ref-manual/variables.rst: document the USE_NLS variable
Part of bitbake.conf, this variable allowing to enable or disable
translation was undocumented. Add a entry to the glossary.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 380018c93b0aa4832985bf083620fabee96dda72)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 92a55345a56b5038c0344669daaa7a3a99dd0fc0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
9e1c28514a ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable
Added by commit 96a9702a24a7 ("distro_features_check: expand with
IMAGE_FEATURES") in OE-Core.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 7aeeefafb27fd1eae4388d6445a28951f4d79a02)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860ddbd491ee9db291868bd939392538a2c64a4b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
24772dd301 ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: db007c4b59514d0fa4fb63c8d6c2543e5d54e38f)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit bbc7f26240c2db5cd4179f297ae49c778789514e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
5f0dcc1dc6 ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 02d5f9664a71a4f1b72b28d7093c19cc03ec08f6)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0551456cba6016d5014c2be8d6906e58a324cc4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
8d8972d1b4 ref-manual/classes,variables: document the CCACHE_DISABLE variable
Can be used in recipes that want to explicitly skip Ccache support when
the ccache class is enabled.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cc6e7a2d80ca03ee49a94af2eda74e83b1a33552)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b1b4adc8d4d9d23ff6fd91bca632bb0f5277e72b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
João Marcos Costa
9626809dce variables.rst: fix LAYERDEPENDS description
This variable does not apply to the scope of a single recipe, but rather
to the scope of the entire layer.

(From yocto-docs rev: 7ff462805eb45bd29e361017dfb5041cce448e4d)

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eec26e11adb6e3a9c4f53f825b9a1730c9ddee12)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Paul Barker
3fe029171f dev-manual, test-manual: Update autobuilder output links
The current autobuilder cluster is at valkyrie.yocto.io, published files
on autobuilder.yocto.io will be missing or out-of-date.

(From yocto-docs rev: 5cccf2e65b85c52cb9b9fd22d46ebde6d624fbe5)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9ed06c070e309b52f1dbf8877867dcede79f4cb6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
9a4c708aa5 ref-manual/classes.rst: extend the uninative class documentation
Extend the documentation of the uninative class based on [1].

[1]: https://lore.kernel.org/r/061e6150ce177221f7b6ee8754b03a20347a92c3.camel@linuxfoundation.org

Co-developed-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From yocto-docs rev: 7efaf626a9313cd0835391c06d3e3af6bdbd0d71)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 68996f0f3bf882714e8d96a0aa7b2492fe16d0c3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Antonin Godard
2442316a1e ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM
Document the UNINATIVE_URL and UNINATIVE_CHECKSUM variables.

(From yocto-docs rev: e94c46499255f087ccb43c5fa45bf7a3f51b12c6)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 974fe4e1c5db65b462a382e089e016326e7b3f26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Peter Marko
48ab50b55c lz4: patch CVE-2025-62813
Pick commit mentioned in NVD report.

(From OE-Core rev: 612d09f6b9e262640ed3ee0ee81ac4b6d7c29f4d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Hitendra Prajapati
bee2fe9cc5 git: fix CVE-2025-48386
Upstream-Status: Backport from 9de345cb27

(From OE-Core rev: 3f2fce1ababbf6c94a9e4995d133d5338913b2ce)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Yash Shinde
d0f445a1e2 binutils: fix CVE-2025-8225
CVE: CVE-2025-8225

It is possible with fuzzed files to have num_debug_info_entries zero
after allocating space for debug_information, leading to multiple
allocations.

* dwarf.c (process_debug_info): Don't test num_debug_info_entries
to determine whether debug_information has been allocated,
test alloc_num_debug_info_entries.

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4]

(From OE-Core rev: 9b5bb098b542a43a7aa97cc376c358f0a38778e3)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Yash Shinde
0118bd1e10 binutils: fix CVE-2025-11081
CVE: CVE-2025-11081

Trying to dump .sframe in a PE file results in a segfault accessing
elf_section_data.

	* objdump (dump_sframe_section, dump_dwarf_section): Don't access
	elf_section_type without first checking the file is ELF.

PR 33406 SEGV in dump_dwarf_section
[https://sourceware.org/bugzilla/show_bug.cgi?id=33406]

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b]

(From OE-Core rev: a7d39d40ec867bbcc36d71cf98858a34c619c9fe)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-31 06:23:13 -07:00
Peter Marko
7ca21c761a python3: upgrade 3.10.18 -> 3.10.19
Drop upstreamed patch and refresh remaining patches.

Release information:
* https://www.python.org/downloads/release/python-31019/
* The release you're looking at is Python 3.10.19, a security bugfix
  release for the legacy 3.10 series.

Handles CVE-2025-59375, CVE-2025-47273 and CVE-2024-6345.

(From OE-Core rev: 9b3dbd691f6ebdbdfe88cef3d3a676ddd1399c63)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:20 -07:00
Bruce Ashfield
4e75dd0f5f linux-yocto/5.15: update to v5.15.194
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    29e53a5b1c4f1 Linux 5.15.194
    1c532dd246bf2 drm/i915/backlight: Return immediately when scale() finds invalid parameters
    45a7527cd7da4 i40e: add validation for ring_len param
    8043ca4882e77 i40e: increase max descriptors for XL710
    1fa0aadade344 i40e: fix idx validation in config queues msg
    8e35c80f85704 i40e: fix validation of VF state in get resources
    3e851448078f5 mm/hugetlb: fix folio is still mapped when deleted
    4f52f7c50f5b6 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
    523edfed4f68b af_unix: Don't leave consecutive consumed OOB skbs.
    ecbfd9ef5cf3e fbcon: Fix OOB access in font allocation
    b8a6e85328aeb fbcon: fix integer overflow in fbcon_do_set_font
    0d41604d2d53c tracing: dynevent: Add a missing lockdown check on dynevent
    1b1c3bdb8ab3f i40e: add mask to apply valid bits for itr_idx
    77a35be582dff i40e: add max boundary check for VF filters
    f8c8e11825b24 i40e: fix input validation logic for action_meta
    34dfac0c90482 i40e: fix idx validation in i40e_validate_queue_map
    d382d6daf0184 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
    e4c1ec11132ec crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
    e15de80737d44 drm/gma500: Fix null dereference in hdmi teardown
    37821b843e4e5 net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
    e8687ab9c8a11 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
    b9010dba5f36b net: dsa: lantiq_gswip: do also enable or disable cpu port
    cf2d597fb6f04 selftests: fib_nexthops: Fix creation of non-FDB nexthops
    0e7bfe7a268cc nexthop: Forbid FDB status change while nexthop is in a group
    5d4856a3717d6 bnxt_en: correct offset handling for IPv6 destination address
    d646358255b69 ethernet: rvu-af: Remove slash from the driver name
    48822a59ecc47 can: peak_usb: fix shift-out-of-bounds issue
    6eec67bfb2563 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
    60463a1c13890 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
    7ab85762274c0 can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
    72de0facc50af can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
    256b64f7a9ba0 can: etas_es58x: sort the includes by alphabetic order
    f44124f407a39 can: etas_es58x: advertise timestamping capabilities and add ioctl support
    0a6e1bd2d2500 can: dev: add generic function can_eth_ioctl_hwts()
    b9a0e6f3b043a can: dev: add generic function can_ethtool_op_get_ts_info_hwts()
    533e3220bac26 can: bittiming: replace CAN units with the generic ones from linux/units.h
    33b83a90b65e4 can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min
    d51c6b51981fa bpf: Reject bpf_timer for PREEMPT_RT
    9ebf862184569 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
    b32c64db4370c cpufreq: Initialize cpufreq-based invariance before subsys
    db28f975ed7f3 arm64: dts: imx8mp: Correct thermal sensor index
    bb3eeb3a7c749 IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
    825c17c54cfb2 usb: core: Add 0x prefix to quirks debug output
    9ba349a33f50e ALSA: usb-audio: Fix build with CONFIG_INPUT=n
    1746e7a74ca0b ALSA: usb-audio: Convert comma to semicolon
    b4b94f092f193 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
    4f9294613bb39 ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
    790b167e58570 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
    e4f6ae98ebd94 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
    a4bb77c1bab94 ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
    2f56442a417d5 ALSA: usb-audio: Fix block comments in mixer_quirks
    ada2282259243 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
    98c2894580f42 net: rfkill: gpio: add DT support
    2f58e6d3e7a71 mptcp: propagate shutdown to subflows when possible
    773fddf976d28 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
    dde28a51b8c3a mptcp: set remote_deny_join_id0 on SYN recv
    ca9e4e6a87376 phy: ti: omap-usb2: fix device leak at unbind
    f5648527d2e88 phy: Use device_get_match_data()
    0df0f4bcc7a25 phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning
    662b75f7d1bfb USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
    94fac8987bea7 usb: gadget: dummy_hcd: remove usage of list iterator past the loop body
    dbf216ae5aea8 xhci: dbc: Fix full DbC transfer ring after several reconnects
    503ba5026801b xhci: dbc: decouple endpoint allocation from initialization
    84870a62c48f7 serial: sc16is7xx: fix bug in flow control levels init
    dfca6fa9d174c drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
    51a501e990a35 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
    79a06d96e73e4 ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
    e07847f44a0e0 ASoC: wm8974: Correct PLL rate rounding
    0235a5787e87b ASoC: wm8940: Correct typo in control name
    2e94bc6451cb6 rds: ib: Increment i_fastreg_wrs before bailing out
    9697890763328 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
    8a29726633978 mmc: mvsdio: Fix dma_unmap_sg() nents value
    4f935a1297080 btrfs: tree-checker: fix the incorrect inode ref size check
    29d9125d6c07f power: supply: bq27xxx: restrict no-battery detection to bq27000
    fe0f602a75cc9 power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
    40fb833c64cab nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
    0405055930264 cnic: Fix use-after-free bugs in cnic_delete_task
    428c1dd78ef66 net: liquidio: fix overflow in octeon_init_instr_queue()
    3cae94808b2ff Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
    33a4fdf0b4a25 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
    17cb9b4017be7 i40e: remove redundant memory barrier when cleaning Tx descs
    95235d29cd8b0 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
    e0e24571a7b2f qed: Don't collect too many protection override GRC elements
    e4343d400761c dpaa2-switch: fix buffer pool seeding for control traffic
    5e94e44c9cb30 um: virtio_uml: Fix use-after-free after put_device in probe
    f2795d1b92506 cgroup: split cgroup_destroy_wq into 3 workqueues
    f2ede1f9070cc pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
    0f9cf94656d08 wifi: mac80211: fix incorrect type for ret
    d2587970f0887 ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
    5f2f50aa44de7 net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
    99f7048957f5a mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
    a8b0032687c74 drm/i915/power: fix size for for_each_set_bit() in abox iteration
    f1b349706538c drm/amdgpu: fix a memory leak in fence cleanup when unloading
    91b2c8ee68219 soc: qcom: mdt_loader: Deal with zero e_shentsize
    e3d490ff8d12e phy: ti-pipe3: fix device leak at unbind
    4de4344ed4164 phy: tegra: xusb: fix device and OF node leak at probe
    6ac1599d0e780 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
    24a65b46cd663 hrtimers: Unconditionally update target CPU base after offline timer migration
    e90b685c5f2a8 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
    95b76ebeb0f14 hrtimer: Remove unused function
    5d5385feef357 regulator: sy7636a: fix lifecycle of power good gpio
    301a96cc4dc00 dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
    810167fa6f34a hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
    cedfcd09a338e hsr: use rtnl lock when iterating over ports
    1100242709d56 net: hsr: Add VLAN CTAG filter support
    7e0ef989aa6d4 net: hsr: Add support for MC filtering at the slave device
    d981b9680be2b net: hsr: Disable promiscuous mode in offload mode
    e202ffd9e5453 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
    5cf37a6fcb61c can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
    3245eb9c25e94 can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
    b9721a023df38 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
    7d9bd1c2bf4a7 i40e: Use irq_update_affinity_hint()
    e7ddb59a63cb8 genirq: Provide new interfaces for affinity hints
    582f5ce29adce igb: fix link test skipping when interface is admin down
    f39a12660ea88 tunnels: reset the GSO metadata before reusing the skb
    93a699d6e92cf net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
    e818c35296a4f USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
    93e4404990206 USB: serial: option: add Telit Cinterion FN990A w/audio compositions
    28d20ff4e3886 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
    d91604c39b74c tty: hvc_console: Call hvc_kick in hvc_write unconditionally
    9cf2429fe6cbb Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
    e32a2ea52b513 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
    6e2859c6aa466 mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check
    e0bca4dd48fc5 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
    c3f1ea856e147 mtd: nand: raw: atmel: Fix comment in timings preparation
    123e31a54d51b mm/khugepaged: fix the address passed to notifier on testing young
    ea12ab684f8ae libceph: fix invalid accesses to ceph_connection_v1_info
    1e1bcbc548777 fuse: prevent overflow in copy_file_range return value
    5d41589fa0699 fuse: check if copy_file_range() returns larger than requested size
    b8af2e74e49db mtd: rawnand: stm32_fmc2: fix ECC overwrite
    ef30404980e4c ocfs2: fix recursive semaphore deadlock in fiemap call
    23092f6723bc1 mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
    5d7267abcd65e compiler-clang.h: define __SANITIZE_*__ macros only when undefined
    8178ccf5671e6 EDAC/altera: Delete an inappropriate dma_free_coherent() call
    34b87ac4bb903 KVM: SVM: Set synthesized TSA CPUID flags
    54270c1b29f2a KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func()
    2fab1e2af6c59 KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
    7429b8b9bfbc2 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
    5f756d1866ebb NFSv4/flexfiles: Fix layout merge mirror check.
    9a38cd92493c2 tracing: Fix tracing_marker may trigger page fault during preempt_disable
    c10744fd7fec8 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
    89f40500c09aa NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
    91902607106c0 NFSv4: Don't clear capabilities that won't be reset
    929de8cc2f66c flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
    76b1a7c29ef3b mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
    1cdb41d4f08a6 tracing: Do not add length to print format in synthetic events
    d51e47e2ab6ef net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
    85d1c5d416c6a media: i2c: imx214: Fix link frequency validation
    6e31585286b97 media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
    10d8884e1869f mm: introduce and use {pgd,p4d}_populate_kernel()
    adb2f26b875b9 kunit: kasan_test: disable fortify string checker on kasan_strings() test
    69944b3cd7ec5 xfs: short circuit xfs_growfs_data_private() if delta is zero
    c0950ee2c3cc8 Revert "fbdev: Disable sysfb device registration when removing conflicting FBs"

(From OE-Core rev: b75a820962588097058e528a7db9ccd04368d299)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:20 -07:00
Bruce Ashfield
75cb79eaf5 linux-yocto/5.15: update to v5.15.193
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    43bb85222e53 Linux 5.15.193
    70de678302a8 x86/vmscape: Add old Intel CPUs to affected list
    79ec330d124e x86/vmscape: Warn when STIBP is disabled with SMT
    1cd71b057f05 x86/bugs: Move cpu_bugs_smt_update() down
    2f4f2f8f860c x86/vmscape: Enable the mitigation
    d5490dfa3542 x86/vmscape: Add conditional IBPB mitigation
    f2ed886bb650 x86/vmscape: Enumerate VMSCAPE bug
    a4fff4e5c054 Documentation/hw-vuln: Add VMSCAPE documentation
    de9476bb4f1b Linux 5.15.192
    3e7c1c70abf2 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
    b521afbe4525 spi: tegra114: Use value to check for invalid delays
    ffe9232693e3 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
    b01a706f9e73 perf bpf-event: Fix use-after-free in synthesis
    43167766ea1b drm/bridge: ti-sn65dsi86: fix REFCLK setting
    f2e6b997632d spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
    18fac6162dda spi: spi-fsl-lpspi: Set correct chip-select polarity bit
    5255b997529b spi: spi-fsl-lpspi: Fix transmissions when using CONT
    85be7ef8c8e7 pcmcia: Add error handling for add_interval() in do_validate_mem()
    271ed980d57d ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
    7e287256904e mm/slub: avoid accessing metadata when pointer is invalid in object_err()
    8b9a5269b442 randstruct: gcc-plugin: Fix attribute addition
    db44404d1b9b randstruct: gcc-plugin: Remove bogus void member
    4da1cc986b75 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    85530b4ec374 vmxnet3: update MTU after device quiesce
    a82c31b8e9b6 net: dsa: microchip: linearize skb for tail-tagging switches
    01ea671f1f2b net: dsa: microchip: update tag_ksz masks for KSZ9477 family
    6db1f39f003c dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
    d0b7f11dd68b dma-buf: insert memory barrier before updating num_fences
    b336106f04a2 gpio: pca953x: fix IRQ storm on system wake up
    1d7def97e7eb iio: light: opt3001: fix deadlock due to concurrent flag access
    28e4e1b59a34 iio: chemical: pms7003: use aligned_s64 for timestamp
    66dc11e9c28f spi: tegra114: Don't fail set_cs_timing when delays are zero
    45eef6be830e spi: tegra114: Remove unnecessary NULL-pointer checks
    b9f28182e29e KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
    c824d766e472 cpufreq/sched: Explicitly synchronize limits_changed flag handling
    abdf3c339181 mm/khugepaged: fix ->anon_vma race
    99a8772611e2 e1000e: fix heap overflow in e1000_set_eeprom
    5d334bce9fad batman-adv: fix OOB read/write in network-coding decode
    95b63d15fce5 scsi: lpfc: Fix buffer free/clear order in deferred receive path
    da98fc73f7d1 drm/amdgpu: drop hw access in non-DC audio fini
    acdf26a91219 wifi: mwifiex: Initialize the chan_stats array to zero
    732e62212f49 mm: move page table sync declarations to linux/pgtable.h
    744ff519c72d x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
    4bd570f49412 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
    2be7109ef258 ALSA: usb-audio: Add mute TLV for playback volumes on some devices
    0bb7069ee343 phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
    24b24295464f net: phy: mscc: Fix memory leak when using one step timestamping
    b4c2fb32f4fe ptp: Add generic PTP is_sync() function
    0b21e9cd4559 ppp: fix memory leak in pad_compress_skb
    955f400e4f51 net: atm: fix memory leak in atm_register_sysfs when device_register fail
    2bd0f6721290 ax25: properly unshare skbs in ax25_kiss_rcv()
    a7eae33227ee ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
    894c7d0c3fba net: thunder_bgx: decrement cleanup index before use
    299c6d47528e net: thunder_bgx: add a missing of_node_put
    e5f334ac7747 wifi: libertas: cap SSID len in lbs_associate()
    24ec8826381f wifi: cw1200: cap SSID length in cw1200_do_join()
    eaa10a027ab6 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
    1eadabcf5623 i40e: Fix potential invalid access when MAC list is empty
    348a01c8574b icmp: fix icmp_ndo_send address translation for reply direction
    e96d08ddbc99 mISDN: Fix memory leak in dsp_hwec_enable()
    1079c1029384 xirc2ps_cs: fix register access when enabling FullDuplex
    47f6090bcf75 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
    c79730e337a1 netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
    d00c8b0daf56 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
    ff040562c10a wifi: cfg80211: fix use-after-free in cmp_bss()
    0f70fab5598d arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
    4377eac565c2 tee: fix NULL pointer dereference in tee_shm_put
    b187c9761119 fs: writeback: fix use-after-free in __mark_inode_dirty()
    71224142994b drm/amd/display: Don't warn when missing DCE encoder caps
    c1c74584b9b4 bpf: Fix oob access in cgroup local storage
    c04992612ed4 bpf: Move bpf map owner out of common struct
    bfb8da7a5dd1 bpf: Move cgroup iterator helpers to bpf.h
    23099792bb6f bpf: Add cookie object to bpf maps
    7a6c2d093c45 Linux 5.15.191
    90bae69c2959 xfs: do not propagate ENODATA disk errors into xattr code
    c570d773884c Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
    3db34718c755 HID: mcp2221: Handle reads greater than 60 bytes
    6ac648746149 HID: mcp2221: Don't set bus speed on every transfer
    2a0ed07b6967 drm/nouveau/disp: Always accept linear modifier
    40a0165278b7 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
    9a0b5fdce128 dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
    67334c94b853 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
    4338b0f6544c HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
    bfde0392d74f HID: wacom: Add a new Art Pen 2
    4263e5851779 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
    eaae728e7335 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
    d51e381beed5 KVM: x86: use array_index_nospec with indices that come from guest
    568e7761279b efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
    17d6c7747045 sctp: initialize more fields in sctp_v6_from_sk()
    700a71e78755 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
    47fbd9c3364c net/mlx5e: Set local Xoff after FW update
    9352f6ea981d net/mlx5e: Update and set Xon/Xoff upon port speed set
    7011f0f400d4 net/mlx5e: Update and set Xon/Xoff upon MTU set
    f64abfa0649a phy: mscc: Fix when PTP clock is register and unregister
    5680a4dd1009 net: dlink: fix multicast stats being counted incorrectly
    62f368472b0a atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
    bf813928bb53 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
    e726dc92f45d powerpc/kvm: Fix ifdef to remove build warning
    5a2d5ab38365 net: ipv4: fix regression in local-broadcast routes
    6606a6d37496 udf: Fix directory iteration for longer tail extents
    d717c12fbb23 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
    f230d40147cc NFS: Fix a race when updating an existing write
    fd947b71cc1b nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
    2e0d974cdbd1 ASoC: codecs: tx-macro: correct tx_macro_component_drv name
    8f397cdef773 scsi: core: sysfs: Correct sysfs attributes access rights
    a6f0f8873cc3 ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
    2573ee4e6c03 pinctrl: STMFX: add missing HAS_IOMEM dependency
    01879f56bdde Linux 5.15.190
    77cf363f7667 alloc_fdtable(): change calling conventions.
    e442a966e2b7 wifi: mac80211: check basic rates validity in sta_link_apply_parameters
    82ef97abf227 netfilter: nf_reject: don't leak dst refcount for loopback packets
    53320a99948d s390/hypfs: Enable limited access during lockdown
    0ffb1bf99e49 s390/hypfs: Avoid unnecessary ioctl registration in debugfs
    bbdfdc63afdf ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
    9d48c8091947 bonding: update LACP activity flag after setting lacp_active
    5748c51afe91 net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
    0dacfc5372e3 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
    f422b5e49b72 igc: fix disabling L1.2 PCI-E link substate on I226 on init
    aa65c2bdb19f ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
    fcb4ce9f729c net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    5d1fed4b1c3c phy: mscc: Fix timestamping for vsc8584
    94beabf466da net: phy: Use netif_rx().
    9a1969fbffc1 ppp: fix race conditions in ppp_fill_forward_path
    9f113d2828f0 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
    2af45aadb7b5 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
    38c13968b80e ALSA: usb-audio: Fix size validation in convert_chmap_v3()
    ddf1691f2534 drm/hisilicon/hibmc: fix the hibmc loaded failed bug
    10ae957833eb mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
    0ad8509b468f iommu/amd: Avoid stack buffer overflow from kernel cmdline
    325bf7d57c4e scsi: qla4xxx: Prevent a potential error pointer dereference
    34171b9e53bd net: bridge: fix soft lockup in br_multicast_query_expired()
    0ba6efb2c174 RDMA/bnxt_re: Fix to initialize the PBL array
    e7ea080f85b7 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
    c635a42d9b74 mm/page_alloc: detect allocation forbidden by cpuset and bail out early
    873f32201df8 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    4ad0d45ffc39 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
    d8c5d87a4315 iio: light: as73211: Ensure buffer holes are zeroed
    41b838420457 tracing: Limit access to parser->buffer when trace_get_user failed
    9fb26b72bb8b tracing: Remove unneeded goto out logic
    14b0d8e7423a iio: imu: inv_icm42600: change invalid data error to -EBUSY
    c78c8e5048b7 usb: xhci: Fix slot_id resource race conflict
    5e2414ebe6f9 compiler: remove __ADDRESSABLE_ASM{_STR,}() again
    c8124155c223 selftests: mptcp: pm: check flush doesn't reset limits
    9aff206cfc27 pwm: mediatek: Fix duty and period setting
    7735341026e5 pwm: mediatek: Handle hardware enable and clock enable separately
    de1dda2e5312 pwm: mediatek: Implement .apply() callback
    1c72f369221c scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
    fef82b52a48c scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
    098b2c8ee208 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
    423fd248c7aa iio: adc: ad_sigma_delta: change to buffer predisable
    0d59ce2bfc3b soc: qcom: mdt_loader: Ensure we don't read past the ELF header
    e94264b07c41 wifi: ath11k: fix dest ring-buffer corruption when ring is full
    80bc1e5d9e15 asm-generic: Add memory barrier dma_mb()
    06b70cccc106 locking/barriers, kcsan: Support generic instrumentation
    9db6a78bc5e4 media: venus: protect against spurious interrupts during probe
    c52e2ecb77e8 media: venus: Add support for SSR trigger using fault injection
    39d70ce5a252 media: qcom: camss: cleanup media device allocated resource on error path
    4ef9526792ae media: camss: Convert to platform remove callback returning void
    6b7784ea07e6 f2fs: fix to avoid out-of-boundary access in dnode page
    a19b31f854a8 drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
    a7037057fd16 mptcp: disable add_addr retransmission when timeout is 0
    7c5f3b639bb1 drm/amd/display: Don't overclock DCE 6 by 15%
    dfe40159eec6 usb: dwc3: Remove WARN_ON for device endpoint command timeouts
    bccd26d713ec usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
    7ec4f6da3a4b USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
    564b015af068 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
    b5a59ea98836 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
    f596da86b8c7 usb: renesas-xhci: Fix External ROM access timeouts
    f9f402f8b93c usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
    868a1b68dcd9 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
    bab220b0bb5a comedi: pcl726: Prevent invalid irq number
    ab77e85bd3bc comedi: Make insn_rw_emulate_bits() do insn->n samples
    78232f3d0eac usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
    4cb568aacc43 most: core: Drop device reference after usage in get_channel()
    65817f61e181 iio: proximity: isl29501: fix buffered read on big-endian systems
    35b8c9082dd5 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
    e0b6b223167e ftrace: Also allocate and copy hash for reading of filter files
    403820959475 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
    905986f6b670 use uniform permission checks for all mount propagation changes
    03b40bf5d038 fs/buffer: fix use-after-free when call bh_read() helper
    0496b11f223f drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
    9031c990fd69 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
    2e278aee6afe drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
    fe8670344ab3 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
    9c92d12b5cb9 drm/amd/display: Avoid a NULL pointer dereference
    f89530d76d28 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
    7bf57a0709cd mm/debug_vm_pgtable: clear page table entries at destroy_args()
    b14850b047e8 squashfs: fix memory leak in squashfs_fill_super
    7a556ae35d7c mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
    c3e0a66fd999 memstick: Fix deadlock by moving removing flag earlier
    23249dade24e KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
    d08713bac991 scsi: ufs: ufs-pci: Fix default runtime and system PM levels
    b2be32915f07 scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
    fb9c73ef2ac2 mptcp: do not queue data on closed subflows
    a08f285d2020 mptcp: drop unused sk in mptcp_push_release
    13e85f7d6979 selftests: mptcp: Initialize variables to quiet gcc 12 warnings
    c9f8a3b0600b mptcp: introduce MAPPING_BAD_CSUM
    1da47584e2d7 mptcp: fix error mibs accounting
    f4480eaad489 selftests: mptcp: add missing join check
    2b92ae68ba70 selftests: mptcp: connect: also cover checksum
    2668261dd04d selftests: mptcp: connect: also cover alt modes
    2c5b3b71fe6b selftests: mptcp: make sendfile selftest work
    696480028b59 kbuild: userprogs: use correct linker when mixing clang and GNU ld
    ad1190744da9 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
    cbb445d5cd98 PCI: vmd: Assign VMD IRQ domain before enumeration
    c2d25fddd867 sch_htb: make htb_deactivate() idempotent
    eda741fe155d codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
    db568d2151cd sch_drr: make drr_qlen_notify() idempotent
    dd83b2be69a1 btrfs: populate otime when logging an inode item
    a803d916ae9a KVM: VMX: Flush shadow VMCS on emergency reboot
    be9692dafdfb net/sched: ets: use old 'nbands' while purging unused classes
    1980d8d38cef net_sched: sch_ets: implement lockless ets_dump()
    de127abe923a net/sched: sch_ets: properly init all active DRR list handles
    8af89a96144e platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
    9936cb9ef2d2 platform/chrome: cros_ec: remove unneeded label and if-condition
    2ad140545b2a platform/chrome: cros_ec: Use per-device lockdep key
    d9e812b90b38 platform/chrome: cros_ec: Make cros_ec_unregister() return void
    79c745be310e usb: dwc3: imx8mp: fix device leak at unbind
    7b3f0e3b60c2 bus: mhi: host: Detect events pointing to unexpected TREs
    cfbd61d63263 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
    90a53102729e usb: musb: omap2430: fix device leak at unbind
    1be6c638f72d usb: musb: omap2430: Convert to platform remove callback returning void
    69bea84b06b5 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    3924dab90816 NFS: Fix the setting of capabilities when automounting a new filesystem
    dbadab480714 NFS: Create an nfs4_server_set_init_caps() function
    e60dc74f62f0 net: enetc: fix device and OF node leak at probe
    a39791e479ba block: Make REQ_OP_ZONE_FINISH a write operation
    1aaa8e9e4f50 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    5cbf5709aa05 usb: typec: fusb302: cache PD RX state
    3467c4ebb334 hv_netvsc: Fix panic during namespace deletion with VF
    26eb63f732b0 smb: server: Fix extension string in ksmbd_extract_shortname()
    14fafb398360 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    1b2b7e9da01e x86/fpu: Delay instruction pointer fixup until after warning
    6550b2bef095 smb: client: fix use-after-free in crypt_message when using async crypto
    ae8428d68252 usb: hub: Don't try to recover devices lost during warm reset.
    98df81d18e5d usb: hub: avoid warm port reset during USB3 disconnect
    8a0b022147b1 x86/mce/amd: Add default names for MCA banks and blocks
    4e2ee5d14333 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
    4597cf3ac9ba iio: hid-sensor-prox: Restore lost scale assignments
    c4029044cc40 f2fs: fix to do sanity check on ino and xnid
    3a12e18a0310 ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
    407047893a64 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
    6188d61ba73d drm/sched: Remove optimization that causes hang when killing dependent jobs
    7c5a13c76dd3 ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
    46a7cdcf06c4 selftests/memfd: add test for mapping write-sealed memfd read-only
    1c296cba6568 mm: reinstate ability to map write-sealed memfd mappings read-only
    d919658a3871 mm: update memfd seal write check to include F_SEAL_WRITE
    27df40ad7445 mm: drop the assumption that VM_SHARED always implies writable
    44e2f93f9820 sch_qfq: make qfq_qlen_notify() idempotent
    a5efc95a33bd sch_hfsc: make hfsc_qlen_notify() idempotent
    967955c9e57f sch_htb: make htb_qlen_notify() idempotent
    587558d812ac mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
    6ddf51fc0b07 mptcp: drop skb if MPTCP skb extension allocation fails
    3b348c9c8d2c ipv6: sr: Fix MAC comparison to be constant-time
    3ae272ab523d net, hsr: reject HSR frame if skb can't hold tag
    da240d7f7e10 drm/amd/display: Don't overwrite dce60_clk_mgr
    92c4a1fde641 drm/amd: Restore cached power limit during resume
    5005e4e6f964 media: venus: venc: Clamp param smaller than 1fps and bigger than 240
    48045c17fddf media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
    e6e5e5e5b40a media: venus: hfi: explicitly release IRQ during teardown
    ef09b96665f1 media: venus: Add a check for packet size after reading from shared memory
    f16dc2c87ce4 media: ov2659: Fix memory leaks in ov2659_probe()
    fbc81e78d75b media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
    5427dda195d6 media: usbtv: Lock resolution while streaming
    436774334587 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
    025617f4851a media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
    5197247df6a0 media: hi556: correct the test pattern configuration
    6512784dbf5d media: gspca: Add bounds checking to firmware parser
    90cc9e7d82e1 soc/tegra: pmc: Ensure power-domains are in a known state
    84ff98c1ea19 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
    fb454ba99189 PCI: endpoint: Fix configfs group removal on driver teardown
    dc4ffbd57171 PCI: endpoint: Fix configfs group list head handling
    7d5c223edf89 mtd: rawnand: fsmc: Add missing check after DMA map
    93f1be8de86a mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
    e26bd46c2968 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
    dbe8b4366878 pwm: imx-tpm: Reset counter if CMOD is 0
    6b6fa2a7a1b3 wifi: ath11k: fix source ring-buffer corruption
    5679342831db wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
    1bb6bb6cd975 zynq_fpga: use sgtable-based scatterlist wrappers
    0176a6117fc7 ata: libata-scsi: Fix ata_to_sense_error() status handling
    48a1795cbf67 scsi: mpi3mr: Fix race between config read submit and interrupt completion
    e1f8a51a8602 ext4: fix hole length calculation overflow in non-extent inodes
    66245c16d72e ext4: use kmalloc_array() for array space allocation
    5396de17bcea ext4: don't try to clear the orphan_present feature block device is r/o
    2c9c15656569 ext4: fix reserved gdt blocks handling in fsmap
    e0fad182ba8a ext4: fix fsmap end of range reporting with bigalloc
    cdfc7b6d3473 ext4: check fast symlink for ea_inode correctly
    8a5e6282c6a7 Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
    649383fa7f67 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
    969668b6e7d2 vt: defkeymap: Map keycodes above 127 to K_HOLE
    6b03d59b1e0e vt: keyboard: Don't process Unicode characters in K_OFF mode
    228c686e20ff bus: mhi: host: Fix endianness of BHI vector table
    9d916500ecf9 usb: dwc3: meson-g12a: fix device leaks at unbind
    332d4a4b8615 usb: gadget: udc: renesas_usb3: fix device leak at unbind
    f6d79955b2a3 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
    5e5ccfdbe4ac m68k: Fix lost column on framebuffer debug console
    177d3651dbd3 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
    68c4613e89f0 serial: 8250: fix panic due to PSLVERR
    08e12045014b HID: magicmouse: avoid setting up battery timer when not needed
    123cf618a0ae media: uvcvideo: Do not mark valid metadata as invalid
    8343f3fe0b75 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
    f249d32bb548 mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
    a04de4c40aab mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
    d06e119a16ce parisc: Makefile: fix a typo in palo.conf
    078e62bffca4 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    fa086b1398cf btrfs: do not allow relocation of partially dropped subvolumes
    8563ac0b5b8f btrfs: fix log tree replay failure due to file with 0 links and extents
    fa6e0cc6a720 cdc-acm: fix race between initial clearing halt and open
    6eb63a710da3 thunderbolt: Fix copy+paste error in match_service_id()
    d85fac8729c9 comedi: fix race between polling and detaching
    56b9177f17ab usb: typec: ucsi: Update power_supply on power role change
    030b156ec7e0 misc: rtsx: usb: Ensure mmc child device is active when card is present
    058ad2b72281 usb: core: config: Prevent OOB read in SS endpoint companion parsing
    91789de2ed20 ext4: fix largest free orders lists corruption on mb_optimize_scan switch
    3b6de89a9dda drm/amdgpu: fix incorrect vm flags to map bo
    30b14a9374d9 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    780ce4759f94 ASoC: soc-dai.h: merge DAI call back functions into ops
    4f60001afa06 ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
    87c474a68724 scsi: lpfc: Remove redundant assignment to avoid memory leak
    481701300b7b rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    4f783333cbfa pNFS: Fix uninited ptr deref in block/scsi layout
    f47b0662bdbd pNFS: Handle RPC size limit for layoutcommits
    1ba621a63625 pNFS: Fix disk addr range check in block/scsi layout
    c8dea4397432 pNFS: Fix stripe mapping in block/scsi layout
    8b3ce085b52e block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
    53acbc94344e net: phy: smsc: add proper reset flags for LAN8710A
    dc826121cd44 ipmi: Fix strcpy source and destination the same
    a12feec53c1a kconfig: lxdialog: fix 'space' to (de)select options
    f7d9f0717be8 kconfig: gconf: fix potential memory leak in renderer_edited()
    28498cf306f9 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    19b946182978 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    2b4aa66f7532 scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    2e24d269359b scsi: target: core: Generate correct identifiers for PR OUT transport IDs
    237edd281d52 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    e008120a621e kconfig: nconf: Ensure null termination where strncpy is used
    a73ee10c2781 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    344ef2a6c6e8 i2c: Force DLL0945 touchpad i2c freq to 100khz
    3963ecbdddaf dm-mpath: don't print the "loaded" message if registering fails
    6f83cf2e362a i3c: don't fail if GETHDRCAP is unsupported
    ce3195182fe0 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    758b8e343610 i3c: add missing include to internal header
    b506af24d662 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
    e6f44cd74134 crypto: octeontx2 - add timeout for load_fvc completion poll
    eb6059474e70 media: uvcvideo: Fix bandwidth issue for Alcor camera
    17b30e5ded06 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
    529fd5593b72 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
    e06e706500b8 media: usb: hdpvr: disable zero-length read messages
    aef1b717d4a2 media: tc358743: Increase FIFO trigger level to 374
    21ba26a8e347 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    a6ccbe037734 media: tc358743: Check I2C succeeded during probe
    2e82f9a5a37b pinctrl: stm32: Manage irq affinity settings
    0de080a0ecab scsi: mpt3sas: Correctly handle ATA device errors
    5e25ee1ecec9 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
    c16984bc84bf RDMA/core: reduce stack using in nldev_stat_get_doit()
    9d3211cb61a0 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
    a8c0dc453e9f leds: leds-lp50xx: Handle reg to get correct multi_index
    b6a9cc9918db media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
    bd90dbd19683 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
    1467a75819e4 jfs: upper bound check of tree index in dbAllocAG
    9ad054cd2c4c jfs: Regular file corruption check
    8ed7275910fb jfs: truncate good inode pages when hard link is 0
    ba024d925645 scsi: bfa: Double-free fix
    f5de907f0479 watchdog: iTCO_wdt: Report error if timeout configuration fails
    90c1295da0a7 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    e9849ca6dd01 watchdog: dw_wdt: Fix default timeout
    dacfd8cf9c23 fs/orangefs: use snprintf() instead of sprintf()
    fd5aad080edb scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
    7f322c12df7a ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    79ec8dabf001 crypto: hisilicon/hpre - fix dma unmap sequence
    b06a3c552c00 cifs: Fix calling CIFSFindFirst() for root path without msearch
    8e6932ee0cc9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
    1117260a5402 vhost: fail early when __vhost_add_used() fails
    6ef6e42de0d4 net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    77e56dbc7b7a drm/ttm: Respect the shrinker core free target
    65a7b7717600 uapi: in6: restore visibility of most IPv6 socket options
    49586908dea6 drm/ttm: Should to return the evict error
    6716de171b2a net: ncsi: Fix buffer overflow in fetching version id
    56c4837283eb wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
    f531abcdfec2 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    bae08d48d044 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    9874ad64285f net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    36bec4066dff net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    392aa29dbcc5 gve: Return error for unknown admin queue command
    452de5797933 net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    d49af61978b6 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
    851c50b31611 dpaa_eth: don't use fixed_phy_change_carrier
    6de7a77911b2 wifi: iwlegacy: Check rate_idx range after addition
    7cc4b7c2e24f netmem: fix skb_frag_address_safe with unreadable skbs
    7451726049e8 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
    e80b670bc30d drm/amd/display: Fix 'failed to blank crtc!'
    6fed73112e43 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    ffbf9699d639 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    851726384eb6 drm/amd/display: Separate set_gsl from set_gsl_source_select
    e03f9c0b9324 net: fec: allow disable coalescing
    03dd58451897 net: atlantic: add set_power to fw_ops for atl2 to fix wol
    833e0e6744cd net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    39117551069d drm/msm: use trylock for debugfs
    834c1e80164e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
    e22b1ee8cec9 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    599dcdfff36f wifi: mac80211: don't complete management TX on SAE commit
    bb9a6585c2f9 s390/stp: Remove udelay from stp_sync_clock()
    13ff80efde1c wifi: iwlwifi: mvm: fix scan request validation
    ac31ba743054 sched/deadline: Fix accounting after global limits change
    037d856072bc net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    c965a0f7477a net: ipv4: fix incorrect MTU in broadcast routes
    7fcb3d1a622b wifi: cfg80211: Fix interface type validation
    15b05f078e6c net: mctp: Prevent duplicate binds
    0ad84d622174 rcu: Protect ->defer_qs_iw_pending from data race
    a8b4ecb16327 arm64: Mark kernel as tainted on SAE and SError panic
    0f2d1bcdd01c net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    8769e2cd97dc net: ag71xx: Add missing check after DMA map
    44746e44ef61 et131x: Add missing check after DMA map
    9152c8dce4fa be2net: Use correct byte order and format string for TCP seq and ack_seq
    5e18232d72a1 s390/time: Use monotonic clock in get_cycles()
    39968a6d1b7f wifi: cfg80211: reject HTC bit for management frames
    72632af764d0 ktest.pl: Prevent recursion of default variable options
    2fc78b1f4544 xen/netfront: Fix TX response spurious interrupts
    a0c4744b3e7a ASoC: codecs: rt5640: Retry DEVICE_ID verification
    2191a2f89827 iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    97e1d2a18a7d ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    77477121f87a ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    c2dacfe495b7 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    a73ccab0ebd2 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    93d700f59bf9 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    ddb96ab185e8 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    ffa551a30da6 usb: core: usb_submit_urb: downgrade type check
    5c7fda829b16 usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    82ba7b8cf9f6 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
    afd0dd1baf0a ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    866fcfc056c3 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    b3f0f92abaac x86/bugs: Avoid warning when overriding return thunk
    921592ffe886 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    345df19a971a reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    932d27bc3650 pps: clients: gpio: fix interrupt handling order in remove path
    e8d164041ebd ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    18aed89a19d9 mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    0c48c9fe3fac ACPI: processor: fix acpi_object initialization
    b287704f0b51 PM: sleep: console: Fix the black screen issue
    7121241b7267 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    c2b884662890 PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    2bcc6a6c3fbd ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    e453c89e247d selftests: tracing: Use mutex_unlock for testing glob filter
    2499b0ac908e ARM: tegra: Use I/O memcpy to write to IRAM
    aeb7edd5cb7e gpio: tps65912: check the return value of regmap_update_bits()
    4dd40dfba23a tools/nolibc: define time_t in terms of __kernel_old_time_t
    5b49e57e1e73 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
    8cac2bd3cc83 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
    472af4d4fa68 EDAC/synopsys: Clear the ECC counters on init
    2a65a7477b82 PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
    c0726d1e466e ARM: rockchip: fix kernel hang during smp initialization
    4d0b2d5a7419 cpufreq: Exit governor when failed to start old governor
    6c3ae3c40cbb gpio: wcd934x: check the return value of regmap_update_bits()
    bade491eb9e0 usb: xhci: Avoid showing errors during surprise removal
    c4ba0c252d92 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    04e615daf3b9 usb: xhci: Avoid showing warnings for dying controller
    5a164a725b9c usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    cc1613a46a1f selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
    be45f1b5f28d cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    f3ab168d3c85 usb: xhci: print xhci->xhc_state when queue_command failed
    c8704dca5792 securityfs: don't pin dentries twice, once is enough...
    d167a43b29cc ext2: Handle fiemap on empty files to prevent EINVAL
    5a77f371b4a1 fs/ntfs3: correctly create symlink for relative path
    bde58c1539f3 fs/ntfs3: Add sanity check for file name
    11388106fab5 ata: libata-sata: Disallow changing LPM state if not supported
    11b567346c65 better lockdep annotations for simple_recursive_removal()
    ad5f53b993b2 hfs: fix not erasing deleted b-tree node issue
    84ef8dd32383 drbd: add missing kref_get in handle_write_conflicts
    dc83df485f44 udf: Verify partition map count
    9d5012ffe141 smb/server: avoid deadlock when linking with ReplaceIfExists
    f8d55c912e45 arm64: Handle KCOV __init vs inline mismatches
    03cd1db1494c hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
    ccf0ad56a779 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    5ab59229bef6 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    a1a60e795022 hfs: fix slab-out-of-bounds in hfs_bnode_read()
    240325993e78 ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    55b12736625d cpuidle: governors: menu: Avoid using invalid recent intervals data
    8680e712240e intel_idle: Allow loading ACPI tables for any family
    cd0e92bb2b75 sctp: linearize cloned gso packets in sctp_rcv
    19b909a4b145 netfilter: ctnetlink: fix refcount leak on table dump
    a47767e20cf7 udp: also consider secpath when evaluating ipsec use for checksumming
    edc065c19257 ACPI: processor: perflib: Move problematic pr->performance check
    40f8fea730ce ACPI: processor: perflib: Fix initial _PPC limit application
    289d1d1fc1dc Documentation: ACPI: Fix parent device references
    71379495ab70 eventpoll: Fix semi-unbounded recursion
    749528086620 fs: Prevent file descriptor table allocations exceeding INT_MAX
    9620376f73fa sunvdc: Balance device refcount in vdc_port_mpgroup_check
    6fd42124b445 NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    f3aac6cf390d nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    75947d3200de net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    1b35f7ee5012 net: dpaa: fix device leak when querying time stamp info
    f95f0deb566d net: gianfar: fix device leak when querying time stamp info
    f324959ad47e netlink: avoid infinite retry looping in netlink_unicast()
    286b5be7f2ae gpio: virtio: Fix config space reading.
    275e37532e8e ALSA: usb-audio: Validate UAC3 cluster segment descriptors
    f03418bb9d54 ALSA: usb-audio: Validate UAC3 power domain descriptors, too
    b0878a23aee6 io_uring: don't use int for ABI
    8afb22aa063f usb: gadget : fix use-after-free in composite_dev_cleanup()
    66b1f50158e6 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    42ade82926c3 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    e05310943e7b ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    1946a6a9bdeb net: usbnet: Fix the wrong netif_carrier_on() call
    e2a4325ce21a net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    b4b40bab6c34 USB: serial: option: add Foxconn T99W709
    cf86704798c1 vsock: Do not allow binding to VMADDR_PORT_ANY
    ba2257034755 net/packet: fix a race in packet_set_ring() and packet_notifier()
    2675f405a60b selftests/perf_events: Add a mmap() correctness test
    3bd518cc7ea6 perf/core: Prevent VMA split of buffer mappings
    de85e72598d8 perf/core: Exit early on perf_mmap() fail
    899d253add77 perf/core: Don't leak AUX buffer refcount on allocation failure
    ce0481ac88a7 pptp: fix pptp_xmit() error path
    229429073578 smb: client: let recv_done() cleanup before notifying the callers.
    1f6525e79074 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    87fc5ce6ff98 smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    fb3854e76cd3 smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    484dea96e8c6 smb: server: remove separate empty_recvmsg_queue
    61a58a043906 ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    f80b34ebc579 benet: fix BUG when creating VFs
    4c1022220b1b net: drop UFO packets in udp_rcv_segment()
    09ff062b89d8 ipv6: reject malicious packets in ipv6_gso_segment()
    d0e1d47eca66 net/mlx5: Correctly set gso_segs when LRO is used
    5de7513f38f3 pptp: ensure minimal skb length in pptp_xmit()
    10c803dee386 phy: mscc: Fix parsing of unicast frames
    0a0108796b84 netpoll: prevent hanging NAPI when netcons gets enabled
    19b83e315441 NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    461125e8f46c XArray: Add calls to might_alloc()
    b23afb4a5fd2 NFSv4.2: another fix for listxattr
    3570ef5c3131 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    70bf32087b4d pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    2ec8ec57bb8e PCI: pnv_php: Fix surprise plug detection and recovery
    f56e004b7817 powerpc/eeh: Make EEH driver device hotplug safe
    efabe0bd99f4 powerpc/eeh: Rely on dev->link_active_reporting
    cb1ea063039c powerpc/eeh: Export eeh_unfreeze_pe()
    12656cda9194 PCI: pnv_php: Work around switches with broken presence detection
    912e200240b6 PCI: pnv_php: Clean up allocated IRQs on unplug
    06e25dfea328 kconfig: qconf: fix ConfigList::updateListAllforAll()
    a30c34e6be0f scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    0967189e6a09 scsi: mpt3sas: Fix a fw_event memory leak
    666b7cf6ac9a f2fs: fix to avoid out-of-boundary access in devs.path
    5cd99d5aa3d3 f2fs: fix to avoid panic in f2fs_evict_inode
    1edf68272b8c f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    fba3a1c1c330 f2fs: doc: fix wrong quota mount option description
    08e8ab00a6d2 f2fs: fix KMSAN uninit-value in extent_info usage
    37f3a111913b rtc: rv3028: fix incorrect maximum clock rate handling
    2ed0bae18a77 rtc: pcf8563: fix incorrect maximum clock rate handling
    facb6e7c0f4e rtc: pcf85063: fix incorrect maximum clock rate handling
    452aed10517b rtc: hym8563: fix incorrect maximum clock rate handling
    d62a797801fd rtc: ds1307: fix incorrect maximum clock rate handling
    e9293fd04c1b ucount: fix atomic_long_inc_below() argument type
    0b973c5eeef5 module: Restore the moduleparam prefix length check
    69e83e552750 apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    74a87aca0942 bpf: Check flow_dissector ctx accesses are aligned
    27354cbd69b8 vhost-scsi: Fix log flooding with target does not exist errors
    aed9a4e43946 mtd: rawnand: atmel: set pmecc data setup time
    62f7cc11b04e mtd: rawnand: rockchip: Add missing check after DMA map
    15d0e92dfd45 mtd: rawnand: atmel: Fix dma_mapping_error() address
    47bf04a5a4b7 jfs: fix metapage reference count leak in dbAllocCtl
    cca8f5a39919 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    52e1dc93d52d crypto: qat - fix seq_file position update in adf_ring_next()
    6ff44d06e953 sh: Do not use hyphen in exported variable name
    2bba4bdf050d dmaengine: nbpfaxi: Add missing check after DMA map
    c94f4c6e662a dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    bbe6cd4da912 fs/orangefs: Allow 2 more characters in do_c_string()
    d2016efbc42a PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    d54f6bc4b2b0 soundwire: stream: restore params when prepare ports fail
    cbdd905a6b3e crypto: img-hash - Fix dma_unmap_sg() nents value
    5867d62dfe92 crypto: keembay - Fix dma_unmap_sg() nents value
    0b777a598b76 hwrng: mtk - handle devm_pm_runtime_enable errors
    7a9ee7b9034a watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    d084ff4b7c6b scsi: isci: Fix dma_unmap_sg() nents value
    999bb730ca69 scsi: mvsas: Fix dma_unmap_sg() nents value
    1c0717978d2a scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    896c8ac77794 clk: sunxi-ng: v3s: Fix de clock definition
    2ab3f20f4baa perf tests bp_account: Fix leaked file descriptor
    b1b1bfb81a4a kernel: trace: preemptirq_delay_test: use offstack cpu mask
    b6fbac6ae904 RDMA/hns: Fix -Wframe-larger-than issue
    20c0ed8dd658 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    f25a1c8834c3 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    9f13f09c8dc4 perf sched: Fix memory leaks for evsel->priv in timehist
    84cd7256f068 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    7b5365d17b58 pinctrl: sunxi: Fix memory leak on krealloc failure
    0369e2055789 PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    9ed082a72c20 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    4ebbb9106aaa power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    7e903da71f8b clk: xilinx: vcu: unregister pll_post only if registered correctly
    c62c0b6d797e media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    2adc945b70c4 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    e86cc0b9812c mtd: fix possible integer overflow in erase_xfer()
    9745eecf5b69 crypto: marvell/cesa - Fix engine load inaccuracy
    dcd17f4f579b PCI: rockchip-host: Fix "Unexpected Completion" log message
    2e34470f44eb vrf: Drop existing dst reference in vrf_ip6_input_dst
    5e0275f888eb selftests: rtnetlink.sh: remove esp4_offload after test
    b10cfa2de13d netfilter: xt_nfacct: don't assume acct name is null-terminated
    bfc8a82751f6 can: kvaser_usb: Assign netdev.dev_port based on device channel index
    0721467bb069 can: kvaser_pciefd: Store device channel index
    19859cc12acc wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    696994a1d655 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9b096abd5454 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    fe1ee935285a wifi: mac80211: Don't call fq_flow_idx() for management frames
    d56890533b08 mwl8k: Add missing check after DMA map
    da1be393a75d wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    7c537709a18c xen/gntdev: remove struct gntdev_copy_batch from stack
    9cd1537036ac net_sched: act_ctinfo: use atomic64_t for three counters
    cab280994498 net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    863b1c70e7f8 um: rtc: Avoid shadowing err in uml_rtc_start()
    8d83f7143ff7 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    5351b8a41623 netfilter: nf_tables: adjust lockdep assertions handling
    7a43cb575217 drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    8f35daf34357 m68k: Don't unregister boot console needlessly
    9053a69abfb5 net/mlx5: Check device memory pointer before usage
    f5a27666c8cf tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    eff3bb53c18c wifi: ath11k: clear initialized flag for deinit-ed srng lists
    2e9f85ee3b46 iwlwifi: Add missing check for alloc_ordered_workqueue
    d76ca8359371 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    c73c773b09e3 wifi: rtl818x: Kill URBs before clearing tx status queue
    9a0624ff42df caif: reduce stack size, again
    a7caec2a1b59 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    73fc5d04009d bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    c0efe4eae2cc bpf, sockmap: Fix psock incorrectly pointing to sk
    d699e4e6d33b drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    4bf712152125 selftests/tracing: Fix false failure of subsystem event test
    3afd514c77f4 staging: nvec: Fix incorrect null termination of battery manufacturer
    f7c2de49fee3 samples: mei: Fix building on musl libc
    90918264362d cpufreq: Init policy->rwsem before it may be possibly used
    d9c7fc2c8ae2 cpufreq: Initialize cpufreq-based frequency-invariance later
    997c36d137e3 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    f0479e878d4b PM / devfreq: Check governor before using governor->name
    35a490ea5a80 arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    10c0fbd5ad66 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    0008ec694e2b ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    a789256941ab arm: dts: ti: omap: Fixup pinheader typo
    ae08cd98fef4 usb: early: xhci-dbc: Fix early_ioremap leak
    c6fdcd40390e Revert "vmci: Prevent the dispatching of uninitialized payloads"
    a891b456ba2b pps: fix poll support
    a85dc8385749 vmci: Prevent the dispatching of uninitialized payloads
    3290f62f23fa staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    76f1842cdc91 usb: misc: apple-mfi-fastcharge: Make power supply names unique
    4986c1e82e93 ARM: dts: vfxxx: Correctly use two tuples for timer address
    b6b551196f5b selftests: Fix errno checking in syscall_user_dispatch test
    cfb5e5582f69 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    fe18d9f14f4c ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    bec8109f957a Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    14922f0cc92e hfsplus: remove mutex_lock check in hfsplus_free_extents
    92c50b2d5a57 fs_context: fix parameter name in infofc() macro
    7becf31ed946 ASoC: Intel: fix SND_SOC_SOF dependencies
    c845b2e787d8 ethernet: intel: fix building with large NR_CPUS
    6dd7e3fc9246 usb: phy: mxs: disconnect line when USB charger is attached
    c53baa6a134c usb: chipidea: add USB PHY event
    6005cea17d04 ALSA: hda: Add missing NVIDIA HDA codec IDs
    988be12b610d comedi: comedi_test: Fix possible deletion of uninitialized timers
    fa6ce4a9cc9f jfs: reject on-disk inodes of an unsupported type
    6b80d98a9710 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
    6d40dd35a932 usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
    92370ce7071c usb: typec: tcpm: allow switching to mode accessory to mux properly
    2f7fbb19d983 usb: typec: tcpm: allow to use sink in accessory mode
    4991f824128b mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
    98872a934ea6 nilfs2: reject invalid file types when reading inodes
    1d6f02700d75 gve: Fix stuck TX queue for DQ queue format
    ae07af3d1f8e e1000e: ignore uninitialized checksum word on tgp
    30e2871bd4b3 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
    8aa46b2428b8 dpaa2-switch: Fix device reference count leak in MAC endpoint handling
    30f7d3d90f41 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
    094a94e3b237 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
    83f64bb37197 bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
    c742b06302a0 i2c: virtio: Avoid hang by using interruptible completion wait
    d05ec13aa3eb i2c: qup: jump out of the loop in case of timeout
    ec1aa39ea7f9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
    a8e8b3733ebd net: hns3: fixed vf get max channels bug
    d739b876c161 net: hns3: disable interrupt when ptp init failed
    f1d943048fd2 net: hns3: fix concurrent setting vlan filter issue
    ab905a2e982e net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
    186942d19c02 net: appletalk: Fix use-after-free in AARP proxy probe
    4640c4dc604d i40e: report VF tx_dropped with tx_errors instead of tx_discards
    8d9184cce2bf i40e: Add rx_missed_errors for buffer exhaustion
    c8aefc5994eb regmap: fix potential memory leak of regmap_bus
    cda04854614f interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
    532fbdc74a4e RDMA/core: Rate limit GID cache warning messages
    ca9bef9ba1a6 regulator: core: fix NULL dereference on unbind due to stale coupling data
    664e5a6f541f Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
    b62c8ee41b81 x86: Pin task-stack in __get_wchan()
    e43191f9efa3 x86: Fix __get_wchan() for !STACKTRACE
    5ce1264b586d sched: Add wrapper for get_wchan() to keep task blocked
    b52e53a44a43 x86: Fix get_wchan() to support the ORC unwinder
    4dba44333a11 bpf, sockmap: Fix panic when calling skb_linearize
    7722142d7265 platform/x86: think-lmi: Fix kobject cleanup
    f110c609b0c5 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    7d2c4a0fee61 mm/vmalloc: leave lazy MMU mode on PTE mapping error
    ee093910b9f8 ASoC: fsl_sai: Force a software reset when starting in consumer mode
    d2ab0bb400cc usb: dwc3: qcom: Don't leave BCR asserted
    5e2851d5e3cf usb: musb: fix gadget state on disconnect
    8594a4e87977 usb: musb: Add and use inline functions musb_{get,set}_state
    7a7178837bed usb: hub: Fix flushing of delayed work used for post resume purposes
    1a6fee8d8295 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
    e38ca702130b usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    36fecd740de2 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
    9ef510db1362 sched: Change nr_uninterruptible type to unsigned long
    850226aef8d2 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
    2a4b9df3cb50 net: bridge: Do not offload IGMP/MLD messages
    047b61a24d7c net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
    9aa9261bf1fe Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    6e4eec86fe5f ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    984a2fb6f2ed net/mlx5: Correctly set gso_size when LRO is used
    88576404084d net/mlx5e: Add support to klm_umr_wqe
    9737501f26b6 lib: bitmap: Introduce node-aware alloc API
    ce2f1b5d0f13 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    edf3a1828373 Bluetooth: SMP: If an unallowed command is received consider it a failure
    3a4eca2a1859 Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
    a6a238c4126e usb: net: sierra: check for no status endpoint
    4eb5cc48399f hwmon: (corsair-cpro) Validate the size of the received input buffer
    22bff8038efb selftests: net: increase inter-packet timeout in udpgro.sh
    db262843d1ce selftests: udpgro: report error when receive failed
    46c321f45c87 nvme: fix misaccounting of nvme-mpath inflight I/O
    4256a483fe58 smb: client: fix use-after-free in cifs_oplock_break
    4b5022b649ab pinctrl: mediatek: moore: check if pin_desc is valid before use
    8ba6c2362b85 rpl: Fix use-after-free in rpl_do_srh_inline().
    c6df79400014 net/sched: sch_qfq: Fix race condition on qfq_aggregate
    ca9850df52cc net: emaclite: Fix missing pointer increment in aligned_read()
    97303e541e12 bpf: Reject %p% format string in bprintf-like helpers
    020eed5681d0 comedi: Fix initialization of data for instructions that write to subdevice
    c53570e62b5b comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
    757127050b43 comedi: Fix some signed shift left operations
    69dc06b95145 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
    73f34d609397 comedi: das6402: Fix bit shift out of bounds
    b3c95fa508e5 comedi: das16m1: Fix bit shift out of bounds
    c593215385f0 comedi: aio_iiro_16: Fix bit shift out of bounds
    29ef03e5b844 comedi: pcl812: Fix bit shift out of bounds
    eda041948635 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    2f10149ae596 iio: adc: max1363: Reorder mode_list[] entries
    8ff32ec36adb iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    166afe964e84 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
    fe632e8fc184 soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    5fd9150de773 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
    ecb1a74e41b5 mmc: sdhci_am654: Workaround for Errata i2312
    4d6c8f3e13af mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
    0886c420da61 mmc: bcm2835: Fix dma_unmap_sg() nents value
    0a8432ef8cd9 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    6ef428a6e972 isofs: Verify inode mode when loading from disk
    24861ef8b517 dmaengine: nbpfaxi: Fix memory corruption in probe()
    052af0c58b5b af_packet: fix soft lockup issue caused by tpacket_snd()
    9e3219d33907 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    e98c1dfae40e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
    ca60064ea03f tracing: Add down_write(trace_event_sem) when adding trace event
    f10923b8d32a HID: core: do not bypass hid_hw_raw_request
    aefa6e92d9b4 HID: core: ensure __hid_request reserves the report ID as the first byte
    7fa83d004337 HID: core: ensure the allocated report buffer can contain the reserved report ID
    6c6ae150dbd8 pch_uart: Fix dma_sync_sg_for_device() nents value
    d83feb2854d8 Input: xpad - set correct controller type for Acer NGR200
    8039721de433 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    0bcdbf953523 i2c: stm32: fix the device used for the DMA map
    15a872068799 usb: gadget: configfs: Fix OOB read on empty string write
    76157b526d17 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    660b9dc0fd3d USB: serial: option: add Foxconn T99W640
    d374b477ae95 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    cdcb0ffd6448 phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

(From OE-Core rev: bd8a3bdbd78f806b4a3077de8ae7aa3bc00511fc)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:20 -07:00
Bruce Ashfield
5abe7f3283 linux-yocto/5.15: update to v5.15.189
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    c79648372d02 Linux 5.15.189
    3e4028ef31b6 rseq: Fix segfault on registration when rseq_cs is non-zero
    4b934b78041f x86: Fix X86_FEATURE_VERW_CLEAR definition
    562f207d0a91 x86/mm: Disable hugetlb page table sharing on 32-bit
    8312a1ccff15 vhost-scsi: protect vq->log_used with vq->mutex
    02fd0c7d0d14 Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
    1b297ab6f38c HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    68c0e3adf09a HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    95f184337eb4 vt: add missing notification when switching back to text mode
    f174d73b3fb0 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    acc94849ebb9 net: usb: qmi_wwan: add SIMCom 8230C composition
    78fe114f13a3 um: vector: Reduce stack usage in vector_eth_configure()
    8ea9a9fb79a9 atm: idt77252: Add missing `dma_map_error()`
    8d672a1a6bfc bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
    0118fe8fbe2b bnxt_en: Fix DCB ETS validation
    8d11e48b1276 net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    0da557bbeae2 can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
    6b08605e12b3 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
    b2f5dfa87367 net: appletalk: Fix device refcount leak in atrtr_create()
    a3aea97d5596 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
    df525911974c ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    fedd65b58469 smb: server: make use of rdma_destroy_qp()
    cb121c47f364 nbd: fix uaf in nbd_genl_connect() error path
    10c6021a609d raid10: cleanup memleak at raid10_make_request
    48da050b4f54 md/raid1: Fix stack memory use after return in raid1_reshape
    b24f65c18454 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
    09064e6d6597 dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    419192cb11f2 dma-buf: use new iterator in dma_resv_wait_timeout
    84df80b4c704 dma-buf: add dma_resv_for_each_fence_unlocked v8
    3435a2048972 usb: dwc3: Abort suspend on soft disconnect failure
    c1cb5c166fec usb: cdnsp: Fix issue with CV Bad Descriptor test
    ba3a2e446fc7 usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
    2991f28da681 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
    9a433cd87236 Input: xpad - support Acer NGR 200 Controller
    e9b894ca7589 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    e262ff8d634c usb: xhci: quirk for data loss in ISOC transfers
    59aca35c69c2 xhci: Allow RPM on the USB controller (1022:43f7) by default
    982beb7582c1 virtio-net: ensure the received length does not exceed allocated size
    c47c83f6f2ec netlink: make sure we allow at least one dump skb
    ccc9da90af65 netlink: Fix rmem check in netlink_broadcast_deliver().
    a2504279841f pwm: mediatek: Ensure to disable clocks in error path
    d7684190951e RDMA/mlx5: Fix vport loopback for MPV device
    e774a693b7ff btrfs: use btrfs_record_snapshot_destroy() during rmdir
    21ab2c7c9794 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    d216d5a277de Revert "ACPI: battery: negate current when discharging"
    a5012673d497 usb: gadget: u_serial: Fix race condition in TTY wakeup
    2f4df5d07c77 drm/gem: Fix race in drm_gem_handle_create_tail()
    ef841f8e4e1f drm/sched: Increment job count before swapping tail spsc queue
    cb4b08a095b1 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
    0c1ad5738526 gre: Fix IPv6 multicast route creation.
    e3154a48fd0b x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    9f4431ba8501 x86/mce: Don't remove sysfs if thresholding sysfs init fails
    9cd4fa64814b x86/mce/amd: Fix threshold limit reset
    ae0e082687b2 xen: replace xen_remap() with memremap()
    f98bf80b20f4 jfs: fix null ptr deref in dtInsertEntry
    65ad600b9bde bpf, sockmap: Fix skb refcnt race after locking changes
    2499fa286fb0 aoe: avoid potential deadlock at set_capacity
    39d5137085a6 thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
    e37e3b6cc8dc bpf: fix precision backtracking instruction iteration
    f5e72b7824d0 rxrpc: Fix oops due to non-existence of prealloc backlog struct
    d30910170f7e ice: safer stats processing
    32caa50275cc fs/proc: do_task_stat: use __for_each_thread()
    25452638f133 net/sched: Abort __tc_modify_qdisc if parent class does not exist
    7f1cad84ac1a atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
    5641019dfbae atm: clip: Fix infinite recursive call of clip_push().
    1c075e88d585 atm: clip: Fix memory leak of struct clip_vcc.
    3251ce3979f4 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
    66f9065c1c7d net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    29a5de38fa1e net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    0ba1021a8302 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
    36a439049b34 vsock: Fix transport_* TOCTOU
    80d7dc15805a vsock: Fix transport_{g2h,h2g} TOCTOU
    dab8ded2e5ff tipc: Fix use-after-free in tipc_conn_close().
    fd69af061010 netlink: Fix wraparounds of sk->sk_rmem_alloc.
    552a066477cb fix proc_sys_compare() handling of in-lookup dentries
    c0aec35f861f perf: Revert to requiring CAP_SYS_ADMIN for uprobes
    2df3e265a301 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    87825fbd1e17 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling

(From OE-Core rev: b3f7c8cd4d56120e96b2b12f5a1eb76dc65f682b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:20 -07:00
Bruce Ashfield
9a1d2ff9d0 linux-yocto/5.15: update to v5.15.188
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    89950c454265 Linux 5.15.188
    cd0d988f7dd7 x86/CPU/AMD: Properly check the TSA microcode
    2f693b607545 Linux 5.15.187
    21953dde398d x86/process: Move the buffer clearing before MONITOR
    c334ae4a545a KVM: SVM: Advertise TSA CPUID bits to guests
    3d6513b51b72 KVM: x86: add support for CPUID leaf 0x80000021
    f2b75f1368af x86/bugs: Add a Transient Scheduler Attacks mitigation
    04304f5fe3e3 x86/bugs: Rename MDS machinery to something more generic
    7be0d1ea71f5 usb: typec: displayport: Fix potential deadlock
    5bcca95ca6d2 platform/x86: think-lmi: Create ksets consecutively
    d01c737efd81 Logitech C-270 even more broken
    475f89e1f9bd i2c/designware: Fix an initialization issue
    b32dfd00bd51 usb: cdnsp: do not disable slot for disabled slot
    969941ca9f1e xhci: dbc: Flush queued requests before stopping dbc
    45f2cd76bc50 xhci: dbctty: disable ECHO flag by default
    d8ccb3d08159 platform/x86: dell-wmi-sysman: Fix class device unregistration
    8ac2cb8d809b platform/x86: think-lmi: Fix class device unregistration
    846baaa88a2d dpaa2-eth: fix xdp_rxq_info leak
    3f0b6236e11f net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
    b2e1b676711e dpaa2-eth: Update SINGLE_STEP register access
    8e4d49fc2617 dpaa2-eth: Update dpni_get_single_step_cfg command
    0ab03e2616a1 ethernet: atl1: Add missing DMA mapping error checks and count errors
    94a09ec93e93 NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    576a6739e08a drm/v3d: Disable interrupts before resetting the GPU
    56738cbac3bb regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    e772f8f5c82d regulator: gpio: Add input_supply support in gpio_regulator_config
    1728e17762b9 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    bee6329e5fd5 rcu: Return early if callback is not specified
    68d3417305ee mtd: spinand: fix memory leak of ECC engine conf
    ab1e8491c19e ACPICA: Refuse to evaluate a method if arguments are missing
    46b47d4b06fa wifi: ath6kl: remove WARN on bad firmware input
    a856228c44dc wifi: mac80211: drop invalid source address OCB frames
    1129e0e0a833 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    161ff4102038 powerpc: Fix struct termio related ioctl macros
    ce5f6b2540d6 ata: pata_cs5536: fix build on 32-bit UML
    ba5104b9b3fa ALSA: sb: Force to disable DMAs once when DMA mode is changed
    73337c003f3d ALSA: sb: Don't allow changing the DMA mode during operations
    5deab0fa6cfd drm/msm: Fix a fence leak in submit error path
    e269f29e9395 net/sched: Always pass notifications when child class becomes empty
    7bf497c2ad87 nui: Fix dma_mapping_error() check
    2b952dbb32fe rose: fix dangling neighbour pointers in rose_rt_device_down()
    1fba51f021b2 enic: fix incorrect MTU comparison in enic_change_mtu()
    52b4b2e85e63 amd-xgbe: align CL37 AN sequence as per databook
    7edff1bbdd3a lib: test_objagg: Set error message in check_expect_hints_stats()
    f5874e0dea9e igc: disable L1.2 PCI-E link substate to avoid performance issue
    f10af3426144 drm/i915/gt: Fix timeline left held on VMA alloc error
    92c2d914b533 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    4caf6a93ac39 drm/i915/selftests: Change mock_request() to return error pointers
    54f62d542d2c spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    4c315caf16e8 drm/exynos: fimd: Guard display clock control with runtime PM calls
    a1950bb9edfa btrfs: fix missing error handling when searching for inode refs during log replay
    9f0771b8cc4a RDMA/mlx5: Fix CC counters query for MPV
    abfdb3b4ce2b scsi: ufs: core: Fix spelling of a sysfs attribute name
    1afb58c7e32b scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    9ceff7ded1e9 scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    8846fd02c98d NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    b92397ce9674 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    00ed215f5938 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    16a16c901a75 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    944ced3e4a09 mtk-sd: reset host->mrq on prepare_data() error
    48bf4f3dfcda mtk-sd: Prevent memory corruption from DMA map failure
    2580162c4ebf mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    621d5a3ef023 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    aab032d171e7 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    3d07fd496513 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    2d44723a091b vsock/vmci: Clear the vmci transport packet properly when initializing it
    1def00386211 rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    8516edd36397 ARM: 9354/1: ptrace: Use bitfield helpers
    143842584c12 btrfs: don't drop extent_map for free space inode on write error
    6a8aa6420ad3 arm64: Restrict pagetable teardown to avoid false warning
    6d486f1e3818 Revert "ipv6: save dontfrag in cork"
    9f69eb424aa2 s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
    707030cb1c66 s390/entry: Fix last breaking event handling in case of stack corruption
    9e2976e4e326 media: uvcvideo: Rollback non processed entities on error
    45d1aa5674d6 PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
    34d3e10ab905 drm/amd/display: Add null pointer check for get_first_active_display()
    53dee8fd76a6 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
    62a7143dce1c drm/bridge: cdns-dsi: Check return value when getting default PHY config
    49a421180aaa drm/bridge: cdns-dsi: Fix connecting to next bridge
    6c3056ed0b73 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
    105b0a0c7e65 drm/amdkfd: Fix race in GWS queue scheduling
    b0dc5d6da1da drm/udl: Unregister device before cleaning up on disconnect
    c7fc459ae6f9 drm/tegra: Fix a possible null pointer dereference
    21dfbd590734 drm/tegra: Assign plane type before registration
    03b68435fbe3 HID: wacom: fix kobject reference count leak
    796abf9f710a HID: wacom: fix memory leak on sysfs attribute creation failure
    ca7b6d00a713 HID: wacom: fix memory leak on kobject creation failure
    896bc23e1e25 btrfs: update superblock's device bytes_used when dropping chunk
    2826ef05854d dm-raid: fix variable in journal device check
    78f4cf0e81b7 Bluetooth: L2CAP: Fix L2CAP MTU negotiation
    34cbe5543bec dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
    f61db0a69d0b staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
    9f7fd60fb8f7 net: selftests: fix TCP packet checksum
    26248d5d68c8 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
    6b908e85a739 net: enetc: Correct endianness handling in _enetc_rd_reg64
    8898080d6143 um: ubd: Add missing error check in start_io_thread()
    a4aa7c001043 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
    1bc8c7b8e5b9 af_unix: Don't set -ECONNRESET for consumed OOB skb.
    2afcde1b3676 wifi: mac80211: fix beacon interval calculation overflow
    1197abb1ee3b libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
    6b4ce195552b attach_recursive_mnt(): do not lock the covering tree when sliding something under it
    c3fb926abe90 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
    9199e8cb75f1 atm: clip: prevent NULL deref in clip_push()
    ad1bdd24a02d s390/pkey: Prevent overflow in size calculation for memdup_user()
    56e54021b77c i2c: robotfuzz-osif: disable zero-length read messages
    d6bc3e078509 i2c: tiny-usb: disable zero-length read messages
    9b084de34f1a platform/x86: ideapad-laptop: use usleep_range() for EC polling
    d0537c51b4a1 dummycon: Trigger redraw when switching consoles with deferred takeover
    acd41ac591b7 tty: vt: make consw::con_switch() return a bool
    a74907cdd18d tty: vt: sanitize arguments of consw::con_clear()
    d2781a0ba98c tty: vt: make init parameter of consw::con_init() a bool
    de2871093fa3 vgacon: remove unneeded forward declarations
    72dc92531df9 vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen()
    4b0b22dfe4d6 tty/vt: consolemap: rename and document struct uni_pagedir
    3a88320314ab fbcon: delete a few unneeded forward decl
    c8ea0f204cf4 uio_hv_generic: Align ring size to system page
    a955c1b360b3 uio_hv_generic: Query the ringbuffer size for device
    a8c1b5e33a1c Drivers: hv: vmbus: Add utility function for querying ring size
    101c4437f6fb Drivers: hv: Rename 'alloced' to 'allocated'
    1f2f2f56f59e f2fs: don't over-report free space or inodes in statvfs
    fbcbbf2ebe5c media: imx-jpeg: Drop the first error frames
    8701675abab4 clk: ti: am43xx: Add clkctrl data for am43xx ADC1
    9f55faa41eac media: omap3isp: use sgtable-based scatterlist wrappers
    78b7d79b8626 media: davinci: vpif: Fix memory leak in probe error path
    c3705c82b740 jfs: validate AG parameters in dbMount() to prevent crashes
    4789cea3f8d4 fs/jfs: consolidate sanity checking in dbMount
    8c8d1dcc726a ovl: Check for NULL d_inode() in ovl_dentry_upper()
    42923c6e9cd7 ceph: fix possible integer overflow in ceph_zero_objects()
    bfdbc927d165 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
    da01b76bb66a ALSA: hda: Add new pci id for AMD GPU display HD audio controller
    44aa0cdaed5f ALSA: hda: Ignore unsol events for cards being shut down
    56846793f105 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
    cd414d7d7077 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
    383d33f3aeb7 usb: Add checks for snprintf() calls in usb_alloc_dev()
    780e48c99f66 usb: common: usb-conn-gpio: use a unique name for usb connector device
    9c905fdbba68 tty: serial: uartlite: register uart driver in init
    6f77e344515b usb: potential integer overflow in usbg_make_tpg()
    5cb3cb3db317 usb: dwc2: also exit clock_gating when stopping udc while suspended
    fd72dd6a82e2 coresight: Only check bottom two claim bits
    be620f25161f um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
    82ddbbc98949 iio: pressure: zpa2326: Use aligned_s64 for the timestamp
    1f25f2d3fa29 bcache: fix NULL pointer in cache_set_flush()
    8ddce5eab6c3 md/md-bitmap: fix dm-raid max_write_behind setting
    477c044309e6 dmaengine: xilinx_dma: Set dma_device directions
    566487aad232 ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
    d8322d861a6f hwmon: (pmbus/max34440) Fix support for max34451
    bbd1511e27ee leds: multicolor: Fix intensity setting while SW blinking
    a23b82a0693b mfd: max14577: Fix wakeup source leaks on device unbind
    852a2bda152a mailbox: Not protect module_put with spin_lock_irqsave
    86be8c7409b7 NFSv4.2: fix listxattr to return selinux security label
    a35f2168961e NFSv4: Always set NLINK even if the server doesn't support it
    80251a15ed61 cifs: Fix cifs_query_path_info() for Windows NT servers

(From OE-Core rev: 6b6a51e73e89903e5766175c54fad23cc4a1721b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:20 -07:00
Saravanan
2b691e84d8 cmake: fix CVE-2025-9301
Reference:
	https://nvd.nist.gov/vuln/detail/CVE-2025-9301
	https://gitlab.kitware.com/cmake/cmake/-/issues/27135

Upstream-patch:
	37e27f71bc

(From OE-Core rev: 0aacc4298f2cdaaf6d19a58e6e134b6a6ecc5097)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:19 -07:00
Rajeshkumar Ramasamy
41ae63737b glib-networking: fix CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return
value of memory allocation routines. An out of memory condition could
potentially result in writing to an invalid memory location.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60019

Upstream-patch:
70df675dd4

(From OE-Core rev: eda5838fcbb8c725e6e39d6e72b63c33f6c44446)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:19 -07:00
Rajeshkumar Ramasamy
ca6745e603 glib-networking: fix CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return
value of a call to BIO_write(), resulting in an out of bounds read.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60018

Upstream-patch:
4dd540505d

(From OE-Core rev: bd11f18909b5946e4570e0eba9b3cb9b47791dc1)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:47:19 -07:00
Sunil Dora
d847c8aac1 glibc: : PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=dbc5a50d12eff4cb3f782129029d04b8a76f58e7
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002282.html

(From OE-Core rev: 8f1000d9dad5e51f08a40b0f6650204425cc8efb)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
1bf7d50410 glibc: nptl Use all of g1_start and g_signals
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=91bb902f58264a2fd50fbce8f39a9a290dd23706
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002283.html

(From OE-Core rev: 4593e800b832d740d0b63ddd4b5c948c564116b2)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
b48d3ea982 glibc: nptl rename __condvar_quiesce_and_switch_g1
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=4b79e27a5073c02f6bff9aa8f4791230a0ab1867
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002281.html

(From OE-Core rev: 0a9ccd040037c12aa2e7fbc2213ca60b30dafcc4)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
42b3adafcc glibc: nptl Fix indentation
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=ee6c14ed59d480720721aaacc5fb03213dc153da
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002280.html

(From OE-Core rev: f54e082df2f07893f66183089518f98cb792f22e)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
2105de9c82 glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=929a4764ac90382616b6a21f099192b2475da674
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002279.html

(From OE-Core rev: 75bbc8cb3a94640120d778916abb2edf78b89fd0)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
dd624cec3b glibc: Remove g_refs from condition variables
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=c36fc50781995e6758cae2b6927839d0157f213c
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002278.html

(From OE-Core rev: 1972b6776fa8a23b9d373d516ace32e136e9058f)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
2fdbec72e5 glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=4f7b051f8ee3feff1b53b27a906f245afaa9cee1
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002276.html

(From OE-Core rev: e6cac5aef751d698327f6ebee966462644c6c6a8)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
7b6bc5b49c glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=b42cc6af11062c260c7dfa91f1c89891366fed3e
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002274.html

(From OE-Core rev: 18b4f22aaae19cd0efb21433f0c23c5580246a2e)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
0c1db5ac27 glibc: nptl Update comments and indentation for new condvar implementation
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=0cc973160c23bb67f895bc887dd6942d29f8fee3
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002275.html

(From OE-Core rev: bf3d91124c2584b9d3000098d1f81d9459d143fc)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
8f20ad5f77 glibc: pthreads NPTL lost wakeup fix 2
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847
  [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=1db84775f831a1494993ce9c118deaf9537cc50a
  [2] https://sourceware.org/pipermail/libc-stable/2025-July/002277.html

(From OE-Core rev: 4d57f7c82ccb64e2bd2a2371ef18bdc5a4b718e3)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Sunil Dora
74672d72c0 glibc: Remove partial BZ#25847 backport patches
To facilitate a clean backport of the full 10-commit series
addressing the pthread condition variable lost wakeup issue
(BZ#25847) in glibc 2.35, remove the existing 8 patches that
were applied as a partial backport.

The previous partial backport excluded commit:
c36fc50781995e6758cae2b6927839d0157f213c ("nptl: Remove
g_refs from condition variables") based on guidance from
glibc maintainer Florian Weimer(#comment #74)

This exclusion was recommended for stable branches to
avoid altering the layout of pthread_cond_t, which could
introduce ABI incompatibilities. Additionally, the dependent
commit dbc5a50d12eff4cb3f782129029d04b8a76f58e7 was not needed
in the partial backport.

To align with upstream mainline, per maintainer Carlos O'Donell
(comment #75), apply the complete 10-commit series for consistency.

By removing these patches first, we ensure the subsequent
application of the full 10 commits results in cleaner, more
reviewable changes without intermixed conflicts or overlaps.

Removed patches and corresponding upstream commits:
- 0026-PR25847-1.patch: 1db84775f831a1494993ce9c118deaf9537cc50a
- 0026-PR25847-2.patch: 0cc973160c23bb67f895bc887dd6942d29f8fee3
- 0026-PR25847-3.patch: b42cc6af11062c260c7dfa91f1c89891366fed3e
- 0026-PR25847-4.patch: 4f7b051f8ee3feff1b53b27a906f245afaa9cee1
- 0026-PR25847-5.patch: 929a4764ac90382616b6a21f099192b2475da674
- 0026-PR25847-6.patch: ee6c14ed59d480720721aaacc5fb03213dc153da
- 0026-PR25847-7.patch: 4b79e27a5073c02f6bff9aa8f4791230a0ab1867
- 0026-PR25847-8.patch: 91bb902f58264a2fd50fbce8f39a9a290dd23706

Bug reference: https://sourceware.org/bugzilla/show_bug.cgi?id=25847
This change prepares the branch for the full backport in follow-up commits.

(From OE-Core rev: 9881dd70305b87945e9649d744bcbc40a1a7b780)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Peter Marko
f245c680a8 binutils: patch CVE-2025-11083
Pick patch per link in NVD report.

(From OE-Core rev: 99879f41af7272e597c9a8c4c0260d1b690f9051)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Peter Marko
2325a1dbc5 binutils: patch CVE-2025-11082
Pick patch per link in NVD report.

(From OE-Core rev: cdc458b5dd21614058aac56de68a272201283141)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:24 -07:00
Peter Marko
2952d99f0f qemu: patch CVE-2024-8354
Pick commit per [1].

(From OE-Core rev: bebd1b24473e3480ae6c4ae2897fbfdf4942ea11)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-17 07:27:23 -07:00
Peter Marko
962d08fb40 vulnerabilities: update nvdcve file name
The filename is outdated as its version was already bumped and there are
also different files for different feed choices.
Use glob to match any available file.

(From yocto-docs rev: fca48e1239950ccf10f6b1b805c5734104144ded)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Lee Chee Yang
425363de54 migration-guides: add release notes for 4.0.30
(From yocto-docs rev: 2999dd8be2534d3d5b2cfa28be703d07fffa795c)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e89c95b167c24cfb9c1d5d548a26872393ca2fee)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Steve Sakoman
e5fb48f371 oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: 0d11c9103f072841baf39166efc133f2a20fc4dc)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Steve Sakoman
259d81175f selftest/cases/meta_ide.py: use use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: 97939775d2b81af392a2f98c922165763ff0ae5f)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Gyorgy Sarvari
eca1e13385 conf/bitbake.conf: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html .

(From OE-Core rev: 8418289277056d582d88916b524b920a2e005c75)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d8c6f01d7467e018aa0ed27a87850d9e4434a47a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
AshishKumar Mishra
e46adde7bb p11-kit: backport fix for handle USE_NLS from master
Disable NLS in the build when USE_NLS is off.

(From OE-Core rev: b94798ecd535956ef4565663710ea9a701ff21ed)

This change corresponds to upstream eeb3974472
from master .
Since the p11-kit version are different between master & kirkstone
applied the patch manually

(From OE-Core rev: c621612a12cdbf5c89279b69e28d0e3a0b5d0a86)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
AshishKumar Mishra
d34a0bd00b systemd: backport fix for handle USE_NLS from master
Do not build translations when NLS is disabled.
(From OE-Core rev: 83795ef6c3fa12a863cd20b7ec1a2607606987b6)

This change corresponds to upstream d848b454e6
from master .
Since the systemd version are different between master & kirkstone
applied the patch manually

(From OE-Core rev: 4b612ae7cbdc8327765c34d0e64fa8e0564891d4)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Deepesh Varatharajan
11f3763b0f glibc: stable 2.35 branch updates
git log --oneline a66bc3941ff298e474d5f02d0c3303401951141f..4e50046821f05ada5f14c76803845125ddb3ed7d

4e50046821 (HEAD, origin/release/2.35/master) x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
c97735cfde elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
96cc65a28a elf: Extract rtld_setup_phdr function from dl_main
e3f04f64fa elf: Do not add a copy of _dl_find_object to libc.so
bfae8bf49c arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405)

Testing Results:
           Before     After   Diff
PASS         4605      4609     +4
XPASS           6         6      0
FAIL          358       356     -2
XFAIL          16        16      0
UNRESOLVED      0         1     +1
UNSUPPORTED   197       197      0

Testcases changes

testcase-name                              before           after

elf/tst-link-map-contiguous-libc(new)        -               PASS
elf/tst-link-map-contiguous-ldso(new)        -               FAIL
elf/check-dt-x86-64-plt(new)                 -               UNRESOLVED
misc/tst-tsearch                            FAIL             PASS
posix/bug-regex24                           FAIL             PASS
string/tst-cmp                              FAIL             PASS

(From OE-Core rev: 932ee96c0dc24ac3cdb9cee5bf96375568b41df0)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Archana Polampalli
89a78911d7 openssl: upgrade 3.0.17 -> 3.0.18
This release incorporates the following bug fixes and mitigations:
Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

Changelog:
https://github.com/openssl/openssl/blob/openssl-3.0.18/NEWS.md#openssl-30

(From OE-Core rev: 0a0d640436258269ffaaf23116d41f9a79db5ab7)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Aleksandar Nikolic
673b839a6b scripts/install-buildtools: Update to 4.0.30
Update to the 4.0.30 release of the 4.0 series for buildtools

(From OE-Core rev: 237452d023dfc895cd8183e30e781da6f60b2ec5)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Archana Polampalli
f63f49bdea go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
being unexpectedly returned.

(From OE-Core rev: c4d81e32ee3fb7d05db2cfbfaaa8081841bc16ce)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Peter Marko
7a5c6b3e18 ffmpeg: mark CVE-2023-6601 as patched
Per [1] this CVE is fixed by the same commits as the other 3 CVEs.

[1] https://security-tracker.debian.org/tracker/CVE-2023-6601

(From OE-Core rev: b0542ad422ac1ba05dd5b8003429b8719619d892)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:36 -07:00
Peter Marko
5d1ccbd52f ffmpeg: ignore CVE-2023-6603
Per [1] this CVE is fixed by [2] which is available in version 5.0, so
version 5.0.3 is not vulnerable anymore.

[1] https://security-tracker.debian.org/tracker/CVE-2023-6603
[2] 28c83584e8

(From OE-Core rev: dcfd5672474f7a9bf7913c0f0e35f7c40bb685c4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
c95f2e55ac pulseaudio: ignore CVE-2024-11586
As per the linked ticket, this issue is related to an Ubuntu-specific
patch that we don't have.

(From OE-Core rev: dc81fdc6bdf8ab39b7f2fd994d50256430c36558)

(From OE-Core rev: 72e63e44a0c6ad5a408c4dc59a24288c36463439)

Rewritten CVE_STATUS to CVE_CHECK_IGNORE.

(From OE-Core rev: 66e45229a9614d33f64167f0259ae1d719839d83)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
02148028a0 ghostscript: patch CVE-2025-59800
Pick commit mentioned in the NVD report.

(From OE-Core rev: 5109fd6675b6782f10f86f774fe54b6ccecee415)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
093e91d190 ghostscript: patch CVE-2025-59799
Pick commit mentioned in the NVD report.

(From OE-Core rev: 10a51275bb0f62b018a6182953352ecf7aa3d220)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
0163ca382a ghostscript: patch CVE-2025-59798
Pick commit mentioned in the NVD report.

(From OE-Core rev: dc65da274b26c1e7f4143154cd7639a93cc658be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
0adb465b9e grub: ignore CVE-2024-2312
This CVE is specific to Ubuntu [1].

[1] https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127

(From OE-Core rev: dc10bf2f9dd91cbd34af43162b61736fc26aa314)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
ca3783f70d gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)

Reworked to CVE_CHECK_IGNORE format.

(From OE-Core rev: 2162bc3b305a0b088018e251baad54c356f7855f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
b5a57a04eb gstreamer1.0: ignore CVEs fixed in plugins
All these CVEs were fixed in recent commits.

(From OE-Core rev: 86f48cdb1b26b6e234dde10b1e636e54e8a7e71f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Vijay Anusuri
ed56389e82 tiff: Fix CVE-2025-9165
Upstream-Commit: ed141286a3

(From OE-Core rev: 08823f96a400055e5924bae3af0d2dfaf488148b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Vijay Anusuri
4a1254610c tiff: Fix CVE-2025-8961
Upstream-Status: Backport from 0ac97aa7a5

(From OE-Core rev: 8d956d80f0eae39f9de68c0cd5a361c69b47cda4)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Vijay Anusuri
4ef41425c6 libxslt: Patch for CVE-2025-7424
This patch is taken from the upstream bug, and is used by Apple in their
build of WebKit.

Origin: https://gitlab.gnome.org/-/project/1762/uploads/627ae84cb0643d9adf6e5c86947f6be6/gnome-libxslt-bug-139-apple-fix.diff

Ref: https://gitlab.gnome.org/GNOME/libxslt/-/issues/139

(From OE-Core rev: 2e2fa1ae7f24dadae9cb8371174aa7744aa42028)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Peter Marko
db50dd87bc busybox: patch CVE-2025-46394
Pick commit mentioning this CVE.
Additionally fix test broken by the CVE fix.

(From OE-Core rev: 137299edbc47e8a57173ef3c22bcb719d48d5302)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Vijay Anusuri
2b82706dc5 gstreamer1.0-plugins-bad: Fix CVE-2025-3887
Upstream-Status: Backport from
5463f0e097
& bcaab36098

(From OE-Core rev: a35bdbdb4d1dd77de7b85ab19d7354be6a11e8b2)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Theo GAIGE
bc7377a239 libxml2: fix CVE-2025-9714
Upstream-Status: Backport from 677a42645e

(From OE-Core rev: 277692c2472f03ae62401bfbd26e8c4d872113d0)

Signed-off-by: Theo GAIGE <tgaige.opensource@witekio.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-14 07:20:35 -07:00
Adam Blank
7f12221f49 ref-manual/variables.rst: fix the description of STAGING_DIR
There is no single "recipe-sysroots" directory, but rather many
"recipe-sysroot*" directories.

(From yocto-docs rev: eca2cb23eb1fd4186d1f5cadc3280d73e8f52631)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f2d6e228409cb1dd1dbf339c405699ac6d3900be)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 10:09:02 -07:00
Antonin Godard
11d8b290dd ref-manual/structure: document the auto.conf file
Add documentation for auto.conf, which is used by external tools for
automatically setting variables.

(From yocto-docs rev: 707b29352838792c635b39c8b5c20c519b10b832)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 134e54a75e0144c4629f702c6f43e92ed1f12dce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 10:09:02 -07:00
Talel BELHAJ SALEM
55c58356f1 dev-manual/building.rst: add note about externalsrc variables absolute paths
(From yocto-docs rev: a0ffc6296e7349367fa6e6e615b74e2017a1a67e)

Signed-off-by: Talel BELHAJ SALEM <bhstalel@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 33166d70b6ad093bd95ffccafc0b07820682f656)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 10:09:02 -07:00
Adam Blank
3c3b5d0fe9 ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
Remove some leftover confusing mention of KMACHINE.

(From yocto-docs rev: 972f61f12f2b33fc518cf8c3e3da5bf71e1b1cb9)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 582ee9e0b4930aea03255542b3d3913df19af8b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 10:09:02 -07:00
Adam Blank
3ff44348f7 kernel-dev/common.rst: fix the in-tree defconfig description
The description of the relation between KBUILD_DEFCONFIG and
SRC_URI is reversed. In fact it is the SRC_URI provided
defconfig which will be dropped by the kernel-yocto class
if both are provided.

(From yocto-docs rev: 6efc3ca5491722072fd394bae92d827791ef6bc3)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a808420655a0976ba08f013f468cf80f379b1d89)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 10:09:02 -07:00
Antonin Godard
1f6c798015 test-manual/yocto-project-compatible.rst: fix a typo
Fix a typo in yocto-project-compatible.rst.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 95f31030628d0f7681401b1de6fb8e7a362963c1)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a84c234acfedfa714419006c743405e2f9acaedc)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:18 -07:00
Quentin Schulz
fd0df2cb78 contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
There's no need to differentiate crediting contributors from committing
your changes, so let's simply make it the last step of "Commit your
changes" section.

This simply indents the text so it's now part of "Commit your changes"
list instead of the main list in the "Implement and commit changes"
section. Because of this reorganisation, the instruction to use "git
commit --amend" to add the contributors is moved to a note, and the
first few sentences are reworded to better match the wording of other
items in the "Commit your changes" list of instructions.

(From yocto-docs rev: 5ce7ae8f655f45dec80e68398911f117920f5eb2)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eff4d14e28d323ebfdaeb0c5c805b5f1e2ad153d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:18 -07:00
Quentin Schulz
ffd5cd98d6 contributor-guide: submit-changes: number instruction list in commit your changes
... so that it's clear that you need to read and follow each and every
instruction in this list.

(From yocto-docs rev: 4799ffa5170a5f9e12350634bcdfca6f531ea937)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c628a489f081925fabaabb5acac6752251150269)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Quentin Schulz
794b42f01a contributor-guide: submit-changes: reword commit message instructions
This should hopefully make it clearer what is expected from the
contributor.

This follows my understanding of git-commit(1)[1] where the following is
a git commit message:

"""
git commit title

git commit description
"""

I'm putting the "Fixes [YOCTO" line in "body of the commit message" so
it's understood as being different from the git commit description so
that the note admonition allowing us to have an empty commit description
doesn't apply to the "Fixes [YOCTO" line.

[1] https://www.man7.org/linux/man-pages/man1/git-commit.1.html#DISCUSSION

(From yocto-docs rev: f817ef5542adc2ce830e22dd04424b9d5d5ed5c5)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b84903a760350bd118c56ea9ce4e98039edf6e55)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Quentin Schulz
11999973cb contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
The kernel docs specifies[1] a Cc: tag and not CC: tag, so let's align
with that.

[1] https://www.kernel.org/doc/html/latest/process/submitting-patches.html#when-to-use-acked-by-cc-and-co-developed-by

(From yocto-docs rev: 87721121d9dc95e2de110cadee4538e2ea4ff7c3)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f800fef4e9e2c1d3584ac49be8324638d2923b17)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Quentin Schulz
49a5ab4d5f contributor-guide: submit-changes: align CC tag description
The other tag descriptions have the double colon outside of the
highlight, and start the sentence with a lowercase word, so let's align
the CC tag with those.

(From yocto-docs rev: 9764dc8ff26883684f3e993cfa821116ee2e6d95)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f116e93fb335e9d0f85891c4cb501bcf55b18ccf)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Quentin Schulz
d153a3dc36 contributor-guide: submit-changes: clarify example with Yocto bug ID
The example could be understood as the content of the commit message
once the editor (git config core.editor) opens, where the first
line is the actual commit title and not the commit description.

This example would make the Fixes line the commit title, which is not
what we want.

In short, according to my understanding of git-commit(1):

The following is a git commit message:

"""
git commit title

git commit description
"""

Reported-by: Barne Carstensen <barne.carstensen@danfoss.com>
(From yocto-docs rev: db54a8bd56f38c532498e0f624fcceb60d2b9ea7)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a5862406bf3230befe9db9f2539bbbc86c02015d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Quentin Schulz
2399c63ca5 contributor-guide: submit-changes: fix improper bold string
I don't know what was the initial intent but this doesn't seem right, so
let's remove the bold formatting.

Fixes: 4abe87cb20d3 ("contributor-guide: submit-changes: detail commit and patch creation")
Cc: Michael Opdenacker <michael.opdenacker@rootcommit.com>
(From yocto-docs rev: 508a1b7d905dabe8a36361da8e346040db4cca2a)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6c499b3796a578a0fe4c319c9547b4321b0d41df)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Gyorgy Sarvari
866395041f libhandy: update git branch name
Master branch was renamed to main.

(From OE-Core rev: 2285f30e643f52511c328e4f6e1f0c042bea4110)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Soumya Sambu
6303a9d5b5 python3-jinja2: upgrade 3.1.4 -> 3.1.6
Includes fix for - CVE-2024-56326, CVE-2025-27516, CVE-2024-56201

Changelog:
https://github.com/pallets/jinja/blob/3.1.6/CHANGES.rst
https://github.com/pallets/jinja/blob/3.1.5/CHANGES.rst

(From OE-Core rev: a935ef8f205c9510ebc5539c133960bc72504902)

(From OE-Core rev: 7108dccff524888d77f0e5e02d9cc4523a700a91)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Divya Chellam
1811a2d13e vim: upgrade 9.1.1652 -> 9.1.1683
Handles CVE-2025-9389

Changes between 9.1.1652 -> 9.1.1683
====================================
https://github.com/vim/vim/compare/v9.1.1652...v9.1.1683

(From OE-Core rev: 24b7e7f719ca600a88aa893b87f6ea821caeadce)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Yogita Urade
15dd68bda1 tiff: fix CVE-2025-9900
A flaw was found in Libtiff. This vulnerability is a "write-what-where"
condition, triggered when the library processes a specially crafted TIFF
image file.[EOL][EOL]By providing an abnormally large image height value
in the file's metadata, an attacker can trick the library into writing
attacker-controlled color data to an arbitrary memory location. This
memory corruption can be exploited to cause a denial of service (application
crash) or to achieve arbitrary code execution with the permissions of the user.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9900

Upstream patch:
3e0dcf0ec6

(From OE-Core rev: f4e5cdeccee02d3ea78db91d5dfdcfd017c40ee0)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Yogita Urade
9c9c706252 curl: fix CVE-2025-9086
1, A cookie is set using the secure keyword for https://target
2, curl is redirected to or otherwise made to speak with http://target
(same hostname, but using clear text HTTP) using the same cookie set
3, The same cookie name is set - but with just a slash as path (path="/").
Since this site is not secure, the cookie should just be ignored.
4, A bug in the path comparison logic makes curl read outside a heap buffer boundary

The bug either causes a crash or it potentially makes the comparison come to
the wrong conclusion and lets the clear-text site override the contents of
the secure cookie, contrary to expectations and depending on the memory contents
immediately following the single-byte allocation that holds the path.

The presumed and correct behavior would be to plainly ignore the second set of
the cookie since it was already set as secure on a secure host so overriding
it on an insecure host should not be okay.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9086

Upstream patch:
https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6

(From OE-Core rev: dc842a631b178acd9c4f00c4a3b87831baf08ebb)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Yogita Urade
d2a96dd89c grub2: fix CVE-2024-56738
Backport an algorithmic change to grub_crypto_memcmp() so that it
completes in constant time and thus isn't susceptible to side-channel
attacks.

reference:
https://git.openembedded.org/openembedded-core/commit/?id=30a1cc225a2bd5d044bf608d863a67df3f9c03be

Upstream patch:
https://cgit.git.savannah.gnu.org/cgit/grub.git/commit/?id=0739d24cd1648531d0708d1079ff6bbfa6140268

(From OE-Core rev: d6572d29892b7da593acafe3af68cf98230acf04)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Praveen Kumar
9ae3736eb4 go: fix CVE-2025-47907
Cancelling a query (e.g. by cancelling the context passed to one of
the query methods) during a call to the Scan method of the returned
Rows can result in unexpected results if other queries are being made
in parallel. This can result in a race condition that may overwrite
the expected results with those of another query, causing the call to
Scan to return either unexpected results from the other query or an
error.

Made below changes for Go 1.17 backport:
- Replaced `atomic.Pointer[error]` with `atomic.Value`, since
  atomic pointers are not supported in Go 1.17.
- Used errp.(*error) to retrieve and dereference
  the stored *error, Without this, build fails with:
  invalid indirect of errp (type interface{}).
- Replaced Go 1.18 `any` keyword with `interface{}` for backward
  compatibility with Go 1.17.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47907

Upstream-patch:
8a924caaf3
298fe517a9
c23579f031

(From OE-Core rev: af9c43c39764ce9ce37785c44dfb83e25cb24703)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-03 09:51:17 -07:00
Steve Sakoman
51dc9c464d build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: d381eeb5e70bd0ce9e78032c909e4a23564f4dd7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:06:05 -07:00
Steve Sakoman
49e837cefa poky.conf: bump version for 4.0.30
(From meta-yocto rev: edf7950e4d81dd31f29a58acdd8022dabd2be494)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Joao Marcos Costa
03a1a4c956 ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry
There's a (second) overhead factor applied in images generated with Wic,
and this is already documented in the .wks reference. However, the
IMAGE_OVERHEAD_FACTOR entry does not mention it, and by looking at the
partition sizes (e.g. with parted) one may find it confusing that they
don't match with the expected rootfs size (e.g. in a scenario where the
extra space is "0" and IMAGE_OVERHEAD_FACTOR="1.0").

This second overhead is already documented, though:
https://docs.yoctoproject.org/ref-manual/kickstart.html#command-part-or-partition

Mention the '--overhead-factor' option in the glossary entry and add a
reference to the wks documentation.

(From yocto-docs rev: 71a3933c609ce73ff07e5be48d9e7b03f22ef8d7)

Signed-off-by: Joao Marcos Costa <joaomarcos.costa@bootlin.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b9040e20b015e9b02683ec3014e4ade5eb59d41a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Antonin Godard
0813376d84 dev-manual/security-subjects.rst: update mailing lists
Update mailing lists following changes by Michael Halstead
(https://lists.yoctoproject.org/g/yocto-security/message/1478).

Also fix formatting/spacing.

(From yocto-docs rev: 31f35193c61a1f0b4fd76f98887b709c48768121)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8066aa92a1acae6c99fbee92d24ee1feea65d974)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Jan Vermaete
5fc83da6b2 sdk: The main in the C example should return an int
see C17 (ISO/IEC 9899:2018)

(From yocto-docs rev: 1118f1bde785e153c4ddd2bf4e4d70f956fde948)

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1ebaed299f7ef80a49b68608f45bf25884900d13)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Lee Chee Yang
686d908085 migration-guides: add release notes for 4.0.29
(From yocto-docs rev: e4d3b5bb106d19e4ef224dc39ae970abed234814)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d3bbfed9cad4cda0960ee0623c728ea2a18e1b29)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Vijay Anusuri
9e8df15269 cups: Fix for CVE-2025-58060 and CVE-2025-58364
import patch from debian to fix
  CVE-2025-58060
  CVE-2025-58364

Upstream-Status: Backport [import from debian cups 2.4.2-3+deb12u9
Upstream commit
595d691075
&
e58cba9d6f]

(From OE-Core rev: 88585645a041c3c2ee7b39bf5f72885ed7c8775f)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Philip Lorenz
6d64cdb02b insane: Ensure that src-uri-bad fails correctly
`src-uri-bad` is missing the required call to `oe.qa.exit_if_errors` so
the corresponding task is not marked as failed when the QA check is
classified as an error.

This issue was fixed by the introduction of the do_recipe_qa task in
OE-core (e0c71367ab59021fc430ef215bbfc3b525036ba4) which is not part
of kirkstone yet.

(From OE-Core rev: 4b593ea8df9b1d3dda0adf38786845168360311f)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Richard Purdie
15535d452d insane: Improve patch warning/error handling
Currently, whilst patch errors or warnings are shown, the errors don't stop builds.
The configuration isn't very configurable from WARN_QA and ERROR_QA either.

This patch:
 * Uses the standard mechanisms to handle the patch fuzz warnings/errors
 * Makes Upstream-Status checking configurable from WARN/ERROR_QA
 * Allows that checking to be used with non-core layers
 * Makes patch-fuzz an error by default

(From OE-Core rev: 76a685bfcf927593eac67157762a53259089ea8a)

(From OE-Core rev: 4899961965d70281e63582234f0ed299431eff32)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3c3fd6a65e)

The backported commit was modified to not mark "patch-fuzz" as an error
by default (which retains compatibility with kirkstone behaviour).

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Hitendra Prajapati
d3568e56a7 go: ignore CVE-2024-24790
CVE-2024-24790:  net/netip module was introduced in go1.18beta1 via a59e33224e42d60a97fa720a45e1b74eb6aaa3d0

(From OE-Core rev: e304b139a8c43a88604ceb93aa933057b1e1748c)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-19 07:03:31 -07:00
Divya Chellam
ad403d6f6f wpa-supplicant: fix CVE-2022-37660
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful
PKEX association. An attacker that successfully bootstrapped public keys with
another entity using PKEX in the past, will be able to subvert a future bootstrapping
by passively observing public keys, re-using the encrypting element Qi and subtracting
it from the captured message M (X = M - Qi). This will result in the public ephemeral
key X; the only element required to subvert the PKEX association.

CVE-2022-37660-0001, CVE-2022-37660-0002, CVE-2022-37660-0003 and  CVE-2022-37660-0004
are dependent commits while CVE-2022-37660-0005 is actual CVE fix.

Reference:
https://security-tracker.debian.org/tracker/CVE-2022-37660

Upstream-patches:
https://git.w1.fi/cgit/hostap/commit/?id=9d3f347a2b14652e767d51142600206a32676b62
https://git.w1.fi/cgit/hostap/commit/?id=80213629981a21825e4688fde1b590e4c4d4bcea
https://git.w1.fi/cgit/hostap/commit/?id=bdcccbc2755dd1a75731496782e02b5435fb9534
https://git.w1.fi/cgit/hostap/commit/?id=d7be749335f2585658cf98c4f0e7d6cd5ac06865
https://git.w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4

(From OE-Core rev: 3dd917c52ace30607800f0b70a52a52662dda731)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-12 09:24:24 -07:00
Gyorgy Sarvari
7c76036780 llvm: fix typo in CVE-2024-0151.patch
During backporting the patch, accidentally a variable was removed.
In case the recipe is compiled for 32-bit Arm target, compilation
fails with the following error:

3.0.1-r0/git/llvm/lib/Target/ARM/ARMISelLowering.cpp:4481:13: error: 'RegVT' was not declared in this scope
|  4481 |         if (RegVT == MVT::f16 || RegVT == MVT::bf16)
|       |             ^~~~~

This patch corrects the patch, and adds back the removed RegVT variable.

(From OE-Core rev: 77f29f8fea58de40459186952d25279877ce4994)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-12 09:24:24 -07:00
Archana Polampalli
4f27d5ff82 ffmpeg: fix CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1.
This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c
of the component AAC Encoder. The manipulation leads to stack-based buffer overflow.
It is possible to initiate the attack remotely. The exploit has been disclosed to
the public and may be used.

(From OE-Core rev: 5a922eb95da7d373ee2bc3018065448fa128e69a)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-12 09:24:24 -07:00
Archana Polampalli
e9b1bb75ff ffmpeg: fix multiple CVEs
CVE-2023-6605:
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET
requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.

CVE-2023-6604:
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load
and storage consumption, potentially leading to degraded performance or denial of service
via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

CVE-2023-6602:
flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration
via improper parsing of non-TTY-compliant input files in HLS playlists.

(From OE-Core rev: aa68992ddc5744bb4fdbb3a3cd0636b303449be2)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-12 09:24:24 -07:00
Archana Polampalli
4415ab1560 ffmpeg: fix CVE-2025-7700
NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c)

(From OE-Core rev: a8344e051e4c705df69f4787726a9eca5c780eff)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-12 09:24:24 -07:00
Kyungjik Min
69d52fa539 pulseaudio: Add audio group explicitly
Since pulseaudio-server requires the audio group, we explicitly add it.

When use useradd-staticids or do not use the default group in
base-passwd, an error will occur because the audio group is not defined.

NOTE: pulseaudio: Performing useradd with [--root
TOPDIR/tmp/work/cortexa72-poky-linux/pulseaudio/17.0/recipe-sysroot
--home-dir /var/run/pulse --gid 998 --groups audio,pulse
--no-create-home --system --shell /bin/false --uid 998 pulse]
useradd: group 'audio' does not exist
ERROR: pulseaudio: useradd command did not succeed.

(From OE-Core rev: 71ed9d8394f7e625270ee66f9c2816bba4aa2016)

Signed-off-by: Kyungjik Min <dpmin7@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Deepak Rathore
6ae24cb3c6 default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
The default CONNECTIVITY_CHECK_URIS uses "https://yoctoproject.org/connectivity.html"
which redirect to "https://www.yoctoproject.org/connectivity.html".

Some network configurations with proxies or restricted internet access
don't handle HTTP redirects properly during the sanity check phase,
causing build failures with:

ERROR:  OE-core's config sanity checker detected a potential misconfiguration.
Either fix the cause of this error or at your own risk disable the checker (see sanity.conf).
Following is the list of potential problems / advisories:

Fetcher failure for URL: 'https://yoctoproject.org/connectivity.html'. URL doesn't work.

Updated the default URL to use the final destination directly to avoid
redirect-related connectivity check failures.

Also updated SDK test cases in https.py to use the corrected URL for
consistency.

(From OE-Core rev: aceb2920fbdef43db7b0b698865358e288901610)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 60cdf960a3560f391babd559737f1afb31fb2c5c)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Peter Marko
3899075ad9 sudo: remove devtool FIXME comment
This comment should not have been merged.
It shows that the license did not change.

(From OE-Core rev: 652986a4c67fc5d1c69cd3c2cb0d7f197b960be6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Peter Marko
9f689b3049 vim: upgrade 9.1.1198 -> 9.1.1652
Handles CVE-2025-53905, CVE-2025-53906, CVE-2025-55157, CVE-2025-55158.

Changes between 9.1.1198 -> 9.1.1652
====================================
https://github.com/vim/vim/compare/v9.1.1198...v9.1.1652

Refresh patches.

Disable newly introduced wayland support (in patch version 1485).
To this belongs also adding recursion in delete command for dir auto
which was newly failing as there is wayland directory inside now.
If someone is interested, this can be probably enabled, but without
additional work it results in compilation error due to function
redefinition conflicts.

(From OE-Core rev: e87d427d928234ef0441f9ce1fe8631fbe471094)

(From OE-Core rev: bd2dc808baec7e940a09f80afa2c2997efe7cbfe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Mingli Yu
57bd1bec8d vim: not adjust script pathnames for native scripts either
After the below commit introduced, the shebang size of native scripts
is also checked, so rework the patch to fix the gap.
377fe11bc0 insane.bbclass: Make do_qa_staging check shebangs

Fixes:
   ERROR: QA Issue: : /work/x86_64-linux/vim-native/9.0.0005-r0/sysroot-destdir/work/x86_64-linux/vim-native/9.0.0005-r0/recipe-sysroot-native/usr/share/vim/vim90/tools/mve.awk maximum shebang size exceeded, the maximum size is 128. [shebang-size]
   ERROR: QA Issue: : /work/x86_64-linux/vim-native/9.0.0005-r0/sysroot-destdir/work/x86_64-linux/vim-native/9.0.0005-r0/recipe-sysroot-native/usr/share/vim/vim90/tools/efm_perl.pl maximum shebang size exceeded, the maximum size is 128. [shebang-size]

(From OE-Core rev: 79232458b9cdc741a2049d83839af73f58a5554c)

(From OE-Core rev: 671f8cec8ef463d75e9393c5fc03cf913ef9edf6)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Praveen Kumar
e271e3cf36 git: fix CVE-2025-48384
Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals. When reading a config value, Git strips
any trailing carriage return and line feed (CRLF). When writing a
config entry, values with a trailing CR are not quoted, causing the CR
to be lost when the config is later read. When initializing a
submodule, if the submodule path contains a trailing CR, the altered
path is read resulting in the submodule being checked out to an
incorrect location. If a symlink exists that points the altered path
to the submodule hooks directory, and the submodule contains an
executable post-checkout hook, the script may be unintentionally
executed after checkout. This vulnerability is fixed in v2.43.7,
v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-48384

Upstream-patch:
05e9cd64ee

(From OE-Core rev: 34cb9674a5ce337a75af0dc415706d0323c427a6)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Yogita Urade
7e420c5834 tiff: fix CVE-2025-8851
A vulnerability was determined in LibTIFF up to 4.5.1. Affected
by this issue is the function readSeparateStripsetoBuffer of the
file tools/tiffcrop.c of the component tiffcrop. The manipulation
leads to stack-based buffer overflow. Local access is required to
approach this attack. The patch is identified as
8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to
apply a patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8851

Upstream patch:
8a7a48d7a6

(From OE-Core rev: 1ced84bbd4ab15f0f16176e367744b496a0ea97c)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Yogita Urade
999a2e1aa4 tiff: fix CVE-2025-8534
A vulnerability classified as problematic was found in libtiff
4.6.0. This vulnerability affects the function PS_Lvl2page of
the file tools/tiff2ps.c of the component tiff2ps. The
manipulation leads to null pointer dereference. It is possible
to launch the attack on the local host. The complexity of an
attack is rather high. The exploitation appears to be difficult.
The exploit has been disclosed to the public and may be used.
The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b.
It is recommended to apply a patch to fix this issue. One of the
maintainers explains, that "[t]his error only occurs if
DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD")
option is used."

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8534

Upstream patch:
6ba36f159f

(From OE-Core rev: c897368cd363d3e50372ab1fc95bc31f1a883dc4)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Yogita Urade
41c69cd099 tiff: fix CVE-2024-13978
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared
as problematic. Affected by this vulnerability is the function
t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps.
The manipulation leads to null pointer dereference. The attack needs to
be approached locally. The complexity of an attack is rather high. The
exploitation appears to be difficult. The patch is named
2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a
patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-13978

Upstream patch:
2ebfffb0e8

(From OE-Core rev: f6ff692be6b08290845b6c6c27eaf5d676476464)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-08 08:27:11 -07:00
Steve Sakoman
d655701622 Revert "sqlite3: patch CVE-2025-7458"
We have found that since this patch SELECT queries with
COUNT(DISTINCT(column)) seem to cause sqlite to segfault

This reverts commit 4d5093e5103016c08b3a32fd83b1ec9edd87cd5a.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:25:16 -07:00
Peter Marko
34ee6fc494 libarchive: patch regression of patch for CVE-2025-5918
Picked commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-5918

(From OE-Core rev: c947e01b3c27e9f08dc55ee4939d5537318f12e3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Peter Marko
ecef511127 dpkg: patch CVE-2025-6297
Pick commit per [1] from 1.22.x branch.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6297

(From OE-Core rev: aaf58c4ad69203a6437362ef130e8ed3ce267e81)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Peter Marko
b5d3231d38 glib-2.0: patch CVE-2025-7039
Pick commit per [1].
Also pick commit which changed the same code before to apply it cleanly.

[1] https://security-tracker.debian.org/tracker/CVE-2025-7039

(From OE-Core rev: 79355004da104587b2fb40dcb76053431c6a6182)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Peter Marko
f8c794053b qemu: ignore CVE-2024-7730
This CVE is for virtio-snd which was introduced in 8.2.0.
Therefore ignore this CVE for version 6.2.0.

(From OE-Core rev: 93545ef00c4930dd297649934bee0e95c520ee16)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Hitendra Prajapati
37f7f262e8 gstreamer1.0-plugins-base: fix CVE-2025-47807
Upstream-Status: Backport from 9e2238adc1

(From OE-Core rev: 8452fbdee00d27f2390dafa9d2ef14e7458baa70)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Vijay Anusuri
96973ede70 xserver-xorg: Fix for CVE-2025-49180
Upstream-Status: Backport from
3c3a4b767b
& 0235121c6a

(From OE-Core rev: 88abe8ec73f822b461670557539a7df0875325cc)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Vijay Anusuri
d0fd4d9160 xserver-xorg: Fix for CVE-2025-49179
import patch from debian to fix
  CVE-2025-49179

Upstream-Status: Backport [import from debian xorg-server_21.1.7-3+deb12u10.diff.gz
Upstream commit 2bde9ca49a]

(From OE-Core rev: da1b72e407190a81ac3bcc74a0ea51b4160cb5a9)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:33 -07:00
Vijay Anusuri
17e3bd9df8 xserver-xorg: Fix for CVE-2025-49178
Upstream-Status: Backport from d55c54cecb

(From OE-Core rev: 8d29231af51de235b99be0eeb71dfab41d67589d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:32 -07:00
Jiaying Song
d6f3ce1651 openssl: fix CVE-2023-50781
A flaw was found in m2crypto. This issue may allow a remote attacker to
decrypt captured messages in TLS servers that use RSA key exchanges,
which may lead to exposure of confidential or sensitive data.

The CVE-2023-50781 in M2Crypto is addressed by modifying OpenSSL because
M2Crypto relies on OpenSSL for its cryptographic operations.The issue
stems from OpenSSL’s RSA PKCS#1 v1.5 padding verification being
vulnerable to Bleichenbacher-type attacks.To mitigate this, OpenSSL
introduced an implicit rejection mechanism in the RSA PKCS#1 v1.5
padding.Therefore, resolving the vulnerability requires changes within
OpenSSL itself to ensure M2Crypto’s security.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-50781
https://github.com/openssl/openssl/pull/13817/commits
https://todo.sr.ht/~mcepl/m2crypto/342?__goaway_challenge=meta-refresh&__goaway_id=45a03d6accb7b343867110db1f7fb334

(From OE-Core rev: d24c4923d6f7a25bdc3ec5d4ac6bee32bb0bae88)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-29 08:33:32 -07:00
Youngseok Jeong
6b05a97369 libubootenv: backport patch to fix unknown type name 'size_t'
Fix:
../recipe-sysroot/usr/include/libuboot.h:29:2: error: unknown type name 'size_t'
size_t          envsize;
^

This error can be avoided by using CXXFLAGS:append = " -include cstddef"
but this way would be needed in all recipes that use libuboot.h.
Therefore, Backport the patch to include <cstddef> in C++ builds.

(From OE-Core rev: e401a16d8e26d25cec95fcea98d6530036cffca1)

Signed-off-by: Youngseok Jeong <youngseok1.jeong@lge.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Peter Marko
bedb86690f glib-2.0: ignore CVE-2025-4056
NVD report [1] says:
A flaw was found in GLib. A denial of service on **Windows platforms**
may occur if an application attempts to spawn a program using long
command lines.

The fix [3] (linked from [2]) also changes only files
glib/gspawn-win32-helper.c
glib/gspawn-win32.c

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-4056
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3668
[3] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4570

(From OE-Core rev: 8c69793deb78cf9718801825477938c22e229eca)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Hitendra Prajapati
6a6d768268 git: fix CVE-2025-27614-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835
Upstream-Status: Backport from from d61cfed2c2

(From OE-Core rev: a24e44f92114f995e034923a62b96947dc99d6e8)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Vijay Anusuri
1070bb4499 xserver-xorg: Fix for CVE-2025-49177
Upstream-Status: Backport from ab02fb96b1

(From OE-Core rev: b876a8c8dc9ffe288a41b18a61b4758ec52a115e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Vijay Anusuri
372bb5d81e xserver-xorg: Fix for CVE-2025-49176
Upstream-Status: Backport from
03731b326a
& 4fc4d76b2c

(From OE-Core rev: d1b634ce77b5d47b086a2c757acf50e6e002494b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Vijay Anusuri
169ae15f95 xserver-xorg: Fix for CVE-2025-49175
Upstream-Status: Backport from 0885e0b262

(From OE-Core rev: 23c1a62bced088cbc5eb31937bbc1e5d864213ab)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Hitendra Prajapati
68fd70f349 gstreamer1.0-plugins-good: fix CVE-2025-47183 & CVE-2025-47219
* CVE-2025-47183 - Upstream-Status: Backport from c4d0f4bbd9 && d76cae74da
* CVE-2025-47219 - Upstream-Status: Backport from b808039433

(From OE-Core rev: 0d923b416717d91142cced53961d853007a09daa)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Hitendra Prajapati
1e0216c6ba gstreamer1.0-plugins-base: fix CVE-2025-47806 & CVE-2025-47808
Backport fixes for:

* CVE-2025-47806 - Upstream-Status: Backport from  da4380c4df
* CVE-2025-47808 - Upstream-Status: Backport from  6b19f11751

(From OE-Core rev: 974670b83970f78edcb9f7d09ba34ec3a327320a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Dan McGregor
e1b698abcc systemd: Fix manpage build after CVE-2025-4598
The previous fix missed another cherry-pick that fixed building
manpages after the coredump patch. The version-info.xml file doesn't
exist in 250. It was introduced later, so remove the reference to
it.

(From OE-Core rev: 0a383ef579ffe5f5c4ef2c78040540f1332e4ea6)

Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 07:07:19 -07:00
Antonin Godard
39df9602b1 ref-manual/classes.rst: document the testexport class
This class has been in OE-Core for a while but never documented in the
reference manual. Add some description for it and link to the existing
documentation on it.

(From yocto-docs rev: 1576091585f8ffdcadd8b8eee525614ab16b6fa0)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 362a331255525fc853dab3af4ec905c417fabb0b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Antonin Godard
f81ed8523a ref-manual/variables.rst: document SPL_DTB_BINARY
This variable is part of uboot-sign but not documented.

(From yocto-docs rev: 1a07897a273867b4cf26759e88e423c552a09c4a)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 05eb461cb1da76ad9cbaf634da7f47447b3f6765)
[fix minor conflicts in classes.rst]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Antonin Godard
5d6f6b2619 ref-manual/variables.rst: document the FIT_CONF_PREFIX variable
Added by commit 7892ee3dc37d ("kernel-fitimage: allow overriding FIT
configuration prefix") in OE-Core, but never documented.

(From yocto-docs rev: cb410326e2093fd3bbfe4417c9d73ba0d379df7d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860891492b96eb127af5e7bab6348fca12167c68)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Erik Lindsten
79435187b1 overview-manual/yp-intro.rst: fix broken link to article
(From yocto-docs rev: c1aacca22e2ebd4e03076c2a3809caf38f3f3a5a)

Signed-off-by: Erik Lindsten <erik@awto.se>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b9680ad83ad3fc5e2b87594f7c62c057134d198b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Antonin Godard
f11ea352ef ref-manual/system-requirements.rst: update supported distributions
Update the distributions to match the list of workers on the
Autobuilder. This list was generated with the help of
yocto-autobuilder-helper/scripts/yocto-supported-distros.

Also:

- Sort the lists alphabetically.
- Fill the second list with EOL distros still running on the
  Autobuilder.

(From yocto-docs rev: 207477ddfead183f9df06215b1acb453138708cb)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Quentin Schulz
db89896907 go-helloworld: fix license
The example repo doesn't seem to have ever been under MIT to begin with
but rather Apache-2.0.

The license file exists in the sources, so use that one instead of
taking it from the OE-Core license directory.

License-Update: Incorrect license is now proper

(From OE-Core rev: 3d1c037a7cb7858a4e3c33a94f5d343a81aac5f7)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Guocai He
1afc7cf4cf gnupg: disable tests to avoid running target binaries at build time
By default, the tests are built and run at do_compile and we can see
errors like below in log.do_compile:

gnupg-2.3.7/tests/cms/inittests: line 99: ../../sm/gpgsm: cannot execute binary file: Exec format error

Note that the do_compile process still succeeds. However, we'd better avoid
executing these target binaries at build time.

(From OE-Core rev: b02f99a0b82ed55a07c00b32805ad676c04ee4ab)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(master rev: 74d48497470ce209bc6bdf49c2e2cfda67dce6ae)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Hitendra Prajapati
423e0ff3fb libxslt: fix CVE-2023-40403
Upstream-Status: Backport from  adebe45f6e && 1d9820635c && ccec6fa31d && 82f6cbf8ca && 452fb4ca9b

(From OE-Core rev: b77845d6fed5385de5789f8864fc399f82209ea1)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Peter Marko
8f356f507e libarchive: patch CVE-2025-5918
Pick 2 commits as in scarthgap branch plus one additional precondition
to apply those.

(From OE-Core rev: e43507dad134c5036be1c79a37f73c34f4fb6292)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Peter Marko
aa37836708 go: ignore CVE-2025-0913
This is problem on Windows platform only.

Per NVD report [1], CPE has "and" clause
Running on/with
 cpe:2.3microsoft:windows:-:*:*:*:*:*:*:*

Also linked patch [2] changes Windows files only (and tests).

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-0913
[2] https://go-review.googlesource.com/c/go/+/672396

(From OE-Core rev: 473da932a8f94b7454e0e13912753a7e7545fc17)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Peter Marko
e371e6b3a7 python3: patch CVE-2025-8194
Pick commit from 3.12 branch mentioned in NVD report.
https://nvd.nist.gov/vuln/detail/CVE-2025-8194

(From OE-Core rev: 4ae9daf3d05530952a8b002257dd9afda2e077e4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Yogita Urade
dc468377e8 tiff: fix CVE-2025-8177
A vulnerability was found in LibTIFF up to 4.7.0. It has been
rated as critical. This issue affects the function setrow of the
file tools/thumbnail.c. The manipulation leads to buffer overflow.
An attack has to be approached locally. The patch is named
e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to
apply a patch to fix this issue. This vulnerability only affects
products that are no longer supported by the maintainer.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8177

Upstream patch:
e8de4dc1f9

(From OE-Core rev: fbf3238630c104c9e17d6e902986358cea5986ff)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Yogita Urade
c2581b7811 tiff: fix CVE-2025-8176
A vulnerability was found in LibTIFF up to 4.7.0. It has
been declared as critical. This vulnerability affects the
function get_histogram of the file tools/tiffmedian.c. The
manipulation leads to use after free. The attack needs to
be approached locally. The exploit has been disclosed to
the public and may be used. The patch is identified as
fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended
to apply a patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8176

Upstream patches:
3994cf3b3b
ce46f002ec
ecc4ddbf1f

(From OE-Core rev: 5dbc4ccce8676b016de8c1393c2f0d0f74eb9337)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-18 13:18:01 -07:00
Steve Sakoman
81ab000fa4 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: bd620eb14660075fd0f7476bbbb65d5da6293874)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:32:44 -07:00
Steve Sakoman
3c825671cb poky.conf: bump version for 4.0.29
(From meta-yocto rev: e916d3bad58f955b73e2c67aba975e63cd191394)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:30:56 -07:00
Peter Marko
b4dcef5ed5 glibc: stable 2.35 branch updates
This is a single commit bump containing only CVE fix
$ git log --oneline d80401002011f470d9c6eb604bf734715e9b3a8c..a66bc3941ff298e474d5f02d0c3303401951141f
a66bc3941f posix: Fix double-free after allocation failure in regcomp (bug 33185)

Test results didn't change except newly added test succeeding.
(tst-regcomp-bracket-free)

Also add CVE-2025-0395 ignore which was already included in previous
hash bumps.

Also drop an unreferenced patch.

(From OE-Core rev: 3921549f6420e44a250d06cdef2c9d423fb6e39f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:30:56 -07:00
Peter Marko
a7f2f317f5 sqlite3: ignore CVE-2025-3277
The vulnerable code was introduced in 3.44.0 via [1].
(See fix commit [2])
Also Debian says "not vulnerabele yet for 3.40.1 in [3]

[1] e1e67abc5c
[2] https://sqlite.org/src/info/498e3f1cf57f164f
[3] https://security-tracker.debian.org/tracker/CVE-2025-3277

(From OE-Core rev: ebacd5cd2827c1a9a45a92353518f9d976597526)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:30:56 -07:00
Peter Marko
bedacbb603 sqlite3: patch CVE-2025-7458
Pick patch [1] listed in [2].
Also pick another patch which is precondition to this one introducing
variable needed for the check.

[1] https://sqlite.org/src/info/12ad822d9b827777
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-7458

(From OE-Core rev: 4d5093e5103016c08b3a32fd83b1ec9edd87cd5a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:30:56 -07:00
Zhang Peng
9e416e05f6 avahi: fix CVE-2024-52615
CVE-2024-52615:
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area
DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-52615]
[https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g]

Upstream patches:
[4e2e1ea090]

(From OE-Core rev: 7bd9fee6d654326ea921b51113de99f793e11545)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-08 06:30:55 -07:00
Marco Cavallini
f29a38bdcb dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
After compact vsdisk you have to detach it before exiting
  otherwise the vdisk remains attached.

  DISKPART> select vdisk file="<path_to_VHDX_file>"
  DISKPART> attach vdisk readonly
  DISKPART> compact vdisk
  DISKPART> detach     <------------ new missing command
  DISKPART> exit

(From yocto-docs rev: bf855ecaf4bec4cef9bbfea2e50caa65a8339828)

Signed-off-by: Marco Cavallini <m.cavallini@koansoftware.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1cc65ddf1a074f61fe5a63d222f3079b7fcb4c1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Vijay Anusuri
bc3d85398a sqlite3: Fix CVE-2025-6965
Upstream-Status: Backport from c52e9d97d4

(From OE-Core rev: b4a2f74ba0b40abcdf56c4b58cae5f7ce145d511)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Deepesh Varatharajan
31dd8d47a6 binutils: Fix CVE-2025-7545
objcopy: Don't extend the output section size
Since the output section contents are copied from the input, don't
extend the output section size beyond the input section size.

Backport a patch from upstream to fix CVE-2025-7545
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944]

(From OE-Core rev: 4f461ed46b7694fc4815c7f0504b9cefe5da8e19)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
7a75b9b4a7 libxml2: patch CVE-2025-6170
Pick commit referencing this CVE from 2.13 branch.

(From OE-Core rev: 9418c88c964dffc21abe6a056db72c3c81e25137)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
1e39b807b7 gnutls: patch CVE-2025-6395
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 3680d0e2021c609f624c2170b061e6696fd8254c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
a7033065b6 gnutls: patch CVE-2025-32990
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 33634900586ba8c502c3dd6bb4767da929dfd0d1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
ab47f0cc84 gnutls: patch CVE-2025-32988
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 3600752d06c14fcfa0bc1b96222cc6a164955bb5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
37cd90079b gnutls: patch reject zero-length version in certificate request
Pick relevant commit from 3.8.10 release MR [1].
The MR contains referece to undiscoled issue, so any security relevant
patch should be picked.

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 990bd6fab5c6004b9fbcdb9c76bcb3a96ba5887a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
5e3b686673 gnutls: patch read buffer overrun in the "pre_shared_key" extension
Pick relevant commit from 3.8.10 release MR [1].
The ME contains referece to undiscoled issue, so any security relevant
patch should be picked.

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 33181e3e8c7427fc823f750e936732b69e247987)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
9c13654827 gnutls: patch CVE-2025-32989
Pick relevant commit from 3.8.10 release MR [1].

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: fbe5f828c63071962d571a8787298aa5fd78ebe8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Peter Marko
fc448b1b26 dropbear: patch CVE-2025-47203
CVE patch [1] as mentioned in [2] relies on several patches not yet
available in version 2020.81 we have in kirkstone.
The good folks from Debian did the hard work identifying them as they
have the same version in bullseye release.
The commits were picked from [3] and they have their references to
dropbear upstream commits.

[1] e5a0ef27c2
[2] https://security-tracker.debian.org/tracker/CVE-2025-47203
[3] 7f48e75892

(From OE-Core rev: 91eeffaf14917c7c994a8de794b915231e69c5d6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 06:40:00 -07:00
Martin Jansa
1ccf83e5d5 db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14
* many configure tests (which might not fail before) are failing with gcc-14:
  # grep implicit build/config.log
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
  conftest.c:50:17: error: implicit declaration of function 'exit' [-Wimplicit-function-declaration]
  conftest.c:50:17: warning: incompatible implicit declaration of built-in function 'exit' [-Wbuiltin-declaration-mismatch]
  conftest.c:53:9: error: implicit declaration of function 'msem_init' [-Wimplicit-function-declaration]
  conftest.c:54:9: error: implicit declaration of function 'msem_lock' [-Wimplicit-function-declaration]
  conftest.c:55:9: error: implicit declaration of function 'msem_unlock' [-Wimplicit-function-declaration]
  conftest.c:56:9: error: implicit declaration of function 'exit' [-Wimplicit-function-declaration]
  conftest.c:56:9: warning: incompatible implicit declaration of built-in function 'exit' [-Wbuiltin-declaration-mismatch]
  conftest.c:50:9: error: implicit declaration of function '_spin_lock_try' [-Wimplicit-function-declaration]
  conftest.c:51:9: error: implicit declaration of function '_spin_unlock' [-Wimplicit-function-declaration]

* I have noticed this on db-native build on host with gcc-14
  where it caused fatal do_configure error:
  http://errors.yoctoproject.org/Errors/Details/784164/

  checking for mutexes... UNIX/fcntl
  configure: error: Support for FCNTL mutexes was removed in BDB 4.8.

  the config.log confirms it's because implicit-int:

  configure:22798: checking for mutexes
  configure:22925: gcc  -o conftest -isystem/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/usr/include -O2 -pipe  -isystem/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/usr/include -D_GNU_SOURCE -D_REENTRANT -L/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/usr/lib                         -L/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/lib                         -Wl,--enable-new-dtags                         -Wl,-rpath-link,/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/usr/lib                         -Wl,-rpath-link,/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/lib                         -Wl,-rpath,/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/usr/lib                         -Wl,-rpath,/OE/build/oe-core/tmp-glibc/work/x86_64-linux/db-native/5.3.28/recipe-sysroot-native/lib                         -Wl,-O1 conftest.c  -lpthread >&5
  conftest.c:47:1: error: return type defaults to 'int' [-Wimplicit-int]
     47 | main() {
        | ^~~~
  configure:22925: $? = 1
  configure: program exited with status 1

* comparing target db with and without this change shows following diff
  in log.do_configure:

  db $ diff 5.3.28*/temp/log.do_configure
  268c268
  < checking for mutexes... POSIX/pthreads/library
  ---
  > checking for mutexes... POSIX/pthreads/library/x86_64/gcc-assembly
  271c271
  < checking for atomic operations... no
  ---
  > checking for atomic operations... x86/gcc-assembly

(From OE-Core rev: 4d3ce333c10fadf746b6d8b55a88777c97e11ffa)

(From OE-Core rev: 277b5ec3c0212ca8600dd89d0a33f784a060131f)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6108da955e7c553247ff5356cf1c990b3d334edf)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Aleksandar Nikolic
ac7ccf3ea7 scripts/install-buildtools: Update to 4.0.28
Update to the 4.0.28 release of the 4.0 series for buildtools

(From OE-Core rev: 8e59118164d6468443db211d9ade058402f21add)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Deepesh Varatharajan
fe4b8e0b69 glibc: stable 2.35 branch updates
Below commits on glibc-2.35 stable branch are updated.

git log --oneline d2febe7c407665c18cfea1930c65f41899ab3aa3..80401002011f470d9c6eb604bf734715e9b3a8c2
8040100201 Fix error reporting (false negatives) in SGID tests
c6ec750be5 support: Pick group in support_capture_subprogram_self_sgid if UID == 0
c9e44b6467 support: Don't fail on fchown when spawning sgid processes
621c65ccf1 elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static
c7ff2bc297 Revert "elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static"
8624f6431b elf: Fix subprocess status handling for tst-dlopen-sgid (bug 32987)
ed10034f00 elf: Test case for bug 32976 (CVE-2025-4802)
08aea7712d support: Add support_record_failure_barrier
901e24b128 support: Use const char * argument in support_capture_subprogram_self_sgid
bff3b0f16c elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static

Dropped :
0025-CVE-2025-4802.patch
ed10034f00 elf: Test case for bug 32976 (CVE-2025-4802)

Test results:

             Before    after    diff
PASS          4833      4839      +6
XPASS            6         6       0
FAIL           133       130      -3
XFAIL           16        16       0
UNSUPPORTED    200       197      -3

Following commits improved test results:

8040100201 Fix error reporting (false negatives) in SGID tests
Improved SGID test handling by unifying error reporting and using secure temporary directories.
Replaced non-standard exit codes and fixed premature exits to avoid masking failures.
These changes reduced false negatives, increasing overall test pass rates.

8624f6431b elf: Fix subprocess status handling for tst-dlopen-sgid (bug 32987)
Fixed tst-dlopen-sgid false positives by correctly handling subprocess exit status (bug 32987).
Ensured test fails on abnormal or non-zero child exits.
This commit restores reliability in SGID testing and is the first step toward centralized SGID test error handling.

UNSUPPORTED tests changes
-UNSUPPORTED: elf/tst-env-setuid
-UNSUPPORTED: elf/tst-env-setuid-tunables
-UNSUPPORTED: stdlib/tst-secure-getenv

FAILed tests changes
-FAIL: elf/tst-dlopen-sgid
-FAIL: misc/tst-error1
-FAIL: resolv/tst-resolv-aliases

PASSed tests changes
+PASS: elf/tst-env-setuid
+PASS: elf/tst-env-setuid-tunables
+PASS: stdlib/tst-secure-getenv
+PASS: elf/tst-dlopen-sgid
+PASS: misc/tst-error1
+PASS: resolv/tst-resolv-aliases

(From OE-Core rev: 2ea1d2d9bc6d173a8a586542d47a7f8a443d24c1)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Peter Marko
7103a733a1 ncurses: patch CVE-2025-6141
Pick relevant part of snapshot commit 20250329, see [1].

That has:
add a buffer-limit check in postprocess_termcap (report/testcase by
Yifan Zhang).

[1] https://invisible-island.net/ncurses/NEWS.html#index-t20250329

(From OE-Core rev: 8d09a78a79d7f4b4ae9654bdcdf5f33dab9a8b95)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Rob Woolley
8fa7ff501e ruby: correct fix for CVE-2024-43398
The previous fix for CVE-2024-43398 did not include patches
to provide context for the changes it made.

This caused an exception at run-time when ruby parsed
rexml/parsers/baseparser.rb. This was first observed when using
ruby-native to build the sdformat recipe.

With these additional backports, the sdformat build proceeds
successfully. The REXML library was also tested manually on-target
with a script that used REXML::Document.new file to parse an
XML file.

(From OE-Core rev: 6bf00fde2d4043c6b558733a33041ce5694342d3)

Signed-off-by: Rob Woolley <rob.woolley@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Hitendra Prajapati
a485d82c25 libpam: fix CVE-2025-6020
Upstream-Status: Backport from 475bd60c55 && 592d84e126 && 976c200793

(From OE-Core rev: 4ff5111d2a758bacb803de981177799a8ac7fd0b)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Daniel Díaz
875170d8f8 ffmpeg: Ignore two CVEs fixed in 5.0.3
These two CVEs were fixed via the 5.0.3 release, and the
backported patches that fixed them were subsequently left
behind (although not deleted) by dadb16481810 ("ffmpeg:
upgrade 5.0.1 -> 5.0.3")

* CVE-2022-3109: An issue was discovered in the FFmpeg
  package, where vp3_decode_frame in libavcodec/vp3.c lacks
  check of the return value of av_malloc() and will cause a
  null pointer dereference, impacting availability.

* CVE-2022-3341: A null pointer dereference issue was
  discovered in 'FFmpeg' in decode_main_header() function of
  libavformat/nutdec.c file. The flaw occurs because the
  function lacks check of the return value of
  avformat_new_stream() and triggers the null pointer
  dereference error, causing an application to crash.

`bitbake ffmpeg` reports these two as "Unpatched".

Ignore them for now, until the NVD updates the versions where
these do not affect anymore.

(From OE-Core rev: 78aef4b1002c515aa2c1a64fea5bb013c9bc86a8)

Signed-off-by: Daniel Díaz <daniel.diaz@sonos.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Yogita Urade
87e1bc09ca gnupg: fix CVE-2025-30258
In GnuPG before 2.5.5, if a user chooses to import a certificate
with certain crafted subkey data that lacks a valid backsig or
that has incorrect usage flags, the user loses the ability to
verify signatures made from certain other signing keys, aka a
"verification DoS."

CVE-2025-30258-0002 is the dependent commit while rest
are CVE fixes.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-30258

Upstream patches:
https://dev.gnupg.org/rG25d748c3dfc0102f9e54afea59ff26b3969bd8c1
https://dev.gnupg.org/rG9cd371b12d80cfc5bc85cb6e5f5eebb4decbe94f
https://dev.gnupg.org/rGda0164efc7f32013bc24d97b9afa9f8d67c318bb
https://dev.gnupg.org/rG1e581619bf5315957f2be06b3b1a7f513304c126
https://dev.gnupg.org/rG4be25979a6b3e2a79d7c9667b07db8b09fb046e9

(From OE-Core rev: 467081219407cd30bcc9e575bedcb127b6bcea65)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Peter Marko
db3621b983 orc: set CVE_PRODUCT
There are new CVEs reported for this recipe which are not for this
componene, but for a component with same name from apache.

sqlite> select vendor, product, id, count(*) from products where product like 'orc' group by vendor, product, id;
apache|orc|CVE-2018-8015|1
apache|orc|CVE-2025-47436|4
gstreamer|orc|CVE-2024-40897|1

(From OE-Core rev: c31dec7b32fe34fafd61dd593a2884eee13084fb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Yash Shinde
47c3b0bc3f binutils: Fix CVE-2025-7546
Report corrupted group section instead of trying to recover.

CVE: CVE-2025-7546
Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b]
PR  33050 [https://sourceware.org/bugzilla/show_bug.cgi?id=33050]

(From OE-Core rev: 5860b954681c37ac6685631cce439fd349093689)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Richard Purdie
5a3578faec bitbake: test/fetch: Switch u-boot based test to use our own mirror
The upstream servers are having issues so switch to our own shadow copy
of the repo.

(Bitbake rev: 8e2d1f8de055549b2101614d85454fcd1d0f94b2)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-30 07:47:48 -07:00
Guocai He
f4219fb3e2 tcf-agent: correct the SRC_URI
The SRC_URI is changed to git://gitlab.eclipse.org/eclipse/tcf/tcf.agent.git

(From OE-Core rev: d9f424921179a52ffe053411c44f20e44e7deba1)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Ross Burton
0a3f902542 oeqa/core/decorator: add decorators to skip based on HOST_ARCH
There are already decorators to skip on the value of MACHINE, but for
flexibility it's better to skip based on the target architecture. This
means, for example, the ISO image tests could skip if the architecture
isn't x86.

(From OE-Core rev: a8381f4b7d7c294d9ad8a9d3f0b1f7c409753716)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 0c21ff0a92906b6b4820eb8beddf8762fe70653d)
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Deepesh Varatharajan
9b3bd34826 bintuils: stable 2.38 branch update
Below commit on binutils-2.38 stable branch are updated.

9bee8d65d32 x86: Check MODRM for call and jmp in binutils older than 2.45

                                 Before  After  Diff
No. of expected passes            280     280    0
No. of unexpected failures        2       2      0
No. of untested testcases         1       1      0
No. of unsupported tests          7       7      0

Testing was done and there were no regressions found

(From OE-Core rev: 7ac807166dfb6723f4e0b53c21f434e21d25563e)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Praveen Kumar
4d3871178a sudo: upgrade 1.9.15p5 -> 1.9.17p1
Changelog:
===========
* Fixed CVE-2025-32462.  Sudo's -h (--host) option could be specified
   when running a command or editing a file.  This could enable a
   local privilege escalation attack if the sudoers file allows the
   user to run commands on a different host.

* Fixed CVE-2025-32463.  An attacker can leverage sudo's -R
  (--chroot) option to run arbitrary commands as root, even if
  they are not listed in the sudoers file.  The chroot support has
  been deprecated an will be removed entirely in a future release.

License-Update: Copyright updated to 2025

0001-sudo.conf.in-fix-conflict-with-multilib.patch refreshed for 1.9.17

(From OE-Core rev: f8343726bca7f884213436cda3f51684c22ad3f1)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Chen Qi
ad1a2c9947 sudo: upgrade from 1.9.15p2 to 1.9.15p5
(From OE-Core rev: 4b2eccc0ee3f2906f9b04de194b9df6e24c2cdf4)

(From OE-Core rev: 9a604a05d4a8158742a2346fc7ebc3c99e58eeb7)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 468633036c)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Archana Polampalli
de4b007ac0 gdk-pixbuf: fix CVE-2025-7345
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function
(io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing
maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding,
allowing out-of-bounds reads from heap memory, potentially causing application crashes or
arbitrary code execution.

(From OE-Core rev: 1803f965e4990be3fbdcd52544f0080e9c83800d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Peter Marko
86182e972c iputils: patch CVE-2025-48964
Pick commit referencing this CVE.

(From OE-Core rev: 49ccf7b56a0598f84dcac2532c462aa2c285f66c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Peter Marko
e8aec82955 ghostscript: ignore CVE-2025-46646
The code patched by [1] which fixes this CVE is not available in 9.55.0.
Also Debian says in [2] that even 10.0.0 is not yet affected.

[1] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f
[2] https://security-tracker.debian.org/tracker/CVE-2025-46646

(From OE-Core rev: a3e02ed74db2c234b7c3718b4d6b5332468de226)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Archana Polampalli
b6acab6e64 ofono: fix CVE-2023-4235
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug
is triggered within the decode_deliver_report() function during the SMS decoding.
It is assumed that the attack scenario is accessible from a compromised modem,
a malicious base station, or just SMS. There is a bound check for this memcpy
length in decode_submit(), but it was forgotten in decode_deliver_report().

(From OE-Core rev: 3a3519324ec390044ff9f97c0f32027782699124)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Archana Polampalli
d668325fd8 ofono: fix CVE-2023-4232
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug
is triggered within the decode_status_report() function during the SMS decoding.
It is assumed that the attack scenario is accessible from a compromised modem,
a malicious base station, or just SMS. There is a bound check for this memcpy
length in decode_submit(), but it was forgotten in decode_status_report().

(From OE-Core rev: 02005c81a55930d9f57d44674cdc5eb6171c8c76)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Archana Polampalli
78620e54fd openssl: fix CVE-2024-41996
Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol,
when an approved safe prime is used, allows remote attackers (from the client side) to
trigger unnecessarily expensive server-side DHE modular-exponentiation calculations.
The client may cause asymmetric resource consumption. The basic attack scenario is that
the client must claim that it can only communicate with DHE, and the server must be
configured to allow DHE and validate the order of the public key.

Reference:
https://github.com/openssl/openssl/pull/25088

(From OE-Core rev: 635fc639a13a6b28cac5c67cff23b7f4477bc41c)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Peter Marko
d3219fb24b openssl: upgrade 3.0.16 -> 3.0.17
Release information:
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3016-and-openssl-3017-1-jul-2025

(From OE-Core rev: 678f4f98f145c887a220b846babc9648ea6ff974)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Peter Marko
843820d9e4 python3: update CVE product
There are two "new" CVEs reported for python3, their CPEs are:
* CVE-2020-1171: cpe:2.3🅰️microsoft:python:*:*:*:*:*:visual_studio_code:*:* (< 2020.5.0)
* CVE-2020-1192: cpe:2.3🅰️microsoft:python:*:*:*:*:*:visual_studio_code:*:* (< 2020.5.0)
These are for "Visual Studio Code Python extension".

Solve this by addding CVE vendor to python CVE product to avoid
confusion with Microsoft as vendor.

Examining CVE DB for historical python entries shows:
sqlite> select vendor, product, count(*) from products where product = 'python' or product = 'cpython'
   ...> or product like 'python%3' group by vendor, product;
microsoft|python|2
python|python|1054
python_software_foundation|python|2

(From OE-Core rev: 06f615e6939a22bc8f12b30d8dea582ab3ccebe6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Hitendra Prajapati
c0623fde1f libxml2: fix CVE-2025-49794 & CVE-2025-49796
Upstream-Status: Backport from 71e1e8af5e

(From OE-Core rev: 691b74a5d019752428adc81b114fb4458ece1ebe)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Chen Qi
7def40e0b1 coreutils: fix CVE-2025-5278
Backport patch to fix CVE-2025-5278.
The patch is adjusted to fit 9.0 version. And the test case is
also adjusted to avoid using valgrind. valgrind in kirkstone is
reporting errors for coreutils' sort utility with/without this patch.
To avoid ptest failure, we disable valgrind explicitly.

(From OE-Core rev: bb7dbb195b55d9aaa0180906843f5af2dcf7509f)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Steve Sakoman
be98aa95ad Revert "coreutils: fix CVE-2025-5278"
Failing ptest with valgrind on target

This reverts commit 4e55668ef07d99d8c1141c2f4270f43f5b280159.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-18 08:32:26 -07:00
Enrico Jörns
4ee43d7d68 conf.py: improve SearchEnglish to handle terms with dots
While search queries already handled words with hyphens correctly, they
did not do so for words with dots.

To fix this, we

- enhance the word tokenizer to treat both dots ('.') and hyphens ('-')
  as valid characters within words.
  (For robustness, explicitly exclude dots/hyphens at the start or end
  of a word from indexing.)
- adjust query processing to avoid splitting on dots in search input

This allows search queries to correctly match terms such as
'local.conf', 'site.conf', and similar ones now.

Fixes: [YOCTO #14534]

(From yocto-docs rev: 02cc810c17e37563a206629d703dc21fc4280cbf)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 80084a4cabdf7f61c7e93eda8ddbd5bc7d54e041)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Antonin Godard
cb43809aa3 overview-manual/concepts.rst: fix sayhello hardcoded bindir
Replace the hardcoded /usr/bin by ${bindir}, as it should be.

