Compare commits

..

798 Commits

Author SHA1 Message Date
Quentin Schulz
b301218f4d overview-manual/concepts: list other possible class directories
Classes can be located in three different directories since Langdale
(4.1), so let's update which directories you can find in a distribution
layer.

(From yocto-docs rev: 2141bc2b04ef4210e008752a97ed82979d817dae)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit fd11d75980315d87ef375091efedad69a123f680)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:25:52 +00:00
Kristiyan Chakarov
0288ddd51d overview-manual: escape wildcard in inline markup
This change escapes the wildcard in 'recipes-*' to properly italicize
the string

(From yocto-docs rev: 53bc47aedfd924f75ee77b24d13ae69a10eef221)

Signed-off-by: Kristiyan Chakarov <kichakarov0@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b5a4dca823bcc04c0254a0f53a28f61969fb6c31)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:25:52 +00:00
Antonin Godard
dffcc1fe8a ref-manual/system-requirements.rst: update end-of-life distros
Fedora 41 was made obsolete on 2025-12-15 [1].

[1]: https://docs.fedoraproject.org/en-US/releases/eol/

(From yocto-docs rev: ef9af4a9d2a0b7f08c97961958c7535b49bf0739)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:25:52 +00:00
Richard Purdie
37539a1555 bitbake: COW: Fix hardcoded magic numbers and work with python 3.13
The COW tests started failing on python 3.13. Looks like it is time
to fix the FIXME and drop the magic numbers!

(Bitbake rev: a0a5ce49f28d886b1dac173842642e69517b44e3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2e6608cec508b3b9bab3530f83e70665ff638182)
[YC: This fixes the bb.tests.cow.COWTestCase.testOriginalTestSuite
     bitbake-selftest on the newly added fedora-41 workers]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:23:04 +00:00
Livin Sunny
04ae2d93de busybox: Fixes CVE-2025-60876
This addresses CVE-2025-60876[1], which allows malicious URLs to inject
HTTP headers. It has been accepted by Debian[2] and is tracked here [4].
The upstream fix has been submitted [3] and is pending merge.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-60876
[2] https://bugs.debian.org/1120795
[3] https://lists.busybox.net/pipermail/busybox/2025-November/091840.html
[4] https://security-tracker.debian.org/tracker/CVE-2025-60876

Upstream-Status: Submitted [https://lists.busybox.net/pipermail/busybox/2025-November/091840.html]

(From OE-Core rev: 077f258eb2125359ffe3982c58433ee14cb21f09)

Signed-off-by: Livin Sunny <livinsunny519@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f12af98df8f627c6d1836d27be48bac542a4f00e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Paul Barker
da499d6c21 create-pull-request: Keep commit hash to be pulled in cover email
The cover email mangling in create-pull-request was cutting off the
actual commit hash to be pulled, making it difficult to verify that the
changes a maintainer merges exactly match those intended by the pull
request author.

The extra lines we want to include are, for example from a recent
whinlatter stable branch PR:

    for you to fetch changes up to 6c4c6d39ea3202d756acc13f8ce81b114a468541:

      cups: upgrade from 2.4.14 to 2.4.15 (2025-12-29 09:49:31 -0800)

(From OE-Core rev: a18ebd408eba0bffe4e6ea58a91fd41e60f24216)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c78f5ae4a5ba3675b78cc226feb7b9fbbfd8da19)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Yoann Congal
d8b1c623be README: Add scarthgap subject-prefix to git-send-email suggestion
That might help new users send correct first stable patches.

(From OE-Core rev: 625d3c1e1d6b3aa5e6783a4a350238a718d02456)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Tom Hochstein
4eba85f43e uboot-config: Fix devtool modify
Fix a problem with `devtool modify` as suggested by Marcus Flyckt on
the mailing list:
```
    I encountered an issue with `do_config` when using `devtool modify`
    on `u-boot-imx`.

    ```
    [...]
    | cp: cannot stat '[...]/u-boot-imx/2024.04/build/imx8mp_wl400s_defconfig/.config': No such file or directory
    | WARNING: exit code 1 from a shell command.
    ERROR: Task ([...]/sources/poky/../meta-freescale/recipes-bsp/u-boot/u-boot-imx_2024.04.bb:do_configure) failed with exit code '1'
    NOTE: Tasks Summary: Attempted 963 tasks of which 962 didn't need to be rerun and 1 failed.
    Summary: 1 task failed:
      [...]/sources/poky/../meta-freescale/recipes-bsp/u-boot/u-boot-imx_2024.04.bb:do_configure
    Summary: There was 1 ERROR message, returning a non-zero exit code
    ```

    The issue seems to originate from the following lines in
    `workspace/appends/u-boot-imx_2024.04.bbappend`:

    ```
    do_configure:append() {
        if [ ${@oe.types.boolean(d.getVar("KCONFIG_CONFIG_ENABLE_MENUCONFIG"))} = True ]; then
            cp ${KCONFIG_CONFIG_ROOTDIR}/.config ${S}/.config.baseline
            ln -sfT ${KCONFIG_CONFIG_ROOTDIR}/.config ${S}/.config.new
        fi
    }
    ```

    For some reason `KCONFIG_CONFIG_ROOTDIR` does not point to the
    correct directory. It gets its value in `uboot-config.bbclass`:

    ```
    if len(ubootconfig) == 1:
                    d.setVar('KCONFIG_CONFIG_ROOTDIR', os.path.join(d.getVar("B"), d.getVar("UBOOT_MACHINE").strip()))
    ```

    So the main issue is that B gets expanded in this expression, and
    then later B gets changed by `externalsrc.bbclass`.
    `d.getVar("B", False)` does not solve the issue, however the
    proposed change does.
```
- https://lists.yoctoproject.org/g/yocto/topic/109254298#msg64152]

Fixes [YOCTO #15603]

Suggested-by: Marcus Flyckt <marcus.flyckt@gmail.com>
(From OE-Core rev: 6a19e284baaadfdf080ebc5decf065e468655732)

Signed-off-by: Tom Hochstein <tom.hochstein@oss.nxp.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 57b21065a25100c31515b32fd7c77bde3355d684)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Yoann Congal
61319bfc42 scripts/install-buildtools: Update to 5.0.16
Update to the 5.0.16 release of the 5.0 series for buildtools

(From OE-Core rev: 917c382c412766b40779788ee2411ac23358f0ae)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Peter Marko
42d32c4016 openssl: upgrade 3.2.6 -> 3.5.5
Openssl 3.2 has reached EOL.
Some projects would like to use LTS version due to criticality and
exposure of this component, so upgrade to 3.5 branch.

Copy recipe from oe-core master fd3b1efb6f7ffb5505ff7eb95cae222e1db9f776
which is the last revision before disabling TLS 1/1.1 by default.
Single change is replacing UNPACKDIR by WORKIDR (one occurence).

(From OE-Core rev: c4fc6ee6986fbd05d72bf1e6bb1d2c4eee84e5db)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Hugo SIMELIERE
b095ae1907 harfbuzz: Fix CVE-2026-22693
Pick patch mentioned in NVD report [1]

[1] https://nvd.nist.gov/vuln/detail/CVE-2026-22693

(From OE-Core rev: 541482f93d8447f7a027bacb99a6782ac5ed2a6e)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Hugo SIMELIERE
5a3a169888 zlib: Fix CVE-2026-27171
Pick patch from [1] also mentioned in [2]

[1] https://github.com/madler/zlib/issues/904
[2] https://security-tracker.debian.org/tracker/CVE-2026-27171

(From OE-Core rev: cf95e20db688fb155ba0dc7968c816937190234f)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Peter Marko
e254ea69aa ffmpeg: set status for CVE-2025-12343
Per [1] is patch for this CVE [2].
This is equivalent of [3] which is included in n6.1.3.

[1] https://security-tracker.debian.org/tracker/CVE-2025-12343
[2] b8d5f65b9e
[3] 6250ed77a6

(From OE-Core rev: b839647eb0627598a9e1667d18802b6b03637abf)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Peter Marko
ab4bfcb9d5 ffmpeg: set status for CVE-2025-10256
Per [1] is patch for this CVE [2].
This is equivalent of [3] which is included in n6.1.3.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-10256
[2] a25462482c
[3] 00b5af29a4

(From OE-Core rev: 8a24195c27d440fa851da555f1147230564674b0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Shaik Moin
dbbf9b9d82 gdk-pixbuf: Fix CVE-2025-6199
Backport the fix for CVE-2025-6199
Add below patch to fix
CVE-2025-6199.patch

Reference: In Ubuntu and debian, fixed patch is given -> [c4986342b2]

(From OE-Core rev: de8c5d9964086e960e6df1f58a6d675fdb761286)

Signed-off-by: Shaik Moin <moins@kpit.com>
[YC: Link to Debian security tracker: https://security-tracker.debian.org/tracker/CVE-2025-6199 ]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:22:06 +00:00
Yoann Congal
7d50718f90 poky.conf: add fedora-41, rocky-8 to SANITY_TESTED_DISTROS
Those are already documented as supported:
https://git.yoctoproject.org/yocto-docs/tree/documentation/ref-manual/system-requirements.rst?h=scarthgap#n65

Actually support them in sanity check.

(From meta-yocto rev: 94d19f9d8392f8a125764df0f8eda04205c7e76c)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-28 10:22:36 +00:00
Richard Purdie
92de6a134a build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: a9a785d7fa0cfe2a9087dbcde0ef9f0d2a441375)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:17 +00:00
Paul Barker
06210079b2 poky.conf: Bump version for 5.0.16 release
(From meta-yocto rev: 03f93c769ec99e5086e492d8145eb308a718e8d3)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Robert P. J. Day
b43070b570 dev-manual: delete references to "tar" package format
There is no "tar" packaging format anymore, so delete these
references.

(From yocto-docs rev: e7cbf979deb9739ee4b968672d4b03ae65b24424)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e2b4d75fc8d738a39c5941591523620b45bc57e3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Antonin Godard
9796c90d54 Makefile: pass -silent to latexmk
This should drastically decrease the number of lines in the
docs build logs, which currently can go up to 1700000 lines on the
Autobuilder[1].

[1]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/34/builds/400/steps/6/logs/stdio

(From yocto-docs rev: ac3766beaff14ea62552f811b2ffcc43f77d8dd5)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6e9362923d4ab5599730da2074ab9f5a36e8ba14)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Antonin Godard
ee156de13e what-i-wish-id-known.rst: replace figure by the new SVG
We have a new SVG figure for the Yocto Project workflow figure, which
was updated with d2aaf54bee49 ("overview-manual: convert
YP-flow-diagram.png to SVG"). The one in the "What I wish I’d known
about Yocto Project" is the same. Remove the PNG and make a reference to
the new one.

(From yocto-docs rev: ef4b9077c04ed825890abf79848f45d8e692bbf7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4023c47cb6628971b0a142067c4a910420408bb9)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Michael Opdenacker
795acd093a ref-manual/classes.rst: fix broken links to U-Boot documentation
In the chapter describing the "uboot-sign" class

(From yocto-docs rev: 7ad53da253f6b03b75322ecc53ad6ff8fb1a4809)

Signed-off-by: Michael Opdenacker <michael.opdenacker@rootcommit.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7d1caa1d3229fb49d6d08ca4952b046c3164e628)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Yoann Congal
bf30db97f7 ref-manual/system-requirements.rst: update untested distros
Some distros were removed from the autobuilder 5 months ago:
* 070e6bf (config.py: Drop ubuntu2004 workers, 2025-10-01)
* 8238327 (config.py: ubuntu24010 was replaced with ubuntu2504, 2025-10-01)

Update their status in the supported distros list.

(From yocto-docs rev: 2c9de0d74659fef6d7b0054dfd76905fba6ef81d)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Yoann Congal
ef014bdb96 u-boot: move CVE patches out of the common .inc file
An external layer might use the u-boot*.inc files but have a different
base version for which the CVE patches don't apply.

Move the CVE patches in the leaf recipe.

See related patch in kirkstone:
[kirkstone][PATCH] u-boot: move CVE patch out of u-boot-common.inc
https://lists.openembedded.org/g/openembedded-core/topic/117385432

(From OE-Core rev: f4ced8ff03147dd532a88cf3ce08d61fab057522)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
ce6c389607 alsa-lib: patch CVE-2026-25068
Pick patch mentioned in NVD report.
It also includes CVE ID in commit message.

Use older SNDERR funtion as new one is not yet available.
This was copied from Debian patch.

(From OE-Core rev: 517bda641fcccbeae1988092196dc44ab7cc1491)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
40ae5e31a4 gnupg: patch CVE-2025-68973
Pick patch from 2.4 branch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-68973

(From OE-Core rev: 66df136096c6a7e29edea0fbc0132b234032965f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
74492c96b7 ffmpeg: set status of CVE-2025-25468
This vulnerability was introduced in v8.0.
This can be seen by blaming fix [1] (linked from NVD report [3]) is
showing that the return without freeing memory was introduced in [2].

[1] d5873be583
[2] d38fc25519
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-25468

(From OE-Core rev: 2915986318230846e1b513b4cf3d9ba62a5b8cb9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
01a3d9d7ae libtheora: mark CVE-2024-56431 as not vulnerable yet
CVE patch [1] aplies only on main branch which is base for 1.2.x.
Branch 1.1 has a different initial commit and does not contain
vulnerable code where the CVE patch applies.

Also Debian [2] marked 1.1 as not vulnerable.

[1] 5665f86b8f
[2] https://security-tracker.debian.org/tracker/CVE-2024-56431

(From OE-Core rev: 07f35d022b88ab4d297d0252f9909e252b7e4cfe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
d3ad12659a ffmpeg: ignore CVE-2025-1594
This CVE was patched via c9a15206bae7f1e85dc3b8812eabb936a7e6d383

Patch was dropped during update to 6.1.4, however NVD DB does not have
this information so it re-appeared in CVE reports.

Set its status accordingly.

(From OE-Core rev: 26e32dccade107101992dd81f387696c993d47aa)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
0e148ac345 glib-2.0: patch CVE-2026-1489
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3872
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4984

(From OE-Core rev: a032cc36df3cbd084ca8ae1a8fa638274dd71318)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
e1fb45c7b3 glib-2.0: patch CVE-2026-1485
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3871
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4981

(From OE-Core rev: 64c332e99d0487178aab96578008bec9b133533f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Peter Marko
fd826a83c7 glib-2.0: patch CVE-2026-1484
Pick patches from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3870
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4979

(From OE-Core rev: 67bc85229209e0405587c6747d9a98576d59e094)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Daniel Dragomir
ac842282aa wic/engine: error on old host debugfs for standalone directory copy
When wic is used in standalone mode, it relies on host tools such as
debugfs. For directory host->image copies into ext* partitions, wic
uses scripted debugfs "-f" input with multiple mkdir/write commands.

Older host debugfs versions (< 1.46.5) may behave unreliably in this
mode and can silently miss files. This does not affect builds using
debugfs from OE where the version is known to be sufficiently new.

Add a debugfs version check and emit an error when an older host
debugfs is detected. The error is shown once per run and halts execution.

(From OE-Core rev: 977d68d2702f7092fa05d04f94da5fee8e0b2195)

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cb536737bee95d5a5072b501bda9554705e8cd13)
[YC: removed patch changelog]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:07 +00:00
Aleksandar Nikolic
6eea44a7fe scripts/install-buildtools: Update to 5.0.15
Update to the 5.0.15 release of the 5.0 series for buildtools

(From OE-Core rev: 52063e6a91cc1386feb0cb47ba870ad21628a894)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic22@pm.me>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Hitendra Prajapati
113e92bd8b openssl: fix CVE-2025-69419
Backport patch from NVD report: https://nvd.nist.gov/vuln/detail/CVE-2025-69419

(From OE-Core rev: 0ad28133e04d439fbee5710ab4b43042d1101ff6)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Hitendra Prajapati
dbdc8de0ef openssl: fix CVE-2025-15468
To fix this issue, Add a NULL guard before dereferencing SSL_CIPHER.

Backport patch from NVD report: https://nvd.nist.gov/vuln/detail/CVE-2025-15468

(From OE-Core rev: 4eb01c3d18dc268cc5aa03386247bf670075c88b)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Fabio Berton
fa64e0279b classes/buildhistory: Do not sign buildhistory commits
This change adds the --no-gpg-sign option to prevent buildhistory
commits from failing due to GPG signing issues. Depending on the setup,
buildhistory may fail to create a commit if the user has the
commit.gpgsign option enabled.

For example, if the user creates a signing key that requires a password,
the commit won't be created and will fail with the following error:

/
|error: Enter passphrase: Load key "/home/<user>/.ssh/id_ed25519":
|incorrect passphrase supplied to decrypt private key?
|fatal: failed to write commit object
\

The bitbake command won't fail, but buildhistory won't have a commit.
Also, the commit may silently fail when building inside a container due
to missing packages or issues with accessing the GPG agent.

This is similar to [1], and signing the buildhistory commit
should be avoided to prevent such issues.

1 - https://git.openembedded.org/openembedded-core/commit/?id=7595a0a63a933af9dd9d1e458dc34a4ba80d9eae

(From OE-Core rev: 667cd853a231f1fe884ba83ada2ad6cecb1c41cd)

Signed-off-by: Fabio Berton <fabio.berton@ctw.bmwgroup.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a5e18714aee52db898aaf9d222fb5a4168bde96e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Peter Marko
d95e14f86c libpng: patch CVE-2026-25646
Backport patch mentioned in NVD CVE report.

(From OE-Core rev: dd08ef6de714ea06d6b6255faca2ddbc66450977)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Richard Purdie
119ec1b846 go-vendor: Fix absolute paths issue
When building with the class, avoid errors like:

"sstate found an absolute path symlink /xxx/vendor pointing at
/xxx/import/vendor. Please replace this with a relative link."

Use relative symlinks instead.

(From OE-Core rev: 2ef214747b648733308958b5750c6c053ac49246)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Thomas Vandenabeele <thomas@bootzero.one>
(cherry picked from commit fc4f589cc7a8e5feba7940ccb244a74bd5f96371)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Benjamin Robin (Schneider Electric)
c4da6ca1c2 spdx30_tasks: Exclude 'doc' when exporting PACKAGECONFIG to SPDX
Currently when generating an SBOM, all packages have the 'doc' feature
indicated as disabled. This is in fact *not* a feature that was
declared in the recipe, but instead the documentation of the
PACKAGECONFIG variable.

But to be safe, if somehow a feature is named 'doc' and enabled, do
not exclude it when exporting PACKAGECONFIG features to SPDX.

(From OE-Core rev: 87de87206b71bb165b946d5f4f6e9e5395292179)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 933394adcb0d2db66ef7e0656a464241e58ec2e7)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Vijay Anusuri
5e5234a7de bind: Upgrade 9.18.41 -> 9.18.44
This upgrade fixes CVE-2025-13878

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.44/doc/arm/html/notes.html

(From OE-Core rev: dcd39187a8d769f13d0a9a84c2749f82839ddd02)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
e44ffb5b15 go 1.22.12: Fix CVE-2025-68121
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-68121
Type: Security Fix
CVE: CVE-2025-68121
Score: 4.8
Patch:
- https://github.com/golang/go/commit/5f07b226f9aa
- https://github.com/golang/go/commit/cb75daf3b291
- https://github.com/golang/go/commit/6a501314718b

(From OE-Core rev: a5ded8dd51a520cf190ea094f65301477b057d8f)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
5f5a2976b2 go 1.22.12: Fix CVE-2025-61732
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-61732
Type: Security Fix
CVE: CVE-2025-61732
Score: 8.6
Patch:  https://github.com/golang/go/commit/14d0bb39c1c4

(From OE-Core rev: 560778463bd0d4e52ac40851783e39733edcf9d1)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
c13443407a go 1.22.12: Fix CVE-2025-68119
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-68119
Type: Security Fix
CVE: CVE-2025-68119
Score: 7.0
Patch:
[1] https://github.com/golang/go/commit/62452bed4801
[2] https://github.com/golang/go/commit/73fe85f0ea1b

Note:
- First commit [1] is a dependent patch which is required additionally
  in original fix [2] to define ENV variable changes in
  src/cmd/go/internal/vcs/vcs.go file.

(From OE-Core rev: ef995146623cf65c2e30f37b09847883ca7481bb)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
a231c49abc go 1.22.12: Fix CVE-2025-61731
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-61731
Type: Security Fix
CVE: CVE-2025-61731
Score: 7.8
Patch: https://github.com/golang/go/commit/00b7309387a1

(From OE-Core rev: a7d8ad20525ee6c74a0e149dfd54c7e5c9e1f740)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
e333b43a69 go 1.22.12: Fix CVE-2025-61728
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-61728
Type: Security Fix
CVE: CVE-2025-61728
Score: 6.5
Patch: https://github.com/golang/go/commit/3235ef3db85c

(From OE-Core rev: 31eb409b8a0537d97e09e6a13b8182db4135f3c9)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
242963f4cd go 1.22.12: Fix CVE-2025-61726
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-61726
Type: Security Fix
CVE: CVE-2025-61726
Score: 7.5
Patch: https://github.com/golang/go/commit/85c794ddce26

(From OE-Core rev: 6a1ae4e79252f9a896faa702e4a8b3e27529a474)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Deepak Rathore
dde29170e3 go 1.22.12: Fix CVE-2025-61730
Upstream Repository: https://github.com/golang/go.git

Bug details: https://nvd.nist.gov/vuln/detail/CVE-2025-61730
Type: Security Fix
CVE: CVE-2025-61730
Score: 4.2
Patch: https://github.com/golang/go/commit/ad2cd043db66

(From OE-Core rev: 71f645d9ebf77d30744780e777955a6c7e28258b)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ming Liu
b16633f3c6 weston: fix a touch-calibrator issue
touch-calibrator of weston 13.0.1 does not work, backport the fix from
upstream:
a5c5702112

this issue only impact weston 13.0.1, has been fixed in 14.0.1.

(From OE-Core rev: 06dcf8f45bb01fe52e16b23668c4a30d9b2d092f)

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
7ba05c3301 linux-yocto/6.6: update to v6.6.123
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c56aaf1a85ae9 Linux 6.6.123
    7e0d31c47b8a9 bpf/selftests: test_select_reuseport_kern: Remove unused header
    5a530c8ead06e Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
    507692c056363 Revert "net: Allow to use SMP threads for backlog NAPI."
    dd4c7800a905d drm/amd/display: use udelay rather than fsleep
    572777a258c04 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
    1891abe832cbf ksmbd: fix recursive locking in RPC handle list access
    b6978c565ce33 xsk: Fix race condition in AF_XDP generic RX path
    c74e2dbb53168 drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
    a3f75ee1a436e drm/amdkfd: Don't use sw fault filter if retry cam enabled
    21bad75012f76 pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
    38a0f2215aee4 mptcp: avoid dup SUB_CLOSED events after disconnect
    73408fa92742b writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
    d84a4836dc246 perf: sched: Fix perf crash with new is_user_task() helper
    e57bda247f29c drm/msm/a6xx: fix bogus hwcg register updates
    e228ad913b0d2 pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
    daf8a4eb70ff4 ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
    db24153fc77a8 net/sched: act_ife: convert comma to semicolon
    1d14f86e813f6 btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
    9d0ed508a9e2a drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
    e26235840fd96 team: Move team device type change at the end of team_port_add
    27ca8004ba93a wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
    fb2b9a1e85bdd wifi: mac80211: move TDLS work to wiphy work
    6b615a8fb3af0 ksmbd: Fix race condition in RPC handle list access
    d1bda2ab0cf95 drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
    4d1e9a4a450aa ksmbd: smbd: fix dma_unmap_sg() nents
    143980bd2be75 mei: trace: treat reg parameter as string
    ce820dd4e6e2d arm64/fpsimd: signal: Fix restoration of SVE context
    40b73f0519d3c arm64/fpsimd: signal: Consistently read FPSIMD context
    15110f9cdc877 arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
    e527e695fdfc1 mm/kfence: randomize the freelist on initialization
    38c32baf6d2c7 gpio: rockchip: Stop calling pinctrl for set_direction
    e618b52a1589a drm/amdgpu/gfx11: fix wptr reset in KGQ init
    c61c93218956c drm/amdgpu/gfx10: fix wptr reset in KGQ init
    cbf4d79e5c619 drm/amdgpu/soc21: fix xclk for APUs
    9a15d3fdc22d4 drm/imx/tve: fix probe device leak
    cdaf07ec0b698 scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
    884b2590ffcc7 flex_proportions: make fprop_new_period() hardirq safe
    4bed436cdef70 selftests: mptcp: join: fix local endp not being tracked
    ba58cd70a4223 selftests: mptcp: check subflow errors in close events
    8b5061c3400a7 selftests: mptcp: check no dup close events after error
    d761d42be060b mptcp: only reset subflow errors when propagated
    510a16f1c5c16 efivarfs: fix error propagation in efivar_entry_get()
    a9c96f113a5f3 scsi: qla2xxx: edif: Fix dma_free_coherent() size
    122751f43f930 gpio: pca953x: mask interrupts in irq shutdown
    c2fc0aae3cf42 ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
    441d129ba899e scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
    28a1e5e97c899 ASoC: fsl: imx-card: Do not force slot width to sample width
    018e9e9cae7b3 rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
    929e568a83da5 riscv: compat: fix COMPAT_UTS_MACHINE definition
    8519c9231ce23 pinctrl: meson: mark the GPIO controller as sleeping
    be1cebabb3cd2 dma/pool: distinguish between missing and exhausted atomic pools
    0368794dc28a1 gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
    2f45c46661911 ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
    ac3a2ea06f3c8 scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
    0d434670eb0bb net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
    e43fdee29a96f net: bridge: fix static key check
    546eba0b10989 nfc: nci: Fix race between rfkill and nci_unregister_device().
    970526dde3686 net/mlx5e: Account for netdev stats in ndo_get_stats64
    e014f11f741be net/mlx5e: Report rx_discards_phy via rx_dropped
    62e1d8920f692 net/mlx5e: TC, delete flows only for existing peers
    fd30aa82df73b ice: stop counting UDP csum mismatch as rx_errors
    f8d002626d434 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
    d448bf96889f1 rocker: fix memory leak in rocker_world_port_post_fini()
    2a0522f564acd net: wwan: t7xx: fix potential skb->frags overflow in RX path
    96595848c6fd6 ipv6: use the right ifindex when replying to icmpv6 from localhost
    509b526d64290 net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
    8c0be3277e7ae bonding: annotate data-races around slave->last_rx
    5058d3f8f1720 octeon_ep: Fix memory leak in octep_device_setup()
    724c9d346a3ac net: bcmasp: fix early exit leak with fixed phy
    923379f1d7e3a can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
    dc5d1eb935be0 net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
    186d147cf7689 Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
    2cf6f68313dcc Linux 6.6.122
    96aa13ff68ef5 net: phy: fix phy_uses_state_machine()
    043aa41c43f8c net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
    b5a933535cc34 net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
    1e2848bda819a x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
    8db5de0cf02fc wifi: ath11k: fix RCU stall while reaping monitor destination ring
    8d2979b9bb1be drm/amdgpu: csa unmap use uninterruptible lock
    7d52c592cf53f fs/ntfs3: Initialize allocated memory before use
    1067361a1cc6a ksmbd: fix use-after-free in ksmbd_session_rpc_open
    17fbad93879e8 usbnet: Fix using smp_processor_id() in preemptible code warnings
    8120e420013d9 NFSD: fix race between nfsd registration and exports_proc
    d89f3037d54d3 nvme: fix PCIe subsystem reset controller state transition
    7dfb39b0186dd nvme-pci: do not directly handle subsys reset fallout
    ca88419cf0623 nvme-fc: rename free_ctrl callback to match name pattern
    f83824b023c75 ASoC: codecs: wsa883x: fix unnecessary initialisation
    0ded4420b54e9 ASoC: codecs: wsa881x: fix unnecessary initialisation
    ea2474ea2eef4 ASoC: codecs: wsa881x: Drop unused version readout
    ebae26dd15140 phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
    479fab9aeade1 phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
    d6705bcc5fe7c mm: kmsan: fix poisoning of high-order non-compound pages
    4a04ff9cd816e mm/page_alloc: prevent pcp corruption with SMP=n
    93464499df42b dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
    1a179ac01ff39 dmaengine: stm32: dmamux: fix device leak on route allocation
    041863dd410bd iio: adc: exynos_adc: fix OF populate on driver rebind
    91a756d22f048 ALSA: scarlett2: Fix buffer overflow in config retrieval
    6b20590c43538 arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
    fb3c1f24f3b7e mm/rmap: fix two comments related to huge_pmd_unshare()
    522e580524106 iio: core: add separate lockdep class for info_exist_lock
    31c3c9f3b1b9b iio: core: add missing mutex_destroy in iio_dev_release()
    5596ce564a8c3 mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
    e9711bd0e6481 mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
    adec5e1f9c99f can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
    4d3c2a1d4c7c3 bridge: mcast: Fix use-after-free during router port configuration
    8670b53b8ee91 bpf: Do not let BPF test infra emit invalid GSO types to stack
    1da48da947d0c selftests/bpf: Check for timeout in perf_link test
    526394af4e8ad migrate: correct lock ordering for hugetlb file folios
    59ff56992bba2 can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
    179f6f0cf5ae4 can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
    7c308f7530bff can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
    e9410fdd4d5f7 can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
    1b32339156035 irqchip/gic-v3-its: Avoid truncating memory addresses
    dd40d94ffd7c8 perf/x86/intel: Do not enable BTS for guests
    cad7003d951e8 pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
    6384f7851838f platform/x86: hp-bioscfg: Fix automatic module loading
    bd8955337e376 netrom: fix double-free in nr_route_frame()
    43f233eb6e7b9 uacce: ensure safe queue release with state management
    4c042bc71474d uacce: implement mremap in uacce_vm_ops to return -EPERM
    9ab05cdcac354 uacce: fix isolate sysfs check condition
    d9031575a2f8a uacce: fix cdev handling in the cleanup path
    bf7785434b5d0 intel_th: fix device leak on output open()
    98ecbfb2598c9 tracing: Fix crash on synthetic stacktrace field usage
    2ddc09f6a0a22 slimbus: core: fix device reference leak on report present
    dd58835fba5d6 slimbus: core: fix runtime PM imbalance on report present
    d2846f8a89fd6 octeontx2: Fix otx2_dma_map_page() error return code
    8557bdd9af8dd arm64: Set __nocfi on swsusp_arch_resume()
    19b2c3f3ca1b4 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
    7761d7801f40e wifi: rsi: Fix memory corruption due to not set vif driver data size
    5d0ab96350e06 wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
    36e0bc5e8b282 wifi: ath12k: fix dma_free_coherent() pointer
    1928851334ecf wifi: ath10k: fix dma_free_coherent() pointer
    f2677d6e2bbc5 mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
    bcb72b6a39e90 mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
    7bff0156d13f0 ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
    a8c42d11b0526 ALSA: ctxfi: Fix potential OOB access in audio mixer handling
    cbe409f68380a iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
    c2d6e00829cbf iio: chemical: scd4x: fix reported channel endianness
    9795fe80976f8 iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
    8271e1860c7cd iio: adc: ad9467: fix ad9434 vref mask
    9e77ef924fe31 iio: accel: iis328dq: fix gain values
    c0ebc3d8ad6b5 of: platform: Use default match table for /firmware
    f4c270975fe1d of: fix reference count leak in of_alias_scan()
    2757f7748ce2d leds: led-class: Only Add LED to leds_list when it is fully ready
    93dfcc59b2bf3 x86: make page fault handling disable interrupts properly
    03710cebfc0bc net/sched: act_ife: avoid possible NULL deref
    d9d5f222558b4 vsock/virtio: cap TX credit to local buffer size
    17c9b158bc4d7 vsock/test: fix seqpacket message bounds test
    02f9af192b98d vsock/virtio: fix potential underflow in virtio_transport_get_credit()
    c70e99dd37163 net: openvswitch: fix data race in ovs_vport_get_upcall_stats
    77c6aa2c388e9 octeontx2-af: Fix error handling
    4ad32b1e0ca42 net: dsa: fix off-by-one in maximum bridge ID determination
    0efee0b992f28 bonding: provide a net pointer to __skb_flow_dissect()
    a142ae1c56131 selftests: net: amt: wait longer for connection before sending packets
    e206fb415db36 be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
    baafbbc23d421 drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
    2c1fc0547a870 drm/amd/pm: Don't clear SI SMC table when setting power limit
    c378cdae46369 usbnet: limit max_mtu based on device's hard_mtu
    fad8f4ff7928f ipv6: annotate data-race in ndisc_router_discovery()
    fc8ba17fd3337 mISDN: annotate data-race around dev->work
    bfb030a377e05 net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
    3a1601756a905 net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
    42e16254f1d3e be2net: fix data race in be_get_new_eqd
    a111d1fb91ae3 net: hns3: fix data race in hns3_fetch_stats
    f1f9cfd2f46a7 netdevsim: fix a race issue related to the operation on bpf_bound_progs list
    7f523dd499b72 ALSA: usb: Increase volume range that triggers a warning
    408bfa8d70f79 scsi: qla2xxx: Sanitize payload size to prevent member overflow
    9fdc6f28d5e81 scsi: core: Wake up the error handler when final completions race against each other
    0df7ecb393db7 riscv: clocksource: Fix stimecmp update hazard on RV32
    1b47e6d3bc026 kconfig: fix static linking of nconf
    24f31be6ad705 regmap: Fix race condition in hwspinlock irqsave routine
    417cdfd9b9f98 spi: spi-sprd-adi: Fix double free in probe error path
    1a27bd3c6949f spi: sprd-adi: switch to use spi_alloc_host()
    74634f4a64897 spi: sprd: adi: Use devm_register_restart_handler()
    aa79a5a959c7c interconnect: debugfs: initialize src_node and dst_node to empty strings
    ce8d8a3368128 iio: adc: ad7280a: handle spi_setup() errors in probe()
    7673167fac932 iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
    85eb83694a91c io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
    eb5ff1025c921 platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
    29917c80aa96a platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
    6484f43740cc9 comedi: Fix getting range information for subdevices 16 to 255
    bf843b0624d89 x86/kfence: avoid writing L1TF-vulnerable PTEs
    8adc31a561a55 arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
    929229fdd116a arm64: dts: rockchip: remove dangerous max-link-speed from helios64
    f86264ec0e2b1 scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
    156284ab2f641 scsi: storvsc: Process unsupported MODE_SENSE_10
    21937a189daa8 Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
    dcecb4269dd4b Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
    93cbf6d80da2a Revert "nfc/nci: Add the inconsistency check between the input data length and count"
    9367b4709b528 w1: fix redundant counter decrement in w1_attach_slave_device()
    6a5820ecfa5a7 w1: therm: Fix off-by-one buffer overflow in alarms_store
    aaff8f3a35c9d comedi: dmm32at: serialize use of paged registers
    dce0865a5828a serial: 8250_pci: Fix broken RS485 for F81504/508/512
    b0a9609283a5c crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
    93b8635974fb0 net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
    0686bedfed341 net/sched: Enforce that teql can only be used as root qdisc
    fcf8cd4654790 octeontx2: cn10k: fix RX flowid TCAM mask handling
    04ba6de6eff61 ipvlan: Make the addrs_lock be per port
    68e92085427c8 l2tp: avoid one data-race in l2tp_tunnel_del_work()
    0bb986d83922c veth: fix data race in veth_get_ethtool_stats
    1cc98b8887cab fou: Don't allow 0 for FOU_ATTR_IPPROTO.
    4170ec351e456 tools: ynl: Specify --no-line-number in ynl-regen.sh.
    f87b9b7a618c8 gue: Fix skb memleak with inner IP protocol 0.
    8a8a5a43fef4e amd-xgbe: avoid misleading per-packet error log
    e7e81abbcc562 sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
    ce4352057fc5a can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
    4b37dc63957cb selftests: net: fib-onlink-tests: Convert to use namespaces by default
    8ba4cf99c61cd selftests/net: convert fib-onlink-tests.sh to run it in unique namespace
    80c881e53a4fa bonding: limit BOND_MODE_8023AD to Ethernet devices
    b66dfde203fb4 net: usb: dm9601: remove broken SR9700 support
    b36bbac746ee6 igc: fix race condition in TX timestamp read for register 0
    9a151fd0bd7d9 ice: Avoid detrimental cleanup for bond during interface stop
    a6a0dd00178ea ice: initialize ring_stats->syncp
    e635e5b7eac83 ata: libata: Print features also for ATAPI devices
    02fc7c01a35d3 ata: libata: Call ata_dev_config_lpm() for ATAPI devices
    1c6714932c3df ata: libata-core: Introduce ata_dev_config_lpm()
    557b62028c077 ata: libata: Add cpr_log to ata_dev_print_features() early return
    e2d46e0b76cab pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
    f0070413c6580 dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
    230c9ed464eda dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
    564752b42d137 dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
    64a0b97df8366 dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
    658e1879ebe68 dt-bindings: power: rpmpd: Update part number to X1E80100
    ce649f43c4936 dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains
    25ebc01125e60 dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215
    f33305f0925be dt-bindings: power: qcom,rpmpd: Add SM7150
    ce5ee09c0aeea btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
    774089dc718f5 Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
    fe11f976dd0ad hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
    11536f3371f4a arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
    8d9f22c570ba3 testptp: Add option to open PHC in readonly mode
    4f3c8c7f4e1bd selftest/ptp: update ptp selftest to exercise the gettimex options
    59ac47a0275fc ptp: add testptp mask test
    4fbfc6bca4e37 ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
    ba3a97c832725 posix-clock: Store file pointer in struct posix_clock_context
    ea2d9bfd422e9 Fix memory leak in posix_clock_open()
    221e4d1e29bb4 posix-clock: introduce posix_clock_context concept
    2c590e4b3d4cc io_uring: move local task_work in exit cancel loop
    99da896614d17 btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
    696ebf74738b9 dmaengine: ti: k3-udma: fix device leak on udma lookup
    6fdf168f57e33 dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
    8df7c3e6d1e5e dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
    4e45ae701b816 dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
    6bf4ef078fd11 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
    9fba97baa520c dmaengine: lpc18xx-dmamux: fix device leak on route allocation
    c81ea0222eaaa dmaengine: idxd: fix device leaks on compat bind and unbind
    db7c79c1bbfb1 dmaengine: dw: dmamux: fix OF node leak on route allocation failure
    c80ca7bdff158 dmaengine: bcm-sba-raid: fix device leak on probe
    987c71671367f dmaengine: at_hdmac: fix device leak on of_dma_xlate()
    2838cb6133ac2 dmaengine: apple-admac: Add "apple,t8103-admac" compatible
    1f70af89b0893 drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
    bc0b17bdba383 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
    cb4c9fc5e79a7 drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
    3dc1a40180264 drm/amdkfd: fix a memory leak in device_queue_manager_init()
    a4218ac0bb8e7 drm/amd: Clean up kfd node on surprise disconnect
    d9a82256a4c7e drm/amd/display: Bump the HDMI clock to 340MHz
    1d8f4d24fc1b3 LoongArch: Fix PMU counter allocation for mixed-type event groups
    43964644348f6 mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
    6ef36b329bbe2 mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
    b73f2834e1bc6 x86/resctrl: Fix memory bandwidth counter width for Hygon
    a78dca14fb2b0 x86/resctrl: Add missing resctrl initialization for Hygon
    71c5bc6720b60 tcpm: allow looking for role_sw device in the main node
    bfefcc78a8ec5 EDAC/i3200: Fix a resource leak in i3200_probe1()
    dc2365df328a9 EDAC/x38: Fix a resource leak in x38_probe1()
    ac92563601513 hrtimer: Fix softirq base check in update_needs_ipi()
    0b06cde92f2f9 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
    ed61badfc2bc8 nvme-pci: disable secondary temp for Wodposit WPBSNM8
    3f6a36c9dc73d USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
    f890044ad2959 USB: serial: option: add Telit LE910 MBIM composition
    384084a094c74 USB: OHCI/UHCI: Add soft dependencies on ehci_platform
    93f21786487cd usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
    928e7d022d167 usb: dwc3: Check for USB4 IP_NAME
    ee82bc9f1df97 phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
    9e0d336e71c47 phy: rockchip: inno-usb2: fix disconnection in gadget mode
    16a6a73087fb4 phy: freescale: imx8m-pcie: assert phy reset during power on
    942381794fc31 phy: rockchip: inno-usb2: fix communication disruption in gadget mode
    9716e427489f6 x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
    809a437e27a3b net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
    58d236065ba65 can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
    f905bcfa971ed can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
    1a3286edf4d48 null_blk: fix kmemleak by releasing references to fault configfs items
    2de6d3348937f ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
    8fab42516eb3c scsi: core: Fix error handler encryption support
    60e450eec5d63 drm/amd/display: Check dce_hwseq before dereferencing it
    d64557b61c1dd HID: usbhid: paper over wrong bNumDescriptor field
    d66d8ad31057d i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
    88a9483f093bb dmaengine: omap-dma: fix dma_pool resource leak in error paths
    2a7ddafac3820 phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
    76b870fdaad82 phy: stm32-usphyc: Fix off by one in probe()
    beba460a29915 phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
    8151ecaaf08e3 phy: drop probe registration printks
    7070ed66aba3b phy: phy-snps-eusb2: refactor constructs names
    0b347b180ad5e phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
    0fd2001907fea dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
    59cb421b0902f dmaengine: tegra-adma: Fix use-after-free
    df8a131a41ff6 dmaengine: xilinx: xdma: Fix regmap max_register
    7602a67114cd5 mm, kfence: describe @slab parameter in __kfence_obj_info()
    f332d75388ea5 textsearch: describe @list member in ts_ops search
    805f1c634817a ASoC: tlv320adcx140: fix word length
    659939d08e5f7 ASoC: tlv320adcx140: fix null pointer
    0a234660dc70c net/sched: sch_qfq: do not free existing class in qfq_change_class()
    a3f895d4494a8 selftests: drv-net: fix RPS mask handling for high CPU numbers
    9356b69d03d0f ipv6: Fix use-after-free in inet6_addr_del().
    82c9039c8ebb7 net: hv_netvsc: reject RSS hash key programming without RX indirection table
    58208907c4044 btrfs: fix memory leaks in create_space_info() error paths
    0bd151ce4200c btrfs: introduce btrfs_space_info sub-group
    42c8d48bf3abe btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
    34d5cd41418af btrfs: factor out init_space_info() from create_space_info()
    1fe74715ccb4e btrfs: store fs_info in space_info
    6126877f90fe7 net/mlx5e: Restore destroying state bit after profile cleanup
    147b9a2fc7a35 vsock/test: add a final full barrier after run all tests
    06fe0801396a3 ipv4: ip_gre: make ipgre_header() robust
    15f6faf36e162 macvlan: fix possible UAF in macvlan_forward_source()
    0ba0a79500fcf net: update netdev_lock_{type,name}
    2f03dafea0a80 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
    98151bb13af1e net: bridge: annotate data-races around fdb->{updated,used}
    9f1ac4c98add7 net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry
    f2dc6ab3a14c2 btrfs: send: check for inline extents in range_is_hole_in_parent()
    fdecd3b6aac10 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
    50f80e82e7966 nvmet-tcp: remove boilerplate code
    611e839d2d552 can: etas_es58x: allow partial RX URB allocation to succeed
    869862056e100 pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
    55787a73fbb61 xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
    6eb597cb4e37f ASoC: codecs: wsa884x: fix codec initialisation
    ca72af7608d68 Revert "gfs2: Fix use of bio_chain"
    30f9b41b03903 efi/cper: Fix cper_bits_to_str buffer handling and return value
    73069e1134029 firmware: imx: scu-irq: Set mu_resource_id before get handle
    cbb31f77b879f Linux 6.6.121
    0b1ac9743f3d9 riscv: Replace function-like macro by static inline function
    d03ee41854866 gpio: pca953x: fix wrong error probe return value
    5192f17d1127a bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
    83eef6f904a84 scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    06f90c7dce191 ASoC: fsl_sai: Add missing registers to cache default
    2c4404d6e4edb ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
    be3923930a71b ALSA: usb-audio: Update for native DSD support quirks
    78d87b72cebe2 can: j1939: make j1939_session_activate() fail if device is no longer registered
    f73d92997388b drm/amd/display: Fix DP no audio issue
    53de1e6cde8f9 netfilter: nf_tables: avoid chain re-validation if possible
    c04b3a832c062 powercap: fix sscanf() error return value handling
    e07dea55aa134 powercap: fix race condition in register_control_type()
    98676ee71fd4e bpf: Fix reference count leak in bpf_prog_test_run_xdp()
    7c81ad5e580bd bpf, test_run: Subtract size of xdp_frame from allowed metadata size
    d08b4193cd55a bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
    875d7cb4fe156 bpf: Make variables in bpf_prog_test_run_xdp less confusing
    a60c827903b45 bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
    77c956152a3a7 riscv: uprobes: Add missing fence.i after building the XOL buffer
    5c7c4131beade x86/microcode/AMD: Select which microcode patch to load
    90c4cb136e398 NFSD: Remove NFSERR_EAGAIN
    249d45ca97381 nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
    93a2e7eaf876d NFS: trace: show TIMEDOUT instead of 0x6e
    21f8bc5179bed ALSA: ac97: fix a double free in snd_ac97_controller_register()
    3b7c1a3805a51 ALSA: ac97bus: Use guard() for mutex locks
    a19df91b5b93b LoongArch: Add more instruction opcodes and emit_* helpers
    029935507d0af arp: do not assume dev_hard_header() does not change skb->head
    0d254b0a15f29 net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    93f18eaa19037 net: usb: pegasus: fix memory leak in update_eth_regs_async()
    11bf9134613f6 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
    9be826178831c HID: quirks: work around VID/PID conflict for appledisplay
    88bea149db205 net: fix memory leak in skb_segment_list for GRO packets
    970a1ac90325f bnxt_en: Fix potential data corruption with HW GRO/LRO
    dc6f73f73ce88 net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
    81e7205b82a7f net/mlx5e: Don't print error message due to invalid module
    0ab968d9c56bd netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    582a5e922a965 net: sock: fix hardened usercopy panic in sock_recv_errqueue
    874794fb4f3db inet: ping: Fix icmp out counting
    2985712dc76df net: mscc: ocelot: Fix crash when adding interface under a lag
    4c8facf028ec7 bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    94e070cd50790 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
    3cd717359e56f netfilter: nf_conncount: update last_gc only when GC has been performed
    c6cfd76700551 netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    76f4218bdadde gpio: pca953x: handle short interrupt pulses on PCAL devices
    4d7652d1a3525 gpio: pca953x: Add support for level-triggered interrupts
    26f64b3ee5172 gpio: pca953x: Utilise temporary variable for struct device
    2a968d1fd7bd6 gpio: pca953x: Utilise dev_err_probe() where it makes sense
    62ecdf65b8ab0 netfilter: nft_synproxy: avoid possible data-race on update operation
    51ea246778e57 arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
    b6600d9d893f6 ARM: dts: imx6q-ba16: fix RTC interrupt level
    837fe3df68601 arm64: dts: add off-on-delay-us for usdhc2 regulator
    c6f7b3cf44856 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
    cf73e6020b3d7 scsi: ufs: core: Fix EH failure after W-LUN resume error
    ac01c92333497 scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    afd993bababfe smb/client: fix NT_STATUS_NO_DATA_DETECTED value
    bbbc1a48f121a smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
    ca9b4aaa7e63b smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
    f18975f2cd41c NFS: Fix up the automount fs_context to use the correct cred
    f719a300eaa05 NFSv4: ensure the open stateid seqid doesn't go backwards
    af4fc583fd900 dm-snapshot: fix 'scheduling while atomic' on real-time kernels
    fc220dae3cf89 alpha: don't reference obsolete termio struct for TC* constants
    be3bc3d84a2a5 ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    78faf283336dc csky: fix csky_cmpxchg_fixup not working
    13159c7125636 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
    381261f24f4e4 NFSD: NFSv4 file creation neglects setting ACL
    4c06b7cb87e5b nfsd: set security label during create operations
    d761a185f8950 nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
    ab2b5755269cf nfsd: convert to new timestamp accessors
    1310640f9ae92 net: Add locking to protect skb->dev access in ip_output
    9c2f8a9b68024 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
    4ebc711b738d1 libceph: make calc_target() set t->paused, not just clear it
    90a60fe61908a libceph: reset sparse-read state in osd_fault()
    e097cd858196b libceph: return the handler error from mon_handle_auth_done()
    8081faaf089db libceph: make free_choose_arg_map() resilient to partial allocation
    d3613770e2677 libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    ef208ea331ef6 libceph: prevent potential out-of-bounds reads in handle_auth_done()
    d21ec867d84c9 wifi: avoid kernel-infoleak from struct iw_point
    16e107d586208 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    7291ef23491f9 gpio: rockchip: mark the GPIO controller as sleeping
    e23882b11f8d3 drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
    526bd4bfa1206 drm/pl111: Fix error handling in pl111_amba_probe
    1c5a3175aecf8 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
    8a1b8778b7868 counter: 104-quad-8: Fix incorrect return value in IRQ handler
    84875a1d92243 lib/crypto: aes: Fix missing MMU protection for AES S-box
    e1e8d4973c1a7 mei: me: add nova lake point S DID
    a63998cd6687c btrfs: always detect conflicting inodes when logging inode refs
    28b2a80560969 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
    8f5211fc891d0 atm: Fix dma_free_coherent() size
    06600719d0f7a nfsd: provide locking for v4_end_grace
    e15e59b5aa624 NFSD: Fix permission check for read access to executable-only files