Reported-by: Thomas Perrot <thomas.perrot@bootlin.com>
(From yocto-docs rev: 574aff4830ba20ee4471e15656ca5de22a743c37)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 576677eae6960dbc2d2ececeba0fde5bba7bb69f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Lee Chee Yang
e4547e0671 migration-guides: add release notes for 4.0.28
(From yocto-docs rev: 38c07a373c05e35ec98180c3e0958e41512902a2)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6959193fddb039c34384fcc391195fdd7fd3dbb8)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Bruce Ashfield
9f2ecf7157 linux-yocto/5.15: update to v5.15.186
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    3dea0e7f549e Linux 5.15.186
    e3ff9f86cdb7 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
    8e31c6cc3cba scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
    92750bfe7b0d arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
    a9f6aab7910a perf: Fix sample vs do_exit()
    4be8065eace7 s390/pci: Fix __pcilg_mio_inuser() inline assembly
    6d7fcd8a7a42 bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
    f02c9c448e50 net: Fix checksum update for ILA adj-transport
    ecbea1a5fec5 ext4: avoid remount errors with 'abort' mount option
    1578f57a3fc3 ext4: make 'abort' mount option handling standard
    ef5706bed97e mm/huge_memory: fix dereferencing invalid pmd migration entry
    956b5aebb349 net_sched: sch_sfq: reject invalid perturb period
    6c589aa31802 net_sched: sch_sfq: move the limit validation
    6b96d7a9e8e7 net_sched: sch_sfq: use a temporary work area for validating configuration
    1b562b7f9231 net_sched: sch_sfq: don't allow 1 packet limit
    548cf048b426 net_sched: sch_sfq: handle bigger packets
    8a1eca898580 net_sched: sch_sfq: annotate data-races around q->perturb_period
    98236b25d03f arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
    df53d4187092 arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
    993f63239c21 arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
    d759395f25ca arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually
    fc061c32e327 arm64: proton-pack: Expose whether the branchy loop k value
    005f3b7bd378 arm64: proton-pack: Expose whether the platform is mitigated by firmware
    3af65d4123fe arm64: insn: Add support for encoding DSB
    803228bb5ad9 arm64: insn: add encoders for atomic operations
    0fc6db6d17bb arm64: move AARCH64_BREAK_FAULT into insn-def.h
    cebd765ba328 Revert "cpufreq: tegra186: Share policy per cluster"
    9051e4373dd1 serial: sh-sci: Increment the runtime usage counter for the earlycon device
    ee195051be2d ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
    1a233520de8c ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    57a00096a11b ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
    ca3829c18c8d net: atm: fix /proc/net/atm/lec handling
    17e156a94e94 net: atm: add lec_mutex
    dc724bd34d56 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
    8595350615f9 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
    d54e0c077b7c tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
    1b0ad1870491 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
    d8cd847fb862 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
    527fad1ae32f wifi: carl9170: do not ping device which has failed to load firmware
    5adc79cfdd21 ptp: fix breakage after ptp_vclock_in_use() rework
    b52215848977 net: ice: Perform accurate aRFS flow match
    ef0b5bbbed7f aoe: clean device rq_list in aoedev_downdev()
    f90220fc4a5f pldmfw: Select CRC32 when PLDMFW is selected
    ef3f3face5d0 hwmon: (occ) fix unaligned accesses
    a5537ce4a98a hwmon: (occ) Rework attribute registration for stack usage
    6e757e3c5728 hwmon: (occ) Add soft minimum power cap attribute
    f4999111956a drm/nouveau/bl: increase buffer size to avoid truncate warning
    3fc1401476cb drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
    760e9efae70f erofs: remove unused trace event erofs_destroy_inode
    a3d864c901a3 mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
    8410996eb6fe mm: hugetlb: independent PMD page table shared count
    366298f2b04d mm/hugetlb: unshare page tables during VMA split, not before
    37d49f91e523 iio: accel: fxls8962af: Fix temperature calculation
    8f5fcf574eed ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
    639b31e38853 ALSA: hda/intel: Add Thinkpad E15 to PM deny list
    a8aec0d35e93 ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
    a4a4abc818de Input: sparcspkr - avoid unannotated fall-through
    add2a8e193f3 block: default BLOCK_LEGACY_AUTOLOAD to y
    1df80d748f98 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
    287b4f085d2c atm: Revert atm_account_tx() if copy_from_iter_full() fails.
    6500f360a435 selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
    06780dbaa929 selftests/x86: Add a test to detect infinite SIGTRAP handler loop
    9d83ca27a634 udmabuf: use sgtable-based scatterlist wrappers
    3f6e9a24abeb scsi: s390: zfcp: Ensure synchronous unit_add
    f65f2291e795 scsi: storvsc: Increase the timeouts to storvsc_timeout
    f41c62532877 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
    4adee34098a6 jffs2: check that raw node were preallocated before writing summary
    58f664614f8c drivers/rapidio/rio_cm.c: prevent possible heap overwrite
    a41f447cb27a Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
    96baba48722b powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
    25375f0d0b6c platform/x86: dell_rbu: Stop overwriting data buffer
    07d7b8e7ef7d platform/x86: dell_rbu: Fix list usage
    b90dd5b12152 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
    dd89a7e18c9c tee: Prevent size calculation wraparound on 32-bit kernels
    a5cc6ccac4d9 ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
    73f3d6261ac4 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
    04584bba3249 watchdog: da9052_wdt: respect TWDMIN
    5e615cecf32e octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
    5badeca146b2 bpf, sockmap: Fix data lost during EAGAIN retries
    fecb2fc3fc10 i40e: fix MMIO write access to an invalid page in i40e_clear_hw
    cafc3c567e4e sock: Correct error checking condition for (assign|release)_proto_idx()
    d34f2384d6df scsi: lpfc: Use memcpy() for BIOS version
    eb295874a43c pinctrl: mcp23s08: Reset all pins to input at probe
    56ce76e8d406 software node: Correct a OOB check in software_node_get_reference_args()
    9d9513b44446 vxlan: Do not treat dst cache initialization errors as fatal
    410a033bfa8c net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
    c9bfb30b75c3 iommu/amd: Ensure GA log notifier callbacks finish running before module unload
    7cf3c7bd83ee scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
    2fc2e9e865cc libbpf: Add identical pointer detection to btf_dedup_is_equiv()
    59bbff4eedff clk: rockchip: rk3036: mark ddrphy as critical
    d7ef254e7207 wifi: mac80211: do not offer a mesh path if forwarding is disabled
    0d4a81c341eb net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
    4bcc11448b16 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
    c871d2b85c57 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
    0245c91f4fdc pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
    017035aaff2b pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
    fbab07112a9e net: atlantic: generate software timestamp just before the doorbell
    c1ee5f16757a ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
    97033659fc83 tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
    a7d4705f60b6 tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
    8ce9d65726d5 net: dlink: add synchronization for stats update
    ef1b88325c74 i2c: npcm: Add clock toggle recovery
    b08e4cebc034 cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
    c0952a626fd9 sctp: Do not wake readers in __sctp_write_space()
    70da1f7eb88a wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
    add1804ea2e0 emulex/benet: correct command version selection in be_cmd_get_stats()
    b0e79c9cc207 i2c: designware: Invoke runtime suspend on quick slave re-registration
    d99e45521ebb tipc: use kfree_sensitive() for aead cleanup
    722e716966c2 net: macb: Check return value of dma_set_mask_and_coherent()
    1cf0a6f43399 cpufreq: Force sync policy boost with global boost on sysfs update
    ca41c10be569 thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+
    9a317e436265 pmdomain: ti: Fix STANDBY handling of PER power domain
    794b0efb20a8 nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
    febbe1ce4c77 media: i2c: imx334: update mode_3840x2160_regs array
    bb97dfab7615 media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
    7a209e4b6b2a media: tc358743: ignore video while HPD is low
    ba5026e805cb drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
    0a51b85b9960 drm/msm/dpu: don't select single flush for active CTL blocks
    4a8cb9908b51 jfs: Fix null-ptr-deref in jfs_ioc_trim
    258c755b28f6 drm/amdgpu/gfx9: fix CSIB handling
    7715a25c8930 drm/amdgpu/gfx8: fix CSIB handling
    603c8dd458da ext4: prevent stale extent cache entries caused by concurrent get es_cache
    05aba2d316db sunrpc: fix race in cache cleanup causing stale nextcheck time
    979408dbd76f media: rkvdec: Initialize the m2m context before the controls
    f29503cd7a1e media: ti: cal: Fix wrong goto on error path
    44618bee303b jfs: fix array-index-out-of-bounds read in add_missing_indices
    e3bb0c5a3071 ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space()
    5179d4cf092e drm/amdgpu/gfx7: fix CSIB handling
    9cb5da9c83a8 media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
    dc2aa8079d78 media: ccs-pll: Better validate VT PLL branch
    b6fa8b7b8a64 drm/amdgpu/gfx10: fix CSIB handling
    1db83a0b4f1f media: i2c: imx334: Fix runtime PM handling in remove function
    498e95513b5b drm/msm/a6xx: Increase HFI response timeout
    6a4d3708dec4 drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
    bc487c490b75 media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
    b905b9926ee1 drm/msm/hdmi: add runtime PM calls to DDC transfer function
    fce2d5e2b3ce media: i2c: imx334: Enable runtime PM before sub-device registration
    bcc8724b34c5 drm/bridge: anx7625: change the gpiod_set_value API
    66e84439ec2a exfat: fix double free in delayed_free
    3742e777735a drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
    fbee3fe40ca2 sunrpc: update nextcheck time when adding new cache entries
    767e4d5300ea drm/amdgpu/gfx6: fix CSIB handling
    767af6fc3787 ACPI: battery: negate current when discharging
    abd7d5fb3394 PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
    82608027b6e7 ASoC: tegra210_ahub: Add check to of_device_get_match_data()
    64cc1a4a4440 ACPICA: utilities: Fix overflow check in vsnprintf()
    6336d96ae88f power: supply: bq27xxx: Retrieve again when busy
    960236150cd3 ACPICA: fix acpi parse and parseext cache leaks
    49047b184f2b ACPI: bus: Bail out if acpi_kobj registration fails
    15fa571eedf1 ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
    6448774d5889 ACPICA: Avoid sequence overread in call to strncmp()
    106a648780bf clocksource: Fix the CPUs' choice in the watchdog per CPU verification
    5a68893b594e ACPICA: fix acpi operand cache leak in dswstate.c
    bf68c0f4c75f iio: adc: ad7606_spi: fix reg write value mask
    4b2fac04ed6f iio: imu: inv_icm42600: Fix temperature calculation
    e401d55901a8 iio: accel: fxls8962af: Fix temperature scan element sign
    fe551adf4bd3 PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
    ff1283be679c PCI: Fix lock symmetry in pci_slot_unlock()
    a040e7effbb6 PCI: Add ACS quirk for Loongson PCIe
    2fd7537ffd9c PCI: cadence-ep: Correct PBA offset in .set_msix() callback
    8ec133fb054a uio_hv_generic: Use correct size for interrupt and monitor pages
    3562c09feeb8 remoteproc: core: Release rproc->clean_table after rproc_attach() fails
    c56d6ef2711e remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
    fbf3da023bd2 regulator: max14577: Add error check for max14577_read_reg()
    5155f04287e5 mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
    2ec9fda98d1a staging: iio: ad5933: Correct settling cycles encoding per datasheet
    9da3e442714f net: ch9200: fix uninitialised access during mii_nway_restart
    6805582abb72 ftrace: Fix UAF when lookup kallsym after ftrace disabled
    445e7055a68d dm-mirror: fix a tiny race condition
    ee3639385312 mtd: nand: sunxi: Add randomizer configuration before randomizer enable
    45413b242513 mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
    6fe586c14d8f mm: fix ratelimit_pages update error in dirty_ratio_handler()
    3b4a50d733ac RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
    74bc813d11c3 ipc: fix to protect IPCS lookups using RCU
    b0dba0c78323 clk: meson-g12a: add missing fclk_div2 to spicc
    1fd94aa3fff0 parisc: fix building with gcc-15
    bf9c07864765 vgacon: Add check for vc_origin address range in vgacon_scroll()
    1a10d91766eb fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
    1ee9bab20949 EDAC/altera: Use correct write width with the INTTEST register
    ac6992f72bd8 NFC: nci: uart: Set tty->disc_data only in success path
    38ef48a8afef f2fs: fix to do sanity check on sit_bitmap_size
    fbfe8446cd32 f2fs: prevent kernel warning due to negative i_nlink from corrupted image
    e5a2481dc2a0 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
    a597a609bfd4 ext4: ensure i_size is smaller than maxbytes
    9004a1cc5cfc ext4: factor out ext4_get_maxbytes()
    c6187eb191a2 ext4: fix calculation of credits for extent tree modification
    9d1d1c5bf4fc ext4: inline: fix len overflow in ext4_prepare_inline_data
    01cf92dfced5 bus: fsl-mc: fix GET/SET_TAILDROP command ids
    0997566153bd bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
    7fc89c218fc9 ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
    312c121beb9c can: tcan4x5x: fix power regulator retrieval during probe
    516fdd430171 bus: mhi: host: Fix conflict between power_up and SYSERR
    0e8878685902 ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
    22441bf144ad ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
    b592691f650c media: uvcvideo: Fix deferred probing error
    739359516f96 media: uvcvideo: Send control events for partial succeeds
    e1019ff183fb media: uvcvideo: Return the number of processed controls
    89b5ab822bf6 media: vivid: Change the siize of the composing
    7e62be1f3b24 media: vidtv: Terminating the subsequent process of initialization failure
    230c37b5948d media: videobuf2: use sgtable-based scatterlist wrappers
    42f3fdd39fbd media: venus: Fix probe error handling
    8b451a9a46f2 media: v4l2-dev: fix error handling in __video_register_device()
    a4c47df59539 media: gspca: Add error handling for stv06xx_read_sensor()
    41807a5f6742 media: cxusb: no longer judge rbuf when the write fails
    6f79b25ddfe9 media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
    0220fe256b44 media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
    64f7f8c362ab media: ccs-pll: Start OP pre-PLL multiplier search from correct value
    fe52765d1c90 media: ccs-pll: Start VT pre-PLL multiplier search from correct value
    7fce1722991d media: ov8856: suppress probe deferral errors
    55fed78e52fe wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
    43d5e3bb5f1d jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
    0fccf5f01ed2 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
    425efc6b3292 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
    1f7f8168abe8 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
    8d5510e94dab net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
    ea4b1cb6561e net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
    b0e86598e073 powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
    2023dea8dd9b ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
    190dcc1e3f6b ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
    5a16ebe0050e gfs2: move msleep to sleepable context
    e4da95e1246f crypto: marvell/cesa - Do not chain submitted requests
    8cb51a55b26e configfs: Do not override creating attribute file failure in populate_attrs()
    4ad892bdacb6 xfs: allow inode inactivation during a ro mount log recovery
    7eac413a3ea3 kbuild: hdrcheck: fix cross build with clang
    1b8763684529 kbuild: userprogs: fix bitsize and target detection on clang
    117ea3f4e59c drm/meson: Use 1000ULL when operating with mode->clock
    56e5419b5f5c net: usb: aqc111: debug info before sanitation
    3f77ba79a36d calipso: unlock rcu before returning -EAFNOSUPPORT
    2dace5e016c9 x86/iopl: Cure TIF_IO_BITMAP inconsistencies
    2a04a591170f xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
    e67c0dac405a usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
    8bc30532b978 usb: Flush altsetting 0 endpoints before reinitializating them after reset.
    f78b3fdd2c7f usb: cdnsp: Fix issue with detecting USB 3.2 speed
    8c65ca53c2e6 usb: cdnsp: Fix issue with detecting command completion event
    b4209e4b778e VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
    6d929bef6bda usb: usbtmc: Fix read_stb function and get_stb ioctl
    4751118c3ed8 drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
    510ce6a1393c kbuild: Add KBUILD_CPPFLAGS to as-option invocation
    0690824cc325 kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
    f85d6a08cc9f kbuild: Add CLANG_FLAGS to as-instr
    d36719f29376 mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
    d08146795689 drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
    cefb372db498 kbuild: Update assembler calls to use proper flags and language target
    3b68784d1439 MIPS: Prefer cc-option for additions to cflags
    3ef47d2b7a41 MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
    aaf384815bc1 x86/boot/compressed: prefer cc-option for CFLAGS additions
    2f3daa04a932 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
    c8c4f0c2684a ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
    4a07125cc40d perf: Ensure bpf_perf_link path is properly serialized
    929d62e86f0c nvmet-fcloop: access fcpreq only when holding reqlock
    64007aab1cf6 fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    0b479d0aa488 net_sched: ets: fix a race in ets_qdisc_change()
    52247723c300 sch_ets: make est_qlen_notify() idempotent
    852d27f773a7 net_sched: tbf: fix a race in tbf_change()
    110a47efcf23 net_sched: red: fix a race in __red_change()
    20f68e6a9e41 net_sched: prio: fix a race in prio_tune()
    dc84c55f121d net/mlx5: Fix return value when searching for existing flow group
    7ec31c2003f9 net/mlx5: Ensure fw pages are always allocated on same NUMA
    014ad9210373 net/mdiobus: Fix potential out-of-bounds read/write access
    694456462ed6 net: mdio: C22 is now optional, EOPNOTSUPP if not provided
    268625b73e4c macsec: MACsec SCI assignment for ES = 0
    6fa68d7eab34 net: Fix TOCTOU issue in sk_is_readable()
    15e46043bc46 i40e: retry VFLR handling if there is ongoing VF reset
    5008c550c634 i40e: return false from i40e_reset_vf if reset is in progress
    597b481ca1ce drm/meson: fix more rounding issues with 59.94Hz modes
    bd27ff504e4d drm/meson: use vclk_freq instead of pixel_freq in debug print
    f5d21eae4d7c drm/meson: fix debug log statement when setting the HDMI clocks
    363e63997798 drm/meson: use unsigned long long / Hz for frequency types
    7298df96179b powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
    81260c41b518 powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
    5814a7fc3abb net_sched: sch_sfq: fix a potential crash on gso_skb handling
    75ad1ca646ee scsi: iscsi: Fix incorrect error path labels for flashnode operations
    5c89dc8c3461 ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    5d217e7031a5 ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
    f592eb12b43f scsi: core: ufs: Fix a hang in the error handler
    5f30a81fc188 serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    b7f05abd60f0 serial: sh-sci: Move runtime PM enable to sci_probe_single()
    7857505af578 serial: sh-sci: Check if TX data was written to device in .tx_empty()
    e82d6c45db4f arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
    c3b4bc986af5 arm64: dts: ti: k3-am65-main: Fix sdhci node properties
    29f0cd61d6b5 arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
    f3c2b179b413 Input: synaptics-rmi - fix crash with unsupported versions of F34
    17e5ca8ef81c Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
    ef0c767a559b pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
    432a171d6005 do_change_type(): refuse to operate on unmounted/not ours mounts
    eb34dc108e3e fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    668923c47460 seg6: Fix validation of nexthop addresses
    18e65229a328 wireguard: device: enable threaded NAPI
    b5ad58285f92 netfilter: nf_set_pipapo_avx2: fix initial map fill
    ae98a1787fdc gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
    277006dd681e PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    61f418cd4ea5 vmxnet3: correctly report gso type for UDP tunnels
    6ef8dfb1b68f net: dsa: tag_brcm: legacy: fix pskb_may_pull length
    d94c6f53b0a7 ice: create new Tx scheduler nodes for new queues only
    96bc5ce57b16 Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
    02f56169e6eb spi: bcm63xx-hsspi: fix shared reset
    bb9c9e989a80 spi: bcm63xx-spi: fix shared reset
    417e17c44f3d net/mlx4_en: Prevent potential integer overflow calculating Hz
    605f09ae583e driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
    e0b11227c4e8 net: tipc: fix refcount warning in tipc_aead_encrypt
    54e7ce239d69 gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
    28dd08343cc5 net: stmmac: platform: guarantee uniqueness of bus_id
    dae5b8818593 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
    38c5712df50d MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
    2659abc74cb3 iio: adc: ad7124: Fix 3dB filter frequency reading
    19fd9f5a6936 serial: Fix potential null-ptr-deref in mlb_usio_probe()
    0a1e16a6cbf4 usb: renesas_usbhs: Reorder clock handling and power management in probe
    6c1344a5bb1c PCI/DPC: Initialize aer_err_info before using it
    9f133e04c622 dmaengine: ti: Add NULL check in udma_probe()
    3e7061f62bd7 PCI: cadence: Fix runtime atomic count underflow
    19f0d83e1450 rtc: sh: assign correct interrupts with DT
    92270f14a8c1 nfs: ignore SB_RDONLY when remounting nfs
    3293cc462518 nfs: clear SB_RDONLY before getting superblock
    477c4882e53e perf record: Fix incorrect --user-regs comments
    00b96ed79bce perf tests switch-tracking: Fix timestamp comparison
    f93ea1e5e185 mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
    f79f8d8dda3a mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
    e009779acc04 rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
    e8461ec67a36 remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
    8d39a6fd9843 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
    9d06ac32c202 backlight: pm8941: Add NULL check in wled_configure()
    07a4014cc66b perf ui browser hists: Set actions->thread before calling do_zoom_thread()
    c6dbaf7e31cb perf build: Warn when libdebuginfod devel files are not available
    2d63433e8eaa fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
    1fd889c14572 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
    0fab016dc4aa soc: aspeed: lpc: Fix impossible judgment condition
    3a2249e91547 arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
    26e868438691 ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
    7002b954c4a8 bus: fsl-mc: fix double-free on mc_dev
    1ce784ddfb31 nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
    c155d46ff02c nilfs2: add pointer check for nilfs_direct_propagate()
    1a955db41131 ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
    5c51aa862cbe Squashfs: check return result of sb_min_blocksize
    ca87e905ff3c arm64: dts: imx8mn-beacon: Fix RTC capacitive load
    485f23661881 arm64: dts: imx8mm-beacon: Fix RTC capacitive load
    d274c1372926 ARM: dts: at91: at91sam9263: fix NAND chip selects
    dac5dfede03f ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
    8636cafb2c67 f2fs: fix to correct check conditions in f2fs_cross_rename
    e61079985c54 f2fs: use d_inode(dentry) cleanup dentry->d_inode
    92dd2d870e7b net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
    ad17eb86d042 net: openvswitch: Fix the dead loop of MPLS parse
    26ce90f1ce60 calipso: Don't call calipso functions for AF_INET sk.
    7d589b470f39 net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
    e7fb4ebee6e9 bpf: Avoid __bpf_prog_ret0_warn when jit fails
    f398d2dfe450 net: usb: aqc111: fix error handling of usbnet read calls
    42a44e25eee4 netfilter: nft_tunnel: fix geneve_opt dump
    4edb40b05cb6 bpf, sockmap: Avoid using sk_socket after free when sending
    d796723b1481 vfio/type1: Fix error unwind in migration dirty bitmap allocation
    83c1ed5c83ca netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
    7ee3fb6258da wifi: ath9k_htc: Abort software beacon handling if disabled
    1ee8ea6937d1 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
    7f9efa13f2af s390/bpf: Store backchain even for leaf progs
    2b901bf2fa23 clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
    ee90be48edb3 bpf: Fix WARN() in get_bpf_raw_tp_regs
    2ecafe59668d pinctrl: at91: Fix possible out-of-boundary access
    12cda7fcc4cf libbpf: Use proper errno value in nlattr
    2fef0e86682f ktls, sockmap: Fix missing uncharge operation
    54ce9bcdaee5 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
    c22099a64880 clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
    9c5268e5d633 bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
    f9784da76ad7 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
    e9022196bdbe netfilter: nft_quota: match correctly when the quota just depleted
    ba18b0b9272f netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
    c6c7e7ab962b libbpf: Use proper errno value in linker
    a6412e93cf4a f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
    ce6849b76dad f2fs: clean up w/ fscrypt_is_bounce_page()
    65b935d4e5c4 iommu: Protect against overflow in iommu_pgsize()
    5c3e52ab7887 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
    f1ba4e35fb3f wifi: rtw88: do not ignore hardware read error during DPK
    6dfe62db59f3 libbpf: Fix buffer overflow in bpf_object__init_prog
    f4b0ce074bd6 net: ncsi: Fix GCPS 64-bit member variables
    6a324d77f7ea f2fs: fix to do sanity check on sbi->total_valid_block_count
    d6181bd1dfa1 bpf, sockmap: fix duplicated data transmission
    2160dcc38acf IB/cm: use rwlock for MAD agent lock
    f9507cf2dd0e wifi: ath11k: fix node corruption in ar->arvifs list
    e74b9a7269aa firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
    809b522315a0 drm/tegra: rgb: Fix the unbound reference count
    afc9153b1e57 drm/vkms: Adjust vkms_state->active_planes allocation type
    58d0e3088812 drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
    39044a10d912 selftests/seccomp: fix syscall_restart test for arm compat
    7287af1ec4d3 firmware: psci: Fix refcount leak in psci_dt_init
    1b6780143d59 m68k: mac: Fix macintosh_config for Mac II
    5390b3d4c6d4 fs/ntfs3: handle hdr_first_de() return value
    892a242ca5b1 media: rkvdec: Fix frame size enumeration
    85cdcb834fb4 drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
    259b74c2b329 spi: sh-msiof: Fix maximum DMA transfer size
    cfc61c34077e ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
    92322500c1aa x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
    3319b48d1ba2 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
    b227c27359a0 power: reset: at91-reset: Optimize at91_reset()
    bf6a8502a5f4 EDAC/skx_common: Fix general protection fault
    03657814c828 crypto: sun8i-ce - move fallback ahash_request to the end of the struct
    02b661940874 crypto: xts - Only add ecb if it is not already there
    200b752c0066 crypto: lrw - Only add ecb if it is not already there
    9bacddcf6886 crypto: marvell/cesa - Avoid empty transfer descriptor
    e1cc69da6195 crypto: marvell/cesa - Handle zero-length skcipher requests
    c798023fa973 x86/cpu: Sanitize CPUID(0x80000000) output
    ada335e8475d crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
    fb2671376bbf perf/core: Fix broken throttling when max_samples_per_tick=1
    333f2d85b615 gfs2: gfs2_create_inode error handling fix
    2f62eda4d974 thunderbolt: Do not double dequeue a configuration request
    2e74fd21b845 usb: usbtmc: Fix timeout value in get_stb
    547f3e678922 USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
    3f1aac91fc36 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
    cfd327ad2e00 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
    0188c74bf3ac rtc: Fix offset calculation for .start_secs < 0
    c360f8ff1bef rtc: Make rtc_time64_to_tm() support dates before 1970
    6df0e243e757 acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
    e0a83d422a18 pinctrl: armada-37xx: set GPIO output value before setting direction
    bb9578e9f35f pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
    ebf6f96c7993 tracing: Fix compilation warning on arm32
    1c700860e8bc Linux 5.15.185
    dcbee1061a46 perf/arm-cmn: Initialise cmn->cpu earlier
    dcb08fd2c6cb platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
    dbc155cf4e70 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    961caaf8ad35 tpm: tis: Double the timeout B to 4s
    1706ef825254 nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    128b5f020651 spi: spi-sun4i: fix early activation
    4916624695c0 um: let 'make clean' properly clean underlying SUBARCH as well
    13108bf19da5 platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    49c13288c919 nfs: don't share pNFS DS connections between net namespaces
    5c46ec760d3b HID: quirks: Add ADATA XPG alpha wireless mouse support
    1686594d7285 coredump: hand a pidfd to the usermode coredump helper
    5ff7313a1f45 fork: use pidfd_prepare()
    7f8c3fd203fd pid: add pidfd_prepare()
    b06450fb3e73 coredump: fix error handling for replace_fd()
    2c928b3a0b04 net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
    cc6790f4b085 arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    9fdb86f0bf65 smb: client: Reset all search buffer pointers when releasing buffer
    1b197931fbc8 smb: client: Fix use-after-free in cifs_fill_dirent
    5492aaea844e x86/its: Fix undefined reference to cpu_wants_rethunk_at()
    8f8637b9d26d drm/i915/gvt: fix unterminated-string-initialization warning
    3c2729dfcf30 xen/swiotlb: relax alignment requirements
    34901631e6e3 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    9d678b2976ec kbuild: Disable -Wdefault-const-init-unsafe
    0e0cf836cfe4 spi: spi-fsl-dspi: Reset SR flags before sending a new message
    a3a147ef6d02 spi: spi-fsl-dspi: Halt the module after a new message transfer
    0e989441cfbc spi: spi-fsl-dspi: restrict register range for regmap access
    6fd4a4cb3ca1 Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    c6da28bc4e1f mm/page_alloc.c: avoid infinite retries caused by cpuset race
    5dcdbb69aa3a memcg: always call cond_resched() after fn()
    ff887e77b777 Revert "drm/amd: Keep display off while going into S4"
    26d20ea0f233 drm/edid: fixed the bug that hdr metadata was not reset
    fb7cde625872 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
    0f5d93ee3f8b llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    10217da9644a ALSA: pcm: Fix race of buffer access at PCM OSS layer
    0622846db728 can: bcm: add missing rcu read protection for procfs content
    fbd8fdc2b218 can: bcm: add locking for bcm_op runtime updates
    1a426abdf1c8 padata: do not leak refcount in reorder_work
    c3059d58f79f crypto: algif_hash - fix double free in hash_accept
    24f942d9820b octeontx2-af: Set LMT_ENA bit for APR table entries
    f5c2c4eaaa5a net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
    89c301e929a0 sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    207dabae49b2 net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    ec180b032459 bridge: netfilter: Fix forwarding of fragmented packets
    069cbc318de5 Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    0995986ffd5e xfrm: Sanitize marks before insert
    6a39058059f6 remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    f6d45fd92f62 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
    769dd92ef97e xenbus: Allow PVH dom0 a non-local xenstore
    a876703894a6 btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
    fc01b547c3f8 nvmet-tcp: don't restore null sk_state_change
    7bd0049e9699 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    e3bf273d9ad7 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    2568cf939a64 pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    64ca70dee2cc ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    39db9b5a1673 drm: Add valid clones check
    85a8dfc77227 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    a0d2f4905b16 wifi: ath9k: return by of_get_mac_address
    8d278ad829c2 regulator: ad5398: Add device tree support
    8ed3d1784774 spi: zynqmp-gqspi: Always acknowledge interrupts
    d2c65c8be7a1 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
    3b61fb788954 perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    15c799f7f8e1 bpftool: Fix readlink usage in get_fd_type
    164beeabcb1b drm/ast: Find VBIOS mode from regular display size
    d6fd1eee0767 HID: usbkbd: Fix the bit shift number for LED_KANA
    2c6387f545be scsi: st: Restore some drive settings after reset
    7e25573e1ac5 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    1f66789ad7de net/mana: fix warning in the writer of client oob
    39ea4ca9d39a rcu: fix header guard for rcu_all_qs()
    b4d9a18fc87f rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    41097ac64d0d r8169: don't scan PHY addresses > 0
    e033da39fc6a vxlan: Annotate FDB data races
    4d20b4a861af media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
    eae500bc8dcc hwmon: (xgene-hwmon) use appropriate type for the latency value
    7b99233dda9b clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    3373abfa5d29 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    c47f92ee6cfb r8152: add vendor/device ID pair for Dell Alienware AW1022z
    14298c88e2dd ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    4d87acf13f28 arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
    711734c77fe4 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    11ab6d6ee7d8 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    e42329d27770 net/mlx5e: reduce rep rxq depth to 256 for ECPF
    a411de3091f6 net/mlx5e: set the tx_queue_len for pfifo_fast
    c74b91453b8c net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    99b713f4b7df drm/amd/display: Initial psr_version with correct setting
    cc958022666c drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    c48f7855988f phy: core: don't require set_mode() callback for phy_get_mode() to work
    c8128c04193b net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    485dc9ef39f7 media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    b4e81a758035 smack: recognize ipv4 CIPSO w/o categories
    8de1d394e31e pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
    b45a50fc1f4e ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    d95e6cf0df39 ASoC: tas2764: Power up/down amp on mute ops
    c1f0a98342d4 ASoC: ops: Enforce platform maximum on initial value
    d5db6ffb03fa net/mlx5: Apply rate-limiting to high temperature warning
    937b9c41cc71 net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
    5611b5f79836 ACPI: HED: Always initialize before evged
    94afbd920a51 PCI: Fix old_size lower bound in calculate_iosize() too
    af8431851b8e eth: mlx4: don't try to complete XDP frames in netpoll
    30064eee8fe7 can: c_can: Use of_property_present() to test existence of DT property
    fc173cada345 RDMA/core: Fix best page size finding when it can cross SG entries
    288813ddcc21 EDAC/ie31200: work around false positive build warning
    128cdb617a87 net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
    b2334244a421 wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    211539ee8d46 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    94ba815f5110 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    f0b5f65aebcc scsi: mpt3sas: Send a diag reset if target reset fails
    85cd3f245c15 clocksource: mips-gic-timer: Enable counter when CPUs start
    51d70446278a MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    6fd978a7117e MIPS: Use arch specific syscall name match function
    9a3f2d08291b x86/kaslr: Reduce KASLR entropy on most x86 systems
    17cf6821b758 libbpf: Fix out-of-bound read
    14790abc8779 cpuidle: menu: Avoid discarding useful information
    2579ca741b84 x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
    5eb9da3b7d2e drm/amd/display: handle max_downscale_src_width fail check
    eee2fb58449f x86/build: Fix broken copy command in genimage.sh when making isoimage
    db5833217f13 soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    32de1542f467 bonding: report duplicate MAC address in all situations
    5fe40d499f50 net: xgene-v2: remove incorrect ACPI_PTR annotation
    cfc5a07f9330 drm/amdkfd: KFD release_work possible circular locking
    2e04e067d4d6 selftests/net: have `gro.sh -t` return a correct exit code
    2c48a122fa0a net/mlx5: Avoid report two health errors on same syndrome
    97bab02f0b64 firmware: arm_ffa: Set dma_mask for ffa devices
    f5b5945c0bf2 PCI: brcmstb: Add a softdep to MIP MSI-X driver
    ee8274d80151 PCI: brcmstb: Expand inbound window size up to 64GB
    0a9022295477 fpga: altera-cvp: Increase credit timeout
    55883a34d309 drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    b5c0bd07a48f ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    e62a64a000ba hwmon: (gpio-fan) Add missing mutex locks
    4fc2d289b3cc x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
    c953cea9035c clk: imx8mp: inform CCF of maximum frequency of clocks
    1bd5406866d0 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    e88247716dd7 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    674b969287f4 net: pktgen: fix mpls maximum labels list parsing
    c3a1354b631d net: ethernet: ti: cpsw_new: populate netdev of_node
    b91a5652610b pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    c91447e35b9b media: cx231xx: set device_caps for 417
    fb26963bd247 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    654c295f9079 remoteproc: qcom_wcnss: Handle platforms with only single power domain
    5111227d7f1f orangefs: Do not truncate file size
    025c8f477625 dm cache: prevent BUG_ON by blocking retries on failed device resumes
    246346230486 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
    5753a20bf23c ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    8f12fab5a765 ieee802154: ca8210: Use proper setters and getters for bitwise types
    cc29d05861d0 rtc: ds1307: stop disabling alarms on probe
    f7dd2a729049 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    5cb296e94210 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    d3bb3258d105 arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    4b173bb2c466 crypto: lzo - Fix compression buffer overrun
    2592aeda794c cpufreq: tegra186: Share policy per cluster
    f6535bc6556d ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    bc23966b90d9 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
    2b572c409811 ipv6: save dontfrag in cork
    1acb22d09f5c mmc: sdhci: Disable SD card clock before changing parameters
    8d52676f791d arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    066675bb11ab netfilter: conntrack: Bound nf_conntrack sysctl writes
    3695ade72a9b timer_list: Don't use %pK through printk()
    1351995ba665 posix-timers: Add cond_resched() to posix_timer_add() search loop
    1a8df82d201e RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    7258b92ceff3 xen: Add support for XenServer 6.1 platform device
    8dbcb21f0926 dm: restrict dm device size to 2^63-512 bytes
    91628988aca3 crypto: octeontx2 - suppress auth failure screaming due to negative tests
    49a99ccec1c8 kbuild: fix argument parsing in scripts/config
    ac8fbc318cec ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    317615342d2a rtc: rv3032: fix EERD location
    fe5a5b9d1441 tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    fa7183cc13dd vfio/pci: Handle INTx IRQ_NOTCONNECTED
    8f070ca005e4 scsi: st: ERASE does not change tape location
    84e7b679f8d6 scsi: st: Tighten the page format heuristics with MODE SELECT
    db03d5b2db5c ext4: reorder capability check last
    1ad3d069cf4d um: Update min_low_pfn to match changes in uml_reserved
    3eac35c34a98 um: Store full CSGSFS and SS register from mcontext
    fdcd142d310c dlm: make tcp still work in multi-link env
    30748ce7e156 i3c: master: svc: Fix missing STOP for master request
    ce8d1993b122 btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
    0175d448b2f8 btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
    23a2379b0dd9 btrfs: avoid linker error in btrfs_find_create_tree_block()
    e98cb12ba84d btrfs: make btrfs_discard_workfn() block_group ref explicit
    74314f8937ea i2c: pxa: fix call balance of i2c->clk handling routines
    d18963f219b3 i2c: qup: Vote for interconnect bandwidth to DRAM
    7887df0fe9ec wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    4b62412e985c mmc: host: Wait for Vdd to settle on card power off
    f49c337037df libnvdimm/labels: Fix divide error in nd_label_data_init()
    c7af649198dc PCI: vmd: Disable MSI remapping bypass under Xen
    18282d8518bf pNFS/flexfiles: Report ENETDOWN as a connection error
    0ea65822090b tools/build: Don't pass test log files to linker
    11c24ad1ffde PCI: dwc: ep: Ensure proper iteration over outbound map windows
    ed30141557d1 lockdep: Fix wait context check on softirq for PREEMPT_RT
    0a474eaf3574 dql: Fix dql->limit value when reset.
    897a205ffc43 thermal/drivers/qoriq: Power down TMU on system suspend
    2328a3bf513c SUNRPC: rpcbind should never reset the port to the value '0'
    8a72549eaf12 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    01d50dfae8e9 NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    552baa350a2f fbdev: core: tileblit: Implement missing margin clearing for tileblit
    442192330096 fbcon: Use correct erase colour for clearing in fbcon
    5caaec485f37 fbdev: fsl-diu-fb: add missing device_remove_file()
    84a2fccac8c8 mailbox: use error ret code of of_parse_phandle_with_args()
    236bad68c007 tracing: Mark binary printing functions with __printf() attribute
    2272e75d7a80 NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
    f41f9ce3c709 kconfig: merge_config: use an empty file as initfile
    bc9f8527198a samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    af8a8fce197b bpf: fix possible endless loop in BPF map iteration
    2391dc87e84a net: enetc: refactor bulk flipping of RX buffers to separate function
    0b18c3a17bc7 cgroup: Fix compilation issue due to cgroup_mutex not being exported
    41c810a06470 dma-mapping: avoid potential unused data compilation warning
    02d2d6caee3a virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
    019ca2804f3f scsi: target: iscsi: Fix timeout on deleted connection

(From OE-Core rev: a7cea8a5c91d26ba7c3f72448f0897f5c2f81fd1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Divya Chellam
85c0d7d0aa libarchive: fix CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-
one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-
byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, lea
ding to unpredictable program behavior, crashes, or in specific circumstances, could be lever
aged as a building block for more sophisticated exploitation.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5917

Upstream-patch:
7c02cde37a

(From OE-Core rev: 2b2a2fce345c9bfcad44cc8ef3419f43dd07b022)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Divya Chellam
6b95583a82 libarchive: fix CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw
involves an integer overflow that can be triggered when processing a Web
Archive (WARC) file that claims to have more than INT64_MAX - 4 content
bytes. An attacker could craft a malicious WARC archive to induce this
overflow, potentially leading to unpredictable program behavior, memory
corruption, or a denial-of-service condition within applications that
process such archives using libarchive.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5916

Upstream-patch:
ef09372952

(From OE-Core rev: 0e939bf5fc7412c7357fcd7d8ae760f023ac40eb)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Divya Chellam
6cc6cd3f8d libarchive: fix CVE-2025-5915
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap b
uffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer
-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memo
ry buffer, which can result in unpredictable program behavior, crashes (denial of service), o
r the disclosure of sensitive information from adjacent memory regions.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5915

Upstream-patches:
a612bf62f8

(From OE-Core rev: 41e7be4aa28481530d5e259d0f25b238b86c012d)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Yogita Urade
022d6ec767 curl: fix CVE-2025-0167
When asked to use a `.netrc` file for credentials *and* to
follow HTTP redirects, curl could leak the password used
for the first host to the followed-to host under certain
circumstances.

This flaw only manifests itself if the netrc file has a
`default` entry that omits both login and password. A
rare circumstance.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-0167

Upstream patch:
0e120c5b92

(From OE-Core rev: 7c5aee3066e4c8056d994cd50b26c18a16316c96)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Yogita Urade
580a1571c4 curl: fix CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP
redirects, curl could leak the password used for the first host to the
followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches
the redirect target hostname but the entry either omits just the password or
omits both login and password.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-11053
https://git.launchpad.net/ubuntu/+source/curl/diff/debian/patches/CVE-2024-11053-pre1.patch?id=2126676d86041cabd7b1aa302fc1fdf47989df95
https://git.launchpad.net/ubuntu/+source/curl/diff/debian/patches/CVE-2024-11053.patch?id=2126676d86041cabd7b1aa302fc1fdf47989df95

Upstream patch:
9bee39bfed
e9b9bbac22

(From OE-Core rev: 87823ff05a4f90b42c138902639a59231fa17def)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Changqing Li
def97edcef libsoup: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: cd589717c05b887986b9d61f5193e764f4deb3ee)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Changqing Li
65b1587627 libsoup-2.4: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: 2169742d4b88f9072501819b5842efbed04939f2)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Chen Qi
fcecadd605 coreutils: fix CVE-2025-5278
Backport patch to fix CVE-2025-5278.
The patch is adjusted to fit 9.0 version.

(From OE-Core rev: 4e55668ef07d99d8c1141c2f4270f43f5b280159)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Hitendra Prajapati
36c444aafc libxml2: fix CVE-2025-6021
Upstream-Status: Backport from acbbeef9f5

(From OE-Core rev: f75ef5dc195490ef8223f9a16086243450141e61)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Changqing Li
bfcca9e202 libsoup-2.4: refresh CVE-2025-4969.patch
refresh CVE-2025-4969.patch to fix the following build failure for
libsoup-2.4-native on fedora40/41:

../libsoup-2.74.3/tests/multipart-test.c:578:63: error: passing argument 2 of ‘soup_multipart_new_from_message’ from incompatible pointer type [-Wincompatible-pointer-types]
  578 |         multipart = soup_multipart_new_from_message (headers, bytes);
      |                                                               ^~~~~
      |                                                               |
      |                                                               GBytes * {aka struct _GBytes *}

(From OE-Core rev: 4a0135992778110f2b523f436538c1197ef971b8)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-14 08:37:40 -07:00
Dixit Parmar
3171dcc835 ref-manual: document KERNEL_SPLIT_MODULES variable
This variable controls the kernel module spliting.

[YOCTO #15771]

(From yocto-docs rev: 9de9f17abfc6ee11ffa599e45eff8bafd6de801c)

Signed-off-by: Dixit Parmar <dixitparmar19@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 198179d9c6231b5934d4fb6ede716d1dcb1442bb)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
0ef633a0bb xwayland: fix CVE-2025-49180
A flaw was found in the RandR extension, where the RRChangeProviderProperty function
does not properly validate input. This issue leads to an integer overflow when
computing the total size to allocate.

(From OE-Core rev: 78055e8b6a9ea5063658886c5b5d22821d689fc5)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
4c0768543a xwayland: fix CVE-2025-49179
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore'
in a client's request can cause the server to skip processing another client's
request, potentially leading to a denial of service.

(From OE-Core rev: 589bf97e1aa236477d895c227446966d0a278f3c)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
53e9e45350 xwayland: fix CVE-2025-49178
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore'
in a client's request can cause the server to skip processing another client's
request, potentially leading to a denial of service.

(From OE-Core rev: 9ab0fb0deebd4abb22dbfc6b40fe962cb3388fbd)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
5e6e115925 xwayland: fix CVE-2025-49177
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler
does not validate the request length, allowing a client to read unintended memory
from previous requests

(From OE-Core rev: 89dde7f86e1c2e61ed71ecf92e908dbe402a2668)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
4d49fa2619 xwayland: fix CVE-2025-49176
A flaw was found in the Big Requests extension. The request length is multiplied
by 4 before checking against the maximum allowed size, potentially causing an
integer overflow and bypassing the size check.

(From OE-Core rev: 17033023d679a597e31964b0fed2b2e89cdf61ec)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Archana Polampalli
152e759cb6 xwayland: fix CVE-2025-49175
A flaw was found in the X Rendering extension's handling of animated cursors.
If a client provides no cursors, the server assumes at least one is present,
leading to an out-of-bounds read and potential crash.

(From OE-Core rev: 2c8e82f860792e7fb99c78c512be57ce74774a34)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Yogita Urade
50856ee7a6 python3-urllib3: fix CVE-2025-50181
urllib3 is a user-friendly HTTP client library for Python. Prior to
2.5.0, it is possible to disable redirects for all requests by
instantiating a PoolManager and specifying retries in a way that
disable redirects. By default, requests and botocore users are not
affected. An application attempting to mitigate SSRF or open redirect
vulnerabilities by disabling redirects at the PoolManager level will
remain vulnerable. This issue has been patched in version 2.5.0.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-50181

Upstream patch:
f05b132912

(From OE-Core rev: 574146765ea3f9b36532abf4ebc8bd2976396f0b)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Chen Qi
a17ec857df systemd: backport patches to fix CVE-2025-4598
Patch 0003 is the actual patch to fix CVE.

Patch 0002 is a preparation patch which systemd upstream uses for
all actively maintained branches in preparation for patch 0003.

Patch 0001 is a bug fix patch and is needed to avoid conflict introduced
by patch 0002. Note that patch 0002 claims itself to be of no functional
change, so this patch 0001 is really needed for patch 0002.

Patch 0004 is a compilation fix patch which adds a macro needed by
previous 0002 patch.

(From OE-Core rev: a2e75ca4fa01d5005906fb88d28d52ea951def00)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Colin Pinnell McAllister
8a1287dec6 libarchive: Fix CVE-2025-5914
Adds patch to backport fix for CVE-2025-5914.

(From OE-Core rev: 4a4c6e0382834e03480e07f30ed5efa23f6c6fe2)

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:23:23 -07:00
Steve Sakoman
78c9cb3eaf build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 75e54301c5076eb0454aee33c870adf078f563fd)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-27 08:12:06 -07:00
Steve Sakoman
f66b3ae543 poky.conf: bump version for 4.0.28
(From meta-yocto rev: 0bf3dcef1caa80fb047bf9c3514314ab658e30ea)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-27 08:09:27 -07:00
Colin Pinnell McAllister
ac03ee2932 ffmpeg: fix CVE-2022-48434
The patch for CVE-2022-48434 was removed when ffmpeg was updated to
5.0.3. The CVE was fixed in 5.0.2, but NVD has not updated the affected
versions yet. Added an ignore for this CVE to mark as fixed.

(From OE-Core rev: a8c6e2da68c9fc6c692b41c7370ec937680f788c)

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-27 08:09:27 -07:00
Praveen Kumar
6964579627 go: fix CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on
cross-origin redirects potentially leaking sensitive information.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-4673

Upstream-patch:
b897e97c36

(From OE-Core rev: c07547c19e5372ed5eaac8530b2dd651302542a8)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-27 08:09:27 -07:00
Moritz Haase
9bc0069f8b cmake: Correctly handle cost data of tests with arbitrary chars in name
ctest automatically optimizes the order of (parallel) test execution based on
historic test case runtime via the COST property (see [0]), which can have a
significant impact on overall test run times. Sadly this feature is broken in
CMake < 4.0.0 for test cases that have spaces in their name (see [1]).

This commit is a backport of f24178f3 (which itself backports the upstream fix).
the patch was adapted slightly to apply cleanly to the older CMake version in
kirkstone. As repeated test runs are expected to mainly take place inside the
SDK, the patch is only applied to 'nativesdk' builds.

[0]: https://cmake.org/cmake/help/latest/prop_test/COST.html
[1]: https://gitlab.kitware.com/cmake/cmake/-/issues/26594

Reported-By: John Drouhard <john@drouhard.dev>
(From OE-Core rev: f6a160f7ea57af6dfeca003e6c05aa42419fb755)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Soumya Sambu
104f728b65 systemtap: add sysroot Python paths to configure flags
Explicitly set Python-related flags to use sysroot-staged headers and tools.

(From OE-Core rev: 85a5d7b1d2c8600f30e38e034f828e5897d9a093)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Peter Marko
753ec02637 go: ignore CVE-2024-3566
NVD ([1]) tracks this as:
cpe:2.3🅰️golang:go:*:*:*:*:*:*:*:*
Running on/with
  cpe:2.3microsoft:windows:-:*:*:*:*:*:*:*

Yocto cve-check ignores the "Running on/with", so it needs to be ignored
explicitly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-3566

(From OE-Core rev: 571fd82e29fe809c63a5743e534ed7816d787963)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Changqing Li
b4284b3eb2 libsoup-2.4: fix CVE-2025-4476
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/440

(From OE-Core rev: 2be01469687f30f33b768164f66916b081cc8c62)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Changqing Li
09407f375d libsoup-2.4: fix CVE-2025-4948
Refer:
http://gitlab.gnome.org/GNOME/libsoup/-/issues/449

(From OE-Core rev: d5af0295d26f8967dfe49a53ffa6f275e249d087)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Changqing Li
3aa44948cb libsoup-2.4: fix CVE-2025-46421
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/439

(From OE-Core rev: 33bf900bcb563c5769b75e69059751f969a8771f)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:58 -07:00
Changqing Li
6a19b931f0 libsoup-2.4: fix CVE-2025-32907
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/428

(From OE-Core rev: e6d9dd16d9b70cc8d3a9ca8b2fc542d547b456b9)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Hitendra Prajapati
467cc32439 libsoup-2.4: Fix CVE-2025-4969
Upstream-Status: Backport from 07b94e27af

(From OE-Core rev: 5a6af5bcbe45184e7ac0535549c25cbe64113ba7)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Changqing Li
16168960c4 libsoup: fix CVE-2025-4948
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/449

(From OE-Core rev: 95383d7d95631a4c3b385a073ce1deff744bf725)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Changqing Li
f9f25b4fd6 libsoup: fix CVE-2025-46421
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/439

(From OE-Core rev: 388453296c32759623ed35a8142c6af2df7f30b0)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Changqing Li
f9ae7a93d4 libsoup: fix CVE-2025-32051
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/401

(From OE-Core rev: 4af9a40f53a6a9607999f0f4b28d2ce1eaf325a2)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Changqing Li
3fc748ecd7 libsoup: fix CVE-2025-32907
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/429

(From OE-Core rev: e31c9f12193d040480eca6a4be6a9ec6675b19f8)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Hitendra Prajapati
64327d7000 libsoup: Fix CVE-2025-4969
Upstream-Status: Backport from 07b94e27af

(From OE-Core rev: ea267b82e1fdc5cc7bf055d3eec1190e19ae79de)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Ashish Sharma
41197b0df6 libsoup: patch CVE-2025-4476
Upstream-Status: Backport [e64c221f9c]

(From OE-Core rev: 4cd294674ed05e1b72e722b46ac1e2b5f3603460)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:11:57 -07:00
Robert P. J. Day
52b3a3b7c5 bsp-guide: update lonely "4.12" kernel reference to "6.12"
To accompany earlier updating of kernel version, update this lonely
reference to be consistent.

(From yocto-docs rev: 97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e26c2018cd663de91ee08e0cba55eda1a4c30210)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Robert P. J. Day
207921bcca bsp guide: update kernel version example to 6.12
Change the sample kernel version being used from 4.4 to a more modern
6.12.

(From yocto-docs rev: 4894e00cc69cf499d28b90a991d4bac0cecb97e7)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1bad12b6ccfe1c0d26918926176a0c743568de26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Quentin Schulz
70473efe13 ref-manual: classes: nativesdk: move note to appropriate section
The nativesdk- prefix to the recipe filename should only be used when
using the inherit method as the BBCLASSEXTEND method will do some magic
when generating the "implicit" name of the recipe.

This matches the instructions for the native class.

(From yocto-docs rev: 84ab43b9766e0415e090c6af404ce1c61316f384)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 15fe239e1e62b9add737aa732dd7f5e9948ee03d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Quentin Schulz
7e68f78b6e ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
We explain how to create a native (nativesdk) recipe in two different
ways via a bullet list but reading quickly the instructions may mislead
one into doing both options whereas they are incompatible.

This rewords both the nativesdk and native sections so that the second
bullet point starts with an Or and explicit that this applies to target
recipes.

(From yocto-docs rev: c2e814ba75524225390ecad0d3615e48f866374a)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6d0d338a5f2686ddeee5eed7b6e05f3db800d33a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
d76598e8aa glibc: nptl Use all of g1_start and g_signals
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=91bb902f58264a2fd50fbce8f39a9a290dd23706]

(From OE-Core rev: e0857503de9f427d177fe85c32cf0d2748d779fb)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
395879fd14 glibc: nptl rename __condvar_quiesce_and_switch_g1
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=4b79e27a5073c02f6bff9aa8f4791230a0ab1867]

(From OE-Core rev: e7eb16d59c81636c1fdffca307768776d990d732)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
614a3abb3a glibc: nptl Fix indentation
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=ee6c14ed59d480720721aaacc5fb03213dc153da]

(From OE-Core rev: e4b4cd362cfcb7fd6517165ae59cb218420b9039)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
548a08daab glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=929a4764ac90382616b6a21f099192b2475da674]

(From OE-Core rev: eab44f7a027414ef29f6d07617997cc50fc515cd)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
5cb3b16aa9 glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=4f7b051f8ee3feff1b53b27a906f245afaa9cee1]

(From OE-Core rev: 761758340002f9dbff8e0668f4883ff623b232a0)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
cdd974ba56 glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=b42cc6af11062c260c7dfa91f1c89891366fed3e]

(From OE-Core rev: 02f2ac08edb506ec43cec93a5b09f5e6d7df02ec)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
a9b8182e89 glibc: nptl Update comments and indentation for new condvar implementation
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=0cc973160c23bb67f895bc887dd6942d29f8fee3]

(From OE-Core rev: e5296415e97e4d704c4c8d11ad243061a1e14997)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Sunil Dora
218c9ec684 glibc: pthreads NPTL lost wakeup fix 2
The following commits have been cherry-picked from Glibc master branch:
Bug : https://sourceware.org/bugzilla/show_bug.cgi?id=25847

Upstream-Status: Backport
[https://sourceware.org/git/?p=glibc.git;a=commit;h=1db84775f831a1494993ce9c118deaf9537cc50a]

(From OE-Core rev: c05290e51d0faf661bac587066a79626919609e8)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Aditya Tayade
d2ca3a347e e2fsprogs: removed 'sed -u' option
In embedded box, sed might be provided another providers like Busybox,
hence use generic options whenever possible.
/bin/sed -> /etc/alternatives/sed
/etc/alternatives/sed -> /bin/busybox.nosuid

Here used 'sed -u' option is not necessary, hence removed it.

Fixes below error:
sed: invalid option -- 'u'

Also added 'set -eux' option which halts execution of the script
on any failures.

(From OE-Core rev: 5b3b290baa0a83f493b7ca25d5ffa5ff279bcc69)

(From OE-Core rev: fe7fa1ec7d005d858ccbdd81eb6f7bfab04b7e46)

Signed-off-by: Aditya Tayade <Aditya.Tayade@kpit.com>
Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 07caee1829d2a61bc018fe0e37ecd482922179ee)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
(cherry picked from commit d2da6b5c56)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
aszh07
c0a8db39ed xz: Update LICENSE variable for xz packages
Update LICENSE defined for xz packages to match the license
information provided in the xz COPYING file.

The License information from PACKAGERS file of xz mentions
packages with lzma files are in public domain.They ask to
use GPLv2+, if only it's not possible to mention "PD and GPLv2+".

Include PD license with GPLv2 to packages with lzma content:
xz-dev package contains lzma header
xz-doc package contains lzma man pages
xz packages contains lzma binaries

Links: https://github.com/tukaani-project/xz/blob/v5.4.6/COPYING
       https://github.com/tukaani-project/xz/blob/v5.4.6/PACKAGERS

(From OE-Core rev: d511c41dac048fbdd93a54136e93b0623a18a83d)

(From OE-Core rev: a9b751f211ccfc1c8d58aba290dc8b4de5383acc)

Signed-off-by: Bhabu Bindu <bindu.bhabu@kpit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4e5b955def5d9f305f5aba2c68b73287c03fd163)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Poonam Jadhav
0101023c28 libpng: Improve ptest
Install libpng test-suite to run it as a ptest.
As the test-suite takes more than 30 seconds to run,
add libpng-ptest to PTESTS_SLOW in ptest-packagelists.inc

(From OE-Core rev: 5835b803acc255c227213670588dd01c5168c266)

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Guocai He
91d538d055 babeltrace/libatomic-ops: correct the SRC_URI
The old SRC_URIs are not available and need to update.

(From OE-Core rev: 94d24ff01573dc1d65078c92150dc252b3e9b145)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
Aleksandar Nikolic
cf89524072 scripts/install-buildtools: Update to 4.0.27
Update to the 4.0.27 release of the 4.0.27 series for buildtools

(From OE-Core rev: 9277fae3c81a269994faa6ba6f6c9bdfc74e11bd)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:30 -07:00
aszh07
aa3a15a8bf ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT
Currently, CVE_PRODUCT only detects vulnerabilities where the product is "ffmpeg".

However, there are also vulnerabilities where the product is "libswresample",
and "libavcodec" as shown below.
https://app.opencve.io/vendors/?vendor=ffmpeg

Therefore, add "libswresample libavcodec" to CVE_PRODUCT to detect vulnerabilities
where the product is "libswresample libavcodec" as well.

(From OE-Core rev: 9684eba5c543de229108008e29afd1dd021a9799)

(From OE-Core rev: 34df694e0cdf4c1e3dfc99502a9e615b8c802cdb)

Signed-off-by: aszh07 <mail2szahir@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Naman Jain <namanj1@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Colin Pinnell McAllister
1f73cf5b98 ffmpeg: fix CVE-2025-1373
CVE-2025-1373 does not appear to affect ffmpeg 5.0.3. The CVE has been
added to the ignore list.

(From OE-Core rev: 99cda92e387ca071c4235c14a137510a4fb481c2)

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
bb706cfe48 libsoup: Fix CVE-2025-46420
Upstream-Status: Backport
[c9083869ec]

(From OE-Core rev: cb3a01ba6535b129608fb8d07261069f1fb4b84a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
cecdcf3428 libsoup: Fix CVE-2025-32053
Upstream-Status: Backport
[eaed42ca8d]

(From OE-Core rev: de40e2f32af4ec930c80858f8d77a5a1b0967069)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
dd4d1b28e3 libsoup-2.4: Fix CVE-2025-32053
Upstream-Status: Backport
[eaed42ca8d]

(From OE-Core rev: a563a644fcdb556d904c3c391fbf9435fcd4bdf0)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
c2489908d7 libsoup: Fix CVE-2025-32052
Upstream-Status: Backport
[f182429e5b]

(From OE-Core rev: f1e94b33fac8a1587aacfee13935587dfc6c147a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
4976dc40af libsoup-2.4: Fix CVE-2025-32052
Upstream-Status: Backport
[f182429e5b]

(From OE-Core rev: ab4d381f1cfd8613c23da514a0786a7505579203)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
8bce7467dc libsoup: Fix CVE-2025-32050
Upstream-Status: Backport
[9bb0a55de5]

(From OE-Core rev: f4866635b88b24d5891f83e23c9cc3fc21876b52)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
ca51d99bf3 libsoup-2.4: Fix CVE-2025-32050
Upstream-Status: Backport
[9bb0a55de5]

(From OE-Core rev: c5afbcf487cb7331f641c4dd2c7a972b4cd3c787)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
07f522869c libsoup: Fix CVE-2025-2784
Upstream-Status: Backport
[242a10fbb1
&
c415ad0b67]

https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/435

(From OE-Core rev: b51135e1f7eaa20c97e54f5c52b98963819127e9)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Vijay Anusuri
f49fc9966d libsoup-2.4: Fix CVE-2025-2784
Upstream-Status: Backport
[242a10fbb1
&
c415ad0b67]

https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/435

(From OE-Core rev: 5cea727e87489b144cba9b2aa491d0c90f34f93d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Peter Marko
523a48d5c8 net-tools: patch CVE-2025-46836
Backport patch for this CVE and also patch for its regression.

(From OE-Core rev: 7f2ce7ea6bd3397e4a4f3f7bb6957d14838f66c5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Jiaying Song
d5fa84385a python3-requests: fix CVE-2024-47081
Requests is a HTTP library. Due to a URL parsing issue, Requests
releases prior to 2.32.4 may leak .netrc credentials to third parties
for specific maliciously-crafted URLs. Users should upgrade to version
2.32.4 to receive a fix. For older versions of Requests, use of the
.netrc file can be disabled with `trust_env=False` on one's Requests
Session.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-47081

Upstream patch:
96ba401c12

(From OE-Core rev: 37d746033710509ffabc244e0130d20fd81d9673)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Sunil Dora
241a617374 Glibc: Fix for CVE-2025-4802
elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static
[https://sourceware.org/bugzilla/show_bug.cgi?id=32976]

Upstream-Status: Backport [ https://sourceware.org/cgit/glibc/commit/?id=5451fa962cd0a90a0e2ec1d8910a559ace02bba0 &&
                            https://sourceware.org/cgit/glibc/commit/?id=d8f7a79335b0d861c12c42aec94c04cd5bb181e2 ]

(From OE-Core rev: 2d0c574852ed934f339547220364f1d236aad987)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:06:29 -07:00
Quentin Schulz
58c95e1d4c docs: conf.py: silence SyntaxWarning on js_splitter_code
The js_splitter_code string contains backslashes that Python tries to
use as escape sequence but doesn't manage to, hence the following
SyntaxWarning message:

documentation/conf.py:188: SyntaxWarning: invalid escape sequence '\p'
  .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}-]+/gu)

Considering that we want this to be sent verbatim to the JS, let's make
this a raw string instead.

Fixes: d4a98ee19e0c ("conf.py: tweak SearchEnglish to be hyphen-friendly")
(From yocto-docs rev: 92bc958301d0aeab0a19e75b8604f01770358195)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c1056672ef45b197136eb8815728d426337a5901)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:36 -07:00
Quentin Schulz
0d1428e5b8 docs: README: specify how to contribute instead of pointing at another file
This repository is partially included in another repository: poky.

However its README isn't making it, so documentation/README pointing at
the README at the root of the git repository would lead the contributor
nowhere.

Instead, let's include the appropriate information directly in
documentation/README which does make it to the poky git repo.

(From yocto-docs rev: acad3d63501d1ee8bd0759438f456488ca7869bf)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0298318cea2947e65754eab97255164e64a862de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:36 -07:00
Carlos Sánchez de La Lama
1df4bec5eb ref-manual: clarify KCONFIG_MODE default behaviour
KCONFIG_MODE defaults to 'allnoconfig' when not set, regardless of whether
KBUILD_DEFCONFIG points to an in-tree or a meta-layer defconfig.

(From yocto-docs rev: 5a35f8bd19cca200c6b271f049fb94543de79f06)

Signed-off-by: Carlos Sánchez de La Lama <csanchezdll@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f374b9c426f6c10710e011a4ad660231ee26efb8)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:36 -07:00
Robert P. J. Day
a2dd4be796 Clean up explanation of minimum required version numbers
Some simple rendering and grammar fixes.

(From yocto-docs rev: f8d77cfb917bfbe3b223ec889c6ed296603402c2)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9a9624bfc4c523a6edf6f3f0c336e663cc939e75)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Lee Chee Yang
63073ee1c1 migration-guides: add release notes for 4.0.27
(From yocto-docs rev: 4248e73928346b14da10bb214de28c767f4641b4)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c4748f5079e5193f82afc1b754816edd40ce9254)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Richard Purdie
e3d5f852f6 brief-yoctoprojectqs/ref-manual: Switch to new CDN
The project is switching the way handle our CDN provision of sstate objects,
update the URL accordingly.

(cherry picked from commit 406e8a8e30404c0538f5aa46f211540bae2b206b)

(From yocto-docs rev: 5c9336284c0664e0d56cf602751a9ffef6303002)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Martin Jansa
8fc7f29255 kernel.bbclass: add original package name to RPROVIDES for -image and -base
* -image and -base change PKG to:
  PKG:${KERNEL_PACKAGE_NAME}-image = "${KERNEL_PACKAGE_NAME}-image-${@legitimize_package_name(d.getVar(KERNEL_VERSION))}"
  PKG:${KERNEL_PACKAGE_NAME}-base = "${KERNEL_PACKAGE_NAME}-${@legitimize_package_name(d.getVar(KERNEL_VERSION))}"

* but only when debian.bbclass is inheritted they add the original package name into RPROVIDES by:
  https://git.openembedded.org/openembedded-core/commit/?id=3409c4379559afbb1d1d29045582995147a33bbc

* fixes the build if some packagegroup or something RDEPENDS on kernel-image or kernel-base
  and the DISTRO doesn't inherit debian.bbclass

* as shown in pkgdata:
  linux-raspberrypi $ egrep "^(PKG:)|(RPRO)" 6.6.36+git-*/pkgdata/runtime/kernel-image
  6.6.36+git-debian/pkgdata/runtime/kernel-image:RPROVIDES:kernel-image:  kernel-image (=6.6.36+git@PRSERV_PV_AUTOINC@+733366844f_769634f344)
  6.6.36+git-debian/pkgdata/runtime/kernel-image:PKG:kernel-image: kernel-image-6.6.36-v8
  6.6.36+git-without-debian/pkgdata/runtime/kernel-image:PKG:kernel-image: kernel-image-6.6.36-v8

  linux-raspberrypi $ egrep "^(PKG:)|(RPRO)" 6.6.36+git-*/pkgdata/runtime/kernel-image-image
  6.6.36+git-debian/pkgdata/runtime/kernel-image-image:RPROVIDES:kernel-image-image:  kernel-image-image (=6.6.36+git@PRSERV_PV_AUTOINC@+733366844f_769634f344)
  6.6.36+git-debian/pkgdata/runtime/kernel-image-image:PKG:kernel-image-image: kernel-image-image-6.6.36-v8
  6.6.36+git-without-debian/pkgdata/runtime/kernel-image-image:PKG:kernel-image-image: kernel-image-image-6.6.36-v8

(From OE-Core rev: 05498781657a3f8b38b000f91594ecd78850ce47)

(From OE-Core rev: 350513959f6800eef6579153c2ae95960ca24ea7)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9cb954884b)
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Peter Marko
8cd040c218 python3: upgrade 3.10.16 -> 3.10.18
Drop upstreamed patch and refresh remaining patches.

* https://www.python.org/downloads/release/python-31017/

  Security content in this release
  * gh-131809: Upgrade vendored expat to 2.7.1
  * gh-80222: Folding of quoted string in display_name violates RFC
  * gh-121284: Invalid RFC 2047 address header after refolding with
    email.policy.default
  * gh-131261: Update libexpat to 2.7.0
  * gh-105704: CVE-2025-0938 urlparse does not flag hostname containing
    [ or ] as incorrect
  * gh-119511: OOM vulnerability in the imaplib module

* https://www.python.org/downloads/release/python-31018/

  Security content in this release
  * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330]
    [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed
    tarfile extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
  * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a
    non-“strict” error handler.
  * gh-128840: Short-circuit the processing of long IPv6 addresses early
    in ipaddress to prevent excessive memory consumption and a minor
    denial-of-service.

gh-133767 got meawhile CVE-2025-4516 assigned.

(From OE-Core rev: 838a8b5ca148dfa6c6c2c76f1705d1e358a31648)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Vijay Anusuri
57421fdde6 git: Fix CVE-2024-50349 and CVE-2024-52006
Upstream-Status: Backport from
c903985bf7
&
7725b8100f
& b01b9b81d3

(From OE-Core rev: ed112b58ad0d40bfa36e53a370e964e6a20d694e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Divya Chellam
50475a377a screen: fix CVE-2025-46804
A minor information leak when running Screen with setuid-root
privileges allosw unprivileged users to deduce information
about a path that would otherwise not be available.

Affected are older Screen versions, as well as version 5.0.0.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-46804

Upstream-patch:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=e0eef5aac453fa98a2664416a56c50ad1d00cb30

(From OE-Core rev: fa14b05383a322f5fe751c81e8c6f1a8a1df8c9e)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Divya Chellam
145b1ddb2b screen: fix CVE-2025-46802
For a short time they PTY is set to mode 666, allowing any user on the
system to connect to the screen session.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-46802

Upstream-patch:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=049b26b22e197ba3be9c46e5c193032e01a4724a

(From OE-Core rev: b4074e06ff0531481dbb3788a5c1bf9e013b6239)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Deepesh Varatharajan
c6848d874c binutils: Fix CVE-2025-5244 & CVE-2025-5245
PR32858 ld segfault on fuzzed object
We missed one place where it is necessary to check for empty groups.

PR32829, SEGV on objdump function debug_type_samep
u.kenum is always non-NULL, see debug_make_enum_type.

Upstream-Status: Backport
[https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=d1458933830456e54223d9fc61f0d9b3a19256f5]
&& [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a]

(From OE-Core rev: 7eb29f802b272dec19c5bfdce93155d99bac918d)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Vijay Anusuri
87267b3370 python3-setuptools: Fix CVE-2025-47273
Upstream-Status: Backport from
d8390feaa9
& 250a6d1797

(From OE-Core rev: 6b6e556a226100205427c85e8064f7640a9da25e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Harish Sadineni
775ca31829 binutils: add CVE-2025-1182 patch file to SRC_URI
Forgot to add CVE-2025-1182 patch file to SRC_URI in the following commit
https://lists.openembedded.org/g/openembedded-core/message/217350

After rebasing the CVE-2025-1180.patch, we encountered hunk errors while applying the
CVE-2025-1182.patch, so I have modified the patch accordingly.

(From OE-Core rev: 131f93b8efcddac984965a250b5391c43ca54ac8)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Archana Polampalli
0f3339f7ff ffmpeg: fix CVE-2025-22921
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation
violation via the component /libavcodec/jpeg2000dec.c.

(From OE-Core rev: 948e3fe6d4a0762bcd56e1cc04c4100c46915669)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Archana Polampalli
34bb2a2900 ffmpeg: fix CVE-2025-22919
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows
attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.

(From OE-Core rev: 2494f863a163d13967d927618a101078f6980538)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Archana Polampalli
9f5df97f5c ffmpeg: upgrade 5.0.1 -> 5.0.3
Refreshed CVE-2024-36613.patch against to the current version
Removed below patches since already fixed in this version

0001-avcodec-rpzaenc-stop-accessing-out-of-bounds-frame.patch [1]
0001-avcodec-smcenc-stop-accessing-out-of-bounds-frame.patch [2]
0001-avcodec-vp3-Add-missing-check-for-av_malloc.patch [3]
0001-avformat-nutdec-Add-check-for-avformat_new_stream.patch [4]
CVE-2022-48434.patch [5]

[1] 1eb002596e
[2] 293dc39bca
[3] 2cdddcd6ec
[4] 481e81be12
[5] 3bc28e9d1a

(From OE-Core rev: dadb16481810ebda8091b36e3ee03713c90b5e7e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Jiaying Song
179c5dc17f taglib: fix CVE-2023-47466
TagLib before 2.0 allows a segmentation violation and application crash
during tag writing via a crafted WAV file in which an id3 chunk is the
only valid chunk.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-47466

Upstream patch:
dfa33bec08

(From OE-Core rev: bcf0102e0e9ecf55106eafcc4c2ad8b2e7ad762b)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:35 -07:00
Vijay Anusuri
9a368c7b92 libsoup-2.4: Backport auth tests for CVE-2025-32910
libsoup-2.74.2/tests/auth-test.c:1554:39: error: unknown type name 'SoupServerMessage'; did you mean 'SoupServerClass'?

Fix auth-test.c compilation failure caused by CVE-2025-32910 patch

Link: 9af7d0fc75

(From OE-Core rev: 05d14768b5edf41c89b05725e06fd86b5376e6fd)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:34 -07:00
Hitendra Prajapati
e35c7960a7 icu: fix CVE-2025-5222
Upstream-Status: Backport from 2c667e31cf

(From OE-Core rev: a7a82be3b409d496f7a0813055f77212a3b0ef12)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:34 -07:00
Archana Polampalli
5b18890ace ghostscript: fix CVE-2025-48708
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1
lacks argument sanitization for the # case. A created PDF document includes
its password in cleartext.

(From OE-Core rev: 7052a81e4f9b19b5640b414c10b19f8232d81572)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:42:34 -07:00
NeilBrown
81e0dc80d7 nfs-utils: don't use signals to shut down nfs server.
Since Linux v2.4 it has been possible to stop all NFS server by running

   rpc.nfsd 0

i.e.  by requesting that zero threads be running.  This is preferred as
it doesn't risk killing some other process which happens to be called
"nfsd".

Since Linux v6.6 - and other stable kernels to which

  Commit: 390390240145 ("nfsd: don't allow nfsd threads to be
  signalled.")

has been backported - sending a signal no longer works to stop nfs server
threads.

This patch changes the nfsserver script to use "rpc.nfsd 0" to stop
server threads.

(From OE-Core rev: 415e73d53e5342f3f6ff6acd521ded2df3fbca1f)

Signed-off-by: NeilBrown <neil@brown.name>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7b09ad289a36)
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Guocai He
0238a535e8 sysstat: correct the SRC_URI
The SRC_URI of http://pagesperso-orange.fr/sebastien.godard is not available
and the tarballs of sysstat are in https://sysstat.github.io/versions.html.

(From OE-Core rev: 27c31ebd8e05adb2e248e421cbb94c897b3080f5)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Bruce Ashfield
ad8045d76f linux-yocto/5.15: update to v5.15.184
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    98f47d0e9b8c5 Linux 5.15.184
    4ad2d3c4d3cc4 x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
    618df75f2e30c ice: arfs: fix use-after-free when freeing @rx_cpu_rmap
    b8d8f53e18581 netfilter: nf_tables: do not defer rule destruction via call_rcu
    a394c160d57f4 netfilter: nf_tables: wait for rcu grace period on net_device removal
    ba674db81a154 netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
    7170875083254 btrfs: do not clean up repair bio if submit fails
    d64807ded1b60 btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
    65ccb2793da74 sctp: add mutual exclusion in proc_sctp_do_udp_port()
    ef3a6d3795068 selftests/mm: compaction_test: support platform with huge mount of memory
    6dacd2514eb9f usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
    e15fd96c0b701 usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
    9794ffd9d0c39 usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
    f4bd982563c2f usb: typec: ucsi: displayport: Fix deadlock
    cec4f45bf51e0 clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
    4f8244e0a2f4c block: fix direct io NOWAIT flag not work
    d83e52750d9a1 dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
    7aa46ac359d34 dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
    e7320147cf618 dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
    0ea0433f822ed dmaengine: ti: k3-udma: Add missing locking
    ca5b213bf4b42 wifi: mt76: disable napi on driver removal
    6fe084205a537 phy: renesas: rcar-gen3-usb2: Set timing registers only once
    35968b3f9538f phy: Fix error handling in tegra_xusb_port_init
    72b4e7e9a1599 tracing: samples: Initialize trace_array_printk() with the correct function
    560877a88d047 ftrace: Fix preemption accounting for stacktrace filter command
    deea40f26b9de ftrace: Fix preemption accounting for stacktrace trigger command
    466ef37d5545d ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
    e9600f67e8b9f ALSA: usb-audio: Add sample rate quirk for Audioengine D1
    9a51bc5224421 ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
    d993895c11c42 ACPI: PPTT: Fix processor subtable walk
    d4175c6f96294 btrfs: fix discard worker infinite loop after disabling discard
    530e67c4b0120 dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
    cfcb2a5affbe8 x86/its: FineIBT-paranoid vs ITS
    e7117657695bd x86/its: Fix build errors when CONFIG_MODULES=n
    1b231a497756e x86/its: Use dynamic thunks for indirect branches
    c9ec159fed9f5 x86/its: Align RETs in BHB clear sequence to avoid thunking
    4804d7974301f x86/its: Add "vmexit" option to skip mitigation on some CPUs
    e30bcefa93a64 x86/its: Enable Indirect Target Selection mitigation
    5d19a0574b755 x86/its: Add support for ITS-safe return thunk
    498afe80ce3ec x86/alternatives: Remove faulty optimization
    a70424c61d5e6 x86/alternative: Optimize returns patching
    858073be8899e x86/its: Add support for ITS-safe indirect thunk
    34be1a3100b08 x86/its: Enumerate Indirect Target Selection (ITS) bug
    da8db23e3c8dd Documentation: x86/bugs/its: Add ITS documentation
    86a34f5eb24c9 x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
    2d69c40c820a4 x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
    175b3cb84685e x86/speculation: Simplify and make CALL_NOSPEC consistent
    8595a7453a5f6 x86,nospec: Simplify {JMP,CALL}_NOSPEC
    65346f970490e NFSv4/pnfs: Reset the layout state after a layoutreturn
    1eccb3a2dfe2e qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
    6d7a81a69af50 ALSA: sh: SND_AICA should depend on SH_DMA_API
    c8fe73ea80b49 net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
    64675a9c00443 net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
    d3336f746f196 net_sched: Flush gso_skb list too during ->change()
    894b06a72bd61 spi: loopback-test: Do not split 1024-byte hexdumps
    72f552e00c50f nfs: handle failure of nfs_get_lock_context in unlock path
    f8f470e3a7574 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
    d91ab703438c6 iio: chemical: sps30: use aligned_s64 for timestamp
    a7a49aaab5787 iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
    67c9081445295 tracing: probes: Fix a possible race in trace_probe_log APIs
    cc64061b90937 platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
    e0bb89c44b56e efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb33 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2c clk: imx: Add check for kcalloc
    5b837b9e1543e bpf: Fix the indention issue in grow_stack_state()
    42b62697634d1 cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9dc f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f8 f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f8 bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87c smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00bf of: module: add buffer overflow check in of_modalias()
    b8086c3c1548b reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62c ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee6 ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6ac tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab7709564 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac028864 block, loop: support partitions without scanning
    45f504f301d41 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789e jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde6 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56b tpm: Add flag to use default cancellation policy
    1cd19d48fb909 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa82 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c511 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2e tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6d gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932aa ata: ahci: fix enum constants for gcc-13
    5d6cb145541aa net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb42872 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da784063 tools/resolve_btfids: Build with host flags
    00f2f1a782f9b tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c20 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70c libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac7 libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314d drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f9 powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f301871 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8f perf python: Account for multiple words in CC
    1c5699ee85d4f fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d89 fs: add mode_strip_sgid() helper
    d971726836412 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c3 irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde39 ixgbevf: add disable link state
    e5601ae2bd249 ixgbe: add improvement for MDD response functionality
    caa57cd80575d ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df1 Check /dev/console using init_stat()
    04574fd5579a4 tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e57170184 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba7 drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    4931609013207 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa36 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c1 irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423ff irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb1 cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b0 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795d pnmtologo: use relocatable file name
    3b40d5b41155f of: configfs: remove unused variable overlay_lock
    6c085baf18386 tools: use basename to identify file in gen-mach-types
    2fca0fd719812 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ada vt/conmakehash: improve reproducibility
    a75774679f28c OF: DT-Overlay configfs interface (v8)
    d179c639b30ba x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91e ACPI: thermal: drop an always true check
    7614af249993e xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97ee xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922dc virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eafd bpf: Disallow unprivileged bpf by default
    ebfb1822e9f97 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2e Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95b jbd2: fix use-after-free of transaction_t race
    2d83e8196487f jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793c netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e71226259962 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f3 rcu: Avoid alloc_pages() when recording stack
    f78574dee71e4 kasan: test: silence intentional read overflow warnings
    d313cb89b6b1f kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647ccf arm64: support page mapping percpu first chunk allocator
    e5bf16752dcac vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f3 kasan: test: bypass __alloc_size checks
    00aa7573e53a2 kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd44 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213c workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b3 kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e295 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36adb lib/stackdepot: introduce __stack_depot_save()
    85373e66d8474 lib/stackdepot: remove unused function argument
    5b6cc9b251f32 lib/stackdepot: include gfp.h
    c9f3902d8069e aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02cc aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9f aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898e aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd8966450 aufs: tiny, headers after fs_context
    8ddb40e31c29b aufs: fs_context 7/7, finally remount
    69035f71c6fd1 aufs: fs_context 6/7, now mount
    bc841b9706977 aufs: fs_context 5/7, parse all other mount options
    435188053da29 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd7 aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c3 aufs: fs_context 2/7, parse "br" mount option
    a8488f603134a aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564e aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec4 aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c2 aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b1 aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e4 aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4c aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225d aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd8 aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e50 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394ad Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b58765 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c9638892228 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad36271 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b2 ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d39 ARM: config: multi v7: Add renamed symbols
    badaf96564fe1 ARM: config: multi v7: Clean up enabled by default options
    34996040fc9bd ARM: config: multi v7: Drop unavailable options
    7f685244afb3a powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a641 riscv: fix build with binutils 2.38
    9df58d0705069 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b5 x86_64_defconfig: Fix warnings
    02bf23d26bc4c arm64: defconfig: cleanup config options
    05914e2c87e51 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b90 aufs5: fix build against v5.15.3+
    a4b3abf4d96d7 qemux86: add configuration symbol to select values
    fee94ee091541 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d93 clear_warn_once: bind a timer to written reset value
    95faacac47e8d clear_warn_once: expand debugfs to include read support
    de20c4240018c perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c15 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e2 perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a0 perf: fix bench numa compilation
    e79becc44fa6b perf: add SLANG_INC for slang.h
    b1033b5886819 perf: add sgidefs.h to for mips builds
    cf9db484ac0b4 perf: change --root to --prefix for python install
    7fd052c2c5624 perf: add 'libperl not found' warning
    27a437cdd4691 perf: force include of <stdbool.h>
    3b99d21bec2f6 fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506bb FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c1 FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324aeb FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124f aufs: adjust to v5.15 fs changes
    f45da75c8759b aufs5: core
    047f57e07e01b aufs5: standalone
    029fc15574c88 aufs5: mmap
    610d0192ee94d aufs5: base
    d4e428d0ec5f4 aufs5: kbuild
    eb067eca251ab yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875e yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a67 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7e yaffs: include blkdev.h
    506b7251bfb81 yaffs: fix misplaced variable declaration
    a0e26ff364dcc yaffs2: v5.6 build fixups
    b10b1b2d169ef yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb2147 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279b yaffs: repair yaffs_get_mtd_device
    d662538516a7c yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7c yaffs2: fix memory leak in mount/umount
    3378e4a9e4043 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef1 Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051cd fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e735 yaffs2: adjust to proper location of MS_RDONLY
    608807406f138 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c8 initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa109 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d03 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf01883 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf337 defconfigs: drop obselete options
    9a27e3b5f4e73 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b42 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a3 uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a5 uvesafb: print error message when task timeout occurs
    f280a1ed09626 compiler.h: Undef before redefining __attribute_const__
    4352732f268c1 vmware: include jiffies.h
    7954a677968dc Resolve jiffies wrapping about arp
    5f28a1035d950 nfs: Allow default io size to be configured.
    0d7260ad71066 check console device file on fs when booting
    900a12e37e0a2 mount_root: clarify error messages for when no rootfs found
    7b878cbea7261 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3d modpost: mask trivial warnings
    0d294adb09cbc kbuild: exclude meta directory from distclean processing
    a097cdd95a9ef powerpc: serialize image targets
    5db6ec39a0a3e arm: serialize build targets
    cbabca27905e2 crtsavres: fixups for 5.4+
    7fc7656ed403e powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2e powerpc: Disable attribute-alias warnings from gcc8
    186c54665b676 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964cae powerpc: kexec fix for powerpc64
    2ac35b89a0f90 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bbc mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a8 mips: Kconfig: add QEMUMIPS64 option
    6a81b3c081078 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e542 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4c arm/Makefile: Fix systemtap
    b7f1ab59f19e5 vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7e arm: ARM EABI socketcall
    019d142fd956a ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 471382b66a0f9f7001d80355c7a9128ff4b6b4b9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Bruce Ashfield
d30dba501a linux-yocto/5.15: update to v5.15.183
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    a68c15152131 Linux 5.15.183
    a1b63a84a789 x86/bhi: Do not set BHI_DIS_S in 32-bit mode
    f9340af845a6 x86/bpf: Add IBHF call at end of classic BPF
    673b19e5ceb4 x86/bpf: Call branch history clearing sequence on exit
    2edc296e2107 Revert "net: phy: microchip: force IRQ polling mode for lan88xx"
    7ced6fd9d6f8 do_umount(): add missing barrier before refcount checks in sync case
    f04583e37b5e nvme: unblock ctrl state transition for firmware update
    3aaa80e2f394 drm/panel: simple: Update timings for AUO G101EVN010
    aba591c13ba4 MIPS: Fix MAX_REG_OFFSET
    712390196c91 iio: adc: dln2: Use aligned_s64 for timestamp
    0aaf8d478cca types: Complement the aligned types with signed 64-bit one
    6b3a2d6fd2c7 usb: usbtmc: Fix erroneous generic_read ioctl return
    d88d487cf85f usb: usbtmc: Fix erroneous wait_srq ioctl return
    336fe2d28118 usb: usbtmc: Fix erroneous get_stb ioctl error returns
    3b408eed3515 USB: usbtmc: use interruptible sleep in usbtmc_read
    7804c4d63edf usb: typec: ucsi: displayport: Fix NULL pointer access
    3e9a34da9dac usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
    59a24f14c7d4 usb: host: tegra: Prevent host controller crash when OTG port is used
    ed96ab6478de usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
    2997957a4eda usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
    815d6afeac3f usb: cdnsp: Fix issue with resuming from L1
    07413d8c74ed ocfs2: stop quota recovery before disabling quotas
    46c26ae13bd7 ocfs2: implement handshaking with ocfs2 recovery thread
    d8a3d29f6186 ocfs2: switch osb->disable_recovery to enum
    f1c71b4bd721 module: ensure that kobject_put() is safe for module type kobjects
    4d260a5558df xenbus: Use kref to track req lifetime
    036aabe17823 usb: uhci-platform: Make the clock really optional
    1d7472e79786 drm/amd/display: Fix wrong handling for AUX_DEFER case
    35b8c0a28498 iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
    f3cf233c9465 iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
    e5755bf22c21 iio: adis16201: Correct inclinometer channel resolution
    8f9c524b9163 iio: adc: ad7606: fix serial register access
    12f703811af0 x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
    f74c6c87fa75 staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
    632c789764d9 staging: axis-fifo: Remove hardware resets for user errors
    2cb6a49a46f0 staging: iio: adc: ad7816: Correct conditional logic for store mode
    40c8117be683 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
    563ceee84dbd Input: synaptics - enable SMBus for HP Elitebook 850 G1
    ac5068d975c4 Input: synaptics - enable InterTouch on Dell Precision M3800
    ef9f94a50bf4 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
    7e821d73ec3d Input: synaptics - enable InterTouch on Dynabook Portege X30-D
    44657c9b7a8c net: dsa: b53: fix learning on VLAN unaware bridges
    7ed8ff2d73d5 net: dsa: b53: always rejoin default untagged VLAN on bridge leave
    da863b205e56 net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
    8dced52950dd net: dsa: b53: fix flushing old pvid VLAN on pvid change
    1b094a7c84b1 net: dsa: b53: fix clearing PVID of a port
    402be90e4ebd net: dsa: b53: allow leaky reserved multicast
    82c1eb32693b netfilter: ipset: fix region locking in hash types
    7ef1fdf42f50 can: gw: fix RCU/BH usage in cgw_create_job()
    1b199a17b744 rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep()
    3574f537b5b0 can: gw: use call_rcu() instead of costly synchronize_rcu()
    69aa22df4fdc gre: Fix again IPv6 link-local address generation.
    47f7f00cf2fa openvswitch: Fix unsafe attribute parsing in output_userspace()
    b589c02776b7 can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
    7be7548a3ec6 can: mcan: m_can_class_unregister(): fix order of unregistration calls
    e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: c58a986d70d4d62300809f24343dab639c41045d)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Bruce Ashfield
ec1ed4896c linux-yocto/5.15: update to v5.15.182
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    3b8db0e4f263 Linux 5.15.182
    4226622647e3 scsi: target: Fix WRITE_SAME No Data Buffer crash
    aaa763ab8cec dm: fix copying after src array boundaries
    655e607898f8 iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
    6077d3a53d99 iommu/arm-smmu-v3: Use the new rb tree helpers
    f95659affee3 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
    073b77f8619f irqchip/gic-v2m: Mark a few functions __init
    5883bcce0ca5 irqchip/gic-v2m: Add const to of_device_id
    cdde591d23f4 Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
    853e14cf36f6 net: phy: microchip: force IRQ polling mode for lan88xx
    d7084c39aed6 ARM: dts: opos6ul: add ksz8081 phy properties
    91ff1e9652fb firmware: arm_scmi: Balance device refcount when destroying devices
    d9f609cb50eb net: hns3: fix deadlock issue when externel_lb and reset are executed together
    c7f24b7d9454 of: module: add buffer overflow check in of_modalias()
    cc826a9e1e4e PCI: imx6: Skip controller_id generation logic for i.MX7D
    21491989477a net: hns3: defer calling ptp_clock_register()
    19a68aa1b993 net: hns3: fixed debugfs tm_qset size
    a059cef34d73 net: hns3: fix an interrupt residual problem
    85fc1d802edf net: hns3: add support for external loopback test
    796f64db86d1 net: hns3: store rx VLAN tag offload state for VF
    6bed80284c17 net: fec: ERR007885 Workaround for conventional TX
    df993daa4c96 net: lan743x: Fix memleak issue when GSO enabled
    f21fb533fc3e nvme-tcp: fix premature queue removal and I/O failover
    dd008c029fdb bnxt_en: Fix ethtool -d byte order for 32-bit values
    69b10dd23ab8 bnxt_en: Fix out-of-bound memcpy() during ethtool -w
    f4f30f64f7ae bnxt_en: Fix coredump logic to free allocated buffer
    15cb7eab09fe net: ipv6: fix UDPv6 GSO segmentation with NAT
    6b732322eb65 net: dlink: Correct endianness handling of led_mode
    a32dcc3b8293 ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
    e06e4cdfb65e ice: Refactor promiscuous functions
    0bf32d6fb1fc net_sched: qfq: Fix double list add in class with netem as child qdisc
    554acc5a2ea9 net_sched: ets: Fix double list add in class with netem as child qdisc
    e3e949a39a91 net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
    2968632880f1 net_sched: drr: Fix double list add in class with netem as child qdisc
    6884fc89d3fc net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
    bedd287fdd31 net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
    97da99868573 net: ethernet: mtk-star-emac: separate tx/rx handling with two NAPIs
    688fff006fd1 net/mlx5: E-switch, Fix error handling for enabling roce
    225ee358a4ed net/mlx5: E-Switch, Initialize MAC Address for Default GID
    9d3ef89b6a5e net/sched: act_mirred: don't override retval if we already lost the skb
    9efb2b99b96c KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
    1a3f9482b50b tracing: Fix oob write in trace_seq_to_buffer()
    8ba0bfe23917 iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
    466d9da26707 iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
    4df67fb22782 dm: always update the array size in realloc_argv on success
    526530ec0058 dm-integrity: fix a warning on invalid table line
    508be7c00143 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
    113304ce7e8a mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
    d5a69c78c9cc amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
    ec4584495868 parisc: Fix double SIGFPE crash
    6266b3509b2c arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
    f0d2cca416c6 i2c: imx-lpi2c: Fix clock count when probe defers
    b98f280fa8c1 EDAC/altera: Set DDR and SDMMC interrupt mask before registration
    72d3974ed3a8 EDAC/altera: Test the correct error reg offset
    2ec0f5f6d476 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
    169346d866dc ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
    e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 514e700790ed3af0894ad114432aa44090ddb306)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Bruce Ashfield
59b2c2c7d8 linux-yocto/5.15: update to v5.15.181
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    16fdf2c7111b Linux 5.15.181
    26277a425020 PCI: Release resource invalidated by coalescing
    e4af080f3ef6 PCI: Fix dropping valid root bus resources with .end = zero
    ad367516b1c0 PCI: Fix use-after-free in pci_bus_release_domain_nr()
    1f7fb4247d90 nvme: fixup scan failure for non-ANA multipath controllers
    d2e15c2fd913 MIPS: cm: Fix warning if MIPS_CM is disabled
    c82ca029b29f xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
    43c296870740 drm/amd/display: fix double free issue during amdgpu module unload
    bb6b2175b606 net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
    527978c76ef2 net: dsa: mv88e6xxx: enable PVT for 6321 switch
    7a10a6b17401 net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
    3ea027203778 crypto: atmel-sha204a - Set hwrng quality to lowest possible
    4e386645bc01 comedi: jr3_pci: Fix synchronous deletion of timer
    a1166e98d80c jfs: define xtree root and page independently
    2ddd4a7a8b0f md/raid1: Add check for missing source disk in process_checks()
    e5e274f64f32 ubsan: Fix panic from test_ubsan_out_of_bounds
    7dd6ab7f467c loop: aio inherit the ioprio of original request
    1d8f9378cb48 scsi: pm80xx: Set phy_attached to zero when device is gone
    47e8efd6c623 scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
    4b7bdc2efa11 ext4: make block validity check resistent to sb bh corruption
    0773465fbe1b nvmet-fc: put ref when assoc->del_work is already scheduled
    33acc9c2d1e4 nvmet-fc: take tgtport reference only once
    b6a2cd26bcb9 x86/bugs: Don't fill RSB on context switch with eIBRS
    a71d88ae28ef x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
    56332c566f36 x86/bugs: Use SBPB in write_ibpb() if applicable
    33f046d7c8d3 selftests/mincore: Allow read-ahead pages to reach the end of the file
    3e70fa900584 objtool: Stop UNRET validation on UD2
    d2830ae38358 nvme: re-read ANA log page after ns scan completes
    26671f662eda ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
    5a8389206cd4 nvme: requeue namespace scan on missed AENs
    bbe7c3b33292 xen: Change xen-acpi-processor dom0 dependency
    605de05255b3 selftests: ublk: fix test_stripe_04
    373512760e13 udmabuf: fix a buf size overflow issue during udmabuf creation
    4da2a94ed523 KVM: s390: Don't use %pK through tracepoints
    20a3cec623fa sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
    40845d9146b9 ntb: reduce stack usage in idt_scan_mws
    5fe708c5e3c8 qibfs: fix _another_ leak
    1640c9b81d66 objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
    d26a6093d529 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
    3a259d74f57a usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
    0725a991727d dmaengine: dmatest: Fix dmatest waiting less when interrupted
    e03b10c45c76 sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
    059d35a7393c usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
    423e146ed630 fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
    e10e634ee40f usb: host: max3421-hcd: Add missing spi_device_id table
    d9ef9664e44e s390/tty: Fix a potential memory leak bug
    e1e00dc45648 s390/sclp: Add check for get_zeroed_page()
    6992fb10dff2 parisc: PDT: Fix missing prototype warning
    aa36ec5d96c9 clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
    1dd4a8561d85 crypto: null - Use spin lock instead of mutex
    10829b24512a MIPS: cm: Detect CM quirks from device tree
    809fce49f0b6 USB: wdm: add annotation
    6261b99ef0ed USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
    b02a3fef3e8c USB: wdm: close race between wdm_open and wdm_wwan_port_stop
    17dd48b3f6f2 USB: wdm: handle IO errors in wdm_wwan_port_start
    68be90d3d1aa USB: VLI disk crashes if LPM is used
    394ff4699263 usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
    50d68345d467 usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
    c0079630f268 usb: dwc3: gadget: check that event count does not exceed event buffer length
    a143ed263d51 USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
    3ec61fa704a4 usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
    24b808d7516f usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
    8060b719676e usb: chipidea: ci_hdrc_imx: fix usbmisc handling
    b96239582531 usb: cdns3: Fix deadlock when using NCM gadget
    94df04953061 USB: serial: simple: add OWON HDS200 series oscilloscope support
    82e841dc1eaf USB: serial: option: add Sierra Wireless EM9291
    184cdaa3ea5f USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
    b59c7fefded5 serial: sifive: lock port in startup()/shutdown() callbacks
    116c7d35b8f7 KVM: x86: Reset IRTE to host control if *new* route isn't postable
    26ccc791de50 mei: me: add panther lake H DID
    843a6fc56e71 USB: storage: quirk for ADATA Portable HDD CH94
    59f993cd36b6 mcb: fix a double free bug in chameleon_parse_gdd()
    95a34125831e KVM: SVM: Allocate IR data using atomic allocation
    aeba2e15c873 drm/amd/display: Fix gpu reset in multidisplay config
    a14b254c35fe net: selftests: initialize TCP header and skb payload with zero
    bef170d651d3 virtio_console: fix missing byte order handling for cols and rows
    c71ab87a2523 iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
    da7936518996 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
    fcc8ede66356 net_sched: hfsc: Fix a UAF vulnerability in class handling
    5fd464fd24de tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
    663c3da86e80 net: phy: leds: fix memory leak
    46a35fe74bae cpufreq: cppc: Fix invalid return value in .get() callback
    8fbaa76690f6 cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
    4e3d1c1925d8 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
    ad03f3f852df dma/contiguous: avoid warning about unused size_bytes
    c049376c76d1 drm/msm/a6xx: Fix stale rpmh votes from GPU
    cac1786e41b4 drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
    d5572d3d0034 drm/msm/a6xx: Handle GMU prepare-slumber hfi failure
    c8064e9c334f drm/msm/a6xx: Improve gpu recovery sequence
    14c96391dff0 string: Add load_unaligned_zeropad() code path to sized_strscpy()
    039b1d64c8ea kmsan: disable strscpy() optimization under KMSAN
    f124c35b4a36 selftests/mm: generate a temporary mountpoint for cgroup filesystem
    fbf43c9e237c ksmbd: Prevent integer overflow in calculation of deadtime
    3297497ad224 PCI: Fix reference leak in pci_register_host_bridge()
    db273126bf54 PCI: Assign PCI domain IDs by ida_alloc()
    fd168b7d1d7c PCI: Coalesce host bridge contiguous apertures
    786474c9dadf gpio: tegra186: fix resource handling in ACPI probe path
    bc121680d4eb gpio: tegra186: Force one interrupt per bank
    32d554841024 cifs: fix integer overflow in match_server()
    9c9000cb91b9 cifs: avoid NULL pointer dereference in dbg call
    0f552a0a33db cifs: print TIDs as hex
    74c7d67a3c30 backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
    28d49aeb7760 backlight: led_bl: Convert to platform remove callback returning void
    9d708a3b72b0 iio: adc: ad7768-1: Fix conversion result sign
    fda3b0b782c8 iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
    8ee067cf0cf8 soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
    c6f24e85919e soc: samsung: exynos-chipid: Pass revision reg offsets
    75dd8356b681 soc: samsung: exynos-chipid: avoid soc_device_to_device()
    f54829389feb net: dsa: mv88e6xxx: fix VTU methods for 6320 family
    36771754d618 auxdisplay: hd44780: Fix an API misuse in hd44780.c
    959b07fb28b0 auxdisplay: hd44780: Convert to platform remove callback returning void
    f1d518c0bad0 media: streamzap: fix race between device disconnection and urb callback
    a5d7d89ac48a media: streamzap: remove unused struct members
    b608bd3b51c0 media: streamzap: less chatter
    6dd4cf3ece54 media: streamzap: no need for usb pid/vid in device name
    fa5fec7f1555 media: streamzap: remove unnecessary ir_raw_event_reset and handle
    ed4ee9639b07 module: sign with sha512 instead of sha1 by default
    74a466a15731 Bluetooth: SCO: Fix UAF on sco_sock_timeout
    e7d3a0c7bf77 f2fs: Add inline to f2fs_build_fault_attr() stub
    c7dc74ab7975 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
    984212fa6b4b pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
    6e5b601706ce f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    eac1e7e1705f mm: fix apply_to_existing_page_range()
    0c35d1914353 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
    7d21587d35bc drm/i915/gt: Cleanup partial engine discovery failures
    d154b333a566 dm cache: fix flushing uninitialized delayed_work on cache_ctr error
    4de2c04c3acd jfs: Fix shift-out-of-bounds in dbDiscardAG
    500f00c80637 MIPS: ds1287: Match ds1287_set_base_clock() function types
    9aad60a2e686 MIPS: cevt-ds1287: Add missing ds1287.h include
    dd0e9415ff0c MIPS: dec: Declare which_prom() as static
    dac465986a4a net: defer final 'struct net' free in netns dismantle
    22018622e1e9 scsi: ufs: bsg: Set bsg_queue to NULL after removal
    6e9ed2f4721e scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
    930268823f6b openvswitch: fix lockup on tx to unregistering netdev with carrier
    5efcb301523b net: openvswitch: fix race on port output
    211168339657 ipvs: properly dereference pe in ip_vs_add_service
    22e9b83f0f33 ext4: fix timer use-after-free on failed mount
    7d215e013d09 blk-iocost: do not WARN if iocg was already offlined
    d20f28f00770 blk-cgroup: support to track if policy is online
    3516f93cc63d bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
    0d90d9e15414 bpf: avoid holding freeze_mutex during mmap operation
    82e813b12b10 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
    bb6570085826 smb: client: fix potential UAF in cifs_stats_proc_show()
    ce49569079a9 smb: client: fix potential deadlock when releasing mids
    878f32878351 smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
    4a788ebbb10d smb: client: fix NULL ptr deref in crypto_aead_setkey()
    ef51c0d544b1 smb: client: fix UAF in async decryption
    ed3b36f351d9 cifs: Fix UAF in cifs_demultiplex_thread()
    336a066990bb smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
    58de45f4d663 net: make sock_inuse_add() available
    480469f145e5 ksmbd: fix potencial out-of-bounds when buffer offset is invalid
    d798fd98e356 smb: client: fix potential UAF in cifs_dump_full_key()
    d54fdcf171f0 nvmet-fc: Remove unused functions
    6955fd3a6fb9 landlock: Add the errata interface
    3cc1116de109 drm/amdgpu: fix usage slab after free
    fcf9d6a9f30e drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
    b19ca8425a4b drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
    e3cd0d8362de drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
    27fda36eedad wifi: ath10k: avoid NULL pointer error during sdio remove
    c1cbf006feee phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
    a262c2dc833f powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
    d1c85e262c16 x86/pvh: Call C code via the kernel virtual mapping
    386617efacab net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
    66a9937187ac bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
    7d3914a477ee phonet/pep: fix racy skb_queue_empty() use
    6cc52df69e84 filemap: Fix bounds checking in filemap_read()
    90c8482a5d97 net: fix crash when config small gso_max_size/gso_ipv4_max_size
    77aa9855a878 ipv6: release nexthop on device removal
    f241e4a78f6a misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
    30f2cd70c4f9 misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
    54c9f299ad7d misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
    980a236af12f mptcp: sockopt: fix getting IPV6_V6ONLY
    8fbd9487f676 kbuild: Add '-fno-builtin-wcslen'
    5d3779ceaac8 cpufreq: Reference count policy in cpufreq_update_limits()
    93cc7c7f9b83 KVM: arm64: Eagerly switch ZCR_EL{1,2}
    ec3efc04a6ce KVM: arm64: Calculate cptr_el2 traps on activating traps
    52a473ba8330 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
    08ce0d1ee622 KVM: arm64: Remove host FPSIMD saving for non-protected KVM
    5289ac43b69c KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
    978c0ccf80ce arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM
    6b3d37c9c61e arm64/fpsimd: Have KVM explicitly say which FP registers to save
    8be8ba9cf1df arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
    c4ab60a86c5e KVM: arm64: Discard any SVE state when entering KVM guests
    58ed930115b8 KVM: arm64: Always start with clearing SVE flag on load
    a2231da36777 KVM: arm64: Get rid of host SVE tracking/saving
    2f420df780c5 drm/sti: remove duplicate object names
    ada78110b2d3 drm/nouveau: prime: fix ttm_bo_delayed_delete oops
    4941966558a0 drm/amdgpu/dma_buf: fix page_link check
    80814924260c drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
    f2904fa2b9da drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
    be0fffc4152a drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
    0c02fcbe4a13 drm/amd/pm/powerplay: Prevent division by zero
    b7c41df49137 drm/amd/pm: Prevent division by zero
    c177517ea65c drm/repaper: fix integer overflows in repeat functions
    3d81ec24e7db perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
    93c5be4da097 perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
    609ed2fcc9b5 perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
    b55b385b3938 perf/x86/intel: Allow to update user space GPRs from PEBS records
    5ee09cdaf341 virtiofs: add filesystem context source name check
    aac80c3e05cb tracing: Fix filter string testing
    e5467a695337 riscv: Avoid fortify warning in syscall_get_arguments()
    7596182dc17f mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
    6b563dc85fb3 loop: LOOP_SET_FD: send uevents for partitions
    81565d0986a9 loop: properly send KOBJ_CHANGED uevent for disk device
    63d5a3e207bf isofs: Prevent the use of too small fid
    cd83035b6f2a i2c: cros-ec-tunnel: defer probe if parent EC is not present
    a33c035df01d hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
    877ee3ba2f78 crypto: caam/qi - Fix drv_ctx refcount bug
    cdd459a58bb6 btrfs: correctly escape subvol in btrfs_show_options()
    a70832d35559 nfsd: decrease sc_count directly if fail to queue dl_recall
    bf5f65aebeaf nfs: add missing selections of CONFIG_CRC32
    72f7ccad7ed5 nfs: move nfs_fhandle_hash to common include file
    41a125eb52d6 asus-laptop: Fix an uninitialized variable
    442a0ab6a4e9 ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
    1a19d2306753 ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
    440225ed4fbb Revert "PCI: Avoid reset when disabled via sysfs"
    2b109b99d45f writeback: fix false warning in inode_to_wb()
    9ac9ad08723d cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
    6bc390b02d4b riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
    854d0f048ead riscv: KGDB: Do not inline arch_kgdb_breakpoint()
    3c03e585860a riscv: Properly export reserved regions in /proc/iomem
    9ea760991c11 net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
    8ccdf5e24b27 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
    f7b3bddffff2 net: b53: enable BPDU reception for management port
    118d05b53034 cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
    a27526e6b48e net: openvswitch: fix nested key length validation in the set() action
    5c1313b93c8c net: mctp: Set SOCK_RCU_FREE
    18924cdfea58 igc: cleanup PTP module if probe fails
    7d2d77e51371 igc: handle the IGC_PTP_ENABLED flag correctly
    5572511776d4 igc: move ktime snapshot into PTM retry loop
    c1f174edaccc igc: fix PTM cycle trigger logic
    6d16d6cb212f Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    24b2cdfc16e9 Bluetooth: l2cap: Check encryption key size on incoming connection
    2d7c60c2a38b Bluetooth: btrtl: Prevent potential NULL dereference
    056f04935bd8 Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
    791daf8240ce RDMA/core: Silence oversized kvmalloc() warning
    bb93bd4b9920 RDMA/hns: Fix wrong maximum DMA segment size
    3af43d7282a8 RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
    e2c440b23f21 md/raid10: fix missing discard IO accounting
    f89ab86401c9 scsi: iscsi: Fix missing scsi_host_put() in error path
    2996144be660 wifi: wl1251: fix memory leak in wl1251_tx_work
    305741e7e632 wifi: mac80211: Purge vif txq in ieee80211_do_stop()
    9d00c0a807a3 wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
    3c619aec1f53 wifi: at76c50x: fix use after free access in at76_disconnect
    00999e369e9e scsi: hisi_sas: Enable force phy when SATA disk directly connected
    31676d55028a scsi: libsas: Add struct sas_tmf_task
    42bbb529955c scsi: libsas: Delete lldd_clear_aca callback
    04bbb1b72b55 scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal
    8b8e6d433bd9 scsi: hisi_sas: Factor out task prep and delivery code
    6587850b8827 scsi: hisi_sas: Pass abort structure for internal abort
    9ebfa3eb9d52 scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly
    9e5a0f577716 Bluetooth: hci_uart: Fix another race during initialization
    e8ea4dd6659f x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
    fb627b8fe4d7 ACPI: platform-profile: Fix CFI violation when accessing sysfs files
    46e22de65eb4 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
    72972552d0d0 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
    9242391c20b1 pinctrl: qcom: Clear latched interrupt status when changing IRQ type
    40c4c64507fe PCI: Fix reference leak in pci_alloc_child_bus()
    8730a3c6f0f1 PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
    fa4d10970ea3 of/irq: Fix device node refcount leakages in of_irq_init()
    90d3d651b985 of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
    52f0888eff56 of/irq: Fix device node refcount leakages in of_irq_count()
    bd8f17219533 ntb: use 64-bit arithmetic for the MSI doorbell mask
    94c1cf839b7a gpio: zynq: Fix wakeup source leaks on device unbind
    dd38803c9088 ftrace: Add cond_resched() to ftrace_graph_set_hash()
    422dd984f7ef dm-integrity: set ti->error on memory allocation failure
    9c5eedb065fa crypto: ccp - Fix check for the primary ASP device
    2e794415ff7f thermal/drivers/rockchip: Add missing rk3328 mapping entry
    0f7df4899299 sctp: detect and prevent references to a freed transport in sendmsg
    20035e675ca0 mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
    f3509cecd0fd mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
    7de3726a3afd sparc/mm: disable preemption in lazy mmu mode
    66a10239be04 arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
    2dd21fc16490 mtd: rawnand: Add status chack in r852_ready()
    e7d6ceff95c5 mtd: inftlcore: Add error check for inftl_read_oob()
    cef678a27711 mptcp: only inc MPJoinAckHMacFailure for HMAC failures
    b3088bd2a679 mptcp: fix NULL pointer in can_accept_new_subflow
    9ce88838fcea lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
    031b53078e88 locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
    90ee23c2514a mfd: ene-kb3930: Fix a potential NULL pointer dereference
    ad926f735b4d jbd2: remove wrong sb->s_sequence check
    3ba402610843 i3c: Add NULL pointer check in i3c_master_queue_ibi()
    c658e1302ee3 i3c: master: svc: Use readsb helper for reading MDB
    5d74f8a5fb3c vdpa/mlx5: Fix oversized null mkey longer than 32bit
    2883e9e74f73 ext4: fix off-by-one error in do_split
    899d0353ea69 bus: mhi: host: Fix race between unprepare and queue_buf
    65cc93278f69 ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
    9ae11b06c557 wifi: mac80211: fix integer overflow in hwmp_route_info_get()
    977fb8126e5c wifi: mt76: Add check for devm_kstrdup()
    8f80ade0f6ea clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
    c1e3583fb61f mtd: Replace kcalloc() with devm_kcalloc()
    ef922b40bb6d net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
    8f8ed592d8a1 mtd: Add check for devm_kcalloc()
    f195e94c7af9 media: venus: hfi_parser: refactor hfi packet parsing logic
    1ad6aa1464b8 media: venus: hfi_parser: add check to avoid out of bound access
    08ac0e22e456 media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
    e8396890db79 media: i2c: ov7251: Set enable GPIO low in probe
    7c3118db4998 media: i2c: ccs: Set the device's runtime PM status correctly in probe
    5a6b5aa8ebc1 media: i2c: ccs: Set the device's runtime PM status correctly in remove
    457a61c59856 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
    432f748824b6 media: streamzap: prevent processing IR data on URB failure
    fbcb584efa5c mtd: rawnand: brcmnand: fix PM resume warning
    b88004318aeb spi: cadence-qspi: Fix probe on AM62A LP SK
    0b08172a635d arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
    8cb58a817a45 arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
    1a646a6206e0 arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
    f6ea5a8a5344 arm64: cputype: Add MIDR_CORTEX_A76AE
    09a128539129 xenfs/xensyms: respect hypervisor's "next" indication
    b98fbad6abda media: siano: Fix error handling in smsdvb_module_init()
    680cc5303f7c media: vim2m: print device name after registering device
    32af5c1fdb9b media: venus: hfi: add check to handle incorrect queue size
    1b8fb257234e media: venus: hfi: add a check to handle OOB in sfr region
    83724b88175c media: i2c: adv748x: Fix test pattern selection mask
    84f2ca8d5f2d ext4: don't treat fhandle lookup of ea_inode as FS corruption
    8273ae803009 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
    831062d76d37 bpf: Add endian modifiers to fix endian warnings
    ed6ff2d48873 pwm: fsl-ftm: Handle clk_get_rate() returning 0
    1f45022f219b pwm: rcar: Improve register calculation
    dc12f37acbc3 pwm: rcar: Simplify multiplication/shift logic
    e3cf0c38d3ce pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
    7fa3d93d4d29 ktest: Fix Test Failures Due to Missing LOG_FILE Directories
    09dbf22fd68c fbdev: omapfb: Add 'plane' value check
    c250262d6485 PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
    1690b4949247 drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
    25c299517d58 drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
    62b3040a1a29 drm/amdkfd: clamp queue size to minimum
    0236f723b445 drivers: base: devres: Allow to release group on device release
    e2dacf842095 drm/bridge: panel: forbid initializing a panel with unknown connector type
    e33d1037fd89 drm: panel-orientation-quirks: Add new quirk for GPD Win 2
    b60523a75c2b drm: panel-orientation-quirks: Add support for AYANEO 2S
    cc301b9d48ab drm/amd/display: Update Cursor request mode to the beginning prefetch always
    0a5ba5e28b7b drm: allow encoder mode_set even when connectors change for crtc
    d71a57a34ab6 Bluetooth: hci_uart: fix race during initialization
    effeecfe60fc tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
    523fa0979d84 net: vlan: don't propagate flags on open
    5a194041bffd wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
    c6015d0f7a22 scsi: st: Fix array overflow in st_setup()
    f737418b6de3 ext4: ignore xattrs past end
    1648029cd302 ext4: protect ext4_release_dquot against freezing
    fd4c73a2669c ahci: add PCI ID for Marvell 88SE9215 SATA Controller
    67e16ccba74d f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
    714036b176ba ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
    a741f29ac8b6 jfs: add sanity check for agwidth in dbMount
    86bfeaa18f9e jfs: Prevent copying of nlink with value 0 from disk inode
    3d8a45f87010 fs/jfs: Prevent integer overflow in AG size calculation
    761e36cf8c86 fs/jfs: cast inactags to s64 to prevent potential overflow
    4f10732712fc jfs: Fix uninit-value access of imap allocated in the diMount() function
    91522aba56e9 page_pool: avoid infinite loop to schedule delayed worker
    691d45955eda ALSA: usb-audio: Fix CME quirk for UF series keyboards
    c30b45c78e1a ASoC: fsl_audmix: register card device depends on 'dais' property
    81b19dc8ad80 ALSA: hda: intel: Fix Optimus when GPU has no sound
    6b4449e4f033 HID: pidff: Fix null pointer dereference in pidff_find_fields
    4c5f8e594657 HID: pidff: Do not send effect envelope if it's empty
    b5d9c541ad33 HID: pidff: Convert infinite length from Linux API to PID standard
    01e1c8a26ea3 xen/mcelog: Add __nonstring annotations for unterminated strings
    595a9e7b8cda arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
    016cc0079e74 perf: arm_pmu: Don't disable counter in armpmu_add()
    4162ed24d454 x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
    0e297a02e03d pm: cpupower: bench: Prevent NULL dereference on malloc failure
    c2077a80caf2 umount: Allow superblock owners to force umount
    d504882159a2 nft_set_pipapo: fix incorrect avx2 match of 5th field octet
    99aa698dec34 net: ppp: Add bound checking for skb data on ppp_sync_txmung
    e342ea4ce54f nvmet-fcloop: swap list_add_tail arguments
    bea745327f00 ata: sata_sx4: Add error handling in pdc20621_i2c_read()
    3c1c0a8c1a07 ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
    81a5174e64ce net: ethtool: Don't call .cleanup_data when prepare_data fails
    ac91c6125468 net: tls: explicitly disallow disconnect
    ed06675d3b8c tipc: fix memory leak in tipc_link_xmit
    d0d720f92828 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
    e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: ce581f5cb80f1e6a405f70ba2fa23a09d9687e7c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Bruce Ashfield
b3b9ac7edc linux-yocto/5.15: update to v5.15.180
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    f7347f400572 Linux 5.15.180
    0d709c0ccceb mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
    35254cb9d115 tracing: Do not use PERF enums when perf is not defined
    3e47f3a703c6 mm, slab: remove duplicate kernel-doc comment for ksize()
    c1030da07a24 mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
    58bc361822db NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
    cdb796137c57 nfsd: put dl_stid if fail to queue dl_recall
    b0274ddac570 jfs: add index corruption check to DT_GETPAGE()
    78c9cbde8880 jfs: fix slab-out-of-bounds read in ea_get()
    b7531a4f99c3 ext4: fix OOB read when checking dotdot dir
    1b77a8c7f8b7 ext4: don't over-report free space or inodes in statvfs
    37e8719b1791 tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
    585464695f63 tracing: Fix synth event printk format for str fields
    caefd40151f7 tracing: Ensure module defining synth event cannot be unloaded while tracing
    81a85b12132c tracing: Fix use-after-free in print_graph_function_flags during tracer switching
    801bc749fe66 mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
    7fbfe8d99b2f ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
    92ba06aef655 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
    0a8f806ea6b5 x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
    5ac5f2a3a8ff x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
    2c4fe45351e5 btrfs: handle errors from btrfs_dec_ref() properly
    7b02f69bfb19 ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
    1df48e8773cf platform/x86: ISST: Correct command storage data length
    95789c2f94fd usbnet:fix NPE during rx_complete
    4331ae2788e7 drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
    e549cd6da1f2 drm/amd/pm: Fix negative array index read
    91264238e941 tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
    557f6adcd07d tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
    f8100551939b mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
    6991fabddd6f mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
    4c671d0377b8 can: flexcan: disable transceiver during system PM
    c79d1fba305d can: flexcan: only change CAN state when link up in system PM
    ef8b29398ea6 arcnet: Add NULL check in com20020pci_probe()
    b4513ad0f391 net: fix geneve_opt length integer overflow
    0baa3f0369a9 ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
    ca2adfc03cd6 netfilter: nft_tunnel: fix geneve_opt type confusion addition
    e7479a2549cb tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
    0162cb87b3cd vsock: avoid timeout during connect() if the socket is closing
    e3711163d14d net: mvpp2: Prevent parser TCAM memory corruption
    32ee79682315 net_sched: skbprio: Remove overly strict queue assertions
    a7e89541d05b netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
    b87f19c495cb netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
    018e6cf2503e ASoC: imx-card: Add NULL check in imx_card_probe()
    03fd0444e719 ntb: intel: Fix using link status DB's
    2429bdf26a0f ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
    de237129b9fd riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
    c4e72a0d7544 spufs: fix a leak in spufs_create_context()
    53b189651c33 spufs: fix a leak on spufs_new_file() failure
    90c4a3eaa7d5 hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
    051be169fb7c can: statistics: use atomic access in hot path
    fe2ffc3442bf ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
    c3021a955e77 drm/amd: Keep display off while going into S4
    3c9a43eef01d x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
    46c66d975a58 locking/semaphore: Use wake_q to wake up processes outside lock critical section
    26d4d84aa6cf sched/deadline: Use online cpus for validating runtime
    c3a3484d9d31 ksmbd: fix incorrect validation for num_aces field of smb_acl
    397e6aa03f9a affs: don't write overlarge OFS data block size fields
    4441c2658337 affs: generate OFS sequence numbers starting at 1
    35d7887ab2d1 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
    7b860d9a4d56 nvme-pci: clean up CMBMSC when registering CMB fails
    8dad8a6b4f61 nvme-tcp: fix possible UAF in nvme_tcp_poll
    2be5bed3e089 wifi: iwlwifi: fw: allocate chained SG tables for dump
    7929187c67a3 sched/smt: Always inline sched_smt_active()
    cb615d3fdaae octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
    f1e97333d34a octeontx2-af: Fix mbox INTR handler when num VFs > 64
    190d766abe6f ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
    1db23504775a ring-buffer: Fix bytes_dropped calculation issue
    55cf766eba06 ksmbd: fix multichannel connection failure
    571b342d4688 ksmbd: use aead_request_free to match aead_request_alloc
    bb7bdf636cef rtnetlink: Allocate vfinfo size for VF GUIDs when supported
    52a6316af117 exfat: fix the infinite loop in exfat_find_last_cluster()
    9b76b198cf20 objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
    b20a4ca247a5 fs/procfs: fix the comment above proc_pid_wchan()
    ccf40f82638d perf python: Check if there is space to copy all the event
    69abc7554403 perf python: Don't keep a raw_data pointer to consumed ring buffer space
    cdf417656af5 perf python: Decrement the refcount of just created event on failure
    be0f2d515164 perf python: Fixup description of sample.id event member
    1c0bd3d322ae i3c: master: svc: Fix missing the IBI rules
    c5d2d17aecb4 fuse: fix dax truncate/punch_hole fault path
    257fd2aa2893 NFSv4: Don't trigger uneccessary scans for return-on-close delegations
    17c99ab3db2b ocfs2: validate l_tree_depth to avoid out-of-bounds access
    d2421351549c kexec: initialize ELF lowest address to ULONG_MAX
    adb0ac53b73e perf units: Fix insufficient array space
    201e7d7c0e32 iio: adc: ad7124: Fix comparison of channel configs
    0922d86a7a60 fs/ntfs3: Fix a couple integer overflows on 32bit systems
    7041fafd0dc6 iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
    473362787faf coresight: catu: Fix number of pages while using 64k pages
    abb8f3369f44 soundwire: slave: fix an OF node reference leak in soundwire slave device
    ae44c01f3fbb isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
    b9d693b3bc25 clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
    f19a85216aa8 crypto: hisilicon/sec2 - fix for aead auth key length
    1c644d8ab3f6 x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
    ab776df91d67 mfd: sm501: Switch to BIT() to mitigate integer overflows
    f0447ceb8a31 RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
    6d662e7666f2 crypto: nx - Fix uninitialised hv_nxc on error
    a2d672786704 power: supply: max77693: Fix wrong conversion of charge input threshold value
    9b35d55bfc9f x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
    93c6fb0d18ad clk: amlogic: g12a: fix mmc A peripheral clock
    f95e0f36e592 clk: amlogic: gxbb: drop non existing 32k clock parent
    cc2817165e5e clk: amlogic: g12b: fix cluster A parent data
    8c9652d29438 pinctrl: tegra: Set SFIO mode to Mux Register
    b26ed1d80c48 IB/mad: Check available slots before posting receive WRs
    79103371b574 remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
    9a5b7f8842a9 RDMA/core: Don't expose hw_counters outside of init net namespace
    d82fd0fb9750 clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
    f6adccd0a887 pinctrl: renesas: rzg2l: Fix missing of_node_put() call
    93a0760d371e pinctrl: renesas: rza2: Fix missing of_node_put() call
    3b619f280328 lib: 842: Improve error handling in sw842_compress()
    eba7778cf9b9 bpf: Use preempt_count() directly in bpf_send_signal_common()
    948b7898a81a clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
    d974e177369c clk: samsung: Fix UBSAN panic in samsung_clk_init()
    b28c6712afb6 libbpf: Fix hypothetical STT_SECTION extern NULL deref case
    be6a831b44fe remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
    791de7357bdd of: property: Increase NR_FWNODE_REFERENCE_ARGS
    6e66bca8cd51 remoteproc: core: Clear table_sz when rproc_shutdown
    cca86355466f crypto: hisilicon/sec2 - fix for aead authsize alignment
    d512627292bc clk: amlogic: gxbb: drop incorrect flag on 32k clock
    8a16be14db76 fbdev: sm501fb: Add some geometry checks.
    7dc76ac3eb84 mdacon: rework dependency list
    dbac029069f8 fbdev: au1100fb: Move a variable assignment behind a null pointer check
    272a425d77ca PCI: pciehp: Don't enable HPIE when resuming in poll mode
    9ac06e063209 drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
    ce7ebca5488f PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
    8916ca26d4e6 PCI: Remove stray put_device() in pci_register_host_bridge()
    bb4a1eb2c6a1 drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
    9a376697fcac PCI: Avoid reset when disabled via sysfs
    8656d24467a9 PCI/portdrv: Only disable pciehp interrupts early when needed
    df97eb2fd468 PCI: brcmstb: Use internal register to change link capability
    fa2fcc7706fe PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
    e5cd58f61e9d PCI/ASPM: Fix link state exit during switch upstream function removal
    01be87ebbf44 drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
    67ccd3e9fdc7 drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
    49a69f67f535 drm/vkms: Fix use after free and double free on init error
    9842973b93c4 drm: xlnx: zynqmp: Fix max dma segment size
    1b990d384b28 drm/dp_mst: Fix drm RAD print
    271755cd8ff0 drm/bridge: ti-sn65dsi86: Fix multiple instances
    b02c23f38fe2 ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
    1cfb0ed41174 ALSA: hda/realtek: Always honor no_shutup_pins
    c877ac2c888d HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
    2453d54d6700 media: platform: allgro-dvt: unregister v4l2_device on the error path
    f343b4420263 perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
    3a96b835f82e lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
    4eb3afae45cd PM: sleep: Fix handling devices with direct_complete set on errors
    3155d5261b51 thermal: int340x: Add NULL check for adev
    c5e1a3d67651 EDAC/ie31200: Fix the error path order of ie31200_init()
    1f64ad3034dc EDAC/ie31200: Fix the DIMM size mask for several SoCs
    537a5a3de19b EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    ed68a544b931 selinux: Chain up tool resolving errors in install_policy.sh
    24045932e7e0 PM: sleep: Adjust check before setting power.must_resume
    3914a222d673 x86/platform: Only allow CONFIG_EISA for 32-bit
    3047aba14253 x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
    dc6e7db76a35 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    74e918950ba9 cpufreq: scpi: compare kHz instead of Hz
    990d17f5d35d x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
    471c89b7d4f5 watch_queue: fix pipe accounting mismatch
    ece3fc1c1019 media: i2c: et8ek8: Don't strip remove function when driver is builtin
    03c4c633a022 serial: 8250_dma: terminate correct DMA in tx_dma_flush()
    31f0eaed6914 memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
    df594b4bf294 net: usb: usbnet: restore usb%d name exception for local mac addresses
    f9f2b4139ac5 net: usb: qmi_wwan: add Telit Cinterion FE990B composition
    7a8e62c90f27 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
    7802030f86e4 tty: serial: 8250: Add Brainboxes XC devices
    463e16de8ab4 tty: serial: 8250: Add some more device IDs
    1e82f28f2958 counter: microchip-tcb-capture: Fix undefined counter channel state on probe
    889c71c613c0 counter: stm32-lptimer-cnt: fix error handling when enabling
    ce37a881271a ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
    1ca2169cc19d netfilter: socket: Lookup orig tuple for IPv6 SNAT
    523b9c2ed5dc ARM: Remove address checking for MMUless devices
    7da1f403ad80 ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
    db8e5866d1aa ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
    d7f1e4a53a51 atm: Fix NULL pointer dereference
    2498a3a95c80 HID: hid-plantronics: Add mic mute mapping and generalize quirks
    6e8093be53ed ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
    fdb2cd8957ac bpf, sockmap: Fix race between element replace and close()
    22b49d6e4f39 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
    f50efd386116 arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
    590327b49706 mptcp: Fix data stream corruption in the address announcement
    037e753561ec drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
    9b2da9c673a0 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
    daba84612236 soc: qcom: pdr: Fix the potential deadlock
    a35b68e55089 batman-adv: Ignore own maximum aggregation size during RX
    4a7d4f01f440 ARM: shmobile: smp: Enforce shmobile_smp_* alignment
    4b0b8445b6fd proc: fix UAF in proc_get_inode()
    4667e64b3916 mmc: atmel-mci: Add missing clk_disable_unprepare()
    8e500180904a regulator: check that dummy regulator has been probed before using it
    f45a322c9994 drm/v3d: Don't run jobs that have errors flagged in its fence
    0ffefd3117fb i2c: omap: fix IRQ storms
    4d9c2a0d8a27 Revert "gre: Fix IPv6 link-local address generation."
    fc0f223ea342 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
    82d9084a9789 net: atm: fix use after free in lec_send()
    d2ae4cc39c1a ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
    596a883c4ce2 ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
    76304cba8cba Bluetooth: Fix error code in chan_alloc_skb_cb()
    33a839830dcc RDMA/hns: Fix wrong value of max_sge_rd
    1d9e126a5db7 RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
    bd3774c05c8f RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
    efe544462fc0 RDMA/hns: Fix soft lockup during bt pages loop
    e6f5739f13f0 RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
    48dc65b3dd0c RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
    0eb62974d6fa ARM: dts: bcm2711: Don't mark timer regs unconfigured
    4296c2f111d6 RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
    5608b9b07a39 ARM: dts: bcm2711: PL011 UARTs are actually r1p5
    7a64c8ebf73e xfrm_output: Force software GSO only in tunnel mode
    7631e903a1d0 firmware: imx-scu: fix OF node leak in .probe()
    a140224bcf87 smb: client: fix potential UAF in cifs_debug_files_proc_show()
    9b7cabd24812 smb: client: Fix match_session bug preventing session reuse
    f435192e00bc drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
    53ce3ffe7b09 drm/amd/display: Check for invalid input params when building scaling params
    b4d89d5cb794 i2c: sis630: Fix an error handling path in sis630_probe()
    449aaab1338b i2c: ali15x3: Fix an error handling path in ali15x3_probe()
    35092c242e10 i2c: ali1535: Fix an error handling path in ali1535_probe()
    513f6cf2e906 cifs: Fix integer overflow while processing closetimeo mount option
    ea8e5dd4e4cd cifs: Fix integer overflow while processing actimeo mount option
    0c26edf477e0 cifs: Fix integer overflow while processing acdirmax mount option
    a13351624a6a cifs: Fix integer overflow while processing acregmax mount option
    2fc361f0d32c ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
    b14482befdb6 drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
    c402f184a053 ASoC: ops: Consistently treat platform_max as control value
    5defdaddd53a tcp: fix races in tcp_abort()
    105c66116a8b lib/buildid: Handle memfd_secret() files in build_id_parse()
    68ae5ef2dc98 qlcnic: fix memory leak issues in qlcnic_sriov_common.c
    1397715b011b drm/amd/display: Fix slab-use-after-free on hdcp_work
    0c0016712e5d drm/amd/display: Assign normalized_pix_clk when color depth = 14
    9e8637d974f7 drm/amd/display: Restore correct backlight brightness after a GPU reset
    70b8c6f7b061 drm/atomic: Filter out redundant DPMS calls
    18b5d857c649 x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
    479258418366 USB: serial: option: match on interface class for Telit FN990B
    8d57aa9f5207 USB: serial: option: fix Telit Cinterion FE990A name
    9ce2056eaada USB: serial: option: add Telit Cinterion FE990B compositions
    cdc013ff804b USB: serial: ftdi_sio: add support for Altera USB Blaster 3
    a755c6d1dfe7 block: fix 'kmem_cache of name 'bio-108' already exists'
    e51d136d3369 drm/nouveau: Do not override forced connector status
    d42130a5a228 mptcp: safety check before fallback
    4d63301ae35c x86/irq: Define trace events conditionally
    c21d1fa13902 fuse: don't truncate cached, mutated symlink
    0cae84544670 ASoC: tas2764: Set the SDOUT polarity correctly
    631bc990daea ASoC: tas2764: Fix power control mask
    2a0177da8a81 ASoC: tas2770: Fix volume scale
    fb97ca69cc21 nvme: only allow entering LIVE from CONNECTING state
    f7580f081edd sctp: Fix undefined behavior in left shift operation
    f25a991ea177 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
    75308c6bb93e net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
    eed857c0d173 ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
    e1b6ee40153b ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
    92d029655812 ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
    5664d28540ae thermal/cpufreq_cooling: Remove structure member documentation
    9f5921f38f46 s390/cio: Fix CHPID "configure" attribute caching
    64577690e49c sched: Clarify wake_up_q()'s write to task->wake_q.next
    007a849126ef HID: ignore non-functional sensor in HP 5MP Camera
    6e0397d0a4ec HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
    3ad860fd4be1 vboxsf: fix building with GCC 15
    01f5839123d6 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
    e8ed82ff391b ACPI: resource: IRQ override for Eluktronics MECH-17
    c737e2a5fb7f scsi: qla1280: Fix kernel oops when debug level > 2
    67aad09faab8 scsi: core: Use GFP_NOIO to avoid circular locking dependency
    b388e185bfad iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
    4a2ea3dd4eb9 powercap: call put_device() on an error path in powercap_register_control_type()
    54595d6e8b6f hrtimers: Mark is_migration_base() with __always_inline
    c26d65527f31 nvme-fc: go straight to connecting state when initializing
    e4cb0dd364af net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
    f90c4d657248 net/mlx5: Bridge, fix the crash caused by LAG state check
    057dbc5b72e9 net: openvswitch: remove misbehaving actions length check
    23721bbf1481 openvswitch: Use kmalloc_size_roundup() to match ksize() usage
    b6be0f687841 slab: Introduce kmalloc_size_roundup()
    4207e812e49f slab: clean up function prototypes
    cb4407c921e1 gre: Fix IPv6 link-local address generation.
    46ea2a7a8c27 netfilter: nft_exthdr: fix offset with ipv4_find_option()
    003d92c91cdb net_sched: Prevent creation of classes with TC_H_ROOT
    65b0a61ca237 ipvs: prevent integer overflow in do_ip_vs_get_ctl()
    e8544a5a97be netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
    29c419c64e9b net/mlx5: handle errors in mlx5_chains_create_table()
    77d9b2d60b57 Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
    b018706f5fdb netpoll: hold rcu read lock in __netpoll_send_skb()
    7274119e8128 net: dsa: mv88e6xxx: Verify after ATU Load ops
    e6902101f34f ice: fix memory leak in aRFS after reset
    595e855a0f38 netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
    10e33014552c pinctrl: bcm281xx: Fix incorrect regmap max_registers value
    179cf97ee278 fbdev: hyperv_fb: iounmap() the correct memory when removing a device
    70549c80fe80 ipv6: Fix signed integer overflow in __ip6_append_data
    21c0225b66b8 sched/isolation: Prevent boot crash when the boot CPU is nohz_full
    cfd5ee5a6684 clockevents/drivers/i8253: Fix stop sequence for timer 0
    f5dc10b910bd vlan: fix memory leak in vlan_newlink()
    e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    1b4c2b1574e7 usb: dwc3: Remove the duplicate code in the dwc3_suspend_common()
    96238227b1ba firmware: xilinx: Fix two enum-int-mismatch errors
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    80afbc1b2fd1 fpga: region: Drop unneeded part due to merge issue
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    b534e1adeb7c gpio: zynq: fix zynqmp_gpio not an immutable chip warning
    939540dec448 gpio: Don't fiddle with irqchips marked as immutable
    9201366ba1cd sound: xilinx: use hdmi-codec as dp audio codec
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    c1fac418c555 driver: soc: xilinx: rename cpu_number1 to dummy_cpu_number
    01867ba4c4bd net: axienet: Fix check for partial TX checksum
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    45f25f24d09f usb: dwc3: Restore the SDK changes in dwc3_core_soft_reset()
    ce9531008011 i2c: xiic: Drop the duplicate codes introduced by stable merge
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a764687951a8 usb: dwc3: gadget: do cleanup for dwc3_stop_active_transfer
    b687af038c30 arm64: dts: versal: add i2c devices
    dba87a9085b3 arm64: zynqmp: Skip frequency resetting of si570 clocks during probe
    b1a17a5b31c1 arm64: versal-net: Switch alias order for sdhci
    f2f423bf8b37 arm64: versal: Enable LPD DMA on vek280 board
    791764ddefd1 spi: spi-zynqmp-gqspi: Fix call trace during QSPI suspend
    2941442ba6c1 drm: xlnx: hdmi: Add VPSS bridge support
    6f9d0dea524e drm: to find the standard mode in CEA table
    a024a464ec78 phy: xilinx-xhdmiphy: Add support to GTYE5 and GTYP devices
    45433dc914fe dt: bindings: phy: Add new compatible string to support HDMI GT controller
    bc4f21863016 misc: xilinx-ai-engine: Skip error interrupt backtrack for AIE-ML
    bc97498a91be arm64: versal-net: Add 'power-domains' and 'reset-gpios' properties
    f0072d866c6d drm: xlnx: dp: share the dp registers to dp audio driver
    4d87a5a7432f drm: xlnx: dp: Fix the condition check and get audio clock rate
    fd0dc83f179e v4l: xilinx: dprx: Add HDCP1X support
    20584a013b2c dt-bindings: xilinx: Add hdcp1x support for DPRXSS
    7dd6cc0aeb13 v4l: xilinx: Add HDCP1X rx driver
    86b57ba6fd1e staging: xlnx_hdcp1x: Add HDCP1X cipher functionality for Xilinx devices
    f45966d27e80 Revert "arm64: zynqmp: Add power domain description for PL"
    b205a9a8228e arm64: xilinx: Add Versal NET platforms
    0a60bfafdc59 dt-bindings: xilinx: Add support for Versal NET power/reset
    adc401f52fc1 arm64: zynqmp: Add support for vck190-revB SC board
    ef74629dd1cc arm64: xilinx: Add support for vek280 revA board
    c6cb3f956e4e arm64: versal: Add support for Versal vhk158 board
    df90c617ecc5 iio: adc: versal-sysmon: Add nodeid property to DT
    6029118d61a2 iio: adc: versal-sysmon: Support multi SLR sysmon
    95b03d322808 iio: adc: versal-sysmon: Add nodeid in DT doc
    6e93ee82927e iio: adc: versal-sysmon: Add nodeid to PLM interface
    7bc75b4ab0d1 arm64: zynqmp: Differentiate clock nodes with 'clock-output-names' property
    adf0a9df7c4c arm64: zynqmp: Differentiate clock nodes with 'clock-output-names' property
    3b3aea49f9ed arm64: zynqmp: Correct labels of TCA6416A GPIO Expander
    2a8036a4dab7 arm64: zynqmp: Add mtd partition for secure OS storage area
    a335ba3699fe Revert "arm64: zynqmp: Comment sata phy setting for zcu102"
    524e12d43f6a spi: increase timeout value for spi transfers
    1676e9bfd9e5 i3c: master: dw: HACK: Update the scl timings
    a4b648c0b36b spi: spi-cadence-quadspi: Add module param to configure read timeout
    64389588052f firmware: xilinx: add support for Versal NET
    5c6838583891 reset: reset-zynqmp: add support for Versal NET platform
    56aeff13ab84 dt-bindings: reset: add compatible string for Versal NET reset driver
    69cb391ebffc dt-bindings: arm: cpus: Add ARM Cortex-A78
    d1501fb479c0 Revert "pinctrl: pinctrl-zynqmp: Add support for output-enable and bias-high-impedance"
    4b0747f59ad5 drm: xlnx: hdmi: Add support for arbitrary resolutions
    45de2ad5e676 dt-bindings: display: xlnx: hdmitxss: Add v1.2 compatible string
    db7d84274707 drm: xlnx: hdmi: update video timing parameters
    1a224c0dbc75 drm: xlnx: hdmi: Update phy configure call sequence in HPD event handler
    4109612448f9 mtd: spi-nor: Add support for Macronix mx66l2g45g flash
    d6d12b247476 mtd: spi-nor: Add flash lock/unlock support for Macronix flashes
    f4b6421bf219 net: macb: Fix ZynqMP SGMII non-wakeup source resume failure
    ae19c886f666 staging: xilinx-tsn: Fix compilation error in xilinx-tsn when PHYLIB is configured as a module.
    c9846ef8df8a staging: xilinx-tsn: Separate mdio related functions from axiethernet
    3bc6aeeb2d83 misc: xilinx-ai-engine: fix shim dma laddr mask
    a8a0a105f786 clk: versaclock7: Use a property to differentiate between nodes
    6562d87b8057 dt-bindings: watchdog: Add versal support
    2790bd839c7b dt-bindings: watchdog: Convert Xilinx watchdog bindings to json-schema
    abef39c9a8e1 crypto: xilinx: Handle invalid RSA key size
    f53aa5077538 dt-bindings: gpio: gpio-xilinx: Convert Xilinx axi gpio binding to YAML
    c13d3f34a0a1 clk: versalclock7: Use index to output mapping to reference banks
    3dc3245a3f0e arm64: versal: Add resets property in ospi DT node
    cc5b3e7c17e7 arm: dts: versal: add resets property for usb
    9c421b280643 arm64: versal: add reset-controller node
    4e940e2c56b2 arm: dts: versal: add ref_clk property for REFCLKPER calculation
    e4f7870ad1c7 arm64: versal: Add OCM controller node
    118d91dd45f8 arm64: versal: Wire gpio ethernet phy reset properly
    446e621dac56 arm64: zynqmp: Add missing tca6416 to zynqmp SC
    fc484a82a4c3 arm64: zynqmp: Add linux,code for gpio button
    f7206a5d36aa arm: dts: Add xlnx prefix to GEM compatible string
    7ef94d498482 arm64: versal: add xilsem edac node
    72c6f2bbe946 arm: dts: zynqmp: add snps,xhci-reset-on-resume quirk
    dc65c26efecc misc: xilinx-ai-engine: Fix uninitialized symbol 'dev'
    1c50544169ac usb: gadget: udc-xilinx: fix compilation error
    930f47675f3e usb: add quirk for xhci reinit warning on resume
    2f683f948012 dt-bindings: usb: dwc3: Add snps,xhci-reset-on-resume quirk
    d5fbdbe50e99 usb: gadget: udc-xilinx: replace memcpy with __memcpy_toio
    989fb52752ae net: cdns,macb: use correct xlnx prefix for Xilinx
    2dd512429d54 dt-bindings: net: cdns,macb: use correct xlnx prefix for Xilinx
    3fc7813ff947 arm64: zynqmp: add ref_clk property for REFCLKPER calculation
    ffd2602f73d9 arm64: zynqmp: Add clk bindings for RC21008A clock generator
    a143eb6d1e8a arm64: zynqmp: Add RC21008A clock nodes for vhk158
    7a3690b5bc82 drm: xlnx: sdi: Fix coding style (double space)
    ec807b81bc02 v4l: xilinx: sdirxss: HFR handling for 12G mode
    6110b1f1af22 drm: xlnx: sdi: HFR feature support
    2bc5b30b1d7a drm: xlnx: sdi: YUV444 format support
    15e5bfdc9985 drm: xlnx: dsi: Remove holes in dsi structure
    e854fc09f0d5 soc: xilinx: Fix for call trace due to the usage of smp_processor_id()
    5ccd0b215d18 net: macb: Fix macb mdiobus handing for DT nodes without phy-handle
    506f2abf47dc spi: spi-xilinx: Fix spi timeout issue with threaded irq enabled
    0d0f78000535 v4l: xilinx: dma: Fix back pressure on upstream entities in LLP2
    32b9cd58cf4c misc: xilinx_trafgen: deprecate the driver
    3f44aaf3a23f soc: xilinx: fix unhandled SGI warning message
    b62d1e4af698 PCI: xilinx-cpm: Add support for Versal CPM5 Root Port
    5b365e4275c1 dt-bindings: PCI: xilinx-cpm: Add Versal CPM5 Root Port
    5b27a7c40acc PCI: xilinx-cpm: Rename xilinx_cpm_pcie_port to xilinx_cpm_pcie
    a7ad86e82828 misc: xlnx_dpu: Dual license update for DPU header driver: GPL + Apache
    a0b60881ea8d iio: adc: versal-sysmon: update irq handling
    26f487d904ec iio: adc: versal-sysmon: fix write reg. in secure mode
    156016dbeb05 drm: xlnx: dptx: Change the VTC sub-core offset address
    858709bc53cf dt-bindings: display: xlnx: Add VTC offset DT property
    708f34f0b99e dt-bindings: display: xlnx: Add support for DP Tx SS v3.1
    6d333b80caeb misc: xilinx-ai-engine: Make direct writes to sysfs export buffers
    7f16cabb6602 v4l: xilinx: sdirxss: No payload handling for SDI 3G Mode
    28b785363ecc net: macb: In shared MDIO usecase make MDIO producer ethernet node to probe first
    66a2a7563426 edac: xilinx: Added EDAC support for Xilinx XilSem
    4cc9a928e978 firmware: xilinx: Add XilSem error events
    c725b98c50df dt-bindings: edac: Add bindings for Xilinx Versal EDAC for XilSem
    c5b7a7b5ecdf mtd: spi-nor: Add lock/unlock support for ISSI flash parts
    d94a3382260c phy: xilinx_dpgtquadphy: Add missing bitfield header
    dc5e3442b5ac misc: xlnx_dpu: Update the compatible
    6fc04412573a dt-bindings: misc: xlnx_dpu: Update the compatible for dpu v4.0 and v4.1
    180aed3313eb mtd: rawnand: arasan: Provide an additional ->exec_op() check
    3eea39e8b077 mtd: rawnand: Check the CHANGE_READ_COLUMN from nand_read_subpage() is supported
    0f230ac02255 mtd: rawnand: Add a helper to check if a CHANGE_READ_COLUMN is possible
    5383b60ee54a Revert "mtd: rawnand: arasan: Prevent an unsupported configuration"
    f8452cea3ad3 ARM: zynq: Fix OCM mmio-sram node
    e54dd6c00052 fpga: zynqmp: Make word align the configuration data
    d7f814493759 v4l: xlnx: sdirxss: Fixed kernel-doc warnings.
    28c759ccf4aa v4l: xlnx: sdirxss: Reset s_stream flag on STREAMOFF always
    4b345156490d v4l: xlnx: sdirxss: Continue streaming on connecting after disconnect from same source
    014c671b4045 mtd: spi-nor: swp: Fix lock/unlock failure on spansion flashes
    19a0850f948b mtd: spi-nor: swp: fix unlock lower area failure
    fbd2f8235aee mtd: spi-nor: Enable lock/unlock feature for s25fl256s spansion flashes
    61db1b6710e8 dt-bindings: ata: ahci-ceva: convert to yaml
    f3dae8232883 misc: xilinx_flex: deprecate the driver
    cf0e98a17340 clk: versalclock7: Add Renesas versaclock7 ccf device driver
    3f48da69fc36 dt-bindings: Renesas versaclock7 device tree bindings
    c6ee26d27753 ARM: zynq: Deprecate zynq ocmc driver
    50393cac74b6 spi: spi-cadence: Fix SPI NO Slave Select macro definition
    1e8e78d31ca4 v4l: xilinx: dprx: Fix compilation error
    3c31cedf8db5 misc: xilinx-ai-engine: Deprecate support for Versal S80 ES1
    d8b86a06344f spi: spi-xilinx: Fix bits_per_word_mask
    cf1a0b008089 sound: xilinx: pcm: Convert driver to use SPDX license header
    5f55231f417c sound: xilinx: pcm: Fixes NULL pointer dereference while setting config from DAI data
    9a7703423a4c soc: xilinx: remove pm_final_initialize call
    69f346cf74c1 soc: xilinx: add a to_zynqmp_pm_domain macro
    725660ddd2dd soc: xilinx: use a properly named field instead of flags
    80d7a7d8c087 soc: xilinx: cleanup debug and error messages
    6a198f68905c soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
    57d4a8a797d9 drm: xlnx: dptx: Add support for static HDR
    ab0b94b1da3c arm64: versal: dts: drop legacy property #stream-id-cells
    bf293c877963 arm64: xilinx: dts: drop legacy property #stream-id-cells
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    bd383081ee5b usb: dwc3: delete dwc3_xhci_plat_priv
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    305f859e03d4 dt-bindings: net: xilinx: document xilinx emaclite driver binding
    ae6e40cf8a72 drm: xlnx: mixer: Correct the fourcc string copy
    35a3ae1ce469 usb: dwc3: xilinx: Make regulator ops const
    823e05bbad26 usb: dwc3: xilinx: Fix alignment issues
    07960d1ac23d usb: dwc3: xilinx: Make dwc3_xilinx_wakeup_capable() static
    53bc249b031d pinctrl: pinctrl-zynqmp: Fix kernel-doc warning
    c2d2fc3e21ed net: xilinx: fix mixed declarations and code compile warning
    ef547c815f8f arm64: zynqmp: Add 'i2c-mux-idle-disconnect' property for vpk180
    9ea37dfc8a7d arm64: zynqmp: Set qspi tx-buswidth to 4
    8198f12c7f97 arm64: zynqmp: Add linux,code for fwuen button
    f428057f09ee arm64: zynqmp: Enable DP for kv260-revA board
    4cc745fe47d1 arm64: zynqmp: Fix usb node drive strength and slew rate
    1eab728efe96 arm64: zynqmp: Add pinctrl setting for zynqmp-sc-revB
    9714cc71a36e arm64: zynqmp: In sc-revB dts move PHY reset to PHY node
    5665349a16fe arm64: zynqmp: Invert the pwm-fan polarity in SC
    0b1cb42afa31 arm64: versal: Set qspi tx-buswidth to 4
    fb3165f182ca dts: versal: Enable LPD DMA on Versal boards
    a4ab0c56fa2b arm64: versal: Specify console and early console for vck5000
    f82a172b753a pinctrl: pinctrl-zynqmp: Add support for output-enable and bias-high-impedance
    258bd8ad12e1 dt-bindings: pinctrl-zynqmp: Add output-enable configuration
    7fc647e5b00f v4l: xilinx: dprx: Enable audio to receive infoframes with static HDR metadata
    1016f2e05f76 checkpatch: get default codespell dictionary path from package location
    c44978da576f v4l: xilinx: dprx: Add support for static HDR
    dd621316483a staging: xilinx-tsn: initialize timer_priv struct in axienet_local
    bae1ad6e454b misc: xilinx-ai-engine: Fix return value of sysfs current_freq read op
    29b397ecec62 drm: xlnx: zynqmp_dp: Fix kernel dump messages when the DP cable is disconnected
    bbc3330950e3 staging: xilinx-tsn: set default pcp to queue mapping
    3c89677edd67 firmware: xilinx: export sysmon used APIs
    ad1645056c33 dt-bindings: PCI: xilinx-cpm: Fix reg property order
    536a807501dc dt-bindings: net: xilinx_tsn: Document MCDMA properties
    3420aa064190 dt-bindings: net: xilinx_tsn: Add ranges property
    f511502dd6ff usb: dwc3: xilinx: fix usb3 non-wakeup source resume failure
    e8345d774971 usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
    a272e82ea851 drm: xlnx: sdi: Fix typo in kernel-doc
    a5d85cd868d5 drm: xlnx: sdi: reset gt-phy based on device tree property
    c29e7f0f91ac v4l: xilinx: multi-scaler: Fix warnings for unchecked return value
    b6fa9d374751 staging: xilinx-tsn: Remove hardcoded interface names
    246849ced049 staging: xilinx-tsn: Add ethtool hook to read phc associated with ep
    78f87e970bd5 staging: xilinx-tsn: Fix axienet_tsn ioctl
    03dea74d4542 dt-bindings: mailbox: zynqmp_ipi: convert to yaml (sync with upstream v5)
    f2ba685e03a8 staging: xilinx_tsn: Correct skb passed in error handling path
    ec5600035771 net: xilinx: Correct skb passed in error handling path
    0784f34cb4c6 Revert "spi: spi-cadence: Fix uninit_use coverity warning"
    877926d2392f xilinx-ams: Fix UBSan Warning
    28e9f1e57866 net: macb: Use device_link framework to specify suspend/resume dependency
    0f00d2f4bd7f fpga: Add ps-pl reset handling through xilinx afi driver
    f96f1a495a59 dt-bindings: fpga: Add property "resets" to xilinx-afi driver
    526d37391236 arm64: xilinx: Add support for vhk158 system controller
    28a080a95635 mtd: spi-nor: For erase size equal to 0 set erase size_shift to 0
    c5d8a348b129 fpga: zynq-fpga: Ensure proper xCAP interface switch
    3d5b816d13ff net: macb: Fix ethtool WOL helper
    2668745ee5e4 mmc: sdhci-of-arasan: Add NULL check for data field
    c0e396f04c42 v4l: xilinx: dprx: Fix dtg enable register update
    b1fd62d3794b crypto: xilinx: Mark zynqmp-aes.c and zynqmp-sha-deprecated.c as deprecated
    a5b0e6bf456d mtd: spi-nor: Fix read/write failures with 16MB flashes connected in dual parallel or stacked mode
    242f0e824254 net: xilinx: Fix TX TS FIFO read sequence
    269ca22b10eb spi: spi-zynq-qspi: Remove multiple instances of clock enable
    39f68769a590 drm: xlnx: pl_disp: Add strict check of video format in dt parsing.
    52946832ebbf ASoC: xilinx: Sync up with upstream version
    7752c80971ab arm64: xilinx: Fix opp-table-cpu
    c22cef7e09f8 dt-bindings: watchdog: xps-timebase: Align filename
    6d3f544a86ec dt-bindings: media: xilinx: xcsi2rxss: Declare fixed value with const
    1d371a0798ff dt-bindings: soc: xilinx: ai-engine: Fix node name example
    705f2010736b driver: soc: xilinx: Update function prototype for xlnx_unregister_event
    9d053bdc8eeb driver: soc: xilinx: Add support of multiple callbacks for same event in event management driver
    9af0d6a3aef9 net: xilinx: Fix indentation in axienet probe
    a78cb33266fb Revert "net: macb: Process tx timestamp only on ptp packets"
    e4fdec05b704 dt-bindings: iio: xilinx-ams: Fix typo in VUSER indices
    4bd43cc02aa8 v4l: xilinx: dma: Fix warnings for UNINIT
    e05c4cebebd8 xilinx: zynqmp: Fix i2c addresses for vck190 SC
    672fdb9349dd xilinx: zynqmp: Fix tps544/u3007 node description
    a22c64f7e98f xilinx: zynqmp: Wire SC dtbs for vpk120/vpk180
    16f0a5eb1b6c arm64: xilinx: Update tps53681 i2c address
    e763d738aa7e tty: serial: uartps: add missing mutex_unlock in cdns_get_id()
    478d52c4d0b9 arm64: xilinx: Use zynqmp prefix for SOM dt overlays
    daecb3e0d436 media: xilinx: Fix typos in Kconfig (RGB2YUV)
    44cbed465da0 dt-bindings: mailbox: zynqmp_ipi: convert to yaml
    d6396ec7cd27 iio: versal-sysmon: fix for_each_child.cocci warnings
    53b3938cebb4 clk: clk-xlnx-clock-wizard-v: fix missing bitfield include
    5a0db4eef82d clk: clk-xlnx-clock-wizard: fix missing bitfield include
    db963525c49d misc: xilinx-ai-engine: Null terminate local event sysfs buffer
    df38209ac2e0 net: xilinx: Move Xilinx TSN to staging
    1b1dd83c8936 net: xilinx: Fix ep ioctl
    b7f48dd8077b net: xilinx: Pass phy interface to of_phy_connect()
    9c72219a9872 net: xilinx: Simplify device reset sequence
    30c5fd86a239 net: xilinx: Add support for dynamic configuration of Layer 2 stream identification
    f6cdac24dec6 net: xilinx: Add barriers to fix bootup, switch cam entry and qci issues
    5c0dd2feed41 net: xilinx: Change TADMA from discrete to continuous
    e01cf3531a6c net: xilinx: EP only data path change
    1cfde22c3c9b dt-bindings: Add EP MCDMA related bindings
    fafc235e861f net: xilinx: TSN endpoint extension support
    c3dd0448af02 dt-bindings: net: Add Xilinx TSN extended endpoint bindings
    733838099e66 net: xilinx: Add check for minimum number of MCDMA Rx queues
    9b2f9e39e564 net: xilinx: Compile time pcp mapping
    6cfc052c38c9 net: xilinx: Add support for enabling preemption
    b196e7042eb9 net: xilinx: Add PTPv2 support
    55db12099986 net: xilinx: TSN queue numbers
    ca5e422780fa net: xilinx: Modify CB and QCI ioctl api
    cc16dae4738c net: xilinx: Change irq name with details
    ff7eeab1c6e6 net: xilinx: Add default cam entries for Management queue
    dcf32da3a96e dt-bindings: xilinx_tsn_switch: Document number of ports
    b57e49066dd4 net: xilinx: Add switch device support
    e64a38334bf2 net: xilinx: Free the reference to ep, when register_netdevice fails
    32a499932fd6 net: xilinx: Access qbv registers only when Qbv is enabled
    d34db2bde51e net: xilinx: Add a separate function to set mac address for ep
    4d00d9cd12c8 net: xilinx: Add TADMA driver support
    e961534b71cd dt-bindings: Add TADMA specific properties
    c8b4f3ed1ce4 net: xilinx: Set default pcp value for egress queue 1
    849e48518df7 net: xilinx: Add support for tag/untag options in switch cam
    f95c2e62ae45 net: xilinx: Enable ipv when qci isn't enabled.
    59321d05ec32 net: xilinx: Change the name of cam add/del function
    d41085e4d0e8 net: xilinx: Add support to read switch CAM entries
    715a9296a86b net: xilinx: Add native vlan support in PL TSN driver
    6d6d74f8916d net: xilinx: Add per vlan HW learning support
    f4d9fdd1ac50 net: xilinx: Add port vlan membership support in PL TSN driver
    8db4cbf63242 net: xilinx: Add switch port state change support
    b83d7b5be013 net: xilinx: Add switch learning support in TSN driver
    756cd193b566 net: xilinx: Fix HW hang issue for accesses to KEY2 and TV1 registers
    69e7a85da261 net: xilinx: Correct register write values for cam read/write
    670a351941c7 arm64: zynqmp: Add dmas, gpu, rtc, watchdogs and opp nodes for SOM
    91cc4e0437ed arm64: zynqmp: Add power domain description for PL
    173f84cf056a drivers: crypto: Return error code if data size is out of bounds
    d872cab1a5dd arm64: versal: Update USB node handle from dwc3 to usb
    405f9ccf0bfd arm64: versal: Add support for sysmon SSIT
    2dc7bdf85d6f arm64: zynqmp: Add pwm-fan node and ttc0 pwm-cells property
    42a075cbb6bd arm64: zynqmp: Add pwm-fan node and fix ttc0 pwm-cells property
    6e9e5a0f2d5c arm64: zynqmp: Comment sata phy setting for zcu102
    e07cf3453cd7 dmaengine: xilinx: frmbuf: Corrected error checking condition in fid_err and fid_out getter functions
    a07d44125257 Revert "net: macb: Use pm_runtime_force_resume/suspend APIs in MDIO helper functions"
    c3cde6f408eb net: macb: Use pm_runtime_force_resume/suspend APIs in MDIO helper functions
    1cd222a36855 net: macb: Add ethtool support to advertise WOL
    58598a61f071 crypto: xilinx: Add upstreamed SHA driver
    3d6b240702c2 firmware: xilinx: Used lower_32_bits and upper_32_bits
    dd70f52891d8 dmaengine: xilinx: ps_pcie: Remove ZynqMP PS-PCIe End Point Driver
    d6c913fa811c sound: soc: xilinx: Correct channel status register value for 48k sampled audio
    41e39b1a26ef misc: xilinx-ai-engine: fix return for overlay use case
    0ad2ae8f6c0e drivers: soc: xilinx: Fix error message on SGI registration failure
    b60de5d6d124 mmc: sdhci-of-arasan: Add delay to reach card stable state
    edf15171fec0 mmc: sdhci-of-arasan: Fix SDx_BASECLK configuration issue
    24341495b907 edac: xilinx: make event manager registration configurable
    17de17c9b0f4 can: xilinx_can: Add Transmitter delay compensation (TDC) feature support
    43179e9939aa misc: xilinx-ai-engine: Fix clock frequency to QoS conversion
    47f94d3224f7 misc: xilinx-ai-engine: Query AIE clock by name ID
    2ed95369da0c staging: uartlite-rs485: Advertise RS485 CAP
    92f922b0df6f staging: uartlite-rs485: Initial commit to add drv
    04e19d32857f drm: xlnx: Update DSI-Tx Kconfig
    b3e238b307c5 drm: xlnx: Move SND_PCM_ELD selection under DRM_XLNX
    3a2e6a1fb998 v4l: xilinx: axis-subsetconv: Add driver for axis subset converter
    9bc63bcff8bc dt: bindings: media: xilinx: Add device tree bindings for subset conv
    b353d2844ba3 dt-bindings: can: xilinx_can: Convert Xilinx CAN binding to YAML
    4e5de7229167 fpga: select FPGA_BRIDGE for 'Xilinx LogiCORE PR Decoupler' helper
    c4948b8ad9cf spi: spi-cadence-quadspi: Fix ospi resume failures
    90ffe730ebb2 drm: xlnx: Update DPTX kconfig setting
    bb6fb1716df2 ASoC: xlnx: Remove unnecessary dependency
    bba128d4554b drm: xlnx: hdmi: Update pixel max rate to support higher resolutions
    e21d0907db59 drm: xlnx: hdmi: Correct DDC write field logic
    6a8608aa702f drm: xlnx: hdmi: Get maximum link rate and number of lanes supported by sink
    6fc52f42b782 misc: xlnx_dpu: Add debugfs interface to export memory and regs
    c1e2986106a4 misc: xlnx_dpu: add helper function to dump all registers
    46c6c5ba9bd8 misc: xlnx_dpu: Add Xilinx DPU IP driver for Vivado tool flow
    dc2bc15bc958 dt-bindings: misc: xlnx_dpu: Add DPUCZDX8G v3.4 documentation
    4bef67f55650 sound: soc: xilinx: Remove using hdmi_codec_driver
    79e7069841de drm: xlnx: dptx: Add audio codec driver support
    825db638de6c dt-bindings: timer: Update pwm-cells value ranges
    81e55b86faac pwm: pwm-cadence: Handle pwm-cells through of_xlate
    26e42e6912cd clk: xilinx: vcu: don't set pll_ref as parent of VCU(enc/dec) clocks
    87421eaa1ac1 net: axienet: Add coding style related fixes
    5b13760a36db net: axienet: Fix missing kernel description warnings
    e4d309d076c7 net: axienet: Fix warnings related to function prototype
    a0adc0ff7488 dt-bindings: remoteproc: Update lockstep/split R5 configuration values
    3427bd54cfc0 media: i2c: ap1302: Update the min values for ap1302 controls
    fb77c972cb37 dt-bindings: xilinx: Fix issues with dprxss dt binding yaml
    a69af5c0b18d media: v4l2-tpg: add support for new pixelformat V4L2_PIX_FMT_YUV444P
    23d3b36c64e0 dmaengine: xilinx: frmbuf: Add support for 3 planar YUV444P 8bpc
    3083b1684e99 dt-bindings: dma: xilinx_frmbuf: Add support for 3 planar YUV444P 8bpc
    060b8d3b18b7 v4l: xilinx: vip: Support for 3 planar YUV444 8bpc format in contiguous memory
    7545fa6a05c3 media: v4l: Support 3 planar YUV444P 8bpc pixel format in contiguous memory
    4f6844b5ac05 mtd: spi-nor: Avoid updating the flash_info struct in dual and stacked modes
    f150364be8ee xlnx: drv: m2m: Fix SPDX license coding style
    695712e4ab06 dma: xlnx: drv: Added failsafe code for mem2mem DMA channels init-deinit
    54235ce1174a misc: xilinx-ai-engine: log additional hardware info
    80c27fa6deb0 Revert "ARM: zynq: Fix nand partitions for zc770-xm011"
    d6e88b17b851 sound: soc: xilinx: Added 44.1k & 48k sample rate support for DP
    d66a9c83720c arm64: xilinx: dts: Move DP audio registers to separate node
    705655d6eabb dt-bindings: display: xlnx: extract zynqmp dpaud setting to separate binding
    ae68eb919a6d arm64: zynqmp: Add PHY description for SGMII on vck190 SC
    bd1756c82909 v4l: xilinx: dprx: Add unplug handler function in work queue
    7c8c8e2308fb net: xilinx: axiethernet: Change the link up sequence from Block lock to Rx status and valid Rx code.
    15917379c285 drm: xlnx: sdi: Add extra check to get the correct timing table index
    ce99647324d6 net: macb: In ZynqMP initialization make SGMII phy configuration optional
    9b4766ad4244 dmaengine: xilinx: frmbuf: Add support for 3 planar YUV444 10bpc
    926d8238dbcc dt-bindings: dma: xilinx_frmbuf: Add support for 3 planar YUV444 10bpc
    0b150b983835 dmaengine: xilinx: Handle IRQ mapping errors
    69e5e44f3793 v4l: xilinx: vip: Support for 3 planar YUV444 10bpc format in contiguous memory
    138ef0d4fc8c media: v4l: Support 3 planar YUV 444 10bpc pixel format in contiguous memory
    d65f44ad3832 drm: xlnx: zynqmp_dpsub: Add 3 planar YUV444 10bpc format in contiguous memory
    c514aca92bc4 misc: xilinx-ai-engine: balance braces
    b4c4774ddb8e misc: xilinx-ai-engine: add dev_gen description
    8ec5d5684754 misc: xilinx-ai-engine: release lock before return
    eb0cb99a3483 firmware: xilinx: fix backward compatibility
    a1cd3af8e4ce v4l: xilinx: hdmirx: Fix incorrect framerate size for pixel repeat cases
    c876b05d40db v4l: xilinx: hdmirx: Fix reference clock based on TMDS clock ratio
    135ca4c80c7b firmware: xilinx: fix build warnings
    c9064bbb7ffc mtd: spi-nor: Enable 4byte opcode for Winbond w25h02jvt flash
    2cd6e9d45640 spi: spi-zynq-qspi: Add spi-mem to driver dependencies
    ea98c7881b06 spi: spi-zynqmp-gqspi: Update driver dependencies
    f2178afb4243 drm: xlnx: pl_disp: Add condition check for VTC bridge
    4e7870b5ab84 spi: spi-zynqmp-gqspi: direct read made word aligned
    b80cebdc0ed8 net: axienet: Handle dma mapping errors in RX datapath
    7ade4f447ef6 net: axienet: Handle dma mapping errors in TX datapath
    066ad7abae5c net: axienet: Fix DMA memory error handling during initialization
    7d97ac9971d5 mtd: tests: Fix eraseblock read speed miscalculation for lower partition sizes
    eda0dc1823fe usb: dwc3: xilinx: Update GPIO access api with sleep
    eed7da1270ca v4l: xilinx: hls: remove from the UAPI header kernel specific __user macro
    7a718138a774 arm64: zynqmp: Fix bias setting for gem1
    1fd46e94c354 usb: gadget: tcm: error handling for each command allocation
    fbf98ca0770f firmware: xilinx: enable feature check for ZU+
    efe5a4f4aeff ASoC: xlnx: Set dai_fmt for hdmi and dp sound cards
    2f3362414dd9 dt-bindings: ptp: xilinx: Add additionalProperties
    bd9b6a376dbf arm64: versal: Add all missing dt files for Xilinx boards
    368185cfe58f arm64: zynqmp: Add all missing dt files for Xilinx boards
    037135b9895f arm64: zynqmp: Add the latest changes for SOM boards
    ec844bf7b325 arm64: xilinx: Fix dtb filename for smk-k26 board
    f1065b4ebe17 arm64: zynqmp: Add support for Xilinx Kria SOM board
    fba24ce97513 arm64: zynqmp: Add support for zcu102-rev1.1 board
    7a2ba32ff760 arm64: zynqmp: Add resets property to sdhci nodes
    34c764177fa4 drm: xlnx: Update dependency for ZynqMP DP driver
    c95791943f5b drm: xlnx: Update dependency for DRM PL display driver
    cb5072053978 iio: adc: versal-sysmon: Add support for events on slave SLRs
    461bae7152a5 iio: adc: versal-sysmon: Add support for secure access
    d03efb559856 firmware: xilinx: Move FIRMWARE_VERSION_MASK to xlnx-zynqmp.h
    3705b71257bd misc: xilinx-ai-engine: disable interrupts for aieml
    3f555f49bb8f misc: xilinx-ai-engine: disable sysfs nodes for aieml
    e4ab40d38385 misc: xilinx-ai-engine: disable rsc mgr for aieml
    1a806b5b928b misc: xilinx-ai-engine: enable aieml device support
    5e6fb34b3752 misc: xilinx-ai-engine: add support for aieml
    ad96a2bd07ee misc: xilinx-ai-engine: issue privilege ops to firmware
    e8f28be84b5a misc: xilinx-ai-engine: remove hard coded row attributes
    0ec5caddc8b6 misc: xilinx-ai-engine: get device properties from device tree
    c0c3eb8c7cf9 misc: xilinx-ai-engine: device struct for tile type
    6ba9f4332cfc misc: xilinx-ai-engine: move mem clear to dev ops
    5842b7f90b65 dt-bindings: soc: xilinx: ai-engine: add aie gen and mem rows
    7e0f7b8f7ee3 v4l: xilinx: hdmirxss: Fix kernel-doc warnings
    2605006097be usb: misc: Fix gcc warnings for usb2244 and usb5744 driver
    6c578833fa44 dt-bindings: misc: tmr-inject: Add device-tree binding for TMR Inject
    dc92d55bef56 dt-bindings: misc: tmr-manager: Add device-tree binding for TMR Manager
    034eb5d1b60a v4l: xilinx: hdmirxss: Correctly disable timers while initializing
    de007cecd82e v4l: xilinx: hdmirxss: Fix DDC writes for 0xFF field mask
    8fd43788c195 v4l: xilinx: hdmirxss: Add v1.2 compatible string
    5bd00778f0b0 dt-bindings: media: xilinx: hdmirxss: Add v1.2 compatible string
    1861622dd1e4 misc: xilinx-ai-engine: Add get partition current freq sysfs entry
    4cf58c20f49f misc: xilinx-ai-engine: Remove get/set frequency IOCTLs
    923876f0770f misc: xilinx-ai-engine: Fix QoS and frequency calculations as defined by PLM
    0614b593b3c5 misc: xilinx-ai-engine: Add frequency scaling kernel APIs
    56da96ee990c misc: xilinx-ai-engine: add device tree overlay support
    c03ab3125c5a usb: dwc3: gadget: Handle pending stream transfer bit
    d9d5a048383c usb: dwc3: gadget: Skip checking Update Transfer status
    3e1f604c6503 usb: dwc3: gadget: Ignore Update Transfer cmd params
    b6569256148d staging: xlnxsync: Added IOCTL to reset the current syncIp slot
    e37e565707eb net: xilinx: Update Kconfig to select XILINX_AXI_EMAC for XILINX_TSN
    0e84c22c350e iio: adc: versal-sysmon: Add macros for delayed work
    e3fc6c476f49 net: macb: Add zynqmp SGMII dynamic configuration support
    113511e23ef2 net: macb: Added ZynqMP-specific initialization
    64ce014d80c5 dt-bindings: net: cdns,macb: added generic PHY and reset mappings for ZynqMP
    def1552d6cdd dt-bindings: net: cdns,macb: Add versal compatible string
    0fc3350df6ed dt-bindings: net: cdns,macb: Convert to json-schema
    f6155e66ae89 misc: xilinx_flex: Prevent exiting with mutex
    6f1a095cf64b phy: xilinx-xhdmiphy: Fix connector linerate setting in FRL mode
    ec6a977891fd phy: xilinx-xhdmiphy: Set connector linerate in HDMI-RX TMDS mode
    306dbffed45b arm64: zynqmp: Add/Update/Sync DTs for xilinx platforms
    daad91b75908 ARM: zynq: Add/Update/Sync DTs for xilinx platforms
    d03a18ccff67 firmware: xilinx: Fix incorrect return val in zynqmp_pm_sec_read_reg()
    b48353264fa7 v4l: xilinx: dprx: Add MMCM configuration for rx_dec_clk for versal systems
    5b8cb21b5a78 fpga: fpga-region: Add missing kernel-doc description
    8818eb2edf92 fpga: region: Update runtime PM handling logic
    dea71a09b1ae spi: spi-xilinx: Updated axi-qspi controller driver
    7b951e80a502 spi: spi-cadence-quadspi: Add support for Stacked mode
    278e7d5bc325 mtd: spi-nor: Update flash properties in flash_info table
    dd6abaabb140 spi: spi-zynqmp-gqspi: Fix erase failure when tx buswidth is 4
    68c3fa48f8ac spi: spi-zynqmp-gqspi: Fix suspend/resume
    8d6055bc5761 spi: spi-zynqmp-gqspi: Fix the zynqmp qspi driver call to get the spi controller devdata
    8f60a252bbfb spi: spi-zynqmp-gqspi: Fix chipselect timeout issue
    4ea88f868810 spi: spi-cadence: Align function name s/cnds/cdns/g
    c13c75fae238 spi: spi-cadence: Fix kernel-doc format for resume/suspend
    9d83a60e1643 mtd: spi-nor: Fix call trace when qspi driver built as module
    152a77792279 mtd: spi-nor: Don't parse 4BAIT via Zynq QSPI
    171dd94e71a7 spi: spi-zynq-qspi: Fixed buffer overflow in zynq_qspi_exec_mem_op
    cff0be4ce1a0 spi: spi-zynq-qspi: Add dual parallal and stacked support
    082f2e7f36ec spi: spi-zynqmp-gqspi: Add dual parallel and stacked mode support in driver
    de718eb5b92f mtd: spi-nor: Add EAR support in spi-nor framework
    0b40dd735104 mtd: spi-nor: Update flash lock/unlock feature
    763a65af97a7 spi: spi-zynq-gqspi: Set appropriate tapdelay values
    d6d25e458b2a dt-bindings: spi: spi-zynqmp-gqspi: Add support for Xilinx Versal QSPI
    b8a6c2c649c3 spi: spi-zynqmp-gqspi: Update driver to support both IO and dma modes
    5ed61ce8f7b8 spi: spi-zynqmp-gqspi: Increase timeout interval during data transfer
    269ddea12dd0 spi: spi-zynqmp-gqspi: Remove txfifo empty check during chip select/deselect
    687db78ba7aa mtd: spi-nor: Add dual parallel and stacked mode support
    2fdf718f2177 spi: spi-cadence: Fix SPI CS gets toggling sporadically
    eeab4a5979d6 mmc: sdhci-of-arasan: Add support for dynamic configuration
    9893d84d2725 gpio: xilinx: Trivial patch
    a72365a7e36c dmaengine: xilinx: dpdma: Fix race condition in vsync IRQ
    a441731d4158 phy: Add driver for GTQUAD BASE for Displayport
    4e0bc8301c79 dt: bindings: phy: Documentation for Xilinx GT QUAD BASE PHY controller for DP
    4007fc1588f2 dt-bindings: dmaengine: zynqmp_dma: Convert zynqmp dma bindings to yaml
    c8491b42517a v4l: xilinx: vip: Fix alignment to match open parenthesis
    bd7b2aebd602 v4l: xilinx: dma: Add support for 3 planar YUV444 8bpc format
    0840b83b29db v4l: xilinx: vip: Add support for 3 planar YUV444 8bpc
    833d75410b86 phy: xilinx-xhdmiphy: initial driver support for xilinx HDMI PHY 2.1 IP
    04817b785bd5 dt: bindings: phy: Documentation for Xilinx HDMI PHY controller
    59d4ce39718a v4l: xilinx: vip: Allow media pipeline enable with single dma start
    9a970134bc62 dt-bindings: media: xilinx: Add xlnx,atomic_streamon documentation
    d1d3441ab060 kbuild: add xilinx-sdirxss.h/xilinx-hls.h/xilinx-v4l2-events.h to no-header-test
    c7613bbc1d26 media: vivid: Fix the check of frame interval index
    0450af706144 drm: xlnx: zynqmp: tpg should use swap_coeffs as csc matrix
    bd7d33345327 drm: xlnx: bridge: check bridge->debugfs_file->status when calling strlen
    3b7f650a538f dt-bindings: dmaengine: xilinx_dma: Add MCMDA channel ID index description
    fcfa4cc3e337 drm: xlnx: hdmi: Add HDMI 2.1 Tx subsystem driver
    beb1bf3fe81a dt-bindings: display: xlnx: Add HDMI 2.1 Tx subsystem documentation
    0e2da67bc3d7 drm: xlnx: drv: initialize vblank for all crtcs
    ca45da8e8975 v4l: xilinx: hdmirx: Add HDMI 2.1 Rx subsystem driver
    2375589bfe84 dt-bindings: media: xilinx: Add HDMI 2.1 Rx subsystem documentation
    22126a5181c7 phy: xilinx: hdmi: Add linerate, nchannels and reset_gt
    fa8675f0f0f2 v4l: xilinx: vip: Add 10-bpp Bayer formats support
    18ac3c208eb3 v4l: xilinx: vip: Fix incorrect media bus format code
    f0c4169fad8b v4l: xilinx: vip: Fix bpl_factor values for Bayer formats
    3ede4e94c1ae v4l2: xilinx: dma: Align width as per underlying DMA prerequisite
    bc8cf38fd388 v4l: xilinx: xcsi2rxss: Fix warnings for NULL_RETURNS
    4cc6c4fd855f v4l: xilinx: csi2rxss: Remove downstream controls
    7f6dd5131ba2 v4l: xilinx: xcsi2rxss: Add support for YUV 420 8bpc
    c012c50f7f4d dt-bindings: media: xilinx: xcsi2rxss: Add YUV420 8b support
    0805a2b63957 phy: Add HDMI PHY configuration options
    fd4bddefa780 drm: fourcc: Mark XV20 and XV15 formats as YUV based
    6faa23b00457 dmaengine: xilinx: dpdma: Add support for cyclic dma mode
    80ec28e9c065 dt-bindings: display: xlnx: mixer: Add example for reserved memory usage
    ddebcbd11402 v4l2: xilinx: vipp: Allow reserving memory and DMA using 64bit addresses
    0c758310e78f dt-bindings: media: xilinx: Add reserved memory usage information
    d50e80fc4308 drm: xlnx: zynqmp: remove layer sub node based on DP DT change
    5e96602bc17e drm: xlnx: bridge: Fix xlnx_bridge_unregister issue
    086d8f24cb2e drm: xlnx: add a new member extra_name for xlnx_bridge structure
    0d22caff843e drm: xlnx: Update DP subsystem with downstream version
    8cf1a1bd165a v4l: xilinx: Driver support for Xilinx AXI4-Stream Broadcaster
    41e7fde6ad9c dt: bindings: media: xilinx: Doc for Xilinx AXI4-Stream Broadcaster driver
    8a2a800d0c9d media: i2c: Add ON Semiconductor AP1302 ISP driver
    5b3d4ad2a9ee media: dt-bindings: media: i2c: Add bindings for AP1302
    179e801586c7 drm: xlnx: zynqmp_dp: Fix UNINIT type warning
    17f31b8a7962 v4l: xilinx: tpg: Fix warnings for CHECKED_RETURN
    c57a34b65a66 v4l: xilinx: tpg: Fix warnings for NULL_RETURNS
    0b42ceaf3e70 media: xilinx: vtc: Fix warning for OVERFLOW_BEFORE_WIDEN
    bcb86daa32cd v4l: xilinx: dma: Fix OVERFLOW_BEFORE_WIDEN warnings
    cd5d041457c1 v4l: xilinx: vip: Fix UNINIT warnings
    d01deb9ea7de v4l: xilinx: vip: Fix CHECKED_RETURN warnings
    d8cbed33130b v4l: xilinx: vip: Fix V4L2_PIX_FMT_XY10 bpl_factor
    80e044376067 drm: xlnx: dptx: Add DisplayPort tx driver
    71f118d4c189 dt-bindings: display: xlnx: Add DisplayPort Tx bindings
    cd6c37bd3136 v4l: xilinx: dma: Remove struct xventity_list
    addaba3cea84 v4l: xilinx: vipp: remove unused variable
    581ea243e5a6 v4l: xilinx: vipp: Perform stream start/stop at pipeline level
    e3253da27eb4 dt-bindings: display: xlnx: mixer: Updated layer max height and width ranges
    eb723f4c547b v4l: xilinx: Driver support for Xilinx DP Rx subsystem
    74b4699d000a dt: bindings: media: xilinx: Documentation for Xilinx DP Rx subsystem
    6171e882d9d5 v4l: xilinx: dma: Add control handler to v4l2 device
    f9e0eb198f9a v4l: xilinx: tpg: Don't read version if HLS IP
    086e4cf98df3 v4l: xilinx: events: Fix the uapi header license
    5c890545ff16 v4l: xilinx: hls: Fix the uapi header license
    44ce7ddc1efc v4l: xilinx: sdi: Fix the uapi header license
    d1c1a9decfba drm: xlnx: fix some typos in the Kconfig help texts
    66ca1836d985 v4l: xilinx: vipp: Remove set streaming on subdev
    19e0d84335c2 v4l: xilinx: vipp: Change xvip_entity_start/stop to take graph entity
    cc20af724483 v4l: xilinx: vipp: remove a loop for graph start / stop
    b1e6f73c9bad v4l: xilinx: vipp: do enabling in the dependency check
    0f51e658352f v4l: xilinx: vipp: use async list for start and stop
    c826de01ae57 v4l: xilinx: vipp: move xvip_entity_start_stop() to xilinx-vipp
    f8a61a3dede7 v4l: xilinx: dma: Prevent divide by zero error
    a634dd1d1878 dt-bindings: display: xlnx: mixer: Add rev 5.0 to compatible string
    e4278d15a90c drm/fb_helper: Enable drm_leak_fbdev_smem by default for zynqmp
    4e65354c36c8 drm: xlnx: scaler: Improve quality by adding more coefficients
    eb678e0c0b60 staging: xlnx_tsmux: Initial version of xlnx mpeg2tsmux driver
    d24ab54b2890 dt-bindings: Add device tree binding for xilinx mpeg2tsmux driver
    611614e795c5 staging: xlnxsync: Add driver for Xilinx Synchronizer
    3528a93f4623 staging: dt-bindings: xlnxsync: Add initial bindings for Xilinx Synchronizer
    cb5447acf7a4 dma: xilinx: Disable low latency capture in file ops open
    880c582ec7ae drm: xlnx: scaler: Add support for ip version 2.2
    8f0919368334 dt-bindings: display: xlnx: Add support for vpss ip version 2.2
    0b2d717fa236 dt-bindings: display: xlnx: dsi: Add command mode support
    a4d28db1565c v4l: xilinx: vip: Use the right media code for 422 16bit formats
    90c77a8c2ca8 v4l: xilinx: vip: Keep NV16 first in vip table
    00c6edfea70b dt-bindings: display: xlnx: mixer: Updated compatible string
    d837d1eb529d v4l: xilinx: vip: Add YUV444 12bit and 16bit formats
    a8589551f6ea v4l: xilinx: vip: Fix stride calculation
    8cb03da32f1c v4l: xilinx: vip: Use correct media bus code for RGB 10bit format
    4436473fb739 v4l: xilinx: vip: Add scaling and padding factor for XY10
    df99faccab5b v4l: xilinx: vip: Add YUV 10bit media bus formats
    885f28d4032a v4l: xilinx: tpg: Use 10bit media bus codes
    51559060f03a drm: xlnx: scaler: Add max width and height properties
    8022e4cb2480 dt-bindings: display: xlnx: Add max width and height as mandatory properties
    bac639091dad drm: xlnx: csc: Add max width and height dt properties
    3367e0581342 dt-bindings: display: xlnx: vpss-csc: Add max width and height properties
    606d53ea1fe5 media: xilinx: tpg: Add support for v8.0
    e2b95f5d51a5 dt-bindings: media: xilinx: tpg: Update for v8.0
    4a29295c34c4 v4l: xilinx: vip: Add 12 and 16 bpc RAW and RGB color formats
    0a4480645cd4 v4l: xilinx: dma: Add s_ctrl ioctl for low latency capture
    f1e71e82edb6 v4l: xilinx: dma: Add control for low latency
    f9c5ec6721f6 media: xilinx: tpg: dt pixel per clock validate.
    0f082e6772f4 dt-bindings: display: xlnx: Add clock framework support to VTC bridge driver
    af1ae82fbd40 drm: xlnx: scaler: Add support for clock framework
    11b806ad0101 dt-bindings: display: xlnx: Add clock framework support to VPSS Scaler bridge driver
    1e96bab15eb0 drm: xlnx: csc: Add clock framework support
    3d0eed7436fd dt-bindings: display: xlnx: Add clock framework support to VPSS CSC bridge driver
    c175ea953bb7 dt-bindings: display: xlnx: Add clock framework support to DSI Tx
    b88babd1c91d documentation: dt: multi-scaler: Add clock framework support
    2b70e190c646 documentation: dt: multi-scaler: Add properties for pixels per clock
    d9b97666b159 media: xilinx: vtc: Dynamically calculate pixel clock
    b11e52694112 media: xilinx: tpg: v4l subdevice controls to set fps
    ae7f7ba22541 dt: bindings: media: xilinx: tpg: Add ppc dt bindings.
    e99dcc745bba media: xilinx: tpg: Add pixel per clock dt support
    428f6296b3a6 dt-bindings: display: xlnx: Add device tree binding for xlnx control drivers
    ac7239d953d1 dt: bindings: media: xilinx: Add clock support to AXI4 Stream switch
    8b3ecd666686 dt-bindings: display: xlnx: mixer: Correct DRM fourcc for BGR8 and RGB8
    904a0c90053c drm: xlnx: crtc: Fix max width and height overflow
    c5a2bd4f6838 documentation: dt: Add bindings documentation for Streaming SCD
    851c86cd843f xilinx: v4l: dma: Stop subdevs in reverse order of starting
    0f6cb0a1fff2 media: ov5640: Don't access ctrl regs when off
    00be32d73c49 media: ov5640: fix get_light_freq on auto
    314c9638db9e drm: xlnx: Select VIDEOMODE_HELPERS when DRM_XLNX_PL_DISP is selected
    9999804d2abb xilinx: v4l: dma: Invoke s_power function of subdevice
    20161568902c xilinx: v4l: vipp: Avoid decrementing refcount of a node twice
    c498433479f4 xilinx: v4l: dma: In case of error xvip_pipeline_start_stop should return gracefully
    9531e42a2e14 dt-bindings: media: xilinx: vpss-csc: Make max width, height mandatory
    c7dae6480b61 dt-bindings: media: xilinx: demosaic: Make max width, height mandatory
    f65cc73f5dec xilinx: v4l: dma: Remove unused function definition
    5479e8305cfa drm: xlnx: scaler: Fix array out of bound access
    e6f21132f2ea documentation: dt: gamma: Add support for max width and height
    617d2d1853bb documentation: dt: demosaic: add support for max width and height
    ad687c9a7b77 v4l: xilinx: tpg: Add check for max width and height
    c403e3c5337a documentation: dt: vtpg: Add support for max width and height
    830376b156b6 drm: fb: Modify check to ensure correctness of flags
    54b60352b8d2 v4l: dma: Use media graph traversal to stream on/off subdevs
    6ab898352908 xilinx: v4l: mem2mem: Initial version of driver
    8b6f13ecf814 dt: bindings: media: xilinx: Documentation for mem2mem driver
    ace3ac8f7633 platform: xilinx: Add mem to mem Multi-Scaler driver (XM2MSC)
    aca8ec5e3d91 documentation: dt: add bindings documentation for multi-scaler
    b20b33f83d24 v4l: xilinx: scd: New Scene Change Detection driver
    0de84861640e documentation: dt: add bindings documentation for Scene Change Detection
    2d245ca7bc74 v4l: xilinx: scd: Add v4l2 custom events
    4540144b1bc2 xilinx: v4l: dma: Add format enumeration for output
    75bc5fa3b3ba xilinx: v4l: dma: Add DMA input direction support
    ebc4922f7ed5 xilinx: v4l: dma: Add ioctl operations for v4l2 output device
    08d3efbce73c media: platform: xilinx: Fix Kconfig indentation
    60e697a8dd6a v4l: xilinx: Driver support for Xilinx AXI4-Stream Switch
    8aac14ad768a dt: bindings: media: xilinx: Doc for Xilinx AXI4-Stream Switch driver
    63f5089e6a9a xilinx: v4l: dma: Fix bug in calculating interlaced height
    2e7170f9c713 xilinx: v4l: dma: Multi-threading issue
    83f3d5415616 dt-bindings: display: xlnx: Add VTC bridge support to PL display
    0d552ab71605 dt-bindings: display: xlnx: mixer: Adding xlnx vtc bridge support
    87004f631d5e drm: xlnx: Add a Video Timing Controller(VTC) driver
    1ce4926d9c84 dt-bindings: display: xlnx: Add VTC bindings
    aae8abafd515 dt-bindings: display: xlnx: mixer: Adding xlnx,layer-primary property
    f6ac99e88cdd dt-bindings: display: xlnx: mixer: Added xlnx,num-layers description
    031f9d0386df xilinx: v4l2: dma: Add multiple output support
    836aec067b8e v4l: xilinx: dma: Terminate DMA when media pipeline fails to start
    26ef589dbead v4l: xilinx: dma: Add interlaced support
    a149b7e81dd8 dt-bindings: display: xlnx: mixer: Update example to fix format strings
    7234ac339d92 dt-bindings: display: xlnx: mixer: Add supported formats table
    64ef5e96bfa0 bindings: display: xlnx: Fixing device tree documentation
    39ee292e24e0 xilinx: v4l2: dma: Bug fix in single plane support
    78b57a065de3 drm: xlnx: csc: Adding vpss-csc reset through gpio
    11c2e3ceb1e4 dt: bindings: display: xlnx: Adding gpio reset entry
    e374132fffb1 drm: xlnx: scaler: Updating vpss-scaler reset logic
    ef913ad00042 dt: bindings: display: xlnx: Updated gpio reset entry
    983e915eeeba uvcvideo: Prevent new URBs being processed at stream stop
    faf20c843171 v4l: xilinx: dma: Add XV15 and XV20 contiguous format support
    94e4a9511c43 dt: bindings: media: xilinx: Remove unimplemented TPG compatible string
    644a64a0aaba media: xilinx: vip: Correct the fourcc code for BGRX8 format.
    d73866d33266 v4l: xilinx: Add BGR color format support.
    fa9844a42fac v4l: xilinx: dma: Fix bytes per line calculation
    dd05b106aa1a v4l: xilinx: dma: Handle 10 bit format calucations for XV20
    fabbb4ce3f4a v4l: xilinx: dma: Fix sizeimage calculation
    679cf6856067 v4l: xilinx-tpg: Add YUV 420 media bus format support to TPG driver
    5b1095d0160c dt-bindings: display: xlnx: Modifing mixer compatible string
    9b03240732b4 Documentation: media: Correct dt-bindings doc for Gamma LUT IP
    5b041869d6db drm: xlnx: csc: Add YUV420 support
    54a3e85f37f7 drm: xlnx: scaler: Add YUV420 support
    27fb40a29f8f v4l: xilinx: dma: Get scaling and padding factor to calculate DMA params
    8b5b33a63243 v4l: xilinx: dma: Add scaling and padding factor functions
    3e780411b9f8 v4l: xilinx: dma: Fix v4l2 enumeration callback for multiplanar
    6c61ff095253 v4l: xilinx: dma: Add multi-planar support
    8423ae631e59 v4l: xilinx: dma: Update video format descriptor
    114fa8fdcf64 media: Add new dt-bindings/vf_codes for supported formats
    216979ce2780 drm: xlnx: correcting data type for cursor with and height
    5b9cb5c7c21a drm: xlnx: scaler: Adding Zero out H-phase array before changing resolution
    36ad3b0ddbb0 drm: xlnx: scaler: Adding vpss-scaler reset through gpio
    f5fbd48f0c02 dt: bindings: display: xlnx: Adding gpio reset entry
    7c3899f2d764 dt-bindings: display: xlnx: Added vpss bridge phandle as optional property
    a3e5442f1a4c drm: xlnx: scaler: Adding vpss-scaler driver
    dc2bb7e677c2 dt: bindings: display: xlnx: Adding scaler bindings
    d566157b7f61 drm: xlnx: csc: Adding vpss-color space converter driver
    669743baaa28 dt: bindings: display: xlnx: Adding csc bindings
    2eeac6f3bc4a drm: xlnx: DRM KMS driver for xilinx display pipeline
    7282da5fc11e dt-bindings: display: xlnx: Adding pl_disp bindings
    ded87739e4a6 dma: xilinx: Support early callback modes
    ed20f485abf4 dt-bindings: dma: xilinx_frmbuf: Add support for 12 and 16 bpc RGB formats
    fe0c5876ddfa drm: xlnx: sdi: Adding sdi-tx driver
    59331f75ade1 dt-bindings: display: xlnx: Adding sdi bindings
    1f7bd8f88a2c drm: Add generic HDR support
    db3d1e6388d2 drm: xlnx: mixer: Initial video mixer driver
    5aa61ca5a317 dt-bindings: display: xlnx: Adding mixer bindings
    5cddd027d4a2 drm: xlnx: adding cursor width / height support
    2ec09ed7b544 drm: xlnx: dsi: Adding dsi driver to new framework
    203f1f139013 dt-bindings: display: xlnx: Adding dsi bindings
    6fef36764852 drm: xlnx: drv: Add Xilinx bridge support
    4191aa2a489b dt-bindings: display: xlnx: Add bridge bindings
    afc2bf8bc47a dt-bindings: display: xlnx: Add ZynqMP DP subsystem bindings
    75528c891441 drm: xlnx: Xilinx DRM KMS driver
    6f64f5daa195 drm: mipi: Bring DT format description closer to the hardware
    4028319017c2 drivers: media: Customized adv7511 for Xylon LogiCVC (deprecated)
    cabaf56261b1 v4l: xilinx-vpss-csc: driver support for xilinx vpss csc
    720786e57a6d Documentation: DT: Add bindings documentation for VPSS CSC
    4b9736224363 v4l: xilinx-gamma: initial driver support for xilinx video gamma lut ip
    5feda25eef30 documentation: dt: add bindings documentation for gamma lut ip
    d92112b1c8fc v4l: xilinx: Driver support for Xilinx UHDSDI Rx subsystem
    514ed574f676 dt: bindings: media: xilinx: Documentation for Xilinx UHDSDI Rx driver
    d5a7e729b237 media: videodev2.h: Add control type for HDR
    e99af9a1767a media: videodev2.h: add Hybrid Log Gamma transfer function define
    6c246df955f6 media: v4l2-ioctl: Add description for new pixel formats
    a72054ceebc8 media: v4l2-ioctl: Add YUV444 12bit and 16bit pixel formats
    259c230e0692 media: v4l2-ioctl: Use correct fourcc for YUV444 10bit format
    8a0edc45660c media: v4l2-ioctl: Add YUV 12bit and 16bit pixel formats
    abfca3d5ebdc media: v4l2-ioctl: Add 12 and 16 bpc RGB pixel formats
    1c2ee33623d8 v4l2-core: Update entries for XV15 and XV20 contiguous formats
    33f25ae1164b media: v4l2-core: Update V4L2 framework with new fourcc codes
    a7844d4bfa9d media: v4l: Add HDR support through compound controls
    a4497afab37e v4l: xilinx-vpss-scaler: driver support for xilinx vpss scaler
    c39d60c10381 documentation: dt: add bindings documentation for vpss scaler
    3a6b1f09750e v4l: xilinx-demosaic: driver support for xilinx video demosaic
    c449fbef2ce6 documentation: dt: add bindings documentation for xilinx video demosaic driver
    5d2c4bedf257 media: v4l: Group Xilinx downstream formats
    16bbc28f18cd media: xilinx: Improve pipeline management code
    fc302edc3b55 v4l: xilinx: dma: Remove colorspace check in xvip_dma_verify_format
    75e8d051225f media: xilinx: dma: Enable use of Framebuffer Write IP in V4L2 Driver
    778a7cec25a3 v4l: xilinx: dma: Terminate DMA when stream on fails
    bf3befd2fbb5 media: xilinx: vip: Add the pixel format for RGB24
    c74caf48a29e media: xilinx: Refactor VTC configuration code
    90a4e4e7520f media: xilinx: tpg: Block comments
    30912a79b459 media: xilinx: Integrate TPG v7 support
    8bf9838d2dd5 media: xilinx: Add HLS core driver
    d5c378db45c1 media: xilinx: Add AXI4 stream switch driver
    2fd1eb015d23 media: xilinx: Add Scaler driver (SCALER) driver
    fdc231d362b1 media: xilinx: Add RGB to YUV (RGB2YUV) driver
    27865b58b582 media: xilinx: Add Chroma Resampler (CRESAMPLE) driver
    4c45d2c5b5ed media: xilinx: Add Color Filter Array (CFA) driver
    19589acaf508 v4l: xilinx: Add Video Remapper driver
    7c1a953f7216 media: xilinx: Ensure Video Framebuffer selected by Kconfig
    03bb70654f7e v4l: xilinx: Kconfig: Add missing DMADEVICES dependencies
    dad73e6e1863 uvcvideo: Xilinx: Bump up URBS and MAX_PACKETS
    2935916b025d v4l: Add VUY8 24 bits bus format
    9241e01b5c8e v4l: Add RGB 8:8:8 media bus format on 24 and 32 bit busses
    7b89e9aa32fd v4l: subdev: Add [GS]_ROUTING subdev ioctls and operations
    ac925a4ab952 media: entity: Add media_entity_has_route() function
    3d7dde73acb3 media: entity: Add has_route entity operation
    df27aebce90a drm: panel: Added timing for AUO B101UAN01 display panel
    dddebcaa8e18 dmaengine: xilinx_frmbuf: New driver for Video Framebuffer IP
    dea4b0a56259 dt-bindings: dmaengine: xilinx_frmbuf: Video Framebuffer IP
    4eec2efb1897 media: Add documentation for YUV420 bus format
    f31d1c712869 uapi: media: New fourcc codes needed by Xilinx Video IP
    6fb13b23cf69 drm: Add new flags for interlaced alternate fields
    72a08259513b uapi: drm: Add AVUY fourcc
    6513e66d489e drm: drm_fourcc: Correct the DRM YUV444 10bpc
    c36f34ba9654 drm: fourcc: Add new formats needed by Xilinx IP
    63be6dcd943a drm: drm_fourcc: Add new formats for Xilinx IPs
    ad208ed1fdc0 drm: fourcc: Add drm_format_plane_width_bytes()
    ffa3db2ad6c6 drm: drm_fourcc: Introduce macro-pixel info to drm_format_info
    cfcbe4608067 ASoC: xlnx: change I2S driver data
    42df385bd328 ASoC: xlnx,i2s: dt-bindings: add reference to audio formatter
    60cb2ecbc1a7 ASoC: xlnx: add SPDIF audio driver
    d9ba35accd91 dt-bindings: ASoC: xlnx,spdif: Document spdif bindings
    874d5549a5d9 ASoC: xlnx: add PL sound card support
    3e7f02fc3ca0 ASoC: xlnx: add pcm formatter platform driver
    abaef462fc0d dt-bindings: ASoC: Document audio formatter bindings for xlnx,audio-formatter
    093f04343e7f AsoC: xlnx: add platform driver to support SDI audio
    e5b07fec102e dt-bindings: ASoC: xlnx-v-uhdsdi-audio: document sdi audio bindings
    f97adf628974 sound: soc: xilinx: Add ZynqMP DP subsystem audio drivers
    15795e91c086 dt: bindings: sound: Add DT bindings for Xilinx ZynqMP DP audio
    cdb97cc4ae6c remoteproc: Add initial zynqmp R5 remoteproc driver
    e524a9d46d79 dt-bindings: remoteproc: Add documentation for ZynqMP R5 rproc bindings
    6827009a5271 remoteproc: Add support for AMP on Zynq platform
    bc34d17afb7a dt-bindings: Add Zynq remoteproc binding
    8687d8d5a485 remoteproc: Add support for peek from remote and acking kick from remote
    66d2e77fb51a nvmem: Add driver for BBRAM and volatile user keys access
    3d76b0ceb819 dt-bindings: nvmem: Added nodes for BBRAM and volatile user keys
    f8f39ce69a1a iio: adc: versal-sysmon: Add runtime resume function for sysmon
    8f1f7f5038a6 drivers: iio: Add support for TI INA260 power monitors
    bd7eb16df078 dt-bindings: iio: adc: Add ti,ina260.yaml
    6dbc2bee04b8 dt-bindings: gpio: zynq: Add all the supported compatibles
    695532b44955 iio: versal-sysmon: add driver for Versal Sysmon
    9f99547626c4 dt-bindings: iio: xilinx: Add Documentation for Sysmon
    15030b4c9b32 iio: adc: Add Xilinx AMS driver
    022b9fd755c5 dt-bindings: Add Xilinx AMS binding documentation
    bd749016e1f5 usb: misc: usb2244: add support for USB2 ultra fast sd controller
    c8ec20c8360a dt-bindings: usb: misc: Add binding for Microchip usb2244 Controller
    faf7df2c8275 usb: misc: usb5744: add support for USB hub controller
    3ea5ca73e6be dt-bindings: usb: misc: Add binding for Microchip usb5744 hub
    6bb5f952c61b arm: zynq: don't remove -march=armv6k from KBUILD_AFLAGS
    244d268406c4 arm: zynq: add "-march=armv7-a" to AFLAGS
    ad5e41b44a7b firmware: zynqmp: Add sysfs entry for runtime features
    898e178c8a86 mtd: cfi: Add macro for Winbond NOR flashes
    5eb77738623f dt-bindings: zynqmp: Add new PD_PL macro
    715d52270edd dt-bindings: zynqmp: add RPU nodes
    74c05b85a1c4 arm64: zynqmp: Add support for ZynqMP RSA H/W accelerator
    30bc5ecb4468 arm64: zynqmp: Add Xilinx SHA3 node
    2edd2f165e7e dt-bindings: clock: versal: Remove alt_ref_clk from clock source
    8314c58ba4c8 dt-bindings: clk: xlnx: Update VCU bindings for vcu reset pin
    e1b58b6198e3 dt-bindings: clk: xlnx: move xlnx_vcu dt-binding to clk from soc
    563938754341 dt-bindings: serial: uartlite: Convert uartlite to json-schema
    573f76dc41d2 watchdog: of_xilinx_wdt: use wdd->parent in print
    137d5dd7ca42 clk: xilinx: vcu: Populate children node
    3437961c2439 clk: xilinx: vcu: disable aclk incase of probe failure
    74630c85a24c clk: xilinx: vcu: Update vcu init/reset sequence
    d4fe6e0432ee soc: xilinx: vcu: Export functions to obtain logicore settings
    fd03e132faf2 firmware: zynqmp: Add Node IDs in xlnx-zynqmp.h
    790ec5f70d6e firmware: xilinx: sync firmware pm_query_id entries with PLM query id entries
    ef9c14fad2b7 firmware: xilinx: Remove kernel-doc marking instead of regular comment
    8773b15933b5 uartlite: Update the default for the parameter
    db8bd3e0289e include: xilinx_phy: Add Copyright and License
    ab2ba922aef1 clk: si5324: fix linking failure for ARCH arm
    b2a7967314da crypto: xilinx: Drop COMPILE_TEST for CRYPTO_DEV_ZYNQMP_SHA3
    2838a3306ee2 ptp: Add support for port offset registers
    1dffefd4faec dt-bindings: ptp: xilinx: Update new compatible string
    a6c55514423f crypto: xilinx: zynqmp-aes: Add skcipher based AES driver
    6632285e9bf4 pmbus: tps544: adapt for updated pmbus interfaces
    ef0b84a82013 irqchip: gic: Add changes to handle SGI for Zynq Remoteproc driver
    9b526f096deb uio: Add the UIO driver for AI engine
    498135f770b8 dt-bindings: soc: xilinx: Add the dt binding for AI engine
    18b0794a5305 arm: zynq: delete AFLAGS_suspend.o to fix compile warning
    5e53cd34e124 dmaengine: pl330: Typecast with enum to fix the coverity warning
    39c3a41a659e i2c-cadence: Replace the value with enum
    b89fbc73d901 dt-bindings: serial: Add xilinx compatible
    a29d66f74209 ptp: Add Xilinx PTP timer driver
    35cd73b65e66 dt-bindings: Add devicetree documentation for Xilinx PTP timer
    37ec7efc7786 edac: xilinx: Added EDAC support for Xilinx DDR controller
    3c9b7a38fc80 dt-bindings: edac: Add bindings for Xilinx Versal EDAC for DDRMC
    1679d1d91d9d spi: spi-cadence: Fix uninit_use coverity warning
    cb329a401995 spi: spi-cadence: Fix mixed_enum_type coverity warning
    12c571f4d5c9 ARM: zynq: Fix spurious BUG with old DT
    97048676f036 misc: ai-engine: Move AI engine reg access to kernel
    c6bb0200b3f0 dt-bindings: soc: xilinx: ai-engine-npi: Add the binding for AIE NPI
    3e79e35a50f3 dt-binding: soc: xilinx: ai-engine: Add new AI engine binding
    32a5fc5f2326 dt-bindings: usb: host: ehci-xilinx: Add binding doc
    138b442b19fa clocking-wizard: Add versal clocking wizard support
    20d514f89cef dt-bindings: Add versal clocking wizard
    ecf71cc12055 clk: idt: Fix i2cwritebulk() failure
    3b7981675a98 dt-bindings: xilinx: Document new evaluation boards
    e48726847ef1 mtd: fixing CFI for Numonyx CFI bug
    da5081880882 misc: jesd204b: Add driver for Xilinx jesd204b
    05de1d200b3e dt-bindings: misc: Add bindings for JESD phy
    bd0c5c0c3725 dt-bindings: misc: Add documentation for jesd204b
    a6b600bc0a6d PCI: ZYNQMP EP client driver: Adding support for ZynqMP dma test client
    6dfb4afc5148 PCI: ZYNQMP EP driver: Adding support for ZynqMP ep driver
    61cc13a94e8b dt-bindings: pci: ZYNQMP PS PCIe Driver Root DMA dt bindings
    72064421def3 dt-bindings: power: Add versal power domain bindings
    8e1adae19ac5 mtd: Expand the ecc placement locations to 1260
    fa3c594bbe0a staging: xroetrafficgen: initial commit of roe traffic generator driver
    094b761f42fe staging: Add xroeframer driver
    a76ad50413c8 xilinx: Update MAINTAINERS fragment
    11dc089529ad samples: xilinx_apm: Add sample application for xilinx_apm
    c235d0d7d400 drivers: ata: Add CCI support for SATA if CCI is enabled
    d0e346544ace arm64: zynqmp: Change Kconfig dependency for cortexa53 edac
    8b4971dde69b edac: Add sysfs entries for cortex arm64
    578fb5936ef3 edac: Add documentation for cortexa53 edac sysfs
    6d5b80c86d6d EDAC: Add ARM64 EDAC
    d46c704562ad dt-bindings: edac: Add bindings for cortex_arm64
    b2da5fe7a96f edac: zynqmp: Add EDAC support for ZynqMP OCM Controller
    c97e2248909f dt-bindings: edac: Add bindings for ZynqMP OCM Controller
    59e1a7ac9fc4 edac: add support for ARM PL310 L2 cache parity
    d54641a737ac clk: Adding Silicon labs si5324 clock driver
    906b7c441f4b dt-bindings: clock: Adding si5324 bindings
    7e629d216c76 phy: mscc: Add support for VSC8531_02 with RGMII tuning
    b2ac0d9aafa6 dt-bindings: mscc: Add RGMII RX and TX delay tuning
    bd9ffe83f89c include: dt-bindings: Add mscc-vsc8531 RGMII clock delay definitions
    bf5b6559726c phy: dp83867: Add support for SGMII
    5469fa63a1cf crypto: zynqmp-rsa: Adopted RSA support for ZynqMP SoC
    00bc7c7e446f dt-bindings: crypto: Added binding docs for Xilinx ZynqMP RSA H/W accelerator
    61c5350201df crypto: zynqmp-sha: Adopted SHA3 support for ZynqMP Soc
    06f16e5ce077 dt-bindings: crypto: Added binding docs for Xilinx ZynqMP SHA3 H/W accelerator
    c93ad459fc73 pmbus: Add new tps544 power regulator driver
    929fa01900e7 dt-bindings: pmbus: Add tps544 bindings
    6b145ba8d836 zynqmp: firmware: Adds a driver for loading secure partition from Linux
    56efa970dde8 clk: Add ccf driver for IDT 8T49N24x UFT
    e2bba31bb85e dt-bindings: Add binding for IDT 8T49N24x UFT
    8fc9ad358ed2 i2c: mux: pca954x: write to mux channel always
    589c85a3194a watchdog: of_xilinx_wdt: Used dev_dbg()
    e4b83ec42fce irqchip: gic: Add remoteproc changes to the driver
    816f461a9911 staging: fclk: Enable pl clock with sysfs entry for set_rate
    a6358dc644e0 dt-bindings: Add doc for xilinx fclk
    498be8e1221e Xilinx: ARM: Devcfg and SLCR drivers updated to support reconfiguration.
    a54bb969e15c zynq: Add OCM driver
    208e432a6f88 zynq: slcr: Introduce new get_ocm_config()
    b519a7db2fc6 ARM: zynq: Fix prefetch option
    0c6eccf65023 ARM: zynq: Add support for Zynq-7000S devices
    8f438ef28249 dt-bindings: ARM: zynq: Add DT binding for eFuse controller
    51d65b77bcbe uio: rename uio.c -> uio_core.c & unify into uio.ko
    487148436435 apf: Add kernel modules to the kernel
    ffb9cd00a176 uio: Add dma-buf import ioctls
    f9e5a580c252 Bluetooth: hci_ll: Extend timeout between start and communication
    fee7722dd68d dt-bindings: usb: dwc3-xilinx: Convert USB DWC3 bindings
    dd46eb837657 dt-bindings: usb: dwc3: Add interrupt-names to include hibernation interrupt
    58ba5afcc621 usb: dwc3: gadget: Increase timeout for CmdAct cleared by device controller
    f92c8e05d481 usb: dwc3: gadget: disable hibernation interrupt on gadget enumeration
    bfc87833e9ae usb: dwc3: core: add PM_SLEEP kernel config check
    d463a2e39c1b usb: dwc3: core: Update REFCLK_FLADJ for frame length adjustment
    668832665601 usb: dwc3: xilinx: fix reset-gpio logic
    b7b98952b203 usb: dwc3: xilinx: fix error handling for reset-gpio
    937719183006 usb: xhci-plat: Add remote wakeup support for xilinx
    d30b7a25b95d usb: dwc3: Added remote wake-up in xilinx glue driver
    ab7a77c9778f usb: dwc3: Fixed common regulator for multiple controller instance
    3032fb9b5957 usb: chipidea: udc: make controller hardware endpoint primed
    50485109b073 usb: dwc3: handle usb2.0 gadget mode early hibernation event occurrence
    8f4f309624cd Revert "usb: function: f_tcm: Add support for getting alt interface number"
    d26f8fd4361f usb: dwc3: core: scratchpad buffers allocation handling in host mode
    7eab45e8ca50 usb: dwc3: xilinx: enable D3 power state entry feature
    1d54ec88f001 usb: dwc3: xilinx: Handle USB3 PHY initialization properly
    20d159d68fc9 usb: gadget: webcam: Add support for Full HD and 4K UHD Raw Video Formats
    00ace4683b16 usb: dwc3: Fix OTG driver to work with v5.10 kernel
    0de5df674dc7 usb: dwc3: gadget: Add new platform_data.h file
    81a5bf2483f2 usb: dwc3: xilinx: Handle dr_mode setting from DT properly
    f29f51de38f6 usb: chipidea: udc: Add xilinx revision support
    9219b23554f0 usb: dwc3: xilinx: fixed dwc3-xilinx driver warnings
    e16d48b334e0 usb: dwc3: xilinx: Add support for controller power state for host mode
    16d154bb59a7 usb: dwc3: xilinx: Register drvdata before registering regulator
    0e90a3c04846 usb: dwc3: xilinx: Add gpio-reset support
    46974cdb261f gpio: modepin: Add driver support for modepin GPIO controller
    b2a892a1d24c dt-bindings: gpio: zynqmp: Add binding documentation for modepin
    ba31e16df9fa usb: dwc3: Enable Xilinx platform only when Regulator is enabled
    9f6849b772d1 usb: dwc3: Implement stream transfer timeout
    5ee4927cd6fc usb: dwc3: use PROPERTY_ENTRY_BOOL to initialize property entries
    8d4df820b3e7 usb: dwc3: otg: Enable OTG support in dwc3-core driver
    3f9ac176ce18 usb: dwc3: Initialized variable with a proper value
    77f35fc999e4 usb: dwc3: use proper typecast to handle overflow
    f22c9636abba usb: dwc3: otg: remove otg static export warning
    2435bffeed0c usb: dwc3: otg: fix the function call used to get otg descriptor
    4a06a60c0a37 usb: dwc3: retain resource index for unforced stops
    31f76632a97b usb: dwc3: otg: add support for OTG in DWC3 host driver
    35a686a3c83b usb: dwc3: otg: Update Kconfig and Makefile for enabling OTG
    c61293294f26 usb: dwc3: gadget: Don't kick transfer if LST or SHORT bits are set
    13503abd4a01 usb: dwc3: Check for IOC/LST bit in both event->status and TRB->ctrl fields
    f672b02981a6 usb: dwc3: otg: fix broken OTG HNP feature
    5189066ee4c7 usb: dwc3: gadget: ISOC transfers should be stopped before starting a transfer
    381d55eea4a6 usb: dwc3: Correct usb dma mask for making SMMU work in device mode
    3975f8c8e21b usb: dwc3: Fix the broken suspend/resume functionality in dwc3
    a43c65c2a29c usb: dwc3: add support for enabling/disabling hibernation dynamically
    8ddea1d10c01 usb: dwc3: Fix the logic for allocating and setting scratchpad buffers
    144b0ff35ba8 usb: dwc3: don't setup event buffers when operating in host mode
    205f9ea16a66 usb: dwc3: update GFLADJ_REFCLK_FLADJ in dwc3_frame_length_adjustment
    6db9232e5118 usb: dwc3: of-simple: Enable CCI support in dwc3 driver
    d2ee5e149722 usb: Add quirk for enabling workaround for BULK IN streams
    b0592d53221a dwc3: core: Enable GUCTL1 chicken bit 9 for correcting Inter Packet Delay(IPD)
    acf131c85b51 dwc3: core: Enable GUCTL1 chicken bit 10 for fixing crc error after resume bug
    b2a364a4bf45 usb: dwc3: hibernation: fix scratch buffer allocation
    b01dd000b938 usb: dwc3: gadget: add support for OTG in gadget framework
    10ba9c763857 usb: dwc3: core: Add regulator calls for communicating with dwc3 PMU
    8451958e6379 usb: dwc3: gadget: Add hibernation support when operating in gadget mode
    5ce6f7528014 usb: chipidea: core: Add return value function check
    18f365f1633b usb: chipidea: Fix return value handling
    f7871d99bc4b usb: gadget: udc: Add return value error handling of function
    98f55b17d9e1 usb: gadget: udc: Remove useless variable assignment in xudc_read_fifo()
    478fd97b5676 usb: chipidea: Check usb_phy exists before using it
    2ee3a4c83b19 usb: chipidea: Use usb2 phy for Zynq platform
    3de559f7cbc6 usb: chipidea: Add support for VBUS control with PHY
    2b618786bffc usb: gadget: send usb_gadget as an argument in get_config_params
    8823f2f119a0 usb: host: xhci: Add xhci_hcd to xhci_ring for use in stream_timeout_function
    01e6212d8f12 usb: xhci: wait for atleast 1ms after exiting U3
    ae44b2658f57 usb: gadget: uvc_video: unlock before submitting a request to ep
    16555a5e1906 usb: xhci-plat: Add remote wakeup support
    77ca2aa40160 usb: function: f_tcm: Add support for getting alt interface number
    1072bb0852a6 usb: gadget: f_tcm: support to set maxburst through configfs
    2edc01f2c118 usb: gadget: f_tcm: add TARGET_SCF_ACK_KREF flag in BOT
    60887fd6a74e usb: gadget: f_tcm: queue multiple commands request
    04b1e97e2acd usb: gadget: f_tcm: comp_descriptor workaround during SS gadget
    a6c2895e422e usb: gadget: f_tcm: adjust write length with max packet size
    14d1ebba040e uas: Add US_FL_NO_ATA_1X for linux tcm_usb_gadget
    25a5856b0ce4 usb: uas: Add workaround for DATA IN urb's returned with status -EAGAIN
    6dcc7bcebeaa usb: xhci: Add workaround for fixing ep stream ring hang issue
    568ea45b97c7 usb: host: xhci: add support for Light Reset for DWC3 DRD
    f6e88ee5deda usb: host: xhci: plat: add support for otg_set_host() call
    e8944820830b usb: host: ehci-xilinx: Resolve kernel-doc Warnings
    92caef416da6 usb: host: ehci-xilinx: modified driver to resolve formatting warnings
    be8603e95882 usb: gadget: udc: udc-xilinx: Add identifier to read_fn function arg
    daed788b5bf2 usb: phy: Add platform driver support for ULPI phys
    a91aeb4ceef3 usb: xilinx: Add suspend resume support
    87337cf8fb5a usb: gadget: udc-xilinx: Add clock support
    6c59c4128bc3 dt-bindings: udc-xilinx: Fix coding style in binding doc
    e076ad0c9395 dt-bindings: usb: Add clock support for udc-xilinx
    8148c58e423b irqchip: xilinx: Add support to remove the Xilinx INTC driver module
    e90c010bc359 irqchip: xilinx: Add support to remove Xilinx INTC irqchip driver module
    6ed255a3b26e irqchip: xilinx: Avoid __init macro usage for xilinx_intc_of_init
    057bc8fc1e58 irqchip: xilinx: Change level for cpu-id warning
    eace9259fa8d irqchip: xilinx: Add support for Microblaze SMP
    76480a327eef irqchip: xilinx: Add support for cpu hotplug
    6ea2229eacc2 irqchip: xilinx: Rename root_domain just to domain
    26f37d376b24 irqchip: xilinx: Support only LE/BE irqc by the same driver
    bf483280aa06 irqchip: xilinx: Add support for sw interrupts
    fd33fc3cd1ea irqchip: xilinx: Move early initialization to own function
    dc3513cf5a04 irqchip: xilinx: Use handle_domain_irq()
    1cdfe0515c3f irqchip: xilinx: Enable generic irq multi handler
    6dfe2d306fe9 irqchip: xilinx: Make per cpu primary controller entries
    a9cfc203b65c dt-bindings: irqchip: Add Xilinx Interrupt Controller bindings
    8b8c06c3eb5e PCI: XDMA PL PCIe: Adding XDMA PL PCIe Root Port
    0ce6d855720e PCI: XDMA PL PCIe: Adding device tree binding for XDMA PL PCIe
    5358cf51ff8e PCI: xilinx-nwl: Fix coding style violations
    c2505045ad79 serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
    407eb64f5a6c serial: uartps: Prevent writes when the controller is disabled
    93d2b712a1d4 serial: uartps: Fix the ignore_status
    d00ec6bd2474 serial: uartps: Change uart ID port allocation
    5c827ba7d579 tty: xilinx_uartps: Make the timeout unsigned
    5128a1a9b06c tty: xilinx_uartps: Check clk_enable return type
    9a944d174a8a tty: xilinx_uartps: Add check for runtime_get_sync calls
    eec024c5e028 tty: xilinx_uartps: Check the clk_enable return value
    a97613c34b50 xilinx: Update copyright text to correct format
    3179288230f3 clk: zynqmp: Fix stack-out-of-bounds in strncpy`
    596fc12f05c8 clk: zynqmp: make bestdiv unsigned
    b9ce42d420ee clk: zynqmp: Add a check for NULL pointer
    8d9441bf0e46 can: xilinx_can: Remove repeated work the from kernel-doc
    30ffdc2b2f33 can: xilinx_can: Add check for NAPI Poll function
    498cbf79edd1 pinctrl: zynq: use module_platform_driver to simplify the code
    66399a3170cf serial: pl011: Add support for Xilinx Uart
    4d81d7d94613 dt-bindings: serial: pl011: Add 'arm,xlnx-uart'
    0f2cd4d7140c watchdog: of_xilinx_wdt: Add Versal Window watchdog support
    7ec21c310d37 watchdog: of_xilinx_wdt: Use a proper variable to handle overflow
    d6836a99d4c8 watchdog: of_xilinx_wdt: Wire setting up timeout via module parameter/DT
    f43c59ceae8b watchdog: of_xilinx_wdt: Add Versal support
    22e840fdf615 watchdog: of_xilinx_wdt: Introduce wdttype enum for identification
    52206a1807f7 watchdog: of_xilinx_wdt: Initialize watchdog via data structure
    846ea51e6a80 dt-bindings: Convert Xilinx watchdog bindings to json-schema
    d5d2c796c7fb nvmem: zynqmp_nvmem: Fix zynqmp_nvmem_read() parameter alignment
    a73a6a5a2733 nvmem: zynqmp-nvmem: Fix passing incompatible parameters
    83ef5c2e5690 nvmem: zynqmp: Replace ENOTSUPP by EOPNOTSUPP
    d070eb96690c nvmem: zynqmp: Add support to PUF eFuses programming for User data
    45114f5f9401 nvmem: zynqmp: Removed \r format specifier for prints.
    52ed2e469d11 nvmem: zynqmp: Added support to access efuse
    987c652bc692 dt-bindings: nvmem: Added efuse nodes
    22d3c7c3ed8d net: axienet: Add GT reset status check for XXV new IP version
    6538ea1f407b net: xilinx: axiethernet: Pass correct phy interface to of_phy_connect()
    42cda9570fa3 net: xilinx: fix compile warning due to typecheck
    f8c09e68cbd5 net: xilinx: In MCMDA designs fix crash on ifconfig up
    59292a39293e net: xilinx: axiethernet: Correct phy-mode comparison logic in _probe()
    0869f1cc4405 net: xilinx: Ethtool statistics support
    b72b33640123 net: xilinx: axiethernet: Fix compilation error when HW timestamp is enabled
    0ceefac8945e net: axienet: MRMAC reset sequence fixes
    01b9f018d071 net: axienet: Add one step PDelay support
    d3dc3bc79dc4 net: xilinx: Add one step 1588 support for MRMAC
    e1134a6cc7ea net: xilinx: MRMAC TX CMD FIFO update
    39f7bd39fb5f net: xilinx: Handle TX TS FIFO timeout error
    d8d73b148a73 net: xilinx: Update MRMAC config structure with PTP command length
    d362488d5c68 net: xilinx: Add supported_coalesce_params to fix axienet on 5.10
    15b9e099689f net: xilinx: GT reset updates for 2020.2
    62ce30685f3e net: xilinx: axiethernet: Enable dynamic MDIO MDC
    dbfab9dd6ee7 net: xilinx: axiethernet: Reduce the width of variable to handle overflow
    52328d13e2d2 net: xilinx: axiethernet: Add variables and conditions to check return value
    bd9ceb904dfb net: xilinx: axiethernet: Add condition to check the return value
    72da03c512e4 net: xilinx: axiethernet: Replace the value with enum
    b96ca439cb48 net: xilinx: axiethernet: Fix indentation warnings
    5394b524013f net: xilinx: axiethernet: Add check to overcome NULL dereference warning
    99bbaaa8e02d net: xilinx: axiethernet: Fix the use of uninitialized variable
    6b44b3370fdd net: xilinx: axiethernet: Remove the NULL assigning to a pointer
    6b0456b9cfd3 net: xilinx: Cleanup xilinx_tsn_shaper.* files
    91ed830f75b5 net: xilinx: Access qdv address and associated properties separately
    c2bcaa2c17f9 net: xilinx: Add MCDMA management channel support
    43b5b909f4da net: xilinx: Add a master xmit function for TSN packets.
    6aa91dc5a68a net: xilinx: Add a separate mcdma probe function for TSN IP
    d5614ab8c424 net: xilinx: Refactor TSN functions into xilinx_tsn_ip.c
    b60ea7d7bad3 net: xilinx: Check if dma_map_single returned a valid address.
    0236f643b223 net: xilinx: axiethernet: Add check for transmit data FIFO vacancy
    8430dcd9e7f1 net: xilinx: Fix indentation issues
    6a8385064fb9 net: xilinx: Add missing kernel-doc descriptions
    83aaf89897f2 net: xilinx: Add HW timestamping support for MRMAC
    900f3039fec4 net: xilinx: Add MRMAC support
    cd9e7e274cc5 net: xilinx: XXV Ethernet HW timestamp fixes
    6cd1303dfc43 net: xilinx: Use prandom with range to avoid corner cases
    895d280e4840 net: xilinx: axiethernet: Pass phy interface to of_phy_connect()
    1acc0ce5d2d4 net: xilinx: axiethernet: Fix swiotlb buffer full error
    8d2c60b85348 net: xilinx: Add support for Qbu/br feature of PL TSN IP
    efc7cf76a30b net: xilinx: Add Support for CB/FRER feature of PL TSN IP
    a4dc8db62ba9 net: xilinx: Add Qci support to the PL TSN IP driver
    2f682c383c7b net: xilinx: Add support for PL TSN endpoint interface
    6384ce5ee020 net: xilinx: Add support for PL TSN IP features
    d6a42a8396bd Revert "net: axienet: convert to phylink API"
    dad41407a324 net: xilinx: axiethernet: Fix crash in axienet_recv
    8a8b566a2d9e net: xilinx: axiethernet: Fix axiethernet register description
    8faea500a288 net: xilinx: axiethernet: Check for queue full in transmit path
    a4dc276716e6 net: xilinx: axiethernet: Add USXGMII support
    2a880e7b51ec net: axienet: added multichannel DMA support
    b2dbc2e6b5af net: axienet: Add clock support
    063be1ee73a2 net: axienet: Fix issues when DRE is not enabled in the h/w
    727f3a5c8f27 net: axienet: Fix coding style issues
    8cce77b51c92 net: axienet: Use ether_addr_copy()
    d241d300782a net: axienet: Allow unaligned transfers
    d0c93a4f5318 net: axienet: Remove unnecessary phy defines
    355ed8ae8a9a net: axienet: Adding highmem support
    64052d0b3845 net: axienet: Add support for ZynqMP
    c5e69e552ec6 net: axienet: Add support for 1588
    55ffb3c182f1 net: axienet: Add support for 10G/25G MAC
    2cedc8fa2980 net: axienet: Add support for 10G MAC
    98061a32e7ae net: axienet: Add support for 2.5G MAC
    f7675dec1b2b net: axienet: Add support for config structure
    1115c018112d net: axienet: Add support for non-processor mode
    713b2b3690e3 net: axienet: Fix lost wake-up scenario in xmit
    763aed86a2dd net: axienet: Use barriers at relevant places
    93ed62f37db8 net: axienet: Add NAPI support
    292cfee22d66 Revert "net: axienet: make use of axistream-connected attribute optional"
    a84e67a6fa88 dt-bindings: net: Add devicetree documentation for MRMAC
    708b43eca0f1 dt-bindings: Add devicetree documentation for ep
    37c3a8064ee6 dt-bindings: Add devicetree documentation for TSN
    0a442196b1e8 dt-bindings: net: axienet: Add support for mcdma
    f26c850a9112 dt-bindings: net: axienet: Add clock support
    43077fd30fd8 dt-bindings: net: axienet: Update binding doc for 10G/25G MAC 1588
    737a14056cb3 dt-bindings: net: axienet: Add binding for 2.5G, 10G and usxgmii mac variants
    b176e141940f Revert "net: axienet: document axistream-connected attribute"
    fc3794a6edfa xilinx: Update copyright text to correct format
    75b094330f57 net: emaclite: Remove custom BUFFER_ALIGN macro
    0146c2c57963 net: emaclite: Fix coding style
    49da784794c7 dt-bindings: net: Add binding documentation for axi emaclite
    35430b30f1f5 net: xilinx_phy: Add flag to reset after clock enable
    c1fbadc9f397 net: phy: Add support for xilinx SGMII and 1000BASE-X phys
    65d69c6c214d dt-bindings: net: Add bindings documentation for Xilinx PCS/PMA PHY
    7841eb835b10 dmaengine: zynqmp_dma: Add conditions for return value check
    427d5c025e85 dmaengine: zynqmp_dma: Typecast with enum to fix the coverity warning
    599e12bbf307 dmaengine: zynqmp_dma: Typecast the variable with dma_addr_t to handle overflow
    9767db3c8884 dmaengine: zynqmp_dma: Typecast the variable to handle overflow
    298922bdf14f dma: zynqmp_dma: Initialize descriptor list after freeing during reset
    5d3dea6fc600 dmaengine: xilinx: Add vdmatest test client code
    5584a3280a8a dt-bindings: dmaengine: Add binding for vdmatest client
    65c2f7dd9e2d dmaengine: xilinx: Add axidmatest test client code
    655eb50ebb09 dt-bindings: dmaengine: Add binding for xilinx axidma test client
    c00b65c3a4c4 dmaengine: xilinx_dma: Implement error handling in xilinx_dma_child_probe() API
    908f454a5599 dmaengine: xilinx_dma: Fix kernel-doc warnings
    7af7892205db edac: zynqmp: Add EDAC support for ZynqMP OCM Controller
    9c5b9d5718a1 dt-bindings: edac: Add bindings for Xilinx ZynqMP OCM binding
    6b8f58e3fd3b i2c: xiic: Correct the BNB interrupt enable sequence
    4115dbc8ed91 dt-bindings: i2c: xiic: Add 'clock-frequency' property
    be4456162ad9 dt-bindings: i2c: xiic: Add 'xlnx,axi-iic-2.1' to compatible
    e809f68dc7c4 i2c: xiic: Add SCL frequency configuration support
    6002b4d40444 i2c: xiic: Update compatible with new IP version
    60849c483fbe i2c: xiic: Remove interrupt enable/disable in Rx path
    13e01446936a i2c: xiic: Switch to Xiic standard mode for i2c-read
    693a50a26414 i2c-xiic: Fix the type check for xiic_wakeup
    6b7031d358fc i2c-xiic: return value of xiic_reinit
    19d54cfd5ccb i2c: xiic: Add smbus_block_read functionality
    9f19d8f260fb i2c: xiic: Use 'nmsgs' variable instead of repeated_start
    ab1034c36585 i2c: xiic: Add wait for FIFO empty in send_tx
    abdec326ff9d i2c: xiic: Fix Rx and Tx paths in standard mode repeated start
    c2ada1322975 i2c: xiic: Correct the datatype for rx_watermark
    9371e3e5be5c i2c: xiic: Enter standard mode only for > 255 byte read transfers
    ffc4bfb1b8cb i2c: xiic: Fix coding style issues
    ab6be0774635 i2c: xiic: Add standard mode support for > 255 byte read transfers
    622176d24add i2c: xiic: Fix Tx Interrupt path for grouped messages
    b1e31132570b rtc: zynqmp: fix linking failure for ARCH arm
    50c43b106308 rtc: zynqmp: Add calibration set and get support
    2c1e6ef29bd9 arm: zynq: Suspend support
    a52ec0d01e2a clk: zynq: Update the parameters to zynq_clk_register_periph_clk
    92237f2096e3 clk: zynq: trivial warning fix
    eb5c194fe712 clk: zynq: pll: Fix kernel-doc warnings
    6461bd8f8bbc uio: uio_xilinx_apm: Add Xilinx AXI performance monitor driver
    e903b998a3ae dt-binding: apm: Add the binding document for APM
    386e0a2b7d11 clk: clocking-wizard: Fix coding style violations
    808472ee387f clocking-wizard: Support higher frequency accuracy
    1b0b1fcc0f35 clk: clocking-wizard: Update the compatible
    a6af66ef4704 clk: clocking-wizard: Fix the reconfig for 5.2
    aabc766ffa0d clk: clocking-wizard: Rename nr-outputs to xlnx,nr-outputs
    714046154405 clk: clocking-wizard: Add the clockwizard to clk directory
    dc8d9e247bd8 dt-bindings: add documentation of xilinx clocking wizard
    f8b100484ab4 i2c: cadence: Handling Slave monitor mode
    46952bbd1349 i2c-cadence: Check the return value of pin-ctrl
    2d3dc169c329 i2c: cadence: Recover bus after controller reset
    8d4f3e897a6b trafgen: Document sysfs entries
    e54e88aa8db6 trafgen: xilinx: add axi traffic generator driver
    db6c97a16709 dt-bindings: misc: Add dt bindings for traffic generator
    0b3a9cf23208 Documentation: short descriptions for Flexnoc Performance Monitor driver
    af9310156cdb misc: xilinx_flex: Add support for the flex noc Performance Monitor
    eed98bc1bd20 dt-bindings: Add dt bindings for flex noc Performance Monitor
    b39ce6188d8f fpga: zynqmp: Add feature-list validation check
    c3debbb075e8 firmware: xilinx: Use proper indentation in kernel-doc
    2f36766c292f firmware: xilinx: always check API version for IOCTL/QUERY
    31e6cfd7b3b4 firmware: xilinx: add new function for do_feature_check_call
    1e6083feb220 firmware: xilinx: Add support for IOCTL and QUERY ID feature check
    9d198dc12070 firmware: zynqmp: Add support for secure_image
    53e474616f13 firmware: xilinx: Add IOCTL support to query QoS
    772697ce114a firmware: xilinx: Implemented pm API functions to get the xilfpga component info
    2746bd976c4b firmware: xilinx: Add IOCTL support for the AIE run time operations
    9513498385d4 firmware: xilinx: Add TF_A_PM_REGISTER_SGI SMC call
    56e40c7dd8b6 firmware: xilinx: Add support to get the image meta-header info
    e03694978cf3 firmware: xilinx: Update the zynqmp_pm_fpga_load() API
    fbc91cdb367b fpga: versal: Use tab instead of spaces for indentation
    19e115da53f1 fpga: fpga-mgr: Add missing kernel-doc description
    7837d95cdd94 fpga: fpga-mgr: fix for coding style issues
    4481faa1bf49 fpga: mgr: Update the state to provide the exact error code
    bc8e9b6e0983 fpga: region: Adds runtime PM support
    54d8f9d9ca81 fpga: region: Add fpga-region property 'power-domains'
    a7a2276ed8f1 fpga: zynqmp: Initialized variables before using it
    292dbac1677e fpga: zynq: Fix incorrect variable type
    b918a2e218ca fpga: zynqmp: Use the scatterlist interface
    e155630575c4 fpga: versal: Use the scatterlist interface
    8e749d381f33 fpga: mgr: Adds secure BitStream loading support
    2dd53589d0a4 fpga: add bindings document for secure flags
    f59058929ba0 fpga: support loading from a pre-allocated buffer
    b536b65e5c7c fpga: fpga-bridge: Add manual set option via sysfs
    b752f2a3995b fpga: zynq: Add AFI config driver
    f8e7bc8ce2f2 fpga: doc: Add binding doc for the afi config driver
    5a1c2fd19a5d fpga: Add xilinx AFI config driver
    2433e3deb357 fpga: doc: Add binding doc for the afi config driver
    536a7eca23fe fpga: Adopted Authenticated BitStream loading support for Xilinx
    8a20fda8bffe fpga: zynqmp-fpga: Adds status interface
    2794dcc31d3d fpga: mgr: Update the status for fpga-manager
    5f095e3b363a fpga: zynqmp-fpga: Add support for pl configuration readback
    49f97f21ebce fpga: fpga-mgr: Add readback support
    453b5c0bdb77 fpga: mgr: Adopted Encrypted BitStream loading support for Xilinx zynqmp
    771420904d30 fpga: Add firmware store function
    298985c827de spi: spi-cadence-quadspi: Add Rx periodic Tuning support
    0d82358fa8e5 spi: spi-cadence-quadspi: Add support for OSPI Macronix
    f8e60991e92b mtd: spi-nor: micron-st: Add support for mt35xu01g flash
    7321890bd2f2 mtd: spi-nor: gigadevice: Add support for GD25LX256E
    595b205a7646 mtd: spi-nor: issi: Add support for is25wx256
    60db395c8bf9 spi: spi-cadence-quadspi: Add support for odd byte count read/write in DDR mode
    01c7f51c1324 spi: spi-cadence-quadspi: Add support for DDR PHY mode
    915923d73f7f spi: spi-cadence-quadspi: Add support for OSPI device reset
    742af72f442c firmware: xilinx: Add tristate configurations
    73cbd854ef83 spi: cadence-quadspi: fix dma_unmap_single() call
    d7228207a0c8 spi: cadence-quadspi: Add Xilinx Versal external DMA support
    af34a3dd349c spi: cadence-quadspi: Add OSPI support for Xilinx Versal SoC
    4004e9c16f95 dt-bindings: spi: cadence-quadspi: Add support for Xilinx Versal OSPI
    59803de0a3b3 net: macb: Move the phy re-init to phylink function instead of open
    80ed3cc175ae net: macb: Handle phy reset for PCS PMA IP
    a34ea9656915 net: macb: Kernel gives call trace during resume from Wake on Lan
    c9f9e43c4ee3 net: macb: Handle phy reset for PCS PMA IP
    9b06c1cc7a63 net: macb: Reorder probe and fix exit path
    31720bd54735 net: macb: Reset TX when TX halt times out
    73cd1e1e0b94 net: macb: Increase halt timeout to accommodate 10Mbps link
    0ddb734603a0 net: macb: Use queue disable instead of tieoff in Versal suspend
    4034a3f56f0f net: macb: Update tsu clk usage in runtime suspend/resume for Versal
    aee3952e9a18 dt-bindings: net: macb: Add GEM versal compatible string
    b3acf26ff48a net: macb: Optimize reading HW timestamp
    48d58b99f331 net: macb: Process tx timestamp only on ptp packets
    6b265011b9e9 net: macb: Use WOL via ARP
    d38cf41379d4 net: macb: Add provision for queue tie off
    c20373c21196 net: macb: PTP fixes
    2c46511d8159 net: macb: Add support for partial store and forward
    a11ece690080 dt-bindings: net: macb: update for partial store and forward
    00766c76dddd net: macb: add support for mdio phy nodes
    ac0976c90259 drivers: soc: xilinx: Call InitFinalize from late_initcall_sync instead of probe
    3daad588a65f pwm: pwm-cadence: Add support for TTC PWM
    413a103eb561 dt-bindings: timer: Update device tree bindings for cadence TTC PWM
    813603f7b72c clocksource: timer-cadence-ttc: Do not probe TTC device configured as PWM
    94461f06fbfb drivers: gpio: Add support for SLG7XL45106 I2C GPO expander
    2bdd366ed0ab dt-bindings: gpio: Add gpio-slg7xl45106.yaml
    7284fac81dec mtd: rawnand: Add jedec_id to struct onfi_params
    19c7e50b6c39 firmware: xilinx: Add OSPI Mux selection support
    1c44a8fcc5b1 firmware: xilinx: add support for sd/usb/gem config
    9fcd8933730f firmware: xilinx: Add support for secure read/write ioctl interface
    64db7b5940bd xilinx: Fix alignment issues
    2f4d392d63b9 firmware: xilinx: Update firmware call interface to support additional arg
    af114b23708c firmware: xilinx: Add support to access BBRAM and volatile user keys
    ffdf3479387c firmware: xilinx: Add support to get the image uid info
    bacd03b43e9a firmware: xilinx: Add sysfs support for feature config
    2dd992b1a66a firmware: xilinx: Add support for runtime features
    f78d30ce1170 firmware: xilinx: Open MMIO read/write interface via debugfs
    1705288f9b7e firmware: zynqmp: Add MMIO read and write support for PS_MODE pin
    03696811c57b usb: dwc3: Add power management support in DWC3 Xilinx driver
    4522562bac02 firmware: zynqmp: Use DEVICE_ATTR_* to create sysfs entry
    8679afc083a7 firmware: xilinx: Use u32 for reset ID in reset APIs
    894211e12431 xilinx: firmware: Add sysfs to get last reset reason
    4ccc1c0cb0d1 firmware: xilinx: Add support for GET_LAST_RESET_REASON IOCTL
    1d8d2dfe3408 firmware: xilinx: Add IOCTL for handling usb power requests
    ac757349260a firmware: xilinx: xilinx: Add IOCTL ids for probe counter
    007d0f428ab0 firmware: xilinx: Add qspi firmware interface
    e46e8af477fc firmware: xilinx: Add zynqmp SGMII firmware support
    6e6b3ac16542 firmware: xilinx: Add ULPI reset support
    f7ff9a4be882 firmware: xilinx: Add AFI ioctl support
    3fd244dfb317 firmware: xilinx: Add pm api function for PL readback
    989d4b8540ed firmware: xilinx: Add missing debug firmware interfaces
    16fe6e7d76b2 firmware: xilinx: Enable PM_IOCTL in debugfs
    c1171a34d2ef firmware: xilinx: Adds new eemi call for reg access
    c3e265ab42fe firmware: xilinx: Added pm api functions for RSA and SHA
    10ea96ed9201 firmware: xilinx: provides support to access efuse
    4049e236df60 firmware: xilinx: Add IOCTL support for AIE ISR Clear
    cdf530a25695 firmware: xilinx: Add ZynqMP firmware ioctl enums for RPU configuration.
    c2b985b88f09 firmware: xilinx: check return value of zynqmp_pm_get_api_version()
    c98909d6f9e5 firmware: xilinx: Add shutdown/wakeup APIs
    4ae799581030 driver: soc: xilinx: register for power events in zynqmp power driver
    3f0ca0276e98 firmware: xilinx: instantiate xilinx event manager driver
    ceeb8c19f199 drivers: soc: xilinx: add xilinx event management driver
    3b83c76d98b9 include: linux: firmware: Add header file with error events details
    dea4d8d0720a firmware: xilinx: move supported api callback ids
    0255c20b2d2c firmware: xilinx: export the feature check of zynqmp firmware
    22ef1e02ef40 firmware: xilinx: add register notifier in zynqmp firmware
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 1a35c54e4fde4fac44745388501f517b9d269de5)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Harish Sadineni
6fceeca067 binutils: fix CVE-2025-1180
Backporting the fix from PR 32636 to fix PR 32642 (ld SEGV (illegal read access)
in _bfd_elf_write_section_eh_frame (bfd/elf-eh-frame.c:2234:29) with
 --gc-sections --gc-keep-exported option)