(From OE-Core rev: 3a8ee137c9147e6bf717fb903ea4c27b9d58fa34)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
1997141268 linux-yocto/6.6: update to v6.6.120
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c596736dadab Linux 6.6.120
    0eb7d3da258b ext4: fix error message when rejecting the default hash
    52c4538a92da ext4: filesystems without casefold feature cannot be mounted with siphash
    bb4511b55fd3 Revert "iommu/amd: Skip enabling command/event buffers for kdump"
    0e8ac70521e6 firmware: arm_scmi: Fix unused notifier-block in unregister
    21e82354cdd7 tty: fix tty_port_tty_*hangup() kernel-doc
    25466e5b4bb1 blk-mq: setup queue ->tag_set before initializing hctx
    d292db57e915 pwm: stm32: Always program polarity
    b92ec4a84872 net: stmmac: make sure that ptp_rate is not 0 before configuring EST
    f6dcbd2bbea5 virtio_console: fix order of fields cols and rows
    8d8a670c1c28 mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result()
    8bf34bd12231 mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs()
    c45dcf86c75e mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration()
    d41809aa8e24 mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions()
    e471ed55f3d6 mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out()
    8b6d3b7c12bd mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
    520e8b12f0a4 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
    945e0575dcfc mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
    3fc04a106f87 mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
    7110f671d86a mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
    8feb7885b769 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
    c6e1f6e91e9c mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
    5988035dd57a mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter()
    1c5a0de26879 mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
    c62c5296fdb8 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
    32ca3557d968 RDMA/rxe: Remove the direct link to net_device
    f3652768a89c net: Allow to use SMP threads for backlog NAPI.
    03765d5c1808 net: Remove conditional threaded-NAPI wakeup based on task state.
    51445190c10a sched/fair: Proportional newidle balance
    5b7949a95c39 sched/fair: Small cleanup to update_newidle_cost()
    38d080768c85 sched/fair: Small cleanup to sched_balance_newidle()
    17d3103325e8 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
    339bcd3d051c mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
    b75608e7547d mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
    65a02ffb5223 KVM: SVM: Fix redundant updates of LBR MSR intercepts
    35c53e4eae0f KVM: nSVM: Fix and simplify LBR virtualization handling with nested
    e6ff197547a9 KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
    991d961055d0 KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
    2c1ea6214827 media: mediatek: vcodec: Use spinlock for context list protection lock
    cc12debd518b media: amphion: Remove vpu_vb_is_codecconfig
    e42ccf472feb media: amphion: Make some vpu_v4l2 functions static
    93f537ffaece media: amphion: Add a frame flush mode for decoder
    37304368a2a9 KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
    2f3139eaae99 powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
    47dee8b41fd7 mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
    3339e058b80d mm/balloon_compaction: we cannot have isolated pages in the balloon list
    98a5af4a8eae media: verisilicon: Fix CPU stalls on G2 bus error
    5acc3c7d3c4c media: verisilicon: g2: Use common helpers to compute chroma and mv offsets
    381a387ececd media: verisilicon: Store chroma and motion vectors offset
    f7b8851c541e f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
    be4c3a3c6c23 f2fs: use global inline_xattr_slab instead of per-sb slab cache
    34c817843cb3 f2fs: fix to propagate error from f2fs_enable_checkpoint()
    bcd0086ee5a2 f2fs: fix to avoid updating compression context during writeback
    b54cdce20f86 f2fs: drop inode from the donation list when the last file is closed
    1a00afcdaefc f2fs: keep POSIX_FADV_NOREUSE ranges
    64ed96a21f0f f2fs: remove unused GC_FAILURE_PIN
    ec3656a8cb42 genirq/irq_sim: Initialize work context pointers properly
    72295ae05d13 mm: fix arithmetic for max_prop_frac when setting max_ratio
    bcf2450f46cd mm: fix arithmetic for bdi min_ratio
    4584486cfcca net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
    4914c0a16654 page_pool: Fix use-after-free in page_pool_recycle_in_ring
    b86dc510308d xfrm: state: fix out-of-bounds read during lookup
    3c591353956f ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
    36acfec981d8 ext4: introduce ITAIL helper
    48098bb42a9f powerpc/64s/radix/kfence: map __kfence_pool at page granularity
    668350eba983 LoongArch: Refactor register restoration in ftrace_common_return
    6940c1d0c84a drm/amd/display: Fix null pointer deref in dcn20_resource.c
    d767ce15045d net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
    dbf427663ce2 usb: xhci: Apply the link chain quirk on NEC isoc endpoints
    bbda96e97a00 usb: xhci: move link chain bit quirk checks into one helper function.
    bf4127db6cb7 xhci: dbgtty: fix device unregister: fixup
    dff9dd015331 tty: introduce and use tty_port_tty_vhangup() helper
    21e52dc77629 drm/tilcdc: Fix removal actions in case of failed probe
    5bc791132f62 drm/tilcdc: request and mapp iomem with devres
    205aa0c83cd4 drm/mediatek: Fix probe resource leaks
    fef6d1474ab3 drm/mediatek: Fix probe memory leak
    11dba925f5fe drm/amdgpu: Forward VMID reservation errors
    5c7c7135468f mptcp: ensure context reset on disconnect()
    a902343f1331 net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
    b2e7973d83a8 pmdomain: imx: Fix reference count leak in imx_gpc_probe()
    4544cfa16834 pmdomain: Use device_get_match_data()
    d7ba1b448f2a mm: consider non-anon swap cache folios in folio_expected_ref_count()
    7e0fcf9d71c2 mm: simplify folio_expected_ref_count()
    6e5bff40bb38 wifi: mac80211: Discard Beacon frames to non-broadcast address
    46b9fd1433d2 lockd: fix vfs_test_lock() calls
    c9bf31522828 mptcp: fallback earlier on simult connection
    38a053796019 PCI: brcmstb: Fix disabling L0s capability
    cf74785c00b8 fuse: fix readahead reclaim deadlock
    7ba826aae1d4 svcrdma: bound check rq_pages index in inline path
    8ca34c5cedec ARM: dts: microchip: sama7g5: fix uart fifo size to 32
    2ce95f8656b6 gpiolib: acpi: Add quirk for Dell Precision 7780
    2e14206551bc NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
    8bd6dff8b801 f2fs: fix to avoid potential deadlock
    c375c4b3997e f2fs: use f2fs_err_ratelimited() to avoid redundant logs
    5ceea587c4e2 mptcp: pm: ignore unknown endpoint flags
    d1d03d9184a6 scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
    b0d2a7ccd17c usb: ohci-nxp: fix device leak on probe failure
    2a16f46eef6d usb: ohci-nxp: Use helper function devm_clk_get_enabled()
    c08838ce6b50 mm/ksm: fix exec/fork inheritance support for prctl
    93e4a783d34c wifi: mt76: Fix DTS power-limits on little endian systems
    bb2805532f76 btrfs: don't rewrite ret from inode_permission
    0baa9f64bf79 gfs2: fix freeze error handling
    35521feb614d jbd2: fix the inconsistency between checksum and data in memory for journal sb
    902ca2356f1e ext4: fix string copying in parse_apply_sb_mount_options()
    7a35a505d76a ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
    931c86fc7989 ALSA: wavefront: Clear substream pointers on close
    4425583a691a ALSA: wavefront: Use guard() for spin locks
    02b63f3bc292 ALSA: wavefront: Fix integer overflow in sample size validation
    596b04a1638e ALSA: wavefront: Use standard print API
    eee39f83246a mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
    d88481653d74 tpm: Cap the number of PCR banks
    dbd0829d2458 blk-mq: add helper for checking if one CPU is mapped to specified hctx
    9202337a2d90 usb: gadget: lpc32xx_udc: fix clock imbalance in error path
    23525fc0ea62 drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
    0336188cc85d drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
    678d1c86566d drm/msm/dpu: Add missing NULL pointer check for pingpong interface
    56f07bc0a0ff drm/mgag200: Fix big-endian support
    3d004f7341d4 drm/ttm: Avoid NULL pointer deref for evicted BOs
    3144af03d517 drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
    ed51ddd5d449 drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
    f6916363112c drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
    e05d53454b55 drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
    9a8837f9a3e3 net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open()
    6b93c8ab6f6c net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
    907e8a8f506d net: usb: sr9700: fix incorrect command used to write single register
    cff353b7d1c7 nfsd: Drop the client reference in client_states_open()
    fd43edf357a3 LoongArch: BPF: Sign extend kfunc call arguments
    446c851e338b LoongArch: BPF: Zero-extend bpf_tail_call() index
    ad6ea65f154b fjes: Add missing iounmap in fjes_hw_init()
    2c4c0c09f964 e1000: fix OOB in e1000_tbi_should_accept()
    c0acdee51323 RDMA/cm: Fix leaking the multicast GID table reference
    9d85524789c2 RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
    a94bd2d93f7e samples/ftrace: Adjust LoongArch register restore order in direct calls
    b8f12a3ecf03 tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
    45b44c3a5e62 x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
    3e3c0dc025f0 idr: fix idr_alloc() returning an ID out of range
    c9acbaec693b kasan: refactor pcpu kasan vmalloc unpoison
    e53bfe453059 compiler_types.h: add "auto" as a macro for "__auto_type"
    b9b5f45cc1b7 LoongArch: Use unsigned long for _end and _text
    f0b9e0bdc8bc LoongArch: Use __pmd()/__pte() for swap entry conversions
    582c1dcc5bb5 LoongArch: Fix build errors for CONFIG_RANDSTRUCT
    155d6a8f5d5f LoongArch: Correct the calculation logic of thread_count
    4632c8b0966d LoongArch: Add new PCI ID for pci_fixup_vgadev()
    80617b75fd70 media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
    53e256b5c360 media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
    a8e6cf7fa2be media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
    4b139f88c2ab media: amphion: Cancel message work before releasing the VPU core
    52604951b90c media: vpif_display: fix section mismatch
    08c6c6f2a570 media: vpif_capture: fix section mismatch
    1ad7c8174109 media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
    99293be855c3 media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
    b93abb4385b8 media: TDA1997x: Remove redundant cancel_delayed_work in probe
    1b5602078557 media: samsung: exynos4-is: fix potential ABBA deadlock on init
    4d8da22db935 media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
    3a294b90cd1a media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
    4972ad7eec91 media: cec: Fix debugfs leak on bus_register() failure
    6b5dd195993b fbdev: tcx.c fix mem_map to correct smem_start offset
    cce58e4cc535 fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
    243b674b2b52 fbdev: gbefb: fix to use physical address instead of dma address
    2b0b703a3483 dm-bufio: align write boundary on physical block size
    34f6abd6e4c4 dm-ebs: Mark full buffer dirty even on partial write
    4654800c51be firmware: stratix10-svc: Add mutex in stratix10 memory management
    a73881ae085d media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
    318d470f64ba powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
    40feb7bcde49 parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
    d3842cbf13b7 parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
    13cf5cd4d535 media: rc: st_rc: Fix reset control resource leak
    52bae1ff6805 mfd: max77620: Fix potential IRQ chip conflict when probing two devices
    1b630d8f2c27 mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
    fbf57f5e453d clk: samsung: exynos-clkout: Assign .num before accessing .hws
    ae80fb3d4e8c leds: leds-lp50xx: Enable chip before any communication
    cc468490d143 leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
    a406e6c74bd9 leds: leds-lp50xx: Allow LED 0 to be added to module bank
    b13a3dbfa196 powerpc/64s/slb: Fix SLB multihit issue during SLB preload
    db9c8e8d3cd6 powerpc, mm: Fix mprotect on book3s 32-bit
    14b08c85cb88 arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator
    a1d55aa866db PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
    9024cb893f17 HID: logitech-dj: Remove duplicate error logging
    240cd7f2812c iommu: disable SVA when CONFIG_X86 is set
    3627e0e773f1 iommu/tegra: fix device leak on probe_device()
    0314de9c844d iommu/sun50i: fix device leak on of_xlate()
    7b1df346f6c5 iommu/qcom: fix device leak on of_xlate()
    21a0e8bdee72 iommu/omap: fix device leaks on probe_device()
    173ff5fc9a15 iommu/mediatek: fix device leak on of_xlate()
    83f3010de73c iommu/mediatek-v1: fix device leaks on probe()
    e7bcedf59b28 iommu/mediatek-v1: fix device leak on probe_device()
    83a8e18f30a6 iommu/ipmmu-vmsa: fix device leak on of_xlate()
    e83739232b9f iommu/exynos: fix device leak on of_xlate()
    aa749c2daf02 iommu/apple-dart: fix device leak on of_xlate()
    b3e9fa847b2d iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
    17ec295d3981 ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
    c4a8098b2985 ASoC: qcom: q6adm: the the copp device only during last instance
    54b1b731d235 ASoC: qcom: q6asm-dai: perform correct state check before closing
    ed120b75aef2 ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr
    4054a3597d04 ASoC: stm32: sai: fix OF node leak on probe
    8a6826a43d8d ASoC: stm32: sai: fix clk prepare imbalance on probe failure
    637d027bb75c ASoC: stm32: sai: fix device leak on probe
    49c2ef075dbe ntfs: Do not overwrite uptodate pages
    6c32d5bb9f8f selftests/ftrace: traceonoff_triggers: strip off names
    21077a775094 blk-mq: skip CPU offline notify on unmapped hctx
    0fbd2d4a1e2c blk-mq: don't schedule block kworker on isolated CPUs
    1d0026c1e4bc RDMA/bnxt_re: fix dma_free_coherent() pointer
    0ca967c599fd RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
    5012b4c81223 ksmbd: Fix memory leak in get_file_all_info()
    77645e82b739 RDMA/bnxt_re: Fix to use correct page size for PDE table
    639e07bbfa17 RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
    689eb90b703b RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
    78d9259378aa RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
    c67499757bcf RDMA/efa: Remove possible negative shift
    fc23d05f0b3f RDMA/irdma: avoid invalid read in irdma_net_event
    9f6185a32496 net: rose: fix invalid array index in rose_kill_by_device()
    5979338c8301 ipv4: Fix reference count leak when using error routes with nexthop objects
    c53aa6a5086f ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
    4d0ceb7677e1 net: stmmac: fix the crash issue for zero copy XDP_TX action
    b23a2e155894 octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
    cf7ae870560b platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
    25be7178446c net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
    38722e69ee64 net: usb: asix: validate PHY address before use
    0e85ce7a3755 net: dsa: b53: skip multicast entries for fdb_dump()
    328dc0b12fb8 firewire: nosy: Fix dma_free_coherent() size
    535ce34a5bdb genalloc.h: fix htmldocs warning
    ef277ae121b3 smc91x: fix broken irq-context in PREEMPT_RT
    2ac08f3dcd0c selftests: net: fix "buffer overflow detected" for tap.c
    4bd4ea3eb326 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
    e5ee9d93229b amd-xgbe: reset retries and mode on RX adapt failures
    6bfb62b6010a team: fix check for port enabled in team_queue_override_port_prio_changed()
    859bf9688bfb platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
    ec24f3b4a831 platform/x86: msi-laptop: add missing sysfs_remove_group()
    1717357007db ip6_gre: make ip6gre_header() robust
    0fc642f011cb net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
    248dadfee95a net: mdio: aspeed: add dummy read to avoid read-after-write issue
    c0ecb3e4451f Bluetooth: btusb: revert use of devm_kzalloc in btusb
    0279978adec6 crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
    18de0e41d69d iavf: fix off-by-one issues in iavf_config_rss_reg()
    f38cca04a23f i40e: fix scheduling in set_rx_mode
    e27036473d39 wifi: mac80211: do not use old MBSSID elements
    8e628bebb109 wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
    34e9dd0a1281 wifi: rtw88: limit indirect IO under powered off for RTL8822CS
    5c04217d06a1 iommu/mediatek: fix use-after-free on probe deferral
    e19578444587 ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
    84716eb9dc31 hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
    f94800fbc26c hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
    3769c56a1f0d hwmon: (max16065) Use local variable to avoid TOCTOU
    237a3095bcd6 i2c: amd-mp2: fix reference leak in MP2 PCI device
    ad296c4e19c7 platform/x86: intel: chtwc_int33fe: don't dereference swnode args
    c6210714347f rpmsg: glink: fix rpmsg device leak
    3ccb504e8045 soc: amlogic: canvas: fix device leak on lookup
    c8ddc5f321d1 soc: qcom: ocmem: fix device leak on lookup
    98bf1dece54c tracing: Fix fixed array of synthetic event
    b3b689729cbc amba: tegra-ahb: Fix device leak on SMMU enable
    206c012bcbd1 crypto: caam - Add check for kcalloc() in test_len()
    84238876e3b3 crypto: af_alg - zero initialize memory allocated via sock_kmalloc
    d3c094e07853 selftests: openvswitch: Fix escape chars in regexp.
    4cd6081860a5 drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
    0126560370ed io_uring/poll: correctly handle io_poll_add() return value on update
    ec5aadc4fa49 gpio: regmap: Fix memleak in error path in gpio_regmap_register()
    8c4e5a643de3 s390/ipl: Clear SBP flag when bootprog is set
    7359e1d39c78 btrfs: don't log conflicting inode if it's a dir moved in the current transaction
    d790ef0c4819 powerpc/kexec: Enable SMT before waking offline CPUs
    7452d53f2933 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
    21a64218450e svcrdma: return 0 on success from svc_rdma_copy_inline_range
    354834eb7867 nfsd: Mark variable __maybe_unused to avoid W=1 build break
    cd8cf2be3717 net/handshake: restore destructor on submit failure
    e0643d46759d fsnotify: do not generate ACCESS/MODIFY events on child for special files
    19d4c57ae91b r8169: fix RTL8117 Wake-on-Lan in DASH mode
    a143c3677662 PM: runtime: Do not clear needs_force_resume with enabled runtime PM
    65b1971147ec tracing: Do not register unsupported perf events
    079f1c3f5619 xfs: fix a memory leak in xfs_buf_item_init()
    97bf1f137364 KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
    d6d257ce44af KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
    d44197b5281d KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
    2d1d833b4025 KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
    99c709294ac8 KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
    aab88dcc4fb4 KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
    7b54ccef865e KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
    73f77550086f KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
    8ff24d46a4b2 KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
    e927ab132b87 libceph: make decode_pool() more resilient against corrupted osdmaps
    e09fd2eb6d4c parisc: Do not reprogram affinitiy on ASP chip
    062774439d44 scs: fix a wrong parameter in __scs_magic
    393b8f9bedc7 platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
    e30a69bf891e KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI)
    96f1b074c98c ocfs2: fix kernel BUG in ocfs2_find_victim_chain
    fb9bd6d8d314 media: vidtv: initialize local pointers upon transfer of memory ownership
    1e90812c0220 tools/testing/nvdimm: Use per-DIMM device handle
    a4c67d96f92e f2fs: fix return value of f2fs_recover_fsync_data()
    4ce9eecb7466 f2fs: fix age extent cache insertion skip on counter overflow
    3d65e27e57aa f2fs: invalidate dentry cache on failed whiteout creation
    efe3371001f5 f2fs: fix to avoid updating zero-sized extent in extent cache
    c3031cf2b61f f2fs: ensure node page reads complete before f2fs_put_super() finishes
    0260ad551b08 scsi: target: Reset t_task_cdb pointer in error case
    71074ea29886 NFSD: use correct reservation type in nfsd4_scsi_fence_client
    e354793a7ab9 scsi: aic94xx: fix use-after-free in device removal path
    e9e601b7df58 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
    6741f90220dc cpufreq: nforce2: fix reference count leak in nforce2
    dffe25224f51 cpuidle: governors: teo: Drop misguided target residency check
    ed023a179150 intel_th: Fix error handling in intel_th_output_open
    d285517429a7 char: applicom: fix NULL pointer dereference in ac_ioctl
    96e001d20405 usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
    679e15fb53f9 usb: dwc3: keep susphy enabled during exit to avoid controller faults
    fa8747590b0e usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
    75c5d9bce072 usb: phy: isp1301: fix non-OF device reference imbalance
    319f7a85b3c4 usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
    848132371006 USB: lpc32xx_udc: Fix error handling in probe
    4824123c9f87 phy: broadcom: bcm63xx-usbh: fix section mismatches
    f4cacf8827ba media: pvrusb2: Fix incorrect variable used in trace message
    4a54d8fcb093 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
    22847606976c usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
    252892d5a6a2 mptcp: avoid deadlock on fallback while reinjecting
    17b470ee53dd mptcp: schedule rtx timer only after pushing data
    fa4a445f832b media: v4l2-mem2mem: Fix outdated documentation
    94a16a3a1001 jbd2: use a weaker annotation in journal handling
    815327958ec4 jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
    79a0e4d3fbef ext4: align max orphan file size with e2fsprogs limit
    dc06c9dc5e1d ext4: fix incorrect group number assertion in mb_check_buddy
    36bf0f765333 ext4: clear i_state_flags when alloc inode
    b5d942922182 ext4: xattr: fix null pointer deref in ext4_raw_inode()
    2c0acd1a1e94 ktest.pl: Fix uninitialized var in config-bisect.pl
    5fd1a6c631b2 fs/ntfs3: fix mount failure for sparse runs in run_unpack()
    7ad2c3ae0795 kallsyms: Fix wrong "big" kernel symbol type read from procfs
    037cf435316e floppy: fix for PAGE_SIZE != 4KB
    59e7ee37d5f8 block: rate-limit capacity change info log
    075e7d288ca3 s390/dasd: Fix gendisk parent after copy pair swap
    4f4515f02497 lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
    fe2ce8f925b0 mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
    18b99fa603d0 io_uring: fix filename leak in __io_openat_prep()
    19166de97372 KEYS: trusted: Fix a memory leak in tpm2_load_cmd
    bc390b273720 cifs: Fix memory and information leak in smb3_reconfigure()
    23a89dda39f4 vhost/vsock: improve RCU read sections around vhost_vsock_get()
    cebfc2ba2e6f block: rnbd-clt: Fix signedness bug in init_dev()
    8d8cd3d315db platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
    e3ef3e4888de nvme-fc: don't hold rport lock when putting ctrl
    62641daa93cb i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware
    92544ae44c44 libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
    1abf4ddeda5c serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
    72ab74fce63b usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
    4373a81f6b0a usb: xhci: limit run_graceperiod for only usb 3.0 devices
    1803fe66c9f2 iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
    914605b0de81 usb: typec: ucsi: Handle incorrect num_connectors capability
    de6dd14643e5 usbip: Fix locking bug in RT-enabled kernels
    44c8dccb09a2 exfat: fix remount failure in different process environments
    b1cad002d69a reset: fix BIT macro reference
    d2c7c90aca7b via_wdt: fix critical boot hang due to unnamed resource allocation
    b39fa021839b fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
    6c6a81d86a3c fuse: Always flush the page cache before FOPEN_DIRECT_IO write
    69f05f3e5390 scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
    0ec5059916f5 scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
    61c409780367 scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
    b5020721e953 powerpc/addnote: Fix overflow on 32-bit builds
    71f543a56177 clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
    cad4dfddaf69 ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
    a6f1ced333a6 firmware: imx: scu-irq: Init workqueue before request mbox channel
    aafed85dbff7 ipmi: Fix __scan_channels() failing to rescan channels
    42985fb28312 ipmi: Fix the race between __scan_channels() and deliver_response()
    2f21a7cbaaa9 ALSA: usb-mixer: us16x08: validate meter packet indices
    ba2d15635e59 ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
    930acded6bbf ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
    8f289fa12926 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
    97575fb2b714 dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
    d9bd2d0985b2 mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
    3dd6d0138482 spi: fsl-cpm: Check length parity before switching to 16 bit mode
    a287987af354 ACPI: CPPC: Fix missing PCC check for guaranteed_perf
    ef0f9059a647 ACPI: PCC: Fix race condition by removing static qualifier
    20dbeaed2459 can: gs_usb: gs_can_open(): fix error handling
    3f3c1c05c6ff Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
    bf95ec558058 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
    2bee957f6155 HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
    a28a375a5439 ksmbd: fix buffer validation by including null terminator size in EA length
    e54fb2a47725 ksmbd: Fix refcount leak when invalid session is found on session lookup
    da29cd197246 ksmbd: skip lock-range check on equal size to avoid size==0 underflow
    378a5d288598 block: rnbd-clt: Fix leaked ID in init_dev()
    d9479998c19a spi: cadence-quadspi: Fix clock disable on probe failure path
    a0fee4e618f1 x86/xen: Fix sparse warning in enlighten_pv.c
    79ee93cb007e x86/xen: Move Xen upcall handler
    86fcc629fdc0 drm/panel: sony-td4353-jdi: Enable prepare_prev_first
    fd8bb8fa7bc9 MIPS: Fix a reference leak bug in ip22_check_gio()
    11dddaed6978 hwmon: (tmp401) fix overflow caused by default conversion rate value
    fa37adcf1d56 hwmon: (ibmpex) fix use-after-free in high/low store
    b7b4f3bf118f net: hns3: add VLAN id validation before using
    3708637cb0d4 net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
    1956d47a03eb net: hns3: using the num_tqps in the vf driver to apply for resources
    049538a3aa98 net: enetc: do not transmit redirected XDP frames when the link is down
    011ae80c49d9 net/handshake: duplicate handshake cancellations leak socket
    7646e5d8188b net/mlx5: Serialize firmware reset with devlink
    873cb8bb91ba net/mlx5: Skip HotPlug check on sync reset using hot reset
    de0560f2c33c net/mlx5: fw_tracer, Handle escaped percent properly
    8ac688c0e430 net/mlx5: fw_tracer, Validate format string parameters
    0b0e4639a827 net/mlx5: Drain firmware reset in shutdown callback
    24d3f86df879 net/mlx5: fw reset, clear reset requested on drain_fw_reset
    ca9983bc3a11 ethtool: Avoid overflowing userspace buffer on stats query
    4cc829d61f10 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
    a9c87779df20 netfilter: nf_tables: remove redundant chain validation on register store
    1816619b2fe8 netfilter: nf_tables: allow loads only when register is initialized
    fb1347c5c016 netfilter: nf_tables: pass context structure to nft_parse_register_load
    8bc10b03e705 nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
    2f125ebe47d6 net/sched: ets: Remove drr class from the active list if it changes to strict
    f818cd472565 caif: fix integer underflow in cffrml_receive()
    4729ff0581fb ipvs: fix ipv4 null-ptr-deref in route error path
    325eb61bb307 netfilter: nf_conncount: fix leaked ct in error paths
    3e778855fbce broadcom: b44: prevent uninitialized value usage
    10ffc558246f net: openvswitch: fix middle attribute validation in push_nsh() action
    5f2831fc593c mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
    4a3c569005f4 mlxsw: spectrum_router: Fix neighbour use-after-free
    5a182635fef3 mlxsw: spectrum_router: Fix possible neighbour reference count leak
    17aefe815462 ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
    9987cda315c0 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
    156a0f6341dc netrom: Fix memory leak in nr_sendmsg()
    0e26e3ef8e5c net: fec: ERR007885 Workaround for XDP TX path
    ab794ec9f374 gfs2: Fix use of bio_chain
    96a60775dbb1 Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
    6d9a87ecf31f Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
    5adad9727a81 ksmbd: vfs: fix race on m_flags in vfs_cache
    d64977495e44 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
    c4d7795fa55e smb/server: fix return value of smb2_ioctl()
    11860cf9cc87 gfs2: fix remote evict for read-only filesystems
    58d3e00853e4 btrfs: scrub: always update btrfs_scrub_progress::last_physical
    935284aaf233 wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
    857e7a2d5a94 hfsplus: fix volume corruption issue for generic/073
    05ec9af3cc43 hfsplus: Verify inode mode when loading from disk
    b9d1c6bb5f19 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
    6348bea92f4f hfsplus: fix volume corruption issue for generic/070
    44a38eb4f787 ntfs: set dummy blocksize to read boot_block when mounting
    fb9e2f99ac10 kbuild: Use objtree for module signing key path
    f5c2a7cb2f00 fs/ntfs3: Support timestamps prior to epoch
    fefb29d64e7b livepatch: Match old_sympos 0 and 1 in klp_find_func()
    e71e8079adfe cpuidle: menu: Use residency threshold in polling state override decisions
    ae7ead58d949 cpufreq: s5pv210: fix refcount leak
    9ba782fbe66a cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
    ce2bdfc4af3f ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
    1bc34293dfbd ACPICA: Avoid walking the Namespace if start_node is NULL
    30917f8d4383 x86/ptrace: Always inline trivial accessors
    6c074ccf7705 sched/fair: Revert max_newidle_lb_cost bump
    91e448e69aca sched/deadline: only set free_cpus for online runqueues
    6e41d9ec8d7c perf/x86/amd: Check event before enable to avoid GPF
    011e356fe41e iomap: account for unaligned end offsets when truncating read range
    82b60ffbb532 iomap: adjust read range correctly for non-block-aligned positions
    c0c0951b9cd4 btrfs: fix memory leak of fs_devices in degraded seed device path
    f64105c91557 bpf, arm64: Do not audit capability check in do_jit()
    beeed972ab48 btrfs: fix a potential path leak in print_data_reloc_error()
    54ac15426326 btrfs: do not skip logging new dentries when logging a new name
    e5daff089b92 ipv6: add exception routes to GC list in rt6_insert_exception
    90f7d995b861 ipv6: avoid possible NULL deref in modify_prefix_route()
    dea3ed2c16f9 ALSA: dice: fix buffer overflow in detect_stream_formats()
    dbf2d472323d usb: phy: Initialize struct usb_phy list_head
    4ef659d1f2e1 usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
    7c0b3edb6c77 net: lan743x: Allocate rings outside ZONE_DMA
    95eb965ce0a6 LoongArch: Add machine_kexec_mask_interrupts() implementation
    8d9d121e3799 ocfs2: fix memory leak in ocfs2_merge_rec_left()
    c21c606ad398 irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
    94a4c58d7195 efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
    f5a28c4ee058 efi/cper: Adjust infopfx size to accept an extra space
    b930724424b7 efi/cper: Add a new helper function to print bitmasks
    99bc41d7d796 dm log-writes: Add missing set_freezable() for freezable kthread
    448092910421 dm-raid: fix possible NULL dereference with undefined raid type
    ca8764c0ea1f block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
    fd7e7353a5ba ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
    6d4f17782ce4 ALSA: firewire-motu: add bounds check in put_user loop for DSP events
    2e09c882a66e rtc: gamecube: Check the return value of ioremap()
    5ef0faed120a ALSA: uapi: Fix typo in asound.h comment
    74f2a6b2cff8 dma/pool: eliminate alloc_pages warning in atomic_pool_expand
    ddd32ec66bc4 ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
    1e59c7587bb0 nvme-auth: use kvfree() for memory allocated with kvcalloc()
    27d20907debf block: fix comment for op_is_zone_mgmt() to include RESET_ALL
    94f146df56fb blk-mq: Abort suspend when wakeup events are pending
    5e3230f9f644 ASoC: ak5558: Disable regulator when error happens
    8465515b8689 ASoC: ak4458: Disable regulator when error happens
    5fd617128b57 ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
    1edf1b4467d3 platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
    4543d9ccd99e fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
    a98719b6af3e NFS: Fix inheritance of the block sizes when automounting
    52cfde819a96 Expand the type of nfs_fattr->valid
    dce10c59211e NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
    e04647b63cfd Revert "nfs: ignore SB_RDONLY when mounting nfs"
    350e69eb93ef Revert "nfs: clear SB_RDONLY before getting superblock"
    b2ed74f8ccd2 Revert "nfs: ignore SB_RDONLY when remounting nfs"
    f718f9ea6094 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
    b8045ad0d53a NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
    991609c4a7b1 NFS: Initialise verifiers for visible dentries in readdir and lookup
    29e8d9b274c9 fs/nls: Fix utf16 to utf8 conversion
    796318ae388f NFS: Avoid changing nlink when file removes and attribute updates race
    f1fe47f592d3 9p: fix cache/debug options printing in v9fs_show_options
    a888905f2874 fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
    ae836bfac958 pinctrl: single: Fix incorrect type for error return variable
    de0711dbfb5c pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
    7438b1d70bf2 perf tools: Fix split kallsyms DSO counting
    d01f0e072dad net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
    84a7efd23b78 clk: keystone: fix compile testing
    fe78b35d19ae md/raid5: fix IO hang when array is broken with IO inflight
    61f371ade3b6 remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
    d31af068650c mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
    c44e376a533e selftests: bonding: add delay before each xvlan_over_bond connectivity check
    4035ea8f02fd selftests: bonding: add ipvlan over bond testing
    194788280708 selftests: bonding: Add more missing config options
    12364ab3a790 selftests: bonding: add missing build configs
    d29034c70f15 mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
    660936cb5155 net: stmmac: fix rx limit check in stmmac_rx_zc()
    8286c02fe910 netfilter: nft_connlimit: update the count if add was skipped
    da9f247fb5ef netfilter: nf_conncount: rework API to use sk_buff directly
    11b01b8ef1b1 netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
    c327ca1b2de5 Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
    14f860fb0873 resource: introduce is_type_match() helper and use it
    7c5527d18857 resource: replace open coded resource_intersection()
    9bf08dab7041 resource: Reuse for_each_resource() macro
    09811a83b214 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
    6338e278de4a ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
    7236e72a91ee ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
    3ff05c6af301 ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
    83a9770432f5 ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
    886c8f5af8a9 ASoC: Intel: catpt: Fix error path in hw_params()
    84b3ea5ba85c vdpa/pds: use %pe for ERR_PTR() in event handler registration
    c1947cecdd5c virtio: fix virtqueue_set_affinity() docs
    1c7d1ef95abf virtio: fix whitespace in virtio_config_ops
    83dc689e138b virtio: fix typo in virtio_device_ready() comment
    22b11e8f0b8f virtio_vdpa: fix misleading return in void function
    55b273382c52 ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
    0adc8de19be0 ext4: remove unused return value of __mb_check_buddy
    db5deba07f53 ublk: prevent invalid access with DEBUG
    0a0a51092c1c ublk: complete command synchronously on error
    84ea891dc897 ublk: make sure io cmd handled in submitter task context
    c242024efd1b ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
    1968f2ab4188 hwmon: sy7636a: Fix regulator_enable resource leak on error path
    e84690a05e47 drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
    6dca0f3f61ab ASoC: fsl_xcvr: clear the channel status control memory
    aaf2a6097116 RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
    715fdb3b3054 RDMA/irdma: Add support to re-register a memory region
    8c7b21f37494 RDMA/irdma: Fix data race in irdma_free_pble
    444de2316b09 RDMA/irdma: Fix data race in irdma_sc_ccq_arm
    599632e08859 iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
    136ff909dfb9 backlight: lp855x: Fix lp855x.h kernel-doc warnings
    30cbe4b64274 backlight: led-bl: Add devlink to supplier LEDs
    26fa6991683f wifi: ieee80211: correct FILS status codes
    e3676761efb2 iomap: always run error completions in user context
    4ae9ff07bc2b iomap: factor out a iomap_dio_done helper
    7e50ce619ec6 drm/nouveau: restrict the flush page to a 32-bit address
    96c56c5ff4e4 PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
    5928832a90c1 btrfs: fix leaf leak in an error path in btrfs_del_items()
    3cfa3d4b155a staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
    d6ce96e10e4d firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
    1c3c234af940 mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
    ccc585db618c RDMA/bnxt_re: Fix the inline size for GenP7 devices
    e3e1c7416be8 RISC-V: KVM: Fix guest page fault within HLV* instructions
    76ae0cc39673 crypto: ccree - Correctly handle return of sg_nents_for_len
    6cd14414394b crypto: starfive - Correctly handle return of sg_nents_for_len
    6a17f898a8bf selftests/bpf: Improve reliability of test_perf_branches_no_hw()
    e5343f28814d selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
    3915c76df201 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
    b6943283343b usb: dwc2: fix hang during suspend if set as peripheral
    bac021bf0733 usb: dwc2: fix hang during shutdown if set as peripheral
    7e993b9d6d24 usb: dwc2: disable platform lowlevel hw resources during shutdown
    b90c743a0a32 usb: chaoskey: fix locking for O_NONBLOCK
    cca3e7df3c0f ima: Handle error code returned by ima_filter_rule_match()
    dc153401fb26 wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
    06a5e91764ed cpuset: Treat cpusets in attaching as populated
    49dc43b25d34 net: phy: adin1100: Fix software power-down ready condition
    8d946fccf5b4 phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
    c23e0dfb05f1 mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
    eb09da83e409 mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
    19eda47ce3f1 wifi: mac80211: fix CMAC functions not handling errors
    7fce2c2ce881 wifi: mac80211: remove RX_DROP_UNUSABLE
    4bccd506a1f1 scsi: qla2xxx: Fix improper freeing of purex item
    6b4cd95bd746 pwm: bcm2835: Make sure the channel is enabled after pwm_request()
    f153fc44c760 perf arm_spe: Fix memset subclass in operation
    64378caea949 perf arm-spe: Extend branch operations
    cb2b0caa8ca9 ipv6: clear RA flags when adding a static route
    bd12abe294c7 net/ipv6: Remove expired routes with a separated list of routes.
    d258ebe7059a drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
    9068cfff4cab fs/ntfs3: Prevent memory leaks in add sub record
    ba125e8f8d11 fs/ntfs3: out1 also needs to put mi
    800153219f04 powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
    e95d7d5821f6 powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
    bf2c990b0121 bpf: Fix invalid prog->stats access when update_effective_progs fails
    c8201d1353c5 bpf: Improve program stats run-time calculation
    bf8513dfa31e wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
    5ed033c54133 drm/msm/a2xx: stop over-complaining about the legacy firmware
    9f7ab3fbadf3 NFSD/blocklayout: Fix minlength check in proc_layoutget
    07a031029201 tracefs: fix a leak in eventfs_create_events_dir()
    74f25cec6e26 watchdog: starfive: Fix resource leak in probe error path
    0592410b31f1 watchdog: wdat_wdt: Fix ACPI table leak in probe function
    97b876fa8832 bpf: Check skb->transport_header is set in bpf_skb_check_mtu
    67d295d202e2 selftests/bpf: Fix failure paths in send_signal test
    edcb09848a32 bpf: Handle return value of ftrace_set_filter_ip in register_fentry
    bf8f8528b762 ps3disk: use memcpy_{from,to}_bvec index
    f5391a065c15 arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
    6b73166d3b4b arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
    3800c97efff2 PCI: keystone: Exit ks_pcie_probe() for invalid mode
    994d6303ed0b bpf: Free special fields when update [lru_,]percpu_hash maps
    df38a4843ab5 leds: netxbig: Fix GPIO descriptor leak in error paths
    796037ca2fab scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
    39c754efb3e1 ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
    bcb94288d95c ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
    7c8a7d87af9d lib/vsprintf: Check pointer before dereferencing in time_and_date()
    43e2c9203d0f clk: renesas: r9a06g032: Fix memory leak in error path
    bb5f23ae16be coresight: etm4x: Add context synchronization before enabling trace
    289d9a2a98ba coresight: etm4x: Extract the trace unit controlling
    60f664206be2 coresight: etm4x: Correct polling IDLE bit
    2e5e0665a594 nbd: defer config unlock in nbd_genl_connect
    cbfcd8ee53c2 wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
    61abf8c3162d macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
    d5720e4045af powerpc/32: Fix unpaired stwcx. on interrupt exit
    a68afb6d6540 cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
    ef2bbc11b82b scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
    907bf69c6b6c ntfs3: init run lock for extend inode
    86322d5110ae ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
    d76abca88045 RDMA/rtrs: server: Fix error handling in get_or_create_srv
    841ccb2df19b dt-bindings: PCI: amlogic: Fix the register name of the DBI region
    6cbba9229348 staging: most: remove broken i2c driver
    bb0f288a2c4b staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0
    6d2390653d82 scsi: smartpqi: Fix device resources accessed after device removal
    1867723a98c8 scsi: stex: Fix reboot_notifier leak in probe error path
    1ba2ced2bbdf nbd: defer config put in recv_work
    e432944735ed regulator: core: disable supply if enabling main regulator fails
    313ab3b06f77 perf/x86/intel: Correct large PEBS flag check
    22b62f223c07 ext4: correct the checking of quota files before moving extents
    b5ed17a40909 mfd: da9055: Fix missing regmap_del_irq_chip() in error path
    e4d11160a77d efi/libstub: Fix page table access in 5-level to 4-level paging transition
    6f16ed9c8401 x86/boot: Fix page table access in 5-level to 4-level paging transition
    182b0cc9c6d5 ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
    4c1dd8da5386 ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
    2470624c4a21 ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
    c934e40246da spi: tegra210-quad: Fix timeout handling
    577d1ef18499 fs/9p: Don't open remote file with APPEND mode when writeback cache is used
    3b8431f15cdd scsi: target: Do not write NUL characters into ASCII configfs output
    4eee4a5b9b2e power: supply: apm_power: only unset own apm_get_power_status
    ea3bdf099e6e power: supply: wm831x: Check wm831x_set_bits() return value
    0fcbaf9e99dc power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
    5e9308f3539b power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
    1f309df63785 power: supply: cw2015: Check devm_delayed_work_autocancel() return code
    42c1d38de86e perf record: skip synthesize event when open evsel failed
    4dc555120afc perf lock contention: Load kernel map before lookup
    9dd3998165ea perf maps: Add maps__load_first()
    23411ba96edc interconnect: debugfs: Fix incorrect error handling for NULL path
    92087be48b6d arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
    7bfe9e5e31e3 interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
    bbd054492101 i3c: master: svc: Prevent incomplete IBI transaction
    82a09b9965ed i3c: fix refcount inconsistency in i3c_master_register
    4fc6af9d9e6d i3c: master: Inherit DMA masks and parameters from parent device
    5f133ebe6836 pinctrl: stm32: fix hwspinlock resource leak in probe function
    ea954e50d312 soc: qcom: smem: fix hwspinlock resource leak in probe error paths
    6135d225cca7 tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
    2d3e5c1e76e9 x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
    b2a39b1a3cde task_work: Fix NMI race condition
    1d733fcbfe61 mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
    4e6526697dcb mtd: nand: relax ECC parameter validation check
    9ce7cbd355ae Revert "mtd: rawnand: marvell: fix layouts"
    4a493d02ff46 ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
    eb8ac04f1036 ARM: dts: renesas: gose: Remove superfluous port property
    58aca869babd RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
    8f2602a83f66 sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
    85ede044f43d phy: mscc: Fix PTP for VSC8574 and VSC8572
    32d9c68af133 arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
    a649992b7eb3 firmware: imx: scu-irq: fix OF node leak in
    abdbffb6a087 arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
    bb04d3610f08 s390/ap: Don't leak debug feature files if AP instructions are not available
    772ded5a84e0 s390/smp: Fix fallback CPU detection
    4304bd7a334e wifi: ath11k: fix peer HE MCS assignment
    9484379c88e1 crypto: hisilicon/qm - restore original qos values
    5b8ac617c8da crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
    4a1535593fff clk: qcom: camcc-sm6350: Fix PLL config of PLL2
    77197835a735 clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
    285dadbb3cb0 uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
    433e72bf0f4e PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
    631786221875 arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
    5db023188615 arm64: dts: imx8mp-venice-gw702x: remove off-board uart
    e2060f8513b5 arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
    d553d5e13edb arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
    cf5cd55287a1 iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
    23b2b6af8dc6 inet: Avoid ehash lookup race in inet_ehash_insert()
    ad12d25edbbe rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
    dcb5e3cd96b7 ntfs3: Fix uninit buffer allocated by __getname()
    8bf729b96303 ntfs3: fix uninit memory after failed mi_read in mi_format_new
    3f8878c15753 crypto: authenc - Correctly pass EINPROGRESS back up to the caller
    2629742ccd3a irqchip/qcom-irq-combiner: Fix section mismatch
    c696fb981d7d irqchip/imx-mu-msi: Fix section mismatch
    1fbdca7341d9 irqchip/irq-brcmstb-l2: Fix section mismatch
    7a57553d2123 irqchip/irq-bcm7120-l2: Fix section mismatch
    f00b32894c51 irqchip/irq-bcm7038-l1: Fix section mismatch
    b0515a899ad1 sched/fair: Forfeit vruntime on yield
    a8fdcac66666 objtool: Fix weak symbol detection
    fe6ff6e24ae8 objtool: Fix standalone --hacks=jump_label
    c5f56b7faa80 HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
    c9a86c677b48 clk: renesas: cpg-mssr: Read back reset registers to assure values latched
    e8c730499293 clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
    224a0d7c8449 clk: renesas: Use str_on_off() helper
    d349d7dc3243 clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R()
    3cf222e052ca clk: renesas: rzg2l: Remove critical area
    73fcc27a9795 clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable()
    2ba9e39f1aed clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
    094b1827d2f7 USB: Fix descriptor count when handling invalid MBIM extended descriptor
    9dc3c78d21e1 drm/vgem-fence: Fix potential deadlock on release
    2f97ed8e88a3 drm/panel: visionox-rm69299: Don't clear all mode flags
    6245cce711e2 gpu: host1x: Fix race in syncpt alloc/free
    f8fd5491100f smack: fix bug: unprivileged task can create labels
    c173ce97d3f0 staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
    34620eb602aa staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
    30c558447e90 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
    b975f91de5f8 comedi: check device's attached status in compat ioctls
    049f14557450 comedi: multiq3: sanitize config options in multiq3_attach()
    72b3627b0d3b comedi: c6xdigio: Fix invalid PNP driver unregistration
    24cb00b9804c wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
    2f5e6805246c samples: work around glibc redefining some of our defines wrong
    a32eddf2bb52 LoongArch: Mask all interrupts during kexec/kdump
    e9b3a97e852a HID: elecom: Add support for ELECOM M-XT3URBK (018F)
    e7915f55ab15 platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
    919a9f1422e3 platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
    f42f958c4f42 platform/x86: huawei-wmi: add keys for HONOR models
    db78f96e150a HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
    d046f04f223d platform/x86: acer-wmi: Ignore backlight event
    fc59674bb41f pinctrl: qcom: msm: Fix deadlock in pinmux configuration
    a505f0ba36ab nvme: fix admin request_queue lifetime
    37786f27ee0e HID: hid-input: Extend Elan ignore battery quirk to USB
    a9f626396bfe bfs: Reconstruct file type when loading from disk
    4943ed83f80e ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
    727197a77874 smb: fix invalid username check in smb3_fs_context_parse_param()
    2b37f5b27f13 Bluetooth: btrtl: Avoid loading the config file on security chips
    d6c24a5e6cdc drm/vmwgfx: Use kref in vmw_bo_dirty
    88edfeca040c spi: imx: keep dma request disabled before dma transfer setup
    5f061d0ed906 spi: xilinx: increase number of retries before declaring stall
    27b2a8f45ed1 ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
    3915997ad777 USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
    cae7aa183ca4 USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
    5a8c2136dc5e serial: add support of CPCI cards
    53a633786718 USB: serial: ftdi_sio: match on interface number for jtag
    510db76553c9 USB: serial: option: move Telit 0x10c7 composition in the right place
    63d6bf5b19bf USB: serial: option: add Telit Cinterion FE910C04 new compositions
    85e8739c5ce7 USB: serial: option: add Foxconn T99W760
    152289a51107 KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
    88d99ca5adbd comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
    144c48da33a0 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
    39d2ef113416 locking/spinlock/debug: Fix data-race in do_raw_write_lock
    708a620b471a ksmbd: ipc: fix use-after-free in ipc_msg_send_request
    1687a055a555 ext4: refresh inline data size before write operations
    b4f8eabf6d99 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
    46c73ff89d73 Documentation: process: Also mention Sasha Levin as stable tree maintainer
    732fe5cbd6ad leds: spi-byte: Use devm_led_classdev_register_ext()
    25f34fd52144 xfrm: flush all states in xfrm_state_fini
    763e5c351206 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
    88ed2012b8c7 Revert "xfrm: destroy xfrm_state synchronously on net exit path"
    d0e0d1097118 xfrm: delete x->tunnel as we delete x

(From OE-Core rev: bdf9c70e0c6ddebb599c56ed9a4c17ba0db516c0)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
2adde7bee1 linux-yocto/6.6: update to v6.6.119
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    5fa4793a2d2d Linux 6.6.119
    810189546cb6 HID: core: Harden s32ton() against conversion to 0 bits
    e7e8e9b1a1b1 net: dsa: microchip: Free previously initialized ports on init failures
    3b5a6115d6ea net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
    70ad6455139e ksmbd: fix use-after-free in session logoff
    3a13454fd098 mptcp: fix duplicate reset on fastclose
    b77075c08d7e selftests: mptcp: join: properly kill background tasks
    f12f4c657617 staging: rtl8712: Remove driver using deprecated API wext
    2b9719ccad38 net: macb: fix unregister_netdev call order in macb_remove()
    a395121fe29e iio: adc: rtq6056: Correct the sign bit index
    094f10f3f290 can: rcar_canfd: Fix CAN-FD mode as default
    eecd163fa6da usb: typec: ucsi: psy: Set max current to zero when disconnected
    f02a412c0a18 usb: gadget: udc: fix use-after-free in usb_gadget_state_work
    92234ee7fc23 usb: udc: Add trace event for usb_gadget_set_state
    0722d804f7ad nfsd: Replace clamp_t in nfsd4_get_drc_mem()
    5106da73b016 bonding: check xdp prog when set bond mode
    694a354ddf98 bonding: return detailed error when loading native XDP fails
    becc488a4d86 libceph: replace BUG_ON with bounds check for map->max_osd
    ccbccfba25e9 libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
    183ad6e3b651 libceph: fix potential use-after-free in have_mon_and_osd_map()
    1c6fb1cc5035 net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
    1759edf0e688 net: dsa: microchip: common: Fix checks on irq_find_mapping()
    9d1a65cbe3ec drm/amd/display: Check NULL before accessing
    748ed1b6a2ca drm: sti: fix device leaks at component probe
    28a385af4a94 USB: serial: option: add support for Rolling RW101R-GL
    17cab1f3aefb USB: serial: ftdi_sio: add support for u-blox EVK-M101
    b75d20301703 xhci: dbgtty: fix device unregister
    da7a52bcee3f xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    afc0e34f161c usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
    5428c75e92e4 usb: dwc3: pci: Sort out the Intel device IDs
    9dab9859b10e usb: dwc3: pci: add support for the Intel Nova Lake -S
    e3a55221f4de usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
    04a8a6393f3f usb: storage: sddr55: Reject out-of-bound new_pba
    f5b6b214db12 USB: storage: Remove subclass and protocol overrides from Novatek quirk
    cb1401b5bcc2 usb: storage: Fix memory leak in USB bulk transport
    9d86bc8b188a usb: renesas_usbhs: Fix synchronous external abort on unbind
    41434488ca71 usb: gadget: f_eem: Fix memory leak in eem_unwrap
    730c13a9701c usb: cdns3: Fix double resource release in cdns3_pci_probe
    993bfdc38428 most: usb: fix double free on late probe failure
    41ae1203c5ab serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
    ce318ec9864b mptcp: clear scheduled subflows on retransmit
    71796c91ee8e firmware: stratix10-svc: fix bug in saving controller data
    87b3d0105192 slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    c4ba90485bfd thunderbolt: Add support for Intel Wildcat Lake
    f62ffdfb431b smb: client: fix memory leak in cifs_construct_tcon()
    4c257170c81d drivers/usb/dwc3: fix PCI parent check
    f8d1f166289f dm-verity: fix unreliable memory allocation
    5a3f3e39b187 ceph: fix crash in process_v2_sparse_read() for encrypted directories
    61089dd37ccd can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    c952664fd54f can: sja1000: fix max irq loop handling
    9917ba597cf9 atm/fore200e: Fix possible data race in fore200e_open()
    5b88725e5ea1 ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
    b4abe6826926 ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
    231ac951faba MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
    135713cd0751 MIPS: mm: Prevent a TLB shutdown on initial uniquification
    ad70338c1b87 iio: adc: ad7280a: fix ad7280_store_balance_timer()
    a9fa254af33a iio: accel: fix ADXL355 startup race condition
    cdd4a9e98004 iio: accel: bmc150: Fix irq assumption regression
    a8f6a8256a68 iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    936e082a7c07 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    d59a7824444e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    c538dae04a4c spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    01511983d7b8 spi: nxp-fspi: Propagate fwnode in ACPI case as well
    5fc6f8175b8b spi: nxp-fspi: Support per spi-mem operation frequency switches
    a25cc746f7d0 spi: spi-mem: Add a new controller capability
    f1ea0e8b4a15 spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
    94b3c7558748 spi: spi-mem: Allow specifying the byte order in Octal DTR mode
    99aff13bcc13 spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
    dbb60bd12950 spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
    f29b58e974c7 mailbox: pcc: don't zero error register
    ea621f472cfe mailbox: pcc: Refactor error handling in irq handler into separate function
    5550f9021895 mailbox: mailbox-test: Fix debugfs_create_dir error checking
    826785925627 usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
    cad94b17e276 iio: st_lsm6dsx: Fixed calibrated timestamp calculation
    21f867e3da98 net: fec: do not register PPS event for PEROUT
    2648b8b51992 net: fec: do not allow enabling PPS and PEROUT simultaneously
    b332c433489e net: fec: do not update PEROUT if it is enabled
    2d8f6acf5623 net: fec: cancel perout_timer when PEROUT is disabled
    3be37c3c96b1 net: atlantic: fix fragment overflow handling in RX path
    90daa70a4d62 net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
    d25c17507e80 net: dsa: sja1105: simplify static configuration reload
    0be4d79f8a1b drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
    7fd789d6ea49 net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    aa20dcff033c net/mlx5e: Fix validation logic in rate limiting
    58c411509141 net: lan966x: Fix the initialization of taprio
    30a1d3db72bc net: aquantia: Add missing descriptor cache invalidation on ATL2
    3e7442c58021 platform/x86: intel: punit_ipc: fix memory corruption
    ff45dd52bd18 net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
    fd6a1261d05d Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    fe68510fc99b Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
    4ffac725154c can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
    3433680b7596 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
    1a588c40a422 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
    e9dd83a75a72 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers

(From OE-Core rev: 01535e428d4fbab6d467644339d37ff828ddfa88)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
3ad8559850 linux-yocto/6.6: update to v6.6.118
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4791134e4aeb Linux 6.6.118
    c602cc344b4b mptcp: fix a race in mptcp_pm_del_add_timer()
    19de79aaea33 mm/mempool: fix poisoning order>0 pages with HIGHMEM
    0d40c4ef4b4b mm/mempool: replace kmap_atomic() with kmap_local_page()
    f38b91f7aded HID: amd_sfh: Stop sensor before starting
    4948db9c9ca8 selftests: mptcp: join: endpoints: longer transfer
    378e6136b8c0 pmdomain: imx: Fix reference count leak in imx_gpc_remove
    a5958b1bcf4a pmdomain: imx-gpc: Convert to platform remove callback returning void
    ad120c08b89a pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    7ea2ea68df08 ftrace: Fix BPF fexit with livepatch
    f01f9c348d76 crash: fix crashkernel resource shrink
    b3d24038eb77 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
    29150018bf19 maple_tree: fix tracepoint string pointers
    bf07df375d20 uio_hv_generic: Set event for all channels on the device
    fc3139d9f4c1 KVM: arm64: Check the untrusted offset in FF-A memory share
    64332afa9f76 smb: client: fix incomplete backport in cfids_invalidation_worker()
    6917e894f86f tracing/tools: Fix incorrcet short option in usage text for --threads
    952637c5b9be net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
    1ee10e90e160 ALSA: usb-audio: fix uac2 clock source at terminal parser
    5d604d40cd32 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
    e822e902f8e6 s390/mm: Fix __ptep_rdp() inline assembly
    4e9efe0d56e7 f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
    d0141cf6ab1f kconfig/nconf: Initialize the default locale at startup
    be46fa4de9da kconfig/mconf: Initialize the default locale at startup
    6ae0613ea6f5 net: tls: Cancel RX async resync request on rcd_delta overflow
    1bc765f0f75a selftests: net: use BASH for bareudp testing
    3ab328a0258f x86/microcode/AMD: Limit Entrysign signature checking to known generations
    5d778778b40b scsi: core: Fix a regression triggered by scsi_host_busy()
    1f8e4d6c1d20 cifs: fix typo in enable_gcm_256 module parameter
    d89ae707cfe6 bcma: don't register devices disabled in OF
    5998da5a8208 vsock: Ignore signal/timeout on connect() if already established
    7627864dc312 cifs: fix memory leak in smb3_fs_context_parse_param error path
    496d1383e441 LoongArch: Use UAPI types in ptrace UAPI header
    69e043bce09c net/mlx5: Clean up only new IRQ glue on request_irq() failure
    715d9cda646a devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
    6d9f0036d21e pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
    3b90bd8aaeb2 pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
    f0923011c126 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
    57752d523a3f kernel.h: Move ARRAY_SIZE() to a separate header
    9bbb4afff974 platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
    3b177b2ded56 s390/ctcm: Fix double-kfree
    e2a897ad5f53 nvme-multipath: fix lockdep WARN due to partition scan work
    0b903f33c31c net: openvswitch: remove never-working support for setting nsh fields
    f8c496e20b7a net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
    385fd7ec3214 net: dsa: hellcreek: fix missing error handling in LED registration
    2e78580e6e7d drm/tegra: Add call to put_pid()
    ddb483ce2136 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    9026f31a520d pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
    a620b091c4df xfrm: Prevent locally generated packets from direct output in tunnel mode
    a2b61573e6a3 xfrm: Determine inner GSO type from packet inner protocol
    b3b27876f3be drm/amd/display: Move sleep into each retry for retrieve_link_cap()
    e688c20f088e drm/amd/display: Increase DPCD read retries
    06a79f1bffe7 drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
    8b57f8127086 drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    642561238c98 mptcp: do not fallback when OoO is present
    8a5d1ceef950 mptcp: decouple mptcp fastclose from tcp close
    28e4d5fd731e mptcp: avoid unneeded subflow-level drops
    d019cbb455ee mptcp: fix premature close in case of fallback
    3d513efe18a9 mptcp: fix ack generation for fallback msk
    8f9ba1a99a89 mptcp: fix race condition in mptcp_schedule_work()
    fe694895d3b7 LoongArch: Don't panic if no valid cache info for PCI
    6aa22377ef27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    5ea58bb47c50 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    a6ef60898dda scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    b343cee5df7e scsi: sg: Do not sleep in atomic context
    33f64600a120 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    5fe335a80548 nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
    7d1977b4ae5c nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
    d344ea1baf19 Input: pegasus-notetaker - fix potential out-of-bounds access
    ca9a08de9b29 Input: imx_sc_key - fix memory corruption on unload
    8a2d2a536c76 Input: goodix - add support for ACPI ID GDIX1003
    9cf59f4724a9 Input: cros_ec_keyb - fix an invalid memory access
    7419d8064dab Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
    00c56d55332c net: dsa: microchip: lan937x: Fix RGMII delay tuning
    ce0a3699244a be2net: pass wrb_params in case of OS2BMC
    5968bcf785c6 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
    2a494b9e6364 smb: client: introduce close_cached_dir_locked()
    b8113c1ca469 ata: libata-scsi: Fix system suspend for a security locked drive
    037cc5058964 mptcp: Fix proto fallback detection with BPF
    2ecd37dae7a6 mptcp: Disallow MPTCP subflows from sockmap
    e65f1a2807c5 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    583990e7dcea shmem: fix tmpfs reconfiguration (remount) when noswap is set
    457376c6fbf0 mtdchar: fix integer overflow in read/write ioctls
    b146e0b085d9 mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    49365455a63c HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    6665fbd7730b timers: Fix NULL function pointer race in timer_shutdown_sync()
    1e89a1be4fe9 Linux 6.6.117
    0fdb596476c0 memcg: fix data-race KCSAN bug in rstats
    541e85e1c9c9 ACPI: HMAT: Remove register of memory node for generic target
    41ea28dc3c0c mm: memcg: optimize parent iteration in memcg_rstat_updated()
    6b97ad92d932 mm/memory-tier: fix abstract distance calculation overflow
    206a8665f9cc memory tiers: use default_dram_perf_ref_source in log message
    e2f7c76758be cachestat: do not flush stats in recency check
    1f45e5c84684 net: netpoll: ensure skb_pool list is always initialized
    03695541b334 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    42d486d35a41 mm/secretmem: fix use-after-free race in fault handler
    46185cdfc9ed mm/truncate: unmap large folio on split failure
    7e239675ae51 mm/memory: do not populate page table entries beyond i_size
    fe601b70eac6 filemap: cap PTE range to be created to allowed zero fill in folio_map_range()
    e5dffca89b4a mm: memcg: restore subtree stats flushing
    68849411ce9e mm: workingset: move the stats flush into workingset_test_recent()
    1b201161f34b mm: memcg: make stats flushing threshold per-memcg
    b68fc4f792bb mm: memcg: move vmstats structs definition above flushing code
    68e727bdb68b mm: memcg: change flush_next_time to flush_last_time
    b283ba3ddc9f mm: memcg: add per-memcg zswap writeback stat
    2c3568736912 mm: memcg: add THP swap out info for anonymous reclaim
    57692c303132 scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL
    aca6f63e803e scsi: ufs: core: Add a quirk to suppress link_startup_again
    753ca4b5beff scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register
    d1f293ee8dc3 scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
    aba8384b2311 scsi: ufs: core: Add fill_crypto_prdt variant op
    f108b6a34856 scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
    bd77a15c3a8d scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
    7e3bfaaf0208 scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
    960dab23f6d4 net: stmmac: Fix accessing freed irq affinity_hint
    ef49378864bb f2fs: fix to avoid overflow while left shift operation
    c645693180a9 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    a3a476cb65a4 net: netpoll: flush skb pool during cleanup
    dc67d67a995e net: netpoll: Individualize the skb pool
    e9ab9dec36bb netpoll: remove netpoll_srcu
    94b01ef5186c mm, percpu: do not consider sleepable allocations atomic
    4c8a4f1d34ec iommufd: Don't overflow during division for dirty tracking
    066ee13f05fb btrfs: ensure no dirty metadata is written back for an fs with errors
    df1ad5de2197 drm/mediatek: Disable AFBC support on Mediatek DRM driver
    a299478ac16f Revert "perf dso: Add missed dso__put to dso__load_kcore"
    ee59d88353e8 selftests: mptcp: connect: trunc: read all recv data
    8b644440d16a selftests: mptcp: join: rm: set backup flag
    b78aae82ea75 selftests: mptcp: connect: fix fallback note due to OoO
    4e833774cdc2 pmdomain: samsung: plug potential memleak during probe
    22330f5f0052 btrfs: do not update last_log_commit when logging inode due to a new name
    4020f18436ea btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
    4a351adbbd72 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    d58afbd05627 EDAC/altera: Handle OCRAM ECC enable after warm reset
    ca9f11fe0926 LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
    2612f0e0b8dc selftests/user_events: fix type cast for write_index packed member in perf_test
    21bedc6eeb51 x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
    70f73dde0ad7 spi: Try to get ACPI GPIO IRQ earlier
    ca2bd7a717d5 smb: client: fix cifs_pick_channel when channel needs reconnect
    bfdcd67e0fcb crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
    868fc62811d3 cifs: client: fix memory leak in smb3_fs_context_parse_param
    ece3b981bb66 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    082b6b511432 mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    159244b55095 mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    67272c11f379 fs/proc: fix uaf in proc_readdir_de()
    ad4a84daf6f8 wifi: mac80211: reject address change while connecting
    c3cbf016a697 selftests/tracing: Run sample events to clear page cache events
    041ab9ca6e80 ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    c6201eb32371 LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
    f4b4146c1cf0 LoongArch: Use correct accessor to read FWPC/MWPC
    4c49fe089661 dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
    b30421bc31c0 strparser: Fix signed/unsigned mismatch bug
    5746b2a0f5eb ksmbd: close accepted socket when per-IP limit rejects connection
    142b2990e64f gcov: add support for GCC 15
    29fbb3ad4018 NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    e18c368d8611 KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
    79f851a65c47 HID: uclogic: Fix potential memory leak in error path
    9e8863f3fe34 ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
    57473eec8080 HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    6546dd0c6ad2 ARM: dts: imx51-zii-rdu1: Fix audmux node names
    adee209bb898 arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
    3f358a66a045 netfilter: nf_tables: reject duplicate device on updates
    dd3a38574f93 mtd: onenand: Pass correct pointer to IRQ handler
    7ce9bb0b95fc Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    c157fa22c400 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    d8d79cf8c2b7 espintcp: fix skb leaks
    2e93bf719462 net: dsa: improve shutdown sequence
    ed8a77fee461 net: allow small head cache usage with large MAX_SKB_FRAGS values
    52b44d8c6534 net: fix NULL pointer dereference in l3mdev_l3_rcv
    e91ecc2e30b4 irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
    64b12dca2b0a bpf: account for current allocated stack depth in widen_imprecise_scalars()
    baa61dcaa50b bpf: Add bpf_prog_run_data_pointers()
    872c04306b02 acpi/hmat: Fix lockdep warning for hmem_register_resource()
    6015ad3b210e base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
    356d4d79dc18 acpi: numa: Add setting of generic port system locality attributes
    e507071185fb acpi: Break out nesting for hmat_parse_locality()
    1fec7730896f acpi: numa: Add genport target allocation to the HMAT parsing
    d0e2cbe79e5d acpi: numa: Create enum for memory_target access coordinates indexing
    994c51070c95 base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates'
    519af3fa0263 acpi, hmat: calculate abstract distance with HMAT
    7e9fa5cdcc4f acpi, hmat: refactor hmat_register_target_initiators()
    9c8ffc4f91a8 memory tiering: add abstract distance calculation algorithms management
    57f607c11296 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
    c2d65ce1d035 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    0ad6db4438ef NFS: sysfs: fix leak when nfs_client kobject add fails
    b6137b4906f4 pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
    45ea5a60adbc NFS: enable nconnect for RDMA
    275369632f6a pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
    b5de1eb5bc20 ASoC: tas2781: fix getting the wrong device number
    b5df9e06eed3 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    aaaa8531896f ASoC: codecs: va-macro: fix resource leak in probe error path
    7fd65a5f9701 ASoC: cs4271: Fix regulator leak on probe failure
    34294379ea4e regulator: fixed: fix GPIO descriptor leak on register failure
    83475ce43fa7 acpi,srat: Fix incorrect device handle check for Generic Initiator
    25d6e7663932 cifs: Fix uncached read into ITER_KVEC iterator
    581c65fd0b0e cifs: stop writeback extension when change of size is detected
    ad141380d768 Bluetooth: L2CAP: export l2cap_chan_hold for modules
    335266ea359e ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
    4470b8bb9a8e ACPI: CPPC: Perform fast check switch only for online CPUs
    a851ebcdc2e2 ACPI: CPPC: Check _CPC validity for only the online CPUs
    f6a7808cadde hsr: Fix supervision frame sending on HSRv0
    873f985f3bdf virtio-net: fix incorrect flags recording in big mode
    14aba9bd583e net_sched: limit try_bulk_dequeue_skb() batches
    aa9f57c077f2 net/mlx5e: Fix potentially misleading debug message
    df953d41a579 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    29f62b3d4466 net/mlx5e: Fix maxrate wraparound in threshold between units
    a676a296af65 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    31e4aa93e2e5 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    a6d1bb631af9 net_sched: act_connmark: use RCU in tcf_connmark_dump()
    4cd8d755c7d4 af_unix: Initialise scc_index in unix_add_edge().
    f01f007c9cc9 wifi: mac80211: skip rate verification for not captured PSDUs
    2a5c3396f6d9 net: mdio: fix resource leak in mdiobus_register_device()
    c92dbf85627b tipc: Fix use-after-free in tipc_mon_reinit_self().
    e9800b8b77f2 net/handshake: Fix memory leak in tls_handshake_accept()
    e5afb55625ac net/smc: fix mismatch between CLC header and proposal
    ed71f801249d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    a5059df18988 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    2a9ff4086c26 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    c24ac6cfe4f9 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    1c28c1e1522c Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    2927ff643607 Bluetooth: MGMT: cancel mesh send timer when hdev removed
    65c74343da8e net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    d6f93bba3d7d selftests: net: local_termination: Wait for interfaces to come up
    8085b6cdb0e0 wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
    4fbfef04d957 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    e671f9bb9780 smb/server: fix possible refcount leak in smb2_sess_setup()
    63d8706a2c09 smb/server: fix possible memory leak in smb2_read()
    113de3341728 HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
    a74a8be2652b NFS: check if suid/sgid was cleared after a write as needed
    dad9857bbe64 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    df712250acdd NFS4: Fix state renewals missing after boot
    1243e396148a drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
    21dbe5fa22df drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
    fdf2ea31ce40 riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
    7a635df5ef26 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
    ea5b1db5569c compiler_types: Move unused static inline functions warning to W=2
    36bc0502c2de drm/amd: Fix suspend failure with secure display TA
    e5a4b227bc6e iommufd: Make vfio_compat's unmap succeed if the range is already empty
    d6ab7ef52aaf smb: client: fix refcount leak in smb2_set_path_attr
    c63dc33e3794 drm/i915: Fix conversion between clock ticks and nanoseconds
    3dec22bde207 drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    c6fc325d8434 selftests: netdevsim: set test timeout to 10 minutes
    885827bc1518 riscv: stacktrace: fix backtracing through exceptions
    8fa7f51d3725 drm/amd/display: Fix black screen with HDMI outputs
    f10a6f51984b drm/amdgpu: Fix function header names in amdgpu_connectors.c
    d96aa80f5f2e extcon: adc-jack: Cleanup wakeup source only if it was enabled
    3335f9054365 scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
    62b013354dcf lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    946dec89c417 virtio-net: fix received length check in big packets
    cb52d9c86d70 smb: client: fix potential UAF in smb2_close_cached_fid()
    018179e955a8 smb: client: validate change notify buffer before copy
    24bef9ca5830 x86/microcode/AMD: Add more known models to entry sign checking
    193b2c5e5443 rtc: rx8025: fix incorrect register reference
    5f7350ff2b17 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
    70150b9443dd drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
    8bcadabc3c12 drm/amd/display: Enable mst when it's detected but yet to be initialized
    e70d2e1f876a tracing: Fix memory leaks in create_field_var()
    1b29b6898ed8 net: bridge: fix MST static key usage
    3b60ce334c1c net: bridge: fix use-after-free due to MST port state bypass
    5a5d2f772775 lan966x: Fix sleeping in atomic context
    8cb474cd65bf net: dsa: microchip: Fix reserved multicast address table programming
    8bf679ebbecd net/mlx5e: SHAMPO, Fix skb size check for 64K pages
    96d20e36c6df net/mlx5e: Fix return value in case of module EEPROM read error
    9b37f576d2c0 net/mlx5e: Use extack in get module eeprom by page callback
    c729f0049561 wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
    7ee2eb85755d bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    dd03780c29f8 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
    2ad229bc61ba sctp: Hold sock lock while iterating over address list
    c9119f243d9c sctp: Prevent TOCTOU out-of-bounds write
    48d161b3c815 sctp: Hold RCU read lock while iterating over address list
    1ac40030b4e9 net: dsa: b53: stop reading ARL entries if search is done
    32e43d361bac net: dsa: b53: fix enabling ip multicast
    c95c731efee0 net: dsa: b53: fix resetting speed and pause on forced link
    ddf9fc39548e net: vlan: sync VLAN features with lower device
    d8a729fd4427 selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
    f680e2eb8c21 netdevsim: add Makefile for selftests
    efad140b6284 selftests/net: use destination options instead of hop-by-hop
    28f2d15e27af selftests/net: fix GRO coalesce test and add ext header coalesce tests
    deff55caa564 selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    cb5a4c715521 net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
    f44b8bbb1b7e Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
    779f83a91d4f Bluetooth: hci_event: validate skb length for unknown CC opcode
    59b9ed956c7d riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    f34ba22989da riscv: stacktrace: Disable KASAN checks for non-current tasks
    19682d62547c riscv: Improve exception and system call latency
    d4187ec26410 net: libwx: fix device bus LAN ID
    6d7567cc0bc0 Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
    994ec06b7ba1 media: uvcvideo: Use heuristic to find stream entity
    85866cbd5edb ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    ad71f31b62a4 ceph: refactor wake_up_bit() pattern of calling
    34353a0cd39b ceph: add checking of wait_for_completion_killable() return value
    068e002bc0b6 ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    32df8c333071 kbuild: uapi: Strip comments before size type check
    05a378912231 rtc: pcf2127: fix watchdog interrupt mask on pcf2131
    86df8ade88d2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
    81e829f699ee tools: lib: thermal: use pkg-config to locate libnl3
    fe6d58972d3d tools: lib: thermal: don't preserve owner in install
    fa7d0c8b2350 tools bitmap: Add missing asm-generic/bitsperlong.h include
    a1a09685874e ACPI: property: Return present device nodes only on fwnode interface
    6a1e5fa2d1fd scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
    ece711f11c0d 9p: sysfs_init: don't hardcode error to ENOMEM
    4f3926f060d7 cpufreq: tegra186: Initialize all cores to max frequencies
    cdd2b67dec44 9p: fix /sys/fs/9p/caches overwriting itself
    0ab9ef66a89e NTB: epf: Allow arbitrary BAR mapping
    751734d4cc7f clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    824b92e6d24a clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
    7235f9969d9e clk: at91: clk-master: Add check for divide by 3
    544f8254c1fb ARM: at91: pm: save and restore ACR during PLL disable/enable
    9f9110995873 rtc: pcf2127: clear minute/second interrupt
    30e5bbcb98a9 clk: sunxi-ng: sun6i-rtc: Add A523 specifics
    3c5e016d2328 um: Fix help message for ssl-non-raw
    c34d6dd9ab35 fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
    da98803bccaf btrfs: mark dirty extent range for out of bound prealloc extents
    352056b6b669 RDMA/hns: Fix wrong WQE data when QP wraps around
    d4837e720ff0 RDMA/hns: Fix the modification of max_send_sge
    bc8c9b8f6387 RDMA/irdma: Set irdma_cq cq_num field during CQ create
    d559ddd687ed RDMA/irdma: Remove unused struct irdma_cq fields
    cd7e3bb8e200 RDMA/irdma: Fix SD index calculation
    57d352e198de ACPICA: Update dsmethod.c to get rid of unused variable warning
    f1d84a3d6521 char: misc: restrict the dynamic range to exclude reserved minors
    d2993a7e98eb ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
    c3e4a6de0d1f smb: client: transport: avoid reconnects triggered by pending task work
    a024cf4d9f84 ksmbd: use sock_create_kern interface to create kernel socket
    e81e6d6d99b1 ftrace: Fix softlockup in ftrace_module_enable
    e09a096104fc orangefs: fix xattr related buffer overflow...
    df7517553995 page_pool: Clamp pool size to max 16K pages
    2648c810a25f 6pack: drop redundant locking and refcounting
    e1806387c7f9 exfat: limit log print for IO error
    3a18f8ae062e ALSA: usb-audio: add mono main switch to Presonus S1824c
    799cd62cbcc3 Bluetooth: bcsp: receive data only if registered
    03371c021818 Bluetooth: SCO: Fix UAF on sco_conn_free
    c9d6e46c2fe8 Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames
    7eab99ffe36e net: macb: avoid dealing with endianness in macb_set_hwaddr()
    deb3d014d98c net/mlx5e: Don't query FEC statistics when FEC is disabled
    2bccb8072b28 ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
    91a5cec5b9d6 ASoC: stm32: sai: manage context in set_sysclk callback
    93f8d67ef8b5 amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
    d932fb292f83 ext4: increase IO priority of fastcommit
    199ab7b43c5e fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    7ec8ac9f73d4 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
    f6108a8164c4 accel/habanalabs/gaudi2: read preboot status after recovering from dirty state
    a7d72a80e24a accel/habanalabs: return ENOMEM if less than requested pages were pinned
    193e269df045 scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
    88d6a9ea0688 accel/habanalabs/gaudi2: fix BMON disable configuration
    e30995ccd9b8 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    31116de5ee11 net: bridge: Install FDB for bridge MAC on VLAN 0
    eacfd08b26a0 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
    e30618333212 NFSv4.1: fix mount hang after CREATE_SESSION failure
    4e2f5f7e07f9 NFSv4: handle ERR_GRACE on delegation recalls
    1b65fb8723ed drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
    7f097986b342 wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
    a5cb7c982210 remoteproc: qcom: q6v5: Avoid handling handover twice
    221952c07b58 PCI/PM: Skip resuming to D0 if device is disconnected
    b679c74e5598 vfio: return -ENOTTY for unsupported device feature
    5561974e62e0 sparc64: fix prototypes of reads[bwl]()
    d170582b4bd4 sparc/module: Add R_SPARC_UA64 relocation handling
    1810b2fd7375 PCI: cadence: Check for the existence of cdns_pcie::ops before using it
    0b02dc2b4e78 r8169: set EEE speed down ratio to 1
    4e21e047a25c net: intel: fm10k: Fix parameter idx set but not used
    c9e7bb702b80 wifi: ath10k: Fix connection after GTK rekeying
    df0a0f229f73 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    4cacebe3dca9 net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    855cd3a0c4d5 net: phy: clear link parameters on admin link down
    c5fa9fed6272 ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup()
    2a9575a37218 jfs: fix uninitialized waitqueue in transaction manager
    ce054a366c54 jfs: Verify inode mode when loading from disk
    ec2b3f83b4c8 ipv6: np->rxpmtu race annotation
    765f8816d395 f2fs: fix infinite loop in __insert_extent_tree()
    97e01c389402 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    8b21ba5da050 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    2611313d3bf4 allow finish_no_open(file, ERR_PTR(-E...))
    3c0725aceb14 scsi: lpfc: Define size of debugfs entry for xri rebalancing
    1169f4f03fb1 scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
    a0eb7e8f8266 scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
    88ac95b17a03 scsi: ufs: core: Disable timestamp functionality if not supported
    58b8f44a64ed selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
    0df3da8888fa drm/amdgpu: reject gang submissions under SRIOV
    a7efc2b0359c HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
    0d0be8117eda ethernet: Extend device_get_mac_address() to use NVMEM
    7613c06ffa89 page_pool: always add GFP_NOWARN for ATOMIC allocations
    fe3f8b671618 drm/amd/display: Disable VRR on DCE 6
    ced20843717e drm/amd/display: Fix DVI-D/HDMI adapters
    eeb8ea76c912 drm/amd: Avoid evicting resources at S5
    19618f480cda drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    a8a9f053e1d4 ALSA: serial-generic: remove shared static buffer
    59efb432c318 wifi: mt76: mt7996: Temporarily disable EPCS
    bf0b265fcb95 wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
    81f9b19af302 net/cls_cgroup: Fix task_get_classid() during qdisc run
    160b03e57e62 crypto: caam - double the entropy delay interval for retry
    01be9fad74e4 PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
    27598de36043 crypto: sun8i-ce - remove channel timeout field
    a3d9de6ac510 watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
    705c5a2f5517 HID: asus: add Z13 folio to generic group for multitouch to work
    c018a87942bf udp_tunnel: use netdev_warn() instead of netdev_WARN()
    ee957d6c0886 selftests: Replace sleep with slowwait
    518319c98097 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    c85be890e057 selftests: Disable dad for ipv6 in fcnal-test.sh
    2ddd6bf6b671 x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
    1a6ffaeddf76 netfilter: nf_reject: don't reply to icmp error messages
    b94b57fd7eb9 selftests: traceroute: Use require_command()
    5df7e8bc4d23 media: redrat3: use int type to store negative error codes
    d15b3e4107b4 selftests: net: replace sleeps in fcnal-test with waits
    f5781438ba04 net: sh_eth: Disable WoL if system can not suspend
    cedcc490241b phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    f0cc4b6c443a phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet
    cf6781d97c69 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    9406ec01a077 wifi: mac80211: Fix HE capabilities element check
    17249b2a6527 ntfs3: pretend $Extend records as regular files
    b96d08ce3f72 scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes
    30220dda83f8 net: phy: marvell: Fix 88e1510 downshift counter errata
    5122665ca5f3 scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
    8fefca6a12e6 scsi: ufs: host: mediatek: Enhance recovery on resume failure
    5bde774bbfbf media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer
    f32fe18efc95 media: ov08x40: Fix the horizontal flip control
    81015dd217a4 char: Use list_del_init() in misc_deregister() to reinitialize list pointer
    d89343fce39a drm/msm: make sure to not queue up recovery more than once
    ea37884097a0 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
    38c179c52d22 usb: gadget: f_hid: Fix zero length packet transfer
    3c66bc0acc08 drm/amdgpu: add support for cyan skillfish gpu_info
    65240044398e drm/amdgpu: don't enable SMU on cyan skillfish
    b17fe7f5a2de drm/amd: add more cyan skillfish PCI ids
    aa98b4c1f84c iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
    44a764aec64b iommu/amd: Skip enabling command/event buffers for kdump
    a5c425011c31 smsc911x: add second read of EEPROM mac when possible corruption seen
    170bd191fa6c net: call cond_resched() less often in __release_sock()
    194a056bdc6f ALSA: usb-audio: apply quirk for MOONDROP Quark2
    56384ec84c15 media: verisilicon: Explicitly disable selection api ioctls for decoders
    98dfcb4c287b media: adv7180: Only validate format in querystd
    20e3fe278b2f media: adv7180: Do not write format to device in set_fmt
    f195ac1e3542 media: adv7180: Add missing lock in suspend callback
    7ad7e582de8e net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    7816b60922c8 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    2412c6aa42fc drm/amdgpu: Allow kfd CRIU with no buffer objects
    0d629175a7ee drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    b093c81df23f drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    196a75590f40 dmaengine: dw-edma: Set status for callback_result
    269d69a50f21 dmaengine: mv_xor: match alloc_wc and free_wc
    bb434f67b46b dmaengine: sh: setup_xref error handling
    a3eebe03da5f ptp: Limit time setting of PTP clocks
    ffdcbb30d3cd scsi: pm8001: Use int instead of u32 to store error codes
    c1751c5fdddf crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
    49d9ac3af3a1 mips: lantiq: danube: rename stp node on EASY50712 reference board
    e20d0efe03ea mips: lantiq: xway: sysctrl: rename stp clock
    98654c8434c6 mips: lantiq: danube: add missing device_type in pci node
    ae51686278ce mips: lantiq: danube: add model to EASY50712 dts
    6c7de5a8957f mips: lantiq: danube: add missing properties to cpu node
    f589021c3347 drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
    1a91de0fdbdf media: fix uninitialized symbol warnings
    3e283f38792e drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    1de2e48b1f33 drm/amdkfd: fix vram allocation failure for a special case
    a7953bf98522 fuse: zero initialize inode private data
    bb9b505f02e2 net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
    4aa5acd88fb4 remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
    742f354124aa extcon: adc-jack: Fix wakeup source leaks on device unbind
    22c24c7c5e81 scsi: pm80xx: Fix race condition caused by static variables
    bbfe60eba369 scsi: mpi3mr: Fix controller init failure on fault during queue creation
    df64a4d69d3d rds: Fix endianness annotation for RDS_MPATH_HASH
    dcaec33d8deb ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    31014c39d6d7 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    9b8dfaea5cea net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
    63fbe0e64132 net: stmmac: Correctly handle Rx checksum offload errors
    c1d2b289b9fc net: When removing nexthops, don't call synchronize_net if it is not necessary
    7d4ad49ba0c1 char: misc: Does not request module for miscdevice with dynamic minor
    4a61f3eb8913 char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor
    9001552e105f usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    9e2c2d3e7209 iio: adc: imx93_adc: load calibrated values even calibration failed
    8bbda8e00cde iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
    fdd587be5936 drm/amdkfd: Handle lack of READ permissions in SVM mapping
    2b5128caee83 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    8231e8011846 media: imon: make send_packet() more robust
    f28dde240160 net: ipv6: fix field-spanning memcpy warning in AH output
    b34fc4fe9a85 scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
    2d5551640dde scsi: ufs: host: mediatek: Change reset sequence for improved stability
    83a26fa18d47 scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change
    137dea7d7d00 scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
    68245d8fe2fa bridge: Redirect to backup port when port is administratively down
    86e4faf48539 s390/pci: Use pci_uevent_ers() in PCI recovery
    8a54de9609d8 powerpc/eeh: Use result of error_detected() in uevent
    74e9ec803b6d thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    7d87c41061e8 ice: Don't use %pK through printk or tracepoints
    bbfcf5db8c08 net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    7a500e923127 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    79a27f405d02 media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR
    07f3f65682a9 drm/tidss: Set crtc modesetting parameters with adjusted mode
    1f950a449a4d drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
    be9fc98a4198 drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
    105ed683b400 drm/tidss: Use the crtc_* timings when programming the HW
    3f964091abb0 media: amphion: Delete v4l2_fh synchronously in .release()
    48bb7f8ab984 media: pci: ivtv: Don't create fake v4l2_fh
    b567d1c40c70 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    153353da60d0 wifi: rtw88: sdio: use indirect IO for device registers before power-on
    da9d28d79342 selftests/net: Ensure assert() triggers in psock_tpacket.c
    517abdc57cfb selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    d7f4354d3de9 PCI: Disable MSI on RDC PCI to PCIe bridges
    ce054c331334 drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    cb02acebd3d0 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    a0a44b1e0873 drm/amd/pm: Use cached metrics data on arcturus
    d4b2c3a3bc01 drm/amd/pm: Use cached metrics data on aldebaran
    f17f0100f702 drm/amd/display: update dpp/disp clock from smu clock table
    8c05069ce157 drm/amd/display: add more cyan skillfish devices
    2728e38ac27e drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
    acb3c23080ca drm/amd/display: ensure committing streams is seamless
    f6bea0255090 mfd: da9063: Split chip variant reading in two bus transactions
    830c39871f16 mfd: madera: Work around false-positive -Wininitialized warning
    d9e793728021 mfd: stmpe-i2c: Add missing MODULE_LICENSE
    784f62e68a6c mfd: stmpe: Remove IRQ domain upon removal
    5ebb9bc9a662 tools/power x86_energy_perf_policy: Prefer driver HWP limits
    941ac2bcb1ac tools/power x86_energy_perf_policy: Enhance HWP enable
    91d267901aab tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    5b69364cbef1 tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    efa623350136 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    52d4d91db6f8 hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
    1721c2938d00 uprobe: Do not emulate/sstep original instruction when ip is changed
    1a8ca4b9b3e3 nvme: Use non zero KATO for persistent discovery connections
    9c55db583707 bpf: Clear pfmemalloc flag when freeing all fragments
    d8d03481351e riscv: bpf: Fix uninitialized symbol 'retval_off'
    e1729523759c blk-cgroup: fix possible deadlock while configuring policy
    8613bed1f283 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    f3c6ae35a7e8 spi: rpc-if: Add resume support for RZ/G3E
    4aced32596ea futex: Don't leak robust_list pointer on exec race
    b8961542d2ae cpuidle: Fail cpuidle device registration if there is one already
    4b78d57b7dd3 bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
    c77fcb6cc6f0 power: supply: qcom_battmgr: handle charging state change notifications
    877d4689e546 pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
    5aeb8550e8c3 tools/cpupower: fix error return value in cpupower_write_sysfs()
    7d0e0563256f video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    edf3b828871d bpf: Do not limit bpf_cgroup_from_id to current's namespace
    25f4bf1f7979 nvme-fc: use lock accessing port_state and rport state
    601ed47b2363 nvmet-fc: avoid scheduling association deletion twice
    5ca9367da5be tee: allow a driver to allocate a tee_device without a pool
    12296895e962 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
    8c1c0ac31949 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    46fc8ad19ce9 ARM: tegra: transformer-20: fix audio-codec interrupt
    0c9a3917a61e ARM: tegra: transformer-20: add missing magnetometer interrupt
    ca7c230fff41 soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
    c7117d25e3db arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
    e60b141dfc93 irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
    552659030ab8 hwmon: sy7636a: add alias
    8161d9b78915 power: supply: sbs-charger: Support multiple devices
    0babd39ceb5d pinctrl: keembay: release allocated memory in detach path
    4f8d061ac497 hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    5617c8165cf5 hwmon: (k10temp) Add device ID for Strix Halo
    44729682b694 hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
    3c4c5184631a power: supply: qcom_battmgr: add OOI chemistry
    dcba7b98dcb7 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    338f490a04c6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    3e121479021d irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    fea338c7e46f selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
    233317cc29dd arc: Fix __fls() const-foldability via __builtin_clzl()
    8d6791c480f2 cpufreq/longhaul: handle NULL policy in longhaul_exit
    854241f8e4ff selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    d45325fc6a73 irqchip/sifive-plic: Respect mask state when setting affinity
    0f7149ac7691 memstick: Add timeout to prevent indefinite waiting
    4cfc3b63ea09 mmc: host: renesas_sdhi: Fix the actual clock
    fa7c118e0b83 pinctrl: single: fix bias pull up/down handling in pin_config_set
    667789d3e29f bpf: Don't use %pK through printk
    8c8f8f7f84e8 spi: loopback-test: Don't use %pK through printk
    3f274df8526e soc: qcom: smem: Fix endian-unaware access of num_entries
    2a0db48dd8c2 soc: aspeed: socinfo: Add AST27xx silicon IDs
    fc1141a530df usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
    b63c061be622 s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
    b61ed8005bd3 drm/sysfb: Do not dereference NULL pointer in plane reset
    b5493968ac7a drm/sched: Fix race in drm_sched_entity_select_rq()
    7088465f1081 s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
    a2ae01c674e1 sched/fair: Use all little CPUs for CPU-bound workloads
    4ced68c43a15 sched/pelt: Avoid underestimation of task utilization
    fe04654ecb65 net: phy: dp83867: Disable EEE support as not implemented
    a60be7339353 cpuidle: governors: menu: Select polling state in some more cases
    58c347aa881d cpuidle: governors: menu: Rearrange main loop in menu_select()
    6e43d5f0e593 s390/pci: Restore IRQ unconditionally for the zPCI device
    49888b3b457b mptcp: fix MSG_PEEK stream corruption
    a5a896f8315d drm/mediatek: Fix device use-after-free on unbind
    2664bfd8969d regmap: slimbus: fix bus_context pointer in regmap init calls
    482b568e8680 block: make REQ_OP_ZONE_OPEN a write operation
    37089e2258d6 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    02a16148f842 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    e69d5d11ed0c drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    224932faac5c drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    ca5dc7ef4c1a sfc: fix potential memory leak in efx_mae_process_mport()
    25191342d576 net: hns3: return error code when function fails
    1cd109318d69 drm/etnaviv: fix flush sequence logic
    83312609ff32 Bluetooth: hci_core: Fix tracking of periodic advertisement
    e3ba2b1f7d1a Bluetooth: ISO: Fix another instance of dst_type handling
    48d31ac5af5f Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
    504554dbcbb4 Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset
    932c0a4f77ac Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
    9a579d6a3951 usbnet: Prevents free active kevent
    5d8f28a8b50e libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    2e97da83839f ASoC: fsl_sai: fix bit order for DSD format
    06d711b4d620 ASoC: Intel: avs: Unprepare a stream when XRUN occurs
    0dd6474ced33 crypto: aspeed - fix double free caused by devm
    8e8bcd7b2925 crypto: aspeed-acry - Convert to platform remove callback returning void
    42f848f8e5ea bpf: Do not audit capability check in do_jit()
    5b81a79bada2 scsi: ufs: core: Initialize value of an attribute returned by uic cmd
    645114110354 bpf: Sync pending IRQ work before freeing ring buffer
    c898547ed64e ALSA: usb-audio: fix control pipe direction
    431da7f85430 drm/msm/a6xx: Fix GMU firmware parser
    ad5852941409 wifi: ath12k: free skb during idr cleanup callback
    0ec88db40ce0 wifi: ath11k: Add missing platform IDs for quirk table
    b8850b4370fa wifi: ath10k: Fix memory leak on unsupported WMI command
    1811c610653c x86/fpu: Ensure XFD state on signal delivery
    939c4e33005e smb: client: fix potential cfid UAF in smb2_query_info_compound
    6dbd3d9573e1 ASoC: qdsp6: q6asm: do not sleep while atomic
    aa826b05c68f mptcp: restore window probe
    f7e5fc50791b mptcp: drop bogus optimization in __mptcp_check_push()
    4a28d1898392 fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    e097cdbac72e fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    64e3175d1c8a wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
    e059b0560040 Bluetooth: rfcomm: fix modem control handling
    9ba1a7802ca9 fbdev: bitblit: bound-check glyph index in bit_putcs*
    e992faffa846 ACPI: button: Call input_free_device() on failing input device registration
    4e85246ec0d0 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
    3fe5494db5fe fbdev: atyfb: Check if pll_ops->init_pll failed
    468f78276a37 fbcon: Set fb_display[i]->mode to NULL when the mode is released
    814a55f44d8a net: usb: asix_devices: Check return value of usbnet_get_endpoints
    03524ccff698 NFSD: Fix crash in nfsd4_read_release()

(From OE-Core rev: 8af342d12598e3d7c3aca6a81ca4e16aee4b639b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
2c30acaf10 linux-yocto/6.6: update to v6.6.116
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0a805b6ea8cda Linux 6.6.116
    63dde0eec59b4 gpio: idio-16: Define fixed direction of the GPIO lines
    92a15817f0fbd gpio: regmap: add the .fixed_direction_output configuration parameter
    38f50558b50cf gpio: regmap: Allow to allocate regmap-irq device
    ddd31f5a5ff39 bits: introduce fixed-type GENMASK_U*()
    739aa67ef147b bits: add comments and newlines to #if, #else and #endif directives
    0e660d8224d07 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
    3aa367e6aae7a xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
    dae8555062cf0 xhci: dbc: Improve performance by removing delay in transfer event polling.
    6f126ef0117c9 xhci: dbc: Allow users to modify DbC poll interval via sysfs
    1c5cec6625a3f xhci: dbc: poll at different rate depending on data transfer activity
    afdf4f5108513 serial: sc16is7xx: remove useless enable of enhanced features
    74c8eafd42b48 serial: sc16is7xx: refactor EFR lock
    7db1a5451bcb9 serial: sc16is7xx: reorder code to remove prototype declarations
    2f7592e0bdfc6 serial: sc16is7xx: remove unused to_sc16is7xx_port macro
    39a7305e2abad selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported
    f87c246d7c1ef selftests: mptcp: disable add_addr retrans in endpoint_tests
    1f1632dd97dae mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    4784326cb26a4 arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
    797f15c2b15e9 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
    93bcd360c503e btrfs: use level argument in log tree walk callback replay_one_buffer()
    ef64d81fb7ddd btrfs: always drop log root tree reference in btrfs_replay_log()
    3b838f39f4be8 btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
    fb6ceb6cde7bc btrfs: zoned: refine extent allocator hint selection
    8fabf4d56fd8f btrfs: zoned: return error from btrfs_zone_finish_endio()
    625aecafb1bd2 EDAC/mc_sysfs: Increase legacy channel support to 16
    0956cdef60de8 x86/bugs: Fix reporting of LFENCE retpoline
    077823b06f1cc x86/bugs: Report correct retbleed mitigation status
    5c63fb0b382f9 perf: Skip user unwind if the task is a kernel thread
    89fbfc799e1d5 perf: Have get_perf_callchain() return NULL if crosstask and user are set
    34b5aba8511a1 perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL
    a61ed1fb165b0 audit: record fanotify event regardless of presence of rules
    6ffa9d6618718 net/sched: sch_qfq: Fix null-deref in agg_dequeue
    e5bbb12db2c75 Linux 6.6.115
    2dc125f5da134 ksmbd: transport_ipc: validate payload size before reading handle
    2ae71c3770c39 gpio: ljca: Initialize num before accessing item in ljca_gpio_config
    bfd17b6138df0 fuse: fix livelock in synchronous file put from fuseblk workers
    c7ec75f3cbf73 fuse: allocate ff->release_args only if release is needed
    c34b09cbd6fc0 s390/cio: Update purge function to unregister the unused subchannels
    41fe20cfbcd43 x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
    bc1c6b803e14e fs/notify: call exportfs_encode_fid with s_umount
    df75bfc287029 xfs: always warn about deprecated mount options
    b89e20a365442 devcoredump: Fix circular locking dependency with devcd->mutex.
    7c691e10ca958 serial: 8250_mtk: Enable baud clock and manage in runtime PM
    a8527907f28d7 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    f354f7510ff0e serial: 8250_dw: handle reset control deassert error
    928a9c9b97ea2 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    91b2d5fcde526 tcpm: switch check for role_sw device with fw_node
    6fb8fbc0aa542 most: usb: hdm_probe: Fix calling put_device() before device initialization
    72427dc6f8752 most: usb: Fix use-after-free in hdm_disconnect
    9a297a68c3ba4 misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
    a068cbe71c1cb mei: me: add wildcat lake P DID
    d4854eff25efb comedi: fix divide-by-zero in comedi_buf_munge()
    c055480e04561 binder: remove "invalid inc weak" check
    3a25640814ff8 x86/microcode: Fix Entrysign revision check for Zen1/Naples
    03d7e8c749428 xhci: dbc: enable back DbC in resume if it was enabled before suspend
    2c217d0e86885 usb: raw-gadget: do not limit transfer length
    cbf278c90c64a usb/core/quirks: Add Huawei ME906S to wakeup quirk
    102b9b8942e11 USB: serial: option: add Telit FN920C04 ECM compositions
    da06de8f1656f USB: serial: option: add Quectel RG255C
    7070c31465f1c USB: serial: option: add UNISOC UIS7720
    6d63703bec0c1 sched: Remove never used code in mm_cid_get()
    770b33a1a8e46 io_uring: correct __must_hold annotation in io_install_fixed_file
    5ba12858b664f gpio: ljca: Fix duplicated IRQ mapping
    7efa69e0688b5 gpio: update Intel LJCA USB GPIO driver
    d11f2156a93e3 hwmon: (sht3x) Fix error handling
    dc1ac7c1a355b RISC-V: Don't print details of CPUs disabled in DT
    00b58d2c25d10 RISC-V: Define pgprot_dmacoherent() for non-coherent devices
    c7849e8cb22a9 firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode
    d719ce9f286c4 firmware: arm_scmi: Account for failed debug initialization
    e42ec4eccebe2 spi: spi-nxp-fspi: add extra delay after dll locked
    18d1c06b72d56 selftests: mptcp: join: mark implicit tests as skipped if not supported
    c8aa3fd5b4a03 selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
    5e46e4dc829e1 net: ravb: Ensure memory write completes before ringing TX doorbell
    d064092c3fc34 net: ravb: Enforce descriptor type ordering
    36838ece81545 net: usb: rtl8150: Fix frame padding
    9f2db04c21cff net: stmmac: dwmac-rk: Fix disabling set_clock_selection
    42ed0784d11ad vsock: fix lock inversion in vsock_assign_transport()
    aa6a21409dd62 ocfs2: clear extent cache after moving/defragmenting extents
    c7ae6b99c982d MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    fa41d6f4b1382 cifs: Fix TCP_Server_Info::credits to be signed
    356c7fdf684cd can: netlink: can_changelink(): allow disabling of automatic restart
    a9da00c9cee99 ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
    29d96bcc14952 Revert "cpuidle: menu: Avoid discarding useful information"
    a0c16f20d23cf gpio: 104-idio-16: Define maximum valid register address offset
    67adc5500ad7c gpio: pci-idio-16: Define maximum valid register address offset
    3373f263bb647 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    941096f618c50 dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC
    15b80f63269d3 net: bonding: fix possible peer notify event loss or dup issue
    cb9055ba30306 sctp: avoid NULL dereference when chunk data buffer is missing
    4f32f754343a8 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    8b051d7f530e8 net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
    72328f25755ee net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ
    9d7bc56c550eb net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
    b411759b9c1a9 selftests: net: fix server bind failure in sctp_vrf.sh
    bbcbbb9d68626 selftests/net: convert sctp_vrf.sh to run it in unique namespace
    dd2a7aba7f8d8 can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb()
    05e2c6ef4a9da dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    050732ace1dbd net: enetc: correct the value of ENETC_RXB_TRUESIZE
    2781ca82ce8ca net: enetc: fix the deadlock of enetc_mdio_lock
    74c94df40ede9 net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush().
    6993a51388bdc rtnetlink: Allow deleting FDB entries in user namespace
    362f4c52efd05 net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size()
    550e311e1b16f Unbreak 'make tools/*' for user-space targets
    6aef39551e60a smb: server: let smb_direct_flush_send_list() invalidate a remote key first
    6ef6ac49fdf1d drivers/perf: hisi: Relax the event ID check in the framework
    99bdd0580d7f2 powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
    6aee82d0bfeee m68k: bitops: Fix find_*_bit() signatures
    5f43ab41ddab1 lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
    24cac083a76b9 hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    cfafefcb0e1fc hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    8c18c84ecbfa3 dlm: check for defined force value in dlm_lockspace_release
    2bb8bc99b1a7a hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    4f40a2b3969da hfs: validate record offset in hfsplus_bmap_alloc
    a5bfb13b4f406 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    714e70f603bee hfs: make proper initalization of struct hfs_find_data
    7870fbdce00ef hfs: clear offset and space out of valid records in b-tree node
    b1ec9faef7e36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    813d3d18cfe47 exec: Fix incorrect type for ret

(From OE-Core rev: 99d8bdc07f708158cc98dfce11739e1fbaa08d31)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
7754aa3731 linux-yocto/6.6: update to v6.6.114
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4a243110dc88 Linux 6.6.114
    d060f49771b5 PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    ed518734a3c1 PCI: j721e: Fix programming sequence of "strap" settings
    d763fffd4284 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    92b82e232b8d mm/ksm: fix flag-dropping behavior in ksm_madvise
    499089376206 ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
    65dc89d5cf40 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    9c1c7edfea46 nfsd: decouple the xprtsec policy check from check_nfsd_access()
    2e0aab9ddaf1 ixgbevf: fix mailbox API compatibility by negotiating supported features
    8aebc9367911 ixgbevf: fix getting link speed data for E610 devices
    52ffb51de64f ixgbevf: Add support for Intel(R) E610 device
    6d4597351818 PCI: Add PCI_VDEVICE_SUB helper macro
    247d1fff85e0 phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
    01829af7656b ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
    cebfbf40056a vfs: Don't leak disconnected dentries on umount
    f7353208c91a NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    f846eacde280 fs: quota: create dedicated workqueue for quota_release_work
    d7d942c9a182 quota: remove unneeded return value of register_quota_format
    6c79b23f1c52 padata: Reset next CPU when reorder sequence wraps around
    5fb3328e927c xfs: use deferred intent items for reaping crosslinked blocks
    a4970f5087e2 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    353c69c7898e iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
    0af89c7e640a phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
    3594108460db phy: cdns-dphy: Store hs_clk_rate and return it
    11d10382a4df iio: imu: inv_icm42600: Simplify pm_runtime setup
    cbdd55050b78 PM: runtime: Add new devm functions
    2c3f01bb6ee4 xfs: fix log CRC mismatches between i386 and other architectures
    4245f6c66a3c xfs: rename the old_crc variable in xlog_recover_process
    c896618807a2 NFSD: Fix last write offset handling in layoutcommit
    4138321e9d41 NFSD: Minor cleanup in layoutcommit processing
    daa0ff1780c9 NFSD: Rework encoding and decoding of nfsd4_deviceid
    30a6a61c5828 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
    a0caf1de97e1 block: fix race between set_blocksize and read paths
    8fdd0ad43977 arm64: errata: Apply workarounds for Neoverse-V3AE
    d9d3e9ff1e2a arm64: cputype: Add Neoverse-V3AE definitions
    4f5ab4a9c6ab hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    b1ec27375dea selftests: arg_parsing: Ensure data is flushed to disk before reading.
    a0ed8ae58a83 HID: multitouch: fix name of Stylus input devices
    ef45e08141f8 HID: hid-input: only ignore 0 battery events for digitizers
    576312eb4363 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    d776af255d19 selftests/bpf: make arg_parsing.c more robust to crashes
    48b1d42286bf accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
    af7e3989e241 ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    66c29d9fc1dc sched/fair: Fix pelt lost idle time detection
    3359a93f45c3 sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    8942165d0c3f drm/rockchip: vop2: use correct destination rectangle height check
    025db46dbcf8 drm/amd/powerplay: Fix CIK shutdown temperature
    7a4482d59fcb drm/i915/guc: Skip communication warning on reset in progress
    b82efea81a15 ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
    1746416e885c ASoC: nau8821: Generalize helper to clear IRQ status
    ce1aa07aea2b ASoC: nau8821: Cancel jdet_work before handling jack ejection
    9e32cb91bfb3 ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
    001f1fb0e4e3 drm/bridge: lt9211: Drop check for last nibble of version register
    706ed11aa9e8 riscv: kprobes: Fix probe address validation
    06da9b0f87da nvme-multipath: Skip nr_active increments in RETRY disposition
    a22c03011dac net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    db00e3bdf69a net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    9c470a536556 tls: don't rely on tx_work during send()
    c61d4368197d tls: wait for pending async decryptions if tls_strp_msg_hold fails
    b9e21d676def tls: always set record_type in tls_process_cmsg
    f6c40bf4078d tls: wait for async encrypt in case of error during latter iterations of sendmsg
    f61dfccc5a3e net: tls: wait for async completion on last message
    071377a13834 tls: trim encrypted message to match the plaintext on short splice
    3dd3aa80e5af tg3: prevent use of uninitialized remote_adv and local_adv variables
    2bd8352df493 tcp: fix tcp_tso_should_defer() vs large RTT
    939a7d837167 amd-xgbe: Avoid spurious link down messages during interface toggle
    48294a67863c net/ip6_tunnel: Prevent perpetual tunnel growth
    932f7cd27905 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    deb6ab171fd1 doc: fix seg6_flowlabel path
    3f4a318dec64 net: dlink: handle dma_map_single() failure properly
    e3fdc2b2c61e can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    627a7ebd8954 dax: skip read lock assertion for read-only filesystems
    d280c138e66b HID: multitouch: fix sticky fingers
    5f65c8ad8c72 usb: gadget: f_rndis: Refactor bind path to use __free()
    1cde4516295a usb: gadget: f_ncm: Refactor bind path to use __free()
    e348d18fb012 usb: gadget: f_acm: Refactor bind path to use __free()
    070f341d86cf usb: gadget: f_ecm: Refactor bind path to use __free()
    70a766743173 usb: gadget: Introduce free_usb_request helper
    167ac21abb82 usb: gadget: Store endpoint pointer in usb_request
    50c721be2cff media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
    211728b9b282 media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
    7a27f07948ef drm/exynos: exynos7_drm_decon: remove ctx->suspended
    cbbe08268a13 drm/exynos: exynos7_drm_decon: properly clear channels during bind
    98c15dc95009 drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    fbc8589975ef drm/msm/a6xx: Fix PDC sleep sequence
    8e245d3a2ab8 drm/msm/adreno: De-spaghettify the use of memory barriers
    eb0d280c2751 eventpoll: Replace rwlock with spinlock
    f72553935a53 epoll: Remove ep_scan_ready_list() in comments
    dfacd00818ce Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
    e19e401b059a cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    59a6e61863e2 drm/amd: Check whether secure display TA loaded successfully
    db4bdb550ce1 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    57239762aa90 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
    15c73964da9d cifs: parse_dfs_referrals: prevent oob on malformed input
    00e7da6ca640 can: gs_usb: increase max interface to U8_MAX
    be19fcf0baed can: gs_usb: gs_make_candev(): populate net_device->dev_port
    289498da343b btrfs: do not assert we found block group item when creating free space tree
    ebbf0d45be41 btrfs: fix incorrect readahead expansion length
    7c068bcc12d2 btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    cb6039b68efa ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    6e85cc404a7e ext4: wait for ongoing I/O to complete before freeing blocks
    870e14104978 jbd2: ensure that all ongoing I/O complete before freeing blocks
    f13ef730370b f2fs: fix wrong block mapping for multi-devices
    67a664eebf11 r8152: add error handling in rtl8152_driver_init
    d7dd034c1492 smb: client: Fix refcount leak for cifs_sb_tlink
    f231f248323d Linux 6.6.113
    99c704e44cab perf test stat: Avoid hybrid assumption when virtualized
    163f15370c55 writeback: Avoid excessively long inode switching times
    7594dae6cc95 writeback: Avoid softlockup when switching many inodes
    ab0d0138803c cramfs: Verify inode mode when loading from disk
    5a7602d64e1c fs: Add 'initramfs_options' to set initramfs mount options
    09d227c59d97 pid: Add a judgment for ns null in pid_nr_ns
    d47cdfddeb49 minixfs: Verify inode mode when loading from disk
    030a01fbcc42 irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
    6d09bbbca3e5 irqchip/sifive-plic: Make use of __assign_bit()
    63c44fa29ef2 mptcp: pm: in-kernel: usable client side with C-flag
    06d82c3a1f7f selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
    ef8a0b37f11d s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
    1527222f3549 s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
    2c768a9d1c17 s390/bpf: Describe the frame using a struct instead of constants
    10358217e30c s390/bpf: Centralize frame offset calculations
    9b378246e7ef s390/bpf: Change seen_reg to a mask
    63d2008affae ACPI: property: Do not pass NULL handles to acpi_attach_data()
    af0ff085cd56 ACPI: property: Add code comments explaining what is going on
    156819a04732 ACPI: property: Disregard references in data-only subnode lists
    1ed161347ad9 ACPI: battery: Add synchronization between interface updates
    8f03b1bf2bcd ACPI: battery: Check for error code from devm_mutex_init() call
    e6c83bbb0119 ACPI: battery: initialize mutexes through devm_ APIs
    346975d62660 ACPI: battery: allocate driver data through devm_ APIs
    b8c7d40b4cb3 arm64: mte: Do not flag the zero page as PG_mte_tagged
    7f4f031e66ad arm64: kprobes: call set_memory_rox() for kprobe page
    ca603d157694 ipmi: Fix handling of messages with provided receive message pointer
    348121b29594 ipmi: Rework user message limit handling
    aafae78e6d79 KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
    d0d9fa88d7ab rseq: Protect event mask against membarrier IPI
    1810b6084aea btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    0c5ce6b6ccc2 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
    93b8a612db29 PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
    0fa2185104df misc: fastrpc: Save actual DMA size in fastrpc_map structure
    78e5fa79ed7c misc: fastrpc: Add missing dev_err newlines
    bc718d0bd87e ksmbd: add max ip connections parameter
    cd3efb93677c KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
    ad25061d1d73 mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
    1a301228c0a8 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    8d2a77ccefee mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    3cb4b35687a9 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    d7b038045ea0 mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    7bd4e5367d09 media: mc: Clear minor number before put device
    8c7aad767518 Squashfs: reject negative file sizes in squashfs_read_inode()
    f5a1b04e5df2 Squashfs: add additional inode sanity checking
    edb6425f5935 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    abdfc4704e0b ext4: free orphan info with kvfree
    f775f821de46 ACPICA: Allow to skip Global Lock initialization
    720a66fdaa6c ext4: validate ea_ino and size in check_xattrs
    79ea7f3e11ef ext4: guard against EA inode refcount underflow in xattr update
    9e642ab8e5b2 ext4: fix an off-by-one issue during moving extents
    d1e681c0bb03 ext4: correctly handle queries for metadata mappings
    871b6894a3fa ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    304fc34ff6fc ext4: verify orphan file size is not too big
    e7e0e3eae0c1 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    925ed83efbe7 NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    677ebfe5d00f mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
    bb5ef60ee84f mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
    81a6d6011acb mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    69336589df5d wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
    d0ca2f9fbb96 wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    3454c79780dd selftests: mptcp: join: validate C-flag + def limit
    1264edbed45e x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    c5bceeb4c569 x86/umip: Check that the instruction opcode is at least two bytes
    d7760884ee3f spi: cadence-quadspi: Flush posted register writes before DAC access
    8bf417e1d36c spi: cadence-quadspi: Flush posted register writes before INDAC access
    eef57e03d5c1 PCI: tegra194: Handle errors in BPMP response
    315001252acd PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    a1a7a80dbe08 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    f5770bba83d1 PCI: rcar-host: Drop PMSR spinlock
    608ab627d966 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    61aeab7178aa PCI/AER: Support errors introduced by PCIe r6.0
    741b78395083 PCI/AER: Fix missing uevent on recovery when a reset is requested
    a3a52f85a211 PCI/ERR: Fix uevent on failure to recover
    36039348bca7 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    bd27ddb68a42 PCI/sysfs: Ensure devices are powered for config reads
    7a9dee3e4c9d PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
    a5f1934fea37 rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    9f16da9b549a rtc: interface: Fix long-standing race when setting alarm
    31a81d9ad81b rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    5dd821744377 memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    587b819fbcbf mmc: core: SPI mode remove cmd7
    6a5b401c745f mtd: rawnand: fsmc: Default to autodetect buswidth
    151bd8885947 xtensa: simdisk: add input size check in proc_write_simdisk
    3572290dfa7c sparc: fix error handling in scan_one_device()
    612d10ce8490 sparc64: fix hugetlb for sun4u
    ed3044b9c810 sctp: Fix MAC comparison to be constant-time
    04181645643d scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    ebf2b91a09fd sched/deadline: Fix race in push_dl_task()
    f4aab940ae9e Revert "ipmi: fix msg stack when IPMI is disconnected"
    dc3a1c6237e7 pwm: berlin: Fix wrong register in suspend/resume
    9f88a6fd9748 powerpc/pseries/msi: Fix potential underflow and leak issue
    83319fa81e60 powerpc/powernv/pci: Fix underflow and leak issue
    4307297a5fe4 power: supply: max77976_charger: fix constant current reporting
    fc6ce639b9a7 pinctrl: samsung: Drop unused S3C24xx driver data
    4bfba41d80d3 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    62fcb12c1f80 parisc: Remove spurious if statement from raw_copy_from_user()
    eb67aaf2c2f3 parisc: don't reference obsolete termio struct for TC* constants
    dd21dc8d7451 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    ff770d10cfeb of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
    babe2b53fa7d lib/genalloc: fix device leak in of_gen_pool_get()
    db2fcc8189bf KEYS: trusted_tpm1: Compare HMAC values in constant time
    132f827e7bac kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
    8d982bdd5dfd iommu/vt-d: PRS isn't usable if PDS isn't supported
    ff416637ef07 iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    dad6e796b10f init: handle bootloader identifier in kernel parameters
    759329336a77 iio: xilinx-ams: Unmask interrupts after updating alarms
    26242971663d iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
    54e7b86d1ab0 iio: frequency: adf4350: Fix prescaler usage.
    3f88f4e8f178 iio: dac: ad5421: use int type to store negative error codes
    a832682cf6c9 iio: dac: ad5360: use int type to store negative error codes
    f7fed2af0ad8 fs/ntfs3: Fix a resource leak bug in wnd_extend()
    feac989493ca fbdev: Fix logic error in "offb" name match
    41b17a237e1e crypto: rockchip - Fix dma_unmap_sg() nents value
    4b3770692262 crypto: atmel - Fix dma_unmap_sg() direction
    11bb6f3cc21b crypto: aspeed - Fix dma_unmap_sg() direction
    69a18ff6c60e cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    2e9ae62b1ca3 copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    ed9cf7c460e8 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    108c50494c2b bus: mhi: ep: Fix chained transfer handling in read path
    0276c8582488 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    f74a135c5617 blk-crypto: fix missing blktrace bio split events
    fd7b6b31475e drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    07c0125e21a6 drm/rcar-du: dsi: Fix 1/2/3 lane support
    b4ba1c81de30 media: lirc: Fix error handling in lirc_register()
    ec02275a6317 media: venus: firmware: Use correct reset sequence for IRIS2
    f9d61ee68937 media: pci: ivtv: Add missing check after DMA map
    4c656fd59e9e media: mc: Fix MUST_CONNECT handling for pads with no links
    d429c3bb06fa media: i2c: mt9v111: fix incorrect type for ret
    c0ad66984750 media: cx18: Add missing check after DMA map
    dbcbac8c47cb firmware: meson_sm: fix device leak at probe
    135eacbb111f xen/events: Update virq_to_irq on migration
    612ef6056855 xen/events: Return -EEXIST for bound VIRQs
    536a7e676fbe xen/manage: Fix suspend error path
    9ac86c75148f xen/events: Cleanup find_virq() return codes
    76165e048c1b dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
    4d74d17ab18e ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    61683c2e7019 arm64: dts: ti: k3-am62a-main: Fix main padcfg length
    d9560998550d arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    ac7ce5c869f8 arm64: dts: qcom: msm8939: Add missing MDSS reset
    0a5e8961cd0f arm64: dts: qcom: msm8916: Add missing MDSS reset
    9cfc586847fa ACPI: debug: fix signedness issues in read/write helpers
    debf3c347330 ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    1ae9cdd6b479 ACPI: property: Fix buffer properties extraction for subnodes
    b6e9645be9eb bpf: Avoid RCU context warning when unpinning htab with internal structs
    c14f73ecc365 gpio: wcd934x: mark the GPIO controller as sleeping
    380c23baf030 tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    436cfdbc57d9 cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
    a133e2699f8e smb: client: fix missing timestamp updates after utime(2)
    f37e7860dc5e crypto: essiv - Check ssize for decryption and in-place encryption
    46362cdd9df6 bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    0028e0134c64 netfilter: nft_objref: validate objref and objrefmap expressions
    df0ffc4b51e9 netfilter: nf_tables: drop unused 3rd argument from validate callback ops
    71fe3c3381de drm/amd/display: Properly disable scaling on DCE6
    914b1f47fb6a drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    9973e4ee0e93 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    0e69ecbbd562 drm/amdgpu: Add additional DCE6 SCL registers
    b6bfe44b6dbb bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    d3f97bef535e mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    c6cdac3cb34f mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    8078f8570e86 tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
    5e51bb7ffca1 perf python: split Clang options when invoking Popen
    44f838a60551 tools build: Align warning options with perf
    988519923e33 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    422c1c173c39 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    c21f45cfa4a9 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    77e402b0af5e drm/vmwgfx: Fix copy-paste typo in validation
    867bda5d95d3 drm/vmwgfx: Fix Use-after-free in validation
    299cfb5a7dea drm/vmwgfx: Fix a null-ptr access in the cursor snooper
    2646a49e6286 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    e9aff0d0b173 LoongArch: Init acpi_gbl_use_global_lock to false
    d243aaafddea LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
    2d02309c2f05 ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
    3c90f583d679 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    949545ef80f7 cpufreq: tegra186: Set target frequency for all cpus in policy
    d497fef5b957 clk: tegra: do not overallocate memory for bpmp clocks
    58f9a3f0acf9 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    586211feb242 clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    5c2213b9aa44 clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
    9ea18c668db0 clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
    fbfd0ae59013 perf evsel: Ensure the fallback message is always written to
    4a1f44e54664 perf tools: Add fallback for exclude_guest
    f6b458071302 perf test: Add a test for default perf stat command
    4163822f8c03 perf test: Don't leak workload gopipe in PERF_RECORD_*
    1501f779e794 perf session: Fix handling when buffer exceeds 2 GiB
    398657434c61 perf arm_spe: Correct memory level for remote access
    6f6ab20a6a3d perf arm-spe: Rename the common data source encoding
    ec2cc8ed15fd perf arm_spe: Correct setting remote access
    3966ea7d5405 rtc: optee: fix memory leak on driver removal
    0decf468c71e rtc: x1205: Fix Xicor X1205 vendor prefix
    41eac6ed9e2a perf util: Fix compression checks returning -1 as bool
    64419ecff19f clk: at91: peripheral: fix return value
    afa0b258e073 libperf event: Ensure tracing data is multiple of 8 sized
    52571a05bcd2 perf evsel: Avoid container_of on a NULL leader
    fdd428149a88 asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
    ed30811fbed4 media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
    8ea08bcab31d iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    cc1216f33ad4 clocksource/drivers/clps711x: Fix resource leaks in error paths
    9f13f727bed6 fscontext: do not consume log entries when returning -EMSGSIZE
    bc7372c05a07 fs: always return zero on success from replace_fd()