https://nvd.nist.gov/vuln/detail/CVE-2025-1180 is associated with
PR32642 which will get fixed with commit from PR 32636.

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=f9978defb6fab0bd8583942d97c112b0932ac814]
CVE: CVE-2025-1180

(From OE-Core rev: 8178f44f18777b2c8acc0afb9fd43921a9a8e76e)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Hitendra Prajapati
14d260ab25 screen: Fix CVE-2025-46805
Upstream-Status: Backport from https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=161f85b98b7e1d5e4893aeed20f4cdb5e3dfaaa4

(From OE-Core rev: b25b0f785e0b7650e31a45a92be196be6b76ea78)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Harish Sadineni
94dea33c75 binutils: Fix CVE-2025-1182
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b425859021d17adf62f06fb904797cf8642986ad]
CVE: CVE-2025-1182

(From OE-Core rev: bbfdd5c44a5629b9158b418b5335ec4f1567b3f9)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-04 09:06:31 -07:00
Alper Ak
3810d71ad8 ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS
Fix [YOCTO #15753]

(From yocto-docs rev: 76a4dd5ce041b38f4cab714017a38b035d9530a3)

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5f5a406d4acdfcbf655ac014d0d2807056f95291)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Etienne Cordonnier
14ad855916 ref-manual/variables.rst: document SSTATE_SKIP_CREATION
(From yocto-docs rev: 3ff58cc9f3dd200054d241284e183d531502eca4)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 3982720668aafa18c9ed27304d09f896740b1653)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Alper Ak
c90ab351eb ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS
Fix [YOCTO #15755]

(From yocto-docs rev: 064472cef81212d9731b10161b8118de314191e1)

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit fd143a04bab38f6aeec23ec229657b16fcaecdf1)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Enrico Jörns
c5b17456e6 conf.py: tweak SearchEnglish to be hyphen-friendly
This modifies the default indexer split() and js splitQuery()
methods to support searching for words with hyphens.

While this might not be an ideal, rock solid, and fully future-proof
solution, it allows at least to search for strings inlcuding hyphens,
such as 'bitbake-layers', 'send-error-report', or 'oe-core'.

Below is a bit more detailed explanation of the two modifications done:

1) The default split regex in the sphinx-doc SearchLanguage base class
   is:

   | _word_re = re.compile(r'\w+')

   which we simply extend to include hyphens '-'.

   This will result in a searchindex.js that contains words with hyphens,
   too.

2) The 'searchtool.js' code notes for its splitQuery() implementation:

   | /**
   |  * Default splitQuery function. Can be overridden in ``sphinx.search`` with a
   |  * custom function per language.
   |  *
   |  * The regular expression works by splitting the string on consecutive characters
   |  * that are not Unicode letters, numbers, underscores, or emoji characters.
   |  * This is the same as ``\W+`` in Python, preserving the surrogate pair area.
   |  */
   | if (typeof splitQuery === "undefined") {
   |   var splitQuery = (query) => query
   |       .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}]+/gu)
   |       .filter(term => term)  // remove remaining empty strings
   | }

   The hook for this is documented in the sphinx-docs 'SearchLanguage'
   base class.

   |    .. attribute:: js_splitter_code
   |
   |       Return splitter function of JavaScript version.  The function should be
   |       named as ``splitQuery``.  And it should take a string and return list of
   |       strings.
   |
   |       .. versionadded:: 3.0

   We use this to define a simplified splitQuery() function with a split
   argument that splits on empty spaces only.

We extend SearchEnglish (which extends SearchLanguage) here to retain
the stemmer code and stopwords for English.

[YOCTO #14534]

(From yocto-docs rev: 72e70a6af6eb3d4ca41f9e64069d8d3f61b420a3)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d4a98ee19e0cbd6be96923dc72faee143a6b294b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Christos Gavros
9fe29f2369 ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable
This variable specifies the maximum allowed size
of the initramfs image in Kbytes.
Fixes [YOCTO #15797]

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
CC: Antonin Godard <antonin.godard@bootlin.com>
(From yocto-docs rev: 215796836549ae31ef8a9f4f2421316d20d4e3c3)

Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 07bcdddaf71c76cdec186cf0ddd97a47eec54972)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Christos Gavros
304b1b285b ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable
This variable specifies the maximum allowed size
of the generated image in kilobytes.

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
CC: Antonin Godard <antonin.godard@bootlin.com>
CC: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: ca56f1002f8d198c0626e87412f33906e13a2761)

Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f3ddc92081363aa7ef7d4fc2c3b918f32f7bda05)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Trevor Woerner
7dfd7de941 sphinx-lint: unbalanced inline literal markup
Fix as many instances of unbalanced-inline-literals-delimiters as reported
by 'make sphinx-lint' as possible. Sphinx and/or its linter seem to get
tripped up randomly when references contain links to heading which contain
literals enclosed in double-back-tics, and not all of them can be "fixed"
to pass both building and linting.

(From yocto-docs rev: 2c1e5b080ad5e62d8283d332cbc473fd2d59c6e6)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Trevor Woerner
d2de20a4b6 sphinx-lint: role missing opening tag colon
Fix all instances missing-space-before-role as reported by 'make sphinx-lint'.

(From yocto-docs rev: 255bfc8c195bbc84a78a4985cf2775c87e525794)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Trevor Woerner
32712b2a6b sphinx-lint: trailing whitespace
Fix all instances of trailing-whitespace as reported by 'make sphinx-lint'.

(From yocto-docs rev: 7776550a190060221a8cc913e470edf5349b6829)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Trevor Woerner
38e33dedee ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS
Fixes [YOCTO #15509]

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 8e893cc8cabba4b4f21556561d1ca9656ca1ff9f)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f1cdecb6da91dbfac59359c83038cb4a4c36ad0a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Trevor Woerner
40232dc020 contributor-guide/submit-changes: encourage patch version changelogs
Add a section after the 'git format-patch' information encouraging developers
to add patch version changelogs to their patch updates.

(From yocto-docs rev: a9f9d53fa4a29e3cf846868567190425ffed8bf0)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2e3a37c4607b296956993e557d1786c4876e5722)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Adrian Freihofer
7888d6459e ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME
The kernel-fitimage.bbclass uses the UBOOT_* variables. The SPL_*
variables are handled by uboot-sign.bbclass.

(From yocto-docs rev: 1383a1fac59b9aa02bde2a0c63a6f480807492e1)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8ceffee908a039deb1021361faa7637e83ef26f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Lee Chee Yang
ac7af3f00b migration-guides: add release notes for 4.0.26
(From yocto-docs rev: 12ef53ea657c3d36c3c59d492c20123e36001628)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 656dc03101705bba718517b7017f71ce00541b72)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Antonin Godard
36432822b1 ref-manual/release-process: update releases.svg
- Add the future "Whinlatter" (5.3) and "Wrynose" (6.0) releases.
- Make the "Walnascar" release a current release.
- Update the month in Current.

(From yocto-docs rev: b60476dd7b056d7b5dd48ac7fce943b4e3542277)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit adb8573b54626e033921a9f4e3db259312b79207)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Antonin Godard
72c9483d9d test-manual/intro: remove Buildbot version used
The version has changed now (3.10.12 as of writing). Avoid having to
maintain this information by removing the version info from the intro.
Also fix a typo ("uses now uses") and give a link to yocto-autobuilder2.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: c404868285bfeb64600e70650483c664a8eb9574)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1ed64dbdf4a60b000305cdc2c67dc24f4bc97ef7)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Antonin Godard
ce1cefc347 dev-manual/sbom.rst: fix wrong build outputs
This document was written with SPDX 3.0 in mind (create-spdx-3.0 class)
on OE-Core's master, but Kirkstone only supports SPDX 2.2 (named simply
create-spdx).

The create-spdx class only generate a tar.zst output, so remove the
other outputs listed here.

Also, ancillary outputs are not only deployed in tmp/deploy/spdx/MACHINE
but tmp/deploy/spdx in general.

(From yocto-docs rev: 25b5ec4c71c97228f8386f5b6c4fbe272c207ed6)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Sundeep KOKKONDA
c6cd61f1a2 gcc: AArch64 - Fix strict-align cpymem/setmem
The cpymemdi/setmemdi implementation doesn't fully support strict alignment.
Block the expansion if the alignment is less than 16 with STRICT_ALIGNMENT.
Clean up the condition when to use MOPS. (PR103100)

The original patch for GCC 12 removed MOPS & SIMD conditionals for setmem and
cpymem expansions in aarch64.md file. However, this version for GCC 11 does not
backport the SIMD & MOPS-related changes and retains the conditions in aarch64.md
file to preserve correctness and compatibility with the GCC 11 backend.

All changes and outputs have been verified by the author.

Upstream-Status: Backport [https://gcc.gnu.org/cgit/gcc/commit/?id=b9d16d8361a9e3a82a2f21e759e760d235d43322]

(From OE-Core rev: a99a65632116955dc69809a14bf536b22582de72)

Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Virendra Thakur
aee1d45a83 util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
During ptest execution, util-linux adds mount entries in /etc/fstab
and runs `mount -a`, which mounts all available entries from
/etc/fstab. This can cause unintended mounts that are unrelated to
the test, leading to incorrect test behavior.

To avoid this, upstream util-linux introduced a mechanism using
CUSTOM_FSTAB,which isolates test-specific fstab entries. Only entries
listed in CUSTOM_FSTAB are mounted during test execution, ensuring
tests do not interfere with or depend on the system's /etc/fstab.

This commit backports below upstream changes to use CUSTOM_FSTAB.
ed3d33faff
b1580bd760
6aa8d17b6b

(From OE-Core rev: 94747fb63518bf907eb7c09fc2e146e39e235a7d)

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Divya Chellam
32d2b233c6 ruby: fix CVE-2025-27221
In the URI gem before 1.0.3 for Ruby, the URI handling methods
(URI.join, URI#merge, URI#+) have an inadvertent leakage of
authentication credentials because userinfo is retained even
after changing the host.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-27221

Upstream-patches:
3675494839
2789182478

(From OE-Core rev: c77ff1288719d90ef257dfe28cb33b3768fc124a)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Praveen Kumar
097732e057 glib-2.0: fix CVE-2025-4373
A flaw was found in GLib, which is vulnerable to an integer overflow
in the g_string_insert_unichar() function. When the position at which
to insert the character is large, the position will overflow, leading
to a buffer underwrite.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-4373
https://security-tracker.debian.org/tracker/CVE-2025-4373

Upstream-patches:
cc647f9e46
4d435bb480

(From OE-Core rev: 7a7319745637d4b681935ae71706dcc467df3040)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Vijay Anusuri
ef632f4693 libsoup-2.4: Fix CVE-2025-32914
import patch from debian to fix
 CVE-2025-32914

Upstream-Status: Backport [import from debian https://salsa.debian.org/gnome-team/libsoup/-/tree/debian/bullseye/debian/patches?ref_type=heads
Upstream commit 5bfcf81575]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/450
https://security-tracker.debian.org/tracker/CVE-2025-32914

(From OE-Core rev: 8996e178264cf6bf9b69365172f43a5ee8e9f727)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Vijay Anusuri
cbbea14280 libsoup-2.4: Fix CVE-2025-32912
Upstream-Status: Backport from
cd077513f2
& 910ebdcd3d

(From OE-Core rev: e66218f6cda7de046bace6880ea5052900fd6605)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Vijay Anusuri
d8278fd9f9 libsoup-2.4: Fix CVE-2025-32911 & CVE-2025-32913
Upstream-Status: Backport from
7b4ef0e004
& f4a761fb66

(From OE-Core rev: ff1896b14347c7b4a166716338d3822da97be2e4)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Vijay Anusuri
21bb9c063b libsoup-2.4: Fix CVE-2025-32910
import patch from debian to fix
 CVE-2025-32910

Upstream-Status: Backport [import from debian https://salsa.debian.org/gnome-team/libsoup/-/tree/debian/bullseye/debian/patches?ref_type=heads
Upstream commit e40df6d48a
&
405a8a3459
&
ea16eeacb0]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/417
https://security-tracker.debian.org/tracker/CVE-2025-32910

(From OE-Core rev: b65e3d3a4dc2375d9bb81c7a91c84139cc667a47)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Ashish Sharma
0f58759f1b libsoup-2.4: Fix CVE-2025-46420
Upstream-Status: Backport [c9083869ec]

(From OE-Core rev: f0d5d13b0b7b2cf3f60c85b0c135fd948c648256)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Praveen Kumar
23a8405509 connman :fix CVE-2025-32366
In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length
that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen)
and memcpy(response+offset,*end,*rdlen) without a check for whether
the sum of *end and *rdlen exceeds max. Consequently, *rdlen may be
larger than the amount of remaining packet data in the current state
of parsing. Values of stack memory locations may be sent over the
network in a response.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32366

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4

(From OE-Core rev: 1b9156124b4a07e0e3e0ab09e87d654eae6c7b4e)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Yi Zhao
7f043fb4bb iputils: Security fix for CVE-2025-47268
CVE-2025-47268
ping in iputils through 20240905 allows a denial of service (application
error or incorrect data collection) via a crafted ICMP Echo Reply
packet, because of a signed 64-bit integer overflow in timestamp
multiplication.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47268

Patch from:
070cfacd73

(From OE-Core rev: a463c8e3950ccf58316d48241c2cd82484f25fda)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Vijay Anusuri
0fa8a4465e openssh: Fix CVE-2025-32728
Upstream-Status: Backport [fc86875e6a]

(From OE-Core rev: 68413e1413eb87254d68f30920574b0e2c766782)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-28 08:46:32 -07:00
Steve Sakoman
ab9a994a8c build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: e8be08a624b2d024715a5c8b0c37f2345a02336b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 09:02:55 -07:00
Steve Sakoman
5dad8173d4 poky.conf: bump version for 4.0.27
(From meta-yocto rev: ff73566d1786b524ec8c809bf641b0b74d85b512)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:59:59 -07:00
Alexander Kanavin
d6a242831e perl: enable _GNU_SOURCE define via d_gnulibc
This is needed to properly support memmem() and friends under musl
as musl guards the declarations with _GNU_SOURCE define, and if the
declarations are not present, gcc will issue warnings and generate
assembly that assumes the functions return int (instead of e.g.
void*), with catastrophic consequences at runtime.

(From OE-Core rev: 79dc3f42958bfefe03a8240e2a57501c38d2bd3c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6422e62fbc5c65a2165a72c97c880cfa9a80e957)
Signed-off-by: Peter Hurley <peter@meraki.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Alon Bar-Lev
06b97d608e module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
Symbols are used during install as well, adding KBUILD_EXTRA_SYMBOLS enables
successful installation.

    | DEBUG: Executing shell function do_install
    | NOTE: make -j 22 KERNEL_SRC=xxx/kernel-source -C xxx/drivers
    KDIR=xxx/kernel-source DEPMOD=echo
    MODLIB=xxx/image/lib/modules/6.6.75-yocto-standard-00189-g530c419bc9db
    INSTALL_FW_PATH=xxx/image/lib/firmware CC=aarch64-poky-linux-gcc
    -fuse-ld=bfd -fcanon-prefix-map  LD=aarch64-poky-linux-ld.bfd
    OBJCOPY=aarch64-poky-linux-objcopy  STRIP=aarch64-poky-linux-strip
    O=xxx/kernel-build-artifacts modules_install
    | make: Entering directory 'xxx/drivers'
    | make -C xxx/kernel-source M=xxx/drivers modules
    | make[1]: Entering directory 'xxx/kernel-source'
    | make[2]: Entering directory 'xxx/kernel-build-artifacts'
    |   MODPOST xxx/drivers/Module.symvers
    | ERROR: modpost: "xxx" [xxx/xxx.ko] undefined!

(From OE-Core rev: 1403ffa42014ad5c88c28da6c360ea5fd1857147)

Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0ef80eeda967a9e04ff91c3583aabbc35c9868e8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Deepesh Varatharajan
ae5264cac3 glibc: stable 2.35 branch updates
d2febe7c40 math: Improve layout of exp/exp10 data
20b5d5ce26 AArch64: Use prefer_sve_ifuncs for SVE memset
9569a67a58 AArch64: Add SVE memset
59f67e1b82 math: Improve layout of expf data
904c58e47b AArch64: Remove zva_128 from memset
8042d17638 AArch64: Optimize memset
be451d6053 AArch64: Improve generic strlen
8b3d09dc0d assert: Add test for CVE-2025-0395
29d9b1e59e assert: Reformat Makefile.

Testresults:
Before update	|After update	 |Difference
PASS:  4832	|PASS:4833  	 |PASS:  +1
FAIL:  132	|FAIL:132	 |FAIL:  0
XPASS: 6	|XPASS:6 	 |XPASS: 0
XFAIL: 16	|XFAIL:16 	 |XFAIL: 0
UNSUPPORTED: 200|UNSUPPORTED:200 |UNSUPPORTED: 0

(From OE-Core rev: 70e9ae425e34221af6a7bdda6b83f2f8e7848278)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Aleksandar Nikolic
01292aba34 scripts/install-buildtools: Update to 4.0.26
Update to the 4.0.26 release of the 4.0 series for buildtools

(From OE-Core rev: 04ff268291598c1e0588cff43df694a714e48746)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
45c3cde26b libsoup: Fix CVE-2025-32914
Upstream-Status: Backport
[5bfcf81575]

(From OE-Core rev: ce7cda16d823012f71d91c820083b0da93762d9d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
3f1cc96cb9 libsoup: Fix CVE-2025-32912
Upstream-Status: Backport from
cd077513f2
& 910ebdcd3d

(From OE-Core rev: 7c709d985c4e732f6fedd56748b3de3e52869282)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
d8c4c5ea04 libsoup: Fix CVE-2025-32911 & CVE-2025-32913
Upstream-Status: Backport from
7b4ef0e004
& f4a761fb66

(From OE-Core rev: e79585ab2a492a5023bce637cbe519fcd1370e04)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
fe91f67d38 libsoup: Fix CVE-2025-32910
Upstream-Status: Backport from
e40df6d48a
&
405a8a3459
& ea16eeacb0

(From OE-Core rev: aeaa106595f173f5646a17adb413a85e0d01887e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
cc7f7f1c29 libsoup: Fix CVE-2025-32909
Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libsoup/-/comm
it/ba4c3a6f988beff59e45801ab36067293d24ce92

(From OE-Core rev: 491373828c1c66030fb41687f9a42b9e4deb010b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
dc621121b1 libsoup: Fix CVE-2025-32906
Upstream-Status: Backport from
1f509f31b6
& af5b9a4a39

(From OE-Core rev: 17fbb56b3cbea445767cba988f3db5b32fb00b71)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
14f293eecf libsoup: update fix CVE-2024-52532
Upstream-Status: Backport from 4c9e75c667

(From OE-Core rev: caf0ac894d029aaac7d746fe87db1aa0e8c3c93f)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
e07ed2059c libsoup-2.4: Fix CVE-2025-32909
Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libsoup/-/comm
it/ba4c3a6f988beff59e45801ab36067293d24ce92

(From OE-Core rev: ad1244ee75b4169eab21c2c8744b86342b32dd07)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
6b27d84c2c libsoup-2.4: Fix CVE-2025-32906
Upstream-Status: Backport from
1f509f31b6
& af5b9a4a39

(From OE-Core rev: 2b938dd6beb1badca59804ffbe395deb679bc1b1)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Vijay Anusuri
02c2876c5e libsoup-2.4: Update fix CVE-2024-52532
Upstream-Status: Backport from 4c9e75c667

(From OE-Core rev: 144d067ed5b98b8ca477a6a0e8c958c0b15e9643)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Peter Marko
b497f2caf7 perl: patch CVE-2024-56406
Pick patch mentioned in NVD links for this CVE.
Tested by runniing ptest and CVE reproducer (before&after).
Ptest fails on test dist/threads/t/join, however the same test also
fails without this patch.

(From OE-Core rev: 8e3c821e9ce8f3a9667847a284bc5a6f4973ea13)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-16 08:58:06 -07:00
Haixiao Yan
8c0982c306 glibc: Add single-threaded fast path to rand()
Backport a patch [1] to improve performance of rand() and __random()[2]
by adding a single-threaded fast path.

[1] https://sourceware.org/git/?p=glibc.git;a=commit;h=be0cfd848d9ad7378800d6302bc11467cf2b514f
[2] https://sourceware.org/bugzilla/show_bug.cgi?id=32777
(From OE-Core rev: 00f7a2f60dd6de95a1a47fa642978613ce76dc56)

Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:22 -07:00
Peter Marko
cdca0c82f7 qemu: ignore CVE-2023-1386
Upstream Repository: https://gitlab.com/qemu-project/qemu.git

Bug Details:  https://nvd.nist.gov/vuln/detail/CVE-2023-1386
Type: Security Advisory
CVE: CVE-2023-1386
Score: 3.3

Analysis:
- According to redhat[1] this CVE has closed as not a bug.

Reference:
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2223985

(From OE-Core rev: 6a5d9e3821246c39ec57fa483802e1bb74fca724)

(From OE-Core rev: f7c8877395d4ec0a91cd5cf54e6c2858495746fb)

Signed-off-by: Madhu Marri <madmarri@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

(Converted to old CVE_CHECK_IGNORE syntax)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:22 -07:00
Hitendra Prajapati
03a2733983 busybox: fix CVE-2023-39810
Upstream-Status: Backport from https://git.busybox.net/busybox/commit/?id=9a8796436b9b0641e13480811902ea2ac57881d3

(From OE-Core rev: c0b71ec35716a512915b00808a26f77481db0e0a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:22 -07:00
Praveen Kumar
9b99800fe7 connman :fix CVE-2025-32743
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c
can be NULL or an empty string when the TC (Truncated) bit is set in
a DNS response. This allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code, because those
lookup values lead to incorrect length calculations and incorrect
memcpy operations.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32743

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=d90b911f6760959bdf1393c39fe8d1118315490f

(From OE-Core rev: ece0fb01bf28fa114f0a6e479491b4b6f565c80c)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:21 -07:00
Peter Marko
73c2187fbc ghostscript: ignore CVE-2024-29507
Fix for this CVE is [3] (per [1] and [2]).
It fixes cidfsubstfont handling which is not present in 9.55.0 yet.
It was introduced (as cidsubstpath) in 9.56.0 via [4] and later modified
to cidfsubstfont in [5].
Since this recipe has version 9.55.0, mark it as not affected yet.

[1] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7745dbe24514710b0cfba925e608e607dee9eb0f
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-29507
[3] https://security-tracker.debian.org/tracker/CVE-2024-29507
[4] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=82efed6cae8b0f2a3d10593b21083be1e7b1ab23
[5] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=4422012f6b40f0627d3527dba92f3a1ba30017d3

(From OE-Core rev: 5c9f3c244971aadee65a98d83668e3d5d63825a0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:21 -07:00
Peter Marko
235e74ba09 ghostscript: ignore CVE-2025-27837
This CVE only impacts codepaths relevant for Windows builds.
Se [1] from Debian which marks it as not applicable.

[1] https://security-tracker.debian.org/tracker/CVE-2025-27837

(From OE-Core rev: fb5dc4a476bc4054493d6a7eb64a423e3665afb9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 06:38:21 -07:00
Antonin Godard
e9e862752d Fix dead links that use the DISTRO macro
After introducing the DISTRO_LATEST_TAG and DISTRO_REL_LATEST_TAG
macros, use them in links that currently use DISTRO/DISTRO_REL_TAG. When
building for the tip of a branch, this will replace the current A.B.999
in links to the latest existing tag.

The links were found across the documentation by running 'grep -r
"http.*5\.2\.999"' inside the _build/html output after building the
docs.

[YOCTO #14802]

(From yocto-docs rev: 0d51e553d5f83eea6634e03ddc9c7740bf72fcea)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 29be069ebbf2c55d72fc51d99ed5a558af37c05e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Antonin Godard
dc41858fe3 poky.yaml: introduce DISTRO_LATEST_TAG
Introduce the DISTRO_LATEST_TAG macro, which should always point to the
latest existing tag in the documentation, unlike DISTRO which may point
to A.B.999 to represent the tip of a branch.

This variable is needed to fix dead links in the documentation that
currently use the DISTRO macro.

Also, make DISTRO_REL_TAG use the DISTRO macro directly, to avoid
repetition, and add a DISTRO_REL_LATEST_TAG macro that has the same role
as DISTRO_LATEST_TAG but with "yocto-" prepended to it.

In set_versions.py, run the "git describe --abbrev=0 --tags
--match='yocto-*'" command to get the latest existing tag on the
currently checked out commit. Fallback to ourversion in case we didn't
find any.

(From yocto-docs rev: 9fabb08405601646fd9b00326442e03d43f68804)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a85b0e500c94921f77fa7b7dbb877e4945f96d1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Andrew Kreimer
8c784f9287 manuals: remove repeated word
The word "modern" appears twice, remove the extra one.

(From yocto-docs rev: db02bc7eb59feaece5d2a07b3586fd41c7a73a1e)

Signed-off-by: Andrew Kreimer <algonell@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Antonin Godard
c6b1489d98 ref-manual/variables.rst: document autotools class related variables
Document the AUTOTOOLS_SCRIPT_PATH and the CONFIGURE_SCRIPT variables.

(From yocto-docs rev: f7721ff5312b1ebf87dd374db22b254913879ff0)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
0807a80810 Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
This reverts commit 7adaec468d.

It does not seem to fix the issue it was supposed to fix.
Additionally it breaks code which decides in full/partial update,
because it manipulates timestamp that code is relying on.

(From OE-Core rev: 25ba9895b98715adb66a06e50f644aea2e2c9eb6)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ebc65fdddd7ce51f0f1008baa30d0ae7918ae0bb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Haitao Liu
7cb984d5ed systemd: systemd-journald fails to setup LogNamespace
A LogNamespace error for systemd v250:

"""
Apr 28 17:44:00 a-rinline2b systemd[467]:
systemd-journald@tester.service: Failed to set up special execution
directory in /var/log: Not a directory
Apr 28 17:44:00 a-rinline2b systemd[467]:
systemd-journald@tester.service: Failed at step LOGS_DIRECTORY spawning
/lib/systemd/systemd-journald: Not a directory
"""
That's because that "/var/log/journal" couldn't be created during
program runtime.

(From OE-Core rev: 8eb185024f9a9e57a9b710c70f09552729558892)

Signed-off-by: Haitao Liu <haitao.liu@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Chen Qi
9ace4f7ae5 systemd: backport patch to fix journal issue
Backport a patch to fix systemd journal issue about
sd_journal_next not behaving correctly after sd_journal_seek_tail.

(From OE-Core rev: ea59aed1ff7dbfb28d1e2cd55adca80dad2502e2)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Priyal Doshi
a4ed07274e tzdata/tzcode-native: upgrade 2025a -> 2025b
(From OE-Core rev: 2568f7ce707d63df1f98b3eeec6639d7a5a2d642)

Signed-off-by: Priyal Doshi <pdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Soumya Sambu
8208d973b9 python3-setuptools: Fix CVE-2024-6345
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1
allows for remote code execution via its download functions. These functions, which
are used to download packages from URLs provided by users or retrieved from package
index servers, are susceptible to code injection. If these functions are exposed to
user-controlled inputs, such as package URLs, they can execute arbitrary commands on
the system. The issue is fixed in version 70.0.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6345
https://ubuntu.com/security/CVE-2024-6345

Upstream patch:
88807c7062

(From OE-Core rev: 238c305ba2c513a070818de4b6ad4316b54050a7)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Deepesh Varatharajan
520ba611e6 binutils: Fix CVE-2025-1178
Prevent an abort in the bfd linker when attempting to
generate dynamic relocs for a corrupt input file.

PR 32638

Backport a patch from upstream to fix CVE-2025-1178
Upstream-Status: Backport from [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=75086e9de1707281172cc77f178e7949a4414ed0]

(From OE-Core rev: e820e5364c4b3ec52796a77842b480fea8bc7967)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
04861f8c29 glib-2.0: patch CVE-2025-3360
Backport commits from [1] fixing [2] for 2.82.x.

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4499
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3647x

(From OE-Core rev: 606cc539ab19ae2bceb366eda7d4872c3763400f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
4c33a6acfb libxml2: patch CVE-2025-32415
Pick commit from 2.13 branch as 2.9 branch is unmaintained now.

(From OE-Core rev: 7777cd6b28988a0981b990d9da9d448dcdfe7b8b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
2d34048266 libxml2: patch CVE-2025-32414
Pick commit from 2.12 branch as 2.9 branch is unmaintained now.

(From OE-Core rev: fbd708438aba0381a6c4f3d6cfbbd743f89a4f97)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
68f82bca13 libarchive: ignore CVE-2024-48615
Fix for this CVE [1] is patchong code introduced by [2] in v3.7.5.
So v3.6.2 is not affected yet and the CVE can be safely ignored.
Also Debian tracker [3] contains this statement.

[1] 565b5aea49
[2] 2d8a5760c5
[3] https://security-tracker.debian.org/tracker/CVE-2024-48615

(From OE-Core rev: 60390a3a28242efba32360426b0a3be6af5fb54b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
f6bbf5dc3a ghostscript: ignore CVE-2025-27833
Vulnerable code was introduced in 9.56.0, so 9.55.0 is not affected yet

Commit introducing vulnerable feature:
* https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/pdf/pdf_fmap.c?id=0a1d08d91a95746f41e8c1d578a4e4af81ee5949
Commit fixing the vulnerability:
* https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=477e36cfa1faa0037069a22eeeb4fc750733f120

(From OE-Core rev: e1f3d02e80f6bdd942321d9f6718dcc36afe9df8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
fd6b4fb511 ppp: patch CVE-2024-58250
Backport patch to remove vulnerable component.

This is a breaking change, but there will be no other fix for this CVE
as upstream did the deletion without providing a fix first.
If someone really needs this feature, which the commit message describes
as deprecated, bbappend with patch removal is possible.

License-Update: passprompt plugin removed

(From OE-Core rev: d04a2b5f4899845429e1c5893535f5df1221fcbf)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Shubham Kulkarni
6cc316c44d libpam: Update fix for CVE-2024-10041
Initially, PAM community fixed CVE-2024-10041 in the version v1.6.0 via commit b3020da.
But not all cases were covered with this fix and issues were reported after the release.
In the v1.6.1 release, PAM community fixed these issues via commit b7b9636.
Backport this commit b7b9636, which
Fixes: b3020da ("pam_unix/passverify: always run the helper to obtain shadow password file entries")

Backport from b7b9636208

(From OE-Core rev: 71035c8c5907f7103ce40b92490a10bd3dde7226)

Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Peter Marko
ade4d1829a sqlite3: patch CVE-2025-29088
Pick commit [1] mentioned in [2].

[1] 56d2fd008b
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-29088

(From OE-Core rev: 70d2d56f89d6f4589d65a0b4f0cbda20d2172167)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:12:41 -07:00
Divya Chellam
6eba29d946 ruby: fix CVE-2024-43398
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS
vulnerability when it parses an XML that has many deep elements that have
same local name attributes. If you need to parse untrusted XMLs with tree
parser API like REXML::Document.new, you may be impacted to this vulnerability.
If you use other parser APIs such as stream parser API and SAX2 parser API,
this vulnerability is not affected. The REXML gem 3.3.6 or later include the
patch to fix the vulnerability.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-43398

Upstream-patch:
7cb5eaeb22

(From OE-Core rev: f23d1bfca0ea57150c397bc2e495191fb61423d0)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-18 08:30:51 -07:00
Hitendra Prajapati
0a3231570d go: fix CVE-2025-22871
Upstream-Status: Backport from 15e01a2e43

(From OE-Core rev: 2a9f47eb507cf57b58c4aa1baf0ef645b699fd6c)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-18 08:30:51 -07:00
Peter Marko
408aeb7aae systemd: ignore CVEs which reappeared after upgrade to 250.14
Upgrade from 250.5 to 250.14 removed patches for these CVEs because they
were interated in the new version.
However NVD DB does not contain information about these backports to
v250 branch, so they need to be ignored.

(From OE-Core rev: b86129da823c55a3e08ee72c99675301948949f8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-18 08:30:51 -07:00
Peter Marko
68c330657e cve-update-nvd2-native: add workaround for json5 style list
NVD responses changed to an invalid json between:
* April 5, 2025 at 3:03:44 AM GMT+2
* April 5, 2025 at 4:19:48 AM GMT+2

The last response is since then in format
{
  "resultsPerPage": 625,
  "startIndex": 288000,
  "totalResults": 288625,
  "format": "NVD_CVE",
  "version": "2.0",
  "timestamp": "2025-04-07T07:17:17.534",
  "vulnerabilities": [
    {...},
    ...
    {...},
  ]
}

Json does not allow trailing , in responses, that is json5 format.
So cve-update-nvd2-native do_Fetch task fails with log backtrace ending:

...
File: '/builds/ccp/meta-siemens/projects/ccp/../../poky/meta/recipes-core/meta/cve-update-nvd2-native.bb', lineno: 234, function: update_db_file
     0230:            if raw_data is None:
     0231:                # We haven't managed to download data
     0232:                return False
     0233:
 *** 0234:            data = json.loads(raw_data)
     0235:
     0236:            index = data["startIndex"]
     0237:            total = data["totalResults"]
     0238:            per_page = data["resultsPerPage"]
...
File: '/usr/lib/python3.11/json/decoder.py', lineno: 355, function: raw_decode
     0351:        """
     0352:        try:
     0353:            obj, end = self.scan_once(s, idx)
     0354:        except StopIteration as err:
 *** 0355:            raise JSONDecodeError("Expecting value", s, err.value) from None
     0356:        return obj, end
Exception: json.decoder.JSONDecodeError: Expecting value: line 1 column 1442633 (char 1442632)
...

There was no announcement about json format of API v2.0 by nvd.
Also this happens only if whole database is queried (database update is
fine, even when multiple pages as queried).
And lastly it's only the cve list, all other lists inside are fine.
So this looks like a bug in NVD 2.0 introduced with some update.

Patch this with simple character deletion for now and let's monitor the
situation and possibly switch to json5 in the future.
Note that there is no native json5 support in python, we'd have to use
one of external libraries for it.

(From OE-Core rev: cee817c0c3653cc96833815bfe2c87d2d85cc19e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6e526327f5c9e739ac7981e4a43a4ce53a908945)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-18 08:30:51 -07:00
Vijay Anusuri
378cd5368d ghostscript: Fix CVE-2025-27836
Upstream-Status: Backport
[https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=8b6d19b2b4079da6863ef25f2370f25d4b054919
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=d84efb73723384a8b7fb3989c824cfa218060085]

(From OE-Core rev: 7399cf17590204f8289f356cce4575592d6e3536)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Vijay Anusuri
21f4513cd1 ghostscript: Fix CVE-2025-27835
Upstream-Status: Backport
[https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=de900010a6f2310d1fd54e99eeba466693da0e13]

(From OE-Core rev: c30c46c2b4048dd58cf91b1523ddeca6075176ec)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Vijay Anusuri
ee952ae624 ghostscript: Fix CVE-2025-27834
Upstream-Status: Backport
[https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=ef42ff180a04926e187d40faea40d4a43e304e3b]

(From OE-Core rev: 06fb236cabf550ea7c92cda0a725dd3db8a8a38b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Vijay Anusuri
bfe8ae1a38 ghostscript: Fix CVE-2025-27832
Upstream-Status: Backport [https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=57291c846334f1585552010faa42d7cb2cbd5c41]

(From OE-Core rev: a1cd1e6275cc5ae3c100a3259e24d03937a4b78d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Vijay Anusuri
09870c8cce ghostscript: Fix CVE-2025-27831
Upstream-Status: Backport
[https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=bf79b61cb1677d6865c45d397435848a21e8a647
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=bf79b61cb1677d6865c45d397435848a21e8a647]

(From OE-Core rev: 810795d2f1d7798c52675efd94917bf99fb940d0)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Vijay Anusuri
d80ece64ab ghostscript: Fix CVE-2025-27830
Upstream-Status: Backport
[https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=8474e1d6b896e35741d3c608ea5c21deeec1078f]

(From OE-Core rev: bc74ad209b243b131ea5467b871339f1773ba64b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:03 -07:00
Peter Marko
57c7ce9193 ofono: patch CVE-2024-7537
Pick commit
https://web.git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=e6d8d526d5077c0b6ab459efeb6b882c28e0fdeb

(From OE-Core rev: 7f3a567b8e1446863e6c5c4336b4cb174592f799)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:02 -07:00
Yogita Urade
b5b884bc1a curl: ignore CVE-2025-0725
CVE-2025-0725 can only trigger for curl when using a runtime
zlib version 1.2.0.3 or older and kirkstone supports
zlib 1.2.11 version, hence ignore cve for kirkstone.

Reference:
https://curl.se/docs/CVE-2025-0725.html
https://git.openembedded.org/openembedded-core/commit/?h=scarthgap&id=8c3b4a604b40260e7ca9575715dd8017e17d35c0

(From OE-Core rev: 9077246122b1284e8b6430384cccaf6f0b6c80c3)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-11 08:36:02 -07:00
Steve Sakoman
d70d287a77 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 1efbe1004bc82e7c14c1e8bd4ce644f5015c3346)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:47:08 -07:00
Steve Sakoman
91484dd593 poky.conf: bump version for 4.0.26
(From meta-yocto rev: 3dd438c749099f2a5e808c4690d7ea767263e5b5)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:48 -07:00
Guocai He
a406bd6d53 mesa: Update SRC_URI
Update SRC_URI for mesa.
The the tarball of mesa has been changed
from:
https://mesa.freedesktop.org/archive/
to:
https://archive.mesa3d.org/

(From OE-Core rev: 6397cd1ad55927c312051cbd42d5825fa8ed969b)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:48 -07:00
Michael Halstead
c22220055b yocto-uninative: Update to 4.7 for glibc 2.41
(From OE-Core rev: eb89509bfb976cfb62369b05f55534615afaf886)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:48 -07:00
Deepesh Varatharajan
c5f4a2b228 llvm : Fix CVE-2024-0151
Backport a patch from upstream to fix CVE-2024-0151
Upstream-Status: Backport [78ff617d3f]

(From OE-Core rev: 883754a84accdc8f8418e83d3c54aa763bcdff87)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:48 -07:00
Peter Marko
47efe3545e freetype: patch CVE-2025-27363
From [1]:
An out of bounds write exists in FreeType versions 2.13.0 and below
(newer versions of FreeType are not vulnerable) when attempting to
parse font subglyph structures related to TrueType GX and variable font
files. The vulnerable code assigns a signed short value to an unsigned
long and then adds a static value causing it to wrap around and
allocate too small of a heap buffer. The code then writes up to 6
signed long integers out of bounds relative to this buffer. This may
result in arbitrary code execution. This vulnerability may have been
exploited in the wild.

Per [2] patches [3] and [4] are needed.
Unfortunately, the code changed since 2.11.1 and it's not possible to do
backport without significant changes. Since Debian and Ubuntu have
already patched this CVE, take the patch from them - [5]/[6].
The patch is a combination of patch originally proposed in [7] and
follow-up patch [4].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-27363
[2] https://gitlab.freedesktop.org/freetype/freetype/-/issues/1322
[3] ef63669652
[4] 73720c7c99
[5] https://git.launchpad.net/ubuntu/+source/freetype/commit/?h=applied/ubuntu/jammy-devel&id=fc406fb02653852dfa5979672e3d8d56ed329186
[6] 13295227b5
[7] https://www.openwall.com/lists/oss-security/2025/03/14/3

(From OE-Core rev: 5a8d4c7a9a0e099da0294141cf5590b55f0503cd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:48 -07:00
Peter Marko
d7e6e73ba1 perl: ignore CVE-2023-47038
Fix for this CVE was backported to 5.34.2 in
12c313ce49

This commit is listed in
https://security-tracker.debian.org/tracker/CVE-2023-47038

(From OE-Core rev: 46fd9acd6b0e418009f4cec747ae82af60acbc6b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:47 -07:00
Peter Marko
717a181fd2 libarchive: ignore CVE-2025-1632
As already mentioned in [1] when backporting commit including fix for
this CVE, this vulnerability applies only from libarchive 3.7.0 commit
[2] which introduced bsdunzip which contains this vulnerability.

[1] https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=ec837d3b21b4f8b98abac53e2833f1490ba6bf1e
[2] c157e4ce8e

(From OE-Core rev: bf7654877ba99f0b18a1cf6f83032af5ecabd01f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:47 -07:00
Divya Chellam
68c9f9f449 zlib: fix CVE-2014-9485
Directory traversal vulnerability in the do_extract_currentfile
function in miniunz.c in miniunzip in minizip before 1.1-5 might
allow remote attackers to write to arbitrary files via a crafted
entry in a ZIP archive.

Reference:
https://security-tracker.debian.org/tracker/CVE-2014-9485

Upstream-patch:
14a5f8f266

(From OE-Core rev: 32c4b28fc06e39ab8ef86aebc5e1e1ae19934495)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-04 08:42:47 -07:00
Peter Marko
ccd6eee7fc cve-update-nvd2-native: handle missing vulnStatus
There is a new CVE which is missing vulnStatus field:
https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-2682

This leads to:
File: '<snip>/poky/meta/recipes-core/meta/cve-update-nvd2-native.bb', lineno: 336, function: update_db
     0332:
     0333:    accessVector = None
     0334:    vectorString = None
     0335:    cveId = elt['cve']['id']
 *** 0336:    if elt['cve']['vulnStatus'] ==  "Rejected":
     0337:        c = conn.cursor()
     0338:        c.execute("delete from PRODUCTS where ID = ?;", [cveId])
     0339:        c.execute("delete from NVD where ID = ?;", [cveId])
     0340:        c.close()
Exception: KeyError: 'vulnStatus'

(From OE-Core rev: 453c5c8d9031be2b3a25e2a04e0f5f6325ef7298)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:02:41 -07:00
Bruce Ashfield
0e7a9c67b9 linux-yocto/5.10: update to v5.10.234
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:

    0ef80b084295 Revert "x86/mm: Randomize per-cpu entry area"
    bcd2efd15975 mt76: mt7915: fix txrate reporting
    e1e411e59308 x86/mm: Randomize per-cpu entry area
    ba824e697315 mm: fix mmap kernel hang
    f0a53361993a Linux 5.10.234
    c762b76981fc Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals
    664760c49d98 xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals
    1f66a3a1a516 drm/v3d: Assign job pointer to NULL before signaling the fence
    d2b550208155 Input: xpad - add support for wooting two he (arm)
    098b8808e2e6 Input: xpad - add unofficial Xbox 360 wireless receiver clone
    5e9fed31adc8 Input: atkbd - map F23 key to support default copilot shortcut
    99c866bea85e Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
    94770cf7c512 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
    354aef2ec80a wifi: iwlwifi: add a few rate index validity checks
    31bd7378c6fe ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
    d072ea247481 Bluetooth: RFCOMM: Fix not validating setsockopt user input
    d19a8650fd3d vfio/platform: check the bounds of read/write syscalls
    553df82a8c73 signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die
    f70103a4355c m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
    03c56665dab1 net: sched: fix ets qdisc OOB Indexing
    8c41abc11aa8 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
    09f698656628 ASoC: samsung: Add missing depends on I2C
    20019b1f0040 irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
    3ff6ce057622 scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
    d5bd48f16d4a seccomp: Stub for !CONFIG_SECCOMP
    c269af144a79 ASoC: samsung: Add missing selects for MFD_WM8994
    771f8a8a6995 ASoC: wm8994: Add depends on MFD core
    fe2c0bd6d1e2 net: fix data-races around sk->sk_forward_alloc
    285ce1f89f8d scsi: sg: Fix slab-use-after-free read in sg_release()
    7ffaf1a16f65 x86/xen: fix SLS mitigation in xen_hypercall_iret()
    daeac89cdb03 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
    18a7fc371d1d vsock/virtio: discard packets if the transport changes
    a925a200299a fou: remove warn in gue_gro_receive on unsupported protocol
    f9f76ff74dae nfsd: add list_head nf_gc to struct nfsd_file
    8a8b83016f06 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
    83f5a87ee8ca blk-cgroup: Fix UAF in blkcg_unpin_online()
    605889754ee6 RDMA/hns: Fix deadlock on SRQ async events.
    461091c27f55 vmalloc: fix accounting with i915
    e8d3c53c6f1c drm/radeon: check bo_va->bo is non-NULL before using it
    85a9c98a5e0f iio: adc: rockchip_saradc: fix information leak in triggered buffer
    031538ff9c32 iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
    641b4041cb4e iio: imu: inv_icm42600: fix spi burst write not supported
    da55e7622580 Revert "PCI: Use preserve_config in place of pci_flags"
    14984139f1f2 hrtimers: Handle CPU state correctly on hotplug
    d1099ad23596 irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
    2dfbb920a89b gpiolib: cdev: Fix use after free in lineinfo_changed_notify
    80da29deb88a fs/proc: fix softlockup in __read_vmcore (part 2)
    ae527bd2b537 vsock: reset socket state when de-assigning the transport
    3cde51df39c3 vsock/virtio: cancel close work in the destructor
    f9710a5cbd99 net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
    17dcfc0f54b7 x86/asm: Make serialize() always_inline
    a722df501ba3 nvmet: propagate npwg topology
    3f8b360ce0e0 poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
    99db426762e1 kheaders: Ignore silly-rename files
    95597be4806d fs: fix missing declaration of init_files
    2cf7601e1295 hfs: Sanity check the root record
    98ea165a2ac2 mac802154: check local interfaces before deleting sdata list
    3eb329978997 i2c: rcar: fix NACK handling when being a target
    8d037f34385a i2c: mux: demux-pinctrl: check initial mux selection, too
    a34050f70e79 drm/v3d: Ensure job pointer is set to NULL after job completion
    72dc13457e67 net/mlx5: Fix RDMA TX steering prio
    47166d31e531 net/mlx5: Refactor mlx5_get_flow_namespace
    9f07d9fd6181 net/mlx5: Add priorities for counters in RDMA namespaces
    faf64fe8915d nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
    5f1678346109 gtp: Destroy device along with udp socket's netns dismantle.
    66f1864cd0b1 gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
    320a0dea3b28 gtp: use exit_batch_rtnl() method
    fae8bd0b07f9 net: add exit_batch_rtnl() method
    37fdbeb0e293 net: net_namespace: Optimize the code
    bb36838dac7b bpf: Fix bpf_sk_select_reuseport() memory leak
    9f7ad4eb839d net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
    a13d640d8c8e phy: usb: Fix clock imbalance for suspend/resume
    3bc29a491192 phy: usb: Use slow clock for wake enabled suspend
    246428bfb9e7 sctp: sysctl: rto_min/max: avoid using current->nsproxy
    acec80d9f126 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
    49881fcef3d4 drm: bridge: adv7511: use dev_err_probe in probe function
    3747465c5da7 drm: bridge: adv7511: unregister cec i2c device after cec adapter
    09a817549036 drm/bridge: adv7533: Switch to devm MIPI-DSI helpers
    2c0106fdd35c drm/mipi-dsi: Create devm device attachment
    5ad24956a20e drm/mipi-dsi: Create devm device registration
    cb3a64b6b449 drm: bridge: adv7511: Remove redundant null check before clk_disable_unprepare
    8ff6f635a08c ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
    af45819b29bf ocfs2: correct return value of ocfs2_local_free_info()
    a8d08d9f5e12 phy: usb: Toggle the PHY power during init
    5917962b5196 phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers
    5330de58f70d block: remove the update_bdev parameter to set_capacity_revalidate_and_notify
    afa920d411e9 sd: update the bdev size in sd_revalidate_disk
    72224a75c5f6 nvme: let set_capacity_revalidate_and_notify update the bdev size
    dddf71505857 loop: let set_capacity_revalidate_and_notify update the bdev size
    5601c261bbc5 arm64: dts: rockchip: add hevc power domain clock to rk3328
    00360f3f3962 arm64: dts: rockchip: add #power-domain-cells to power domain nodes
    3528099673ba iio: inkern: call iio_device_put() only on mapped devices
    ac8d932e3214 iio: adc: at91: call input_free_device() on allocated iio_dev
    1b7b9084fad8 iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    2d72fc4a1ca6 iio: gyro: fxas21002c: Fix missing data update in trigger handler
    3bf8d1e87939 iio: adc: ti-ads8688: fix information leak in triggered buffer
    a386d9d2dc66 iio: imu: kmx61: fix information leak in triggered buffer
    b0e9c11c762e iio: light: vcnl4035: fix information leak in triggered buffer
    e1c1e8c05010 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
    d25f1fc27367 iio: pressure: zpa2326: fix information leak in triggered buffer
    3e4d32cc1459 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
    209b72d3c4e1 usb: fix reference leak in usb_new_device()
    d9f78c900648 USB: core: Disable LPM only for non-suspended ports
    ee63cb2262e3 USB: usblp: return error when setting unsupported protocol
    1062b648bff6 usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
    4c51407cb8a4 usb: dwc3: gadget: fix writing NYET threshold
    258b3530cfdf USB: serial: cp210x: add Phoenix Contact UPS Device
    09d4072aabee usb-storage: Add max sectors quirk for Nokia 208
    717b7360ccc1 staging: iio: ad9832: Correct phase range check
    38da4bab433c staging: iio: ad9834: Correct phase range check
    e764b4e18789 USB: serial: option: add Neoway N723-EA support
    dad372177818 USB: serial: option: add MeiG Smart SRM815
    66de7a2541d8 md/raid5: fix atomicity violation in raid5_cache_count
    08765d4e44d4 scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
    88136f799f33 drm/amd/display: increase MAX_SURFACES to the value supported by hw
    2f8067b3425c ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
    522ddfb1fb62 ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
    8c38baa03ac8 riscv: Fix sleeping in invalid context in die()
    497471baf53b drm/amd/display: Add check for granularity in dml ceil/floor helpers
    dc583e7e5f85 sctp: sysctl: auth_enable: avoid using current->nsproxy
    03ca51faba2b sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
    2c1a42fbd98e dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
    cd30a3960433 dm thin: make get_first_thin use rcu-safe list first function
    9340385468d0 afs: Fix the maximum cell name length
    a965f7f0ea3a netfilter: conntrack: clamp maximum hashtable size to INT_MAX
    208929266386 netfilter: nf_tables: imbalance in flowtable binding
    72e6ca38ca66 tls: Fix tls_sw_sendmsg error handling
    53b7a6762483 cxgb4: Avoid removal of uninserted tid
    43658e4a5f27 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
    22e3f5ee7317 tcp/dccp: allow a connection when sk_max_ack_backlog is zero
    9261b8252473 tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
    c9c0471e29f0 net: 802: LLC+SNAP OID:PID lookup on start of skb data
    c2da454712f2 ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
    4a6167ae75ad netfilter: nft_dynset: honor stateful expressions in set definition
    01c4e22c260d ASoC: mediatek: disable buffer pre-allocation
    d8cfbb8723bd exfat: fix the infinite loop in exfat_readdir()
    5c10baed458e dm array: fix cursor index when skipping across block boundaries
    cb223d9606a3 dm array: fix unreleased btree blocks on closing a faulty array cursor
    fc1ef07c3522 dm array: fix releasing a faulty array block twice in dm_array_cursor_end
    359abf6ca962 jbd2: flush filesystem device before updating tail sequence
    0f2b2d9e881c ceph: give up on paths longer than PATH_MAX
    70a41e4b4d83 smb: client: fix potential OOB in smb2_dump_detail()
    e1109eace22a scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
    14c02f4e6920 Linux 5.10.233
    d675fefbaec3 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
    17c3f7988f32 drm: adv7511: Drop dsi single lane support
    081bdb3a3167 net/sctp: Prevent autoclose integer overflow in sctp_association_init()
    5a1dd20a9d86 sky2: Add device ID 11ab:4373 for Marvell 88E8075
    c55d186376a8 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
    42a6eb4ed7a9 RDMA/uverbs: Prevent integer overflow issue
    50804bd95f00 modpost: fix the missed iteration for the max bit in do_input()
    0cd78baf4dd2 modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
    d5a30a6117ea btrfs: don't set lock_owner when locking extent buffer for reading
    51b03b7473a0 btrfs: locking: remove the recursion handling code
    20d96aa61607 ARC: build: Try to guess GCC variant of cross compiler
    58713417015b irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
    af37dc1f017b net: usb: qmi_wwan: add Telit FE910C04 compositions
    e529b4686038 bpf: fix potential error return
    6f3ce0ee5c3c sound: usb: format: don't warn that raw DSD is unsupported
    a2718ed1eb8c btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
    12a6e304325d wifi: mac80211: wake the queues in case of failure in resume
    2558d753df06 tracing: Prevent bad count for tracing_cpumask_write
    1bf53a2145fa kernel: Initialize cpumask before parsing
    ba5120a2fb5f btrfs: fix use-after-free when COWing tree bock and tracing is enabled
    bf267f2f81bc btrfs: rename and export __btrfs_cow_block()
    1817e3e849f6 btrfs: locking: remove all the blocking helpers
    4da6be8eb618 btrfs: switch extent buffer tree lock to rw_semaphore
    42d7147c9c21 dmaengine: dw: Select only supported masters for ACPI devices
    d3017895e393 ila: serialize calls to nf_register_net_hooks()
    0d3fa6c3c9ca af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
    fa57f07ba062 af_packet: fix vlan_get_tci() vs MSG_PEEK
    7eaa71f56a6f RDMA/rtrs: Ensure 'ib_sge list' is accessible
    925f2be402f9 eth: bcmsysport: fix call balance of priv->clk handling routines
    9c76fb573889 ALSA: usb-audio: US16x08: Initialize array before use
    0f67a980f2ae net: llc: reset skb->transport_header
    6a14b46052ee netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
    cf6befa7c569 netrom: check buffer length before accessing it
    60e64b6261d1 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    bbcbb83a7f1f RDMA/bnxt_re: Fix the locking while accessing the QP table
    070d214c0183 RDMA/bnxt_re: Fix max_qp_wrs reported
    cff07807f693 RDMA/bnxt_re: Fix reporting hw_ver in query_device
    5684c11d3aec RDMA/bnxt_re: Add check for path mtu in modify_qp
    aea89a85bc74 RDMA/mlx5: Enforce same type port association for multiport RoCE
    af3626302040 net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
    6531f9c7e518 thunderbolt: Add support for Intel Panther Lake-M/P
    f8b8c8c83528 thunderbolt: Add support for Intel Lunar Lake
    e7cca35083b8 thunderbolt: Add Intel Barlow Ridge PCI ID
    a534e5d47e4f thunderbolt: Add support for Intel Meteor Lake
    aeb4a70248f5 thunderbolt: Add support for Intel Raptor Lake
    21347105ded3 thunderbolt: Add support for Intel Alder Lake
    712137b177b4 selinux: ignore unknown extended permissions
    36c569dfa724 x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    c47e02201171 ipv6: prevent possible UAF in ip6_xmit()
    3cb8e49178e1 skb_expand_head() adjust skb->truesize incorrectly
    f67138dd338c nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
    a1c3a19446a4 btrfs: avoid monopolizing a core when activating a swap file
    b29c7783ac1f power: supply: gpio-charger: Fix set charge current limits
    5c4a141ff09e tracing: Constify string literal data member in struct trace_event_call
    e3b89e6a6422 arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
    de29cb3bdfb2 arm64: mm: Rename asid2idx() to ctxid2asid()
    109f91d8b933 drm/dp_mst: Fix MST sideband message body length check
    221109ba2127 bpf: fix recursive lock when verdict program return SK_PASS
    79f87a6ec39f bpf: Check validity of link->type in bpf_link_show_fdinfo()
    1504108cb602 ipv6: fix possible UAF in ip6_finish_output2()
    ee6b1db17f82 ipv6: use skb_expand_head in ip6_xmit
    4132c4ad00dd ipv6: use skb_expand_head in ip6_finish_output2
    23f95bbe7250 skbuff: introduce skb_expand_head()
    3754c15b9348 MIPS: Probe toolchain support of -msym32
    9ca428c6397a virtio-blk: don't keep queue frozen during system suspend
    bbb55d1cb0b0 scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
    f37f301d84ea scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
    3cc9e1a56692 platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    c06a5b7f12a4 regmap: Use correct format specifier for logging range errors
    1c58d374ca44 ALSA: hda/conexant: fix Z60MR100 startup pop issue
    f36d024bd15e scsi: megaraid_sas: Fix for a potential deadlock
    c1d93e7100e5 scsi: qla1280: Fix hw revision numbering for ISP1020/1040
    7911ca06b674 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
    7fca949e30c3 tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
    1562871ef613 mtd: rawnand: fix double free in atmel_pmecc_create_user()
    ed1a8aaa3445 dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
    e87dbcfdf1c0 dmaengine: mv_xor: fix child node refcount handling in early exit
    619a5aeb0f0d phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
    8826abb0ae2d phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
    574e5cfae2d8 phy: core: Fix that API devm_phy_put() fails to release the phy
    9e21f671b9a9 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
    722ece95fcce phy: core: Fix an OF node refcount leakage in _of_phy_get()
    36a6523d097d mtd: diskonchip: Cast an operand to prevent potential overflow
    9ad478986fd1 nfsd: restore callback functionality for NFSv4.0
    d814eeb7faa4 bpf: Check negative offsets in __bpf_skb_min_len()
    1b63193b150c tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
    4e5aab3e4115 mm/vmstat: fix a W=1 clang compiler warning
    e11778189513 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
    4e2e9adaea7d epoll: Add synchronous wakeup support for ep_poll_callback
    6e1e991c4017 ceph: validate snapdirname option length when mounting
    b7f89856c5fc of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
    c86a40c26857 of: Fix error path in of_parse_phandle_with_args_map()
    9416f17809a1 udmabuf: also check for F_SEAL_FUTURE_WRITE
    5d4ed71327b0 nilfs2: prevent use of deleted inode
    8d42147c83ee of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
    64ee07cfd50f NFS/pnfs: Fix a live lock between recalled layouts and layoutget
    d81f4e73aff9 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
    8b53be082fc6 btrfs: tree-checker: reject inline extent items with 0 ref count
    98f31cf96f47 zram: refuse to use zero sized block device as backing device
    df56b6f9b430 sh: clk: Fix clk_enable() to return 0 on NULL clk
    6742afdf6171 hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
    525c3d0595b0 USB: serial: option: add Telit FE910C04 rmnet compositions
    b38b9456621d USB: serial: option: add MediaTek T7XX compositions
    25a5f80417b2 USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    452c1654c3cd USB: serial: option: add MeiG Smart SLM770A
    daf09316ddc2 USB: serial: option: add TCL IK512 MBIM & ECM
    0e8098cc2538 efivarfs: Fix error on non-existent file
    de4359fa4f81 i2c: riic: Always round-up when calculating bus period
    8eb181aee760 chelsio/chtls: prevent potential integer overflow on 32bit
    ddfb709c2895 mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
    ad26612c2af9 netfilter: ipset: Fix for recursive locking warning
    a24ce83a2de1 net: ethernet: bgmac-platform: fix an OF node reference leak
    1942218bf95f net: hinic: Fix cleanup in create_rxqs/txqs()
    64f3f7388b90 ionic: use ee->offset when returning sprom data
    81bdfcd6e6a9 netdevsim: prevent bad user input in nsim_dev_health_break_write()
    2fb425f27ee6 netdevsim: switch to memdup_user_nul()
    82c7ad9ca099 net/smc: check return value of sock_recvmsg when draining clc data
    846bada23bfc net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
    e18830b7c498 net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
    7678451d66b8 erofs: fix incorrect symlink detection in fast symlink
    0ab621fcdff1 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
    0f851f8c62d0 i2c: pnx: Fix timeout in wait functions
    e430962901c7 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
    4ba1ee910938 usb: cdns3: Add quirk flag to enable suspend residency
    9339c91863de PCI: Add ACS quirk for Broadcom BCM5760X NIC
    dab416edff9d ALSA: usb: Fix UBSAN warning in parse_audio_unit()
    f9869f6772e3 MIPS: Loongson64: DTS: Fix msi node for ls7a
    0dde3ae52a0d PCI: Use preserve_config in place of pci_flags
    6c7731ad179a PCI/AER: Disable AER service on suspend
    5e473f462a16 net: sched: fix ordering of qlen adjustment
    aaccf3924c7a scsi: dpt_i2o: Remove obsolete driver
    0c8ac16c1e2f usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
    bfdadc630e33 firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
    abc9475430fd Linux 5.10.232
    20ad30bed789 x86/static-call: fix 32-bit build
    e7c1fcdda47b ALSA: usb-audio: Fix a DMA to stack memory bug
    b751972c26f6 x86/xen: remove hypercall page
    b09001da8227 x86/xen: use new hypercall functions instead of hypercall page
    76b42b1340ca x86/xen: add central hypercall functions
    05df6e6cd9a7 x86/xen: don't do PV iret hypercall through hypercall page
    bed5b6a6f207 x86/static-call: provide a way to do very early static-call updates
    4099bcd87390 objtool/x86: allow syscall instruction
    e74011db5179 x86: make get_cpu_vendor() accessible from Xen code
    1d5354a9182b xen/netfront: fix crash when removing device
    dac3f7ba392c Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP"
    8b7e0d915689 Revert "clocksource/drivers:sp804: Make user selectable"
    7f4e1fee0a74 drm/i915: Fix memory leak by correcting cache object name in error handler
    47b341f714e6 tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
    dadf82c1b260 bpf: sync_linked_regs() must preserve subreg_def
    6fd69b2f2991 blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
    32a849c676ea ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
    45af429f76e7 team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    a1a97584334c bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    49cb8083c8df net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE
    216509dda290 net/sched: netem: account for backlog updates from child qdisc
    0fd8c3179b08 qca_spi: Make driver probing reliable
    ab891aeb28d1 qca_spi: Fix clock speed for multiple QCA7000
    68e6a5f0cdd8 cxgb4: use port number to set mac addr
    cf604286b70d ACPI: resource: Fix memory resource type union access
    76d856f03d02 net: lapb: increase LAPB_HEADER_LEN
    4d2b56e2fb1e selftests: mlxsw: sharedbuffer: Remove duplicate test cases
    938742593a57 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
    a771f349c95d tipc: fix NULL deref in cleanup_bearer()
    784fc6707949 batman-adv: Do not let TT changes list grows indefinitely
    48e63887c01f batman-adv: Remove uninitialized data in full table TT response
    4fb09749f266 batman-adv: Do not send uninitialized TT changes
    616aa5f3c86e acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
    632fb232b6bb exfat: fix potential deadlock on __exfat_get_dentry_set
    e26fa236758e virtio/vsock: Fix accept_queue memory leak
    7b2e41b2d251 bpf, sockmap: Fix update element with same
    7ba7e748bd71 xfs: fix scrub tracepoints when inode-rooted btrees are involved
    4e33aedc3026 xfs: don't drop errno values when we fail to ficlone the entire range
    28b3c03a6790 usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
    922142bcff97 usb: ehci-hcd: fix call balance of clocks handling routines
    0f6184603ba8 usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
    1e05b5b36aea ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
    ff6f8a29e2a7 usb: host: max3421-hcd: Correctly abort a USB request.
    bd92492a960c tcp: check space before adding MPTCP SYN options
    df8d35efada4 Linux 5.10.231
    af442dd3e3fc octeontx2-pf: Fix otx2_get_fecparam()
    ddeef5079c6b octeontx2: Fix condition.
    bde4e7c15271 media: uvcvideo: Require entities to have a non-zero unique ID
    45a92cbc88e4 ALSA: usb-audio: Fix out of bounds reads when finding clock sources
    3fc53e46fdc8 scsi: core: Fix scsi_mode_select() buffer length handling
    a0777b45095f scsi: sd: Fix sd_do_mode_sense() buffer length handling
    38283b035c9d PCI: rockchip-ep: Fix address translation unit programming
    43c48ad24c03 Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
    f5e45e9464c7 modpost: Add .irqentry.text to OTHER_SECTIONS
    969ee61aa117 ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
    4fcd903a5d9e drm/amd/display: Check BIOS images before it is used
    7d5f99db8b15 xhci: dbc: Fix STALL transfer event handling
    99f0fe6d0191 jffs2: Fix rtime decompressor
    f6fc251baefc jffs2: Prevent rtime decompress memory corruption
    dbedf8ddde53 KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    c329033f1b72 KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    f4dbf393bfb4 KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    c3cded0ff622 Revert "unicode: Don't special case ignorable code points"
    7522e61c5350 btrfs: fix missing snapshot drew unlock when root is dead during swap activation
    354f24382480 sched/core: Prevent wakeup of ksoftirqd during idle load balance
    a676dbc8af8c sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
    4aaaf22aa193 sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
    f8d61ae46cf4 sched/fair: Trigger the update of blocked load on newly idle cpu
    0669c671ab36 sched/fair: Merge for each idle cpu loop of ILB
    88136224a8f1 sched/fair: Remove unused parameter of update_nohz_stats
    1940ddbeb9af sched/fair: Remove update of blocked load from newidle_balance
    f3794dbff0ed sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
    44624fbc019f misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
    a79a7e3c03ae powerpc/prom_init: Fixup missing powermac #size-cells
    5a2eaa3ad2b8 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
    19bc36c8d4ec usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    5ac1dd51aaa0 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
    e5f0e94f95b8 PCI: Add ACS quirk for Wangxun FF5xxx NICs
    1af3a54dcea4 PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    dff561e4060d f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
    22169b367563 nvdimm: rectify the illogical code within nd_dax_probe()
    38953b4419d1 pinctrl: qcom-pmic-gpio: add support for PM8937
    5d552000fe9f scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
    910f9d22095d scsi: st: Don't modify unknown block number in MTIOCGET
    ddcfc5708da9 leds: class: Protect brightness_show() with led_cdev->led_access mutex
    3dd2c5cb2c69 scsi: hisi_sas: Add cond_resched() for no forced preemption model
    dd72b3ac2fc0 tracing: Use atomic64_inc_return() in trace_clock_counter()
    170b0323b032 pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
    18347e7e0404 netpoll: Use rcu_access_pointer() in __netpoll_setup
    78b13b562206 net/neighbor: clear error in case strict check is not set
    f795bdf9dbe2 rocker: fix link status detection in rocker_carrier_init()
    042da326b0a3 ASoC: hdmi-codec: reorder channel allocation list
    e07b54b67e9c Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
    7522d7d745d1 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
    856b24b5d92c wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    13c3a54f48a6 drm/amdgpu: set the right AMDGPU sg segment limitation
    03c4c3e02cf9 drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    368a53315222 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
    97e693593162 jfs: fix array-index-out-of-bounds in jfs_readdir
    df7c76636952 jfs: fix shift-out-of-bounds in dbSplit
    8c97a4d5463a jfs: array-index-out-of-bounds fix in dtReadFirst
    3ccce34a5c3f dma-debug: fix a possible deadlock on radix_lock
    064149161c37 drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    d28d22728b85 wifi: ath5k: add PCI ID for Arcadyan devices
    9400aeb5cd02 wifi: ath5k: add PCI ID for SX76X
    35360255ca30 net: inet6: do not leave a dangling sk pointer in inet6_create()
    2bc34d8c8898 net: inet: do not leave a dangling sk pointer in inet_create()
    14959fd7538b net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
    ce39b5576785 net: af_can: do not leave a dangling sk pointer in can_create()
    daa13175a6de Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
    1dc1e1db9270 af_packet: avoid erroring out after sock_init_data() in packet_create()
    50a90e5af499 net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
    a75fe481c42c net: ethernet: fs_enet: Use %pa to format resource_size_t
    fbc8d9665322 net: fec_mpc52xx_phy: Use %pa to format resource_size_t
    00c9f6e82591 samples/bpf: Fix a resource leak
    86b66b8091c9 r8169: don't apply UDP padding quirk on RTL8126A
    823f4dff6cbd drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
    418cf1b2c399 drm/mcde: Enable module autoloading
    a3c885165d7c drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    c04d1dc54b11 drm/vc4: hvs: Set AXI panic modes for the HVS
    c5623d7f9f90 media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
    7850ca9a6695 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
    f4f2ef66d288 kcsan: Turn report_filterlist_lock into a raw_spinlock
    34cd4ec08b89 kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
    8f855689c164 btrfs: avoid unnecessary device path update for the same device
    99192c735ed4 s390/cpum_sf: Handle CPU hotplug remove during sampling
    c2527d07c7e9 iommu/arm-smmu: Defer probe of clients after smmu device bound
    24328b776fb2 ocfs2: update seq_file index in ocfs2_dlm_seq_next
    d3aeb50fcb12 mmc: core: Further prevent card detect during shutdown
    af940c0d623d mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
    287e4952d77b regmap: detach regmap from dev on regmap_exit
    7175728f6b2d dma-buf: fix dma_fence_array_signaled v4
    70f3de869865 bpf: fix OOB devmap writes when deleting elements
    336e30f32ae7 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
    e3732102a9d6 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
    df43d8da6bac scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
    12f04fc8580e scsi: qla2xxx: Fix use after free on unload
    c87add0d819b scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    406e57325daa scsi: qla2xxx: Fix NVMe and NPIV connect issue
    d7fd14dd866f ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
    a59d39e4770f ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
    b3ebf8cbd886 ALSA: usb-audio: add mixer mapping for Corsair HS80
    1152dd13845e arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
    4a6f053af119 tracing: Fix cmp_entries_dup() to respect sort() comparison rules
    4cbc202f28a5 watchdog: rti: of: honor timeout-sec property
    5912a921289e HID: wacom: fix when get product name maybe null pointer
    43c6d763569f bpf: Fix exact match conditions in trie_get_next_key()
    adb4a970bfa9 bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
    9c19ea59965e ocfs2: free inode when ocfs2_get_init_inode() fails
    e0c6ce842409 spi: mpc52xx: Add cancel_work_sync before module remove
    dbedc7e142df tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
    8cd416aaac68 drm/sti: Add __iomem for mixer_dbg_mxn's parameter
    7fd09abc4bdd i3c: master: Fix dynamic address leak when 'assigned-address' is present
    b70ba15c66d5 i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
    1c47272e535d i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
    3aecd6fd55cf i3c: fix incorrect address slot lookup on 64-bit
    fbb3aa94fc8d dt-bindings: serial: rs485: Fix rs485-rts-delay property
    0da0be3b1d17 dt_bindings: rs485: Correct delay values
    4733f68e59bb gpio: grgpio: Add NULL check in grgpio_probe
    c8e3aa367e71 gpio: grgpio: use a helper variable to store the address of ofdev->dev
    d9fa09ca004b geneve: do not assume mac header is set in geneve_xmit_skb()
    d93efe18b49a ethtool: Fix wrong mod state in case of verbose and no_mask bitset
    e21855091f11 netfilter: nft_set_hash: skip duplicated elements pending gc run
    6099b5d3e371 netfilter: ipset: Hold module reference while requesting a module
    98ea587a4048 net: sched: fix erspan_opt settings in cls_flower
    e0155b1b1509 igb: Fix potential invalid memory access in igb_init_module()
    9da327f2e6b7 net/qed: allow old cards not supporting "num_images" to work
    650ee9a22d7a tipc: Fix use-after-free of kernel socket in cleanup_bearer().
    c99507fff94b dccp: Fix memory leak in dccp_feat_change_recv
    b90d061345bb net/ipv6: release expired exception dst cached in socket
    b3282c2bebee can: j1939: j1939_session_new(): fix skb reference counting
    aa632691c722 net: hsr: avoid potential out-of-bound access in fill_frame_info()
    f9653b00bef2 net/sched: tbf: correct backlog statistic for GSO packets
    7f5eda0e315b ptp: Add error handling for adjfine callback in ptp_clock_adjtime
    ad28612ebae1 netfilter: x_tables: fix LED ID check in led_tg_check()
    0b2cbed82b7c ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
    273cab979da1 can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    265f8341470f can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
    601ec0003c17 watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
    05bed96e4cb0 iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    4715e23b3a7f drm/etnaviv: flush shader L1 cache after user commandstream
    c1406d8329f5 btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
    2d505a801e57 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
    7fd29d284b55 nfsd: make sure exp active before svc_export_show
    1f53e8400b13 dm thin: Add missing destroy_work_on_stack()
    c6ac663c92c8 PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    093ecc6d82ff i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
    aa10c746e79a scsi: ufs: exynos: Fix hibern8 notify callbacks
    a1f2aff064ef util_macros.h: fix/rework find_closest() macros
    afc1e3c00b3f ad7780: fix division by zero in ad7780_write_raw()
    6fd018aa168e btrfs: ref-verify: fix use-after-free after invalid ref action
    6f3821acd7c3 quota: flush quota_release_work upon quota writeback
    366e55e91fe9 octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam()
    442dadf32d1c ASoC: fsl_micfil: fix the naming style for mask definition
    971b48934577 sh: intc: Fix use-after-free bug in register_intc_controller()
    86a1f9fa2480 sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
    8c06a00a9be6 SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
    a4b153bdaad5 sunrpc: remove unnecessary test in rpc_task_set_client()
    3ccfa8269fae SUNRPC: Convert rpc_client refcount to use refcount_t
    e2730edfff6b SUNRPC: correct error code comment in xs_tcp_setup_socket()
    f69fb61c69a0 nfs: ignore SB_RDONLY when mounting nfs
    bd4624d73373 modpost: remove incorrect code in do_eisa_entry()
    b0660da68491 rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    7f5a2ed5c181 9p/xen: fix release of IRQ
    fa365f688014 9p/xen: fix init sequence
    57ee79e9c94c block: return unsigned int from bdev_io_min
    25ec6cd751c9 jffs2: fix use of uninitialized variable
    8d8b3f5f4cbf ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
    04c0b0f37617 ubi: fastmap: Fix duplicate slab cache names while attaching
    36b25baf96b8 ubifs: Correct the total block count by deducting journal reservation
    0d68e8514d90 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
    cd154812858d rtc: abx80x: Fix WDT bit position of the status register
    c48db3147c14 rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    5237a297ffd3 NFSv4.0: Fix a use-after-free problem in the asynchronous open()
    2365f57820c0 um: Always dump trace for specified task in show_stack
    634b3c3d0b5c um: Fix the return value of elf_core_copy_task_fpregs
    e6102b72edc4 um: Fix potential integer overflow during physmem setup
    52ee41452527 rpmsg: glink: Propagate TX failures in intentless mode as well
    02999e135b01 SUNRPC: make sure cache entry active before cache_show
    3c5f545c9a1f NFSD: Prevent a potential integer overflow
    a44a4260a28c lib: string_helpers: silence snprintf() output truncation warning
    8ceb21d76426 usb: dwc3: gadget: Fix looping of queued SG entries
    a98340265f28 usb: dwc3: gadget: Fix checking for number of TRBs left
    3591fe07aa53 ALSA: hda/realtek: Apply quirk for Medion E15433
    99af54eb0c96 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    820bc3f297e8 ALSA: hda/realtek: Set PCBeep to default value for ALC274
    ee68e7bd8022 ALSA: hda/realtek: Update ALC225 depop procedure
    03a469024f67 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    d7408a052aa1 media: wl128x: Fix atomicity violation in fmc_send_cmd()
    f74b360a012a HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    2d2192fd2e6b block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    dad458e77540 arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    77755dc95ff2 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    35f8f72b4579 um: vector: Do not use drvdata in release
    3997d11fd996 serial: 8250: omap: Move pm_runtime_get_sync
    6be99d4c117b um: net: Do not use drvdata in release
    509ba8746f81 um: ubd: Do not use drvdata in release
    0f6737cad88b ubi: wl: Put source PEB into correct list if trying locking LEB failed
    fb6d3c6c1218 platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    11b414ff9ab4 spi: Fix acpi deferred irq probe
    2e151b8ca316 netfilter: ipset: add missing range check in bitmap_ip_uadt
    fa0e202e23ff Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
    0ff91b3bf53e serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    b12869cab514 Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    5be4bc1c73ca driver core: bus: Fix double free in driver API bus_register()
    e844bccad7ee Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    a26842e4683f exfat: fix uninit-value in __exfat_get_dentry_set
    7fc42f249daf locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
    0b9622163926 tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    f856246ff6da apparmor: test: Fix memory leak for aa_unpack_strdup()
    b9322408d83a comedi: Flush partial mappings in error case
    a4236cc4f952 fsnotify: fix sending inotify event with unexpected filename
    da6e6ff1f6c5 PCI: Fix use-after-free of slot->bus on hot remove
    5442dbd3342a KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    1a89ef73b510 crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    e8f728442dd5 perf/x86/intel/pt: Fix buffer full but size is 0 case
    626a8b956719 ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    bbf3f1fd8a0a jfs: xattr: check invalid xattr size more strictly
    ea0527d5cc61 ext4: fix FS_IOC_GETFSMAP handling
    442c6f05d94e ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    62dc01c83fa7 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
    03d68e2d244c soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    4c9fded47888 usb: ehci-spear: fix call balance of sehci clk handling routines
    0aa9e30b5b4a xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
    e47f0e95441b apparmor: fix 'Do simple duplicate message elimination'
    f89f677adc78 ALSA: hda/realtek: Update ALC256 depop procedure
    6e99925d8548 ALSA: hda/realtek - Add type for ALC287
    9f26a607d846 staging: greybus: uart: clean up TIOCGSERIAL
    7bf3e45ea60b misc: apds990x: Fix missing pm_runtime_disable()
    8a960584638f USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    bb37389d14f4 USB: chaoskey: fail open after removal
    2e72f53f740a usb: yurex: make waiting on yurex_write interruptible
    30b9a7786c48 usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    653903e36ca2 iio: light: al3010: Fix an error handling path in al3010_probe()
    75e6dc33f16a ipmr: fix tables suspicious RCU usage
    e5dffbd159ef ipmr: convert /proc handlers to rcu_read_lock()
    a9615376a999 bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    6b41c5627117 net: hsr: fix hsr_init_sk() vs network/transport headers.
    1564c7ed9d29 net: introduce a netdev feature for UDP GRO forwarding
    4654bcb686ac spi: atmel-quadspi: Fix register name in verbose logging function
    b58678e3f243 net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    3dbdb3f85b74 marvell: pxa168_eth: fix call balance of pep->clk handling routines
    882ea20ce07c net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
    b18ab1198587 tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    6728375984cb net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    c399dd6e7042 power: supply: bq27xxx: Fix registers of bq27426
    c5351bfba7b9 power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100
    da4008a289e1 power: supply: core: Remove might_sleep() from power_supply_put()
    70f1bad32127 fs_parser: update mount_api doc to match function signature
    0918f5643fc6 vfio/pci: Properly hide first-in-list PCIe extended capability
    145482f4c894 vdpa/mlx5: Fix suboptimal range on iotlb iteration
    eb681998c889 NFSD: Fix nfsd4_shutdown_copy()
    9d4f174342a7 NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    752a75811f27 NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
    9df83cc000ed remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    b5ba1b37142f rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    295cb2524309 rpmsg: glink: Fix GLINK command prefix
    9761e51e1d43 rpmsg: glink: Send READ_NOTIFY command in FIFO full case
    3dd661b963a3 rpmsg: glink: Add TX_DATA_CONT command while sending
    e72735fcce17 perf trace: Avoid garbage when not printing a syscall's arguments
    10eb66d4f295 perf trace: Do not lose last events in a race
    68ccc1830e9d m68k: coldfire/device.c: only build FEC when HW macros are defined
    2255a994d6f1 m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    10f14161e830 perf trace: avoid garbage when not printing a trace event's arguments
    af87c2069952 f2fs: check curseg->inited before write_sum_page in change_curseg
    c6d54485cf81 f2fs: remove the unused flush argument to change_curseg
    5bb54d3b377e f2fs: open code allocate_segment_by_default
    c6ad7333e530 f2fs: remove struct segment_allocation default_salloc_ops
    a7e306f7c32d f2fs: avoid using native allocate_segment_by_default()
    6e5de38f605c f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    43b2e068aef4 PCI: cpqphp: Fix PCIBIOS_* return value confusion
    1fe390f27875 PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    edb4833a3838 perf probe: Correct demangled symbols in C++ program
    0b04b48e4cc2 perf probe: Fix libdw memory leak
    26db806fa23e perf cs-etm: Don't flush when packet_queue fills up
    c751d28b403f clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    a68e4f76ee85 clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
    43afa76e6efe dt-bindings: clock: axi-clkgen: include AXI clk
    fc7ef5873472 dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
    29216bb390e3 fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
    d161e5ea0ca7 fbdev/sh7760fb: Alloc DMA memory from hardware device
    6f1fabc9e331 powerpc/kexec: Fix return of uninitialized variable
    fd57d992f371 powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    66b7ddd1804e ocfs2: fix uninitialized value in ocfs2_file_read_iter()
    bd715e191d44 RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
    a4d2011cbe03 scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
    a56777a3ef5b scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
    e3b9ba55c18f scsi: fusion: Remove unused variable 'rc'
    ef2c2580189e scsi: bfa: Fix use-after-free in bfad_im_module_exit()
    cc30125eb6b6 mfd: rt5033: Fix missing regmap_del_irq_chip()
    896927b0157a RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    6956c0e7346c powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
    54cb5fa850f9 mtd: rawnand: atmel: Fix possible memory leak
    c912aae5363a cpufreq: loongson2: Unregister platform_driver on failure
    61d590d7076b mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
    c472b55cc0bc mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
    0b648968bfa4 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
    48d3964f2bcd mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
    2630b18bed7d mfd: da9052-spi: Change read-mask to write-mask
    b86340df10b1 mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    a85e5215609d powerpc/vdso: Flag VDSO64 entry points as functions
    62a8d90e3221 trace/trace_event_perf: remove duplicate samples on the first tracepoint event
    49e8a0e07b02 wireguard: selftests: load nf_conntrack if not present
    63bc9a42a02e netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    fb91ce37dc9a Bluetooth: fix use-after-free in device_for_each_child()
    49de4ac80427 driver core: Introduce device_find_any_child() helper
    f2d06d4e129e ALSA: 6fire: Release resources at card release
    4dd821dcbfce ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
    bf0aa35a7cb8 ALSA: us122l: Use snd_card_free_when_closed() at disconnection
    24fe9f7ca83e ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
    d5a733ee2624 ALSA: usx2y: Cleanup probe and disconnect callbacks
    cfb1f6bc2eed ALSA: usx2y: Coding style fixes
    9a70db03857a ALSA: usx2y: Fix spaces
    5674ae441c89 net: rfkill: gpio: Add check for clk_enable()
    b751f3423fbd drm/amdkfd: Fix wrong usage of INIT_WORK()
    6543a34f34a1 selftests: net: really check for bg process completion
    1df5d631ba9e bpf, sockmap: Fix sk_msg_reset_curr
    d26d977633d1 bpf, sockmap: Several fixes to bpf_msg_pop_data
    2b4530ecc018 bpf, sockmap: Several fixes to bpf_msg_push_data
    5a0ae8e4f79c selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    78eb4af79e8a selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    74d2b00f488f selftests, bpf: Add one test for sockmap with strparser
    3e35560e80a9 selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    a9fa0d2ce890 selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    224b9bc4977c netlink: typographical error in nlmsg_type constants definition
    59362f51f4c2 drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    3fd17a47ee72 wifi: wfx: Fix error handling in wfx_core_init()
    67d32d63c058 drm/etnaviv: hold GPU lock across perfmon sampling
    02aac657c48e drm/etnaviv: fix power register offset on GC300
    17551e3d94b7 drm/etnaviv: dump: fix sparse warnings
    04c0cd65a844 drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    54163a35fe44 drm/etnaviv: rework linear window offset calculation
    e5e10c00610d drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    e44d23fa0dc6 drm/panfrost: Remove unused id_mask from struct panfrost_model
    5ff9de1f2712 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
    2d1648603752 octeontx2-pf: ethtool fec mode support
    8cafe71ad0fb octeontx2-af: Add new CGX_CMD to get PHY FEC statistics
    9bb714350200 octeontx2-af: forward error correction configuration
    a5f3aebadcb7 octeontx2-pf: Calculate LBK link instead of hardcoding
    4dce1962411f octeontx2-af: Mbox changes for 98xx
    50c56b0f5fe3 drm: fsl-dcu: enable PIXCLK on LS1021A
    b773f406b6de drm/fsl-dcu: Convert to Linux IRQ interfaces
    5fa329c44e1e wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
    4496d25157c9 selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    addabcb1bd37 selftests/bpf: Fix msg_verify_data in test_sockmap
    d4f54c609d28 drm/bridge: tc358767: Fix link properties discovery
    e4decf4c8b56 netdevsim: copy addresses for both in and out paths
    7fd24ee949bd netdevsim: rely on XFRM state direction instead of flags
    76ff31c0113d xfrm: store and rely on direction to construct offload flags
    837f37f0cf39 xfrm: rename xfrm_state_offload struct to allow reuse
    bfdad9de02a3 bpf: Fix the xdp_adjust_tail sample prog issue
    7706afc21304 ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    5e3385bca11a ASoC: fsl_micfil: fix regmap_write_bits usage
    b2a72a772ef0 ASoC: fsl_micfil: use GENMASK to define register bit fields
    226fc91c860b ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
    fa55ed175c7b ASoC: fsl_micfil: Drop unnecessary register read
    78a71b056c2c dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    54550eeb8f86 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    f3749bc13cb3 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    145f3ac8c92e drm/v3d: Address race-condition in MMU flush
    c992e517c8a6 drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    0bde5b6e230a drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    d1ae370b82e9 wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    29ee7d6fa18f wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    1d602e4b6dcb drm/omap: Fix locking in omap_gem_new_dmabuf()
    c941af142200 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
    ba35d3b212fb drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    0c24b82bc4d1 media: atomisp: Add check for rgby_data memory allocation failure
    4478f599a283 media: atomisp: remove #ifdef HAS_NO_HMEM
    380c0e1d96f3 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
    02dff60d0c99 selftests/resctrl: Protect against array overrun during iMC config parsing
    5f0e91a5f4ed regmap: irq: Set lockdep class for hierarchical IRQ domains
    409b1e428cf9 pmdomain: ti-sci: Add missing of_node_put() for args.np
    dd1985f9752f ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    9db3ef898a6e pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    e8174fb173cc cgroup/bpf: only cgroup v2 can be attached by bpf programs
    067d0c56630d Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    2295468c0c20 arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
    1b07333bbc3a arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    839e76cea2ab tpm: fix signed/unsigned bug when checking event logs
    dad86eb91cf9 mmc: mmc_spi: drop buggy snprintf()
    748557ca7dc9 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
    c9c6a62c91e9 soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    f9dc2ae5a2cd spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    85cf7a3c6f7d spi: spi-fsl-lpspi: downgrade log level for pio mode
    ef1db3d1d2bf clocksource/drivers:sp804: Make user selectable
    d08932bb6e38 clkdev: remove CONFIG_CLKDEV_LOOKUP
    e48e204f364a kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    dc684d966f48 time: Fix references to _msecs_to_jiffies() handling of values
    069601e4b657 crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    28f8ffa945f7 crypto: bcm - add error check in the ahash_hmac_init function
    dead96e1c748 crypto: caam - add error check to caam_rsa_set_priv_key_form
    a56860294ccd crypto: cavium - Fix the if condition to exit loop after timeout
    a92ccd3618e4 crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
    99ec5eb5bbf3 EDAC/fsl_ddr: Fix bad bit shift operations
    e0269ea7a628 EDAC/bluefield: Fix potential integer overflow
    29551174590e firmware: google: Unregister driver_info on failure
    cc386170b331 crypto: caam - Fix the pointer passed to caam_qi_shutdown()
    e8a2b1c1c2ea hfsplus: don't query the device logical block size multiple times
    3cab4bbc6691 s390/syscalls: Avoid creation of arch/arch/ directory
    cf9efea8c092 acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    6c772871c2e5 arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    ff01ac3e766c m68k: mvme147: Reinstate early console
    f65ca93b859d m68k: mvme16x: Add and use "mvme16x.h"
    21f46b07c20b m68k: mvme147: Fix SCSI controller IRQ numbers
    452f9ddd12be nvme-pci: fix freeing of the HMB descriptor table
    d3df9f26cff9 initramfs: avoid filename buffer overrun
    17f35a6c9391 mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    72d6dd978f1d x86/xen/pvh: Annotate indirect branch as safe
    8ce88918e4d8 kselftest/arm64: mte: fix printf type warnings about longs
    8025d65d6242 x86/barrier: Do not serialize MSR accesses on AMD
    67be3cd92aa0 nvme: fix metadata handling in nvme-passthrough
    73b078e3314d cifs: Fix buffer overflow when parsing NFS reparse points
    36741bfcfbff rcu-tasks: Idle tasks on offline CPUs are in quiescent states
    e01ff1251c77 ipmr: Fix access to mfc_cache_list without lock held
    e8529cfd7086 ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    e05e8f54d23f proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    444c9d41210c ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    ddd61392263d ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    a8ebe0a22527 can: j1939: fix error in J1939 documentation.
    f6b4294a0249 regulator: rk808: Add apply_bit for BUCK3 on RK809
    b070a9e0dbf3 soc: qcom: Add check devm_kasprintf() returned value
    6df3ee9073cd net: usb: qmi_wwan: add Quectel RG650V
    bc014d8d6561 x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    f61da9401963 ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    501ac2d1aae6 selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    6b5737b14af1 mac80211: fix user-power when emulating chanctx
    9347d7c552c8 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    43323a4e5b3f mm: resolve faulty mmap_region() error path behaviour
    a32712d54c61 mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    7a450540c82f mm: unconditionally close VMAs on error
    f68a0236337e mm: avoid unsafe VMA hook invocation when error arises on mmap hook
    57cc8d253099 mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    ed98d26021db NFSD: Never decrement pending_async_copies on error
    059434d23c45 NFSD: Initialize struct nfsd4_copy earlier
    9e52ff544e0b NFSD: Limit the number of concurrent async COPY operations
    4fcb25459430 NFSD: Async COPY result needs to return a write verifier
    7f9b91ed15df NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
    2e7ce4e50d14 media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    c29a44d9a402 mmc: core: fix return value check in devm_mmc_alloc_host()
    b22ddca004d3 drm/bridge: tc358768: Fix DSI command tx
    938c13740f8b Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
    0a5014ad37c7 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
    344558d81c7c ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    b017697a517f nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
    d4b42f926adc KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
    c96f90911dd1 vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    28d4ed71ae0b ocfs2: uncache inode which has failed entering the group
    5fe8bcc82f1d x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    ffad2ac8c859 net/mlx5e: kTLS, Fix incorrect page refcounting
    a508c74ceae2 net/mlx5: fs, lock FTE when checking if active
    6e3f2c512d2b netlink: terminate outstanding dump on socket close
    b5214ca796fb clk: qcom: gcc-qcs404: fix initial rate of GPLL3
    3e7f845614ee leds: lp55xx: Remove redundant test for invalid channel number
    5dabb7af57bc ftrace: Fix regression with module command in stack_trace_filter
    5f86e79c0b22 ovl: Filter invalid inodes with missing lookup function
    2cc30545dd3a media: uvcvideo: Stop stream during unregister
    74a65313578b media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
    da56bb858954 media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
    580d1e5cf2cd media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
    5a53f97cd597 media: ts2020: fix null-ptr-deref in ts2020_probe()
    5c9ab34c87af media: i2c: tc358743: Fix crash in the probe error path when using polling
    b240a0472f8e arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
    711d99f845cd Linux 5.10.230
    918326996932 9p: fix slab cache name creation for real
    d02492863023 mm: krealloc: Fix MTE false alarm in __do_krealloc
    b17397a0a5c5 io_uring: fix possible deadlock in io_register_iowq_max_workers()
    dd7a728d5c0d md/raid10: improve code of mrdev in raid10_sync_request
    8ea0b8e32bed net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    9db25c2b41c3 fs: Fix uninitialized value issue in from_kuid and from_kgid
    35b4795a7ebf vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    7e222d2c7f9a powerpc/powernv: Free name on error in opal_event_init()
    b718f71747b7 sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    dc834af641d7 crypto: marvell/cesa - Disable hash algorithms
    4d8f6679b03a bpf: use kvzmalloc to allocate BPF verifier environment
    0bf6971b7d1e HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    2bc339b00fbd 9p: Avoid creating multiple slab caches with the same name
    2f4bfcc4c5fa net: phy: ti: take into account all possible interrupt sources
    16a8ebc88fe2 ALSA: usb-audio: Add endianness annotations
    eb1bdcb7dfc3 vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
    414476c4fb11 hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
    0d71863c19be ALSA: usb-audio: Add quirks for Dell WD19 dock
    4dc9c1e83aeb ALSA: usb-audio: Support jack detection on Dell dock
    6a7e6dcf90fe ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
    e068a87cf25e irqchip/gic-v3: Force propagation of the active state with a read-back
    bb17f42135f5 USB: serial: option: add Quectel RG650V
    6d5bd4bc14d7 USB: serial: option: add Fibocom FG132 0x0112 composition
    c5748d95608c USB: serial: qcserial: add support for Sierra Wireless EM86xx
    e567fc8f7a44 USB: serial: io_edgeport: fix use after free in debug printk
    d76923164705 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
    6e2848d1c8c0 usb: musb: sunxi: Fix accessing an released usb phy
    5dd3f5a9244a fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    faff5bbb2762 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
    547087307bc1 net: do not delay dst_entries_add() in dst_release()
    83aa0c996417 perf session: Add missing evlist__delete when deleting a session
    2297d80a13a6 Revert "perf hist: Add missing puts to hist__account_cycles"
    82090f94c723 net: bridge: xmit: make sure we have at least eth header len bytes
    11eab327a2a8 spi: fix use-after-free of the add_lock mutex
    c8dce228db6f spi: Fix deadlock when adding SPI controllers on SPI buses
    982a2757e725 splice: don't generate zero-len segement bvecs
    bf0b0c6d1597 btrfs: reinitialize delayed ref list after deleting it from the list
    8fc5ea9231af nfs: Fix KMSAN warning in decode_getfattr_attrs()
    485d9232112b io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
    f336622838e5 io_uring: use kiocb_{start,end}_write() helpers
    f83a32351efd fs: create kiocb_{start,end}_write() helpers
    955089c2403c io_uring: rename kiocb_end_write() local helper
    6f383f653d03 dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
    483b7261b35a dm cache: fix potential out-of-bounds access on the first resume
    f136d8d3f26f dm cache: optimize dirty bit checking with find_next_bit when resizing
    ee1f74925717 dm cache: fix out-of-bounds access to the dirty bitset when resizing
    5b975f146d82 dm cache: correct the number of origin blocks to match the target length
    2ac7f253dead drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
    17f5f18085ac drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
    1829c36f9329 pwm: imx-tpm: Use correct MODULO value for EPWM mode
    054931ca3cfc media: v4l2-tpg: prevent the risk of a division by zero
    5a9bd375bf88 media: pulse8-cec: fix data timestamp at pulse8_setup()
    828047c70f47 media: cx24116: prevent overflows on SNR calculus
    f54e8e1e39da media: s5p-jpeg: prevent buffer overflows
    3a977b554f66 ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
    ac40b9dff274 ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    c1eba9f0e235 scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    8e823ce93cc8 media: adv7604: prevent underflow condition when reporting colorspace
    e351002b3a7a media: dvb_frontend: don't play tricks with underflow values
    a4a17210c03a media: dvbdev: prevent the risk of out of memory access
    ae6fd157eae4 media: stb0899_algo: initialize cfr before using it
    63b122f53793 Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    30606ea3fae5 net: arc: fix the device for dma_map_single/dma_unmap_single
    71d08334c2cb net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    d3f517f904df net: phy: ti: implement generic .handle_interrupt() callback
    f398d0a5b783 net: phy: export phy_error and phy_trigger_machine
    590a4b2d4e0b net: hns3: fix kernel crash when uninstalling driver
    cf6bae33c5aa can: c_can: fix {rx,tx}_errors statistics
    40b283ba7666 sctp: properly validate chunk size in sctp_sf_ootb()
    22f4e2f86ad8 net: enetc: set MAC address to the VF net_device
    1e4332581cd4 security/keys: fix slab-out-of-bounds in key_task_permission
    d7dc68d82ab3 HID: core: zero-initialize the report buffer
    7830bfc3e7e7 ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    92f5b6978293 ARM: dts: rockchip: Fix the spi controller on rk3036
    c34f7b904748 ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    db87a9fb6a58 ARM: dts: rockchip: fix rk3036 acodec node
    7ddbc813ba64 arm64: dts: imx8mp: correct sdhc ipg clk
    e38f91b78388 arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    fbccf9647f0f arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    752c5bfb600f arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    ebb427d5f270 arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    9d0d15f26b86 arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
    b874a7e65b4f Linux 5.10.229
    7948c22cc70b mac80211: always have ieee80211_sta_restart()
    1e5a17dc77d8 vt: prevent kernel-infoleak in con_font_get()
    a508a102edf8 drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
    1d0d406bfc6b Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
    bda1a99a0dd6 mm: shmem: fix data-race in shmem_getattr()
    aa0cee46c5d3 nilfs2: fix kernel bug due to missing clearing of checked flag
    bfd1d223d80c x86/bugs: Use code segment selector for VERW operand
    70767689ec6e ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
    d592b2e9212f riscv: Remove duplicated GET_RM
    170ad7e7a662 riscv: Remove unused GENERATING_ASM_OFFSETS
    7e6bb3443185 riscv: Use '%u' to format the output of 'cpu'
    1e617230b783 riscv: efi: Set NX compat flag in PE/COFF header
    c345728678df riscv: vdso: Prevent the compiler from inserting calls to memset()
    35770ca6180c mm: avoid leaving partial pfn mappings around in error case
    69d4e1ce9087 mm: add remap_pfn_range_notrack
    c72e0df0b56c nilfs2: fix potential deadlock with newly created symlinks
    edc84c1c1a85 iio: light: veml6030: fix microlux value calculation
    442f786c5bff staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
    d0231f43df47 wifi: iwlegacy: Clear stale interrupts before resuming device
    4112450da7d6 wifi: ath10k: Fix memory leak in management tx
    c21efba8b5a8 wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
    1cfc32930461 Revert "driver core: Fix uevent_show() vs driver detach race"
    796df8d64caa xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    065789892e37 xhci: Fix Link TRB DMA in command ring stopped completion event
    efefde4d1b7c usb: phy: Fix API devm_usb_put_phy() can not release the phy
    2d4650d2b297 usbip: tools: Fix detach_port() invalid port error path
    603342ab037d misc: sgi-gru: Don't disable preemption in GRU driver
    aae9c5b472d6 NFS: remove revoked delegation from server's delegation list
    8395b6096959 net: amd: mvme147: Fix probe banner message
    0cac4a2718b2 firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    422f1b66b149 kasan: Fix Software Tag-Based KASAN with GCC
    8e99d41858eb compiler-gcc: remove attribute support check for `__no_sanitize_address__`
    4336f120937d compiler-gcc: be consistent with underscores use for `no_sanitize`
    e3e608cbad37 netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
    a27a5c40ee4c net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    b88262c950c3 net: support ip generic csum processing in skb_csum_hwoffload_help
    590976f92172 bpf: Fix out-of-bounds write in trie_get_next_key()
    ce691c814bc7 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
    9cab53f03263 gtp: allow -1 to be specified as file description from userspace
    e2742758c9c8 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
    465d3a8eca3f ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    45a628911d3c wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
    66e35e42f51e wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
    02b121beda58 mac80211: Add support to trigger sta disconnect on hardware restart
    89e25a2ec2a2 mac80211: do drv_reconfig_complete() before restarting all
    1ac988c6b8ff RDMA/bnxt_re: synchronize the qp-handle table array
    8256f6166d02 RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    f121dee2f907 RDMA/cxgb4: Dump vendor specific QP details
    935ca968019f wifi: brcm80211: BRCM_TRACING should depend on TRACING
    fd3b368769ae wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    e38ccb226de5 mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    ffbb1f15bae7 cgroup: Fix potential overflow issue when checking max_depth
    5b1e461fefb0 selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    8df5cd51fd70 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
    4abbba710583 arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
    03c9c2c2d2d0 ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
    f4b6a6493eb5 net: phy: dp83822: Fix reset pin definitions
    2fe399bb8efd serial: protect uart_port_dtr_rts() in uart_shutdown() too
    066314b0b76f selinux: improve error checking in sel_write_load()
    3eb6aa870057 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    631330f5a635 ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    76ce386feb14 KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    0f0374d09c82 openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    9f2ab98371c2 nilfs2: fix kernel bug due to missing clearing of buffer delay flag
    1f440403be1f ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
    59a1b38d3a5f ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    234682910971 drm/amd: Guard against bad data for ATIF ACPI method
    c9085e2401b8 ALSA: hda/realtek: Update default depop procedure
    5e431f85c87b ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
    c7fcfdba35ab posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    0da93d67da90 r8169: avoid unsolicited interrupts
    8a283a19026a net: sched: fix use-after-free in taprio_change()
    95b3f3ed5ac6 net: usb: usbnet: fix name regression
    77bc881d370e be2net: fix potential memory leak in be_xmit()
    db755e553490 net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
    9f95de15904a xfrm: respect ip protocols rules criteria when performing dst lookups
    6ba07c4a9eac xfrm: extract dst lookup parameters into a struct
    02874ca52df2 tracing: Consider the NULL character when validating the event length
    df848523d6b4 jfs: Fix sanity check in dbMount
    8605ca4bd0f4 arm64: Force position-independent veneers
    0329056e0730 ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    75f828e944da drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
    649d64650623 iomap: update ki_pos a little later in iomap_dio_complete
    c9b77438077d exec: don't WARN for racy path_noexec check
    20e27c773945 block, bfq: fix procress reference leakage for bfqq in merge chain
    bf83ba3c55d4 KVM: s390: gaccess: Check if guest address is in memslot
    6e1659b674b6 KVM: s390: gaccess: Cleanup access to guest pages
    472088ffb1cc KVM: s390: gaccess: Refactor access address range check
    511ca935092a KVM: s390: gaccess: Refactor gpa and length calculation
    cf9ddf9ed94c arm64: probes: Fix uprobes for big-endian kernels
    7f1ef59185d2 arm64:uprobe fix the uprobe SWBP_INSN in big-endian
    6c151aeb6dc4 Bluetooth: bnep: fix wild-memory-access in proto_unregister
    5c345c47e884 s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    6af43ec3bf40 usb: typec: altmode should keep reference to parent
    ed31aba8ce93 smb: client: fix OOBs when building SMB2_IOCTL request
    8c1e6717f60d scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    4af714e82379 genetlink: hold RCU in genlmsg_mcast()
    b6321146773d net: systemport: fix potential memory leak in bcm_sysport_xmit()
    f48eaf4e88c3 net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    aacf6e28aeda net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
    56dbb74b6a4b macsec: don't increment counters for an unrelated SA
    2c7dd3ca6be9 drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    df6fed0a2a1a RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
    78aaf54ad5d7 RDMA/bnxt_re: Return more meaningful error
    718609f51866 ipv4: give an IPv4 dev to blackhole_netdev
    59df170bdec9 RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    9076d449e77b ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    dbe51dd516e6 RDMA/bnxt_re: Add a check for memory allocation
    c17e5cbbb180 RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    f141044cc6d3 net: bridge: mcast: wait for previous gc cycles when removing port
    7640df3a194c net: atlantic: eliminate double free in error handling logic
    3cbcd4752671 RDMA/hns: Fix UAF for cq async event
    5a8fa04b2a4d Linux 5.10.228
    2abe57d62a45 ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
    25e86fb0aeec powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
    c1d0476885d7 nilfs2: propagate directory read errors from nilfs_find_entry()
    c38add9ac0e4 tcp: fix mptcp DSS corruption due to large pmtu xmit
    fde99e972b8f mptcp: handle consistently DSS corruption
    609937aa962a mptcp: track and update contiguous data status
    b7d7b7fc876f irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
    6f44a5fc15b5 x86/entry_32: Clear CPU buffers after register restore in NMI return
    9ab38a1cdb66 x86/entry_32: Do not clobber user EFLAGS.ZF
    846280578855 x86/apic: Always explicitly disarm TSC-deadline timer
    e475220d64be x86/resctrl: Annotate get_mem_config() functions as __init
    1826b6d69bbb parport: Proper fix for array out-of-bounds access
    9f8ddf14fa79 USB: serial: option: add Telit FN920C04 MBIM compositions
    0fc55ec9fcac USB: serial: option: add support for Quectel EG916Q-GL
    608b626f710d xhci: Fix incorrect stream context type macro
    fc2cb5e3af53 Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    63d6a3b07838 Bluetooth: Remove debugfs directory on module init failure
    516655749a01 iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    f80375f275fb iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    dc99dfa2ba66 iio: light: opt3001: add missing full-scale range value
    bf3ab8e1c28f iio: light: veml6030: fix IIO device retrieval from embedded device
    2d06787b70d8 iio: light: veml6030: fix ALS sensor resolution
    ffc4174309a9 iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
    9504153a480f iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    c27133637aba iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    c4c2211b1202 iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    3abc1ebea3fb iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    0782809c019b drm/vmwgfx: Handle surface check failure correctly
    df75c78bfeff drm/radeon: Fix encoder->possible_clones
    6ddcaee244ff io_uring/sqpoll: close race on waiting for sqring entries
    3bc6d0f8b70a blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
    eca3edf87679 x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    e7c0f8ca3bdd x86/bugs: Skip RSB fill at VMEXIT
    0ab77a47e3ff x86/entry: Have entry_ibpb() invalidate return predictions
    c5e57863d790 x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    77fa26062032 x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    dfa4b5d4ba1c KVM: s390: Change virtual to physical address access in diag 0x258 handler
    d04709509594 s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    b12ef2d4dfee io_uring/sqpoll: do not put cpumask on stack
    66b98c4f18b0 io_uring/sqpoll: retain test for whether the CPU is valid
    54a987b41db3 io_uring/sqpoll: do not allow pinning outside of cpuset
    71fbc3af3dac KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
    e8e599a63506 wifi: mac80211: fix potential key use-after-free
    417d5838ca73 mm/swapfile: skip HugeTLB pages for unuse_vma
    043f05526163 fat: fix uninitialized variable
    bf1a0222229d irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
    cafa5942bd2d net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
    ce43c48cdc4d arm64: probes: Fix simulate_ldr*_literal()
    3728b4eb2791 arm64: probes: Remove broken LDR (literal) uprobe support
    673a1c5a2998 posix-clock: Fix missing timespec64 check in pc_clock_settime()
    dbe055567af8 net: enetc: add missing static descriptor and inline keyword
    5f47cdeeefd9 ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    6c8784a6662b watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
    3b24ef662ec6 gfs2: Fix potential glock use-after-free on unmount
    03a85a51f33a fix vfsub build error
    12594a0e7118 sock_map: avoid race between sock_map_close and sk_psock_put
    7a346798c1e1 sock_map: Fix a potential use-after-free in sock_map_close()
    843556a46e16 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
    4af417c06d37 of: module: add buffer overflow check in of_modalias()
    b29e4b50c556 scripts/gdb: fix SB_* constants parsing
    02fd398f5e2b bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
    2bba1cb1487b loop: Select I/O scheduler 'none' from inside add_disk()
    027f4dd7c993 blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag
    2214ded26c86 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    44494049e815 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    0d7c23009d82 tpm: Add flag to use default cancellation policy
    07914bef4e16 tpm: tis_i2c: Fix sanity check interrupt enable mask
    35f85f04bd69 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    7b04c6c08107 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    4790cb2d1283 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    50f74deaf308 hwmon: Add driver for Texas Instruments TMP464 and TMP468
    a4e6e4b7bb08 dt-bindings: hwmon: add tmp464.yaml
    e0ed2149d7b5 drm/amdkfd: Check for null pointer after calling kmemdup
    c6ddded89322 ARM: renumber bits related to _TIF_WORK_MASK
    35b96a325c1e arm64: make _TIF_WORK_MASK bits contiguous
    f5a8f06aa595 arm64: uaccess: remove vestigal UAO support
    3a330b569301 arm64: uaccess: remove redundant PAN toggling
    9cbbb016d6e7 arm64: uaccess: remove addr_limit_user_check()
    fd83411f5e08 arm64: uaccess: remove set_fs()
    15a6dc2f4b53 arm64: uaccess cleanup macro naming
    912a6ab683a4 arm64: uaccess: split user/kernel routines
    d004ab02dae2 arm64: uaccess: refactor __{get,put}_user
    e1941a8b459e arm64: uaccess: simplify __copy_user_flushcache()
    dfae822b4c59 arm64: uaccess: rename privileged uaccess routines
    1efdb8f0a0c7 arm64: sdei: explicitly simulate PAN/UAO entry
    b35fec69554c arm64: sdei: move uaccess logic to arch/arm64/
    b5a28033fe7b arm64: head.S: always initialize PSTATE
    243eb8553513 arm64: head.S: cleanup SCTLR_ELx initialization
    74a00405d97f arm64: head.S: rename el2_setup -> init_kernel_el
    73c5f386d175 arm64: add C wrappers for SET_PSTATE_*()
    e17fb7543df1 arm64: ensure ERET from kthread is illegal
    eff6289cc53b ixgbevf: add disable link state
    262595681381 ixgbe: add improvement for MDD response functionality
    b9d78b06dea8 ixgbe: add the ability for the PF to disable VF link state
    d829911485da Documentation: arm64: Document PMU counters access from userspace
    fe5d29bfce20 arm64: perf: Enable PMU counter userspace access for perf event
    15ce6d04ed6a arm64: perf: Add userspace counter access disable switch
    4f288acbeed8 perf: Add a counter for number of user access events in context
    354ba4a8c4b8 x86: perf: Move RDPMC event flag to a common definition
    d29cec94c49b libperf xyarray: Add bounds checks to xyarray__entry()
    8264d2b91841 libperf: Add support for user space counter access
    7fd81b678b5f libperf tests: Add support for verbose printing
    6029ff53a48f libperf: Add evsel mmap support
    28b0c8956369 tools include: Add an initial math64.h
    492e532d20f1 perf record: Improve 'Workload failed' message printing events + what was exec'ed
    d0a1fc61733e perf evlist: Add a method to return the list of evsels as a string
    81a77b39be0a perf annotate: Fix sample events lost in stdio mode
    2883e69e202d pnmtologo: use relocatable file name
    80f5207b5abd tools: use basename to identify file in gen-mach-types
    4d201ec392f1 vt/conmakehash: improve reproducibility
    ae24d013888f lib/build_OID_registry: fix reproducibility issues
    5d72da88dbb4 x86/boot: Wrap literal addresses in absolute_pointer()
    dc0bd7aa2319 ACPI: thermal: drop an always true check
    0c4288cceef5 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    5509050b3392 xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    669827c6e293 virtio-pci: Remove wrong address verification in vp_del_vqs()
    1c80d994d3db regulator: consumer: Add missing stubs to regulator/consumer.h
    3303d0e2aeff ipv6: Fix stats accounting in ip6_pkt_drop
    c56e60f665e7 memcg: enable accounting of ipc resources
    e6c8ebd210a2 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    1655ee30e684 sched/isolation: really align nohz_full with rcu_nocbs
    253c752ed120 pstore/ftrace: Add and use ftrace_test_recursion_trylock_safe
    356e8a12bd66 pstore/ftrace: Add recursion protection to the ftrace callback
    334706a1e873 ftrace: Add ftrace_test_recursion_trylock() helper function
    78c260d7f60b ftrace: Move the recursion testing into global headers
    c0b313d988a1 powerpc/mm: Switch obsolete dssall to .long
    1bd813fe8d0e riscv: fix build with binutils 2.38
    835a2d1b24c6 powerpc/lib/sstep: fix 'ptesync' build error
    fd84b99a8ccb drm/amd/display: Don't allow partial copy_from_user
    024f4ff63d55 drm/amdgpu: Fix even more out of bound writes from debugfs
    0c0ad634e899 e1000e: Serialize TGP e1000e PM ops
    add88b0536fa e1000e: Make mei_me active when e1000e is in use
    a8f317c1a17e yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    c8400a2cbe1f iommu/arm-smmu-v3: Ratelimit event dump
    b8ec7e43e95e regmap: teach regmap to use raw spinlocks if requested in the config
    4b7fa7684be7 OF: DT-Overlay configfs interface (v7)
    d515a5c0e9a9 net: xilinx_emaclite: Do not print real IOMEM pointer
    11329e49959b drivers: net: xilinx_emaclite: remove arch limitation
    29dc69bf2a07 drivers: net: xilinx_emaclite: Add COMPILE_TEST support
    ff106eff01f6 drivers: net: xilinx_emaclite: Fix -Wpointer-to-int-cast warnings with W=1
    c27462391070 serial: 8250: 8250_omap: Fix possible array out of bounds access
    16976d8e307f perf intel-pt: Use aux_watermark
    d421a2346946 perf: Cap allocation order at aux_watermark
    6da8d5f29481 timers: Fix get_next_timer_interrupt() with no timers pending
    af141841735a eventfd: Enlarge recursion limit to allow vhost to work
    a125a6102808 iwlwifi: select MAC80211_LEDS conditionally
    139fe7d68413 rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
    8d0c79931235 console: Fix build when CONFIG_BLK_DEV_INITRD is disabled.
    ea777841e8ea yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    ab49d2db98bd cgroup1: fix leaked context root causing sporadic NULL deref in LTP
    bdda1b6cf99b aufs5: aufs-core
    2fa276071d07 aufs5: aufs-standalone
    06ed4d532456 aufs5: aufs-mmap
    372857834999 aufs5: aufs-kbuild
    fd68c9840693 aufs5: aufs-base
    a673c127156c Revert "aufs5: core"
    cf62bfcde384 Revert "aufs5: aufs5-base"
    a644419ec785 Revert "aufs5: aufs5-mmap"
    b893f9a999bb Revert "aufs5: aufs5-standalone"
    c60db0819480 Revert "aufs: initial port to v5.10"
    c66a5900f139 Revert "Revert "aufs: initial port to v5.10""
    1320cf58f5dd Revert "aufs: linux-v5.10-rc1, no more set_fs()"
    02349d7738ff Revert "for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t"
    f01dab74750c Revert "aufs: linux-v5.10-rc1, no more f_op->read() and ->write()"
    3d5de709b676 Revert "aufs5: aufs5-kbuild"
    a97f1329edf7 tracing/arm: Have max stack tracer handle the case of return address after data
    5c54112a05ab net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
    ddac76981cb3 sched/isolation: reconcile rcu_nocbs= and nohz_full=
    56fd8c36614e net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    a8808e541750 aufs: linux-v5.10-rc1, no more f_op->read() and ->write()
    cb1c41dac775 for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t
    a5805df6583f aufs: linux-v5.10-rc1, no more set_fs()
    64e145dcca8c Revert "aufs: initial port to v5.10"
    d6e20b2257ec defconfig: add dependency for CONFIG_ACPI_APEI_PCIEAER
    b237d48208d0 arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER
    1209195ed0f7 driver: adc: ltc2497: return directly after reading the adc conversion value
    a60fe3fcf113 Revert "mfd: syscon: Don't free allocated name for regmap_config"
    13d68767aa4a rcutorture: Use "all" and "N" in "nohz_full" and "rcu_nocbs"
    54e69571a97d rcu: deprecate "all" option to rcu_nocbs=
    a605b9d20447 lib: test_bitmap: add tests for "N" alias
    8c22517f444e lib: bitmap: support "N" as an alias for size of bitmap
    88187167e63a lib: bitmap: move ERANGE check from set_region to check_region
    ca5429633613 lib: bitmap: fold nbits into region struct
    9381134cea8a lib: test_bitmap: add more start-end:offset/len tests
    c825800730ab lib: test_bitmap: add tests to trigger ERANGE case.
    8cc8264dca3f lib: test_bitmap: clearly separate ERANGE from EINVAL tests.
    470da7b7f2ff Revert "cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers"
    28dc1d37602d Revert "cpumask: Make "all" alias global and not just RCU"
    dbfe0b183fca Revert "cpumask: Add a "none" alias to complement "all""
    a57711fcff30 Revert "cpumask: Add "last" alias for cpu list specifications"
    34523d7c8476 qemux86: add configuration symbol to select values
    cdca78778415 objtool: Fix seg fault with Clang non-section symbols
    d3287798bd88 x86/entry: Emit a symbol for register restoring thunk
    2ad99ddaac78 cpumask: Add "last" alias for cpu list specifications
    c10e9481810b cpumask: Add a "none" alias to complement "all"
    b00ceed9d388 cpumask: Make "all" alias global and not just RCU
    8b215206e797 cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers
    1b5024caeda8 clear_warn_once: add a clear_warn_once= boot parameter
    fc0dd76cce0e clear_warn_once: bind a timer to written reset value
    d64fc2d2b14a clear_warn_once: expand debugfs to include read support
    77592e956cc9 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    6e022759f727 perf: x86-32: explicitly include <errno.h>
    22d6bbb947d4 perf: mips64: Convert __u64 to unsigned long long
    c35f9150001c perf: fix bench numa compilation
    c4caef513eb1 perf: add SLANG_INC for slang.h
    07dfbf9405dd perf: add sgidefs.h to for mips builds
    42c5431ad2cf perf: change --root to --prefix for python install
    af79bfe90143 perf: add 'libperl not found' warning
    ddfbd9e75f08 perf: force include of <stdbool.h>
    0f34e6305176 fat: don't use obsolete random32 call in namei_vfat
    b5b55eaad1df FAT: Added FAT_NO_83NAME
    756b13bfab6e FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    fabad71cb2b5 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    06fd68d75bd1 aufs: initial port to v5.10
    c9126877d1f5 aufs5: core
    f5150173c643 aufs5: aufs5-standalone
    b57d26b072d9 aufs5: aufs5-mmap
    78f128c4b8e5 aufs5: aufs5-base
    47aa35171d08 aufs5: aufs5-kbuild
    35c480a23c66 yaffs: include blkdev.h
    2c64c43540a5 yaffs: fix misplaced variable declaration
    bde410ee9f59 yaffs2: v5.6 build fixups
    414c8e866931 yaffs2: fix memory leak when /proc/yaffs is read
    c99c1990cf7c yaffs: add strict check when call yaffs_internal_read_super
    498f5fafe50a yaffs: repair yaffs_get_mtd_device
    7ca3c08ebbf9 yaffs: Fix build failure by handling inode i_version with proper atomic API
    0ba47e881bb8 yaffs2: fix memory leak in mount/umount
    39a5406665dd yaffs: Avoid setting any ACL releated xattr
    ca5b43ddc6fd Yaffs:check oob size before auto selecting Yaffs1
    c2619c05a53e fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    5e08fb7b8ee0 yaffs2: adjust to proper location of MS_RDONLY
    5f1a1a9678a8 yaffs2: import git revision b4ce1bb (jan, 2020)
    fc21f09ae369 initramfs: allow an optional wrapper script around initramfs generation
    73887fca03be arm64/perf: Fix wrong cast that may cause wrong truncation
    a267cafaac44 defconfigs: drop obselete options
    eb5d1bc00c3f arm64/perf: fix backtrace for AAPCS with FP enabled
    062b2c98c087 linux-yocto: Handle /bin/awk issues
    d3beb253ae71 uvesafb: provide option to specify timeout for task completion
    75ccbf377a51 uvesafb: print error message when task timeout occurs
    18ffa2e88024 compiler.h: Undef before redefining __attribute_const__
    3ed931201746 vmware: include jiffies.h
    938942859596 Resolve jiffies wrapping about arp
    069a883d837c nfs: Allow default io size to be configured.
    3b568edcd3e9 check console device file on fs when booting
    77ec93228920 mount_root: clarify error messages for when no rootfs found
    17a15e0f7536 menuconfig,mconf-cfg: Allow specification of ncurses location
    8f13b1349a74 modpost: mask trivial warnings
    b6c9e0fa24e8 kbuild: exclude meta directory from distclean processing
    62dbbdbec60a powerpc: serialize image targets
    27b8dec5dbb3 arm: serialize build targets
    fc365512e4c4 Revert "platform/x86: wmi: Destroy on cleanup rather than unregister"
    9a6e91d2e691 crtsavres: fixups for 5.4+
    7dbc3cd0398f powerpc/ptrace: Disable array-bounds warning with gcc8
    ebe3bcb89cb0 powerpc: Disable attribute-alias warnings from gcc8
    65ba0e7de081 powerpc: add crtsavres.o to archprepare for kbuild
    6bd3efdce5a9 powerpc: kexec fix for powerpc64
    41671522c159 powerpc: Add unwind information for SPE registers of E500 core
    8851006b0109 mips: vdso: fix 'jalr $t9' crash in vdso code
    ed5db62477e8 mips: Kconfig: add QEMUMIPS64 option
    2a7ca094fc42 4kc cache tlb hazard: tlbp cache coherency
    b742d60d3f70 malta uhci quirks: make allowance for slow 4k(e)c
    8a160fc86eb6 arm/Makefile: Fix systemtap
    b9805882353c vexpress: Pass LOADADDR to Makefile
    332e618aa7ae arm: ARM EABI socketcall
    1ec682cb85f8 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: f95f69b878c9d4e50e1728b300dd00329850f5f8)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:02:41 -07:00
Bruce Ashfield
b76c447dbd linux-yocto/5.15: update to v5.15.179
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    0c935c049b5c Linux 5.15.179
    bf500b0d0cfe net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
    02e43735932d kbuild: userprogs: use correct lld when linking through clang
    bb0245fa72b7 sched: sch_cake: add bounds checks to host bulk flow fairness counts
    bab61f41c942 vsock: Orphan socket after transport release
    e48fcb403c2d vsock: Keep the binding until socket destruction
    857428f4acc1 bpf, vsock: Invoke proto::close on close()
    117f7a2975ba media: uvcvideo: Remove dangling pointers
    0fdd7cc59338 media: uvcvideo: Fix crash during unbind if gpio unit is in use
    607dc724b162 nilfs2: handle errors that nilfs_prepare_chunk() may return
    e5606b783307 nilfs2: eliminate staggered calls to kunmap in nilfs_rename
    1fa500f494f1 nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
    1cd7fd082c78 spi-mxs: Fix chipselect glitch
    cd0938805875 mtd: rawnand: cadence: fix unchecked dereference
    3e9899c12d5a md: select BLOCK_LEGACY_AUTOLOAD
    1a7c8039d2ee media: uvcvideo: Avoid returning invalid controls
    69b06b05ff94 media: uvcvideo: Avoid invalid memory access
    4e15cf870d2c drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
    ade9362dec18 eeprom: digsy_mtc: Make GPIO lookup table match the device
    7746f3bb8917 bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
    09d34c4cbc38 slimbus: messaging: Free transaction ID in delayed interrupt scenario
    1437d13ca83e intel_th: pci: Add Panther Lake-P/U support
    cebbd798ff25 intel_th: pci: Add Panther Lake-H support
    8875af55b825 intel_th: pci: Add Arrow Lake support
    e1651332291e mei: me: add panther lake P DID
    cf46f88b92cf Squashfs: check the inode number is not the invalid value of zero
    ac9a7d4c9007 usb: xhci: Enable the TRB overfetch quirk on VIA VL805
    41eae5d6e308 xhci: pci: Fix indentation in the PCI device ID definitions
    c3a772540220 usb: gadget: Check bmAttributes only if configuration is valid
    7e6b36d92dce usb: gadget: Fix setting self-powered state on suspend
    2b229d7b8a59 usb: gadget: Set self-powered based on MaxPower and bmAttributes
    a0dc4a3bdede usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
    3d8b87be73e9 usb: typec: ucsi: increase timeout for PPM reset operations
    00ac1ea9c0cd usb: dwc3: gadget: Prevent irq storm when TH re-executes
    78669d6f45a5 usb: dwc3: Set SUSPENDENABLE soon after phy init
    bf4409f84023 usb: atm: cxacru: fix a flaw in existing endpoint checks
    3248c1f833f9 usb: renesas_usbhs: Flush the notify_hotplug_work
    a1ad97347a45 usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
    894b4c75eadf usb: hub: lack of clearing xHC resources
    ec4b6f492ea1 usb: renesas_usbhs: Use devm_usb_get_phy()
    50b9010da101 usb: renesas_usbhs: Call clk_put()
    30e37db26120 Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
    329393a0325b gpio: rcar: Fix missing of_node_put() call
    f185b6d0aeea net: ipv6: fix missing dst ref drop in ila lwtunnel
    82043c99801e net: ipv6: fix dst ref loop in ila lwtunnel
    5cb300dcdd27 sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
    49bf31477184 net-timestamp: support TCP GSO case for a few missing flags
    413e908f13ce exfat: fix soft lockup in exfat_clear_bitmap
    6d099f3f7b27 x86/sgx: Fix size overflows in sgx_encl_create()
    a2d112a3b408 x86/sgx: Support VA page allocation without reclaiming
    51e5bc6d39d1 x86/sgx: Export sgx_encl_{grow,shrink}()
    48fa260f15b6 x86/sgx: Move PTE zap code to new sgx_zap_enclave_ptes()
    110a40c51415 x86/sgx: Support loading enclave page without VMA permissions check
    0fb7aa04c19e vlan: enforce underlying device type
    4e2191b0fd0c ppp: Fix KMSAN uninit-value warning with bpf
    b7d8d4529984 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
    671aaa17bd31 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
    3f9e7298053c drm/sched: Fix preprocessor guard
    e9813e0887fe hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
    9b6f083db141 llc: do not use skb_get() before dev_queue_xmit()
    e2eebbb52d15 ALSA: usx2y: validate nrpacks module parameter on probe
    afa9cd90e765 hwmon: (ad7314) Validate leading zero bits and return error
    996340f3db89 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
    13de3056e38c hwmon: (pmbus) Initialise page count in pmbus_identify()
    8e4e08ca4cc6 caif_virtio: fix wrong pointer check in cfv_probe()
    455217ac9db0 net: gso: fix ownership in __udp_gso_segment
    17451b795002 nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
    01b18a330cda HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
    4283afde4f8d HID: google: fix unused variable warning under !CONFIG_ACPI
    47616b82f2d4 wifi: iwlwifi: limit printed string from FW file
    b4739de37538 mm: don't skip arch_sync_kernel_mappings() in error paths
    955c5a1ddd6e mm/page_alloc: fix uninitialized variable
    51e0101ab9e9 block: fix conversion of GPT partition name to 7-bit
    03f075d56063 s390/traps: Fix test_monitor_call() inline assembly
    cdd9f58f7fe4 rapidio: fix an API misues when rio_add_net() fails
    181d4daaefb3 rapidio: add check for rio_add_net() in rio_scan_alloc_net()
    cd1bdcb77fdc wifi: nl80211: reject cooked mode if it is set along with other flags
    6a5e3b23054c wifi: cfg80211: regulatory: improve invalid hints checking
    d8786dfa9f45 x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
    61104ea20840 x86/cpu: Validate CPUID leaf 0x2 EDX output
    dafc649de271 x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
    421c91ba9099 platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
    63c2c523f5ca drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
    ffcc3f070263 ALSA: hda/realtek: update ALC222 depop optimize
    6ea0f0a47640 ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
    807789018186 gpio: aggregator: protect driver attr handlers against module unload
    7c1f36f9c9ac gpio: rcar: Use raw_spinlock to protect register access
    b1d95d733cd6 HID: appleir: Fix potential NULL dereference at raw event handle
    a3325fdbee9b Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
    6486abfcf891 drm/amdgpu: disable BAR resize on Dell G5 SE
    4be891399cdc drm/amdgpu: Check extended configuration space register when system uses large bar
    f618aeb6cad2 smb: client: Add check for next_buffer in receive_encrypted_standard()
    a56a6e8589a9 pfifo_tail_enqueue: Drop new packet when sch->limit == 0
    e38f9d761b34 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
    288fdb8dcb71 sched/core: Prevent rescheduling when interrupts are disabled
    3d67976d304e vmlinux.lds: Ensure that const vars with relocations are mapped R/O
    7cca31035c05 mptcp: always handle address removal under msk socket lock
    b66eb3f54ac3 phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
    f07c325f54c4 phy: tegra: xusb: reset VBUS & ID OVERRIDE
    d20b23a5412c net: enetc: correct the xdp_tx statistics
    ccce797d9052 net: enetc: update UDP checksum when updating originTimestamp field
    b68d88b79975 net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
    9bcb8cbc3e5d usbnet: gl620a: fix endpoint checking in genelink_bind()
    e3aea1dba97d i2c: npcm: disable interrupt enable bit before devm_request_irq
    c327a355a4ff drm/amd/display: Fix HPD after gpu reset
    922e18d67bc0 perf/core: Fix low freq setting via IOC_PERIOD
    fca3b89abc92 ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
    3d738b53ed6c ftrace: Avoid potential division by zero in function_stat_show()
    7163da88c07b x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
    2daabaa55c7c net: ipv6: fix dst ref loop on input in rpl lwt
    c0b11dc50590 net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
    dbd4f89a4a58 net: ipv6: fix dst ref loop on input in seg6 lwt
    634710a372ba net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
    8513e56e31fc include: net: add static inline dst_dev_overhead() to dst.h
    3e97606c954f seg6: add support for SRv6 H.L2Encaps.Red behavior
    86df97f030be seg6: add support for SRv6 H.Encaps.Red behavior
    bf5801cc24cc net/mlx5: IRQ, Fix null string in debug print
    b8e0dd7ff319 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
    0e70cec1839f tcp: Defer ts_recent changes until req is owned
    a3c25f8374c2 ipvs: Always clear ipvs_property flag in skb_scrub_packet()
    eba344580acb ASoC: es8328: fix route from DAC to output
    39a26120ad99 net: cadence: macb: Synchronize stats calculations
    718725496191 net: loopback: Avoid sending IP packets without an Ethernet header
    806fcc99e4c0 afs: Fix the server_list to unuse a displaced server rather than putting it
    9055fb0bb4f4 afs: Make it possible to find the volumes that are using a server
    ba335b157a6a afs: remove variable nr_servers
    1154e50e53e4 Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
    a340768d7311 ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
    a8f4ceb21f65 sunrpc: suppress warnings for unused procfs functions
    f36cf97e4978 RDMA/mlx5: Fix bind QP error cleanup flow
    66fee638e4dd scsi: core: Clear driver private data when retrying request
    668ef6c54ca7 scsi: core: Don't memset() the entire scsi_cmnd in scsi_init_command()
    4b49d939b5a7 ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
    802d342bf8bc ovl: pass ofs to creation operations
    be2343e08165 ovl: use wrappers to all vfs_*xattr() calls
    1cd7f84c88ae IB/mlx5: Set and get correct qp_num for a DCT QP
    9a7fc5641c6f x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
    b0c7cda8d636 mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
    099a31651850 mtd: rawnand: cadence: use dma_map_resource for sdma address
    0301f9b44877 mtd: rawnand: cadence: fix error code in cadence_nand_init()
    29853440da38 acct: block access to kernel internal filesystems
    5d5b936cfa4b acct: perform last write from workqueue
    d97d560f7d36 ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
    924b239f9704 nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
    872c7c7e57a7 drop_monitor: fix incorrect initialization order
    c0a9a9481591 tee: optee: Fix supplicant wait loop
    a3feeb1b4cb2 bpf: skip non exist keys in generic_map_lookup_batch
    3bb2204ec30f nvme/ioctl: add missing space in err message
    9f3891867e8e power: supply: da9150-fg: fix potential overflow
    ef305447885e arp: switch to dev_getbyhwaddr() in arp_req_set_public()
    e860d5103591 net: Add non-RCU dev_getbyhwaddr() helper
    2af45b1f2962 flow_dissector: Fix port range key handling in BPF conversion
    fbb727e4934a flow_dissector: Fix handling of mixed port and port-range keys
    65196ee66ec2 net: extract port range fields from fl_flow_key
    a94e59db1d89 geneve: Suppress list corruption splat in geneve_destroy_tunnels().
    cb15bb1bde0b gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
    f74f65601467 geneve: Fix use-after-free in geneve_find_dev().
    6847b3e40bb9 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
    718d0480ca3a ALSA: hda/realtek: Fixup ALC225 depop procedure
    71f427413d2d powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
    61a45806db46 powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
    b09957657d77 USB: gadget: f_midi: f_midi_complete to call queue_work
    006a4e9069a1 usb: dwc3: Fix timeout issue during controller enter/exit from halt state
    47cc53c3ebe3 usb: dwc3: Increase DWC3 controller halt timeout
    3c0e0aecb78c batman-adv: Drop unmanaged ELP metric worker
    6ad063461332 batman-adv: Drop initialization of flexible ethtool_link_ksettings
    d775f9e9e663 media: uvcvideo: Only save async fh if success
    e0360e009904 media: uvcvideo: Refactor iterators
    972f412da53b media: uvcvideo: Set error_idx during ctrl_commit errors
    c113bccf1f87 soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
    c3fa28e6cac8 soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
    4dd78251db13 soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
    10185d020c8f soc: mediatek: mtk-devapc: Switch to devm_clk_get_enabled()
    f03ad378249f kfence: skip __GFP_THISNODE allocations on NUMA systems
    8e19db074ab3 kfence: enable check kfence canary on panic via boot param
    b7792fe79fbe kfence: allow use of a deferrable timer
    0621d2599d6e tpm: Change to kvalloc() in eventlog/acpi.c
    906ac470b16c tpm: Use managed allocation for bios event log
    5e8bee0e4914 arm64: dts: mediatek: mt8183: Disable DSI display output by default
    4a06ed6b962b ASoC: renesas: rz-ssi: Add a check for negative sample_space
    8c4b9b0c3950 drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
    5211d75e2cb7 drm/probe-helper: Create a HPD IRQ event helper for a single connector
    f3b9fb276459 ksmbd: fix integer overflows on 32 bit systems
    a9042dbc1ed4 memcg: fix soft lockup in the OOM process
    4edae3ff6d4e mm: update mark_victim tracepoints fields
    a32ba399a030 media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
    e290d1fe37f7 crypto: testmgr - some more fixes to RSA test vectors
    add54f963938 crypto: testmgr - populate RSA CRT parameters in RSA test vectors
    40689219a28b crypto: testmgr - fix version number of RSA tests
    bd258be9a8be crypto: testmgr - Fix wrong test case of RSA
    8fbf27a746c3 crypto: testmgr - fix wrong key length for pkcs1pad
    4969dcc05bc3 arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
    c4041b6b0a7a pps: Fix a use-after-free
    26f2fdc47fea btrfs: avoid monopolizing a core when activating a swap file
    dc550af962b7 Revert "btrfs: avoid monopolizing a core when activating a swap file"
    caae54426402 x86/i8253: Disable PIT timer 0 when not in use
    3aa5254d8096 f2fs: fix to wait dio completion
    234549fb3db3 ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
    c97306464928 selftests: rtnetlink: update netdevsim ipsec output format
    28435f5d9d08 netdevsim: print human readable IP address
    810109436b28 parport_pc: add support for ASIX AX99100
    79cf08014ef3 serial: 8250_pci: add support for ASIX AX99100
    1840fb92baf4 can: ems_pci: move ASIX AX99100 ids to pci_ids.h
    d8ff250e085a nilfs2: protect access to buffers with no active references
    f51ff43c4c5a nilfs2: do not force clear folio if buffer is referenced
    1bf43414ccff nilfs2: do not output warnings when clearing dirty buffers
    c6ddb3848599 alpha: replace hardcoded stack offsets with autogenerated ones
    5fb8cda2fcea x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
    9c0a3aab4b8d kdb: Do not assume write() callback available
    22e19c8c5f6b drm/v3d: Stop active perfmon if it is being destroyed
    37054243cf5d drm/tidss: Clear the interrupt status for interrupts being disabled
    2b7db8abf84f drm/tidss: Fix issue in irq handling causing irq-flood issue
    29fa42197f26 ipv6: mcast: add RCU protection to mld_newpack()
    e24d225e4cb8 ndisc: extend RCU protection in ndisc_send_skb()
    a884f57600e4 openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
    d9366ac2f956 arp: use RCU protection in arp_xmit()
    40d8f2f2a373 neighbour: use RCU protection in __neigh_notify()
    44e359552378 neighbour: delete redundant judgment statements
    b870256dd2a5 ndisc: use RCU protection in ndisc_alloc_skb()
    28de355b63ad ipv6: use RCU protection in ip6_default_advmss()
    ce3c6165fce0 ipv4: use RCU protection in __ip_rt_update_pmtu()
    fc07a232326a net: ipv4: Cache pmtu for all packet paths if multipath enabled
    a7246d3949c2 selftest: net: Test IPv4 PMTU exceptions with DSCP and ECN
    7385291def47 Namespaceify mtu_expires sysctl
    686792179f20 Namespaceify min_pmtu sysctl
    4561343d2b6c ipv4: use RCU protection in inet_select_addr()
    50d356db0542 ipv4: use RCU protection in rt_is_expired()
    6e0d21491686 net: add dev_net_rcu() helper
    c22b8d77816e net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
    0e5ea98edc3b ipv4: add RCU protection to ip4_dst_hoplimit()
    60f54f0d4ea5 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
    a02540d4401f clocksource: Use pr_info() for "Checking clocksource synchronization" message
    4ae5e361537d clocksource: Replace cpumask_weight() with cpumask_empty()
    acfebfb2abf3 btrfs: fix hole expansion when writing at an offset beyond EOF
    e4291f26c501 mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
    9abfb2c8693d arm64: Handle .ARM.attributes section in linker scripts
    78be8f779b20 regmap-irq: Add missing kfree()
    40a35d14f3c0 partitions: mac: fix handling of bogus partition table
    4647cb4e0013 gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
    ede3fa7b0cb6 alpha: align stack for page fault and user unaligned trap handlers
    bf3f395b9c37 serial: 8250: Fix fifo underflow on flush
    19f3e16bc9f7 cgroup: fix race between fork and cgroup.kill
    4d832459170d efi: Avoid cold plugged memory for placing the kernel
    b737d6439113 alpha: make stack 16-byte aligned (most cases)
    f1767d255807 can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
    f7a43d1563ac can: c_can: fix unbalanced runtime PM disable in error path
    9fccb6b65510 USB: serial: option: drop MeiG Smart defines
    412458d7e92b USB: serial: option: fix Telit Cinterion FN990A name
    60f0765d673b USB: serial: option: add Telit Cinterion FN990B compositions
    95fcacb5b9a9 USB: serial: option: add MeiG Smart SLM828
    6878c61a3880 usb: cdc-acm: Fix handling of oversized fragments
    871619c2b78f usb: cdc-acm: Check control transfer buffer size before access
    9ee5bb1938f3 USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
    d3a67adb365c USB: hub: Ignore non-compliant devices with too many configs or interfaces
    d8e86700c8a8 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
    aeda961736f3 USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
    6afdad04f6c1 USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
    b605fd13b832 usb: core: fix pipe creation for get_bMaxPacketSize0
    1af4043ec5bc USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
    ef5e915db375 usb: dwc2: gadget: remove of_node reference upon udc_stop
    626ab15ddc4b usb: gadget: udc: renesas_usb3: Fix compiler warning
    6a902573f2ca usb: roles: set switch registered flag early on
    f4ca0cf536b1 perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
    45fa526b0f5a KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
    2e8f0f0e0097 batman-adv: Ignore neighbor throughput metrics in error case
    f0a16c6c7976 batman-adv: fix panic during interface removal
    6b7d69806c42 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
    8725882b0f69 orangefs: fix a oob in orangefs_debug_write
    848b58151775 x86/mm/tlb: Only trim the mm_cpumask once a second
    cd8de1f521d5 Grab mm lock before grabbing pt lock
    69b812149b8b vfio/pci: Enable iowrite64 and ioread64 for vfio pci
    20b7d9675437 PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
    59a707ad952e media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
    d485a8b22794 media: cxd2841er: fix 64-bit division on gcc-9
    ba842a609ff8 x86/xen: allow larger contiguous memory regions in PV guests
    5b750e76dfd5 xen: remove a confusing comment on auto-translated guest I/O
    d340047cf29b gpio: bcm-kona: Add missing newline to dev_err format string
    f66a5da15f14 gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
    54b0de7b6abe gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
    092dc83b9a3c drm/i915/selftests: avoid using uninitialized context
    88a3e6afaf00 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
    f443687ad20c team: better TEAM_OPTION_TYPE_STRING validation
    5bb4228c3226 vrf: use RCU protection in l3mdev_l3_out()
    80f70686857e ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
    2052b44cd0a6 HID: multitouch: Add NULL check in mt_input_configured
    efa8a261c575 NFSD: fix hang in nfsd4_shutdown_callback
    6f7cfee1a316 nfsd: clear acl_access/acl_default after releasing them
    e22a97700901 tty: xilinx_uartps: split sysrq handling
    59cf03ddf127 mptcp: prevent excessive coalescing on receive
    03b605ac1e5b ocfs2: check dir i_size in ocfs2_find_entry
    ad73b43e6908 memory: tegra20-emc: Correct memory device mask
    12a1cf9db178 gpio: xilinx: remove excess kernel doc
    9772e2e15482 net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
    3fec5d194fc9 MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
    1334c64a5d1d ptp: Ensure info->enable callback is always set
    0eda6b12a108 net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
    83db3d545d39 net/ncsi: wait for the last response to Deselect Package before configuring channel
    2ed6d46f8037 misc: fastrpc: Fix registered buffer page address
    820603335006 mtd: onenand: Fix uninitialized retlen in do_otp_read()
    10b3f947b609 NFC: nci: Add bounds checking in nci_hci_create_pipe()
    8f41df5fd4c1 nilfs2: fix possible int overflows in nilfs_fiemap()
    8aee4184c5b7 ocfs2: handle a symlink read error correctly
    5a1c86066f1b ocfs2: fix incorrect CPU endianness conversion causing mount failure
    c00e53672d7d pnfs/flexfiles: retry getting layout segment for reads
    f65ce06387f8 vfio/platform: check the bounds of read/write syscalls
    66325de71801 nvmem: core: improve range check for nvmem_cell_write()
    c897de3d1f4d nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
    f52f00efd8c0 crypto: qce - unregister previously registered algos in error path
    efae52c61150 crypto: qce - fix goto jump in error path
    14810fb99091 media: uvcvideo: Remove redundant NULL assignment
    74512c021525 media: uvcvideo: Fix event flags in uvc_ctrl_send_events
    1662c5812b84 media: ccs: Fix cleanup order in ccs_probe()
    66a2c461703e media: ccs: Fix CCS static data parsing for large block sizes
    d6fae50f5eb7 media: ov5640: fix get_light_freq on auto
    9a6c627f3fe4 media: mc: fix endpoint iteration
    9e6cd5f99496 soc: qcom: smem_state: fix missing of_node_put in error path
    1880c45ebe14 iio: light: as73211: fix channel handling in only-color triggered buffer
    22d1dcd0b053 media: ccs: Clean up parsed CCS static data on parse failure
    6bdbb75ffc6c xfs: Add error handling for xfs_reflink_cancel_cow_range
    4e9af1ddbc98 crypto: qce - fix priority to be less than ARMv8 CE
    231dfd6bb61e arm64: dts: qcom: sm8350: Fix MPSS memory length
    e7e06872144e x86/boot: Use '-std=gnu11' to fix build with GCC 15
    81a3a0c1a68f kbuild: Move -Wenum-enum-conversion to W=2
    2bce0a6a4433 scsi: storvsc: Set correct data length for sending SCSI command without payload
    73d3d3c66f10 scsi: qla2xxx: Move FCE Trace buffer allocation to user control
    ad88fd9ee93a nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
    662964484f8a nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
    d88422ccb97f PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
    abe03cd5d5b7 ALSA: hda/realtek: Enable headset mic on Positivo C6400
    94e418935e1d Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
    d24476777e8b mips/math-emu: fix emulation of the prefx instruction
    63b759c9680e dm-crypt: track tag_offset in convert_context
    84d6db1a7327 dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
    453a0a22ceb8 powerpc/pseries/eeh: Fix get PE state translation
    a3d92e7af72a MIPS: Loongson64: remove ROM Size unit in boardinfo
    48a6a4dfa5c8 serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
    6b7947990681 serial: sh-sci: Drop __initdata macro for port_cfg
    2d09d3c9afa2 soc: qcom: socinfo: Avoid out of bounds read of serial number
    5fa25ae6484b usb: gadget: f_tcm: Don't prepare BOT write request twice
    d5e48551866e usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
    45956a34f9a8 usb: gadget: f_tcm: Decrement command ref count on cleanup
    93facdc47dc6 usb: gadget: f_tcm: Translate error to sense
    61541d9b5a23 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
    7f44aa9d3960 wifi: rtlwifi: rtl8821ae: Fix media status report
    e27d77db198a HID: hid-sensor-hub: don't use stale platform-data on remove
    c0a158e7634a of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
    4f7c0deea1b3 of: Fix of_find_node_opts_by_path() handling of alias+path+options
    87141db6d148 of: Correct child specifier used as input of the 2nd nexus node
    a0d751d2d8ec perf bench: Fix undefined behavior in cmpworker()
    be042a185cc5 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    38287f779b34 blk-cgroup: Fix class @block_class's subsystem refcount leakage
    44bd016cbaa3 clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
    4e2996526679 clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
    175af15551ed clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
    4d8d1f443a6c clk: qcom: clk-alpha-pll: fix alpha mode configuration
    45d563356db6 clk: sunxi-ng: a100: enable MMC clock reparenting
    f26831839566 Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
    cf601a24120c Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    250164081da0 drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
    5098970ecc1d drm/komeda: Add check for komeda_get_layer_fourcc_list()
    e89f74ef6bee drm/amd/pm: Mark MM activity as unsupported
    224fa21f00fc KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
    7c4899239d0f KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
    b0e8b635a331 arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
    bc8ca18b8ef4 binfmt_flat: Fix integer overflow bug on 32 bit systems
    20ecbadad51a m68k: vga: Fix I/O defines
    592ffb238132 s390/futex: Fix FUTEX_OP_ANDN implementation
    61b4e072b7e8 drm/modeset: Handle tiled displays in pan_display_atomic.
    4e2de62318b9 leds: lp8860: Write full EEPROM, not only half of it
    fc7da1095247 cpufreq: s3c64xx: Fix compilation warning
    4defa9ebef14 tun: revert fix group permission check
    98a2c685293a netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
    d85d721f3225 x86/xen: add FRAME_END to xen_hypercall_hvm()
    aaa15fc4291b x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
    d308661a0f4e net: rose: lock the socket in rose_bind()
    5bb48702e946 net: atlantic: fix warning during hot unplug
    a6f3981d04d1 gpio: pca953x: Improve interrupt support
    61e7e18fa64c udp: gso: do not drop small packets when PMTU reduces
    540ffff7925b tg3: Disable tg3 PCIe AER on system reboot
    712e6ed39e5c gpu: drm_dp_cec: fix broken CEC adapter properties check
    256768b17e62 firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
    51df156e04e5 nvme: handle connectivity loss in nvme_set_queue_count
    cf30300a216a usb: xhci: Fix NULL pointer dereference on certain command aborts
    b27f10764d80 usb: xhci: Add timeout argument in address_device USB HCD callback
    d31d3dc92775 xfs: don't over-report free space or inodes in statvfs
    bd015e2e7f26 xfs: report realtime block quota limits on realtime directories
    d25041d4a3b2 gpio: xilinx: Convert gpio_lock to raw spinlock
    4489cce8e4e7 net/ncsi: fix locking in Get MAC Address handling
    8930834d1525 net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
    3f46fefab962 usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
    998b1fa6c218 usb: chipidea/ci_hdrc_imx: Convert to platform remove callback returning void
    9794ea40979b usb: chipidea: ci_hdrc_imx: use dev_err_probe()
    af431197516a x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
    c56ea30db33d platform/x86: acer-wmi: Ignore AC events
    78a88a1690bc Input: allocate keycode for phone linking
    b191b2b3b5ad selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
    f213bb330fc6 tipc: re-order conditions in tipc_crypto_key_rcv()
    c9b80829b001 mmc: sdhci-msm: Correctly set the load for the regulator
    4dddb00d0397 net: wwan: iosm: Fix hibernation by re-binding the driver around it
    5c60cdcff102 APEI: GHES: Have GHES honor the panic= setting
    3fa04850ddac i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
    0bae6625cabc wifi: iwlwifi: avoid memory leak
    578845229c4e net/mlx5: use do_aux_work for PHC overflow checks
    463f5f6402b9 HID: Wacom: Add PCI Wacom device support
    c16b96035c48 mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
    b2bd5857a0d6 tomoyo: don't emit warning in tomoyo_write_control()
    d280a12e9b87 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
    bafaee99fc23 mmc: core: Respect quirk_max_rate for non-UHS SDIO card
    9b560350aa7b tun: fix group permission check
    ecf6a4a55809 safesetid: check size of policy writes
    bb8ff054e19f printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
    99795e62e7a5 x86/amd_nb: Restrict init function to AMD-based systems
    23434fcf90b9 lockdep: Fix upper limit for LOCKDEP_*_BITS configs
    56135262c1f9 sched: Don't try to catch up excess steal time.
    13dae4fa17be btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
    367b72fa18b0 btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
    7e954b6bb95d btrfs: fix use-after-free when attempting to join an aborted transaction
    51bcf530c6dc btrfs: output the reason for open_ctree() failure
    bbb7f49839b5 usb: gadget: f_tcm: Don't free command immediately
    3ba8884a56a3 media: uvcvideo: Fix double free in error path
    3a7fda57b0f9 mptcp: consolidate suboption status
    83a3a5aeb1b1 usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
    bb52bce4c91c usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
    16d5669ff07f usb: dwc3: core: Defer the probe until USB power supply ready
    2cfbf53baeaf usb: gadget: f_tcm: Fix Get/SetInterface return value
    3c1f8dfa01b3 drivers/card_reader/rtsx_usb: Restore interrupt based detection
    d42168f109f9 net: usb: rtl8150: enable basic endpoint checking
    10eff770fd16 ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
    deec230cb835 ktest.pl: Check kernelrelease return in get_version
    5083a7ae4500 netfilter: nf_tables: reject mismatching sum of field_len with set key length
    d712ca4807ce NFSD: Reset cb_seq_status after NFS4ERR_DELAY
    b0938ffd39ae f2fs: Introduce linear search for dentries
    679bb865c881 hexagon: Fix unbalanced spinlock in die()
    8e83dbe9ff32 hexagon: fix using plain integer as NULL pointer warning in cmpxchg
    4bd72d9fe11d kconfig: fix memory leak in sym_warn_unmet_dep()
    5f45a419bdd1 kconfig: WERROR unmet symbol dependency
    ccc1287a02ea kconfig: deduplicate code in conf_read_simple()
    3e31777acf2d kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
    131f1604fa6b kconfig: require a space after '#' for valid input
    6bdf078908c3 kconfig: add warn-unknown-symbols sanity check
    4780a614f013 kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
    c48b8fc7f0a8 genksyms: fix memory leak when the same symbol is read from *.symref file
    bb28d02726ab genksyms: fix memory leak when the same symbol is added from source
    13310513f549 net: hsr: fix fill_frame_info() regression vs VLAN packets
    df3398504b97 net: sh_eth: Fix missing rtnl lock in suspend/resume path
    3ce32a9fb1d2 bgmac: reduce max frame size to support just MTU 1500
    ab2df791b1d4 vsock: Allow retrying on connect() failure
    a48ebcd853a4 perf trace: Fix runtime error of index out of bounds
    0dd6c67f6cfe ptp: Properly handle compat ioctls
    7d7d201eb3b7 net: davicom: fix UAF in dm9000_drv_remove
    cfb17f637562 net: netdevsim: try to close UDP port harness races
    1409b45d4690 net: rose: fix timer races against user threads
    c499bd77ca2a PM: hibernate: Add error handling for syscore_suspend()
    547ef7e8cbb9 ipmr: do not call mr_mfc_uses_dev() for unres entries
    6468f3a9842f net: fec: implement TSO descriptor cleanup
    5934bfaeaffe gpio: mxc: remove dead code after switch to DT-only
    8c640dd3d900 net: hns3: fix oops when unload drivers paralleling
    1787cd67bb94 ubifs: skip dumping tnc tree when zroot is null
    e5536677da80 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
    2943af7d72d7 dmaengine: ti: edma: fix OF node reference leaks in edma_driver
    c9cc70bca158 xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
    6be3ea508111 tools/bootconfig: Fix the wrong format specifier
    26e5c3c8d780 NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
    edcaf4156ced NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
    f6bae8cc42ab module: Extend the preempt disabled section in dereference_symbol_descriptor().
    2e2bb52b8e58 ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
    fe761befd845 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
    13186db840b9 scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
    6987e021b64c PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
    68ee578e6e31 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
    6f3c167de057 mtd: hyperbus: hbmc-am654: fix an OF node reference leak
    784a7f4a9efb mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
    c1aea4faa984 mtd: hyperbus: Make hyperbus_unregister_device() return void
    3b86841430a6 media: uvcvideo: Propagate buf->error to userspace
    235ab2be3572 media: camif-core: Add check for clk_enable()
    cc0d04ae127d media: mipi-csis: Add check for clk_enable()
    5bdd8b64153d media: i2c: ov9282: Correct the exposure offset
    8ab5c3af1406 media: i2c: imx412: Add missing newline to prints
    333f8f9b6667 media: marvell: Add check for clk_enable()
    a61cd3df84b3 PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
    55c326068f6b media: lmedm04: Handle errors for lme2510_int_read
    8bea20f4d630 media: rc: iguanair: handle timeouts
    0486d65804cc efi: sysfb_efi: fix W=1 warnings when EFI is not set
    8049a0845bfc of: reserved-memory: Do not make kmemleak ignore freed address
    ca36f0848eb8 memblock: drop memblock_free_early_nid() and memblock_free_early()
    d26e179d2cac xen/x86: free_p2m_page: use memblock_free_ptr() to free a virtual pointer
    708ce479ff3c RDMA/mlx5: Fix indirect mkey ODP page count
    95b4474c93a0 RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
    fe090e183d26 RDMA/mlx5: Remove iova from struct mlx5_core_mkey
    b9c5f50926e3 fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
    96cd8661f225 ARM: dts: mediatek: mt7623: fix IR nodename
    311afb2be167 arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
    eb3e76baaf1b arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
    312e11fc5060 arm64: dts: qcom: sm8350: correct sleep clock frequency
    8fbb052b3bd3 arm64: dts: qcom: sm8250: correct sleep clock frequency
    c990f5e0b2cb arm64: dts: qcom: sm6125: correct sleep clock frequency
    88c84e743d4c arm64: dts: qcom: sc7280: correct sleep clock frequency
    afc66a233ad9 arm64: dts: qcom: msm8994: correct sleep clock frequency
    9cc46ab94b61 arm64: dts: qcom: msm8916: correct sleep clock frequency
    09153a482e90 arm64: dts: qcom: msm8994: Describe USB interrupts
    31952ff5833c arm64: dts: qcom: msm8996: Fix up USB3 interrupts
    ea7232a05e10 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
    c3def10c610a memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
    d9f36f957bb2 memory: tegra20-emc: Support matching timings by LPDDR2 configuration
    0f3c0d94c815 memory: Add LPDDR2-info helpers
    4274acb5b996 arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
    cba8c5daa9d8 arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
    d098183961e0 arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
    b9a5544dbad5 arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
    032c92e01aaa arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
    2a28a21a925f arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
    e53ca458f543 rdma/cxgb4: Prevent potential integer overflow on 32bit
    160450e4908b RDMA/mlx4: Avoid false error about access to uninitialized gids array
    f92f10cdb7fa arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
    52a976a83dda arm64: dts: mediatek: mt8516: add i2c clock-div property
    6047c27de667 arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks
    bcc6c817e2ad arm64: dts: mediatek: mt8516: fix wdt irq type
    3ad0e4e15581 arm64: dts: mediatek: mt8516: fix GICv2 range
    9792f0c9880a arm64: dts: mt8183: set DMIC one-wire mode on Damu
    abbb15f54a35 ARM: at91: pm: change BU Power Switch to automatic mode
    4c6209efea22 padata: avoid UAF for reorder_work
    035ed9577b48 padata: add pd get/put refcnt helper
    f3e0b9f790f8 padata: fix UAF in padata_reorder
    e306eaaa3d78 bpf: Send signals asynchronously if !preemptible
    d6becd34dc65 perf report: Fix misleading help message about --demangle
    54b587874a7c perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
    ca0b62b2dc9a padata: fix sysfs store callback check
    b467ed29b586 crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
    778a73f8d38d crypto: hisilicon/sec2 - fix for aead invalid authsize
    37e032978e55 crypto: hisilicon/sec2 - fix for aead icv error
    017b2680816b crypto: hisilicon/sec2 - optimize the error return process
    8f268c476c83 crypto: hisilicon/sec - delete redundant blank lines
    0db426905cb4 crypto: hisilicon/sec - add some comments for soft fallback
    4086792b8883 ktest.pl: Remove unused declarations in run_bisect_test function
    4c45f82e101a ASoC: renesas: rz-ssi: Use only the proper amount of dividers
    49c5d851a2bf perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
    ac026a0ba486 perf header: Fix one memory leakage in process_bpf_prog_info()
    11491bb26fd9 perf header: Fix one memory leakage in process_bpf_btf()
    d79fc69eda73 ASoC: sun4i-spdif: Add clock multiplier settings
    6a5d02ae6ff8 libbpf: Fix segfault due to libelf functions not setting errno
    3c99e59404f3 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
    b8583b54455c net/rose: prevent integer overflows in rose_setsockopt()
    3cfabbb18810 tcp_cubic: fix incorrect HyStart round start detection
    ed8c0300f302 net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
    920f736e6c64 netfilter: nft_flow_offload: update tcp state flags under lock
    38646749d6e1 net: sched: Disallow replacing of child qdisc from one parent to another
    26bc6076798a net: avoid race between device unregistration and ethnl ops
    f023bf675814 net/mlxfw: Drop hard coded max FW flash image size
    0e2f1d93d287 net: let net.core.dev_weight always be non-zero
    0cc8fc34df84 selftests/landlock: Fix error message
    78eadb30f5ce clk: analogbits: Fix incorrect calculation of vco rate delta
    7d07de96990e wifi: cfg80211: adjust allocation of colocated AP data
    7427e4afbd16 wifi: cfg80211: Handle specific BSSID in 6GHz scanning
    23b54d193a90 selftests: harness: fix printing of mismatch values in __EXPECT()
    28063f72460d cpufreq: ACPI: Fix max-frequency computation
    965e41a93fce wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
    a1fccf6b72b5 landlock: Handle weird files
    b32a42383c26 landlock: Move filesystem helpers and add a new one
    ba079f94cb0a net/smc: fix data error when recvmsg with MSG_PEEK flag
    9394c1163c20 wifi: wlcore: fix unbalanced pm_runtime calls
    a7e98a85990a samples/landlock: Fix possible NULL dereference in parse_path()
    332ee5fc52e1 regulator: of: Implement the unwind path of of_regulator_match()
    bd099a2fa9be team: prevent adding a device which is already a team device lower
    f5072f5c806f clk: imx8mp: Fix clkout1/2 support
    68fb4aafe3bb cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
    0e833dc042b9 leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
    4efb30e564f2 dt-bindings: mfd: bd71815: Fix rsense and typos
    725d01fdde59 cpupower: fix TSC MHz calculation
    fc1750250f85 ACPI: fan: cleanup resources in the error path of .probe()
    f575806ef1da regulator: dt-bindings: mt6315: Drop regulator-compatible property
    a57bce750a52 HID: multitouch: fix support for Goodix PID 0x01e9
    25c30f902438 Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
    8c52d33d88ef HID: multitouch: Add support for lenovo Y9000P Touchpad
    4c436e8bd326 wifi: rtlwifi: pci: wait for firmware loading before releasing memory
    b96371339fd9 wifi: rtlwifi: fix memory leaks and invalid access at probe error path
    0eea81f30c6e wifi: rtlwifi: destroy workqueue at rtl_deinit_core
    8e2fcc68fbaa wifi: rtlwifi: remove unused check_buddy_priv
    ed3d742c2204 wifi: rtlwifi: remove unused dualmac control leftovers
    c8951a13d626 wifi: rtlwifi: remove unused timer and related code
    5f945d2595cd rtlwifi: replace usage of found with dedicated list iterator variable
    94b4c15bca53 dt-bindings: leds: class-multicolor: Fix path to color definitions
    f045124251f5 dt-bindings: leds: class-multicolor: reference class directly in multi-led node
    594cb8eeac49 dt-bindings: leds: Add multicolor PWM LED bindings
    7c09f7ba7ad3 dt-bindings: leds: Optional multi-led unit address
    e547ede9d118 dt-bindings: leds: Add Qualcomm Light Pulse Generator binding
    621600ed2ce5 dt-bindings: Another pass removing cases of 'allOf' containing a '$ref'
    b220d6b97a8b spi: dt-bindings: add schema listing peripheral-specific properties
    efb8b60b7990 dt-bindings: mmc: controller: clarify the address-cells description
    4960235d6662 spi: zynq-qspi: Add check for clk_enable()
    5a80bbc5df58 wifi: rtlwifi: usb: fix workqueue leak when probe fails
    643c584528ce wifi: rtlwifi: fix init_sw_vars leak when probe fails
    284a6f64f4cf wifi: rtlwifi: wait for firmware loading before releasing memory
    949845dfdb9b wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
    56e84ffaf3d8 wifi: rtlwifi: do not complete firmware loading needlessly
    eb288ab33fd8 ipmi: ipmb: Add check devm_kasprintf() returned value
    62f14b506f5b genirq: Make handle_enforce_irqctx() unconditionally available
    2396bc91935c drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
    a32ea3f982b3 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
    c589074b64dd drm/etnaviv: Fix page property being used for non writecombine buffers
    c7971fc03a06 sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
    b3a5ff8c4b6e sched/psi: Use task->psi_flags to clear in CPU migration
    105ff3024397 afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
    0a60270ee48c select: Fix unbalanced user_access_end()
    b9ca509e5b7f partitions: ldm: remove the initial kernel-doc notation
    8714ecb8fa55 nvme: Add error check for xa_store in nvme_get_effects_log
    113563188f22 pstore/blk: trivial typo fixes
    e3be8862d73c nbd: don't allow reconnect after disconnect
    2d43a6fcea0e block: retry call probe after request_module in blk_request_module
    6327dacfe6d6 block: deprecate autoloading based on dev_t
    effcbfb1e5ea fs: fix proc_handler for sysctl_nr_open
    a3eff27900d0 fs: move fs stat sysctls to file_table.c
    ca5d118b213e fs: move inode sysctls to its own file
    548fae8fb904 sysctl: share unsigned long const values
    7584027c80dc sysctl: use const for typically used max/min proc sysctls
    d96a8f8e86d1 hung_task: move hung_task sysctl interface to hung_task.c
    f3cfafcdb5bb afs: Fix directory format encoding struct
    ef5f2706364d afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
    e0bb89c44b56 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 8d6940f6a2c5fb81d3ed8dafb95b52a013174a57)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:02:41 -07:00
Vijay Anusuri
e4721dd506 vim: Upgrade 9.1.1115 -> 9.1.1198
This includes CVE-fix for CVE-2025-27423 and CVE-2025-29768

Changes between 9.1.1115 -> 9.1.1198
====================================
https://github.com/vim/vim/compare/v9.1.1115...v9.1.1198

(From OE-Core rev: 0ace90f2918496ceae32aebea05bb826d1e3dad6)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8e540bd287fd56e3a714f81395b59dd508a6d957)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:02:41 -07:00
Peter Marko
d4bb2231fa python3: patch CVE-2025-0938
Pick commit mentioned in NDV CVE report
b8b4b713c5
which is on 3.10 branch.

(From OE-Core rev: 70036b4ea0ab968adab82fc632bb967f95203de2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:02:41 -07:00
Steve Sakoman
d4411e521d poky.conf: add ubuntu2404 to SANITY_TESTED_DISTROS
(From meta-yocto rev: af63d6abd596da87881485fcfcfb21e6847f1801)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Robert Yang
27d7ee7bf6 libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt
Fixed:
IMAGE_INSTALL:append = " libxcrypt-compat"

$ bitbake <image> -cpopulate_sdk
file /usr/lib/libcrypt.so from install of libxcrypt-compat-dev-4.4.33-r0.0.aarch64 conflicts with file from package libcrypt-dev-4.4.33-r0.2.aarch64

Remove libcrypt.so like other files to fix the error.

(From OE-Core rev: dc0c7a8c3d1d4f02869b7f0d42f704fd24bf0dde)

(From OE-Core rev: 1172a71f2104454a13e64886adbdb381aa8d6e0e)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Yogita Urade
9da4f8dc2b xwayland: fix CVE-2022-49737
In X.Org X server 20.11 through 21.1.16, when a client application
uses easystroke for mouse gestures, the main thread modifies various
data structures used by the input thread without acquiring a lock,
aka a race condition. In particular, AttachDevice in dix/devices.c
does not acquire an input lock.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-49737

Upstream patch:
dc7cb45482

(From OE-Core rev: 740ea9019cf5cf309c5a4ef380eac17d21078ac8)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Yogita Urade
5076bd268c xserver-xorg: fix CVE-2022-49737
In X.Org X server 20.11 through 21.1.16, when a client application
uses easystroke for mouse gestures, the main thread modifies various
data structures used by the input thread without acquiring a lock,
aka a race condition. In particular, AttachDevice in dix/devices.c
does not acquire an input lock.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-49737

Upstream patch:
dc7cb45482

(From OE-Core rev: c6a8ad45174a416c4129deb210eab9b7721ce01d)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Vijay Anusuri
4df4248036 libxslt: Fix for CVE-2025-24855
Upstream-Commit: c7c7f1f78d

(From OE-Core rev: eced74ca3be7d6c47e7c50152a36e0b1e8eba74a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Vijay Anusuri
0490768a25 libxslt: Fix for CVE-2024-55549
Upstream-Commit: 46041b65f2

(From OE-Core rev: eae0c33539f302124544373b74bd6883467ff549)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Peter Marko
88aec329b8 tiff: mark CVE-2023-30774 as patched
[1] points tu issue [2] which was fixed by [3] together with lot of
other issues.
We already have this patch, so mark CVE-2023-30774 in it.

Also split CVE tag to separate entries.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-30774
[2] https://gitlab.com/libtiff/libtiff/-/issues/463
[3] https://gitlab.com/libtiff/libtiff/-/merge_requests/385

(From OE-Core rev: 87893c72efbba029c5f2a9e8e3fff126b2a0cb71)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Steve Sakoman
8660c1bd8d bitbake: cache: bump cache version
Version bump is needed after "siggen.py: Improve taskhash reproducibility"
otherwise there will be taskhash mismatch errors

(Bitbake rev: 046871d9fd76efdca7b72718b328d8f545523f7e)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-27 08:16:30 -07:00
Divya Chellam
b210ed67de vim: Upgrade 9.1.1043 -> 9.1.1115
This includes CVE-fix for CVE-2025-26603 and CVE-2025-1215

Changes between 9.1.1043 -> 9.1.1115
====================================
https://github.com/vim/vim/compare/v9.1.1043...v9.1.1115

(From OE-Core rev: acb88b244e89bc1300a24f60d0a44c21e0ab1af6)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Zhang Peng
52209c5a2b mpg123: fix CVE-2024-10573
CVE-2024-10573:
An out-of-bounds write flaw was found in mpg123 when handling crafted streams.
When decoding PCM, the libmpg123 may write past the end of a heap-located buffer.
Consequently, heap corruption may happen, and arbitrary code execution is not
discarded. The complexity required to exploit this flaw is considered high as
the payload must be validated by the MPEG decoder and the PCM synth before execution.
Additionally, to successfully execute the attack, the user must scan through the
stream, making web live stream content (such as web radios) a very unlikely attack vector.

Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-10573]

Upstream patches: [svn://scm.orgis.org/mpg123/branches/1.31-fixes@5442]

(From OE-Core rev: a227b80e29c5ba5d963acaa4ddb4b9ad45483bd5)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Ashish Sharma
ef3aca9b21 ruby: Fix CVE-2025-27219
Upstream-Status: Backport [9907b76dad]

(From OE-Core rev: 31d67739490ec2abf92328b3f0ceff22ce5d4974)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Hitendra Prajapati
d249d932ad grub: Fix multiple CVEs
Backport fixes for :

* CVE-2025-0622 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=2123c5bca7e21fbeb0263df4597ddd7054700726 && https://git.savannah.gnu.org/cgit/grub.git/commit/?id=9c16197734ada8d0838407eebe081117799bfe67 && https://git.savannah.gnu.org/cgit/grub.git/commit/?id=7580addfc8c94cedb0cdfd7a1fd65b539215e637
* CVE-2025-0624 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=5eef88152833062a3f7e017535372d64ac8ef7e1
* CVE-2025-0677_CVE-2025-0684_CVE-2025-0685_CVE-2025-0686_CVE-2025-0689 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=47b2dfc7953f70f98ddf35dfdd6e7f4f20283b10
* CVE-2025-0678_CVE-2025-1125 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=84bc0a9a68835952ae69165c11709811dae7634e
* CVE-2025-0690 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=dad8f502974ed9ad0a70ae6820d17b4b142558fc
* CVE-2025-1118 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=34824806ac6302f91e8cabaa41308eaced25725f

(From OE-Core rev: 5c4ee702f93f9bb4fcb557fd067242da16d63da2)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Hitendra Prajapati
7b99a13f6f grub: Fix multiple CVEs
Backport fixes for:

* CVE-2024-45774 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=2c34af908ebf4856051ed29e46d88abd2b20387f
* CVE-2024-45775 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=05be856a8c3aae41f5df90cab7796ab7ee34b872
* CVE-2024-45776 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=09bd6eb58b0f71ec273916070fa1e2de16897a91
* CVE-2024-45777 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=b970a5ed967816bbca8225994cd0ee2557bad515
* CVE-2024-45778_CVE-2024-45779 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=26db6605036bd9e5b16d9068a8cc75be63b8b630
* CVE-2024-45780 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=0087bc6902182fe5cedce2d034c75a79cf6dd4f3
* CVE-2024-45781 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=c1a291b01f4f1dcd6a22b61f1c81a45a966d16ba
* CVE-2024-45782_CVE-2024-56737 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=417547c10410b714e43f08f74137c24015f8f4c3
* CVE-2024-45783 - Upstream-Status: Backport from https://git.savannah.gnu.org/cgit/grub.git/commit/?id=f7c070a2e28dfab7137db0739fb8db1dc02d8898

(From OE-Core rev: 1bf2e89c932167b677051234d4e0cc4c52b0ee0c)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Peter Marko
12da3c7d02 libarchive: patch CVE-2025-25724
Pick commit referencing this MR which was merged to master.
Note that this commit also patched CVE-2025-1632 in bsdunzip, however
that utility was introduced only in 3.7.0, so that part is not
applicable in kirkstone.

(From OE-Core rev: ec837d3b21b4f8b98abac53e2833f1490ba6bf1e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Peter Marko
fcbb7d1cc7 puzzles: ignore three new CVEs for a different puzzles
As we just match on product by default, ignore three CVEs which are
for the "Puzzles" WordPress theme by ThemeREX (CPE themerex:puzzles).

(From OE-Core rev: 87326573c82ac1e8dc335319442236ef2341501e)

(From OE-Core rev: 48791ba2329ee930285e5ed8eff0f2535c70bec7)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Adapted to different kirkstone CVE_STATUS format.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Paulo Neves
8bfb7dabb7 bitbake: siggen.py: Improve taskhash reproducibility
file checksums are part of the data checksummed
to generate the task hash. The list of file checksums
was not ordered.

In this commit we make sure the task hash checksum takes
a list of checksum data that is ordered by unique file name
thus guaranteeing reproducibility.

(Bitbake rev: da5f41996687e18b78d9c9845e621d832115aa1e)

Signed-off-by: Paulo Neves <paulo@myneves.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:13:17 -07:00
Alessio Cascone
dcbf2ff5dc tzcode-native: Fix compiler setting from 2023d version
Starting from 2023d version, tzcode makefile does not use anymore "cc"
variable for C compiler, due to Makefile refactoring.
Replacing "cc" with "CC" fixes the issue.

(From OE-Core rev: 0216c229d5c60d0023b0a7d6e8ee41bdfa16f8ef)

Signed-off-by: Alessio Cascone <alessio.cascone@vimar.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b3cdfca5ef84ed2054faef9abddef3aeed930e17)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Priyal Doshi
9d5661c616 tzdata/tzcode-native: upgrade 2024b -> 2025a
(From OE-Core rev: 4dc7731d350eab8952330f01beb5acdba7d88bb9)

Signed-off-by: Priyal Doshi <pdoshi@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a15c4e6793c55c8084a61298ef3695e1db2f60cd)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Vijay Anusuri
3cd40cac2b libtasn1: upgrade 4.19.0 -> 4.20.0
* Noteworthy changes in release 4.20.0 (2025-02-01) [stable]
- The release tarball is now reproducible.
- We publish a minimal source-only tarball generated by 'git archive'.
- Update gnulib files and various build/maintenance fixes.
- Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET
OF elements

License-Update: file COPYING.LESSER renamed to COPYING.LESSERv2 & Copyright year updated to 2025

(From OE-Core rev: 0ff5d08053d92eeae5b2a23f8e0d7a280488723c)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Hitendra Prajapati
fd0eb2db0e ruby: Fix CVE-2025-27220
Upstream-Status: Backport from cd1eb08076

(From OE-Core rev: 44665939783cb2b32f5ade1772e0ceef47f9a853)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Deepesh Varatharajan
e9f1ad6922 binutils: Fix CVE-2025-0840
PR32560 stack-buffer-overflow at objdump disassemble_bytes

Backport a patch from upstream to fix CVE-2025-0840
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893]

(From OE-Core rev: e12ee4b1713aa25465aa3f866d345d84e9eb948a)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Vijay Anusuri
079c58a500 openssh: Fix CVE-2025-26465
Upstream-Status: Backport from 0832aac795

(From OE-Core rev: 934c212859e12235599835e8cfd8857e4be44ff8)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-13 08:50:03 -07:00
Ross Burton
d103d2df50 ref-manual: don't refer to poky-lsb
This was removed in 2019, so swap it for poky-altcfg.

(From yocto-docs rev: 9b4c36f7b02dd4bedfec90206744a1e90e37733c)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7f7f6570befdda280c174a5f9776b20f53f3ea0d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Ross Burton
bbb26ab250 Remove all mention of core-image-lsb
core-image-lsb was removed in 2019[1], so remove all of the  incredibly
obsolete references in the documentation.

[1] oe-core fb064356af615d67d85b65942103bf943d84d290

(From yocto-docs rev: 6001f1baa513566639abee86376dc72748f3cd34)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 062445a49919eff117b5478c1fb18d125c1f895c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Lee Chee Yang
ea1e84e8c1 migration-guides: add release notes for 4.0.25
(From yocto-docs rev: da811a5e6cf298bc63157814d57befdc125d9d32)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4649514cdfae496f43711d6b830a0a835c3a1534)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Johannes Kauffmann
a3dc9e0f84 mesa: Fix missing GLES3 headers in SDK sysroot
Building weston with core-image-weston SDK fails:
```
../libweston/renderer-gl/gl-shader-config-color-transformation.c:29:10: fatal error: GLES3/gl3.h: No such file or directory
   29 | #include <GLES3/gl3.h>
      |          ^~~~~~~~~~~~~
```

Both GLES2 and GLES3 implementations are contained in libGLESv2.so.2,
which is packaged in libgles2-mesa. However, the headers are split
between libgles2-mesa-dev and libgles3-mesa-dev, which is why the
GLES3 headers end up missing in the SDK sysroot.

Add a dependency so the GLES3 headers are properly associated with
the GLES3 implementation.

(From OE-Core rev: 7e1308ec413e69a8427ac5998431005d9e4b8033)

(From OE-Core rev: 0d9f2fcc2058407eb138297d9f8f12595851b963)

Signed-off-by: Tom Hochstein <tom.hochstein@oss.nxp.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
cb4d8ec033 xwayland: Fix CVE-2025-26601
The patches are copied from xserver-xorg recipe.
CVE reported for both and patches apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/16a1242d &
https://gitlab.freedesktop.org/xorg/xserver/-/commit/f52cea2f &
https://gitlab.freedesktop.org/xorg/xserver/-/commit/8cbc90c8 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/c2857989

(From OE-Core rev: 58f5a6a28d353f14c672bb99820608ec82f05e6e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
fb3ba2fa42 xwayland: Fix CVE-2025-26600
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/6e0f332b

(From OE-Core rev: b02bf5f9abb4d2a514f9ea883cd1fe6057367c92)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
b589fab5bb xwayland: Fix CVE-2025-26599
The patches are copied from xserver-xorg recipe.
CVE reported for both and patches apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/c1ff84be & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b07192a8

(From OE-Core rev: d79cd91d2abc1b0e9e1e47d18af140d351dce298)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
d828f38a4e xwayland: Fix CVE-2025-26598
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bba9df1a

(From OE-Core rev: f01c281b94ff137003ef108e33a8c3230c541c46)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
d99c2b9b65 xwayland: Fix CVE-2025-26597
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/0e4ed949

(From OE-Core rev: a7f4c6b1946e7215d8df561340d7a1cd0b2d5c27)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
775d602327 xwayland: Fix CVE-2025-26596
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/80d69f01

(From OE-Core rev: 45738e56aaf5dac1a471cb37088d3cd24764156d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
b48431c424 xwayland: Fix CVE-2025-26595
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/11fcda87

(From OE-Core rev: e0768162f0ece29392d4f387d263d62dd4083836)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
3cc6f0bb5c xwayland: Fix CVE-2025-26594
The patches are copied from xserver-xorg recipe.
CVE reported for both and patches apply on both.

Upstream-Commit: https://gitlab.freedesktop.org/xorg/xserver/-/commit/01642f26 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b0a09ba6

(From OE-Core rev: 2d8bf72c892a3a6422e2a294fb6528ff67971e6d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
0f565d1c27 xwayland: Fix CVE-2024-9632
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: ba1d14f8ef

(From OE-Core rev: 2158a34839068b878344d214d3fc9feeb17e504a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
46014acb66 xwayland: Fix CVE-2024-31083
The patches are copied from xserver-xorg recipe.
CVE reported for both and patches apply on both.

Upstream-Commit:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdca6c3d1f5057ee & https://gitlab.freedesktop.org/xorg/xserver/-/commit/337d8d48b618d4fc

(From OE-Core rev: 1c4b1e7877210243707a91d6a9d37ed4546bc8a7)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
57a80e447e xwayland: Fix CVE-2024-31081
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: 3e77295f88

(From OE-Core rev: 3575ad718c8ea7d808247842df19982f00725187)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
4a8c873ccf xwayland: Fix CVE-2024-31080
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: 96798fc196

(From OE-Core rev: 4e41b1c8cccd3b2f359ee949cad402b9418f5983)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
3bbaf11178 xwayland: Fix CVE-2024-21886
The patches are copied from xserver-xorg recipe.
CVE reported for both and patches apply on both.

Upstream-Commit:
bc1fdbe465
& 26769aa71f

(From OE-Core rev: 77487fb0756951e29628f41ff00db12a5f9d7c27)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Vijay Anusuri
b442e01822 xwayland: Fix CVE-2024-21885
Patch copied from xserver-xorg recipe.
CVE reported for both and patch apply on both.

Upstream-Commit: 4a5e9b1895

(From OE-Core rev: 4b0f6aaa994eeab5d18211ace8034ec8b92b7419)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Peter Marko
2159b5f8ae libxml2: mark patch as fixing CVE-2025-27113
This vulnerability has now a CVE assigned.

(From OE-Core rev: 204ff9dd9c62a8a346e89880b2e15a4c0e9ad6e0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-08 06:35:36 -08:00
Hitendra Prajapati
9c934f60ce elfutils: Fix multiple CVEs
Backport fixes for:

* CVE-2025-1352 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=2636426a091bd6c6f7f02e49ab20d4cdc6bfc753
* CVE-2025-1372 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=73db9d2021cab9e23fd734b0a76a612d52a6f1db

(From OE-Core rev: 8ea258ad9c83be5d9548a796f7dda4ac820fc435)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Guocai He
4e4cac541d xz: Update SRC_URI
Update SRC_URI for xz.
The the tarball of xz-.tar.gz has been changed from
https://tukaani.org/xz/xz-.tar.gz to
https://sourceforge.net/projects/lzmautils/files/xz-.tar.gz

(From OE-Core rev: 3f0803557ffa0fae557895f955ab2dcac38d7262)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Guocai He
9f6c004cc7 tzcode: Update SRC_URI
Update SRC_URI for tzcode.
Update the http to https in SRC_URI to fix the do_fetch issue.

(From OE-Core rev: b663540d143b0e5fcb9ceeec45cde7fe3e68f9bb)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Moritz Haase
7c77eacfa7 meta: Enable '-o pipefail' for the SDK installer
When testing a Yocto SDK installer on Alpine 3.21, we recently ended up with a
broken SDK. One of the commands the relocation script calls in a piped
multi-command chain failed (see [0]), but the installer did not realize that -
since it doesn't use 'set -o pipefail'. Thus, the error was never reported to
the user and the installer claimed to have set up the SDK correctly - which
wasn't the case.

Given that the SDK installer is a POSIX-compliant shell script and that the
'pipefail' option used to be missing from the standard, it's not surprising that
it isn't used. Thankfully however, in June of 2024, a new version of POSIX
(POSIX.1-2024) was released - and that one finally includes the 'pipefail'
option (see [1]). A number of shells already support it, so let's enable it if
available to make the SDK installer more robust.

The change has been tested locally using SDK installers for internal projects,
based on both Kirkstone and Scarthgap.

[0]: https://gitlab.alpinelinux.org/alpine/aports/-/issues/16797
[1]: https://pubs.opengroup.org/onlinepubs/9799919799.2024edition/utilities/V3_chap02.html#set

(From OE-Core rev: 1cb4b41c7faf77fcc347b1276d86d4288968c926)

(From OE-Core rev: 1de469f1ffb1680e3a75da2c3895fb1e4f43859f)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 10dce263f0)
Signed-off-by: Akash Hadke <akash.hadke27@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Libo Chen
c1e070df6b virglrenderer: fix do_fetch error
Update SRC_URI to fix the following error:
WARNING: virglrenderer-native-0.9.1-r0 do_fetch: Failed to fetch URL
git://anongit.freedesktop.org/git/virglrenderer;branch=branch-0.9.1,
attempting MIRRORS if available

(From OE-Core rev: 72450859dd5ee5395b64917516f185a2eed52775)

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Jiaying Song
a84c9d6623 boost: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: boost-native-1.86.0-r0 do_fetch: Checksum failure encountered with download of https://boostorg.jfrog.io/artifactory/main/release/1.86.0/source/boost_1_86_0.tar.bz2 - will attempt other sources if available

(From OE-Core rev: 3b4c5ce6b89477307f3a2c30c7e275473b0c9f00)

Signed-off-by: Jiaying Song <jsong-cn@ala-lpggp7.wrs.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

backport to kirkstone.
Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Narpat Mali
aaf405efd5 systemd: upgrade 250.5 -> 250.14
Latest stable branch update which includes 396 commits and the full
list of changes can be found at:
https://github.com/systemd/systemd-stable/compare/v250.5...v250.14

All the patches were refreshed with devtool.

Backported this upstreamed patch to resolve the compile error while
building systemd with qemumips machine.
- 0001-core-fix-build-when-seccomp-is-off.patch

These 2 below patches were modified to resolve the merge conflicts
introduced by systemd v250.14 version:
1. 0001-Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-to-.patch
- This patch was just adjusted based on the systemd v250.14 version.

2. 0001-pass-correct-parameters-to-getdents64.patch
- For this patch, there was a commit reverted as part of the v250.8 tag:
51089e007f

These below 6 patches were dropped as systemd v250.14 already has
the changes:
- 0001-shared-json-allow-json_variant_dump-to-return-an-err.patch
- CVE-2022-3821.patch
- CVE-2022-4415-1.patch
- CVE-2022-4415-2.patch
- CVE-2022-45873.patch
- CVE-2023-7008.patch

(From OE-Core rev: 371d030a665e3c963a586ab02d10f1f36b225435)

Signed-off-by: Narpat Mali <narpat.falna@gmail.com>
Signed-off-by: Randy Macleod <randy.macleod@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
e62a43d19c bind: Upgrade 9.18.28 -> 9.18.33
Includes security fixes for CVE-2024-12705 CVE-2024-11187 and other bug
fixes

Release Notes:
https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-33
https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-32
https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-31
https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-30
https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-29

(From OE-Core rev: 3488171fb594a28f8e9ed110e94c6a191f8f390e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
181051aa56 xserver-xorg: Fix for CVE-2025-26601
Upstream-Status: Backport from
https://gitlab.freedesktop.org/xorg/xserver/-/commit/16a1242d &
https://gitlab.freedesktop.org/xorg/xserver/-/commit/f52cea2f &
https://gitlab.freedesktop.org/xorg/xserver/-/commit/8cbc90c8 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/c2857989

(From OE-Core rev: edc4a85c1aa5a137d4f5d8fbc74135c6805511db)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
7c9d09d47c xserver-xorg: Fix for CVE-2025-26600
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/6e0f332b

(From OE-Core rev: 4227ae54a29ca8b454e56ffd27de2bbce00b6b89)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
b4512e5691 xserver-xorg: Fix for CVE-2025-26599
Upstream-Status: Backport from
https://gitlab.freedesktop.org/xorg/xserver/-/commit/c1ff84be & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b07192a8

(From OE-Core rev: c013fec3e5dd86544366308f53a031b080b140c6)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
a671186986 xserver-xorg: Fix for CVE-2025-26598
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/bba9df1a

(From OE-Core rev: 645ad1bcf8675873a7ab4778ffd2dd59dbb7b037)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
8e5a4d12ba xserver-xorg: Fix for CVE-2025-26597
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/0e4ed949

(From OE-Core rev: 9d095e34da2adde63358a878cfac45ea28727bdf)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
ed888d5c11 xserver-xorg: Fix for CVE-2025-26596
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/80d69f01

(From OE-Core rev: d510d87d9bb3e3489a4482dd0ce66e4bc7622ca0)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
ee975a7100 xserver-xorg: Fix for CVE-2025-26595
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/11fcda87

(From OE-Core rev: 78d718f0a683f9fb81aa24b39f148d2acf2e1fc6)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Vijay Anusuri
7a3fba1587 xserver-xorg: Fix for CVE-2025-26594
Upstream-Status: Backport from
https://gitlab.freedesktop.org/xorg/xserver/-/commit/01642f26 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b0a09ba6

(From OE-Core rev: f45b068860b1be1b3dadd58f8f787953a2951405)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-04 08:46:02 -08:00
Marta Rybczynska
47cb7bfa66 vulnerabilities/classes: remove references to cve-check text format
The text format has been removed, so also remove references and examples
using this format. Replace with examples with the JSON format.

(From yocto-docs rev: 9798689e4f4b74163c2e8594f3d1ce082d295aa1)

Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a52cd7bcadccc53e982f90d6e170d00798322597)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Divya Chellam
3a36dce7e5 vim: Upgrade 9.1.0764 -> 9.1.1043
This includes CVE-fix for CVE-2025-22134 and CVE-2025-24014

Changes between 9.1.0764 -> 9.1.1043
====================================
https://github.com/vim/vim/compare/v9.1.0764...v9.1.1043

(From OE-Core rev: 73b5570a16708d1e749b1ec525299d10557cbf56)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Archana Polampalli
8167a4a932 ffmpeg: fix CVE-2025-25473
FFmpeg git master before commit c08d30 was discovered to contain a NULL pointer
dereference via the component libavformat/mov.c.

(From OE-Core rev: 599ee3f195bc66d57797c121fa0b73a901d6edfa)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Archana Polampalli
89037ea118 ffmpeg: fix CVE-2024-35369
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module,
a potential security vulnerability exists due to insufficient validation of
certain parameters when parsing Speex codec extradata. This vulnerability
could lead to integer overflow conditions, potentially resulting in undefined
behavior or crashes during the decoding process.

(From OE-Core rev: 3efef582892a5a9286041837098b80aa59d1b688)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Archana Polampalli
7b6ce37e5d ffmpeg: fix CVE-2024-28661
(From OE-Core rev: cbe8929662f8ea873a3686517516bc5754a3cd18)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Archana Polampalli
5356d3a7e5 ffmpeg: fix CVE-2024-36618
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library
which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.

(From OE-Core rev: 46680bed23ef6f529c7e554b5611a7c098fce8a9)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Archana Polampalli
ec48edde27 gstreamer1.0-rtsp-server: fix CVE-2024-44331
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c
allows remote attackers to cause a denial of service via a series of specially crafted
hexstream requests.

(From OE-Core rev: ce328462a12eeaa59994e2236071aa17a083c263)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Peter Marko
b52d1a1317 ffmpeg: ignore CVE-2024-7272
This vulnerability was introduced in 5.1, so 5.0.1 is not affected.

(From OE-Core rev: ea6e581067cafd5f367c68871bc312d3ba11b4da)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Peter Marko
3a97af18b1 ffmpeg: ignore 5 CVEs
There is no release which is vulnerable to these CVEs.
These vulnerabilities are in new features being developed and were fixed
before release.

NVD most likely does not accept CVE rejection from a non-maintainer and
non-reporter, so ignoring this CVE should be acceptable solution.

(From OE-Core rev: 220a05e27913bf838881c3f22a17d0409c5154a9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hitendra Prajapati
be7617de69 libcap: fix CVE-2025-1390
Upstream-Status: Backport from https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=1ad42b66c3567481cc5fa22fc1ba1556a316d878

(From OE-Core rev: 142715b83fb2c5f4dfeeab2c6e7feccecd1ca46f)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Peter Marko
ccfa191e39 libxml2: patch CVE-2025-24928
Pick commit fomr 2.12 branch.

(From OE-Core rev: 3ccd936adb928612c9721768708534350aeee351)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Peter Marko
f765c28fb3 libxml2: patch CVE-2024-56171
Pick commit from 2.12 branch.

(From OE-Core rev: ab804cd27ecf7ee65a9feea477140502ecbc0d73)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Peter Marko
533c0f62e1 libxml2: fix compilation of explicit child axis in pattern
This was reported as sucurity fix in
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.10
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6

(From OE-Core rev: 0dc99e25c16a1e74aa80ca20132609990bb9dff7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Kai Kang
a2f2b93129 Revert "ovmf: Fix CVE-2023-45236"
This reverts commit a9cd3321558e95f61ed4c5eca0dcf5a3f4704925.

The fix for CVE-2023-45237 has been reverted. And the fix for
CVE-2023-45236 depends on it. So revert it too.

(From OE-Core rev: c61e31f192837b05bc309a05aef95c3be5b44997)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Kai Kang
4b020e6514 Revert "ovmf: Fix CVE-2023-45237"
This reverts commit 6f8bdaad9d22e65108f859a695277ce1b20ef7c6.

his reverts commit 4c2d3e3730.

The fix for CVE-2023-45237 causes ovmf firmware not support pxe boot
any more and no boot item in OVMF menu such as

    UEFI PXEv4 (MAC address)

It has not been fixed by ovmf upstream and an issue has been created on

https://github.com/tianocore/tianocore.github.io/issues/82

Revert the fixes for now.

(From OE-Core rev: d3f399f54042efc6f4ca2092dd11819ae1f7c51f)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
ecd87254c8 u-boot: fix CVE-2024-57259
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.

https://nvd.nist.gov/vuln/detail/CVE-2024-57259

(From OE-Core rev: e4b713ff07695487cc9307ffc3576a11775cde4d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
644ddcb993 u-boot: fix CVE-2024-57258
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1
occur for a crafted squashfs filesystem via sbrk, via request2size,
or because ptrdiff_t is mishandled on x86_64.

https://nvd.nist.gov/vuln/detail/CVE-2024-57258

(From OE-Core rev: b4bf3ba66052db7a311ac696563a8a0f9c585600)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
86f0ab4d07 u-boot: fix CVE-2024-57257
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with deep symlink nesting.

https://nvd.nist.gov/vuln/detail/CVE-2024-57257

(From OE-Core rev: 5ed8ad78bcce836aa8894de7a1d7fdf719e5bbca)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
c54a2f894e u-boot: fix CVE-2024-57256
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1
occurs for zalloc (adding one to an le32 variable) via a crafted ext4
filesystem with an inode size of 0xffffffff, resulting in a malloc of
zero and resultant memory overwrite.

https://nvd.nist.gov/vuln/detail/CVE-2024-57256

(From OE-Core rev: 534aa63726f31241e3a9d4aa70d4005fa0300133)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
7e46bdecf4 u-boot: fix CVE-2024-57255
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1
occurs via a crafted squashfs filesystem with an inode size of 0xffffffff,
resulting in a malloc of zero and resultant memory overwrite.

https://nvd.nist.gov/vuln/detail/CVE-2024-57255

(From OE-Core rev: 687b6e0a166d7dc999b7d226a9bd68155f59a03a)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Hongxu Jia
fcaac44489 u-boot: fix CVE-2024-57254
An integer overflow in sqfs_inode_size in Das U-Boot before
2025.01-rc1 occurs in the symlink size calculation via a
crafted squashfs filesystem.

https://nvd.nist.gov/vuln/detail/CVE-2024-57254

(From OE-Core rev: 956836ab347e9112be0f8892b1b82c4bcb17990c)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Sakib Sajal
83e5ad004a u-boot: fix CVE-2022-2347 and CVE-2022-30790
Backport appropriate patches to fix CVE-2022-2347 and CVE-2022-30790.

(From OE-Core rev: 7a5220a4877cd4d3766728e8a3525c157b6167fb)

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Carlos Dominguez
d552f85037 u-boot: Fix CVE-2022-30767
This patch mitigates the vulnerability identified via CVE-2019-14196.
The previous patch was bypassed/ineffective, and now the vulnerability
is identified via CVE-2022-30767. The patch removes the sanity check
introduced to mitigate CVE-2019-14196 since it's ineffective.
filefh3_length is changed to unsigned type integer, preventing negative
numbers from being used during comparison with positive values during
size sanity checks.

(From OE-Core rev: b7072637ba110718714745a01d67e1b6b0096165)

Signed-off-by: Carlos Dominguez <carlos.dominguez@windriver.com>

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
Antonin Godard
975fa48315 Add favicon for the documentation html
Import the favicon from https://www.yoctoproject.org/, convert it to
16x16 (as per the Sphinx documentation) to make a 1291B image of the
Yocto logo.

(From yocto-docs rev: 73119a723b48a4038479591f0443c5acb3d21337)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e3ee43e6d70685a2404aae2d60557a42879b0bb1)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:54 -08:00
Antonin Godard
2b7619fe2b contributor-guide/submit-changes: add policy on AI generated code
Based on message by Richard Purdie on the yocto-docs list:
https://lists.yoctoproject.org/g/docs/message/6300

Re-formatted for the Yocto Project documentation syntax.

(From yocto-docs rev: 50eae3ab433ada5c3863d880f11e2b2bcbd46b94)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a72dd13e6841b621c9e8f904dfaa440c186d2959)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:54 -08:00
Mingli Yu
59e04621c9 procps: replaced one use of fputs(3) with a write(2) call
This patch is ported from a merge request shown below,
and the following represents the original commit text.

------------------------------------------------------
top: In the bye_bye function, replace fputs with the write interface.

When top calls malloc, if a signal is received, it will
call sig_endpgm to process the signal. In the bye_bye function, if the
-b option is enable, the Batch variable is set, the fputs function
will calls malloc at the same time. The malloc function is not reentrant, so
it will cause the program to crash.

(From OE-Core rev: 573f5b2d8fec9f8a4ed17e836ef3feeb6de62e5a)

Signed-off-by: Shaohua Zhan <shaohua.zhan@windriver.com>
------------------------------------------------------

Reference(s):
https://gitlab.com/procps-ng/procps/-/merge_requests/127

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:54 -08:00
Richard Purdie
73aef33dfa scritps/runqemu: Ensure we only have two serial ports
I have a theory that some of the console boot issues we're seeing are due to
starting images with three serial ports yet only starting gettys on two of them.

This means that occasionally, depending on the port numbering we may not get
a login prompt on the console we expect it on.

To fix this, change the runqemu code so that if serial ports are passed in on
the commandline (as is the case in automated testing), we don't add any other
GUI serial consoles.

We do need to make sure we do have at least two serial ports since we don't want
getty timeout warnings.

(From OE-Core rev: 44e1279970d306b0da4fcc11f9e780915f481819)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1b0348535dce3b776efbcf26406b94730a51eb85)
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Aleksandar Nikolic
3b0b758d2e scripts/install-buildtools: Update to 4.0.24
Update to the 4.0.24 release of the 4.0 series for buildtools.

(From OE-Core rev: 93b1e2cbee96bd8731a5d5d0fe5462c2518fe8a7)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Archana Polampalli
0fb074b621 ffmpeg: fix CVE-2024-36617
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

(From OE-Core rev: aec2ad743893d72d46c79701a0dac982931e3171)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Archana Polampalli
2133671f72 ffmpeg: fix CVE-2024-36616
An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1
allows attackers to cause a denial of service in the application via a crafted VQA file.

(From OE-Core rev: 93a1e2fd2bb42977339510ef7d71288a88a34ab8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Archana Polampalli
945621f3ce ffmpeg: fix CVE-2024-36613
FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library
allowing for an integer overflow, potentially resulting in a denial-of-service (DoS)
condition or other undefined behavior.

(From OE-Core rev: 1af53c8dd20662e720ac4dad31833a9d776b795a)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Archana Polampalli
f2a425625c ffmpeg: CVE-2025-0518
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read
Sensitive Constants Within an Executable. This vulnerability is associated with
program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .
This issue affects FFmpeg: 7.1. Issue was
fixed:  b5b6391d64
b5b6391d64
This issue was discovered by: Simcha Kosman

(From OE-Core rev: 52cbeaa086d2cc0c0aae46deb4193ccb5427ecdc)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Archana Polampalli
0730523542 gnutls: fix CVE-2024-12243
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate
data can take excessive time, leading to increased resource consumption.
This flaw allows a remote attacker to send a specially crafted certificate, causing
GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

(From OE-Core rev: 5fbe46de6d2e3862316cf486503f18e616c3c0a7)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Divya Chellam
138ab1c7df ruby: fix CVE-2024-41946
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS
vulnerability when it parses an XML that has many entity expansions
with SAX2 or pull parser API. The REXML gem 3.3.3 or later include
the patch to fix the vulnerability.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-41946

Upstream-patch:
033d1909a8

(From OE-Core rev: b0e74fd8922bba8e954a223ec46de5c33d2ff743)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Vijay Anusuri
553a8e2ab3 libxml2: Fix for CVE-2022-49043
Upstream-Status: Backport [5a19e21605]

Reference:
https://access.redhat.com/security/cve/cve-2022-49043

(From OE-Core rev: 82b6c943bb6435171d1924cbebe794b901eb3705)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Peter Marko
0160cb7751 libpcre2: ignore CVE-2022-1586
This CVE is fixed in 10.40
NVD wrongly changed <10.40 to =10.40 when adding debian_linux=10.0

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-1586#VulnChangeHistorySection

(From OE-Core rev: 63cbfcd0262d65c66762aa6a8b17b8e8b809737f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Peter Marko
6f864dc117 subversion: ignore CVE-2024-45720
Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-45720

This CVE is relevant only for subversion running on Windows.

(From OE-Core rev: 52cbf6b96952896b16dad34d9eb215fcab88ded2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Reviewed-by: Sofiane Hamam <sofiane.hamam@smile.fr>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-24 07:00:53 -08:00
Steve Sakoman
b5aa03f336 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 5a794fd244f7fdeb426bd5e3def6b4effc0e8c62)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:08:13 -08:00
Steve Sakoman
285e878650 poky.conf: bump version for 4.0.25
(From meta-yocto rev: 2999fecd926976a1ea517c14e5dee996649dc80a)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Lee Chee Yang
f93a02c236 migration-guides: add release notes for 4.0.24
(From yocto-docs rev: c6dce0c77481dee7b0a0fcdc803f755ceccef234)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1c848b4104ee0ba9b07cdb424bb829d14f9982d7)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Simon A. Eugster
c00faeeb6e documentation: Fix typo in standards.md
(From yocto-docs rev: cdcc30d9afad319c1a073a3bdffd439b6cd999c7)

Signed-off-by: "Simon A. Eugster" <simon.eu@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e6745669cc26de8f61d5d1ccdd5a95b552eece97)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Joshua Watt
2492bf8803 classes-global/insane: Look up all runtime providers for file-rdeps
Uses the new foreach_runtime_provider_pkgdata() API to look up all
possible runtime providers of a given dependency when resolving
file-rdeps. This allows the check to correctly handle RPROVIDES for
non-virtual dependencies

(From OE-Core rev: 018fa1b7cb5e6a362ebb45b93e52b0909a782ac9)

(From OE-Core rev: 0ff31972b60dda5d8bada2ffb428cc54bb49e8cf)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Joshua Watt
6f26093d14 lib/packagedata.py: Add API to iterate over rprovides
Adds an API that makes it easier to iterate over the package data for a
all providers of a runtime dependency.

(From OE-Core rev: 68bdc219a4a819e83217f5b54c463624af8d3b9e)

(From OE-Core rev: 579717212ba2892e32315788ccd65320556d32a3)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Peter Marko
3d029078fe openssl: upgrade 3.0.15 -> 3.0.16
Release information:
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3015-and-openssl-3016-11-feb-2025

All CVEs were already patched, so this upgrade fixes only minor bugs.

Remove CVE patches included in the new version.

(From OE-Core rev: 68c01710e3522af317f8fe09465b56e6aca01615)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Peter Marko
d49f124652 cmake: apply parallel build settings to ptest tasks
ptest compile and install tasks do not have parallel build settings for
cmake. On powerful build machines this can cause overload situations
and oomkills.
Observed when building qtgrpc with ptest generally enabled in distro.

Having this in ptest class is suboptimal, but creating ptest-cmake class
just for these two variables is probably overkill.

(From OE-Core rev: 3c311fbf0c2090268e9b83123d762b05b61b4074)

(From OE-Core rev: bd12abeff6ee14385fba63fa5ba15d9fadec4d0e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Khem Raj
bd51ce99cb python3: Treat UID/GID overflow as failure
This fixes ptest failures on 32bit architectures

AssertionError:
Failed ptests:
{'python3': ['test_extractall_none_gid',
             'test_extractall_none_gname',
             'test_extractall_none_mode',
             'test_extractall_none_mtime',
             'test_extractall_none_uid',
             'test_extractall_none_uname',
             'setUpClass',
             'python3']}

(From OE-Core rev: 838f3cff2a123fb7d5833b6760772ded6efb60bd)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 43104b547cb79693c83df0882773ae8dd74b1d35)
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Pedro Ferreira
70b5e37d0d rust-common.bbclass: soft assignment for RUSTLIB path
As a user i want to override `RUSTLIB` path on a bbclass, lets
call it `XYZ.bbclass`.

If a certain recipe inherits `cargo.bbclass` and `XYZ.bbclass` the
value of `RUSTLIB` is dependent on the order of the inherit.

If `cargo.bbclass` is inherit before `XYZ.bbclass` this will reflect
the desired value of `RUSTLIB`, on the oposite, if the `XYZ.bbclass`
is inherit before `cargo.bbclass` then the `RUSTLIB` defined on
`rust-common.bbclass` will prevail.

Changed definition of `RUSTLIB` to soft assignment to make it overridable.

(From OE-Core rev: d8ccc3ad338a8020c998566249af2019baaa6e44)

Signed-off-by: Pedro Silva Ferreira <Pedro.Silva.Ferreira@criticaltechworks.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
(cherry picked from commit 6eeb832f73ffb48f5f05dc47191f60e4599e640f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Nikhil R
70349820ed glibc: Suppress GCC -Os warning on user2netname for sunrpc
When building with GCC -Os, a warning is triggered indicating that sprintf might overflow.

Error:
  netname.c: In function 'user2netname':
  netname.c:51:28: error: '%s' directive writing up to 255 bytes into a
  region of size between 239 and 249 [-Werror=format-overflow=]
     51 |   sprintf (netname, "%s.%d@%s", OPSYS, uid, dfltdom);
        |                            ^~               ~~~~~~~
  netname.c:51:3: note: 'sprintf' output between 8 and 273 bytes into a
  destination of size 256
     51 |   sprintf (netname, "%s.%d@%s", OPSYS, uid, dfltdom);
        |   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  cc1: all warnings being treated as errors

However the code does test prior the sprintf call that dfltdom plus
the required extra space for OPSYS, uid, and extra character will not
overflow and return 0 instead.

Upstream-patch: 6128e82ebe

Reviewed-by: Carlos O'Donell <carlos@redhat.com>
Tested-by: Carlos O'Donell <carlos@redhat.com>
(From OE-Core rev: 78fac0f623e01bd52b2ea3a597d056726deca8a4)

Signed-off-by: Nikhil R <nikhilr5@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Bruce Ashfield
2e79f42006 linux-yocto/5.15: update to v5.15.178
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    c16c81c81336 Linux 5.15.178
    6cfafcad46e9 drm/v3d: Assign job pointer to NULL before signaling the fence
    8b74aa1e1c08 Input: xpad - add support for wooting two he (arm)
    c9d4d5785f2d Input: xpad - add unofficial Xbox 360 wireless receiver clone
    1475c07bf30f Input: atkbd - map F23 key to support default copilot shortcut
    66453ea6ed0a ALSA: usb-audio: Add delay quirk for USB Audio Device
    20ce02f2f73a Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
    6068dcff7f19 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
    091a023cf2ae wifi: iwlwifi: add a few rate index validity checks
    81d4dd05c412 scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
    6ac5dfa57513 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
    84adb88c8027 platform/chrome: cros_ec_typec: Check for EC driver
    542532afe249 fs/ntfs3: Additional check in ntfs_file_release
    00767fbd67af Bluetooth: RFCOMM: Fix not validating setsockopt user input
    2c2dc87cdebe Bluetooth: SCO: Fix not validating setsockopt user input
    92340e6c5122 vfio/platform: check the bounds of read/write syscalls
    bcf0d815e728 net: sched: fix ets qdisc OOB Indexing
    4e3ded34f3f3 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
    322948a57582 mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
    2c3524a308b2 regmap: detach regmap from dev on regmap_exit
    df560e90a4d6 ASoC: samsung: Add missing depends on I2C
    72370a2bc2e6 irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
    46bdd737a16b scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
    318ebf851143 seccomp: Stub for !CONFIG_SECCOMP
    42b4b670bd23 ASoC: samsung: Add missing selects for MFD_WM8994
    0783cd485b4a ASoC: wm8994: Add depends on MFD core
    003148680b79 Linux 5.15.177
    448fe5a1a4b5 Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals
    0bd4efe3226d xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals
    c3d052cae566 net: fix data-races around sk->sk_forward_alloc
    198b89dd5a59 scsi: sg: Fix slab-use-after-free read in sg_release()
    9a4d196e8a5e x86/xen: fix SLS mitigation in xen_hypercall_iret()
    167cbd3e5268 nfsd: add list_head nf_gc to struct nfsd_file
    e43dd28405e6 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
    6486915fa661 vsock/virtio: discard packets if the transport changes
    8a07350fe070 blk-cgroup: Fix UAF in blkcg_unpin_online()
    e667d5d566a2 Revert "regmap: detach regmap from dev on regmap_exit"
    d8ebb991790f Revert "drm/amdgpu: rework resume handling for display (v2)"
    7a07fb80ea88 iio: adc: rockchip_saradc: fix information leak in triggered buffer
    b5c2c988cb6a iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
    96ac1454f343 iio: imu: inv_icm42600: fix spi burst write not supported
    39f320df3537 Revert "PCI: Use preserve_config in place of pci_flags"
    ac3dd2497e6e drm/i915/fb: Relax clear color alignment to 64 bytes
    15b453db41d3 hrtimers: Handle CPU state correctly on hotplug
    59472bf85a3c irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
    2d008d4961b0 gpiolib: cdev: Fix use after free in lineinfo_changed_notify
    649b266606bc fs/proc: fix softlockup in __read_vmcore (part 2)
    64e5fd96330d filemap: avoid truncating 64-bit offset to 32 bits
    9e5fed46ccd2 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
    a4606b774de2 vsock: reset socket state when de-assigning the transport
    048dbd2b5b85 vsock/virtio: cancel close work in the destructor
    92f1b7930f13 net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
    aba13043e628 x86/asm: Make serialize() always_inline
    612269eb3f8f nvmet: propagate npwg topology
    7df94f7f9e22 poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
    1c878c5527e1 ACPI: resource: acpi_dev_irq_override(): Check DMI match last
    a592ce58ca78 kheaders: Ignore silly-rename files
    2d1a5a595bf2 fs: fix missing declaration of init_files
    87e207b6aa93 hfs: Sanity check the root record
    80aee0bc0dbe mac802154: check local interfaces before deleting sdata list
    c5f1bc1d2324 i2c: rcar: fix NACK handling when being a target
    6c6e0961ccfd i2c: mux: demux-pinctrl: check initial mux selection, too
    37c63955ca68 Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
    2f176c0ec9f5 hwmon: (tmp513) Fix division of negative numbers
    14e0a874488e drm/v3d: Ensure job pointer is set to NULL after job completion
    83775c9a9a65 net/mlx5: Fix RDMA TX steering prio
    a04effa1b79f net/mlx5: Refactor mlx5_get_flow_namespace
    ef6bb594598b net/mlx5: Add priorities for counters in RDMA namespaces
    3cc3575223c6 net: xilinx: axienet: Fix IRQ coalescing packet count overflow
    fdfe7ef525ad nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
    036f8d814a2c gtp: Destroy device along with udp socket's netns dismantle.
    ed8be92df48d gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
    a111a7487f65 gtp: use exit_batch_rtnl() method
    041325b73abc net: add exit_batch_rtnl() method
    3450092cc2d1 pktgen: Avoid out-of-bounds access in get_imix_entries
    0ab52a8ca6e1 bpf: Fix bpf_sk_select_reuseport() memory leak
    9bb26176fba5 net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
    9f15cd4174d0 phy: usb: Fix clock imbalance for suspend/resume
    795537eb2af1 phy: usb: Use slow clock for wake enabled suspend
    88b01048f286 mptcp: fix TCP options overflow.
    05ba00d97bb4 mptcp: drop port parameter of mptcp_pm_add_addr_signal
    f44e6d70c100 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
    86f8046aa649 ocfs2: correct return value of ocfs2_local_free_info()
    0552befaccd8 phy: usb: Toggle the PHY power during init
    d0178cb2ccea phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers
    b2cec0d8f676 of: address: Preserve the flags portion on 1:1 dma-ranges mapping
    6a7832e332d9 of: address: Store number of bus flag cells rather than bool
    1b868ff7950b of: address: Remove duplicated functions
    19ec883a51bd of: address: Fix address translation when address-size is greater than 2
    b3f6bed9bf61 of/address: Add support for 3 address cell bus
    bce3629a9e53 of: unittest: Add bus address range parsing tests
    437b875e7389 arm64: dts: rockchip: add hevc power domain clock to rk3328
    f587c1ac6895 block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
    e43dfc4a9c15 iio: adc: ad7124: Disable all channels at probe time
    d83ccca9e17e iio: inkern: call iio_device_put() only on mapped devices
    028a1ba8e3ba iio: adc: at91: call input_free_device() on allocated iio_dev
    060214459b63 iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    c31009d2bd49 iio: gyro: fxas21002c: Fix missing data update in trigger handler
    aae967380068 iio: adc: ti-ads8688: fix information leak in triggered buffer
    a07f69808441 iio: imu: kmx61: fix information leak in triggered buffer
    cb488706cdec iio: light: vcnl4035: fix information leak in triggered buffer
    006073761888 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
    64a989aa7475 iio: pressure: zpa2326: fix information leak in triggered buffer
    19fc1c83454c usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
    d9d18e2011c1 usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
    7cdb2d0f1af9 usb: fix reference leak in usb_new_device()
    162428a00a0c USB: core: Disable LPM only for non-suspended ports
    8309c947b208 USB: usblp: return error when setting unsupported protocol
    d2de56cc45ee usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
    1c7818e2746e topology: Keep the cpumask unchanged when printing cpumap
    85b8a1a3176d usb: dwc3: gadget: fix writing NYET threshold
    7f626e8e148c USB: serial: cp210x: add Phoenix Contact UPS Device
    2165ef034891 usb-storage: Add max sectors quirk for Nokia 208
    2748a203e098 staging: iio: ad9832: Correct phase range check
    e299dcbfc039 staging: iio: ad9834: Correct phase range check
    98645eac8ed4 USB: serial: option: add Neoway N723-EA support
    f072315c5d41 USB: serial: option: add MeiG Smart SRM815
    203f38eb72f2 md/raid5: fix atomicity violation in raid5_cache_count
    3b930badf88d scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
    1e5cc8d5b121 drm/amd/display: increase MAX_SURFACES to the value supported by hw
    dd3f23919b4d ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
    21db38809fb8 ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
    10c24df2e303 riscv: Fix sleeping in invalid context in die()
    95793f9684e5 drm/amd/display: Add check for granularity in dml ceil/floor helpers
    1dc5da6c4178 sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
    0a0966312ac3 sctp: sysctl: udp_port: avoid using current->nsproxy
    bd2a29394235 sctp: sysctl: auth_enable: avoid using current->nsproxy
    0f78f0946674 sctp: sysctl: rto_min/max: avoid using current->nsproxy
    86ddf8118123 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
    e52a55ec2d1f dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
    802666a40c71 dm thin: make get_first_thin use rcu-safe list first function
    7cb3e77e9b4e afs: Fix the maximum cell name length
    781c743e18bf ksmbd: fix a missing return value check bug
    e719611285cd drm/mediatek: Add support for 180-degree rotation in the display driver
    b1b2353d768f netfilter: conntrack: clamp maximum hashtable size to INT_MAX
    2f2c1ce86708 netfilter: nf_tables: imbalance in flowtable binding
    6d6ce5f75d0e tls: Fix tls_sw_sendmsg error handling
    8fe5fcf25438 cxgb4: Avoid removal of uninserted tid
    0cfe1297df07 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
    a313d6e6d5f3 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
    10923508eb77 tcp/dccp: allow a connection when sk_max_ack_backlog is zero
    bcd1557f1d38 tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
    e67fff8fd12c net: 802: LLC+SNAP OID:PID lookup on start of skb data
    8cc8bdfbe065 ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
    294b9826da0e ASoC: mediatek: disable buffer pre-allocation
    1f94fe692b7e exfat: fix the infinite loop in __exfat_free_cluster()
    28c21f0ac529 exfat: fix the infinite loop in exfat_readdir()
    3995b25d000c dm array: fix cursor index when skipping across block boundaries
    c850ddd1e1d8 dm array: fix unreleased btree blocks on closing a faulty array cursor
    738994872d77 dm array: fix releasing a faulty array block twice in dm_array_cursor_end
    6029c4240529 jbd2: flush filesystem device before updating tail sequence
    d42ad3f161a5 ceph: give up on paths longer than PATH_MAX
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 709bfb0e600148d65018db450a69de220c874efd)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Bruce Ashfield
a6b17aa896 linux-yocto/5.15: update to v5.15.176
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    4735586da88e Linux 5.15.176
    63eac98d6f08 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
    5c4eb5401d7e dt-bindings: display: adi,adv7533: Drop single lane support
    0f51034bb813 drm: adv7511: Drop dsi single lane support
    f9c3adb083d3 net/sctp: Prevent autoclose integer overflow in sctp_association_init()
    d809d1aabec8 sky2: Add device ID 11ab:4373 for Marvell 88E8075
    9372e160d821 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
    c2f961c46ea0 RDMA/uverbs: Prevent integer overflow issue
    9aeece68684c kcov: mark in_softirq_really() as __always_inline
    362f86f3ee45 modpost: fix the missed iteration for the max bit in do_input()
    3b5efbf000d5 modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
    ef26e5bb560b usb: xhci: Avoid queuing redundant Stop Endpoint commands
    f4539c3cab44 ARC: build: Try to guess GCC variant of cross compiler
    84142875b293 irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
    faab60ed274d net: usb: qmi_wwan: add Telit FE910C04 compositions
    cc63b8c102c4 bpf: fix potential error return
    2dedcab091f2 sound: usb: format: don't warn that raw DSD is unsupported
    01b3661663c5 sound: usb: enable DSD output for ddHiFi TC44C
    63f4b594a688 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
    22d36ad92e57 drm/amdkfd: Correct the migration DMA map direction
    bd3eca303b3f wifi: mac80211: wake the queues in case of failure in resume
    efbdbf36c338 btrfs: sysfs: fix direct super block member reads
    0efdc0606fc8 btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
    526ff5b27f09 btrfs: fix use-after-free when COWing tree bock and tracing is enabled
    d4a7270b37d0 btrfs: rename and export __btrfs_cow_block()
    ad0677c37c14 ila: serialize calls to nf_register_net_hooks()
    de4f8d477c67 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
    65c67049e9ed af_packet: fix vlan_get_tci() vs MSG_PEEK
    0caa776f2829 net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
    579cfa595af1 net: restrict SO_REUSEPORT to inet sockets
    143378075904 RDMA/rtrs: Ensure 'ib_sge list' is accessible
    91a1adab5669 net: mv643xx_eth: fix an OF node reference leak
    36c95bbd4eb1 eth: bcmsysport: fix call balance of priv->clk handling routines
    d27088892b40 ALSA: usb-audio: US16x08: Initialize array before use
    c8187a378380 net: llc: reset skb->transport_header
    277f00b0c2dc netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
    215c687344d5 drm/i915/dg1: Fix power gate sequence.
    769e36c2119a netrom: check buffer length before accessing it
    9d3895967729 net: fix memory leak in tcp_conn_request()
    4261fc54ca77 net: stmmac: restructure the error path of stmmac_probe_config_dt()
    f0da70367048 net: stmmac: don't create a MDIO bus if unnecessary
    860279ff72fe net: stmmac: platform: provide devm_stmmac_probe_config_dt()
    a68ec6380f2f RDMA/hns: Fix missing flush CQE for DWQE
    06e2d3ec7a7d RDMA/hns: Fix warning storm caused by invalid input in IO path
    3146512f40bb RDMA/hns: Fix mapping error of zero-hop WQE buffer
    bc509159a223 RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
    5e7c02730cce RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
    a03b9689e4e5 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    33df6f747501 RDMA/bnxt_re: Fix the locking while accessing the QP table
    802be99bc7bb RDMA/bnxt_re: Fix max_qp_wrs reported
    6da018852c42 RDMA/bnxt_re: Fix reporting hw_ver in query_device
    faf879baed95 RDMA/bnxt_re: Add check for path mtu in modify_qp
    2e4a9a22b7f9 RDMA/mlx5: Enforce same type port association for multiport RoCE
    590bd0f9148f xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
    62756ca746e2 usb: xhci: Limit Stop Endpoint retries
    28fcf6c7a1ef xhci: retry Stop Endpoint on buggy NEC controllers
    8f4871abf04f thunderbolt: Add support for Intel Panther Lake-M/P
    6cf75f685667 thunderbolt: Add support for Intel Lunar Lake
    c4c06c199410 thunderbolt: Add Intel Barlow Ridge PCI ID
    6c03ec8a0791 thunderbolt: Add support for Intel Meteor Lake
    c5c059d6bb77 thunderbolt: Add support for Intel Raptor Lake
    3bcdc9039a6e tracing: Have process_string() also allow arrays
    f70e4b9ec69d selinux: ignore unknown extended permissions
    0a2d26bf27c9 x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    87bd909a7014 net: dsa: improve shutdown sequence
    5ade4382de16 nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
    214d92f0a465 btrfs: avoid monopolizing a core when activating a swap file
    c3703d9340ca power: supply: gpio-charger: Fix set charge current limits
    f60172b44731 tracing: Prevent bad count for tracing_cpumask_write
    c5a28af78555 tracing: Constify string literal data member in struct trace_event_call
    2107ab40629a ksmbd: fix racy issue from session lookup and expire
    2461ffdc7725 lib: stackinit: hide never-taken branch from compiler
    002668bfd416 drm/dp_mst: Verify request type in the corresponding down message reply
    3bc0d0831777 arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
    082e68b9a714 arm64: mm: Rename asid2idx() to ctxid2asid()
    1aea5c9470be ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
    6bd1bf0e8c42 ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
    70e7166612f4 drm/dp_mst: Fix MST sideband message body length check
    24fec234d2ba bpf: Check validity of link->type in bpf_link_show_fdinfo()
    edcc68974580 MIPS: Probe toolchain support of -msym32
    5728a1d6247d vmalloc: fix accounting with i915
    6dea8e3de599 virtio-blk: don't keep queue frozen during system suspend
    a47235354ac4 scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
    0d591e92c076 scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
    7efc3fa902ce platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    b09527799946 regmap: Use correct format specifier for logging range errors
    7574cf3c8bf1 ALSA: hda/conexant: fix Z60MR100 startup pop issue
    3c654998a3e8 scsi: megaraid_sas: Fix for a potential deadlock
    ce697618e34f scsi: qla1280: Fix hw revision numbering for ISP1020/1040
    08a78ff9bf29 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
    325c0e27668d tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
    3d825a241e65 mtd: rawnand: fix double free in atmel_pmecc_create_user()
    8d364597de9c dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
    7c99b3c60cac dmaengine: dw: Select only supported masters for ACPI devices
    3e9968660c26 dmaengine: mv_xor: fix child node refcount handling in early exit
    e0c101361c1e phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
    6bf2aba838b2 phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
    3a22224a443b phy: core: Fix that API devm_phy_put() fails to release the phy
    5d1a41420ed4 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
    9d2916bb1276 phy: core: Fix an OF node refcount leakage in _of_phy_get()
    4f8a50745358 mtd: rawnand: arasan: Fix missing de-registration of NAND
    326d7fb3e4f1 mtd: rawnand: arasan: Fix double assertion of chip-select
    4b13d0d186df mtd: diskonchip: Cast an operand to prevent potential overflow
    804d55e92b7a nfsd: restore callback functionality for NFSv4.0
    e2373eea347e bpf: Check negative offsets in __bpf_skb_min_len()
    323bab15ff7c tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
    38150bb4e3be tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
    c3ab56e1b434 mm/vmstat: fix a W=1 clang compiler warning
    53106510736e media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
    c72057c4865c drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
    dccf5138ad56 epoll: Add synchronous wakeup support for ep_poll_callback
    888dd1909559 ceph: validate snapdirname option length when mounting
    38a2a383a019 of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
    a579b0b6a82f of: Fix error path in of_parse_phandle_with_args_map()
    0227594be815 udmabuf: also check for F_SEAL_FUTURE_WRITE
    912188316a8c nilfs2: prevent use of deleted inode
    a793e5c35722 of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
    abc874634c16 NFS/pnfs: Fix a live lock between recalled layouts and layoutget
    85d7635d54d7 tracing: Add "%s" check in test_event_printk()
    6cacfb59a7cc tracing: Add missing helper functions in event pointer dereference check
    3a41815771c4 tracing: Fix test_event_printk() to process entire print argument
    0840d360a890 KVM: x86: Play nice with protected guests in complete_hypercall_exit()
    042253c57be9 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
    0bef13423bb4 btrfs: tree-checker: reject inline extent items with 0 ref count
    6aa65cda937f zram: refuse to use zero sized block device as backing device
    2d3cde3aeb73 sh: clk: Fix clk_enable() to return 0 on NULL clk
    5049a45bc23b hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
    de4fa408d68b hwmon: (tmp513) Fix Current Register value interpretation
    447d1430aa6c hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
    b382e808e342 hwmon: (tmp513) Use SI constants from units.h
    e9668ba824c1 hwmon: (tmp513) Simplify with dev_err_probe()
    9a2cf6d4a616 hwmon: (tmp513) Don't use "proxy" headers
    e7c7b48a0fc5 drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
    d4ca3bf078cb USB: serial: option: add Telit FE910C04 rmnet compositions
    adeae07da972 USB: serial: option: add MediaTek T7XX compositions
    cf4df6f3f539 USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    6ccb85602c14 USB: serial: option: add MeiG Smart SLM770A
    7e25a9031004 USB: serial: option: add TCL IK512 MBIM & ECM
    68578224365a efivarfs: Fix error on non-existent file
    f2c15056b312 i2c: riic: Always round-up when calculating bus period
    16e1c1156674 chelsio/chtls: prevent potential integer overflow on 32bit
    f4780fedeb65 mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
    9d120788418d net: mdiobus: fix an OF node reference leak
    c4f20ad100da netfilter: ipset: Fix for recursive locking warning
    24b6b9d6b21b net: ethernet: bgmac-platform: fix an OF node reference leak
    f9bad9428723 net: hinic: Fix cleanup in create_rxqs/txqs()
    48cc5df7757b ionic: use ee->offset when returning sprom data
    87847938f570 ionic: Fix netdev notifier unregister on failure
    b3a6daaf7cfb netdevsim: prevent bad user input in nsim_dev_health_break_write()
    6b80924af621 net/smc: check return value of sock_recvmsg when draining clc data
    a36364d8d4fa net/smc: check smcd_v2_ext_offset when receiving proposal msg
    f10635268a0a net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
    0b86e31b6bbb net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
    27d6adbb3ec4 erofs: fix incorrect symlink detection in fast symlink
    7e5fc0da0b76 i2c: pnx: Fix timeout in wait functions
    cff037a22793 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
    676cec3ad096 MIPS: Loongson64: DTS: Fix msi node for ls7a
    848257f4f9ef PCI: Add ACS quirk for Broadcom BCM5760X NIC
    c3119c7bab90 PCI: vmd: Create domain symlink before pci_bus_add_devices()
    82f635733337 ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
    6eb9609c8bf0 usb: cdns3: Add quirk flag to enable suspend residency
    a19c6a484417 ALSA: usb: Fix UBSAN warning in parse_audio_unit()
    02052d22de91 PCI/AER: Disable AER service on suspend
    c1a1393f7844 PCI: Use preserve_config in place of pci_flags
    33db36b3c53d net: sched: fix ordering of qlen adjustment
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: b39adc1b4d9e705b1801684020a0bc12217f6db8)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:44 -08:00
Praveen Kumar
212172aa13 go: Fix CVE-2024-45336
The HTTP client drops sensitive headers after following a cross-domain redirect.
For example, a request to a.com/ containing an Authorization header which is redirected to
b.com/ will not send that header to b.com. In the event that the client received a subsequent
same-domain redirect, however, the sensitive headers would be restored. For example, a chain
of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the
Authorization header to b.com/2.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-45336

Upstream-patch:
b72d56f98d

(From OE-Core rev: 63e84b64f055ad7c91de67194e6739c96fb95496)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-15 06:04:43 -08:00
Antonin Godard
6840d3b71e dev-manual/building: document the initramfs-framework recipe
[ YOCTO #14747 ]

Adding a initramfs is a common task, and the way oe-core offers to do so
is by using the initramfs-framework recipe and companion modules. There
was already documentation on adding an initramfs but the documentation
was lacking details on this framework. Add it before the multiconfig
section because it is a bit more important IMO.

Reported-by: Alejandro <alejandro@enedino.org>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: b1a7dd6d34a291e2250e7169f4f9d93e61700a63)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit caedbca4eced4cf5bc74aaae64e4ad2887c2fc65)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Deepesh Varatharajan
af0dd82dd3 glibc: stable 2.35 branch updates
549d831579 stdlib: Test using setenv with updated environ [BZ #32588]
8b5d4be762 Fix underallocation of abort_msg_s struct (CVE-2025-0395)
525e5f13de stdlib: Simplify buffer management in canonicalize
5eae275400 realpath: Bring back GNU extension on ENOENT and EACCES [BZ #28996]
8a82a76a42 realpath: Do not copy result on failure (BZ #28815)
e369114462 misc: Add support for Linux uio.h RWF_NOAPPEND flag
3f1ab0ed66 nptl: Convert tst-setuid2 to test-driver
76adee6e0f support: Add xpthread_cond_signal wrapper
c3beedeb70 elf: Support recursive use of dynamic TLS in interposed malloc
f48d763ab8 elf: Avoid some free (NULL) calls in _dl_update_slotinfo
710057676d sysdeps/x86/Makefile: Split and sort tests
a4207d4e83 x86: Only align destination to 1x VEC_SIZE in memset 4x loop
889f99c149 elf: Fix slow tls access after dlopen [BZ #19924]
543efedcb3 x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
41a3e51233 x86_64: Add log1p with FMA
0d1c70aa4c x86_64: Add expm1 with FMA
516180d399 x86_64: Add log2 with FMA
30384b91ad x86_64: Sort fpu/multiarch/Makefile
d626c31ce5 x86: Avoid integer truncation with large cache sizes (bug 32470)
7ea35e28b4 nptl: initialize cpu_id_start prior to rseq registration
47d70ca8d9 nptl: initialize rseq area prior to registration

(From OE-Core rev: a397c152abf4f3da1323594e79ebac844a2c9f45)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Yash Shinde
57be589ed2 gdb: Fix CVE-2024-53589
CVE: CVE-2024-53589

(From OE-Core rev: 4ddd1e5aea1c4b84a6c4e1db5ded4938c4a35393)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Yash Shinde
7e19a67813 binutils: internal gdb: Fix CVE-2024-53589
CVE: CVE-2024-53589

(From OE-Core rev: 2d6df18f4a694d6499b337bbbab10ba8bb6e3fe4)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Peter Marko
3d240823a3 openssl: patch CVE-2024-13176
Picked [1] per link in [2].

[1] 07272b05b0
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-13176

(From OE-Core rev: cb18163c11d7f8b62b829f203b00a4e14513c6cf)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Richard Purdie
1f103ae930 bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48
>From git 2.48 release notes:

"""
When "git fetch $remote" notices that refs/remotes/$remote/HEAD is
missing and discovers what branch the other side points with its
HEAD, refs/remotes/$remote/HEAD is updated to point to it.
"""

This means with git 2.48 onwards, there is a mystery "HEAD" revision
appearing in some of our shallow clone tests. We can avoid this by
using the same canonicalization as used for the reference revisions.

This resolves autobuilder failures on the Fedora 40 workers.

(Bitbake rev: e71f1ce53cf3b8320caa481ae62d1ce2900c4670)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c83444d1210740e27b1744d3aa7c5cad4e28db2f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-05 06:54:35 -08:00
Antonin Godard
a42a2d776d test-manual/reproducible-builds: fix reproducible links
We don't run reproducible-builds on specific distros anymore, but on a
distro at random depending on what is available on the Autobuilder. Fix
the link to this builder and remove distro specific ones.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: d574e625b2bb1b07a2e51cbf2e1f0a28ee596c7b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8bd2bc3c00ca80f4c000a2a8d618a9f8ea3aa54b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Antonin Godard
49affb8af2 Update autobuilder URLs to valkyrie
We have moved to Valkyrie which is hosted on
https://autobuilder.yoctoproject.org/valkyrie. Update the URL in the
documentation.

Also, the YOCTO_AB_URL macro was used in a single location in the
documentation so replace it by the :yocto_ab: custom extlink and remove
the macro.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 66db484f51bc60e87d41bd5ad9d852e3ac44a1b2)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0b0ed55d909dd11cdc9b29b105473271627c025e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Ross Burton
966aead7e8 classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture
Using the package architecture to select the right qemu options to pass
to qemu-user is incorrect, and fails for recipes that set PACKAGE_ARCH
to MACHINE_ARCH (as the qemuppc workarounds suggest) because there are
not typically any options set for the machine name.

Solve this by using TUNE_PKGARCH instead: for the majority of recipes
this is the same value, but for machine-specific recipes it remains the
same instead of changing to the machine name.

This means we can remove the qemuppc workarounds, as they're obsolete.

Also update the gcc-testsuite recipe which uses the same pattern to use
TUNE_PKGARCH, and generalise the else codepath to avoid needing to
update the list of architectures.

[ YOCTO #15647 ]

(From OE-Core rev: 077aab43f2c928eb8da71934405c62327010f552)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Ross Burton
83dfb365a8 classes/nativesdk: also override TUNE_PKGARCH
The nativesdk class overrides PACKAGE_ARCH and unsets TUNE_FEATURES, but
as recipes might want to look at TUNE_PKGARCH too (for example, when
setting QEMU_EXTRAOPTIONS) we should also override that variable.

Otherwise, a nativesdk recipe will have the TUNE_PKGARCH of the target,
which leads to errors (eg passing mips arguments to an arm qemu).

(From OE-Core rev: 38b4992329459f2200817a848e8888b9284b4917)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 05322beb290e1db30bef49b4364f8a8e6e9f7408)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Aleksandar Nikolic
9d4c312a0f scripts/install-buildtools: Update to 4.0.23
Update to the 4.0.23 release of the 4.0 series for buildtools.

(From OE-Core rev: 2effc054b1484dd3c87652267bf590c17d2d6f76)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Peter Marko
ee88a1d22e ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542
Cherry-pick commit
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=29ff6334b492504ace101be748b256e6953d2c2f

(From OE-Core rev: f76c9f6940df64654710a83a6f3c6168b63fc611)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
b4825be806 rsync: fix CVE-2024-12747
A flaw was found in rsync. This vulnerability arises from a race condition during
rsync's handling of symbolic links. Rsync's default behavior when encountering
symbolic links is to skip them. If an attacker replaced a regular file with a
symbolic link at the right time, it was possible to bypass the default behavior
and traverse symbolic links. Depending on the privileges of the rsync process,
an attacker could leak sensitive information, potentially leading to privilege escalation.

(From OE-Core rev: c0905ffb2f1aa3bc4c6187ff4860dcc8d3dbfb01)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
f70841d2a2 rsync: fix CVE-2024-12088
A flaw was found in rsync. When using the `--safe-links` option, rsync fails to
properly verify if a symbolic link destination contains another symbolic link within it.
This results in a path traversal vulnerability, which may lead to arbitrary file write
outside the desired directory

(From OE-Core rev: 741200c41a19ef5b4876d9a80667dfde2e5f4a9d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
2aebe10959 rsync: fix CVE-2024-12087
A path traversal vulnerability exists in rsync. It stems from behavior enabled
by the `--inc-recursive` option, a default-enabled option for many client options
and can be enabled by the server even if not explicitly enabled by the client.
When using the `--inc-recursive` option, a lack of proper symlink verification
coupled with deduplication checks occurring on a per-file-list basis could allow
a server to write files outside of the client's intended destination directory.
A malicious server could write malicious files to arbitrary locations named after
valid directories/paths on the client.

(From OE-Core rev: 12328df8dfcdc73ef70af299e9ebdc1d8ae73f37)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
1e04a4df0a rsync: fix CVE-2024-12086
A flaw was found in rsync. It could allow a server to enumerate the contents of an
arbitrary file from the client's machine. This issue occurs when files are being
copied from a client to a server. During this process, the rsync server will send
checksums of local data to the client to compare with in order to determine what
data needs to be sent to the server. By sending specially constructed checksum values
for arbitrary files, an attacker may be able to reconstruct the data of those files
byte-by-byte based on the responses from the client.

(From OE-Core rev: b49c8f58c20d7deb354a86a34488cb798c49eba3)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
5d60b24103 rsync: fix CVE-2024-12085
A flaw was found in the rsync daemon which could be triggered when rsync compares
file checksums. This flaw allows an attacker to manipulate the checksum length
(s2length) to cause a comparison between a checksum and uninitialized memory and
leak one byte of uninitialized stack data at a time.

(From OE-Core rev: 3fd8bea3e72573cca03cd3f6f4fc077cd2fd45a3)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Archana Polampalli
a1fab4c1a9 rsync: fix CVE-2024-12084
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due
to improper handling of attacker-controlled checksum lengths (s2length) in the code.
When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write
out of bounds in the sum2 buffer.

(From OE-Core rev: 17fac276e27af19b00b6263f22156a55bae6a5c9)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Khem Raj
b7070c567a rsync: Delete pedantic errors re-ordering patch
It has been fixed by removing the check upstream see
9a3449a398

(From OE-Core rev: c6228b8371ea5c3c452db7b536948ae96d83844b)

(From OE-Core rev: 3746c60f38a6cf99f293131b8b1bfed7c73a1944)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Alexander Kanavin
956e98851d rsync: update 3.2.5 -> 3.2.7
Rebase patches.

(From OE-Core rev: 827c787893caa973c509acf7cac9e17fec5692a4)

(From OE-Core rev: 798009f46f2044aaa0bac753430cca1964677741)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Zhang Peng
4ebaec2ca3 vte: fix CVE-2024-37535
CVE-2024-37535:
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service
 (memory consumption) via a window resize escape sequence, a related
issue to CVE-2000-0476.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-37535]

Upstream patches:
[036bc3ddcb]
[c313849c2e]

(From OE-Core rev: 132a5168b125d6f4fb9391d982bc64d73429ab8f)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Divya Chellam
0d7adecb6b wget: fix CVE-2024-10524
Applications that use Wget to access a remote resource using
shorthand URLs and pass arbitrary user credentials in the URL
are vulnerable. In these cases attackers can enter crafted
credentials which will cause Wget to access an arbitrary host.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-10524

Upstream-patch:
https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778

(From OE-Core rev: eed5d59c138c210df91f31ac718383ccaf921faf)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Peter Marko
4bc82e0831 socat: patch CVE-2024-54661
Picked upstream commit
https://repo.or.cz/socat.git/commitdiff/4ee1f31cf80019c5907876576d6dfd49368d660f

Since this was the only commit in 1.8.0.2 it also contained release
changes which were dropped.

(From OE-Core rev: aa3187749ae9e04b91ad18be733ce09be63a50db)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Zhang Peng
744e331d5b avahi: fix CVE-2024-52616
CVE-2024-52616:
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs
randomly only once at startup, incrementing them sequentially after that. This
predictable behavior facilitates DNS spoofing attacks, allowing attackers to
guess transaction IDs.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-52616]
[https://github.com/avahi/avahi/security/advisories/GHSA-r9j3-vjjh-p8vm]

Upstream patches:
[f8710bdc8b]

(From OE-Core rev: 7708d0c346b23ab3e687e2a2ca464d77d55cebd7)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-24 07:49:28 -08:00
Yogita Urade
65d58821e0 ofono: fix CVE-2024-7547
oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation
Vulnerability. This vulnerability allows local attackers to execute
arbitrary code on affected installations of oFono. An attacker must
first obtain the ability to execute code on the target modem in
order to exploit this vulnerability.

The specific flaw exists within the parsing of SMS PDUs. The issue
results from the lack of proper validation of the length of user-
supplied data prior to copying it to a stack-based buffer. An
attacker can leverage this vulnerability to execute code in the
context of the service account. Was ZDI-CAN-23460.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7547

Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=305df050d02aea8532f7625d6642685aa530f9b0

(From OE-Core rev: 8c32d91b64ae296d7832ddeb42983f4f3c237946)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Yogita Urade
a551469f70 ofono: fix CVE-2024-7546
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation
Vulnerability. This vulnerability allows local attackers to execute
arbitrary code on affected installations of oFono. An attacker must
first obtain the ability to execute code on the target modem in
order to exploit this vulnerability.

The specific flaw exists within the parsing of STK command PDUs.
The issue results from the lack of proper validation of the length
of user-supplied data prior to copying it to a heap-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of the service account. Was ZDI-CAN-23459.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7546

Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=79ea6677669e50b0bb9c231765adb4f81c375f63

(From OE-Core rev: 33b2a67b3134498e8c4845efddc7854b4d2315cd)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Yogita Urade
0c044be743 ofono: fix CVE-2024-7545
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation
Vulnerability. This vulnerability allows local attackers to execute
arbitrary code on affected installations of oFono. An attacker must
first obtain the ability to execute code on the target modem in
order to exploit this vulnerability.

The specific flaw exists within the parsing of STK command PDUs.
The issue results from the lack of proper validation of the length
of user-supplied data prior to copying it to a heap-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of the service account. Was ZDI-CAN-23458.

Reeference:
https://security-tracker.debian.org/tracker/CVE-2024-7545

Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=556e14548c38c2b96d85881542046ee7ed750bb5

(From OE-Core rev: f062d2e4ad3d0a35a2dadda679632d5d213b8487)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Yogita Urade
481b2600a9 ofono: fix CVE-2024-7544
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation
Vulnerability. This vulnerability allows local attackers to execute
arbitrary code on affected installations of oFono. An attacker must
first obtain the ability to execute code on the target modem in
order to exploit this vulnerability.

The specific flaw exists within the parsing of STK command PDUs.
The issue results from the lack of proper validation of the length
of user-supplied data prior to copying it to a heap-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of the service account. Was ZDI-CAN-23457.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7544

Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=a240705a0d5d41eca6de4125ab2349ecde4c873a

(From OE-Core rev: c4e7d6fad2ed96296bcea2b7d12b41e1354eafa8)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Yogita Urade
380c41b667 ofono: fix CVE-2024-7543
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation
Vulnerability. This vulnerability allows local attackers to execute
arbitrary code on affected installations of oFono. An attacker must
first obtain the ability to execute code on the target modem in
order to exploit this vulnerability.

The specific flaw exists within the parsing of STK command PDUs.
The issue results from the lack of proper validation of the length
of user-supplied data prior to copying it to a heap-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of the service account. Was ZDI-CAN-23456.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7543

Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=90e60ada012de42964214d8155260f5749d0dcc7

(From OE-Core rev: 31ba25646b78d60923b1d897a43e37ef6f9edd51)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Yogita Urade
429a145133 ofono: fix CVE-2024-7539
oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability.
This vulnerability allows local attackers to execute arbitrary code
on affected installations of oFono. An attacker must first obtain
the ability to execute code on the target modem in order to exploit
this vulnerability.

The specific flaw exists within the parsing of responses from AT+CUSD
commands. The issue results from the lack of proper validation of the
length of user-supplied data prior to copying it to a stack-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of root. Was ZDI-CAN-23195.

Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7539

Upstream Patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc

(From OE-Core rev: b1626a0df6911172adafa85a99d36486eb7e2c62)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Peter Marko
e316dceeb6 gstreamer1.0: ignore CVEs fixed in plugins recipes
These were fixed in previous commits.

(From OE-Core rev: 09f0b16877ab207cba91f13d036bc6f4cd6bdf70)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Divya Chellam
61c55b9e30 ruby: fix CVE-2024-49761
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS
vulnerability when it parses an XML that has many digits between &# and x...;
in a hex numeric character reference (&#x.... This does not happen with
Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby.
The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVE-2024-49761-0009.patch is the CVE fix and rest are dependent commits.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-49761

Upstream-patch:
810d228523
83ca5c4b0f
51217dbcc6
7e4049f6a6
fc6cad570b
7712855547
370666e314
a579730f25
ce59f2eb1a

(From OE-Core rev: 5b453400e9dd878b81b1447d14b3f518809de17e)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Archana Polampalli
4f959ce14c go: Fix CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested
expressions can cause a panic due to stack exhaustion.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-34158

Upstream-patch:
d4c53812e6

(From OE-Core rev: eb14e9722d023b4d1668c55ce4bc6ef02f8ce6c2)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Archana Polampalli
0c88d20540 go: Fix CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can
cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-34156

Upstream-patch:
2092294f2b

(From OE-Core rev: 3aeeee86a53cee14bb1a6a485f8781459b6f2ffc)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Archana Polampalli
f700dcdc1d go: Fix CVE-2024-34155
Calling any of the Parse functions on Go source code which contains
deeply nested literals can cause a panic due to stack exhaustion.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-34155

Upstream-patch:
b232596139

(From OE-Core rev: 9d21d527e2448e202030ae7ad38c88e25943a2f3)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-18 06:21:02 -08:00
Steve Sakoman
f505325936 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: a270d4c957259761bcc7382fcc54642a02f9fc7d)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:51:11 -08:00
Steve Sakoman
cb03c7cf84 poky.conf: bump version for 4.0.24
(From meta-yocto rev: 6e8a5bac75ca114ef2b4d3ca150b3f501519ea8f)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Antonin Godard
ac2d3a5377 ref-manual: move runtime-testing section to the test-manual
In the same fashion as the previous commit ("ref-manual/packages: move
ptest section to the test-manual"), move the runtime testing section of
the development tasks manual to the test environment manual.

Add a link to it from the test-manual/intro document.

(From yocto-docs rev: 3128bf149f40928e6c2a3e264590a0c6c9778c6a)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6b44257874858db3aa426d3e84a79c41cb4937a3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Antonin Godard
2497f29afd ref-manual/packages: move ptest section to the test-manual
[ YOCTO #15106 ]

It makes more sense to document ptests in the test-manual. Since ptests
are still related to packages, keep a link to ptests from packages.rst
to the test-manual.

Reported-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 8b6ada020d595d86c7bbe78a27b7a6301715b039)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b389c06b709e4791e1cce5e8a5b58f6b0cd03a14)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Antonin Godard
1418534d22 SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication
[ YOCTO #15218 ]

There are different ways of configuring the build host when
authentication to a mirror (SSTATE_MIRRORS or SOURCE_MIRROR_URL) is
required.

Document these methods, and begin with the preferred approach which is
to edit ~/.netrc appropriately. When that is not possible, specifying
the credentials from the URL is also possible, so document it as well.

Reported-by: peter.zsifkovits@at.bosch.com
Tested-by: Antonin Godard <antonin.godard@bootlin.com> # Debian 12 container
(From yocto-docs rev: e0f88c9595a084244691c6c6aee8d95ce29602fc)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4c303cce0627e0f2ce52e72597541e220585aaed)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Antonin Godard
4d01328526 ref-manual/devtool-reference: add warning note on deploy-target and shared objects
The command `devtool deploy-target` does not handle any dependency of
the application, even when properly listed in DEPENDS or RDEPENDS. While
the current documentation was clear on that, it felt needed to add a
note on the fact that build-time dependencies may also result in
runtime dependencies, especially for people new to the project.

Add a warning block below the existing deploy-target documentation.
Also, link to the Overview and Concepts page, which explains it
thoroughly.

[ YOCTO #14377 ]

Reported-By: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: daf514d81d08e01657ff2dc171a0afb56753dfc6)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 56c84004daad5f8a5db53e36852331435d57c8af)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Antonin Godard
7dee2d8918 contributor-guide/submit-changes.rst: suggest to remove the git signature
By default when sending patches Git adds the git version at the bottom
of the patch, which is not necessary in most cases. Suggest to remove it
when configuring Git when sending patches.

Suggested-By: Jaekyu Lee <jaekyu.lee@lge.com>
(From yocto-docs rev: b3223f919e0445c0059cddf0ce02cb27f83582c3)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d3465691231f10466703198a831a681803ffdfad)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Trevor Gamblin
62861c3f13 reproducible-builds.rst: show how to build a single package
Add a bit to the "Can we prove the project is reproducible?" section to
show how OEQA_REPRODUCIBLE_TEST_TARGET can be used to test a single
package (rather than the world build), as this may be useful for
maintainers.

[YOCTO #15619]

(From yocto-docs rev: 6fda76e3a879e72979b3678ce583604783f178bb)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Reviewed-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c4bc09f61621938086be377653121d6b4e62b570)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Mikko Rapeli
296bb52472 reproducible-builds.rst: document OEQA_REPRODUCIBLE_TEST_TARGET and OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS
They are used to fine tune build reproducibility test for
different build targets than "bitbake world" and to define
which recipes can be rebuild using sstate cache.

These are useful when ramping up build reproducibility in complex
build configurations where "bitbake world" has too many failures.

(From yocto-docs rev: 7d38b706441f1ae7154794f7df315924962cae40)

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
(cherry picked from commit c74928b1a7b2f285ed70999539f0c630316ad364)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
258cbf1813 linux-yocto/5.15: update to v5.15.175
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    91786f140358 Linux 5.15.175
    fb8c76c7604a x86/static-call: fix 32-bit build
    4e54dc4bbc60 ALSA: usb-audio: Fix a DMA to stack memory bug
    ae7c1c523323 x86/xen: remove hypercall page
    1ef790d6bf55 x86/xen: use new hypercall functions instead of hypercall page
    a501b4dbedb4 x86/xen: add central hypercall functions
    c7b4cfa6213a x86/xen: don't do PV iret hypercall through hypercall page
    8abab99114f1 x86/static-call: provide a way to do very early static-call updates
    1c50e8da50b0 objtool/x86: allow syscall instruction
    8f2c179b1d3c x86: make get_cpu_vendor() accessible from Xen code
    2657ba851fa3 xen/netfront: fix crash when removing device
    3dfd8991ad33 Revert "parisc: fix a possible DMA corruption"
    f585c5793aca tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
    b57ac2d92c1f bpf: sync_linked_regs() must preserve subreg_def
    4749f9f9b050 blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
    56b9f3df5ac0 ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
    bd85ca6cf9a4 team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    2f780d4c3b64 bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    c2047b0e216c net/sched: netem: account for backlog updates from child qdisc
    beffa32a21e6 Documentation: PM: Clarify pm_runtime_resume_and_get() return value
    3561951e53f2 qca_spi: Make driver probing reliable
    4f488db386c2 qca_spi: Fix clock speed for multiple QCA7000
    d45e3e1a77fd cxgb4: use port number to set mac addr
    78079fda4829 ACPI: resource: Fix memory resource type union access
    9f82e8ace7d5 net: sparx5: fix the maximum frame length register
    6cedf276444d net: sparx5: fix FDMA performance issue
    c21c7c1c00bc net: lapb: increase LAPB_HEADER_LEN
    22a94e0530b5 ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
    143304277ffd ptp: kvm: Use decrypted memory in confidential guest on x86
    80a0c4dc6641 selftests: mlxsw: sharedbuffer: Remove duplicate test cases
    b4eb6df5bc26 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
    07b569eda6fe tipc: fix NULL deref in cleanup_bearer()
    a864e2e1ceda batman-adv: Do not let TT changes list grows indefinitely
    b0b2157b3c27 batman-adv: Remove uninitialized data in full table TT response
    437529aa7d01 batman-adv: Do not send uninitialized TT changes
    bbdb3307f609 acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
    c052f775ee6c exfat: fix potential deadlock on __exfat_get_dentry_set
    4310902c766e virtio/vsock: Fix accept_queue memory leak
    43e76736b4bf bpf, sockmap: Fix update element with same
    3560e2028374 xfs: fix scrub tracepoints when inode-rooted btrees are involved
    58d71a547717 xfs: return from xfs_symlink_verify early on V4 filesystems
    5ff4d29a675f xfs: don't drop errno values when we fail to ficlone the entire range
    fd157244902a xfs: update btree keys correctly when _insrec splits an inode root block
    85128462d348 drm/i915: Fix memory leak by correcting cache object name in error handler
    1247e1df086a usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
    e450c9e8f398 usb: ehci-hcd: fix call balance of clocks handling routines
    6c6d2e9d197a usb: dwc2: Fix HCD port connection race
    38fa1f443a3c usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
    55320f5cdd9d usb: dwc2: Fix HCD resume
    11cbaff06356 ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
    e75054ff9cab usb: host: max3421-hcd: Correctly abort a USB request.
    98b76329bd63 ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
    11c9e383d410 tcp: check space before adding MPTCP SYN options
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: c027335ae3d81db4676db751de115daab5290a27)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
23863e084b linux-yocto/5.15: update to v5.15.174
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    963e654022cc Linux 5.15.174
    2e29116c4596 Bluetooth: hci_core: Fix calling mgmt_device_connected
    5e71985e855c net/smc: Fix af_ops of child socket pointing to released memory
    5cedfe8aaf18 media: venus: vdec: fixed possible memory leak issue
    d3717cf6baa4 serial: amba-pl011: fix build regression
    d897650c5897 drm/amdgpu: rework resume handling for display (v2)
    e1896f381d27 drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
    9760b0c61e53 net: dsa: microchip: correct KSZ8795 static MAC table access
    686e05c9dbd6 Bluetooth: L2CAP: Fix uaf in l2cap_connect
    522328e80acf arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
    51d3d80a6dc3 arm64/sve: Discard stale CPU state when handling SVE traps
    221a2c898962 gve: Fixes for napi_poll when budget is 0
    154cf95664de scsi: core: Fix scsi_mode_select() buffer length handling
    7bdecbd49a5d Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
    b1453a5616c7 fou: remove warn in gue_gro_receive on unsupported protocol
    0b31e28fbd77 ima: Fix use-after-free on a dentry's dname.name
    801d64177faa crypto: hisilicon/qm - inject error before stopping queue
    1b5691014f30 ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
    c5cb98554c4c drm/amd/display: Check BIOS images before it is used
    b3cdb9b9f815 mmc: mtk-sd: Fix error handle of probe function
    85e50b4f9896 xhci: dbc: Fix STALL transfer event handling
    fbab85323192 mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
    9a351255db26 mm/damon/vaddr-test: split a test function having >1024 bytes frame size
    a3eca3037e70 jffs2: Fix rtime decompressor
    bd384b04ad19 jffs2: Prevent rtime decompress memory corruption
    a0e0f67f2fc1 KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    fd92260b7f68 KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    065e075d438f KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    9e9f343615c0 Revert "unicode: Don't special case ignorable code points"
    d7e6934eb736 tracing/eprobe: Fix to release eprobe when failed to add dyn_event
    968757f1f45b btrfs: fix missing snapshot drew unlock when root is dead during swap activation
    38a4826f1bdf sched/core: Prevent wakeup of ksoftirqd during idle load balance
    6aeeac48fc1b sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
    d071dba5ddd2 sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
    25fc82f3a868 sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
    7ff5af6bdb1e modpost: Add .irqentry.text to OTHER_SECTIONS
    973cfc7ea3f6 modpost: Include '.text.*' in TEXT_SECTIONS
    d0f2889ec52b misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
    ee68554d2c03 powerpc/prom_init: Fixup missing powermac #size-cells
    a7fd78075031 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
    da4809b05b65 usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    2d98fa2a50b8 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
    a436e75678bf PCI: Add ACS quirk for Wangxun FF5xxx NICs
    ade2062d5b53 PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    67416562ae0d PCI: Detect and trust built-in Thunderbolt chips
    a6cddf68b340 i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
    a365de2fbfbe f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
    c710201af655 nvdimm: rectify the illogical code within nd_dax_probe()
    ff11b66cf848 pinctrl: qcom-pmic-gpio: add support for PM8937
    f7b0fc4b570a scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
    bbb47c06f011 scsi: st: Don't modify unknown block number in MTIOCGET
    b8283d52ed15 leds: class: Protect brightness_show() with led_cdev->led_access mutex
    2174bbc235f7 scsi: hisi_sas: Add cond_resched() for no forced preemption model
    02cef9720550 tracing: Use atomic64_inc_return() in trace_clock_counter()
    7ba51688437b pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
    8a4534483e02 netpoll: Use rcu_access_pointer() in __netpoll_setup
    a7b8f71c7a29 net/neighbor: clear error in case strict check is not set
    4e83046d2bc9 rocker: fix link status detection in rocker_carrier_init()
    565dca66578a ASoC: hdmi-codec: reorder channel allocation list
    219960a48771 Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
    dfb3f9d3f602 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
    0824dcc63580 wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    76581147b05c drm/amdgpu: set the right AMDGPU sg segment limitation
    53b03a43a881 drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    a3d408870bc1 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
    9efe72eefd4c jfs: fix array-index-out-of-bounds in jfs_readdir
    6676034aa753 jfs: fix shift-out-of-bounds in dbSplit
    823d573f5450 jfs: array-index-out-of-bounds fix in dtReadFirst
    efe1b9bbf356 dma-debug: fix a possible deadlock on radix_lock
    081bc4fe23f9 drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    905dc479b648 drm/amdgpu: Dereference the ATCS ACPI buffer
    80aa90210a7a drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
    1d42b11b7bb7 drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
    b92521c314d2 wifi: ath5k: add PCI ID for Arcadyan devices
    61f1b977949b wifi: ath5k: add PCI ID for SX76X
    276a473c956f net: inet6: do not leave a dangling sk pointer in inet6_create()
    3e8258070b0f net: inet: do not leave a dangling sk pointer in inet_create()
    2b46994a6e76 net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
    1fe625f12d09 net: af_can: do not leave a dangling sk pointer in can_create()
    a8677028dd51 Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
    132e615bb1d7 af_packet: avoid erroring out after sock_init_data() in packet_create()
    3cc92d542384 net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
    9681a5217b02 net: ethernet: fs_enet: Use %pa to format resource_size_t
    52637f8b7c42 net: fec_mpc52xx_phy: Use %pa to format resource_size_t
    8e9f76ddc20c samples/bpf: Fix a resource leak
    3caa244323a6 r8169: don't apply UDP padding quirk on RTL8126A
    6078d3ca132b drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
    f632b3be8ee8 drm/mcde: Enable module autoloading
    8c715f966406 drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    c9c2cf983dc8 drm/vc4: hvs: Set AXI panic modes for the HVS
    e497edb8f31e soc: imx8m: Probe the SoC driver as platform driver
    0b16b2aa2242 media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
    afdfebd9bbe7 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
    ea6588abcc15 kcsan: Turn report_filterlist_lock into a raw_spinlock
    86680f33461a kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
    d476931a6bbc btrfs: avoid unnecessary device path update for the same device
    06a92f810df8 s390/cpum_sf: Handle CPU hotplug remove during sampling
    ac98b8c10346 epoll: annotate racy check
    dc02407ea952 iommu/arm-smmu: Defer probe of clients after smmu device bound
    a9e371e03f08 ocfs2: update seq_file index in ocfs2_dlm_seq_next
    951c53931a91 mmc: core: Further prevent card detect during shutdown
    47de5d1bf378 mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
    f373a1898175 regmap: detach regmap from dev on regmap_exit
    4d03f705e9d7 xsk: fix OOB map writes when deleting elements
    f9f50a5792a6 dma-buf: fix dma_fence_array_signaled v4
    ad34306ac683 bpf: fix OOB devmap writes when deleting elements
    fb5fee35bdd1 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
    48eb6e740494 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
    87bf3ea841a5 scsi: ufs: core: sysfs: Prevent div by zero
    694598a7828d scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
    ca36d9d53745 scsi: qla2xxx: Fix use after free on unload
    1f1cf3940a36 scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    66618696bcbb scsi: qla2xxx: Fix NVMe and NPIV connect issue
    7d9f66082b84 scsi: qla2xxx: Fix abort in bsg timeout
    1cc00b106611 ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
    b89de14c9c80 ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
    023ee962a690 ALSA: usb-audio: add mixer mapping for Corsair HS80
    1c176f5155ee arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
    dbcdadade0c2 tracing: Fix cmp_entries_dup() to respect sort() comparison rules
    faa0a1975a6f can: dev: can_set_termination(): allow sleeping GPIOs
    fb17d710c7a4 watchdog: rti: of: honor timeout-sec property
    2ed3e3a3ac06 HID: wacom: fix when get product name maybe null pointer
    eb6a5262ec66 bpf: Fix exact match conditions in trie_get_next_key()
    6155fac6d9ae bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
    c5327720a465 ocfs2: free inode when ocfs2_get_init_inode() fails
    c8504c0f1f80 drm/v3d: Enable Performance Counters before clearing them
    cd5106c77d6d spi: mpc52xx: Add cancel_work_sync before module remove
    2c84d183a448 tools: Override makefile ARCH variable if defined, but empty
    9bc69d38e3b8 ALSA: usb-audio: Notify xrun for low-latency mode
    9b9b61c5d0a2 ALSA: pcm: Avoid reference to status->state
    f0294f444afc ALSA: pcm: Add more disconnection checks at file ops
    0d6cd1151e26 tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
    ece859aac1d3 drm/sti: Add __iomem for mixer_dbg_mxn's parameter
    2bd350f0e74c bpftool: fix potential NULL pointer dereferencing in prog_dump()
    ca906853f6c7 bpftool: Remove asserts from JIT disassembler
    3cbde9287469 serial: amba-pl011: Fix RX stall when DMA is used
    e3769d2b62d0 serial: amba-pl011: Use port lock wrappers
    9f0ce8feecb9 dt-bindings: serial: rs485: Fix rs485-rts-delay property
    e9583ac84945 dt_bindings: rs485: Correct delay values
    ad4dfa7ea7f5 gpio: grgpio: Add NULL check in grgpio_probe
    7546c60a3786 gpio: grgpio: use a helper variable to store the address of ofdev->dev
    b65958284401 geneve: do not assume mac header is set in geneve_xmit_skb()
    c20f91bd9395 ethtool: Fix wrong mod state in case of verbose and no_mask bitset
    59a59da8de47 netfilter: nft_set_hash: skip duplicated elements pending gc run
    0e67805e805c netfilter: ipset: Hold module reference while requesting a module
    c7d644f76949 net: sched: fix erspan_opt settings in cls_flower
    4fe517643f52 igb: Fix potential invalid memory access in igb_init_module()
    d7804000d8b9 net/qed: allow old cards not supporting "num_images" to work
    f502a88fdd41 net/smc: fix LGR and link use-after-free issue
    ebfee3e153f6 net/smc: Limit backlog connections
    d2a4894f2385 tipc: Fix use-after-free of kernel socket in cleanup_bearer().
    bc3d4423def1 dccp: Fix memory leak in dccp_feat_change_recv
    0b8903e6c881 net/ipv6: release expired exception dst cached in socket
    4199dd78a598 can: j1939: j1939_session_new(): fix skb reference counting
    c6e778901d00 net: hsr: avoid potential out-of-bound access in fill_frame_info()
    f0f627fd6af2 net/sched: tbf: correct backlog statistic for GSO packets
    fb09c0cc058b ptp: Add error handling for adjfine callback in ptp_clock_adjtime
    36a9d94dac28 netfilter: x_tables: fix LED ID check in led_tg_check()
    d6e1776f51c9 ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
    6e2c9e417ef7 can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
    1ed979b833df can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    c56112f3e709 can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
    dd3ef4edcc89 can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
    46e062d62674 can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
    48d8223ff178 can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
    f1977d763c9c can: do not increase rx statistics when generating a CAN rx error message frame
    f503436c5e3b can: peak_usb: CANFD: store 64-bits hw timestamps
    c90279de2b99 watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
    2663884d248d iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    be085075cf2c drm/etnaviv: flush shader L1 cache after user commandstream
    e98ff67f5a68 drm/sti: avoid potential dereference of error pointers
    f5804567cf96 drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
    31c857e7496d drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
    6a0648f96c3c btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
    0ab0a3ad24e9 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
    6cefcadd34e3 nfsd: make sure exp active before svc_export_show
    d63f0926b9a7 PCI: rockchip-ep: Fix address translation unit programming
    9f3ea5db09b0 dm thin: Add missing destroy_work_on_stack()
    23af63a55bf5 ovl: properly handle large files in ovl_security_fileattr
    b0c349a65c16 PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    0cb21f1ea3a2 i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
    a32d0e136664 scsi: ufs: exynos: Fix hibern8 notify callbacks
    7bb9fa6fe600 util_macros.h: fix/rework find_closest() macros
    ca687fdce5b9 s390/entry: Mark IRQ entries to fix stack depot warnings
    68e79b848196 ad7780: fix division by zero in ad7780_write_raw()
    d2b85ce0561f btrfs: ref-verify: fix use-after-free after invalid ref action
    c71d114ef68c btrfs: add a sanity check for btrfs root in btrfs_search_slot()
    6e2ac5f585a0 btrfs: add might_sleep() annotations
    ab6cfcf8ed2c quota: flush quota_release_work upon quota writeback
    7320429e48cd xfs: remove unknown compat feature check in superblock write validation
    bac5a74c31c2 xfs: fix log recovery when unknown rocompat bits are set
    584754f983d3 ASoC: fsl_micfil: fix the naming style for mask definition
    c3f4f4547fb2 sh: intc: Fix use-after-free bug in register_intc_controller()
    fe6cbf0b2ac3 sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
    f211501cfc2b SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
    197b613c9080 sunrpc: remove unnecessary test in rpc_task_set_client()
    7338c4377742 nfs: ignore SB_RDONLY when mounting nfs
    14d02aec5898 modpost: remove incorrect code in do_eisa_entry()
    60658fdb6540 rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    4950408793b1 9p/xen: fix release of IRQ
    db94e06c24cd 9p/xen: fix init sequence
    df2a7aa342f1 block: return unsigned int from bdev_io_min
    b7836529e059 jffs2: fix use of uninitialized variable
    4d9807048b85 ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
    b1ee0aa4945c ubi: fastmap: Fix duplicate slab cache names while attaching
    2b19d2fd58be ubifs: Correct the total block count by deducting journal reservation
    246f621d3639 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
    7c6098bdb62a rtc: abx80x: Fix WDT bit position of the status register
    3b28fb1376aa rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    2ab9639f16b0 NFSv4.0: Fix a use-after-free problem in the asynchronous open()
    fcf32ea8193f um: Always dump trace for specified task in show_stack
    a6294d601075 um: Fix the return value of elf_core_copy_task_fpregs
    1bd118c5f887 um: Fix potential integer overflow during physmem setup
    f5872a2a84ec rpmsg: glink: Propagate TX failures in intentless mode as well
    c7dac3af57e3 SUNRPC: make sure cache entry active before cache_show
    842f1c27a1ae NFSD: Prevent a potential integer overflow
    f78318f70e3c lib: string_helpers: silence snprintf() output truncation warning
    0247da93bf62 usb: dwc3: gadget: Fix looping of queued SG entries
    893f9ea3f6f1 usb: dwc3: gadget: Fix checking for number of TRBs left
    bc3c34362bef ALSA: hda/realtek: Apply quirk for Medion E15433
    0ac6cd6133a1 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    ad78a3a11e66 ALSA: hda/realtek: Set PCBeep to default value for ALC274
    8c50311d8ab0 ALSA: hda/realtek: Update ALC225 depop procedure
    8799f4332a9f ALSA: pcm: Add sanity NULL check for the default mmap fault handler
    150dff3e1bf7 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    41979fbb7ced soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
    ed228b74d8a5 media: wl128x: Fix atomicity violation in fmc_send_cmd()
    20082e2e8b79 HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    bb2f15b5222f block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    5d2e9a42b1fd arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    e2b91997db28 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    bef9a2835011 um: vector: Do not use drvdata in release
    c52effe58215 serial: 8250: omap: Move pm_runtime_get_sync
    1635d9a0ff1b um: net: Do not use drvdata in release
    5727343348f3 um: ubd: Do not use drvdata in release
    3b22047378ef ubi: wl: Put source PEB into correct list if trying locking LEB failed
    a162b111ff1a platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    bc846c0be8a4 cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
    e6e42c57cee9 mtd: spi-nor: core: replace dummy buswidth from addr to data
    6827966f6953 spi: Fix acpi deferred irq probe
    e67471437ae9 netfilter: ipset: add missing range check in bitmap_ip_uadt
    9f2d8f3e813d gpio: exar: set value when external pull-up or pull-down is present
    283211911b42 Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
    4b14ac9e73bf serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    e2e286306b67 Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    479795371221 driver core: bus: Fix double free in driver API bus_register()
    3a0c02f550c5 usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    2e891a42e75e Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    1d1e618c1706 exfat: fix uninit-value in __exfat_get_dentry_set
    48c335245371 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
    6bdb3907d50d tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    5354599855a9 apparmor: test: Fix memory leak for aa_unpack_strdup()
    8797b7712de7 comedi: Flush partial mappings in error case
    1484fdc59e04 fsnotify: fix sending inotify event with unexpected filename
    41bbb1eb996b PCI: Fix use-after-free of slot->bus on hot remove
    227fde8a27f7 KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    4fe0d9228226 powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
    a304c1412210 crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    dc0c28b7f98f perf/x86/intel/pt: Fix buffer full but size is 0 case
    f00012d5bf0c ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    27a93c45e16a jfs: xattr: check invalid xattr size more strictly
    8d72b5c93360 ext4: fix FS_IOC_GETFSMAP handling
    519320ef836b ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    9887d859cd60 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
    ca0d15ee5a68 soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    9b26540820e5 ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    13327d78229f Revert "drivers: clk: zynqmp: update divider round rate logic"
    3504696ecfb6 usb: ehci-spear: fix call balance of sehci clk handling routines
    ab011f7439d9 ALSA: usb-audio: Fix out of bounds reads when finding clock sources
    e8823e6ff313 xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
    cb645064e081 ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    dadac97f066a parisc: fix a possible DMA corruption
    487b128f07b8 apparmor: fix 'Do simple duplicate message elimination'
    3c7355690f37 ALSA: hda/realtek: Update ALC256 depop procedure
    d148c0956954 counter: stm32-timer-cnt: Add check for clk_enable()
    098480edee1b misc: apds990x: Fix missing pm_runtime_disable()
    f45e6fc02435 USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    4fb1375d830d USB: chaoskey: fail open after removal
    5f6c28cbd995 usb: yurex: make waiting on yurex_write interruptible
    dc26c8db0837 usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    bc2dbad38537 iio: light: al3010: Fix an error handling path in al3010_probe()
    2dcc86fefe09 tcp: Fix use-after-free of nreq in reqsk_timer_handler().
    dcacfcfe20cc bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    16aa78edf6dd net: hsr: fix hsr_init_sk() vs network/transport headers.
    d24b2fa24789 spi: atmel-quadspi: Fix register name in verbose logging function
    c33db53e40e1 octeontx2-af: RPM: Fix mismatch in lmac type
    0be9f9c52e29 net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    c3c572dd294d marvell: pxa168_eth: fix call balance of pep->clk handling routines
    0659c6de7b98 net: mdio-ipq4019: add missing error check
    bbc697882231 net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
    28d185df039a tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    d211ad1209bc net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    3317641dac2d power: supply: bq27xxx: Fix registers of bq27426
    a2cd5d322d22 power: supply: core: Remove might_sleep() from power_supply_put()
    bd87598c6c5b fs_parser: update mount_api doc to match function signature
    9567bd34aa3b vfio/pci: Properly hide first-in-list PCIe extended capability
    dc2144cfefff selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
    6293d3df287d vdpa/mlx5: Fix suboptimal range on iotlb iteration
    fb71f1788624 hwmon: (tps23861) Fix reporting of negative temperatures
    b6a394fe4c6b NFSD: Fix nfsd4_shutdown_copy()
    a12c897adf40 svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
    57dee363185b sunrpc: simplify two-level sysctl registration for svcrdma_parm_table
    d7892d68ee3c NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    c5d90f930274 NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
    74b5756de732 remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    3dbb7e68669d rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    04fcb57ac0fe rpmsg: glink: Fix GLINK command prefix
    e74022642291 rpmsg: glink: Send READ_NOTIFY command in FIFO full case
    d2e0ae595a3a rpmsg: glink: Add TX_DATA_CONT command while sending
    5f77ee6fd99d perf trace: Avoid garbage when not printing a syscall's arguments
    e3d8ded16712 perf trace: Do not lose last events in a race
    21e1cf688fb0 svcrdma: Address an integer overflow
    3ffaa3205380 m68k: coldfire/device.c: only build FEC when HW macros are defined
    8d4dcba03745 m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    8f61c0161f8e perf trace: avoid garbage when not printing a trace event's arguments
    4bd3d783be92 f2fs: check curseg->inited before write_sum_page in change_curseg
    a76172963ea2 f2fs: remove the unused flush argument to change_curseg
    6bd8aa76978d f2fs: open code allocate_segment_by_default
    634ffe866196 f2fs: remove struct segment_allocation default_salloc_ops
    3fd2fc9282dc f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    b5cf7ba111c2 PCI: cpqphp: Fix PCIBIOS_* return value confusion
    48597c484b82 PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    1784ec80bd1c perf probe: Correct demangled symbols in C++ program
    24e19b5f3511 perf probe: Fix libdw memory leak
    403efb4457c0 PCI: Fix reset_method_store() memory leak
    656af7b3dcf1 perf cs-etm: Don't flush when packet_queue fills up
    8ac9fbe43789 mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    246896417a0e pinctrl: k210: Undef K210_PC_DEFAULT
    1b26918fd849 clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    5a254ffef286 dt-bindings: clock: axi-clkgen: include AXI clk
    f4fbd70e15fa fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
    038e1d56b252 fbdev/sh7760fb: Alloc DMA memory from hardware device
    7f5355199d21 powerpc/kexec: Fix return of uninitialized variable
    17248fdbe3ca powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    8c966150d5ab ocfs2: fix uninitialized value in ocfs2_file_read_iter()
    35f5b68f63aa RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
    ef0613269a4f RDMA/hns: Fix out-of-order issue of requester when setting FENCE
    bb8b45883eb0 scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
    64654bf5efb3 scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
    59a4088829bc scsi: fusion: Remove unused variable 'rc'
    e76181a5be90 scsi: bfa: Fix use-after-free in bfad_im_module_exit()
    94c5f05270df mfd: rt5033: Fix missing regmap_del_irq_chip()
    3e4ff2af1b0a clk: imx: clk-scu: fix clk enable state save and restore
    55eb217f8f80 clk: imx: lpcg-scu: SW workaround for errata (e10858)
    6ce29bc3bb9f RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    f6ec13366875 powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
    e0a470b5733c powerpc/mm/fault: Fix kfence page fault reporting
    5fe7709251e3 mtd: rawnand: atmel: Fix possible memory leak
    b2073db65ab3 cpufreq: loongson2: Unregister platform_driver on failure
    bb6642d4b313 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
    da498e02c92e mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
    23230ac3c5ca mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
    91cee88255a3 mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
    a82dbec6e882 mfd: da9052-spi: Change read-mask to write-mask
    cac4995c03fe mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    af36ccb8f82d powerpc/vdso: Flag VDSO64 entry points as functions
    45b1d10ce84f pinctrl: zynqmp: drop excess struct member description
    aba170f58f64 trace/trace_event_perf: remove duplicate samples on the first tracepoint event
    6694f7acd625 bpf: fix recursive lock when verdict program return SK_PASS
    0d2ad72d100f wireguard: selftests: load nf_conntrack if not present
    d425e975c161 netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    a9584c897d1c Bluetooth: fix use-after-free in device_for_each_child()
    86bd0ba393a3 driver core: Introduce device_find_any_child() helper
    b889a7d68d7e ALSA: 6fire: Release resources at card release
    cadf1d8e9ddc ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
    9a48bd2184b1 ALSA: us122l: Use snd_card_free_when_closed() at disconnection
    befcca177752 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
    8772cba76574 net: rfkill: gpio: Add check for clk_enable()
    1bda953ed5bc drm/amdkfd: Fix wrong usage of INIT_WORK()
    1d63ab86e155 selftests: net: really check for bg process completion
    46087de50376 bpf, sockmap: Fix sk_msg_reset_curr
    e1f54c61c4c9 bpf, sockmap: Several fixes to bpf_msg_pop_data
    0f8db9b36930 bpf, sockmap: Several fixes to bpf_msg_push_data
    7073d9004fff selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    145edbd2ff19 selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    8468e42e5bc2 selftests, bpf: Add one test for sockmap with strparser
    d0e5847929a2 selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    72fb93bb48b4 selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    c99fd5911e27 netlink: typographical error in nlmsg_type constants definition
    43950c95ef8d netfilter: nf_tables: must hold rcu read lock while iterating object type list
    7ffeda67d366 netfilter: nf_tables: skip transaction if update object is not implemented
    65aec8dc425d drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    46b8e788c49d wifi: wfx: Fix error handling in wfx_core_init()
    940389e96d99 drm/etnaviv: hold GPU lock across perfmon sampling
    d4ce36476c65 drm/etnaviv: fix power register offset on GC300
    bef66f303ed8 drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    ac378560f90a drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    584fb280f30d drm/panfrost: Remove unused id_mask from struct panfrost_model
    a374e7e79fbd octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
    55c41b97001a octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
    785c6758ea32 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
    dd54e632bed9 drm: fsl-dcu: enable PIXCLK on LS1021A
    581261b2d6fd wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
    7f23fb2e0a15 selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    f1116a9d236e selftests/bpf: Fix msg_verify_data in test_sockmap
    18f1c9fd9376 drm/bridge: tc358767: Fix link properties discovery
    e69c5ebfb900 netdevsim: copy addresses for both in and out paths
    08c307552119 netdevsim: rely on XFRM state direction instead of flags
    7f6afb1b33fd xfrm: store and rely on direction to construct offload flags
    e4426baa9aa3 xfrm: rename xfrm_state_offload struct to allow reuse
    ded61e552767 libbpf: fix sym_is_subprog() logic for weak global subprogs
    a6fee1be65aa bpf: Fix the xdp_adjust_tail sample prog issue
    4e0e9e7af5f7 libbpf: Fix output .symtab byte-order during linking
    441bbc0cf7fb drm/bridge: anx7625: Drop EDID cache on bridge power off
    363e427097c7 ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    f5558e6b5cbe ASoC: fsl_micfil: fix regmap_write_bits usage
    0832e6e657a1 ASoC: fsl_micfil: use GENMASK to define register bit fields
    6869a23070c9 ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
    a20141b2a4f8 ASoC: fsl_micfil: Drop unnecessary register read
    ffa8a4e83c5d dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    26af2cca4179 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    4b92467725dc wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    6887f9f41267 drm/v3d: Address race-condition in MMU flush
    89267ef694d0 drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    2277397e711a drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    28e6151ccec4 wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    4f5e6866acfe wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    4e3931ffa904 drm/omap: Fix locking in omap_gem_new_dmabuf()
    53e1ad912a64 drm/omap: Fix possible NULL dereference
    8965db7fe2e9 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
    6a806399e4f5 drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    38c3f8acde76 platform/x86: panasonic-laptop: Return errno correctly in show callback
    0f7f31aaf613 platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit
    4676e5044404 media: atomisp: Add check for rgby_data memory allocation failure
    6f8f96ab93f7 media: atomisp: remove #ifdef HAS_NO_HMEM
    8aa2da2fd911 media: venus: provide ctx queue lock for ioctl synchronization
    9c704cd7e318 venus: venc: add handling for VIDIOC_ENCODER_CMD
    06ad3f4b0bed media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD
    f7edaca4f66a media: venus : Addition of EOS Event support for Encoder
    745e6d8bbe6a media: venus: vdec: decoded picture buffer handling during reconfig sequence
    b75d87df0f31 media: venus: venc: Use pmruntime autosuspend
    2a5b8de6fcb9 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
    ec0b5a3454fe selftests/resctrl: Protect against array overrun during iMC config parsing
    d9f878fd8b99 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators
    65816651d9c4 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
    c84daf3b325b arm64: dts: mt8183: jacuzzi: Move panel under aux-bus
    03dd02b207dd arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus
    7de5804460c3 regmap: irq: Set lockdep class for hierarchical IRQ domains
    c4908741911d spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
    5f116d12c0ef spi: tegra210-quad: Avoid shift-out-of-bounds
    6a6908aa03c9 pmdomain: ti-sci: Add missing of_node_put() for args.np
    4869448ba8cc ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    504ee6496d11 pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    189227d2d8ff arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
    3b16dcf7241f arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
    ec8b64d666a3 arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
    973c859752cb cgroup/bpf: only cgroup v2 can be attached by bpf programs
    d4cc5a87c24d Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    f275bbe332f7 arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
    50497379f82a arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
    be613fc3c24d arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    8d1e8505859f tpm: fix signed/unsigned bug when checking event logs
    2d88cf062b86 mmc: mmc_spi: drop buggy snprintf()
    f4b7bf5a50f1 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
    f34d172307f9 soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    9f5a2db6be13 spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    97e793af8715 spi: spi-fsl-lpspi: downgrade log level for pio mode
    cd1c59275de4 clocksource/drivers:sp804: Make user selectable
    ede7084c9071 kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    730eb858dff7 kcsan, seqlock: Support seqcount_latch_t
    2f7e3eac5fee seqlock/latch: Provide raw_read_seqcount_latch_retry()
    6c1edccbc980 timekeeping: Consolidate fast timekeeper
    cee8f85696a8 time: Fix references to _msecs_to_jiffies() handling of values
    da7e49db34c5 crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    4ea3e3b761e3 crypto: bcm - add error check in the ahash_hmac_init function
    5e959bf234d0 crypto: caam - add error check to caam_rsa_set_priv_key_form
    c5c64ff34a9d ACPI: CPPC: Fix _CPC register setting issue
    029ac07bb92d EDAC/igen6: Avoid segmentation fault on module unload
    d465ea267167 crypto: cavium - Fix the if condition to exit loop after timeout
    96001f52ae8c crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
    d3008b4ea1d9 EDAC/fsl_ddr: Fix bad bit shift operations
    20c2fe56889b thermal: core: Initialize thermal zones before registering them
    06de6e9bc818 crypto: qat - remove faulty arbiter config reset
    4ad7033de109 EDAC/bluefield: Fix potential integer overflow
    945c76cad892 firmware: google: Unregister driver_info on failure
    6187727e57ae crypto: caam - Fix the pointer passed to caam_qi_shutdown()
    06cbfbb13ac8 hfsplus: don't query the device logical block size multiple times
    b5d785fb2000 s390/syscalls: Avoid creation of arch/arch/ directory
    578b3297aca6 acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    9529c7a62042 arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    4fb897945111 m68k: mvme147: Reinstate early console
    c7bf342937fa m68k: mvme16x: Add and use "mvme16x.h"
    e2097596d34f m68k: mvme147: Fix SCSI controller IRQ numbers
    869cf50b9c9d nvme-pci: fix freeing of the HMB descriptor table
    6983b8ac787b initramfs: avoid filename buffer overrun
    2be0ca62b8e2 mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    41219c147df8 brd: defer automatic disk creation until module initialization succeeds
    60f89db56246 brd: remove brd_devices_mutex mutex
    c5979734eda3 s390/cio: Do not unregister the subchannel based on DNV
    d7a08f5f80ff kselftest/arm64: mte: fix printf type warnings about longs
    38002ab1bd42 x86/barrier: Do not serialize MSR accesses on AMD
    061479ca14af nvme: fix metadata handling in nvme-passthrough
    01cdddde39b0 cifs: Fix buffer overflow when parsing NFS reparse points
    b661948bac86 rcu-tasks: Idle tasks on offline CPUs are in quiescent states
    7251463f4bd0 ipmr: Fix access to mfc_cache_list without lock held
    07df4a754746 ARM: 9420/1: smp: Fix SMP for xip kernels
    2b55ec8d9c49 ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    affd04aaef11 proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    3727c0bf74eb ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    80c35a870ea3 ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    3849d29eef43 can: j1939: fix error in J1939 documentation.
    ba20a72c5a5f platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    224f87efa087 platform/x86: dell-smbios-base: Extends support to Alienware products
    10987691701a regulator: rk808: Add apply_bit for BUCK3 on RK809
    cba0338d1831 soc: qcom: Add check devm_kasprintf() returned value
    d9b04bbae6c0 net: usb: qmi_wwan: add Quectel RG650V
    6bdf34883e65 x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    5e958ced670f ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    f78ccffd9eb7 selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    8ba9e834ff95 usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
    8f6ef43aed11 mac80211: fix user-power when emulating chanctx
    069e1d600bdc wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    0b9a2fb8bb27 ASoC: Intel: sst: Support LPE0F28 ACPI HID
    96b04a80541e ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    84e961ad2a16 ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
    31545f4b7cdb NFS: nfs_async_write_reschedule_io must not recurse into the writeback code
    44f48eb9a605 mm: resolve faulty mmap_region() error path behaviour
    679d3a53eb02 mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    a08241812f21 mm: unconditionally close VMAs on error
    105d04c88e5c mm: avoid unsafe VMA hook invocation when error arises on mmap hook
    d3f9d88c2c03 mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    0a9a182ea5c7 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
    9467c49437e9 NFSD: Never decrement pending_async_copies on error
    7267625baf36 NFSD: Initialize struct nfsd4_copy earlier
    43e46ee5efc0 NFSD: Limit the number of concurrent async COPY operations
    34f200d66c1b NFSD: Async COPY result needs to return a write verifier
    24ab9e0cc554 NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
    ef1e1954d784 media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    659191444d99 lib/buildid: Fix build ID parsing logic
    7a514335cf41 mmc: sunxi-mmc: Fix A100 compatible description
    43f79bfcfb09 mmc: sunxi-mmc: Add D1 MMC variant
    69434d929adf drm/bridge: tc358768: Fix DSI command tx
    f701eb601470 Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
    d904e4d845aa nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
    647f416d31ac ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    19c71cdd7797 nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
    b8a1d572478b KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
    8fbac997556b KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
    63a47139dd96 vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    0e04746db2ec ocfs2: uncache inode which has failed entering the group
    903d896448c2 mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
    6ec06379b8de x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    a1e3ba952956 ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    0b99de8bbffc samples: pktgen: correct dev to DEV
    882f392d9e36 net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
    c7b97f9e794d net/mlx5e: kTLS, Fix incorrect page refcounting
    5b47c2f47c2f net/mlx5: fs, lock FTE when checking if active
    4e47b99a7764 drm/rockchip: vop: Fix a dereferenced before check warning
    d2fab3d66cc1 netlink: terminate outstanding dump on socket close
    7b4ec178bf38 clk: qcom: gcc-qcs404: fix initial rate of GPLL3
    c80499741610 leds: lp55xx: Remove redundant test for invalid channel number
    03c863749bab iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
    b4f3288f9530 vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
    885109aa0c70 ftrace: Fix regression with module command in stack_trace_filter
    749eac5a6687 ovl: Filter invalid inodes with missing lookup function
    72ed66623953 media: uvcvideo: Require entities to have a non-zero unique ID
    1895f0928d80 media: uvcvideo: Stop stream during unregister
    64f72a738864 media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
    944303ecc9b5 media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
    1cfc844ee3d9 media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
    b6208d1567f9 media: ts2020: fix null-ptr-deref in ts2020_probe()
    f3c4e088ec01 media: imx-jpeg: Ensure power suppliers be suspended before detach them
    815d14147068 media: i2c: tc358743: Fix crash in the probe error path when using polling
    f68bb1210fbe media: imx-jpeg: Set video drvdata before register video device
    ba57d800592b arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
    b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: d96738bdbc96ec9afa369eb8746684a940bba349)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
e46378fa70 linux-yocto/5.15: update to v5.15.173
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    0a51d2d4527b Linux 5.15.173
    e2eb1b3c807b 9p: fix slab cache name creation for real
    8b1d55e43cee udf: Avoid directory type conversion failure due to ENOMEM
    5ea4b73e268b udf: Allocate name buffer in directory iterator on heap
    a5ee9fe48fa5 mm/memory: add non-anonymous page check in the copy_present_page()
    d43f1430d47c mm: krealloc: Fix MTE false alarm in __do_krealloc
    97ed7ff58de6 io_uring: fix possible deadlock in io_register_iowq_max_workers()
    1f4fd53ffb7c md/raid10: improve code of mrdev in raid10_sync_request
    a3d8f121a12a net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    ae8516232db7 HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    86c48496bcd7 HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
    b3e612bd8f64 fs: Fix uninitialized value issue in from_kuid and from_kgid
    8004122bf90e vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    79c12f418ece powerpc/powernv: Free name on error in opal_event_init()
    4c3dcbb14e57 drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS
    d46e6a0c83e8 sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    5c02e1b5760f crypto: marvell/cesa - Disable hash algorithms
    01b7ded8042e bpf: use kvzmalloc to allocate BPF verifier environment
    e781120e8e39 HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    6711f40490df HID: multitouch: Add support for B2402FVA track point
    f8b7e56b7555 block: Fix elevator_get_default() checking for NULL q->tag_set
    eb94e4a0db42 irqchip/ocelot: Fix trigger register address
    826cbda55820 9p: Avoid creating multiple slab caches with the same name
    d98fd109f827 Linux 5.15.172
    ab812669f191 ALSA: usb-audio: Add endianness annotations
    2a6a4e69f255 vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
    7cf259878203 hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
    d810c7c7d42d ACPI: PRM: Clean up guid type in struct prm_handler_info
    da66f4821e6e ALSA: usb-audio: Add quirks for Dell WD19 dock
    7ea07b808bd5 ALSA: usb-audio: Support jack detection on Dell dock
    e3cd170b998f ucounts: fix counter leak in inc_rlimit_get_ucounts()
    dcc8fe8c8314 ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
    2e1546ff199b irqchip/gic-v3: Force propagation of the active state with a read-back
    679c414993b5 USB: serial: option: add Quectel RG650V
    8031b262bb32 USB: serial: option: add Fibocom FG132 0x0112 composition
    2fa7d209f071 USB: serial: qcserial: add support for Sierra Wireless EM86xx
    44fff2c16c5a USB: serial: io_edgeport: fix use after free in debug printk
    8f47984b35f3 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
    d9e65d461a9d usb: dwc3: fix fault at system suspend if device was already runtime suspended
    63559ba8077c usb: musb: sunxi: Fix accessing an released usb phy
    51bc11244a30 fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    467d84dc78c9 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
    e3915f028b1f net: do not delay dst_entries_add() in dst_release()
    e81b674ead8e ice: Add a per-VF limit on number of FDIR filters
    c964429ef53f net: bridge: xmit: make sure we have at least eth header len bytes
    c24fa427fc0a btrfs: reinitialize delayed ref list after deleting it from the list
    9b453e8b108a nfs: Fix KMSAN warning in decode_getfattr_attrs()
    4e24041ba86d io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
    a44e81249b8c io_uring: use kiocb_{start,end}_write() helpers
    9386396a43ef fs: create kiocb_{start,end}_write() helpers
    00334fb35d40 io_uring: rename kiocb_end_write() local helper
    e70ec8ab9fd3 posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    5510496be244 ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
    cd6a370d395a dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
    fdef3b94dfeb dm cache: fix potential out-of-bounds access on the first resume
    01c4e15a45bb dm cache: optimize dirty bit checking with find_next_bit when resizing
    ff1dd8a04c30 dm cache: fix out-of-bounds access to the dirty bitset when resizing
    850c31160f6e dm cache: correct the number of origin blocks to match the target length
    71014a53f20a thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    27fc29b53769 drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
    aaf6160a4b7f drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
    4596c0e4f762 drm/amdgpu: Adjust debugfs eviction and IB access permissions
    51488ee3562c pwm: imx-tpm: Use correct MODULO value for EPWM mode
    282ad7124652 media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    a749c15dccc5 media: v4l2-tpg: prevent the risk of a division by zero
    190cd7728408 media: pulse8-cec: fix data timestamp at pulse8_setup()
    f2b4f277c41d media: cx24116: prevent overflows on SNR calculus
    a930cddfd153 media: s5p-jpeg: prevent buffer overflows
    0d75f887aabd ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
    a511f9bd9871 ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    98e88750df64 scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    7db74a57cca3 media: adv7604: prevent underflow condition when reporting colorspace
    719112022425 media: dvb_frontend: don't play tricks with underflow values
    5f76f7df1486 media: dvbdev: prevent the risk of out of memory access
    2de476e842c9 media: stb0899_algo: initialize cfr before using it
    e4f6765679e1 Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    3898393b5483 net: arc: fix the device for dma_map_single/dma_unmap_single
    1654d4888d24 net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
    3fc95c9771cc net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    e36482b222e0 net: hns3: fix kernel crash when uninstalling driver
    262dc6ea5f1e i40e: fix race condition by adding filter's intermediate sync state
    e8e35dc97c81 can: c_can: fix {rx,tx}_errors statistics
    a758aa6a773b sctp: properly validate chunk size in sctp_sf_ootb()
    5c8eb37f626a net: enetc: set MAC address to the VF net_device
    199c20fb7499 security/keys: fix slab-out-of-bounds in key_task_permission
    4a8cab88ce77 nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    dbfdfb2eb7f2 NFSv3: handle out-of-order write replies.
    80ca099223ab NFS: Add a tracepoint to show the results of nfs_set_cache_invalid()
    c4be3004fdb1 NFSv3: only use NFS timeout for MOUNT when protocols are compatible
    05ade5d43378 HID: core: zero-initialize the report buffer
    2a8e8ebe9df9 ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    ea5efbcf0859 ARM: dts: rockchip: Fix the spi controller on rk3036
    7e99abbcc1b1 ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    fc144c295ab7 ARM: dts: rockchip: fix rk3036 acodec node
    98745ce735dc arm64: dts: imx8mp: correct sdhc ipg clk
    17bbedc1347b arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    f2a54c100ebe arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    611f304c6b5c arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    c74f7c0a2c3a arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    3168342c3883 arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: e39c6dcab94eba1e398d3b9336023e7cfc558a2c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
701de46be7 linux-yocto/5.15: update to v5.15.171
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    3c17fc4839052 Linux 5.15.171
    3d88f7c32432f mac80211: always have ieee80211_sta_restart()
    b3959d5eca136 vt: prevent kernel-infoleak in con_font_get()
    ae27888719311 drm/i915: Fix potential context UAFs
    5a31d94fc0161 Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
    3d9528484480e mm: shmem: fix data-race in shmem_getattr()
    2ac15e5a8f42f wifi: iwlwifi: mvm: fix 6 GHz scan construction
    f05dbebb8ee34 nilfs2: fix kernel bug due to missing clearing of checked flag
    ada431c6c31a2 x86/bugs: Use code segment selector for VERW operand
    ecd62f684386f ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
    4c4e238d3adad mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
    85f58ee33c6c9 mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves
    c1b8856c5a7dc mm/page_alloc: explicitly define what alloc flags deplete min reserves
    17dedfd6de69a mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags
    9da195a2d35b7 mm/page_alloc: treat RT tasks similar to __GFP_HIGH
    92e52ff398b55 mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
    ca8527f257369 mm/page_alloc: split out buddy removal code from rmqueue into separate helper
    28e7a507196fe mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
    6036719c23a90 mm/page_alloc: call check_new_pages() while zone spinlock is not held
    0d0d55b3ee030 riscv: Remove duplicated GET_RM
    6ad44aa8e11cd riscv: Remove unused GENERATING_ASM_OFFSETS
    f6070925f4695 riscv: Use '%u' to format the output of 'cpu'
    ddb04c81d129a riscv: efi: Set NX compat flag in PE/COFF header
    1c54b0b0d72c7 riscv: vdso: Prevent the compiler from inserting calls to memset()
    69548bb663fcb nilfs2: fix potential deadlock with newly created symlinks
    7a59817f68e79 iio: light: veml6030: fix microlux value calculation
    4f588fffc307a iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
    2f39548f45693 staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
    8ac22fe1e2b10 wifi: iwlegacy: Clear stale interrupts before resuming device
    705be2dc45c7f wifi: ath10k: Fix memory leak in management tx
    b2bcbe5450b20 wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
    4749d336170db Revert "driver core: Fix uevent_show() vs driver detach race"
    c4f90f09713fe xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    78a6caa022de4 xhci: Fix Link TRB DMA in command ring stopped completion event
    391884630fba2 usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
    14d1e39269a82 usb: phy: Fix API devm_usb_put_phy() can not release the phy
    f9889e5f7c7fb usbip: tools: Fix detach_port() invalid port error path
    057b5b9716664 misc: sgi-gru: Don't disable preemption in GRU driver
    9ce8e1d7ef459 NFS: remove revoked delegation from server's delegation list
    cb1711e65bff0 net: amd: mvme147: Fix probe banner message
    e1d57c29e4733 scsi: scsi_transport_fc: Allow setting rport state to current state
    60fb94ef46c23 fs/ntfs3: Additional check in ni_clear()
    47e8a17491e37 fs/ntfs3: Fix possible deadlock in mi_read
    759016b1f0335 fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
    e5ae785900868 fs/ntfs3: Check if more than chunk-size bytes are written
    c46d6b0258800 ACPI: CPPC: Make rmw_lock a raw_spin_lock
    564caf173b867 firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    b1d2de8a669fa netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
    9f605135a5c0f net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    ba22ea0134838 netfilter: Fix use-after-free in get_info()
    86c8ebe02d880 bpf: Fix out-of-bounds write in trie_get_next_key()
    c2150f666c6fc netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
    05df1b1dff8f1 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
    86833e4e6131d gtp: allow -1 to be specified as file description from userspace
    5edcb3fdb12c3 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
    ece593fc9c007 net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
    720be854fb6ef ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    3f45d590ccbae wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
    daa426f19aad7 wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
    120d8ce610734 mac80211: Add support to trigger sta disconnect on hardware restart
    41c8acb337927 mac80211: do drv_reconfig_complete() before restarting all
    730dc0818fb88 RDMA/bnxt_re: synchronize the qp-handle table array
    adf37466c3837 RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    15d3b1735ea42 RDMA/cxgb4: Dump vendor specific QP details
    1c3beef555271 wifi: brcm80211: BRCM_TRACING should depend on TRACING
    e97b59cda228f wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    52f47de448205 mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    a69d18e8029d7 cgroup: Fix potential overflow issue when checking max_depth
    8df5292953083 ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
    6ef99e50be2fe ACPI: PRM: Change handler_addr type to void pointer
    0a1b0b04aecd6 ACPI: PRM: Remove unnecessary blank lines
    0f62358ce85b2 ksmbd: fix user-after-free from session log off
    7bed977305af8 selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    6f0605db50e2c clk: imx: Add check for kcalloc
    5b837b9e1543e bpf: Fix the indention issue in grow_stack_state()
    42b62697634d1 cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9dc f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f8 f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f8 bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87c smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00bf of: module: add buffer overflow check in of_modalias()
    b8086c3c1548b reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62c ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee6 ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6ac tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab7709564 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac028864 block, loop: support partitions without scanning
    45f504f301d41 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789e jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde6 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56b tpm: Add flag to use default cancellation policy
    1cd19d48fb909 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa82 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c511 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2e tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6d gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932aa ata: ahci: fix enum constants for gcc-13
    5d6cb145541aa net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb42872 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da784063 tools/resolve_btfids: Build with host flags
    00f2f1a782f9b tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c20 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70c libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac7 libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314d drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f9 powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f301871 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8f perf python: Account for multiple words in CC
    1c5699ee85d4f fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d89 fs: add mode_strip_sgid() helper
    d971726836412 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c3 irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde39 ixgbevf: add disable link state
    e5601ae2bd249 ixgbe: add improvement for MDD response functionality
    caa57cd80575d ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df1 Check /dev/console using init_stat()
    04574fd5579a4 tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e57170184 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba7 drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    4931609013207 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa36 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c1 irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423ff irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb1 cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b0 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795d pnmtologo: use relocatable file name
    3b40d5b41155f of: configfs: remove unused variable overlay_lock
    6c085baf18386 tools: use basename to identify file in gen-mach-types
    2fca0fd719812 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ada vt/conmakehash: improve reproducibility
    a75774679f28c OF: DT-Overlay configfs interface (v8)
    d179c639b30ba x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91e ACPI: thermal: drop an always true check
    7614af249993e xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97ee xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922dc virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eafd bpf: Disallow unprivileged bpf by default
    ebfb1822e9f97 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2e Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95b jbd2: fix use-after-free of transaction_t race
    2d83e8196487f jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793c netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e71226259962 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f3 rcu: Avoid alloc_pages() when recording stack
    f78574dee71e4 kasan: test: silence intentional read overflow warnings
    d313cb89b6b1f kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647ccf arm64: support page mapping percpu first chunk allocator
    e5bf16752dcac vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f3 kasan: test: bypass __alloc_size checks
    00aa7573e53a2 kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd44 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213c workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b3 kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e295 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36adb lib/stackdepot: introduce __stack_depot_save()
    85373e66d8474 lib/stackdepot: remove unused function argument
    5b6cc9b251f32 lib/stackdepot: include gfp.h
    c9f3902d8069e aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02cc aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9f aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898e aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd8966450 aufs: tiny, headers after fs_context
    8ddb40e31c29b aufs: fs_context 7/7, finally remount
    69035f71c6fd1 aufs: fs_context 6/7, now mount
    bc841b9706977 aufs: fs_context 5/7, parse all other mount options
    435188053da29 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd7 aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c3 aufs: fs_context 2/7, parse "br" mount option
    a8488f603134a aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564e aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec4 aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c2 aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b1 aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e4 aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4c aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225d aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd8 aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e50 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394ad Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b58765 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c9638892228 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad36271 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b2 ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d39 ARM: config: multi v7: Add renamed symbols
    badaf96564fe1 ARM: config: multi v7: Clean up enabled by default options
    34996040fc9bd ARM: config: multi v7: Drop unavailable options
    7f685244afb3a powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a641 riscv: fix build with binutils 2.38
    9df58d0705069 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b5 x86_64_defconfig: Fix warnings
    02bf23d26bc4c arm64: defconfig: cleanup config options
    05914e2c87e51 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b90 aufs5: fix build against v5.15.3+
    a4b3abf4d96d7 qemux86: add configuration symbol to select values
    fee94ee091541 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d93 clear_warn_once: bind a timer to written reset value
    95faacac47e8d clear_warn_once: expand debugfs to include read support
    de20c4240018c perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c15 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e2 perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a0 perf: fix bench numa compilation
    e79becc44fa6b perf: add SLANG_INC for slang.h
    b1033b5886819 perf: add sgidefs.h to for mips builds
    cf9db484ac0b4 perf: change --root to --prefix for python install
    7fd052c2c5624 perf: add 'libperl not found' warning
    27a437cdd4691 perf: force include of <stdbool.h>
    3b99d21bec2f6 fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506bb FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c1 FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324aeb FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124f aufs: adjust to v5.15 fs changes
    f45da75c8759b aufs5: core
    047f57e07e01b aufs5: standalone
    029fc15574c88 aufs5: mmap
    610d0192ee94d aufs5: base
    d4e428d0ec5f4 aufs5: kbuild
    eb067eca251ab yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875e yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a67 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7e yaffs: include blkdev.h
    506b7251bfb81 yaffs: fix misplaced variable declaration
    a0e26ff364dcc yaffs2: v5.6 build fixups
    b10b1b2d169ef yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb2147 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279b yaffs: repair yaffs_get_mtd_device
    d662538516a7c yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7c yaffs2: fix memory leak in mount/umount
    3378e4a9e4043 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef1 Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051cd fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e735 yaffs2: adjust to proper location of MS_RDONLY
    608807406f138 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c8 initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa109 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d03 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf01883 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf337 defconfigs: drop obselete options
    9a27e3b5f4e73 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b42 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a3 uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a5 uvesafb: print error message when task timeout occurs
    f280a1ed09626 compiler.h: Undef before redefining __attribute_const__
    4352732f268c1 vmware: include jiffies.h
    7954a677968dc Resolve jiffies wrapping about arp
    5f28a1035d950 nfs: Allow default io size to be configured.
    0d7260ad71066 check console device file on fs when booting
    900a12e37e0a2 mount_root: clarify error messages for when no rootfs found
    7b878cbea7261 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3d modpost: mask trivial warnings
    0d294adb09cbc kbuild: exclude meta directory from distclean processing
    a097cdd95a9ef powerpc: serialize image targets
    5db6ec39a0a3e arm: serialize build targets
    cbabca27905e2 crtsavres: fixups for 5.4+
    7fc7656ed403e powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2e powerpc: Disable attribute-alias warnings from gcc8
    186c54665b676 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964cae powerpc: kexec fix for powerpc64
    2ac35b89a0f90 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bbc mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a8 mips: Kconfig: add QEMUMIPS64 option
    6a81b3c081078 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e542 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4c arm/Makefile: Fix systemtap
    b7f1ab59f19e5 vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7e arm: ARM EABI socketcall
    019d142fd956a ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 298c992af738519963a1aab42ea666649e8fdc6c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
805518a2e3 linux-yocto/5.15: update to v5.15.170
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    72244eab0dad8 Linux 5.15.170
    2d08a6c31c65f xfrm: validate new SA's prefixlen using SA family when sel.family is unset
    a8e691fe1894c ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
    b5cd035ebb9b7 net: phy: dp83822: Fix reset pin definitions
    399927f0f875b serial: protect uart_port_dtr_rts() in uart_shutdown() too
    fcfc61f63fbe9 selinux: improve error checking in sel_write_load()
    b7a396f76ada2 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    610d4cea9b442 xfrm: fix one more kernel-infoleak in algo dumping
    385e2f3e0d83d ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    58cb697d80e66 KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    dc39799f0cc2f openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    822203f6355f4 nilfs2: fix kernel bug due to missing clearing of buffer delay flag
    681c99175bb87 ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
    c5a3aaa377134 ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    6032287747f87 drm/amd: Guard against bad data for ATIF ACPI method
    df75b21af7920 btrfs: zoned: fix zone unusable accounting for freed reserved extent
    6c6774cd760df ALSA: hda/realtek: Update default depop procedure
    7d4eb9e22131e ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
    b4007d5fe3862 bpf,perf: Fix perf_event_detach_bpf_prog error handling
    e56e0ec1b79f5 posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    b96eff3d83408 r8169: avoid unsolicited interrupts
    999612996df28 net: sched: fix use-after-free in taprio_change()
    cc1c98da1338d net: usb: usbnet: fix name regression
    c9a0aed519771 net: wwan: fix global oob in wwan_rtnl_policy
    90baa455aa7e0 netfilter: xtables: fix typo causing some targets not to load on IPv6
    7dbd5b9ff0676 net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
    38eb596656434 net: plip: fix break; causing plip to never transmit
    919ab6e237028 be2net: fix potential memory leak in be_xmit()
    9c6ce55e6f0bd net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
    45cb99c5b95eb xfrm: respect ip protocols rules criteria when performing dst lookups
    253843ec0c0a4 xfrm: extract dst lookup parameters into a struct
    b86b0d6eea204 tracing: Consider the NULL character when validating the event length
    cdf3ab1cf811c jfs: Fix sanity check in dbMount
    f9e6e1f00fcd1 platform/x86: dell-sysman: add support for alienware products
    4b520c11d0f3d ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
    0e13fe4298a35 arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
    e1ce098ea047c platform/x86: dell-wmi: Ignore suspend notifications
    4fc0d8660e391 udf: fix uninit-value use in udf_get_fileshortad
    f952a33478b7e arm64: Force position-independent veneers
    11db74f6a293a ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    0bb2cb789349b ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
    34a422274b693 drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
    b723f96407a0a exec: don't WARN for racy path_noexec check
    dd5db4078d120 block, bfq: fix procress reference leakage for bfqq in merge chain
    073530898ebf4 usb: dwc3: core: Fix system suspend on TI AM62 platforms
    81213d2058ec8 XHCI: Separate PORT and CAPs macros into dedicated file
    c3f3926854b12 usb: gadget: Add function wakeup support
    6a5de8753c70d KVM: s390: gaccess: Check if guest address is in memslot
    cbb31278711d5 KVM: s390: gaccess: Cleanup access to guest pages
    567e7bcb10ccc KVM: s390: gaccess: Refactor access address range check
    1f1c1ccdcb50e KVM: s390: gaccess: Refactor gpa and length calculation
    cf60d19d40184 arm64: probes: Fix uprobes for big-endian kernels
    acfb32d42a31d arm64:uprobe fix the uprobe SWBP_INSN in big-endian
    fa58e23ea1359 Bluetooth: bnep: fix wild-memory-access in proto_unregister
    42d83e5fed3e1 s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    8747440605689 usb: typec: altmode should keep reference to parent
    e07d05b7f5ad9 smb: client: fix OOBs when building SMB2_IOCTL request
    39e02fa903232 scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    03ca631c07f34 genetlink: hold RCU in genlmsg_mcast()
    8459d61fbf249 tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
    5febfc5453898 net: systemport: fix potential memory leak in bcm_sysport_xmit()
    9e006c176f84f net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
    2311451931755 net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    1eaa58198c646 net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
    09839c24769fe macsec: don't increment counters for an unrelated SA
    75df8b53800ce octeontx2-af: Fix potential integer overflows on integer shifts
    213d1ff6c4917 net: usb: usbnet: fix race in probe failure
    b340df7458673 drm/msm: Allocate memory for disp snapshot with kvzalloc()
    42cf045086fea drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    d125fbf1e128d drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    de5857fa7bcc9 RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
    e810e6d464039 RDMA/bnxt_re: Return more meaningful error
    ca83bc311ab04 ipv4: give an IPv4 dev to blackhole_netdev
    6a0c627cd76ea RDMA/irdma: Fix misspelling of "accept*"
    2e78ecb1220a0 RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    4e19aca8db696 ALSA: hda/cs8409: Fix possible NULL dereference
    208d3edea1106 ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    e8143c0699320 x86/resctrl: Avoid overflow in MB settings in bw_validate()
    322a19baaaa25 RDMA/bnxt_re: Add a check for memory allocation
    0a2430b146d67 RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    fe068afb86866 bpf: devmap: provide rxq after redirect
    4e1e428533845 bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
    6f0605db50e2c clk: imx: Add check for kcalloc
    5b837b9e1543e bpf: Fix the indention issue in grow_stack_state()
    42b62697634d1 cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9dc f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f8 f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f8 bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87c smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00bf of: module: add buffer overflow check in of_modalias()
    b8086c3c1548b reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62c ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee6 ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6ac tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab7709564 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac028864 block, loop: support partitions without scanning
    45f504f301d41 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789e jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde6 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56b tpm: Add flag to use default cancellation policy
    1cd19d48fb909 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa82 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c511 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2e tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6d gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932aa ata: ahci: fix enum constants for gcc-13
    5d6cb145541aa net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb42872 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da784063 tools/resolve_btfids: Build with host flags
    00f2f1a782f9b tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c20 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70c libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac7 libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314d drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f9 powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f301871 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8f perf python: Account for multiple words in CC
    1c5699ee85d4f fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d89 fs: add mode_strip_sgid() helper
    d971726836412 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c3 irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde39 ixgbevf: add disable link state
    e5601ae2bd249 ixgbe: add improvement for MDD response functionality
    caa57cd80575d ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df1 Check /dev/console using init_stat()
    04574fd5579a4 tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e57170184 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba7 drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    4931609013207 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa36 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c1 irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423ff irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb1 cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b0 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795d pnmtologo: use relocatable file name
    3b40d5b41155f of: configfs: remove unused variable overlay_lock
    6c085baf18386 tools: use basename to identify file in gen-mach-types
    2fca0fd719812 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ada vt/conmakehash: improve reproducibility
    a75774679f28c OF: DT-Overlay configfs interface (v8)
    d179c639b30ba x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91e ACPI: thermal: drop an always true check
    7614af249993e xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97ee xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922dc virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eafd bpf: Disallow unprivileged bpf by default
    ebfb1822e9f97 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2e Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95b jbd2: fix use-after-free of transaction_t race
    2d83e8196487f jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793c netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e71226259962 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f3 rcu: Avoid alloc_pages() when recording stack
    f78574dee71e4 kasan: test: silence intentional read overflow warnings
    d313cb89b6b1f kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647ccf arm64: support page mapping percpu first chunk allocator
    e5bf16752dcac vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f3 kasan: test: bypass __alloc_size checks
    00aa7573e53a2 kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd44 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213c workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b3 kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e295 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36adb lib/stackdepot: introduce __stack_depot_save()
    85373e66d8474 lib/stackdepot: remove unused function argument
    5b6cc9b251f32 lib/stackdepot: include gfp.h
    c9f3902d8069e aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02cc aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9f aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898e aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd8966450 aufs: tiny, headers after fs_context
    8ddb40e31c29b aufs: fs_context 7/7, finally remount
    69035f71c6fd1 aufs: fs_context 6/7, now mount
    bc841b9706977 aufs: fs_context 5/7, parse all other mount options
    435188053da29 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd7 aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c3 aufs: fs_context 2/7, parse "br" mount option
    a8488f603134a aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564e aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec4 aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c2 aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b1 aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e4 aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4c aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225d aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd8 aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e50 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394ad Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b58765 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c9638892228 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad36271 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b2 ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d39 ARM: config: multi v7: Add renamed symbols
    badaf96564fe1 ARM: config: multi v7: Clean up enabled by default options
    34996040fc9bd ARM: config: multi v7: Drop unavailable options
    7f685244afb3a powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a641 riscv: fix build with binutils 2.38
    9df58d0705069 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b5 x86_64_defconfig: Fix warnings
    02bf23d26bc4c arm64: defconfig: cleanup config options
    05914e2c87e51 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b90 aufs5: fix build against v5.15.3+
    a4b3abf4d96d7 qemux86: add configuration symbol to select values
    fee94ee091541 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d93 clear_warn_once: bind a timer to written reset value
    95faacac47e8d clear_warn_once: expand debugfs to include read support
    de20c4240018c perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c15 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e2 perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a0 perf: fix bench numa compilation
    e79becc44fa6b perf: add SLANG_INC for slang.h
    b1033b5886819 perf: add sgidefs.h to for mips builds
    cf9db484ac0b4 perf: change --root to --prefix for python install
    7fd052c2c5624 perf: add 'libperl not found' warning
    27a437cdd4691 perf: force include of <stdbool.h>
    3b99d21bec2f6 fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506bb FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c1 FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324aeb FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124f aufs: adjust to v5.15 fs changes
    f45da75c8759b aufs5: core
    047f57e07e01b aufs5: standalone
    029fc15574c88 aufs5: mmap
    610d0192ee94d aufs5: base
    d4e428d0ec5f4 aufs5: kbuild
    eb067eca251ab yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875e yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a67 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7e yaffs: include blkdev.h
    506b7251bfb81 yaffs: fix misplaced variable declaration
    a0e26ff364dcc yaffs2: v5.6 build fixups
    b10b1b2d169ef yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb2147 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279b yaffs: repair yaffs_get_mtd_device
    d662538516a7c yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7c yaffs2: fix memory leak in mount/umount
    3378e4a9e4043 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef1 Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051cd fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e735 yaffs2: adjust to proper location of MS_RDONLY
    608807406f138 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c8 initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa109 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d03 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf01883 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf337 defconfigs: drop obselete options
    9a27e3b5f4e73 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b42 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a3 uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a5 uvesafb: print error message when task timeout occurs
    f280a1ed09626 compiler.h: Undef before redefining __attribute_const__
    4352732f268c1 vmware: include jiffies.h
    7954a677968dc Resolve jiffies wrapping about arp
    5f28a1035d950 nfs: Allow default io size to be configured.
    0d7260ad71066 check console device file on fs when booting
    900a12e37e0a2 mount_root: clarify error messages for when no rootfs found
    7b878cbea7261 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3d modpost: mask trivial warnings
    0d294adb09cbc kbuild: exclude meta directory from distclean processing
    a097cdd95a9ef powerpc: serialize image targets
    5db6ec39a0a3e arm: serialize build targets
    cbabca27905e2 crtsavres: fixups for 5.4+
    7fc7656ed403e powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2e powerpc: Disable attribute-alias warnings from gcc8
    186c54665b676 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964cae powerpc: kexec fix for powerpc64
    2ac35b89a0f90 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bbc mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a8 mips: Kconfig: add QEMUMIPS64 option
    6a81b3c081078 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e542 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4c arm/Makefile: Fix systemtap
    b7f1ab59f19e5 vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7e arm: ARM EABI socketcall
    019d142fd956a ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: e2161b9afd3795f0b0ab03fa968ee659609476c1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
9b8a077044 linux-yocto/5.15: update to v5.15.169
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    74cdd62cb470 Linux 5.15.169
    f74847722133 ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
    eb817fe255e1 powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
    edf814605726 nilfs2: propagate directory read errors from nilfs_find_entry()
    5b88612ea5de mptcp: prevent MPC handshake on port-based signal endpoints
    353016364391 mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
    2b1281f9fd01 mptcp: fallback when MPTCP opts are dropped after 1st data
    9729010a0ac5 tcp: fix mptcp DSS corruption due to large pmtu xmit
    12c1676d598e mptcp: handle consistently DSS corruption
    6654efe264b0 mptcp: track and update contiguous data status
    755b9532c885 irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
    655f5d4662b9 pinctrl: ocelot: fix system hang on level based interrupts
    b6400eb0b347 x86/entry_32: Clear CPU buffers after register restore in NMI return
    a6f4701f8dcf x86/entry_32: Do not clobber user EFLAGS.ZF
    12dd888f4845 x86/apic: Always explicitly disarm TSC-deadline timer
    7861ca27f6bd x86/resctrl: Annotate get_mem_config() functions as __init
    440311903231 parport: Proper fix for array out-of-bounds access
    88a892071d22 USB: serial: option: add Telit FN920C04 MBIM compositions
    d062bbc58f85 USB: serial: option: add support for Quectel EG916Q-GL
    b6ae69ec6002 xhci: Mitigate failed set dequeue pointer commands
    dca9429c307b xhci: Fix incorrect stream context type macro
    7c270acfc8ec Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    04bba4714f26 Bluetooth: Remove debugfs directory on module init failure
    bb76a6ecf1b9 iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    7db9bcb846d1 iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    c202eadbf9cc iio: light: opt3001: add missing full-scale range value
    50039aec43a8 iio: light: veml6030: fix IIO device retrieval from embedded device
    cf95ce2cff8d iio: light: veml6030: fix ALS sensor resolution
    3cf71f6f21b2 iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
    37be5d0d5443 iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    e209a51ad215 iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    51a9a143448a iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    605c0d55dcf7 iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    572006a05eaa drm/vmwgfx: Handle surface check failure correctly
    fda5dc80121b drm/radeon: Fix encoder->possible_clones
    e8dd801362b3 io_uring/sqpoll: close race on waiting for sqring entries
    455a469758e5 blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
    0b263c2086ef x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    0cced32e21ef x86/bugs: Skip RSB fill at VMEXIT
    e421c6839f69 x86/entry: Have entry_ibpb() invalidate return predictions
    1e0398acb650 x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    43bdd2ea738e x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    dad88f266f30 KVM: s390: Change virtual to physical address access in diag 0x258 handler
    41693253973e s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    0bd9a30c22af iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
    07efbee2214c io_uring/sqpoll: do not put cpumask on stack
    939007d2a9fa io_uring/sqpoll: retain test for whether the CPU is valid
    592e7864e44c io_uring/sqpoll: do not allow pinning outside of cpuset
    3ae63a8c1685 drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
    82bd728a06e5 KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
    b825e0f9d68c dm-crypt, dm-verity: disable tasklets
    e8a834eb09bb wifi: mac80211: fix potential key use-after-free
    d0ae6ffa1aeb secretmem: disable memfd_secret() if arch cannot set direct map
    e41710f5a61a mm/swapfile: skip HugeTLB pages for unuse_vma
    cc1102b5473e fat: fix uninitialized variable
    1043b6453914 irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
    c81dcaa9cd0b net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
    659fae608501 arm64: probes: Fix simulate_ldr*_literal()
    ad4bc35a6d22 arm64: probes: Remove broken LDR (literal) uprobe support
    c8789fbe2bbf posix-clock: Fix missing timespec64 check in pc_clock_settime()
    dcc7207483b2 net: enetc: add missing static descriptor and inline keyword
    6430aaaee5b0 net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
    9c439311c13f udf: Fix bogus checksum computation in udf_rename()
    4a1d95fc9706 udf: Don't return bh from udf_expand_dir_adinicb()
    dfb34bb97d4b udf: Handle error when expanding directory
    cb2b0325b76c udf: Remove old directory iteration code
    0003d349614d udf: Convert udf_link() to new directory iteration code
    25815ac67179 udf: Convert udf_mkdir() to new directory iteration code
    feeb42a744f2 udf: Convert udf_add_nondir() to new directory iteration
    f3c2fe1dfcee udf: Implement adding of dir entries using new iteration code
    55b445b2fccb udf: Convert udf_unlink() to new directory iteration code
    8c32b93e7879 udf: Convert udf_rmdir() to new directory iteration code
    6decbe20362e udf: Convert empty_dir() to new directory iteration code
    dd74f6d3ed6a udf: Convert udf_get_parent() to new directory iteration code
    8cd380c6dd90 udf: Convert udf_lookup() to use new directory iteration code
    39d52a113ef8 udf: Convert udf_readdir() to new directory iteration
    626860c470ff udf: Convert udf_rename() to new directory iteration code
    e6355892ca87 udf: Provide function to mark entry as deleted using new directory iteration code
    a48e84cc50e6 udf: Implement searching for directory entry using new iteration code
    7add383ba57d udf: Move udf_expand_dir_adinicb() to its callsite
    311192441cc8 udf: Convert udf_expand_dir_adinicb() to new directory iteration
    de268ec62a15 udf: New directory iteration code
    46dcafa90dff ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 092d66eca7a7d473b5650818952527f377881136)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
1b8949ce68 linux-yocto/5.15: update to v5.15.168
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    584a40a22cb9 Linux 5.15.168
    1b62ef7f23c3 net: xilinx: axienet: Schedule NAPI in two steps
    56d5ca2ef0d7 selftests: net: more strict check in net_helper
    7ef0ff59324a net: axienet: start napi before enabling Rx/Tx
    a97eacadb096 ext4: fix warning in ext4_dio_write_end_io()
    8fcd1021b260 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
    83948838e1c7 net: vrf: determine the dst using the original ifindex for multicast
    70247cc8ddb4 net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
    760852df5707 net: Handle l3mdev in ip_tunnel_init_flow
    9476ecd7f7b8 xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
    78f4daf715e8 net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
    7db54f3ba8cf i2c: smbus: Check for parent device before dereference
    63a07379fdb6 block, bfq: fix uaf for accessing waker_bfqq after splitting
    40a6e660d2a3 kthread: unpark only parked kthread
    8c3de9282dde nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
    cda875cd1506 mptcp: pm: do not remove closing subflows
    d8435f584031 net: dsa: lan9303: ensure chip reset and wait for READY status
    1cdec792b245 net: Fix an unsafe loop on the list
    daf462ff3cde net: explicitly clear the sk pointer, when pf->create fails
    24ab54a066d2 drm/v3d: Stop the active perfmon before being destroyed
    dd2bac3d6339 hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
    1c4da771257e usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    e31942147bf5 usb: xhci: Fix problem with xhci resume from suspend
    254ef45afea5 usb: dwc3: core: Stop processing of pending events if controller is halted
    34354210968f Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    d246ee018569 HID: plantronics: Workaround for an unexcepted opposite volume key
    8a6fef7d22a1 resource: fix region_intersects() vs add_memory_driver_managed()
    8c6ad37e5882 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
    a77e1d1ae962 hwmon: (adt7470) Add missing dependency on REGMAP_I2C
    36b8e8dee2d5 hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    b5a3a65f2907 hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    1fdc3bab3073 x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
    330c825e66ef RDMA/hns: Fix UAF for cq async event
    5e336384cc9b slip: make slhc_remember() more robust against malicious packets
    fadf8fdb3110 ppp: fix ppp_async_encode() illegal access
    c9abdd07f52f mctp: Handle error of rtnl_register_module().
    947acd1b09b0 rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
    21d30b12695a net: rtnetlink: add msg kind names
    95ad7ee0faee netfilter: fib: check correct rtable in vrf setups
    66464a439e61 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
    5c6cb7ab36e7 netfilter: rpfilter/fib: Populate flowic_l3mdev field
    5bcde9b43021 net: Add l3mdev index to flow struct and avoid oif reset for port devices
    85ff9a0f793c netfilter: xtables: avoid NFPROTO_UNSPEC where needed
    f30ea678a21e sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    b5d662f49701 net: ibm: emac: mal: fix wrong goto
    8fb6503592d3 net/sched: accept TCA_STAB only for root qdisc
    0a94079e3841 igb: Do not bring the device up after non-fatal error
    9db6ce9e2738 i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
    394ded964ec9 ice: Fix netif_is_ice() in Safe Mode
    dcd9bf6d4eb2 gpio: aspeed: Use devm_clk api to manage clock source
    a82f6a31b1cb gpio: aspeed: Add the flush write to ensure the write complete.
    043b681d7613 net: dsa: b53: fix jumbo frames on 10/100 ports
    6bc26a82b6df net: dsa: b53: allow lower MTUs on BCM5325/5365
    94a40349914b net: dsa: b53: fix max MTU for BCM5325/BCM5365
    7b444a8d8f4b net: dsa: b53: fix max MTU for 1g switches
    def87a33e062 net: dsa: b53: fix jumbo frame mtu check
    8403021b6f32 thermal: intel: int340x: processor: Fix warning during module unload
    2ba1af0c9f99 thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
    5f14a2d06a8a net: phy: bcm84881: Fix some error handling paths
    496b2ab0fd10 Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
    95c0cff5a1a5 netfilter: br_netfilter: fix panic with metadata_dst skb
    7134b01bdb6a tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    ffdcd3bd2b42 tcp: fix to allow timestamp undo if no retransmits were sent
    ad0d76b8ee5d net: phy: dp83869: fix memory corruption when enabling fiber
    584c019baedd NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
    91b9a4c5cfca SUNRPC: Fix integer overflow in decode_rc_list()
    8a2023730850 ice: fix VLAN replay after reset
    ca5b42375bb8 NFSD: Mark filecache "down" if init fails
    e0e14dd35d42 RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
    41cf6f26abe4 fbdev: sisfb: Fix strbuf array overflow
    c643ef59390e drm/amd/display: Check null pointer before dereferencing se
    57551835ce41 driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
    59eba86b811b tools/iio: Add memory allocation failure check for trigger_name
    9a2bc9b6f929 virtio_pmem: Check device status before requesting flush
    6515b7b11757 comedi: ni_routing: tools: Check when the file could not be opened
    98d5873ee063 usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
    7ad71deb9bb7 usb: chipidea: udc: enable suspend interrupt after usb reset
    d18dc8e14b9c clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
    64f2ca5ce971 remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
    52f8c06eb34d media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
    92728fceefda ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
    f1c9b8dc7693 PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    28ad4ed09378 i2c: i801: Use a different adapter-name for IDF adapters
    351a97d9f8e7 PCI: Add ACS quirk for Qualcomm SA8775P
    3e11b8de964d clk: bcm: bcm53573: fix OF node leak in init
    394b2f4d5e01 RDMA/rtrs-srv: Avoid null pointer deref during path establishment
    eb54979471aa PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    7022a517bf1c RDMA/mad: Improve handling of timed out WRs of mad agent
    ee603aae244e ktest.pl: Avoid false positives with grub2 skip regex
    b85e6e461b6d s390/cpum_sf: Remove WARN_ON_ONCE statements
    4f5768a31cf7 ext4: nested locking for xattr inode
    fbb177bc1d64 ext4: don't set SB_RDONLY after filesystem errors
    11cd5f6e3578 bpf, x64: Fix a jit convergence issue
    02e5e382885c s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    4a749c14fa2b s390/facility: Disable compile time optimization for decompressor code
    297c326c3e21 bpf: Check percpu map value size first
    40364194698d Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
    1ce2632ebc30 virtio_console: fix misc probe bugs
    54b946e6518f fs/ntfs3: Refactor enum_rstbl to suppress static checker
    9d7e3c9fd6f5 selftests: net: Remove executable bits from library scripts
    5174a2aa22f0 selftests/net: synchronize udpgro tests' tx and rx connection
    fc1ec829bdf6 selftests/net: give more time to udpgro bg processes to complete startup
    084435dbd1f1 tracing: Have saved_cmdlines arrays all in one allocation
    455df76f48b1 drm/crtc: fix uninitialized variable use even harder
    daceb147b072 tracing: Remove precision vsnprintf() check from print event
    5320baa12de3 net: ethernet: cortina: Drop TSO support
    651b954cd8d5 unicode: Don't special case ignorable code points
    f57204edc107 ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
    a71677981775 perf report: Fix segfault when 'sym' sort key is not used
    46128370a72c vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
    3bb6763a8319 9p: add missing locking around taking dentry fid list
    8b4920bd66e1 ext4: fix inode tree inconsistency caused by ENOMEM
    5292eafa1b78 Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
    07b98400cb02 ACPI: battery: Fix possible crash when unregistering a battery hook
    eb7924f88f8a ACPI: battery: Simplify battery hook locking
    a1a37348195b clk: qcom: gcc-sc8180x: Add GPLL9 support
    21950321ad33 r8169: add tally counter fields added with RTL8125
    e36d8907f321 r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    befa8b1f466e dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
    f691f2b5b0f9 dt-bindings: clock: qcom: Add missing UFS QREF clocks
    a0c5a9b910c7 media: imx335: Fix reset-gpio handling
    846a78f7a1cb media: i2c: imx335: Enable regulator supplies
    e1b0752da800 drm/rockchip: vop: clear DMA stop bit on RK3066
    5e889e72de58 drm/rockchip: support gamma control on RK3399
    a8ade6a33ba9 drm/rockchip: define gamma registers for RK3399
    8fa2b6817a95 lib/buildid: harden build ID parsing logic
    91fdcb0d609c build-id: require program headers to be right after ELF header
    feca60173e0f drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
    21cb47db1ec9 uprobes: fix kernel info leak via "[uprobes]" vma
    9707c7895c05 arm64: errata: Expand speculative SSBS workaround once more
    f76454cf0fc1 arm64: cputype: Add Neoverse-N3 definitions
    66f6e22dbcad arm64: Add Cortex-715 CPU part definition
    8c30a9a8610c ext4: dax: fix overflowing extents beyond inode size when partially writing
    bb990db7baca ext4: properly sync file size update after O_SYNC direct IO
    d1c3c8a543a7 spi: bcm63xx: Fix missing pm_runtime_disable()
    676546ba317e i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    01eb21aff7f3 i2c: xiic: Use devm_clk_get_enabled()
    65677e96e958 i2c: core: Lock address during client device instantiation
    0e8926abfd7a i2c: create debugfs entry per adapter
    19e9b89c2c7a i2c: smbus: Use device_*() functions instead of of_*()
    c15e2ab4fed9 device property: Add fwnode_irq_get_byname
    bf36521e559e device property: Add fwnode_iomap()
    3d5bce8a9f6f kconfig: qconf: fix buffer overflow in debug links
    eb9329cd882a drm/amd/display: Fix system hang while resume with TBT monitor
    622bc6472350 drm/sched: Add locking to drm_sched_entity_modify_sched
    7e9d945af0b5 close_range(): fix the logics in descriptor table trimming
    322920b53dc1 tracing/timerlat: Fix a race during cpuhp processing
    5b8d9e4998ef tracing/hwlat: Fix a race during cpuhp processing
    4764c8206a0c gpio: davinci: fix lazy disable
    4c98fe0dfa2a btrfs: wait for fixup workers before stopping cleaner kthread during umount
    37fee9c220b9 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
    5ec5d4dddcd2 ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
    d32f7a43468f ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    95555f9f844d Input: adp5589-keys - fix adp5589_gpio_get_value()
    4449fedb8a71 Input: adp5589-keys - fix NULL pointer dereference
    fc65bc81884a rtc: at91sam9: fix OF node leak in probe() error path
    b0da9504a528 net: stmmac: Fix zero-division error when disabling tc cbs
    84a9d1356e76 tomoyo: fallback to realpath if symlink's pathname does not exist
    14bf8400bc47 iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    ab727ca020e6 clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
    c02e3ab7ec6c clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    bf6be32e2d39 media: venus: fix use after free bug in venus_remove due to race condition
    248e516937c4 clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
    ed17f3177153 clk: qcom: clk-rpmh: Fix overflow in BCM vote
    5c78477386bf media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    862ab6b7c733 media: sun4i_csi: Implement link validate for sun4i_csi subdev
    595f3a4c6541 clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    6be85772b0aa clk: rockchip: fix error for unknown clocks
    07b418d50ccb aoe: fix the potential use-after-free problem in more places
    2f8f226f4d56 NFSD: Fix NFSv4's PUTPUBFH operation
    825789ca9460 nfsd: map the EBADMSG to nfserr_io to avoid warning
    c5f73b371622 nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    fdb6429ae356 perf hist: Update hist symbol when updating maps
    ddf704c2ce3b exfat: fix memory leak in exfat_load_bitmap()
    f47b1d5e596a riscv: define ILLEGAL_POINTER_VALUE for 64bit
    aab0032d416e ext4: mark fc as ineligible using an handle in ext4_xattr_set()
    b4eff7c777df ext4: use handle to mark fc as ineligible in __track_dentry_update()
    4e66fc1d8c2b ext4: fix fast commit inode enqueueing during a full journal commit
    13e4a67f9508 ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
    3c1777a490ac ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    a9fcb1717d75 ext4: update orig_path in ext4_find_extent()
    32bbb59e3f18 ext4: fix double brelse() the buffer of the extents path
    9df59009dfc6 ext4: aovid use-after-free in ext4_ext_insert_extent()
    a34bed978364 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
    02cb2cb02aa7 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    a11cfe5eed24 ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    cafcc1bd6293 ext4: fix slab-use-after-free in ext4_split_extent_at()
    a1f71afb4f14 ext4: correct encrypted dentry name hash when not casefolded
    aca593e6070e ext4: no need to continue when the number of entries is 1
    c25c05b22a4a ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    6d62d3ef0844 ALSA: line6: add hw monitor volume control to POD HD500X
    5276f42f9aaf ALSA: usb-audio: Add native DSD support for Luxman D-08u
    cac2df1c0207 ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
    c82ee0462f60 ALSA: core: add isascii() check to card ID generator
    90e8f0bee38d drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    2d158286932e parisc: Fix itlb miss handler for 64-bit programs
    1905a87cf6f4 perf/core: Fix small negative period being ignored
    0c9655647ca9 power: supply: hwmon: Fix missing temp1_max_alarm attribute
    5199bc715fb1 spi: bcm63xx: Fix module autoloading
    35f7af9ba77e firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    438e11739cb3 i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    b261af5668cd i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    1883cad2cc62 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
    1973c4d8ee07 platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
    b8219d9dd128 selftests: vDSO: fix vdso_config for s390
    2d07646df487 selftests: vDSO: fix ELF hash table entry size for s390x
    0fc61eef8a46 selftests/mm: fix charge_reserved_hugetlb.sh test
    4862f6653c68 selftests: vDSO: fix vDSO symbols lookup for powerpc64
    cd7bd2afa30f selftests: vDSO: fix vdso_config for powerpc
    e6b63652b991 selftests: vDSO: fix vDSO name for powerpc
    d9663682ec6b selftests: breakpoints: use remaining time to check if suspend succeed
    ed11dd795817 spi: s3c64xx: fix timeout counters in flush_fifo
    0e2d6c17afb4 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    2a07e6f0ad8a usb: typec: tcpm: Check for port partner validity before consuming it
    09e829b39b43 blk-integrity: register sysfs attributes on struct device
    6356f2d2fc73 blk-integrity: convert to struct device_attribute
    71246997b749 blk-integrity: use sysfs_emit
    ef05572da0c0 ext4: fix i_data_sem unlock order in ext4_ind_migrate()
    4999fed877bb ext4: avoid use-after-free in ext4_ext_show_leaf()
    69fe6502aba1 ext4: ext4_search_dir should return a proper error
    ee6b6fa14592 of/irq: Refer to actual buffer size in of_irq_parse_one()
    9550d8d6f19f drm/amd/pm: ensure the fw_info is not null before using it
    c8c095856c1f drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    eb9a4b6fcb1c scsi: aacraid: Rearrange order of struct aac_srb_unit
    6aeb160ec5bd drm/printer: Allow NULL data in devcoredump printer
    1f9f8186e239 drm/amd/display: Initialize get_bytes_per_element's default to 1
    c13f9c62015c drm/amd/display: Fix index out of bounds in DCN30 color transformation
    c6979719012a drm/amd/display: Fix index out of bounds in degamma hardware format translation
    de6ee4f9e6b1 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
    14db8692afe1 drm/amd/display: Check stream before comparing them
    0af53bc5d13b platform/x86: touchscreen_dmi: add nanote-next quirk
    3217b83e1b80 HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
    f38b68a6b31d drm/amdgpu: enable gfxoff quirk on HP 705G4
    0000f7b4da60 drm/amdgpu: add raven1 gfxoff quirk
    d7444f91a9f9 jfs: Fix uninit-value access of new_ea in ea_buffer
    48edb1f7c288 scsi: smartpqi: correct stream detection
    25d2a3ff02f2 jfs: check if leafidx greater than num leaves per dmap tree
    e7ae14f7ee76 jfs: Fix uaf in dbFreeBits
    89257ecbc0f6 jfs: UBSAN: shift-out-of-bounds in dbFindBits
    a545a9403e04 drm/amd/display: Check null pointers before using dc->clk_mgr
    6a6045adeb59 ata: sata_sil: Rename sil_blacklist to sil_quirks
    8ab59527852a drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
    8840dc73ac9e iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
    4a96abcc0a2a iommu/vt-d: Always reserve a domain ID for identity setup
    d9e19f1b20ee power: reset: brcmstb: Do not go into infinite loop if reset fails
    f4ff7eb5fa74 iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    afb940c929c2 rcuscale: Provide clear error when async specified without primitives
    4cda484e584b fbdev: pxafb: Fix possible use after free in pxafb_task()
    1af86293f12d x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    6c4194f385ce ALSA: hdsp: Break infinite MIDI input flush loop
    36ee4021bcc3 ALSA: asihpi: Fix potential OOB array access
    dacec3a3248f tools/x86/kcpuid: Protect against faulty "max subleaf" values
    d6a62fcfd494 ALSA: usb-audio: Add logitech Audio profile quirk
    8659f67f1e41 ALSA: usb-audio: Define macros for quirk table entries
    e479cb835fee x86/ioapic: Handle allocation failures gracefully
    8af3e93c5a95 ALSA: usb-audio: Add input value sanity checks for standard types
    4631445ce633 signal: Replace BUG_ON()s
    c50c8946e975 nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    e59bdb1ba594 wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
    0f722fb45973 wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
    4a55880fa909 proc: add config & param to block forcing mem writes
    0a898bec6c22 ACPICA: iasl: handle empty connection_node
    34478851da8d tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    f7a05d5d9987 net: atlantic: Avoid warning about potential string truncation
    fb55f3d88fe1 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    babfc87445bf ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    4fd17b6152a4 net: mvpp2: Increase size of queue_name buffer
    54dae0e9063e tipc: guard against string buffer overrun
    1c9b8775062f ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
    d6e279a09158 ACPI: EC: Do not release locks during operation region accesses
    7df619575dc5 wifi: rtw88: select WANT_DEV_COREDUMP
    4dd732893bd3 wifi: ath11k: fix array out-of-bound access in SoC stats
    a37a6976e475 nvme-pci: qdepth 1 quirk
    f4ef9bef023d blk_iocost: fix more out of bound shifts
    d1e08ebca617 net: sched: consistently use rcu_replace_pointer() in taprio_change()
    5ee8ee672aa7 ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    bcf5c9306707 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    92e5661b7d07 ACPI: PAD: fix crash in exit_round_robin()
    1163b7a18d0f net: hisilicon: hns_mdio: fix OF node leak in probe()
    36622aa3c48e net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    3d055e845339 net: hisilicon: hip04: fix OF node leak in probe()
    a0465723b858 net/xen-netback: prevent UAF in xenvif_flush_hash()
    d107d63e6635 ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
    012ae530afa0 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
    08a24438fa13 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    88ff021e1fea f2fs: Require FMODE_WRITE for atomic write ioctls
    a37b50143d26 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    472b5fc6f8f1 ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
    e142b12f11cd ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    6eac1b151d8e ALSA: hda/realtek: Fix the push button function for the ALC257
    2bded581f00a ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    d5ed208d04ac media: usbtv: Remove useless locks in usbtv_video_free()
    fa593e9cd2b3 i2c: xiic: Try re-initialization on bus busy timeout
    5ffff2b57d8f i2c: xiic: improve error message when transfer fails to start
    72cb227a368c i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
    a50c8564ab82 i2c: xiic: Fix RX IRQ busy check
    c7ed4ddaa5a2 i2c: xiic: Switch from waitqueue to completion
    574d8d0fe424 i2c: xiic: Fix broken locking on tx_msg
    e7a8442195e8 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
    176dd41e8c2b ppp: do not assume bh is held in ppp_channel_bridge_input()
    97b1f515816d ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    105a292189f6 net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
    a785cbc8da30 net: stmmac: Disable automatic FCS/Pad stripping
    e255383aff9f stmmac_pci: Fix underflow size in stmmac_rx
    2415f465730e net: add more sanity checks to qdisc_pkt_len_init()
    939c88cbdc66 net: avoid potential underflow in qdisc_pkt_len_init() with UFO
    469856f76f48 net: ethernet: lantiq_etop: fix memory disclosure
    62a4567e3e10 Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    38e3fd0c4a26 netfilter: nf_tables: prevent nf_skb_duplicated corruption
    3ed462d05807 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    62ac553b834f netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    4655456a64a0 net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
    201ce2f738f4 net/mlx5: Added cond_resched() to crdump collection
    ce828b347cf1 net/mlx5: Fix error path in multi-packet WQE transmit
    ee57897c7f65 ieee802154: Fix build error
    f863bfd0a2c6 ceph: remove the incorrect Fw reference check when dirtying pages
    df293ea78740 mailbox: bcm2835: Fix timeout during suspend mode
    6bd8e9effadc mailbox: rockchip: fix a typo in module autoloading
    bc9356513d56 static_call: Replace pointless WARN_ON() in static_call_module_notify()
    ed4c8ce0f307 static_call: Handle module init failure correctly in static_call_del_module()
    894ac00deb84 spi: lpspi: Simplify some error message
    1e0417dc346a usb: yurex: Fix inconsistent locking bug in yurex_read()
    84554d42ff53 i2c: isch: Add missed 'else'
    a2146b6150bc i2c: aspeed: Update the stop sw state when the bus recovery occurs
    8ce4b0d44083 mm: only enforce minimum stack gap size if it's sensible
    e59cd4b1a72d lockdep: fix deadlock issue between lockdep and rcu
    cc59ee9b8a4c bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
    9186293c610d x86/entry: Remove unwanted instrumentation in common_interrupt()
    c86f5a9dfd24 x86/idtentry: Incorporate definitions/declarations of the FRED entries
    3a69dcccd0ca pps: add an error check in parport_attach
    ec22387afb26 pps: remove usage of the deprecated ida_simple_xx() API
    009a2f6cc031 usb: xhci: fix loss of data on Cadence xHC
    112625ec8319 xhci: Add a quirk for writing ERST in high-low order
    cfe314e969d4 xhci: Preserve RsvdP bits in ERSTBA register correctly
    d2e4da8704e6 xhci: Refactor interrupter code for initial multi interrupter support.
    f2ae6fd0c38b xhci: remove xhci_test_trb_in_td_math early development check
    a646b4e59613 xhci: fix event ring segment table related masks and variables in header
    0bf337c41c5b USB: misc: yurex: fix race between read and write
    979687509d75 usb: yurex: Replace snprintf() with the safer scnprintf() variant
    23c84724aee7 soc: versatile: realview: fix soc_dev leak during device remove
    5eae90b24f28 soc: versatile: realview: fix memory leak during device remove
    72164d5b6489 padata: use integer wrap around to prevent deadlock on seq_nr overflow
    c3dfec3c05b6 EDAC/igen6: Fix conversion of system address to physical memory address
    62356668d855 nfs: fix memory leak in error path of nfs4_do_reclaim
    394584185c76 fs: Fix file_set_fowner LSM hook inconsistencies
    3721a6940329 vfs: fix race between evice_inodes() and find_inode()&iput()
    3eb0143d9cff arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    04afbac8c6ac arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    beb14f6068c6 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    07f76feca097 hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
    8bdb39831bf4 hwrng: mtk - Use devm_pm_runtime_enable
    dc9a23d3b4ee f2fs: avoid potential int overflow in sanity_check_area_boundary()
    afb5da22a7fa f2fs: prevent possible int overflow in dir_block_index()
    21f055191ea5 debugobjects: Fix conditions in fill_pool()
    f5056adc042f wifi: mt76: mt7615: check devm_kasprintf() returned value
    44f94356e6a4 wifi: rtw88: 8822c: Fix reported RX band width
    5ebb243e68c3 perf/x86/intel/pt: Fix sampling synchronization
    11690d7e7684 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
    43f5d026da0b ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    0cdfb9178a3b ACPI: sysfs: validate return type of _STR method
    90ed958acfd1 drbd: Add NULL check for net_conf to prevent dereference in state validation
    c9ae82e4871d drbd: Fix atomicity violation in drbd_uuid_set_bm()
    3e425c8a48d0 crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    7ddf551c4d31 xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    bfdddc20d270 tty: rp2: Fix reset with non forgiving PCIe host bridges
    a77fc4acfd49 firmware_loader: Block path traversal
    4d6e61d7113a bus: integrator-lm: fix OF node leak in probe()
    2682248bdcfb usb: dwc2: drd: fix clock gating on USB role switch
    ff359dadecb0 usb: cdnsp: Fix incorrect usb_request status
    92f9e6c8b993 USB: class: CDC-ACM: fix race between get_serial and set_serial
    cde120f5870f USB: misc: cypress_cy7c63: check for short transfer
    39c22ede7739 USB: appledisplay: close race between probe and completion handler
    b80aacfea6e8 usbnet: fix cyclical race on disconnect with work queue
    75349cb4b00d scsi: mac_scsi: Disallow bus errors during PDMA send
    aa4d228b1e0a scsi: mac_scsi: Refactor polling loop
    3fe6d2a707df scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    9113f60bce80 drm/amd/display: Validate backlight caps are sane
    458c54c6f947 drm/amd/display: Round calculated vtotal
    a2c1d68a4ab5 Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    7874e99b4ebf Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    87d6eabb2322 Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    c3b04fe1bb8e Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
    d738f1dc8b48 soc: versatile: integrator: fix OF node leak in probe() error path
    49006a92c7c9 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    65038f8c6b10 PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    fdceebc86a5a Remove *.orig pattern from .gitignore
    fe0cd5379111 selinux,smack: don't bypass permissions check in inode_setsecctx hook
    a6d810554d7d vfio/pci: fix potential memory leak in vfio_intx_enable()
    a1630bd15f23 x86/mm: Switch to new Intel CPU model defines
    3088bb7aadf6 powercap: RAPL: fix invalid initialization for pl4_supported field
    9a4be35d9c53 Input: goodix - use the new soc_intel_is_byt() helper
    714426520846 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    5d72a13dcc25 netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
    39696868a24a netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    c1be35e774f8 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
    0066d4bac5d9 net: qrtr: Update packets cloning when broadcasting
    5c4c03288a4a tcp: check skb is non-NULL in tcp_rto_delta_us()
    a3e83a402a73 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    822c7bb1f6f8 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
    fbff87d682e5 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
    d1c98c68d0dd net: xilinx: axienet: Fix packet counting
    fac3629829ec net: axienet: Switch to 64-bit RX/TX statistics
    15d2b2bf096e net: axienet: Use NAPI for TX completion path
    e09deb71fb91 net: axienet: Be more careful about updating tx_bd_tail
    0493a5d80b4b net: axienet: add coalesce timer ethtool configuration
    72e135bace88 net: axienet: reduce default RX interrupt threshold to 1
    3b4b8afd9083 net: axienet: implement NAPI and GRO receive
    635e766e602f net: axienet: don't set IRQ timer when IRQ delay not used
    50a2ed164f59 net: axienet: Clean up DMA start/stop and error handling
    9384262ad810 net: axienet: Clean up device used for DMA calls
    043dc922cd47 Revert "dm: requeue IO if mapping table not yet available"
    927a2580208e vhost_vdpa: assign irq bypass producer token correctly
    4d10104d987a vdpa: Add eventfd for the vdpa callback
    b22db5572fcc interconnect: qcom: sm8250: Enable sync_state
    4a6e221019e6 coresight: tmc: sg: Do not leak sg_table
    01a2e65598a2 iio: adc: ad7606: fix standby gpio state to match the documentation
    2abf0fa4f4b2 iio: adc: ad7606: fix oversampling gpio array
    7553f7a85cb9 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    00148baf8f53 spi: lpspi: release requested DMA channels
    41324fd0a823 spi: lpspi: Silence error message upon deferred probe
    e8d64f598eeb f2fs: get rid of online repaire on corrupted directory
    e2d39a5981cf f2fs: clean up w/ dotdot_name
    0cab715836db f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
    de5561be4a68 f2fs: fix to wait page writeback before setting gcing flag
    520ff47fc61f f2fs: optimize error handling in redirty_blocks
    2e580f42d175 f2fs: reduce expensive checkpoint trigger frequency
    500d362dab97 f2fs: remove unneeded check condition in __f2fs_setxattr()
    6eacbf58e410 f2fs: fix to update i_ctime in __f2fs_setxattr()
    9c58cd07a9f1 f2fs: fix typo
    b7b7a8df41ef nfsd: return -EINVAL when namelen is 0
    9803ab882d56 nfsd: call cache_put if xdr_reserve_space returns NULL
    85a84de8e360 ntb_perf: Fix printk format
    a429158f2e0a ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
    35c8e66e7952 RDMA/irdma: fix error message in irdma_modify_qp_roce()
    b11318dc8a1e RDMA/cxgb4: Added NULL check for lookup_atid
    208dba182ee6 riscv: Fix fp alignment bug in perf_callchain_user()
    16eda7c0ce5c RDMA/hns: Optimize hem allocation performance
    3e5a43da4984 RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
    4685b6802258 RDMA/hns: Refactor the abnormal interrupt handler function
    254b52a2d7e5 RDMA/hns: Fix the wrong type of return value of the interrupt handler
    55f98f48ee17 RDMA/hns: Remove unused abnormal interrupt of type RAS
    29c0f546d3fd RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
    b79ddb93ec67 RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    15bcd2dc26d7 RDMA/hns: Don't modify rq next block addr in HIP09 QPC
    bd5f76ccc079 watchdog: imx_sc_wdt: Don't disable WDT in suspend
    1730d47d1865 IB/core: Fix ib_cache_setup_one error flow cleanup
    70ce36ada30b pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    255527b8d416 pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
    bef565d739cf nfsd: fix refcount leak when file is unhashed after being found
    0b5bc6d1f25f nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    e69b5883ae03 clk: ti: dra7-atl: Fix leak of of_nodes
    0429a4e97208 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
    c84af5f5f2ea RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
    8e5612295811 pinctrl: single: fix missing error code in pcs_probe()
    da0392698c62 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
    9cf0b13a19c8 PCI: xilinx-nwl: Clean up clock on probe failure/removal
    5bbcac07d7e0 PCI: xilinx-nwl: Fix register misspelling
    dc5aeba07395 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
    86d920d2600c drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
    a879b6cdd481 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
    9a2d7636af44 Input: ilitek_ts_i2c - add report id message validation
    f448eb55b7ee Input: ilitek_ts_i2c - avoid wrong input subsystem sync
    821332430624 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    7d214562057d remoteproc: imx_rproc: Initialize workqueue earlier
    070d45027c58 remoteproc: imx_rproc: Correct ddr alias for i.MX8M
    30efd7590912 clk: imx: imx8qxp: Parent should be initialized earlier than the clock
    f1046dd07456 clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
    03b2049e76f9 clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    47a121d9d0bd perf time-utils: Fix 32-bit nsec parsing
    dcdbb13ef3b4 perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
    f73fc46d0816 perf sched timehist: Fix missing free of session in perf_sched__timehist()
    f666eb1bb8a2 perf mem: Free the allocated sort string, fixing a leak
    9dada37c9739 bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    c4f8554996e8 nilfs2: fix potential oob read in nilfs_btree_check_delete()
    42d44163d41b nilfs2: determine empty node blocks as corrupted
    73d23ecf234b nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
    be2e9b111e27 ext4: avoid OOB when system.data xattr changes underneath the filesystem
    299d996f1031 ext4: return error on ext4_find_inline_entry
    bf4cabdf3a86 ext4: avoid negative min_clusters in find_group_orlov()
    a2037e06b8dc ext4: avoid potential buffer_head leak in __ext4_new_inode()
    9b638bcfff8f ext4: avoid buffer_head leak in ext4_mark_inode_used()
    86964b59b506 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    38c0090658e0 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    a75b4f3a3dee kthread: fix task state in kthread worker if being frozen
    c37bf4ded344 xz: cleanup CRC32 edits from 2018
    bfea0441a692 selftests/bpf: Fix C++ compile error from missing _Bool type
    aa02db40963b selftests/bpf: Fix error compiling test_lru_map.c
    f40796cda0e6 selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    bf5988a40e10 selftests/bpf: Fix compiling core_reloc.c with musl-libc
    e0fcf564cb6c selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    a445d939a91c selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    9b548bff0206 selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    0193a67cfb38 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    ea960f62a3c4 selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
    c9a6207a064e selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    ebc4e1f4492d tpm: Clean up TPM space after command failure
    07c9cccc4c3f xen/swiotlb: add alignment check for dma buffers
    ed3e8cc9159a xen: use correct end address of kernel for conflict checking
    a8906615f7c8 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    0220a2d7d07f drm/msm: fix %s null argument error
    72782ec6f3a1 ipmi: docs: don't advertise deprecated sysfs entries
    9963b910411b drm/msm/a5xx: workaround early ring-buffer emptiness check
    1058abdcfbbc drm/msm: Drop priv->lastctx
    d183881468ce drm/msm/a5xx: fix races in preemption evaluation stage
    b43f548e7593 drm/msm/a5xx: properly clear preemption records on resume
    1dae34bd7529 drm/msm/a5xx: disable preemption in submits by default
    071e6751e828 drm/msm: Fix incorrect file name output in adreno_request_fw()
    18f0b0b16251 powerpc/8xx: Fix kernel vs user address comparison
    a078336d0c67 powerpc/8xx: Fix initial memory mapping
    6f790377ef43 powerpc/32: Remove 'noltlbs' kernel parameter
    1c0e359a5bdf powerpc/32: Remove the 'nobats' kernel parameter
    46184cbbae1e drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
    ead825332785 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
    16a570f07d87 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
    791b3d66d2ef drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
    e8a4a2e45ddf drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    4d871e3e8dfe drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    b4cb296e6b89 drm/rockchip: vop: Allow 4096px width scaling
    036ab40a0af4 scsi: NCR5380: Check for phase match during PDMA fixup
    c63e92842790 scsi: NCR5380: Add SCp members to struct NCR5380_cmd
    b95955dc8b6d drm/radeon: properly handle vbios fake edid sizing
    26819a5b69b0 drm/radeon: Replace one-element array with flexible-array member
    92734d5e4000 drm/amdgpu: properly handle vbios fake edid sizing
    a1f0111fcf18 drm/amdgpu: Replace one-element array with flexible-array member
    44948d3cb943 drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
    2948bb2951fe drm/stm: Fix an error handling path in stm_drm_platform_probe()
    1d43adec2ed3 pmdomain: core: Harden inter-column space in debug summary
    962c92e46a52 mtd: powernv: Add check devm_kasprintf() returned value
    21d445fd2d6a fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    5f54a8669ff0 power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    eac72ef92fec power: supply: axp20x_battery: Remove design from min and max voltage
    bb58bae2fd32 hwmon: (ntc_thermistor) fix module autoloading
    a2cb89bb9054 mtd: slram: insert break after errors in parsing the map
    d5c43b103987 hwmon: (max16065) Fix alarm attributes
    d522354ca1c8 hwmon: (max16065) Remove use of i2c_match_id()
    41fe2205aae6 i2c: Add i2c_get_match_data()
    302bb15d87ad hwmon: (max16065) Fix overflows seen when writing limits
    365384c3f078 m68k: Fix kernel_clone_args.flags in m68k_clone()
    d681dae5ecdf clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
    4a60b539f70f reset: k210: fix OF node leak in probe() error path
    aaeadde77e4b reset: berlin: fix OF node leak in probe() error path
    dcf11d388fbd ARM: versatile: fix OF node leak in CPUs prepare
    d8539f136c58 ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    bb55d5e7f0e9 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    412a519da455 arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
    db323e084748 spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    89008d5e4b2f spi: ppc4xx: handle irq_of_parse_and_map() errors
    cc4d21d9492d block: fix potential invalid pointer dereference in blk_add_partition
    a894cf7efda0 block: print symbolic error name instead of error code
    e0c20d88b7dc block, bfq: don't break merge chain in bfq_split_bfqq()
    3883a6873b92 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    8aa9de02a4be block, bfq: fix possible UAF for bfqq->bic with merge chain
    67adffd35dda net: tipc: avoid possible garbage value
    1ee3ffd8600a net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    613dad98a8c8 r8169: disable ALDPS per default for RTL8125
    ad0af1890919 net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    64ad2aac64c8 bareudp: Pull inner IP header on xmit.
    b293c9d81473 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
    446f84d3a74d net: geneve: support IPv4/IPv6 as inner protocol
    2099b709b546 bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    b614fde13162 Bluetooth: btusb: Fix not handling ZPL/short-transfer
    2b3164186e77 can: m_can: m_can_close(): stop clocks after device has been shut down
    9550baada4c8 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
    984648aac87a sock_map: Add a cond_resched() in sock_hash_free()
    bf090f4fe935 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
    acb53a716e49 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
    439353e50cb9 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    95f2c90b826a wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    c8d744549f37 wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    40fb64257dab x86/sgx: Fix deadlock in SGX NUMA node search
    b6e1cdf2d625 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    3e2b7c9d5ec8 netfilter: nf_tables: remove annotation to access set timeout while holding lock
    b5f97550839d netfilter: nf_tables: reject expiration higher than timeout
    b987e863cfd9 netfilter: nf_tables: reject element expiration with no timeout
    616aa2873969 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    94e8c988468d ACPI: CPPC: Fix MASK_VAL() usage
    895885122cf3 ACPI: bus: Avoid using CPPC if not supported by firmware
    b48ba8089d26 can: j1939: use correct function name in comment
    e53934e36549 padata: Honor the caller's alignment in case of chunk_size 0
    b48560a5c3c2 wifi: iwlwifi: mvm: increase the time between ranging measurements
    d5ecaf72fd26 mount: handle OOM on mnt_warn_timestamp_expiry
    33e460b424b8 fs/namespace: fnic: Switch to use %ptTd
    a6e8d2a06368 mount: warn only once about timestamp range expiration
    b6a9b12e8c72 fs: explicitly unregister per-superblock BDIs
    66663a9d672f wifi: rtw88: remove CPT execution branch never used
    d19865d5f17d net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
    43df8109c701 wifi: ath9k: Remove error checks when creating debugfs entries
    49d8d8e0190a wifi: ath9k: fix parameter check in ath9k_init_debug()
    9dd0cb484cfa ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    435ec96011f5 crypto: xor - fix template benchmarking
    ceaab3fb64d6 wifi: rtw88: always wait for both firmware loading attempts
    7367e0fea5e6 EDAC/synopsys: Fix error injection on Zynq UltraScale+
    12ee2b3a4fe4 EDAC/synopsys: Fix ECC status and IRQ control race condition
    7e1cf435de0b EDAC/synopsys: Re-enable the error interrupts on v3 hw
    9a9187f364ad EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
    28ccc0418205 EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
    0c927dfc0b9b USB: usbtmc: prevent kernel-usb-infoleak
    86b4954483fc USB: serial: pl2303: add device id for Macrosilicon MS3020
    9405d778a49a cgroup: Move rcu_head up near the top of cgroup_root
    c218058f075a gpiolib: cdev: Ignore reconfiguration without direction
    4318608dc28e inet: inet_defrag: prevent sk release while still in use
    c65ab97efcd4 gpio: prevent potential speculation leaks in gpio_device_get_desc()
    e0f67494957f Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
    ded5376ee34b netfilter: nf_tables: missing iterator type in lookup walk
    ce9fef54c5ec netfilter: nft_set_pipapo: walk over current view on netlink dump
    de77545c72c4 cgroup: Make operations on the cgroup root_list RCU safe
    c031d286eceb ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
    5bbe51eaf01a ocfs2: add bounds checking to ocfs2_xattr_find_entry()
    ad98e04b53bb spi: spidev: Add missing spi_device_id for jg10309-01
    4e1b1fceaa1a x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
    bba8f3393116 spi: bcm63xx: Enable module autoloading
    534f63c5fdcf drm: komeda: Fix an issue related to normalized zpos
    82ead539fb8b spi: spidev: Add an entry for elgin,jg10309-01
    b77954625a03 ASoC: tda7419: fix module autoloading
    f2f5918c7347 ASoC: intel: fix module autoloading
    6a9e652ecb9a wifi: iwlwifi: clear trans->state earlier upon error
    1afed66cb271 wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
    a15df5f37fa3 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
    8f03a04b619a wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
    6f19780d1f7d wifi: iwlwifi: lower message level for FW buffer destination
    8e46e6d38e73 net: ftgmac100: Ensure tx descriptor updates are visible
    6f8366122015 microblaze: don't treat zero reserved memory regions as error
    befc2d67f7b8 pinctrl: at91: make it work with current gpiolib
    e69c0100a461 scsi: lpfc: Fix overflow build issue
    04eb0c4957fa ALSA: hda/realtek - FIxed ALC285 headphone no sound
    fe0401442a39 ALSA: hda/realtek - Fixed ALC256 headphone no sound
    2208c2520eb6 ASoC: allow module autoloading for table db1200_pids
    fb0530025d50 ASoC: meson: axg-card: fix 'use-after-free'
    79cce5e81d20 dma-buf: heaps: Fix off-by-one in CMA heap fault handler
    16b3e7addd5b soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
    491f9646f7ac spi: nxp-fspi: fix the KASAN report out-of-bounds bug
    38f5db5587c0 net: dpaa: Pad packets to ETH_ZLEN
    ddc7c423c4a5 netfilter: nft_socket: fix sk refcount leaks
    e259f8aabbcc net: ftgmac100: Enable TX interrupt to avoid TX timeout
    8fa298172438 octeontx2-af: Modify SMQ flush sequence to drop packets
    e216ded408f8 octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
    16ff08952830 fou: fix initialization of grc
    b503f0045f31 net/mlx5: Add missing masks and QoS bit masks for scheduling elements
    63991ecfe864 net/mlx5: Add IFC bits and enums for flow meter
    0a596903425f net/mlx5: Add support to create match definer
    636de1029485 net/mlx5: Explicitly set scheduling element and TSAR type
    3f8d4d9bffe7 net/mlx5e: Add missing link modes to ptys2ethtool_map
    61964f36349d igb: Always call igb_xdp_ring_update_tail() under Tx lock
    25cf67f8ff2f ice: fix accounting for filters shared by multiple VSIs
    3f796b4d9527 hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
    7e40afcc6989 hwmon: (pmbus) Introduce and use write_byte_data callback
    87bd31cb7e7a selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
    47c5117ac526 eeprom: digsy_mtc: Fix 93xx46 driver probe failure
    f7bfeb689041 arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
    8fd28e6beb86 fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
    5b2c8b34f6d7 mm: avoid leaving partial pfn mappings around in error case
    b6e5727d262a net: tighten bad gso csum offset check in virtio_net_hdr
    235af50e7cf6 minmax: reduce min/max macro expansion in atomisp driver
    73103e803400 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
    3554482f4691 mptcp: pm: Fix uaf in __timer_delete_sync
    190b8a6486eb platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
    b7c2f692307f platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
    3666a2574efa NFS: Avoid unnecessary rescanning of the per-server delegation list
    e796a3db5768 NFSv4: Fix clearing of layout segments in layoutreturn
    2fb6f8948e4d Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
    156ea0823d3c drm/msm/adreno: Fix error return if missing firmware-name
    da69c01768da platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
    18576c701e85 scripts: kconfig: merge_config: config files: add a trailing newline
    7d91a0b2151a HID: multitouch: Add support for GT7868Q
    10c111760128 Input: synaptics - enable SMBus for HP Elitebook 840 G2
    39de55eddf73 Input: ads7846 - ratelimit the spi_sync error message
    f5a73abe62ac btrfs: update target inode's ctime on unlink
    00ef1de6d646 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
    be4e5f5bdc19 net: phy: vitesse: repair vsc73xx autonegotiation
    9ef29b75f5f9 net: ethernet: use ip_hdrlen() instead of bit shift
    d71c5e8cbcf9 usbnet: ipheth: fix carrier detection in modes 1 and 4
    df944dc46d06 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
    ff55291fb367 ocfs2: fix null-ptr-deref when journal load failed.
    f55a33fe0fb5 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
    4173d1277c00 ocfs2: cancel dqi_sync_work before freeing oinfo
    020f5c53c17f ocfs2: reserve space for inline xattr before attaching reflink tree
    077182694e87 ocfs2: fix uninit-value in ocfs2_get_block()
    ff8875e5f6e9 ocfs2: fix the la space leak when unmounting an ocfs2 volume
    44f79667fefd mm: krealloc: consider spare memory for __GFP_ZERO
    70fee3689ace jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    ec7f8337c98a jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
    e60b0d3b5aa2 drm: omapdrm: Add missing check for alloc_ordered_workqueue
    4515773394f9 of/irq: Support #msi-cells=<0> in of_msi_get_domain
    e18d233efa82 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    cb94678485d7 parisc: Fix 64-bit userspace syscall path
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 6e52b8bdf3dd48240c7a37a5dfc30a21cb3a792a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
5a73523674 linux-yocto/5.10: update to v5.10.227
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:

    eac1c5bfc13c Linux 5.10.227
    9350016415b6 net: dsa: microchip: fix build warning
    9f76a9d1849d RDMA/hns: Fix uninitialized variable
    4911610c7a1f ext4: fix warning in ext4_dio_write_end_io()
    05cc42d601e7 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
    95f62e5a783d net: vrf: determine the dst using the original ifindex for multicast
    3adb1be04f6c net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
    ab6c9463b137 net: Handle l3mdev in ip_tunnel_init_flow
    0825c5ff246c xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
    4bf1bd3ffff6 net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
    73f75d2b5aee nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
    548d0102dc5c net: dsa: lan9303: ensure chip reset and wait for READY status
    68ad5da6ca63 net: Fix an unsafe loop on the list
    fcda074c98de hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
    e7a1d51b3910 usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    1d7fc802a725 usb: xhci: Fix problem with xhci resume from suspend
    f8dea2fede79 usb: dwc3: core: Stop processing of pending events if controller is halted
    a7564b160692 Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    8669bca53fe6 HID: plantronics: Workaround for an unexcepted opposite volume key
    799a06ca7f6a hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    ab6bc15e99d7 hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    1d5f85f1b7db resource: fix region_intersects() vs add_memory_driver_managed()
    36b054324d18 slip: make slhc_remember() more robust against malicious packets
    30d91a478d58 ppp: fix ppp_async_encode() illegal access
    3502b1a29720 netfilter: fib: check correct rtable in vrf setups
    037145e2a214 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
    d98558fe2699 netfilter: rpfilter/fib: Populate flowic_l3mdev field
    740de1987766 net: Add l3mdev index to flow struct and avoid oif reset for port devices
    265bf63e2471 sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    23e139f90b25 net: ibm: emac: mal: fix wrong goto
    adbc3eef43fc net/sched: accept TCA_STAB only for root qdisc
    d79af3af2f49 igb: Do not bring the device up after non-fatal error
    c70e05b929b4 gpio: aspeed: Use devm_clk api to manage clock source
    36fd66cb5178 gpio: aspeed: Add the flush write to ensure the write complete.
    0e91c4b48445 net: dsa: b53: fix jumbo frames on 10/100 ports
    a7c9402bbc4a net: dsa: b53: allow lower MTUs on BCM5325/5365
    9f3407aa6cba net: dsa: b53: fix max MTU for BCM5325/BCM5365
    0109267c1ec4 net: dsa: b53: fix max MTU for 1g switches
    a625acf221c1 net: dsa: b53: fix jumbo frame mtu check
    e13ffbf5fdf5 net: phy: bcm84881: Fix some error handling paths
    ef44274dae9b Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
    cce8419b8168 netfilter: br_netfilter: fix panic with metadata_dst skb
    8a517d184549 tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    fe238ddf8576 tcp: fix to allow timestamp undo if no retransmits were sent
    21b5af7f0c99 net: phy: dp83869: fix memory corruption when enabling fiber
    f892165c564e NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
    64f1b4922b6e SUNRPC: Fix integer overflow in decode_rc_list()
    1fc13f6a4166 ice: fix VLAN replay after reset
    993ce09fe622 NFSD: Mark filecache "down" if init fails
    de5a059e3665 RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
    252f147b1826 fbdev: sisfb: Fix strbuf array overflow
    f4149eec9601 drm/amd/display: Check null pointer before dereferencing se
    56452dbc0a2c driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
    d8ac7378bc79 tools/iio: Add memory allocation failure check for trigger_name
    4ce662fe4be6 virtio_pmem: Check device status before requesting flush
    30ea38665dbf usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
    4c83143fc65c usb: chipidea: udc: enable suspend interrupt after usb reset
    b677b94a9193 clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
    37c181e389f0 media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
    b65018968782 ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
    63047187a516 PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    a28703d4d406 i2c: i801: Use a different adapter-name for IDF adapters
    e4f218455cef PCI: Add ACS quirk for Qualcomm SA8775P
    f3e0a8b7d4a5 clk: bcm: bcm53573: fix OF node leak in init
    b10c1ca941c2 PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    713adaf0ecfc RDMA/mad: Improve handling of timed out WRs of mad agent
    24318116c485 ktest.pl: Avoid false positives with grub2 skip regex
    345d3c0bf2bd s390/cpum_sf: Remove WARN_ON_ONCE statements
    c2097d5efb19 ext4: nested locking for xattr inode
    dced2c9d661e s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    1cd197813eb8 s390/facility: Disable compile time optimization for decompressor code
    029aa36ba332 bpf: Check percpu map value size first
    4f4a6d70d78e Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
    546fb43a2e4b tracing/kprobes: Fix symbol counting logic by looking at modules as well
    90a6a070a80a tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
    2622c805abe7 kallsyms: Make module_kallsyms_on_each_symbol generally available
    2aa861ec7290 kallsyms: Make kallsyms_on_each_symbol generally available
    9b82d737d261 virtio_console: fix misc probe bugs
    f2fd1a9597d6 tracing: Have saved_cmdlines arrays all in one allocation
    25b00216206b s390/zcore: release dump save area on restart or power down
    0b4dc46f87c3 s390/zcore: no need to check return value of debugfs_create functions
    421795b06430 drm/crtc: fix uninitialized variable use even harder
    a009e88cc976 tracing: Remove precision vsnprintf() check from print event
    6063d72b61ca net: ethernet: cortina: Drop TSO support
    39fffca57284 unicode: Don't special case ignorable code points
    6592347f06e2 vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
    2f6da71e9de8 ext4: fix inode tree inconsistency caused by ENOMEM
    da964de4c181 ACPI: battery: Fix possible crash when unregistering a battery hook
    20557232c91a ACPI: battery: Simplify battery hook locking
    991e8b0bab66 r8169: add tally counter fields added with RTL8125
    238d5c541e7f r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    281edfa1cdef clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    570e257621be drm/rockchip: vop: clear DMA stop bit on RK3066
    411e2e1d0132 drm/rockchip: support gamma control on RK3399
    1aeaa7e8d859 drm/rockchip: define gamma registers for RK3399
    f561b48d633a uprobes: fix kernel info leak via "[uprobes]" vma
    24afda0421af arm64: errata: Expand speculative SSBS workaround once more
    9df353ca1301 arm64: cputype: Add Neoverse-N3 definitions
    c45edd5942cc arm64: Add Cortex-715 CPU part definition
    f8a7c342326f ext4: dax: fix overflowing extents beyond inode size when partially writing
    dde4c1e1663b ext4: properly sync file size update after O_SYNC direct IO
    6ff56ef7f724 i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    d223126bb0ac i2c: xiic: Use devm_clk_get_enabled()
    9bd3443e34e6 i2c: xiic: Simplify with dev_err_probe()
    8b55076b7bd4 kconfig: qconf: fix buffer overflow in debug links
    bfab5fbc12c5 drm/sched: Add locking to drm_sched_entity_modify_sched
    c54aa7d75055 gpio: davinci: fix lazy disable
    70b60c8d9b42 btrfs: wait for fixup workers before stopping cleaner kthread during umount
    d73d48acf36f btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
    67db431b8520 ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
    1a819c7f857e ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    f976d964a64c Input: adp5589-keys - fix adp5589_gpio_get_value()
    bf8363e46fba rtc: at91sam9: fix OF node leak in probe() error path
    e33fe25b1efe net: stmmac: Fix zero-division error when disabling tc cbs
    68e579316cbf tomoyo: fallback to realpath if symlink's pathname does not exist
    68c77a70e33c iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    1d108095d5e5 clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    60b6968341a6 media: venus: fix use after free bug in venus_remove due to race condition
    4445bc6e9f2b clk: qcom: clk-rpmh: Fix overflow in BCM vote
    3f73da56af91 media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    5443e70fb7fc media: sun4i_csi: Implement link validate for sun4i_csi subdev
    ed0d5103f9ef clk: rockchip: fix error for unknown clocks
    f63461af2c1a aoe: fix the potential use-after-free problem in more places
    7ae7ada29a6f NFSD: Fix NFSv4's PUTPUBFH operation
    0ea4333c679f nfsd: map the EBADMSG to nfserr_io to avoid warning
    96cad5da791e nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    f692160d3e1e exfat: fix memory leak in exfat_load_bitmap()
    e01e9ae43e64 riscv: define ILLEGAL_POINTER_VALUE for 64bit
    61b84013e560 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
    bf605ae98dab ocfs2: fix null-ptr-deref when journal load failed.
    3f1ca6ba5452 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
    14114d8148db ocfs2: cancel dqi_sync_work before freeing oinfo
    aac31d654a0a ocfs2: reserve space for inline xattr before attaching reflink tree
    8e3bf366368e ocfs2: fix uninit-value in ocfs2_get_block()
    ff1500fe2649 ocfs2: fix the la space leak when unmounting an ocfs2 volume
    a54378585624 mm: krealloc: consider spare memory for __GFP_ZERO
    7fabacb337f0 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    481e8f18a290 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
    2bda89735199 drm: omapdrm: Add missing check for alloc_ordered_workqueue
    3e8862875f8b of/irq: Support #msi-cells=<0> in of_msi_get_domain
    a63fdf20cc26 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    ea7dead20420 parisc: Fix 64-bit userspace syscall path
    25ec5c873c45 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    6766937d0327 ext4: update orig_path in ext4_find_extent()
    b6c29c8f3d7c ext4: fix double brelse() the buffer of the extents path
    5e811066c5ab ext4: aovid use-after-free in ext4_ext_insert_extent()
    8c26d9e53e5f ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
    4286a0418369 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    7bcdef04d071 ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    e52f933598b7 ext4: fix slab-use-after-free in ext4_split_extent_at()
    133ff0d78f1b ext4: no need to continue when the number of entries is 1
    2c08dfc99fc4 ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    c36ff6948c00 ALSA: line6: add hw monitor volume control to POD HD500X
    64d315aeec57 ALSA: core: add isascii() check to card ID generator
    b078a7eee12c drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    afa999052393 parisc: Fix itlb miss handler for 64-bit programs
    d6b22a2d5563 perf/core: Fix small negative period being ignored
    8ab638bb498a spi: bcm63xx: Fix module autoloading
    f53c2b55d0e2 firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    2c1effc2255c i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    46c72b01397f i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    9b8bc33ad641 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
    10dde0c1fb1b selftests/mm: fix charge_reserved_hugetlb.sh test
    e45803c71fc4 selftests: vDSO: fix vDSO symbols lookup for powerpc64
    76242231557f selftests: breakpoints: use remaining time to check if suspend succeed
    eda94fc74b84 spi: s3c64xx: fix timeout counters in flush_fifo
    e3b57186f457 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    53b1999cfd2c ext4: fix i_data_sem unlock order in ext4_ind_migrate()
    b0cb4561fc42 ext4: avoid use-after-free in ext4_ext_show_leaf()
    a34416ec269e ext4: ext4_search_dir should return a proper error
    e82df17e5f32 of/irq: Refer to actual buffer size in of_irq_parse_one()
    29f388945770 drm/amd/pm: ensure the fw_info is not null before using it
    0a377fcacefd drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    aec72bfbc198 scsi: aacraid: Rearrange order of struct aac_srb_unit
    cf387300b819 drm/printer: Allow NULL data in devcoredump printer
    f921335123f6 drm/amd/display: Initialize get_bytes_per_element's default to 1
    7ab69af56a23 drm/amd/display: Fix index out of bounds in DCN30 color transformation
    c130a3c09e37 drm/amd/display: Fix index out of bounds in degamma hardware format translation
    ad89f83343a5 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
    0167d570f6a0 drm/amd/display: Check stream before comparing them
    e2743d0a03b2 platform/x86: touchscreen_dmi: add nanote-next quirk
    831e8a816e09 drm/amdgpu: enable gfxoff quirk on HP 705G4
    e407715e7a8d drm/amdgpu: add raven1 gfxoff quirk
    8b1dcf25c26d jfs: Fix uninit-value access of new_ea in ea_buffer
    2451e5917c56 jfs: check if leafidx greater than num leaves per dmap tree
    fd026b6b6758 jfs: Fix uaf in dbFreeBits
    f9db7bb112c4 jfs: UBSAN: shift-out-of-bounds in dbFindBits
    8d54001f8dcc drm/amd/display: Check null pointers before using dc->clk_mgr
    49ded709540b ata: sata_sil: Rename sil_blacklist to sil_quirks
    1ebfa6663807 drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
    de9e7f687625 iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
    5652c448da39 iommu/vt-d: Always reserve a domain ID for identity setup
    9e493f002d52 power: reset: brcmstb: Do not go into infinite loop if reset fails
    d9245b9296fd iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    ceff6f5e7173 rcuscale: Provide clear error when async specified without primitives
    e6897e299f57 fbdev: pxafb: Fix possible use after free in pxafb_task()
    79681036a336 x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    98111af33849 ALSA: hdsp: Break infinite MIDI input flush loop
    219587bca267 ALSA: asihpi: Fix potential OOB array access
    e2b200c50230 ALSA: usb-audio: Add logitech Audio profile quirk
    35733d1a6057 ALSA: usb-audio: Define macros for quirk table entries
    6ee6835f8288 signal: Replace BUG_ON()s
    aa4e9056dfbc nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    1756918f51e9 wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
    47be40b698b9 proc: add config & param to block forcing mem writes
    02c1725eb2ad ACPICA: iasl: handle empty connection_node
    95a91802e4ef tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    b7cbdd6b1bcd net: atlantic: Avoid warning about potential string truncation
    a479b653d5e4 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    669d337aa1f6 ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    bf60b4f58796 net: mvpp2: Increase size of queue_name buffer
    e2b2558971e0 tipc: guard against string buffer overrun
    cbb67e245dac ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
    a40e7a2b805e ACPI: EC: Do not release locks during operation region accesses
    7cd004102b7d wifi: rtw88: select WANT_DEV_COREDUMP
    0f26f2694403 wifi: ath11k: fix array out-of-bound access in SoC stats
    1f61d509257d blk_iocost: fix more out of bound shifts
    62b8a46ba8bb net: sched: consistently use rcu_replace_pointer() in taprio_change()
    74c63fd016bc ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    30cd2158f249 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    4440bac6f0ca net: hisilicon: hns_mdio: fix OF node leak in probe()
    124554285680 net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    ac6e862b8deb net: hisilicon: hip04: fix OF node leak in probe()
    a7f0073fcd12 net/xen-netback: prevent UAF in xenvif_flush_hash()
    ed418cad8386 ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
    b02eb7c86ff2 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
    2171e1d75001 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    000bab8753ae f2fs: Require FMODE_WRITE for atomic write ioctls
    b820cb910f98 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    f7785c449868 ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    f10d29b108bd ALSA: hda/realtek: Fix the push button function for the ALC257
    7c93044298a4 ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    f13b04cf65a8 Bluetooth: L2CAP: Fix not validating setsockopt user input
    4ec4641df57c media: usbtv: Remove useless locks in usbtv_video_free()
    a73d99643621 i2c: xiic: Try re-initialization on bus busy timeout
    c9668503e4e1 i2c: xiic: improve error message when transfer fails to start
    2d320d9de7d3 i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
    148fdc3c7df3 i2c: xiic: Fix RX IRQ busy check
    30def367fa20 i2c: xiic: Switch from waitqueue to completion
    6da4bbeb16cf i2c: xiic: Fix broken locking on tx_msg
    dd70c8a89ef9 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
    16b66c46b69b ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    566a931a1436 net: add more sanity checks to qdisc_pkt_len_init()
    ba26060a29d3 net: avoid potential underflow in qdisc_pkt_len_init() with UFO
    185df159843d net: ethernet: lantiq_etop: fix memory disclosure
    c8bb4e2d5fae Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    531754952f5d netfilter: nf_tables: prevent nf_skb_duplicated corruption
    7675fe977be5 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    181fbbdd46c0 netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    cdd86fb75f1f net/mlx5: Added cond_resched() to crdump collection
    ca36d6c1a49b net/mlx5: Fix error path in multi-packet WQE transmit
    fd7fcd802edb ieee802154: Fix build error
    f55e003d261b ceph: remove the incorrect Fw reference check when dirtying pages
    32ee78823dea mailbox: bcm2835: Fix timeout during suspend mode
    3948c73c9295 mailbox: rockchip: fix a typo in module autoloading
    6b9a551b836e spi: lpspi: Simplify some error message
    767b71f29207 usb: yurex: Fix inconsistent locking bug in yurex_read()
    9f1c4edee8c8 i2c: isch: Add missed 'else'
    742a1b69c003 i2c: aspeed: Update the stop sw state when the bus recovery occurs
    52f7cab29039 mm: only enforce minimum stack gap size if it's sensible
    1472dd897fab lockdep: fix deadlock issue between lockdep and rcu
    118a0c3e55e3 xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    cc1de44135ca usb: renesas-xhci: Remove renesas_xhci_pci_exit()
    0f8e74a061cf pps: add an error check in parport_attach
    0e508348148a pps: remove usage of the deprecated ida_simple_xx() API
    47a632e5c6a1 USB: misc: yurex: fix race between read and write
    bf509ca62fea usb: yurex: Replace snprintf() with the safer scnprintf() variant
    6ea76e19d6df soc: versatile: realview: fix soc_dev leak during device remove
    6b3b25311d3e soc: versatile: realview: fix memory leak during device remove
    263d04df0644 PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    6dacc0b667a9 PCI: xilinx-nwl: Use irq_data_get_irq_chip_data()
    46c4079460f4 padata: use integer wrap around to prevent deadlock on seq_nr overflow
    7d0079d64442 nfs: fix memory leak in error path of nfs4_do_reclaim
    a239ff33c512 fs: Fix file_set_fowner LSM hook inconsistencies
    47a68c75052a vfs: fix race between evice_inodes() and find_inode()&iput()
    0eecd2ee23af arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    b2cb101b9b72 arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    d41d66534637 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    1b2137f6c9bd hwrng: mtk - Use devm_pm_runtime_enable
    cef1056ee6fc f2fs: avoid potential int overflow in sanity_check_area_boundary()
    85c2f7bd573d f2fs: prevent possible int overflow in dir_block_index()
    5e3a031dfa5a debugobjects: Fix conditions in fill_pool()
    dbffe7be554c wifi: rtw88: 8822c: Fix reported RX band width
    44f18167492b perf/x86/intel/pt: Fix sampling synchronization
    f76b69ab9cf0 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
    45a765f4ba4c ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    4b081991c436 ACPI: sysfs: validate return type of _STR method
    2e20b69b86c8 drbd: Add NULL check for net_conf to prevent dereference in state validation
    62720f2daab9 drbd: Fix atomicity violation in drbd_uuid_set_bm()
    a295fa38dcbb crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    c7148bf45da1 tty: rp2: Fix reset with non forgiving PCIe host bridges
    c30558e6c5c9 firmware_loader: Block path traversal
    e89f925093a3 bus: integrator-lm: fix OF node leak in probe()
    61c12c72b1ab USB: class: CDC-ACM: fix race between get_serial and set_serial
    fa83e1df43f1 USB: misc: cypress_cy7c63: check for short transfer
    1c5cd41b4b50 USB: appledisplay: close race between probe and completion handler
    84f4d44703d9 drm/amd/display: Round calculated vtotal
    60aadf84bef0 Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    13175be789b5 Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    bf3f1affba62 Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    cb9897b94608 soc: versatile: integrator: fix OF node leak in probe() error path
    c55ebcb21656 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    aaaf3cd0a734 Remove *.orig pattern from .gitignore
    f291dc4cbc65 mptcp: fix sometimes-uninitialized warning
    2dbc4b7bac60 selinux,smack: don't bypass permissions check in inode_setsecctx hook
    4b81a9f92b36 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
    0e6378dd9bbc Revert "bpf: Eliminate rlimit-based memory accounting for devmap maps"
    bfe249c15122 Revert "bpf: Fix DEVMAP_HASH overflow check on 32-bit arches"
    892620144757 x86/mm: Switch to new Intel CPU model defines
    089aece01a10 powercap: RAPL: fix invalid initialization for pl4_supported field
    ba624f656a8b Input: goodix - use the new soc_intel_is_byt() helper
    50460579fe87 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    e0dbda9f26e2 netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
    db9c5f08eea3 netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    6c36857fe564 net: qrtr: Update packets cloning when broadcasting
    ec31cf42fc4e tcp: check skb is non-NULL in tcp_rto_delta_us()
    98d14164c0a7 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    338a0582b28e net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
    dcf48ab3ca2c netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
    1429a9260fed Revert "dm: requeue IO if mapping table not yet available"
    0c170b1e918b vhost_vdpa: assign irq bypass producer token correctly
    10348fb6feae vdpa: Add eventfd for the vdpa callback
    64add9aaf78a interconnect: qcom: sm8250: Enable sync_state
    d4951dd16e9f coresight: tmc: sg: Do not leak sg_table
    cf0674248ddb iio: adc: ad7606: fix standby gpio state to match the documentation
    1ea56cd9a651 iio: adc: ad7606: fix oversampling gpio array
    b7413dbc6341 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    0ed35dd547ec spi: lpspi: release requested DMA channels
    d612d419a579 spi: lpspi: Silence error message upon deferred probe
    6f2eeba7c3e4 f2fs: reduce expensive checkpoint trigger frequency
    3dc483f0e6d0 f2fs: remove unneeded check condition in __f2fs_setxattr()
    87aceb1ce66a f2fs: fix to update i_ctime in __f2fs_setxattr()
    db930da94792 f2fs: fix typo
    7b5476f06154 f2fs: enhance to update i_mode and acl atomically in f2fs_setattr()
    0f1d007bbea3 nfsd: return -EINVAL when namelen is 0
    9f03f0016ff7 nfsd: call cache_put if xdr_reserve_space returns NULL
    40d578735499 ntb_perf: Fix printk format
    ef7e34237e26 ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
    dd598ac57dca RDMA/cxgb4: Added NULL check for lookup_atid
    502dac909ee9 riscv: Fix fp alignment bug in perf_callchain_user()
    322911a2e666 RDMA/hns: Optimize hem allocation performance
    07f0f643d7e5 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
    1e6195dc7aca RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    6258c4fb8d33 RDMA/hns: Refactor root BT allocation for MTR
    d06fbe0b8703 RDMA/hns: Add mapped page count checking for MTR
    2a2894e90cec watchdog: imx_sc_wdt: Don't disable WDT in suspend
    5353f8ec59f7 pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    d8c75b8a91fd pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
    600735914369 nfsd: fix refcount leak when file is unhashed after being found
    6fcb4bbbecb4 nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    0ce9d89343c2 clk: ti: dra7-atl: Fix leak of of_nodes
    88ba7cd9f482 pinctrl: single: fix missing error code in pcs_probe()
    2efe8da2ddbf RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
    f29951897a30 PCI: xilinx-nwl: Fix register misspelling
    c289903b7a21 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
    badbd736e664 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
    6ae3b9aee426 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
    45f826f6c827 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    ca34aa37820a clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    11396ba4f820 perf time-utils: Fix 32-bit nsec parsing
    a10a7d6d171b perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
    727660723ea7 perf sched timehist: Fix missing free of session in perf_sched__timehist()
    ea837ae511aa bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    d20674f31626 nilfs2: fix potential oob read in nilfs_btree_check_delete()
    e2290906bb24 nilfs2: determine empty node blocks as corrupted
    24bf40740a3d nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
    7fc22c3b3ffc ext4: avoid OOB when system.data xattr changes underneath the filesystem
    e65f698736b0 ext4: return error on ext4_find_inline_entry
    2e073a579f71 ext4: avoid negative min_clusters in find_group_orlov()
    22d591d916b4 ext4: avoid potential buffer_head leak in __ext4_new_inode()
    08c63b79624c ext4: avoid buffer_head leak in ext4_mark_inode_used()
    c4227a38ab88 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    4766ba108b83 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    3a1a31a38fcc kthread: fix task state in kthread worker if being frozen
    28fbbd0ce7ab kthread: add kthread_work tracepoints
    dd417529c063 xz: cleanup CRC32 edits from 2018
    4e1c8c12cac1 selftests/bpf: Fix C++ compile error from missing _Bool type
    9374068b3690 selftests/bpf: Fix error compiling test_lru_map.c
    c2db6acd8cc3 selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    3467a9412610 selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    5ad69f5a0458 selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    306efef84bbf selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    cc52d5282a14 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    04eb60af431d selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    2c9b228938e9 tpm: Clean up TPM space after command failure
    a0a8b7bebe1b xen/swiotlb: add alignment check for dma buffers
    cb9134aa0998 xen: use correct end address of kernel for conflict checking
    86da3c79b889 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    02657ced604d drm/msm: fix %s null argument error
    72fa5f700e76 ipmi: docs: don't advertise deprecated sysfs entries
    e9e482e1e5da drm/msm/a5xx: workaround early ring-buffer emptiness check
    d041301f304c drm/msm: Drop priv->lastctx
    9dffbbd7b84f drm/msm: Add priv->mm_lock to protect active/inactive lists
    5ce4075ddea0 drm/msm/a5xx: fix races in preemption evaluation stage
    cfca8b26a9f5 drm/msm/a5xx: properly clear preemption records on resume
    fe93cd663518 drm/msm/a5xx: disable preemption in submits by default
    14531e3b82ce drm/msm: Fix incorrect file name output in adreno_request_fw()
    0338e66cba27 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
    36820265a009 drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    6b38aedfdcd9 drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    5f37e8c41526 drm/rockchip: vop: Allow 4096px width scaling
    e37fead06a45 drm/radeon: properly handle vbios fake edid sizing
    af2fb608e95f drm/radeon: Replace one-element array with flexible-array member
    5f943045ecd0 drm/amdgpu: properly handle vbios fake edid sizing
    cd8810561601 drm/amdgpu: Replace one-element array with flexible-array member
    65f9be03482a drm/stm: Fix an error handling path in stm_drm_platform_probe()
    278ec2595281 mtd: powernv: Add check devm_kasprintf() returned value
    7661e90a60fb fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    9fb482fdf3a9 power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    5c1997f7ad4e power: supply: axp20x_battery: Remove design from min and max voltage
    c59f57f3f1bd power: supply: axp20x_battery: allow disabling battery charging
    8202306e9fc1 hwmon: (ntc_thermistor) fix module autoloading
    9efa58381ae1 mtd: slram: insert break after errors in parsing the map
    d7a7dd2966d5 hwmon: (max16065) Fix alarm attributes
    932559f25a7c hwmon: (max16065) Remove use of i2c_match_id()
    514a1508c3fe i2c: Add i2c_get_match_data()
    167e4371ef92 device property: Add const qualifier to device_get_match_data() parameter
    aeed49dd2b89 hwmon: (max16065) Fix overflows seen when writing limits
    cdb20b703e0e m68k: Fix kernel_clone_args.flags in m68k_clone()
    42a9899e56de clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
    97586fbd6998 reset: berlin: fix OF node leak in probe() error path
    ad0b53e4b5d0 ARM: versatile: fix OF node leak in CPUs prepare
    06ceed8eff02 ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    fb3cd974fb82 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    5f19060ab0ac spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    63c7417ad463 spi: ppc4xx: handle irq_of_parse_and_map() errors
    4bc4272e2506 block: fix potential invalid pointer dereference in blk_add_partition
    4d2760df0f3d block: print symbolic error name instead of error code
    3630a18846c7 block, bfq: don't break merge chain in bfq_split_bfqq()
    a819a496d2f2 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    e1277ae780cc block, bfq: fix possible UAF for bfqq->bic with merge chain
    cab9ff7fe83f net: tipc: avoid possible garbage value
    207503742caf net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    3df68f37c567 r8169: disable ALDPS per default for RTL8125
    5755eabda22c net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    e296245ca85a bareudp: Pull inner IP header on xmit.
    b48fae6788b3 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
    3b84799ea26e net: geneve: support IPv4/IPv6 as inner protocol
    76851c70a5cf bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    cb1f7ef1f415 bareudp: allow redirecting bareudp packets to eth devices
    2accdb38c1c1 Bluetooth: btusb: Fix not handling ZPL/short-transfer
    3703e18a910f can: m_can: m_can_close(): stop clocks after device has been shut down
    b6dce5b5a823 can: m_can: Add support for transceiver as phy
    5cc00913c1fd can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
    1a11a1a53255 sock_map: Add a cond_resched() in sock_hash_free()
    557418e17046 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
    f232916fab67 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
    793e01f99666 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    f8e0ca304996 wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    635ccdcd9840 wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    7b0724f7a927 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    0723ddb2d161 netfilter: nf_tables: reject expiration higher than timeout
    39c1012f5f78 netfilter: nf_tables: reject element expiration with no timeout
    1c0c097ded94 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    4bb459040d3d can: j1939: use correct function name in comment
    b0947eca2a5f padata: Honor the caller's alignment in case of chunk_size 0
    60da25076f38 mount: handle OOM on mnt_warn_timestamp_expiry
    f0a39ba6e05e fs/namespace: fnic: Switch to use %ptTd
    396e9c5cbf8f mount: warn only once about timestamp range expiration
    9722aa53fa23 fs: explicitly unregister per-superblock BDIs
    005dcd6bc4b4 ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    a0c1e2da652c wifi: rtw88: always wait for both firmware loading attempts
    16e0ab9ed3ae USB: usbtmc: prevent kernel-usb-infoleak
    50cff34deed4 USB: serial: pl2303: add device id for Macrosilicon MS3020
    31292316c5fe usb: dwc3: Fix a typo in field name
    4abf1841680f cgroup: Move rcu_head up near the top of cgroup_root
    65fd90e354c7 gpiolib: cdev: Ignore reconfiguration without direction
    1880a324af1c ftrace: Fix possible use-after-free issue in ftrace_location()
    e6be2e1ebc77 x86/ibt,ftrace: Search for __fentry__ location
    9705f447bf9a inet: inet_defrag: prevent sk release while still in use
    0e7814b028cd mptcp: pm: Fix uaf in __timer_delete_sync
    6a53e5def7a8 mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
    a684b45a7770 mptcp: export lookup_anno_list_by_saddr
    9d682e89c44b gpio: prevent potential speculation leaks in gpio_device_get_desc()
    5badd0ae8b7d netfilter: nf_tables: missing iterator type in lookup walk
    ff89db14c63a netfilter: nft_set_pipapo: walk over current view on netlink dump
    45a81667e0e8 cgroup: Make operations on the cgroup root_list RCU safe
    57a3d89831fc ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
    34759b7e4493 ocfs2: add bounds checking to ocfs2_xattr_find_entry()
    d5624db2326c x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
    bbd11db41be6 spi: bcm63xx: Enable module autoloading
    040511d9f282 drm: komeda: Fix an issue related to normalized zpos
    3d39061b7b92 ASoC: tda7419: fix module autoloading
    9c6d4649f2dc ASoC: intel: fix module autoloading
    de46b1d24f5f wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
    db81677f4b6c wifi: iwlwifi: lower message level for FW buffer destination
    dd34ef88d58c net: ftgmac100: Ensure tx descriptor updates are visible
    1a8e85289e29 microblaze: don't treat zero reserved memory regions as error
    2e5052143c28 pinctrl: at91: make it work with current gpiolib
    9f08d024eda5 ALSA: hda/realtek - FIxed ALC285 headphone no sound
    fff183aa3c83 ALSA: hda/realtek - Fixed ALC256 headphone no sound
    0f4da063a1c6 ASoC: allow module autoloading for table db1200_pids
    007180fcb6cc dma-buf: heaps: Fix off-by-one in CMA heap fault handler
    5a2cc2bb8139 ASoC: meson: axg-card: fix 'use-after-free'
    ae96b02b9deb soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
    609260542cf8 spi: nxp-fspi: fix the KASAN report out-of-bounds bug
    1f31f51bfc82 net: dpaa: Pad packets to ETH_ZLEN
    f2b13ec20854 net: ftgmac100: Enable TX interrupt to avoid TX timeout
    392f6a97fcbe fou: fix initialization of grc
    b9063702a048 net/mlx5e: Add missing link modes to ptys2ethtool_map
    097cc80396b7 net/mlx5: Update the list of the PCI supported devices
    e7a9cca35ead ice: fix accounting for filters shared by multiple VSIs
    a38c552abfa9 hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
    b9d15b50b279 hwmon: (pmbus) Introduce and use write_byte_data callback
    e829dbaf7669 minmax: reduce min/max macro expansion in atomisp driver
    78078862f0a8 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
    14341f28a3a9 NFS: Avoid unnecessary rescanning of the per-server delegation list
    4f0e491644b7 Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
    00d54431b0ed drm/msm/adreno: Fix error return if missing firmware-name
    44eb665889e3 scripts: kconfig: merge_config: config files: add a trailing newline
    9deecde63714 Input: synaptics - enable SMBus for HP Elitebook 840 G2
    3f7183e28fa3 Input: ads7846 - ratelimit the spi_sync error message
    f08589057f32 btrfs: update target inode's ctime on unlink
    43662ba6ca86 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
    acb4baa4846d net: phy: vitesse: repair vsc73xx autonegotiation
    3b9ca0230077 net: ethernet: use ip_hdrlen() instead of bit shift
    b06bb81ef940 usbnet: ipheth: fix carrier detection in modes 1 and 4
    8a30bee7f534 usb: dwc3: core: update LC timer as per USB Spec V3.2
    1ac066765826 usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug
    6b3af2ad53cf usb: dwc3: Decouple USB 2.0 L1 & L2 events
    03a85a51f33a fix vfsub build error
    12594a0e7118 sock_map: avoid race between sock_map_close and sk_psock_put
    7a346798c1e1 sock_map: Fix a potential use-after-free in sock_map_close()
    843556a46e16 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
    4af417c06d37 of: module: add buffer overflow check in of_modalias()
    b29e4b50c556 scripts/gdb: fix SB_* constants parsing
    02fd398f5e2b bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
    2bba1cb1487b loop: Select I/O scheduler 'none' from inside add_disk()
    027f4dd7c993 blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag
    2214ded26c86 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    44494049e815 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    0d7c23009d82 tpm: Add flag to use default cancellation policy
    07914bef4e16 tpm: tis_i2c: Fix sanity check interrupt enable mask
    35f85f04bd69 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    7b04c6c08107 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    4790cb2d1283 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    50f74deaf308 hwmon: Add driver for Texas Instruments TMP464 and TMP468
    a4e6e4b7bb08 dt-bindings: hwmon: add tmp464.yaml
    e0ed2149d7b5 drm/amdkfd: Check for null pointer after calling kmemdup
    c6ddded89322 ARM: renumber bits related to _TIF_WORK_MASK
    35b96a325c1e arm64: make _TIF_WORK_MASK bits contiguous
    f5a8f06aa595 arm64: uaccess: remove vestigal UAO support
    3a330b569301 arm64: uaccess: remove redundant PAN toggling
    9cbbb016d6e7 arm64: uaccess: remove addr_limit_user_check()
    fd83411f5e08 arm64: uaccess: remove set_fs()
    15a6dc2f4b53 arm64: uaccess cleanup macro naming
    912a6ab683a4 arm64: uaccess: split user/kernel routines
    d004ab02dae2 arm64: uaccess: refactor __{get,put}_user
    e1941a8b459e arm64: uaccess: simplify __copy_user_flushcache()
    dfae822b4c59 arm64: uaccess: rename privileged uaccess routines
    1efdb8f0a0c7 arm64: sdei: explicitly simulate PAN/UAO entry
    b35fec69554c arm64: sdei: move uaccess logic to arch/arm64/
    b5a28033fe7b arm64: head.S: always initialize PSTATE
    243eb8553513 arm64: head.S: cleanup SCTLR_ELx initialization
    74a00405d97f arm64: head.S: rename el2_setup -> init_kernel_el
    73c5f386d175 arm64: add C wrappers for SET_PSTATE_*()
    e17fb7543df1 arm64: ensure ERET from kthread is illegal
    eff6289cc53b ixgbevf: add disable link state
    262595681381 ixgbe: add improvement for MDD response functionality
    b9d78b06dea8 ixgbe: add the ability for the PF to disable VF link state
    d829911485da Documentation: arm64: Document PMU counters access from userspace
    fe5d29bfce20 arm64: perf: Enable PMU counter userspace access for perf event
    15ce6d04ed6a arm64: perf: Add userspace counter access disable switch
    4f288acbeed8 perf: Add a counter for number of user access events in context
    354ba4a8c4b8 x86: perf: Move RDPMC event flag to a common definition
    d29cec94c49b libperf xyarray: Add bounds checks to xyarray__entry()
    8264d2b91841 libperf: Add support for user space counter access
    7fd81b678b5f libperf tests: Add support for verbose printing
    6029ff53a48f libperf: Add evsel mmap support
    28b0c8956369 tools include: Add an initial math64.h
    492e532d20f1 perf record: Improve 'Workload failed' message printing events + what was exec'ed
    d0a1fc61733e perf evlist: Add a method to return the list of evsels as a string
    81a77b39be0a perf annotate: Fix sample events lost in stdio mode
    2883e69e202d pnmtologo: use relocatable file name
    80f5207b5abd tools: use basename to identify file in gen-mach-types
    4d201ec392f1 vt/conmakehash: improve reproducibility
    ae24d013888f lib/build_OID_registry: fix reproducibility issues
    5d72da88dbb4 x86/boot: Wrap literal addresses in absolute_pointer()
    dc0bd7aa2319 ACPI: thermal: drop an always true check
    0c4288cceef5 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    5509050b3392 xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    669827c6e293 virtio-pci: Remove wrong address verification in vp_del_vqs()
    1c80d994d3db regulator: consumer: Add missing stubs to regulator/consumer.h
    3303d0e2aeff ipv6: Fix stats accounting in ip6_pkt_drop
    c56e60f665e7 memcg: enable accounting of ipc resources
    e6c8ebd210a2 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    1655ee30e684 sched/isolation: really align nohz_full with rcu_nocbs
    253c752ed120 pstore/ftrace: Add and use ftrace_test_recursion_trylock_safe
    356e8a12bd66 pstore/ftrace: Add recursion protection to the ftrace callback
    334706a1e873 ftrace: Add ftrace_test_recursion_trylock() helper function
    78c260d7f60b ftrace: Move the recursion testing into global headers
    c0b313d988a1 powerpc/mm: Switch obsolete dssall to .long
    1bd813fe8d0e riscv: fix build with binutils 2.38
    835a2d1b24c6 powerpc/lib/sstep: fix 'ptesync' build error
    fd84b99a8ccb drm/amd/display: Don't allow partial copy_from_user
    024f4ff63d55 drm/amdgpu: Fix even more out of bound writes from debugfs
    0c0ad634e899 e1000e: Serialize TGP e1000e PM ops
    add88b0536fa e1000e: Make mei_me active when e1000e is in use
    a8f317c1a17e yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    c8400a2cbe1f iommu/arm-smmu-v3: Ratelimit event dump
    b8ec7e43e95e regmap: teach regmap to use raw spinlocks if requested in the config
    4b7fa7684be7 OF: DT-Overlay configfs interface (v7)
    d515a5c0e9a9 net: xilinx_emaclite: Do not print real IOMEM pointer
    11329e49959b drivers: net: xilinx_emaclite: remove arch limitation
    29dc69bf2a07 drivers: net: xilinx_emaclite: Add COMPILE_TEST support
    ff106eff01f6 drivers: net: xilinx_emaclite: Fix -Wpointer-to-int-cast warnings with W=1
    c27462391070 serial: 8250: 8250_omap: Fix possible array out of bounds access
    16976d8e307f perf intel-pt: Use aux_watermark
    d421a2346946 perf: Cap allocation order at aux_watermark
    6da8d5f29481 timers: Fix get_next_timer_interrupt() with no timers pending
    af141841735a eventfd: Enlarge recursion limit to allow vhost to work
    a125a6102808 iwlwifi: select MAC80211_LEDS conditionally
    139fe7d68413 rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
    8d0c79931235 console: Fix build when CONFIG_BLK_DEV_INITRD is disabled.
    ea777841e8ea yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    ab49d2db98bd cgroup1: fix leaked context root causing sporadic NULL deref in LTP
    bdda1b6cf99b aufs5: aufs-core
    2fa276071d07 aufs5: aufs-standalone
    06ed4d532456 aufs5: aufs-mmap
    372857834999 aufs5: aufs-kbuild
    fd68c9840693 aufs5: aufs-base
    a673c127156c Revert "aufs5: core"
    cf62bfcde384 Revert "aufs5: aufs5-base"
    a644419ec785 Revert "aufs5: aufs5-mmap"
    b893f9a999bb Revert "aufs5: aufs5-standalone"
    c60db0819480 Revert "aufs: initial port to v5.10"
    c66a5900f139 Revert "Revert "aufs: initial port to v5.10""
    1320cf58f5dd Revert "aufs: linux-v5.10-rc1, no more set_fs()"
    02349d7738ff Revert "for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t"
    f01dab74750c Revert "aufs: linux-v5.10-rc1, no more f_op->read() and ->write()"
    3d5de709b676 Revert "aufs5: aufs5-kbuild"
    a97f1329edf7 tracing/arm: Have max stack tracer handle the case of return address after data
    5c54112a05ab net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
    ddac76981cb3 sched/isolation: reconcile rcu_nocbs= and nohz_full=
    56fd8c36614e net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    a8808e541750 aufs: linux-v5.10-rc1, no more f_op->read() and ->write()
    cb1c41dac775 for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t
    a5805df6583f aufs: linux-v5.10-rc1, no more set_fs()
    64e145dcca8c Revert "aufs: initial port to v5.10"
    d6e20b2257ec defconfig: add dependency for CONFIG_ACPI_APEI_PCIEAER
    b237d48208d0 arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER
    1209195ed0f7 driver: adc: ltc2497: return directly after reading the adc conversion value
    a60fe3fcf113 Revert "mfd: syscon: Don't free allocated name for regmap_config"
    13d68767aa4a rcutorture: Use "all" and "N" in "nohz_full" and "rcu_nocbs"
    54e69571a97d rcu: deprecate "all" option to rcu_nocbs=
    a605b9d20447 lib: test_bitmap: add tests for "N" alias
    8c22517f444e lib: bitmap: support "N" as an alias for size of bitmap
    88187167e63a lib: bitmap: move ERANGE check from set_region to check_region
    ca5429633613 lib: bitmap: fold nbits into region struct
    9381134cea8a lib: test_bitmap: add more start-end:offset/len tests
    c825800730ab lib: test_bitmap: add tests to trigger ERANGE case.
    8cc8264dca3f lib: test_bitmap: clearly separate ERANGE from EINVAL tests.
    470da7b7f2ff Revert "cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers"
    28dc1d37602d Revert "cpumask: Make "all" alias global and not just RCU"
    dbfe0b183fca Revert "cpumask: Add a "none" alias to complement "all""
    a57711fcff30 Revert "cpumask: Add "last" alias for cpu list specifications"
    34523d7c8476 qemux86: add configuration symbol to select values
    cdca78778415 objtool: Fix seg fault with Clang non-section symbols
    d3287798bd88 x86/entry: Emit a symbol for register restoring thunk
    2ad99ddaac78 cpumask: Add "last" alias for cpu list specifications
    c10e9481810b cpumask: Add a "none" alias to complement "all"
    b00ceed9d388 cpumask: Make "all" alias global and not just RCU
    8b215206e797 cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers
    1b5024caeda8 clear_warn_once: add a clear_warn_once= boot parameter
    fc0dd76cce0e clear_warn_once: bind a timer to written reset value
    d64fc2d2b14a clear_warn_once: expand debugfs to include read support
    77592e956cc9 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    6e022759f727 perf: x86-32: explicitly include <errno.h>
    22d6bbb947d4 perf: mips64: Convert __u64 to unsigned long long
    c35f9150001c perf: fix bench numa compilation
    c4caef513eb1 perf: add SLANG_INC for slang.h
    07dfbf9405dd perf: add sgidefs.h to for mips builds
    42c5431ad2cf perf: change --root to --prefix for python install
    af79bfe90143 perf: add 'libperl not found' warning
    ddfbd9e75f08 perf: force include of <stdbool.h>
    0f34e6305176 fat: don't use obsolete random32 call in namei_vfat
    b5b55eaad1df FAT: Added FAT_NO_83NAME
    756b13bfab6e FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    fabad71cb2b5 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    06fd68d75bd1 aufs: initial port to v5.10
    c9126877d1f5 aufs5: core
    f5150173c643 aufs5: aufs5-standalone
    b57d26b072d9 aufs5: aufs5-mmap
    78f128c4b8e5 aufs5: aufs5-base
    47aa35171d08 aufs5: aufs5-kbuild
    35c480a23c66 yaffs: include blkdev.h
    2c64c43540a5 yaffs: fix misplaced variable declaration
    bde410ee9f59 yaffs2: v5.6 build fixups
    414c8e866931 yaffs2: fix memory leak when /proc/yaffs is read
    c99c1990cf7c yaffs: add strict check when call yaffs_internal_read_super
    498f5fafe50a yaffs: repair yaffs_get_mtd_device
    7ca3c08ebbf9 yaffs: Fix build failure by handling inode i_version with proper atomic API
    0ba47e881bb8 yaffs2: fix memory leak in mount/umount
    39a5406665dd yaffs: Avoid setting any ACL releated xattr
    ca5b43ddc6fd Yaffs:check oob size before auto selecting Yaffs1
    c2619c05a53e fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    5e08fb7b8ee0 yaffs2: adjust to proper location of MS_RDONLY
    5f1a1a9678a8 yaffs2: import git revision b4ce1bb (jan, 2020)
    fc21f09ae369 initramfs: allow an optional wrapper script around initramfs generation
    73887fca03be arm64/perf: Fix wrong cast that may cause wrong truncation
    a267cafaac44 defconfigs: drop obselete options
    eb5d1bc00c3f arm64/perf: fix backtrace for AAPCS with FP enabled
    062b2c98c087 linux-yocto: Handle /bin/awk issues
    d3beb253ae71 uvesafb: provide option to specify timeout for task completion
    75ccbf377a51 uvesafb: print error message when task timeout occurs
    18ffa2e88024 compiler.h: Undef before redefining __attribute_const__
    3ed931201746 vmware: include jiffies.h
    938942859596 Resolve jiffies wrapping about arp
    069a883d837c nfs: Allow default io size to be configured.
    3b568edcd3e9 check console device file on fs when booting
    77ec93228920 mount_root: clarify error messages for when no rootfs found
    17a15e0f7536 menuconfig,mconf-cfg: Allow specification of ncurses location
    8f13b1349a74 modpost: mask trivial warnings
    b6c9e0fa24e8 kbuild: exclude meta directory from distclean processing
    62dbbdbec60a powerpc: serialize image targets
    27b8dec5dbb3 arm: serialize build targets
    fc365512e4c4 Revert "platform/x86: wmi: Destroy on cleanup rather than unregister"
    9a6e91d2e691 crtsavres: fixups for 5.4+
    7dbc3cd0398f powerpc/ptrace: Disable array-bounds warning with gcc8
    ebe3bcb89cb0 powerpc: Disable attribute-alias warnings from gcc8
    65ba0e7de081 powerpc: add crtsavres.o to archprepare for kbuild
    6bd3efdce5a9 powerpc: kexec fix for powerpc64
    41671522c159 powerpc: Add unwind information for SPE registers of E500 core
    8851006b0109 mips: vdso: fix 'jalr $t9' crash in vdso code
    ed5db62477e8 mips: Kconfig: add QEMUMIPS64 option
    2a7ca094fc42 4kc cache tlb hazard: tlbp cache coherency
    b742d60d3f70 malta uhci quirks: make allowance for slow 4k(e)c
    8a160fc86eb6 arm/Makefile: Fix systemtap
    b9805882353c vexpress: Pass LOADADDR to Makefile
    332e618aa7ae arm: ARM EABI socketcall
    1ec682cb85f8 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 7618300a2120bc07af59e083b0d88c22033bac2e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
ca6ec54e65 linux-yocto/5.10: update to v5.10.226
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:

    ceb091e2c4cc Linux 5.10.226
    912736a0435e memcg: protect concurrent access to mem_cgroup_idr
    02ee1976edb2 net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
    dad75cf2c313 x86/mm: Fix PTI for i386 some more
    1401da1486dc rtmutex: Drop rt_mutex::wait_lock before scheduling
    c6bd80f58522 mmc: cqhci: Fix checking of CQHCI_HALT state
    b35d3c8181c5 drm/i915/fence: Mark debug_fence_free() with __maybe_unused
    b8dfa35f008e drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
    50632b877ce5 nvmet-tcp: fix kernel crash if commands allocation fails
    4c3b21204abb arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
    ccb95b37e957 arm64: acpi: Move get_cpu_for_acpi_id() to a header
    3658388cd354 ACPI: processor: Fix memory leaks in error paths of processor_add()
    5dac987d1bf9 ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
    157c0d94b4c4 nilfs2: protect references to superblock parameters exposed in sysfs
    0630e3d435c5 nilfs2: replace snprintf in show functions with sysfs_emit
    7882923f1cb8 perf/aux: Fix AUX buffer serialization
    0f511f2840cd uprobes: Use kzalloc to allocate xol area
    0af6b80dace1 clocksource/drivers/timer-of: Remove percpu irq related code
    3ded318cf06f clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
    cf6ffb16884f clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
    6c563a29857a VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
    359ea5edc919 Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
    1d8e020e51ab uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
    38cd8bde8ace nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
    3a8154bb4ab4 binder: fix UAF caused by offsets overwrite
    d0d3edb56e26 iio: adc: ad7124: fix chip ID mismatch
    1719ebc8e303 iio: fix scale application in iio_convert_raw_to_processed_unlocked
    f3a54c27bacd iio: buffer-dmaengine: fix releasing dma channel on error
    41cc91e3138f staging: iio: frequency: ad9834: Validate frequency parameter value
    d8a61e69f810 NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
    6fb7b7f5baaa ata: pata_macio: Use WARN instead of BUG
    d3ff0f98a52f MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
    99418ec776a3 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
    9d1e9f0876b0 of/irq: Prevent device address out-of-bounds read in interrupt map walk
    5c8906de98d0 Squashfs: sanity check symbolic link size
    2f14160d9fe2 usbnet: ipheth: race between ipheth_close and error handling
    51fa08edd800 Input: uinput - reject requests with unreasonable number of slots
    34185de73d74 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
    3206e4a4b062 s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
    912bcdc51b3f btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
    3eaad59258cc kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
    e6f3008de81c net: dpaa: avoid on-stack arrays of NR_CPUS elements
    e2355d513b89 PCI: Add missing bridge lock to pci_bus_lock()
    c60676b81fab btrfs: clean up our handling of refs == 0 in snapshot delete
    ed1b61398c4e btrfs: replace BUG_ON with ASSERT in walk_down_proc()
    8780129cbcc9 smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
    9813770f2585 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
    fb2257089a3a libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
    56cfdeb2c772 hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
    8a1e958e2664 hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
    59c1fb9874a0 hwmon: (lm95234) Fix underflows seen when writing limit attributes
    2a3add62f183 hwmon: (adc128d818) Fix underflows seen when writing limit attributes
    bc1faed19db9 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
    9b884bdc29e9 devres: Initialize an uninitialized struct member
    c8944d449fda um: line: always fill *error_out in setup_one_line()
    1434b72a2d12 cgroup: Protect css->cgroup write under css_set_lock
    70854bf00326 iommu/vt-d: Handle volatile descriptor status read
    8a7ef20bf738 dm init: Handle minors larger than 255
    583b5d2d4380 ASoC: topology: Properly initialize soc_enum values
    43b442c97243 net: dsa: vsc73xx: fix possible subblocks range of CAPT block
    19af8a23a1d5 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
    231c235d2f7a fou: Fix null-ptr-deref in GRO.
    0ea3f2798d15 gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
    77ad44ee337e gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers
    bc18f3c80667 fou: remove sparse errors
    3c0cedc22c97 bareudp: Fix device stats updates.
    32cbafeebfc1 usbnet: modern method to get random MAC
    594cc1dba09b net: usb: don't write directly to netdev->dev_addr
    98a4cabf8762 drivers/net/usb: Remove all strcpy() uses
    acd298513760 igc: Unlock on error in igc_io_resume()
    3efe53eb221a tcp_bpf: fix return value of tcp_bpf_sendmsg()
    ee1c2ecf7bbc platform/x86: dell-smbios: Fix error path in dell_smbios_init()
    45c0c747dfb5 svcrdma: Catch another Reply chunk overflow case
    449d70b16b84 igb: Fix not clearing TimeSync interrupts for 82580
    aec92dbebdbe can: bcm: Remove proc entry when dev is unregistered.
    ee50abebdc0b pcmcia: Use resource_size function on resource object
    9380fe33ab23 media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
    ebbdbbc580c1 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
    1fa40e0d2784 media: vivid: don't set HDMI TX controls if there are no HDMI outputs
    44a595f89762 usb: uas: set host status byte on data completion error
    3ab3ee4125ac wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
    9e28a1df185d leds: spi-byte: Call of_node_put() on error path
    e73b63f1388e media: vivid: fix wrong sizeimage value for mplane
    551966371e17 udf: Avoid excessive partition lengths
    66234da64d47 netfilter: nf_conncount: fix wrong variable type
    f56089a1806f iommu: sun50i: clear bypass register
    1c5bad90e035 af_unix: Remove put_pid()/put_cred() in copy_peercred().
    ec08e3008241 irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
    500e4bf67387 smack: unix sockets: fix accept()ed socket label
    414736fcb76d ALSA: hda: Add input value sanity checks to HDMI channel map controls
    751777a79a5c nfsd: make svc_stat per-network namespace instead of global
    f8219c4b8075 nfsd: remove nfsd_stats, make th_cnt a global counter
    f2fe1ec906d4 nfsd: make all of the nfsd stats per-network namespace
    554549696663 nfsd: expose /proc/net/sunrpc/nfsd in net namespaces
    fec6561e75d6 nfsd: rename NFSD_NET_* to NFSD_STATS_*
    9eb5d44b8fb1 sunrpc: use the struct net as the svc proc private
    e0fba78ab9b0 sunrpc: remove ->pg_stats from svc_program
    7f2476914e98 sunrpc: pass in the sv_stats struct through svc_create_pooled
    d06254ae7d6a nfsd: stop setting ->pg_stats for unused stats
    2197b23eda2b sunrpc: don't change ->sv_stats if it doesn't exist
    d47c660e8cb6 NFSD: Fix frame size warning in svc_export_parse()
    a8aaffc0c140 NFSD: Rewrite synopsis of nfsd_percpu_counters_init()
    c5322742027d NFSD: simplify error paths in nfsd_svc()
    ebfce8dd7e3f NFSD: Refactor the duplicate reply cache shrinker
    895807268a4d NFSD: Replace nfsd_prune_bucket()
    a02f9d6ea3c0 NFSD: Rename nfsd_reply_cache_alloc()
    73b72f4b3b3f NFSD: Refactor nfsd_reply_cache_free_locked()
    3025d489f9c8 nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
    4e18b58b106e nfsd: move reply cache initialization into nfsd startup
    ddee5b4b6a1c mptcp: pm: avoid possible UaF when selecting endp
    91fb0512a05c mptcp: pr_debug: add missing \n at the end
    7e4c72dbaf62 btrfs: fix use-after-free after failure to create a snapshot
    efdde00d4a1e nilfs2: fix state management in error path of log writing function
    07e4dc2fe000 nilfs2: fix missing cleanup on rollforward recovery error
    7725152b54d2 sched: sch_cake: fix bulk flow accounting logic for host fairness
    93ee345ba349 ila: call nf_unregister_net_hooks() sooner
    e3ad85c47777 tracing: Avoid possible softlockup in tracing_iter_reset()
    3a49b6b1caf5 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
    6949a97f6d40 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
    f540bc71d582 clk: qcom: clk-alpha-pll: Fix the pll post div mask
    0811d57384b8 fuse: use unsigned type for getxattr/listxattr size truncation
    9d38c704b425 fuse: update stats for pages in dropped aux writeback list
    4be36d9d1871 mmc: sdhci-of-aspeed: fix module autoloading
    2793f4238935 mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
    b2ead0948988 Bluetooth: MGMT: Ignore keys being loaded with invalid type
    029e462bb4f5 Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
    cb27399b3d48 irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
    e0b122a8f6dd ata: libata: Fix memory leak for error path in ata_host_alloc()
    0f27b8c07e9a ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
    2ef683b0585b ALSA: hda/realtek: add patch for internal mic in Lenovo V145
    adc688a5054d ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
    8ca21e7a27c6 ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
    98c75d761879 sch/netem: fix use after free in netem_dequeue
    06e7be693413 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
    b1400745609d i2c: Use IS_REACHABLE() for substituting empty ACPI functions
    dfc8eb4d7e3b ext4: handle redirtying in ext4_bio_write_page()
    5895541d7389 udf: Limit file size to 4TB
    17c43211d45f rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
    842a97b5e44f virtio_net: Fix napi_skb_cache_put warning
    c8e5439b5b6a net: set SOCK_RCU_FREE before inserting socket into hashtable
    cf002be3b8d9 bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
    2ac9deb7e087 drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
    3fd11fe4f207 block: initialize integrity buffer to zero before writing it to media
    0623c9f37118 media: uvcvideo: Enforce alignment of frame and interval
    c083c8be6bdd drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
    5eb04f989484 block: remove the blk_flush_integrity call in blk_integrity_unregister
    0305a885ccea wifi: cfg80211: make hash table duplicates more survivable
    d24bc270b7db drm/meson: plane: Add error handling
    a948ec993541 smack: tcp: ipv4, fix incorrect labeling
    3f3ef1d9f66b fsnotify: clear PARENT_WATCHED flags lazily
    7e64cabe81c3 usb: typec: ucsi: Fix null pointer dereference in trace
    bd13c1119a96 usbip: Don't submit special requests twice
    c7975f09ae26 ionic: fix potential irq name truncation
    e85cf9a5a41b hwspinlock: Introduce hwspin_lock_bust()
    7eb7888021ba PCI: al: Check IORESOURCE_BUS existence during probe
    9aa7dd5e3189 wifi: iwlwifi: remove fw_running op
    ed7e9ed9738e drm/amd/pm: check negtive return for table entries
    614564a5b289 drm/amdgpu: the warning dereferencing obj for nbio_v7_4
    008933832a31 drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
    52338a3aa772 apparmor: fix possible NULL pointer dereference
    0842db679dc0 drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
    310b9d8363b8 drm/amdgpu: fix mc_data out-of-bounds read warning
    5f09fa5e0ad4 drm/amdgpu: fix ucode out-of-bounds read warning
    725b728cc0c8 drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
    c253b87c7c37 drm/amdgpu: Fix out-of-bounds write warning
    60097df93854 drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
    74c5d8b057cd drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
    916083054670 drm/amd/display: Check msg_id before processing transcation
    7c47dd2e9234 drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
    2a63c90c7a90 drm/amd/display: Add array index check for hdcp ddc access
    754321ed63f0 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
    40c2e8bc117c drm/amd/display: Check gpio_id before used as array index
    e24fa827299e drm/amdgpu: avoid reading vf2pf info size from FB
    1d0c85d0fcb2 drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
    59ac791297e2 drm/amdgpu: fix uninitialized scalar variable warning
    38e32a0d8374 drm/amd/pm: fix the Out-of-bounds read warning
    d592768c1750 drm/amd/pm: fix warning using uninitialized value of max_vid_step
    a601129c785b drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
    774bae3b8dcd drm/amdgpu: fix overflowed array index read warning
    28b539bbccee drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
    40d0fedacfdf net: usb: qmi_wwan: add MeiG Smart SRM825L
    ff5af3f9b510 dma-debug: avoid deadlock between dma debug vs printk and netconsole
    712921d2abf4 i2c: Fix conditional for substituting empty ACPI functions
    0e69cf9b657f ALSA: hda/conexant: Mute speakers at suspend / shutdown
    221ebded43cb ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
    e78bc7099c8d drm: panel-orientation-quirks: Add quirk for OrangePi Neo
    03a85a51f33a fix vfsub build error
    b57d01c66f40 Linux 5.10.225
    7e8bad2cf393 apparmor: fix policy_unpack_test on big endian systems
    9e96dea7eff6 scsi: aacraid: Fix double-free on probe failure
    4538335cc23d usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
    59579a627adb usb: dwc3: st: add missing depopulate in probe error path
    6aee4c5635d8 usb: dwc3: st: fix probed platform device ref count on probe error path
    b72da4d89b97 usb: dwc3: core: Prevent USB core invalid event buffer address access
    16cc6114c981 usb: dwc3: omap: add missing depopulate in probe error path
    f84d5dccc855 USB: serial: option: add MeiG Smart SRM825L
    612843f842ad cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
    f5a5a5a0e95f soc: qcom: cmd-db: Map shared memory as WC, not WB
    8ddaea033de0 nfc: pn533: Add poll mod list filling check
    7e5d5c4ae707 net: busy-poll: use ktime_get_ns() instead of local_clock()
    8bbb9e4e0e66 gtp: fix a potential NULL pointer dereference
    842a40c7273b ethtool: check device is present when getting link settings
    2e8e93dea04d dmaengine: dw: Add memory bus width verification
    9cfe7c53fef1 dmaengine: dw: Add peripheral bus width verification
    f8e1c92868ad soundwire: stream: fix programming slave ports for non-continous port maps
    acddd7c6b782 ovl: do not fail because of O_NOATIME
    338a3ba30c5e net:rds: Fix possible deadlock in rds_message_put
    688325078a8b cgroup/cpuset: Prevent UAF in proc_cpuset_show()
    e83405e75d90 ata: libata-core: Fix null pointer dereference on error
    f2b6cd1335d2 Revert "Input: ioc3kbd - convert to platform remove callback returning void"
    777d9c223e83 media: uvcvideo: Fix integer overflow calculating timestamp
    f7276cdc1912 drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
    0365c9029ad9 ipc: replace costly bailout check in sysvipc_find_ipc()
    2933b4f8a6b3 mptcp: sched: check both backup in retrans
    1388df72dc14 wifi: mwifiex: duplicate static structs used in driver instances
    4e9436375fcc pinctrl: single: fix potential NULL dereference in pcs_get_function()
    d57e6298cca3 pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
    a45ee4c98da0 KVM: arm64: Don't use cbz/adr with external symbols
    df02642c21c9 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
    239b1cacceec tools: move alignment-related macros to new <linux/align.h>
    05dd9aabd04f Input: MT - limit max slots
    56b82e6ff3f5 Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
    93000b294952 nfsd: Don't call freezable_schedule_timeout() after each successful page allocation in svc_alloc_arg().
    b009444700d9 ALSA: timer: Relax start tick time check for slave timer elements
    b891438bc39b Revert "drm/amd/display: Validate hw_points_num before using it"
    92915fa734ab mmc: dw_mmc: allow biu and ciu clocks to defer
    15818af2f7aa KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
    65e79c943750 cxgb4: add forgotten u64 ivlan cast before shift
    d1623e7b43d5 HID: microsoft: Add rumble support to latest xbox controllers
    8c0a21d37d04 HID: wacom: Defer calculation of resolution until resolution_code is known
    fc73103a94e3 MIPS: Loongson64: Set timer mode in cpu-probe
    7fd3a5926870 binfmt_misc: pass binfmt_misc flags to the interpreter
    9df9783bd856 Bluetooth: MGMT: Add error handling to pair_device()
    9b9ba386d7bf mmc: mmc_test: Fix NULL dereference on allocation failure
    4370448fca3a drm/msm/dp: reset the link phy params before link training
    e54b08275237 drm/msm/dpu: don't play tricks with debug macros
    ff6607a4777c net: xilinx: axienet: Fix dangling multicast addresses
    2884e73978f6 net: xilinx: axienet: Always disable promiscuous mode
    cb5880a0de12 ipv6: prevent UAF in ip6_send_skb()
    c414000da1c2 netem: fix return value if duplicate enqueue fails
    050e7274ab21 net: dsa: mv88e6xxx: Fix out-of-bound access
    5885217d6663 net: dsa: mv88e6xxx: replace ATU violation prints with trace points
    5d8aed3ca688 net: dsa: mv88e6xxx: read FID when handling ATU violations
    544571911bc6 ice: fix ICE_LAST_OFFSET formula
    5c144835448a bonding: fix xfrm state handling when clearing active slave
    21816b696c17 bonding: fix xfrm real_dev null pointer dereference
    81216b9352be bonding: fix null pointer deref in bond_ipsec_offload_ok
    e8c85f2ff369 bonding: fix bond_ipsec_offload_ok return type
    6e630e1d7740 ip6_tunnel: Fix broken GRO
    4d42a2257ba6 netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
    eb06c8d3022c kcm: Serialise kcm_sendmsg() for the same socket.
    f4b762cf7ef0 tc-testing: don't access non-existent variable on exception
    095a1f19d452 Bluetooth: SMP: Fix assumption of Central always being Initiator
    7a4e7a0c6b0b Bluetooth: hci_core: Fix LE quote calculation
    ce70b0915009 dm suspend: return -ERESTARTSYS instead of -EINTR
    0ba340177782 media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
    d1bd8e0a11ea block: use "unsigned long" for blk_validate_block_size().
    cbb9a969fc19 gtp: pull network headers in gtp_dev_xmit()
    5970a540daad hrtimer: Prevent queuing of hrtimer without a function callback
    b09a5ec8de14 nvmet-rdma: fix possible bad dereference when freeing rsps
    2143cba14381 ext4: set the type of max_zeroout to unsigned int to avoid overflow
    f14cd61826d1 irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
    9e1c4d0d6ae9 usb: dwc3: core: Skip setting event buffers for host only controllers
    1b8e318f9960 s390/iucv: fix receive buffer virtual vs physical address confusion
    d0414f5436bc openrisc: Call setup_memory() earlier in the init sequence
    e5272645a038 NFS: avoid infinite loop in pnfs_update_layout.
    9e0414220bc2 nvmet-tcp: do not continue for invalid icreq
    5ee7495ac278 net: hns3: add checking for vf id of mailbox
    c7c43a784fdf Bluetooth: bnep: Fix out-of-bound access
    bf2f79970b6f usb: gadget: fsl: Increase size of name buffer for endpoints
    bf0c603ab4ed f2fs: fix to do sanity check in update_sit_entry
    8ec052c544f4 btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
    0c1d7b960fd7 btrfs: send: handle unexpected data in header buffer in begin_cmd()
    94a7dff229b9 btrfs: handle invalid root reference found in may_destroy_subvol()
    3dd13074e75e btrfs: change BUG_ON to assertion when checking for delayed_node root
    e21448a49b8b powerpc/boot: Only free if realloc() succeeds
    486fb5ebd5d6 powerpc/boot: Handle allocation failure in simple_realloc()
    05c21f285d9f parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
    4e5464005bd3 memory: stm32-fmc2-ebi: check regmap_read return value
    25d31baf922c x86: Increase brk randomness entropy for 64-bit systems
    76ec27b70983 md: clean up invalid BUG_ON in md_ioctl
    95e49b925812 netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
    316bf51edd3e virtiofs: forbid newlines in tags
    be49c4f2a15e drm/lima: set gp bus_stop bit before hard reset
    aa469c3d2854 net/sun3_82586: Avoid reading past buffer in debug output
    5fb0cbf84b18 scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
    a441ce39adf3 fs: binfmt_elf_efpic: don't use missing interpreter's properties
    e7385510e255 media: pci: cx23885: check cx23885_vdev_init() return
    00d4f971fa3c quota: Remove BUG_ON from dqget()
    239c5e988ec1 ext4: do not trim the group with corrupted block bitmap
    0f6425d90d0f nvmet-trace: avoid dereferencing pointer too early
    5380f1b2b9ab powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
    372928e8bef0 IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
    7138c598562b wifi: iwlwifi: abort scan when rfkill on but device enabled
    d483de53d4cf gfs2: setattr_chown: Add missing initialization
    80456d39f08f scsi: spi: Fix sshdr use
    3663e78fab9f media: qcom: venus: fix incorrect return value
    a43edc7abc4f binfmt_misc: cleanup on filesystem umount
    c13541c5eff9 staging: ks7010: disable bh on tx_dev_lock
    db3b679f66f1 drm/amd/display: Validate hw_points_num before using it
    cc49ee343351 staging: iio: resolver: ad2s1210: fix use before initialization
    01fa4415c3cc media: radio-isa: use dev_name to fill in bus_info
    0f83d7792630 s390/smp,mcck: fix early IPI handling
    aeda7043c4db RDMA/rtrs: Fix the problem of variable not initialized fully
    bbb662d0c23d i2c: riic: avoid potential division by zero
    5335c7f8db45 wifi: cw1200: Avoid processing an invalid TIM IE
    11b0c7323c28 wifi: mac80211: fix BA session teardown race
    5fe7bdbe4f53 ssb: Fix division by zero issue in ssb_calc_clock_rate
    dfa894f7ea37 ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
    fc250eca15bd net: hns3: fix a deadlock problem when config TC during resetting
    dbdbadec8a39 net: hns3: fix wrong use of semaphore up
    e5ceff2196dc netfilter: flowtable: initialise extack before use
    50c914b0e6fc mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
    8e8d306f3b58 net: dsa: vsc73xx: check busy flag in MDIO operations
    351ad72c50d7 net: dsa: vsc73xx: use read_poll_timeout instead delay loop
    665a4caa9c8d net: dsa: vsc73xx: pass value in phy_write operation
    aa9ce4193cba net: axienet: Fix register defines comment description
    1cece837e387 atm: idt77252: prevent use after free in dequeue_rx()
    4b730a147566 net/mlx5e: Correctly report errors for ethtool rx flows
    8e0e6b15ab49 s390/uv: Panic for set and remove shared access UVC errors
    6bcd0f95b899 btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
    c10ac31a72de s390/cio: rename bitmap_size() -> idset_bitmap_size()
    e24625310c61 drm/amdgpu/jpeg2: properly set atomics vmid field
    ad149f558534 memcg_write_event_control(): fix a user-triggerable oops
    0452e15e7fe1 drm/amdgpu: Actually check flags for all context ops.
    d88083916fc6 btrfs: tree-checker: add dev extent item checks
    bbcdda4b0d04 selinux: fix potential counting error in avc_add_xperms_decision()
    fe5bf1488170 fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
    de7be1940c34 bitmap: introduce generic optimized bitmap_size()
    03880af02a78 vfs: Don't evict inode under the inode lru traversing context
    ee030e4ffa9b dm persistent data: fix memory allocation failure
    63fd38af880b dm resume: don't return EINVAL when signalled
    1b21a791afc9 arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
    e245a18281c2 s390/dasd: fix error recovery leading to data corruption on ESE devices
    747bc154577d thunderbolt: Mark XDomain as unplugged when router is removed
    0f0654318e25 xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
    4905e56f7bac ALSA: usb-audio: Support Yamaha P-125 quirk entry
    4690e2171f65 fuse: Initialize beyond-EOF page contents before setting uptodate
    b2add7c50b5b Linux 5.10.224
    2de18b5cc38e media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()"
    e1ee1c4198c7 ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
    80ac0cc9c0be wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
    a563f1243092 vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
    06e9e6ac59fe vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
    b21ea49e6e69 nvme/pci: Add APST quirk for Lenovo N60z laptop
    15469d46ba34 exec: Fix ToCToU between perm check and set-uid/gid usage
    d39e0f582b43 media: uvcvideo: Use entity get_cur in uvc_ctrl_set
    ec54634f9123 arm64: cpufeature: Fix the visibility of compat hwcaps
    fb6675db04c4 powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
    50111a8098fb drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
    31c35f9f89ef netfilter: nf_tables: prefer nft_chain_validate
    d5f87c11114b netfilter: nf_tables: allow clone callbacks to sleep
    7b17de2a71e5 netfilter: nf_tables: use timestamp to check for set element timeout
    191fc4439524 netfilter: nf_tables: set element extended ACK reporting support
    c52f9e1a9eb4 PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
    7e62564d5e43 Fix gcc 4.9 build issue in 5.10.y
    329eae03d0f9 Add gitignore file for samples/fanotify/ subdirectory
    9bdf0624bdbc samples: Make fs-monitor depend on libc and headers
    5b9f49cc86bd samples: Add fs error monitoring example
    3f84b37abb8f mptcp: pm: fix backup support in signal endpoints
    44165604dd6e mptcp: export local_address
    9b9a64ef9a1a mptcp: mib: count MPJ with backup flag
    96f3c8a85021 mptcp: fix NL PM announced address accounting
    1008f2bcbc8e mptcp: distinguish rcv vs sent backup flag in requests
    381cad7a0873 mptcp: sched: check both directions for backup
    32b133fb7833 drm/mgag200: Set DDC timeout in milliseconds
    fd65cf86ca3c drm/bridge: analogix_dp: properly handle zero sized AUX transactions
    450b6b22acda x86/mtrr: Check if fixed MTRRs exist before saving them
    ab8b397d5997 padata: Fix possible divide-by-0 panic in padata_mt_helper()
    eb223bf01e68 tracing: Fix overflow in get_free_elt()
    ca2ea2dec107 power: supply: axp288_charger: Round constant_charge_voltage writes down
    51e8360d94b4 power: supply: axp288_charger: Fix constant_charge_voltage writes
    a26bcfeea300 genirq/irqdesc: Honor caller provided affinity in alloc_desc()
    db959cdfe67b irqchip/xilinx: Fix shift out of bounds
    52b138f10211 serial: core: check uartclk for zero to avoid divide by zero
    227d455e6cec irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t'
    7dddf560e238 irqchip/meson-gpio: support more than 8 channels gpio irq
    5f1aa8ce6452 scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
    8f209716ea5e scsi: mpt3sas: Remove scsi_dma_map() error messages
    f3405f4997b0 ntp: Safeguard against time_constant overflow
    f098e8fc7227 driver core: Fix uevent_show() vs driver detach race
    dc335b92e5f1 ntp: Clamp maxerror and esterror to operating range
    668c6c4a7e9e tick/broadcast: Move per CPU pointer access into the atomic section
    005c318981bc scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
    ef1b208ca813 usb: gadget: u_serial: Set start_delayed during suspend
    7cc9ebcfe58b usb: gadget: core: Check for unset descriptor
    f1205a5aad68 USB: serial: debug: do not echo input by default
    4dacdb9720aa usb: vhci-hcd: Do not drop references before new references are gained
    d993cb25efb1 ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
    c7c1ca6e258d ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
    e7e7d2b180d8 ALSA: line6: Fix racy access to midibuf
    5291d4f73452 drm/client: fix null pointer dereference in drm_client_modeset_probe
    44e11ae8f942 ALSA: usb-audio: Re-add ScratchAmp quirk entries
    c9c11ece5ad9 spi: spi-fsl-lpspi: Fix scldiv calculation
    c6ba514732e9 kprobes: Fix to check symbol prefixes correctly
    9ddd5e7835c6 bpf: kprobe: remove unused declaring of bpf_kprobe_override
    455769ebb60f i2c: smbus: Send alert notifications to all devices if source not found
    56f106d2c476 ASoC: codecs: wsa881x: Correct Soundwire ports mask
    5605992ad425 i2c: smbus: Improve handling of stuck alerts
    706f18a8fa43 arm64: errata: Expand speculative SSBS workaround (again)
    f261c5d8d0f8 arm64: cputype: Add Cortex-A725 definitions
    bdae104b0949 arm64: cputype: Add Cortex-X1C definitions
    4a500d4bdcec arm64: errata: Expand speculative SSBS workaround
    bf0d247dfbda arm64: errata: Unify speculative SSBS errata logic
    17ff37fe453f arm64: cputype: Add Cortex-X925 definitions
    77741cdc254d arm64: cputype: Add Cortex-A720 definitions
    b8d683f5b538 arm64: cputype: Add Cortex-X3 definitions
    9f7ba0078249 arm64: errata: Add workaround for Arm errata 3194386 and 3312417
    d8029a49c8af arm64: cputype: Add Neoverse-V3 definitions
    c46b7570c9d5 arm64: cputype: Add Cortex-X4 definitions
    55920e407a7e arm64: Add Neoverse-V2 part
    5b9ae6bb3360 arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
    69299a4282a3 ext4: fix wrong unit use in ext4_mb_find_by_goal
    1d21d4175054 sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
    3b2b169fadd8 SUNRPC: Fix a race to wake a sync task
    a3e52a4c22c8 s390/sclp: Prevent release of buffer in I/O
    1a6b4240b0b9 jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
    e48a901ce65f media: uvcvideo: Fix the bandwdith quirk on USB 3.x
    de305abd36eb media: uvcvideo: Ignore empty TS packets
    c1749313f35b drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
    d81c1eeb333d drm/amdgpu: Fix the null pointer dereference to ras_manager
    1d4e65fa6239 btrfs: fix bitmap leak when loading free space cache on duplicate entry
    29ce18d7672f wifi: nl80211: don't give key data to userspace
    934f815345c0 udf: prevent integer overflow in udf_bitmap_free_blocks()
    65b982b9af54 PCI: Add Edimax Vendor ID to pci_ids.h
    55985e3aa15a selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
    8e665ccc5262 ACPI: SBS: manage alarm sysfs attribute through psy core
    85d8fe79a3ce ACPI: battery: create alarm sysfs attribute atomically
    64ac0c02352b clocksource/drivers/sh_cmt: Address race condition for clock events
    c384dd4f1fb3 md/raid5: avoid BUG_ON() while continue reshape after reassembling
    5ccf99545c71 md: do not delete safemode_timer in mddev_suspend
    464d242868a8 rcutorture: Fix rcu_torture_fwd_cb_cr() data race
    adc491f3e73d net: fec: Stop PPS on driver remove
    865948628a42 l2tp: fix lockdep splat
    b7b8d9f5e679 net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
    01150020c071 Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
    085fb116c4ad net: linkwatch: use system_unbound_wq
    e87f52225e04 net: usb: qmi_wwan: fix memory leak for not ip packets
    52319d9d2f52 sctp: Fix null-ptr-deref in reuseport_add_sock().
    17a93a820196 sctp: move hlist_node and hashent out of sctp_ep_common
    ba4e59f34c64 x86/mm: Fix pti_clone_entry_text() for i386
    d00c9b4bbc44 x86/mm: Fix pti_clone_pgtable() alignment assumption
    75880302cf3a irqchip/mbigen: Fix mbigen node address layout
    c476c5c7bb8d genirq: Allow irq_chip registration functions to take a const irq_chip
    12fa9934332d netfilter: ipset: Add list flush to cancel_gc
    e93fa44f0714 mptcp: fix duplicate data handling
    3deac6f6860d r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
    646e9e907138 net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
    8b0a5709ac6e ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
    7b745257ff39 ALSA: usb-audio: Correct surround channels in UAC1 channel map
    08775b3d6ed1 protect the fetch of ->fd[fd] in do_dup2() from mispredictions
    e4b2b0306b6b HID: wacom: Modify pen IDs
    b12a67976b12 platform/chrome: cros_ec_proto: Lock device when updating MKBP version
    59be4a167782 riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
    7d72f5195109 ipv6: fix ndisc_is_useropt() handling for PIO
    8e97cc828d5f net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
    c65f72eec60a net/iucv: fix use after free in iucv_sock_close()
    7c03ab555eb1 sched: act_ct: take care of padding in struct zones_ht_key
    b17eeed7cd09 drm/vmwgfx: Fix overlay when using Screen Targets
    906372e753c5 drm/nouveau: prime: fix refcount underflow
    6b50462b473f remoteproc: imx_rproc: Skip over memory region when node value is NULL
    5991ef8e7a90 remoteproc: imx_rproc: Fix ignoring mapping vdev regions
    a4ed3286a5c6 remoteproc: imx_rproc: ignore mapping vdev regions
    3a2884a44e5c irqchip/imx-irqsteer: Handle runtime power management correctly
    0548b54d0a26 irqchip/imx-irqsteer: Add runtime PM support
    06a93b720351 irqchip/imx-irqsteer: Constify irq_chip struct
    652e7b4d7300 genirq: Allow the PM device to originate from irq domain
    ef56dcdca8f2 devres: Fix memory leakage caused by driver API devm_free_percpu()
    81484ab2858b driver core: Cast to (void *) with __force for __percpu pointer
    6bb9cc6e2594 drivers: soc: xilinx: check return status of get_api_version()
    79ec4cde1d8a soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
    58b07286aef1 ext4: check the extent status again before inserting delalloc block
    4b6d9a0fe743 ext4: factor out a common helper to query extent map
    b2591c89a6e2 sysctl: always initialize i_uid/i_gid
    88f053a1dd34 fuse: verify {g,u}id mount options correctly
    997d3c9cbed6 fuse: name fs_context consistently
    2fa82af6fd04 powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
    d28869a145cf fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
    be23ae63080e nvme-pci: add missing condition check for existence of mapped data
    ce90f30157eb nvme: split command copy into a helper
    b59013d264b6 ceph: fix incorrect kmalloc size of pagevec mempool
    eb1b7575fe52 ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
    3ff431695351 lirc: rc_dev_get_from_fd(): fix file leak
    ea72a8881007 powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
    347dcb84a487 apparmor: Fix null pointer deref when receiving skb during sock creation
    9460ac3dd1ae mISDN: Fix a use after free in hfcmulti_tx()
    dda518dea60d bpf: Fix a segment issue when downgrading gso_size
    5cc4d71dda2d net: nexthop: Initialize all fields in dumped nexthops
    dc2a655437c4 net: stmmac: Correct byte order of perfect_match
    aa38bf74899d tipc: Return non-zero value from tipc_udp_addr2str() on error
    cf791b98fe0c netfilter: nft_set_pipapo_avx2: disable softinterrupts
    c8ae5939f40e net: bonding: correctly annotate RCU in bond_should_notify_peers()
    3bf09eab401e ipv4: Fix incorrect source address in Record Route option
    f62a9cc0c2f7 MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
    257193083e8f dma: fix call order in dmam_free_coherent
    641b7a8920f4 libbpf: Fix no-args func prototype BTF dumping syntax
    ff2387553f6a f2fs: fix start segno of large section
    721190921a87 um: time-travel: fix time-travel-start option
    538a27c8048f jfs: Fix array-index-out-of-bounds in diFree
    1c089efe763d kdb: Use the passed prompt in kdb_position_cursor()
    f0ad62559f05 kdb: address -Wformat-security warnings
    65dba3c9ce75 kernel: rerun task_work while freezing in get_signal()
    b839175c06da io_uring/io-wq: limit retrying worker initialisation
    5f0a6800b8ae nilfs2: handle inconsistent state in nilfs_btnode_create_block()
    9fa8eca2598a Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
    4d3eb40ccd1b Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
    1fccae3fd7ae rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
    52d8d27fd6d3 rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
    76b62f303508 drm/panfrost: Mark simple_ondemand governor as softdep
    77411a2d2252 MIPS: Loongson64: env: Hook up Loongsson-2K
    636163de03cc MIPS: ip30: ip30-console: Add missing include
    4e8f70d3cc5e rbd: don't assume rbd_is_lock_owner() for exclusive mappings
    24933a55bfaf selftests/sigaltstack: Fix ppc64 GCC build
    94ee7ff99b87 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
    9667d46f8a77 platform: mips: cpu_hwmon: Disable driver on unsupported hardware
    19f108b3d1ca watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
    9cba1ec637f3 rtc: isl1208: Fix return value of nvmem callbacks
    a49321257f62 perf/x86/intel/pt: Fix a topa_entry base address calculation
    3b8e1b7d26d6 perf/x86/intel/pt: Fix topa_entry base length
    a3ab508a4853 scsi: qla2xxx: validate nvme_local_port correctly
    57ba75637122 scsi: qla2xxx: Complete command early within lock
    b0c39dcbd8a5 scsi: qla2xxx: Fix flash read failure
    87db8d7b7520 scsi: qla2xxx: Fix for possible memory corruption
    e5ed6a26ffde scsi: qla2xxx: During vport delete send async logout explicitly
    2fcd485289c8 rtc: cmos: Fix return value of nvmem callbacks
    d4d814159f53 devres: Fix devm_krealloc() wasting memory
    648d5490460d kobject_uevent: Fix OOB access within zap_modalias_env()
    41dd9636414b kbuild: Fix '-S -c' in x86 stack protector scripts
    0730ea850270 decompress_bunzip2: fix rare decompression failure
    bed9580165d5 ubi: eba: properly rollback inside self_check_eba
    ae99754cd86b clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
    54bc4e88447e f2fs: fix to don't dirty inode for readonly filesystem
    b848b40794ba scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
    a44f88f7576b dev/parport: fix the array out-of-bounds risk
    388ee7a4d330 binder: fix hang of unregistered readers
    ac2459460ce7 PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
    e5bae95306f7 PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
    af1d27f88ec9 hwrng: amd - Convert PCIBIOS_* return codes to errnos
    43aab4483daa tools/memory-model: Fix bug in lock.cat
    9d289ce917f8 KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
    cdbcb4e9f69b jbd2: make jbd2_journal_get_max_txn_bufs() internal
    6d5223be13f2 leds: ss4200: Convert PCIBIOS_* return codes to errnos
    35f8c9ac0cd3 wifi: mwifiex: Fix interface type change
    de2a011a13a4 ext4: make sure the first directory block is not a hole
    42d420517072 ext4: check dot and dotdot of dx_root before making dir indexed
    38463947850c m68k: amiga: Turn off Warp1260 interrupts during boot
    2199e157a465 udf: Avoid using corrupted block bitmap buffer
    5c59cb8dd954 task_work: Introduce task_work_cancel() again
    1fd27cc6f0a5 task_work: s/task_work_cancel()/task_work_cancel_func()/
    973155ca67fe apparmor: use kvfree_sensitive to free data->data
    eb46367187a4 sched/fair: Use all little CPUs for CPU-bound workloads
    9ce89824ff04 drm/amd/display: Check for NULL pointer
    748e9ad7c0c2 scsi: qla2xxx: Fix optrom version displayed in FDMI
    6735d02ead7d drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
    b6ac46a00188 drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
    86f4ca8b3b6e ext2: Verify bitmap and itable block numbers before using them
    10f7163bfb5f hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
    4c9d235630d3 media: venus: fix use after free in vdec_close
    e65cccfae729 char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
    cf0c713c6946 sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
    5c5b02d48946 ipv6: take care of scope when choosing the src addr
    83e2dfadcb62 af_packet: Handle outgoing VLAN packets without hardware offloading
    7e36a3c701b4 net: netconsole: Disable target before netpoll cleanup
    9ef719022814 tick/broadcast: Make takeover of broadcast hrtimer reliable
    f2c2c4cc5af7 dt-bindings: thermal: correct thermal zone node name limit
    14083dc69ba6 rtc: interface: Add RTC offset to alarm after fix-up
    84ffa27eb04c nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
    9d6571b1c4b6 fs/nilfs2: remove some unused macros to tame gcc
    3c6fa67023bc fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
    21a15d52bc22 pinctrl: freescale: mxs: Fix refcount of child
    d2de7746e5e9 pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
    73303a4a8fd7 pinctrl: ti: ti-iodelay: Drop if block with always false condition
    15014206f90d pinctrl: single: fix possible memory leak when pinctrl_enable() fails
    8c3bef7ca88a pinctrl: core: fix possible memory leak when pinctrl_enable() fails
    53f2d5bce177 pinctrl: rockchip: update rk3308 iomux routes
    01c0341e9846 net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
    ef6af2994261 net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
    eb4ca1a97e08 netfilter: ctnetlink: use helper function to calculate expect ID
    9118c408ee09 bnxt_re: Fix imm_data endianness
    edc2dee07ab4 RDMA/hns: Fix missing pagesize and alignment check in FRMR
    29723ad94817 macintosh/therm_windtunnel: fix module unload.
    445ffbccd05a powerpc/xmon: Fix disassembly CPU feature checks
    38a7e4b8bfea MIPS: Octeron: remove source file executable bit
    3009d371a2ef Input: elan_i2c - do not leave interrupt disabled on suspend failure
    37a484f771ed RDMA/device: Return error earlier if port in not valid
    695d70c60bdb mtd: make mtd_test.c a separate module
    ab2114f6ffc8 ASoC: max98088: Check for clk_prepare_enable() error
    771f129bed4d RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
    506e71b0e10d RDMA/mlx4: Fix truncated output warning in alias_GUID.c
    6bf3cf61f35a RDMA/mlx4: Fix truncated output warning in mad.c
    26b6512d5d20 Input: qt1050 - handle CHIP_ID reading error
    2be7e24056d7 coresight: Fix ref leak when of_coresight_parse_endpoint() fails
    3d1c4bf57db8 PCI: Fix resource double counting on remove & rescan
    8105318210a4 SUNRPC: Fixup gss_status tracepoint error output
    8f1dc3f33f2a sparc64: Fix incorrect function signature and add prototype for prom_cif_init
    3d096f2a99eb ext4: avoid writing unitialized memory to disk in EA inodes
    91c22df70138 SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
    84edcf61bd41 xprtrdma: Fix rpcrdma_reqs_reset()
    974294806baf xprtrdma: Rename frwr_release_mr()
    cf9141d2f778 mfd: omap-usb-tll: Use struct_size to allocate tll
    72ac78ec1a35 media: venus: flush all buffers in output plane streamoff
    5ed0496e383c ext4: fix infinite loop when replaying fast_commit
    c9106ad5ea2a Revert "leds: led-core: Fix refcount leak in of_led_get()"
    4e87f592a46b drm/qxl: Add check for drm_cvt_mode
    cd105977b1f8 drm/etnaviv: fix DMA direction handling for cached RW buffers
    6ef4f1e98154 perf report: Fix condition in sort__sym_cmp()
    09c1583f0e10 leds: trigger: Unregister sysfs attributes before calling deactivate()
    3c9071a87105 media: renesas: vsp1: Store RPF partition configuration per RPF instance
    3944484005d6 media: renesas: vsp1: Fix _irqsave and _irq mix
    9459f3317562 media: uvcvideo: Override default flags
    115d814d6acd media: uvcvideo: Allow entity-defined get_info and get_cur
    e470e95616bf saa7134: Unchecked i2c_transfer function result fixed
    f3968b3d3cfb media: imon: Fix race getting ictx->lock
    bcc963f591b9 media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
    7aaa368c684c drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
    fb20da833874 drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
    be9d08ff102d xdp: fix invalid wait context of page_pool_destroy()
    96178b12c881 selftests: forwarding: devlink_lib: Wait for udev events after reloading
    859bc763747c bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
    6ce46045f9b9 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
    28c8fce2078a bpf: annotate BTF show functions with __printf
    1ccb1399bd51 selftests/bpf: Close fd in error path in drop_on_reuseport
    be53b70fc081 wifi: virt_wifi: don't use strlen() in const context
    f851ff5c6e0e gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
    05c4488a0e44 wifi: virt_wifi: avoid reporting connection success with wrong SSID
    b33dd4508640 qed: Improve the stack space of filter_config()
    7f132aca1820 perf: Prevent passing zero nr_pages to rb_alloc_aux()
    a2450206c092 perf: Fix perf_aux_size() for greater-than 32-bit size
    a497a6b72b29 perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
    d4f4188ecfe5 netfilter: nf_tables: rise cap on SELinux secmark context
    0d08015beedb ipvs: Avoid unnecessary calls to skb_is_gso_sctp
    2912a0d136ee net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
    29254059a1f8 net: fec: Refactor: #define magic constants
    2e201b3d162c wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
    72e470089fc4 wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
    4055275ca3e0 wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
    2aa1739334d0 ath11k: dp: stop rx pktlog before suspend
    dae1ab70406e mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
    aa98eb074051 mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible
    36a9996e020d mlxsw: spectrum_acl_erp: Fix object nesting warning
    22ae17a267f4 lib: objagg: Fix general protection fault
    ada0c319253a selftests/bpf: Check length of recv in test_sockmap
    249adb30cbc7 net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
    15c2ec7c284d net/smc: Allow SMC-D 1MB DMB allocations
    8d0d50a8b738 net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
    2f5738bdd6f6 selftests/bpf: Fix prog numbers in test_sockmap
    1302433dc664 wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
    1eb5751e2369 firmware: turris-mox-rwtm: Initialize completion before mailbox
    085dc942897c firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
    6f3cb1fd6b42 ARM: spitz: fix GPIO assignment for backlight
    7b7d06a310e2 ARM: pxa: spitz: use gpio descriptors for audio
    3ae2ec97d8e9 m68k: cmpxchg: Fix return value for default case in __arch_xchg()
    ba1d2ecfcf1b x86/xen: Convert comma to semicolon
    4a49ce2d63d5 m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
    e04654f42577 arm64: dts: amlogic: gx: correct hdmi clocks
    4745535fce11 arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
    be5ca4064751 arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
    b1e9396ac410 ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
    a992c88fbb8c ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
    c79a7cad4115 ARM: dts: imx6qdl-kontron-samx6i: fix board reset
    efd89b5db5be ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
    bbfa9a71ae4a ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node
    31a9a0958b15 arm64: dts: rockchip: Increase VOP clk rate on RK3328
    5cc525351b0c soc: qcom: pdr: fix parsing of domains lists
    eab05737ee22 soc: qcom: pdr: protect locator_addr with the main mutex
    a584e5d3f7d9 arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
    eedd9fd98641 soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
    39f4cb508ebf arm64: dts: qcom: sdm845: add power-domain to UFS PHY
    d3e6b30c9cf5 hwmon: (max6697) Fix swapped temp{1,8} critical alarms
    15770a147692 hwmon: (max6697) Fix underflow when writing limit attributes
    ae8bd075a921 pwm: stm32: Always do lazy disabling
    d8571b9a83d1 hwmon: (adt7475) Fix default duty on fan is disabled
    685976438b64 x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
    010441f08347 x86/pci/xen: Fix PCIBIOS_* return code handling
    c995bea85e2e x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
    e2fdf7b79f08 x86/of: Return consistent error type from x86_of_pci_irq_enable()
    97795f23a8ab hfsplus: fix to avoid false alarm of circular locking
    c0748b7684a9 platform/chrome: cros_ec_debugfs: fix wrong EC message version
    3070e8160916 EDAC, i10nm: make skx_common.o a separate module
    9bff9479e143 EDAC/skx_common: Add new ADXL components for 2-level memory
    12594a0e7118 sock_map: avoid race between sock_map_close and sk_psock_put
    7a346798c1e1 sock_map: Fix a potential use-after-free in sock_map_close()
    843556a46e16 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
    4af417c06d37 of: module: add buffer overflow check in of_modalias()
    b29e4b50c556 scripts/gdb: fix SB_* constants parsing
    02fd398f5e2b bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
    2bba1cb1487b loop: Select I/O scheduler 'none' from inside add_disk()
    027f4dd7c993 blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag
    2214ded26c86 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    44494049e815 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    0d7c23009d82 tpm: Add flag to use default cancellation policy
    07914bef4e16 tpm: tis_i2c: Fix sanity check interrupt enable mask
    35f85f04bd69 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    7b04c6c08107 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    4790cb2d1283 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    50f74deaf308 hwmon: Add driver for Texas Instruments TMP464 and TMP468
    a4e6e4b7bb08 dt-bindings: hwmon: add tmp464.yaml
    e0ed2149d7b5 drm/amdkfd: Check for null pointer after calling kmemdup
    c6ddded89322 ARM: renumber bits related to _TIF_WORK_MASK
    35b96a325c1e arm64: make _TIF_WORK_MASK bits contiguous
    f5a8f06aa595 arm64: uaccess: remove vestigal UAO support
    3a330b569301 arm64: uaccess: remove redundant PAN toggling
    9cbbb016d6e7 arm64: uaccess: remove addr_limit_user_check()
    fd83411f5e08 arm64: uaccess: remove set_fs()
    15a6dc2f4b53 arm64: uaccess cleanup macro naming
    912a6ab683a4 arm64: uaccess: split user/kernel routines
    d004ab02dae2 arm64: uaccess: refactor __{get,put}_user
    e1941a8b459e arm64: uaccess: simplify __copy_user_flushcache()
    dfae822b4c59 arm64: uaccess: rename privileged uaccess routines
    1efdb8f0a0c7 arm64: sdei: explicitly simulate PAN/UAO entry
    b35fec69554c arm64: sdei: move uaccess logic to arch/arm64/
    b5a28033fe7b arm64: head.S: always initialize PSTATE
    243eb8553513 arm64: head.S: cleanup SCTLR_ELx initialization
    74a00405d97f arm64: head.S: rename el2_setup -> init_kernel_el
    73c5f386d175 arm64: add C wrappers for SET_PSTATE_*()
    e17fb7543df1 arm64: ensure ERET from kthread is illegal
    eff6289cc53b ixgbevf: add disable link state
    262595681381 ixgbe: add improvement for MDD response functionality
    b9d78b06dea8 ixgbe: add the ability for the PF to disable VF link state
    d829911485da Documentation: arm64: Document PMU counters access from userspace
    fe5d29bfce20 arm64: perf: Enable PMU counter userspace access for perf event
    15ce6d04ed6a arm64: perf: Add userspace counter access disable switch
    4f288acbeed8 perf: Add a counter for number of user access events in context
    354ba4a8c4b8 x86: perf: Move RDPMC event flag to a common definition
    d29cec94c49b libperf xyarray: Add bounds checks to xyarray__entry()
    8264d2b91841 libperf: Add support for user space counter access
    7fd81b678b5f libperf tests: Add support for verbose printing
    6029ff53a48f libperf: Add evsel mmap support
    28b0c8956369 tools include: Add an initial math64.h
    492e532d20f1 perf record: Improve 'Workload failed' message printing events + what was exec'ed
    d0a1fc61733e perf evlist: Add a method to return the list of evsels as a string
    81a77b39be0a perf annotate: Fix sample events lost in stdio mode
    2883e69e202d pnmtologo: use relocatable file name
    80f5207b5abd tools: use basename to identify file in gen-mach-types
    4d201ec392f1 vt/conmakehash: improve reproducibility
    ae24d013888f lib/build_OID_registry: fix reproducibility issues
    5d72da88dbb4 x86/boot: Wrap literal addresses in absolute_pointer()
    dc0bd7aa2319 ACPI: thermal: drop an always true check
    0c4288cceef5 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    5509050b3392 xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    669827c6e293 virtio-pci: Remove wrong address verification in vp_del_vqs()
    1c80d994d3db regulator: consumer: Add missing stubs to regulator/consumer.h
    3303d0e2aeff ipv6: Fix stats accounting in ip6_pkt_drop
    c56e60f665e7 memcg: enable accounting of ipc resources
    e6c8ebd210a2 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    1655ee30e684 sched/isolation: really align nohz_full with rcu_nocbs
    253c752ed120 pstore/ftrace: Add and use ftrace_test_recursion_trylock_safe
    356e8a12bd66 pstore/ftrace: Add recursion protection to the ftrace callback
    334706a1e873 ftrace: Add ftrace_test_recursion_trylock() helper function
    78c260d7f60b ftrace: Move the recursion testing into global headers
    c0b313d988a1 powerpc/mm: Switch obsolete dssall to .long
    1bd813fe8d0e riscv: fix build with binutils 2.38
    835a2d1b24c6 powerpc/lib/sstep: fix 'ptesync' build error
    fd84b99a8ccb drm/amd/display: Don't allow partial copy_from_user
    024f4ff63d55 drm/amdgpu: Fix even more out of bound writes from debugfs
    0c0ad634e899 e1000e: Serialize TGP e1000e PM ops
    add88b0536fa e1000e: Make mei_me active when e1000e is in use
    a8f317c1a17e yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    c8400a2cbe1f iommu/arm-smmu-v3: Ratelimit event dump
    b8ec7e43e95e regmap: teach regmap to use raw spinlocks if requested in the config
    4b7fa7684be7 OF: DT-Overlay configfs interface (v7)
    d515a5c0e9a9 net: xilinx_emaclite: Do not print real IOMEM pointer
    11329e49959b drivers: net: xilinx_emaclite: remove arch limitation
    29dc69bf2a07 drivers: net: xilinx_emaclite: Add COMPILE_TEST support
    ff106eff01f6 drivers: net: xilinx_emaclite: Fix -Wpointer-to-int-cast warnings with W=1
    c27462391070 serial: 8250: 8250_omap: Fix possible array out of bounds access
    16976d8e307f perf intel-pt: Use aux_watermark
    d421a2346946 perf: Cap allocation order at aux_watermark
    6da8d5f29481 timers: Fix get_next_timer_interrupt() with no timers pending
    af141841735a eventfd: Enlarge recursion limit to allow vhost to work
    a125a6102808 iwlwifi: select MAC80211_LEDS conditionally
    139fe7d68413 rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
    8d0c79931235 console: Fix build when CONFIG_BLK_DEV_INITRD is disabled.
    ea777841e8ea yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    ab49d2db98bd cgroup1: fix leaked context root causing sporadic NULL deref in LTP
    bdda1b6cf99b aufs5: aufs-core
    2fa276071d07 aufs5: aufs-standalone
    06ed4d532456 aufs5: aufs-mmap
    372857834999 aufs5: aufs-kbuild
    fd68c9840693 aufs5: aufs-base
    a673c127156c Revert "aufs5: core"
    cf62bfcde384 Revert "aufs5: aufs5-base"
    a644419ec785 Revert "aufs5: aufs5-mmap"
    b893f9a999bb Revert "aufs5: aufs5-standalone"
    c60db0819480 Revert "aufs: initial port to v5.10"
    c66a5900f139 Revert "Revert "aufs: initial port to v5.10""
    1320cf58f5dd Revert "aufs: linux-v5.10-rc1, no more set_fs()"
    02349d7738ff Revert "for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t"
    f01dab74750c Revert "aufs: linux-v5.10-rc1, no more f_op->read() and ->write()"
    3d5de709b676 Revert "aufs5: aufs5-kbuild"
    a97f1329edf7 tracing/arm: Have max stack tracer handle the case of return address after data
    5c54112a05ab net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
    ddac76981cb3 sched/isolation: reconcile rcu_nocbs= and nohz_full=
    56fd8c36614e net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    a8808e541750 aufs: linux-v5.10-rc1, no more f_op->read() and ->write()
    cb1c41dac775 for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t
    a5805df6583f aufs: linux-v5.10-rc1, no more set_fs()
    64e145dcca8c Revert "aufs: initial port to v5.10"
    d6e20b2257ec defconfig: add dependency for CONFIG_ACPI_APEI_PCIEAER
    b237d48208d0 arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER
    1209195ed0f7 driver: adc: ltc2497: return directly after reading the adc conversion value
    a60fe3fcf113 Revert "mfd: syscon: Don't free allocated name for regmap_config"
    13d68767aa4a rcutorture: Use "all" and "N" in "nohz_full" and "rcu_nocbs"
    54e69571a97d rcu: deprecate "all" option to rcu_nocbs=
    a605b9d20447 lib: test_bitmap: add tests for "N" alias
    8c22517f444e lib: bitmap: support "N" as an alias for size of bitmap
    88187167e63a lib: bitmap: move ERANGE check from set_region to check_region
    ca5429633613 lib: bitmap: fold nbits into region struct
    9381134cea8a lib: test_bitmap: add more start-end:offset/len tests
    c825800730ab lib: test_bitmap: add tests to trigger ERANGE case.
    8cc8264dca3f lib: test_bitmap: clearly separate ERANGE from EINVAL tests.
    470da7b7f2ff Revert "cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers"
    28dc1d37602d Revert "cpumask: Make "all" alias global and not just RCU"
    dbfe0b183fca Revert "cpumask: Add a "none" alias to complement "all""
    a57711fcff30 Revert "cpumask: Add "last" alias for cpu list specifications"
    34523d7c8476 qemux86: add configuration symbol to select values
    cdca78778415 objtool: Fix seg fault with Clang non-section symbols
    d3287798bd88 x86/entry: Emit a symbol for register restoring thunk
    2ad99ddaac78 cpumask: Add "last" alias for cpu list specifications
    c10e9481810b cpumask: Add a "none" alias to complement "all"
    b00ceed9d388 cpumask: Make "all" alias global and not just RCU
    8b215206e797 cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers
    1b5024caeda8 clear_warn_once: add a clear_warn_once= boot parameter
    fc0dd76cce0e clear_warn_once: bind a timer to written reset value
    d64fc2d2b14a clear_warn_once: expand debugfs to include read support
    77592e956cc9 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    6e022759f727 perf: x86-32: explicitly include <errno.h>
    22d6bbb947d4 perf: mips64: Convert __u64 to unsigned long long
    c35f9150001c perf: fix bench numa compilation
    c4caef513eb1 perf: add SLANG_INC for slang.h
    07dfbf9405dd perf: add sgidefs.h to for mips builds
    42c5431ad2cf perf: change --root to --prefix for python install
    af79bfe90143 perf: add 'libperl not found' warning
    ddfbd9e75f08 perf: force include of <stdbool.h>
    0f34e6305176 fat: don't use obsolete random32 call in namei_vfat
    b5b55eaad1df FAT: Added FAT_NO_83NAME
    756b13bfab6e FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    fabad71cb2b5 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    06fd68d75bd1 aufs: initial port to v5.10
    c9126877d1f5 aufs5: core
    f5150173c643 aufs5: aufs5-standalone
    b57d26b072d9 aufs5: aufs5-mmap
    78f128c4b8e5 aufs5: aufs5-base
    47aa35171d08 aufs5: aufs5-kbuild
    35c480a23c66 yaffs: include blkdev.h
    2c64c43540a5 yaffs: fix misplaced variable declaration
    bde410ee9f59 yaffs2: v5.6 build fixups
    414c8e866931 yaffs2: fix memory leak when /proc/yaffs is read
    c99c1990cf7c yaffs: add strict check when call yaffs_internal_read_super
    498f5fafe50a yaffs: repair yaffs_get_mtd_device
    7ca3c08ebbf9 yaffs: Fix build failure by handling inode i_version with proper atomic API
    0ba47e881bb8 yaffs2: fix memory leak in mount/umount
    39a5406665dd yaffs: Avoid setting any ACL releated xattr
    ca5b43ddc6fd Yaffs:check oob size before auto selecting Yaffs1
    c2619c05a53e fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    5e08fb7b8ee0 yaffs2: adjust to proper location of MS_RDONLY
    5f1a1a9678a8 yaffs2: import git revision b4ce1bb (jan, 2020)
    fc21f09ae369 initramfs: allow an optional wrapper script around initramfs generation
    73887fca03be arm64/perf: Fix wrong cast that may cause wrong truncation
    a267cafaac44 defconfigs: drop obselete options
    eb5d1bc00c3f arm64/perf: fix backtrace for AAPCS with FP enabled
    062b2c98c087 linux-yocto: Handle /bin/awk issues
    d3beb253ae71 uvesafb: provide option to specify timeout for task completion
    75ccbf377a51 uvesafb: print error message when task timeout occurs
    18ffa2e88024 compiler.h: Undef before redefining __attribute_const__
    3ed931201746 vmware: include jiffies.h
    938942859596 Resolve jiffies wrapping about arp
    069a883d837c nfs: Allow default io size to be configured.
    3b568edcd3e9 check console device file on fs when booting
    77ec93228920 mount_root: clarify error messages for when no rootfs found
    17a15e0f7536 menuconfig,mconf-cfg: Allow specification of ncurses location
    8f13b1349a74 modpost: mask trivial warnings
    b6c9e0fa24e8 kbuild: exclude meta directory from distclean processing
    62dbbdbec60a powerpc: serialize image targets
    27b8dec5dbb3 arm: serialize build targets
    fc365512e4c4 Revert "platform/x86: wmi: Destroy on cleanup rather than unregister"
    9a6e91d2e691 crtsavres: fixups for 5.4+
    7dbc3cd0398f powerpc/ptrace: Disable array-bounds warning with gcc8
    ebe3bcb89cb0 powerpc: Disable attribute-alias warnings from gcc8
    65ba0e7de081 powerpc: add crtsavres.o to archprepare for kbuild
    6bd3efdce5a9 powerpc: kexec fix for powerpc64
    41671522c159 powerpc: Add unwind information for SPE registers of E500 core
    8851006b0109 mips: vdso: fix 'jalr $t9' crash in vdso code
    ed5db62477e8 mips: Kconfig: add QEMUMIPS64 option
    2a7ca094fc42 4kc cache tlb hazard: tlbp cache coherency
    b742d60d3f70 malta uhci quirks: make allowance for slow 4k(e)c
    8a160fc86eb6 arm/Makefile: Fix systemtap
    b9805882353c vexpress: Pass LOADADDR to Makefile
    332e618aa7ae arm: ARM EABI socketcall
    1ec682cb85f8 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: a11c07259efc6c593cc623576294f5bfe3ae4935)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Bruce Ashfield
fb95dd2585 linux-yocto/5.15: update to v5.15.167
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    3a5928702e71 Linux 5.15.167
    d7037dc85112 udp: fix receiving fraglist GSO packets
    e6cc9ff2ac0b memcg: protect concurrent access to mem_cgroup_idr
    d116a0b0e02f btrfs: fix race between direct IO write and fsync when using same fd
    5d8254e01299 net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
    ba2af6448fd1 x86/mm: Fix PTI for i386 some more
    413e785a89f8 net: drop bad gso csum_start and offset in virtio_net_hdr
    c60a555f4949 gso: fix dodgy bit handling for GSO_UDP_L4
    5c3e0ed81058 net: change maximum number of UDP segments to 128
    ed3f2af02268 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
    fdc567c05fce gpio: rockchip: fix OF node leak in probe()
    ae9363987319 drm/i915/fence: Mark debug_fence_free() with __maybe_unused
    fb1104bb2ae3 drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
    6958e0df8c9c ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
    91dad30c5607 nvmet-tcp: fix kernel crash if commands allocation fails
    945be49f4e83 arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
    1f12c0e470c8 arm64: acpi: Move get_cpu_for_acpi_id() to a header
    f44c27d12485 ACPI: processor: Fix memory leaks in error paths of processor_add()
    b77a7a5ac6bc ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
    9d08fce64dd7 workqueue: Improve scalability of workqueue watchdog touch
    f67401f3857f workqueue: wq_watchdog_touch is always called with valid CPU
    b14e7260bb69 nilfs2: protect references to superblock parameters exposed in sysfs
    dbcc19de2d83 nilfs2: replace snprintf in show functions with sysfs_emit
    3fd8473d73fd ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
    9914f1bd61d5 ksmbd: unset the binding mark of a reused connection
    52d13d224fdf perf/aux: Fix AUX buffer serialization
    9fadd335df31 uprobes: Use kzalloc to allocate xol area
    2c78dd75dd0a clocksource/drivers/timer-of: Remove percpu irq related code
    a5f2703f7550 clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
    0746401d759a clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
    ef5f4d0c5ee2 VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
    c36c826ad3e6 Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
    3005091cd537 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
    7d1d48eb100a nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
    eef79854a04f binder: fix UAF caused by offsets overwrite
    9b9651f70856 usb: dwc3: core: update LC timer as per USB Spec V3.2
    0fd0ef7cf09b iio: adc: ad7124: fix chip ID mismatch
    4dcc19009b40 iio: adc: ad7124: fix config comparison
    3be69c24936f iio: fix scale application in iio_convert_raw_to_processed_unlocked
    3d2d5c74004e iio: buffer-dmaengine: fix releasing dma channel on error
    d8b09a5edc4a staging: iio: frequency: ad9834: Validate frequency parameter value
    d990692bea3d cifs: Check the lease context if we actually got a lease
    b5c7121ec14d NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
    802c7eb7e52b ata: pata_macio: Use WARN instead of BUG
    e6cd871627ab MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
    ad5ee9feebc2 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
    baaf26723bea of/irq: Prevent device address out-of-bounds read in interrupt map walk
    087f25b2d36a Squashfs: sanity check symbolic link size
    0914c26262f4 usbnet: ipheth: race between ipheth_close and error handling
    9719687398de Input: uinput - reject requests with unreasonable number of slots
    86b4f5cf91ca HID: amd_sfh: free driver_data after destroying hid device
    890dde6001b6 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
    945b12960fe6 s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
    f1757142c50a btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
    18e65173fe99 kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
    cacb76df247a i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
    289d0822be95 net: dpaa: avoid on-stack arrays of NR_CPUS elements
    04e85a3285b0 PCI: Add missing bridge lock to pci_bus_lock()
    197f7a2e24a5 riscv: set trap vector earlier
    b50857b96429 btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
    728d4d045b62 btrfs: clean up our handling of refs == 0 in snapshot delete
    3cf21d00d3ee btrfs: replace BUG_ON with ASSERT in walk_down_proc()
    b7b1be372155 fs/ntfs3: Check more cases when directory is corrupted
    e8665ac40072 smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
    cb67b2e51b75 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
    68a04c30cb63 dma-mapping: benchmark: Don't starve others when doing the test
    4ac7b43e4e84 ext4: fix possible tid_t sequence overflows
    15101f16dec9 drm/amdgpu: Set no_hw_access when VF request full GPU fails
    bc152bd3c9c0 libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
    cc4be794c8d8 hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
    02bb3b4c7d56 hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
    0fc27747633a hwmon: (lm95234) Fix underflows seen when writing limit attributes
    019ef2d39636 hwmon: (adc128d818) Fix underflows seen when writing limit attributes
    c0d8094dc740 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
    0977a0a3ba65 devres: Initialize an uninitialized struct member
    43f782c27907 um: line: always fill *error_out in setup_one_line()
    f386359d1b32 cgroup: Protect css->cgroup write under css_set_lock
    df6e78ba22ed iommu/vt-d: Handle volatile descriptor status read
    8ab1d1fed7f0 dm init: Handle minors larger than 255
    2aa4bacbff44 ASoC: topology: Properly initialize soc_enum values
    ebe29eedb1b5 net: dsa: vsc73xx: fix possible subblocks range of CAPT block
    4e777199c057 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
    4494bccb52ff fou: Fix null-ptr-deref in GRO.
    3bcdbf9002a8 gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
    8d84e1a87a32 gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers
    5ccc2e5d074b bareudp: Fix device stats updates.
    f12886ff7b5d usbnet: modern method to get random MAC
    010038823be2 net: usb: don't write directly to netdev->dev_addr
    fa797f4e30b2 ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
    84508c370337 igc: Unlock on error in igc_io_resume()
    78bb38d9c5a3 tcp_bpf: fix return value of tcp_bpf_sendmsg()
    cff3cbba73d5 platform/x86: dell-smbios: Fix error path in dell_smbios_init()
    a4792648475f igb: Fix not clearing TimeSync interrupts for 82580
    508b52aa958e can: m_can: Release irq on error in m_can_open
    10bfacbd5e8d can: bcm: Remove proc entry when dev is unregistered.
    51d57093340a drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
    8decfd84e67d pcmcia: Use resource_size function on resource object
    0e5a3d5fdff5 media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
    135843c351c0 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
    a1659ed3f966 media: vivid: don't set HDMI TX controls if there are no HDMI outputs
    32fca3bb5fc1 drm/amd/display: Check HDCP returned status
    dc74386c67aa usb: uas: set host status byte on data completion error
    0186d0d1af80 wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
    36e2bc79af36 leds: spi-byte: Call of_node_put() on error path
    5a884b46324e media: vivid: fix wrong sizeimage value for mplane
    2ddf83145135 udf: Avoid excessive partition lengths
    8d63b70d2f25 netfilter: nf_conncount: fix wrong variable type
    3e2ea7d682a0 iommu: sun50i: clear bypass register
    683c0b103934 af_unix: Remove put_pid()/put_cred() in copy_peercred().
    3f56c976b047 irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
    09e89a5e1173 smack: unix sockets: fix accept()ed socket label
    22d3b037ddc5 ALSA: hda: Add input value sanity checks to HDMI channel map controls
    c6877abcdb25 mptcp: pm: send ACK on an active subflow
    fd5364b22fc1 mptcp: pr_debug: add missing \n at the end
    c743fd11891a mptcp: pm: skip connecting to already established sf
    058f8d980e4d mptcp: pm: do not remove already closed subflows
    592dd6f8b658 mptcp: pm: ADD_ADDR 0 is not a new address
    38cdf2f1b33e mptcp: close subflow when receiving TCP+FIN
    01264bdde5f7 mptcp: avoid duplicated SUB_CLOSED events
    f2c865e9e3ca mptcp: pm: avoid possible UaF when selecting endp
    8e73f8d6a455 mptcp: constify a bunch of of helpers
    aef351c58a9b mptcp: pm: fullmesh: select the right ID later
    4d4e3a29e701 mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
    35b31f5549ed mptcp: pm: only decrement add_addr_accepted for MPJ req
    32ba711800a3 mptcp: pm: re-using ID of unused flushed subflows
    3e349d7191f0 nilfs2: fix state management in error path of log writing function
    8e2d1e9d93c4 nilfs2: fix missing cleanup on rollforward recovery error
    cde71a567797 sched: sch_cake: fix bulk flow accounting logic for host fairness
    bda4d84ac0d5 ila: call nf_unregister_net_hooks() sooner
    3816867d2fc4 tracing: Avoid possible softlockup in tracing_iter_reset()
    513c8fc189b5 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
    3172376d26e4 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
    5dd47383ceaf clk: qcom: clk-alpha-pll: Fix the pll post div mask
    e24c19c6e3c6 fuse: use unsigned type for getxattr/listxattr size truncation
    811016d5a390 fuse: update stats for pages in dropped aux writeback list
    c0f43b1f1f7d mmc: cqhci: Fix checking of CQHCI_HALT state
    e89943fc4cbe mmc: sdhci-of-aspeed: fix module autoloading
    9d715a234dd8 mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
    57b6ead5719e Bluetooth: MGMT: Ignore keys being loaded with invalid type
    d98304eaacc6 Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
    0bfa0fa207b4 nvme-pci: Add sleep quirk for Samsung 990 Evo
    93f44655472d rtmutex: Drop rt_mutex::wait_lock before scheduling
    b322a385c09a irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
    9bbc71fa3d56 ata: libata: Fix memory leak for error path in ata_host_alloc()
    c03d9115c5ca ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
    326303f886a9 ALSA: hda/realtek: add patch for internal mic in Lenovo V145
    172359315301 ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
    d1f7a12c2b2e KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
    e3e0cb027173 KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
    3033ed903b4f ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
    14f91ab8d391 sch/netem: fix use after free in netem_dequeue
    366a1e578201 i2c: Use IS_REACHABLE() for substituting empty ACPI functions
    be1443518365 ext4: handle redirtying in ext4_bio_write_page()
    64022ce8e99d udf: Limit file size to 4TB
    1464cb82a489 ext4: reject casefold inode flag without casefold feature
    af7b560c88fb rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
    cc7340f18e45 virtio_net: Fix napi_skb_cache_put warning
    0fa11f9df962 drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
    68a772884b83 media: uvcvideo: Enforce alignment of frame and interval
    6d94c05a13fa drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
    6980861e039d block: remove the blk_flush_integrity call in blk_integrity_unregister
    1339615aca2c wifi: cfg80211: make hash table duplicates more survivable
    adc5674c23b8 drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
    c9431980407b drm/meson: plane: Add error handling
    0aea09e82eaf smack: tcp: ipv4, fix incorrect labeling
    f9a48bc3dd90 fsnotify: clear PARENT_WATCHED flags lazily
    3aa56313b0de usb: typec: ucsi: Fix null pointer dereference in trace
    e1c92f66f62d usbip: Don't submit special requests twice
    34255103ff75 rcu/nocb: Remove buggy bypass lock contention mitigation
    f8b96d4e8257 ionic: fix potential irq name truncation
    b8105982c286 RDMA/efa: Properly handle unexpected AQ completions
    2da121e397ba hwspinlock: Introduce hwspin_lock_bust()
    56af1b0f07e5 PCI: al: Check IORESOURCE_BUS existence during probe
    29f45f2588ed cpufreq: scmi: Avoid overflow of target_freq in fast switch
    ec4cb72a9b95 wifi: iwlwifi: remove fw_running op
    36a77159b43a drm/amdgpu: update type of buf size to u32 for eeprom functions
    2700dbd10aaa drm/amd/pm: check negtive return for table entries
    d04ded1e73f1 drm/amdgpu: the warning dereferencing obj for nbio_v7_4
    acff7a94720a drm/amd/pm: check specific index for aldebaran
    f20d1d5cbb39 drm/amdgpu: fix the waring dereferencing hive
    bda7de66a9de drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
    e3c7d23f7a5c apparmor: fix possible NULL pointer dereference
    6cc5011865dd drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
    345bd3ad387f drm/amdgpu: fix mc_data out-of-bounds read warning
    0bef65e069d8 drm/amdgpu: fix ucode out-of-bounds read warning
    45f7b02afc46 drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
    919f9bf9997b drm/amdgpu: Fix out-of-bounds write warning
    0fcc24121423 drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
    80ce7edcd45d drm/amdgpu/pm: Fix uninitialized variable warning for smu10
    e55e3904ffea drm/amd/amdgpu: Check tbo resource pointer
    f37d6aa3df5f drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
    fe63daf7b102 drm/amd/display: Check msg_id before processing transcation
    c4a7f7c0062f drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
    0ee4387c5a4b drm/amd/display: Add array index check for hdcp ddc access
    21bbb39863f1 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
    0184cca30cad drm/amd/display: Check gpio_id before used as array index
    0c445d98ef98 drm/amdgpu: avoid reading vf2pf info size from FB
    c5635fe6dca4 drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
    f801292764be drm/amdgpu: fix uninitialized scalar variable warning
    3317966efcdc drm/amd/pm: fix the Out-of-bounds read warning
    bcd00d0dbf00 drm/amd/pm: fix warning using uninitialized value of max_vid_step
    6277aa2965de drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
    d16713773b65 drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
    54528b614398 drm/amdgpu: fix overflowed array index read warning
    4bd7710f2fec drm/amd/display: Assign linear_pitch_alignment even for VM
    a42ba93641bf drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
    3ea66eddf54d net: usb: qmi_wwan: add MeiG Smart SRM825L
    488702d1be32 dma-debug: avoid deadlock between dma debug vs printk and netconsole
    8da2de41e66d i2c: Fix conditional for substituting empty ACPI functions
    7abc0b4409aa ALSA: hda/conexant: Mute speakers at suspend / shutdown
    2fd3143b2588 ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
    24a63d85bd49 drm: panel-orientation-quirks: Add quirk for OrangePi Neo
    6f0605db50e2 clk: imx: Add check for kcalloc
    5b837b9e1543 bpf: Fix the indention issue in grow_stack_state()
    42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size()
    b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub
    7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ]
    c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail()
    299ef3b5b00b of: module: add buffer overflow check in of_modalias()
    b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change
    ea091017ef62 ipv6: Fix data races around sk->sk_prot.
    ff8710da80ee ipv6: annotate some data-races around sk->sk_prot
    e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops.
    8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock
    7c82dac02886 block, loop: support partitions without scanning
    45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded
    1f24338cb789 jbd2: Drop the merge conflicted hunk
    e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
    6224acfc1d56 tpm: Add flag to use default cancellation policy
    1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask
    a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core
    a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer
    ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops
    1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13
    24615a3b932a ata: ahci: fix enum constants for gcc-13
    5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config
    fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf
    130f9da78406 tools/resolve_btfids: Build with host flags
    00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang
    17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building
    7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated
    37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
    a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown
    f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy
    da5513f30187 libbpf: Fix build warning on ref_ctr_off
    4c5a089621a8 perf python: Account for multiple words in CC
    1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers
    838f5d0701d8 fs: add mode_strip_sgid() helper
    d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead
    ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack
    1363bd7dbde3 ixgbevf: add disable link state
    e5601ae2bd24 ixgbe: add improvement for MDD response functionality
    caa57cd80575 ixgbe: add the ability for the PF to disable VF link state
    16a77bfcc7df Check /dev/console using init_stat()
    04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data
    0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
    1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
    493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered
    6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve
    1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field
    6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions
    efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
    a40d2daf2795 pnmtologo: use relocatable file name
    3b40d5b41155 of: configfs: remove unused variable overlay_lock
    6c085baf1838 tools: use basename to identify file in gen-mach-types
    2fca0fd71981 lib/build_OID_registry: fix reproducibility issues
    0f586f4ee8ad vt/conmakehash: improve reproducibility
    a75774679f28 OF: DT-Overlay configfs interface (v8)
    d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer()
    856ec356cf91 ACPI: thermal: drop an always true check
    7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC
    41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o
    44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs()
    77aa9e489eaf bpf: Disallow unprivileged bpf by default
    ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups
    4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal""
    5df6d1b00f95 jbd2: fix use-after-free of transaction_t race
    2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function
    07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction
    4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal"
    7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack
    f78574dee71e kasan: test: silence intentional read overflow warnings
    d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
    5e279d5647cc arm64: support page mapping percpu first chunk allocator
    e5bf16752dca vmalloc: choose a better start address in vm_area_register_early()
    660b3d21b46f kasan: test: bypass __alloc_size checks
    00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write
    67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB
    bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack
    7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc()
    bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack()
    51423ebb36ad lib/stackdepot: introduce __stack_depot_save()
    85373e66d847 lib/stackdepot: remove unused function argument
    5b6cc9b251f3 lib/stackdepot: include gfp.h
    c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case.
    b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic()
    13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence
    21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221
    6199fd896645 aufs: tiny, headers after fs_context
    8ddb40e31c29 aufs: fs_context 7/7, finally remount
    69035f71c6fd aufs: fs_context 6/7, now mount
    bc841b970697 aufs: fs_context 5/7, parse all other mount options
    435188053da2 aufs: fs_context 4/7, parse xino options
    9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options
    1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option
    a8488f603134 aufs: fs_context 1/7, skelton of the new shceme
    8e32e0015564 aufs: pre fs_context, convert a static flag to a macro
    f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case
    948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo()
    77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117
    2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129
    7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone
    66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl()
    69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore
    ada8fe9543e5 aufs: 5.14-20210906  ---> 5.14-20211018
    b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes"
    81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation
    97c963889222 sched/isolation: really align nohz_full with rcu_nocbs
    871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards"
    ffad0783dd5b ARM: config: multi v7: Regenerate defconifg
    5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols
    badaf96564fe ARM: config: multi v7: Clean up enabled by default options
    34996040fc9b ARM: config: multi v7: Drop unavailable options
    7f685244afb3 powerpc/mm: Switch obsolete dssall to .long
    20301aeb1a64 riscv: fix build with binutils 2.38
    9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error
    720b61fc400b x86_64_defconfig: Fix warnings
    02bf23d26bc4 arm64: defconfig: cleanup config options
    05914e2c87e5 arm: defconfig: drop unused POWER_AVS option
    ffb532fa19b9 aufs5: fix build against v5.15.3+
    a4b3abf4d96d qemux86: add configuration symbol to select values
    fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter
    3d8762d900d9 clear_warn_once: bind a timer to written reset value
    95faacac47e8 clear_warn_once: expand debugfs to include read support
    de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    0e4aacead9c1 perf: x86-32: explicitly include <errno.h>
    9ad92c11468e perf: mips64: Convert __u64 to unsigned long long
    09e7efe3e68a perf: fix bench numa compilation
    e79becc44fa6 perf: add SLANG_INC for slang.h
    b1033b588681 perf: add sgidefs.h to for mips builds
    cf9db484ac0b perf: change --root to --prefix for python install
    7fd052c2c562 perf: add 'libperl not found' warning
    27a437cdd469 perf: force include of <stdbool.h>
    3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat
    a7e9293b506b FAT: Added FAT_NO_83NAME
    6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    538be0fdb124 aufs: adjust to v5.15 fs changes
    f45da75c8759 aufs5: core
    047f57e07e01 aufs5: standalone
    029fc15574c8 aufs5: mmap
    610d0192ee94 aufs5: base
    d4e428d0ec5f aufs5: kbuild
    eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested)
    22c73536d5d7 yaffs: include blkdev.h
    506b7251bfb8 yaffs: fix misplaced variable declaration
    a0e26ff364dc yaffs2: v5.6 build fixups
    b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read
    ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super
    2e3c3aec8279 yaffs: repair yaffs_get_mtd_device
    d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API
    70a6113ee2c7 yaffs2: fix memory leak in mount/umount
    3378e4a9e404 yaffs: Avoid setting any ACL releated xattr
    ec2284edddef Yaffs:check oob size before auto selecting Yaffs1
    c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY
    608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020)
    89e660ece42c initramfs: allow an optional wrapper script around initramfs generation
    b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally
    3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation
    d202fb2caf33 defconfigs: drop obselete options
    9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled
    e20d8cf019b4 linux-yocto: Handle /bin/awk issues
    b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion
    adb40f1e6a1a uvesafb: print error message when task timeout occurs
    f280a1ed0962 compiler.h: Undef before redefining __attribute_const__
    4352732f268c vmware: include jiffies.h
    7954a677968d Resolve jiffies wrapping about arp
    5f28a1035d95 nfs: Allow default io size to be configured.
    0d7260ad7106 check console device file on fs when booting
    900a12e37e0a mount_root: clarify error messages for when no rootfs found
    7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location
    6604fc1763b3 modpost: mask trivial warnings
    0d294adb09cb kbuild: exclude meta directory from distclean processing
    a097cdd95a9e powerpc: serialize image targets
    5db6ec39a0a3 arm: serialize build targets
    cbabca27905e crtsavres: fixups for 5.4+
    7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8
    a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8
    186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild
    d1ea862964ca powerpc: kexec fix for powerpc64
    2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core
    2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code
    ec57870b303a mips: Kconfig: add QEMUMIPS64 option
    6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency
    74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c
    22e65b63d3b4 arm/Makefile: Fix systemtap
    b7f1ab59f19e vexpress: Pass LOADADDR to Makefile
    ce2800c73bf7 arm: ARM EABI socketcall
    019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 69ec31c3eb83c4e0bdea1f748366c4ad2746f28d)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
bc83821c74 gstreamer1.0-plugins-good: Fix multiple CVE's
Fixes for below CVEs:
CVE-2024-47775
CVE-2024-47776
CVE-2024-47777
CVE-2024-47778

Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042
(From OE-Core rev: 9c228198644da3ebed0a25051633676158161f26)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
e43cc9f602 gstreamer1.0-plugins-good: Fix CVE-2024-47774
Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043

(From OE-Core rev: 7b1943c6b00d5e94f72bcce0eefdfdb7f091af5d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
14b40b2a32 gstreamer1.0-plugins-good: Fix CVE-2024-47613
Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041

(From OE-Core rev: ffabed7c5cbfa1109e43390a4d36b38323cb7425)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
587c7a3acc gstreamer1.0-plugins-good: Fix CVE-2024-47606
Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032

(From OE-Core rev: 4c138c3c04f856b100ce2c8e8e96025edde4c841)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
41fdeff07f gstreamer1.0-plugins-good: Fix multiple CVEs
Fixes for below CVEs:
CVE-2024-47540
CVE-2024-47601
CVE-2024-47602
CVE-2024-47603
CVE-2024-47834

Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057

(From OE-Core rev: 867db6984551f5026034fddd11421e76a844ebc5)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
063675114d gstreamer1.0-plugins-good: Fix for CVE-2024-47599
Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040

(From OE-Core rev: 2fe3b2846bd65a44e4823f04693a4579a71a862a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
9bc81ff4a1 gstreamer1.0-plugins-good: fix several CVE's
Fixes for below CVEs:
CVE-2024-47537
CVE-2024-47539
CVE-2024-47543
CVE-2024-47544
CVE-2024-47545
CVE-2024-47546
CVE-2024-47596
CVE-2024-47597
CVE-2024-47598

Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059

(From OE-Core rev: ca47d7609a831d4e1919f44c2808f6d99db35ea6)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
fd884abc05 gstreamer1.0: Backport fix for CVE-2024-47606
Upstream-Status: Backport [72af11b248]

(From OE-Core rev: de94acd8f8be37fbc6e0b16693dae8a7efb5910c)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Vijay Anusuri
3ad4123a24 gstreamer1.0-plugins-base: Fix for multiple CVE's
Backport fixes for below CVE:
CVE-2024-47538
CVE-2024-47541
CVE-2024-47542
CVE-2024-47600
CVE-2024-47607
CVE-2024-47615
CVE-2024-47835

(From OE-Core rev: a26f77ae6d98e0bf22a682fad5f4353ae257b360)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Mikko Rapeli
6539977df4 ovmf-native: remove .pyc files from install
They break builds which share sstate files on different
machines and paths:

ERROR: ovmf-edk2-stable202408-r0 do_prepare_recipe_sysroot: Error executing a python function in exec_func_python() autogenerated:

The stack trace of python calls that resulted in this exception/failure was:
File: 'exec_func_python() autogenerated', lineno: 2, function: <module>
     0001:
 *** 0002:extend_recipe_sysroot(d)
     0003:
File: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/meta/classes-global/staging.bbclass', lineno: 624, function: extend_recipe_sysroot
     0620:
     0621:    # Handle deferred binfiles
     0622:    for l in binfiles:
     0623:        (targetdir, dest) = binfiles[l]
 *** 0624:        staging_copyfile(l, targetdir, dest, postinsts, seendirs)
     0625:
     0626:    bb.note("Installed into sysroot: %s" % str(msg_adding))
     0627:    bb.note("Skipping as already exists in sysroot: %s" % str(msg_exists))
     0628:
File: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/meta/classes-global/staging.bbclass', lineno: 165, function: staging_copyfile
     0161:        os.symlink(linkto, dest)
     0162:        #bb.warn(c)
     0163:    else:
     0164:        try:
 *** 0165:            os.link(c, dest)
     0166:        except OSError as err:
     0167:            if err.errno == errno.EXDEV:
     0168:                bb.utils.copyfile(c, dest)
     0169:            else:
Exception: FileExistsError: [Errno 17] File exists: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/build-st-667282/tmp/sysroots-components/x86_64/ovmf-native/usr/bin/edk2_basetools/BaseTools/Source/Python/AutoGen/__pycache__/WorkspaceAutoGen.cpython-312.pyc' -> '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/build-st-667282/tmp/work/core2-64-poky-linux/ovmf/edk2-stable202408/recipe-sysroot-native/usr/bin/edk2_basetools/BaseTools/Source/Python/AutoGen/__pycache__/WorkspaceAutoGen.cpython-312.pyc'

(From OE-Core rev: fb9ebc811800eb8880e3687243d75bafab77a700)

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit facd9e17fa53e2fb3a828b3f179cfb659be75d37)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Peter Marko
2d08595a93 python3: upgrade 3.10.15 -> 3.10.16
Handles CVE-2024-50602, CVE-2024-11168 and CVE-2024-9287.

(From OE-Core rev: 5a611fbbdb3e373d379f922ffc5606ff70279831)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Archana Polampalli
ffff345e4a ffmpeg: fix CVE-2024-35368
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame
function within libavcodec/rkmppdec.c.

(From OE-Core rev: bc73c3ef68826ffbb6de960b7bfa4b784e289ea8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Archana Polampalli
d078ab7577 ffmpeg: fix CVE-2024-35367
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c,
static const vec_s8 h_subpel_filters_outer

(From OE-Core rev: 623dd997856903be54d75e819f93d313b04edd8e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Archana Polampalli
c17700b784 ffmpeg: fix CVE-2024-35366
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options
function of sbgdec.c within the libavformat module. When parsing certain options,
the software does not adequately validate the input. This allows for negative
duration values to be accepted without proper bounds checking.

(From OE-Core rev: 9acfc54b2707bf04922f153d06ae27ff552fbe23)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:04 -08:00
Rohini Sangam
de796b1966 webkitgtk: Security fix for CVE-2024-40776 and CVE-2024-40780
CVE fixed:
- CVE-2024-40776 webkitgtk: Use after free may lead to Remote Code Execution
- CVE-2024-40780 webkitgtk: Out-of-bounds read was addressed with improved bounds checking

Upstream-Status: Backport from b951404ea7 and e83e4c7460

(From OE-Core rev: e4c82db8a7c3273fe30bc99880fcdcd7ab061924)

Signed-off-by: Rohini Sangam <rsangam@mvista.com>
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
aszh07
2e7af13f66 libarchive: Fix CVE-2024-20696
Add Patch file to fix CVE-2024-20696

CVE: CVE-2024-20696

(From OE-Core rev: 8885aa23d77fcec288a416d199e08c6eee27e027)

Signed-off-by: Nitin Wankhade <nitin.wankhade@kpit.com>
Signed-off-by: Nikhil R <nikhilr5@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Peter Marko
87ed7903a5 xwayland: patch CVE-2023-5380 CVE-2024-0229
The patches are copied from xserver-xorg recipe.
The CVES are reported for both and patched apply on both.

(From OE-Core rev: cdcb9957a6fe1629dc3230fcdfd09322877d4038)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Peter Marko
3600a4b28e gstreame1.0: ignore CVEs from gstreamer1.0-plugins-bad
These CVEs are patched in gstreamer1.0-plugins-bad.
CPE for gstreamer-plugins-bad mostly hits original gstreamer recipe.

(From OE-Core rev: a2339d124c2561bf157f3e14af0b3152d257d937)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Peter Marko
3d3f3d4334 tiff: patch CVE-2023-3164
Backport fix from upstream.

There was style refactoring done in the code meanwhile, so the patch mas
assembled manually by applying each change on 4.3.0 sources.

(From OE-Core rev: fda622289ef26fac38e7dc41e6f0c9d7c866f06e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Peter Marko
08538e11df tiff: ignore CVE-2023-2731
This further tweaks fix for CVE-2022-1622/CVE-2022-1623 by adding it to
one additional goto label.

Previous fix:
b4e79bfa0c

Additional fix:
9be22b639e

(From OE-Core rev: c7632c5a3853290292fa695a0a7b15eb06159036)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Peter Marko
bc35e81080 ghostscript: ignore CVE-2024-46954
Issue in the GhostPCL. GhostPCL not part of this GhostScript recipe.

[1] points to [2] as patch, while file base/gp_utf8.c is not part of
ghostscript source tarball.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-46954
[2] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934

(From OE-Core rev: 7f1b174b8f12fcf377c45c27022bac99b6652823)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Vijay Anusuri
284b56a2e2 libsndfile1: Backport fix for CVE-2022-33065
Added missing commits for complete CVE fix

Ref: https://github.com/libsndfile/libsndfile/issues/833
     https://ubuntu.com/security/CVE-2022-33065

(From OE-Core rev: fc34dde58e8be19d703479c8e025e27294cdb579)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-01-09 08:41:03 -08:00
Antonin Godard
db0505b9ba poky.conf: add new tested distros
These are currently tested on the autobuilder for Kirkstone.

(From meta-yocto rev: f9d0be9bb3c447cad6292434b803c317c9efac53)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-26 06:30:44 -08:00
Alex Kiernan
be48ef3d1b base-passwd: Add the sgx group
To avoid errors from eudev/udev we need an sgx group, but if we add it
via groupadd that causes shadow login to be brought into an image, which
causes images which have CONFIG_MULTIUSER unset to fail with `setgid:
Function not implemented` as shadow's login doesn't implement the
heuristics which busybox has to handle this kernel configuration.

(From OE-Core rev: a20b02fdfe64c005f7587a1d9077bdc282f7b6b1)

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a1c81ac4a869cc57394071ace2ca086eb8ac47a4)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Alexandre Belloni
96e2bfb266 base-passwd: fix patchreview warning
Fix:

Malformed Upstream-Status 'Upstream status' (meta/recipes-core/base-passwd/base-passwd/0007-Add-wheel-group.patch)
Unknown Upstream-Status value 'says' (meta/recipes-core/base-passwd/base-passwd/0007-Add-wheel-group.patch)

(From OE-Core rev: 2e251b4ebefe825e7ccf7e3110e8b7fce2296032)

Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7b62b32fe154ca40a3bf731eaa5994ec351cf507)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Louis Rannou
4050e16d26 base-passwd: add the wheel group
The wheel group is not declared while it can be used to access the systemd
journal and to configure printers in CUPS. It can also be used for su and sudo
permissions.

So far it was created later in the rootfs postcommand systemd_create_users.

(From OE-Core rev: 4cafad1a0ef5506151656fd644dcdf3193245173)

Signed-off-by: Louis Rannou <lrannou@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bebe52ae9576393ebb9d7405fc77fba21e84ba5b)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Peter Kjellerstedt
0b1e1d5007 base-passwd: Update the status for two patches
The two patches to disable use of debconf and generation of
documentation have been merged upstream.

(From OE-Core rev: f68617115d3518368db16bc16bcf4578619999fe)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit aca8844d7c05b4ba937625e59275d3f7953d3da7)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Peter Kjellerstedt
a0801dbc3e base-passwd: Update to 3.5.52
* Add a patch to allow the use of debconf to be disabled.
* Replace 0007-Disable-generation-of-the-documentation.patch with a new
  patch to disable the generation of the documentation using a
  configuration option.
* Replace 0006-Disable-shell-for-default-users.patch with a sed
  expression that uses a variable, NOLOGIN, to specify what command to
  use for users that are not expected to login. This allows to use some
  other command than "nologin", e.g., "false". Also, by using
  ${base_sbindir}, it adheres to usrmerge being configured.

(From OE-Core rev: 65f01b1e94d956c5591850deb6abc469e05138eb)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e7abf63cc8bdc61c8d978b3c21a38e17716fc292)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Peter Kjellerstedt
f040f59a78 base-passwd: Regenerate the patches
(From OE-Core rev: 1742f47e1388fcbe9681f8d74b9476d213b4eb0a)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6515d96c12b080b9e7f344799e26dba3b98e17e2)
Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Ernst Persson
ec334b13a7 package.bbclass: Use shlex instead of deprecated pipes
The pipes library is deprecated in Python 3.11 and will be removed in
Python 3.13. pipes.quote is just an import of shlex.quote anyway.

(From OE-Core rev: d167661bceebebafb04dca3bf6a888003f46e6c9)

Signed-off-by: Ernst Persson <ernst.persson@non.se.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Jiaying Song
dffb6c2442 subversion: fix CVE-2024-46901
Insufficient validation of filenames against control characters in
Apache Subversion repositories served via mod_dav_svn allows
authenticated users with commit access to commit a corrupted revision,
leading to disruption for users of the repository. All versions of
Subversion up to and including Subversion 1.14.4 are affected if serving
repositories via mod_dav_svn. Users are recommended to upgrade to
version 1.14.5, which fixes this issue. Repositories served via other
access methods are not affected.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-46901

Upstream patches:
https://subversion.apache.org/security/CVE-2024-46901-advisory.txt

(From OE-Core rev: 2082038de00090e4b10a151068876f83c83f94c7)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Yogita Urade
5ea79cac19 xserver-xorg: fix CVE-2024-9632
A flaw was found in the X.org server. Due to improperly
tracked allocation size in _XkbSetCompatMap, a local
attacker may be able to trigger a buffer overflow condition
via a specially crafted payload, leading to denial of service
or local privilege escalation in distributions where the
X.org server is run with root privileges.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-9632

Upstream patch:
ba1d14f8ef

(From OE-Core rev: 95027410dba7a2a7e9b93f76279272f22445399b)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-20 06:01:45 -08:00
Richard Purdie
ce1fa3eec0 cve-update-nvd2-native: Tweak to work better with NFS DL_DIR
After much debugging, the corruption issues on the autobuilder appear to
be due to the way sqlite accesses database files. It doesn't change the
file timestamp after making changes, which for reasons unknown, confuses
NFS. As soon as the file is touched, NFS becomes fine again accross the
whole cluster, as if by magic.

We could try and debug further but putting a "touch" call into the code
is easy and harmless. Lets hope this removes this annoying source of
errors.

(From OE-Core rev: c73af2d77f4c3eb474237fa8d5e340be4aefeb67)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-18 07:07:40 -08:00
Antonin Godard
1bb9a9872b system-requirements: update list of supported distros
To match the list in meta-poky/conf/distro/poky.conf.

(From yocto-docs rev: 802677ea3ef7b6c1ed43c71f7f33489288c0735a)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Antonin Godard
1738b28d1d poky.yaml.in: add missing locales dependency
This is a requirement for building the documentation, otherwise we get
(on Ubuntu 24.04):

     File "/usr/lib/python3.12/locale.py", line 615, in setlocale
       return _setlocale(category, locale)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   locale.Error: unsupported locale setting

(From yocto-docs rev: cecf8bc678756790e9164000769e798be30d9d46)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0943a7b67ef0012b5d9badc15e0c579dbb9014ae)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Antonin Godard
1a65cc847f Gather dependencies in poky.yaml.in
We used to have packages here and there in system-requirements.rst for
each distro. Instead, gather all the dependencies in poky.yaml.in so we
have an overview of what we provide for each distro.

Use yaml ">" to list the dependencies in alphabetical order, one entry
per line, which makes them easier to read and compare among distros.

Rename UBUNTU_… variables to UBUNTU_DEBIAN_…, since these are used for
both distros.

(From yocto-docs rev: 580b410c535f3b24f901cdbf011bf817038ba4c3)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1ed6118b7cf1b5dcbfca753c83fa30fb97bf44ad)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Guénaël Muller
0bee34892d ref-manual: use standardized method accross both ubuntu and debian for locale install
Modify locale installation method to be standard accross all debian-based distributions.
Pre-existing method is available only on Ubuntu, locale-gen tool has no parameter in Debian.

(From yocto-docs rev: 057f2fbce22fc020bef7d432275e28227895e022)

Signed-off-by: Guénaël Muller <guenael.muller@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Antonin Godard <antonin.godard@bootlin.com>
Tested-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 30002019198a168e48537407bb928facb26af82a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Alexander Kanavin
bdd2eae1f5 dbus: disable assertions and enable only modular tests
There was a report that enabling assertions and all tests results in
notices in log.do_configure:

NOTE: building with unit tests increases the size of the installed library and renders it insecure.
NOTE: building with assertions increases library size and decreases performance.

This was overlooked when dbus and dbus-tests recipes were merged;
enabling all tests and assertions still requires a special, separate
build of dbus. If those tests are useful this could be revisited.
Until then, we should use productions settings for the main recipe.

Buildhistory-diff:
packages/core2-64-poky-linux/dbus/dbus-dbg: PKGSIZE changed from 9958176 to 8627824 (-13%)
packages/core2-64-poky-linux/dbus/dbus-lib: PKGSIZE changed from 544347 to 346339 (-36%)
packages/core2-64-poky-linux/dbus/dbus-ptest: PKGSIZE changed from 3524983 to 3116951 (-12%)
packages/core2-64-poky-linux/dbus/dbus-ptest: FILELIST: removed "/usr/share/installed-tests/dbus/test-dbus-launch-eval.sh_with_config.test /usr/share/installed-tests/dbus/test-counter_with_config.test /usr/libexec/installed-tests/dbus/test-dbus-launch-eval.sh /usr/libexec/installed-tests/dbus/test-dbus-launch-x11.sh /usr/share/installed-tests/dbus/test-counter.test /usr/libexec/installed-tests/dbus/test-counter /usr/share/installed-tests/dbus/test-dbus-launch-x11.sh.test /usr/share/installed-tests/dbus/test-dbus-launch-x11.sh_with_config.test /usr/share/installed-tests/dbus/test-dbus-launch-eval.sh.test"
packages/core2-64-poky-linux/dbus/dbus: PKGSIZE changed from 510939 to 350331 (-31%)

(From OE-Core rev: 054ce01ae84eb10e055a41ec8dd85ebce9ea23c8)

(From OE-Core rev: b132b817f5931b290e5348dd4a17fbfdc5c6e2c4)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Khem Raj
031d60bbc9 unzip: Fix configure tests to use modern C
Newer compilers end up with errors while compiling these test snippets
and build results in failures.

(From OE-Core rev: 61bd7eccd8e305e2dd95f0b0b86b09d72e99fc1a)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Ross Burton
016ca6a8a8 sanity: check for working user namespaces
If user namespaces are not available (typically because AppArmor is
blocking them), alert the user.

We consider network isolation sufficiently important that this is a fatal
error, and the user will need to configure AppArmor to allow bitbake to
create a user namespace.

[ YOCTO #15592 ]

(From OE-Core rev: a069b9f9ee6708022e12970d53262d966ee806ba)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b6af956fe6e876957a49d4abf425e8c789bf0459)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Peter Marko
da007b8f01 rootfs-postcommands.bbclass: make opkg status reproducible
opkg stores the current time as Installed-Time in its status file when
installing packages to the rootfs. Make this reproducible by replacing
Installed-Time with ${REPRODUCIBLE_TIMESTAMP_ROOTFS}, which then also
matches the files' datestamps.

Based on OpenWrt's approach for the issue [1].

[1] https://github.com/openwrt/openwrt/blob/main/include/rootfs.mk#L103

(From OE-Core rev: 61a9b1b1cb618ce90ba7886036f41263075c07df)

(From OE-Core rev: bfa9c2f15ac275fceccf22084bed9a064304eb6e)

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Jiaying Song
e402b2417a python3-requests: fix CVE-2024-35195
Requests is a HTTP library. Prior to 2.32.0, when making requests
through a Requests `Session`, if the first request is made with
`verify=False` to disable cert verification, all subsequent requests to
the same host will continue to ignore cert verification regardless of
changes to the value of `verify`. This behavior will continue for the
lifecycle of the connection in the connection pool. This vulnerability
is fixed in 2.32.0.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-35195

Upstream patches:
a58d7f2ffb

(From OE-Core rev: 8bc8d316a6e8ac08b4eb2b9e2ec30b1f2309c31c)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Divya Chellam
2a6fc7fbf2 libpam: fix CVE-2024-10041
A vulnerability was found in PAM. The secret information is
stored in memory, where the attacker can trigger the victim
program to execute by sending characters to its standard
input (stdin). As this occurs, the attacker can train the
branch predictor to execute an ROP chain speculatively.
This flaw could result in leaked passwords, such as those
found in /etc/shadow while performing authentications.

References:
https://security-tracker.debian.org/tracker/CVE-2024-10041

Upstream patches:
b3020da7da

(From OE-Core rev: 3422c2533caaa2664944315580c52a2272815305)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Peter Marko
c6bb0ec77c libsdl2: ignore CVE-2020-14409 and CVE-2020-14410
This was fixed in 2.0.14, but NVD DB lists > 2.0.20 causing
false positives in CVE metrics.

NVD entries [1] and [2] list commit [3] which redirects to commit [4].
Also Debian 10 uses this commit, while Debian 11 with 2.0.14 does not
patch it and claims it's fixed.

Trying to apply the patch shows it's already applied.

Following shows git history of this commit wrt tags.
SDL$ git describe a7ff6e96155f550a5597621ebeddd03c98aa9294 --tags
release-2.0.12-305-ga7ff6e961
SDL$ git describe release-2.0.14 --tags --match=release-2.0.12
release-2.0.12-873-g4cd981609
SDL$ git describe release-2.0.20 --tags --match=release-2.0.12
release-2.0.12-3126-gb424665e0

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-14409
[2] https://nvd.nist.gov/vuln/detail/CVE-2020-14410
[3] https://hg.libsdl.org/SDL/rev/3f9b4e92c1d9
[4] a7ff6e9615

(From OE-Core rev: 3079d562b4df69ab0ac20ec8d13a4240ce0a3514)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-16 05:58:03 -08:00
Lee Chee Yang
ccf5b0a889 migration-guides: add release notes for 4.0.23
(From yocto-docs rev: 5b6e502c7640724471b791c521b7e976c03ad8e2)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5835cb574881d57785f099c768467177d077e867)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:04 -08:00
Antonin Godard
0062627f2f ref-manual: classes: fix bin_package description
The previous bin_package description was confusing: it would instruct to
use the git fetcher to extract the content of an RPM package using the
`subpath` option - but that's not possible as the git fetcher can be
used to clone a repository but not to do the extraction.

Update the description by telling what it really does and what it
doesn't do, and by giving an HTTPS+RPM example.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: e201ee883c152555ef4c9bd3fa31c3eb96f6dc2f)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 305f024bf99ba02b153eed0cebe3d36594868497)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Antonin Godard
e4ba8cd69f standards.md: add a section on admonitions
We try to limit our usage of these admonitions to `note` and `warning`,
as the Sphinx documentation warns that most themes only style these two
admonitions. So add a section on that.

Suggested-by: Quentin Schulz <quentin.schulz@cherry.de>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 41788e6d230cfb49fadae58ab9651d57cc26f857)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f86ffa1b1dcf0665c17424eee87b6bead09960f6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
a291343b4b resulttool: Improve repo layout for oeselftest results
Having all oe-selftest results on top of each other results in a large 640MB
json file which is hard to use. Split the results out per machine and test type.

This also stops the toolchain raw logs from overwriting each other meaning more
than one MACHINE is preserved.

(From OE-Core rev: e42b6a40a3a01e328966bb5ee1bb3e0993975b15)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4b890f04bc7d147b4a11b824a84f3d2abd75ac54)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
f569201b92 resulttool: Trim the precision of duration information
The duration values have pointless amounts of precision. Removing some of the
least significant digits reduces result size and makes the results easier to read.

(From OE-Core rev: 4ec9bb7e1a02de8223fb7485fc47cb43ad19093c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a789a2e6d97bb8efd663226a17db8d1ca6c1e40f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
6c73cc478e resulttool: Clean up repoducible build logs
We've improved the data stored for reproduicible builds. Teach resulttool how
to apply those cleanups when reprocessing data so we can reduce results file
sizes and make the data easier to process.

(From OE-Core rev: cf1b4eb85ca3cb62c9746c6dc8f6dc9c4802c142)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b799c57ae6d61c1b1c7035c8a2c4ba6ee08d1a81)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
ce5f2a734a resulttool: Handle ltp rawlogs as well as ptest
Improve the rawlogs handling to include ltp logs as well as the ptest ones to
reduce the size of the results git repos.

(From OE-Core rev: 0309366b04dd2d0819c4af409269995c08c7abb3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a0a1954d559609c2c1ca16936d0d68eb3c4c6b45)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
6d20991557 resulttool: Add --logfile-archive option to store mode
Storing the log files inside the testresults git repo isn't scaling and isn't
really appropriate use of a git repository. Allow these to be optionally stored
in a separate filesystem location so the git repo can remain managable.

(From OE-Core rev: 1084e88534f7a1341249ab453b82a35f0cddba87)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1afc0f3d7e93fa8496be241e9622d3b9a6904bd5)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
b27b36b2c2 resulttool: Fix passthrough of --all files in store mode
When using store mode, --all was broken as not all files were being preserved.
Fix this by limiting the scope of the git rm command.

(From OE-Core rev: 25173a06c4c1b4c6f1f8cdfe49f0b600cd3efd65)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9604561d2022b6c76b1cb4186d40800d1affdd2b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
b6bffb45d4 oeqa/utils/gitarchive: Return tag name and improve exclude handling
Tweak the gitarchive exclude handling not to error if excluded files
don't match.

Also return the tagname created so that other code can then use it.

(From OE-Core rev: 2df9c2248ac4996ad1fd1fe9f492eb2d71b758cb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1adba3430faffdf6217b6a00533a3b48a9388abc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
4d0e1a7f5e resulttool: Use single space indentation in json output
Using 4 space indentation in resulted in hundreds of megabytes of extra file size
in general use. Reduce this to make filesizes more managable and reduce the processing
cost. Some level of indentation and spacing does make the files more readable and allows
use of git diff so we need to retain some of it.

(From OE-Core rev: cae6106f152c8c44e2d85179ad7e6831b974ffd5)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a274cdcaf852cca9497f0358f44dda99c06aacbe)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
7529e738b0 resulttool: Allow store to filter to specific revisions
We have a challenge on the autobuilder where test results from both OE-Core
and poky are being mixed together during result storage which is confusing the
data. Add a way to filter to specific revisions as the least worst way to fix
the various issues this is causing.

(From OE-Core rev: 5588459188ea21cb7a2064828245d39f1328c6cb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3f276a0dc65341668788853be2cf27ab6aa12b13)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
bce96f15ef selftest/reproducible: Clean up pathnames
There are several problems with these paths. Firstly they contain full
system paths which depend upon where the test was run. These are pretty
pointless and just take up a lot of space making the results files large.

Secondly, they contain the same path twice. The reference and target path
will always be the same thing in two different locations.

Strip off the prefix and remove the duplication. This does change the output
data but that can't really be avoided. It does shrink the results data and makes
it more readable.

(From OE-Core rev: 13d844b15deba49a54676fa6f83ab4526ec74b9a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 81a44de36e864b08687451fd85aeba7c529fd7f7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
2593929542 selftest/reproducible: Drop rawlogs
The "rawlogs" data consists of a long string of results data which is
already in a structured data format. I can't see this is adding much
value in duplciating the data but it does create a huge string with a
lot of long problematic pathnames and inflates the results data size.

I suggest we drop this data as obsolete and not necessary.

(From OE-Core rev: 8e6210530042b722a4f7fea17e5d10cddcd8dfab)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5b2c70fab2ffa409b861d83f048b65d458d03a90)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Changqing Li
d7ed72cf52 rxvt-unicode.inc: disable the terminfo installation by setting TIC to :
Without this change, TIC is the native tic in recipe-sysroot-native.
By default, native tic has set its default terminfo path to native path:
${datadir}/terminfo; $HOME/.terminfo

When sstate cache is used, the cached native tic's terminfo path could
be a path not exist on current host, then native tic will try to install
terminfo to HOME dir, cause host contamination.

Disable the terminfo installation by setting TIC to :

(From OE-Core rev: 33069a688930ccb98a66f02feac40382ecf6cf85)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fe35ead2c3135a18c346e7baa31d34b15c3e2d95)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Richard Purdie
d0381e6f91 do_package/sstate/sstatesig: Change timestamp clamping to hash output only
The code was changing the timestamps of the files in the do_package output,
particularly the files added for debug sources. This was to do two things:

a) make do_package sstate more reproducible
b) ensure better hash equivalence matching

Unfortuately the debug source files are hardlinks into the source tree for
efficiency so touching these, touches a lot of files in ${B} and ${S}. This
causes unpredictable effects if compile is run again for example, or could
cause compiling in the install task.

The hash equivalence matching is of key importance but we can mimic that
using clamping of the file timestamps in the depsig output used to generate
the hashes.

This patch drops the global timestamp clamping, instead allowing the files
to retain their creation timestamps into sstate. This makes do_package sstate
slightly less reproducibile. We could clamp the sstate timestamps but that
would lead to two different sets of timestamps depending on whether the
data came from sstate or not. I'd prefer to have consistent code behaviour,
rather than differing behavhour depending on whether data came from sstate
or not.

If we wanted to have reproducibiliy and fix the "corruption" of S/B and have
consistent codepaths, the only other option would be two copies of the
sources, which could end up huge and seems the least desireable option.

This patch therefore drops the timestamp clamping in the sstate files
and tweaks the depsig data generation to clamp the timestamps for do_package
instead since this seems the best compromise.

I validated that rpm/deb/ipk files still generate correctly as before.

(From OE-Core rev: 0c93bb692b39af51f0ca109dfd1f949abe7eea9c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 475759fdab7200488b2a568b2ba1aa31a456d113)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Jiaying Song
82902b3d64 diffoscope: fix CVE-2024-25711
diffoscope before 256 allows directory traversal via an embedded
filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa,
may be disclosed to an attacker. This occurs because the value of the
gpg --use-embedded-filenames option is trusted.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-25711

Upstream patches:
458f7f04bc

(From OE-Core rev: da4977e9414361a30eb322d1456a664515b35693)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Yogita Urade
450857b441 qemu: fix CVE-2024-3447
A heap-based buffer overflow was found in the SDHCI device
emulation of QEMU. The bug is triggered when both
`s->data_count` and the size of `s->fifo_buffer` are set to
0x200, leading to an out-of-bound access. A malicious guest
could use this flaw to crash the QEMU process on the host,
resulting in a denial of service condition.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-3447

Upstream patch:
2429cb7a9f

(From OE-Core rev: 01d7ac9244364b7f89cd2f99fff11c2417bcad03)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Divya Chellam
e0736e9b27 qemu: fix CVE-2024-3446
A double free vulnerability was found in QEMU virtio devices
(virtio-gpu, virtio-serial-bus, virtio-crypto), where the
mem_reentrancy_guard flag insufficiently protects against DMA
reentrancy issues. This issue could allow a malicious privileged
guest to crash the QEMU process on the host, resulting in a d
enial of service or allow arbitrary code execution within the
context of the QEMU process on the host.

CVE-2024-3446-0004, CVE-2024-3446-0005, CVE-2024-3446-0006
are CVE fix and CVE-2024-3446-0001, CVE-2024-3446-0002,
CVE-2024-3446-0003 are dependent commits to fix the CVE.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-3446

Upstream patches:
9c86c97f12
f63192b054
ec0504b989
ba28e0ff4d
b4295bff25
f4729ec39a

(From OE-Core rev: db7e3a56656db0bc61ec2e35ccc149e9b90a389b)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
47b90adf88 qemu: patch CVE-2024-6505
Backport patch [3] as linked from [1] via [2].

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-6505
[2] https://bugzilla.redhat.com/show_bug.cgi?id=2295760
[3] https://gitlab.com/qemu-project/qemu/-/commit/f1595ceb

(From OE-Core rev: 7e725e126689cc44055e27a05efafb7b52e89192)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
cfaf5aa831 pixman: ignore CVE-2023-37769
Same was done in newer Yocto releases.
See commit 72f2d4cf44b795f766ecdee0b8362c7e162c5efc

(From OE-Core rev: 390421edf8b6eb6031de657cdcaf0c7d50b605be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
33383fb804 grub: ignore CVE-2024-1048 and CVE-2023-4001
Same was done in newer Yocto releases.
See commit: f99b25355133fe8f65a55737270e67ea10b79d52
See commit: 40cd768368167f81de5bb55e9ff0584035f4c1b4

(From OE-Core rev: 823f7ab85cff010c777616ed5db0e0c41f6cc4e6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
7aa27fe43b qemu: ignore CVE-2022-36648
The CVE has disputed flag in NVD DB.

(From OE-Core rev: bd01091c33c1de6ae7e1605301e3f73350ee7e7e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
4df7e37fca gnupg: ignore CVE-2022-3515
This is vulnerability of libksba and we use fixed libksba version
(currently 1.6.4).

(From OE-Core rev: 12007a6d19db220e6540948de9818332192ecde1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Peter Marko
da9b588be4 cpio: ignore CVE-2023-7216
Same was done in newer Yocto releases.
See commit See commit 0f2cd2bbaddba3b8c80d71db274bbcd941d0e60e

(From OE-Core rev: 50d8a653104abb9b5cd8a708a7bd97446e894bcf)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Vijay Anusuri
880002d47c libsoup-2.4: Backport fix for CVE-2024-52531
import patch from ubuntu to fix
 CVE-2024-52531

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/libsoup2.4/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
a35222dd0b
&
825fda3425]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407/
https://ubuntu.com/security/CVE-2024-52531

(From OE-Core rev: 763af055ccb1cbcc4f8fa0944815ec02e3bff87c)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Hongxu Jia
af06cbf82b python3-zipp: fix CVE-2024-5569
According to [1] which provided the fix link [2], but upstream author
reworked it later [3][4][5]

Backport and rebase all the patches for tracing

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-5569
[2] fd604bd34f
[3] 3cb5609002
[4] f89b93f037
[5] cc61e6140f

(From OE-Core rev: 13bd99e17f0aca108839e81e9aa0b14351116fdf)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Changqing Li
e8c505f7a4 libsoup: fix CVE-2024-52531
CVE-2024-52531:
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that
perform conversion to UTF-8 in soup_header_parse_param_list_strict.
Input received over the network cannot trigger this.

Refer:
https://nvd.nist.gov/vuln/detail/CVE-2024-52531
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407/

(From OE-Core rev: 1159c7ef071fa2849f44e921c9b7c27fcbb6bfb3)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Hongxu Jia
1eddf2a87f ovmf: fix CVE-2024-1298
Backport a fix from upstream to resolve CVE-2024-1298

    284dbac43d

(From OE-Core rev: af65d3e221fb239c2dd769ce109e78c720e35793)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Hongxu Jia
f11c3027f4 ovmf: fix CVE-2024-38796
Backport a fix from upstream to resolve CVE-2024-38796

    c95233b852

(From OE-Core rev: c3d1be52b4dc18e6980bf6c3f2e2cb7fba9f986e)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
e8a9aac72d ovmf: Fix CVE-2022-36765
EDK2 is susceptible to a vulnerability in the CreateHob() function,
allowing a user to trigger a integer overflow to buffer overflow
via a local network. Successful exploitation of this vulnerability
may result in a compromise of confidentiality, integrity, and/or
availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-36765

Upstream-patches:
59f024c76e
aeaee8944f
9a75b030cf

(From OE-Core rev: 260fc2182e6a83d7c93b2e8efd95255cd9168a79)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
dd8ed68222 ovmf: Fix CVE-2023-45236
EDK2's Network Package is susceptible to a predictable TCP Initial
Sequence Number. This vulnerability can be exploited by an attacker
to gain unauthorized access and potentially lead to a loss of
Confidentiality.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45236

Upstream-patch:
1904a64bcc

(From OE-Core rev: a9cd3321558e95f61ed4c5eca0dcf5a3f4704925)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
4c2d3e3730 ovmf: Fix CVE-2023-45237
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence
Number. This vulnerability can be exploited by an attacker to gain
unauthorized access and potentially lead to a loss of Confidentiality.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45237

Upstream-patches:
cf07238e5f
4c4ceb2ceb

(From OE-Core rev: 6f8bdaad9d22e65108f859a695277ce1b20ef7c6)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
3a7159d8d8 ovmf: Fix CVE-2023-45229
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing the IA_NA or IA_TA option in a DHCPv6
Advertise message. This vulnerability can be exploited by an attacker
to gain unauthorized access and potentially lead to a loss of
Confidentiality.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45229

Upstream-patches:
1dbb10cc52
07362769ab
1c440a5ece
1d0b95f645

(From OE-Core rev: 23a87c571ae4cdd285a96af0d458906aaf8c4571)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
5133058e11 ovmf: Fix CVE-2023-45235
EDK2's Network Package is susceptible to a buffer overflow vulnerability
when handling Server ID option from a DHCPv6 proxy Advertise message.
This vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality, Integrity
and/or Availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45235

Upstream-patches:
fac297724e
ff2986358f

(From OE-Core rev: dd26902517c30f34cc661cf9f79fc589d0358412)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
23e7248bd1 ovmf: Fix CVE-2023-45234
EDK2's Network Package is susceptible to a buffer overflow vulnerability
when processing DNS Servers option from a DHCPv6 Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized access
and potentially lead to a loss of Confidentiality, Integrity and/or
Availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45234

Upstream-patches:
1b53515d53
458c582685

(From OE-Core rev: d9d9e66349ac0a2e58f54b104fb1b30f1633c1ab)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
a2dfcc4902 ovmf: Fix CVE-2023-45232, CVE-2023-45233
CVE-2023-45232:
EDK2's Network Package is susceptible to an infinite loop vulnerability
when parsing unknown options in the Destination Options header of IPv6.
This vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Availability.

CVE-2023-45233:
EDK2's Network Package is susceptible to an infinite lop vulnerability
when parsing a PadN option in the Destination Options header of IPv6.
This vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45232
https://nvd.nist.gov/vuln/detail/CVE-2023-45233

Upstream-patches:
4df0229ef9
c9c87f08dd

(From OE-Core rev: c84eb03f07687d2e0df1e2033599fa2cf79c6b4d)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
9bd68aeb66 ovmf: Fix CVE-2023-45231
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing  Neighbor Discovery Redirect message. This
vulnerability can be exploited by an attacker to gain unauthorized access
and potentially lead to a loss of Confidentiality.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45231

Upstream-patches:
bbfee34f41
6f77463d72

(From OE-Core rev: bdff14d8e6f4dad7b873442c813672ef0ec6fb01)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
8975a92de5 ovmf: Fix CVE-2023-45230
EDK2's Network Package is susceptible to a buffer overflow vulnerability
via a long server ID option in DHCPv6 client. This vulnerability can be
exploited by an attacker to gain unauthorized access and potentially lead
to a loss of Confidentiality, Integrity and/or Availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45230

Upstream-patches:
f31453e8d6
5f3658197b

(From OE-Core rev: 50b50174f057a9a5fb9773e67b4f183ae942ff10)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00
Soumya Sambu
de62335bad ovmf: Fix CVE-2022-36764
EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage()
function, allowing a user to trigger a heap buffer overflow via a local
network. Successful exploitation of this vulnerability may result in a
compromise of confidentiality, integrity, and/or availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-36764

Upstream-patches:
c7b2794421
0d341c01ee
8f6d343ae6

(From OE-Core rev: aba14824159e549fd77cb90e3a9a327c527b366f)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:02 -08:00
Soumya Sambu
ecf0eb5229 ovmf: Fix CVE-2022-36763
EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable()
function, allowing a user to trigger a heap buffer overflow via a local
network. Successful exploitation of this vulnerability may result in a
compromise of confidentiality, integrity, and/or availability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-36763

Upstream-patches:
2244465432
4776a1b39e
1ddcb9fc6b

(From OE-Core rev: 26db24533f9f32c32189e4621102b628a9ea6729)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:02 -08:00
Ross Burton
0bffb5eed1 gstreamer1.0: improve test reliability
First, libcheck has the ability to increase all test timeouts by an arbitrary
multiplier. Because we run our tests on loaded build machines,
increase all timeouts by 10x to reduce the chance of load causing failures.

Second, use GST_CHECKS_IGNORE to list test cases that should be skipped.

Drop skip-aggregator-test.patch as this is now redundant, and also skip
gstnetclientclock.c:test_functioning as this is very sensitive to load.

[ YOCTO #14808 ]

(From OE-Core rev: 13b13b81b91f618c13cf972067c47bd810de852f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 669d0df81f651f7c033c8cb7872cac5bfe670a4f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Markus Volk
e95fcf9f57 ninja: fix build with python 3.13
python 3.13 removed the pipes module. Thus build fails for host machines that run python 3.13

This commit adds a backport patch to use subprocess module instead

(From OE-Core rev: 1a02cf1997216cb943d8965fe74f971a8cb2f70f)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Alexander Kanavin
da95ad49d8 package_rpm: restrict rpm to 4 threads
TL;DR version:

with this, and the previous compression level changes
I am seeing drastic speedups in package_write_rpm completion times:

webkitgtk goes from 78 seconds to 37 seconds
glibc-locale goes from 399 seconds to 58 seconds (!)

The long version:

rpm uses multithreading for two purposes:

- spawning compressors (which are nowadays themselves
multi-threaded, so the feature is not as useful as it once
was)
- parallel file classification

While the former behaves well on massively parallel CPUs
(it was written and verified here :), the latter was then added
by upstream and only benchmarked on their very old, slow laptop,
apparently:
41f0e214f2

On anything more capable it starts showing pathologic behavior,
presumably from spawning massive amount of very short-lived threads,
and then having to synchronize them. For example classifying glibc-locale
takes
5m20s with 256 threads (default on my machine!)
1m49s with 64 threads
59s with 16 threads
48s with 8 threads

Even a more typical recipe like webkitgtk is affected:
47s with 256 threads
32s with 64 threads
27s with 16 or 8 threads

I have found that the optimal amount is actually four: this also
means that only four compressors are running at a time, but
as they're themselves using threads, and typical recipes are dominated
by just two or three large packages, this does not affect overall
completion time.

(From OE-Core rev: 896192604d84a6f77095f23cd13232e249b7aac5)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Alexander Kanavin
cd6a13bdca package_rpm: use zstd's default compression level
zstd uses 3 by default, while 19 is the highest and slowest.
It's not clear why 19 was picked to begin with, possibly
I copy-pasted it from rpm's examples without thinking:
https://git.yoctoproject.org/poky/commit/?h=master-next&id=4a4d5f78a6962dda5f63e9891825c80a8a87bf66

This brings significant speedups in rpm's compression step:
for example compressing webkitgtk takes 11s instead of 36s.

The rpm size increases from 175648k to 234860k. I think it's
a worthy default tradeoff.

(From OE-Core rev: c377ced95ef7fd060316db1325529826d0985790)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Jinfeng Wang
f9ff43bbf1 tzdata&tzcode-native: upgrade 2024a -> 2024b
(From OE-Core rev: 5aa73ec35a3c65df62f17bc8196a35f28fd3522e)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
(cherry picked from commit c8d3edb2562ea4d980186e78b4abb5a94b1d7b22)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Archana Polampalli
74473524ac ffmpeg: fix CVE-2024-7055
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical.
This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c.
The manipulation leads to heap-based buffer overflow. It is possible to initiate
the attack remotely. The exploit has been disclosed to the public and may be used.
Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade
the affected component. The associated identifier of this vulnerability is VDB-273651.

(From OE-Core rev: 7335a81112673616240f010d4930b4982b10c355)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Archana Polampalli
d8a0cd24f3 ffmpeg: fix CVE-2023-51796
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local
attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26
in areverse_request_frame.

(From OE-Core rev: ec7301d63376197ed3e89282545109f046d63888)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Archana Polampalli
73b340f6c1 ffmpeg: fix CVE-2023-50007
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker
to execute arbitrary code via theav_samples_set_silence function in the
libavutil/samplefmt.c:260:9 component.

(From OE-Core rev: 88a1fc5a6445e72e6cc78c39a6feff3aa96beea6)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Archana Polampalli
184e980c3c ffmpeg: fix CVE-2023-47342
(From OE-Core rev: 725fe951917606fe141aab4d2f1c14617b280943)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Archana Polampalli
d63184dd32 ffmpeg: fix CVE-2023-51798
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker
to execute arbitrary code via a floating point exception (FPE) error at
libavfilter/vf_minterpolate.c:1078:60 in interpolate.

(From OE-Core rev: b6c00d2c64036b2b851cdbb3b6efd60bc839fa5b)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Hitendra Prajapati
396ce3bd6c libsndfile: fix CVE-2024-50612
Upstream-Status: Backport from 4755f5bd78

(From OE-Core rev: 5462005cf3feef383e4212529a8c7af827bdf0d1)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Chen Qi
6029c4b9e9 coreutils: fix CVE-2024-0684
Backport patch with tweaks for the current version to fix
CVE-2024-0684.

(From OE-Core rev: 3d9a4cacd5f051134f190afcab2c71b3286cf9e5)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Peter Marko
7b83bbc2ff builder: set CVE_PRODUCT
Builder is a common word and there are many other builder components
which makes us to ignore CVEs for all of them.
There is already 1 ignored and currently 3 new ones.

Instead, set product to yocto to filter them.

(From OE-Core rev: 941a645b3b18418e020ada9ebdd19f425f03dfc8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Jiaying Song
53801adf75 python3-pip: fix CVE-2023-5752
When installing a package from a Mercurial VCS URL (ie "pip install
hg+...") with pip prior to v23.3, the specified Mercurial revision could
be used to inject arbitrary configuration options to the "hg clone" call
(ie "--config"). Controlling the Mercurial configuration can modify how
and which repository is installed. This vulnerability does not affect
users who aren't installing from Mercurial.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-5752

Upstream patches:
389cb799d0

(From OE-Core rev: 862c0338fba06077a26c775b49f993eac63762c9)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Richard Purdie
4ec499266e bitbake: fetch/wget: Increase timeout to 100s from 30s
Testing shows the worst case CDN response time can be up to 100s. The wget fetcher
is used for accessing sstate from the CDN so increase our timeouts there to match
our worst case repsonse times.

(Bitbake rev: 3f88b005244a0afb5d5c7260e54a94a453ec9b3e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:20 -08:00
Chris Laplante
186ec250da bitbake: fetch2: use persist_data context managers
Python 3.13 emits a ResourceWarning for unclosed sqlite3 `Connection`s.
See https://docs.python.org/3/whatsnew/3.13.html#sqlite3

The previous commit fixed persist_data's context manager to close the
connection, but we were never actually using `with` in the first place.

This change is not necessary on 'master' because persist_data was
removed.

(Bitbake rev: 9789c55ecc90ba074596061fa16e90d3e8accb02)

Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
(cherry picked from commit 61f803c7d92a012b62837b0cdae4789a394b260e)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:19 -08:00
Chris Laplante
8a495b86c8 bitbake: persist_data: close connection in SQLTable __exit__
A Connection's __exit__ does not close the connection, but rather deals
with transactions. See https://docs.python.org/3/library/sqlite3.html#how-to-use-the-connection-context-manager

This change is not necessary on 'master' because persist_data was
removed.