(From OE-Core rev: 7f47c7812a2e08dce8c9a379b540fa5ed37ecfd4)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
40a0b2c80d linux-yocto/6.6: update to v6.6.112
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0bbbd97a442d Linux 6.6.112
    acad20578817 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    5c25a2a403b3 arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
    540aaab034b5 usb: typec: tipd: Clear interrupts first
    724a9db84188 net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    78e87b8a3cf8 bus: fsl-mc: Check return value of platform_get_resource()
    1a2ea887a5cd pinctrl: check the return value of pinmux_ops::get_function_name()
    66821fdb723d remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
    81cec07d3031 sunrpc: fix null pointer dereference on zero-length checksum
    fd8a23ecbc60 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    bbd8f90c3bf4 Input: atmel_mxt_ts - allow reset GPIO to sleep
    d7513b47082c misc: fastrpc: Skip reference for DMA handles
    3ad42dc66445 misc: fastrpc: fix possible map leak in fastrpc_put_args
    6e0d6cc39f41 misc: fastrpc: Fix fastrpc_map_lookup operation
    b808a3590c28 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    964598e6f70a mm: hugetlb: avoid soft lockup when mprotect to large memory area
    c6effaab2427 ext4: fix checks for orphan inodes
    c6b15a82a56c ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    7eca645917bc LoongArch: Automatically disable kaslr if boot from kexec_file
    846cafc4725c dm: fix NULL pointer dereference in __dm_suspend()
    ed6877417298 dm: fix queue start/stop imbalance under suspend/load/resume races
    2647603d42d9 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    6c21c4a425d3 mfd: rz-mtu3: Fix MTU5 NFCR register offset
    0ba68bea1e35 net: nfc: nci: Add parameter validation for packet data
    a70dcfa8d0a0 fs: udf: fix OOB read in lengthAllocDescs handling
    28d0e8af8c0a ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
    e04aa0b00107 ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    2af39ab5e6dc uio_hv_generic: Let userspace take care of interrupt mask
    c28b0ca029ed Squashfs: fix uninit-value in squashfs_get_parent
    3bce44b34404 bpf: Reject negative offsets for ALU ops
    78dc7362662f vhost: vringh: Modify the return value check
    aa57822ade41 Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    ba905a567105 smb: client: fix crypto buffers in non-linear memory
    3311f0d15bb3 net/mlx5: fw reset, add reset timeout work
    3df251a65b4e net/mlx5: pagealloc: Fix reclaim race during command interface teardown
    dda27f370cde net/mlx5: Stop polling for command response if interface goes down
    ea87151df398 net: dlink: handle copy_thresh allocation failure
    5e627ae572b2 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    07a92ab8b479 nfp: fix RSS hash key size when RSS is not supported
    75287554a92e mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
    53683b4d3740 drivers/base/node: fix double free in register_one_node()
    7e76fe9dfadb ocfs2: fix double free in user_cluster_connect()
    f4238064379a hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    96ca6913042e KEYS: X.509: Fix Basic Constraints CA flag parsing
    2ef583b45fe7 Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
    8fd355f54a62 Bluetooth: ISO: don't leak skb in ISO_CONT RX
    5319145a07d8 Bluetooth: ISO: Fix possible UAF on iso_conn_free
    868196cc8ba8 Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    781226e11d5b vhost: vringh: Fix copy_to_iter return value check
    6394bade9daa net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    7c853408ee24 RDMA/siw: Always report immediate post SQ errors
    48edf187fdd4 usb: vhci-hcd: Prevent suspending virtually attached devices
    6459dba4f350 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    8cbe2a21d857 ipvs: Defer ip_vs_ftp unregister during netns cleanup
    0901fa02ccf7 NFSv4.1: fix backchannel max_resp_sz verification check
    9768536f8260 coresight: trbe: Return NULL pointer for allocation failures
    e926dfde8ad1 coresight: etm4x: Support atclk
    4960e17a3543 coresight-etm4x: Conditionally access register TRCEXTINSELR
    db1261fe50ff remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    f321de0b3847 PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
    f22d898e080a wifi: rtw89: avoid circular locking dependency in ser_state_run()
    85288bcf7ffe RDMA/rxe: Fix race in do_task() when draining
    1750f1ec143e crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
    f0e6e7b43511 vfio/pds: replace bitmap_free with vfree
    e7979228b3bd sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    9cbb5ebf409e sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    8cdeb5e482d3 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    dc766c4830a7 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    674ff598148a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    77fe706ff086 wifi: mac80211: fix Rx packet handling when pubsta information is not available
    15bd3f0d0e99 wifi: ath10k: avoid unnecessary wait for service ready message
    12ff1858301e Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    8410e7d65b16 IB/sa: Fix sa_local_svc_timeout_ms read race
    925ff361460b RDMA/core: Resolve MAC of next-hop device without ARP support
    eb976d02c889 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    e0a9a737c9a2 f2fs: fix zero-sized extent for precache extents
    8eb6dacd5c23 scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
    111b64b98874 scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    19a09c909372 scsi: qla2xxx: edif: Fix incorrect sign of error code
    8012e298b968 ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    7d9b97e61350 f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
    83a8e4efea02 f2fs: fix to truncate first page in error path of f2fs_truncate()
    045375172dd4 f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
    ec4a608bca40 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    dac556dd2d44 RDMA/cm: Rate limit destroy CM ID timeout error message
    4a594f5c64bf drivers/base/node: handle error properly in register_one_node()
    d12f4499585a watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    54f4da8629cf ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
    a2e10d05f5c3 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    9170730674cf iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    289cbdb27afb iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
    978aac54e93e fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
    a86c8b9d03f7 fs: ntfs3: Fix integer overflow in run_unpack()
    528807934790 drm/msm/dpu: fix incorrect type for ret
    f197894de2f4 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    29a41bf64226 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    d75a561ba1ea ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    cf71834a0cfc pps: fix warning in pps_register_cdev when register device fail
    b859d612303a misc: genwqe: Fix incorrect cmd field being reported in error
    c36785f9de03 tty: n_gsm: Don't block input queue by waiting MSC
    0924d8563043 usb: gadget: configfs: Correctly set use_os_string at bind
    f0c98b011e01 usb: phy: twl6030: Fix incorrect type for ret
    a7d262359018 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    18897db75121 tcp: fix __tcp_close() to only send RST when required
    8120c4638416 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    1fc4717f5190 wifi: mwifiex: send world regulatory domain to driver
    531a50b2db6d drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
    5e64cc74159c drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
    4e27e18f64a2 drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
    1320d1e834c1 drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
    dd3d6befe7db drm/amd/pm: Fix si_upload_smc_data (v3)
    2f68f6f7cec4 drm/amd/pm: Disable ULV even if unsupported (v3)
    d0e0b2c9a2b7 drm/amdgpu: Power up UVD 3 for FW validation (v2)
    553af70d3d68 coresight: Only register perf symlink for sinks with alloc_buffer
    91e487452d5a inet: ping: check sock_net() in ping_get_port() and ping_lookup()
    3a7802716da2 crypto: hisilicon/qm - check whether the input function and PF are on the same device
    c9035e9ba528 crypto: hisilicon - re-enable address prefetch after device resuming
    94b09b0ac0b8 crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations
    30a4e81edb15 media: st-delta: avoid excessive stack usage
    6e41267d52ec ALSA: lx_core: use int type to store negative error codes
    ca61e32fcf27 RDMA/mlx5: Fix vport loopback forcing for MPV device
    f891dce0d397 media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    f97f08b9351d scsi: myrs: Fix dma_alloc_coherent() error check
    e62251954a12 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    c1a15609eade hwrng: nomadik - add ARM_AMBA dependency
    c5d08ff97cdb crypto: keembay - Add missing check after sg_nents_for_len()
    9c5cfe544a63 drm/amd/display: Remove redundant semicolons
    ef3600c6fec3 serial: max310x: Add error checking in probe()
    ac4d189aaa93 usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
    b0439e3762ac usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    8de227e62a53 phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
    20f744fea1b1 media: zoran: Remove zoran_fh structure
    d2e29c36eb5f drm/bridge: it6505: select REGMAP_I2C
    32270c3a65bd f2fs: fix condition in __allow_reserved_blocks()
    08eb6043c9e5 drm/radeon/r600_cs: clean up of dead code in r600_cs
    9c704b291d5d drm/panel: novatek-nt35560: Fix invalid return value
    08cb3dc9d2b4 bpf: Enforce expected_attach_type for tailcall compatibility
    44045b107a4e i2c: designware: Add disabling clocks when probe fails
    6d621778e378 i2c: designware: Fix clock issue when PM is disabled
    59d467bd07ee i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    a4b5eac932ca thermal/drivers/qcom/lmh: Add missing IRQ includes
    d2e0755412bf thermal/drivers/qcom: Make LMH select QCOM_SCM
    c07e759b3f53 hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
    c38998ed0e88 once: fix race by moving DO_ONCE to separate section
    2158121117c9 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    748bbe2c1673 smp: Fix up and expand the smp_call_function_many() kerneldoc
    cdeafacb4f9f bpf: Explicitly check accesses to bpf_sock_addr
    ec9a5b4f0eee selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    5477b0045056 i3c: master: svc: Recycle unused IBI slot
    20ff7004c9a0 i3c: master: svc: Use manual response for IBI events
    060ecc81240e nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    8963484b7e15 ACPICA: Fix largest possible resource descriptor index
    c3202fce0cea pwm: tiehrpwm: Fix corner case in clock divisor calculation
    6926fc62b777 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    8063e535a5a2 arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
    7e538e84ca7d arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
    2af05a03b1d2 cpuidle: qcom-spm: fix device and OF node leaks at probe
    aa30d3077298 firmware: firmware: meson-sm: fix compile-test default
    4f9e6ff6319d nbd: restrict sockets to TCP and UDP
    37e5190d4bfe arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
    341a1b62a024 null_blk: Fix the description of the cache_size module argument
    70d4e6996a5d pinctrl: renesas: Use int type to store negative error codes
    82b71f330cd0 power: supply: cw2015: Fix a alignment coding style issue
    80eab6a9df7e PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
    585499f17d1d ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
    396ee23da443 ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
    dcc72335190c ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
    96adc664ff27 PM: sleep: core: Clear power.must_resume in noirq suspend error path
    fa2a1c33e081 block: use int to store blk_stack_limits() return value
    12ef6fe2b4ea selftests/nolibc: fix EXPECT_NZ macro
    aac29a895144 regulator: scmi: Use int type to store negative error codes
    5ce4e7a5fe46 arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
    e9d02b09ded8 ARM: at91: pm: fix MCKx restore routine
    06c4826b1d90 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    299cd1f5fdaa pinctrl: meson-gxl: add missing i2c_d pinmux
    3433843693e0 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    5b8ac5689739 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    24a67e7dfd03 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    64db56dc1fe5 leds: flash: leds-qcom-flash: Update torch current clamp setting
    ca782b2a61d6 ARM: dts: renesas: porter: Fix CAN pin group
    5c6246bc147d libbpf: Fix reuse of DEVMAP
    ab8b2403103f bpf: Remove migrate_disable in kprobe_multi_link_prog_run
    7db2f54be7d5 bpf/selftests: Fix test_tcpnotify_user
    c99c6c593ee2 regmap: Remove superfluous check for !config in __regmap_init()
    0401de6d1665 arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
    db82a94b0c10 x86/vdso: Fix output operand size of RDPID
    8100b6c0f908 EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
    a993be82c512 smb: server: fix IRD/ORD negotiation with the client
    379cae2cb982 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    35e5f3759010 coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    239c49a99d63 gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
    69e2a7c30750 selftests: arm64: Check fread return value in exec_target
    00f1726e6412 seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
    9d8b6c9f18e5 init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
    a312ec6d768a filelock: add FL_RECLAIM to show_fl_flags() macro

(From OE-Core rev: af6ac5a200e41b6de6e32b258ccae222948b989b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Dragomir, Daniel
77f60c1165 oeqa/selftest/wic: test recursive dir copy on ext partitions
Extend the wic selftests to cover recursive directory copying
into ext partitions.

Previously, copying a directory into an ext partition could
appear to succeed, but attempting to access the directory
contents would fail with:

  -l: Ext2 inode is not a directory

This was fixed in commit 4fc3b42774 ("wic/engine: fix copying
directories into wic image with ext* partition").

This test now verifies that directories copied with "wic cp"
into an ext4 partition:
  - are created with correct inode types
  - can be listed recursively with "wic ls"
  - preserve files and subdirectories
  - can be copied back out of the image without data loss

A simple directory structure is used in this test:

wic-test-cp-ext-dir/
├── topfile.txt
└── subdir/
    └── subfile.txt

(From OE-Core rev: 1e051c02bc05367d6b911ac9486403029f6f7cd8)

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6de3d2602f4f4a8192d6a6040e89e814187dcf93)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Dragomir, Daniel
6c2a243d6c wic/engine: fix copying directories into wic image with ext* partition
wic uses debugfs to write on ext* partitions, but debugfs can only
write to the current working directory and it cannot copy complete
directory trees. Running 'wic ls' on a copied directory show this:
    -l: Ext2 inode is not a directory

Fix this by creating a command list for debugfs (-f parameter) when
recursive parsing the host directory in order to create a similar
directory structure (mkdir) and copy files (write) on each level
into the destination directory from the wic's ext* partition.

(From OE-Core rev: 67f08884b98576c06db8db01b093ebeee760aba0)

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1ed38aff5f810d064c87aff9cbd310906833b6ba)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
df890007b4 vim: ignore CVE-2025-66476
Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

(From OE-Core rev: f42ed917ab6a4a91d473ef5b2107cdf0f1961c57)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
4ed95c6c7b mobile-broadband-provider-info: upgrade 20240407 -> 20251101
Changelog:
https://gitlab.gnome.org/GNOME/mobile-broadband-provider-info/-/blob/20251101/NEWS?ref_type=tags

(From OE-Core rev: 8bad1af53b6bfcd7f1d602cdb5aeee175734e569)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
[YC: commit 99e2dea3d4328f2aaa6e6e29f5bf4aa38b64b274 upstream]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Peter Marko
4c8f687fe6 libsndfile1: patch CVE-2025-56226
Pick patches from both PRs linked in issue mentioned in NVD report.

(From OE-Core rev: e0ac318128b8f78efddc0b748b1db3e96873c532)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 327546cc0f0bdffcbb4be690ee0b9b469db64842)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
34deee3e52 avahi: patch CVE-2026-24401
Details https://nvd.nist.gov/vuln/detail/CVE-2026-24401

(From OE-Core rev: 030a3fff4b05b785f6ed1a97310b8386628adbf9)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 183d0ee54f1c194e245a7bbf243c19b3c2acf4f5)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Amaury Couderc
49dc4dd983 avahi: patch CVE-2025-68471
(From OE-Core rev: bfd12b872d922116c1a793cd9debb5ee773bfeaf)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5ec4156330c765bc52dbce28dbba6def9868d30f)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Amaury Couderc
0d954471b5 avahi: patch CVE-2025-68468
(From OE-Core rev: 1eebd6d5bd5d930aa8ec68f73789ff0bd742441c)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f2ed8adc37a42b561b3c4853cf8106fba39889e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
a57370d30c avahi: patch CVE-2025-68276
Backport the patch[1] from the PR[2] mentioned in the nvd[3].

[1] 2d48e42d44
[2] https://github.com/avahi/avahi/pull/806
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-68276

Dropped CI changes from the original PR during backport.

(From OE-Core rev: 4da15f7fad8df7ba5fae29bc72156b189e993d58)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Yoann Congal
65c3ebea05 pseudo: Update to include a fix for systems with kernel <5.6
$ git log --oneline --no-decorate  9ab513512d8b5180a430ae4fa738cb531154cdef..43cbd8fb4914328094ccdb4bb827d74b1bac2046
43cbd8f ports/linux: define __NR_openat2 if missing

(From OE-Core rev: fe2666749094e896736ff24d6885419905488723)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e9a35f32b983de724d2c2e436c017b49d5b70469)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Richard Purdie
1d54d1c473 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: a1f4ae4e569bc0e36c27c1e4651e502e54d63b28)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:49 +00:00
Richard Purdie
99047ec235 pseudo: Update to include an openat2 fix
We're seeing occasional autobuilder failures with tar issues related to openat2.
It appears there are definitions missing on debian 11 and opensuse 15.5 systems
which mean the openat2 syscall intercept isn't compiled in. This then triggers
on systems using the openat2 syscall, such as alma9 where it is used in a tar
CVE fix.

This updates to include the fix from upstream pseudo (along with a compile warning
fix).

This was tested by taking sstate for pseudo-native from a debian 11 system and using
it in a build of "bitbake nativesdk-git -c install" on a alma9 system where that task
failed. After this fix, it completes.

(From OE-Core rev: 34b74540ee497e2cc89211d7aa2772097b6fa79b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c20c05b324e5d6564c8554381019170839509bb)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ken Kurematsu
5eddd0f7fc libtheora: set CVE_PRODUCT
In the NVD database, the product name of libtheora is theora.
This was set to ensure that cve-check works correctly.

(From OE-Core rev: e86e50b8c5b16065dcb35ebf4b00eff59c5da78c)

Signed-off-by: Ken Kurematsu <k.kurematsu@nskint.co.jp>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a8ddda60332e2a3219e905c1545b5da917f855c6)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Richard Purdie
4f4691984a pseudo: Update to 1.9.3 release
Pulls in the following changes:

  Makefile.in: Bump version to 1.9.3
  configure: Minor code quality changes
  pseudo: code quality scan - resolved various potential issues
  makewrappers: improve error handling and robustness
  Update COPYRIGHT files
  ports/linux/pseudo_wrappers.c: Call the wrappers where possible
  ports/linux/pseudo_wrappers.c: Workaround compile error on Debian 11
  ports/linux/pseudo_wrappers.c: Reorder the syscall operations
  ports/unix/guts/realpath.c: Fix indents
  pseudo_util.c: Skip realpath like expansion for /proc on Linux
  test/test-proc-pipe.sh: Add test case for proc pipes
  ports/unix/guts/realpath.c: realpath fails if the resolved path doesn't exist

(From OE-Core rev: 7a05347a6418bfb6126e3a601489dc71efb0d2fc)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 524f4bbb11f9c7e0126e8bd46af217b452d48f5e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Khai Dang
d02f35223e docbook-xml-dtd4: fix the fetching failure
Updating SRC_URI, the old archive url is deprecated.

(From OE-Core rev: 65ead4efec955b1b8877ec39eba44ca4da8cfff3)

Signed-off-by: Khai Dang <khai.dang@lge.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c137d3637b6171fbd3bfd671a56096e7f2b3c318)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Fred Bacon
c7084e7f05 lighttpd: Fix trailing slash on files in mod_dirlisting
Fixes [YOCTO #16128]

Backport of upstream bug fix from lighttpd-1.4.75. Version 1.4.74 introduced a bug that
would append a trailing slash to files in a directory listing. When the user attempts to
download one of these files, the web browser could not save the file with a trailing
slash. As a consequence, every web browser tested would generate a random character string
for the saved file name.

(From OE-Core rev: 797f15116901328a9a58868edeea44614dc29043)

Signed-off-by: Fred Bacon <bacon@aerodyne.com>
[Yoann: Fixed Upstream-Status: Backport URL]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Daniel Turull
7ba5e4b416 improve_kernel_cve_report: add script for postprocesing of kernel CVE data
Adding postprocessing script to process data from linux CNA that includes more accurate metadata and it is updated directly by the source.

Example of enhanced CVE from a report from cve-check:

{
  "id": "CVE-2024-26710",
  "status": "Ignored",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-26710",
  "summary": "In the Linux kernel, the following vulnerability [...]",
  "scorev2": "0.0",
  "scorev3": "5.5",
  "scorev4": "0.0",
  "modified": "2025-03-17T15:36:11.620",
  "vector": "LOCAL",
  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "detail": "not-applicable-config",
  "description": "Source code not compiled by config. ['arch/powerpc/include/asm/thread_info.h']"
},

And same from a report generated with vex:
{
  "id": "CVE-2024-26710",
  "status": "Ignored",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-26710",
  "detail": "not-applicable-config",
  "description": "Source code not compiled by config. ['arch/powerpc/include/asm/thread_info.h']"
},

For unpatched CVEs, provide more context in the description:
Tested with 6.12.22 kernel
{
  "id": "CVE-2025-39728",
  "status": "Unpatched",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-39728",
  "summary": "In the Linux kernel, the following vulnerability has been [...],
  "scorev2": "0.0",
  "scorev3": "0.0",
  "scorev4": "0.0",
  "modified": "2025-04-21T14:23:45.950",
  "vector": "UNKNOWN",
  "vectorString": "UNKNOWN",
  "detail": "version-in-range",
  "description": "Needs backporting (fixed from 6.12.23)"
},

CC: Peter Marko <peter.marko@siemens.com>
CC: Marta Rybczynska <rybczynska@gmail.com>
(From OE-Core rev: 7637af0a94764ac0c6c4f02f383992bcb4753af0)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e60b1759c1aea5b8f5317e46608f0a3e782ecf57)
Signed-off-by: Suresh H A <suresh.ha@bmwtechworks.in>

[Yoann: Stable policy exception: This change is clearly a new feature
and thus should be rejected from stables by policy. But, since this is
contrib/ an exception can be made]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Benjamin Robin (Schneider Electric)
9628ed0111 meta/classes: fix missing vardeps for CVE status variables
Several CVE helper functions (get_patched_cves() and decode_cve_status())
implicitly depend on the CVE_STATUS and CVE_CHECK_STATUSMAP variables, but
these were not declared in the vardeps of their callers.

On Scarthgap, the upstream fix (2cc43c72ff28aa39a417dd8d57cd7c8741c0e541)
cannot be cherry-picked cleanly, as it also requires BitBake changes.

As a workaround, explicitly add CVE_STATUS and CVE_CHECK_STATUSMAP to the
vardeps of all tasks invoking these helpers, ensuring correct task
re-execution when CVE status changes.

This keeps CVE-related metadata generation consistent without requiring
BitBake modifications.

(From OE-Core rev: 111e1f2febade3c34649f33676f7f7e7cc8e0bd0)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
af8b964e9b glibc: stable 2.39 branch updates
git log --oneline 58cbbd43fe82910cf8ae9008351b0b0665104500..ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc
ce65d944e3 (HEAD -> release/2.39/master, origin/release/2.39/master) posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)
831f63b94c resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
fb22fd3f5b memalign: reinstate alignment overflow check (CVE-2026-0861)
10c0bcb3d3 support: Exit on consistency check failure in resolv_response_add_name
f47dd22366 support: Fix FILE * leak in check_for_unshare_hints in test-container
4a53354eaf sprof: fix -Wformat warnings on 32-bit hosts
beb8267909 sprof: check pread size and offset for overflow
c07002038f getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]
ae5fb93559 nptl: Optimize trylock for high cache contention workloads (BZ #33704)
efff7cb659 ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)
f6becd8ae8 ppc64le: Restore optimized strncmp for power10
0daa4e46b8 ppc64le: Restore optimized strcmp for power10
28c1de6580 AArch64: Fix instability in AdvSIMD tan
03d0393343 AArch64: Optimise SVE scalar callbacks
0d05a895f1 aarch64: fix includes in SME tests
c1dc4412f8 aarch64: fix cfi directives around __libc_arm_za_disable
d60f15dc89 aarch64: tests for SME
d1d0d09e9e aarch64: clear ZA state of SME before clone and clone3 syscalls
dbe1904b7c aarch64: define macro for calling __libc_arm_za_disable
58cf4aa421 aarch64: update tests for SME
1b3bd9a9a6 aarch64: Disable ZA state of SME in setjmp and sigsetjmp
38942a336b linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)
c74d59a656 aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)
323ad087a1 x86: fix wmemset ifunc stray '!' (bug 33542)

Testing Results:
             Before    After    Diff
PASS         4926      4921     -5
XPASS        4         4         0
FAIL         223       229      +6
XFAIL        16        16        0
UNSUPPORTED  224       224       0

Changes in failed testcases:

testcase-name                                before  after
elf/tst-audit21                              PASS    FAIL
malloc/tst-malloc-too-large                  PASS    FAIL
malloc/tst-malloc-too-large-malloc-check     PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb1  PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb2  PASS    FAIL
malloc/tst-malloc-too-large-mcheck           PASS    FAIL

(From OE-Core rev: a49b898ed6d571391d90cc3ba150a0421642be23)

Signed-off-by: Peter Marko <peter.marko@siemens.com>

[Yoann: When run on the autobuilder, all those new FAIL tests are PASS:
https://valkyrie.yocto.io/pub/non-release/20260209-10/testresults/qemux86-64-tc/testresults.json]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ankur Tyagi
b617f833e5 ffmpeg: ignore CVE-2025-25469
Details https://nvd.nist.gov/vuln/detail/CVE-2025-25469

This vulnerability exists in IAMF (Immersive Audio Model and Formats demuxer)
which was introduced in version 7.0 [1]

$ git tag --contains 4ee05182b7cccfa6928dcb0a45c2b50b7d9ea39b
n7.0
n7.0.1
n7.0.2
n7.0.3
n7.1
n7.1-dev
n7.1.1
n7.1.2
n7.1.3
n7.2-dev
n8.0
n8.0.1
n8.1-dev

[1] 4ee05182b7

(From OE-Core rev: 935bd46fab333a29a8bf4bb511fb55d5d02b3a71)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ankur Tyagi
b8600b66e4 ffmpeg: upgrade 6.1.3 -> 6.1.4
Dropped patches that are part of the upstream version.

Changelog:
34277e12e8:/Changelog

(From OE-Core rev: f9f054faca45a08507b510c8982f170edd6bf83a)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
463172affb zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

(From OE-Core rev: b00a1990237d473971076c4f92a1060911b8b323)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b0592c51b6ad038d737d2f6b30977bd0c5c50058)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Yoann Congal
028444d608 zlib: cleanup CVE_STATUS[CVE-2023-45853]
CVE-2023-45853: Version is now higher than NVD CPE

This is a partial cherry-pick from 73ee9789183a ("recipes: cleanup
CVE_STATUS which are resolved now").

Cc: Peter Marko <peter.marko@siemens.com>
(From OE-Core rev: 2e05844a70f97399e323f967e926075428cb5233)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Het Patel
a2c9f142ed zlib: Add CVE_PRODUCT to exclude false positives
To avoid false positives (such as CVE-2023-6992, cloudflare:zlib), add a
CVE_PRODUCT to identify the vendors that have been used.

Removing the present existing CVE_STATUS for CVE-2023-6992.

(From OE-Core rev: 85427d225416b3b12bf05513c9427370309b2127)

Signed-off-by: Het Patel <hetpat@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 119b775b36dfd51286493763cffb6e965893b8fd)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Adarsh Jagadish Kamini
54e7eb5951 python-urllib3: Backport fix for CVE-2026-21441
Include the patch linked in the NVD report : https://nvd.nist.gov/vuln/detail/CVE-2026-21441
(From OE-Core rev: bf85dff7bf4340a691df3da21f04a651fff11a17)

Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
534b2c966a python3: patch CVE-2025-13837
Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: 37936e0e93ab5c236d8cc8e709ba1faf8380577c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
8d61eb390a libxml2: add follow-up patch for CVE-2026-0992
References:
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
* https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/377

(From OE-Core rev: 2c8e455148e12e097ff757bcf0a57d7d5bd77c30)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
bd21ac68d0 libxml2: patch CVE-2026-0992
Pick patch which closed [1].
Adapt for missing xmlCatalogPrintDebug per [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
[2] 728869809e

(From OE-Core rev: 826dd15a99433c4066d2cd4546515d174d443350)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
57126cdaa7 libxml2: patch CVE-2026-0990
Pick patch which closed [1].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018

(From OE-Core rev: f1bb433bbdb0fa19d7d8cbe15d4180c9d18cca5a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
35fca9ec35 libxml2: patch CVE-2026-0989
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374
[2] https://gitlab.gnome.org/GNOME/libxml2/-/issues/998

(From OE-Core rev: d201a09eee8efca8a889f0b7a60133e850256369)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Hugo SIMELIERE
308c5dd2c9 libtasn1: Fix CVE-2025-13151
Upstream-Status: Backport from d276cc495a

(From OE-Core rev: 3f9f51783597a682efdf989bebac2934b1f7040c)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
005e0f6daf libpng: patch CVE-2026-22801
Pick comit per [1].

[1] https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

(From OE-Core rev: fc0f0ecb694ae3042cff4472c62c78a7389662c6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
f824456616 libpng: patch CVE-2026-22695
Pick commit per [1].
This CVE is regression of fix for CVE-2025-65018.

[1] https://security-tracker.debian.org/tracker/CVE-2026-22695

(From OE-Core rev: cdfeb4e55f856b1020caf58f380d3a1e7eb5cd97)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Vijay Anusuri
2541663fd1 inetutils: Fix CVE-2026-24061
Upstream-Status: Backport from
https://cgit.git.savannah.gnu.org/cgit/inetutils.git/commit/?id=ccba9f748aa8d50a38d7748e2e60362edd6a32cc
& https://cgit.git.savannah.gnu.org/cgit/inetutils.git/commit/?id=fd702c02497b2f398e739e3119bed0b23dd7aa7b

Ref: https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html

(From OE-Core rev: da89012029cb110f6d2768248981ab9c4872d871)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
53dbc9c218 glib-2.0: patch CVE-2026-0988
Pick relevant commit from [2] linked from [1].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3851
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4944

(From OE-Core rev: 9df34167c74267b63d46c354efe9b3874efa062e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
236069b7e0 expat: patch CVE-2026-25210
Pick patches from [1].

[1] https://github.com/libexpat/libexpat/pull/1075

(From OE-Core rev: 97cf4b2341449b34e61a09437e2159b279f9f848)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
46fdae1b0f expat: patch CVE-2026-24515
Pick commits from PR linked in NVD report.

(From OE-Core rev: 7c4fb02b8d8668ec85f5d4ba98db5d69e1e6b712)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Amaury Couderc
cc5e0688c0 curl: patch CVE-2025-14524
(From OE-Core rev: 951113a6e8185969444b5e28292f23434dba1f6c)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Hitendra Prajapati
68f03e2a9f curl: fix CVE-2025-10148
curl's websocket code did not update the 32 bit mask pattern
for each new outgoing frame as the specification says. Instead
it used a fixed mask that persisted and was used throughout
the entire connection.

A predictable mask pattern allows for a malicious server to induce
traffic between the two communicating parties that could be
interpreted by an involved proxy (configured or transparent) as
genuine, real, HTTP traffic with content and thereby poison its
cache. That cached poisoned content could then be served to all
users of that proxy.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-10148

Upstream patch:
https://github.com/curl/curl/commit/84db7a9eae8468c0445b15aa806fa

(From OE-Core rev: 3793ee12d8da4f8f90a0ffcad180ef8122251491)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Zoltan Boszormenyi
be8cc4137c bitbake: knotty: Make sure getTerminalColumns() returns two integers
Python 3.14 complains about these:

Traceback (most recent call last):
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 722, in main
    termfilter.updateFooter()
    ~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 339, in updateFooter
    lines = self.getlines(content)
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 370, in getlines
    lines = lines + 1 + int(len(line) / (self.columns + 1))
                                         ~~~~~~~~~~~~~^~~
TypeError: can only concatenate str (not "int") to str

and

Traceback (most recent call last):
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 722, in main
    termfilter.updateFooter()
    ~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 341, in updateFooter
    for tasknum, task in enumerate(tasks[:(self.rows - 1 - lines)]):
                                           ~~~~~~~~~~^~~
TypeError: unsupported operand type(s) for -: 'str' and 'int'

Make sure getting the number of rows and columns from the terminal
via the environment variables LINES and COLUMNS are returned as a
pair of integers. This matches the return value of ioctl_GWINSZ().

(Bitbake rev: 10118785e4a670bce4980e1044c0888a8b6e84af)

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a4e0b6f8077276a0bfb9d05c759bc752a84d1f76)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Enrico Scholz
c0ba29bb80 bitbake: knotty: fix TIOCGWINSZ call for Python 3.14 and later
Python 3.14 enforces stricter type and size checking for fcntl.ioctl()
buffer arguments. The previous code passed a short 4-byte string ('1234')
to TIOCGWINSZ, which worked by accident in older Python versions but causes
a SystemError ("buffer overflow") in 3.14.

TIOCGWINSZ expects an 8-byte (4x 16-bit) buffer corresponding to
(rows, cols, xpix, ypix). Use an 8-byte bytes literal instead and unpack
the first two values.

Tested with Python 3.11, 3.13, and 3.14.

(Bitbake rev: 9127359eb116827a1e0debe69f84e57717436847)

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 415e9e329cf8cc0c2caa01cba80c21cfac9e2414)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Lee Chee Yang
727b18ba30 migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 369f3307368eaea605983e80047377fd19ebd6bf)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
8c8141abd8 dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: 2d765587de2a2f3383a400d9bdecf64d9b182af9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
5cd6c94c3f dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: e5aaccf54494978bc8c24b4920dad7135837edb7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
476bdedb21 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 11fe7dbc49a8062cda8062d320dcb2be70a3b6f3)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Lee Chee Yang
ceb46cce4b migration-guides: add release notes for 5.0.15
(From yocto-docs rev: 7e89c8b93f07a3a2fa50448121a6f64b1aae65f0)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6256a73d71346275f06970c6b1be9df0dd59bc21)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
5e1f0f620d sdk-manual: appendix-obtain: fix default path for eSDK installer script
The eSDK installer script installs in poky_sdk directory but under the
user's home directory so let's make that explicit.

(From yocto-docs rev: 9811bee2e33002b449d073a3f3be1889e249ee2a)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 52ec12522bad3bbdff937f1c66224aa9b2d299cd)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
0ad5299bcd sdk-manual: using: fix SDK filename example
I'm pretty sure we meant to use the DISTRO poky.yaml.in placeholder
which can only be replaced when surrounding by & and ; characters.
Therefore let's fix this oversight.

Also, the example isn't actually pointing at the snapshot, but the
actual release, so let's reword that as well so it matches the example.
I decided to do that instead of adding +snapshot to the filename because
the example in the next section is actually using that same filename so
for consistency it seemed more appropriate.

(From yocto-docs rev: 27f259434f5bc3914d2c2b74961d744f7bffbcdc)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit ede411d70ffc837e5bea4666da9706e67960b0f2)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
10ce846e13 sdk-manual: appendix-obtain: use parsed-literal block for naming convention of the installer scripts
It's easier on the eye to use a parsed-literal block for highlighting
things that must be changed than simply stating the word, so this makes
use of a parsed-literal block instead of a simple inline code-block and
also highlight in italic which words are placeholders.

Also make the explanation below the literal-block use the same
highlighting (italic).

(From yocto-docs rev: 648b3c3e80a3916917763e3892a5e8c8d8a72162)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 41ee642c33cc2e7435e6037bf49fe7495ffa6133)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
917f8442ab sdk-manual: delete sdk-title PNG
It hasn't been used since the migration to Sphinx so let's remove it.

(From yocto-docs rev: 5ad326e61cf9f1d5fb8718dcf4e5f693bd3c4c28)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit ffaea8391b3d78c2ccf964474e03c50a1c043c6c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
23abcf73f7 sdk-manual: replace sdk-environment PNG with SVG
This replaces the PNG figure with an SVG.

(From yocto-docs rev: 2b14e4d9646b6be25876865def28c07334194874)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 39fb148792cd6b8e567a496bdbe63a50759eef36)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
2d42466d9d sdk-manual: appendix-obtain: replace eSDK directory structure PNG with a parsed-literal block
This PNG is totally unnecessary and makes accessibility much worse, so
let's simply replace the PNG with a parsed-literal block showing the
same directory layout with the same highlighted placeholders.

While at it, update the layout to match the more recent one (5.0.15) and
have it alphabetically sorted (mixed files and directories).

The placeholders are highlighted the same way inside and outside the
parsed-literal block for consistency.

(From yocto-docs rev: 923a35a87f72af7a678bb942186cef1cc81e1ab9)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77b24b4a8d437797ab25dfeb37ae5cd911c52d31)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
6ab741ee86 sdk-manual: appendix-obtain: replace directory structure PNG with a parsed-literal block
This PNG is totally unnecessary and makes accessibility much worse, so
let's simply replace the PNG with a parsed-literal block showing the
same directory layout with the same highlighted placeholders.

While at it, update the layout to match the more recent one (5.0.15) and
have it alphabetically sorted (mixed files and directories).

The placeholders are highlighted the same way inside and outside the
parsed-literal block for consistency.

(From yocto-docs rev: 56355f9dacc9b5cdfa6ad86d6c07dcb0511bc394)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0c68497ec5f6525483e5a98e15db24f651bf28ba)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
bd4027365a sdk-manual: appending-customizing: use none lexer for BitBake code blocks
No lexer exists for BitBake right now, so let's simply disable the lexer
entirely by using the "none" lexer.

I'm using "none" instead of "text" to be able to "easily" replace none
code blocks the day a BitBake lexer exists. I "reserve" "text" for
actual text content (e.g. a filename, or the output of a command line
without the command line).

(From yocto-docs rev: 27d3921725b71a3346a6b76c7de4c11ebbced01c)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d682bce63cdc5aad9c2d3b932a6ba2d27ecfe107)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
a9615a2335 sdk-manual: working-projects: properly highlight code code-blocks
There are some blocks containing C code so highlight them as C with the
"c" lexer.

For autotool'ed files, there's no lexer available so "none" will do just
fine.

Finally, there's one Makefile code block so highlight it with the
"makefile" lexer.

(From yocto-docs rev: 6c3802113231393ff02d8ac96418f59cfc4c0124)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 10d40604cb4affb17dda2253f82a2422d5a9bcf6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
aadcf56af2 sdk-manual: fix improper indent of general form of tarball installer scripts
poky-glibc-host_system-image_type-arch-toolchain-ext-release_version.sh
is in a code-block and thus requires to be indented (it is). Sphinx
knows a block has ended when the indentation of the next line is smaller
than in the block, otherwise it's all in the same block.

The explanation of the replaceable parts in the tarball installer script
filename should be text and not part of the block, so let's do that.

While at it, reformat by putting each replaceable part in a bullet list,
highlight the replaceable part or what it can replaced with as well as
putting the replacement on the same line instead of making it a quote by
having them indented in the bullet list.

Finally, replace the literal block (::) with a parsed-literal block so
we can highlight the placeholders appropriately.

(From yocto-docs rev: 0f0ce9012349f4bb18a0c209b77b45a125f2d387)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 04c883216158edafe6a4c4ddfb38f63ffb5d5c24)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
3056341eb5 sdk-manual: fix incorrect highlight language for console code-blocks
When unspecified in conf.py via the highlight_language variable (and
highlight variable for code-blocks), the lexer used for literal blocks
is "default" which tries to highlight the block as Python code.

These blocks aren't Python but simple command lines prefixed by a
prompt so let's use the "console" lexer to properly highlight.

(From yocto-docs rev: cb27e3264bcfdeec20d590dfff5cba99051d825e)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c6039ce11d638a0b64844480e51d126fcda304b4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Quentin Schulz
d38081ece2 sdk-manual: fix incorrect highlight language for text code-blocks
When unspecified in conf.py via the highlight_language variable (and
highlight variable for code-blocks), the lexer used for literal blocks
is "default" which tries to highlight the block as Python code.

These blocks aren't Python but either simply the console output or a
file name (which we should probably just double tick-quote instead), so
let's render those blocks with the "text" lexer.

(From yocto-docs rev: ff5a0859620327e4eada0082b20ad62b032d8d5f)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 72354c27000aba3ae583894ff6112a1a017e33d5)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-10 13:11:48 +00:00
Richard Purdie
3534914790 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: d50e4680ed6f930582d907b37c9ed545a89f5c27)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:55 +00:00
Richard Purdie
fb693aab03 pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'
The pseudo update was causing hangs in builds, pull in the fix.

(From OE-Core rev: a845c75096c381f45c13451b1baedc7774e4eff2)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8acdbefd0a148c8b7713f46066ae8489984c5d2d)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Richard Purdie
3bcac51eb2 pseudo: Update to pull in openat2 and efault return code changes
Pulls in the following fixes:

 * makewrappers: Enable a new efault option
 * ports/linux/openat2: Add dummy wrapper
 * test-syscall: Add a syscall test
 * ports/linux/pseudo_wrappers: Avoid openat2 usage via syscall

which should fix issues with the tar CVE fix on Centos/Alma/Rocky 9 distros
that uses openat2 as well as the efault issue breaking rust based uutils.

(From OE-Core rev: a872357343b29530d05823368cfc8863a798412d)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 51f1388dd1679a28ec3ca468cf16aa0ea32bccf9)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Paul Barker
bf7d623729 pseudo: Add hard sstate dependencies for pseudo-native
Where a task (such as do_package) runs under fakeroot, the corresponding
setscene task (do_package_setscene) will also run under fakeroot when
restoring from sstate. Assuming pseudo is used as the fakeroot
implementation, we need pseudo-native and all its runtime dependencies
to be available in the sysroot before running any setscene tasks under
fakeroot.

We already add a hard dependency from all do_package_setscene tasks to
virtual/fakeroot-native:do_populate_sysroot in base.bbclass, but this
does not cover transitive dependencies. So, extend the dependencies of
pseudo-native:do_populate_sysroot_setscene to ensure that the sqlite3
library is also available in the sysroot before running fakeroot
setscene tasks.

[YOCTO #15963]

(From OE-Core rev: c73e9513f26cd9e073fc2eb0a67378ad7864d677)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c146ca657440550e00bc5e53d13502ef7aa945b)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Richard Purdie
e380eea705 pseudo: Update to pull in memleak fix
(From OE-Core rev: b6e48eac4b61d66b240b80f35b1d97752e814d15)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 42137b6f97da0672af365cd841678f39ce5907d2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Robert Yang
e6cbef9080 pseudo: 1.9.0 -> 1.9.2
(From OE-Core rev: 89256d7c891c0053028a4d8679ccebc24f36577c)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a42747fd280ce68283e1491971d22273e3bdf2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Richard Purdie
80593d0ce1 pseudo: Upgrade to version 1.9.1
This brings in:
 * nftw, nftw64: add wrapper
 * ftw, nftw, ftw64, nftw64: add tests
 * Move ftw and ftw64 to calling ntfw and nftw64
 * makewrappers: Introduce 'array' support
 * pseudo_util.c: Avoid warning when we intentionally discard const
 * pseudo_client.c: Fix warning
 * yocto-older-glibc-symbols.path: Add as a reference patch
 * pseudo/pseudo_client: Add wrapper functions to operate correctly with glibc 2.38 onwards
 * configure: Prune PIE flags
 * test/test-parallel-rename.sh: Add parallel rename test
 * test/test-parallel-symlinks.sh: Add parallel symlink test
 * ports/linux/guts: Add .gitignore to ignore generated files

(From OE-Core rev: a019d270cd6f41c751e685f36581c00e65287b9d)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 994e508b2a0ede8b5cc4fe39444cf25dc9a53faf)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
4581b795c6 curl: patch CVE-2025-15224
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15224.html

(From OE-Core rev: 83c7d4acc5da661b44055db95355c3c420f7afac)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
41c8c7c5c5 curl: patch CVE-2025-15079
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15079.html

(From OE-Core rev: 48a162d90daada0f992e665696f7f2e738780af1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
ea774774ef curl: patch CVE-2025-14819
Pick patch per [1].

Additionally pick commit with definition of CURL_UNCONST to make the
cherry-pick possible without build errors.
It will be probably needed also by further CVE patches.

[1] https://curl.se/docs/CVE-2025-14819.html

(From OE-Core rev: 3a8e5ae08380ca201df950546dd5f02f9bbe1237)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
7a394819a8 curl: patch CVE-2025-14017
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-14017.html

(From OE-Core rev: 2284de47317ada818f916be65abf13969294541c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
b6ea3460e5 libarchive: fix CVE-2025-60753 regression
Pick patch from PR mentioned in v3.8.5 release notes.

(From OE-Core rev: c316c6e50e73a681c22fa03cdb59a0317495a418)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
8df07c5662 cups: allow unknown directives in conf files
Patch for CVE-2025-61915 by mistake causes fatal error on unknown
directives in configuration files.
The default configuration already contains unknown directive in
non-systemd setups:
Unknown directive IdleExitTimeout on line 32 of /etc/cups/cupsd.conf

Backport fix for this from 2.4.x branch which reverts this behavior.