(Bitbake rev: 97856a56cbf09401b34d6c9bb5444c07a88772ce)

Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
(cherry picked from commit b0fba0f5af555ff970406b5cf3bf8fb113d953d1)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-02 06:23:19 -08:00
Regis Dargent
c0dcc56332 udev-extraconf: fix network.sh script did not configure hotplugged interfaces
Udev script network.sh is called when a new ethernet interface is plugged (eg. USB).
Due to some (old) missing files, this script does nothing, instead of configuring the
interfaces with ifup.
I just commented the corresponding lines to allow the script to reach the part where
it calls ifup.

(From OE-Core rev: 8c10f4a4dc12f65212576e6e568fa4369014aaa0)

Signed-off-by: Regis Dargent <regis.dargent@gmail.com>

Fixes [YOCTO 15616]

network.sh relies on (long) missing files (eg. /etc/network/options,
/etc/init.d/network) to decide if it should configure the new network
interface (ifup) or put its name in /etc/udev_network_queue for future
initialization by /etc/init.d/network service.
The actual result was that the new hotplugged interface was never
automatically configured.
Removing the obsolete tests allows the script to do its intended job.

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 160f7139172ffdf510a0d7d4e85f7fbaac7fd000)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Chen Qi
48948810c9 toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
When LD_LIBRARY_PATH is set, post-relocate-setup.sh will fail and
exit properly. But such failure is ignored and the SDK installation
will continue and tell user that things succeed. This is misleading.
So exit immediately if post-relocate-setup.sh fails.

Fixes [Yocto #15586]

(From OE-Core rev: 7050f445081801555614b264e1932e55538a7127)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c8e2dcc1f71aa33cc6e56dfdebebbe7ef010c944)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Steve Sakoman
2208ff6ccb llvm: reduce size of -dbg package
Unless DEBUG_BUILD is enabled, pass -g1 to massively reduce the size of
the debug symbols

  Level 1 produces minimal information, enough for making backtraces in
  parts of the program that you don't plan to debug. This includes
  descriptions of functions and external variables, and line number
  tables, but no information about local variables.

This makes the sstate objects a lot more manageable, and packaging
faster.

(From OE-Core rev: 13a2f43920c53f9f1bc5ec52eba9eb48da265ef6)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Ross Burton
57fbf1634c webkitgtk: reduce size of -dbg package
Unless DEBUG_BUILD is enabled, pass -g1 to massively reduce the size of
the debug symbols (4.3GB to 700M at time of writing):

  Level 1 produces minimal information, enough for making backtraces in
  parts of the program that you don't plan to debug. This includes
  descriptions of functions and external variables, and line number
  tables, but no information about local variables.

This makes the sstate objects a lot more manageable, and packaging
faster.  On my machine:

  PKG          TASK                 ABSDIFF  RELDIFF  WALLTIME1 -> WALLTIME2
  webkitgtk    do_compile           -613.8s   -21.7%    2823.3s -> 2209.5s
  webkitgtk    do_package           -143.4s   -53.6%     267.7s -> 124.3s
  webkitgtk    do_install            -93.7s   -60.1%     156.0s -> 62.3s
  webkitgtk    do_populate_sysroot   -51.6s   -86.4%      59.7s -> 8.1s

Cumulative walltime:
  -892.9s    -26.5%    56:06.3 (3366.3s) -> 41:13.4 (2473.4s)

(From OE-Core rev: 287584ee1068e36c7e758aa1d69ef71382c9adaa)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8361411ea0d67a2620680e2e86045799e072c80a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Liyin Zhang
6b7ac58add lttng-modules: fix build error after kernel update to 5.15.171
This patch fixes the following build error after kernel rebase.
lttng-modules-2.13.14/src/probes/../../include/lttng/define_trace.h:87,
lttng-modules-2.13.14/src/probes/../../include/instrumentation/events/kmem.h:576,
lttng-modules-2.13.14/src/probes/lttng-probe-kmem.c:35:
../../include/lttng/tracepoint-event-impl.h:133:6: error: conflicting types for 'trace_mm_page_alloc_zone_locked'; have 'void(struct page *, unsigned int,  int)'
133 | void trace_##_name(_proto);
    |      ^~~~~~
../../include/instrumentation/events/kmem.h:444:1: note: in expansion of macro 'LTTNG_TRACEPOINT_EVENT_INSTANCE_MAP'
444 | LTTNG_TRACEPOINT_EVENT_INSTANCE_MAP(kmem_mm_page, mm_page_alloc_zone_locked,
    | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
kernel-source/include/trace/events/kmem.h:9,
from lttng-modules-2.13.14/src/probes/lttng-probe-kmem.c:24:
kernel-source/include/linux/tracepoint.h:244:28: note: previous definition of 'trace_mm_page_alloc_zone_locked' with type 'void(struct page *, unsigned int,  int,  int)'
244 |         static inline void trace_##name(proto)                          \
    |                            ^~~~~~
kernel-source/include/linux/tracepoint.h:416:9: note: in expansion of macro '__DECLARE_TRACE'
416 |         __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args),              \
    |         ^~~~~~~~~~~~~~~
kernel-source/include/linux/tracepoint.h:539:9: note: in expansion of macro 'DECLARE_TRACE'
539 |         DECLARE_TRACE(name, PARAMS(proto), PARAMS(args))
    |         ^~~~~~~~~~~~~
kernel-source/include/trace/events/kmem.h:259:1: note: in expansion of macro 'DEFINE_EVENT'
259 | DEFINE_EVENT(mm_page, mm_page_alloc_zone_locked,
    | ^~~~~~~~~~~~

(From OE-Core rev: 20010748cc532261d8477d03a740a2acb7f6df76)

Signed-off-by: Liyin Zhang <liyin.zhang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Ovidiu Panait
752b727b9d webkitgtk: fix perl-native dependency
Currently, perl-native is missing from DEPENDS for webkitgtk even though
perlnative bbclass is inherited. This happens because the DEPENDS variable is
reassigned right after perlnative class is inherited:

inherit perlnative (DEPENDS += "perl-native")
...
DEPENDS = " \
            ..."

Adjust the DEPENDS line to use += in order to fix this.

(From OE-Core rev: 76cb08195f90b36395d7ad09ab8f2654eda0d204)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: a207c8f42f809340e0794cd326cb5c45e32d7d56)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Khem Raj
320ebcf8f8 webkitgtk: Fix build on 32bit arm
(From OE-Core rev: dbdaeb9ff6bf7ce8478f2d61f2f22f84918c26fe)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: 9294ccb9530ce70b2513b2e112644ec5e9f8e701)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Aleksandar Nikolic
f3bf9e02c9 scripts/install-buildtools: Update to 4.0.22
Update to the 4.0.22 release of the 4.0 series for buildtools.

(From OE-Core rev: ca09d02ae7628d7d003aaaaa7b600aa6d58d515c)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:26 -08:00
Wang Mingyu
3b97446fe2 wireless-regdb: upgrade 2024.07.04 -> 2024.10.07
(From OE-Core rev: 566fc928ddbbacb59fcd62448315afa3e4de7147)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f124bb09a798d94eca5e93387bc361b147ce53f9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
d1d7209c20 ffmpeg: fix CVE-2023-51794
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a
local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69.

(From OE-Core rev: 248dc3b20971fb95f0ceb2a34959f857c89ae008)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
338d1840cd ffmpeg: fix CVE-2024-31578
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via
the av_hwframe_ctx_init function.

(From OE-Core rev: 072a5454fa6610fd751433c518f9beb5496851a1)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
341f123331 ffmpeg: fix CVE-2024-31582
FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability
in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability
allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.

(From OE-Core rev: d675ceadf5844524e9f77c2c9b76b9ca42e699fc)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
11504e8356 ffmpeg: fix CVE-2023-50008
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker
to execute arbitrary code via the av_malloc function in libavutil/mem.c:105:9 component.

(From OE-Core rev: 433c84c528bb9920399abfe9e9461d26a929bc7a)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
751137144c ffmpeg: fix CVE-2023-51793
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local
attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image_copy_plane.

(From OE-Core rev: be875832526636638a034680f837241c16e2b26d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Archana Polampalli
b7d06a657a ffmpeg: fix CVE-2024-32230
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param
bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0

(From OE-Core rev: 6eb7dc3eecbbe115f95864d587fb3d5557321973)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Vijay Anusuri
3be25b503f glib-2.0: Backport fix for CVE-2024-52533
Upstream-Status: Backport from ec0b708b98

Reference: https://security-tracker.debian.org/tracker/CVE-2024-52533

(From OE-Core rev: c7ecdd6530e18efd651e2ea57565481f66f7b1cf)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Vijay Anusuri
c1d55bc349 libsoup-2.4: Backport fix for CVE-2024-52530 and CVE-2024-52532
Upstream-Status: Backport from
04df03bc09
&
6adc0e3eb7
& 29b96fab25

(From OE-Core rev: 87b0badcb1d10eddae31ac7b282a4e44778d63af)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Vijay Anusuri
bac0039c98 libsoup: Fix for CVE-2024-52530 and CVE-2024-52532
Upstream-Status: Backport from
04df03bc09
&
6adc0e3eb7
& 29b96fab25

(From OE-Core rev: 5c96ff64b5c29e589d776d23dbbed64ad526a997)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
Vijay Anusuri
86be079fa4 ghostscript: Backport fix for multiple CVE's
import patch from ubuntu to fix
 CVE-2024-46951
 CVE-2024-46952
 CVE-2024-46953
 CVE-2024-46955
 CVE-2024-46956

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/ghostscript/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=ada21374f0c90cc3acf7ce0e96302394560c7aee
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1fb76aaddac34530242dfbb9579d9997dae41264
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=294a3755e33f453dd92e2a7c4cfceb087ac09d6a
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=ca1fc2aefe9796e321d0589afe7efb35063c8b2a
&
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=ea69a1388245ad959d31c272b5ba66d40cebba2c]

(From OE-Core rev: 21a81b592a33504d90f8c53842719cb1fcf96271)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-11-27 06:27:25 -08:00
989 changed files with 88459 additions and 2815 deletions

View File

@@ -27,7 +27,7 @@ import re
logger = logging.getLogger("BitBake.Cache")
__cache_version__ = "154"
__cache_version__ = "155"
def getCacheFile(path, filename, mc, data_hash):
mcspec = ''

View File

@@ -498,30 +498,30 @@ def fetcher_init(d):
Calls before this must not hit the cache.
"""
revs = bb.persist_data.persist('BB_URI_HEADREVS', d)
try:
# fetcher_init is called multiple times, so make sure we only save the
# revs the first time it is called.
if not bb.fetch2.saved_headrevs:
bb.fetch2.saved_headrevs = dict(revs)
except:
pass
with bb.persist_data.persist('BB_URI_HEADREVS', d) as revs:
try:
# fetcher_init is called multiple times, so make sure we only save the
# revs the first time it is called.
if not bb.fetch2.saved_headrevs:
bb.fetch2.saved_headrevs = dict(revs)
except:
pass
# When to drop SCM head revisions controlled by user policy
srcrev_policy = d.getVar('BB_SRCREV_POLICY') or "clear"
if srcrev_policy == "cache":
logger.debug("Keeping SRCREV cache due to cache policy of: %s", srcrev_policy)
elif srcrev_policy == "clear":
logger.debug("Clearing SRCREV cache due to cache policy of: %s", srcrev_policy)
revs.clear()
else:
raise FetchError("Invalid SRCREV cache policy of: %s" % srcrev_policy)
# When to drop SCM head revisions controlled by user policy
srcrev_policy = d.getVar('BB_SRCREV_POLICY') or "clear"
if srcrev_policy == "cache":
logger.debug("Keeping SRCREV cache due to cache policy of: %s", srcrev_policy)
elif srcrev_policy == "clear":
logger.debug("Clearing SRCREV cache due to cache policy of: %s", srcrev_policy)
revs.clear()
else:
raise FetchError("Invalid SRCREV cache policy of: %s" % srcrev_policy)
_checksum_cache.init_cache(d)
_checksum_cache.init_cache(d)
for m in methods:
if hasattr(m, "init"):
m.init(d)
for m in methods:
if hasattr(m, "init"):
m.init(d)
def fetcher_parse_save():
_checksum_cache.save_extras()
@@ -535,8 +535,8 @@ def fetcher_compare_revisions(d):
when bitbake was started and return true if they have changed.
"""
headrevs = dict(bb.persist_data.persist('BB_URI_HEADREVS', d))
return headrevs != bb.fetch2.saved_headrevs
with dict(bb.persist_data.persist('BB_URI_HEADREVS', d)) as headrevs:
return headrevs != bb.fetch2.saved_headrevs
def mirror_from_string(data):
mirrors = (data or "").replace('\\n',' ').split()
@@ -1618,13 +1618,13 @@ class FetchMethod(object):
if not hasattr(self, "_latest_revision"):
raise ParameterError("The fetcher for this URL does not support _latest_revision", ud.url)
revs = bb.persist_data.persist('BB_URI_HEADREVS', d)
key = self.generate_revision_key(ud, d, name)
try:
return revs[key]
except KeyError:
revs[key] = rev = self._latest_revision(ud, d, name)
return rev
with bb.persist_data.persist('BB_URI_HEADREVS', d) as revs:
key = self.generate_revision_key(ud, d, name)
try:
return revs[key]
except KeyError:
revs[key] = rev = self._latest_revision(ud, d, name)
return rev
def sortable_revision(self, ud, d, name):
latest_rev = self._build_revision(ud, d, name)

View File

@@ -88,7 +88,7 @@ class Wget(FetchMethod):
if not ud.localfile:
ud.localfile = d.expand(urllib.parse.unquote(ud.host + ud.path).replace("/", "."))
self.basecmd = d.getVar("FETCHCMD_wget") or "/usr/bin/env wget -t 2 -T 30"
self.basecmd = d.getVar("FETCHCMD_wget") or "/usr/bin/env wget -t 2 -T 100"
if ud.type == 'ftp' or ud.type == 'ftps':
self.basecmd += " --passive-ftp"
@@ -365,7 +365,7 @@ class Wget(FetchMethod):
except (TypeError, ImportError, IOError, netrc.NetrcParseError):
pass
with opener.open(r, timeout=30) as response:
with opener.open(r, timeout=100) as response:
pass
except urllib.error.URLError as e:
if try_again:

View File

@@ -154,6 +154,7 @@ class SQLTable(collections.abc.MutableMapping):
def __exit__(self, *excinfo):
self.connection.__exit__(*excinfo)
self.connection.close()
@_Decorators.retry()
@_Decorators.transaction

View File

@@ -331,7 +331,7 @@ class SignatureGeneratorBasic(SignatureGenerator):
for dep in self.runtaskdeps[tid]:
data += self.get_unihash(dep)
for (f, cs) in self.file_checksum_values[tid]:
for (f, cs) in sorted(self.file_checksum_values[tid], key=clean_checksum_file_path):
if cs:
if "/./" in f:
data += "./" + f.split("/./")[1]
@@ -393,7 +393,7 @@ class SignatureGeneratorBasic(SignatureGenerator):
if runtime and tid in self.taskhash:
data['runtaskdeps'] = self.runtaskdeps[tid]
data['file_checksum_values'] = []
for f,cs in self.file_checksum_values[tid]:
for f,cs in sorted(self.file_checksum_values[tid], key=clean_checksum_file_path):
if "/./" in f:
data['file_checksum_values'].append(("./" + f.split("/./")[1], cs))
else:
@@ -720,6 +720,12 @@ class SignatureGeneratorTestMulticonfigDepends(SignatureGeneratorBasicHash):
name = "TestMulticonfigDepends"
supports_multiconfig_datacaches = True
def clean_checksum_file_path(file_checksum_tuple):
f, cs = file_checksum_tuple
if "/./" in f:
return "./" + f.split("/./")[1]
return f
def dump_this_task(outfile, d):
import bb.parse
fn = d.getVar("BB_FILENAME")

View File

@@ -1335,7 +1335,7 @@ class FetchLatestVersionTest(FetcherTest):
# combination version pattern
("sysprof", "git://git.yoctoproject.org/sysprof.git;protocol=https;branch=master", "cd44ee6644c3641507fb53b8a2a69137f2971219", "")
: "1.2.0",
("u-boot-mkimage", "git://source.denx.de/u-boot/u-boot.git;branch=master;protocol=https", "62c175fbb8a0f9a926c88294ea9f7e88eb898f6c", "")
("u-boot-mkimage", "git://git.yoctoproject.org/bbfetchtests-u-boot.git;branch=master;protocol=https", "62c175fbb8a0f9a926c88294ea9f7e88eb898f6c", "")
: "2014.01",
# version pattern "yyyymmdd"
("mobile-broadband-provider-info", "git://git.yoctoproject.org/mobile-broadband-provider-info.git;protocol=https;branch=master", "4ed19e11c2975105b71b956440acdb25d46a347d", "")
@@ -1621,6 +1621,8 @@ class GitShallowTest(FetcherTest):
if cwd is None:
cwd = self.gitdir
actual_refs = self.git(['for-each-ref', '--format=%(refname)'], cwd=cwd).splitlines()
# Resolve references into the same format as the comparision (needed by git 2.48 onwards)
actual_refs = self.git(['rev-parse', '--symbolic-full-name'] + actual_refs, cwd=cwd).splitlines()
full_expected = self.git(['rev-parse', '--symbolic-full-name'] + expected_refs, cwd=cwd).splitlines()
self.assertEqual(sorted(set(full_expected)), sorted(set(actual_refs)))

View File

@@ -429,5 +429,22 @@ both the Yocto Project and BitBake manuals:
Submitting documentation changes
================================
Please see the top level README file in this repository for details of where
to send patches.
Please refer to our contributor guide here: https://docs.yoctoproject.org/contributor-guide/
for full details on how to submit changes.
As a quick guide, patches should be sent to docs@lists.yoctoproject.org
The git command to do that would be:
git send-email -M -1 --to docs@lists.yoctoproject.org
The 'To' header can be set as default for this repository:
git config sendemail.to docs@lists.yoctoproject.org
Now you can just do 'git send-email origin/master..' to send all local patches.
Read the other sections in this document and documentation/standards.md for
rules to follow when contributing to the documentation.
Git repository: https://git.yoctoproject.org/yocto-docs
Mailing list: docs@lists.yoctoproject.org

View File

@@ -44,7 +44,7 @@ following requirements:
much more will help to run multiple builds and increase
performance by reusing build artifacts.
- At least &MIN_RAM; Gbytes of RAM, though a modern modern build host with as
- At least &MIN_RAM; Gbytes of RAM, though a modern build host with as
much RAM and as many CPU cores as possible is strongly recommended to
maximize build performance.
@@ -57,7 +57,7 @@ following requirements:
:ref:`dev-manual/start:preparing the build host`
section in the Yocto Project Development Tasks Manual.
-
- Ensure that the following utilities have these minimum version numbers:
- Git &MIN_GIT_VERSION; or greater
- tar &MIN_TAR_VERSION; or greater
@@ -65,7 +65,7 @@ following requirements:
- gcc &MIN_GCC_VERSION; or greater.
- GNU make &MIN_MAKE_VERSION; or greater
If your build host does not meet any of these three listed version
If your build host does not satisfy all of the above version
requirements, you can take steps to prepare the system so that you
can still use the Yocto Project. See the
:ref:`ref-manual/system-requirements:required git, tar, python, make and gcc versions`
@@ -78,7 +78,7 @@ You must install essential host packages on your build host. The
following command installs the host packages based on an Ubuntu
distribution::
$ sudo apt install &UBUNTU_HOST_PACKAGES_ESSENTIAL;
$ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL;
.. note::
@@ -182,7 +182,7 @@ an entire Linux distribution, including the toolchain, from source.
page of the Yocto Project Wiki.
#. **Initialize the Build Environment:** From within the ``poky``
directory, run the :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``
directory, run the :ref:`ref-manual/structure:``oe-init-build-env```
environment
setup script to define Yocto Project's build environment on your
build host.
@@ -252,7 +252,7 @@ an entire Linux distribution, including the toolchain, from source.
file in the :term:`Build Directory`::
BB_HASHSERVE_UPSTREAM = "hashserv.yoctoproject.org:8686"
SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH"
SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH"
BB_HASHSERVE = "auto"
BB_SIGNATURE_HANDLER = "OEEquivHash"

View File

@@ -81,7 +81,7 @@ directory of that Layer. This directory is what you add to the
``conf/bblayers.conf`` file found in your
:term:`Build Directory`, which is
established after you run the OpenEmbedded build environment setup
script (i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``).
script (i.e. :ref:`ref-manual/structure:``oe-init-build-env```).
Adding the root directory allows the :term:`OpenEmbedded Build System`
to recognize the BSP
layer and from it build an image. Here is an example::
@@ -167,7 +167,7 @@ section.
BSPs, which are maintained in their own layers or in layers designed
to contain several BSPs. To get an idea of machine support through
BSP layers, you can look at the
:yocto_dl:`index of machines </releases/yocto/yocto-&DISTRO;/machines>`
:yocto_dl:`index of machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines>`
for the release.
#. *Optionally Clone the meta-intel BSP Layer:* If your hardware is
@@ -230,7 +230,7 @@ section.
#. *Initialize the Build Environment:* While in the root directory of
the Source Directory (i.e. ``poky``), run the
:ref:`ref-manual/structure:\`\`oe-init-build-env\`\`` environment
:ref:`ref-manual/structure:``oe-init-build-env``` environment
setup script to define the OpenEmbedded build environment on your
build host. ::
@@ -675,21 +675,21 @@ to the kernel recipe by using a similarly named append file, which is
located in the BSP Layer for your target device (e.g. the
``meta-bsp_root_name/recipes-kernel/linux`` directory).
Suppose you are using the ``linux-yocto_4.4.bb`` recipe to build the
Suppose you are using the ``linux-yocto_6.12.bb`` recipe to build the
kernel. In other words, you have selected the kernel in your
``"bsp_root_name".conf`` file by adding
:term:`PREFERRED_PROVIDER` and :term:`PREFERRED_VERSION`
statements as follows::
PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto"
PREFERRED_VERSION_linux-yocto ?= "4.4%"
PREFERRED_VERSION_linux-yocto ?= "6.12%"
.. note::
When the preferred provider is assumed by default, the :term:`PREFERRED_PROVIDER`
statement does not appear in the ``"bsp_root_name".conf`` file.
You would use the ``linux-yocto_4.4.bbappend`` file to append specific
You would use the ``linux-yocto_6.12.bbappend`` file to append specific
BSP settings to the kernel, thus configuring the kernel for your
particular BSP.
@@ -699,14 +699,19 @@ in the Yocto Project Linux Kernel Development Manual.
An alternate scenario is when you create your own kernel recipe for the
BSP. A good example of this is the Raspberry Pi BSP. If you examine the
``recipes-kernel/linux`` directory you see the following::
``recipes-kernel/linux`` directory in that layer you see the following
Raspberry Pi-specific recipes and associated files::
files/
linux-raspberrypi_6.12.bb
linux-raspberrypi_6.1.bb
linux-raspberrypi_6.6.bb
linux-raspberrypi-dev.bb
linux-raspberrypi.inc
linux-raspberrypi_4.14.bb
linux-raspberrypi_4.9.bb
The directory contains three kernel recipes and a common include file.
linux-raspberrypi-v7_6.12.bb
linux-raspberrypi-v7_6.1.bb
linux-raspberrypi-v7_6.6.bb
linux-raspberrypi-v7.inc
Developing a Board Support Package (BSP)
========================================
@@ -1179,7 +1184,7 @@ Use these steps to create a BSP layer:
- *Create a Kernel Recipe:* Create a kernel recipe in
``recipes-kernel/linux`` by either using a kernel append file or a
new custom kernel recipe file (e.g. ``linux-yocto_4.12.bb``). The BSP
new custom kernel recipe file (e.g. ``linux-yocto_6.12.bb``). The BSP
layers mentioned in the previous step also contain different kernel
examples. See the ":ref:`kernel-dev/common:modifying an existing recipe`"
section in the Yocto Project Linux Kernel Development Manual for

View File

@@ -13,6 +13,7 @@
# documentation root, use os.path.abspath to make it absolute, like shown here.
#
import os
import re
import sys
import datetime
try:
@@ -136,6 +137,7 @@ except ImportError:
sys.exit(1)
html_logo = 'sphinx-static/YoctoProject_Logo_RGB.jpg'
html_favicon = 'sphinx-static/favicon.ico'
# Add any paths that contain custom static files (such as style sheets) here,
# relative to this directory. They are copied after the builtin static files,
@@ -164,6 +166,24 @@ latex_elements = {
'preamble': '\\setcounter{tocdepth}{2}',
}
from sphinx.search import SearchEnglish
from sphinx.search import languages
class DashFriendlySearchEnglish(SearchEnglish):
# Accept words that can include 'inner' hyphens or dots
_word_re = re.compile(r'[\w]+(?:[\.\-][\w]+)*')
js_splitter_code = r"""
function splitQuery(query) {
return query
.split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}\-\.]+/gu)
.filter(term => term.length > 0);
}
"""
languages['en'] = DashFriendlySearchEnglish
# Make the EPUB builder prefer PNG to SVG because of issues rendering Inkscape SVG
from sphinx.builders.epub3 import Epub3Builder
Epub3Builder.supported_image_types = ['image/png', 'image/gif', 'image/jpeg']

View File

@@ -221,6 +221,20 @@ Recipes need to define both the :term:`LICENSE` and
``meta/files/common-licenses/`` or the :term:`SPDXLICENSEMAP` flag names
defined in ``meta/conf/licenses.conf``.
.. note::
Setting a :term:`LICENSE` in a recipe applies to the software to be built
by this recipe, not to the recipe file itself. The license of recipes,
configuration files and scripts should also be clearly specified, for
example via comments or via a license found in the :term:`layer` that
holds these files. These license files are usually found at the root of
the layer. Exceptions should be clearly stated in the layer README or
LICENSE file.
For example, the :term:`OpenEmbedded-Core (OE-Core)` layer provides both
the GPL-2.0-only and MIT license files, and a "LICENSE" file to explain
how these two licenses are attributed to files found in the layer.
- :term:`LIC_FILES_CHKSUM`: The OpenEmbedded build system uses this
variable to make sure the license text has not changed. If it has,
the build produces an error and it affords you the chance to figure

View File

@@ -65,6 +65,13 @@ use to identify your commits::
git config --global user.name "Ada Lovelace"
git config --global user.email "ada.lovelace@gmail.com"
By default, Git adds a signature line at the end of patches containing the Git
version. We suggest to remove it as it doesn't add useful information.
Remove it with the following command::
git config --global format.signature ""
Clone the Git repository for the component to modify
----------------------------------------------------
@@ -116,110 +123,116 @@ to add the upgraded version.
$ git commit -s file1 file2 dir1 dir2 ...
To include **a**\ ll staged files::
To include all staged files::
$ git commit -sa
- The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line
to your commit message. There is the same requirement for contributing
to the Linux kernel. Adding such a line signifies that you, the
submitter, have agreed to the `Developer's Certificate of Origin 1.1
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__
as follows:
#. The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line
to your commit message. There is the same requirement for contributing
to the Linux kernel. Adding such a line signifies that you, the
submitter, have agreed to the `Developer's Certificate of Origin 1.1
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__
as follows:
.. code-block:: none
.. code-block:: none
Developer's Certificate of Origin 1.1
Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
- Provide a single-line summary of the change and, if more
explanation is needed, provide more detail in the body of the
commit. This summary is typically viewable in the "shortlist" of
changes. Thus, providing something short and descriptive that
gives the reader a summary of the change is useful when viewing a
list of many commits. You should prefix this short description
with the recipe name (if changing a recipe), or else with the
short form path to the file being changed.
#. Provide a single-line summary of the change and, if more
explanation is needed, provide more detail in the description of the
commit. This summary is typically viewable in the "shortlist" of
changes. Thus, providing something short and descriptive that
gives the reader a summary of the change is useful when viewing a
list of many commits. You should prefix this short description
with the recipe name (if changing a recipe), or else with the
short form path to the file being changed.
.. note::
To find a suitable prefix for the commit summary, a good idea
is to look for prefixes used in previous commits touching the
same files or directories::
git log --oneline <paths>
#. For the commit description, provide detailed information
that describes what you changed, why you made the change, and the
approach you used. It might also be helpful if you mention how you
tested the change. Provide as much detail as you can in the commit
description.
.. note::
If the single line summary is enough to describe a simple
change, the commit description can be left empty.
#. If the change addresses a specific bug or issue that is associated
with a bug-tracking ID, include a reference to that ID in the body of the
commit message. For example, the Yocto Project uses a
specific convention for bug references --- any commit that addresses
a specific bug should use the following form for the body of the commit
message. Be sure to use the actual bug-tracking ID from
Bugzilla for bug-id::
single-line summary of change
Fixes [YOCTO #bug-id]
detailed description of change
#. If other people participated in this patch, add some tags to the commit
description to credit other contributors to the change:
- ``Reported-by``: name and email of a person reporting a bug
that your commit is trying to fix. This is a good practice
to encourage people to go on reporting bugs and let them
know that their reports are taken into account.
- ``Suggested-by``: name and email of a person to credit for the
idea of making the change.
- ``Tested-by``, ``Reviewed-by``: name and email for people having
tested your changes or reviewed their code. These fields are
usually added by the maintainer accepting a patch, or by
yourself if you submitted your patches to early reviewers,
or are submitting an unmodified patch again as part of a
new iteration of your patch series.
- ``Cc``: name and email of people you want to send a copy
of your changes to. This field will be used by ``git send-email``.
See `more guidance about using such tags
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__
in the Linux kernel documentation.
.. note::
To find a suitable prefix for the commit summary, a good idea
is to look for prefixes used in previous commits touching the
same files or directories::
git log --oneline <paths>
- For the body of the commit message, provide detailed information
that describes what you changed, why you made the change, and the
approach you used. It might also be helpful if you mention how you
tested the change. Provide as much detail as you can in the body
of the commit message.
.. note::
If the single line summary is enough to describe a simple
change, the body of the commit message can be left empty.
- If the change addresses a specific bug or issue that is associated
with a bug-tracking ID, include a reference to that ID in your
detailed description. For example, the Yocto Project uses a
specific convention for bug references --- any commit that addresses
a specific bug should use the following form for the detailed
description. Be sure to use the actual bug-tracking ID from
Bugzilla for bug-id::
Fixes [YOCTO #bug-id]
detailed description of change
#. *Crediting contributors:* By using the ``git commit --amend`` command,
you can add some tags to the commit description to credit other contributors
to the change:
- ``Reported-by``: name and email of a person reporting a bug
that your commit is trying to fix. This is a good practice
to encourage people to go on reporting bugs and let them
know that their reports are taken into account.
- ``Suggested-by``: name and email of a person to credit for the
idea of making the change.
- ``Tested-by``, ``Reviewed-by``: name and email for people having
tested your changes or reviewed their code. These fields are
usually added by the maintainer accepting a patch, or by
yourself if you submitted your patches to early reviewers,
or are submitting an unmodified patch again as part of a
new iteration of your patch series.
- ``CC:`` Name and email of people you want to send a copy
of your changes to. This field will be used by ``git send-email``.
See `more guidance about using such tags
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__
in the Linux kernel documentation.
One can amend an existing git commit message to add missing tags for
contributors with the ``git commit --amend`` command.
Test your changes
-----------------
@@ -643,8 +656,8 @@ backported to a stable branch unless the bug in question does not affect the
master branch or the fix on the master branch is unsuitable for backporting.
The list of stable branches along with the status and maintainer for each
branch can be obtained from the
:yocto_wiki:`Releases wiki page </Releases>`.
branch can be obtained from the :yocto_home:`Releases </development/releases/>`
page.
.. note::
@@ -728,6 +741,38 @@ argument to ``git format-patch`` with a version number::
git format-patch -v2 <ref-branch>
After generating updated patches (v2, v3, and so on) via ``git
format-patch``, ideally developers will add a patch version changelog
to each patch that describes what has changed between each revision of
the patch. Add patch version changelogs after the ``---`` marker in the
patch, indicating that this information is part of this patch, but is not
suitable for inclusion in the commit message (i.e. the git history) itself.
Providing a patch version changelog makes it easier for maintainers and
reviewers to succinctly understand what changed in all versions of the
patch, without having to consult alternate sources of information, such as
searching through messages on a mailing list. For example::
<patch title>
<commit message>
<Signed-off-by/other trailers>
---
changes in v4:
- provide a clearer commit message
- fix spelling mistakes
changes in v3:
- replace func() to use other_func() instead
changes in v2:
- this patch was added in v2
---
<diffstat output>
<unified diff>
Lastly please ensure that you also test your revised changes. In particular
please don't just edit the patch file written out by ``git format-patch`` and
resend it.
@@ -784,3 +829,52 @@ Other layers may have similar testing branches but there is no formal
requirement or standard for these so please check the documentation for the
layers you are contributing to.
Acceptance of AI Generated Code
===============================
The Yocto Project and OpenEmbedded follow the guidance of the Linux Foundation
in regards to the use of generative AI tools. See:
https://www.linuxfoundation.org/legal/generative-ai.
All of the existing guidelines in this document are expected to be followed,
including in the :doc:`recipe-style-guide`, and contributing the changes with
additional requirements to the items in section
:ref:`contributor-guide/submit-changes:Implement and commit changes`.
All AI Generated Code must be labeled as such in the commit message,
prior to your ``Signed-off-by`` line. It is also strongly recommended,
that any patches or code within the commit also have a comment or other
indication that this code was AI generated.
For example, here is a properly formatted commit message::
component: Add the ability to ...
AI-Generated: Uses GitHub Copilot
Signed-off-by: Your Name <your.name@domain>
The ``Signed-off-by`` line must be written by you, and not the AI helper.
As a reminder, when contributing a change, your ``Signed-off-by`` line is
required and the stipulations in the `Developer's Statement of Origin
1.1 <https://developercertificate.org/>`__ still apply.
Additionally, you must stipulate AI contributions conform to the Linux
Foundation policy, specifically:
#. Contributors should ensure that the terms and conditions of the generative AI
tool do not place any contractual restrictions on how the tool's output can
be used that are inconsistent with the project's open source software
license, the project's intellectual property policies, or the Open Source
Definition.
#. If any pre-existing copyrighted materials (including pre-existing open
source code) authored or owned by third parties are included in the AI tool's
output, prior to contributing such output to the project, the Contributor
should confirm that they have permission from the third party
owners -- such as the form of an open source license or public domain
declaration that complies with the project's licensing policies -- to use and
modify such pre-existing materials and contribute them to the project.
Additionally, the contributor should provide notice and attribution of such
third party rights, along with information about the applicable license
terms, with their contribution.

View File

@@ -280,7 +280,9 @@ Follow these steps to create an :term:`Initramfs` image:
#. *Create the Initramfs Image Recipe:* You can reference the
``core-image-minimal-initramfs.bb`` recipe found in the
``meta/recipes-core`` directory of the :term:`Source Directory`
as an example from which to work.
as an example from which to work. The ``core-image-minimal-initramfs`` recipe
is based on the :ref:`initramfs-framework <dev-manual/building:Customizing an
Initramfs using \`\`initramfs-framework\`\`>` recipe described below.
#. *Decide if You Need to Bundle the Initramfs Image Into the Kernel
Image:* If you want the :term:`Initramfs` image that is built to be bundled
@@ -308,6 +310,86 @@ Follow these steps to create an :term:`Initramfs` image:
and bundled with the kernel image if you used the
:term:`INITRAMFS_IMAGE_BUNDLE` variable described earlier.
Customizing an Initramfs using ``initramfs-framework``
------------------------------------------------------
The ``core-image-minimal-initramfs.bb`` recipe found in
:oe_git:`meta/recipes-core/images
</openembedded-core/tree/meta/recipes-core/images>` uses the
:oe_git:`initramfs-framework_1.0.bb
</openembedded-core/tree/meta/recipes-core/initrdscripts/initramfs-framework_1.0.bb>`
recipe as its base component. The goal of the ``initramfs-framework`` recipe is
to provide the building blocks to build a customized :term:`Initramfs`.
The ``initramfs-framework`` recipe relies on shell initialization scripts
defined in :oe_git:`meta/recipes-core/initrdscripts/initramfs-framework
</openembedded-core/tree/meta/recipes-core/initrdscripts/initramfs-framework>`. Since some of
these scripts do not apply for all use cases, the ``initramfs-framework`` recipe
defines different packages:
- ``initramfs-framework-base``: this package installs the basic components of
an :term:`Initramfs`, such as the ``init`` script or the ``/dev/console``
character special file. As this package is a runtime dependency of all
modules listed below, it is automatically pulled in when one of the modules
is installed in the image.
- ``initramfs-module-exec``: support for execution of applications.
- ``initramfs-module-mdev``: support for `mdev
<https://wiki.gentoo.org/wiki/Mdev>`__.
- ``initramfs-module-udev``: support for :wikipedia:`Udev <Udev>`.
- ``initramfs-module-e2fs``: support for :wikipedia:`ext4/ext3/ext2
<Extended_file_system>` filesystems.
- ``initramfs-module-nfsrootfs``: support for locating and mounting the root
partition via :wikipedia:`NFS <Network_File_System>`.
- ``initramfs-module-rootfs``: support for locating and mounting the root
partition.
- ``initramfs-module-debug``: dynamic debug support.
- ``initramfs-module-lvm``: :wikipedia:`LVM <Logical_volume_management>` rootfs support.
- ``initramfs-module-overlayroot``: support for mounting a read-write overlay
on top of a read-only root filesystem.
In addition to the packages defined by the ``initramfs-framework`` recipe
itself, the following packages are defined by the recipes present in
:oe_git:`meta/recipes-core/initrdscripts </openembedded-core/tree/meta/recipes-core/initrdscripts>`:
- ``initramfs-module-install``: module to create and install a partition layout
on a selected block device.
- ``initramfs-module-install-efi``: module to create and install an EFI
partition layout on a selected block device.
- ``initramfs-module-setup-live``: module to start a shell in the
:term:`Initramfs` if ``root=/dev/ram0`` in passed in the `Kernel command-line
<https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html>`__
or the ``root=`` parameter was not passed.
To customize the :term:`Initramfs`, you can add or remove packages listed
earlier from the :term:`PACKAGE_INSTALL` variable with a :ref:`bbappend
<dev-manual/layers:Appending Other Layers Metadata With Your Layer>` on the
``core-image-minimal-initramfs`` recipe, or create a custom recipe for the
:term:`Initramfs` taking ``core-image-minimal-initramfs`` as example.
Custom scripts can be added to the :term:`Initramfs` by writing your own
recipes. The recipes are conventionally named ``initramfs-module-<module name>``
where ``<module name>`` is the name of the module. The recipe should set its
:term:`RDEPENDS` package-specific variables to include
``initramfs-framework-base`` and the other packages on which the module depends
at runtime.
The recipe must install shell initialization scripts in :term:`${D} <D>`\
``/init.d`` and must follow the ``<number>-<script name>`` naming scheme where:
- ``<number>`` is a *two-digit* number that affects the execution order of the
script compared to others. For example, the script ``80-setup-live`` would be
executed after ``01-udev`` because 80 is greater than 01.
This number being two-digits is important here as the scripts are executed
alphabetically. For example, the script ``10-script`` would be executed
before the script ``8-script``, because ``1`` is inferior to ``8``.
Therefore, the script should be named ``08-script``.
- ``<script name>`` is the script name which you can choose freely.
If two script use the same ``<number>``, they are sorted alphabetically based
on ``<script name>``.
Bundling an Initramfs Image From a Separate Multiconfig
-------------------------------------------------------
@@ -827,6 +909,11 @@ to point to that directory::
EXTERNALSRC_BUILD:pn-myrecipe = "path-to-your-source-tree"
.. note::
The values of :term:`EXTERNALSRC` and :term:`EXTERNALSRC_BUILD`
must be absolute paths.
Replicating a Build Offline
===========================

View File

@@ -80,15 +80,14 @@ recipe that are enabled with :term:`IMAGE_FEATURES`. The value of
:term:`EXTRA_IMAGE_FEATURES` is added to :term:`IMAGE_FEATURES` within
``meta/conf/bitbake.conf``.
To illustrate how you can use these variables to modify your image,
consider an example that selects the SSH server. The Yocto Project ships
with two SSH servers you can use with your images: Dropbear and OpenSSH.
Dropbear is a minimal SSH server appropriate for resource-constrained
environments, while OpenSSH is a well-known standard SSH server
implementation. By default, the ``core-image-sato`` image is configured
to use Dropbear. The ``core-image-full-cmdline`` and ``core-image-lsb``
images both include OpenSSH. The ``core-image-minimal`` image does not
contain an SSH server.
To illustrate how you can use these variables to modify your image, consider an
example that selects the SSH server. The Yocto Project ships with two SSH
servers you can use with your images: Dropbear and OpenSSH. Dropbear is a
minimal SSH server appropriate for resource-constrained environments, while
OpenSSH is a well-known standard SSH server implementation. By default, the
``core-image-sato`` image is configured to use Dropbear. The
``core-image-full-cmdline`` image includes OpenSSH. The ``core-image-minimal``
image does not contain an SSH server.
You can customize your image and change these defaults. Edit the
:term:`IMAGE_FEATURES` variable in your recipe or use the

View File

@@ -36,7 +36,7 @@ section:
use the BitBake ``-e`` option to examine variable values after a
recipe has been parsed.
- ":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``"
- ":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```"
describes how to use the ``oe-pkgdata-util`` utility to query
:term:`PKGDATA_DIR` and
display package-related information for built packages.
@@ -111,17 +111,17 @@ occurred in your project. Perhaps an attempt to :ref:`modify a variable
<bitbake-user-manual/bitbake-user-manual-metadata:modifying existing
variables>` did not work out as expected.
BitBake's ``-e`` option is used to display variable values after
parsing. The following command displays the variable values after the
configuration files (i.e. ``local.conf``, ``bblayers.conf``,
BitBake's ``bitbake-getvar`` command is used to display variable values after
parsing. The following command displays the variable value for :term:`OVERRIDES`
after the configuration files (i.e. ``local.conf``, ``bblayers.conf``,
``bitbake.conf`` and so forth) have been parsed::
$ bitbake -e
$ bitbake-getvar OVERRIDES
The following command displays variable values after a specific recipe has
been parsed. The variables include those from the configuration as well::
The following command displays the value of :term:`PV` after a specific recipe
has been parsed::
$ bitbake -e recipename
$ bitbake-getvar -r recipename PV
.. note::
@@ -135,19 +135,25 @@ been parsed. The variables include those from the configuration as well::
the recipe datastore, which means that variables set within one task
will not be visible to other tasks.
In the output of ``bitbake -e``, each variable is preceded by a
description of how the variable got its value, including temporary
values that were later overridden. This description also includes
variable flags (varflags) set on the variable. The output can be very
In the output of ``bitbake-getvar``, the line containing the value of the
variable is preceded by a description of how the variable got its value,
including temporary values that were later overridden. This description also
includes variable flags (varflags) set on the variable. The output can be very
helpful during debugging.
Variables that are exported to the environment are preceded by
``export`` in the output of ``bitbake -e``. See the following example::
``export`` in the output of ``bitbake-getvar``. See the following example::
export CC="i586-poky-linux-gcc -m32 -march=i586 --sysroot=/home/ulf/poky/build/tmp/sysroots/qemux86"
In addition to variable values, the output of the ``bitbake -e`` and
``bitbake -e`` recipe commands includes the following information:
Shell functions and tasks can also be inspected with the same mechanism::
$ bitbake-getvar -r recipename do_install
For Python functions and tasks, ``bitbake -e recipename`` can be used instead.
Moreover, the output of the ``bitbake -e`` and ``bitbake -e`` recipe commands
includes the following information:
- The output starts with a tree listing all configuration files and
classes included globally, recursively listing the files they include

View File

@@ -39,10 +39,8 @@ Yocto Project Development Tasks Manual
external-scm
read-only-rootfs
build-quality
runtime-testing
debugging
licenses
security-subjects
vulnerabilities
sbom
error-reporting-tool

View File

@@ -123,10 +123,9 @@ Follow these general steps to create your layer without using tools:
Lists all layers on which this layer depends (if any).
- :term:`LAYERSERIES_COMPAT`:
Lists the :yocto_wiki:`Yocto Project </Releases>`
releases for which the current version is compatible. This
variable is a good way to indicate if your particular layer is
current.
Lists the :yocto_home:`Yocto Project releases </development/releases/>`
for which the current version is compatible. This variable is a good
way to indicate if your particular layer is current.
.. note::
@@ -822,6 +821,8 @@ The following list describes the available commands:
- ``create-layer``: Creates a basic layer.
- ``show-machines``: Lists the machines available in the currently configured layers.
Creating a General Layer Using the ``bitbake-layers`` Script
============================================================

View File

@@ -56,7 +56,7 @@ necessary when adding a recipe to build a new piece of software to be
included in a build.
You can find a complete description of the ``devtool add`` command in
the ":ref:`sdk-manual/extensible:a closer look at \`\`devtool add\`\``" section
the ":ref:`sdk-manual/extensible:a closer look at ``devtool add```" section
in the Yocto Project Application Development and the Extensible Software
Development Kit (eSDK) manual.
@@ -83,19 +83,20 @@ command::
OpenEmbedded recipe tool
options:
-d, --debug Enable debug output
-q, --quiet Print only errors
--color COLOR Colorize output (where COLOR is auto, always, never)
-h, --help show this help message and exit
-d, --debug Enable debug output
-q, --quiet Print only errors
--color COLOR Colorize output (where COLOR is auto, always, never)
-h, --help show this help message and exit
subcommands:
create Create a new recipe
newappend Create a bbappend for the specified target in the specified
layer
setvar Set a variable within a recipe
appendfile Create/update a bbappend to replace a target file
appendsrcfiles Create/update a bbappend to add or replace source files
appendsrcfile Create/update a bbappend to add or replace a source file
newappend Create a bbappend for the specified target in the specified layer
create Create a new recipe
setvar Set a variable within a recipe
appendfile Create/update a bbappend to replace a target file
appendsrcfiles Create/update a bbappend to add or replace source files
appendsrcfile Create/update a bbappend to add or replace a source file
edit Edit the recipe and appends for the specified target. This obeys $VISUAL if set,
otherwise $EDITOR, otherwise vi.
Use recipetool <subcommand> --help to get help on a specific command
Running ``recipetool create -o OUTFILE`` creates the base recipe and
@@ -218,9 +219,9 @@ compilation and packaging files, and so forth.
The path to the per-recipe temporary work directory depends on the
context in which it is being built. The quickest way to find this path
is to have BitBake return it by running the following::
is to use the ``bitbake-getvar`` utility::
$ bitbake -e basename | grep ^WORKDIR=
$ bitbake-getvar -r basename WORKDIR
As an example, assume a Source Directory
top-level folder named ``poky``, a default :term:`Build Directory` at
@@ -438,7 +439,7 @@ Licensing
=========
Your recipe needs to define variables related to the license
under whith the software is distributed. See the
under which the software is distributed. See the
:ref:`contributor-guide/recipe-style-guide:recipe license fields`
section in the Contributor Guide for details.

View File

@@ -16,7 +16,7 @@ This section describes a few tasks that involve packages:
- :ref:`dev-manual/packages:generating and using signed packages`
- :ref:`Setting up and running package test
(ptest) <dev-manual/packages:testing packages with ptest>`
(ptest) <test-manual/ptest:testing packages with ptest>`
- :ref:`dev-manual/packages:creating node package manager (npm) packages`
@@ -279,8 +279,23 @@ with a number. The number used depends on the state of the PR Service:
.. code-block:: none
hello-world-git_0.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_0.0+git1+dd2f5c3565-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git1+dd2f5c3565-r0.1_armv7a-neon.ipk
Two numbers got incremented here:
- ``gitX`` changed from ``git0`` to ``git1``. This is because there was a
change in the source code (``SRCREV``).
- ``r0.X`` changed from ``r0.0`` to ``r0.1``. This is because the hash of
the :ref:`ref-tasks-package` task changed.
The reason for this change can be many. To understand why the hash of the
:ref:`ref-tasks-package` task changed, you can run the following command:
.. code-block:: console
$ bitbake-diffsigs -t hello-world package
- If PR Service is not enabled, the build system replaces the
``AUTOINC`` placeholder with zero (i.e. "0"). This results in
@@ -290,8 +305,8 @@ with a number. The number used depends on the state of the PR Service:
.. code-block:: none
hello-world-git_0.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_0.0+git0+dd2f5c3565-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git0+b6558dd387-r0_armv7a-neon.ipk
hello-world-git_1.0+git0+dd2f5c3565-r0_armv7a-neon.ipk
In summary, the OpenEmbedded build system does not track the history of
binary package versions for this purpose. ``AUTOINC``, in this case, is
@@ -887,114 +902,8 @@ related to signed package feeds are available:
Testing Packages With ptest
===========================
A Package Test (ptest) runs tests against packages built by the
OpenEmbedded build system on the target machine. A ptest contains at
least two items: the actual test, and a shell script (``run-ptest``)
that starts the test. The shell script that starts the test must not
contain the actual test --- the script only starts the test. On the other
hand, the test can be anything from a simple shell script that runs a
binary and checks the output to an elaborate system of test binaries and
data files.
The test generates output in the format used by Automake::
result: testname
where the result can be ``PASS``, ``FAIL``, or ``SKIP``, and
the testname can be any identifying string.
For a list of Yocto Project recipes that are already enabled with ptest,
see the :yocto_wiki:`Ptest </Ptest>` wiki page.
.. note::
A recipe is "ptest-enabled" if it inherits the :ref:`ref-classes-ptest`
class.
Adding ptest to Your Build
--------------------------
To add package testing to your build, add the :term:`DISTRO_FEATURES` and
:term:`EXTRA_IMAGE_FEATURES` variables to your ``local.conf`` file, which
is found in the :term:`Build Directory`::
DISTRO_FEATURES:append = " ptest"
EXTRA_IMAGE_FEATURES += "ptest-pkgs"
Once your build is complete, the ptest files are installed into the
``/usr/lib/package/ptest`` directory within the image, where ``package``
is the name of the package.
Running ptest
-------------
The ``ptest-runner`` package installs a shell script that loops through
all installed ptest test suites and runs them in sequence. Consequently,
you might want to add this package to your image.
Getting Your Package Ready
--------------------------
In order to enable a recipe to run installed ptests on target hardware,
you need to prepare the recipes that build the packages you want to
test. Here is what you have to do for each recipe:
- *Be sure the recipe inherits the* :ref:`ref-classes-ptest` *class:*
Include the following line in each recipe::
inherit ptest
- *Create run-ptest:* This script starts your test. Locate the
script where you will refer to it using
:term:`SRC_URI`. Here is an
example that starts a test for ``dbus``::
#!/bin/sh
cd test
make -k runtest-TESTS
- *Ensure dependencies are met:* If the test adds build or runtime
dependencies that normally do not exist for the package (such as
requiring "make" to run the test suite), use the
:term:`DEPENDS` and
:term:`RDEPENDS` variables in
your recipe in order for the package to meet the dependencies. Here
is an example where the package has a runtime dependency on "make"::
RDEPENDS:${PN}-ptest += "make"
- *Add a function to build the test suite:* Not many packages support
cross-compilation of their test suites. Consequently, you usually
need to add a cross-compilation function to the package.
Many packages based on Automake compile and run the test suite by
using a single command such as ``make check``. However, the host
``make check`` builds and runs on the same computer, while
cross-compiling requires that the package is built on the host but
executed for the target architecture (though often, as in the case
for ptest, the execution occurs on the host). The built version of
Automake that ships with the Yocto Project includes a patch that
separates building and execution. Consequently, packages that use the
unaltered, patched version of ``make check`` automatically
cross-compiles.
Regardless, you still must add a ``do_compile_ptest`` function to
build the test suite. Add a function similar to the following to your
recipe::
do_compile_ptest() {
oe_runmake buildtest-TESTS
}
- *Ensure special configurations are set:* If the package requires
special configurations prior to compiling the test code, you must
insert a ``do_configure_ptest`` function into the recipe.
- *Install the test suite:* The :ref:`ref-classes-ptest` class
automatically copies the file ``run-ptest`` to the target and then runs make
``install-ptest`` to run the tests. If this is not enough, you need
to create a ``do_install_ptest`` function and make sure it gets
called after the "make install-ptest" completes.
See the :ref:`test-manual/ptest:Testing Packages With ptest` section of the
Yocto Project Test Environment Manual.
Creating Node Package Manager (NPM) Packages
============================================

View File

@@ -75,7 +75,7 @@ available. Follow these general steps to run QEMU:
your :term:`Build Directory`.
- If you have not built an image, you can go to the
:yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu/>` area and download a
:yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu/>` area and download a
pre-built image that matches your architecture and can be run on
QEMU.
@@ -287,12 +287,11 @@ present, the toolchain is also automatically used.
networking.
- SSH servers are available in some QEMU images. The ``core-image-sato``
QEMU image has a Dropbear secure shell (SSH) server that runs with
the root password disabled. The ``core-image-full-cmdline`` and
``core-image-lsb`` QEMU images have OpenSSH instead of Dropbear.
Including these SSH servers allow you to use standard ``ssh`` and
``scp`` commands. The ``core-image-minimal`` QEMU image, however,
contains no SSH server.
QEMU image has a Dropbear secure shell (SSH) server that runs with the
root password disabled. The ``core-image-full-cmdline`` QEMU image has
OpenSSH instead of Dropbear. Including these SSH servers allow you to use
standard ``ssh`` and ``scp`` commands. The ``core-image-minimal`` QEMU
image, however, contains no SSH server.
- You can use a provided, user-space NFS server to boot the QEMU
session using a local copy of the root filesystem on the host. In

View File

@@ -30,16 +30,9 @@ To make this happen, you must inherit the
INHERIT += "create-spdx"
Upon building an image, you will then get:
- :term:`SPDX` output in JSON format as an ``IMAGE-MACHINE.spdx.json`` file in
``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`.
- This toplevel file is accompanied by an ``IMAGE-MACHINE.spdx.index.json``
containing an index of JSON :term:`SPDX` files for individual recipes.
- The compressed archive ``IMAGE-MACHINE.spdx.tar.zst`` contains the index
and the files for the single recipes.
Upon building an image, you will then get the compressed archive
``IMAGE-MACHINE.spdx.tar.zst`` contains the index and the files for the single
recipes.
The :ref:`ref-classes-create-spdx` class offers options to include
more information in the output :term:`SPDX` data:
@@ -56,7 +49,7 @@ more information in the output :term:`SPDX` data:
Though the toplevel :term:`SPDX` output is available in
``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`, ancillary
generated files are available in ``tmp/deploy/spdx/MACHINE`` too, such as:
generated files are available in ``tmp/deploy/spdx`` too, such as:
- The individual :term:`SPDX` JSON files in the ``IMAGE-MACHINE.spdx.tar.zst``
archive.

View File

@@ -1,189 +0,0 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Dealing with Vulnerability Reports
**********************************
The Yocto Project and OpenEmbedded are open-source, community-based projects
used in numerous products. They assemble multiple other open-source projects,
and need to handle security issues and practices both internal (in the code
maintained by both projects), and external (maintained by other projects and
organizations).
This manual assembles security-related information concerning the whole
ecosystem. It includes information on reporting a potential security issue,
the operation of the YP Security team and how to contribute in the
related code. It is written to be useful for both security researchers and
YP developers.
How to report a potential security vulnerability?
=================================================
If you would like to report a public issue (for example, one with a released
CVE number), please report it using the
:yocto_bugs:`Security Bugzilla </enter_bug.cgi?product=Security>`.
If you are dealing with a not-yet-released issue, or an urgent one, please send
a message to security AT yoctoproject DOT org, including as many details as
possible: the layer or software module affected, the recipe and its version,
and any example code, if available. This mailing list is monitored by the
Yocto Project Security team.
For each layer, you might also look for specific instructions (if any) for
reporting potential security issues in the specific ``SECURITY.md`` file at the
root of the repository. Instructions on how and where submit a patch are
usually available in ``README.md``. If this is your first patch to the
Yocto Project/OpenEmbedded, you might want to have a look into the
Contributor's Manual section
":ref:`contributor-guide/submit-changes:preparing changes for submission`".
Branches maintained with security fixes
---------------------------------------
See the
:ref:`Release process <ref-manual/release-process:Stable Release Process>`
documentation for details regarding the policies and maintenance of stable
branches.
The :yocto_wiki:`Releases page </Releases>` contains a list
of all releases of the Yocto Project. Versions in gray are no longer actively
maintained with security patches, but well-tested patches may still be accepted
for them for significant issues.
Security-related discussions at the Yocto Project
-------------------------------------------------
We have set up two security-related mailing lists:
- Public List: yocto [dash] security [at] yoctoproject[dot] org
This is a public mailing list for anyone to subscribe to. This list is an
open list to discuss public security issues/patches and security-related
initiatives. For more information, including subscription information,
please see the :yocto_lists:`yocto-security mailing list info page </g/yocto-security>`.
- Private List: security [at] yoctoproject [dot] org
This is a private mailing list for reporting non-published potential
vulnerabilities. The list is monitored by the Yocto Project Security team.
What you should do if you find a security vulnerability
-------------------------------------------------------
If you find a security flaw: a crash, an information leakage, or anything that
can have a security impact if exploited in any Open Source software built or
used by the Yocto Project, please report this to the Yocto Project Security
Team. If you prefer to contact the upstream project directly, please send a
copy to the security team at the Yocto Project as well. If you believe this is
highly sensitive information, please report the vulnerability in a secure way,
i.e. encrypt the email and send it to the private list. This ensures that
the exploit is not leaked and exploited before a response/fix has been generated.
Security team
=============
The Yocto Project/OpenEmbedded security team coordinates the work on security
subjects in the project. All general discussion takes place publicly. The
Security Team only uses confidential communication tools to deal with private
vulnerability reports before they are released.
Security team appointment
-------------------------
The Yocto Project Security Team consists of at least three members. When new
members are needed, the Yocto Project Technical Steering Committee (YP TSC)
asks for nominations by public channels including a nomination deadline.
Self-nominations are possible. When the limit time is
reached, the YP TSC posts the list of candidates for the comments of project
participants and developers. Comments may be sent publicly or privately to the
YP and OE TSCs. The candidates are approved by both YP TSC and OpenEmbedded
Technical Steering Committee (OE TSC) and the final list of the team members
is announced publicly. The aim is to have people representing technical
leadership, security knowledge and infrastructure present with enough people
to provide backup/coverage but keep the notification list small enough to
minimize information risk and maintain trust.
YP Security Team members may resign at any time.
Security Team Operations
------------------------
The work of the Security Team might require high confidentiality. Team members
are individuals selected by merit and do not represent the companies they work
for. They do not share information about confidential issues outside of the team
and do not hint about ongoing embargoes.
Team members can bring in domain experts as needed. Those people should be
added to individual issues only and adhere to the same standards as the YP
Security Team.
The YP security team organizes its meetings and communication as needed.
When the YP Security team receives a report about a potential security
vulnerability, they quickly analyze and notify the reporter of the result.
They might also request more information.
If the issue is confirmed and affects the code maintained by the YP, they
confidentially notify maintainers of that code and work with them to prepare
a fix.
If the issue is confirmed and affects an upstream project, the YP security team
notifies the project. Usually, the upstream project analyzes the problem again.
If they deem it a real security problem in their software, they develop and
release a fix following their security policy. They may want to include the
original reporter in the loop. There is also sometimes some coordination for
handling patches, backporting patches etc, or just understanding the problem
or what caused it.
When the fix is publicly available, the YP security team member or the
package maintainer sends patches against the YP code base, following usual
procedures, including public code review.
What Yocto Security Team does when it receives a security vulnerability
-----------------------------------------------------------------------
The YP Security Team team performs a quick analysis and would usually report
the flaw to the upstream project. Normally the upstream project analyzes the
problem. If they deem it a real security problem in their software, they
develop and release a fix following their own security policy. They may want
to include the original reporter in the loop. There is also sometimes some
coordination for handling patches, backporting patches etc, or just
understanding the problem or what caused it.
The security policy of the upstream project might include a notification to
Linux distributions or other important downstream projects in advance to
discuss coordinated disclosure. These mailing lists are normally non-public.
When the upstream project releases a version with the fix, they are responsible
for contacting `Mitre <https://www.cve.org/>`__ to get a CVE number assigned and
the CVE record published.
If an upstream project does not respond quickly
-----------------------------------------------
If an upstream project does not fix the problem in a reasonable time,
the Yocto's Security Team will contact other interested parties (usually
other distributions) in the community and together try to solve the
vulnerability as quickly as possible.
The Yocto Project Security team adheres to the 90 days disclosure policy
by default. An increase of the embargo time is possible when necessary.
Current Security Team members
-----------------------------
For secure communications, please send your messages encrypted using the GPG
keys. Remember, message headers are not encrypted so do not include sensitive
information in the subject line.
- Ross Burton: <ross@burtonini.com> `Public key <https://keys.openpgp.org/search?q=ross%40burtonini.com>`__
- Michael Halstead: <mhalstead [at] linuxfoundation [dot] org>
`Public key <https://pgp.mit.edu/pks/lookup?op=vindex&search=0x3373170601861969>`__
or `Public key <https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xd1f2407285e571ed12a407a73373170601861969>`__
- Richard Purdie: <richard.purdie@linuxfoundation.org> `Public key <https://keys.openpgp.org/search?q=richard.purdie%40linuxfoundation.org>`__
- Marta Rybczynska: <marta DOT rybczynska [at] syslinbit [dot] com> `Public key <https://keys.openpgp.org/search?q=marta.rybczynska@syslinbit.com>`__
- Steve Sakoman: <steve [at] sakoman [dot] com> `Public key <https://keys.openpgp.org/search?q=steve%40sakoman.com>`__

View File

@@ -543,6 +543,7 @@ your Yocto Project build host:
DISKPART> select vdisk file="<path_to_VHDX_file>"
DISKPART> attach vdisk readonly
DISKPART> compact vdisk
DISKPART> detach
DISKPART> exit
.. note::
@@ -615,7 +616,7 @@ Accessing Index of Releases
The Yocto Project also provides source archives of its releases, which
are available on :yocto_dl:`/releases/yocto/`. Then, choose the subdirectory
containing the release you wish to use, for example
:yocto_dl:`yocto-&DISTRO; </releases/yocto/yocto-&DISTRO;/>`.
:yocto_dl:`&DISTRO_REL_LATEST_TAG; </releases/yocto/&DISTRO_REL_LATEST_TAG;/>`.
You will find there source archives of individual components (if you wish
to use them individually), and of the corresponding Poky release bundling
@@ -675,7 +676,7 @@ described in the ":ref:`dev-manual/start:accessing index of releases`" section.
.. note::
For a "map" of Yocto Project releases to version numbers, see the
:yocto_wiki:`Releases </Releases>` wiki page.
:yocto_home:`Releases </development/releases/>` page.
You can use the "RELEASE ARCHIVE" link to reveal a menu of all Yocto
Project releases.

View File

@@ -333,7 +333,7 @@ Manually Upgrading a Recipe
If for some reason you choose not to upgrade recipes using
:ref:`dev-manual/upgrading-recipes:Using the Auto Upgrade Helper (AUH)` or
by :ref:`dev-manual/upgrading-recipes:Using \`\`devtool upgrade\`\``,
by :ref:`dev-manual/upgrading-recipes:Using ``devtool upgrade```,
you can manually edit the recipe files to upgrade the versions.
.. note::

View File

@@ -12,7 +12,7 @@ known security vulnerabilities, as tracked by the public
database.
The Yocto Project maintains a `list of known vulnerabilities
<https://autobuilder.yocto.io/pub/non-release/patchmetrics/>`__
<https://valkyrie.yocto.io/pub/non-release/patchmetrics/>`__
for packages in Poky and OE-Core, tracking the evolution of the number of
unpatched CVEs and the status of patches. Such information is available for
the current development version and for each supported release.
@@ -62,37 +62,77 @@ found in ``build/tmp/deploy/cve``.
For example the CVE check report for the ``flex-native`` recipe looks like::
$ cat poky/build/tmp/deploy/cve/flex-native
LAYER: meta
PACKAGE NAME: flex-native
PACKAGE VERSION: 2.6.4
CVE: CVE-2016-6354
CVE STATUS: Patched
CVE SUMMARY: Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
CVSS v2 BASE SCORE: 7.5
CVSS v3 BASE SCORE: 9.8
VECTOR: NETWORK
MORE INFORMATION: https://nvd.nist.gov/vuln/detail/CVE-2016-6354
LAYER: meta
PACKAGE NAME: flex-native
PACKAGE VERSION: 2.6.4
CVE: CVE-2019-6293
CVE STATUS: Ignored
CVE SUMMARY: An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.
CVSS v2 BASE SCORE: 4.3
CVSS v3 BASE SCORE: 5.5
VECTOR: NETWORK
MORE INFORMATION: https://nvd.nist.gov/vuln/detail/CVE-2019-6293
$ cat ./tmp/deploy/cve/flex-native_cve.json
{
"version": "1",
"package": [
{
"name": "flex-native",
"layer": "meta",
"version": "2.6.4",
"products": [
{
"product": "flex",
"cvesInRecord": "No"
},
{
"product": "flex",
"cvesInRecord": "Yes"
}
],
"issue": [
{
"id": "CVE-2006-0459",
"status": "Patched",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2006-0459",
"summary": "flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.",
"scorev2": "7.5",
"scorev3": "0.0",
"scorev4": "0.0",
"modified": "2024-11-21T00:06Z",
"vector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"detail": "version-not-in-range"
},
{
"id": "CVE-2016-6354",
"status": "Patched",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2016-6354",
"summary": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.",
"scorev2": "7.5",
"scorev3": "9.8",
"scorev4": "0.0",
"modified": "2024-11-21T02:55Z",
"vector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"detail": "version-not-in-range"
},
{
"id": "CVE-2019-6293",
"status": "Ignored",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2019-6293",
"summary": "An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.",
"scorev2": "4.3",
"scorev3": "5.5",
"scorev4": "0.0",
"modified": "2024-11-21T04:46Z",
"vector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"detail": "upstream-wontfix",
"description": "there is stack exhaustion but no bug and it is building the parser, not running it, effectively similar to a compiler ICE. Upstream no plans to address this."
}
]
}
]
}
For images, a summary of all recipes included in the image and their CVEs is also
generated in textual and JSON formats. These ``.cve`` and ``.json`` reports can be found
generated in the JSON format. These ``.json`` reports can be found
in the ``tmp/deploy/images`` directory for each compiled image.
At build time CVE check will also throw warnings about ``Unpatched`` CVEs::
WARNING: flex-2.6.4-r0 do_cve_check: Found unpatched CVE (CVE-2019-6293), for more information check /poky/build/tmp/work/core2-64-poky-linux/flex/2.6.4-r0/temp/cve.log
WARNING: libarchive-3.5.1-r0 do_cve_check: Found unpatched CVE (CVE-2021-36976), for more information check /poky/build/tmp/work/core2-64-poky-linux/libarchive/3.5.1-r0/temp/cve.log
WARNING: qemu-native-9.2.0-r0 do_cve_check: Found unpatched CVE (CVE-2023-1386)
It is also possible to check the CVE status of individual packages as follows::
@@ -111,10 +151,10 @@ upstream `NIST CVE database <https://nvd.nist.gov/>`__.
The variable supports using vendor and product names like this::
CVE_PRODUCT = "flex_project:flex"
CVE_PRODUCT = "flex_project:flex westes:flex"
In this example the vendor name used in the CVE database is ``flex_project`` and the
product is ``flex``. With this setting the ``flex`` recipe only maps to this specific
In this example we have two possible vendors names, ``flex_project`` and ``westes``,
with the product name ``flex``. With this setting the ``flex`` recipe only maps to this specific
product and not products from other vendors with same name ``flex``.
Similarly, when the recipe version :term:`PV` is not compatible with software versions used by
@@ -195,7 +235,7 @@ products defined in :term:`CVE_PRODUCT`. Then, for each found CVE:
The CVE database is stored in :term:`DL_DIR` and can be inspected using
``sqlite3`` command as follows::
sqlite3 downloads/CVE_CHECK/nvdcve_1.1.db .dump | grep CVE-2021-37462
sqlite3 downloads/CVE_CHECK/nvd*.db .dump | grep CVE-2021-37462
When analyzing CVEs, it is recommended to:

View File

@@ -514,7 +514,7 @@ or ::
For more information on how to use the ``bmaptool``
to flash a device with an image, see the
":ref:`dev-manual/bmaptool:flashing images using \`\`bmaptool\`\``"
":ref:`dev-manual/bmaptool:flashing images using ``bmaptool```"
section.
Using a Modified Kickstart File

View File

@@ -20,7 +20,6 @@ Welcome to the Yocto Project Documentation
Yocto Project Software Overview <https://www.yoctoproject.org/software-overview/>
Tips and Tricks Wiki <https://wiki.yoctoproject.org/wiki/TipsAndTricks>
.. toctree::
:maxdepth: 1
:caption: Manuals
@@ -37,6 +36,12 @@ Welcome to the Yocto Project Documentation
Test Environment Manual <test-manual/index>
bitbake
.. toctree::
:maxdepth: 1
:caption: Security
Yocto Project Security Reference <security-reference/index>
.. toctree::
:maxdepth: 1
:caption: Release Manuals

View File

@@ -724,13 +724,9 @@ a Raspberry Pi 2, which is based on the Broadcom 2708/2709 chipset::
KBUILD_DEFCONFIG:raspberrypi2 ?= "bcm2709_defconfig"
Aside from modifying your kernel recipe and providing your own
``defconfig`` file, you need to be sure no files or statements set
:term:`SRC_URI` to use a ``defconfig`` other than your "in-tree" file (e.g.
a kernel's ``linux-``\ `machine`\ ``.inc`` file). In other words, if the
build system detects a statement that identifies an "out-of-tree"
``defconfig`` file, that statement will override your
:term:`KBUILD_DEFCONFIG` variable.
If the build system detects a statement that identifies an "out-of-tree"
``defconfig`` file, your :term:`KBUILD_DEFCONFIG` variable will take precedence
over it.
See the
:term:`KBUILD_DEFCONFIG`
@@ -746,7 +742,7 @@ the extensible SDK and ``devtool``.
Before attempting this procedure, be sure you have performed the
steps to get ready for updating the kernel as described in the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section.
Patching the kernel involves changing or adding configurations to an
@@ -759,7 +755,7 @@ output at boot time through ``printk`` statements in the kernel's
``calibrate.c`` source code file. Applying the patch and booting the
modified image causes the added messages to appear on the emulator's
console. The example is a continuation of the setup procedure found in
the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Section.
the ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" Section.
1. *Check Out the Kernel Source Files:* First you must use ``devtool``
to checkout the kernel source code in its workspace. Be sure you are
@@ -768,7 +764,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se
.. note::
See this step in the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section for more information.
Use the following ``devtool`` command to check out the code::
@@ -883,7 +879,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se
.. note::
See Step 3 of the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section for information on setting up this layer.
Once the command
@@ -1271,15 +1267,17 @@ appear in the ``.config`` file, which is in the :term:`Build Directory`.
For more information about where the ``.config`` file is located, see the
example in the
":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
":ref:`kernel-dev/common:using ``menuconfig```"
section.
It is simple to create a configuration fragment. One method is to use
shell commands. For example, issuing the following from the shell
creates a configuration fragment file named ``my_smp.cfg`` that enables
multi-processor support within the kernel::
creates a configuration fragment file named ``my_changes.cfg`` that enables
multi-processor support within the kernel and disables the FPGA
Configuration Framework::
$ echo "CONFIG_SMP=y" >> my_smp.cfg
$ echo "CONFIG_SMP=y" >> my_changes.cfg
$ echo "# CONFIG_FPGA is not set" >> my_changes.cfg
.. note::
@@ -1367,7 +1365,7 @@ when you override a policy configuration in a hardware configuration
fragment.
In order to run this task, you must have an existing ``.config`` file.
See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``" section for
See the ":ref:`kernel-dev/common:using ``menuconfig```" section for
information on how to create a configuration file.
Here is sample output from the ``do_kernel_configcheck`` task:
@@ -1440,7 +1438,7 @@ and
tasks until they produce no warnings.
For more information on how to use the ``menuconfig`` tool, see the
:ref:`kernel-dev/common:using \`\`menuconfig\`\`` section.
:ref:`kernel-dev/common:using ``menuconfig``` section.
Fine-Tuning the Kernel Configuration File
-----------------------------------------
@@ -1516,15 +1514,13 @@ Expanding Variables
===================
Sometimes it is helpful to determine what a variable expands to during a
build. You can examine the values of variables by examining the
output of the ``bitbake -e`` command. The output is long and is more
easily managed in a text file, which allows for easy searches::
build. You can examine the value of a variable by running the ``bitbake-getvar``
command::
$ bitbake -e virtual/kernel > some_text_file
$ bitbake-getvar -r virtual/kernel VARIABLE
Within the text file, you can see
exactly how each variable is expanded and used by the OpenEmbedded build
system.
The output of the command explains exactly how the variable is expanded and used
by the :term:`OpenEmbedded Build System`.
Working with a "Dirty" Kernel Version String
============================================

View File

@@ -122,7 +122,7 @@ general information and references for further information.
Using ``devtool`` and the eSDK requires that you have a clean build
of the image and that you are set up with the appropriate eSDK. For
more information, see the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section.
Using traditional kernel development requires that you have the

View File

@@ -243,8 +243,8 @@ A new automated image testing framework has been added through the
framework replaces the older ``imagetest-qemu`` framework.
You can learn more about performing automated image tests in the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
.. _migration-1.5-build-history:

View File

@@ -220,7 +220,7 @@ Package Test (ptest)
Package Tests (ptest) are built but not installed by default. For
information on using Package Tests, see the
":ref:`dev-manual/packages:testing packages with ptest`"
":ref:`test-manual/ptest:testing packages with ptest`"
section in the Yocto Project Development Tasks Manual. For information on the
``ptest`` class, see the ":ref:`ref-classes-ptest`" section.

View File

@@ -143,7 +143,7 @@ Python changes
The new Python packaging classes that should be used are
:ref:`python_flit_core <ref-classes-python_flit_core>`,
:ref:`python_setuptools_build_meta <ref-classes-python_setuptools_build_meta>`
and :ref:`python_poetry_core <ref-classes-python_poetry_core>`.
and :ref:`python_poetry_core <ref-classes-python_poetry_core>`.
- The :ref:`setuptools3 <ref-classes-setuptools3>` class ``do_install()`` task now
installs the ``wheel`` binary archive. In current versions of ``setuptools`` the

View File

@@ -29,4 +29,13 @@ Release 4.0 (kirkstone)
release-notes-4.0.20
release-notes-4.0.21
release-notes-4.0.22
release-notes-4.0.23
release-notes-4.0.24
release-notes-4.0.25
release-notes-4.0.26
release-notes-4.0.27
release-notes-4.0.28
release-notes-4.0.29
release-notes-4.0.30
release-notes-4.0.31
release-notes-4.0.32

View File

@@ -0,0 +1,209 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-4.0.23 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- ``curl``: Fix :cve_nist:`2024-9681`
- ``expat``: Fix :cve_nist:`2024-50602`
- ``gcc``: Ignore :cve_nist:`2023-4039`
- ``ghostscript``: Fix :cve_nist:`2023-46361` and :cve_nist:`2024-29508`
- ``gstreamer1.0``: Ignore :cve_nist:`2024-0444`
- ``libarchive``: Fix :cve_nist:`2024-48957` and :cve_nist:`2024-48958`
- ``openssl``: Fix :cve_nist:`2024-9143`
- ``orc``: Fix :cve_nist:`2024-40897`
- ``python3``: Ignore :cve_nist:`2023-27043`, :cve_nist:`2024-6232` and :cve_nist:`2024-7592`
- ``qemu``: Fix :cve_nist:`2023-3019`
- ``vim``: Fix :cve_nist:`2024-43790`, :cve_nist:`2024-43802`, :cve_nist:`2024-45306` and :cve_nist:`2024-47814`
- ``zstd``: Fix :cve_nist:`2022-4899`
Fixes in Yocto-4.0.23
~~~~~~~~~~~~~~~~~~~~~
- at-spi2-core: backport a patch to fix build with gcc-14 on host
- bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM
- bitbake: codeparser: Fix handling of string AST nodes with older Python versions
- bitbake: fetch2/git: Use quote from shlex, not pipes
- bitbake: gitsm: Add call_process_submodules() to remove duplicated code
- bitbake: gitsm: Remove downloads/tmpdir when failed
- bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab
- bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab
- bmap-tools: update :term:`HOMEPAGE` and :term:`SRC_URI`
- build-appliance-image: Update to kirkstone head revision
- cmake: Fix sporadic issues when determining compiler internals
- cracklib: Modify patch to compile with GCC 14
- cve-check: add CVSS vector string to CVE database and reports
- cve-check: add support for cvss v4.0
- cve_check: Use a local copy of the database during builds
- dev-manual: document how to provide confs from layer.conf
- documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint
- documentation: Makefile: fix epub and latexpdf targets
- documentation: README: add instruction to run Vale on a subset
- documentation: brief-yoctoprojectqs: update BB_HASHSERVE_UPSTREAM for new infrastructure
- documentation: conf.py: add a bitbake_git extlink
- documentation: rename :cve: role to :cve_nist:
- documentation: styles: vocabularies: Yocto: add sstate
- documnetation: contributor-guide: Remove duplicated words
- gcc: restore a patch for Neoverse N2 core
- glib-2.0: patch regression of :cve_nist:`2023-32665`
- kmscube: create_framebuffer: backport modifier fix
- libffi: backport a fix to build libffi-native with gcc-14
- linux-firmware: Upgrade to 20240909
- local.conf.sample: update BB_HASHSERVE_UPSTREAM for new infrastructure
- migration-guide: add release notes for 4.0.22
- migration-guide: release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure
- nativesdk-intercept: Fix bad intercept chgrp/chown logic
- orc: Upgrade to 0.4.40
- overlayfs-etc: add option to skip creation of mount dirs
- overview-manual: concepts: add details on package splitting
- package: Switch debug source handling to use prefix map
- patch.py: Use shlex instead of deprecated pipe
- poky.conf: bump version for 4.0.23
- pseudo: Disable LFS on 32bit arches
- pseudo: Fix envp bug and add posix_spawn wrapper
- pseudo: Fix to work with glibc 2.40
- pseudo: Switch back to the master branch
- pseudo: Update to include logic fix
- pseudo: Update to include open symlink handling bugfix
- pseudo: Update to pull in fchmodat fix
- pseudo: Update to pull in fd leak fix
- pseudo: Update to pull in gcc14 fix and missing statvfs64 intercept
- pseudo: Update to pull in linux-libc-headers race fix
- pseudo: Update to pull in python 3.12+ fix
- pseudo: Update to pull in syncfs probe fix
- ref-manual: add description for the "sysroot" term
- ref-manual: add missing CVE_CHECK manifest variables
- ref-manual: add missing :term:`EXTERNAL_KERNEL_DEVICETREE` variable
- ref-manual: add missing :term:`OPKGBUILDCMD` variable
- ref-manual: devtool-reference: document missing commands
- ref-manual: devtool-reference: refresh example outputs
- ref-manual: introduce :term:`CVE_CHECK_REPORT_PATCHED` variable
- ref-manual: release-process: add a reference to the doc's release
- ref-manual: release-process: refresh the current LTS releases
- ref-manual: release-process: update releases.svg
- ref-manual: release-process: update releases.svg with month after "Current"
- ref-manual: structure.rst: document missing tmp/ dirs
- ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables
- syslinux: Disable error on implicit-function-declaration
- util-linux: Define pidfd_* function signatures
- vala: add -Wno-error=incompatible-pointer-types work around
- vim: Upgrade to 9.1.0764
- xmlto: backport a patch to fix build with gcc-14 on host
- zip: Fix build with gcc-14
- zip: Make configure checks to be more robust
Known Issues in Yocto-4.0.23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-N/A
Contributors to Yocto-4.0.23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Alexandre Belloni
- Antoine Lubineau
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Baruch Siach
- Eilís 'pidge' Ní Fhlannagáin
- Jose Quaresma
- Julien Stephan
- Khem Raj
- Lee Chee Yang
- Macpaul Lin
- Martin Jansa
- Michael Opdenacker
- Ola x Nilsson
- Peter Marko
- Philip Lorenz
- Randolph Sapp
- Richard Purdie
- Robert Yang
- Rohini Sangam
- Ruiqiang Hao
- Siddharth Doshi
- Steve Sakoman
- Talel BELHAJSALEM
- Wang Mingyu
- Yogita Urade
- Zoltan Boszormenyi
Repositories / Downloads for Yocto-4.0.23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.23 </poky/log/?h=yocto-4.0.23>`
- Git Revision: :yocto_git:`8e092852b63e998d990b8f8e1aa91297dec4430f </poky/commit/?id=8e092852b63e998d990b8f8e1aa91297dec4430f>`
- Release Artefact: poky-8e092852b63e998d990b8f8e1aa91297dec4430f
- sha: 339d34d8432070dac948449e732ebf06a888eeb27ff548958b2395c9446b029d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/poky-8e092852b63e998d990b8f8e1aa91297dec4430f.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.23 </openembedded-core/log/?h=yocto-4.0.23>`
- Git Revision: :oe_git:`fb45c5cf8c2b663af293acb069d446610f77ff1a </openembedded-core/commit/?id=fb45c5cf8c2b663af293acb069d446610f77ff1a>`
- Release Artefact: oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a
- sha: 1d394370ea7d43fb885ab8a952d6d1e43f1a850745a5152d5ead5565a283a0f5
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/oecore-fb45c5cf8c2b663af293acb069d446610f77ff1a.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.23 </meta-mingw/log/?h=yocto-4.0.23>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.23 </meta-gplv2/log/?h=yocto-4.0.23>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.23 </bitbake/log/?h=yocto-4.0.23>`
- Git Revision: :oe_git:`fb73c495c45d1d4107cfd60b67a5b4f11a99647b </bitbake/commit/?id=fb73c495c45d1d4107cfd60b67a5b4f11a99647b>`
- Release Artefact: bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b
- sha: 5cd271299951f25912a2e8d4de6d8769a4c0bb3bbcfc90815be41f23fd299a0b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.23/bitbake-fb73c495c45d1d4107cfd60b67a5b4f11a99647b.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.23 </yocto-docs/log/?h=yocto-4.0.23>`
- Git Revision: :yocto_git:`TBD </yocto-docs/commit/?id=TBD>`

View File

@@ -0,0 +1,383 @@
Release notes for Yocto-4.0.24 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- coreutils: Fix :cve_nist:`2024-0684`
- cpio: Ignore :cve_nist:`2023-7216`
- diffoscope: Fix :cve_nist:`2024-25711`
- ffmpeg: fix :cve_mitre:`2023-47342`, :cve_nist:`2023-50007`, :cve_nist:`2023-50008`,
:cve_nist:`2023-51793`, :cve_nist:`2023-51794`, :cve_nist:`2023-51796`, :cve_nist:`2023-51798`,
:cve_nist:`2024-7055`, :cve_nist:`2024-31578`, :cve_nist:`2024-31582`, :cve_nist:`2024-32230`,
:cve_nist:`2024-35366`, :cve_nist:`2024-35367` and :cve_nist:`2024-35368`
- ghostscript: Fix :cve_nist:`2024-46951`, :cve_nist:`2024-46952`, :cve_nist:`2024-46953`,
:cve_nist:`2024-46955` and :cve_nist:`2024-46956`
- ghostscript: Ignore :cve_nist:`2024-46954`
- glib-2.0: Fix :cve_nist:`2024-52533`
- gnupg: Ignore :cve_nist:`2022-3515`
- grub: Ignore :cve_nist:`2024-1048` and :cve_nist:`2023-4001`
- gstreame1.0: Ignore :cve_nist:`2023-40474`, :cve_nist:`2023-40475`, :cve_nist:`2023-40476`,
:cve_nist:`2023-44429`, :cve_nist:`2023-44446`, :cve_nist:`2023-50186` and :cve_nist:`2024-0444`
- gstreamer1.0-plugins-base: Fix :cve_nist:`2024-47538`, :cve_nist:`2024-47541`,
:cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`, :cve_nist:`2024-47615`
and :cve_nist:`2024-47835`
- gstreamer1.0-plugins-good: Fix :cve_nist:`2024-47537`, :cve_nist:`2024-47539`,
:cve_nist:`2024-47540`, :cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`,
:cve_nist:`2024-47546`, :cve_nist:`2024-47596`, :cve_nist:`2024-47597`, :cve_nist:`2024-47598`,
:cve_nist:`2024-47599`, :cve_nist:`2024-47601`, :cve_nist:`2024-47602`, :cve_nist:`2024-47603`,
:cve_nist:`2024-47606`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`,
:cve_nist:`2024-47776`, :cve_nist:`2024-47777`, :cve_nist:`2024-47778` and :cve_nist:`2024-47834`
- gstreamer1.0: Fix :cve_nist:`2024-47606`
- libarchive: Fix :cve_nist:`2024-20696`
- libpam: Fix :cve_nist:`2024-10041`
- libsdl2: Ignore :cve_nist:`2020-14409` and :cve_nist:`2020-14410`
- libsndfile1: Fix :cve_nist:`2022-33065` and :cve_nist:`2024-50612`
- libsoup-2.4: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532`
- libsoup: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531` and :cve_nist:`2024-52532`
- linux-yocto/5.10: Fix :cve_nist:`2023-52889`, :cve_nist:`2023-52917`, :cve_nist:`2023-52918`,
:cve_nist:`2024-41011`, :cve_nist:`2024-42259`, :cve_nist:`2024-42271`, :cve_nist:`2024-42272`,
:cve_nist:`2024-42280`, :cve_nist:`2024-42283`, :cve_nist:`2024-42284`, :cve_nist:`2024-42285`,
:cve_nist:`2024-42286`, :cve_nist:`2024-42287`, :cve_nist:`2024-42288`, :cve_nist:`2024-42289`,
:cve_nist:`2024-42301`, :cve_nist:`2024-42302`, :cve_nist:`2024-42309`, :cve_nist:`2024-42310`,
:cve_nist:`2024-42311`, :cve_nist:`2024-42313`, :cve_nist:`2024-43828`, :cve_nist:`2024-43856`,
:cve_nist:`2024-43858`, :cve_nist:`2024-43860`, :cve_nist:`2024-43861`, :cve_nist:`2024-43871`,
:cve_nist:`2024-43882`, :cve_nist:`2024-43889`, :cve_nist:`2024-43890`, :cve_nist:`2024-43893`,
:cve_nist:`2024-43894`, :cve_nist:`2024-43907`, :cve_nist:`2024-43908`, :cve_nist:`2024-43914`,
:cve_nist:`2024-44935`, :cve_nist:`2024-44944`, :cve_nist:`2024-44947`, :cve_nist:`2024-44954`,
:cve_nist:`2024-44960`, :cve_nist:`2024-44965`, :cve_nist:`2024-44969`, :cve_nist:`2024-44971`,
:cve_nist:`2024-44987`, :cve_nist:`2024-44988`, :cve_nist:`2024-44989`, :cve_nist:`2024-44990`,
:cve_nist:`2024-44995`, :cve_nist:`2024-44998`, :cve_nist:`2024-44999`, :cve_nist:`2024-45003`,
:cve_nist:`2024-45006`, :cve_nist:`2024-45016`, :cve_nist:`2024-45018`, :cve_nist:`2024-45021`,
:cve_nist:`2024-45025`, :cve_nist:`2024-45026`, :cve_nist:`2024-45028`, :cve_nist:`2024-46673`,
:cve_nist:`2024-46674`, :cve_nist:`2024-46675`, :cve_nist:`2024-46676`, :cve_nist:`2024-46677`,
:cve_nist:`2024-46679`, :cve_nist:`2024-46685`, :cve_nist:`2024-46689`, :cve_nist:`2024-46702`,
:cve_nist:`2024-46707`, :cve_nist:`2024-46714`, :cve_nist:`2024-46719`, :cve_nist:`2024-46721`,
:cve_nist:`2024-46722`, :cve_nist:`2024-46723`, :cve_nist:`2024-46724`, :cve_nist:`2024-46725`,
:cve_nist:`2024-46731`, :cve_nist:`2024-46737`, :cve_nist:`2024-46738`, :cve_nist:`2024-46739`,
:cve_nist:`2024-46740`, :cve_nist:`2024-46743`, :cve_nist:`2024-46744`, :cve_nist:`2024-46747`,
:cve_nist:`2024-46750`, :cve_nist:`2024-46755`, :cve_nist:`2024-46759`, :cve_nist:`2024-46761`,
:cve_nist:`2024-46763`, :cve_nist:`2024-46771`, :cve_nist:`2024-46777`, :cve_nist:`2024-46780`,
:cve_nist:`2024-46781`, :cve_nist:`2024-46782`, :cve_nist:`2024-46783`, :cve_nist:`2024-46791`,
:cve_nist:`2024-46798`, :cve_nist:`2024-46800`, :cve_nist:`2024-46804`, :cve_nist:`2024-46814`,
:cve_nist:`2024-46815`, :cve_nist:`2024-46817`, :cve_nist:`2024-46818`, :cve_nist:`2024-46819`,
:cve_nist:`2024-46822`, :cve_nist:`2024-46828`, :cve_nist:`2024-46829`, :cve_nist:`2024-46832`,
:cve_nist:`2024-46840`, :cve_nist:`2024-46844`, :cve_nist:`2024-47659`, :cve_nist:`2024-47660`,
:cve_nist:`2024-47663`, :cve_nist:`2024-47667`, :cve_nist:`2024-47668`, :cve_nist:`2024-47669`,
:cve_nist:`2024-47679`, :cve_nist:`2024-47684`, :cve_nist:`2024-47685`, :cve_nist:`2024-47692`,
:cve_nist:`2024-47697`, :cve_nist:`2024-47698`, :cve_nist:`2024-47699`, :cve_nist:`2024-47701`,
:cve_nist:`2024-47705`, :cve_nist:`2024-47706`, :cve_nist:`2024-47710`, :cve_nist:`2024-47712`,
:cve_nist:`2024-47713`, :cve_nist:`2024-47718`, :cve_nist:`2024-47723`, :cve_nist:`2024-47735`,
:cve_nist:`2024-47737`, :cve_nist:`2024-47739`, :cve_nist:`2024-47742`, :cve_nist:`2024-47747`,
:cve_nist:`2024-47748`, :cve_nist:`2024-47749`, :cve_nist:`2024-47757`, :cve_nist:`2024-49851`,
:cve_nist:`2024-49858`, :cve_nist:`2024-49860`, :cve_nist:`2024-49863`, :cve_nist:`2024-49867`,
:cve_nist:`2024-49868`, :cve_nist:`2024-49875`, :cve_nist:`2024-49877`, :cve_nist:`2024-49878`,
:cve_nist:`2024-49879`, :cve_nist:`2024-49881`, :cve_nist:`2024-49882`, :cve_nist:`2024-49883`,
:cve_nist:`2024-49884`, :cve_nist:`2024-49889`, :cve_nist:`2024-49890`, :cve_nist:`2024-49892`,
:cve_nist:`2024-49894`, :cve_nist:`2024-49895`, :cve_nist:`2024-49896`, :cve_nist:`2024-49900`,
:cve_nist:`2024-49902`, :cve_nist:`2024-49903`, :cve_nist:`2024-49907`, :cve_nist:`2024-49913`,
:cve_nist:`2024-49924`, :cve_nist:`2024-49930`, :cve_nist:`2024-49933`, :cve_nist:`2024-49936`,
:cve_nist:`2024-49938`, :cve_nist:`2024-49944`, :cve_nist:`2024-49948`, :cve_nist:`2024-49949`,
:cve_nist:`2024-49952`, :cve_nist:`2024-49955`, :cve_nist:`2024-49957`, :cve_nist:`2024-49958`,
:cve_nist:`2024-49959`, :cve_nist:`2024-49962`, :cve_nist:`2024-49963`, :cve_nist:`2024-49965`,
:cve_nist:`2024-49966`, :cve_nist:`2024-49969`, :cve_nist:`2024-49973`, :cve_nist:`2024-49975`,
:cve_nist:`2024-49977`, :cve_nist:`2024-49981`, :cve_nist:`2024-49982`, :cve_nist:`2024-49983`,
:cve_nist:`2024-49985`, :cve_nist:`2024-49995`, :cve_nist:`2024-49997`, :cve_nist:`2024-50001`,
:cve_nist:`2024-50006`, :cve_nist:`2024-50007`, :cve_nist:`2024-50008`, :cve_nist:`2024-50013`,
:cve_nist:`2024-50015`, :cve_nist:`2024-50024`, :cve_nist:`2024-50033`, :cve_nist:`2024-50035`,
:cve_nist:`2024-50039`, :cve_nist:`2024-50040`, :cve_nist:`2024-50044`, :cve_nist:`2024-50045`,
:cve_nist:`2024-50046`, :cve_nist:`2024-50049`, :cve_nist:`2024-50059`, :cve_nist:`2024-50095`,
:cve_nist:`2024-50096`, :cve_nist:`2024-50179`, :cve_nist:`2024-50180`, :cve_nist:`2024-50181`,
:cve_nist:`2024-50184` and :cve_nist:`2024-50188`
- linux-yocto/5.15: Fix :cve_nist:`2022-48695`, :cve_nist:`2023-52530`, :cve_nist:`2023-52917`,
:cve_nist:`2024-45009`, :cve_nist:`2024-46714`, :cve_nist:`2024-46719`, :cve_nist:`2024-46721`,
:cve_nist:`2024-46722`, :cve_nist:`2024-46723`, :cve_nist:`2024-46724`, :cve_nist:`2024-46725`,
:cve_nist:`2024-46731`, :cve_nist:`2024-46732`, :cve_nist:`2024-46737`, :cve_nist:`2024-46738`,
:cve_nist:`2024-46739`, :cve_nist:`2024-46740`, :cve_nist:`2024-46743`, :cve_nist:`2024-46744`,
:cve_nist:`2024-46746`, :cve_nist:`2024-46747`, :cve_nist:`2024-46750`, :cve_nist:`2024-46755`,
:cve_nist:`2024-46759`, :cve_nist:`2024-46761`, :cve_nist:`2024-46763`, :cve_nist:`2024-46771`,
:cve_nist:`2024-46777`, :cve_nist:`2024-46780`, :cve_nist:`2024-46781`, :cve_nist:`2024-46782`,
:cve_nist:`2024-46783`, :cve_nist:`2024-46791`, :cve_nist:`2024-46795`, :cve_nist:`2024-46798`,
:cve_nist:`2024-46800`, :cve_nist:`2024-46804`, :cve_nist:`2024-46805`, :cve_nist:`2024-46807`,
:cve_nist:`2024-46810`, :cve_nist:`2024-46814`, :cve_nist:`2024-46815`, :cve_nist:`2024-46817`,
:cve_nist:`2024-46818`, :cve_nist:`2024-46819`, :cve_nist:`2024-46822`, :cve_nist:`2024-46828`,
:cve_nist:`2024-46829`, :cve_nist:`2024-46832`, :cve_nist:`2024-46840`, :cve_nist:`2024-46844`,
:cve_nist:`2024-47659`, :cve_nist:`2024-47660`, :cve_nist:`2024-47663`, :cve_nist:`2024-47665`,
:cve_nist:`2024-47667`, :cve_nist:`2024-47668`, :cve_nist:`2024-47669`, :cve_nist:`2024-47674`,
:cve_nist:`2024-47679`, :cve_nist:`2024-47684`, :cve_nist:`2024-47685`, :cve_nist:`2024-47690`,
:cve_nist:`2024-47692`, :cve_nist:`2024-47693`, :cve_nist:`2024-47695`, :cve_nist:`2024-47696`,
:cve_nist:`2024-47697`, :cve_nist:`2024-47698`, :cve_nist:`2024-47699`, :cve_nist:`2024-47701`,
:cve_nist:`2024-47705`, :cve_nist:`2024-47706`, :cve_nist:`2024-47710`, :cve_nist:`2024-47712`,
:cve_nist:`2024-47713`, :cve_nist:`2024-47718`, :cve_nist:`2024-47720`, :cve_nist:`2024-47723`,
:cve_nist:`2024-47734`, :cve_nist:`2024-47735`, :cve_nist:`2024-47737`, :cve_nist:`2024-47739`,
:cve_nist:`2024-47742`, :cve_nist:`2024-47747`, :cve_nist:`2024-47748`, :cve_nist:`2024-47749`,
:cve_nist:`2024-47757`, :cve_nist:`2024-49851`, :cve_nist:`2024-49852`, :cve_nist:`2024-49854`,
:cve_nist:`2024-49856`, :cve_nist:`2024-49858`, :cve_nist:`2024-49860`, :cve_nist:`2024-49863`,
:cve_nist:`2024-49866`, :cve_nist:`2024-49867`, :cve_nist:`2024-49868`, :cve_nist:`2024-49871`,
:cve_nist:`2024-49875`, :cve_nist:`2024-49877`, :cve_nist:`2024-49878`, :cve_nist:`2024-49879`,
:cve_nist:`2024-49881`, :cve_nist:`2024-49882`, :cve_nist:`2024-49883`, :cve_nist:`2024-49884`,
:cve_nist:`2024-49886`, :cve_nist:`2024-49889`, :cve_nist:`2024-49890`, :cve_nist:`2024-49892`,
:cve_nist:`2024-49894`, :cve_nist:`2024-49895`, :cve_nist:`2024-49896`, :cve_nist:`2024-49900`,
:cve_nist:`2024-49902`, :cve_nist:`2024-49903`, :cve_nist:`2024-49907`, :cve_nist:`2024-49913`,
:cve_nist:`2024-49924`, :cve_nist:`2024-49927`, :cve_nist:`2024-49930`, :cve_nist:`2024-49933`,
:cve_nist:`2024-49935`, :cve_nist:`2024-49936`, :cve_nist:`2024-49938`, :cve_nist:`2024-49944`,
:cve_nist:`2024-49946`, :cve_nist:`2024-49948`, :cve_nist:`2024-49949`, :cve_nist:`2024-49952`,
:cve_nist:`2024-49954`, :cve_nist:`2024-49955`, :cve_nist:`2024-49957`, :cve_nist:`2024-49958`,
:cve_nist:`2024-49959`, :cve_nist:`2024-49962`, :cve_nist:`2024-49963`, :cve_nist:`2024-49965`,
:cve_nist:`2024-49966`, :cve_nist:`2024-49969`, :cve_nist:`2024-49973`, :cve_nist:`2024-49975`,
:cve_nist:`2024-49977`, :cve_nist:`2024-49981`, :cve_nist:`2024-49982`, :cve_nist:`2024-49983`,
:cve_nist:`2024-49985`, :cve_nist:`2024-49995`, :cve_nist:`2024-49997`, :cve_nist:`2024-50000`,
:cve_nist:`2024-50001`, :cve_nist:`2024-50002`, :cve_nist:`2024-50003`, :cve_nist:`2024-50006`,
:cve_nist:`2024-50007`, :cve_nist:`2024-50008`, :cve_nist:`2024-50013`, :cve_nist:`2024-50015`,
:cve_nist:`2024-50019`, :cve_nist:`2024-50024`, :cve_nist:`2024-50031`, :cve_nist:`2024-50033`,
:cve_nist:`2024-50035`, :cve_nist:`2024-50038`, :cve_nist:`2024-50039`, :cve_nist:`2024-50040`,
:cve_nist:`2024-50041`, :cve_nist:`2024-50044`, :cve_nist:`2024-50045`, :cve_nist:`2024-50046`,
:cve_nist:`2024-50049`, :cve_nist:`2024-50059`, :cve_nist:`2024-50062`, :cve_nist:`2024-50074`,
:cve_nist:`2024-50082`, :cve_nist:`2024-50083`, :cve_nist:`2024-50093`, :cve_nist:`2024-50095`,
:cve_nist:`2024-50096`, :cve_nist:`2024-50099`, :cve_nist:`2024-50101`, :cve_nist:`2024-50103`,
:cve_nist:`2024-50110`, :cve_nist:`2024-50115`, :cve_nist:`2024-50116`, :cve_nist:`2024-50117`,
:cve_nist:`2024-50127`, :cve_nist:`2024-50128`, :cve_nist:`2024-50131`, :cve_nist:`2024-50134`,
:cve_nist:`2024-50141`, :cve_nist:`2024-50142`, :cve_nist:`2024-50143`, :cve_nist:`2024-50148`,
:cve_nist:`2024-50150`, :cve_nist:`2024-50151`, :cve_nist:`2024-50153`, :cve_nist:`2024-50154`,
:cve_nist:`2024-50156`, :cve_nist:`2024-50160`, :cve_nist:`2024-50162`, :cve_nist:`2024-50163`,
:cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50171`, :cve_nist:`2024-50179`,
:cve_nist:`2024-50180`, :cve_nist:`2024-50181`, :cve_nist:`2024-50182`, :cve_nist:`2024-50184`,
:cve_nist:`2024-50185`, :cve_nist:`2024-50186`, :cve_nist:`2024-50188`, :cve_nist:`2024-50189`,
:cve_nist:`2024-50191`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`,
:cve_nist:`2024-50195`, :cve_nist:`2024-50196`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`,
:cve_nist:`2024-50202`, :cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`,
:cve_nist:`2024-50229`, :cve_nist:`2024-50230`, :cve_nist:`2024-50232`, :cve_nist:`2024-50233`,
:cve_nist:`2024-50234`, :cve_nist:`2024-50236`, :cve_nist:`2024-50237`, :cve_nist:`2024-50244`,
:cve_nist:`2024-50245`, :cve_nist:`2024-50247`, :cve_nist:`2024-50251`, :cve_nist:`2024-50257`,
:cve_nist:`2024-50259`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`, :cve_nist:`2024-50265`,
:cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`, :cve_nist:`2024-50273`,
:cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`, :cve_nist:`2024-50287`,
:cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50299`, :cve_nist:`2024-50301`,
:cve_nist:`2024-50302`, :cve_nist:`2024-53052`, :cve_nist:`2024-53055`, :cve_nist:`2024-53057`,
:cve_nist:`2024-53058`, :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`,
:cve_nist:`2024-53063`, :cve_nist:`2024-53066`, :cve_nist:`2024-53088`, :cve_nist:`2024-53096`,
:cve_nist:`2024-53101`, :cve_nist:`2024-53103`, :cve_nist:`2024-53145`, :cve_nist:`2024-53146`,
:cve_nist:`2024-53150`, :cve_nist:`2024-53151`, :cve_nist:`2024-53155`, :cve_nist:`2024-53156`,
:cve_nist:`2024-53157`, :cve_nist:`2024-53165`, :cve_nist:`2024-53171`, :cve_nist:`2024-53173`,
:cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53237`, :cve_nist:`2024-56567`,
:cve_nist:`2024-56572`, :cve_nist:`2024-56574`, :cve_nist:`2024-56578`, :cve_nist:`2024-56581`,
:cve_nist:`2024-56593`, :cve_nist:`2024-56600`, :cve_nist:`2024-56601`, :cve_nist:`2024-56602`,
:cve_nist:`2024-56603`, :cve_nist:`2024-56605`, :cve_nist:`2024-56606`, :cve_nist:`2024-56614`,
:cve_nist:`2024-56622`, :cve_nist:`2024-56623`, :cve_nist:`2024-56629`, :cve_nist:`2024-56634`,
:cve_nist:`2024-56640`, :cve_nist:`2024-56642`, :cve_nist:`2024-56643`, :cve_nist:`2024-56648`,
:cve_nist:`2024-56650`, :cve_nist:`2024-56659`, :cve_nist:`2024-56662`, :cve_nist:`2024-56670`,
:cve_nist:`2024-56688`, :cve_nist:`2024-56694`, :cve_nist:`2024-56704`, :cve_nist:`2024-56708`,
:cve_nist:`2024-56720`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`, :cve_nist:`2024-56726`,
:cve_nist:`2024-56728`, :cve_nist:`2024-56739`, :cve_nist:`2024-56741`, :cve_nist:`2024-56745`,
:cve_nist:`2024-56746`, :cve_nist:`2024-56747`, :cve_nist:`2024-56748`, :cve_nist:`2024-56754`,
:cve_nist:`2024-56756`, :cve_nist:`2024-56770`, :cve_nist:`2024-56774`, :cve_nist:`2024-56776`,
:cve_nist:`2024-56777`, :cve_nist:`2024-56778`, :cve_nist:`2024-56779`, :cve_nist:`2024-56780`,
:cve_nist:`2024-56781`, :cve_nist:`2024-56785` and :cve_nist:`2024-56787`
- ovmf: Fix :cve_nist:`2022-36763`, :cve_nist:`2022-36764`, :cve_nist:`2022-36765`,
:cve_nist:`2023-45229`, :cve_nist:`2023-45230`, :cve_nist:`2023-45231`, :cve_nist:`2023-45232`,
:cve_nist:`2023-45233`, :cve_nist:`2023-45234`, :cve_nist:`2023-45235`, :cve_nist:`2023-45236`,
:cve_nist:`2023-45237`, :cve_nist:`2024-1298` and :cve_nist:`2024-38796`
- pixman: Ignore :cve_nist:`2023-37769`
- python3: Fix :cve_nist:`2024-9287`, :cve_nist:`2024-11168` and :cve_nist:`2024-50602`
- python3-pip: Fix :cve_nist:`2023-5752`
- python3-requests: Fix :cve_nist:`2024-35195`
- python3-zipp: Fix :cve_nist:`2024-5569`
- qemu: Fix :cve_nist:`2024-3446`, :cve_nist:`2024-3447` and :cve_nist:`2024-6505`
- qemu: Ignore :cve_nist:`2022-36648`
- subversion: Fix :cve_nist:`2024-46901`
- tiff: Fix :cve_nist:`2023-3164`
- tiff: Ignore :cve_nist:`2023-2731`
- webkitgtk: Fix :cve_nist:`2024-40776` and :cve_nist:`2024-40780`
- xserver-xorg: Fix :cve_nist:`2024-9632`
- xwayland: Fix :cve_nist:`2023-5380` and :cve_nist:`2024-0229`
Fixes in Yocto-4.0.24
~~~~~~~~~~~~~~~~~~~~~
- base-passwd: Add the sgx group
- base-passwd: Regenerate the patches
- base-passwd: Update the status for two patches
- base-passwd: Update to 3.5.52
- base-passwd: add the wheel group
- base-passwd: fix patchreview warning
- bitbake: fetch2: use persist_data context managers
- bitbake: fetch/wget: Increase timeout to 100s from 30s
- bitbake: persist_data: close connection in SQLTable __exit__
- build-appliance-image: Update to kirkstone head revision
- builder: set :term:`CVE_PRODUCT`
- contributor-guide: submit-changes.rst: suggest to remove the git signature
- cve-update-nvd2-native: Tweak to work better with NFS :term:`DL_DIR`
- dbus: disable assertions and enable only modular tests
- do_package/sstate/sstatesig: Change timestamp clamping to hash output only
- docs: Gather dependencies in poky.yaml.in
- docs: standards.md: add a section on admonitions
- gstreamer1.0: improve test reliability
- linux-yocto/5.10: update to v5.10.227
- linux-yocto/5.15: update to v5.15.175
- llvm: reduce size of -dbg package
- lttng-modules: fix build error after kernel update to 5.15.171
- migration-guides: add release notes for 4.0.23
- ninja: fix build with python 3.13
- oeqa/utils/gitarchive: Return tag name and improve exclude handling
- ovmf-native: remove .pyc files from install
- package.bbclass: Use shlex instead of deprecated pipes
- package_rpm: restrict rpm to 4 threads
- package_rpm: use zstd's default compression level
- poky.conf: add new tested distros
- poky.conf: bump version for 4.0.24
- poky.yaml.in: add missing locales dependency
- python3: upgrade to 3.10.16
- ref-manual: SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication
- ref-manual: classes: fix bin_package description
- ref-manual: devtool-reference: add warning note on deploy-target and shared objects
- ref-manual: move runtime-testing section to the test-manual
- ref-manual: packages: move ptest section to the test-manual
- ref-manual: system-requirements: update list of supported distros
- ref-manual: use standardized method accross both ubuntu and debian for locale install
- resulttool: Add --logfile-archive option to store mode
- resulttool: Allow store to filter to specific revisions
- resulttool: Clean up repoducible build logs
- resulttool: Fix passthrough of --all files in store mode
- resulttool: Handle ltp rawlogs as well as ptest
- resulttool: Improve repo layout for oeselftest results
- resulttool: Trim the precision of duration information
- resulttool: Use single space indentation in json output
- rootfs-postcommands.bbclass: make opkg status reproducible
- rxvt-unicode.inc: disable the terminfo installation by setting TIC to :
- sanity: check for working user namespaces
- scripts/install-buildtools: Update to 4.0.22
- selftest/reproducible: Clean up pathnames
- selftest/reproducible: Drop rawlogs
- test-manual: reproducible-builds.rst: document :term:`OEQA_REPRODUCIBLE_TEST_TARGET` and
:term:`OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS`
- test-manual: reproducible-builds.rst: show how to build a single package
- toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
- tzdata & tzcode-native: upgrade 2024b
- udev-extraconf: fix network.sh script did not configure hotplugged interfaces
- unzip: Fix configure tests to use modern C
- webkitgtk: Fix build on 32bit arm
- webkitgtk: fix perl-native dependency
- webkitgtk: reduce size of -dbg package
- wireless-regdb: upgrade to 2024.10.07
Known Issues in Yocto-4.0.24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic
- Alex Kiernan
- Alexander Kanavin
- Alexandre Belloni
- Antonin Godard
- Archana Polampalli
- Bruce Ashfield
- Changqing Li
- Chen Qi
- Chris Laplante
- Divya Chellam
- Ernst Persson
- Guénaël Muller
- Hitendra Prajapati
- Hongxu Jia
- Jiaying Song
- Jinfeng Wang
- Khem Raj
- Lee Chee Yang
- Liyin Zhang
- Louis Rannou
- Markus Volk
- Mikko Rapeli
- Ovidiu Panait
- Peter Kjellerstedt
- Peter Marko
- Regis Dargent
- Richard Purdie
- Rohini Sangam
- Ross Burton
- Soumya Sambu
- Steve Sakoman
- Trevor Gamblin
- Vijay Anusuri
- Wang Mingyu
- Yogita Urade
- Zahir Hussain
Repositories / Downloads for Yocto-4.0.24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.24 </poky/log/?h=yocto-4.0.24>`
- Git Revision: :yocto_git:`f50532593651dff82bc952288d786c55038c2c86 </poky/commit/?id=f50532593651dff82bc952288d786c55038c2c86>`
- Release Artefact: poky-f50532593651dff82bc952288d786c55038c2c86
- sha: 0aa062d19510394748db9a2d6ded2d764f435383296d9c94fb6b25755280556e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/poky-f50532593651dff82bc952288d786c55038c2c86.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/poky-f50532593651dff82bc952288d786c55038c2c86.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.24 </openembedded-core/log/?h=yocto-4.0.24>`
- Git Revision: :oe_git:`a270d4c957259761bcc7382fcc54642a02f9fc7d </openembedded-core/commit/?id=a270d4c957259761bcc7382fcc54642a02f9fc7d>`
- Release Artefact: oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d
- sha: b08b9b16c8ffa587d521ad28e24e38c79d757a6f0839d18165ebac3081a34b68
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/oecore-a270d4c957259761bcc7382fcc54642a02f9fc7d.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.24 </meta-mingw/log/?h=yocto-4.0.24>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.24 </meta-gplv2/log/?h=yocto-4.0.24>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.24 </bitbake/log/?h=yocto-4.0.24>`
- Git Revision: :oe_git:`3f88b005244a0afb5d5c7260e54a94a453ec9b3e </bitbake/commit/?id=3f88b005244a0afb5d5c7260e54a94a453ec9b3e>`
- Release Artefact: bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e
- sha: 31f442b72ec7d81ca75509b1a7179c3fe3942528b1e31c823b21a413244bd15b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.24/bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.24/bitbake-3f88b005244a0afb5d5c7260e54a94a453ec9b3e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.24 </yocto-docs/log/?h=yocto-4.0.24>`
- Git Revision: :yocto_git:`3128bf149f40928e6c2a3e264590a0c6c9778c6a </yocto-docs/commit/?id=3128bf149f40928e6c2a3e264590a0c6c9778c6a>`