(From OE-Core rev: 2f36a12a72cf1f91a2d6ee68bd04292979608eb9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
bfe84d74fe libpcap: patch CVE-2025-11964
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11964

(From OE-Core rev: 64c2af571190f7c2b3bb5c53517f0cbcb5dddd6e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
5941c9425f libpcap: patch CVE-2025-11961
Pick patch per [1].
Also pick additional preparation patch to apply it cleanly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11961

(From OE-Core rev: f28be1d360056949a56c62c7d5ce98d15ca8b7d5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:39 +00:00
Peter Marko
38071ff688 dropbear: patch CVE-2019-6111
Pick patch mentioning this CVE number.

(From OE-Core rev: 8fa0c278c269ed1ef0225cf22a86d0b36632058e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
6b53fa118e glib-2.0: patch CVE-2025-14512
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4935
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3845

(From OE-Core rev: 9a526a195241dff60707b99b46d1d43f2f5ad2fd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
6e462f0df2 glib-2.0: patch CVE-2025-14087
Pick commits from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4933
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3834

(From OE-Core rev: f477d209a56a4f382636d49fd5cfba3e8169f7f0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
d77b73fd3f glib-2.0: patch CVE-2025-13601
Pick commits from [1] per [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-13601

(From OE-Core rev: 5744d66b8f2f0ee8ed963bb3e6d93a9a167070e3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
47124f2fda qemu: ignore CVE-2025-54566 and CVE-2025-54567
These CVEs are not applicable to version 8.2.x as the vulnerable code
was introduced inly in 10.0.0.

Debian made the analysis, reuse their work.
* https://security-tracker.debian.org/tracker/CVE-2025-54566
* https://security-tracker.debian.org/tracker/CVE-2025-54567

(From OE-Core rev: 77533b3dbd9cb82d6fad3c3d07872913a2991627)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
6152ee6778 util-linux: patch CVE-2025-14104
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-14104

(From OE-Core rev: 0dee49ec49c341235863ec75fc80619e70dfd836)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
2104407814 python3: patch CVE-2025-13836
Pick commit from branch 3.12 mentioned in [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-13836

(From OE-Core rev: 05aa143fb5f63de0f53e916daa3392917da46131)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Peter Marko
5ae239f8ea python3: patch CVE-2025-12084
Pick patch from 3.12 branch according to [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-12084

(From OE-Core rev: c3ed0dfa3a7b8716008968b0d7f80885b2f61a84)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:45:38 +00:00
Antonin Godard
8c2c3b114e contributor-guide/recipe-style-guide.rst: explain difference between layer and recipe license(s)
Explain that the LICENSE set in a recipe does not apply to the recipe
file itself, but to the underlying software. The license of the recipe
file is the license provided in the layer itself. Give OpenEmbedded-Core
as an example for this.

Fixes [YOCTO #14410]

(From yocto-docs rev: 9d586f22b04528a12e71ee4fa794d8130320515b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b8a56b8b2e8c0417b2f7204f80c79b05d95e9ce4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
f82d22f0ca ref-manual/variables.rst: document the CCACHE_TOP_DIR variable
Added by commit 35d7fe73bba1 ("ccache.bbclass: Make it can be shared
between different builds") in OE-Core.

Fixes [YOCTO #16052]

(From yocto-docs rev: 32818c927bde8014e855b10b1d78d3f09beec024)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 550ef8340b550f8d4e9c3d0672190dc09592c621)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
c8e301569e overview-manual: convert YP-flow-diagram.png to SVG
Based on diagrams/poky-buildprocess/Pokyarch_diag.svg, replace the PNG
graphic for the YP flow to an SVG graphic.

(From yocto-docs rev: ae424ae6d382b83312fa401122bb81e6ad49cf73)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d2aaf54bee49295bdf81021648cb27499930edc6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
0cd11a8cd4 overview-manual/yp-intro.rst: fix SDK type in bullet list
The YP generates an SDK by default, which can be meta-toolchain, an
image-specific one, or an extensible SDK (eSDK). Don't be specific in
this bullet list.

(From yocto-docs rev: 0f4df623bff6c3c46b4649b8237dd0e417e0f86f)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f02c64286504353e97c7e5fe5c0d193776469ad1)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
0da3cd0ae6 ref-manual/release-process.rst: add a "Development Cycle" section
Add a new section to release-process.rst to document the development
cycle of each release and namely the milestones and feature freeze
occuring after M3.

Fixes [YOCTO #15979]

(From yocto-docs rev: 1cc5321c162ce36079d661ea1d35c2694c20ed9b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77c04cc5944acda7575546a7434e014e4a75ba58)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
41ab4d1168 test-manual/ptest.rst: detail the exit code and output requirements
A ptest must emit at least one test result on the console, as this is
required by the testimage class (which ignores the exit code).
ptest-runner on the other hand, ignore the output and only cares about
the exit code.

Add these two items as requirements for a ptest to be valid.

Fixes [YOCTO #15832]

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 35ee82bca41b83b39131cfa88ddbb2d472418d00)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9292f61d7ba89598c89033ea7ee3b11a20d873f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:31 +00:00
Antonin Godard
71615e330c ref-manual/classes.rst: document the image-container class
Add documentation for the image-container class, which is a simple class
to generate an image suitable for creating a container.

This answers in part to questions asked in [YOCTO #14368].

It also adds documentation for IMAGE_CONTAINER_NO_DUMMY, which was added
in OE-Core with commit f0645e172bb8 ("image-container.bbclass: Error if
not using linux-dummy").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 85fb6e4a964ea2dea9c3083ba2c4ceb336f34b1a)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6ce00e5875eb3469fefd55cc22acaaeaf620053a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
9b6d0d6e5a Add a new "Security" section
The current security-related documentation is a bit hard to find and
hidden within the development manual. However these are processes that
are not part of a development task but is rather a vulnerability
reporting process.

Create a new "Security" section in the documentation to gather this
information. This will be directly visible in the sidebar when opening
the documentation.

Split the previous security-subjects.rst document into 2 documents:

- security-team.rst: defines the roles of the security teams and its
  members.

- reporting-vulnerabilities.rst: guide to report vulnerabilities to the
  security team.

The plan is to backport these documents to active releases. As a
consequence, this section should be free of instructions and information
that only make sense for a specific release. It should _not_ contain
documents on how to enable security features with Yocto on target
devices, this is unrelated and can be left in the development manual
(for example: dev-manual/vulnerabilities.rst to deal with CVEs).

(From yocto-docs rev: 80556704f8b60b5bf903da497909cfda7dd1b28b)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 81e14ca2d5cff9e2104c556655144b069633790c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
495e1c2ed0 Makefile: fix rsvg-convert --format capitalization
On some versions of rsvg-convert, capitalized formats are unknown.

For example on CentOS Stream 9:

  $ rsvg-convert --format=Png --output=ref-manual/svg/releases.png ref-manual/svg/releases.svg
  Unknown output format.

While the same command with "png" runs fine.

On Ubuntu 22.04, both are accepted.

Switch to the un-capitalized options, compatible with all versions.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 8e3e562179d47553268970f49a98817abfb32df6)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit cb60df269ef6329372f2676ab705134bbf2490eb)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
d4eb015d2b contributor-guide/submit-changes.rst: remove mention of Upstream-Status
The Upstream-Status tag is not used for patches sent on mailing lists,
but for patches to be applied to recipes. To avoid confusion in this
Contributor Guide, remove the mention of this tag as part of the
Patchtest examples as it can be misinterpreted as something to include
in a regular patch.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: fe77998ea1ee29e162feaf32b46a0dc0a375b548)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 23098728b57520d1d8e417500009279226ce8080)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
f6f1819f02 ref-manual/svg/releases.svg: mark whinlatter as current release
Whinlatter is the new current Yocto Project release, mark it as an
active one. Move it as released in December 2025.

(From yocto-docs rev: b0ae6483dd916eea3d144466e597a8e86187d9f7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6f8e97c6e529f3c47f45f34d9e04e3ad7bddd587)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
a87dd6bce4 ref-manual/svg/releases.svg: mark styhead and walnascar EOL
Walnascar has stopped being updated a while ago, and Styhead is EOL
since May 2025.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 71b03c21dc9d8a9fd0b5cc92808a7944f6c7fe28)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 834de77b543de43ee3c1c12ca1d6277e67e126de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
f4ef261ff1 overview-manual/yp-intro.rst: link to YP members and participants
Instead of a fixed list of commercial vendors, link to existing lists on
the YP website.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 924405ec43c8edc941200c281b20beac99098d13)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9d394db4f88b66500e4d5a2a518d25f08a0c9472)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
47d5eff3e1 overview-manual/yp-intro.rst: change removed ECOSYSTEM to ABOUT
The ABOUT tab is where the members/participants are listed now.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: c1d32e61bf3c5518a9e4f1da5b25369e1b15b983)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a8a8d810f0505529aaaa90678e03152c8ac0c00b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Antonin Godard
8c85aee61c dev-manual/temporary-source-code.rst: fix definition of WORKDIR
Fix the definition of WORKDIR to match OE-Core.
Rename the Source Directory to "project" as part of the transition to
bitbake-setup and the removal of Poky as in "the Poky repository".

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: c1db422b9cba0bc475295bf1c2d72bcb2a6beed9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9cb0e8a94590563491e210b403519ccfbde866e9)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Lee Chee Yang
2935492192 migration-guides: add release notes for 5.0.14
(From yocto-docs rev: d316352e3b695d213535d7f43811ba40c7a63756)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 79e597aa45c4b171c8340d48803fa9987926851e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:41:30 +00:00
Steve Sakoman
72983ac391 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 6988157ad983978ffd6b12bcefedd4deaffdbbd1)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 07:00:05 -08:00
Steve Sakoman
828c9d09b4 poky.conf: bump version for 5.0.15
(From meta-yocto rev: 9bb6e6e8b016a0c9dfe290369a6ed91ef4020535)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Vijay Anusuri
795103a538 go: Fix CVE-2025-61729
Upstream-Status: Backport from 3a842bd5c6

(From OE-Core rev: 2d6d68e46a430a1dbba7bd8b7d37ff56f4f5a0e6)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Vijay Anusuri
d3c87dc830 go: Fix CVE-2025-61727
Upstream-Status: Backport from 04db77a423

(From OE-Core rev: 647e151485bd10a8bbbdbae4825791723c9a5d8e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Vijay Anusuri
a5cecb013b go: Update CVE-2025-58187
Upstream-Status: Backport from ca6a5545ba

(From OE-Core rev: 2d6b089de3ef5e062d852eb93e3ff16997e796ef)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Changqing Li
a4841fb5a2 libsoup: fix CVE-2025-12105
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/481

(From OE-Core rev: 1ac9ad3faf022684ae709f4494a430aee5fb9906)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Jiaying Song
17a65b334d grub: fix CVE-2025-54770 CVE-2025-61661 CVE-2025-61662 CVE-2025-61663 CVE-2025-61664
References:
https://nvd.nist.gov/vuln/detail/CVE-2025-54770
https://nvd.nist.gov/vuln/detail/CVE-2025-61661
https://nvd.nist.gov/vuln/detail/CVE-2025-61662
https://nvd.nist.gov/vuln/detail/CVE-2025-61663
https://nvd.nist.gov/vuln/detail/CVE-2025-61664

(From OE-Core rev: c28fa3e6421257f50d4ae283cca28fadb621f831)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2026-01-02 06:56:54 -08:00
Martin Jansa
52ba7ab020 cross.bbclass: Propagate dependencies to outhash
Similar to what native and staging is doing since:
https://git.openembedded.org/openembedded-core/commit/meta/classes/native.bbclass?id=d6c7b9f4f0e61fa6546d3644e27abe3e96f597e2
https://git.openembedded.org/openembedded-core/commit/meta/classes/staging.bbclass?id=1cf62882bbac543960e4815d117ffce0e53bda07

Cross task outputs can call native dependencies and even when cross
recipe output doesn't change it might produce different results when
the called native dependency is changed, e.g. clang-cross-${TARGET_ARCH}
contains symlink to clang binary from clang-native, but when clang-native
outhash is changed, clang-cross-${TARGET_ARCH} will still be considered
equivalent and target recipes aren't rebuilt with new clang binary, see
work around in https://github.com/kraj/meta-clang/pull/1140 to make target
recipes to depend directly not only on clang-cross-${TARGET_ARCH} but
clang-native as well.

I have added a small testcase in meta-selftest which demostrates this issue.
Not included in this change, but will send it if useful.

openembedded-core $ ls -1 meta-selftest/recipes-devtools/hashequiv-test/
print-datetime-link-cross.bb
print-datetime-link-native.bb
print-datetime-native.bb
print-datetime-usecross.bb
print-datetime-usenative.bb

print-datetime-native provides script which prints defined PRINT_DATETIME variable.

print-datetime-link-native and print-datetime-link-cross both provide a symlink to
the script from print-datetime-native.

print-datetime-usenative and print-datetime-usecross are target recipes using the
native and cross versions of print-datetime-link-* recipe.

  # clean build all is rebuilt:
  $ bitbake -k print-datetime-usenative print-datetime-usecross
  WARNING: print-datetime-native-1.0-r0 do_install: print-datetime-native current DATETIME in script is 2025-11-13_20_05
  WARNING: print-datetime-link-native-1.0-r0 do_install: print-datetime-link-native current DATETIME in symlink is 2025-11-13_20_05
  WARNING: print-datetime-link-cross-x86_64-1.0-r0 do_install: print-datetime-link-cross-x86_64 current DATETIME in symlink is 2025-11-13_20_05
  WARNING: print-datetime-usenative-1.0-r0 do_install: print-datetime-usenative current DATETIME from print-datetime-link is 2025-11-13_20_05
  WARNING: print-datetime-usecross-1.0-r0 do_install: print-datetime-usecross current DATETIME from print-datetime-link is 2025-11-13_20_05

  # keep sstate-cache and hashserv.db:
  # print-datetime-usenative is correctly rebuilt, because print-datetime-link-native has different hash (because print-datetime-native hash changed)
  # print-datetime-usecross wasn't rebuilt, because print-datetime-link-cross-x86_64 doesn't include the changed hash of print-datetime-native
  $ bitbake -k print-datetime-usenative print-datetime-usecross
  WARNING: print-datetime-native-1.0-r0 do_install: print-datetime-native current DATETIME in script is 2025-11-13_20_07
  WARNING: print-datetime-link-native-1.0-r0 do_install: print-datetime-link-native current DATETIME in symlink is 2025-11-13_20_07
  WARNING: print-datetime-link-cross-x86_64-1.0-r0 do_install: print-datetime-link-cross-x86_64 current DATETIME in symlink is 2025-11-13_20_07
  WARNING: print-datetime-usenative-1.0-r0 do_install: print-datetime-usenative current DATETIME from print-datetime-link is 2025-11-13_20_07

It's because print-datetime-link-cross-x86_64 depsig doesn't include print-datetime-native signature:

$ cat tmp/work/x86_64-linux/print-datetime-link-cross-x86_64/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
SSTATE_PKGSPEC=sstate:print-datetime-link-cross-x86_64:x86_64-oe-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   32 19fbeb373f781c2504453c1ca04dab018a7bc8388c87f4bbc59589df31523d07 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-cross-x86_64
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
drwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux/print-datetime-link -> ../print-datetime

While print-datetime-link-native doesn't have this issue, because print-datetime-native signature is there:

$ cat tmp/work/x86_64-linux/print-datetime-link-native/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
print-datetime-native: 60f2734a63d708489570ca719413b4662f8368abc9f4760a279a0a5481e4a17b
quilt-native: 65d78a7a5b5cbbf0969798efe558ca28e7ef058f4232fcff266912d16f67a8b8
SSTATE_PKGSPEC=sstate:print-datetime-link-native:x86_64-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   26 3d5458be834b2d0e4c65466b9b877d6028ae2210a56399284a23144818666f10 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-native
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/print-datetime-link -> print-datetime

With the cross.bbclass fix the link-cross recipe has a checksum from native recipe as well:

$ cat tmp/work/x86_64-linux/print-datetime-link-cross-x86_64/1.0/temp/depsig.do_populate_sysroot
OEOuthashBasic
18
print-datetime-native: 9ceb6c27342eae6b8da86c84685af38fb8927ccc19979aae75b8b1e444b11c5c
quilt-native: 65d78a7a5b5cbbf0969798efe558ca28e7ef058f4232fcff266912d16f67a8b8
SSTATE_PKGSPEC=sstate:print-datetime-link-cross-x86_64:x86_64-oe-linux:1.0:r0:x86_64:14:
task=populate_sysroot
drwx                                                                                       .
drwx                                                                                       ./recipe-sysroot-native
drwx                                                                                       ./recipe-sysroot-native/sysroot-providers
-rw-                   32 19fbeb373f781c2504453c1ca04dab018a7bc8388c87f4bbc59589df31523d07 ./recipe-sysroot-native/sysroot-providers/print-datetime-link-cross-x86_64
drwx                                                                                       ./recipe-sysroot-native/usr
drwx                                                                                       ./recipe-sysroot-native/usr/bin
drwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux
lrwx                                                                                       ./recipe-sysroot-native/usr/bin/x86_64-oe-linux/print-datetime-link -> ../print-datetime

And print-datetime-usecross is correctly rebuilt whenever print-datetime-native output is different.

(From OE-Core rev: dccb7a185fe58a97f33e219b4db283ff4a2071d7)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Moritz Haase
d792f1a83e curl: Use host CA bundle by default for native(sdk) builds
Fixes YOCTO #16077

Commit 0f98fecd (a backport of 4909a46e) broke HTTPS downloads in opkg in the
SDK, they now fail with:

> SSL certificate problem: self-signed certificate in certificate chain

The root cause is a difference in the handling of related env vars between
curl-cli and libcurl. The CLI will honour CURL_CA_BUNDLE and SSL_CERT_DIR|FILE
(see [0]). Those are set in the SDK via env setup scripts like [1], so curl
continued to work. The library however does not handle those env vars. Thus,
unless the program utilizing libcurl has implemented a similar mechanism itself
and configures libcurl accordingly via the API (like for example Git in [2] and
[3]), there will be no default CA bundle configured to verify certificates
against.

Opkg only supports setting the CA bundle path via config options 'ssl_ca_file'
and 'ssl_ca_path'. Upstreaming and then backporting a patch to add env var
support is not a feasible short-time fix for the issue at hand. Instead it's
better to ship libcurl in the SDK with a sensible built-in default - which also
helps any other libcurl users.

This patch is based on a proposal by Peter.Marko@siemens.com in the related
mailing list discussion at [4].

(cherry picked from commit 3f819f57aa1960af36ac0448106d1dce7f38c050)

[0]: 400fffa90f/src/tool_operate.c (L2056-L2084)
[1]: https://git.openembedded.org/openembedded-core/tree/meta/recipes-support/curl/curl/environment.d-curl.sh?id=3a15ca2a784539098e95a3a06dec7c39f23db985
[2]: 6ab38b7e9c/http.c (L1389)
[3]: 6ab38b7e9c/http.c (L1108-L1109)
[4]: https://lists.openembedded.org/g/openembedded-core/topic/115993530#msg226751

(From OE-Core rev: 0e553b685c0a987a7be1eee16b7b5e3e48a036e2)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
CC: matthias.schiffer@ew.tq-group.com
CC: Peter.Marko@siemens.com
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Enrico Jörns
1df6f0ae91 cml1.bbclass: use consistent make flags for menuconfig
The class called 'make menuconfig' without any of the make variables and
options set in EXTRA_OEMAKE, resulting in a quite different build
environment than actually intended.

For the kernel.bbclass this was fixed in commit 8c616bc0 ("kernel: Use
consistent make flags for menuconfig") by appending ${EXTRA_OEMAKE} to
KCONFIG_CONFIG_COMMAND.

Instead of fixing this individually for additional recipes, we simply
include ${EXTRA_OEMAKE} in KCONFIG_CONFIG_COMMAND by default.

For most class users, this change is directly visible in the generated
.config file:

* For barebox and u-boot, the CONFIG_GCC_VERSION erroneously reflected
  the host GCC version before where it now correctly reflects the target
  toolchain's GCC.

* For u-boot, also the "Compiler: " line at the beginning of the .config
  now prints the target toolchain instead of the host ones.

* The kernel had this already set.

* busybox did not produce any difference.

Note that these projects might base some compile-time decisions on e.g.
the actual compiler version used. Having the wrong one in the
menuconfig-generated .config affects at least the visibility and
consistency.

Reported-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
(From OE-Core rev: a7dd1c221e42fd8df1d6f1c76c6a5ab7a3e19542)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1b6ddd452837e67b500a84455a234f5edc8250a9)
Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Kamel Bouhara (Schneider Electric)
12a7475659 oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and PACKAGECONFIG
Add test_kernel_config_spdx and test_packageconfig_spdx to verify
SPDX document generation includes kernel configuration and package
feature metadata when enabled.

(From OE-Core rev: a172a0e8d543796ee78bb66650726168352f1cdf)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2f0ab110d7521510c60e0493ef3cb021130758cd)
Signed-off-by: Kamel Bouhara <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Kamel Bouhara (Schneider Electric)
707dce4f01 spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX
Introduce the SPDX_INCLUDE_PACKAGECONFIG variable, which when enabled causes
PACKAGECONFIG features to be recorded in the SPDX document as build parameters.

Each feature is recorded as a DictionaryEntry with key PACKAGECONFIG:<feature>
and value enabled or disabled, depending on whether the feature is active in
the current build.

This makes the build-time configuration more transparent in SPDX output and
improves reproducibility tracking.

This makes the build-time configuration more transparent in SPDX output and
improves reproducibility tracking. In particular, it allows consumers of the
SBOM to identify enabled/disabled features that may affect security posture
or feature set.

Reviewed-by: Joshua Watt <JPEWhacker@gmail.com>
(From OE-Core rev: 5cfd0690f819379d9f97c86d2078c3e529efe385)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7ec61ac40345a5c0ef1ce20513a4596989c91ef4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Kamel Bouhara (Schneider Electric)
6d222750d5 kernel.bbclass: Add task to export kernel configuration to SPDX
Introduce a new bitbake task do_create_kernel_config_spdx that extracts
the kernel configuration from ${B}/.config and exports it into the
recipe's SPDX document as a separate build_Build object.

The kernel config parameters are stored as SPDX DictionaryEntry objects
and linked to the main kernel build using an ancestorOf relationship.

This enables the kernel build's configuration to be explicitly captured
in the SPDX document for compliance, auditing, and reproducibility.

The task is gated by SPDX_INCLUDE_KERNEL_CONFIG (default = "0").

Reviewed-by: Joshua Watt <JPEWhacker@gmail.com>
(From OE-Core rev: 1fff29a0428778929ffa530482ebf7db95f1e0ae)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 228a968e7c47d811c06143279bdb0f9c5f374bef)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Aleksandar Nikolic
f327b4da74 scripts/install-buildtools: Update to 5.0.14
Update to the 5.0.14 release of the 5.0 series for buildtools

(From OE-Core rev: 4c85440cd95d9cd007ef4346ecc9580806526c96)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Mingli Yu
4faff2acb8 ruby: Upgrade 3.3.5 -> 3.3.10
Per ruby maintenance policy [1], the 3.3.x branch should be still in normal
maintenance, so upgrade to the latest version 3.3.10 to fix many security
issues and bugs.

Remove the fix for CVE-2025-27219, CVE-2025-27220 and CVE-2025-27221 as
these fixes have been included in the new version.

[1] https://www.ruby-lang.org/en/downloads/branches/

(From OE-Core rev: bad372ad8ec33334c6a74c077bf975851c1e59d2)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Mingli Yu
fee180d783 libxslt: Fix CVE-2025-11731
Backport the patch [1] to fix CVE-2025-11731.

[1] fe508f201e

(From OE-Core rev: e70c70e0359418197699f18c9e2cbfd7ebac705d)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Yash Shinde
d27f4a8879 binutils: fix CVE-2025-11840
CVE-2025-11840

PR 33455
[BUG] A SEGV in vfinfo at ldmisc.c:527
A reloc howto set up with EMPTY_HOWTO has a NULL name.  More than one
place emitting diagnostics assumes a reloc howto won't have a NULL
name.

https://sourceware.org/bugzilla/show_bug.cgi?id=33455

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=f6b0f53a36820da91eadfa9f466c22f92e4256e0]

(From OE-Core rev: d477a67f623da424c3165bde25d76152636b1f50)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Yash Shinde
a247883e38 binutils: fix CVE-2025-11839
CVE-2025-11839

PR 33448
[BUG] Aborted in tg_tag_type at prdbg.c:2452
Remove call to abort in the DGB debug format printing code, thus allowing
the display of a fuzzed input file to complete without triggering an abort.

https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=12ef7d5b7b02d0023db645d86eb9d0797bc747fe]

(From OE-Core rev: d60c144e082d6e6db4f9971bb886751199cd433f)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Deepesh Varatharajan
c65b128458 binutils: Fix CVE-2025-11494
Since x86 .eh_frame section may reference _GLOBAL_OFFSET_TABLE_, keep
_GLOBAL_OFFSET_TABLE_ if there is dynamic section and the output
.eh_frame section is non-empty.

Backport a patch from upstream to fix CVE-2025-11494
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a]

(From OE-Core rev: e087881bece2884f8d1a3c6d0dd7d69b40eb6732)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Daniel Turull
de3a6b0d24 cmake-native: fix CVE-2025-9301
Add fix for native recipe, since previous commit for cmake missed it.
5d8a6fb52c cmake: fix CVE-2025-9301

CC: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
CC: Steve Sakoman <steve@sakoman.com>
(From OE-Core rev: 24f831be7d99d5ea3fe304b9aa2d82e7e2d4a5fa)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Jiaying Song
b9843e68be python3-urllib3: fix CVE-2025-66418 CVE-2025-66471
References:
https://nvd.nist.gov/vuln/detail/CVE-2025-66418
https://nvd.nist.gov/vuln/detail/CVE-2025-66471

(From OE-Core rev: d9f52c5f86bcc4716e384fe5c01c03d386d60446)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Kai Kang
67ac024a29 qemu: fix CVE-2025-12464
Backport patch to fix CVE-2025-12464 for qemu.

Reference: https://gitlab.com/qemu-project/qemu/-/commit/a01344d9d7

(From OE-Core rev: c3108b279bd5c49a3c0ea35880fe7fd4f5b75b96)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Adarsh Jagadish Kamini
997f8de24c rsync: fix CVE-2025-10158
Fix an out-of-bounds read triggered by a malicious rsync client
acting as a receiver. The issue can be exploited with read access
to an rsync module.

CVE: CVE-2025-10158

(From OE-Core rev: 110933506d7a1177d1a074866d08fe0b0da612d7)

Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Deepak Rathore
85e5f0fa1e cups 2.4.11: Fix CVE-2025-61915
Upstream Repository: https://github.com/OpenPrinting/cups.git

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-61915
Type: Security Fix
CVE: CVE-2025-61915
Score: 6.7
Patch: https://github.com/OpenPrinting/cups/commit/db8d560262c2

(From OE-Core rev: ca252aac4e50b7ed8864bf7482a86fe7129e737e)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Deepak Rathore
15a18fae40 cups 2.4.11: Fix CVE-2025-58436
Upstream Repository: https://github.com/OpenPrinting/cups.git

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-58436
Type: Security Fix
CVE: CVE-2025-58436
Score: 5.5
Patch: https://github.com/OpenPrinting/cups/commit/5d414f1f91bd

(From OE-Core rev: 6a721aad5f531ac74996386cbaaa0173c2c5001a)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-31 07:49:31 -08:00
Peter Marko
553530a8ac Revert "lib/oe/go: document map_arch, and raise an error on unknown architecture"
This reverts commit e6de433ccb2784581d6c775cce97f414ef9334b1.

This introduced a breaking change which is not suitable for backport to
stable LTS branches.

(From OE-Core rev: 2b3d2b671a149cbeea2bdc9ba42192da2015c3b7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:38 -08:00
Vijay Anusuri
719a5fe1e3 libssh2: fix regression in KEX method validation (GH-1553)
Resolves: https://github.com/libssh2/libssh2/issues/1553

Regression caused by
00e2a07e82

Backport fix
4beed72458

(From OE-Core rev: c348296ff0181921e8aa5a16d8d90db75f7b3e7c)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:38 -08:00
Vijay Anusuri
76d0c749da libssh2: upgrade 1.11.0 -> 1.11.1
Changelog: https://github.com/libssh2/libssh2/releases/tag/libssh2-1.11.1

Dropped CVE-2023-48795.patch which is already included in version 1.11.1

Resolves: https://github.com/libssh2/libssh2/issues/1326

License-Update: Copyright symbols were changed from (C) to lowercase (c)

ptest results:

root@qemux86-64:~# ptest-runner libssh2
START: ptest-runner
2025-12-08T12:37
BEGIN: /usr/lib/libssh2/ptest
PASS: mansyntax.sh
PASS: test_simple
PASS: test_sshd.test
DURATION: 6
END: /usr/lib/libssh2/ptest
2025-12-08T12:37
STOP: ptest-runner
TOTAL: 1 FAIL: 0

(From OE-Core rev: 71316433eb018e831d72a873365aa53ed04f14f4)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:38 -08:00
Peter Marko
f0d2110a32 libmicrohttpd: disable experimental code by default
Introduce new packageconfig to explicitly avoid compilation of
experimental code. Note that the code was not compiled by default also
before this patch, this now makes it explicit and makes it possible to
check for the flags in cve-check code.

This is less intrusive change than a patch removing the code which was
rejected in patch review.

This will solve CVE-2025-59777 and CVE-2025-62689 as the vulnerable code
is not compiled by default.
Set appropriate CVE status for these CVEs based on new packageconfig.

(From OE-Core rev: 9e3c0ae261afb7b9ff9528dbc147fb6c89d5a624)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:37 -08:00
Hitendra Prajapati
cc239ca412 libxml2: Security fix for CVE-2025-7425
CVE-2025-7425
libxslt: heap-use-after-free in xmlFreeID caused by `atype` corruption

Origin: https://launchpad.net/ubuntu/+source/libxml2/2.9.14+dfsg-1.3ubuntu3.6
Ref : https://security-tracker.debian.org/tracker/CVE-2025-7425

Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libxslt/-/issues/140

(From OE-Core rev: 315882f25ac3c5e5d210557fd863b3a0fff28850)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:37 -08:00
Peter Marko
0549c04c9f libpng: patch CVE-2025-66293
Pick patches per nvd report [1] and github advisory [2].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-66293
[2] https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f

(From OE-Core rev: f5f0af82d8775180d76e6448a14f74cc70edf963)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:37 -08:00
Daniel Turull
8bddd959ff classes/create-spdx-2.2: Define SPDX_VERSION to 2.2
SPDX_VERSION is used in DEPLOY_DIR_SPDX but if is not defined,
will default to SPDX-1.1

Define SPDX_VERSION to have the correct deploy path, to align
with master branch behaviour.

The change in path was introduced in 8996d0899d

CC: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
CC: JPEWhacker@gmail.com
(From OE-Core rev: 04cc49593a0ba2c51e4f4d477d4587079735b624)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-17 08:48:37 -08:00
Moritz Haase
9497778a4d curl: Ensure 'CURL_CA_BUNDLE' from host env is indeed respected
Due to what looks like a copy'n'paste mistake, the environment setup script
might override 'CURL_CA_BUNDLE' from the host env instead of leaving it
untouched. Fix that.

(cherry picked from commit 545e43a7a45be02fda8fc3af69faa20e889f58c4)

CC: changqing.li@windriver.com
CC: raj.khem@gmail.com
CC: Peter.Marko@siemens.com

(From OE-Core rev: ef198b0c6063ede32cb93fe44eb89937c076a073)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
295e960b85 libpng: patch CVE-2025-65018
Pick commit per NVD report.
Add two patches to apply it cleanly.

(From OE-Core rev: 4e03bed20bceb455cb46dcf9564ad5a8525b207d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
ea30165e8b libpng: patch CVE-2025-64720
Pick commit per NVD report.

(From OE-Core rev: e8fbb7521e0113c467e07ba473a46612709c5311)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
eed16ae613 libpng: patch CVE-2025-64506
Pick commit per NVD report.

(From OE-Core rev: f3bdbd782eed2b597927df489a7d38a22fbba5ed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
b0b3210686 libpng: patch CVE-2025-64505
Pick commit per NVD report.
Add two patches to apply it cleanly.

(From OE-Core rev: 285a495b8b0e8fa93a0a0884f466f1adca76a28a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Praveen Kumar
792947d444 python3: fix CVE-2025-6075
If the value passed to os.path.expandvars() is user-controlled a
performance degradation is possible when expanding environment variables.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-6075

Upstream-patch:
9ab89c026a

(From OE-Core rev: 5313fa5236cd3943f90804de2af81358971894bc)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
adc9e377c8 gnutls: patch CVE-2025-9820
This CVE is announced under [1].
Pick commit which mentions this CVE per [2].

[1] https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18
[2] https://security-tracker.debian.org/tracker/CVE-2025-9820

(From OE-Core rev: 37dcb0f617f02f95293455d58927e0da4e768cc4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-05 07:13:42 -08:00
Peter Marko
e6bfeed8f3 libarchive: patch CVE-2025-60753
Pick patch from [3] marked in [2] mentioned in [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-60753
[2] https://github.com/libarchive/libarchive/issues/2725
[3] https://github.com/libarchive/libarchive/pull/2787

(From OE-Core rev: 1fbd9eddbdf0da062df0510cabff6f6ee33d5752)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Peter Marko
842fd60ebb libarchive: patch 3.8.3 security issue 2
Pick patch [2] as listed in [1].

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.3
[2] https://github.com/libarchive/libarchive/pull/2768

(From OE-Core rev: efe032eef7034009f1202985b2036fc79e06bddf)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Peter Marko
03c1257cfd libarchive: patch 3.8.3 security issue 1
Pick patch [2] as listed in [1].
To apply it cleanly, add two additional patches from branch patch/3.8.

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.3
[2] https://github.com/libarchive/libarchive/pull/2753

(From OE-Core rev: 11f782c1ae9962a2faa98bff3566e49fbf6db017)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Benjamin Robin (Schneider Electric)
35a6ffc2db vex: fix rootfs manifest
Rootfs VEX file is created by gathering files from CVE_CHECK_DIR
(deploy directory), however recipes generate the files only in
CVE_CHECK_DIR (log directory).
This make the rootfs VEX be always empty without any message.

The code is copied from cve_check class, which writes to both, so let
keep them aligned and make also vex write both files.

Also add a warning for case that a cve file would be still missing.

(From OE-Core rev: 7493eeed6d53bc704f558a0ccf8a0b5195381873)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ee6541d0940c65685aaafd7d41a59a9406392e7d)
Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Benjamin Robin (Schneider Electric)
86f11fe94f spdx: extend CVE_STATUS variables
If spdx is generated without inheriting cve/vex classes (which is poky
default), only explicitly set CVE_STATUS fields are handled.
Calculated ones (e.g. from CVE_STATUS_GROUPS) are ignored.

Fix this by expanding the CVE_STATUS in spdx classes.

(From OE-Core rev: 23a4e02542252657fa45fd4a605aec0af9178e0b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ead9c6a8770463c21210a57cc5320f44f7754dd3)
Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Benjamin Robin (Schneider Electric)
d1f8b0c6dd cve-check: extract extending CVE_STATUS to library function
The same code for extending CVE_STATUS by CVE_CHECK_IGNORE and
CVE_STATUS_GROUPS is used on multiple places.
Create a library function to have the code on single place and ready for
reuse by additional classes.

Conflicts:
  meta/classes/cve-check.bbclass
  meta/lib/oe/cve_check.py

(From OE-Core rev: ddd295c7d4c313fbbb24f7a5e633d4adfea4054a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 45e18f4270d084d81c21b1e5a4a601ce975d8a77)
Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Benjamin Robin (Schneider Electric)
cf3b1a7e6d vex.bbclass: add a new class
The "vex" class generates the minimum information that is necessary
for VEX generation by an external CVE checking tool. It is a drop-in
replacement of "cve-check". It uses the same variables from recipes
to make the migration and backporting easier.

The goal of this class is to allow generation of the CVE list of
an image or distribution on-demand, including the latest information
from vulnerability databases. Vulnerability data changes every day,
so a status generated at build becomes out-of-date very soon.

Research done for this work shows that the current VEX formats (CSAF
and OpenVEX) do not provide enough information to generate such
rolling information. Instead, we extract the needed data from recipe
annotations (package names, CPEs, versions, CVE patches applied...)
and store for later use in the format that is an extension of the
CVE-check JSON output format.

This output can be then used (separately or with SPDX of the same
build) by an external tool to generate the vulnerability annotation
and VEX statements in standard formats.

When back-porting this feature, the do_generate_vex() had to be modified
to use the "old" get_patched_cves() API.

(From OE-Core rev: 123a60bc19987e99d511b1f515e118022949be7e)

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6352ad93a72e67d6dfa82e870222518a97c426fa)
Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Benjamin Robin (Schneider Electric)
976648aa60 spdx30: provide all CVE_STATUS, not only Patched status
In scarthgap, the `oe.cve_check.get_patched_cves()` method only returns
CVEs with a "Patched" status. We want to retrieve all annotations,
including those with an "Ignored" status. Therefore, to avoid modifying
the current API, we integrate the logic for retrieving all CVE_STATUS
values ​​directly into `spdx30_task`.

(From OE-Core rev: 9a204670b1c0daedf1ed8ff944f8e5443b39c8f7)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:55 -08:00
Kai Kang
91ba7b5d66 Revert "spdx: Update for bitbake changes"
This reverts part of commit 4859cdf97fd9a260036e148e25f0b78eb393df1e.

Modification of meta/classes/create-spdx-2.2.bbclass is not backported,
so no need to consider it.

In the commit, it updates spdx according to bitbake change. But the
bitbake commit

* 2515fbd10 fetch: Drop multiple branch/revision support for single git urls

doesn't backport for scarthgap.

So revert the other parts of the commit 4859cdf97fd9a260036e148e25f0b.

(From OE-Core rev: f3bfb98d1cf928678d9931308c116e9e6ec64ba5)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-01 07:34:54 -08:00
Lee Chee Yang
d71d81814a migration-guides: add release notes for 4.0.31
(From yocto-docs rev: b0f5cc276639916df197435780b3e94accd4af41)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 992d0725e8b4fdcdc2e9a101ce51ebef94a00112)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Ross Burton
e54c87a8b5 documentation: link to the Releases page on yoctoproject.org instead of wiki
We have a machine-generated Releases page[1] which is preferable to the
wiki.

[1] https://www.yoctoproject.org/development/releases/

(From yocto-docs rev: 5af5e64e42732c0919cad499e79ff35ca4255a86)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 46a9172fd17aa518028e35b8c874e74889079094)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Quentin Schulz
dfa0c8dc8b overview-manual: migrate to SVG + fix typo
The original PNG had a typo (YP-Comptible instead of YP-Compatible).

Instead of patching a PNG, let's migrate to an SVG with the typo already
fixed.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: fd023b25026b562ff2de972a44bd2c773470208f)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9f3c2a9113b329f7efdd22d3b3fbe272a44bc654)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Quentin Schulz
00d09f8fd4 dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
We should recommend using bitbake-getvar command wherever possible as
its output is much less confusing and overwhelming than bitbake -e.

Unfortunately, bitbake-getvar currently doesn't list Python tasks or
functions, unlike bitbake -e, so keep the latter for some corner cases.

[AG: Moroever -> Moreover typo fix]

(From yocto-docs rev: 3f1ca1c3ef60dfabe5b2a2c6e53d14edad64fb06)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 41e4e05369c4e028c679749b7b62434327927a09)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Quentin Schulz
1b8b7802d1 ref-manual: variables: migrate the OVERRIDES note to bitbake-getvar
Wherever possible, we should use bitbake-getvar as it's the recommended
tool so let's do that.

(From yocto-docs rev: b9453c7ce44a6bcae7cdc05f2b2cd47b525726e9)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2293a3f2767895e9fb5c3e8f3ec11bb4951a7127)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Quentin Schulz
bfa2803f8e kernel-dev: common: migrate bitbake -e to bitbake-getvar
It's recommended to use bitbake-getvar for a few releases now so let's
use that instead of bitbake -e.

While at it, use a cross-reference for "OpenEmbedded Build System".

(From yocto-docs rev: 29836a95c01cdb99c38802f55a92f32377b8c524)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 54585646d8220f8de1ba2c7246cb3f2fcbc59583)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Lee Chee Yang
a6b0e3d404 migration-guides: add release notes for 5.0.13
(From yocto-docs rev: fefa33295b2b96d5bf91dfdec3c6e6913dbf1df2)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5a6f63e955807d6aab4a9dbcb4560078c2cec77f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Walter Werner SCHNEIDER
6906c4236f kernel-dev: add disable config example
Makes it more clear that the configuration fragment can also be used to
disable a configuration.

(From yocto-docs rev: a586a0ecacb4e40f4f3aeeb01dbefbdfcee8ae35)

Signed-off-by: Walter Werner SCHNEIDER <contact@schnwalter.eu>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d38ef467081ee73bf23f240ace54b849a3a87612)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Robert P. J. Day
938b1ad77a dev-manual/new-recipe.rst: typo, "whith" -> "which"
Fix typo "whith", should be "which".

(From yocto-docs rev: bec165a3505f298b668bcf2a0f03fb8dcfccc510)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f98b25f7f7522cf223beb001cabef870d6dd8c10)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:36 -08:00
Robert P. J. Day
e1453702a5 dev-manual/new-recipe.rst: replace 'bitbake -e' with 'bitbake-getvar'
Replace the legacy call to 'bitbake -e' to get the value of a recipe's
variable with the newer call to 'bitbake-getvar'.

(From yocto-docs rev: 042c4cb8c6291be857a672144b573a5eb10f1ead)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit ed7c0766ef5f13b90943a69e64f8e8713d05e864)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Robert P. J. Day
d6fd50a616 dev-manual/new-recipe.rst: update "recipetool -h" output
Update the output of "recipetool -h" to include the missing "edit"
subcommand.

(From yocto-docs rev: 09039d05e485a842690f9f54930400e02eef1c2c)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 092d688349b0b6bb10ae6fbbab7d82801964daf5)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Robert P. J. Day
9e6d5e0849 dev-manual/layers.rst: document "bitbake-layers show-machines"
The "show-machines" subcommand is not mentioned in the docs; add it.

(From yocto-docs rev: 98190334b2ad75421e8bf2cc84bd920311398670)

Signed-off-by: Robert P. J. Day <Crpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b4320cdc4df08c59a24d5247b3895dd602554fa0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Enrico Jörns
dbf5ddbdb5 dev-manual/sbom.rst: reflect that create-spdx is enabled by default
Since nanbield (b34032ec "defaultsetup: Inherit create-spdx by
default"), the create-spdx class is pulled in by default, not only by
poky.

Adapt the text to reflect this and also change INHERIT to INHERIT_DISTRO
since this is the more concrete variable to modify for disabling
create-spdx.

[AG: fix conflicts]

(From yocto-docs rev: 4c47eb98e096121d71663342dde86b8c9256c9b5)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2b6228943443faf76c9869a0daeccfe7f93688ca)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Peter Marko
fb988ddb65 oeqa/sdk/buildepoxy: skip test in eSDK
Currently meson inside eSDKs only works with fully populated eSDKs,
but our testing uses minimal eSDKS, so skip the test if the eSDK is a
minimal build.  A bug has been filed to resolve this.

This is minimal change extracted from OE-Core commit which has this only
as a minor comment: 575e0bf52db0467d88af4b5fe467b682f10ca62a

(From OE-Core rev: 7cfacaee1b3319e561036512a849e762d0f68a5e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Peter Marko
2ab61fcf7d oeqa: drop unnecessary dependency from go runtime tests
The tests do not use scp command, so openssh-scp is not needed.

(From OE-Core rev: 4e10e7848cb10307f133f181b41563c995df032a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Peter Marko
f5c5d1dd6c oeqa: fix package detection in go sdk tests
The test are skipped if architecture contains dash because TARGET_ARCH
contains underscore while package name contains dash. Here the
translation needs to be done.

Note that poky distro default arch has dash:
MACHINE="qemux86-64"
TARGET_ARCH="x86_64"
ERROR: Nothing PROVIDES 'go-cross-canadian-x86_64'. Close matches:
  gcc-cross-canadian-x86-64
  gdb-cross-canadian-x86-64
  go-cross-canadian-x86-64
TRANSLATED_TARGET_ARCH="x86-64"

Quoting meta/classes-recipe/cross-canadian.bbclass:
TRANSLATED_TARGET_ARCH is added into PN

(From OE-Core rev: 82a46b70bfba7c4ce4fd20e2658b182b03e55037)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Osama Abdelkader
72fd157b91 go: remove duplicate arch map in sdk test
ARCH_MAP is duplicating an existing map in meta/lib/oe/go.py
use oe.go map_arch instead.

(From OE-Core rev: c2ba36f41777d347fd5ffcd9b6862638e5f35a1b)

(From OE-Core rev: 21f3a6c661307eab5530b51704c3a338013c9c5c)

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Osama Abdelkader
6ba417e775 go: extend runtime test
extend go runtime test with a simple test file, and simple
go module test to validate go compilation and execution on
target.

(From OE-Core rev: e3b2b9170f76f4bbdc41ea6ba7bccffc17d01968)

(From OE-Core rev: bda3e3711f84394423c15f48fb4e75258fec199a)

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Osama Abdelkader
48b9d014e9 go: add sdk test
- Add meta/lib/oeqa/sdk/cases/go.py with GoCompileTest and GoHostCompileTest classes
- Test validates Go cross-compilation toolchain functionality
- Includes native compilation, cross-compilation, and Go module support
- Uses dynamic architecture detection for portability

(From OE-Core rev: 17015f692a6bf3697a89db51bbc4673a5efa1497)

(From OE-Core rev: 506f4e8c99b164673ba7d1c19e10d240f4df0376)

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Alexander Kanavin
7b9540b6b5 goarch.bbclass: do not leak TUNE_FEATURES into crosssdk task signatures
The default assignments look like this:
TARGET_GO386 = "${@go_map_386(d.getVar('TARGET_ARCH'), d.getVar('TUNE_FEATURES'), d)}"

TUNE_FEATURES is a target-specific variable, and so should be used
only for target builds. The change is similar to what is already done
for native packages.

(From OE-Core rev: cfff8e968257c44880caa3605e158764ed5c6a2a)

(From OE-Core rev: e8d475b9b6d7b1ac3b0cfe367faabc07deb663b0)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ross Burton
6707dcecb2 lib/oe/go: document map_arch, and raise an error on unknown architecture
Add a comment explaining what this function does and where the values
come from.

If the architecture isn't know, instead of returning an empty string
which could fail mysteriously, raise a KeyError so it fails quickly.

(From OE-Core rev: 025414c16319b068df1cd757ad9a3c987a6b871d)

(From OE-Core rev: e6de433ccb2784581d6c775cce97f414ef9334b1)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ross Burton
cac0ff2d90 oe/sdk: fix empty SDK manifests
The SDK manifests are generated by listing the sstate was that used, but
it hardcodes that the sstate data filenames end in .tgz.

This has not been the case since sstate switched to Zstd[1] in 2021,
which meant that all of the tests which checked for packages existing
were being skipped as the manifests were empty.  For example, see a
representative core-image-sato eSDK test run[2]:

RESULTS - cmake.CMakeTest.test_assimp: SKIPPED (0.00s)
RESULTS - gtk3.GTK3Test.test_galculator: SKIPPED (0.00s)
RESULTS - kmod.KernelModuleTest.test_cryptodev: SKIPPED (0.00s)
RESULTS - maturin.MaturinDevelopTest.test_maturin_develop: SKIPPED (0.00s)
RESULTS - maturin.MaturinTest.test_maturin_list_python: SKIPPED (0.00s)
RESULTS - meson.MesonTest.test_epoxy: SKIPPED (0.00s)
RESULTS - perl.PerlTest.test_perl: SKIPPED (0.00s)
RESULTS - python.Python3Test.test_python3: SKIPPED (0.00s)

All of those tests should have been ran.

Solve this by generalising the filename check so that it doesn't care
what specfic compression algorithm is used.

[1] oe-core 0710e98f40e ("sstate: Switch to ZStandard compressor support")
[2] https://autobuilder.yoctoproject.org/valkyrie/#/builders/16/builds/1517/steps/15/logs/stdio

(From OE-Core rev: 062a525bd36c672f372dabe8d9f0fbe355c7e58b)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ross Burton
d4a084d920 testsdk: allow user to specify which tests to run
Following the usage of TEST_SUITES in testimage, add TESTSDK_SUITES to
specify the list of tests to execute. By default the variable is empty,
which means to run all discovered tests.

This makes it easier to work on a single test without having to run all
of the tests.

(From OE-Core rev: 28d437c52c77889b2ede0fc2f2d6777c5b0a553d)

(From OE-Core rev: a93e21419476658f24220193fb0183efeb7a184f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Gyorgy Sarvari
4af1396e46 glslang: fix compiling with gcc15
Backport a patch that fixes a compilation failure with gcc15:

| .../git/SPIRV/SpvBuilder.h:238:30: error: ‘uint32_t’ has not been declared
|   238 |     Id makeDebugLexicalBlock(uint32_t line);
|       |                              ^~~~~~~~
| .../git/SPIRV/SpvBuilder.h:64:1: note: ‘uint32_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’

(From OE-Core rev: cd0039c22d7aa3d6983ac6fe917b648930355849)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ovidiu Panait
ee521bb17c rust-target-config: fix nativesdk-libstd-rs build with baremetal
If TCLIBC='baremetal' is set in local.conf, nativesdk-libstd-rs build fails
with:

| error[E0412]: cannot find type `c_char` in the crate root
|   --> /usr/src/debug/libstd-rs/1.75.0/rustc-1.75.0-src/vendor/libc/src/unix/mod.rs:56:29
|    |
| 6  | pub type c_schar = i8;
|    | ---------------------- similarly named type alias `c_schar` defined here
| ...
| 56 |         pub gr_name: *mut ::c_char,
|    |                             ^^^^^^

This happens because rust_gen_target() sets os="none" when TCLIBC is
'baremetal' - even for nativesdk targets. However, nativesdk packages are
built against glibc, so the correct 'os' value should be "linux".

Fix this by setting the os field based on {TARGET,HOST,BUILD}_OS variables,
as it is already done in rust_base_triple(), instead of relying on TCLIBC.

(From OE-Core rev: 4c3f321304f2aa8b75cb58699b59fea80a23690c)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(master rev: 3eaf2cd5647585a1e6df03fc20e2753da27bb692) -- backport
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Gyorgy Sarvari
681244152c musl: patch CVE-2025-26519
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-26519

Pick the patches that are attached to the musl advisory:
https://www.openwall.com/lists/musl/2025/02/13/1

(From OE-Core rev: bbdd7d54b070f62f13967df8a13f5f14f2c36120)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Yogita Urade
027ce2d723 xwayland: fix CVE-2025-62231
A flaw was identified in the X.Org X serverâ\x80\x99s X Keyboard
(Xkb) extension where improper bounds checking in the XkbSetCompatMap()
function can cause an unsigned short overflow. If an attacker sends
specially crafted input data, the value calculation may overflow,
leading to memory corruption or a crash.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-62231

Upstream patch:
3baad99f9c

(From OE-Core rev: 97326be553f3fec8fbda63a8b38d18f656425b2c)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Yogita Urade
7f12b64980 xwayland: fix CVE-2025-62230
A flaw was discovered in the X.Org X serverâ\x80\x99s X Keyboard
(Xkb) extension when handling client resource cleanup. The software
frees certain data structures without properly detaching related
resources, leading to a use-after-free condition. This can cause
memory corruption or a crash when affected clients disconnect.

Reference:
3baad99f9c

Upstream patches:
865089ca70
87fe255393

(From OE-Core rev: 5d98bca7ca76964a6bf7efb7cf8331b9f518ad00)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Yogita Urade
33231bec7b xwayland: fix CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing
X11 Present extension notifications. Improper error handling during
notification creation can leave dangling pointers that lead to a
use-after-free condition. This can cause memory corruption or a crash,
potentially allowing an attacker to execute arbitrary code or cause a
denial of service.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-62229

Upstream patch:
5a4286b13f

(From OE-Core rev: 3d606cc94e5ce42b836878578fa271a72bc76015)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ross Burton
db7f586822 xserver-xorg: fix CVE-2025-62229 CVE-2025-62230 CVE-2025-62231
>From https://lists.x.org/archives/xorg-announce/2025-October/003635.html:

1) CVE-2025-62229: Use-after-free in XPresentNotify structures creation

    Using the X11 Present extension, when processing and adding the
    notifications after presenting a pixmap, if an error occurs, a dangling
    pointer may be left in the error code path of the function causing a
    use-after-free when eventually destroying the notification structures
    later.

    Introduced in: Xorg 1.15
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/5a4286b1
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

2) CVE-2025-62230: Use-after-free in Xkb client resource removal

    When removing the Xkb resources for a client, the function
    XkbRemoveResourceClient() will free the XkbInterest data associated
    with the device, but not the resource associated with it.

    As a result, when the client terminates, the resource delete function
    triggers a use-after-free.

    Introduced in: X11R6
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/99790a2c
         https://gitlab.freedesktop.org/xorg/xserver/-/commit/10c94238
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

3) CVE-2025-62231: Value overflow in Xkb extension XkbSetCompatMap()

    The XkbCompatMap structure stores some of its values using an unsigned
    short, but fails to check whether the sum of the input data might
    overflow the maximum unsigned short value.

    Introduced in: X11R6
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/475d9f49
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

(From OE-Core rev: 50b9c34ba932761fab9035a54e58466d72b097bf)

(From OE-Core rev: f5a10c4950ccb5570c72eb0a09618b7b3523bc39)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Ross Burton
a78985ed94 xserver-xorg: remove redundant patch
The underlying issue with -fno-common was resolved upstream in xserver
21.1.0 onwards[1].

[1] xserver 0148a15da ("compiler.h: don't define inb/outb and friends on mips")

(From OE-Core rev: 74b77ee90efd50a703af76769fac66a0f7c394ca)

(From OE-Core rev: f1b064e684cebc3e0c6ca36eb585e26b8da5583b)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Hugo SIMELIERE
49e4da8b0a sqlite3: patch CVE-2025-7709
Pick commit used in debian patch https://git.launchpad.net/ubuntu/+source/sqlite3/commit/?id=9a309a50fa99e3b69623894bfd7d1f84d9fab33c
Upstream-Status: Backport [192d0ff8cc]

(From OE-Core rev: baaf28f6f2eac600f7caf53660a0b75f0329e86a)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Hongxu Jia
e77289e9a4 spdx30: Provide software_packageUrl field in SPDX 3.0 SBOM
Define var-SPDX_PACKAGE_URL to provide software_packageUrl field [1][2]
in SPDX 3.0 SBOM, support to override with package name
SPDX_PACKAGE_URL:<pkgname>

Currently, the format of purl is not defined in Yocto, set empty for now
until we have a comprehensive plan for what Yocto purls look like.
But users could customize their own purl by setting var-SPDX_PACKAGE_URL

[1] https://spdx.github.io/spdx-spec/v3.0.1/model/Software/Properties/packageUrl/
[2] https://spdx.github.io/spdx-spec/v3.0.1/annexes/pkg-url-specification/

(From OE-Core rev: c8e6953a0b6f59ffca994c440069db39e60b12d2)

(From OE-Core rev: 60724efdb3a243bc796b390ad0c478584a0fb7fa)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Peter Marko
c06e4e6e60 spdx30: fix cve status for patch files in VEX
This commit fixes commit 08595b39b46ef2bf3a928d4528292ee31a990c98
which adapts vex creation between function create_spdx where all changes
were backported and funtion get_patched_cves where changes were not
backported.

CVE patches were previously ignored as they cannot be decoded from
CVE_STATUS variables and each caused a warning like:
WARNING: ncurses-native-6.4-r0 do_create_spdx: Skipping CVE-2023-50495 — missing or unknown CVE status

Master branch uses fix-file-included for CVE patches however since
cve-check-map.conf was not part of spdx-3.0 backport, closest one
available (backported-patch) was implemented.

(From OE-Core rev: 8d14b2bb02861612130f02c445392f34090ba5d9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-26 07:50:35 -08:00
Steve Sakoman
7e8674996b build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 471adaa5f77fa3b974eab60a2ded48e360042828)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-17 17:02:11 -08:00
Richard Purdie
dd2d3cfc4e oe-build-perf-report: relax metadata matching rules
As the poky repository is no longer used, measurements are indexed using
the oe-core commit. But as bitbake, oe-core and meta-yocto are now
retrieved from separate gits, while measuring performances for a given branch
at some time interval, we can get the same commit for oe-core but
different ones for bitbake or meta-yocto. As a consequence, metadata
associated with the same index (oe-core commit) might differ.

To work around this, relax the equality checks for commit, commit_time
and commit_count since they might no longer match.

Ideally we'd group them into separate results but for now, treat them
as being the same.

[Based on work from Mathieu Dubois-Briand but fixed differently]
(From OE-Core rev: d9c30edf908c129a7540b23e920dd669d2a30657)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e7dc42e30c76bf0fbb4d3cc019bbec675bac55fa)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-17 16:59:28 -08:00
Steve Sakoman
c1bb6b3d12 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 5fa3fd112e69cca60577065145f5f8aaa41b5bd6)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:49:29 -08:00
Steve Sakoman
60d407517c poky.conf: bump version for 5.0.14
(From meta-yocto rev: bf6aea52c4009e08f26565c33ce432eec7cfb090)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
d7d531e269 classes/create-spdx-2.2: Handle empty packages
When combining an SPDX document, the package list might be empty (e.g.
a baremetal image). Handle this case instead of erroring out

(From OE-Core rev: 1f7326799c33d2a734c58d360773b87d7b86b0ec)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
6328f52695 oeqa: spdx: Add tar test for SPDX 2.2
The base-files test for SPDX 2.2 did not give good coverage, since
base-files doesn't have any dependencies. Add building tar as another
test which more fully exercises the code

(From OE-Core rev: 2c299c17ef1a97505fd7de8d3ebc9de25fb838fc)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Kamel Bouhara (Schneider Electric)
5b74a8f1a5 spdx30_tasks: adapt CVE handling to new cve-check API
Changes to cve-check (see poky commit fb3f440b7d,
"cve-check: annotate CVEs during analysis") modified the
get_patched_cves() API to return a set of CVE IDs instead of a
dictionary of CVE metadata.

The SPDX 3 backport still expected a dictionary and attempted to call
.items(), leading to:

    AttributeError: 'set' object has no attribute 'items'

This patch updates the SPDX3 code to iterate directly over the CVE IDs
and use `oe.cve_check.decode_cve_status()` to retrieve the mapping,
detail, and description for each CVE. This restores compatibility with
the updated CVE API and matches the behavior of SPDX3 handling on
Walnascar.

A warning is logged if a CVE has missing or unknown status.

(From OE-Core rev: 55fdeea44ffbecb705f7900bfa85ab88e1191878)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
71aca87ca7 spdx 3.0: Rework how SPDX aliases are linked
The SPDX code needs to be able to look up an Element by its SPDX ID,
locating the file that (should) contain the SPDX ID and opening it for
parsing. Previously, the code would do this be hashing each Element
SPDX ID and Alias, and the creating a symbolic link to the file that
contains the element with a name of the hash.

This worked well as it was possible to look up any arbitrary SPDX ID or
alias by simply hashing it and following the symbolic link to get the
file. However, the down side of this approach is that it creates a lot
of symbolic links, since it will make one or two per Element in the
document. This can be a problem when using SPDX_INCLUDE_SOURCES, for
example.

This change reworks this strategy so that the only Element that gets a
symbolic link based on the hash is the singular SpdxDocument that is
create for each file. All other Elements are assigned an alias with a
special prefix that encodes the hash of SpdxDocument alias. Thus, when
attempting to look up an arbitrary alias, the code sees the special
prefix, extract the hash, opens the file based on the symlink with that
hash name, then finds the matching Element in the file. This drastically
reduces the number of symbolic links by making only one per file.

This also means that the custom link extension can be removed since it
is now superfluous.

(From OE-Core rev: 551433c7a1eddf5090c87a243ea104bf091992b0)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 838d64c09657ac53175737fc4e7fd6f01f3dcf47)
Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
1919d76f68 lib: oeqa: spdx: Add tests for extra options
Adds a test for several of the extra options provided by the SPDX
classes. In particular, these are the options that can produce
non-reproducible results, so are not enabled by default in OE core. This
test takes care to configure the build so that the tests do run in a
reproducible manner so that pre-built test objects can be pulled from
sstate

(From OE-Core rev: 72ee311d4f74499674a29223fb02d4e774097a54)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 14f534f15f7fe6362723d7f064d39783c5bd758f)
Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Hongxu Jia
568c1afab4 oeqa/selftest: Add SPDX 3.0 include source case for work-share
Build gcc and check gcc-14.2.0/README in objset is available

$ oe-selftest -r spdx.SPDX30Check.test_gcc_include_source
...
2024-10-26 01:24:57,063 - oe-selftest - INFO - test_gcc_include_source (spdx.SPDX30Check.test_gcc_include_source)
2024-10-26 01:28:24,204 - oe-selftest - INFO - The spdxId of gcc-14.2.0/README in gcc.spdx.json is http://spdx.org/spdxdocs/gcc-f2eaeb0d-b54b-53ba-899a-8c36c21139bf/88d5068ffd41e5ea6b4e0dd390b23bf499bb2b6674a41e09eaf2a887eced16c8/sourcefile/42
2024-10-26 01:28:26,369 - oe-selftest - INFO -  ... ok
2024-10-26 01:28:33,315 - oe-selftest - INFO - ----------------------------------------------------------------------
2024-10-26 01:28:33,316 - oe-selftest - INFO - Ran 1 test in 216.457s
2024-10-26 01:28:33,316 - oe-selftest - INFO - OK
2024-10-26 01:28:45,254 - oe-selftest - INFO - RESULTS:
2024-10-26 01:28:45,254 - oe-selftest - INFO - RESULTS - spdx.SPDX30Check.test_gcc_include_source: PASSED (209.31s)
2024-10-26 01:28:45,260 - oe-selftest - INFO - SUMMARY:
2024-10-26 01:28:45,260 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 216.457s
2024-10-26 01:28:45,260 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0)

(From OE-Core rev: 45f3039a4f0fcea208e317ed7134458f7aa7a4cc)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Reviewed-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ccd6dde301dc8c45c8f901ebd4676b488d638b08)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
f5a9af087b selftest: spdx: Add SPDX 3.0 test cases
Adds test cases for SPDX 3.0. Reworks the SPDX 2.2 test setup so it can
also be run even if the default is SPDX 3.0

(From OE-Core rev: e182f76a866d4d750d2baf7b56ffebead5264de2)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b1d2309b3ab0fd8b0d8c4dfa59f50c85074bbd3b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Kamel Bouhara (Schneider Electric)
bf3b6c9965 classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout
Upstream commit 544d46e4169a ("selftest/spdx: Fix for SPDX_VERSION addition")
updated the selftests to expect SPDX artifacts under:

    ${DEPLOY_DIR}/spdx/${SPDX_VERSION}/

However, in this branch the effective SPDX output was still being
written to:

    ${DEPLOY_DIR}/spdx/${PACKAGE_ARCH}/

without the version subdirectory. This caused SPDX selftests such as
test_spdx_tar to fail with missing file errors, e.g.:

    AssertionError: .../deploy/spdx/SPDX-1.1/core2-64/packages/tar.spdx.json does not exist

Update create-spdx-2.2.bbclass so that DEPLOY_DIR_SPDX includes
${SPDX_VERSION}, matching the expected deploy structure and restoring
successful SPDX selftests.

(From OE-Core rev: 8996d0899df5316742ba5fd73c351e8ca67dc90b)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Richard Purdie
75922d42b0 selftest/spdx: Fix for SPDX_VERSION addition
Update the test for the addition of SPDX_VERSION to the deploy path.

(From OE-Core rev: d75bfbaf69292f80cacc5b8d6cbff03418a34ebc)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 055e8c21908127722abad9e992d6408d8697a119)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:30 -08:00
Joshua Watt
35b2b34407 classes-recipe/baremetal-image: Add image file manifest
Downstream tasks may want to know what image files were written so write
out a manifest in do_image_complete. The format of the manifest is the
same as the one in image.bbclass

(From OE-Core rev: e15a9934be84c59fc1bf957a60fa395e521abcfc)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Joshua Watt
a905366ee1 classes-recipe/image: Add image file manifest
Downstream tasks may want to know what image files were written by the
do_image family of tasks (e.g. SPDX) so have each task write out a
manifest file that describes the files it produced, then aggregate them
in do_image_complete

(From OE-Core rev: 5da5e2c528e8f4c78d389d60b03725323ff1527c)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5e55ed4c5b9d5af3c96b82805af34af1512fc3d1)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Joshua Watt
b5184d1487 lib: oe: license: Add missing import
The code in this file uses oe.qa, but it was not imported resulting an
an exception when a license error was detected

(From OE-Core rev: f8aa42faa3640d0414745ae32b00a37b2f5d638b)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e44cb7c5b7281d614ed51fdec06dad0a7211528a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Joshua Watt
8f0eab43ed lib/license: Move package license skip to library
Moves the code that skips packages with incompatible licenses to the
library code so that it can be called in other locations

(From OE-Core rev: 4f7a047c4a1e14bbb3bf593764aace1e25bcd4a4)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 86eb409e3c1b30110869ec5a0027ae2d48bbfe7f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Joshua Watt
2cab0b9833 classes-global/staging: Exclude do_create_spdx from automatic sysroot extension
do_create_spdx is a outlier in that it doesn't need the RSS to be
extended just because it depends on do_populate_sysroot. In fact, it
only depends on do_populate_sysroot so it can see the actual recipes
sysroot, and attempting to extend the sysroot can cause problems for
some recipes (e.g. if a recipe does do_populate_sysroot[noexec] = "1")

As such, explicitly exclude do_create_spdx from extending the sysroot
just because it depends on do_populate_sysroot.

(From OE-Core rev: 572bf8fd0ba83c7174f706f17a589abbcdc54df5)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Joshua Watt
ff75417547 classes-global/license: Move functions to library code
Moves several of the functions in license.bbclass to be library code

New function dependencies were manually verified using bitbake-dumpsigs
to ensure that bitbake identified the same dependencies even though they
are now in library code (although the new function names mean that the
task hashes still change)

(From OE-Core rev: 5e220e20833fd800687b05c8f5cef602dfc47202)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0333e04e353991260c5f67a72f80f3ab9dcf526a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Kamel Bouhara (Schneider Electric)
b16bf27386 spdx30_tasks: fix FetchData attribute in add_download_files
The add_download_files() function incorrectly accessed fd.name, which
does not exist on FetchData objects.

Change to use fd.names[0] to correctly retrieve the first filename.

This fixes AttributeError during SPDX document generation.

(From OE-Core rev: 17031d71cf4bc4fc19dd8a41c49b94e1f6a1edee)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Kamel Bouhara (Schneider Electric)
11cd8498da backport: SPDX 3.0 fixes and tasks from upstream version Walnascar
Backports the SPDX 3.0 support and fixes from upstream walnascar
commit 49f47169953b807d430461ca33f3a2b076119712 into upstream
scarthgap.

(From OE-Core rev: 9c9b9545049a2f6e5c99edcb079275d29a4d1ac6)

Signed-off-by: Kamel Bouhara (Schneider Electric) <kamel.bouhara@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Alexander Kanavin
d101e1410d xf86-video-intel: correct SRC_URI as freedesktop anongit is down
(From OE-Core rev: 04037a14e1431c4a51f5d51885974732a6108368)

(From OE-Core rev: 64eff9fa267f33d2ca0972a5dc4ae010138cd720)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9649bec517)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Richard Purdie
7ff4ef9855 oeqa/selftest/devtool: Update after upstream repo changes
The upstream changed the branch name, moving to archive/ so we need to
update too. Take the opportunity to match the new location too to avoid
the redirect.

We could use a different branch but upstream would probably eventually
rename that too so this may last longer.

(From OE-Core rev: 1e0a64a1890a62e130595f46d93c8d08af9170f5)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 478a645bad150f04dee1b0085c4542c2eefe7007)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Gyorgy Sarvari
7810db935d ca-certificates: fix on-target postinstall script
When the package is installed directly on the machine (instead of
installing it in the rootfs directly), the postinstall script fails with
the following error:

/usr/sbin/update-ca-certificates: line 75: shift: shift count out of range

The reason is that the "update-ca-certificates" script is executed with
the "--sysroot" argument, and as the sysroot $D is passed. However on the
target system this variable doesn't exist, so the argument is passed without
this mandatory value, and the execution fails.

To avoid this error, check if the $D variable exists, and pass the --sysroot
argument only when it does.

Reported-by: WXbet <Wxbet@proton.me>
(From OE-Core rev: 9a2bd3b6e2e53071a1463d2804d0d4fb17b1814f)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cf39461e97098a1b28693299677888ba7e8bfccf)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Wang Mingyu
d9c3943da3 ca-certificates: upgrade 20241223 -> 20250419
0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
refreshed for 20250419

0002-sbin-update-ca-certificates-add-a-sysroot-option.patch
removed since it's included in 20250419

(From OE-Core rev: dd05818a422c8c5be1aef06405d200280b382b91)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e39cc1fb7234bf2b37856296d3c0d10ddf8cae64)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Alexander Kanavin
8951fdb63a ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch
ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch
was using a non-standard environment variable, and was replaced
with a patch that adds a command line option (and then this
was submitted upstream). ca-certificates recipe was tweaked accordingly,
and nothing else in core or meta-oe is using update-ca-certificates.

Drop default-sysroot.patch as the use case is unclear: sysroot
is explicitly specified in all known invocations of update-ca-certificate,
and if there's a place where it isn't, then update-ca-certificates
will error out trying to write to /etc, and should be fixed to
explicitly specify the sysroot.

(From OE-Core rev: a80185fd72a2be183783b0e464c07f1043d7dd37)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 90d9f0ba674d4fe8e9291f0513c13dff3775c545)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Richard Purdie
3ad2146a1b ca-certificates: upgrade 20240203 -> 20241223
(From OE-Core rev: 7e4ce7c927f6328e013db53690a2ef841b1bb9bf)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a236c2f78fee5e6db19c6be23b4a18df025607)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Alexander Kanavin
4abd3e001c ca-certificates: get sources from debian tarballs
git repo no longer has tags for recent versions which means
we had missed several of them, and wouldn't be able to get
notifications about any future releases.

(From OE-Core rev: 44c113497c7e3f9f06604e892df1eb717bb3410d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 81f013fd1312551628701bf36ac62746a2606dbd)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Theodore A. Roth
dab711ba8b ca-certificates: Add comment for provenance of SRCREV
Provide references for how the SRCREV was arrived at for the 20240203
release.

(From OE-Core rev: b1d86653f1485aa56fe8bf050931d5b8657ee499)

Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6916cdb0f05f6644edb1e432a9421595abb9f0ca)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Theodore A. Roth
302184ed4c ca-certificates: update 20211016 -> 20240203
The 20240203 version is the same as used in Ubuntu >= 24.04 and Debian
Trixie (testing).

(From OE-Core rev: 63620f034019b3b3585e263bd26b3fadd9a1692e)

Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ce19168885a04b0d77e81c1fd1c4262b195a47d4)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Ankur Tyagi
bc0e06b3b1 wireless-regdb: upgrade 2024.10.07 -> 2025.10.07
(From OE-Core rev: e0bdf9b4134b1c1f90687fb6e12e33bf77d4192c)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Ankur Tyagi
9c92d62dac webkitgtk: upgrade 2.44.3 -> 2.44.4
Bug fixes only:
https://www.webkitgtk.org/release/webkitgtk-2.44.4.html

(From OE-Core rev: 59cd37dc19548845804f29d37621f7435e206c43)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
c973f0e006 go: fix CVE-2025-61724
The Reader.ReadResponse function constructs a response string through
repeated string concatenation of lines. When the number of lines in a
response is large, this can cause excessive CPU consumption.

(From OE-Core rev: 512c36af3b9d344606b2ebf54bc2f99b88dfea63)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
79aeef5d35 go: fix CVE-2025-61723
The processing time for parsing some invalid inputs scales non-linearly with
respect to the size of the input. This affects programs which parse untrusted PEM inputs.

(From OE-Core rev: 228e4aa70743b92eaf1abd5526827b34b33f3419)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
18bfeb632b go: fix CVE-2025-47912
The Parse function permits values other than IPv6 addresses to be included
in square brackets within the host component of a URL. RFC 3986 permits
IPv6 addresses to be included within the host component, enclosed within
square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames
must not appear within square brackets. Parse did not enforce this requirement.

(From OE-Core rev: c5fc59eb87d0f92ba8596b7848d16d59773582a0)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
b3b8ae2317 go: fix CVE-2025-58189
When Conn.Handshake fails during ALPN negotiation the error contains attacker
controlled information (the ALPN protocols sent by the client) which is not escaped.

(From OE-Core rev: e734cf62f24640d116c901dd97e09ddbb1f0cc4f)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
8c87818a10 go: fix CVE-2025-58188
Validating certificate chains which contain DSA public keys can cause
programs to panic, due to a interface cast that assumes they implement
the Equal method. This affects programs which validate arbitrary certificate chains.

(From OE-Core rev: b532fa208d0b102326642a2fba8b17661a14307e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
a6d452646e go: fix CVE-2025-58187
Due to the design of the name constraint checking algorithm, the processing
time of some inputs scals non-linearly with respect to the size of the certificate.
This affects programs which validate arbitrary certificate chains.

(From OE-Core rev: ce1626d1f1e232bc6da81e89088d0c0f5f3c52b4)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Archana Polampalli
0c4e028627 go: fix CVE-2025-58185
Parsing a maliciously crafted DER payload could allocate large amounts of memory,
causing memory exhaustion.

(From OE-Core rev: f27acc863ee34b56e2c49dc96ad2b58fb35e2d46)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Peter Marko
604b1627ed curl: ignore CVE-2025-10966
Per [1] this CVE applies only when wolfssl backed is used.
8.17.0 removed WolfSSL support completely.

[1] https://curl.se/docs/CVE-2025-10966.html

(From OE-Core rev: 3de9b86c295c88005d4df53e5137bb09ea104ed0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Philippe-Alexandre Mathieu
255271dfff bitbake: fetch2/wget: Keep query parameters in URL during checkstatus
When recreating the uri in wget's checkstatus method, we only use the
scheme, host and path. This completely strips the query parameters from
the final URI and potentially breaks the checking functionality for
URLs that require query parameters (such as the AZ fetcher with SAS
token).

This bug was resolved on master in
`096301250455e2a83bdd818a56317c62436c9981`.
This patch is adapted to the scarthgap branch.

CC: Steve Sakoman <steve@sakoman.com>
(Bitbake rev: 8dcf084522b9c66a6639b5f117f554fde9b6b45a)

Signed-off-by: Philippe-Alexandre Mathieu <pamathieu@poum.ca>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Bin Lan
324f29337b bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace()
There is the following warning when executing to bitbake linux-yocto:
  bitbake/lib/bb/fetch2/__init__.py:464: DeprecationWarning: 'count' is passed as positional argument

This is because the 4th parameter of re.sub(pattern, repl, string, count=0, flags=0)
is a keyword parameter. We use keyword arguments for parameters that are not positional.

(Bitbake rev: c2a54aceab4c75cea6f8be16fe6d0caed12b32c4)

Signed-off-by: Bin Lan <bin.lan.cn@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Yannic Moog
b33a8abe77 perf: add arm64 source files for unistd_64.h
kernel commit bfb713ea53c7 ("perf tools: Fix arm64 build by generating unistd_64.h")
introduces a new dependency on source files for arm64, specifically
include/uapi/asm-generic.

Build fails with:
[..]/perf/1.0/perf-1.0/scripts/Makefile.asm-headers:33: [...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild: No such file or directory
make[4]: *** No rule to make target '[...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild'.  Stop.

Add the directory to PERF_SRC.
Fix whitespace error while at it.

(From OE-Core rev: 06d4981313ce67a8d53b1c14be9845b4b5a9f4cf)

Signed-off-by: Yannic Moog <y.moog@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Bastian Krause
4f2287dcc4 util-linux: fix pointer usage in hwclock param handling
Passing params as numbers to hwclock is broken in util-linux 2.39.3 due
to wrong pointer handling. So backport the fix from upstream included
since util-linux 2.41.

(From OE-Core rev: 3d8f88906f5560286462eaf55226b872e2805df7)

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Michael Haener
a2b737539e Remove empty file
An error occurred in backport commit
649147913e89cd8f7390cb17cd0be94c9710ffa6. The test file
is empty and has no functionality at all.

(From OE-Core rev: 0539a7869c4a3e28b3e7d0ab93fe07bfb9462d13)

Signed-off-by: Michael Haener <michael.haener@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
9e31b2eb18 binutils: patch CVE-2025-11413
Pick commit per NVD CVE report.

Note that there were two patches for this, first [1] and then [2].
The second patch moved the original patch to different location.
Cherry-pick of second patch is successful leaving out the code removing
the code from first location, so the patch attached here is not
identical to the upstream commit but is identical to applying both and
merging them to a single patch.

[1] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=1108620d7a521f1c85d2f629031ce0fbae14e331
[2] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0

(From OE-Core rev: 98df728e6136d04af0f4922b7ffbeffb704de395)

(From OE-Core rev: b220cccdab44bc707d2c934a3ea81d20b67d14b0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
ca2c8b88be binutils: patch CVE-2025-11412
Pick commit per NVD CVE report.

(From OE-Core rev: 6b94ff6c584a31d2b1e06d1e1dc19392d759b4b7)

(From OE-Core rev: fdbcbb0fe92a862a993108609eb4107e34eeeed2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
ef4b31498d binutils: patch CVE-2025-11414
Pick commit per NVD CVE report.

(From OE-Core rev: cd7ce80fa1a99916aa2f93c4d9591c5496c3ef71)

(From OE-Core rev: ddb6453a751efb2c07b0866a1aace9d4adb55089)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
97f732ce9b wpa-supplicant: patch CVE-2025-24912
Pick patches as listed in NVD CVE report.

Note that Debian lists one of the patches as introducing the
vulnerability. This is against what the original report [1] says.
Also the commit messages provide hints that the first patch fixes this
issue and second is fixing problem with the first patch.

[1] https://jvn.jp/en/jp/JVN19358384/

(From OE-Core rev: a157719ab349d9393d5a640bb2e45fc2489d5338)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:40 -08:00
Antonin Godard
c4a4df3e72 ref-manual/classes.rst: document the relative_symlinks class
Added by commit e478550c8cd8 ("openssl/fontconfig/bzip2: Use relative
symlinks instead of absolute ones (using a new class)") in OE-Core.

(From yocto-docs rev: a8687e4bb2e822670b6ad110613a12fa02943d3d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0dc554eba7d421023ecc68a70b7a19df38628b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
7e77ef9016 ref-manual/classes.rst: gettext: extend the documentation of the class
Mention the use of USE_NLS, INHIBIT_DEFAULT_DEPS and the cross-canadian
class.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: b16f19e8004d571e7a6eadfa34983781ba6a7634)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d877e54f1c85cefc00dd674d60f2db81446bd95a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
448d31c10b ref-manual/variables.rst: document the USE_NLS variable
Part of bitbake.conf, this variable allowing to enable or disable
translation was undocumented. Add a entry to the glossary.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 675b776390c8079deb8f1912dac44b574688a9c7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 92a55345a56b5038c0344669daaa7a3a99dd0fc0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
121ce25859 ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable
Added by commit 96a9702a24a7 ("distro_features_check: expand with
IMAGE_FEATURES") in OE-Core.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 7c387b11c9844809a0f8debb5b21f5c0a0220d97)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860ddbd491ee9db291868bd939392538a2c64a4b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
2cf19dbd79 ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: b6dfa4af0bd0b7c8c2a642b377f8fbf7b24cc4e8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit bbc7f26240c2db5cd4179f297ae49c778789514e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
f1125c2cf7 ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 5270b62a0a10169710be11561f1c2623f550f567)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0551456cba6016d5014c2be8d6906e58a324cc4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
ef8c458f20 ref-manual/classes,variables: document the CCACHE_DISABLE variable
Can be used in recipes that want to explicitly skip Ccache support when
the ccache class is enabled.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: e4fb6cd20955046a397b63bfe57f6cb4020b9cbb)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b1b4adc8d4d9d23ff6fd91bca632bb0f5277e72b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Robert P. J. Day
b0e19cc72f overview-manual/yp-intro.rst: update on-target packaging info
- drop references to obsolete tar packaging format
  - add references to apt and dpkg utilities for .deb packaging
  - add reference to alternative "dnf" .rpm packaging

(From yocto-docs rev: d1331418317576b569ea2b046adf46ec7af8a15a)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d4374ac86ebe7980908ed905018ccfb773ac666e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
João Marcos Costa
ba0fd17fa6 variables.rst: fix LAYERDEPENDS description
This variable does not apply to the scope of a single recipe, but rather
to the scope of the entire layer.

(From yocto-docs rev: a86f2e5d291b86dbf56aefab08f4d3b0e5529801)

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eec26e11adb6e3a9c4f53f825b9a1730c9ddee12)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Paul Barker
88bdd0ed92 dev-manual, test-manual: Update autobuilder output links
The current autobuilder cluster is at valkyrie.yocto.io, published files
on autobuilder.yocto.io will be missing or out-of-date.

(From yocto-docs rev: b3b95e590248025d59a7cef311bb0abf207e72fb)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9ed06c070e309b52f1dbf8877867dcede79f4cb6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
059f795ebe ref-manual/classes.rst: extend the uninative class documentation
Extend the documentation of the uninative class based on [1].

[1]: https://lore.kernel.org/r/061e6150ce177221f7b6ee8754b03a20347a92c3.camel@linuxfoundation.org

Co-developed-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From yocto-docs rev: 0193bfa7966f301e46253e25eaa0482aeb21d9d4)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 68996f0f3bf882714e8d96a0aa7b2492fe16d0c3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
9019056557 ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM
Document the UNINATIVE_URL and UNINATIVE_CHECKSUM variables.

(From yocto-docs rev: 6b2440465ed6d48b2ec504940dda9517db863796)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 974fe4e1c5db65b462a382e089e016326e7b3f26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Praveen Kumar
aabe690b3f bind: upgrade 9.18.33 -> 9.18.41
This upgrade fixes
CVE-2025-8677,CVE-2025-40778 and CVE-2025-40780.

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/changelog.html

(From OE-Core rev: 4cb834388759540ea5bf7265389b9f1b2e15333a)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yogita Urade
2f480a8669 tiff: ignore CVE-2025-8961
This CVE is for the tool which is removed in v4.6.0 via [1] and
re-introduced again in v4.7.0 via [2].

[1] eab89a627f
[2] 9ab54a8580

(From OE-Core rev: 1ff4b39374a5b328069a928e7234c3397769dc6f)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Hongxu Jia
a769ae7a7d u-boot: fix CVE-2024-42040
Backport a patch [1] from upstrem to fix CVE-2024-42040 [2]

[1] 81e5708cc2
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-42040

(From OE-Core rev: 5c086db3f44d44f31e90f95ccb429639a1ff481d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yash Shinde
f2b841423f binutils: fix CVE-2025-8225
CVE: CVE-2025-8225

It is possible with fuzzed files to have num_debug_info_entries zero
after allocating space for debug_information, leading to multiple
allocations.

* dwarf.c (process_debug_info): Don't test num_debug_info_entries
to determine whether debug_information has been allocated,
test alloc_num_debug_info_entries.

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4]

(From OE-Core rev: 7feed679262025b8405488d064e2c546a3ed7a0c)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yash Shinde
3574b5a9d1 binutils: fix CVE-2025-11081
CVE: CVE-2025-11081

Trying to dump .sframe in a PE file results in a segfault accessing
elf_section_data.

	* objdump (dump_sframe_section, dump_dwarf_section): Don't access
	elf_section_type without first checking the file is ELF.

PR 33406 SEGV in dump_dwarf_section
[https://sourceware.org/bugzilla/show_bug.cgi?id=33406]

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b]

(From OE-Core rev: 6ed800208a56d69faf4a1b3458caa8d412f01b89)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
David Nyström
b45fdb365d lz4: fix CVE-2025-62813
Prevent attackers to cause a denial of service (application crash) or
possibly have unspecified other impact when the application processes
untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in
lib/lz4frame.c mishandles NULL checks.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-62813

Upstream patch:
f64efec011

(From OE-Core rev: 0a63e3e120cc6958e2963a3ad510ec7c03f1adae)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Matthias Schiffer
4a784d7f74 curl: only set CA bundle in target build
In native/nativesdk builds, sysconfdir refers to a recipe sysroot
directory, which will disappear once the workdir is cleaned up, breaking
libcurl's HTTPS connections.

By simply not setting --with-ca-bundle at all in non-target builds, curl
defaults to the host system's CA certificates, which is desirable anyways
to allow builds in environments that require local CA certificates.

(From OE-Core rev: 4909a46e93ba774c960c3d3c277e2a669af3fea6)

(From OE-Core rev: 0f98fecda8a0436f760e6fd9f3b7eb510e5258b8)

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Rasmus Villemoes
bd0c87a3ac iptables: remove /etc/ethertypes
When building an image including iptable built with the libnftnl
PACKAGECONFIG, one hits

Downloading file:.../oe-rootfs-repo/armv8a/libkmod2 * check_data_file_clashes: Package iptables wants to install file .../rootfs/etc/ethertypes
        But that file is already provided by package  * netbase

This used to be handled by
0003-Makefile.am-do-not-install-etc-ethertypes.patch, but that patch
got removed with the 1.8.9->1.8.10 upgrade (commit 4616ada82e70).

I think the rationale for dropping the patch was wrong; the commit log
talks about xtables.conf, which is indeed gone from upstream, but said
patch didn't change anything about xtables.conf, it did

-dist_conf_DATA        = etc/ethertypes etc/xtables.conf
+dist_conf_DATA        = etc/xtables.conf

However, instead of patching iptables to not install ethertypes, and
having to forward-port that patch, it is much simpler to just remove
the file in this do_install:append.

(From OE-Core rev: a970b6c927fb4c04473484f6e4b0a9853c8a5896)

Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Uwe Kleine-König <u.kleine-koenig@baylibre.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Daniel Semkowicz
5ea0467919 gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs
There is a bug in GStreamer 1.22 that prevents video playback when
some of the v4l2codecs are paired with sinks that do not support
GstVideoMeta. This is the case of the Qt 6.9 sink used by some
of the Qt components.

For example, when the v4l2codecs-vp8dec decoder is paired with
QMediaPlayer, video playback fails to start with the following error:

  WARN   videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
  ERROR  videodecoder gstvideodecoder.c:4635:gst_video_decoder_allocate_output_buffer: Failed to allocate the buffer..
  WARN   videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
  WARN  matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: Internal data stream error.
  WARN  matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: streaming stopped, reason not-negotiated (-4)

This problem is already fixed in GStreamer 1.24, so backport the fix.
This fixes the buffer allocation failure for H.264, H.265, and VP8.

CC: Steve Sakoman <steve@sakoman.com>
CC: Anuj Mittal <anuj.mittal@intel.com>
(From OE-Core rev: 1be0de000bb852f1acc9644c1cb702336d7fdd61)

Signed-off-by: Daniel Semkowicz <dse@thaumatec.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Martin Jansa
2a7d38f814 flex: fix build with gcc-15 on host
* fixes:
  http://errors.yoctoproject.org/Errors/Details/853017/

../../flex-2.6.4/src/../lib/malloc.c:6:12: warning: conflicting types for built-in function ‘malloc’; expected ‘void *(long unsigned int)’ [-Wbuiltin-declaration-mismatch]
    6 |      void *malloc ();
      |            ^~~~~~
../../flex-2.6.4/src/../lib/malloc.c:5:1: note: ‘malloc’ is declared in header ‘<stdlib.h>’
    4 |      #include <sys/types.h>
  +++ |+#include <stdlib.h>
    5 |
../../flex-2.6.4/src/../lib/malloc.c: In function ‘rpl_malloc’:
../../flex-2.6.4/src/../lib/malloc.c:16:15: error: too many arguments to function ‘malloc’; expected 0, have 1
   16 |        return malloc (n);
      |               ^~~~~~  ~
../../flex-2.6.4/src/../lib/malloc.c:6:12: note: declared here
    6 |      void *malloc ();
      |            ^~~~~~
make[2]: *** [Makefile:1431: ../lib/stage1flex-malloc.o] Error 1

(From OE-Core rev: c13635db898146de4935c8c1c5e61cd732fa694e)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Soumya Sambu
4c457412c8 elfutils: Fix CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils
0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the
component eu-strip. The manipulation leads to denial of service. The attack needs to
be approached locally. The exploit has been disclosed to the public and may be used.
The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is
recommended to apply a patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1377

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=fbf1df9ca286de3323ae541973b08449f8d03aba

(From OE-Core rev: ae89d0c2ca49c40429f787577d280b5886f42cc1)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Soumya Sambu
12f14af0bb elfutils: Fix CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192. This
vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c
of the component eu-strip. The manipulation leads to denial of service. It is
possible to launch the attack on the local host. The complexity of an attack is
rather high. The exploitation appears to be difficult. The exploit has been
disclosed to the public and may be used. The name of the patch is
b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to
fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1376

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918

(From OE-Core rev: 06e3cd0891f553b0ed036d9247dfa7c5ed814d78)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Peter Marko
2421e79018 expat: patch CVE-2025-59375
Pick patch from PR mentioning this CVE [1]

It's a complex patch so I have checked diff of 2.6.4 and commit before
these patches landed. There were no changes in memory allocations.
Also version in scarthgap is still not that much different from current
upstream master.
Ptests pass.

Also picked one documentation commit  (-00) to resolve patch conflict.

Following conflicts were resolved manually:
* commit "mass-cppcheck.sh: Activate in-code suppression comments" was
  skipped as it only edited github actions not yet available in 2.6.4
* commit "lib: Implement tracking of dynamic memory allocations"
  ale had conflict in github actions not yet available in 2.6.4
* commit "fuzz: Be robust towards NULL return from XML_ExternalEntityParserCreate"
  edited file "expat/fuzz/xml_lpm_fuzzer.cpp" which is not present in
  our version yet. Since we're not using fuzzying, this is not needed.
* the final changelog commit needed lot conflict resolution actions

Finally picked PR fixing regression [2] together with two minor commits
to have a clean cherry-picks.
Also here the Changes commit needed conflict resolution.

[1] https://github.com/libexpat/libexpat/pull/1034
[2] https://github.com/libexpat/libexpat/pull/1048

(From OE-Core rev: 684d3cdbc08ce41dc1f92e1f228eee34bc2bc1fe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Anders Heimer
251d8b676e libpam: mark CVE-2025-6018 as not applicable
CVE-2025-6018 is a local privilege escalation in PAM that requires
`user_readenv=1` to be enabled in the PAM configuration. The default
configuration does not enable reading user environment files (user_readenv
is 0 by default). Hence this vulnerability cannot be exploited using the
default configuration.

(From OE-Core rev: 3f2a9ad03326dc87681cf47ed5f73712ebaa624c)

Signed-off-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Peter Marko
ad597f4a54 vulnerabilities: update nvdcve file name
The filename is outdated as its version was already bumped and there are
also different files for different feed choices.
Use glob to match any available file.

(From yocto-docs rev: 6cd7492bf83232744390f34e496367e94b63e701)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Lee Chee Yang
c760866299 migration-guides: add release notes for 4.0.30
(From yocto-docs rev: 3f21dfda982b57a4667824f3c873fddc91ee5f5e)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e89c95b167c24cfb9c1d5d548a26872393ca2fee)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Michael Haener
06cbccf616 oeqa/runtime/ping: don't bother trying to ping localhost
If SLIRP is being used instead of TAP for networking to the guest then
the target IP will be localhost.  There's no point in pinging localhost
to see if the target is up but whilst you'd think it is harmless, in
some containers ping doesn't actually have enough rights to work:

  ping: socktype: SOCK_RAW
  ping: socket: Operation not permitted
  ping: => missing cap_net_raw+p capability or setuid?

Look at the target address and if it's localhost or 127.0.0.* return
immediately.

(Backport from OE-Core rev: a06ef43d2a50e16c32bd6edbdc7b32c3528687d5)

(From OE-Core rev: 649147913e89cd8f7390cb17cd0be94c9710ffa6)

Signed-off-by: Michael Haener <michael.haener@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Carlos Alberto Lopez Perez
208a66a96b icu: Backport patch to fix build issues with long paths (>512 chars)
There is a bug libicu that causes libicu to be installed incorrectly when
the build system uses long paths (more than 512 chars).

This condition is not very difficult to trigger on a OE build system
due to the long paths an the deep of the directories that are usually
generated by default.
Also the bug is very subtle and won't be detected by the QA post-install
processes because what this bug causes is that a different version of
libicudata.so.X.Y (one without data) is installed instead of the one
containing the data, but there won't be any file missed on the installation
(just that it installed the wrong one).

See: https://unicode-org.atlassian.net/browse/ICU-22813

This patch backports the fix from upstream/main

(From OE-Core rev: 67d1352873957decacde30ff208fb7bb635b0c5d)

(From OE-Core rev: 0860992436092f7651e22e2b894f0d0a365a9bb0)

Signed-off-by: Carlos Alberto Lopez Perez <clopez@igalia.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Benjamin Hahn <B.Hahn@phytec.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Peter Marko
2e5bb26c2c python3: upgrade 3.12.11 -> 3.12.12
Drop upstreamed patch and refresh remaining patches.

Release information:
* https://www.python.org/downloads/release/python-31212/
* The release you're looking at is Python 3.12.12, a security bugfix
  release for the legacy 3.12 series.

Handles CVE-2025-59375.

(From OE-Core rev: f1234b8451ba843b5f9ec1d2066c21f54d6bc3b8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
dba2d4436d linux-yocto/6.6: update to v6.6.111
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    655054d2c3c1 Linux 6.6.111
    3d3abf3f7e8b KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    284e67a93b8c net/9p: fix double req put in p9_fd_cancelled
    ab172f4f4262 crypto: rng - Ensure set_ent is always present
    f5f235be7612 riscv: mm: Do not restrict mmap address based on hint
    1602c9b4578a riscv: mm: Use hint address in mmap if available
    e242e52fdfe4 driver core/PM: Set power.no_callbacks along with power.no_pm
    e857421992ce staging: axis-fifo: flush RX FIFO on read errors
    a3c71d6c8332 staging: axis-fifo: fix TX handling on copy_from_user() failure
    6d953e9d3981 staging: axis-fifo: fix maximum TX packet length check
    bfeea103cad9 serial: stm32: allow selecting console when the driver is module
    cb7630e714d6 hid: fix I2C read buffer overflow in raw_event() for mcp2221
    dc4874366cf6 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
    647410a7da46 ALSA: usb-audio: Kill timer properly at removal
    97e87f367c91 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
    bf28f5db40d5 can: rcar_canfd: Fix controller mode setting
    e93af787187e can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
    03510f5fce33 btrfs: ref-verify: handle damaged extent root tree
    bcccd0220751 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
    081f14b9a3eb perf subcmd: avoid crash in exclude_cmds when excludes is empty
    6d59f7467f83 platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
    4b91d0c5781a dm-integrity: limit MAX_TAG_SIZE to 255
    7f7187118bb5 ASoC: amd: acp: Adjust pdm gain value
    8281c2a63bbc wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    96dc17ae64b1 USB: serial: option: add SIMCom 8230C compositions
    228d06c4cbfc media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    71ed8b81a490 media: tuner: xc5000: Fix use-after-free in xc5000_release
    f82dc869220d media: tunner: xc5000: Refactor firmware load
    250b6e009ff9 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence

(From OE-Core rev: 2a947cb13d0d46747f14aa6a1aa39a486459ee8a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
787bcb1b6f linux-yocto/6.6: update to v6.6.110
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    e617101e5626 Linux 6.6.110
    70e1e5fe9f7e ASoC: qcom: audioreach: fix potential null pointer dereference
    f617d515d66c media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
    71da40648741 media: rc: fix races with imon_disconnect()
    bb10a9ddc8d6 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    f03aa5e39da7 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    e28d05370969 gcc-plugins: Remove TODO_verify_il for GCC >= 16
    5d646a763232 crypto: sha256 - fix crash at kexec

(From OE-Core rev: 42854520a9476ce5ac210097a5f6ce18ecc66c80)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
c4fd9fd38f linux-yocto/6.6: update to v6.6.109
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    f34f16e5c6323 Linux 6.6.109
    eb53056323f13 drm/i915/backlight: Return immediately when scale() finds invalid parameters
    4529bb0b6be3d minmax.h: remove some #defines that are only expanded once
    1a899044a0f5a minmax.h: simplify the variants of clamp()
    9955044f552b5 minmax.h: move all the clamp() definitions after the min/max() ones
    26c3d697becf3 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    511e7d2e4d51f minmax.h: reduce the #define expansion of min(), max() and clamp()
    85d619594313e minmax.h: update some comments
    6012f69bf7495 minmax.h: add whitespace around operators and after commas
    46648b94e6ebb minmax: fix up min3() and max3() too
    f0be4c5dc213d minmax: improve macro expansion and type checking
    7194a302345da minmax: don't use max() in situations that want a C constant expression
    bb63c996c2db0 minmax: simplify min()/max()/clamp() implementation
    6183c6579356a minmax: make generic MIN() and MAX() macros available everywhere
    c0c83f4cd074b i40e: add validation for ring_len param
    6e4251690710d i40e: increase max descriptors for XL710
    7ea47a560a7a3 drm/ast: Use msleep instead of mdelay for edid read
    ed6fa21f68973 gpiolib: Extend software-node support to support secondary software-nodes
    457d2c5e112fd loop: Avoid updating block size under exclusive owner
    78f579cb7d825 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
    e7a85efb873fa mm: migrate_device: use more folio in migrate_device_finalize()
    684a9a995748c ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
    53888cd32a3f6 s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
    09e3bda3a7ba2 fbcon: Fix OOB access in font allocation
    adac90bb1aaf4 fbcon: fix integer overflow in fbcon_do_set_font
    c9c2a51f91aea mm/hugetlb: fix folio is still mapped when deleted
    df1fa034c0fc2 kmsan: fix out-of-bounds access to shadow memory
    cab278cead49a afs: Fix potential null pointer dereference in afs_put_server
    58d304a89178d ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
    3887f3814c0e7 tracing: dynevent: Add a missing lockdown check on dynevent
    8703940bd30b5 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
    b769490521cf9 i40e: improve VF MAC filters accounting
    b247cdd04750e i40e: add mask to apply valid bits for itr_idx
    edecce7abd715 i40e: add max boundary check for VF filters
    e748f1ee493f8 i40e: fix validation of VF state in get resources
    3883e9702b6a4 i40e: fix input validation logic for action_meta
    2cc26dac0518d i40e: fix idx validation in config queues msg
    50a1e2f50f6c2 i40e: fix idx validation in i40e_validate_queue_map
    3cefd898b7aa1 HID: asus: add support for missing PX series fn keys
    ba7bcfd52c66d smb: client: fix wrong index reference in smb2_compound_op()
    348736955ed6c futex: Prevent use-after-free during requeue-PI
    6ffa6b5bc861a drm/gma500: Fix null dereference in hdmi teardown
    df2c071061ed5 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
    7b209698e648b net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
    816d30afbad52 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
    a7a2b29c1ee44 net: dsa: lantiq_gswip: do also enable or disable cpu port
    be0bd592298f8 selftests: fib_nexthops: Fix creation of non-FDB nexthops
    24046d31f6f92 nexthop: Forbid FDB status change while nexthop is in a group
    31ae2fbc9fcb9 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
    98a76bd96f382 bnxt_en: correct offset handling for IPv6 destination address
    82a1463c968b1 vhost: Take a reference on the task in struct vhost_task.
    bcce99f613163 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
    6a0070c5c3ad3 Bluetooth: hci_sync: Fix hci_resume_advertising_sync
    c957284701353 ethernet: rvu-af: Remove slash from the driver name
    17edec1830e48 can: peak_usb: fix shift-out-of-bounds issue
    3664ae91b26d1 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
    2e423e1990f39 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
    be1b25005fd0f can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
    cbc1de71766f3 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
    0baf92d0b1590 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
    f64abeebf763c bpf: Reject bpf_timer for PREEMPT_RT
    865eec09b6e44 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
    210b91bfe355b wifi: virt_wifi: Fix page fault on connect
    c5be7edd42602 smb: server: don't use delayed_work for post_recv_credits_work
    6017196aabf1d cpufreq: Initialize cpufreq-based invariance before subsys
    35bb271de241d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
    ebe7a2e46d189 arm64: dts: imx8mp: Correct thermal sensor index
    1744aff07b833 mm: folio_may_be_lru_cached() unless folio_test_large()
    d37ec803b2813 mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
    768c44cc8b638 mm/gup: check ref_count instead of lru before migration
    dc58ab1eb90c9 mm: add folio_expected_ref_count() for reference count calculation
    4ed203f79821c mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
    df2580fbcedea IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
    943754ad81131 ALSA: usb-audio: Add mute TLV for playback volumes on more devices
    0aac2fa4d0c75 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
    ea6016c9ec61d ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
    b61b90b07416f i2c: designware: Add quirk for Intel Xe
    41ea28a2de255 mmc: sdhci-cadence: add Mobileye eyeQ support
    306697a775fbc usb: core: Add 0x prefix to quirks debug output
    dc77154e83048 ALSA: usb-audio: Fix build with CONFIG_INPUT=n
    a3961b1f7f79e ALSA: usb-audio: Convert comma to semicolon
    d04d301614630 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
    8fa69bd18148e ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
    9db2614986bd0 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
    e8c605fece5b9 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
    bafc648b82c3b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
    08a96e22bd37f ALSA: usb-audio: Fix block comments in mixer_quirks
    18f9e77de5272 firewire: core: fix overlooked update of subsystem ABI version
    ca3e48e96816c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE

(From OE-Core rev: 5234d795417f97cfce7bcd891e7bdeabc6f36e9e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
623cf58e62 linux-yocto/6.6: update to v6.6.108
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    147338df3487 Linux 6.6.108
    42a6aeb4b238 Revert "loop: Avoid updating block size under exclusive owner"
    06146c26f5cf minmax: add a few more MIN_T/MAX_T users
    af8b531ecfd4 minmax: simplify and clarify min_t()/max_t() implementation
    2d396aa8264d minmax: avoid overly complicated constant expressions in VM code
    532733ff82b9 mptcp: propagate shutdown to subflows when possible
    3ef938f6f0b3 rtc: pcf2127: fix SPI command byte for PCF2131 backport
    075abf0b1a95 iommu/amd/pgtbl: Fix possible race while increase page table level
    564f2312e2ff xhci: dbc: Fix full DbC transfer ring after several reconnects
    3c6dd29a460f xhci: dbc: decouple endpoint allocation from initialization
    27b04564f7a3 phy: ti: omap-usb2: fix device leak at unbind
    34a8d5a198bb phy: Use device_get_match_data()
    0ee0ef483aae selftests: mptcp: userspace pm: validate deny-join-id0 flag
    650150cc9a3e mptcp: pm: nl: announce deny-join-id0 flag
    a6157484bee3 vmxnet3: unregister xdp rxq info in the reset path
    e7b7a9387955 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
    2374c11189ef crypto: af_alg - Set merge to zero early in af_alg_sendmsg
    6a075f80f303 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
    15a77e1ab0a9 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
    e6b0616a360f ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
    7740da20a3a0 ASoC: wm8974: Correct PLL rate rounding
    b4e8741955dc ASoC: wm8940: Correct typo in control name
    b7e4884dd853 ASoC: wm8940: Correct PLL rate rounding
    abc9f859a9ea io_uring: include dying ring in task_work "should cancel" state
    c8e69b783bc4 io_uring: backport io_should_terminate_tw()
    115e7d4d5ee8 ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
    0a3d5a4d4adc selftests: mptcp: avoid spurious errors on TCP disconnect
    9ef1af5d4040 selftests: mptcp: connect: catch IO errors on listen side
    666b49c848f1 rds: ib: Increment i_fastreg_wrs before bailing out
    689aee35ce67 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
    7e4c3cd7f0a1 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
    6584e7ecfa7d mmc: mvsdio: Fix dma_unmap_sg() nents value
    ac4e940dc7da ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
    411f7d4f7038 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
    468bb23472b7 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
    fc7bd02dadb8 btrfs: tree-checker: fix the incorrect inode ref size check
    090b61b87420 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
    561eef41aaa3 LoongArch: Check the return value when creating kobj
    2ff7ef2f71b4 LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
    fb6ee62d3082 LoongArch: Update help info of ARCH_STRICT_ALIGN
    90c0ffa1e0d9 power: supply: bq27xxx: restrict no-battery detection to bq27000
    84ac57c4bbfd power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
    7c4491b5644e crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
    ee74d69af170 nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
    d3cb3f209d35 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
    eb0378dde086 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
    d2cfefa14ce8 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
    8eeb2091e72d cnic: Fix use-after-free bugs in cnic_delete_task
    cd093e8bdcfe net: liquidio: fix overflow in octeon_init_instr_queue()
    13f57d484676 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
    4cefe5be7388 tls: make sure to abort the stream if headers are bogus
    dfd06131107e tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
    97d797c5fc6f bonding: don't set oif to bond dev when getting NS target destination
    2cb17c88edd3 net/mlx5e: Harden uplink netdev access against device unbind
    fd74bd40f1a4 net/mlx5e: Consider aggregated port speed during rate configuration
    a7f10a466d36 i40e: remove redundant memory barrier when cleaning Tx descs
    0255c5100470 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
    af114ef225e5 selftests: mptcp: sockopt: fix error messages
    dedaa9bcf79c mptcp: tfo: record 'deny join id0' info
    36d9f72e5d66 mptcp: set remote_deny_join_id0 on SYN recv
    29a5fd482cd5 bonding: set random address only when slaves already exist
    ea53e6a47e14 qed: Don't collect too many protection override GRC elements
    2f4b68e7905e dpaa2-switch: fix buffer pool seeding for control traffic
    4f364023ddcf um: virtio_uml: Fix use-after-free after put_device in probe
    5d2c34ff78b8 btrfs: fix invalid extref key setup when replaying dentry
    4a1e3ec28e80 cgroup: split cgroup_destroy_wq into 3 workqueues
    9ba2b399dee2 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
    eae22a2573a0 wifi: mac80211: fix incorrect type for ret
    93e063f15e17 wifi: mac80211: increase scan_ies_len for S1G
    0ffb49ba247c ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
    6085291a1a58 wifi: wilc1000: avoid buffer overflow in WID string configuration