View File

@@ -0,0 +1,167 @@
Release notes for Yocto-4.0.25 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- avahi: Fix :cve_nist:`2024-52616`
- binutils: Fix :cve_nist:`2024-53589`
- gdb: Fix :cve_nist:`2024-53589`
- go: Fix :cve_nist:`2024-34155`, :cve_nist:`2024-34156`, :cve_nist:`2024-34158` and
:cve_nist:`2024-45336`
- gstreamer1.0: Ignore :cve_nist:`2024-47537`, :cve_nist:`2024-47539`, :cve_nist:`2024-47540`,
:cve_nist:`2024-47543`, :cve_nist:`2024-47544`, :cve_nist:`2024-47545`, :cve_nist:`2024-47538`,
:cve_nist:`2024-47541`, :cve_nist:`2024-47542`, :cve_nist:`2024-47600`, :cve_nist:`2024-47607`,
:cve_nist:`2024-47615`, :cve_nist:`2024-47835`, :cve_nist:`2024-47546`, :cve_nist:`2024-47596`,
:cve_nist:`2024-47597`, :cve_nist:`2024-47598`, :cve_nist:`2024-47599`, :cve_nist:`2024-47601`,
:cve_nist:`2024-47777`, :cve_nist:`2024-47778`, :cve_nist:`2024-47834`, :cve_nist:`2024-47602`,
:cve_nist:`2024-47603`, :cve_nist:`2024-47613`, :cve_nist:`2024-47774`, :cve_nist:`2024-47775`
and :cve_nist:`2024-47776`
- linux-yocto/5.15: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-55916`, :cve_nist:`2024-56369`,
:cve_nist:`2024-56626`, :cve_nist:`2024-56627`, :cve_nist:`2024-56715`, :cve_nist:`2024-56716`,
:cve_nist:`2024-57802`, :cve_nist:`2024-57807`, :cve_nist:`2024-57841`, :cve_nist:`2024-57890`,
:cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57910`, :cve_nist:`2024-57911`,
:cve_nist:`2024-57938`, :cve_nist:`2024-57951`, :cve_nist:`2025-21631`, :cve_nist:`2025-21665`,
:cve_nist:`2025-21666`, :cve_nist:`2025-21669`, :cve_nist:`2025-21680`, :cve_nist:`2025-21683`,
:cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699`
- ofono: Fix :cve_nist:`2024-7539`, :cve_nist:`2024-7540`, :cve_nist:`2024-7541`,
:cve_nist:`2024-7542`, :cve_nist:`2024-7543`, :cve_nist:`2024-7544`, :cve_nist:`2024-7545`,
:cve_nist:`2024-7546` and :cve_nist:`2024-7547`
- openssl: Fix :cve_nist:`2024-13176`
- rsync: Fix :cve_nist:`2024-12084`, :cve_nist:`2024-12085`, :cve_nist:`2024-12086`,
:cve_nist:`2024-12087`, :cve_nist:`2024-12088` and :cve_nist:`2024-12747`
- ruby: Fix :cve_nist:`2024-49761`
- socat: Fix :cve_nist:`2024-54661`
- vte: Fix :cve_nist:`2024-37535`
- wget: Fix :cve_nist:`2024-10524`
Fixes in Yocto-4.0.25
~~~~~~~~~~~~~~~~~~~~~
- bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48
- build-appliance-image: Update to kirkstone head revision
- classes-global/insane: Look up all runtime providers for file-rdeps
- classes/nativesdk: also override :term:`TUNE_PKGARCH`
- classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture
- cmake: apply parallel build settings to ptest tasks
- dev-manual/building: document the initramfs-framework recipe
- docs: Update autobuilder URLs to valkyrie
- documentation: Fix typo in standards.md
- glibc: Suppress GCC -Os warning on user2netname for sunrpc
- glibc: stable 2.35 branch updates
- lib/packagedata.py: Add API to iterate over rprovides
- linux-yocto/5.15: upgrade to v5.15.178
- migration-guides: add release notes for 4.0.24
- openssl: upgrade to 3.0.16
- poky.conf: bump version for 4.0.25
- python3: Treat UID/GID overflow as failure
- rsync: Delete pedantic errors re-ordering patch
- rsync: upgrade to 3.2.7
- rust-common.bbclass: soft assignment for RUSTLIB path
- scripts/install-buildtools: Update to 4.0.23
- test-manual/reproducible-builds: fix reproducible links
Known Issues in Yocto-4.0.25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Alexander Kanavin
- Antonin Godard
- Archana Polampalli
- Bruce Ashfield
- Deepesh Varatharajan
- Divya Chellam
- Joshua Watt
- Khem Raj
- Lee Chee Yang
- Nikhil R
- Pedro Ferreira
- Peter Marko
- Praveen Kumar
- Richard Purdie
- Ross Burton
- Simon A. Eugster
- Steve Sakoman
- Yash Shinde
- Yogita Urade
- Zhang Peng
Repositories / Downloads for Yocto-4.0.25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.25 </poky/log/?h=yocto-4.0.25>`
- Git Revision: :yocto_git:`b5aa03f336c121269551f9e7baed4c677c76bb39 </poky/commit/?id=b5aa03f336c121269551f9e7baed4c677c76bb39>`
- Release Artefact: poky-b5aa03f336c121269551f9e7baed4c677c76bb39
- sha: 7afbcb25f0dd89a4fb6dd4c5945061705ef9ce79a6863806278603273c2b3b4a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/poky-b5aa03f336c121269551f9e7baed4c677c76bb39.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.25 </openembedded-core/log/?h=yocto-4.0.25>`
- Git Revision: :oe_git:`5a794fd244f7fdeb426bd5e3def6b4effc0e8c62 </openembedded-core/commit/?id=5a794fd244f7fdeb426bd5e3def6b4effc0e8c62>`
- Release Artefact: oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62
- sha: 8fc93109693e5f4702b3fe0633b6be833605291b3d595dc8bdeb6379f40cd2de
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/oecore-5a794fd244f7fdeb426bd5e3def6b4effc0e8c62.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.25 </meta-mingw/log/?h=yocto-4.0.25>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.25 </meta-gplv2/log/?h=yocto-4.0.25>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.25 </bitbake/log/?h=yocto-4.0.25>`
- Git Revision: :oe_git:`e71f1ce53cf3b8320caa481ae62d1ce2900c4670 </bitbake/commit/?id=e71f1ce53cf3b8320caa481ae62d1ce2900c4670>`
- Release Artefact: bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670
- sha: 007eef35174586c85b233f4ec91578956fe21e0236f7ca2c3f90f9d034f94b5b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.25/bitbake-e71f1ce53cf3b8320caa481ae62d1ce2900c4670.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.25 </yocto-docs/log/?h=yocto-4.0.25>`
- Git Revision: :yocto_git:`c6dce0c77481dee7b0a0fcdc803f755ceccef234 </yocto-docs/commit/?id=c6dce0c77481dee7b0a0fcdc803f755ceccef234>`

View File

@@ -0,0 +1,263 @@
Release notes for Yocto-4.0.26 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve_nist:`2024-11187` and :cve_nist:`2024-12705`
- binutils: Fix :cve_nist:`2025-0840`
- elfutils: Fix :cve_nist:`2025-1352` and :cve_nist:`2025-1372`
- ffmpeg: Fix CVE-2024-28661, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`, :cve_nist:`2024-36616`,
:cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2025-0518` and :cve_nist:`2025-25473`
- ffmpeg: Ignore :cve_nist:`2023-46407`, :cve_nist:`2023-47470`, :cve_nist:`2024-7272`,
:cve_nist:`2024-22860`, :cve_nist:`2024-22861` and :cve_nist:`2024-22862`
- freetype: Fix :cve_nist:`2025-27363`
- gnutls: Fix :cve_nist:`2024-12243`
- grub: Fix :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`,
:cve_nist:`2024-45777`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`,
:cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-45783`, :cve_nist:`2024-56737`,
:cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`,
:cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, :cve_nist:`2025-0678`,
:cve_nist:`2025-0690`, :cve_nist:`2025-1118` and :cve_nist:`2025-1125`
- gstreamer1.0-rtsp-server: fix :cve_nist:`2024-44331`
- libarchive: Fix :cve_nist:`2025-25724`
- libarchive: Ignore :cve_nist:`2025-1632`
- libcap: Fix :cve_nist:`2025-1390`
- linux-yocto/5.10: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-43098`, :cve_nist:`2024-47143`,
:cve_nist:`2024-48881`, :cve_nist:`2024-50051`, :cve_nist:`2024-50074`, :cve_nist:`2024-50082`,
:cve_nist:`2024-50083`, :cve_nist:`2024-50099`, :cve_nist:`2024-50115`, :cve_nist:`2024-50116`,
:cve_nist:`2024-50117`, :cve_nist:`2024-50142`, :cve_nist:`2024-50148`, :cve_nist:`2024-50150`,
:cve_nist:`2024-50151`, :cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50171`,
:cve_nist:`2024-50185`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`,
:cve_nist:`2024-50195`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`, :cve_nist:`2024-50202`,
:cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`, :cve_nist:`2024-50229`,
:cve_nist:`2024-50230`, :cve_nist:`2024-50233`, :cve_nist:`2024-50234`, :cve_nist:`2024-50236`,
:cve_nist:`2024-50237`, :cve_nist:`2024-50251`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`,
:cve_nist:`2024-50265`, :cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`,
:cve_nist:`2024-50273`, :cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`,
:cve_nist:`2024-50287`, :cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50299`,
:cve_nist:`2024-50301`, :cve_nist:`2024-50302`, :cve_nist:`2024-53042`, :cve_nist:`2024-53052`,
:cve_nist:`2024-53057`, :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`,
:cve_nist:`2024-53063`, :cve_nist:`2024-53066`, :cve_nist:`2024-53096`, :cve_nist:`2024-53097`,
:cve_nist:`2024-53101`, :cve_nist:`2024-53103`, :cve_nist:`2024-53104`, :cve_nist:`2024-53145`,
:cve_nist:`2024-53146`, :cve_nist:`2024-53150`, :cve_nist:`2024-53155`, :cve_nist:`2024-53156`,
:cve_nist:`2024-53157`, :cve_nist:`2024-53161`, :cve_nist:`2024-53165`, :cve_nist:`2024-53171`,
:cve_nist:`2024-53173`, :cve_nist:`2024-53174`, :cve_nist:`2024-53194`, :cve_nist:`2024-53197`,
:cve_nist:`2024-53217`, :cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53237`,
:cve_nist:`2024-53239`, :cve_nist:`2024-55916`, :cve_nist:`2024-56548`, :cve_nist:`2024-56558`,
:cve_nist:`2024-56567`, :cve_nist:`2024-56568`, :cve_nist:`2024-56569`, :cve_nist:`2024-56572`,
:cve_nist:`2024-56574`, :cve_nist:`2024-56581`, :cve_nist:`2024-56587`, :cve_nist:`2024-56593`,
:cve_nist:`2024-56595`, :cve_nist:`2024-56596`, :cve_nist:`2024-56598`, :cve_nist:`2024-56600`,
:cve_nist:`2024-56601`, :cve_nist:`2024-56602`, :cve_nist:`2024-56603`, :cve_nist:`2024-56605`,
:cve_nist:`2024-56606`, :cve_nist:`2024-56615`, :cve_nist:`2024-56619`, :cve_nist:`2024-56623`,
:cve_nist:`2024-56629`, :cve_nist:`2024-56634`, :cve_nist:`2024-56642`, :cve_nist:`2024-56643`,
:cve_nist:`2024-56648`, :cve_nist:`2024-56650`, :cve_nist:`2024-56659`, :cve_nist:`2024-56662`,
:cve_nist:`2024-56670`, :cve_nist:`2024-56688`, :cve_nist:`2024-56698`, :cve_nist:`2024-56704`,
:cve_nist:`2024-56716`, :cve_nist:`2024-56720`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`,
:cve_nist:`2024-56728`, :cve_nist:`2024-56739`, :cve_nist:`2024-56746`, :cve_nist:`2024-56747`,
:cve_nist:`2024-56748`, :cve_nist:`2024-56754`, :cve_nist:`2024-56756`, :cve_nist:`2024-56770`,
:cve_nist:`2024-56779`, :cve_nist:`2024-56780`, :cve_nist:`2024-56781`, :cve_nist:`2024-56785`,
:cve_nist:`2024-57802`, :cve_nist:`2024-57807`, :cve_nist:`2024-57850`, :cve_nist:`2024-57874`,
:cve_nist:`2024-57890`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`,
:cve_nist:`2024-57902`, :cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57913`,
:cve_nist:`2024-57922`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57946`,
:cve_nist:`2024-57951`, :cve_nist:`2025-21638`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`,
:cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699`
- linux-yocto/5.15: Fix :cve_nist:`2024-57979`, :cve_nist:`2024-58034`, :cve_nist:`2024-58052`,
:cve_nist:`2024-58055`, :cve_nist:`2024-58058`, :cve_nist:`2024-58063`, :cve_nist:`2024-58069`,
:cve_nist:`2024-58071`, :cve_nist:`2024-58076`, :cve_nist:`2024-58083`, :cve_nist:`2025-21700`,
:cve_nist:`2025-21703`, :cve_nist:`2025-21715`, :cve_nist:`2025-21722`, :cve_nist:`2025-21727`,
:cve_nist:`2025-21731`, :cve_nist:`2025-21753`, :cve_nist:`2025-21756`, :cve_nist:`2025-21760`,
:cve_nist:`2025-21761`, :cve_nist:`2025-21762`, :cve_nist:`2025-21763`, :cve_nist:`2025-21764`,
:cve_nist:`2025-21796`, :cve_nist:`2025-21811`, :cve_nist:`2025-21887`, :cve_nist:`2025-21898`,
:cve_nist:`2025-21904`, :cve_nist:`2025-21905`, :cve_nist:`2025-21912`, :cve_nist:`2025-21917`,
:cve_nist:`2025-21919`, :cve_nist:`2025-21920`, :cve_nist:`2025-21922`, :cve_nist:`2025-21934`,
:cve_nist:`2025-21943`, :cve_nist:`2025-21948` and :cve_nist:`2025-21951`
- libpcre2: Ignore :cve_nist:`2022-1586`
- libtasn1: Fix :cve_nist:`2024-12133`
- libxml2: Fix :cve_nist:`2022-49043`, :cve_nist:`2024-56171`, :cve_nist:`2025-24928` and
:cve_nist:`2025-27113`
- libxslt: Fix :cve_nist:`2024-55549` and :cve_nist:`2025-24855`
- llvm: Fix :cve_nist:`2024-0151`
- mpg123: Fix :cve_nist:`2024-10573`
- openssh: Fix :cve_nist:`2025-26465`
- ovmf: Revert Fix for CVE-2023-45236 :cve_nist:`2023-45237`
- perl: Ignore :cve_nist:`2023-47038`
- puzzles: Ignore :cve_nist:`2024-13769`, :cve_nist:`2024-13770` and :cve_nist:`2025-0837`
- python3: Fix :cve_nist:`2025-0938`
- ruby: Fix :cve_nist:`2024-41946`, :cve_nist:`2025-27219` and :cve_nist:`2025-27220`
- subversion: Ignore :cve_nist:`2024-45720`
- systemd: Fix :cve_nist:`2022-3821`, :cve_nist:`2022-4415`, :cve_nist:`2022-45873` and
:cve_nist:`2023-7008`
- tiff: mark :cve_nist:`2023-30774` as patched with existing patch
- u-boot: Fix :cve_nist:`2022-2347`, :cve_nist:`2022-30767`, :cve_nist:`2022-30790`,
:cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`, :cve_nist:`2024-57257`,
:cve_nist:`2024-57258` and :cve_nist:`2024-57259`
- vim: Fix :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`,
:cve_nist:`2025-26603`, :cve_nist:`2025-27423` and :cve_nist:`2025-29768`
- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`,
:cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`,
:cve_nist:`2025-26600` and :cve_nist:`2025-26601`
- xwayland: Fix :cve_nist:`2022-49737`, :cve_nist:`2024-9632`, :cve_nist:`2024-21885`,
:cve_nist:`2024-21886`, :cve_nist:`2024-31080`, :cve_nist:`2024-31081`, :cve_nist:`2024-31083`,
:cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`,
:cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600` and :cve_nist:`2025-26601`
- zlib: Fix :cve_nist:`2014-9485`
Fixes in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~
- bind: Upgrade to 9.18.33
- bitbake: cache: bump cache version
- bitbake: siggen.py: Improve taskhash reproducibility
- boost: fix do_fetch error
- build-appliance-image: Update to kirkstone head revision
- contributor-guide/submit-changes: add policy on AI generated code
- cve-update-nvd2-native: handle missing vulnStatus
- docs: Add favicon for the documentation html
- docs: Remove all mention of core-image-lsb
- libtasn1: upgrade to 4.20.0
- libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt
- libxml2: fix compilation of explicit child axis in pattern
- linux-yocto/5.10: update to v5.10.234
- linux-yocto/5.15: update to v5.15.179
- mesa: Fix missing GLES3 headers in SDK sysroot
- mesa: Update :term:`SRC_URI`
- meta: Enable '-o pipefail' for the SDK installer
- migration-guides: add release notes for 4.0.25
- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS`
- poky.conf: bump version for 4.0.26
- procps: replaced one use of fputs(3) with a write(2) call
- ref-manual: don't refer to poky-lsb
- scripts/install-buildtools: Update to 4.0.24
- scritps/runqemu: Ensure we only have two serial ports
- systemd: upgrade to 250.14
- tzcode-native: Fix compiler setting from 2023d version
- tzcode: Update :term:`SRC_URI`
- tzdata/tzcode-native: upgrade 2025a
- vim: Upgrade to 9.1.1198
- virglrenderer: fix do_fetch error
- vulnerabilities/classes: remove references to cve-check text format
- xz: Update :term:`SRC_URI`
- yocto-uninative: Update to 4.7 for glibc 2.41
Known Issues in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic
- Alessio Cascone
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Carlos Dominguez
- Deepesh Varatharajan
- Divya Chellam
- Guocai He
- Hitendra Prajapati
- Hongxu Jia
- Jiaying Song
- Johannes Kauffmann
- Kai Kang
- Lee Chee Yang
- Libo Chen
- Marta Rybczynska
- Michael Halstead
- Mingli Yu
- Moritz Haase
- Narpat Mali
- Paulo Neves
- Peter Marko
- Priyal Doshi
- Richard Purdie
- Robert Yang
- Ross Burton
- Sakib Sajal
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
- Zhang Peng
Repositories / Downloads for Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </poky/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`d70d287a77d5026b698ac237ab865b2dafd36bb8 </poky/commit/?id=d70d287a77d5026b698ac237ab865b2dafd36bb8>`
- Release Artefact: poky-d70d287a77d5026b698ac237ab865b2dafd36bb8
- sha: 3ebfadb8bff4c1ca12b3cf3e4ef6e3ac2ce52b73570266daa98436c9959249f2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.26 </openembedded-core/log/?h=yocto-4.0.26>`
- Git Revision: :oe_git:`1efbe1004bc82e7c14c1e8bd4ce644f5015c3346 </openembedded-core/commit/?id=1efbe1004bc82e7c14c1e8bd4ce644f5015c3346>`
- Release Artefact: oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346
- sha: d3805e034dabd0865dbf55488b2c16d4ea0351d37aa826f0054a6bfdde5a8be9
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </meta-mingw/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </meta-gplv2/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.26 </bitbake/log/?h=yocto-4.0.26>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </yocto-docs/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`9b4c36f7b02dd4bedfec90206744a1e90e37733c </yocto-docs/commit/?id=9b4c36f7b02dd4bedfec90206744a1e90e37733c>`

View File

@@ -0,0 +1,153 @@
Release notes for Yocto-4.0.27 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-1178`
- busybox: fix :cve_nist:`2023-39810`
- connman :fix :cve_nist:`2025-32743`
- curl: Ignore :cve_nist:`2025-0725`
- ghostscript: Fix :cve_nist:`2025-27830`, :cve_nist:`2025-27831`, :cve_nist:`2025-27832`,
:cve_nist:`2025-27834`, :cve_nist:`2025-27835` and :cve_nist:`2025-27836`
- ghostscript: Ignore :cve_nist:`2024-29507`, :cve_nist:`2025-27833` and :cve_nist:`2025-27837`
- glib-2.0: Fix :cve_nist:`2025-3360`
- go: Fix :cve_nist:`2025-22871`
- libarchive: Ignore :cve_nist:`2024-48615`
- libpam: Fix :cve_nist:`2024-10041`
- libsoup-2.4: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906` and :cve_nist:`2025-32909`
- libsoup: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906`, :cve_nist:`2025-32909`,
:cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, :cve_nist:`2025-32913`
and :cve_nist:`2025-32914`
- libxml2: Fix :cve_nist:`2025-32414` and :cve_nist:`2025-32415`
- ofono: Fix :cve_nist:`2024-7537`
- perl: Fix :cve_nist:`2024-56406`
- ppp: Fix :cve_nist:`2024-58250`
- python3-setuptools: Fix :cve_nist:`2024-6345`
- qemu: Ignore :cve_nist:`2023-1386`
- ruby: Fix :cve_nist:`2024-43398`
- sqlite3: Fix :cve_nist:`2025-29088`
- systemd: Ignore :cve_nist:`2022-3821`, :cve_nist:`2022-4415` and :cve_nist:`2022-45873`
Fixes in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~
- Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
- build-appliance-image: Update to kirkstone head revision
- cve-update-nvd2-native: add workaround for json5 style list
- docs: Fix dead links that use the :term:`DISTRO` macro
- docs: manuals: remove repeated word
- docs: poky.yaml: introduce DISTRO_LATEST_TAG
- glibc: Add single-threaded fast path to rand()
- glibc: stable 2.35 branch updates
- module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
- perl: enable _GNU_SOURCE define via d_gnulibc
- poky.conf: bump version for 4.0.27
- ref-manual/variables.rst: document autotools class related variables
- scripts/install-buildtools: Update to 4.0.26
- systemd: backport patch to fix journal issue
- systemd: systemd-journald fails to setup LogNamespace
- tzdata/tzcode-native: upgrade to 2025b
Known Issues in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Alexander Kanavin
- Alon Bar-Lev
- Andrew Kreimer
- Antonin Godard
- Chen Qi
- Deepesh Varatharajan
- Divya Chellam
- Haitao Liu
- Haixiao Yan
- Hitendra Prajapati
- Peter Marko
- Praveen Kumar
- Priyal Doshi
- Shubham Kulkarni
- Soumya Sambu
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
Repositories / Downloads for Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </poky/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`ab9a994a8cd8e06b519a693db444030999d273b7 </poky/commit/?id=ab9a994a8cd8e06b519a693db444030999d273b7>`
- Release Artefact: poky-ab9a994a8cd8e06b519a693db444030999d273b7
- sha: 77a366c17cf29eef15c6ff3f44e73f81c07288c723fd4a6dbd8c7ee9b79933f3
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.27 </openembedded-core/log/?h=yocto-4.0.27>`
- Git Revision: :oe_git:`e8be08a624b2d024715a5c8b0c37f2345a02336b </openembedded-core/commit/?id=e8be08a624b2d024715a5c8b0c37f2345a02336b>`
- Release Artefact: oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b
- sha: cc5b0fadab021c6dc61f37fc4ff01a1cf657e7c219488ce264bede42f7f6212f
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </meta-mingw/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </meta-gplv2/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.27 </bitbake/log/?h=yocto-4.0.27>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </yocto-docs/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`0d51e553d5f83eea6634e03ddc9c7740bf72fcea </yocto-docs/commit/?id=0d51e553d5f83eea6634e03ddc9c7740bf72fcea>`

View File

@@ -0,0 +1,224 @@
Release notes for Yocto-4.0.28 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-1180`, :cve_nist:`2025-1182`, :cve_nist:`2025-5244` and
:cve_nist:`2025-5245`
- connman: Fix :cve_nist:`2025-32366`
- ffmpeg: Fix :cve_nist:`2025-1373`, :cve_nist:`2025-22919` and :cve_nist:`2025-22921`
- ffmpeg: Ignore :cve_nist:`2022-48434`
- ghostscript: Fix :cve_nist:`2025-48708`
- git: Fix :cve_nist:`2024-50349` and :cve_nist:`2024-52006`
- glib-2.0: Fix :cve_nist:`2025-4373`
- glibc: Fix for :cve_nist:`2025-4802`
- go: Fix :cve_nist:`2025-4673`
- go: ignore :cve_nist:`2024-3566`
- icu: Fix :cve_nist:`2025-5222`
- iputils: Fix :cve_nist:`2025-47268`
- libsoup-2.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`,
:cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32052`, :cve_nist:`2025-32053`,
:cve_nist:`2025-32907`, :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`,
:cve_nist:`2025-32913`, :cve_nist:`2025-32914`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421`
- libsoup: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`,
:cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32051`, :cve_nist:`2025-32052`,
:cve_nist:`2025-32053`, :cve_nist:`2025-32907`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421`
- linux-yocto/5.15: Fix :cve_nist:`2024-26952`, :cve_nist:`2025-21941`, :cve_nist:`2025-21957`,
:cve_nist:`2025-21959`, :cve_nist:`2025-21962`, :cve_nist:`2025-21963`, :cve_nist:`2025-21964`,
:cve_nist:`2025-21968`, :cve_nist:`2025-21996`, :cve_nist:`2025-22018`, :cve_nist:`2025-22020`,
:cve_nist:`2025-22035`, :cve_nist:`2025-22054`, :cve_nist:`2025-22056`, :cve_nist:`2025-22063`,
:cve_nist:`2025-22066`, :cve_nist:`2025-22081`, :cve_nist:`2025-22097`, :cve_nist:`2025-23136`,
:cve_nist:`2025-37785`, :cve_nist:`2025-37803`, :cve_nist:`2025-37805`, :cve_nist:`2025-38152`,
:cve_nist:`2025-39728` and :cve_nist:`2025-39735`
- net-tools: Fix :cve_nist:`2025-46836`
- openssh: Fix :cve_nist:`2025-32728`
- python3: Fix :cve_nist:`2024-12718`, :cve_nist:`2025-0938`, :cve_nist:`2025-4138`,
:cve_nist:`2025-4330`, :cve_nist:`2025-4435`, :cve_nist:`2025-4516` and :cve_nist:`2025-4517`
- python3-requests: Fix :cve_nist:`2024-47081`
- python3-setuptools: Fix :cve_nist:`2025-47273`
- ruby: Fix :cve_nist:`2025-27221`
- screen: Fix :cve_nist:`2025-46802`, :cve_nist:`2025-46804` and :cve_nist:`2025-46805`
- taglib: Fix :cve_nist:`2023-47466`
Fixes in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~
- babeltrace/libatomic-ops: correct the :term:`SRC_URI`
- brief-yoctoprojectqs/ref-manual: Switch to new CDN
- bsp guide: update kernel version example to 6.12
- bsp-guide: update lonely "4.12" kernel reference to "6.12"
- build-appliance-image: Update to kirkstone head revision
- cmake: Correctly handle cost data of tests with arbitrary chars in name
- conf.py: tweak SearchEnglish to be hyphen-friendly
- contributor-guide/submit-changes: encourage patch version changelogs
- dev-manual/sbom.rst: fix wrong build outputs
- docs: Clean up explanation of minimum required version numbers
- docs: README: specify how to contribute instead of pointing at another file
- docs: conf.py: silence SyntaxWarning on js_splitter_code
- e2fsprogs: removed 'sed -u' option
- ffmpeg: Add "libswresample libavcodec" to :term:`CVE_PRODUCT`
- ffmpeg: upgrade to 5.0.3
- gcc: AArch64 - Fix strict-align cpymem/setmem
- glibc: nptl Fix indentation
- glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
- glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
- glibc: nptl Update comments and indentation for new condvar implementation
- glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
- glibc: nptl Use all of g1_start and g_signals
- glibc: nptl rename __condvar_quiesce_and_switch_g1
- glibc: pthreads NPTL lost wakeup fix 2
- kernel.bbclass: add original package name to :term:`RPROVIDES` for -image and -base
- libpng: Improve ptest
- linux-yocto/5.15: update to v5.15.184
- migration-guides: add release notes for 4.0.26 and 4.0.27
- nfs-utils: don't use signals to shut down nfs server.
- poky.conf: bump version for 4.0.28
- python3: upgrade to 3.10.18
- ref-manual/release-process: update releases.svg
- ref-manual/variables.rst: document :term:`INHIBIT_DEFAULT_RUST_DEPS`
:term:`INHIBIT_UPDATERCD_BBCLASS` :term:`SSTATE_SKIP_CREATION` :term:`WIC_CREATE_EXTRA_ARGS`
:term:`IMAGE_ROOTFS_MAXSIZE` :term:`INITRAMFS_MAXSIZE`
- ref-manual: clarify :term:`KCONFIG_MODE` default behaviour
- ref-manual: classes: nativesdk: move note to appropriate section
- ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
- ref-manual: kernel-fitimage.bbclass does not use :term:`SPL_SIGN_KEYNAME`
- scripts/install-buildtools: Update to 4.0.27
- sphinx-lint: role missing opening tag colon
- sphinx-lint: trailing whitespace
- sphinx-lint: unbalanced inline literal markup
- sysstat: correct the :term:`SRC_URI`
- systemtap: add sysroot Python paths to configure flags
- test-manual/intro: remove Buildbot version used
- util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
- xz: Update :term:`LICENSE` variable for xz packages
Known Issues in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aditya Tayade
- Adrian Freihofer
- Aleksandar Nikolic
- Alper Ak
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Carlos Sánchez de La Lama
- Changqing Li
- Christos Gavros
- Colin Pinnell McAllister
- Deepesh Varatharajan
- Divya Chellam
- Enrico Jörns
- Etienne Cordonnier
- Guocai He
- Harish Sadineni
- Hitendra Prajapati
- Jiaying Song
- Lee Chee Yang
- Martin Jansa
- Moritz Haase
- NeilBrown
- Peter Marko
- Poonam Jadhav
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Soumya Sambu
- Steve Sakoman
- Sundeep KOKKONDA
- Sunil Dora
- Trevor Woerner
- Vijay Anusuri
- Virendra Thakur
- Yi Zhao
- aszh07
Repositories / Downloads for Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </poky/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`78c9cb3eaf071932567835742608404d5ce23cc4 </poky/commit/?id=78c9cb3eaf071932567835742608404d5ce23cc4>`
- Release Artefact: poky-78c9cb3eaf071932567835742608404d5ce23cc4
- sha: 9c73c6f89e70c2041a52851e5cc582e5a2f05ad2fdc110d2c518f2c4994e8de3
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.28 </openembedded-core/log/?h=yocto-4.0.28>`
- Git Revision: :oe_git:`75e54301c5076eb0454aee33c870adf078f563fd </openembedded-core/commit/?id=75e54301c5076eb0454aee33c870adf078f563fd>`
- Release Artefact: oecore-75e54301c5076eb0454aee33c870adf078f563fd
- sha: c5ffceab90881c4041ec4304da8b7b32d9c1f89a4c63ee7b8cbd53c796b0187b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-mingw/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-gplv2/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.28 </bitbake/log/?h=yocto-4.0.28>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-yocto/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`0bf3dcef1caa80fb047bf9c3514314ab658e30ea </meta-yocto/commit/?id=0bf3dcef1caa80fb047bf9c3514314ab658e30ea>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </yocto-docs/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b </yocto-docs/commit/?id=97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b>`

View File

@@ -0,0 +1,178 @@
Release notes for Yocto-4.0.29 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- avahi: Fix :cve_nist:`2024-52615`
- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546`
- coreutils: Fix :cve_nist:`2025-5278`
- curl: Fix :cve_nist:`2024-11053` and :cve_nist:`2025-0167`
- dropbear: Fix :cve_nist:`2025-47203`
- ffmpeg: Ignore :cve_nist:`2022-3109` and :cve_nist:`2022-3341`
- gdk-pixbuf: Fix :cve_nist:`2025-7345`
- ghostscript: Ignore :cve_nist:`2025-46646`
- gnupg: Fix :cve_nist:`2025-30258`
- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and
:cve_nist:`2025-32990`
- iputils: Fix :cve_nist:`2025-48964`
- libarchive: Fix :cve_nist:`2025-5914`, :cve_nist:`2025-5915`, :cve_nist:`2025-5916` and
:cve_nist:`2025-5917`
- libpam: Fix :cve_nist:`2025-6020`
- libsoup-2.4: Fix :cve_nist:`2025-4945`
- libsoup-2.4: Fix :cve_nist:`2025-4969` (update patch)
- libsoup: Fix :cve_nist:`2025-4945`, :cve_nist:`2025-6021`, :cve_nist:`2025-6170`,
:cve_nist:`2025-49794` and :cve_nist:`2025-49796`
- ncurses: Fix :cve_nist:`2025-6141`
- ofono: Fix :cve_nist:`2023-4232` and :cve_nist:`2023-4235`
- openssl: Fix :cve_nist:`2024-41996`
- python3-urllib3: Fix :cve_nist:`2025-50181`
- ruby: Fix :cve_nist:`2024-43398` (update patches)
- sqlite3: Fix :cve_nist:`2025-6965` and :cve_nist:`2025-7458`
- sqlite3: Ignore :cve_nist:`2025-3277`
- systemd: Fix :cve_nist:`2025-4598`
- xwayland: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`,
:cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180`
Fixes in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~
- bintuils: stable 2.38 branch update
- bitbake: test/fetch: Switch u-boot based test to use our own mirror
- build-appliance-image: Update to kirkstone head revision
- conf.py: improve SearchEnglish to handle terms with dots
- db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14
- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
- glibc: stable 2.35 branch updates
- gnutls: patch read buffer overrun in the "pre_shared_key" extension
- gnutls: patch reject zero-length version in certificate request
- linux-yocto/5.15: update to v5.15.186
- migration-guides: add release notes for 4.0.28
- oeqa/core/decorator: add decorators to skip based on :term:`HOST_ARCH`
- openssl: upgrade to 3.0.17
- orc: set :term:`CVE_PRODUCT`
- overview-manual/concepts.rst: fix sayhello hardcoded bindir
- poky.conf: bump version for 4.0.29
- python3: update CVE product
- ref-manual: document :term:`KERNEL_SPLIT_MODULES` variable
- scripts/install-buildtools: Update to 4.0.28
- sudo: upgrade to 1.9.17p1
- tcf-agent: correct the :term:`SRC_URI`
Known Issues in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Antonin Godard
- Archana Polampalli
- Bruce Ashfield
- Changqing Li
- Chen Qi
- Colin Pinnell McAllister
- Daniel Díaz
- Deepesh Varatharajan
- Divya Chellam
- Dixit Parmar
- Enrico Jörns
- Guocai He
- Hitendra Prajapati
- Lee Chee Yang
- Marco Cavallini
- Martin Jansa
- Peter Marko
- Praveen Kumar
- Richard Purdie
- Rob Woolley
- Ross Burton
- Steve Sakoman
- Vijay Anusuri
- Yash Shinde
- Yogita Urade
- Zhang Peng
Repositories / Downloads for Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </poky/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`81ab000fa437ca04f584a3327b076f7a512dc6d0 </poky/commit/?id=81ab000fa437ca04f584a3327b076f7a512dc6d0>`
- Release Artefact: poky-81ab000fa437ca04f584a3327b076f7a512dc6d0
- sha: 2fecf3cac5c2361c201b5ae826960af92289862ec9be13837a8431138e534fd2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.29 </openembedded-core/log/?h=yocto-4.0.29>`
- Git Revision: :oe_git:`bd620eb14660075fd0f7476bbbb65d5da6293874 </openembedded-core/commit/?id=bd620eb14660075fd0f7476bbbb65d5da6293874>`
- Release Artefact: oecore-bd620eb14660075fd0f7476bbbb65d5da6293874
- sha: f32ab195c7090268e6e87ccf8db2813cf705c517030654326d14b25d926de88e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-mingw/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-gplv2/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.29 </bitbake/log/?h=yocto-4.0.29>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-yocto/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`e916d3bad58f955b73e2c67aba975e63cd191394 </meta-yocto/commit/?id=e916d3bad58f955b73e2c67aba975e63cd191394>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </yocto-docs/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`bf855ecaf4bec4cef9bbfea2e50caa65a8339828 </yocto-docs/commit/?id=bf855ecaf4bec4cef9bbfea2e50caa65a8339828>`

View File

@@ -0,0 +1,170 @@
Release notes for Yocto-4.0.30 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- cups: Fix :cve_nist:`2025-58060` and :cve_nist:`2025-58364`
- dpkg: Fix :cve_nist:`2025-6297`
- ffmpeg: Fix :cve_nist:`2023-6602`, :cve_nist:`2023-6604`, :cve_nist:`2023-6605`,
:cve_nist:`2025-1594` and CVE-2025-7700
- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`,
:cve_nist:`2025-46835` and :cve_nist:`2025-48384`
- glib-2.0: Fix :cve_nist:`2025-7039`
- glib-2.0: Ignore :cve_nist:`2025-4056`
- go: Ignore :cve_nist:`2024-24790` and :cve_nist:`2025-0913`
- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806`, :cve_nist:`2025-47807` and
:cve_nist:`2025-47808`
- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219`
- libarchive: Fix :cve_nist:`2025-5918`
- libxslt: Fix :cve_nist:`2023-40403`
- openssl: Fix :cve_nist:`2023-50781`
- python3: Fix :cve_nist:`2025-8194`
- qemu: Ignore :cve_nist:`2024-7730`
- sqlite3: Revert "sqlite3: patch CVE-2025-7458"
- tiff: Fix :cve_nist:`2024-13978`, :cve_nist:`2025-8176`, :cve_nist:`2025-8177`,
:cve_nist:`2025-8534` and :cve_nist:`2025-8851`
- vim: Fix :cve_nist:`2025-53905` and :cve_nist:`2025-53906`
- wpa-supplicant: Fix :cve_nist:`2022-37660`
- xserver-xorg: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`,
:cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180`
Fixes in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~
- build-appliance-image: Update to kirkstone head revision
- default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
- dev-manual/security-subjects.rst: update mailing lists
- gnupg: disable tests to avoid running target binaries at build time
- go-helloworld: fix license
- insane: Ensure that `src-uri-bad` fails correctly
- insane: Improve patch warning/error handling
- libubootenv: backport patch to fix unknown type name 'size_t'
- llvm: fix typo in CVE-2024-0151.patch
- migration-guides: add release notes for 4.0.29
- overview-manual/yp-intro.rst: fix broken link to article
- poky.conf: bump version for 4.0.30
- pulseaudio: Add audio group explicitly
- ref-manual/classes.rst: document the testexport class
- ref-manual/system-requirements.rst: update supported distributions
- ref-manual/variables.rst: document :term:`FIT_CONF_PREFIX` :term:`SPL_DTB_BINARY` variable
- ref-manual/variables.rst: expand :term:`IMAGE_OVERHEAD_FACTOR` glossary entry
- sdk: The main in the C example should return an int
- sudo: remove devtool FIXME comment
- systemd: Fix manpage build after :cve_nist:`2025-4598`
- vim: not adjust script pathnames for native scripts either
- vim: upgrade to 9.1.1652
Known Issues in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Antonin Godard
- Archana Polampalli
- Dan McGregor
- Deepak Rathore
- Divya Chellam
- Erik Lindsten
- Guocai He
- Gyorgy Sarvari
- Hitendra Prajapati
- Jan Vermaete
- Jiaying Song
- Joao Marcos Costa
- Kyungjik Min
- Lee Chee Yang
- Mingli Yu
- Peter Marko
- Philip Lorenz
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
- Youngseok Jeong
Repositories / Downloads for Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </poky/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`51dc9c464de0703bfbc6f1ee71ac9bea20933a45 </poky/commit/?id=51dc9c464de0703bfbc6f1ee71ac9bea20933a45>`
- Release Artefact: poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45
- sha: 2b5db0a07598df7684975c0839e6f31515a8e78d366503feb9917ef1ca56c0b2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.30 </openembedded-core/log/?h=yocto-4.0.30>`
- Git Revision: :oe_git:`d381eeb5e70bd0ce9e78032c909e4a23564f4dd7 </openembedded-core/commit/?id=d381eeb5e70bd0ce9e78032c909e4a23564f4dd7>`
- Release Artefact: oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7
- sha: 022ab4ef5ac59ac3f01a9dacd8b1d6310cc117c6bed2e86e195ced88e0689c85
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-mingw/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-gplv2/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.30 </bitbake/log/?h=yocto-4.0.30>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-yocto/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`edf7950e4d81dd31f29a58acdd8022dabd2be494 </meta-yocto/commit/?id=edf7950e4d81dd31f29a58acdd8022dabd2be494>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </yocto-docs/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`71a3933c609ce73ff07e5be48d9e7b03f22ef8d7 </yocto-docs/commit/?id=71a3933c609ce73ff07e5be48d9e7b03f22ef8d7>`

View File

@@ -0,0 +1,210 @@
Release notes for Yocto-4.0.31 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-8225`, :cve_nist:`2025-11081`, :cve_nist:`2025-11082` and
:cve_nist:`2025-11083`
- busybox: Fix :cve_nist:`2025-46394`
- cmake: Fix :cve_nist:`2025-9301`
- curl: Fix :cve_nist:`2025-9086`
- ffmpeg: Ignore :cve_nist:`2023-6603`
- ffmpeg: mark :cve_nist:`2023-6601` as Fixed
- ghostscript: Fix :cve_nist:`2025-59798`, :cve_nist:`2025-59799` and :cve_nist:`2025-59800`
- git: Fix :cve_nist:`2025-48386`
- glib-networking: Fix :cve_nist:`2025-60018` and :cve_nist:`2025-60019`
- go: Fix :cve_nist:`2025-47906` and :cve_nist:`2025-47907`
- grub2: Fix :cve_nist:`2024-56738`
- grub: Ignore :cve_nist:`2024-2312`
- gstreamer1.0-plugins-bad: Fix :cve_nist:`2025-3887`
- gstreamer1.0: Ignore :cve_nist:`2025-2759`, :cve_nist:`2025-3887`, :cve_nist:`2025-47183`,
:cve_nist:`2025-47219`, :cve_nist:`2025-47806`, :cve_nist:`2025-47807` and :cve_nist:`2025-47808`
- python3-jinja2: Fix :cve_nist:`2024-56201`, :cve_nist:`2024-56326` and :cve_nist:`2025-27516`
- libxml2: Fix :cve_nist:`2025-9714`
- libxslt: Fix :cve_nist:`2025-7424`
- lz4: Fix :cve_nist:`2025-62813`
- openssl: Fix :cve_nist:`2025-9230` and :cve_nist:`2025-9232`
- pulseaudio: Ignore :cve_nist:`2024-11586`
- python3: Fix :cve_nist:`2024-6345`, :cve_nist:`2025-47273` and :cve_nist:`2025-59375`
- qemu: Fix :cve_nist:`2024-8354`
- tiff: Fix :cve_nist:`2025-8961`, :cve_nist:`2025-9165` and :cve_nist:`2025-9900`
- vim: Fix :cve_nist:`2025-9389`
Fixes in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~
- build-appliance-image: Update to kirkstone head revision
- poky.conf: bump version for 4.0.31
- ref-manual/classes.rst: document the relative_symlinks class
- ref-manual/classes.rst: gettext: extend the documentation of the class
- ref-manual/variables.rst: document the CCACHE_DISABLE, UNINATIVE_CHECKSUM, UNINATIVE_URL, USE_NLS,
REQUIRED_COMBINED_FEATURES, REQUIRED_IMAGE_FEATURES, :term:`REQUIRED_MACHINE_FEATURES` variable
- ref-manual/variables.rst: fix :term:`LAYERDEPENDS` description
- dev-manual, test-manual: Update autobuilder output links
- ref-manual/classes.rst: extend the uninative class documentation
- python3: upgrade to 3.10.19
- linux-yocto/5.15: update to v5.15.194
- glibc: : PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
- glibc: nptl Use all of g1_start and g_signals
- glibc: nptl rename __condvar_quiesce_and_switch_g1
- glibc: nptl Fix indentation
- glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
- glibc: Remove g_refs from condition variables
- glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
- glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
- glibc: nptl Update comments and indentation for new condvar implementation
- glibc: pthreads NPTL lost wakeup fix 2
- glibc: Remove partial BZ#25847 backport patches
- vulnerabilities: update nvdcve file name
- migration-guides: add release notes for 4.0.30
- oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
- selftest/cases/meta_ide.py: use use gnu mirror instead of main server
- conf/bitbake.conf: use gnu mirror instead of main server
- p11-kit: backport fix for handle :term:`USE_NLS` from master
- systemd: backport fix for handle :term:`USE_NLS` from master
- glibc: stable 2.35 branch updates
- openssl: upgrade to 3.0.18
- scripts/install-buildtools: Update to 4.0.30
- ref-manual/variables.rst: fix the description of :term:`STAGING_DIR`
- ref-manual/structure: document the auto.conf file
- dev-manual/building.rst: add note about externalsrc variables absolute paths
- ref-manual/variables.rst: fix the description of :term:`KBUILD_DEFCONFIG`
- kernel-dev/common.rst: fix the in-tree defconfig description
- test-manual/yocto-project-compatible.rst: fix a typo
- contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
- contributor-guide: submit-changes: number instruction list in commit your changes
- contributor-guide: submit-changes: reword commit message instructions
- contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
- contributor-guide: submit-changes: align :term:`CC` tag description
- contributor-guide: submit-changes: clarify example with Yocto bug ID
- contributor-guide: submit-changes: fix improper bold string
- libhandy: update git branch name
- python3-jinja2: upgrade to 3.1.6
- vim: upgrade to 9.1.1683
Known Issues in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Adam Blank
- Aleksandar Nikolic
- Antonin Godard
- Archana Polampalli
- AshishKumar Mishra
- Bruce Ashfield
- Deepesh Varatharajan
- Divya Chellam
- Gyorgy Sarvari
- Hitendra Prajapati
- João Marcos Costa
- Lee Chee Yang
- Paul Barker
- Peter Marko
- Praveen Kumar
- Quentin Schulz
- Rajeshkumar Ramasamy
- Saravanan
- Soumya Sambu
- Steve Sakoman
- Sunil Dora
- Talel BELHAJ SALEM
- Theo GAIGE
- Vijay Anusuri
- Yash Shinde
- Yogita Urade
Repositories / Downloads for Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </yocto-docs/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`073f3bca4c374b03398317e7f445d2440a287741 </yocto-docs/commit/?id=073f3bca4c374b03398317e7f445d2440a287741>`
- Release Artefact: yocto-docs-073f3bca4c374b03398317e7f445d2440a287741
- sha: 3bfde9b6ad310dd42817509b67f61cd69552f74b2bc5011bd20788fe96d6823b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </poky/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`04b39e5b7eb19498215d85c88a5fffb460fea1eb </poky/commit/?id=04b39e5b7eb19498215d85c88a5fffb460fea1eb>`
- Release Artefact: poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb
- sha: 0ca18ab1ed25c0d77412ba30dbb03d74811756c7c2fe2401940f848a5e734930
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.31 </openembedded-core/log/?h=yocto-4.0.31>`
- Git Revision: :oe_git:`99204008786f659ab03538cd2ae2fd23ed4164c5 </openembedded-core/commit/?id=99204008786f659ab03538cd2ae2fd23ed4164c5>`
- Release Artefact: oecore-99204008786f659ab03538cd2ae2fd23ed4164c5
- sha: aa97bf826ad217b3a5278b4ad60bef4d194f0f1ff617677cf2323d3cc4897687
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-yocto/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`3b2df00345b46479237fe0218675a818249f891c </meta-yocto/commit/?id=3b2df00345b46479237fe0218675a818249f891c>`
- Release Artefact: meta-yocto-3b2df00345b46479237fe0218675a818249f891c
- sha: 630e99e0f515bab8a316b2e32aff1352b4404f15aa087e8821b84093596a08ce
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-mingw/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-gplv2/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.31 </bitbake/log/?h=yocto-4.0.31>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2

View File

@@ -0,0 +1,194 @@
Release notes for Yocto-4.0.32 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve_nist:`2025-8677`, :cve_nist:`2025-40778` and :cve_nist:`2025-40780`
- binutils: Fix :cve_nist:`2025-11412` and :cve_nist:`2025-11413`
- curl: Ignore :cve_nist:`2025-10966`
- elfutils: Fix :cve_nist:`2025-1376` and :cve_nist:`2025-1377`
- gnutls: Fix :cve_nist:`2025-9820`
- go: Fix :cve_nist:`2024-24783`, :cve_nist:`2025-58187`, :cve_nist:`2025-58189`,
:cve_nist:`2025-61723` and :cve_nist:`2025-61724`
- libarchive: Fix :cve_nist:`2025-60753`
- libarchive: Fix 2 security issue (https://github.com/libarchive/libarchive/pull/2753 and
https://github.com/libarchive/libarchive/pull/2768)
- libpng: Fix :cve_nist:`2025-64505`, :cve_nist:`2025-64506`, :cve_nist:`2025-64720`,
:cve_nist:`2025-65018` and :cve_nist:`2025-66293`
- libxml2: Fix :cve_nist:`2025-7425`
- musl: Fix :cve_nist:`2025-26519`
- openssh: Fix :cve_nist:`2025-61984` and :cve_nist:`2025-61985`
- python3-idna: Fix :cve_nist:`2024-3651`
- python3-urllib3: Fix :cve_nist:`2024-37891`
- python3: fix :cve_nist:`2025-6075`
- ruby: Fix :cve_nist:`2024-35176`, :cve_nist:`2024-39908` and :cve_nist:`2024-41123`
- rust-cross-canadian: Ignore :cve_nist:`2024-43402`
- u-boot: Fix :cve_nist:`2024-42040`
- wpa-supplicant: Fix :cve_nist:`2025-24912`
- xserver-xorg: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
- xwayland: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
Fixes in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~
- babeltrace2: fetch with https protocol
- bind: upgrade to 9.18.41
- build-appliance-image: Update to kirkstone head revision
- dev-manual/layers.rst: document "bitbake-layers show-machines"
- dev-manual/new-recipe.rst: replace 'bitbake -e' with 'bitbake-getvar'
- dev-manual/new-recipe.rst: typo, "whith" -> "which"
- dev-manual/new-recipe.rst: update "recipetool -h" output
- dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
- documentation: link to the Releases page on yoctoproject.org instead of wiki
- efibootmgr: update :term:`SRC_URI` branch
- flac: patch seeking bug
- goarch.bbclass: do not leak :term:`TUNE_FEATURES` into crosssdk task signatures
- kernel-dev: add disable config example
- kernel-dev: common: migrate bitbake -e to bitbake-getvar
- libmicrohttpd: disable experimental code by default
- migration-guides: add release notes for 4.0.31
- oe-build-perf-report: relax metadata matching rules
- overview-manual: migrate to SVG + fix typo
- poky.conf: bump version for 4.0.32
- python3-urllib3: upgrade to 1.26.20
- recipes: Don't use ftp.gnome.org
- ref-manual: variables: migrate the :term:`OVERRIDES` note to bitbake-getvar
- systemd-bootchart: update :term:`SRC_URI` branch
- xf86-video-intel: correct :term:`SRC_URI` as freedesktop anongit is down
Known Issues in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Alexander Kanavin
- Archana Polampalli
- Divya Chellam
- Gyorgy Sarvari
- Hitendra Prajapati
- Hongxu Jia
- Jason Schonberg
- Lee Chee Yang
- Peter Marko
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Ross Burton
- Saquib Iltaf
- Soumya Sambu
- Steve Sakoman
- Vijay Anusuri
- Walter Werner SCHNEIDER
Repositories / Downloads for Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </yocto-docs/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`4b9df539fa06fb19ed8b51ef2d46e5c56779de81 </yocto-docs/commit/?id=4b9df539fa06fb19ed8b51ef2d46e5c56779de81>`
- Release Artefact: yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81
- sha: 70ee2caf576683c5f31ac5a592cde1c0650ece25cfcd5ff3cc7eedf531575611
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </poky/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`2c05660b21c7cc1082aeac8b75d8a2d82e249f63 </poky/commit/?id=2c05660b21c7cc1082aeac8b75d8a2d82e249f63>`
- Release Artefact: poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63
- sha: d7a55a18a597a7b140a81586b7ca6379c208ebbb3285de36c48fde10882947d8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.32 </openembedded-core/log/?h=yocto-4.0.32>`
- Git Revision: :oe_git:`2ed3f8b938579dbbb804e04c45a968cc57761db7 </openembedded-core/commit/?id=2ed3f8b938579dbbb804e04c45a968cc57761db7>`
- Release Artefact: oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7
- sha: 11b9632586dfbf3f0ef69eca2014a8002f25ca8d53cfe9424e27361ba3a20831
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-yocto/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`77b40877c179ea3ce5c37c7ba1831e9c0e289266 </meta-yocto/commit/?id=77b40877c179ea3ce5c37c7ba1831e9c0e289266>`
- Release Artefact: meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266
- sha: e908d42690881cd6e07b9ca18a21eb8761a0ec72d940b12905622e75ba913974
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-mingw/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-gplv2/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.32 </bitbake/log/?h=yocto-4.0.32>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2

View File

@@ -165,7 +165,7 @@ The following diagram represents the high-level workflow of a build. The
remainder of this section expands on the fundamental input, output,
process, and metadata logical blocks that make up the workflow.
.. image:: figures/YP-flow-diagram.png
.. image:: svg/yp-flow-diagram.*
:align: center
In general, the build's workflow consists of several functional areas:
@@ -983,7 +983,7 @@ package.
For more information on the ``oe-pkgdata-util`` utility, see the section
:ref:`dev-manual/debugging:Viewing Package Information with
\`\`oe-pkgdata-util\`\`` of the Yocto Project Development Tasks Manual.
``oe-pkgdata-util``` of the Yocto Project Development Tasks Manual.
To add a custom package variant of the ``${PN}`` recipe named
``${PN}-extra`` (name is arbitrary), one can add it to the
@@ -2438,8 +2438,8 @@ The contents of ``sayhello_0.1.bb`` are::
S = "${WORKDIR}/git"
do_install(){
install -d ${D}/usr/bin
install -m 0700 sayhello ${D}/usr/bin
install -d ${D}${bindir}
install -m 0700 sayhello ${D}${bindir}
}
After placing the recipes in a custom layer we can run ``bitbake sayhello``

Binary file not shown.

Before

Width:  |  Height:  |  Size: 186 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 20 KiB

View File

@@ -0,0 +1,172 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
width="164.765mm"
height="72.988113mm"
viewBox="0 0 164.765 72.988114"
version="1.1"
id="svg1"
xml:space="preserve"
inkscape:version="1.4.2 (ebf0e940d0, 2025-05-08)"
sodipodi:docname="key-dev-elements.svg"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"><sodipodi:namedview
id="namedview1"
pagecolor="#ffffff"
bordercolor="#000000"
borderopacity="0.25"
inkscape:showpageshadow="false"
inkscape:pageopacity="0.0"
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
inkscape:document-units="mm"
inkscape:zoom="1"
inkscape:cx="341.5"
inkscape:cy="-31.5"
inkscape:window-width="2560"
inkscape:window-height="1440"
inkscape:window-x="0"
inkscape:window-y="0"
inkscape:window-maximized="0"
inkscape:current-layer="layer2"
showborder="false"
borderlayer="false"
inkscape:antialias-rendering="true"
showguides="true" /><defs
id="defs1" /><g
inkscape:groupmode="layer"
id="layer2"
inkscape:label="Layer "
style="display:inline"
transform="translate(-20.664242,-129.6793)"><rect
style="display:inline;fill:#f1e9cc;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect1"
width="164.112"
height="54.273098"
x="20.990742"
y="130.0058"
ry="0"
inkscape:label="yp-rect" /><rect
style="display:inline;fill:#f3d770;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect2"
width="101.45864"
height="41.151588"
x="28.1292"
y="137.10953"
inkscape:label="poky-rect" /><rect
style="display:inline;fill:#c0ebf5;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect3"
width="50.652737"
height="53.04562"
x="35.516178"
y="149.29529"
inkscape:label="oe-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3"
inkscape:label="poky-title"
transform="matrix(0.90889596,0,0,0.81399719,-26.072941,39.399474)"><tspan
x="136.38763"
y="137.69727"
id="tspan2">Poky</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3-8"
inkscape:label="oe-title"
transform="matrix(0.90889596,0,0,0.81399719,-78.327995,83.175189)"><tspan
x="136.38763"
y="137.69727"
id="tspan4">OpenEmbedded</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3-0"
inkscape:label="yp-title"
transform="matrix(0.8469291,0,0,0.81399719,21.497595,28.033837)"><tspan
x="136.38763"
y="137.69727"
id="tspan5">YOCTO PROJECT (YP)</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="137.19444"
y="150.50006"
id="text4"
transform="scale(1.0050579,0.9949676)"
inkscape:label="yp-text"><tspan
sodipodi:role="line"
id="tspan3"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="150.50006">Umbrella Open Source Project</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="154.2294"
id="tspan6">that Builds and Maintains</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="157.95874"
id="tspan7">Validated Open Source Tools and</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="161.68808"
id="tspan8">Components Associated with</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="165.4174"
id="tspan9">Embedded Linux</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="90.582634"
y="159.10139"
id="text10"
transform="scale(1.0018079,0.9981954)"
inkscape:label="poky-text"><tspan
sodipodi:role="line"
id="tspan10"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="159.10139">Yocto Project Open</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="162.81487"
id="tspan11">Source Reference</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="166.52835"
id="tspan12">Embedded Distribution</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="40.36692"
y="160.98824"
id="text13"
transform="scale(0.99784993,1.0021547)"
inkscape:label="oe-text"><tspan
sodipodi:role="line"
id="tspan13"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="160.98824">Open Source Build Engine</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="164.7592"
id="tspan14">and YP-Compatible Metadata</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="168.53017"
id="tspan15">for Embedded Linux</tspan></text></g></svg>

After

Width:  |  Height:  |  Size: 12 KiB

View File

@@ -0,0 +1,950 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Generator: Adobe Illustrator 13.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 14948) -->
<svg
version="1.1"
id="Layer_1"
x="0px"
y="0px"
width="760.50098"
height="352.582"
viewBox="0 0 760.50095 352.582"
enable-background="new 0 0 758.189 424.276"
xml:space="preserve"
sodipodi:docname="yp-flow-diagram.svg"
inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"><defs
id="defs86">
</defs><sodipodi:namedview
id="namedview86"
pagecolor="#ffffff"
bordercolor="#000000"
borderopacity="0.25"
inkscape:showpageshadow="2"
inkscape:pageopacity="0.0"
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
inkscape:zoom="2.8284271"
inkscape:cx="296.80807"
inkscape:cy="212.83914"
inkscape:window-width="1906"
inkscape:window-height="934"
inkscape:window-x="0"
inkscape:window-y="0"
inkscape:window-maximized="0"
inkscape:current-layer="Layer_1" />
<g
id="g17"
transform="matrix(1,0,0,1.0035497,-2.0824824,-11.037238)"><rect
style="opacity:1;fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11"
width="484.25"
height="249"
x="90"
y="112.5" /><rect
style="fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8"
width="12"
height="12"
x="507.56818"
y="-301.10004"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1"
width="12"
height="12"
x="361.46231"
y="-89.463524"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-1"
width="12"
height="12"
x="389.40585"
y="-60.842598"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-1-0"
width="12"
height="12"
x="416.47607"
y="-33.116081"
ry="0"
transform="rotate(44.313856)" /></g><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-9"
width="87"
height="216"
x="193.91776"
y="119.24599" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-4"
width="12"
height="12"
x="487.27533"
y="-296.15897"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-9-3"
width="85.75"
height="219.75"
x="470.16751"
y="119.49599" /><g
id="g2"
transform="translate(2.3119996,-71.694)">
<g
id="g1">
<polygon
fill="#00b6de"
points="703.77,340.194 712.852,349.277 721.934,340.194 758.189,340.194 758.189,256.861 723.582,256.861 713.171,267.274 702.758,256.861 628.582,256.861 618.171,267.274 607.758,256.861 561.523,256.861 561.523,340.194 609.104,340.194 618.186,349.277 627.268,340.194 "
id="polygon1" />
</g>
</g>
<g
id="g4"
transform="translate(2.3119996,-71.694)">
<g
id="g3">
<polygon
fill="#e6e6e6"
points="712.837,278.274 707.221,272.658 676.557,272.658 676.557,333.657 706.983,333.657 713.055,339.729 719.128,333.657 751.557,333.657 751.557,272.658 718.452,272.658 "
id="polygon2" />
</g>
</g>
<g
id="g6"
transform="translate(2.3119996,-71.694)">
<g
id="g5">
<polygon
fill="#e6e6e6"
points="618.171,278.274 611.555,271.658 581.558,271.658 581.558,332.657 611.983,332.657 618.056,338.729 624.128,332.657 656.558,332.657 656.558,271.658 624.786,271.658 "
id="polygon4" />
</g>
</g>
<g
id="g8"
transform="translate(2.3119996,-71.694)"
style="fill:#000080">
<g
id="g7"
style="fill:#000080">
<polygon
fill="#ed1849"
points="722.166,349.277 712.504,358.941 702.84,349.277 670.523,349.277 670.523,424.276 757.523,424.276 757.523,349.277 "
id="polygon6"
style="fill:#000080" />
</g>
</g>
<g
id="g10"
transform="translate(2.3119996,-71.694)"
style="fill:#000080">
<g
id="g9"
style="fill:#000080">
<polygon
fill="#ed1849"
points="628.371,348.611 618.043,358.941 607.713,348.611 575.523,348.611 575.523,423.61 662.523,423.61 662.523,348.611 "
id="polygon8"
style="fill:#000080" />
</g>
</g>
<g
id="g14"
transform="translate(2.3119996,-71.694)">
<g
id="g13">
<polygon
fill="#c1d82f"
points="575.428,217.35 575.428,250.526 610.09,250.526 618.171,258.607 626.251,250.526 705.09,250.526 713.171,258.607 721.251,250.526 757.427,250.526 757.427,173.527 575.428,173.527 575.428,199.703 584.252,208.525 "
id="polygon12" />
</g>
</g>
<g
id="g26"
transform="translate(0.4155534,-73.944)">
<g
id="g25">
<polygon
fill="#4a4a30"
points="177.974,133.944 125.111,133.944 118.043,141.013 110.974,133.944 86.834,133.944 86.834,166.944 178.263,166.944 184.834,173.514 191.403,166.944 281.833,166.944 281.833,133.944 258.611,133.944 251.543,141.013 244.474,133.944 192.111,133.944 185.043,141.013 "
id="polygon24" />
</g>
</g>
<g
id="g28"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g27">
<polygon
fill="#e6e6e6"
points="330.188,290.202 330.188,296.444 511.188,296.444 511.188,289.015 517.259,282.942 511.188,276.87 511.188,268.444 330.188,268.444 330.188,277.683 336.447,283.942 "
id="polygon26" />
</g>
</g>
<g
id="g30"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g29">
<polygon
fill="#e6e6e6"
points="330.188,251.536 330.188,257.944 511.188,257.944 511.188,250.515 517.259,244.442 511.188,238.37 511.188,229.944 330.188,229.944 330.188,239.016 336.447,245.276 "
id="polygon28" />
</g>
</g>
<g
id="g32"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g31">
<polygon
fill="#e6e6e6"
points="330.188,211.18 330.188,218.444 511.188,218.444 511.188,211.015 517.259,204.942 511.188,198.87 511.188,190.444 330.188,190.444 330.188,199.372 336.092,205.276 "
id="polygon30" />
</g>
</g>
<g
id="g34"
transform="translate(-40.188,-71.694)">
<g
id="g33">
<polygon
fill="#e6e6e6"
points="144.188,342.944 144.188,406.944 225.188,406.944 225.188,381.515 231.259,375.442 225.188,369.37 225.188,342.944 190.445,342.944 184.043,349.348 177.639,342.944 "
id="polygon32" />
</g>
</g>
<g
id="g36"
transform="translate(-40.188,-71.694)">
<g
id="g35">
<polygon
fill="#e6e6e6"
points="177.618,330.944 184.188,337.514 190.757,330.944 225.188,330.944 225.188,266.944 190.778,266.944 183.71,274.014 176.64,266.944 144.188,266.944 144.188,330.944 "
id="polygon34" />
</g>
</g>
<g
id="g38"
transform="translate(-40.188,-71.694)">
<g
id="g37">
<polygon
fill="#e6e6e6"
points="177.118,254.944 183.688,261.514 190.257,254.944 224.688,254.944 224.688,190.944 191.445,190.944 184.376,198.014 177.306,190.944 143.688,190.944 143.688,254.944 "
id="polygon36" />
</g>
</g>
<g
id="g40"
transform="matrix(1,0,0,0.86327911,0.062,-77.645148)">
<g
id="g39">
<polygon
fill="#4a4a30"
points="81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 87.259,254.109 81.188,248.037 "
id="polygon38" />
</g>
</g><g
id="g40-0"
transform="matrix(1,0,0,0.86327911,0.312,-18.368819)">
<g
id="g39-6">
<polygon
fill="#4a4a30"
points="87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 "
id="polygon38-4" />
</g>
</g><g
id="g40-0-2"
transform="matrix(1,0,0,0.86327911,0.062,40.907511)">
<g
id="g39-6-5">
<polygon
fill="#4a4a30"
points="87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 "
id="polygon38-4-8" />
</g>
</g><g
id="g40-0-28"
transform="matrix(1,0,0,0.86327911,-0.188,100.18384)">
<g
id="g39-6-4">
<polygon
fill="#4a4a30"
points="81.188,285.61 81.188,260.181 87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 "
id="polygon38-4-7" />
</g>
</g>
<g
id="g42"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g41"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="178.618,123.944 185.188,130.514 191.757,123.944 215.188,123.944 215.188,71.944 154.188,71.944 154.188,123.944 "
id="polygon40"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="126.062"
y="75.334"
fill="none"
width="116.666"
height="21.333"
id="rect42" />
<text
fill="#ffffff"
font-family="MyriadPro-Regular"
font-size="12px"
id="text42"
x="139.47949"
y="82.440079"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Source Materials</text>
<rect
x="155.41699"
y="10.834001"
fill="none"
width="58.666"
height="40.667"
id="rect43" />
<text
id="text44"
x="190.00726"
y="29.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:49.6985"
transform="translate(-5.5244746,-7.8775879)"
xml:space="preserve"><tspan
x="190.00726"
y="29.10741"
id="tspan1">Local<tspan
y="29.10741"
id="tspan2"> </tspan></tspan><tspan
x="190.00726"
y="42.440787"
id="tspan3">Projects</tspan></text>
<g
id="g45"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g44"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="245.118,123.944 251.688,130.514 258.257,123.944 281.688,123.944 281.688,71.944 220.688,71.944 220.688,123.944 "
id="polygon44"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="221.91699"
y="7.8340006"
fill="none"
width="58.666"
height="40.667"
id="rect45" />
<text
id="text47"
x="258.17291"
y="26.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:56.5275;fill:#000000"
transform="translate(-6.4360358,-3.6326896)"
xml:space="preserve"><tspan
x="258.17291"
y="26.10741"
id="tspan4">SCMs<tspan
y="26.10741"
id="tspan5"> </tspan></tspan><tspan
x="258.17291"
y="39.440787"
id="tspan6">(optional)</tspan></text>
<g
id="g48"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g47"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="111.618,123.944 118.188,130.514 124.757,123.944 148.188,123.944 148.188,71.944 87.188,71.944 87.188,123.944 "
id="polygon47"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="88.417007"
y="10.834001"
fill="none"
width="58.666"
height="40.667"
id="rect48" />
<text
id="text49"
x="125.51399"
y="29.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:64.823"
transform="translate(-8.2169997,-13.75401)"
xml:space="preserve"><tspan
x="125.51399"
y="29.10741"
id="tspan7">Upstream<tspan
y="29.10741"
id="tspan8"> </tspan></tspan><tspan
x="125.51399"
y="42.440787"
id="tspan9">Project<tspan
y="42.440787"
id="tspan10"> </tspan></tspan><tspan
x="125.51399"
y="55.774165"
id="tspan11">Releases</tspan></text>
<rect
x="115.167"
y="137.084"
fill="none"
width="58.666"
height="40.667"
id="rect49" />
<text
id="text51"
x="128.34723"
y="147.37112"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="128.34723"
y="147.37112"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan50"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Source </tspan><tspan
x="123.54125"
y="161.77113"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan51"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Fetching</tspan></text>
<rect
x="115.167"
y="215.08401"
fill="none"
width="58.666"
height="40.666"
id="rect51" />
<text
id="text53"
x="131.82678"
y="224.31099"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="131.82678"
y="224.31099"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan52"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Patch </tspan><tspan
x="117.00081"
y="238.70999"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan53"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Application</tspan></text>
<rect
x="107.167"
y="279.08401"
fill="none"
width="74.166"
height="69.237"
id="rect53" />
<text
id="text57"
x="149.00055"
y="297.35791"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:74.8743"
transform="translate(-3.496696,4.953096)"
xml:space="preserve"><tspan
x="149.00055"
y="297.35791"
id="tspan12">Configuration /<tspan
y="297.35791"
id="tspan13"> </tspan></tspan><tspan
x="149.00055"
y="310.69127"
id="tspan14">Compile</tspan></text>
<rect
x="201.16699"
y="184.084"
fill="none"
width="74.166"
height="89.237"
id="rect57" />
<text
id="text63"
x="221.86859"
y="192.60429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="221.86859"
y="192.60429"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan58"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Output </tspan><tspan
x="211.42859"
y="207.0043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan59"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Analysis for </tspan><tspan
x="218.94058"
y="221.4043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan60"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">package </tspan><tspan
x="207.54759"
y="235.80429"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan61"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">splitting plus </tspan><tspan
x="218.94058"
y="250.2043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan62"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">package </tspan><tspan
x="207.81059"
y="264.60431"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan63"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">relationships</tspan></text><text
id="text63-1"
x="555.48315"
y="202.90402"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:31.0495"
transform="translate(-42.334211,23.629617)"
xml:space="preserve"><tspan
x="555.48315"
y="202.90402"
id="tspan15">QA<tspan
y="202.90402"
id="tspan16"> </tspan></tspan><tspan
x="555.48315"
y="216.2374"
id="tspan18">Tests</tspan></text>
<rect
x="319.146"
y="127.084"
fill="none"
width="116.666"
height="21.333"
id="rect63" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text64"
x="335.19238"
y="189.60429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.rpm generation</text>
<rect
x="319.146"
y="166.584"
fill="none"
width="116.666"
height="21.333"
id="rect64" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text65"
x="335.76849"
y="229.10429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.deb generation</text>
<rect
x="319.146"
y="205.08401"
fill="none"
width="116.666"
height="21.333"
id="rect65" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text66"
x="337.9404"
y="267.60391"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.ipk generation</text>
<rect
x="296.16699"
y="307.08401"
fill="none"
width="77.166"
height="30.237"
id="rect66" />
<rect
x="299.66699"
y="261.08401"
fill="none"
width="71.853996"
height="33.664001"
id="rect67" />
<rect
x="395.97998"
y="261.08401"
fill="none"
width="71.853996"
height="33.664001"
id="rect69" />
<rect
x="390.66699"
y="307.08401"
fill="none"
width="77.166"
height="30.237"
id="rect71" />
<rect
y="133"
fill="none"
width="81.666"
height="39.334"
id="rect73"
x="0.061999973" />
<text
id="text75"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-23.458902,-49.50401)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan20"><tspan
style="fill:#ffffff"
id="tspan19">User</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan22"><tspan
style="fill:#ffffff"
id="tspan21">Configuration</tspan></tspan></text><text
id="text75-4"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-24.603766,70.32617)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan24"><tspan
style="fill:#ffffff"
id="tspan23">Machine BSP</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan26"><tspan
style="fill:#ffffff"
id="tspan25">Configuration</tspan></tspan></text><text
id="text75-4-6"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-25.353766,128.82617)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan28"><tspan
style="fill:#ffffff"
id="tspan27">Policy</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan30"><tspan
style="fill:#ffffff"
id="tspan29">Configuration</tspan></tspan></text>
<rect
y="211.16798"
fill="none"
width="81.666"
height="39.333"
id="rect76"
x="0.061999973" />
<text
id="text78"
x="70.02713"
y="265.4418"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:89.4625"
transform="translate(-28.848315,-69.549143)"
xml:space="preserve"><tspan
x="70.02713"
y="265.4418"
id="tspan32"><tspan
style="fill:#ffffff"
id="tspan31">Metadata
</tspan></tspan><tspan
x="70.02713"
y="278.77516"
id="tspan34"><tspan
style="fill:#ffffff"
id="tspan33">(.bb + patches)</tspan></tspan></text>
<rect
x="612.83502"
y="131.418"
fill="none"
width="112.186"
height="20.163"
id="rect78" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text79"
x="629.87451"
y="142.68779"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Package Feeds</text>
<rect
x="579.98102"
y="306.25101"
fill="none"
width="81.666"
height="39.332001"
id="rect79" />
<text
fill="#ffffff"
font-family="MyriadPro-Regular"
font-size="12px"
id="text80"
x="604.24854"
y="319.7699"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Images</text>
<rect
x="584.14703"
y="216.08499"
fill="none"
width="71.853996"
height="33.664001"
id="rect80" />
<text
id="text81"
x="606.88434"
y="227.1058"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="606.88434"
y="227.1058"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan80"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Image </tspan><tspan
x="594.48834"
y="241.50479"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan81"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Generation</tspan></text>
<rect
x="678.83301"
y="215.08499"
fill="none"
width="77.166"
height="30.237"
id="rect81" />
<text
id="text83"
x="708.21045"
y="228.6058"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="708.21045"
y="228.6058"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan82"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">SDK </tspan><tspan
x="690.33142"
y="243.00479"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan83"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Generation</tspan></text>
<rect
x="379.06299"
y="86.834"
fill="none"
width="199.03999"
height="21.164"
id="rect83" />
<text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84"
x="426.28253"
y="26.005543"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333">OpenEmbedded Architecture Workflow</text><g
id="g18"
transform="translate(-10.254525,-9.75401)"><rect
style="fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17">Build System</tspan></text></g><g
id="g18-4"
transform="translate(-10.254525,-25.970712)"><rect
style="fill:#4a4a30;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4">Metadata/Inputs</tspan></text></g><g
id="g18-4-9"
transform="translate(-10.254525,-42.187414)"><rect
style="fill:#ff7f2a;fill-opacity:1;stroke:#ff631a;stroke-width:0.49911493;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0">Upstream Source</tspan></text></g><g
id="g18-4-9-2"
transform="translate(101.50803,-40.934366)"><rect
style="fill:#c1d82f;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0">Output Packages</tspan></text></g><g
id="g18-4-9-2-5"
transform="translate(101.50803,-24.709046)"><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2-2"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2-9"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0-0">Process steps (tasks)</tspan></text></g><g
id="g18-4-9-2-5-8"
transform="translate(101.50803,-8.4837252)"><rect
style="fill:#000080;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2-2-3"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2-9-8"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0-0-0">Output Imaga Data</tspan></text></g>
<rect
x="675.64801"
y="304.91699"
fill="none"
width="81.666"
height="39.332001"
id="rect85" />
<text
id="text86"
x="720.58508"
y="322.93991"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:65.518"
transform="translate(-2.5824824,-12.25401)"
xml:space="preserve"><tspan
x="720.58508"
y="322.93991"
id="tspan36"><tspan
style="fill:#ffffff"
id="tspan35">Application</tspan><tspan
y="322.93991"
id="tspan37"> </tspan></tspan><tspan
x="720.58508"
y="336.27327"
id="tspan39"><tspan
style="fill:#ffffff"
id="tspan38">Development</tspan><tspan
y="336.27327"
id="tspan40"> </tspan></tspan><tspan
x="720.58508"
y="349.60665"
id="tspan42"><tspan
style="fill:#ffffff"
id="tspan41">SDK</tspan></tspan></text>
</svg>

After

Width:  |  Height:  |  Size: 38 KiB

View File

@@ -23,12 +23,12 @@ comes to delivering embedded software stacks. The project allows
software customizations and build interchange for multiple hardware
platforms as well as software stacks that can be maintained and scaled.
.. image:: figures/key-dev-elements.png
:align: center
.. image:: svg/key-dev-elements.*
:width: 100%
For further introductory information on the Yocto Project, you might be
interested in this
`article <https://www.embedded.com/electronics-blogs/say-what-/4458600/Why-the-Yocto-Project-for-my-IoT-Project->`__
`article <https://www.embedded.com/why-the-yocto-project-for-my-iot-project/>`__
by Drew Moseley and in this short introductory
`video <https://www.youtube.com/watch?v=utZpKM7i5Z4>`__.
@@ -44,7 +44,7 @@ Here are features and advantages of the Yocto Project:
system, software, and service vendors adopt and support the Yocto
Project in their products and services. For a look at the Yocto
Project community and the companies involved with the Yocto Project,
see the "COMMUNITY" and "ECOSYSTEM" tabs on the
see the "COMMUNITY" and "ABOUT" tabs on the
:yocto_home:`Yocto Project <>` home page.
- *Architecture Agnostic:* Yocto Project supports Intel, ARM, MIPS,
@@ -60,10 +60,9 @@ Here are features and advantages of the Yocto Project:
move between architectures without moving to new development
environments. Additionally, if you have used the Yocto Project to
create an image or application and you find yourself not able to
support it, commercial Linux vendors such as Wind River, Mentor
Graphics, Timesys, and ENEA could take it and provide ongoing
support. These vendors have offerings that are built using the Yocto
Project.
support it, commercial Linux vendors listed on :yocto_home:`/members/` and
:yocto_home:`/about/participants/` could take it and provide ongoing
support.
- *Flexibility:* Corporations use the Yocto Project many different
ways. One example is to create an internal Linux distribution as a
@@ -734,7 +733,7 @@ The :term:`OpenEmbedded Build System` uses a "workflow" to
accomplish image and SDK generation. The following figure overviews that
workflow:
.. image:: figures/YP-flow-diagram.png
.. image:: svg/yp-flow-diagram.*
:align: center
Here is a brief summary of the "workflow":
@@ -760,7 +759,8 @@ Here is a brief summary of the "workflow":
package feed that is used to create the final root file image.
7. The build system generates the file system image and a customized
Extensible SDK (eSDK) for application development in parallel.
:doc:`SDK </sdk-manual/index>` (Software Development Kit) for application
development in parallel.
For a very detailed look at this workflow, see the
":ref:`overview-manual/concepts:openembedded build system concepts`" section.

View File

@@ -1,41 +1,27 @@
#
# Macros used in the documentation
#
# The DISTRO variable represents the current docs version. It should be used
# when referring to the current docs version. See also DISTRO_LATEST_TAG.
DISTRO : "4.0"
# The DISTRO_LATEST_TAG represents the latest tag on the current branch. It
# should be used in HTTP link referring to the current docs version. In these
# cases, the DISTRO may point to A.B.999 which does not exist (just used to
# represent the latest HEAD revision on the branch). DISTRO_LATEST_TAG should
# always point to an existing tag.
DISTRO_LATEST_TAG : "4.0"
DISTRO_NAME_NO_CAP : "kirkstone"
DISTRO_NAME : "Kirkstone"
DISTRO_NAME_NO_CAP_MINUS_ONE : "honister"
DISTRO_NAME_NO_CAP_LTS : "dunfell"
YOCTO_DOC_VERSION : "4.0"
DISTRO_REL_TAG : "yocto-4.0"
DISTRO_REL_TAG : "yocto-$DISTRO;"
DISTRO_REL_LATEST_TAG : "yocto-&DISTRO_LATEST_TAG;"
DOCCONF_VERSION : "dev"
BITBAKE_SERIES : ""
YOCTO_DL_URL : "https://downloads.yoctoproject.org"
YOCTO_AB_URL : "https://autobuilder.yoctoproject.org"
YOCTO_RELEASE_DL_URL : "&YOCTO_DL_URL;/releases/yocto/yocto-&DISTRO;"
UBUNTU_HOST_PACKAGES_ESSENTIAL : "gawk wget git diffstat unzip texinfo gcc \
build-essential chrpath socat cpio python3 python3-pip python3-pexpect \
xz-utils debianutils iputils-ping python3-git python3-jinja2 \
python3-subunit zstd liblz4-tool file locales libacl1
\n\ $ sudo locale-gen en_US.UTF-8"
FEDORA_HOST_PACKAGES_ESSENTIAL : "gawk make wget tar bzip2 gzip python3 unzip perl patch \
diffutils diffstat git cpp gcc gcc-c++ glibc-devel texinfo chrpath \
ccache perl-Data-Dumper perl-Text-ParseWords perl-Thread-Queue perl-bignum socat \
python3-pexpect findutils which file cpio python python3-pip xz python3-GitPython \
python3-jinja2 rpcgen perl-FindBin perl-File-Compare \
perl-File-Copy perl-locale zstd lz4 hostname glibc-langpack-en libacl"
OPENSUSE_HOST_PACKAGES_ESSENTIAL : "python gcc gcc-c++ git chrpath make wget python-xml \
diffstat makeinfo python-curses patch socat python3 python3-curses tar python3-pip \
python3-pexpect xz which python3-Jinja2 rpcgen \
zstd lz4 bzip2 gzip hostname libacl1
\n\ $ sudo pip3 install GitPython"
ALMALINUX_HOST_PACKAGES_ESSENTIAL : "-y epel-release
\n\ $ sudo yum install dnf-plugins-core
\n\ $ sudo dnf config-manager --set-enabled crb
\n\ $ sudo dnf makecache
\n\ $ sudo dnf install gawk make wget tar bzip2 gzip python3 unzip perl patch \
diffutils diffstat git cpp gcc gcc-c++ glibc-devel texinfo chrpath ccache \
socat perl-Data-Dumper perl-Text-ParseWords perl-Thread-Queue python3-pip \
python3-GitPython python3-jinja2 python3-pexpect xz which \
rpcgen zstd lz4 cpio glibc-langpack-en libacl"
PIP3_HOST_PACKAGES_DOC : "$ sudo pip3 install sphinx sphinx_rtd_theme pyyaml"
MIN_PYTHON_VERSION : "3.6.0"
MIN_TAR_VERSION : "1.28"
MIN_GIT_VERSION : "1.8.3.1"
@@ -47,3 +33,191 @@ MIN_DISK_SPACE : "90"
MIN_DISK_SPACE_RM_WORK : "40"
# RAM (Gbytes) needed to generate qemux86-64 core-image-sato on Ubuntu 22.04 (x86-64) on a 4 core system
MIN_RAM : "8"
#
# Dependencies
#
# Shared between distros
PIP3_HOST_PACKAGES_DOC: sphinx sphinx_rtd_theme pyyaml
UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL: >-
build-essential
chrpath
cpio
debianutils
diffstat
file
gawk
gcc
git
iputils-ping
libacl1
liblz4-tool
locales
python3
python3-git
python3-jinja2
python3-pexpect
python3-pip
python3-subunit
socat
texinfo
unzip
wget
xz-utils
zstd
UBUNTU_DEBIAN_HOST_PACKAGES_DOC: >-
git
inkscape
locales
make
python3-saneyaml
python3-sphinx-rtd-theme
sphinx
texlive-latex-extra
FEDORA_HOST_PACKAGES_ESSENTIAL: >-
bzip2
ccache
chrpath
cpio
cpp
diffstat
diffutils
file
findutils
gawk
gcc
gcc-c++
git
glibc-devel
glibc-langpack-en
gzip
hostname
libacl
lz4
make
patch
perl
perl-Data-Dumper
perl-File-Compare
perl-File-Copy
perl-FindBin
perl-Text-ParseWords
perl-Thread-Queue
perl-bignum
perl-locale
python
python3
python3-GitPython
python3-jinja2
python3-pexpect
python3-pip
rpcgen
socat
tar
texinfo
unzip
wget
which
xz
zstd
FEDORA_HOST_PACKAGES_DOC: >-
git
glibc-locale-source
inkscape
make
python3-pip
texlive-fncychap
which
OPENSUSE_HOST_PACKAGES_ESSENTIAL: >-
bzip2
chrpath
diffstat
gcc
gcc-c++
git
gzip
hostname
libacl1
lz4
make
makeinfo
patch
python
python-curses
python-xml
python3
python3-Jinja2
python3-curses
python3-pexpect
python3-pip
rpcgen
socat
tar
wget
which
xz
zstd
OPENSUSE_PIP3_HOST_PACKAGES_ESSENTIAL: GitPython
OPENSUSE_HOST_PACKAGES_DOC: >-
git
glibc-i18ndata
inkscape
make
python3-pip
texlive-fncychap
which
ALMALINUX_HOST_PACKAGES_ESSENTIAL: >-
bzip2
ccache
chrpath
cpio
cpp
diffstat
diffutils
gawk
gcc
gcc-c++
git
glibc-devel
glibc-langpack-en
gzip
libacl
lz4
make
patch
perl
perl-Data-Dumper
perl-Text-ParseWords
perl-Thread-Queue
python3
python3-GitPython
python3-jinja2
python3-pexpect
python3-pip
rpcgen
socat
tar
texinfo
unzip
wget
which
xz
zstd
ALMALINUX_HOST_PACKAGES_DOC: >-
git
glibc-locale-source
inkscape
make
python3-pip
texlive-fncychap
which

View File

@@ -153,27 +153,38 @@ software that includes bash-completion data.
``bin_package``
===============
The :ref:`ref-classes-bin-package` class is a helper class for recipes that extract the
contents of a binary package (e.g. an RPM) and install those contents
rather than building the binary from source. The binary package is
extracted and new packages in the configured output package format are
created. Extraction and installation of proprietary binaries is a good
example use for this class.
The :ref:`ref-classes-bin-package` class is a helper class for recipes, that
disables the :ref:`ref-tasks-configure` and :ref:`ref-tasks-compile` tasks and
copies the content of the :term:`S` directory into the :term:`D` directory. This
is useful for installing binary packages (e.g. RPM packages) by passing the
package in the :term:`SRC_URI` variable and inheriting this class.
For RPMs and other packages that do not contain a subdirectory, you should set
the :term:`SRC_URI` option ``subdir`` to :term:`BP` so that the contents are
extracted to the directory expected by the default value of :term:`S`. For
example::
SRC_URI = "https://example.com/downloads/somepackage.rpm;subdir=${BP}"
This class can also be used for tarballs. For example::
SRC_URI = "file://somepackage.tar.xz;subdir=${BP}"
The :ref:`ref-classes-bin-package` class will copy the extracted content of the
tarball from :term:`S` to :term:`D`.
This class assumes that the content of the package as installed in :term:`S`
mirrors the expected layout once installed on the target, which is generally the
case for binary packages. For example, an RPM package for a library would
usually contain the ``usr/lib`` directory, and should be extracted to
``${S}/usr/lib/<library>.so.<version>`` to be installed in :term:`D` correctly.
.. note::
For RPMs and other packages that do not contain a subdirectory, you
should specify an appropriate fetcher parameter to point to the
subdirectory. For example, if BitBake is using the Git fetcher (``git://``),
the "subpath" parameter limits the checkout to a specific subpath
of the tree. Here is an example where ``${BP}`` is used so that the files
are extracted into the subdirectory expected by the default value of
:term:`S`::
SRC_URI = "git://example.com/downloads/somepackage.rpm;branch=main;subpath=${BP}"
See the ":ref:`bitbake-user-manual/bitbake-user-manual-fetching:fetchers`" section in the BitBake User Manual for
more information on supported BitBake Fetchers.
The extraction of the package passed in :term:`SRC_URI` is not handled by the
:ref:`ref-classes-bin-package` class, but rather by the appropriate
:ref:`fetcher <bitbake-user-manual/bitbake-user-manual-fetching:fetchers>`
depending on the file extension.
.. _ref-classes-binconfig:
@@ -298,8 +309,12 @@ file for details about how to enable this mechanism in your configuration
file, how to disable it for specific recipes, and how to share ``ccache``
files between builds.
However, using the class can lead to unexpected side-effects. Thus, using
this class is not recommended.
Recipes can also explicitly disable `Ccache` support even when the
:ref:`ref-classes-ccache` class is enabled, by setting the
:term:`CCACHE_DISABLE` variable to "1".
Using the :ref:`ref-classes-ccache` class can lead to unexpected side-effects.
Using this class is not recommended.
.. _ref-classes-chrpath:
@@ -477,7 +492,7 @@ You can also look for vulnerabilities in specific packages by passing
``-c cve_check`` to BitBake.
After building the software with Bitbake, CVE check output reports are available in ``tmp/deploy/cve``
and image specific summaries in ``tmp/deploy/images/*.cve`` or ``tmp/deploy/images/*.json`` files.
and image specific summaries in ``tmp/deploy/images/*.json`` files.
When building, the CVE checker will emit build time warnings for any detected
issues which are in the state ``Unpatched``, meaning that CVE issue seems to affect the software component
@@ -814,6 +829,14 @@ software that uses the GNU ``gettext`` internationalization and localization
system. All recipes building software that use ``gettext`` should inherit this
class.
This class will configure recipes to build translations *unless*:
- the :term:`USE_NLS` variable is set to ``no``, or
- the :term:`INHIBIT_DEFAULT_DEPS` variable is set and the recipe inheriting
the :ref:`ref-classes-gettext` class does not also inherit the
:ref:`ref-classes-cross-canadian` class.
.. _ref-classes-gnomebase:
``gnomebase``
@@ -1095,6 +1118,53 @@ The :ref:`ref-classes-image_types` class also handles conversion and compression
:term:`IMAGE_FSTYPES`. This would also be similar for Virtual Box Virtual Disk
Image ("vdi") and QEMU Copy On Write Version 2 ("qcow2") images.
.. _ref-classes-image-container:
``image-container``
===================
The :ref:`ref-classes-image-container` class is automatically inherited in
:doc:`image </ref-manual/images>` recipes that have the ``container`` image type
in :term:`IMAGE_FSTYPES`. It provides relevant settings to generate an image
ready for use with an :wikipedia:`OCI <Open_Container_Initiative>`-compliant
container management tool, such as :wikipedia:`Podman <Podman>` or
:wikipedia:`Docker <Docker_(software)>`.
.. note::
This class neither builds nor installs container management tools on the
target. Those tools are available in the :yocto_git:`meta-virtualization
</meta-virtualization>` layer.
You should set the :term:`PREFERRED_PROVIDER` for the Linux kernel to
``linux-dummy`` in a :term:`configuration file`::
PREFERRED_PROVIDER_virtual/kernel = "linux-dummy"
Otherwise an error is triggered. If desired, the
:term:`IMAGE_CONTAINER_NO_DUMMY` variable can be set to "1" to avoid triggering
this error.
The ``linux-dummy`` recipe acts as a Linux kernel recipe but builds nothing. It
is relevant to use as the preferred Linux kernel provider in this case as a
container image does not need to include a Linux kernel. Selecting it as the
preferred provider for the kernel will also decrease build time.
Using this class only deploys an additional ``tar.bz2`` archive to
:term:`DEPLOY_DIR_IMAGE`. This archive can be used in a container file (a file
typically named ``Dockerfile`` or ``Containerfile``). For example, to be used with
:wikipedia:`Podman <Podman>` or :wikipedia:`Docker <Docker_(software)>`, the
`container file <https://docs.docker.com/reference/dockerfile/>`__ could contain
the following instructions:
.. code-block:: dockerfile
FROM scratch
ADD ./image-container-qemux86-64.rootfs.tar.bz2 /
ENTRYPOINT /bin/sh
This is suitable to build a container using our generated root filesystem image.
.. _ref-classes-image-live:
``image-live``
@@ -1844,7 +1914,8 @@ a couple different ways:
Not using this naming convention can lead to subtle problems
caused by existing code that depends on that naming convention.
- Create or modify a target recipe that contains the following::
- Or, create a :ref:`ref-classes-native` variant of any target recipe (e.g.
``myrecipe.bb``) by adding the following to the recipe::
BBCLASSEXTEND = "native"
@@ -1875,7 +1946,18 @@ couple different ways:
inherit statement in the recipe after all other inherit statements so
that the :ref:`ref-classes-nativesdk` class is inherited last.
- Create a :ref:`ref-classes-nativesdk` variant of any recipe by adding the following::
.. note::
When creating a recipe, you must follow this naming convention::
nativesdk-myrecipe.bb
Not doing so can lead to subtle problems because there is code that
depends on the naming convention.
- Or, create a :ref:`ref-classes-nativesdk` variant of any target recipe (e.g.
``myrecipe.bb``) by adding the following to the recipe::
BBCLASSEXTEND = "nativesdk"
@@ -1884,16 +1966,6 @@ couple different ways:
specify any functionality specific to the respective SDK machine or
target case.
.. note::
When creating a recipe, you must follow this naming convention::
nativesdk-myrecipe.bb
Not doing so can lead to subtle problems because there is code that
depends on the naming convention.
Although applied differently, the :ref:`ref-classes-nativesdk` class is used with both
methods. The advantage of the second method is that you do not need to
have two separate recipes (assuming you need both) for the SDK machine
@@ -2467,7 +2539,7 @@ runtime tests for recipes that build software that provides these tests.
This class is intended to be inherited by individual recipes. However,
the class' functionality is largely disabled unless "ptest" appears in
:term:`DISTRO_FEATURES`. See the
":ref:`dev-manual/packages:testing packages with ptest`"
":ref:`test-manual/ptest:testing packages with ptest`"
section in the Yocto Project Development Tasks Manual for more information
on ptest.
@@ -2480,7 +2552,7 @@ Enables package tests (ptests) specifically for GNOME packages, which
have tests intended to be executed with ``gnome-desktop-testing``.
For information on setting up and running ptests, see the
":ref:`dev-manual/packages:testing packages with ptest`"
":ref:`test-manual/ptest:testing packages with ptest`"
section in the Yocto Project Development Tasks Manual.
.. _ref-classes-python3-dir:
@@ -2531,6 +2603,25 @@ The :ref:`ref-classes-recipe_sanity` class checks for the presence of any host s
recipe prerequisites that might affect the build (e.g. variables that
are set or software that is present).
.. _ref-classes-relative_symlinks:
``relative_symlinks``
=====================
The :ref:`ref-classes-relative_symlinks` class walks the symbolic links in the
:term:`D` directory and replaces links pointing to absolute paths to relative
paths. This is occasionally used in some recipes that create wrong symbolic
links when their :ref:`ref-classes-native` version is built, and/or would cause
breakage in the :ref:`overview-manual/concepts:shared state cache`.
For example, if the following symbolic link is found in :term:`D`::
/usr/bin/foo -> /sbin/bar
It is replaced by::
/usr/bin/foo -> ../../sbin/bar
.. _ref-classes-relocatable:
``relocatable``
@@ -3025,6 +3116,22 @@ class assuming :term:`PATCHRESOLVE` is set to "user", the
:ref:`ref-classes-cml1` class, and the :ref:`ref-classes-devshell` class all
use the :ref:`ref-classes-terminal` class.
.. _ref-classes-testexport:
``testexport``
==============
Based on the :ref:`ref-classes-testimage` class, the
:ref:`ref-classes-testexport` class can be used to export the test environment
outside of the :term:`OpenEmbedded Build System`. This will generate the
directory structure to execute the runtime tests using the
:oe_git:`runexported.py </openembedded-core/tree/meta/lib/oeqa/runexported.py>`
Python script.
For more details on how to use :ref:`ref-classes-testexport`, see
the :ref:`test-manual/runtime-testing:Exporting Tests` section in the Yocto
Project Test Environment Manual.
.. _ref-classes-testimage:
``testimage``
@@ -3053,8 +3160,8 @@ after it is built, you can set :term:`TESTIMAGE_AUTO`::
TESTIMAGE_AUTO = "1"
For information on how to enable, run, and create new tests, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
.. _ref-classes-testsdk:
@@ -3150,6 +3257,9 @@ It is intended to be inherited from U-Boot recipes.
The variables used by this class are:
- :term:`SPL_DTB_BINARY`: Name of the SPL device tree binary. Can be set to an
empty string to indicate that no SPL should be created and added to the FIT
image.
- :term:`SPL_MKIMAGE_DTCOPTS`: DTC options for U-Boot ``mkimage`` when
building the FIT image.
- :term:`SPL_SIGN_ENABLE`: enable signing the FIT image.
@@ -3182,22 +3292,51 @@ imitates.
``uninative``
=============
Attempts to isolate the build system from the host distribution's C
library in order to make re-use of native shared state artifacts across
different host distributions practical. With this class enabled, a
tarball containing a pre-built C library is downloaded at the start of
the build. In the Poky reference distribution this is enabled by default
through ``meta/conf/distro/include/yocto-uninative.inc``. Other
distributions that do not derive from poky can also
"``require conf/distro/include/yocto-uninative.inc``" to use this.
Alternatively if you prefer, you can build the uninative-tarball recipe
yourself, publish the resulting tarball (e.g. via HTTP) and set
``UNINATIVE_URL`` and ``UNINATIVE_CHECKSUM`` appropriately. For an
example, see the ``meta/conf/distro/include/yocto-uninative.inc``.
The :ref:`ref-classes-uninative` class allows binaries to run on systems with
older or newer :wikipedia:`Glibc <Glibc>` versions. This means
:ref:`ref-classes-native` recipe :ref:`overview-manual/concepts:shared state
cache` can be shared among different host distributions of different versions,
i.e. the :ref:`overview-manual/concepts:shared state cache` is "universal".
The :ref:`ref-classes-uninative` class is also used unconditionally by the extensible
SDK. When building the extensible SDK, ``uninative-tarball`` is built
and the resulting tarball is included within the SDK.
To allow this to work, the dynamic loader is changed to our own :manpage:`ld.so
<ld.so.8>` when binaries are compiled using the
``--dynamic-linker`` option. This means when the binary is executed, it finds
our own :manpage:`ld.so <ld.so.8>` and that loader has a modified search path
which finds a newer Glibc version.
The linking of the binaries is not changed at link time since the
headers on the system wouldn't match the newer Glibc and this causes
obtuse failures. Changing the loader is effectively the same as if the
system had a Glibc upgrade after the binary was compiled, so it is a
mechanism supported by upstream.
One caveat to this approach is that the uninative Glibc binary must be
equal to or newer in version to the versions on all the systems using
the common :ref:`overview-manual/concepts:shared state cache`. This is why
:ref:`ref-classes-uninative` is regularly changed on the development and stable
branches.
Another potential issue is static linking: static libraries created on
a system with a new Glibc version may have symbols not present in older
versions, which would then fail during linking on older systems. This
is one reason we don't use static linking for our :ref:`ref-classes-native`
binaries.
With this class enabled, a tarball containing a pre-built C library is
downloaded at the start of the build. In the Poky reference distribution this is
enabled by default through :oe_git:`meta/conf/distro/include/yocto-uninative.inc
</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`. Other distributions that do
not derive from Poky can also "``require conf/distro/include/yocto-uninative.inc``"
to use this. Alternatively if you prefer, you can build the uninative-tarball
recipe yourself, publish the resulting tarball (e.g. via HTTP) and set
:term:`UNINATIVE_URL` and :term:`UNINATIVE_CHECKSUM` appropriately. For an
example, see :oe_git:`meta/conf/distro/include/yocto-uninative.inc
</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`.
The :ref:`ref-classes-uninative` class is also used unconditionally by the
:doc:`extensible SDK </sdk-manual/extensible>`. When building the extensible
SDK, ``uninative-tarball`` is built and the resulting tarball is included within
the SDK.
.. _ref-classes-update-alternatives:

View File

@@ -432,7 +432,7 @@ You can read more on the ``devtool upgrade`` workflow in the
":ref:`sdk-manual/extensible:use \`\`devtool upgrade\`\` to create a version of the recipe that supports a newer version of the software`"
section in the Yocto Project Application Development and the Extensible
Software Development Kit (eSDK) manual. You can also see an example of
how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using \`\`devtool upgrade\`\``"
how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using ``devtool upgrade```"
section in the Yocto Project Development Tasks Manual.
.. _devtool-resetting-a-recipe:
@@ -550,6 +550,26 @@ the packages are already on the target. Consequently, when a runtime
call is made in the application for a dependent function (e.g. a library
call), the function cannot be found.
.. warning::
Runtime dependencies can be explicitly listed in the :term:`RDEPENDS`
variable, but may also be the result of a :term:`DEPENDS` assignment in your
application's recipe. This is usually the case when your application depends
on libraries for compilation: these libraries are listed as build-time
dependencies in the :term:`DEPENDS` variable in your application's recipe.
However these may also be runtime dependencies if they install shared objects
on which your application will dynamically link to at runtime (e.g. shared
libraries ending with ``.so``).
These runtime dependencies are automatically resolved by the
:term:`OpenEmbedded Build System` during the packaging phase. Since
``devtool`` ignores packaging dependencies, they will not be installed
automatically with ``devtool deploy-target``.
For more information on how the :term:`OpenEmbedded Build System` handles
packaging, see the :ref:`overview-manual/concepts:Automatically Added Runtime
Dependencies` section of the Yocto Project Overview and Concepts Manual.
To be sure you have all the dependencies local to the target, you need
to be sure that the packages are pre-deployed (installed) on the target
before attempting to run your application.

View File

@@ -12,7 +12,7 @@ Features provide a mechanism for working out which packages should be
included in the generated images. Distributions can select which
features they want to support through the :term:`DISTRO_FEATURES` variable,
which is set or appended to in a distribution's configuration file such
as ``poky.conf``, ``poky-tiny.conf``, ``poky-lsb.conf`` and so forth.
as ``poky.conf``, ``poky-tiny.conf``, ``poky-altcfg.conf`` and so forth.
Machine features are set in the :term:`MACHINE_FEATURES` variable, which is
set in the machine configuration file and specifies the hardware
features for a given machine.
@@ -157,7 +157,7 @@ metadata:
- *ptest:* Enables building the package tests where supported by
individual recipes. For more information on package tests, see the
":ref:`dev-manual/packages:testing packages with ptest`" section
":ref:`test-manual/ptest:testing packages with ptest`" section
in the Yocto Project Development Tasks Manual.
- *smbfs:* Include SMB networks client support (for mounting

View File

@@ -51,27 +51,6 @@ Here is a list of supported recipes:
- ``core-image-full-cmdline``: A console-only image with more
full-featured Linux system functionality installed.
- ``core-image-lsb``: An image that conforms to the Linux Standard Base
(LSB) specification. This image requires a distribution configuration
that enables LSB compliance (e.g. ``poky-lsb``). If you build
``core-image-lsb`` without that configuration, the image will not be
LSB-compliant.
- ``core-image-lsb-dev``: A ``core-image-lsb`` image that is suitable
for development work using the host. The image includes headers and
libraries you can use in a host development environment. This image
requires a distribution configuration that enables LSB compliance
(e.g. ``poky-lsb``). If you build ``core-image-lsb-dev`` without that
configuration, the image will not be LSB-compliant.
- ``core-image-lsb-sdk``: A ``core-image-lsb`` that includes everything
in the cross-toolchain but also includes development headers and
libraries to form a complete standalone SDK. This image requires a
distribution configuration that enables LSB compliance (e.g.
``poky-lsb``). If you build ``core-image-lsb-sdk`` without that
configuration, the image will not be LSB-compliant. This image is
suitable for development using the target.
- ``core-image-minimal``: A small image just capable of allowing a
device to boot.
@@ -119,8 +98,8 @@ Here is a list of supported recipes:
deployed to a separate partition so that you can boot into it and use
it to deploy a second image to be tested. You can find more
information about runtime testing in the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
- ``core-image-testmaster-initramfs``: A RAM-based Initial Root
Filesystem (initramfs) image tailored for use with the

View File

@@ -789,7 +789,6 @@ Errors and Warnings
use a relative path rather than an absolute one, or to pick up the path from
runtime configuration or environment variables.
Configuring and Disabling QA Checks
===================================

View File

@@ -45,6 +45,45 @@ release process validates the content of the new branch.
Realize that there can be patches merged onto the stable release
branches as and when they become available.
.. _ref-yp-development-cycle:
Development Cycle
=================
As explained in the previous :ref:`ref-manual/release-process:Major and Minor
Release Cadence` section, a new release comes out every six months.
During this six-months period of time, the Yocto Project releases four
"Milestone" releases which represent distinct points of time. The milestone
releases are tested through the :ref:`ref-manual/release-process:Testing and
Quality Assurance` process and helps spotting issues before the actual release
is out.
The time span between milestone releases can vary, but they are in general
evenly spaced out during this six-months period of time.
These milestone releases are tagged with a capital "M" after the future release
tag name. For example, the milestone tags "&DISTRO_RELEASE_SERIES;M1",
"&DISTRO_RELEASE_SERIES;M2", and "&DISTRO_RELEASE_SERIES;M3" are released before
the actual "&DISTRO_RELEASE_SERIES;" release.
.. note::
The fourth milestone (M4) is not actually released and announced, but
represents a point of time for the Quality Assurance team to start the
:ref:`ref-manual/release-process:Testing and Quality Assurance` process
before tagging and delivering the final release.
After the third milestone release (M3), the Yocto Project enters **Feature
Freeze**. This means that the maintainers of :term:`OpenEmbedded-Core
(OE-Core)`, :term:`BitBake` and other core repositories stop accepting
significant changes on the "master" branch. Changes that may be accepted are
minor upgrades to core components and security/bug fixes.
During feature freeze, a new branch is created and maintained separately to
test new features and enhancements received from contributors, but these changes
will only make it to the master branch after the release is out.
Major Release Codenames
=======================
@@ -62,7 +101,8 @@ codename are likely to be compatible and thus work together.
Releases are given a nominal release version as well but the codename is
used in repositories for this reason. You can find information on Yocto
Project releases and codenames at :yocto_wiki:`/Releases`.
Project releases and codenames in the :yocto_home:`Releases page
</development/releases/>`.
Our :doc:`/migration-guides/index` detail how to migrate from one release of
the Yocto Project to the next.
@@ -148,8 +188,8 @@ Additionally, because the test strategies are visible to you as a
developer, you can validate your projects. This section overviews the
available test infrastructure used in the Yocto Project. For information
on how to run available tests on your projects, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
The QA/testing infrastructure is woven into the project to the point
where core developers take some of it for granted. The infrastructure
@@ -175,7 +215,7 @@ consists of the following pieces:
operation and functions. However, the test can also use the IP
address of a machine to test.
- :ref:`ptest <dev-manual/packages:testing packages with ptest>`:
- :ref:`ptest <test-manual/ptest:testing packages with ptest>`:
Runs tests against packages produced during the build for a given
piece of software. The test allows the packages to be run within a
target image.
@@ -196,7 +236,7 @@ effort has been made to automate the tests so that more people can use
them and the Yocto Project development team can run them faster and more
efficiently.
The Yocto Project's main Autobuilder (&YOCTO_AB_URL;) publicly tests each Yocto
The Yocto Project's main :yocto_ab:`Autobuilder <>` publicly tests each Yocto
Project release's code in the :oe_git:`openembedded-core </openembedded-core>`,
:yocto_git:`poky </poky>` and :oe_git:`bitbake </bitbake>` repositories. The
testing occurs for both the current state of the "master" branch and also for

View File

@@ -328,6 +328,15 @@ Once the build process gets the sample file, it uses ``sed`` to substitute final
This file indicates the state of the sanity checks and is created during
the build.
.. _structure-build-conf-auto.conf:
``build/conf/auto.conf``
------------------------
This file contains configuration variables that are automatically modified by
tools such as :oe_git:`bitbake-config-build </bitbake/tree/bin/bitbake-config-build>`.
This file should not be modified manually.
.. _structure-build-downloads:
``build/downloads/``
@@ -498,7 +507,7 @@ generated during the :ref:`ref-tasks-packagedata` task. The files stored in this
directory contain information about each output package produced by the
OpenEmbedded build system, and are used in different ways by the build system
such as ":ref:`dev-manual/debugging:viewing package information with
\`\`oe-pkgdata-util\`\``".
``oe-pkgdata-util```".
.. _structure-build-tmp-sstate-control:

View File

@@ -2,11 +2,11 @@
<svg
version="1.1"
id="svg2"
width="1523.001"
height="504.30499"
viewBox="0 0 1523.001 504.30497"
width="1992.7236"
height="613.35602"
viewBox="0 0 1992.7236 613.35599"
sodipodi:docname="releases.svg"
inkscape:version="1.3.2 (091e20ef0f, 2023-11-25, custom)"
inkscape:version="1.4.1 (93de688d07, 2025-03-30)"
inkscape:export-filename="../../../../../../../../tmp/releases.png"
inkscape:export-xdpi="96"
inkscape:export-ydpi="96"
@@ -70,7 +70,7 @@
scale_width="1"
end_linecap_type="zerowidth"
not_jump="false"
message="&lt;b&gt;Ctrl + click&lt;/b&gt; on existing node and move it" />
message="" />
<marker
style="overflow:visible"
id="marker5783"
@@ -412,9 +412,9 @@
inkscape:window-height="2069"
id="namedview4"
showgrid="true"
inkscape:zoom="2.1971372"
inkscape:cx="1068.2082"
inkscape:cy="287.87461"
inkscape:zoom="1.5536106"
inkscape:cx="1158.2696"
inkscape:cy="273.55632"
inkscape:window-x="2256"
inkscape:window-y="60"
inkscape:window-maximized="1"
@@ -433,8 +433,8 @@
<inkscape:grid
type="xygrid"
id="grid1257"
originx="-289.99936"
originy="369.99997"
originx="-289.06071"
originy="478.43017"
spacingy="1"
spacingx="1"
units="px"
@@ -444,66 +444,90 @@
inkscape:groupmode="layer"
inkscape:label="Image"
id="g10"
transform="translate(-289.99936,370.00003)">
transform="translate(-289.06072,478.43022)">
<rect
style="fill:#333333;fill-opacity:0;stroke:#000000;stroke-width:0.713896;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-opacity:0"
id="rect1"
width="1992.0098"
height="612.64215"
x="289.41766"
y="-478.07327"
ry="24.97636" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 563.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 563.40434,64.000628 v -524.414808 0 0"
id="path207708" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 683.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 683.40434,64.000628 v -524.414808 0 0"
id="path207708-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 803.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 803.40434,64.000628 v -524.414808 0 0"
id="path207708-4-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 923.40434,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 923.40434,64.000577 v -524.414757 0 0"
id="path207708-4-3-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1043.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1043.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1163.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1163.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1283.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1283.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1403.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1403.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.475347;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000568 v -415.757648 0 0"
id="path207708-4-3-6-2-8-4-3-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4-3-8-0" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1643.3583,64.000578 v -415.635868 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1643.3583,64.000565 v -524.414715 0 0"
id="path207708-4-3-6-2-8-4-3-8-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000578 v -415.635868 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000565 v -524.414715 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 443.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1883.7877,64.878769 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2002.9599,64.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.2232,62.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2243.313,63.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1-9" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 443.40434,64.000628 v -524.414808 0 0"
id="path207708-9" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000608 v -375.000008 0 0"
id="path207708-9-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000618 v -415.635908 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000616 v -524.414766 0 0"
id="path207708-9-6-2" />
<text
xml:space="preserve"
@@ -536,7 +560,7 @@
x="-59.575905"
y="580.05695" /></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1;opacity:0.5"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4"
width="160.00002"
height="45.000004"
@@ -584,15 +608,7 @@
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4">4.2</tspan></text>
<rect
style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3"
width="140"
height="45.000004"
x="1043.132"
y="-328.2114"
ry="2.2558987" />
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-6"
width="140"
height="45.000004"
@@ -615,22 +631,78 @@
y="-238.332"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6">5.1</tspan></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1;opacity:0.5"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-6-2"
width="140"
height="45.000004"
x="1043.4697"
y="-328.48172"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1094.2197"
y="-309.83084"
id="text1185-3-55-4-0-0-0-1-1-6-4-3"><tspan
x="1090.4542"
y="-309.61823"
id="text1185-3-55-4-0-0-0-1-1-6-4-7"><tspan
sodipodi:role="line"
x="1094.2197"
y="-309.83084"
x="1090.4542"
y="-309.61823"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5">Walnascar</tspan><tspan
id="tspan957-2-8-6-3-9-7-4-2-0-0">Walnascar</tspan><tspan
sodipodi:role="line"
x="1094.2197"
y="-291.83417"
x="1090.4542"
y="-291.62155"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6">5.2</tspan></text>
id="tspan10317-2-9-1-4-6-5-6-9">5.2</tspan></text>
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-67"
width="140"
height="45.000004"
x="1223.8723"
y="-382.27469"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1275.2014"
y="-363.89413"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-53"><tspan
sodipodi:role="line"
x="1275.2014"
y="-363.89413"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5-5">Whinlatter</tspan><tspan
sodipodi:role="line"
x="1275.2014"
y="-345.89746"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-6">5.3</tspan></text>
<rect
style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:5.29752;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-67-6"
width="982.23163"
height="45.000004"
x="1283.7023"
y="-436.77539"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1335.1118"
y="-418.39484"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-53-0"><tspan
sodipodi:role="line"
x="1335.1118"
y="-418.39484"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5-5-6">Wrynose</tspan><tspan
sodipodi:role="line"
x="1335.1118"
y="-400.39816"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-6-2">6.0</tspan></text>
<g
id="g1591"
transform="translate(-516.59566,64.000598)">
@@ -681,7 +753,7 @@
id="tspan10317-2-9-0-1">5.0</tspan></text>
<g
id="g1125-0"
transform="matrix(0.42240595,0,0,0.41654472,330.77064,-441.11721)"
transform="matrix(0.42240595,0,0,0.41654472,330.77064,-497.11721)"
style="stroke:none;stroke-width:2.38399">
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:4.76797;stroke-opacity:1"
@@ -923,8 +995,8 @@
y="345.7359" /></text>
<path
id="path29430"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1.72671;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="M 307.54809,63.999718 H 1783.4043 Z" />
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1.99503;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="M 307.54809,63.999718 H 2277.72 Z" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000618 v 9.99995 0"
@@ -1437,50 +1509,324 @@
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000578 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1885.6029"
y="94.285194"
id="text1185-9-7-1-1-8-1-0-4-2-8-2"><tspan
sodipodi:role="line"
x="1885.6029"
y="94.285194"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8">Oct.</tspan><tspan
sodipodi:role="line"
x="1885.6029"
y="112.28188"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9">2028</tspan></text>
<g
id="g1267-4-5-2-7"
transform="translate(563.45518,-155.9782)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1883.4551,64.021829 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2005.5908"
y="94.339828"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4"><tspan
sodipodi:role="line"
x="2005.5908"
y="94.339828"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7">Apr.</tspan><tspan
sodipodi:role="line"
x="2005.5908"
y="112.33651"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8">2029</tspan></text>
<g
id="g1267-4-5-2-7-4"
transform="translate(683.44312,-155.92356)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2003.443,64.076464 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2125.6079"
y="94.692207"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2"><tspan
sodipodi:role="line"
x="2125.6079"
y="94.692207"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7-0">Oct.</tspan><tspan
sodipodi:role="line"
x="2125.6079"
y="112.68889"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8-6">2029</tspan></text>
<g
id="g1267-4-5-2-7-4-1"
transform="translate(803.46019,-155.57118)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.4601,64.428843 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.3825,64.223284 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-3" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2245.5474"
y="94.839027"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2-7"><tspan
sodipodi:role="line"
x="2245.5474"
y="94.839027"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7-0-4">Apr.</tspan><tspan
sodipodi:role="line"
x="2245.5474"
y="112.83571"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8-6-5">2030</tspan></text>
<g
id="g1267-4-5-2-7-4-1-2"
transform="translate(923.39972,-155.42436)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<g
id="g1267-4-5-2-7-4-1-2-0"
transform="translate(1043.3579,-155.33829)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4-8"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7-9"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4-2"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3-6"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2243.3996,64.575663 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6-0" />
<rect
style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.751473;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-36"
width="38.418175"
height="23.151052"
x="1605.6135"
y="-41.172161"
x="2047.6135"
y="-45.172161"
ry="1.1605872" />
<rect
style="opacity:1;fill:#ffffff;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:1.98878;stroke-dasharray:none;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-36-7"
width="186.42949"
height="110.40546"
x="1594.5294"
y="-73.753708"
x="2036.5294"
y="-77.753708"
ry="5.5347452" />
<rect
style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-6"
width="21.197233"
height="19.28739"
x="1611.8163"
y="-41.883858"
x="2053.8164"
y="-45.883858"
ry="0.96689767" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1690.4917"
y="-53.687912"
x="2132.4917"
y="-57.687912"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5"><tspan
sodipodi:role="line"
x="1690.4917"
y="-53.687912"
x="2132.4917"
y="-57.687912"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5">Legend</tspan></text>
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1656.0988"
y="-27.899874"
x="2098.0986"
y="-31.899874"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2"><tspan
sodipodi:role="line"
x="1656.0988"
y="-27.899874"
x="2098.0986"
y="-31.899874"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9">Future</tspan></text>
<rect
@@ -1488,38 +1834,38 @@
id="rect917-0-0-4-4-9-4-5-3-9-2-6-1"
width="21.197233"
height="19.28739"
x="1611.8671"
y="-17.756365"
x="2053.8672"
y="-21.756365"
ry="0.96689767" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1686.7159"
y="-3.6722763"
x="2128.7158"
y="-7.6722765"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2"><tspan
sodipodi:role="line"
x="1686.7159"
y="-3.6722763"
x="2128.7158"
y="-7.6722765"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7">Current (Oct. 24)</tspan></text>
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7">Current (Dec. 25)</tspan></text>
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1667.363"
y="20.03771"
x="2109.363"
y="16.03771"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2-9"><tspan
sodipodi:role="line"
x="1667.363"
y="20.03771"
x="2109.363"
y="16.03771"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7-3">End-of-life</tspan></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1;opacity:0.5"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-6-1-0"
width="21.197233"
height="19.28739"
x="1612.0239"
y="5.9667883"
x="2054.0239"
y="1.9667883"
ry="0.96689767" />
<rect
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:1.85786;stroke-opacity:1"

Before

Width:  |  Height:  |  Size: 93 KiB

After

Width:  |  Height:  |  Size: 117 KiB

View File

@@ -58,20 +58,35 @@ Supported Linux Distributions
Currently, the &DISTRO; release ("&DISTRO_NAME;") of the Yocto Project is
supported on the following distributions:
- Ubuntu 20.04 (LTS)
- Ubuntu 22.04 (LTS)
- Fedora 38
- Debian GNU/Linux 11.x (Bullseye)
..
Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros:
yocto-supported-distros --release kirkstone --config yocto-autobuilder2/config.py --output-format docs --poky-distros
- AlmaLinux 8
- AlmaLinux 9
- Debian 11
- Debian 12
- Fedora 39
- Fedora 40
- Fedora 41
- Rocky Linux 8
- Rocky Linux 9
- Ubuntu 20.04 (LTS)
- Ubuntu 22.04 (LTS)
- Ubuntu 24.04 (LTS)
- Ubuntu 24.10
The following distribution versions are still tested, even though the
organizations publishing them no longer make updates publicly available:
- Ubuntu 18.04 (LTS)
..
This list contains EOL distros that are still tested on the Autobuilder
(meaning there are running workers for them).
See https://endoflife.date for information of EOL releases.
- Fedora 39
- Fedora 40
- Ubuntu 20.04 (LTS)
Note that the Yocto Project doesn't have access to private updates
that some of these versions may have. Therefore, our testing has
@@ -80,27 +95,33 @@ limited value if you have access to such updates.
Finally, here are the distribution versions which were previously
tested on former revisions of "&DISTRO_NAME;", but no longer are:
- Ubuntu 16.04 (LTS)
- Ubuntu 21.10
..
Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros:
yocto-supported-distros --release kirkstone --config yocto-autobuilder2/config.py --output-format docs --old-distros
- CentOS 7
- CentOS 8
- Debian 10
- Debian 8
- Debian 9
- Fedora 29
- Fedora 30
- Fedora 31
- Fedora 32
- Fedora 33
- Fedora 34
- Fedora 35
- Fedora 36
- Fedora 37
- CentOS 7.x
- CentOS 8.x
- Debian GNU/Linux 9.x (Stretch)
- Debian GNU/Linux 10.x (Buster)
- Fedora 38
- OpenSUSE Leap 15.0
- OpenSUSE Leap 15.1
- OpenSUSE Leap 15.2
- OpenSUSE Leap 15.3
- Ubuntu 16.04
- Ubuntu 18.04
- Ubuntu 19.04
- Ubuntu 21.10
.. note::
@@ -158,10 +179,27 @@ Ubuntu and Debian
Here are the packages needed to build an image on a headless system
with a supported Ubuntu or Debian Linux distribution::
$ sudo apt install &UBUNTU_HOST_PACKAGES_ESSENTIAL;
$ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_ESSENTIAL;
You also need to ensure you have the ``en_US.UTF-8`` locale enabled::
$ locale --all-locales | grep en_US.utf8
If this is not the case, you can reconfigure the ``locales`` package to add it
(requires an interactive shell)::
$ sudo dpkg-reconfigure locales
.. note::
- If you are not in an interactive shell, ``dpkg-reconfigure`` will
not work as expected. To add the locale you will need to edit
``/etc/locale.gen`` file to add/uncomment the ``en_US.UTF-8`` locale.
A naive way to do this as root is::
$ echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
$ locale-gen
- If your build system has the ``oss4-dev`` package installed, you
might experience QEMU build failures due to the package installing
its own custom ``/usr/include/linux/soundcard.h`` on the Debian
@@ -172,8 +210,7 @@ with a supported Ubuntu or Debian Linux distribution::
Here are the packages needed to build Project documentation manuals::
$ sudo apt install git make inkscape texlive-latex-extra
$ sudo apt install sphinx python3-saneyaml python3-sphinx-rtd-theme
$ sudo apt install &UBUNTU_DEBIAN_HOST_PACKAGES_DOC;
Fedora Packages
---------------
@@ -185,8 +222,8 @@ with a supported Fedora Linux distribution::
Here are the packages needed to build Project documentation manuals::
$ sudo dnf install git make python3-pip which inkscape texlive-fncychap
&PIP3_HOST_PACKAGES_DOC;
$ sudo dnf install &FEDORA_HOST_PACKAGES_DOC;
$ sudo pip3 install &PIP3_HOST_PACKAGES_DOC;
openSUSE Packages
-----------------
@@ -195,11 +232,12 @@ Here are the packages needed to build an image on a headless system
with a supported openSUSE distribution::
$ sudo zypper install &OPENSUSE_HOST_PACKAGES_ESSENTIAL;
$ sudo pip3 install &OPENSUSE_PIP3_HOST_PACKAGES_ESSENTIAL;
Here are the packages needed to build Project documentation manuals::
$ sudo zypper install git make python3-pip which inkscape texlive-fncychap
&PIP3_HOST_PACKAGES_DOC;
$ sudo zypper install &OPENSUSE_HOST_PACKAGES_DOC;
$ sudo pip3 install &PIP3_HOST_PACKAGES_DOC;
AlmaLinux Packages
@@ -208,6 +246,10 @@ AlmaLinux Packages
Here are the packages needed to build an image on a headless system
with a supported AlmaLinux distribution::
$ sudo dnf install -y epel-release
$ sudo yum install dnf-plugins-core
$ sudo dnf config-manager --set-enabled crb
$ sudo dnf makecache
$ sudo dnf install &ALMALINUX_HOST_PACKAGES_ESSENTIAL;
.. note::
@@ -225,8 +267,8 @@ with a supported AlmaLinux distribution::
Here are the packages needed to build Project documentation manuals::
$ sudo dnf install git make python3-pip which inkscape texlive-fncychap
&PIP3_HOST_PACKAGES_DOC;
$ sudo dnf install &ALMALINUX_HOST_PACKAGES_DOC;
$ sudo pip3 install &PIP3_HOST_PACKAGES_DOC;
.. _system-requirements-buildtools:
@@ -327,7 +369,7 @@ If you would prefer not to use the ``install-buildtools`` script, you can instea
download and run a pre-built :term:`buildtools` installer yourself with the following
steps:
#. Go to :yocto_dl:`/releases/yocto/yocto-&DISTRO;/buildtools/`, locate and
#. Go to :yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/buildtools/`, locate and
download the ``.sh`` file corresponding to your host architecture
and to :term:`buildtools`, :term:`buildtools-extended` or :term:`buildtools-make`.

View File

@@ -629,8 +629,8 @@ information on how the root filesystem is created.
Boots an image and performs runtime tests within the image. For
information on automatically testing images, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
.. _ref-tasks-testimage_auto:
@@ -642,8 +642,8 @@ after it has been built. This task is enabled when you set
:term:`TESTIMAGE_AUTO` equal to "1".
For information on automatically testing images, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
Kernel-Related Tasks
====================
@@ -740,7 +740,7 @@ tool, which you then use to modify the kernel configuration.
$ bitbake linux-yocto -c menuconfig
See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
See the ":ref:`kernel-dev/common:using ``menuconfig```"
section in the Yocto Project Linux Kernel Development Manual for more
information on this configuration tool.
@@ -764,7 +764,7 @@ which can then be applied by subsequent tasks such as
Runs ``make menuconfig`` for the kernel. For information on
``menuconfig``, see the
":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
":ref:`kernel-dev/common:using ``menuconfig```"
section in the Yocto Project Linux Kernel Development Manual.
.. _ref-tasks-savedefconfig:

View File

@@ -63,7 +63,7 @@ universal, the list includes them just in case:
This term refers to the area used by the OpenEmbedded build system for
builds. The area is created when you ``source`` the setup environment
script that is found in the Source Directory
(i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``). The
(i.e. :ref:`ref-manual/structure:``oe-init-build-env```). The
:term:`TOPDIR` variable points to the Build Directory.
You have a lot of flexibility when creating the :term:`Build Directory`.
@@ -450,7 +450,7 @@ universal, the list includes them just in case:
the Source Directory, if you do, the top-level directory name of the
Source Directory is derived from the Yocto Project release tarball.
For example, downloading and unpacking poky tarballs from
:yocto_dl:`/releases/yocto/&DISTRO_REL_TAG;/`
:yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/`
results in a Source Directory whose root folder is named poky.

View File

@@ -231,6 +231,12 @@ system and gives an overview of their function and contents.
must set this variable in your recipe. The
:ref:`syslinux <ref-classes-syslinux>` class checks this variable.
:term:`AUTOTOOLS_SCRIPT_PATH`
When using the :ref:`ref-classes-autotools` class, the
:term:`AUTOTOOLS_SCRIPT_PATH` variable stores the location of the
different scripts used by the Autotools build system. The default
value for this variable is :term:`S`.
:term:`AVAILTUNES`
The list of defined CPU and Application Binary Interface (ABI)
tunings (i.e. "tunes") available for use by the OpenEmbedded build
@@ -1091,6 +1097,17 @@ system and gives an overview of their function and contents.
:term:`CC`
The minimal command and arguments used to run the C compiler.
:term:`CCACHE_DISABLE`
When inheriting the :ref:`ref-classes-ccache` class, the
:term:`CCACHE_DISABLE` variable can be set to "1" in a recipe to disable
`Ccache` support. This is useful when the recipe is known to not support it.
:term:`CCACHE_TOP_DIR`
When inheriting the :ref:`ref-classes-ccache` class, the
:term:`CCACHE_TOP_DIR` variable can be set to the location of where
`Ccache` stores its cache files. This directory can be shared between
builds.
:term:`CFLAGS`
Specifies the flags to pass to the C compiler. This variable is
exported to an environment variable and thus made visible to the
@@ -1332,6 +1349,17 @@ system and gives an overview of their function and contents.
:term:`CONFIGURE_FLAGS`
The minimal arguments for GNU configure.
:term:`CONFIGURE_SCRIPT`
When using the :ref:`ref-classes-autotools` class, the
:term:`CONFIGURE_SCRIPT` variable stores the location of the ``configure``
script for the Autotools build system. The default definition for this
variable is::
CONFIGURE_SCRIPT ?= "${AUTOTOOLS_SCRIPT_PATH}/configure"
Where :term:`AUTOTOOLS_SCRIPT_PATH` is the location of the of the
Autotools build system scripts, which defaults to :term:`S`.
:term:`CONFLICT_DISTRO_FEATURES`
When inheriting the
:ref:`features_check <ref-classes-features_check>`
@@ -1789,7 +1817,7 @@ system and gives an overview of their function and contents.
``${TMPDIR}/deploy``.
For more information on the structure of the Build Directory, see
":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section.
":ref:`ref-manual/structure:the build directory --- ``build/```" section.
For more detail on the contents of the ``deploy`` directory, see the
":ref:`overview-manual/concepts:images`",
":ref:`overview-manual/concepts:package feeds`", and
@@ -1833,7 +1861,7 @@ system and gives an overview of their function and contents.
<ref-classes-image>` class.
For more information on the structure of the Build Directory, see
":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section.
":ref:`ref-manual/structure:the build directory --- ``build/```" section.
For more detail on the contents of the ``deploy`` directory, see the
":ref:`overview-manual/concepts:images`" and
":ref:`overview-manual/concepts:application development sdk`" sections both in
@@ -2784,6 +2812,10 @@ system and gives an overview of their function and contents.
For guidance on how to create your own file permissions settings
table file, examine the existing ``fs-perms.txt``.
:term:`FIT_CONF_PREFIX`
When using the :ref:`ref-classes-kernel-fitimage`, this is the prefix
used for creating FIT configuration nodes. Its default value is "conf-".
:term:`FIT_DESC`
Specifies the description string encoded into a fitImage. The default
value is set by the :ref:`kernel-fitimage <ref-classes-kernel-fitimage>`
@@ -3288,6 +3320,24 @@ system and gives an overview of their function and contents.
variable, see the :ref:`image_types <ref-classes-image_types>`
class file, which is ``meta/classes/image_types.bbclass``.
:term:`IMAGE_CONTAINER_NO_DUMMY`
When an image recipe has the ``container`` image type in
:term:`IMAGE_FSTYPES`, it expects the :term:`PREFERRED_PROVIDER` for
the Linux kernel (``virtual/kernel``) to be set to ``linux-dummy`` from a
:term:`configuration file`. Otherwise, an error is triggered.
When set to "1", the :term:`IMAGE_CONTAINER_NO_DUMMY` variable allows the
:term:`PREFERRED_PROVIDER` variable to be set to another value, thus
skipping the check and not triggering the build error. Any other value
will keep the check.
This variable should be set from the image recipe using the ``container``
image type.
See the documentation of the :ref:`ref-classes-image-container` class for
more information on why setting the :term:`PREFERRED_PROVIDER` to
``linux-dummy`` is advised with this class.
:term:`IMAGE_DEVICE_TABLES`
Specifies one or more files that contain custom device tables that
are passed to the ``makedevs`` command as part of creating an image.
@@ -3514,6 +3564,12 @@ system and gives an overview of their function and contents.
added to the image by using the :term:`IMAGE_ROOTFS_EXTRA_SPACE`
variable.
When using Wic tool, beware that a second overhead factor is also applied.
This overhead value is defined by the ``--overhead-factor`` option, which
defaults to "1.3" when omitted. See the
:ref:`ref-manual/kickstart:command: part or partition` chapter in
:doc:`/ref-manual/kickstart` for details.
:term:`IMAGE_PKGTYPE`
Defines the package type (i.e. DEB, RPM, IPK, or TAR) used by the
OpenEmbedded build system. The variable is defined appropriately by
@@ -3600,6 +3656,36 @@ system and gives an overview of their function and contents.
IMAGE_ROOTFS_EXTRA_SPACE = "41943040"
:term:`IMAGE_ROOTFS_MAXSIZE`
Defines the maximum allowed size of the generated image in kilobytes.
The build will fail if the generated image size exceeds this value.
The generated image size undergoes several calculation steps before being
compared to :term:`IMAGE_ROOTFS_MAXSIZE`.
In the first step, the size of the directory pointed to by :term:`IMAGE_ROOTFS`
is calculated.
In the second step, the result from the first step is multiplied
by :term:`IMAGE_OVERHEAD_FACTOR`.
In the third step, the result from the second step is compared with
:term:`IMAGE_ROOTFS_SIZE`. The larger value of these is added to
:term:`IMAGE_ROOTFS_EXTRA_SPACE`.
In the fourth step, the result from the third step is checked for
a decimal part. If it has one, it is rounded up to the next integer.
If it does not, it is simply converted into an integer.
In the fifth step, the :term:`IMAGE_ROOTFS_ALIGNMENT` is added to the result
from the fourth step and "1" is subtracted.
In the sixth step, the remainder of the division between the result
from the fifth step and :term:`IMAGE_ROOTFS_ALIGNMENT` is subtracted from the
result of the fifth step. In this way, the result from the fourth step is
rounded up to the nearest multiple of :term:`IMAGE_ROOTFS_ALIGNMENT`.
Thus, if the :term:`IMAGE_ROOTFS_MAXSIZE` is set, is compared with the result
of the above calculations and is independent of the final image type.
No default value is set for :term:`IMAGE_ROOTFS_MAXSIZE`.
It's a good idea to set this variable for images that need to fit on a limited
space (e.g. SD card, a fixed-size partition, ...).
:term:`IMAGE_ROOTFS_SIZE`
Defines the size in Kbytes for the generated image. The OpenEmbedded
build system determines the final size for the generated image using
@@ -3805,6 +3891,23 @@ system and gives an overview of their function and contents.
Set the variable to "1" to prevent the default dependencies from
being added.
:term:`INHIBIT_DEFAULT_RUST_DEPS`
Prevents the :ref:`ref-classes-rust` class from automatically adding
its default build-time dependencies.
When a recipe inherits the :ref:`ref-classes-rust` class, several
tools such as ``rust-native`` and ``${RUSTLIB_DEP}`` (only added when cross-compiling) are added
to :term:`DEPENDS` to support the ``rust`` build process.
To prevent the build system from adding these dependencies automatically,
set the :term:`INHIBIT_DEFAULT_RUST_DEPS` variable as follows::
INHIBIT_DEFAULT_RUST_DEPS = "1"
By default, the value of :term:`INHIBIT_DEFAULT_RUST_DEPS` is empty. Setting
it to "0" does not disable inhibition. Only the empty string will disable
inhibition.
:term:`INHIBIT_PACKAGE_DEBUG_SPLIT`
Prevents the OpenEmbedded build system from splitting out debug
information during packaging. By default, the build system splits out
@@ -3852,6 +3955,25 @@ system and gives an overview of their function and contents.
even if the toolchain's binaries are strippable, there are other files
needed for the build that are not strippable.
:term:`INHIBIT_UPDATERCD_BBCLASS`
Prevents the :ref:`ref-classes-update-rc.d` class from automatically
installing and registering SysV init scripts for packages.
When a recipe inherits the :ref:`ref-classes-update-rc.d` class, init
scripts are typically installed and registered for the packages listed in
:term:`INITSCRIPT_PACKAGES`. This ensures that the relevant
services are started and stopped at the appropriate runlevels using the
traditional SysV init system.
To prevent the build system from adding these scripts and configurations
automatically, set the :term:`INHIBIT_UPDATERCD_BBCLASS` variable as follows::
INHIBIT_UPDATERCD_BBCLASS = "1"
By default, the value of :term:`INHIBIT_UPDATERCD_BBCLASS` is empty. Setting
it to "0" does not disable inhibition. Only the empty string will disable
inhibition.
:term:`INIT_MANAGER`
Specifies the system init manager to use. Available options are:
@@ -3993,6 +4115,20 @@ system and gives an overview of their function and contents.
See the :term:`MACHINE` variable for additional
information.
:term:`INITRAMFS_MAXSIZE`
Defines the maximum allowed size of the :term:`Initramfs` image in Kbytes.
The build will fail if the :term:`Initramfs` image size exceeds this value.
The :term:`Initramfs` image size undergoes several calculation steps before
being compared to :term:`INITRAMFS_MAXSIZE`.
These steps are the same as those used for :term:`IMAGE_ROOTFS_MAXSIZE`
and are described in detail in that entry.
Thus, :term:`INITRAMFS_MAXSIZE` is compared with the result of the calculations
and is independent of the final image type (e.g. compressed).
A default value for :term:`INITRAMFS_MAXSIZE` is set in
:oe_git:`meta/conf/bitbake.conf </openembedded-core/tree/meta/conf/bitbake.conf>`.
:term:`INITRAMFS_MULTICONFIG`
Defines the multiconfig to create a multiconfig dependency to be used by the :ref:`kernel <ref-classes-kernel>` class.
@@ -4144,8 +4280,7 @@ system and gives an overview of their function and contents.
would place patch files and configuration fragment files (i.e.
"out-of-tree"). However, if you want to use a ``defconfig`` file that
is part of the kernel tree (i.e. "in-tree"), you can use the
:term:`KBUILD_DEFCONFIG` variable and append the
:term:`KMACHINE` variable to point to the
:term:`KBUILD_DEFCONFIG` variable to point to the
``defconfig`` file.
To use the variable, set it in the append file for your kernel recipe
@@ -4180,15 +4315,8 @@ system and gives an overview of their function and contents.
options not explicitly specified will be disabled in the kernel
config.
In case :term:`KCONFIG_MODE` is not set the behaviour will depend on where
the ``defconfig`` file is coming from. An "in-tree" ``defconfig`` file
will be handled in ``alldefconfig`` mode, a ``defconfig`` file placed
in ``${WORKDIR}`` through a meta-layer will be handled in
``allnoconfig`` mode.
An "in-tree" ``defconfig`` file can be selected via the
:term:`KBUILD_DEFCONFIG` variable. :term:`KCONFIG_MODE` does not need to
be explicitly set.
In case :term:`KCONFIG_MODE` is not set the ``defconfig`` file
will be handled in ``allnoconfig`` mode.
A ``defconfig`` file compatible with ``allnoconfig`` mode can be
generated by copying the ``.config`` file from a working Linux kernel
@@ -4481,6 +4609,27 @@ system and gives an overview of their function and contents.
the :term:`KERNEL_PATH` variable. Both variables are common variables
used by external Makefiles to point to the kernel source directory.
:term:`KERNEL_SPLIT_MODULES`
When inheriting the :ref:`ref-classes-kernel-module-split` class, this
variable controls whether kernel modules are split into separate packages
or bundled into a single package.
For some use cases, a monolithic kernel module package
:term:`KERNEL_PACKAGE_NAME` that contains all modules built from the
kernel sources may be preferred to speed up the installation.
By default, this variable is set to ``1``, resulting in one package per
module. Setting it to any other value will generate a single monolithic
package containing all kernel modules.
.. note::
If :term:`KERNEL_SPLIT_MODULES` is set to 0, it is still possible to
install all kernel modules at once by adding ``kernel-modules`` (assuming
:term:`KERNEL_PACKAGE_NAME` is ``kernel-modules``) to :term:`IMAGE_INSTALL`.
The way it works is that a placeholder "kernel-modules" package will be
created and will depend on every other individual kernel module packages.
:term:`KERNEL_SRC`
The location of the kernel sources. This variable is set to the value
of the :term:`STAGING_KERNEL_DIR` within
@@ -4567,7 +4716,7 @@ system and gives an overview of their function and contents.
information on how this variable is used.
:term:`LAYERDEPENDS`
Lists the layers, separated by spaces, on which this recipe depends.
Lists the layers, separated by spaces, on which this layer depends.
Optionally, you can specify a specific layer version for a dependency
by adding it to the end of the layer name. Here is an example::
@@ -5424,8 +5573,8 @@ system and gives an overview of their function and contents.
.. note::
An easy way to see what overrides apply is to search for :term:`OVERRIDES`
in the output of the ``bitbake -e`` command. See the
An easy way to see what overrides apply is to run the command
``bitbake-getvar -r myrecipe OVERRIDES``. See the
":ref:`dev-manual/debugging:viewing variable values`" section in the Yocto
Project Development Tasks Manual for more information.
@@ -6082,7 +6231,7 @@ system and gives an overview of their function and contents.
For examples of how this data is used, see the
":ref:`overview-manual/concepts:automatically added runtime dependencies`"
section in the Yocto Project Overview and Concepts Manual and the
":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``"
":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```"
section in the Yocto Project Development Tasks Manual. For more
information on the shared, global-state directory, see
:term:`STAGING_DIR_HOST`.
@@ -6434,7 +6583,7 @@ system and gives an overview of their function and contents.
:term:`PTEST_ENABLED`
Specifies whether or not :ref:`Package
Test <dev-manual/packages:testing packages with ptest>` (ptest)
Test <test-manual/ptest:testing packages with ptest>` (ptest)
functionality is enabled when building a recipe. You should not set
this variable directly. Enabling and disabling building Package Tests
at build time should be done by adding "ptest" to (or removing it
@@ -6701,6 +6850,16 @@ system and gives an overview of their function and contents.
:term:`REPODIR`
See :term:`bitbake:REPODIR` in the BitBake manual.
:term:`REQUIRED_COMBINED_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies combined features (the intersection of :term:`MACHINE_FEATURES`
and :term:`DISTRO_FEATURES`) that must exist in the current configuration
in order for the :term:`OpenEmbedded Build System` to build the recipe. In
other words, if the :term:`REQUIRED_COMBINED_FEATURES` variable lists a
feature that does not appear in :term:`COMBINED_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
:term:`REQUIRED_DISTRO_FEATURES`
When inheriting the
:ref:`features_check <ref-classes-features_check>`
@@ -6712,6 +6871,32 @@ system and gives an overview of their function and contents.
the recipe will be skipped, and if the build system attempts to build
the recipe then an error will be triggered.
:term:`REQUIRED_IMAGE_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies image features that must exist in the current
configuration in order for the :term:`OpenEmbedded Build System` to build
the recipe. In other words, if the :term:`REQUIRED_IMAGE_FEATURES` variable
lists a feature that does not appear in :term:`IMAGE_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
Compared to other ``REQUIRED_*_FEATURES`` variables, the
:term:`REQUIRED_IMAGE_FEATURES` varible only targets image recipes, as the
:term:`IMAGE_FEATURES` variable is handled by the :ref:`ref-classes-core-image`
class). However, the :term:`REQUIRED_IMAGE_FEATURES` varible can also be
set from a :term:`Configuration File`, such as a distro
configuration file, if the list of required image features should apply to
all images using this :term:`DISTRO`.
:term:`REQUIRED_MACHINE_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies :term:`MACHINE_FEATURES` that must exist in the current
configuration in order for the :term:`OpenEmbedded Build System` to build
the recipe. In other words, if the :term:`REQUIRED_MACHINE_FEATURES` variable
lists a feature that does not appear in :term:`MACHINE_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
:term:`REQUIRED_VERSION`
If there are multiple versions of a recipe available, this variable
determines which version should be given preference.
@@ -7527,6 +7712,31 @@ system and gives an overview of their function and contents.
You can specify only a single URL in :term:`SOURCE_MIRROR_URL`.
.. note::
If the mirror is protected behind a username and password, the
:term:`build host` needs to be configured so the :term:`build system
<OpenEmbedded Build System>` is able to fetch from the mirror.
The recommended way to do that is by setting the following parameters
in ``$HOME/.netrc`` (``$HOME`` being the :term:`build host` home
directory)::
machine example.com
login <user>
password <password>
This file requires permissions set to ``400`` or ``600`` to prevent
other users from reading the file::
chmod 600 "$HOME/.netrc"
Another method to configure the username and password is from the URL
in :term:`SOURCE_MIRROR_URL` directly, with the ``user`` and ``pswd``
parameters::
SOURCE_MIRROR_URL = "http://example.com/my_source_mirror;user=<user>;pswd=<password>"
:term:`SPDX_ARCHIVE_PACKAGED`
This option allows to add to :term:`SPDX` output compressed archives
of the files in the generated target packages.
@@ -7655,6 +7865,11 @@ system and gives an overview of their function and contents.
section in the Yocto Project Board Support Package Developer's Guide
for additional information.
:term:`SPL_DTB_BINARY`
When inheriting the :ref:`ref-classes-uboot-sign` class, the
:term:`SPL_DTB_BINARY` variable contains the name of the SPL binary to be
compiled.
:term:`SPL_MKIMAGE_DTCOPTS`
Options for the device tree compiler passed to ``mkimage -D`` feature
while creating a FIT image with the :ref:`ref-classes-uboot-sign`
@@ -7675,7 +7890,7 @@ system and gives an overview of their function and contents.
class.
:term:`SPL_SIGN_KEYNAME`
The name of keys used by the :ref:`ref-classes-kernel-fitimage` class
The name of keys used by the :ref:`ref-classes-uboot-sign` class
for signing U-Boot FIT image stored in the :term:`SPL_SIGN_KEYDIR`
directory. If we have for example a ``dev.key`` key and a ``dev.crt``
certificate stored in the :term:`SPL_SIGN_KEYDIR` directory, you will
@@ -7905,10 +8120,38 @@ system and gives an overview of their function and contents.
file://.* https://someserver.tld/share/sstate/PATH;downloadfilename=PATH \
file://.* file:///some-local-dir/sstate/PATH"
.. note::
If the mirror is protected behind a username and password, the
:term:`build host` needs to be configured so the :term:`build system
<OpenEmbedded Build System>` is able to download the sstate cache using
authentication.
The recommended way to do that is by setting the following parameters
in ``$HOME/.netrc`` (``$HOME`` being the :term:`build host` home
directory)::
machine someserver.tld
login <user>
password <password>
This file requires permissions set to ``400`` or ``600`` to prevent
other users from reading the file::
chmod 600 "$HOME/.netrc"
Another method to configure the username and password is from the
URL in :term:`SSTATE_MIRRORS` directly, with the ``user`` and ``pswd``
parameters::
SSTATE_MIRRORS ?= "\
file://.* https://someserver.tld/share/sstate/PATH;user=<user>;pswd=<password>;downloadfilename=PATH \
"
The Yocto Project actually shares the cache data objects built by its
autobuilder::
SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH"
SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH"
As such binary artifacts are built for the generic QEMU machines
supported by the various Poky releases, they are less likely to be
@@ -7934,6 +8177,26 @@ system and gives an overview of their function and contents.
For details on the process, see the
:ref:`staging <ref-classes-staging>` class.
:term:`SSTATE_SKIP_CREATION`
The :term:`SSTATE_SKIP_CREATION` variable can be used to skip the
creation of :ref:`shared state <overview-manual/concepts:shared state cache>`
tarball files. It makes sense e.g. for image creation tasks as tarring images
and keeping them in sstate would consume a lot of disk space.
In general it is not recommended to use this variable as missing sstate
artefacts adversely impact the build, particularly for entries in the
middle of dependency chains. The case it can make sense is where the
size and time costs of the artefact are similar to just running the
tasks. This generally only applies to end artefact output like images.
The syntax to disable it for one task is::
SSTATE_SKIP_CREATION:task-image-complete = "1"
The syntax to disable it for the whole recipe is::
SSTATE_SKIP_CREATION = "1"
:term:`STAGING_BASE_LIBDIR_NATIVE`
Specifies the path to the ``/lib`` subdirectory of the sysroot
directory for the build host.
@@ -7975,7 +8238,7 @@ system and gives an overview of their function and contents.
directory for the build host.
:term:`STAGING_DIR`
Helps construct the ``recipe-sysroots`` directory, which is used
Helps construct the ``recipe-sysroot*`` directories, which are used
during packaging.
For information on how staging for recipe-specific sysroots occurs,
@@ -8635,8 +8898,8 @@ system and gives an overview of their function and contents.
file.
For more information on testing images, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
:term:`TEST_SERIALCONTROL_CMD`
For automated hardware testing, specifies the command to use to
@@ -8708,8 +8971,8 @@ system and gives an overview of their function and contents.
TEST_SUITES = "test_A test_B"
For more information on testing images, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual.
:term:`TEST_TARGET`
Specifies the target controller to use when running tests against a
@@ -8727,8 +8990,8 @@ system and gives an overview of their function and contents.
You can provide the following arguments with :term:`TEST_TARGET`:
- *"qemu":* Boots a QEMU image and runs the tests. See the
":ref:`dev-manual/runtime-testing:enabling runtime tests on qemu`" section
in the Yocto Project Development Tasks Manual for more
":ref:`test-manual/runtime-testing:enabling runtime tests on qemu`" section
in the Yocto Project Test Environment Manual for more
information.
- *"simpleremote":* Runs the tests on target hardware that is
@@ -8743,8 +9006,8 @@ system and gives an overview of their function and contents.
``meta/lib/oeqa/controllers/simpleremote.py``.
For information on running tests on hardware, see the
":ref:`dev-manual/runtime-testing:enabling runtime tests on hardware`"
section in the Yocto Project Development Tasks Manual.
":ref:`test-manual/runtime-testing:enabling runtime tests on hardware`"
section in the Yocto Project Test Environment Manual.
:term:`TEST_TARGET_IP`
The IP address of your hardware under test. The :term:`TEST_TARGET_IP`
@@ -8780,8 +9043,8 @@ system and gives an overview of their function and contents.
For more information
on enabling, running, and writing these tests, see the
":ref:`dev-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Development Tasks Manual and the
":ref:`test-manual/runtime-testing:performing automated runtime testing`"
section in the Yocto Project Test Environment Manual and the
":ref:`ref-classes-testimage`" section.
:term:`THISDIR`
@@ -8839,7 +9102,7 @@ system and gives an overview of their function and contents.
:doc:`/sdk-manual/index` manual.
Note that this variable applies to building an SDK, not an eSDK,
in which case the term:`TOOLCHAIN_HOST_TASK_ESDK` setting should be
in which case the :term:`TOOLCHAIN_HOST_TASK_ESDK` setting should be
used instead.
:term:`TOOLCHAIN_HOST_TASK_ESDK`
@@ -9223,6 +9486,22 @@ system and gives an overview of their function and contents.
passes and uses "all" for the target during the U-Boot building
process.
:term:`UNINATIVE_CHECKSUM`
When inheriting the :ref:`ref-classes-uninative` class, the
:term:`UNINATIVE_CHECKSUM` variable flags contain the checksums of the
uninative tarball as specified by the :term:`UNINATIVE_URL` variable.
There should be one checksum per tarballs published at
:term:`UNINATIVE_URL`, which match architectures. For example::
UNINATIVE_CHECKSUM[aarch64] ?= "812045d826b7fda88944055e8526b95a5a9440bfef608d5b53fd52faab49bf85"
UNINATIVE_CHECKSUM[i686] ?= "5cc28efd0c15a75de4bcb147c6cce65f1c1c9d442173a220f08427f40a3ffa09"
UNINATIVE_CHECKSUM[x86_64] ?= "4c03d1ed2b7b4e823aca4a1a23d8f2e322f1770fc10e859adcede5777aff4f3a"
:term:`UNINATIVE_URL`
When inheriting the :ref:`ref-classes-uninative` class, the
:term:`UNINATIVE_URL` variable contains the URL where the uninative
tarballs are published.
:term:`UNKNOWN_CONFIGURE_OPT_IGNORE`
Specifies a list of options that, if reported by the configure script
as being invalid, should not generate a warning during the
@@ -9318,6 +9597,18 @@ system and gives an overview of their function and contents.
the Yocto Project Development Tasks Manual for information on how to
use this variable.
:term:`USE_NLS`
Determine if language translations should be built for recipes that can
build them. This variable can be equal to:
- ``yes``: translations are enabled.
- ``no``: translation are disabled.
Recipes can use the value of this variable to enable language
translations in their build. Classes such as :ref:`ref-classes-gettext`
use the value of this variable to enable :wikipedia:`Gettext <Gettext>`
support.
:term:`USE_VT`
When using
:ref:`SysVinit <dev-manual/new-recipe:enabling system services>`,
@@ -9509,6 +9800,20 @@ system and gives an overview of their function and contents.
can control with this variable, see the
":ref:`ref-classes-insane`" section.
:term:`WIC_CREATE_EXTRA_ARGS`
If the :term:`IMAGE_FSTYPES` variable contains "wic", the build
will generate a
:ref:`Wic image <dev-manual/wic:creating partitioned images using wic>`
automatically when BitBake builds an image recipe. As part of
this process BitBake will invoke the "`wic create`" command. The
:term:`WIC_CREATE_EXTRA_ARGS` variable is placed at the end of this
command which allows the user to supply additional arguments.
One such useful purpose for this mechanism is to add the ``-D`` (or
``--debug``) argument to the "`wic create`" command. This increases the
amount of debugging information written out to the Wic log during the
Wic creation process.
:term:`WKS_FILE`
Specifies the location of the Wic kickstart file that is used by the
OpenEmbedded build system to create a partitioned image

View File

@@ -15,7 +15,7 @@ and then run the script to hand-install the toolchain.
Follow these steps to locate and hand-install the toolchain:
1. *Go to the Installers Directory:* Go to
:yocto_dl:`/releases/yocto/yocto-&DISTRO;/toolchain/`
:yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/`
2. *Open the Folder for Your Build Host:* Open the folder that matches
your :term:`Build Host` (i.e.
@@ -191,7 +191,7 @@ Follow these steps to extract the root filesystem:
Image File:* You need to find and download the root filesystem image
file that is appropriate for your target system. These files are kept
in machine-specific folders in the
:yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>`
:yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>`
in the "machines" directory.
The machine-specific folders of the "machines" directory contain
@@ -235,7 +235,7 @@ Follow these steps to extract the root filesystem:
Here is an example command that extracts the root filesystem
from a previously built root filesystem image that was downloaded
from the :yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>`.
from the :yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>`.
This command extracts the root filesystem into the ``core2-64-sato``
directory::

View File

@@ -47,7 +47,7 @@ Host` by running the ``*.sh`` installation script.
You can download a tarball installer, which includes the pre-built
toolchain, the ``runqemu`` script, the internal build system,
``devtool``, and support files from the appropriate
:yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within the Index of
:yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within the Index of
Releases. Toolchains are available for several 32-bit and 64-bit
architectures with the ``x86_64`` directories, respectively. The
toolchains the Yocto Project provides are based off the

View File

@@ -173,7 +173,7 @@ You just need to follow these general steps:
root filesystem images.
If you are going to develop your application on hardware, go to the
:yocto_dl:`machines </releases/yocto/yocto-&DISTRO;/machines/>` download area and choose a
:yocto_dl:`machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>` download area and choose a
target machine area from which to download the kernel image and root
filesystem. This download area could have several files in it that
support development using actual hardware. For example, the area
@@ -183,7 +183,7 @@ You just need to follow these general steps:
If you are going to develop your application and then run and test it
using the QEMU emulator, go to the
:yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu>` download area. From this
:yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu>` download area. From this
area, go down into the directory for your target architecture (e.g.
``qemux86_64`` for an Intel-based 64-bit architecture). Download the
kernel, root filesystem, and any other files you need for your

View File

@@ -43,7 +43,7 @@ Host` by running the ``*.sh`` installation script.
You can download a tarball installer, which includes the pre-built
toolchain, the ``runqemu`` script, and support files from the
appropriate :yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within
appropriate :yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within
the Index of Releases. Toolchains are available for several 32-bit and
64-bit architectures with the ``x86_64`` directories, respectively. The
toolchains the Yocto Project provides are based off the

View File

@@ -56,9 +56,10 @@ project:
#include <stdio.h>
main()
int main()
{
printf("Hello World!\n");
return 0;
}
- ``configure.ac``::

View File

@@ -0,0 +1,14 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
================================
Yocto Project Security Reference
================================
.. toctree::
:caption: Table of Contents
:numbered:
security-team
reporting-vulnerabilities
.. include:: /boilerplate.rst

View File

@@ -0,0 +1,85 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Reporting Vulnerabilities
*************************
The Yocto Project and OpenEmbedded are open-source, community-based projects
used in numerous products. They assemble multiple other open-source projects,
and need to handle security issues and practices both internal (in the code
maintained by both projects), and external (maintained by other projects and
organizations).
This manual assembles security-related information concerning the whole
ecosystem. It includes information on reporting a potential security issue,
the operation of the YP Security team and how to contribute in the
related code. It is written to be useful for both security researchers and
YP developers.
How to report a potential security vulnerability?
=================================================
If you would like to report a public issue (for example, one with a released
CVE number), please report it using the
:yocto_bugs:`Security Bugzilla </enter_bug.cgi?product=Security>`.
If you are dealing with a not-yet-released issue, or an urgent one, please send
a message to security AT yoctoproject DOT org, including as many details as
possible: the layer or software module affected, the recipe and its version,
and any example code, if available. This mailing list is monitored by the
Yocto Project Security team.
For each layer, you might also look for specific instructions (if any) for
reporting potential security issues in the specific ``SECURITY.md`` file at the
root of the repository. Instructions on how and where submit a patch are
usually available in ``README.md``. If this is your first patch to the
Yocto Project/OpenEmbedded, you might want to have a look into the
Contributor's Manual section
":ref:`contributor-guide/submit-changes:preparing changes for submission`".
Branches maintained with security fixes
---------------------------------------
See the
:ref:`Release process <ref-manual/release-process:Stable Release Process>`
documentation for details regarding the policies and maintenance of stable
branches.
The :yocto_home:`Releases </development/releases/>` page contains a list of all
releases of the Yocto Project, grouped into current and previous releases.
Previous releases are no longer actively maintained with security patches, but
well-tested patches may still be accepted for them for significant issues.
Security-related discussions at the Yocto Project
-------------------------------------------------
We have set up two security-related emails/mailing lists:
- Public Mailing List: yocto [dash] security [at] yoctoproject[dot] org
This is a public mailing list for anyone to subscribe to. This list is an
open list to discuss public security issues/patches and security-related
initiatives. For more information, including subscription information,
please see the :yocto_lists:`yocto-security mailing list info page
</g/yocto-security>`.
This list requires moderator approval for new topics to be posted, to avoid
private security reports to be posted by mistake.
- Yocto Project Security Team: security [at] yoctoproject [dot] org
This is an email for reporting non-published potential vulnerabilities.
Emails sent to this address are forwarded to the Yocto Project Security
Team members.
What you should do if you find a security vulnerability
-------------------------------------------------------
If you find a security flaw: a crash, an information leakage, or anything that
can have a security impact if exploited in any Open Source software built or
used by the Yocto Project, please report this to the Yocto Project Security
Team. If you prefer to contact the upstream project directly, please send a
copy to the security team at the Yocto Project as well. If you believe this is
highly sensitive information, please report the vulnerability in a secure way,
i.e. encrypt the email and send it to the private list. This ensures that
the exploit is not leaked and exploited before a response/fix has been generated.

View File

@@ -0,0 +1,110 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Security team
*************
The Yocto Project/OpenEmbedded security team coordinates the work on security
subjects in the project. All general discussion takes place publicly. The
Security Team only uses confidential communication tools to deal with private
vulnerability reports before they are released.
Security team appointment
=========================
The Yocto Project Security Team consists of at least three members. When new
members are needed, the Yocto Project Technical Steering Committee (YP TSC)
asks for nominations by public channels including a nomination deadline.
Self-nominations are possible. When the limit time is
reached, the YP TSC posts the list of candidates for the comments of project
participants and developers. Comments may be sent publicly or privately to the
YP and OE TSCs. The candidates are approved by both YP TSC and OpenEmbedded
Technical Steering Committee (OE TSC) and the final list of the team members
is announced publicly. The aim is to have people representing technical
leadership, security knowledge and infrastructure present with enough people
to provide backup/coverage but keep the notification list small enough to
minimize information risk and maintain trust.
YP Security Team members may resign at any time.
Security Team Operations
========================
The work of the Security Team might require high confidentiality. Team members
are individuals selected by merit and do not represent the companies they work
for. They do not share information about confidential issues outside of the team
and do not hint about ongoing embargoes.
Team members can bring in domain experts as needed. Those people should be
added to individual issues only and adhere to the same standards as the YP
Security Team.
The YP security team organizes its meetings and communication as needed.
When the YP Security team receives a report about a potential security
vulnerability, they quickly analyze and notify the reporter of the result.
They might also request more information.
If the issue is confirmed and affects the code maintained by the YP, they
confidentially notify maintainers of that code and work with them to prepare
a fix.
If the issue is confirmed and affects an upstream project, the YP security team
notifies the project. Usually, the upstream project analyzes the problem again.
If they deem it a real security problem in their software, they develop and
release a fix following their security policy. They may want to include the
original reporter in the loop. There is also sometimes some coordination for
handling patches, backporting patches etc, or just understanding the problem
or what caused it.
When the fix is publicly available, the YP security team member or the
package maintainer sends patches against the YP code base, following usual
procedures, including public code review.
What Yocto Security Team does when it receives a security vulnerability
=======================================================================
The YP Security Team team performs a quick analysis and would usually report
the flaw to the upstream project. Normally the upstream project analyzes the
problem. If they deem it a real security problem in their software, they
develop and release a fix following their own security policy. They may want
to include the original reporter in the loop. There is also sometimes some
coordination for handling patches, backporting patches etc, or just
understanding the problem or what caused it.
The security policy of the upstream project might include a notification to
Linux distributions or other important downstream projects in advance to
discuss coordinated disclosure. These mailing lists are normally non-public.
When the upstream project releases a version with the fix, they are responsible
for contacting `Mitre <https://www.cve.org/>`__ to get a CVE number assigned and
the CVE record published.
If an upstream project does not respond quickly
===============================================
If an upstream project does not fix the problem in a reasonable time,
the Yocto's Security Team will contact other interested parties (usually
other distributions) in the community and together try to solve the
vulnerability as quickly as possible.
The Yocto Project Security team adheres to the 90 days disclosure policy
by default. An increase of the embargo time is possible when necessary.
Security Team Members
=====================
For secure communications, please send your messages encrypted using the GPG
keys. Remember, message headers are not encrypted so do not include sensitive
information in the subject line.
- Ross Burton: <ross [at] burtonini [dot] com> `Public key <https://keys.openpgp.org/search?q=ross%40burtonini.com>`__
- Michael Halstead: <mhalstead [at] linuxfoundation [dot] org>
`Public key <https://pgp.mit.edu/pks/lookup?op=vindex&search=0x3373170601861969>`__
or `Public key <https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xd1f2407285e571ed12a407a73373170601861969>`__
- Richard Purdie: <richard.purdie [at] linuxfoundation [dot] org> `Public key <https://keys.openpgp.org/search?q=richard.purdie%40linuxfoundation.org>`__
- Marta Rybczynska: <marta DOT rybczynska [at] syslinbit [dot] com> `Public key <https://keys.openpgp.org/search?q=marta.rybczynska@syslinbit.com>`__
- Steve Sakoman: <steve [at] sakoman [dot] com> `Public key <https://keys.openpgp.org/search?q=steve%40sakoman.com>`__

View File

@@ -152,17 +152,29 @@ series = [k for k in release_series]
previousseries = series[series.index(ourseries)+1:] or [""]
lastlts = [k for k in previousseries if k in ltsseries] or "dunfell"
latestreltag = subprocess.run(["git", "describe", "--abbrev=0", "--tags", "--match", "yocto-*"], capture_output=True, text=True).stdout
latestreltag = latestreltag.strip()
if latestreltag:
if latestreltag.startswith("yocto-"):
latesttag = latestreltag[6:]
else:
# fallback on the calculated version
print("Did not find a tag with 'git describe', falling back to %s" % ourversion)
latestreltag = "yocto-" + ourversion
latesttag = ourversion
print("Version calculated to be %s" % ourversion)
print("Latest release tag found is %s" % latestreltag)
print("Release series calculated to be %s" % ourseries)
replacements = {
"DISTRO" : ourversion,
"DISTRO_LATEST_TAG": latesttag,
"DISTRO_NAME_NO_CAP" : ourseries,
"DISTRO_NAME" : ourseries.capitalize(),
"DISTRO_NAME_NO_CAP_MINUS_ONE" : previousseries[0],
"DISTRO_NAME_NO_CAP_LTS" : lastlts[0],
"YOCTO_DOC_VERSION" : ourversion,
"DISTRO_REL_TAG" : "yocto-" + ourversion,
"DOCCONF_VERSION" : docconfver,
"BITBAKE_SERIES" : bitbakeversion,
}

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.3 KiB

View File

@@ -1,6 +1,6 @@
# Standards for contributing to Yocto Project documentation
This document attemps to standardize the way the Yocto Project
This document attempts to standardize the way the Yocto Project
documentation is created.
It is currently a work in progress.
@@ -109,6 +109,21 @@ or in the BitBake User Manual
If it is not described yet, the variable should be added to the
glossary before or in the same patch it is used, so that `:term:` can be used.
### Admonitions
Sphinx has predefined admonitions that can be used to highlight a bit of text or
add a side-note to the documentation. For example:
```rst
.. note::
This is a note admonition.
```
We try to limit our usage of these admonitions to `note` and `warning`, as the
Sphinx documentation [warns](https://www.sphinx-doc.org/en/master/usage/restructuredtext/basics.html#directives)
that most themes only style these two admonitions.
## ReStructured Text Syntax standards
This section has not been filled yet

View File

@@ -12,6 +12,8 @@ Yocto Project Test Environment Manual
intro
test-process
ptest
runtime-testing
understand-autobuilder
reproducible-builds
yocto-project-compatible

View File

@@ -51,13 +51,11 @@ fashion. Basically, during the development of a Yocto Project release,
the Autobuilder tests if things work. The Autobuilder builds all test
targets and runs all the tests.
The Yocto Project uses now uses standard upstream
Buildbot (`version 3.8 <https://docs.buildbot.net/3.8.0/>`__) to
drive its integration and testing. Buildbot has a plug-in interface
that the Yocto Project customizes using code from the
``yocto-autobuilder2`` repository, adding its own console UI plugin. The
resulting UI plug-in allows you to visualize builds in a way suited to
the project's needs.
The Yocto Project uses standard upstream Buildbot to drive its integration and
testing. Buildbot has a plug-in interface that the Yocto Project customizes
using code from the :yocto_git:`yocto-autobuilder2 </yocto-autobuilder2>`
repository, adding its own console UI plugin. The resulting UI plug-in allows
you to visualize builds in a way suited to the project's needs.
A ``helper`` layer provides configuration and job management through
scripts found in the ``yocto-autobuilder-helper`` repository. The
@@ -131,7 +129,9 @@ the following types of tests:
$ bitbake image -c testimage
The tests use the :ref:`ref-classes-testimage`
class and the :ref:`ref-tasks-testimage` task.
class and the :ref:`ref-tasks-testimage` task. See the
:ref:`test-manual/runtime-testing:Performing Automated Runtime Testing`
section of the Yocto Project Test Environment Manual for more information.
- *Layer Testing:* The Autobuilder has the possibility to test whether
specific layers work with the test of the system. The layers tested
@@ -141,7 +141,7 @@ the following types of tests:
- *Package Testing:* A Package Test (ptest) runs tests against packages
built by the OpenEmbedded build system on the target machine. See the
:ref:`Testing Packages With
ptest <dev-manual/packages:Testing Packages With ptest>` section
ptest <test-manual/ptest:Testing Packages With ptest>` section
in the Yocto Project Development Tasks Manual and the
":yocto_wiki:`Ptest </Ptest>`" Wiki page for more
information on Ptest.

View File

@@ -0,0 +1,133 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
***************************
Testing Packages With ptest
***************************
A Package Test (ptest) runs tests against packages built by the
OpenEmbedded build system on the target machine. A ptest contains at
least two items: the actual test, and a shell script (``run-ptest``)
that starts the test. The shell script that starts the test must not
contain the actual test --- the script only starts the test. On the other
hand, the test can be anything from a simple shell script that runs a
binary and checks the output to an elaborate system of test binaries and
data files.
The test generates output in the format used by Automake::
result: testname
where the result can be ``PASS``, ``FAIL``, or ``SKIP``, and
the testname can be any identifying string.
For a list of Yocto Project recipes that are already enabled with ptest,
see the :yocto_wiki:`Ptest </Ptest>` wiki page.
.. note::
A recipe is "ptest-enabled" if it inherits the :ref:`ref-classes-ptest`
class.
Adding ptest to Your Build
==========================
To add package testing to your build, add the :term:`DISTRO_FEATURES` and
:term:`EXTRA_IMAGE_FEATURES` variables to your ``local.conf`` file, which
is found in the :term:`Build Directory`::
DISTRO_FEATURES:append = " ptest"
EXTRA_IMAGE_FEATURES += "ptest-pkgs"
Once your build is complete, the ptest files are installed into the
``/usr/lib/package/ptest`` directory within the image, where ``package``
is the name of the package.
Running ptest
=============
The ``ptest-runner`` package installs a shell script that loops through
all installed ptest test suites and runs them in sequence. Consequently,
you might want to add this package to your image.
Getting Your Package Ready
==========================
In order to enable a recipe to run installed ptests on target hardware,
you need to prepare the recipes that build the packages you want to
test. Here is what you have to do for each recipe:
- *Be sure the recipe inherits the* :ref:`ref-classes-ptest` *class:*
Include the following line in each recipe::
inherit ptest
- *Create run-ptest:* This script starts your test. Locate the
script where you will refer to it using
:term:`SRC_URI`. Here is an
example that starts a test for ``dbus``::
#!/bin/sh
cd test
make -k runtest-TESTS
- *Return an appropriate exit code*: The ``run-ptest`` script must return 0 on
success, 1 on failure. This is needed by ``ptest-runner`` to keep track of
the successful and failed tests.
- *Make sure the test prints at least one test result*: The execution of the
``run-ptest`` script must result in at least one test result output on the
console, with the following format::
result: testname
Where ``result`` can be one of ``PASS``, ``SKIP``, or ``FAIL``. ``testname``
can be any name.
There can be as many test results as desired.
This information is read by the :ref:`ref-classes-testimage` class and
:oe_git:`logparser </openembedded-core/tree/meta/lib/oeqa/utils/logparser.py>`
module.
- *Ensure dependencies are met:* If the test adds build or runtime
dependencies that normally do not exist for the package (such as
requiring "make" to run the test suite), use the
:term:`DEPENDS` and
:term:`RDEPENDS` variables in
your recipe in order for the package to meet the dependencies. Here
is an example where the package has a runtime dependency on "make"::
RDEPENDS:${PN}-ptest += "make"
- *Add a function to build the test suite:* Not many packages support
cross-compilation of their test suites. Consequently, you usually
need to add a cross-compilation function to the package.
Many packages based on Automake compile and run the test suite by
using a single command such as ``make check``. However, the host
``make check`` builds and runs on the same computer, while
cross-compiling requires that the package is built on the host but
executed for the target architecture (though often, as in the case
for ptest, the execution occurs on the host). The built version of
Automake that ships with the Yocto Project includes a patch that
separates building and execution. Consequently, packages that use the
unaltered, patched version of ``make check`` automatically
cross-compiles.
Regardless, you still must add a ``do_compile_ptest`` function to
build the test suite. Add a function similar to the following to your
recipe::
do_compile_ptest() {
oe_runmake buildtest-TESTS
}
- *Ensure special configurations are set:* If the package requires
special configurations prior to compiling the test code, you must
insert a ``do_configure_ptest`` function into the recipe.
- *Install the test suite:* The :ref:`ref-classes-ptest` class
automatically copies the file ``run-ptest`` to the target and then runs make
``install-ptest`` to run the tests. If this is not enough, you need
to create a ``do_install_ptest`` function and make sure it gets
called after the "make install-ptest" completes.

View File

@@ -91,11 +91,21 @@ run::
oe-selftest -r reproducible.ReproducibleTests.test_reproducible_builds
This defaults to including a ``world`` build so, if other layers are added, it would
also run the tests for recipes in the additional layers. The first build will be
run using :ref:`Shared State <overview-manual/concepts:Shared State>` if
available, the second build explicitly disables
:ref:`Shared State <overview-manual/concepts:Shared State>` and builds on the
This defaults to including a ``world`` build so, if other layers are added, it
would also run the tests for recipes in the additional layers. Different build
targets can be defined using the :term:`OEQA_REPRODUCIBLE_TEST_TARGET` variable
in ``local.conf``. For example, running reproducibility tests for only the
``python3-numpy`` recipe can be done by setting::
OEQA_REPRODUCIBLE_TEST_TARGET = "python3-numpy"
in local.conf before running the ``oe-selftest`` command shown above.
Reproducibility builds the target list twice. The first build will be run using
:ref:`Shared State <overview-manual/concepts:Shared State>` if available, the
second build explicitly disables :ref:`Shared State
<overview-manual/concepts:Shared State>` except for recipes defined in the
:term:`OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS` variable, and builds on the
specific host the build is running on. This means we can test reproducibility
builds between different host distributions over time on the Autobuilder.
@@ -103,18 +113,14 @@ If ``OEQA_DEBUGGING_SAVED_OUTPUT`` is set, any differing packages will be saved
here. The test is also able to run the ``diffoscope`` command on the output to
generate HTML files showing the differences between the packages, to aid
debugging. On the Autobuilder, these appear under
https://autobuilder.yocto.io/pub/repro-fail/ in the form ``oe-reproducible +
https://valkyrie.yocto.io/pub/repro-fail/ in the form ``oe-reproducible +
<date> + <random ID>``, e.g. ``oe-reproducible-20200202-1lm8o1th``.
The project's current reproducibility status can be seen at
:yocto_home:`/reproducible-build-results/`
You can also check the reproducibility status on supported host distributions:
- CentOS: :yocto_ab:`/typhoon/#/builders/reproducible-centos`
- Debian: :yocto_ab:`/typhoon/#/builders/reproducible-debian`
- Fedora: :yocto_ab:`/typhoon/#/builders/reproducible-fedora`
- Ubuntu: :yocto_ab:`/typhoon/#/builders/reproducible-ubuntu`
You can also check the reproducibility status on the Autobuilder:
:yocto_ab:`/valkyrie/#/builders/reproducible`.
===============================
Can I test my layer or recipes?

View File

@@ -1,5 +1,6 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
************************************
Performing Automated Runtime Testing
************************************
@@ -153,7 +154,7 @@ options are available:
If you choose "SystemdbootTarget", there are additional requirements
and considerations. See the
":ref:`dev-manual/runtime-testing:selecting systemdboottarget`" section, which
":ref:`test-manual/runtime-testing:selecting systemdboottarget`" section, which
follows, for more information.
- *"BeagleBoneTarget":* Choose "BeagleBoneTarget" if you are deploying
@@ -185,7 +186,7 @@ Selecting SystemdbootTarget
If you did not set :term:`TEST_TARGET` to "SystemdbootTarget", then you do
not need any information in this section. You can skip down to the
":ref:`dev-manual/runtime-testing:running tests`" section.
":ref:`test-manual/runtime-testing:running tests`" section.
If you did set :term:`TEST_TARGET` to "SystemdbootTarget", you also need to
perform a one-time setup of your controller image by doing the following:

View File

@@ -20,7 +20,7 @@ helps review and test patches and this is his testing tree).
We have two broad categories of test builds, including "full" and
"quick". On the Autobuilder, these can be seen as "a-quick" and
"a-full", simply for ease of sorting in the UI. Use our Autobuilder
:yocto_ab:`console view </typhoon/#/console>` to see where we manage most
:yocto_ab:`console view </valkyrie/#/console>` to see where we manage most
test-related items.
Builds are triggered manually when the test branches are ready. The
@@ -69,7 +69,7 @@ box to "generate an email to QA" is also checked.
When the build completes, an email is sent out using the ``send-qa-email``
script in the :yocto_git:`yocto-autobuilder-helper </yocto-autobuilder-helper>`
repository to the list of people configured for that release. Release builds
are placed into a directory in https://autobuilder.yocto.io/pub/releases on the
are placed into a directory in https://valkyrie.yocto.io/pub/releases on the
Autobuilder which is included in the email. The process from here is
more manual and control is effectively passed to release engineering.
The next steps include:

View File

@@ -10,7 +10,7 @@ Execution Flow within the Autobuilder
The "a-full" and "a-quick" targets are the usual entry points into the
Autobuilder and it makes sense to follow the process through the system
starting there. This is best visualized from the :yocto_ab:`Autobuilder
Console view </typhoon/#/console>`.
Console view </valkyrie/#/console>`.
Each item along the top of that view represents some "target build" and
these targets are all run in parallel. The 'full' build will trigger the

View File

@@ -38,7 +38,7 @@ Benefits
and flexible: it gives users the ultimate power to change pretty much any
aspect of the system but as with most things, power comes with responsibility.
The Yocto Project would like to see people able to mix and match BSPs with
distro configs or software stacks and be able to merge succesfully.
distro configs or software stacks and be able to merge successfully.
Over time, the project identified characteristics in layers that allow them
to operate well together. "anti-patterns" were also found, preventing layers
from working well together.

View File

@@ -548,7 +548,7 @@ database.
You need to run the ``buildslist`` command first to identify existing
builds in the database before using the
:ref:`toaster-manual/reference:\`\`builddelete\`\`` command. Here is an
:ref:`toaster-manual/reference:``builddelete``` command. Here is an
example that assumes default repository and build directory names:
.. code-block:: shell
@@ -557,7 +557,7 @@ example that assumes default repository and build directory names:
$ python ../bitbake/lib/toaster/manage.py buildslist
If your Toaster database had only one build, the above
:ref:`toaster-manual/reference:\`\`buildslist\`\``
:ref:`toaster-manual/reference:``buildslist```
command would return something like the following::
1: qemux86 poky core-image-minimal
@@ -578,7 +578,7 @@ the database.
Prior to running the ``builddelete`` command, you need to get the ID
associated with builds by using the
:ref:`toaster-manual/reference:\`\`buildslist\`\`` command.
:ref:`toaster-manual/reference:``buildslist``` command.
``perf``
--------

View File

@@ -1,7 +1,7 @@
DISTRO = "poky"
DISTRO_NAME = "Poky (Yocto Project Reference Distro)"
#DISTRO_VERSION = "3.4+snapshot-${METADATA_REVISION}"
DISTRO_VERSION = "4.0.23"
DISTRO_VERSION = "4.0.33"
DISTRO_CODENAME = "kirkstone"
SDK_VENDOR = "-pokysdk"
SDK_VERSION = "${@d.getVar('DISTRO_VERSION').replace('snapshot-${METADATA_REVISION}', 'snapshot')}"
@@ -37,10 +37,16 @@ SANITY_TESTED_DISTROS ?= " \
ubuntu-18.04 \n \
ubuntu-20.04 \n \
ubuntu-22.04 \n \
ubuntu-24.04 \n \
fedora-37 \n \
fedora-39 \n \
fedora-40 \n \
debian-11 \n \
opensuseleap-15.3 \n \
almalinux-8.8 \n \
almalinux-8.9 \n \
almalinux-8.10 \n \
almalinux-9.4 \n \
"
# add poky sanity bbclass
INHERIT += "poky-sanity"

View File

@@ -25,3 +25,4 @@ weston:x:525:
wayland:x:526:
render:x:527:
sgx:x:528:
audio:x:529:

View File

@@ -62,6 +62,8 @@ EXTRA_OECMAKE:append = " ${PACKAGECONFIG_CONFARGS}"
export CMAKE_BUILD_PARALLEL_LEVEL
CMAKE_BUILD_PARALLEL_LEVEL:task-compile = "${@oe.utils.parallel_make(d, False)}"
CMAKE_BUILD_PARALLEL_LEVEL:task-install = "${@oe.utils.parallel_make(d, True)}"
CMAKE_BUILD_PARALLEL_LEVEL:task-compile-ptest-base = "${@oe.utils.parallel_make(d, False)}"
CMAKE_BUILD_PARALLEL_LEVEL:task-install-ptest-base = "${@oe.utils.parallel_make(d, True)}"
OECMAKE_TARGET_COMPILE ?= "all"
OECMAKE_TARGET_INSTALL ?= "install"

View File

@@ -95,3 +95,39 @@ addtask addto_recipe_sysroot after do_populate_sysroot
do_addto_recipe_sysroot[deptask] = "do_populate_sysroot"
PATH:prepend = "${COREBASE}/scripts/cross-intercept:"
#
# Cross task outputs can call native dependencies and even when cross
# recipe output doesn't change it might produce different results when
# the called native dependency is changed, e.g. clang-cross-${TARGET_ARCH}
# contains symlink to clang binary from clang-native, but when clang-native
# outhash is changed, clang-cross-${TARGET_ARCH} will still be considered
# equivalent and target recipes aren't rebuilt with new clang binary, see
# work around in https://github.com/kraj/meta-clang/pull/1140 to make target
# recipes to depend directly not only on clang-cross-${TARGET_ARCH} but
# clang-native as well.
#
# This can cause poor interactions with hash equivalence, since this recipes
# output-changing dependency is "hidden" and downstream task only see that this
# recipe has the same outhash and therefore is equivalent. This can result in
# different output in different cases.
#
# To resolve this, unhide the output-changing dependency by adding its unihash
# to this tasks outhash calculation. Unfortunately, don't know specifically
# know which dependencies are output-changing, so we have to add all of them.
#
python cross_add_do_populate_sysroot_deps () {
current_task = "do_" + d.getVar("BB_CURRENTTASK")
if current_task != "do_populate_sysroot":
return
taskdepdata = d.getVar("BB_TASKDEPDATA", False)
pn = d.getVar("PN")
deps = {
dep[0]:dep[6] for dep in taskdepdata.values() if
dep[1] == current_task and dep[0] != pn
}
d.setVar("HASHEQUIV_EXTRA_SIGDATA", "\n".join("%s: %s" % (k, deps[k]) for k in sorted(deps.keys())))
}
SSTATECREATEFUNCS += "cross_add_do_populate_sysroot_deps"

View File

@@ -18,6 +18,9 @@ TARGET_GOMIPS = "${@go_map_mips(d.getVar('TARGET_ARCH'), d.getVar('TUNE_FEATURES
TARGET_GOARM:class-native = "7"
TARGET_GO386:class-native = "sse2"
TARGET_GOMIPS:class-native = "hardfloat"
TARGET_GOARM:class-crosssdk = "7"
TARGET_GO386:class-crosssdk = "sse2"
TARGET_GOMIPS:class-crosssdk = "hardfloat"
TARGET_GOTUPLE = "${TARGET_GOOS}_${TARGET_GOARCH}"
GO_BUILD_BINDIR = "${@['bin/${HOST_GOTUPLE}','bin'][d.getVar('BUILD_GOTUPLE') == d.getVar('HOST_GOTUPLE')]}"

View File

@@ -761,13 +761,7 @@ def package_qa_check_rdepends(pkg, pkgdest, skip, taskdeps, packages, d):
if rdep_data and 'PN' in rdep_data and rdep_data['PN'] in taskdeps:
continue
if not rdep_data or not 'PN' in rdep_data:
pkgdata_dir = d.getVar("PKGDATA_DIR")
try:
possibles = os.listdir("%s/runtime-rprovides/%s/" % (pkgdata_dir, rdepend))
except OSError:
possibles = []
for p in possibles:
rdep_data = oe.packagedata.read_subpkgdata(p, d)
for _, rdep_data in oe.packagedata.foreach_runtime_provider_pkgdata(d, rdepend):
if rdep_data and 'PN' in rdep_data and rdep_data['PN'] in taskdeps:
break
if rdep_data and 'PN' in rdep_data and rdep_data['PN'] in taskdeps:
@@ -811,17 +805,17 @@ def package_qa_check_rdepends(pkg, pkgdest, skip, taskdeps, packages, d):
# perl
filerdepends.pop(rdep,None)
# For Saving the FILERPROVIDES, RPROVIDES and FILES_INFO
rdep_data = oe.packagedata.read_subpkgdata(rdep, d)
for key in rdep_data:
if key.startswith("FILERPROVIDES:") or key.startswith("RPROVIDES:"):
for subkey in bb.utils.explode_deps(rdep_data[key]):
filerdepends.pop(subkey,None)
# Add the files list to the rprovides
if key.startswith("FILES_INFO:"):
# Use eval() to make it as a dict
for subkey in eval(rdep_data[key]):
filerdepends.pop(subkey,None)
for _, rdep_data in oe.packagedata.foreach_runtime_provider_pkgdata(d, rdep, True):
for key in rdep_data:
if key.startswith("FILERPROVIDES:") or key.startswith("RPROVIDES:"):
for subkey in bb.utils.explode_deps(rdep_data[key]):
filerdepends.pop(subkey,None)
# Add the files list to the rprovides
if key.startswith("FILES_INFO:"):
# Use eval() to make it as a dict
for subkey in eval(rdep_data[key]):
filerdepends.pop(subkey,None)
if not filerdepends:
# Break if all the file rdepends are met
break
@@ -1188,24 +1182,27 @@ python do_qa_patch() {
msg += " devtool modify %s\n" % d.getVar('PN')
msg += " devtool finish --force-patch-refresh %s <layer_path>\n\n" % d.getVar('PN')
msg += "Don't forget to review changes done by devtool!\n"
if bb.utils.filter('ERROR_QA', 'patch-fuzz', d):
bb.error(msg)
elif bb.utils.filter('WARN_QA', 'patch-fuzz', d):
bb.warn(msg)
msg = "Patch log indicates that patches do not apply cleanly."
msg += "\nPatch log indicates that patches do not apply cleanly."
oe.qa.handle_error("patch-fuzz", msg, d)
# Check if the patch contains a correctly formatted and spelled Upstream-Status
import re
from oe import patch
allpatches = False
if bb.utils.filter('ERROR_QA', 'patch-status-noncore', d) or bb.utils.filter('WARN_QA', 'patch-status-noncore', d):
allpatches = True
coremeta_path = os.path.join(d.getVar('COREBASE'), 'meta', '')
for url in patch.src_patches(d):
(_, _, fullpath, _, _, _) = bb.fetch.decodeurl(url)
# skip patches not in oe-core
patchtype = "patch-status-core"
if not os.path.abspath(fullpath).startswith(coremeta_path):
continue
patchtype = "patch-status-noncore"
if not allpatches:
continue
kinda_status_re = re.compile(r"^.*upstream.*status.*$", re.IGNORECASE | re.MULTILINE)
strict_status_re = re.compile(r"^Upstream-Status: (Pending|Submitted|Denied|Accepted|Inappropriate|Backport|Inactive-Upstream)( .+)?$", re.MULTILINE)
@@ -1218,9 +1215,13 @@ python do_qa_patch() {
if not match_strict:
if match_kinda:
bb.error("Malformed Upstream-Status in patch\n%s\nPlease correct according to %s :\n%s" % (fullpath, guidelines, match_kinda.group(0)))
msg = "Malformed Upstream-Status in patch\n%s\nPlease correct according to %s :\n%s" % (fullpath, guidelines, match_kinda.group(0))
oe.qa.handle_error(patchtype, msg, d)
else:
bb.error("Missing Upstream-Status in patch\n%s\nPlease add according to %s ." % (fullpath, guidelines))
msg = "Missing Upstream-Status in patch\n%s\nPlease add according to %s ." % (fullpath, guidelines)
oe.qa.handle_error(patchtype, msg, d)
oe.qa.exit_if_errors(d)
}
python do_qa_configure() {
@@ -1337,6 +1338,7 @@ python do_qa_unpack() {
bb.warn('%s: the directory %s (%s) pointed to by the S variable doesn\'t exist - please set S within the recipe to point to where the source has been unpacked to' % (d.getVar('PN'), d.getVar('S', False), s_dir))
unpack_check_src_uri(d.getVar('PN'), d)
oe.qa.exit_if_errors(d)
}
# The Staging Func, to check all staging

View File

@@ -706,9 +706,10 @@ RDEPENDS:${KERNEL_PACKAGE_NAME} = "${KERNEL_PACKAGE_NAME}-base (= ${EXTENDPKGV})
# not wanted in images as standard
RRECOMMENDS:${KERNEL_PACKAGE_NAME}-base ?= "${KERNEL_PACKAGE_NAME}-image (= ${EXTENDPKGV})"
PKG:${KERNEL_PACKAGE_NAME}-image = "${KERNEL_PACKAGE_NAME}-image-${@legitimize_package_name(d.getVar('KERNEL_VERSION'))}"
RPROVIDES:${KERNEL_PACKAGE_NAME}-image += "${KERNEL_PACKAGE_NAME}-image"
RDEPENDS:${KERNEL_PACKAGE_NAME}-image += "${@oe.utils.conditional('KERNEL_IMAGETYPE', 'vmlinux', '${KERNEL_PACKAGE_NAME}-vmlinux (= ${EXTENDPKGV})', '', d)}"
PKG:${KERNEL_PACKAGE_NAME}-base = "${KERNEL_PACKAGE_NAME}-${@legitimize_package_name(d.getVar('KERNEL_VERSION'))}"
RPROVIDES:${KERNEL_PACKAGE_NAME}-base += "${KERNEL_PACKAGE_NAME}-${KERNEL_VERSION}"
RPROVIDES:${KERNEL_PACKAGE_NAME}-base += "${KERNEL_PACKAGE_NAME}-${KERNEL_VERSION} ${KERNEL_PACKAGE_NAME}-base"
ALLOW_EMPTY:${KERNEL_PACKAGE_NAME} = "1"
ALLOW_EMPTY:${KERNEL_PACKAGE_NAME}-base = "1"
ALLOW_EMPTY:${KERNEL_PACKAGE_NAME}-image = "1"

View File

@@ -51,6 +51,7 @@ module_do_install() {
INSTALL_FW_PATH="${D}${nonarch_base_libdir}/firmware" \
CC="${KERNEL_CC}" LD="${KERNEL_LD}" \
O=${STAGING_KERNEL_BUILDDIR} \
KBUILD_EXTRA_SYMBOLS="${KBUILD_EXTRA_SYMBOLS}" \
${MODULES_INSTALL_TARGET}
if [ ! -e "${B}/${MODULES_MODULE_SYMVERS_LOCATION}/Module.symvers" ] ; then

View File

@@ -23,6 +23,7 @@ RECIPE_SYSROOT = "${WORKDIR}/recipe-sysroot"
#
PACKAGE_ARCH = "${SDK_ARCH}-${SDKPKGSUFFIX}"
PACKAGE_ARCHS = "${SDK_PACKAGE_ARCHS}"
TUNE_PKGARCH = "${SDK_ARCH}"
#
# We need chrpath >= 0.14 to ensure we can deal with 32 and 64 bit

View File

@@ -1850,7 +1850,7 @@ SHLIBSWORKDIR = "${PKGDESTWORK}/${MLPREFIX}shlibs2"
python package_do_shlibs() {
import itertools
import re, pipes
import re, shlex
import subprocess
exclude_shlibs = d.getVar('EXCLUDE_FROM_SHLIBS', False)
@@ -1894,7 +1894,7 @@ python package_do_shlibs() {
sonames = set()
renames = []
ldir = os.path.dirname(file).replace(pkgdest + "/" + pkg, '')
cmd = d.getVar('OBJDUMP') + " -p " + pipes.quote(file) + " 2>/dev/null"
cmd = d.getVar('OBJDUMP') + " -p " + shlex.quote(file) + " 2>/dev/null"
fd = os.popen(cmd)
lines = fd.readlines()
fd.close()

View File

@@ -4,7 +4,7 @@ IMAGE_PKGTYPE ?= "rpm"
RPM="rpm"
RPMBUILD="rpmbuild"
RPMBUILD_COMPMODE ?= "${@'w19T%d.zstdio' % int(d.getVar('ZSTD_THREADS'))}"
RPMBUILD_COMPMODE ?= "${@'w3T%d.zstdio' % int(d.getVar('ZSTD_THREADS'))}"
PKGWRITEDIRRPM = "${WORKDIR}/deploy-rpms"
@@ -680,6 +680,7 @@ python do_package_rpm () {
cmd = cmd + " --define '_use_internal_dependency_generator 0'"
cmd = cmd + " --define '_binaries_in_noarch_packages_terminate_build 0'"
cmd = cmd + " --define '_build_id_links none'"
cmd = cmd + " --define '_smp_ncpus_max 4'"
cmd = cmd + " --define '_source_payload %s'" % rpmbuild_compmode
cmd = cmd + " --define '_binary_payload %s'" % rpmbuild_compmode
cmd = cmd + " --define 'clamp_mtime_to_source_date_epoch 1'"

View File

@@ -54,8 +54,8 @@ def qemu_run_binary(data, rootfs_path, binary):
# this dance). For others (e.g. arm) a -cpu option is not necessary, since the
# qemu-arm default CPU supports all required architecture levels.
QEMU_OPTIONS = "-r ${OLDEST_KERNEL} ${@d.getVar("QEMU_EXTRAOPTIONS_%s" % d.getVar('PACKAGE_ARCH')) or ""}"
QEMU_OPTIONS[vardeps] += "QEMU_EXTRAOPTIONS_${PACKAGE_ARCH}"
QEMU_OPTIONS = "-r ${OLDEST_KERNEL} ${@d.getVar("QEMU_EXTRAOPTIONS_%s" % d.getVar('TUNE_PKGARCH')) or ""}"
QEMU_OPTIONS[vardeps] += "QEMU_EXTRAOPTIONS_${TUNE_PKGARCH}"
QEMU_EXTRAOPTIONS_ppce500v2 = " -cpu e500v2"
QEMU_EXTRAOPTIONS_ppce500mc = " -cpu e500mc"
@@ -65,7 +65,3 @@ QEMU_EXTRAOPTIONS_ppce6500 = " -cpu e500mc"
QEMU_EXTRAOPTIONS_ppc64e6500 = " -cpu e500mc"
QEMU_EXTRAOPTIONS_ppc7400 = " -cpu 7400"
QEMU_EXTRAOPTIONS_powerpc64le = " -cpu POWER9"
# Some packages e.g. fwupd sets PACKAGE_ARCH = MACHINE_ARCH and uses meson which
# needs right options to usermode qemu
QEMU_EXTRAOPTIONS_qemuppc = " -cpu 7400"
QEMU_EXTRAOPTIONS_qemuppc64 = " -cpu POWER9"

View File

@@ -377,6 +377,10 @@ rootfs_reproducible () {
find ${IMAGE_ROOTFS}${sysconfdir}/gconf -name '%gconf.xml' -print0 | xargs -0r \
sed -i -e 's@\bmtime="[0-9][0-9]*"@mtime="'${REPRODUCIBLE_TIMESTAMP_ROOTFS}'"@g'
fi
if [ -f ${IMAGE_ROOTFS}${localstatedir}/lib/opkg/status ]; then
sed -i 's/^Installed-Time: .*/Installed-Time: ${REPRODUCIBLE_TIMESTAMP_ROOTFS}/' ${IMAGE_ROOTFS}${localstatedir}/lib/opkg/status
fi
fi
}

View File

@@ -6,7 +6,7 @@ FILES:${PN} += "${rustlibdir}/*.so"
FILES:${PN}-dev += "${rustlibdir}/*.rlib ${rustlibdir}/*.rmeta"
FILES:${PN}-dbg += "${rustlibdir}/.debug"
RUSTLIB = "-L ${STAGING_LIBDIR}/rust"
RUSTLIB ?= "-L ${STAGING_LIBDIR}/rust"
RUST_DEBUG_REMAP = "--remap-path-prefix=${WORKDIR}=/usr/src/debug/${PN}/${EXTENDPE}${PV}-${PR}"
RUSTFLAGS += "${RUSTLIB} ${RUST_DEBUG_REMAP}"
RUSTLIB_DEP ?= "libstd-rs"

View File

@@ -469,6 +469,29 @@ def check_wsl(d):
bb.warn("You are running bitbake under WSLv2, this works properly but you should optimize your VHDX file eventually to avoid running out of storage space")
return None
def check_userns():
"""
Check that user namespaces are functional, as they're used for network isolation.
"""
# There is a known failure case with AppAmrmor where the unshare() call
# succeeds (at which point the uid is nobody) but writing to the uid_map
# fails (so the uid isn't reset back to the user's uid). We can detect this.
parentuid = os.getuid()
pid = os.fork()
if not pid:
try:
bb.utils.disable_network()
except:
pass
os._exit(parentuid != os.getuid())
ret = os.waitpid(pid, 0)[1]
if ret:
bb.fatal("User namespaces are not usable by BitBake, possibly due to AppArmor.\n"
"See https://discourse.ubuntu.com/t/ubuntu-24-04-lts-noble-numbat-release-notes/39890#unprivileged-user-namespace-restrictions for more information.")
# Require at least gcc version 7.5.
#
# This can be fixed on CentOS-7 with devtoolset-6+
@@ -634,6 +657,7 @@ def check_sanity_version_change(status, d):
status.addresult(check_git_version(d))
status.addresult(check_perl_modules(d))
status.addresult(check_wsl(d))
status.addresult(check_userns())
missing = ""

View File

@@ -660,15 +660,6 @@ def sstate_package(ss, d):
tmpdir = d.getVar('TMPDIR')
fixtime = False
if ss['task'] == "package":
fixtime = True
def fixtimestamp(root, path):
f = os.path.join(root, path)
if os.lstat(f).st_mtime > sde:
os.utime(f, (sde, sde), follow_symlinks=False)
sstatebuild = d.expand("${WORKDIR}/sstate-build-%s/" % ss['task'])
sde = int(d.getVar("SOURCE_DATE_EPOCH") or time.time())
d.setVar("SSTATE_CURRTASK", ss['task'])
@@ -683,8 +674,6 @@ def sstate_package(ss, d):
# to sstate tasks but there aren't many of these so better just avoid them entirely.
for walkroot, dirs, files in os.walk(state[1]):
for file in files + dirs:
if fixtime:
fixtimestamp(walkroot, file)
srcpath = os.path.join(walkroot, file)
if not os.path.islink(srcpath):
continue
@@ -706,11 +695,6 @@ def sstate_package(ss, d):
bb.utils.mkdirhier(plain)
bb.utils.mkdirhier(pdir)
bb.utils.rename(plain, pdir)
if fixtime:
fixtimestamp(pdir, "")
for walkroot, dirs, files in os.walk(pdir):
for file in files + dirs:
fixtimestamp(walkroot, file)
d.setVar('SSTATE_BUILDDIR', sstatebuild)
d.setVar('SSTATE_INSTDIR', sstatebuild)

View File

@@ -690,7 +690,7 @@ DEBIAN_MIRROR = "http://ftp.debian.org/debian/pool"
GENTOO_MIRROR = "http://distfiles.gentoo.org/distfiles"
GNOME_GIT = "git://gitlab.gnome.org/GNOME"
GNOME_MIRROR = "https://download.gnome.org/sources/"
GNU_MIRROR = "https://ftp.gnu.org/gnu"
GNU_MIRROR = "https://ftpmirror.gnu.org/gnu"
GNUPG_MIRROR = "https://www.gnupg.org/ftp/gcrypt"
GPE_MIRROR = "http://gpe.linuxtogo.org/download/source"
KERNELORG_MIRROR = "https://cdn.kernel.org/pub"

View File

@@ -52,4 +52,4 @@ KERNEL_IMAGETYPES ??= "${KERNEL_IMAGETYPE}"
# fetch from the network (and warn you if not). To disable the test set
# the variable to be empty.
# Git example url: git://git.yoctoproject.org/yocto-firewall-test;protocol=git;rev=master;branch=master
CONNECTIVITY_CHECK_URIS ?= "https://yoctoproject.org/connectivity.html"
CONNECTIVITY_CHECK_URIS ?= "https://www.yoctoproject.org/connectivity.html"

Some files were not shown because too many files have changed in this diff Show More