(From OE-Core rev: 0b5c6e21160e54b3b571343d932614b23231e273)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
0eb11e9267 linux-yocto/6.6: update to v6.6.107
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    af1544b5d072 Linux 6.6.107
    f075a33ef204 x86: disable image size check for test builds
    23f24d0a538e drm/i915/power: fix size for for_each_set_bit() in abox iteration
    0a87bf8bd5d7 drm/amdgpu: fix a memory leak in fence cleanup when unloading
    d70b5910ca31 net: mdiobus: release reset_gpio in mdiobus_unregister_device()
    cce57cd8c5de ksmbd: fix null pointer dereference in alloc_preauth_hash()
    ce807c4c88d2 phy: ti-pipe3: fix device leak at unbind
    7c89ea3ab302 phy: tegra: xusb: fix device and OF node leak at probe
    221f6739369b dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
    ebf6c7c908e5 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
    e0727853992a usb: gadget: midi2: Fix MIDI2 IN EP max packet size
    a04b32b0ec1b usb: gadget: midi2: Fix missing UMP group attributes initialization
    bea1946b6919 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
    26f296e4c497 xhci: fix memory leak regression when freeing xhci vdev devices depth first
    0d861bc0b5c4 RISC-V: Remove unnecessary include from compat.h
    156677ea10ba hrtimers: Unconditionally update target CPU base after offline timer migration
    b1fa39fb3026 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
    6276a6b2c84e hrtimer: Remove unused function
    c504b5aaaaa5 regulator: sy7636a: fix lifecycle of power good gpio
    1baed10553fc dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
    df82c7901513 dmaengine: idxd: Fix double free in idxd_setup_wqs()
    f0e460925679 dmaengine: idxd: Fix refcount underflow on module unload
    0e95ee7f532b dmaengine: idxd: Remove improper idxd_free
    608c14c671a8 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
    b072e32e0874 hsr: use rtnl lock when iterating over ports
    72dbae1f2f21 net: hsr: Add VLAN CTAG filter support
    64a58ae64da5 net: hsr: Add support for MC filtering at the slave device
    94b050726288 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
    deedea599e87 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
    1e1adfffd3fe can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
    23431998a377 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
    ff00b2ed7c64 igb: fix link test skipping when interface is admin down
    e450b4966f72 docs: networking: can: change bcm_msg_head frames member to support flexible array
    e6867c0ae100 tunnels: reset the GSO metadata before reusing the skb
    5e84e18f6727 net: bridge: Bounce invalid boolopts
    fe78891f296a net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
    092e5703d400 Disable SLUB_TINY for build testing
    8a8f093e621c USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
    e88b7810b43e USB: serial: option: add Telit Cinterion FN990A w/audio compositions
    bb3498089f86 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
    a0da801d3ea0 serial: sc16is7xx: fix bug in flow control levels init
    1e92afef6061 tty: hvc_console: Call hvc_kick in hvc_write unconditionally
    af253b1a5daa Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
    7bd41f9c96dd Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
    27e126072ee0 Input: iqs7222 - avoid enabling unused interrupts
    854baafc00c4 kernfs: Fix UAF in polling when open file is released
    5de7b4141af1 cifs: fix pagecache leak when do writepages
    9f4b38ad41d6 mm/khugepaged: fix the address passed to notifier on testing young
    c95c22402b00 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios
    394547b9113f btrfs: fix corruption reading compressed range when block size is smaller than page size
    a29f891d4f37 btrfs: use readahead_expand() on compressed extents
    7bb675c9f025 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
    9fe0415156fb mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
    60d7a3d2b985 mm/damon/sysfs: fix use-after-free in state_show()
    23538cfbeed8 libceph: fix invalid accesses to ceph_connection_v1_info
    b97edd195442 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
    252bc25d7aac mtd: nand: raw: atmel: Fix comment in timings preparation
    cfdde9197ecd drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
    9adb902be26b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
    b2fbe0f9f80b drm/mediatek: fix potential OF node use-after-free
    6632845292a4 mm/damon/core: set quota->charged_from to jiffies at first charge window
    3d278e89c2ea mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
    8577ded2ee3d fuse: prevent overflow in copy_file_range return value
    01e1eba64860 fuse: check if copy_file_range() returns larger than requested size
    c50336dfcb24 mtd: rawnand: stm32_fmc2: fix ECC overwrite
    06d8ef8f8537 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
    31dc1603aa43 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
    9d55370cc4e2 i2c: i801: Hide Intel Birch Stream SoC TCO WDT
    0709bc11b942 ocfs2: fix recursive semaphore deadlock in fiemap call
    8345a93b9bda mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
    e69f61b8c08e compiler-clang.h: define __SANITIZE_*__ macros only when undefined
    deedce87471e Revert "SUNRPC: Don't allow waiting for exiting tasks"
    6f628d7dd8ac EDAC/altera: Delete an inappropriate dma_free_coherent() call
    2089d8a316f4 KVM: SVM: Set synthesized TSA CPUID flags
    2b8a1969cae5 rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
    d89abc4fbee8 rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
    4e86206b6967 rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
    8be3d52101b0 proc: fix type confusion in pde_set_flags()
    66bcb04a441f tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
    449682e76f32 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
    d660c8d8142e s390/cpum_cf: Deny all sampling events by counter PMU
    1262bda871da tracing: Silence warning when chunk allocation fails in trace_pid_write
    69d99a936f00 NFSv4/flexfiles: Fix layout merge mirror check.
    c288e4c39d21 NFSv4.2: Serialise O_DIRECT i/o and copy range
    9f2fdb18d0bf NFSv4.2: Serialise O_DIRECT i/o and clone range
    4089fd70a508 NFSv4.2: Serialise O_DIRECT i/o and fallocate()
    320a0954e2c8 NFS: Serialise O_DIRECT i/o and truncate()
    275d9fd06d96 fs/nfs/io: make nfs_start_io_*() killable
    06c26a679029 ftrace/samples: Fix function size computation
    f7ec68cc74d8 tracing: Fix tracing_marker may trigger page fault during preempt_disable
    781ec30354e6 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
    b39234ede545 NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
    a022c9a46455 NFSv4: Don't clear capabilities that won't be reset
    9339b4e75a81 SUNRPC: call xs_sock_process_cmsg for all cmsg
    fd00ae04c5aa flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
    0214b96a6a63 ima: limit the number of ToMToU integrity violations
    905d43b8ad24 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
    9da2a9d3ccd8 media: i2c: imx214: Fix link frequency validation
    817a962db3f3 NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
    913ff520714f nfsd: Fix a regression in nfsd_setattr()
    392260eb8e67 kasan: fix GCC mem-intrinsic prefix with sw tags
    d699575d00ff mm: introduce and use {pgd,p4d}_populate_kernel()
    3f8810b2d22d kunit: kasan_test: disable fortify string checker on kasan_strings() test

(From OE-Core rev: 4964bdf8bf8b4c889928478db3e0d901e748fe55)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
d78bf37c9c linux-yocto/6.6: update to v6.6.106
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    60a9e718726f Linux 6.6.106
    3b9e7e5c5298 x86/vmscape: Add old Intel CPUs to affected list
    1e1dc1f9edb9 x86/vmscape: Warn when STIBP is disabled with SMT
    a5d029f1152a x86/bugs: Move cpu_bugs_smt_update() down
    34e566704105 x86/vmscape: Enable the mitigation
    f866eef8d1c6 x86/vmscape: Add conditional IBPB mitigation
    813cb831439c x86/vmscape: Enumerate VMSCAPE bug
    9d1677060428 Documentation/hw-vuln: Add VMSCAPE documentation
    fe9731e10004 Linux 6.6.105
    be4e6a221467 spi: fsl-qspi: Fix double cleanup in probe error path
    054a444b4c17 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
    b718de5904a6 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
    d0b26a9f5742 cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
    a44d0904d673 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
    524ee2606a30 riscv: use lw when reading int cpu in asm_per_cpu
    522ffe298627 mm: slub: avoid wake up kswapd in set_track_prepare
    ad2df864033e slub: Reflow ___slab_alloc()
    c866c40d07c4 tools: gpio: remove the include directory on make clean
    3c331f7fc5b6 tools: gpio: rm .*.cmd on make clean
    7e4f8e09d577 drm/amd/amdgpu: Fix missing error return on kzalloc failure
    718c248902dd drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
    c9c4635a6d55 perf bpf-event: Fix use-after-free in synthesis
    85da7f36d9a0 drm/bridge: ti-sn65dsi86: fix REFCLK setting
    1a7d3947a5dd spi: spi-fsl-lpspi: Clear status register after disabling the module
    cd53048e7460 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
    a339956545a5 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
    a786ef5f693b spi: spi-fsl-lpspi: Fix transmissions when using CONT
    2313baff36d0 hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
    8699358b6ac9 pcmcia: Add error handling for add_interval() in do_validate_mem()
    3ee8f5c8938f pcmcia: omap: Add missing check for platform_get_resource
    8d7ee56bf530 Revert "drm/amdgpu: Avoid extra evict-restore process."
    b9cf42a8f034 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
    5f46882be912 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
    7d98166183d6 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
    2c6c9d319017 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
    13d0854e3538 drm/mediatek: Add crtc path enum for all_drm_priv array
    d5875a478b1b vmxnet3: update MTU after device quiesce
    5174ea81d6ca net: dsa: microchip: linearize skb for tail-tagging switches
    3b6a5df36604 net: dsa: microchip: update tag_ksz masks for KSZ9477 family
    16fea5067092 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
    dd2b7abd0da3 ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    7df63b5ddd07 ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    47aba94a924c iio: pressure: mprls0025pa: use aligned_s64 for timestamp
    e791bf216c9e iio: light: opt3001: fix deadlock due to concurrent flag access
    91da53307391 iio: chemical: pms7003: use aligned_s64 for timestamp
    fb6a7c1da207 iio: imu: inv_mpu6050: align buffer for timestamp
    977849e8acd2 btrfs: adjust subpage bit start based on sectorsize
    b088ae4e4184 PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
    30d201ee3a37 thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
    50ae352c1848 spi: fsl-qspi: use devm function instead of driver remove
    0ef7058b4dc6 mm/slub: avoid accessing metadata when pointer is invalid in object_err()
    ba0ccc1be52c nouveau: fix disabling the nonstall irq due to storm code
    033f09b647db cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
    83440514ef2a cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
    86cade7791a2 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
    e7f4f16ff167 cpufreq: intel_pstate: Revise global turbo disable check
    de6b545bcdba Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
    94f7d9070382 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
    f4f7cde70f59 net: pcs: rzn1-miic: Correct MODCTRL register offset
    50a84d5c8140 e1000e: fix heap overflow in e1000_set_eeprom
    1cfa5dd05847 cifs: prevent NULL pointer dereference in UTF16 conversion
    bb37252c9af1 batman-adv: fix OOB read/write in network-coding decode
    d96cc9a1b577 scsi: lpfc: Fix buffer free/clear order in deferred receive path
    abab31c377cb platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
    350bfdd2841f drm/amdgpu: drop hw access in non-DC audio fini
    9e4293766e4f wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
    9df29aa5637d wifi: mwifiex: Initialize the chan_stats array to zero
    bc983b834354 soc: qcom: mdt_loader: Deal with zero e_shentsize
    698abcf08818 proc: fix missing pde_set_flags() for net proc files
    e9188f66e949 ocfs2: prevent release journal inode after journal shutdown
    f9b8d4dba8e7 sched: Fix sched_numa_find_nth_cpu() if mask offline
    6797a8b3f71b mm: move page table sync declarations to linux/pgtable.h
    26ff568f390a x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
    2ee32c4c4f63 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
    50f2f392eb6e arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
    90e9372ec0b0 ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
    ad17940a6618 ALSA: usb-audio: Add mute TLV for playback volumes on some devices
    a4e366fbec8a phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
    9b035445b7c9 selftest: net: Fix weird setsockopt() in bind_bhash.c.
    85c1c86a67e0 ppp: fix memory leak in pad_compress_skb
    01d2690c09e6 net: atm: fix memory leak in atm_register_sysfs when device_register fail
    7d449b7a6c8e ax25: properly unshare skbs in ax25_kiss_rcv()
    5852cee1d8f6 mctp: return -ENOPROTOOPT for unknown getsockopt options
    7f8869586dd6 net/smc: Remove validation of reserved bits in CLC Decline message
    90ab05ed47c1 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
    bee1e19cf1fa net: thunder_bgx: decrement cleanup index before use
    4535729550cf net: thunder_bgx: add a missing of_node_put
    e472f59d02c8 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
    609f6debdff3 wifi: libertas: cap SSID len in lbs_associate()
    ccb839602a82 wifi: cw1200: cap SSID length in cw1200_do_join()
    61b80fbdc072 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
    5d7b2d45770e wifi: ath11k: fix group data packet drops during rekey
    6bf934426760 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
    38b86b0a37df wifi: ath11k: rename ath11k_start_vdev_delay()
    14ed9f84c7c0 wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
    fb216d980fae i40e: Fix potential invalid access when MAC list is empty
    f18d9b3abf9c net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
    668f4f6382c3 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
    1cf0b558cbb7 netlink: add variable-length / auto integers
    5430388a8111 net: macb: Fix tx_ptr_lock locking
    8d09b13789ba icmp: fix icmp_ndo_send address translation for reply direction
    1dda64fb3f5e mISDN: Fix memory leak in dsp_hwec_enable()
    9a4abe262df9 xirc2ps_cs: fix register access when enabling FullDuplex
    6077d16b5c0f Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
    bd75eba88e88 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
    2acc8d3f0a3c netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
    50db11e2bbb6 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
    f1150153c4e5 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
    b7d08929178c wifi: cfg80211: fix use-after-free in cmp_bss()
    4a05520d12a7 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
    f7a48ef44576 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
    5b94a825945a tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
    0383e172435f arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
    add1ecc8f3ad tee: fix NULL pointer dereference in tee_shm_put
    bf89b1f87c72 fs: writeback: fix use-after-free in __mark_inode_dirty()
    41e168db5942 Bluetooth: hci_sync: Avoid adding default advertising on startup
    703ea9e34f96 cpupower: Fix a bug where the -t option of the set subcommand was not working.
    2b21fd1cf77e drm/amd/display: Don't warn when missing DCE encoder caps
    235a4c0a8aaa cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
    ee58a0a35378 LoongArch: Save LBT before FPU in setup_sigcontext()
    dc4a024b1990 btrfs: avoid load/store tearing races when checking if an inode was logged
    48545620ca8f btrfs: fix race between setting last_dir_index_offset and inode logging
    9f76a2e19baf btrfs: fix race between logging inode and checking if it was logged before
    7acfa07c585e bpf: Fix oob access in cgroup local storage
    dbd8ec2261b8 bpf: Move bpf map owner out of common struct
    8e573ac21fcd bpf: Move cgroup iterator helpers to bpf.h
    3eeefeb9d62d bpf: Add cookie object to bpf maps
    355bd0b51d2f Linux 6.6.104
    d3cc7476b89f xfs: do not propagate ENODATA disk errors into xattr code
    0699faf70413 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
    6c9552de7f7e HID: mcp2221: Handle reads greater than 60 bytes
    5a809b34250c HID: mcp2221: Don't set bus speed on every transfer
    1b3ccc394807 net/mlx5: SF, Fix add port error handling
    ea687c003663 net: rose: fix a typo in rose_clear_routes()
    4e86e5ba325e drm/nouveau/disp: Always accept linear modifier
    1424f6132fc8 smb3 client: fix return code mapping of remap_file_range
    3c3321091733 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
    4191ea1f0bb3 fs/smb: Fix inconsistent refcnt update
    4f43a6d376da dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
    8911ec881cd7 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
    e422370e6ab2 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
    b9166ea27d0a HID: wacom: Add a new Art Pen 2
    88d3c2790c33 HID: logitech: Add ids for G PRO 2 LIGHTSPEED
    8783b2a0b740 HID: quirks: add support for Legion Go dual dinput modes
    d4e6e2680807 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
    5f3c0839b173 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
    c84ba4cdf4c6 x86/microcode/AMD: Handle the case of no BIOS microcode
    f49161646e03 KVM: x86: use array_index_nospec with indices that come from guest
    925599eba460 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
    463aa96fca62 sctp: initialize more fields in sctp_v6_from_sk()
    9c547c8eee9d net: rose: include node references in rose_neigh refcount
    f8c29fc437d0 net: rose: convert 'use' field to refcount_t
    4998ab3eb2b8 net: rose: split remove and free operations in rose_remove_neigh()
    b0f8725196ae net: stmmac: Set CIC bit only for TX queues with COE
    dc38d0111c16 net: stmmac: xgmac: Correct supported speed modes
    d02d635fc03d net: stmmac: Rename phylink_get_caps() callback to update_caps()
    ce006b60fc49 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
    9b0acd3bb291 net/mlx5e: Set local Xoff after FW update
    dec9d873bdf7 net/mlx5e: Update and set Xon/Xoff upon port speed set
    cdd96ed12524 net/mlx5e: Update and set Xon/Xoff upon MTU set
    3e07c623fbc5 net/mlx5: Nack sync reset when SFs are present
    a623e80aaa85 net/mlx5: Convert SF port_indices xarray to function_ids xarray
    a7e9da4d3afb net/mlx5: Use devlink port pointer to get the pointer of container SF struct
    25659835c7af net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
    ddac9d0fe249 net/mlx5: Fix lockdep assertion on sync reset unload event
    8da591ae2614 net/mlx5: Add support for sync reset using hot reset
    6292688e07d0 net/mlx5: Add device cap for supporting hot reset in sync reset flow
    09fd27c8621e net/mlx5: Reload auxiliary drivers on fw_activate
    7acefa4c66aa phy: mscc: Fix when PTP clock is register and unregister
    b3c70f6fc258 net: dlink: fix multicast stats being counted incorrectly
    589edd3dc8fb dt-bindings: display/msm: qcom,mdp5: drop lut clock
    dc70ea942fcd ice: fix incorrect counter for buffer allocation failures
    05fc7307e352 ice: stop storing XDP verdict within ice_rx_buf
    29bcd31ace16 ice: gather page_count()'s of each frag right before XDP prog call
    40a9f217cde1 ice: Introduce ice_xdp_buff
    4de399767ddc drm/nouveau: remove unused memory target test
    32a498445641 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
    3c80c230d6e3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
    4bd2866db002 Bluetooth: hci_sync: fix set_local_name race condition
    961abec8184a Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
    f356ed87c78c Bluetooth: hci_event: Mark connection as closed during suspend disconnect
    4c549d87f016 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
    430786612abe HID: input: report battery status changes immediately
    61d733a568d8 HID: input: rename hidinput_set_battery_charge_status()
    e7d0bd359f4c powerpc/kvm: Fix ifdef to remove build warning
    6de90c2a3b6c drm/msm: Defer fd_install in SUBMIT ioctl
    a208d67cb44b net: ipv4: fix regression in local-broadcast routes
    9b2700151660 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
    181feb41f0b2 NFS: Fix a race when updating an existing write
    9a1963404cc2 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
    b15342e09644 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
    612527136e0c erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
    8f8e6a781783 ASoC: codecs: tx-macro: correct tx_macro_component_drv name
    24b9ed739c8c smb: client: fix race with concurrent opens in rename(2)
    bc1427a48371 smb: client: fix race with concurrent opens in unlink(2)
    43662b846c7a scsi: core: sysfs: Correct sysfs attributes access rights
    28c8fb7ae2ad ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
    9e0743eb6dcf of: dynamic: Fix use after free in of_changeset_add_prop_helper()
    749137b41e70 of: Add a helper to free property struct
    d3be2b8cff6f mips: lantiq: xway: sysctrl: rename the etop node
    e877b861dab9 mips: dts: lantiq: danube: add missing burst length property
    6e59b8483e6e pinctrl: STMFX: add missing HAS_IOMEM dependency
    43e3118c677a of: dynamic: Fix memleak when of_pci_add_properties() failed

(From OE-Core rev: 212df1778245f7b299b549285ea0994234e163fa)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
7b08b57feb linux-yocto/6.6: update to v6.6.103
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    cc1a1c5b404a Linux 6.6.103
    40b36d9a612b alloc_fdtable(): change calling conventions.
    a0a3ace2a578 netfilter: nf_reject: don't leak dst refcount for loopback packets
    c1aa819059b8 s390/hypfs: Enable limited access during lockdown
    972d84075e3b s390/hypfs: Avoid unnecessary ioctl registration in debugfs
    81a0f002e4fd ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
    7d67d591ecb0 net/mlx5e: Preserve shared buffer capacity during headroom updates
    dacf1ca11735 net/mlx5: Base ECVF devlink port attrs from 0
    c71a3e2b02e7 Octeontx2-af: Skip overlap check for SPI field
    2919ca876e15 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
    45b70352d186 bonding: Add independent control state machine
    f0c7885ef8d3 bonding: update LACP activity flag after setting lacp_active
    ca88ac44368c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
    aa12ee1c1bd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
    ee7134481ff7 igc: fix disabling L1.2 PCI-E link substate on I226 on init
    d10f670b6f86 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
    5189c0b7c251 LoongArch: Optimize module load time by optimizing PLT/GOT counting
    070b4af44c4b net/smc: fix UAF on smcsk after smc_listen_out()
    ba51d73408ed gve: prevent ethtool ops after shutdown
    748da8083122 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    3a4eeea79a46 phy: mscc: Fix timestamping for vsc8584
    ca18d751bcc9 ppp: fix race conditions in ppp_fill_forward_path
    06a7acd45a8f net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
    87f78799e358 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
    2156d9e9f2e4 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
    857b8387a977 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
    b79027f7ebb7 ALSA: usb-audio: Fix size validation in convert_chmap_v3()
    f93032e5d68f drm/hisilicon/hibmc: fix the hibmc loaded failed bug
    e50599adc966 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
    469c45c8a16a Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
    ae1d9779f089 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
    8f80c633cba1 iommu/amd: Avoid stack buffer overflow from kernel cmdline
    f5ad0819f902 scsi: qla4xxx: Prevent a potential error pointer dereference
    96476b043efb net: bridge: fix soft lockup in br_multicast_query_expired()
    7aee3d519d63 RDMA/bnxt_re: Fix to initialize the PBL array
    5d3f018fc09a RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
    7b044e925aba RDMA/bnxt_re: Fix to do SRQ armena by default
    acf0dea8dc90 RDMA/erdma: Fix ignored return value of init_kernel_qp
    76588276fcf8 iosys-map: Fix undefined behavior in iosys_map_clear()
    34c3bc762bc4 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
    72553fe19317 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
    ad994eda5d95 spi: spi-fsl-lpspi: Clamp too high speed_hz
    7207923d8453 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    4986548825fe usb: typec: maxim_contaminant: disable low power mode when reading comparator values
    f56e75b85b54 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
    e600de541c37 usb: xhci: Fix slot_id resource race conflict
    8d2b63fbfd4d iio: imu: inv_icm42600: change invalid data error to -EBUSY
    0af5812acfac iio: imu: inv_icm42600: Convert to uXX and sXX integer types
    ec3310a5168b iio: imu: inv_icm42600: use = { } instead of memset()
    f52d8ba43259 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
    f13768b9b829 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
    99b508340d0d iio: light: as73211: Ensure buffer holes are zeroed
    58ff8064cb4c tracing: Limit access to parser->buffer when trace_get_user failed
    648e01a023cb tracing: Remove unneeded goto out logic
    c09dd3773b59 tls: fix handling of zero-length records on the rx_list
    93879b3ba967 powerpc/boot: Fix build with gcc 15
    5c67f7e4330e mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
    03695cdfcb5e compiler: remove __ADDRESSABLE_ASM{_STR,}() again
    fa833df2ba9e drm/amd/display: Don't overclock DCE 6 by 15%
    7660124e6506 usb: dwc3: pci: add support for the Intel Wildcat Lake
    84c95dbf5bec usb: dwc3: Remove WARN_ON for device endpoint command timeouts
    319aba29a486 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
    dbfaa79103b4 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
    bf29c9618160 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
    adfdc6ed189b USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
    cd3bace9c9a3 usb: renesas-xhci: Fix External ROM access timeouts
    3b4a57b5cc3b usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
    d84f6e77ebe3 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
    0eb4ed2aa261 comedi: pcl726: Prevent invalid irq number
    842f307a1d11 comedi: Make insn_rw_emulate_bits() do insn->n samples
    decaa5401cb4 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
    20729b825914 cdx: Fix off-by-one error in cdx_rpmsg_probe()
    4de009fc0a3a most: core: Drop device reference after usage in get_channel()
    bc4e3186a2e2 iio: proximity: isl29501: fix buffered read on big-endian systems
    6a605d307b02 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
    3b114a3282ab ftrace: Also allocate and copy hash for reading of filter files
    bb912a20fab0 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
    65e46aeaf84a drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
    d404824f3d25 cpuidle: governors: menu: Avoid selecting states with too much latency
    3a92598c3e55 cpuidle: menu: Remove iowait influence
    f0aa8591ba0c mmc: sdhci-pci-gli: Add a new function to simplify the code
    1eae029f79b6 mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
    fd269466abe6 selftests: mptcp: pm: check flush doesn't reset limits
    a9cf4362d4d0 mptcp: disable add_addr retransmission when timeout is 0
    ebe3d8cf1ee6 mptcp: remove duplicate sk_reset_timer call
    1982e18bbcc1 use uniform permission checks for all mount propagation changes
    c5aa6ba11273 fs/buffer: fix use-after-free when call bh_read() helper
    212eb86f75b4 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
    740ccba37a12 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
    342f7a1dda77 ext4: preserve SB_I_VERSION on remount
    047b4cb30e42 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
    c065c8d20dd0 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
    6d53b2a134da scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
    0c3333f7bfee PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
    d0252e69b932 PCI: imx6: Delay link start until configfs 'start' written
    cee067ef2055 PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
    7b688b365ace PCI: rockchip: Use standard PCIe definitions
    72ff3acf0044 soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
    ef2f64dff281 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
    a98aa702c74f drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
    e95f4fd56f6c drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
    5b011264c5da drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
    36a6b43573d1 drm/amd/display: Avoid a NULL pointer dereference
    86c2825791c3 s390/sclp: Fix SCCB present check
    50db1ab0f3ec ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
    0a1385336970 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
    63962ff932ef mm/debug_vm_pgtable: clear page table entries at destroy_args()
    8d03bce0dcb2 squashfs: fix memory leak in squashfs_fill_super
    92c9689646c8 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
    0207d8faa1fb memstick: Fix deadlock by moving removing flag earlier
    28b82be094e2 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
    d1446050a29a sched/fair: Fix frequency selection for non-invariant case
    858e035ea448 topology: Set capacity_freq_ref in all cases
    68df021d3cfa arm64/amu: Use capacity_ref_freq() to set AMU ratio
    cf4faefd3a7b cpufreq/cppc: Set the frequency used for computing the capacity
    11da2b1ae4c9 energy_model: Use a fixed reference frequency
    6688eb926932 cpufreq/schedutil: Use a fixed reference frequency
    9771732ab39c cpufreq: Use the fixed and coherent frequency for scaling capacity
    46db6d4797f1 sched/topology: Add a new arch_scale_freq_ref() method
    0ed2068de1f9 kbuild: userprogs: use correct linker when mixing clang and GNU ld
    5b7912d83962 ata: libata-scsi: Return aborted command when missing sense and result TF
    9e9b1fa7ecaa PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
    ac2e62cab097 PM: runtime: Simplify pm_runtime_get_if_active() usage
    c0f179c1547f ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
    dc35f594b0d2 usb: dwc3: imx8mp: fix device leak at unbind
    1636b5e9c354 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    365771ee3dc8 wifi: mac80211: check basic rates validity in sta_link_apply_parameters
    b59bea60396c KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
    65b6b10fc005 s390/mm: Remove possible false-positive warning in pte_free_defer()
    0852c97fec9c btrfs: send: make fs_path_len() inline and constify its argument
    8f3aae5fd76d btrfs: send: use fallocate for hole punching with send stream v2
    f942e47453a8 btrfs: send: avoid path allocation for the current inode when issuing commands
    dbda681a0a93 btrfs: send: keep the current inode's path cached
    ffc19fe2a7ad btrfs: send: add and use helper to rename current inode when processing refs
    bfed58ed10f1 btrfs: send: only use boolean variables at process_recorded_refs()
    253557254f8d btrfs: send: factor out common logic when sending xattrs
    b1947464c041 btrfs: populate otime when logging an inode item
    d7badc2ba4da btrfs: constify more pointer parameters
    9dfdea89ceb3 btrfs: fix ssd_spread overallocation
    9c64d6b07cbb btrfs: open code timespec64 in struct btrfs_inode
    8f85af32692d xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
    4734255ef39b btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
    467dcf7e4a61 btrfs: always abort transaction on failure to add block group to free space tree
    8c5bf13905f3 btrfs: move transaction aborts to the error site in add_block_group_free_space()
    b172535ccba1 btrfs: qgroup: fix race between quota disable and quota rescan ioctl
    d6f1a6c2f567 btrfs: don't ignore inode missing when replaying log tree
    a779d1dd7f2d usb: typec: fusb302: cache PD RX state
    827f7b4fe051 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    80617b3926b6 block: Make REQ_OP_ZONE_FINISH a write operation
    6c77d4e0f6ad block: reject invalid operation in submit_bio_noacct
    3bbd52a413fc fscrypt: Don't use problematic non-inline crypto engines
    c8a1e1f02921 leds: flash: leds-qcom-flash: Fix registry access after re-bind
    71230248a711 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
    84a24fb446ee net/sched: ets: use old 'nbands' while purging unused classes
    81505f137b3a net_sched: sch_ets: implement lockless ets_dump()
    00dc616e6cb5 smb: client: fix netns refcount leak after net_passive changes
    2668e038800b net: better track kernel sockets lifetime
    ac90037bf398 net: Add net_passive_inc() and net_passive_dec().
    5dd481868eb1 selftests/memfd: add test for mapping write-sealed memfd read-only
    2e4179698f84 mm: reinstate ability to map write-sealed memfd mappings read-only
    87a75f68eaba mm: update memfd seal write check to include F_SEAL_WRITE
    17c5d49beb6c mm: drop the assumption that VM_SHARED always implies writable
    440d36847a12 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
    253b7d8bafe6 mptcp: drop skb if MPTCP skb extension allocation fails
    cf0a88124e35 ACPI: pfr_update: Fix the driver update version check
    3ddd55cf19ed ipv6: sr: Fix MAC comparison to be constant-time
    b117c41b0090 net, hsr: reject HSR frame if skb can't hold tag
    3afdeb96dc5f drm/amd/display: Don't overwrite dce60_clk_mgr
    39f187cbf7ed drm/amd/display: Add primary plane to commits for correct VRR handling
    74ee7445c3b6 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
    627f30a328f2 drm/amdgpu: update mmhub 3.0.1 client id mappings
    a3201e3b7cf1 drm/amdgpu: Avoid extra evict-restore process.
    0e7f5f9aa498 drm/amd: Restore cached power limit during resume
    002860142ceb media: venus: venc: Clamp param smaller than 1fps and bigger than 240
    f866778583b6 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
    f54be97bc69b media: venus: protect against spurious interrupts during probe
    041015a46597 media: venus: hfi: explicitly release IRQ during teardown
    ba567c2e52fb media: venus: Add a check for packet size after reading from shared memory
    03c0e00ccf59 media: qcom: camss: cleanup media device allocated resource on error path
    3c0e4cc4f55f media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
    61f267b77dbc media: ov2659: Fix memory leaks in ov2659_probe()
    1c2769dc8025 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
    3d83d0b5ae50 media: usbtv: Lock resolution while streaming
    ecb7382089bc media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
    b3433cffee8d media: verisilicon: Fix AV1 decoder clock frequency
    6a41dc143e3c media: vivid: fix wrong pixel_array control size
    8ad57bd4a952 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
    c231d1964878 media: hi556: correct the test pattern configuration
    0148fcdd9140 media: gspca: Add bounds checking to firmware parser
    85bfcb0e40fe parisc: Update comments in make_insert_tlb
    9827b2b0c64e parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
    8bccf47adbf6 parisc: Revise gateway LWS calls to probe user read access
    4c981077255a parisc: Revise __get_user() to probe user read access
    d6ac1e11c4a0 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
    033605fb20a3 parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
    69cf90e5aa50 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
    0199adb6d1f2 parisc: Define and use set_pte_at()
    b334724f6b31 parisc: Check region is readable by user in raw_copy_from_user()
    fe0886c98b63 soc/tegra: pmc: Ensure power-domains are in a known state
    41f40038de62 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
    92ef491b506a f2fs: fix to avoid out-of-boundary access in dnode page
    5d109edb38c9 phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
    adb482170045 vhost/vsock: Avoid allocating arbitrarily-sized SKBs
    ee438c492b2e vsock/virtio: Validate length in packet header before skb_put()
    6ee4578274d1 PCI: endpoint: Fix configfs group removal on driver teardown
    0758862386f1 PCI: endpoint: Fix configfs group list head handling
    d1f59c792c6f mtd: rawnand: renesas: Add missing check after DMA map
    fcb12d1e4163 mtd: rawnand: fsmc: Add missing check after DMA map
    9de4819feef9 mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
    b9e9afc35a89 mtd: spi-nor: Fix spi_nor_try_unlock_all()
    749ccc175ca5 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
    747977aeefd4 pwm: mediatek: Fix duty and period setting
    070236488cc9 pwm: mediatek: Handle hardware enable and clock enable separately
    cbf3815d8c11 pwm: imx-tpm: Reset counter if CMOD is 0
    aa48271f7bef wifi: ath11k: fix dest ring-buffer corruption when ring is full
    ee3c10c9738b wifi: ath11k: fix source ring-buffer corruption
    069819aa84d2 wifi: ath11k: fix dest ring-buffer corruption
    daa2b66fa569 wifi: ath12k: fix dest ring-buffer corruption when ring is full
    bfd4918b2b9b wifi: ath12k: fix source ring-buffer corruption
    b5b6201a2b75 wifi: ath12k: fix dest ring-buffer corruption
    97e07460ba85 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
    296bcff76d41 iio: adc: ad_sigma_delta: change to buffer predisable
    50e823a23816 iio: imu: bno055: fix OOB access of hw_xlate array
    e22e5ac22736 zynq_fpga: use sgtable-based scatterlist wrappers
    981c845f2983 soc: qcom: mdt_loader: Ensure we don't read past the ELF header
    bfa87a2cafb5 ata: libata-scsi: Fix CDL control
    6f5d34088250 scsi: ufs: ufs-pci: Fix default runtime and system PM levels
    03d559670ccd scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
    8247c4269acb ata: libata-scsi: Fix ata_to_sense_error() status handling
    728abc895294 scsi: mpi3mr: Fix race between config read submit and interrupt completion
    78f1d313442c dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
    c4adc491a326 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
    745c9b114eaf arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
    d1aca165c1f1 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
    06c3fda2bda8 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
    2fdddc181262 btrfs: zoned: fix write time activation failure for metadata block group
    5fc0345e1af3 ext4: fix hole length calculation overflow in non-extent inodes
    e0bb195aea7a ext4: use kmalloc_array() for array space allocation
    173270d9fe86 ext4: don't try to clear the orphan_present feature block device is r/o
    d387cee49cfe ext4: fix reserved gdt blocks handling in fsmap
    052cd20d8d75 ext4: fix fsmap end of range reporting with bigalloc
    ab1cc862e55e ext4: check fast symlink for ea_inode correctly
    d0570a5b9ccc tracing: fprobe-event: Sanitize wildcard for fprobe event name
    d9e157fcfebc ksmbd: extend the connection limiting mechanism to support IPv6
    a1d2bab4d533 ksmbd: fix refcount leak causing resource not released
    820949bbf33f Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
    5858448a6c65 crypto: qat - flush misc workqueue during device shutdown
    fd2844179567 crypto: qat - lower priority for skcipher and aead algorithms
    ea95d4e8a263 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
    c82ad93be639 vt: defkeymap: Map keycodes above 127 to K_HOLE
    c0942ce38843 vt: keyboard: Don't process Unicode characters in K_OFF mode
    5e17429679a8 bus: mhi: host: Detect events pointing to unexpected TREs
    38de63c2876e bus: mhi: host: Fix endianness of BHI vector table
    e192ebb7521c usb: dwc3: meson-g12a: fix device leaks at unbind
    d52ad077933f usb: musb: omap2430: fix device leak at unbind
    21c400de1079 usb: gadget: udc: renesas_usb3: fix device leak at unbind
    295425f52052 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
    e06e9ef1912c m68k: Fix lost column on framebuffer debug console
    b4b21367cb9c platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
    1bf5cc1edb37 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
    cb7b3633ed74 serial: 8250: fix panic due to PSLVERR
    2328010117d0 rcu: Fix racy re-initialization of irq_work causing hangs
    049874a185aa HID: apple: avoid setting up battery timer for devices without battery
    05a40e70ff5a HID: magicmouse: avoid setting up battery timer when not needed
    5661fdd218c2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
    b9669bedc63d tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
    fdd1c9f78c24 media: uvcvideo: Do not mark valid metadata as invalid
    8f274e2b05fd media: venus: Fix OOB read due to missing payload bound check
    a97e062e4ff3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
    1da95d3d4b7b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
    e21a3ddd5873 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
    74fb3b1b335b parisc: Makefile: fix a typo in palo.conf
    2a70cbd1aef8 hv_netvsc: Fix panic during namespace deletion with VF
    27b118aebdd8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    f83d4c81bda3 btrfs: do not allow relocation of partially dropped subvolumes
    77e07f7226f4 btrfs: zoned: do not select metadata BG as finish target
    6b801da8e146 btrfs: fix log tree replay failure due to file with 0 links and extents
    a002525b2fd7 btrfs: clear dirty status from extent buffer on error at insert_new_root()
    99e36ff41a74 btrfs: zoned: do not remove unwritten non-data block group
    e02bdb223399 btrfs: abort transaction during log replay if walk_log_tree() failed
    ec5bfcfb6e0d btrfs: zoned: use filesystem size not disk size for reclaim decision
    9dfe40cb6c2c cdc-acm: fix race between initial clearing halt and open
    729ac69a3e81 thunderbolt: Fix copy+paste error in match_service_id()
    5c4a2ffcbd05 comedi: fix race between polling and detaching
    e613904fa419 usb: typec: ucsi: Update power_supply on power role change
    ca9fb654f89b misc: rtsx: usb: Ensure mmc child device is active when card is present
    5badd56c711e usb: core: config: Prevent OOB read in SS endpoint companion parsing
    492207cf8372 ext4: fix largest free orders lists corruption on mb_optimize_scan switch
    88d02c333989 ext4: fix zombie groups in average fragment size lists
    d19b817540c0 iommufd: Prevent ALIGN() overflow
    2ccccb0e4178 iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
    a11b6ee7cab8 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
    7e0c0664e9aa cifs: reset iface weights when we cannot find a candidate
    1b6310d14b13 drm/amdgpu: fix incorrect vm flags to map bo
    3fbc2e43ab12 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    8270fbcc1ec4 scsi: lpfc: Remove redundant assignment to avoid memory leak
    063fe9b16be1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    24334f3cf8a2 pNFS: Fix uninited ptr deref in block/scsi layout
    198f26c55779 pNFS: Handle RPC size limit for layoutcommits
    2c5b079bcb31 pNFS: Fix disk addr range check in block/scsi layout
    cf949a960653 pNFS: Fix stripe mapping in block/scsi layout
    3b9d69f0e68a block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
    1df5970cd93d ASoC: Intel: avs: Fix uninitialized pointer error in probe()
    f2e480950d1c net: phy: smsc: add proper reset flags for LAN8710A
    6b93ab1ad84a ipmi: Fix strcpy source and destination the same
    9da4d5c3ea6b kconfig: lxdialog: fix 'space' to (de)select options
    44337363300f kconfig: gconf: fix potential memory leak in renderer_edited()
    e55c6f052032 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    933992c60c07 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    2e07a9fe5117 vfio/mlx5: fix possible overflow in tracking max message size
    48d7bdd8759c scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    0787a522cc9c scsi: target: core: Generate correct identifiers for PR OUT transport IDs
    a40c4af8083d scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    28d64271510e kconfig: nconf: Ensure null termination where strncpy is used
    106ab3cd026f vfio/type1: conditional rescheduling while pinning
    98b7b47cebe3 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    b45134f72642 f2fs: check the generic conditions first
    868f23286c1a exfat: add cluster chain loop check for dir
    6af18148675f i2c: Force DLL0945 touchpad i2c freq to 100khz
    f8c001884bb4 apparmor: use the condition in AA_BUG_FMT even with debug disabled
    dd45d42ab290 dm-table: fix checking for rq stackable devices
    f4133dc2b93d dm-mpath: don't print the "loaded" message if registering fails
    cf4a40ad2116 i3c: master: Initialize ret in i3c_i2c_notifier_call()
    4e24a6a42d91 i3c: don't fail if GETHDRCAP is unsupported
    2e487c0fdeb9 apparmor: shift ouid when mediating hard links in userns
    ef8814a9d64a rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    6e3733fe88a0 i3c: add missing include to internal header
    6dd90afb3945 module: Prevent silent truncation of module name in delete_module(2)
    d386c8e4e587 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
    b0cab3d9c70d soundwire: Move handle_nested_irq outside of sdw_dev_lock
    1e3697578567 soundwire: amd: serialize amd manager resume sequence during pm_prepare
    d2974cfd4fa6 crypto: octeontx2 - add timeout for load_fvc completion poll
    ae5a0993f1e4 media: uvcvideo: Fix bandwidth issue for Alcor camera
    6bbaec6a0369 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
    09906650484a media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
    77ac2addb1dc media: usb: hdpvr: disable zero-length read messages
    1512ced62c87 media: tc358743: Increase FIFO trigger level to 374
    9b023149b97a media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    5c809ef89e1b media: tc358743: Check I2C succeeded during probe
    815cb5818eef pinctrl: stm32: Manage irq affinity settings
    67bca5b04313 scsi: mpi3mr: Correctly handle ATA device errors
    80726da54c29 scsi: mpt3sas: Correctly handle ATA device errors
    924226822419 power: supply: qcom_battmgr: Add lithium-polymer entry
    7925dd68807c scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
    8c449e588d81 RDMA/core: reduce stack using in nldev_stat_get_doit()
    89fdac333a17 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
    773612b1edf3 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
    01c412e31d98 leds: leds-lp50xx: Handle reg to get correct multi_index
    07cba8891f2c media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
    f54eacb5b7f8 MIPS: lantiq: falcon: sysctrl: fix request memory check logic
    f22de2027b20 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
    9021924d8893 crypto: jitter - fix intermediary handling
    173cfd741ad7 jfs: upper bound check of tree index in dbAllocAG
    78989af5bbf5 jfs: Regular file corruption check
    34d8e982bac4 jfs: truncate good inode pages when hard link is 0
    39cfe2c83146 scsi: bfa: Double-free fix
    2b98d2c23317 watchdog: iTCO_wdt: Report error if timeout configuration fails
    7fe9533fb069 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    6caa737a77a5 clk: qcom: ipq5018: keep XO clock always on
    16e245176777 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
    d202efb10a4b watchdog: dw_wdt: Fix default timeout
    478bd3bc4e7f fs/orangefs: use snprintf() instead of sprintf()
    66a373f50b42 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
    4db46a83d817 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
    41368857a354 mfd: axp20x: Set explicit ID for AXP313 regulator
    6c9e12fef997 clk: tegra: periph: Fix error handling and resolve unsigned compare warning
    d960f4b79391 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    de6af003239a crypto: hisilicon/hpre - fix dma unmap sequence
    cbe740de32bb fbdev: fix potential buffer overflow in do_register_framebuffer()
    6daa13c20190 cifs: Fix calling CIFSFindFirst() for root path without msearch
    74e7af8334c9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
    3a5236c610e2 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
    8708914f05ec drm/amd/display: Only finalize atomic_obj if it was initialized
    110822d339a0 vhost: fail early when __vhost_add_used() fails
    c2bdb45f366a vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
    bc9ef9783c6b net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    e7a375453cca rcu: Fix rcu_read_unlock() deadloop due to IRQ work
    58ed3ac8538c drm/ttm: Respect the shrinker core free target
    39de3ce65635 drm/amd/display: Avoid trying AUX transactions on disconnected ports
    d02ee5eebbcf selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
    c03a532fe1d3 bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
    86f3cff54956 uapi: in6: restore visibility of most IPv6 socket options
    3c9ca275100e drm/ttm: Should to return the evict error
    e4b67ceb8634 drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
    1df5e6eb71e4 net: ncsi: Fix buffer overflow in fetching version id
    859c54bb0120 ionic: clean dbpage in de-init
    ec33caca7662 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
    c2e719bcaa26 ptp: Use ratelimite for freerun error message
    868b52651f69 bpftool: Fix JSON writer resource leak in version command
    d930e738c0a8 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    8609f3c44e27 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    bc0e01d663f4 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    668280aa65fc net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    7f36d13d5243 gve: Return error for unknown admin queue command
    a1172cbfe51c net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    8d1f4798c876 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
    63acb8e26620 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
    50dbeff47178 dpaa_eth: don't use fixed_phy_change_carrier
    7c299d0bc983 neighbour: add support for NUD_PERMANENT proxy entries
    a70c31416ddd wifi: iwlegacy: Check rate_idx range after addition
    ad8742e2d1da netmem: fix skb_frag_address_safe with unreadable skbs
    88517afa7401 powerpc: floppy: Add missing checks after DMA map
    eb1e1526b82b wifi: ath12k: Decrement TID on RX peer frag setup error handling
    9874a00ba22b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
    afb39537d894 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
    c387d8fcd330 wifi: mac80211: update radar_required in channel context after channel switch
    cf48c230a17a drm/amd/display: Fix 'failed to blank crtc!'
    c43b6b0a8342 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    83aba958e33f wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    5c942d80f3e8 wifi: ath12k: Add memset and update default rate value in wmi tx completion
    9febff30eb52 drm/amd/display: Separate set_gsl from set_gsl_source_select
    f2a4ca5397f5 net: fec: allow disable coalescing
    b3472b9d9d42 net: atlantic: add set_power to fw_ops for atl2 to fix wol
    3d8090bb5342 xfrm: Duplicate SPI Handling
    81667abecebc net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    99f142ec75dd net: thunderbolt: Enable end-to-end flow control also in transmit
    bdd66b918215 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
    b6c39aaa85c4 wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
    51eb6a5f209b wifi: rtw89: Disable deep power saving for USB/SDIO
    ecf449ef73a5 wifi: rtw89: Fix rtw89_mac_power_switch() for USB
    f3d4fa12d6b0 drm/msm: use trylock for debugfs
    e457e0560b55 wifi: mac80211: fix rx link assignment for non-MLO stations
    f7bc50927b4e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
    5a9b21808323 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    ffa3a8007d2f wifi: mac80211: don't complete management TX on SAE commit
    c73e54dba107 sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
    3f8bcc32050e s390/stp: Remove udelay from stp_sync_clock()
    11238e68cb68 wifi: iwlwifi: mvm: fix scan request validation
    6cd174be9239 um: Re-evaluate thread flags repeatedly
    dae6099edf91 wifi: iwlwifi: mvm: set gtk id also in older FWs
    8baba93e2e95 perf/cxlpmu: Remove unintended newline from IRQ name format string
    05ee035af6d8 net: phy: micrel: Add ksz9131_resume()
    fd6a21638a1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    c133a9327d2d net: ipv4: fix incorrect MTU in broadcast routes
    606908835bc4 wifi: cfg80211: Fix interface type validation
    a4d2cdb31cf4 net: mctp: Prevent duplicate binds
    b55947b725f1 rcu: Protect ->defer_qs_iw_pending from data race
    e424653498e4 arm64: Mark kernel as tainted on SAE and SError panic
    ac361868f134 net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    d1c8d2426a63 net: ag71xx: Add missing check after DMA map
    b0862e88b887 et131x: Add missing check after DMA map
    72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
    b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq
    d46484e9dbb2 s390/time: Use monotonic clock in get_cycles()
    65b7c838736d wifi: cfg80211: reject HTC bit for management frames
    7eb1e485bc84 ktest.pl: Prevent recursion of default variable options
    30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails
    5d3559880e9c net: usb: cdc-ncm: check for filtering capability
    8f5015143227 xen/netfront: Fix TX response spurious interrupts
    5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
    b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
    245d23754f5b ASoC: qcom: use drvdata instead of component to keep id
    c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification
    70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff
    7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level
    ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    454a27cbab9b usb: core: usb_submit_urb: downgrade type check
    0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
    789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    b80d6972859b x86/bugs: Avoid warning when overriding return thunk
    16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown
    240e611b784d ALSA: hda: Handle the jack polling always via a work
    d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
    a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init()
    f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path
    d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    f95174d4d5c4 ACPI: processor: fix acpi_object initialization
    e656c2db4922 PM: sleep: console: Fix the black screen issue
    753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    5aa770f45da7 firmware: tegra: Fix IVC dependency problems
    ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter
    6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang
    46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM
    149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits()
    3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer
    0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t
    58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
    cfa9b873a29c ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
    7423fc4da94d EDAC/synopsys: Clear the ECC counters on init
    f53e16dde8ad PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
    d7d6d076ee95 ARM: rockchip: fix kernel hang during smp initialization
    6a8b0c7e93df cpufreq: Exit governor when failed to start old governor
    20bbe54f454f gpio: wcd934x: check the return value of regmap_update_bits()
    6b8a8eac58a9 remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
    082735fbcdb6 ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
    84518ec7f928 soc: qcom: rpmh-rsc: Add RSC version 4 support
    16a5088670e6 usb: xhci: Avoid showing errors during surprise removal
    dabf502ee893 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    4a62f49f3d04 usb: xhci: Avoid showing warnings for dying controller
    6cd81d4ffbaa usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    b2ba2ad06d8a selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
    146262a48be2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    f5611a58f7af platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
    2d32f522c33a usb: xhci: print xhci->xhc_state when queue_command failed
    839312bff2c9 tracefs: Add d_delete to remove negative dentries
    d7e28036b0e9 securityfs: don't pin dentries twice, once is enough...
    270ea0b61725 fix locking in efi_secret_unlink()
    327276cb8a7e ext2: Handle fiemap on empty files to prevent EINVAL
    6c7fadac6cbc fs/ntfs3: correctly create symlink for relative path
    3572737a768d fs/ntfs3: Add sanity check for file name
    934065fd3024 ata: libata-sata: Disallow changing LPM state if not supported
    847a204d3067 better lockdep annotations for simple_recursive_removal()
    cb7b59560400 hfs: fix not erasing deleted b-tree node issue
    9f53b2433ad2 drbd: add missing kref_get in handle_write_conflicts
    5a1e1ab83796 udf: Verify partition map count
    ce8da5d13d8c loop: Avoid updating block size under exclusive owner
    3d2c05cbc6a3 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
    524ce0f943d7 nvme-pci: try function level reset on init failure
    1e858a7a51c7 smb/server: avoid deadlock when linking with ReplaceIfExists
    61ad294996c0 arm64: Handle KCOV __init vs inline mismatches
    b3359392b753 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
    291bb5d931c6 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    8583d067ae22 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    384a66b89f95 hfs: fix slab-out-of-bounds in hfs_bnode_read()
    4f032979b63a hfs: fix general protection fault in hfs_find_init()
    f1fe99919f62 tls: handle data disappearing from under the TLS ULP
    acfb4da42fc4 ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    7337a6356dff cpuidle: governors: menu: Avoid using invalid recent intervals data
    c11f3802d349 intel_idle: Allow loading ACPI tables for any family
    ea094f38d387 sctp: linearize cloned gso packets in sctp_rcv
    7f94af487c7f net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
    30cf81105855 netfilter: ctnetlink: fix refcount leak on table dump
    19e01bc8c1ac udp: also consider secpath when evaluating ipsec use for checksumming
    e65ad9a14256 KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
    91fa23d5b9e5 KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
    8867d91ef824 KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
    d1e28ef79b43 KVM: VMX: Extract checking of guest's DEBUGCTL into helper
    48ebed8bd66b KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
    ec70c3f25777 KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
    0d87da9d6065 KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
    d5aa9bb5e348 KVM: x86: Fully defer to vendor code to decide how to force immediate exit
    62f586df29ca KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
    ca3cc405a3bc KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
    1c1158aceaf2 KVM: VMX: Handle forced exit due to preemption timer in fastpath
    1fc288e74cf3 KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
    baf9c96e4e9d KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
    a1d4091f94c6 KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
    76025761e8f3 KVM: x86: Snapshot the host's DEBUGCTL in common x86
    cf04778ae1b5 KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
    ebc281bf14aa KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
    abe3d6a559f9 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
    d5784ea45663 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
    edc450030b20 smb: client: don't wait for info->send_pending == 0 on error
    429112e9709b smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
    19849010c9e1 ACPI: processor: perflib: Move problematic pr->performance check
    cb2e6e275d19 ACPI: processor: perflib: Fix initial _PPC limit application
    8c09ad855fbf Documentation: ACPI: Fix parent device references
    2a0c0c974bea eventpoll: Fix semi-unbounded recursion
    237e416eb621 fs: Prevent file descriptor table allocations exceeding INT_MAX
    a5ff67c66208 sunvdc: Balance device refcount in vdc_port_mpgroup_check
    17c010fe45de LoongArch: BPF: Fix jump offset calculation in tailcall
    d89d47abbad2 PCI: Extend isolated function probing to LoongArch
    987c20428f06 NFS: Fix the setting of capabilities when automounting a new filesystem
    f0b89916d2fe NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    d71abd1ae4e0 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    3b53dc1c641f io_uring/net: commit partial buffers on retry
    ccef5ee4adf5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    eb2d79333f79 net: dpaa: fix device leak when querying time stamp info
    fd5c51a187ba net: ti: icss-iep: fix device and OF node leaks at probe
    5daff127b292 net: mtk_eth_soc: fix device leak at probe
    9adaf9a04f9a net: enetc: fix device and OF node leak at probe
    dc395c838610 net: gianfar: fix device leak when querying time stamp info
    8dae82f81e34 net: phy: micrel: fix KSZ8081/KSZ8091 cable test
    346c820ef513 netlink: avoid infinite retry looping in netlink_unicast()
    c66caf21b1d0 Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
    16a46f2e84d7 gpio: mlxbf3: use platform_get_irq_optional()
    c1aa0743e54b Revert "gpio: mlxbf3: only get IRQ for device instance 0"
    a157478521b3 gpio: mlxbf2: use platform_get_irq_optional()
    50ae9f2d90b2 gpio: virtio: Fix config space reading.
    217e18011663 smb: client: remove redundant lstrp update in negotiate protocol
    a0620e152566 smb3: fix for slab out of bounds on mount to ksmbd
    d63e929bac53 ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
    fb5000cfd7bc ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
    1034719fdefd ALSA: usb-audio: Validate UAC3 cluster segment descriptors
    07c8d78dbb5e ALSA: usb-audio: Validate UAC3 power domain descriptors, too
    17a66aef7ddc io_uring: don't use int for ABI

(From OE-Core rev: f9c140c4856790ae7b752849f4df6533ca5d0027)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
a9224824c3 linux-yocto/6.6: update to v6.6.102
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    bb9c90ab9c5a Linux 6.6.102
    aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup()
    e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning
    575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    1fb873971e23 x86/sev: Evict cache lines during SNP memory validation
    fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call
    3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task
    036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw
    2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task
    e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups
    8afa818c7733 sched/core: Remove ifdeffery for saved_state
    2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer
    bab0986dc045 i2c: stm32f7: simplify status messages in case of errors
    d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler
    9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
    de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled()
    66bf243531ee USB: serial: option: add Foxconn T99W709
    2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname()
    fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP
    62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open
    b69fd87076da ksmbd: fix Preauh_HashValue race condition
    d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey
    44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY
    88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier()
    29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test
    6757a31a8e29 perf/core: Prevent VMA split of buffer mappings
    f41e9eba77bf perf/core: Exit early on perf_mmap() fail
    f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure
    b1df39462171 sunrpc: fix handling of server side tls alerts
    d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds
    bd7f84df5436 pptp: fix pptp_xmit() error path
    4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers.
    83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    f069f7c14204 smb: client: make use of common smbdirect_socket
    947569b95987 smb: smbdirect: add smbdirect_socket.h
    61f0a6849005 smb: client: Correct typos in multiple comments across various files
    91d7e6cbb3f8 smb: client: Use min() macro
    c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    28db0cb8a0da smb: server: remove separate empty_recvmsg_queue
    2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM
    39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    c377ba2be943 benet: fix BUG when creating VFs
    a55b3d153318 sunrpc: fix client side handling of tls alerts
    a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte
    0d45954034f8 net: drop UFO packets in udp_rcv_segment()
    ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment()
    194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used
    97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments
    5005d2437737 pptp: ensure minimal skb length in pptp_xmit()
    5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    b80353a72958 phy: mscc: Fix parsing of unicast frames
    b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled
    227154eb7567 md/md-cluster: handle REMOVE message earlier
    75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    1116e66111f8 NFSv4.2: another fix for listxattr
    12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery
    a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe
    3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe()
    17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection
    32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug
    9184a2bb522c sched/psi: Fix psi_seq initialization
    9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll()
    05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak
    349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set
    7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op
    9546b26d391f vfio: Prevent open_count decrement to negative
    a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly
    1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context
    345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path
    880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode
    3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    a96f2bf49fbd f2fs: doc: fix wrong quota mount option description
    dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage
    c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling
    f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling
    e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling
    8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling
    17827903802b rtc: hym8563: fix incorrect maximum clock rate handling
    bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling
    15da236904ec ucount: fix atomic_long_inc_below() argument type
    f9bd692540d8 module: Restore the moduleparam prefix length check
    7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution
    fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned
    f56f6054791e bpf: Check flow_dissector ctx accesses are aligned
    d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors
    ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time
    a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map
    7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address
    505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl
    4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next()
    1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices
    9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore
    106891c7bdbc sh: Do not use hyphen in exported variable name
    f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists
    3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map
    06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string()
    b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    bdbaa1041816 soundwire: stream: restore params when prepare ports fail
    ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value
    06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value
    5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors
    9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value
    401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value
    cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value
    214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition
    c07e017a56d6 perf tests bp_account: Fix leaked file descriptor
    9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount
    33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
    adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask
    5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue
    db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency'
    282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist
    16ce5ce11145 perf sched: Free thread->priv using priv_destructor
    e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore
    9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd()
    a99cae46ab16 Fix dma_unmap_sg() nents value
    8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    45338af03ff3 fanotify: sanitize handle_type values when reporting fid
    e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure
    85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning
    f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly
    a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    530d4db6fb89 mtd: fix possible integer overflow in erase_xfer()
    aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy
    be1e15938a16 crypto: qat - use unmanaged allocation for dc_data
    25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message
    e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER
    3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings
    9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev()
    e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size()
    f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst
    dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test
    314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found
    4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated
    9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index
    56a17d28c3dd can: kvaser_pciefd: Store device channel index
    2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction
    c9be5abdaf2e tools/rv: Do not skip idle in trace
    ee2502485702 bpf: Disable migration in nf_hook_run_bpf().
    9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports
    cdb509f59aaf kcsan: test: Initialize dummy variable
    bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit
    dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames
    bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs
    2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe
    378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated
    df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables
    03df73480547 mwl8k: Add missing check after DMA map
    5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets
    9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack
    c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters
    103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start()
    98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling
    b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines
    f56a863397f5 fbcon: Fix outdated registered_fb reference in comment
    b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage
    dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    6e2f7903241c m68k: Don't unregister boot console needlessly
    7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    f73c0bc2d1d3 net: dst: annotate data-races around dst->output
    e0b8b6687b7d net: dst: annotate data-races around dst->input
    62d7cf455c88 net/mlx5: Check device memory pointer before usage
    c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists
    ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue
    d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue
    892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
    655e3f51de5a caif: reduce stack size, again
    0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial()
    0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk
    c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test
    faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer
    cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes
    37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    2fffa72282ed soc: qcom: pmic_glink: fix OF node leak
    272cd1f24741 samples: mei: Fix building on musl libc
    f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used
    39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later
    1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    81f506193700 PM / devfreq: Check governor before using governor->name
    759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    632c151355ba arm: dts: ti: omap: Fixup pinheader typo
    40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak
    c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads"
    7ed42b79118d pps: fix poll support
    6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads
    b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe
    490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique
    f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
    448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address
    964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region
    2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region
    603df70062fb soc: qcom: QMI encoding/decoding for big endian
    41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test
    aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    1a91ba12abef gfs2: No more self recovery
    a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents
    0926e13a47fc hfs: make splice write available again
    1de5895fe68d hfsplus: make splice write available again
    d89f71aece34 ublk: use vmalloc for ublk_device's __queues
    b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails
    8d1bfdd30d17 fs_context: fix parameter name in infofc() macro
    15da73210929 audit,module: restore audit logging in load failure case
    5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies
    7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    18196a40af52 ethernet: intel: fix building with large NR_CPUS
    5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx

(From OE-Core rev: 9c0af64f5b688d89349a80cb27bbbc451abfab38)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
d0302e3d94 linux-yocto/6.6: update to v6.6.101
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    3a8ababb8b6a Linux 6.6.101
    41d3c751fcb4 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
    1af6d1696ca4 spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
    aed4053c506b drm/sched: Remove optimization that causes hang when killing dependent jobs
    79c8d935147c ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
    3277cf433815 mptcp: reset fallback status gracefully at disconnect() time
    7c96d519ee15 mptcp: plug races between subflow fail and subflow creation
    75a4c9ab8a7a mptcp: make fallback action and fallback decision atomic
    23a5773a5da5 arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
    52f5a52dc17a ksmbd: add free_transport ops in ksmbd connection
    034adb78fc43 wifi: mt76: mt7921: prevent decap offload config before STA initialization
    79e2dd573116 perf/x86/intel: Fix crash in icl_update_topdown_event()
    9ef6abbb2868 mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
    1da8bd9a10ec ksmbd: fix use-after-free in __smb2_lease_break_noti()
    5ea224eaf636 iio: hid-sensor-prox: Restore lost scale assignments
    a56b79a43f83 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
    796c96cf6685 crypto: qat - add shutdown handler to qat_dh895xcc
    4b5e07702b67 crypto: powerpc/poly1305 - add depends on BROKEN for now
    da3e9f0fac60 erofs: address D-cache aliasing
    1d117f79b5c6 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
    37c7f0f24b8e drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
    c383033b0ac8 ALSA: hda: Add missing NVIDIA HDA codec IDs
    0a776c273e71 ALSA: hda/tegra: Add Tegra264 support
    4e954080d218 comedi: comedi_test: Fix possible deletion of uninitialized timers
    45fd8421081e jfs: reject on-disk inodes of an unsupported type
    98be604d96a6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
    f9377bdf86ea usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
    457d02e71ae9 usb: typec: tcpm: allow switching to mode accessory to mux properly
    8f65f4565cab usb: typec: tcpm: allow to use sink in accessory mode
    145a56bd68f4 drm/amdkfd: Don't call mmput from MMU notifier callback
    cc690930cb24 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
    325325923a1d selftests: mptcp: connect: also cover checksum
    5cdfb402bae9 selftests: mptcp: connect: also cover alt modes
    a2cd4dcbb725 resource: fix false warning in __request_region()
    bf585ee198bb nilfs2: reject invalid file types when reading inodes
    57104237cd6c kasan: use vmalloc_dump_obj() for vmalloc error reports
    3028f2a4e746 ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
    eaf242ea6fca gve: Fix stuck TX queue for DQ queue format
    c229192417d4 e1000e: ignore uninitialized checksum word on tgp
    1624f9de4432 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
    04d098fbca47 dpaa2-switch: Fix device reference count leak in MAC endpoint handling
    1c135ff95167 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
    9433a5f437b0 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
    140ca2cac147 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
    e5354899f625 sprintf.h requires stdarg.h
    72584a9178af bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
    6e7836c83635 i2c: virtio: Avoid hang by using interruptible completion wait
    68ceeb06316e i2c: tegra: Fix reset error handling with ACPI
    0d33913fce67 i2c: qup: jump out of the loop in case of timeout
    60962eed62b9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
    989b2c5322dc net: hns3: default enable tx bounce buffer when smmu enabled
    adbf6f476cd1 net: hns3: fixed vf get max channels bug
    f377792c4186 net: hns3: disable interrupt when ptp init failed
    3cc42004f65b net: hns3: fix concurrent setting vlan filter issue
    faf44487dfc8 s390/ism: fix concurrency management in ism_cmd()
    42e42d64d851 drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
    cf81a60a9733 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
    359492c2024a can: dev: can_restart(): move debug message and stats after successful restart
    71a2dc442e12 can: dev: can_restart(): reverse logic to remove need for goto
    0ede6ce4fcf2 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
    e4f1564c5b69 net: appletalk: Fix use-after-free in AARP proxy probe
    d989748e9dbb i40e: When removing VF MAC filters, only check PF-set MAC
    0c399fd6ac5a i40e: report VF tx_dropped with tx_errors instead of tx_discards
    a05b3883083b i40e: Add rx_missed_errors for buffer exhaustion
    e4ca597d3116 net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
    c3d8a80d9557 net/mlx5: Fix memory leak in cmd_exec()
    bfebdb85496e xfrm: interface: fix use-after-free after changing collect_md xfrm interface
    2e18442d22c6 staging: vchiq_arm: Make vchiq_shutdown never fail
    6758f73f172d platform/x86: Fix initialization order for firmware_attributes_class
    d72c97b6160d x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
    0915f1856c48 regmap: fix potential memory leak of regmap_bus
    881f3066fd8d iio: adc: ad7949: use spi_is_bpw_supported()
    6a85c96e61c1 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
    fb93e41ecc75 RDMA/core: Rate limit GID cache warning messages
    233d3c54c962 regulator: core: fix NULL dereference on unbind due to stale coupling data
    0e8c65939ba2 virtio_ring: Fix error reporting in virtqueue_resize
    fa53beab4740 Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

(From OE-Core rev: 40092b395a04921dd8f0f54f352d958084167227)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
6d4a516d71 linux-yocto/6.6: update to v6.6.100
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    dbcb8d8e4163 Linux 6.6.100
    3ee59c38ae73 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
    48e879184320 nvmem: layouts: u-boot-env: remove crc32 endianness conversion
    35542cbe66c6 i2c: omap: fix deprecated of_property_read_bool() use
    056b65a02edc Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params"
    c148b7282808 Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error"
    b9e50a5169b0 ASoC: fsl_sai: Force a software reset when starting in consumer mode
    8f2852c1d7aa regulator: pwm-regulator: Manage boot-on with disabled PWM channels
    cad3ec23e398 regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
    7e5ec0059e4d i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
    a7b84035baa8 i2c: omap: Fix an error handling path in omap_i2c_probe()
    caa86f8b6c30 i2c: omap: Add support for setting mux
    6cfbff5f8dc9 usb: dwc3: qcom: Don't leave BCR asserted
    824fa25c85e8 usb: hub: Don't try to recover devices lost during warm reset.
    668c7b47a5ee usb: hub: Fix flushing of delayed work used for post resume purposes
    71f5c98d2931 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
    15fea75a7886 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    d5024dc5e644 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
    dc6a664089f1 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
    4cb17b11c8af ipv6: make addrconf_wq single threaded
    496efa228f0d sched: Change nr_uninterruptible type to unsigned long
    f371ad6471ee Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
    74bb4de32d92 rxrpc: Fix transmission of an abort in response to an abort
    7692bde89006 rxrpc: Fix recv-recv race of completed call
    7ff2d83ecf26 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
    7b0d42318393 net: bridge: Do not offload IGMP/MLD messages
    bb515c413064 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
    1f3a429c21e0 tls: always refresh the queue when reading sock
    007142a263db hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
    bd3051a81621 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    76179961c423 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
    dcbc346f50a0 ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    6a213143e0ea net/mlx5: Correctly set gso_size when LRO is used
    ab94e7af363a Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
    4ceefc9c31e7 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    f3323b18e3cc Bluetooth: SMP: If an unallowed command is received consider it a failure
    32e624912eed Bluetooth: hci_sync: fix connectable extended advertising when using static random address
    c4f16f6b071a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
    5dd6a441748d usb: net: sierra: check for no status endpoint
    27591d926191 ice: add NULL check in eswitch lag check
    eda5e38cc4dd hwmon: (corsair-cpro) Validate the size of the received input buffer
    c18726607c8a selftests: net: increase inter-packet timeout in udpgro.sh
    167006f73005 wifi: cfg80211: remove scan request n_channels counted_by
    a2f02a87fe21 nvme: fix misaccounting of nvme-mpath inflight I/O
    ec158d05eaa9 net: phy: Don't register LEDs for genphy
    5d95fbbfaa8f nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
    2baaf5bbab2a smb: client: fix use-after-free in cifs_oplock_break
    62dcd9d6e61c rpl: Fix use-after-free in rpl_do_srh_inline().
    fbe48f06e641 net/sched: sch_qfq: Fix race condition on qfq_aggregate
    21033b49cf09 block: fix kobject leak in blk_unregister_queue
    c20dd7e8f359 net: emaclite: Fix missing pointer increment in aligned_read()
    bc016b7842f6 cachefiles: Fix the incorrect return value in __cachefiles_write()
    e7be679124ba bpf: Reject %p% format string in bprintf-like helpers
    12e023df10b6 soundwire: amd: fix for clearing command status register
    84830e033bd2 soundwire: amd: fix for handling slave alerts after link is down
    673ee92bd2d3 comedi: Fix initialization of data for instructions that write to subdevice
    10f9024a8c82 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
    63390b856178 comedi: Fix some signed shift left operations
    c9d3d9667443 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
    8a3637027cee comedi: das6402: Fix bit shift out of bounds
    adb7df8a8f9d comedi: das16m1: Fix bit shift out of bounds
    955e8835855f comedi: aio_iiro_16: Fix bit shift out of bounds
    7e470d8efd10 comedi: pcl812: Fix bit shift out of bounds
    8d8519aedbf1 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    6471d4b4ac61 iio: adc: max1363: Reorder mode_list[] entries
    edff26d038d2 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    dda42f23a8f5 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
    329a80adc0e5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
    d93b20c88e5e soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    15a0a5de4950 smb: client: fix use-after-free in crypt_message when using async crypto
    0c7b20f7785c s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
    600f55da8d90 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
    d510116c80b3 net: libwx: properly reset Rx ring descriptor
    027701180a7b net: libwx: fix the using of Rx buffer DMA
    3c91a56762b1 net: libwx: remove duplicate page_pool_put_full_page()
    e30c5fa723dc mmc: sdhci_am654: Workaround for Errata i2312
    7ac120c00c5a mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
    5bfd0078f738 mmc: bcm2835: Fix dma_unmap_sg() nents value
    4206824af6dd memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    928f3a277f2c isofs: Verify inode mode when loading from disk
    4bb016438335 dmaengine: nbpfaxi: Fix memory corruption in probe()
    2bae35acbb6e af_packet: fix soft lockup issue caused by tpacket_snd()
    67ea5f37b203 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    e51cf5d4aa98 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
    645af2f069d6 arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
    bec18ebcf05c arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
    33eba752d9de net/mlx5: Update the list of the PCI supported devices
    29db3339db0e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
    d48845afa083 io_uring/poll: fix POLLERR handling
    c855b9aa093a ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
    56f99fdb0b8d drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
    823d79890048 tracing/osnoise: Fix crash in timerlat_dump_stack()
    6bc94f20a4c3 tracing: Add down_write(trace_event_sem) when adding trace event
    6ba89b382be4 tracing/probes: Avoid using params uninitialized in parse_btf_arg()
    0e5017d84d65 HID: core: do not bypass hid_hw_raw_request
    a1c0b87b7682 HID: core: ensure __hid_request reserves the report ID as the first byte
    fcda39a9c5b8 HID: core: ensure the allocated report buffer can contain the reserved report ID
    469a39a33a99 dm-bufio: fix sched in atomic context
    82b29ee8ba90 spi: Add check for 8-bit transfer with 8 IO mode support
    415d4966cb54 pch_uart: Fix dma_sync_sg_for_device() nents value
    db44a558b3af Input: xpad - set correct controller type for Acer NGR200
    0f6f30f5b01a nvmem: imx-ocotp: fix MAC address byte length
    0cd051cb5852 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    dc52aff53465 thunderbolt: Fix wake on connect at runtime
    e6a2ff56b06e i2c: stm32: fix the device used for the DMA map
    58bdd5160184 usb: gadget: configfs: Fix OOB read on empty string write
    ec35a7125d94 usb: musb: fix gadget state on disconnect
    311c434f5d76 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    909d80414869 USB: serial: option: add Foxconn T99W640
    84c320060d53 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    ad2437f4abca phy: tegra: xusb: Disable periodic tracking on Tegra234
    491175c139e5 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
    5367cdeb75cb phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

(From OE-Core rev: cf70911ca46d3f9980d475369d9f15343b6e52e2)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
a65c2420fd linux-yocto/6.6: update to v6.6.99
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    d96eb99e2f0e Linux 6.6.99
    eaf112069a90 rseq: Fix segfault on registration when rseq_cs is non-zero
    f02f0218be41 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
    97c355989928 ksmbd: fix potential use-after-free in oplock/lease break ack
    8377d7744bdc kasan: remove kasan_find_vm_area() to prevent possible deadlock
    d3927e55c959 smb: client: fix potential race in cifs_put_tcon()
    a4bb7ced4e8f selftests/bpf: adapt one more case in test_lru_map to the new target_free
    f35c825a012d Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
    3ce1d87d1f5d HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    ae915b38e262 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    b71a75739af9 bpf: Adjust free target to avoid global starvation of LRU map
    cd5b424d8322 vt: add missing notification when switching back to text mode
    f4428b2d4c68 btrfs: fix assertion when building free space tree
    2cc5ef01ea03 net: mana: Record doorbell physical address in PF mode
    9f460b235ef3 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    cd4df14f6180 net: usb: qmi_wwan: add SIMCom 8230C composition
    e07c2feb4916 ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
    ee287cf30ffb ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
    50b1e01aa123 io_uring: make fallocate be hashed work
    825088c90357 um: vector: Reduce stack usage in vector_eth_configure()
    8cafaba2f275 atm: idt77252: Add missing `dma_map_error()`
    0d8a9b6dd321 ublk: sanity check add_dev input for underflow
    5909679a82cd bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
    e644935d40cb bnxt_en: Fix DCB ETS validation
    7d4d1993517b net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    5aa8b3a1d8ab can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
    10946f834638 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
    9fa29314eba1 ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
    4a17370da6e4 net: appletalk: Fix device refcount leak in atrtr_create()
    9fbc49429a23 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
    d46186eb7bbd nbd: fix uaf in nbd_genl_connect() error path
    8fc3d7b23d13 raid10: cleanup memleak at raid10_make_request
    df5894014a92 md/raid1: Fix stack memory use after return in raid1_reshape
    d1240029f97a drm/tegra: nvdec: Fix dma_alloc_coherent error check
    5420de65efbe wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
    739296467a59 cifs: all initializations for tcon should happen in tcon_info_alloc
    03c3cd0c3b67 smb: client: fix DFS interlink failover
    d043b5da37fc smb: client: avoid unnecessary reconnects when refreshing referrals
    609a617a97c0 usb: dwc3: Abort suspend on soft disconnect failure
    e3f79e2c9ad1 usb: cdnsp: Fix issue with CV Bad Descriptor test
    ae5b191184ce usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
    7227a8229f43 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
    fd79927c8191 btrfs: fix inode lookup error handling during log replay
    6aea26dc23d5 btrfs: return a btrfs_inode from btrfs_iget_logging()
    e6031107f397 btrfs: remove redundant root argument from fixup_inode_link_count()
    28a36e75d196 btrfs: remove redundant root argument from btrfs_update_inode_fallback()
    ddead3c5ca18 btrfs: remove noinline from btrfs_update_inode()
    c31ee1695b6d netlink: make sure we allow at least one dump skb
    ce2ac2e46719 netlink: Fix rmem check in netlink_broadcast_deliver().
    5b1b8f06b179 erofs: fix to add missing tracepoint in erofs_read_folio()
    4c4f931676b6 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    d903a0fe324e smb: server: make use of rdma_destroy_qp()
    3c0994a3fd93 x86/mm: Disable hugetlb page table sharing on 32-bit
    ee21fbcb87a0 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
    ad9d4db5a8ac pwm: mediatek: Ensure to disable clocks in error path
    37e2911d2ec1 mm/vmalloc: leave lazy MMU mode on PTE mapping error
    f64046ae3401 scripts/gdb: fix interrupts.py after maple tree conversion
    ecf16604f3f0 scripts/gdb: de-reference per-CPU MCE interrupts
    e2e200c98e9f scripts/gdb: fix interrupts display after MCP on x86
    56995226431a mm: fix the inaccurate memory statistics issue for users
    167134042418 maple_tree: fix mt_destroy_walk() on root leaf node
    688bf63ee6ba kallsyms: fix build without execinfo
    c23a41086899 Revert "ACPI: battery: negate current when discharging"
    2e2e9b3d7084 drm/framebuffer: Acquire internal references on GEM handles
    dec7774d0ef9 Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    c6eb4a05af3d usb: gadget: u_serial: Fix race condition in TTY wakeup
    8c290a9d629b drm/gem: Fix race in drm_gem_handle_create_tail()
    db7402d78e7c drm/ttm: fix error handling in ttm_buffer_object_transfer
    c64f5310530b drm/sched: Increment job count before swapping tail spsc queue
    cb4c956a15f8 drm/gem: Acquire references on GEM handles for framebuffers
    ec6392061de6 wifi: prevent A-MSDU attacks in mesh networks
    1d57f7132662 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
    3d82a729530b md/md-bitmap: fix GPF in bitmap_get_stats()
    2ca1db269a8d gre: Fix IPv6 multicast route creation.
    8c8e8d4d7544 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
    20d1d9e7ce69 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
    a18776abc592 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    f536f3b09773 x86/mce: Don't remove sysfs if thresholding sysfs init fails
    cc058adb9beb x86/mce/amd: Fix threshold limit reset
    8e5058a5812e x86/mce/amd: Add default names for MCA banks and blocks
    e2d5c005dfc9 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
    efc1b2b7c1a3 rxrpc: Fix oops due to non-existence of prealloc backlog struct
    ddc4fe078948 Bluetooth: HCI: Set extended advertising data synchronously
    eb952372bf48 perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
    e63032e66bca maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
    432c5363cd6f rxrpc: Fix bug due to prealloc collision
    4c691d1b6b6d net/sched: Abort __tc_modify_qdisc if parent class does not exist
    07b585ae3699 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
    3f61b997fe01 atm: clip: Fix infinite recursive call of clip_push().
    1fb9fb5a4b5c atm: clip: Fix memory leak of struct clip_vcc.
    06935c50cfa3 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
    36cf9bcf09bd net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    0a0d040f12fe net: phy: smsc: Force predictable MDI-X state on LAN87xx
    72c62b4991a2 net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    791c8d6b76c5 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
    d437e8e7dcb9 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
    9d24bb678028 vsock: Fix transport_* TOCTOU
    401239811fa7 vsock: Fix transport_{g2h,h2g} TOCTOU
    81373cd1d72d tcp: Correct signedness in skb remaining space calculation
    be4b8392da79 tipc: Fix use-after-free in tipc_conn_close().
    42262bc4e8ef vsock: fix `vsock_proto` declaration
    55baecb9eb90 netlink: Fix wraparounds of sk->sk_rmem_alloc.
    f9b3d28f1f62 fix proc_sys_compare() handling of in-lookup dentries
    82c0f15c26be pinctrl: amd: Clear GPIO debounce for suspend
    a219fcea8e8e Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
    51e082108345 Bluetooth: hci_sync: Fix not disabling advertising instance
    c604dd2c5e6b ASoC: cs35l56: probe() should fail if the device ID is not recognized
    183bdb89af1b perf: Revert to requiring CAP_SYS_ADMIN for uprobes
    71eb118baf6e perf/core: Fix the WARN_ON_ONCE is out of lock protected region
    407f1073ea23 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    391e5ea5b877 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
    521e9ff0b67c eventpoll: don't decrement ep refcount while still holding the ep mutex

(From OE-Core rev: 5504778cd1c538b6f3c40d3106a3423abdac3203)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
574cc67a0d linux-yocto/6.6: update to v6.6.98
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    9247f4e6573a Linux 6.6.98
    20aa3d519806 x86/CPU/AMD: Properly check the TSA microcode
    59a2de10b81a Linux 6.6.97
    897761d16564 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
    8c1944905855 x86/process: Move the buffer clearing before MONITOR
    6fb766d53f61 x86/microcode/AMD: Add TSA microcode SHAs
    276499bb6944 KVM: SVM: Advertise TSA CPUID bits to guests
    90293047df18 x86/bugs: Add a Transient Scheduler Attacks mitigation
    2b6a5fbe9dc1 x86/bugs: Rename MDS machinery to something more generic
    8a7ac2737211 powerpc/kernel: Fix ppc_save_regs inclusion in build
    63cff9f57e86 usb: typec: displayport: Fix potential deadlock
    4b91b77af24c platform/x86: think-lmi: Fix sysfs group cleanup
    98002f1ac947 platform/x86: think-lmi: Fix kobject cleanup
    cb3e3244d88d platform/x86: think-lmi: Create ksets consecutively
    360546362865 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    73d43c215007 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
    6052862ba31c Logitech C-270 even more broken
    6358cb9c2a31 i2c/designware: Fix an initialization issue
    d8eab407c08d dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    59205a3e93ef smb: client: fix readdir returning wrong type with POSIX extensions
    937f49be49d6 usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
    afbec8c34428 usb: cdnsp: do not disable slot for disabled slot
    c9a841fd2ec2 Input: iqs7222 - explicitly define number of external channels
    2cd5e7c16942 Input: xpad - support Acer NGR 200 Controller
    c16b75aa6fb6 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    881c9274246c xhci: dbc: Flush queued requests before stopping dbc
    897d1170c249 xhci: dbctty: disable ECHO flag by default
    7609899eb6b7 usb: xhci: quirk for data loss in ISOC transfers
    204bdc7a8b7b NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    e3eed0134772 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
    adb29b437fe5 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    a6069306f4e1 platform/x86: hp-bioscfg: Fix class device unregistration
    8570c219cd59 platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    387da3b6d1a9 drm/v3d: Disable interrupts before resetting the GPU
    817662f9bdf8 rcu: Return early if callback is not specified
    d5c1e3f32902 mtd: spinand: fix memory leak of ECC engine conf
    d547779e72ce ACPICA: Refuse to evaluate a method if arguments are missing
    347827bd0c56 wifi: ath6kl: remove WARN on bad firmware input
    5aebb9aa538a wifi: mac80211: drop invalid source address OCB frames
    270d637100f9 aoe: defer rexmit timer downdev work to workqueue
    55dfffc5e947 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    7b9203afeb37 regulator: fan53555: add enable_time support and soft-start times
    a1d10fee0783 ASoC: amd: yc: update quirk data for HP Victus
    871beab5b4f9 powerpc: Fix struct termio related ioctl macros
    ba9117312795 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
    785200516552 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    69283b3fd463 ata: pata_cs5536: fix build on 32-bit UML
    71f89fab5cc9 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    6766316c1a9f ALSA: sb: Force to disable DMAs once when DMA mode is changed
    c7922052c6f2 ALSA: sb: Don't allow changing the DMA mode during operations
    c40ad1c04d30 drm/msm: Fix another leak in the submit error path
    fe2695b2f63b drm/msm: Fix a fence leak in submit error path
    5df2087c9a1e drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
    ad09bb7cbd14 drm/simpledrm: Do not upcast in release helpers
    51ba65860457 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
    847af89aa163 scsi: ufs: core: Add OPP support for scaling clocks and regulators
    95ffe734518d scsi: ufs: core: Fix abnormal scale up after last cmd finish
    9e67044aa9a7 f2fs: fix to zero post-eof page
    d1ccd98eddba f2fs: convert f2fs_vm_page_mkwrite() to use folio
    7ac8a61e5503 f2fs: prevent writing without fallocate() for pinned files
    b43c3050d211 f2fs: add tracepoint for f2fs_vm_page_mkwrite()
    bceae1daf302 x86/traps: Initialize DR6 by writing its architectural reset value
    16254aa985d1 bnxt: properly flush XDP redirect lists
    6310aafd4267 wifi: mac80211: finish link init before RCU publish
    ebca4264c648 wifi: mac80211: Add link iteration macro for link data
    32d0b58079ed wifi: mac80211: chan: chandef is non-NULL for reserved
    bc0819a25e04 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
    64d07a40f853 smb: client: remove \t from TP_printk statements
    3499dcb6c507 btrfs: fix qgroup reservation leak on failure to allocate ordered extent
    ccdd3eaec689 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
    ca7d5aa7ccf0 smb: client: fix race condition in negotiate timeout by using more precise timing
    70b32cba5cfd amd-xgbe: do not double read link status
    f680a4643c6f net/sched: Always pass notifications when child class becomes empty
    5ea2a10be7d7 nui: Fix dma_mapping_error() check
    7a1841c96093 rose: fix dangling neighbour pointers in rose_rt_device_down()
    744cd8baffe8 enic: fix incorrect MTU comparison in enic_change_mtu()
    a133683c0567 amd-xgbe: align CL37 AN sequence as per databook
    f2ca04cbf01d lib: test_objagg: Set error message in check_expect_hints_stats()
    8f4652848b36 igc: disable L1.2 PCI-E link substate to avoid performance issue
    832058110a1d drm/i915/gsc: mei interrupt top half should be in irq disabled context
    40e09506aea1 drm/i915/gt: Fix timeline left held on VMA alloc error
    968a419c9513 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
    0cee638d92ac smb: client: fix warning when reconnecting channel
    33713f7cda3d platform/mellanox: mlxreg-lc: Fix logic error in power state check
    421672fb7f13 platform/x86: dell-wmi-sysman: Fix class device unregistration
    dba37f72aae3 platform/x86: dell-sysman: Directly use firmware_attributes_class
    4074f6a15e95 platform/x86: think-lmi: Fix class device unregistration
    093ee65bdafb platform/x86: think-lmi: Directly use firmware_attributes_class
    ee813c62af62 platform/x86: firmware_attributes_class: Simplify API
    e52b896d5fb7 platform/x86: firmware_attributes_class: Move include linux/device/class.h
    9143d22a09b5 platform/x86: make fw_attr_class constant
    3df1e72b7bfe arm64: dts: qcom: sm8550: add UART14 nodes
    0deb3eb78ebf platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    55a90f82d4ff drm/i915/selftests: Change mock_request() to return error pointers
    822c05444ffa spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    1fc5dc930137 drm/exynos: fimd: Guard display clock control with runtime PM calls
    7e6423f80bd6 dpaa2-eth: fix xdp_rxq_info leak
    31afd307975f ethernet: atl1: Add missing DMA mapping error checks and count errors
    2a7ac29f10d8 btrfs: use btrfs_record_snapshot_destroy() during rmdir
    d77a16802896 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    65d7f92db8a9 btrfs: rename err to ret in btrfs_rmdir()
    2d11d274e2e1 btrfs: fix iteration of extrefs during log replay
    79b025ebc1c0 btrfs: fix missing error handling when searching for inode refs during log replay
    529281206f11 Bluetooth: Prevent unintended pause by checking if advertising is active
    e373354ecfbf platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    d8a1ad180c24 RDMA/mlx5: Fix vport loopback for MPV device
    efb3413f6ba9 RDMA/mlx5: Fix CC counters query for MPV
    301303d14da6 RDMA/mlx5: Fix HW counters query for non-representor devices
    ee9cb28675a5 scsi: ufs: core: Fix spelling of a sysfs attribute name
    39dac98aca12 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    c3ec87fbb00d scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    8ca65fa71024 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    d0877c479f44 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    23a3b32a274a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    edca475158f7 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    3962e5a3845d arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    b935c1e734d2 mtk-sd: reset host->mrq on prepare_data() error
    61cdd6635646 mtk-sd: Prevent memory corruption from DMA map failure
    b3b00e9b03d3 mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    45e9444b3b97 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    24418bc77a66 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    0506547f6e3d Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    8af1406949c1 Bluetooth: MGMT: set_mesh: update LE scan interval and window
    7e88ad41b63e Bluetooth: hci_sync: revert some mesh modifications
    3c0c18ef4c79 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    c4fad2460c17 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    3855b7ace3f9 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    94d0c326cb3e vsock/vmci: Clear the vmci transport packet properly when initializing it
    e7191481d6ae s390/pci: Do not try re-enabling load/store if device is disabled
    80b971be4c37 virtio-net: ensure the received length does not exceed allocated size
    39617dc3fafe rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    5cdd1f73401d rtc: pcf2127: fix SPI command byte for PCF2131
    1cb814dbb03d rtc: pcf2127: add missing semicolon after statement

(From OE-Core rev: b9041a3e6ddc8917eba2af45a8e57f2e48998dc9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Deepesh Varatharajan
be43d55edd glibc: stable 2.39 branch updates
git log --oneline b027d5b145f1b2908f370bdb96dfe40180d0fcb6..58cbbd43fe82910cf8ae9008351b0b0665104500

58cbbd43fe (HEAD -> release/2.39/master, origin/release/2.39/master) x86: Detect Intel Nova Lake Processor
835b1e3379 x86: Detect Intel Wildcat Lake Processor
765534258e nss: Group merge does not react to ERANGE during merge (bug 33361)
7ce7b4b2f4 Rename new tst-sem17 test to tst-sem18
a6ac06abeb Avoid uninitialized result in sem_open when file does not exist
ff6ce67220 elf: handle addition overflow in _dl_find_object_update_1 [BZ #32245]
fffc2df8a3 Optimize __libc_tsd_* thread variable access
83340b35cc i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
5541edb1bd i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
1f17635507 debug: Fix tst-longjmp_chk3 build failure on Hurd
3b6c8ea878 debug: Wire up tst-longjmp_chk3
89596f46e3 i386: Update ___tls_get_addr to preserve vector registers
4c2509882f elf: Preserve _rtld_global layout for the release branch
cf0e7d512d elf: Compile _dl_debug_state separately (bug 33224)
5cd1f4b1a1 elf: Restore support for _r_debug interpositions and copy relocations
97017da5ef elf: Introduce _dl_debug_change_state
5601ad79b7 elf: Introduce separate _r_debug_array variable
24c94ea84e elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
79d84b5da5 elf: Fix handling of symbol versions which hash to zero (bug 29190)
5f5c411132 elf: Second ld.so relocation only if libc.so has been loaded
4c9b1877fd elf: Reorder audit events in dlcose to match _dl_fini (bug 32066)
f407a14ff7 elf: Call la_objclose for proxy link maps in _dl_fini (bug 32065)
e27601b385 elf: Signal la_objopen for the proxy link map in dlmopen (bug 31985)
fef226255d elf: Add the endswith function to <endswith.h>
d21a217fa0 elf: Update DSO list, write audit log to elf/tst-audit23.out
4f145bb35d elf: Switch to main malloc after final ld.so self-relocation
65d86471ce elf: Introduce _dl_relocate_object_no_relro
5434cc2c41 elf: Do not define consider_profiling, consider_symbind as macros
b2d8c6cbe7 elf: rtld_multiple_ref is always true
2b89de7c91 Revert "elf: Run constructors on cyclic recursive dlopen (bug 31986)"
46e3ecad27 elf: Fix map_complete Systemtap probe in dl_open_worker
5f225025db elf: Signal RT_CONSISTENT after relocation processing in dlopen (bug 31986)
d6cc325fcf elf: Signal LA_ACT_CONSISTENT to auditors after RT_CONSISTENT switch
6917fde6f9 elf: Run constructors on cyclic recursive dlopen (bug 31986)
9fa7cc6a0b ldconfig: Move endswithn into a new header file
269e89bd8d x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
62ff85fd09 x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
f0e8d04eef libio: Test for fdopen memory leak without SEEK_END support (bug 31840)
42a8cb7560 Remove memory leak in fdopen (bug 31840)
d1c1f78e9e math: Remove no-mathvec flag
20d2d69a2f Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
c11950503f ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
25c537c3b3 Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
fbdf9680cc Remove <libc-tsd.h>
fca5937510 ctype: Reformat Makefile.
49f0e73fa3 elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
64488b4b31 elf: Extract rtld_setup_phdr function from dl_main
9833fcf7ce elf: Do not add a copy of _dl_find_object to libc.so
fbade65338 arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405)
392e6cf1e8 AArch64: Improve codegen in SVE log1p
3a78a276a3 AArch64: Optimize inverse trig functions
b6ea8902a7 AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]

Testing Results:
            Before     After    Diff
PASS         5080      5099      +19
XPASS        4         4          0
FAIL         119       120       +1
XFAIL        16        16         0
UNSUPPORTED  154       154        0

Testcases changes

testcase-name                                                before           after

debug/tst-longjmp_chk3(new)                                    -               PASS
elf/check-dt-x86-64-plt(new)                                   -               PASS
elf/check-gnu2-tls(new)                                        -               PASS
lf/tst-dlmopen4-nonpic(new)                                    -               PASS
elf/tst-dlmopen4-pic(new)                                      -               PASS
elf/tst-dlopen-auditdup(new)                                   -               PASS
elf/tst-dlopen-constructor-null(new)                           -               PASS
elf/tst-link-map-contiguous-ldso(new)                          -               PASS
elf/tst-link-map-contiguous-libc(new)                          -               PASS
elf/tst-nolink-libc-1(new)                                     -               PASS
elf/tst-nolink-libc-2(new)                                     -               PASS
elf/tst-rtld-no-malloc(new)                                    -               PASS
elf/tst-rtld-no-malloc-audit(new)                              -               PASS
elf/tst-rtld-no-malloc-preload(new)                            -               PASS
elf/tst-tls23(new)                                             -               PASS
elf/tst-version-hash-zero(new)                                 -               PASS
libio/tst-fdopen-seek-failure(new)                             -               PASS
libio/tst-fdopen-seek-failure-mem(new)                         -               PASS
nptl/tst-sem18(new)                                            -               PASS
ctype/tst-ctype-tls-dlmopen(new)                               -               FAIL
ctype/tst-ctype-tls-dlopen-static(new)                         -               FAIL
stdio-common/tst-scanf-bz27650                                FAIL             PASS
elf/ifuncmain8                                                PASS              -

(From OE-Core rev: d60dd826d81bc4c85452826427d710b2bb0ddde9)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
4456c586d1 glib-networking: fix CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return
value of memory allocation routines. An out of memory condition could
potentially result in writing to an invalid memory location.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60019

Upstream-patch:
70df675dd4

(From OE-Core rev: 8c44478c92a8b3d859c7fcecc734ac6bb399277e)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Saravanan
6d7cfb5461 cmake: fix CVE-2025-9301
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9301
https://gitlab.kitware.com/cmake/cmake/-/issues/27135

Upstream-patch:
37e27f71bc

(From OE-Core rev: 5d8a6fb52ca4a7641236712ba51cb322cb1f9f9d)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
2142f17368 openssh: fix CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.

Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61984

Upstream patch:
35d5917652

(From OE-Core rev: 717d4c7609cdce2cc3a65b7ba69c316fa86a9333)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
David Nyström
a7fdce2a68 openssh: fix CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI,
potentially leading to code execution when a ProxyCommand is used.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61985

Upstream patch:
43b3bff47b

(From OE-Core rev: 52d925423b826383d12a97b834475ab5699fd492)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Rajeshkumar Ramasamy
bf8139e03b glib-networking: fix CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return
value of a call to BIO_write(), resulting in an out of bounds read.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-60018

Upstream-patch:
4dd540505d

(From OE-Core rev: e5ef6337416135d3c9d311c870ee72928aa75620)

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f0bbacca46 gnupg: mark CVE-2025-30258 as patched
Per NVD report [1] this CVE is fixed by [2].
This commit was backported to 2.4.8 via [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-30258
[2] https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158
[3] da0164efc7

(From OE-Core rev: 88fe1eaa4bcd7c838902d8cdc067276c5f32624d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
2f86700da6 binutils: patch CVE-2025-11083
Pick patch per link in NVD report.

(From OE-Core rev: 155a93a0e0ea52316567b0eaea37b8da4c80d7be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
f09c292577 binutils: patch CVE-2025-11082
Pick patch per link in NVD report.

(From OE-Core rev: fe40f3c025d31b262582e0ec9e7b688ae82ee0e6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Saravanan
2ab1bedda9 python3-xmltodict: fix CVE-2025-9375
Reference:
	https://nvd.nist.gov/vuln/detail/CVE-2025-9375
	https://security-tracker.debian.org/tracker/CVE-2025-9375
	https://git.launchpad.net/ubuntu/+source/python-xmltodict/commit/?id=e8110a20e00d80db31d5fc9f8f4577328385d6b6

Upstream-patch:
	ecd456ab88
	f98c90f071

(From OE-Core rev: 30624cce634cade0b030aa71a03be754abbf3da9)

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Peter Marko
a04f9ab3a5 qemu: patch CVE-2024-8354
Pick commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2024-8354

(From OE-Core rev: 4bab523ed8ee34e8c09deb631fc82417aa0784b9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:39 -07:00
Steve Sakoman
f16cffd030 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:48:55 -07:00
Steve Sakoman
517a1206e0 poky.conf: bump version for 5.0.13
(From meta-yocto rev: 3ff7ca786732390cd56ae92ff4a43aba46a1bf2e)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:46:28 -07:00
Steve Sakoman
2eb674803a oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: b0ce480eca6397fab71082ed202c3cf9dd02456f)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Steve Sakoman
6e74167ad4 selftest/cases/meta_ide.py: use use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html

(From OE-Core rev: aa7ff5a115f55c092f8ca5badad63734c8f4f5b7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Gyorgy Sarvari
697d7cc740 conf/bitbake.conf: use gnu mirror instead of main server
ftp.gnu.org is the main server of the GNU project, however download speed
can vary greatly based on one's location.

Using ftpmirror.gnu.org should redirect the request to the closest up-to-date mirror,
which should result sometimes in significantly faster download speed, depending
on one's location. This should also distribute the traffic more across the mirrors.

This information was sourced from https://www.gnu.org/prep/ftp.html .

(From OE-Core rev: ef14bcae0f3f27acdd4e591fac69515aa912f194)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d8c6f01d7467e018aa0ed27a87850d9e4434a47a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
2f0df0334a openssl: upgrade 3.2.4 -> 3.2.6
3.2.6 has fixed 3.2.5 regression which broke python3 ptests so we can
upgrade now. We can also drop CVE-2025-27587 patch which was taken
instead of 3.2.5 upgrade under:
https://github.com/openssl/openssl/pull/28198

Release information:
https://github.com/openssl/openssl/blob/openssl-3.0/NEWS.md#major-changes-between-openssl-3017-and-openssl-3018-30-sep-2025

OpenSSL 3.2.6 is a security patch release. The most severe CVE fixed in this release is Moderate.
This release incorporates the following bug fixes and mitigations:
* Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
* Fix Timing side-channel in SM2 algorithm on 64 bit ARM. (CVE-2025-9231)
* Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

Release information:
https://github.com/openssl/openssl/blob/openssl-3.2/NEWS.md#major-changes-between-openssl-324-and-openssl-325-1-jul-2025

OpenSSL 3.2.5 is a bug fix release.
This release incorporates the following bug fixes and mitigations:
* Miscellaneous minor bug fixes.

(From OE-Core rev: ef6bbf39c10ff7bd8ad36d5d2f59ddd0756e0141)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Aleksandar Nikolic
9dafc77bd8 scripts/install-buildtools: Update to 5.0.12
Update to the 5.0.12 release of the 5.0 series for buildtools

(From OE-Core rev: 2f69dceeebbb67ce06ceda8782a60a71a0ed7f22)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Archana Polampalli
e085cf0d53 go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables
(rather than just directories), passing certain strings to LookPath
("", ".", and ".."), can result in the binaries listed in the PATH
 being unexpectedly returned.

(From OE-Core rev: ed6df1883225ec08e637a0d7a15a6a5da4665d8d)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8c8680d4c0 ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases
Following are mentioned in commit upgrading the recipe to 6.1.3:
* CVE-2023-49502 CVE-2023-50007 CVE-2023-50008 CVE-2024-31578 CVE-2024-31582

Following are fixed via mentioned commits already in 6.1.1:
* CVE-2023-50009: 162b4c60c8
* CVE-2023-50010: e809c23786
* CVE-2024-31585: 3061bf668f

(From OE-Core rev: 8286570b3baf275ff48c45ca0864348a8d3faa01)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
ac57f3b9d2 tiff: ignore 5 CVEs
These CVEs are for tools which were removed in v4.6.0 via [1] and
re-introduced again in v4.7.0 via [2].

[1] eab89a627f
[2] 9ab54a8580

(From OE-Core rev: faf1e12ae0f9de56402830460315e5be0d13f4a5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Ross Burton
aca68169cc pulseaudio: ignore CVE-2024-11586
As per the linked ticket, this issue is related to an Ubuntu-specific
patch that we don't have.

(From OE-Core rev: dc81fdc6bdf8ab39b7f2fd994d50256430c36558)

(From OE-Core rev: 72e63e44a0c6ad5a408c4dc59a24288c36463439)

(From OE-Core rev: 4cdcb27238be40e815ce5a0b67ce419331079801)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
da7d29485c expat: follow-up for CVE-2024-8176
Expat release 2.7.3 implemented a follow-up for this CVE.
References:
* https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes
* https://security-tracker.debian.org/tracker/CVE-2024-8176
* https://github.com/libexpat/libexpat/pull/1059

(From OE-Core rev: 5bbb9ee52674f5aa6eed5d6cf3f515704092994d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
9fb26deedd ghostscript: patch CVE-2025-59800
Pick commit mentioned in the NVD report.

(From OE-Core rev: a63bb2ccc8294c8a97f5957f1ca9f0a4880713ac)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
0db5ae637d ghostscript: patch CVE-2025-59799
Pick commit mentioned in the NVD report.

(From OE-Core rev: 2f1d5b9ad1af6d2b28e9e7b46aadd879a67b8fc6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
7698e2910d ghostscript: patch CVE-2025-59798
Pick commit mentioned in the NVD report.

(From OE-Core rev: 4a2f47d9541d7a13da7a9ce16bd5088870c45ec4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
8a80300d0f gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)

(From OE-Core rev: 7937625a30f6046ba483a000497b15169659f5eb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:58 -07:00
Peter Marko
bb7e27a5db gstreamer1.0: ignore CVEs fixed in plugins
All these CVEs were fixed in recent commits.

(From OE-Core rev: c5a68886247d4417de4ecaa8460e25e84ab93b0d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Hitendra Prajapati
09dadcefe3 grub2: mark CVE-2024-2312 as not applicable
This issue is specific to the peimage module that Ubuntu add, and is not
an upstream issue.

(From OE-Core rev: 8d2fe3f403e6435e1ffe122a6776381090752d8a)

(From OE-Core rev: d005eda88dad37f31bdc59e45e20b209f3771a26)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Peter Marko
a981860c32 busybox: patch CVE-2025-46394
Pick commit mentioning this CVE.
Additionally fix test broken by the CVE fix.

(From OE-Core rev: e348e10f35cc082ebfe22c890c5f64c4a06dcea3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-13 12:42:57 -07:00
Adam Blank
fbc7beca68 ref-manual/variables.rst: fix the description of STAGING_DIR
There is no single "recipe-sysroots" directory, but rather many
"recipe-sysroot*" directories.

(From yocto-docs rev: 6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f2d6e228409cb1dd1dbf339c405699ac6d3900be)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Antonin Godard
8e94da9219 ref-manual/structure: document the auto.conf file
Add documentation for auto.conf, which is used by external tools for
automatically setting variables.

(From yocto-docs rev: c16beccd7fa836a6bc77bb0a9d3274508bd3c6ff)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 134e54a75e0144c4629f702c6f43e92ed1f12dce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Talel BELHAJ SALEM
a405b570b3 dev-manual/building.rst: add note about externalsrc variables absolute paths
(From yocto-docs rev: ab776a0348877d8dbf6c37823a65715fe30e34f6)

Signed-off-by: Talel BELHAJ SALEM <bhstalel@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 33166d70b6ad093bd95ffccafc0b07820682f656)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
ec2689b334 ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
Remove some leftover confusing mention of KMACHINE.

(From yocto-docs rev: fd6f21b40b7fb58e7b465bbe97b8308f7a09313d)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 582ee9e0b4930aea03255542b3d3913df19af8b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adam Blank
77c866901d kernel-dev/common.rst: fix the in-tree defconfig description
The description of the relation between KBUILD_DEFCONFIG and
SRC_URI is reversed. In fact it is the SRC_URI provided
defconfig which will be dropped by the kernel-yocto class
if both are provided.

(From yocto-docs rev: 3dc8212748d014f0b2cd1bb6777404bafe6d5a58)

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a808420655a0976ba08f013f468cf80f379b1d89)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
ea119eaa46 expect: fix native build with GCC 15
This does not work for native builds:
  CFLAGS += "-std=gnu17"
The line from native.bbclass gets priority:
  CFLAGS = "${BUILD_CFLAGS}"

From bitbake-getvar -r expect-native CFLAGS
  ...
  append ...poky/meta/recipes-devtools/expect/expect_5.45.4.bb:44
     "-std=gnu17"
  set ...poky/meta/classes-recipe/native.bbclass:44
     "${BUILD_CFLAGS}"
  ...

(From OE-Core rev: 2696c50af9946f425ccaf7d0e7e0eb3fd87c36bb)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Khem Raj
ddda72f2bd expect: Fix build with GCC 15
Stick to C17 standard as GCC 15 switches to C23

(From OE-Core rev: a1ac756f2f55c4f27a95cb8b1e63ee2db06dd327)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
b95695a302 expect: cleanup do_install
Clean up the do_install append, and remove a long-standing unused
variable that appears to be intending to not install the scripts but
would have never actually done that as the relevant override since 2008
has been task-install.  As we've been installing the scripts, keep
instaling them.

(From OE-Core rev: 10a501b3bfe8f73ce2eb15673900df71e547b54d)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
e49d690cf1 expect: don't run aclocal in do_configure
expect has a hand-maintained aclocal.m4 so don't run aclocal, which has the
side effect of not deleting the aclocal.m4 file which pulls in macros.

The build works without this change more through luck and a combination
of behaviours than design.

(From OE-Core rev: 61dbfd66210b090ec8abfbf1f4688e5691299d68)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Ross Burton
357a4beab6 expect: update code for Tcl channel implementation
Tcl 8.4.0 changed the channel implementation, take a patch submitted
upstream to update the code for the new interface and remove the silencing
of the incompatible assignment error which was due to this issue.

(From OE-Core rev: 20cadf7b66f30e8a3b409b4a96eced614ac21013)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:46 -07:00
Adrian Freihofer
c8a81cd75f expect: Revert "expect-native: fix do_compile failure with gcc-14"
In the meantime there is a cleaner fix on the master branch and we also
need to back-port more patches to support gcc-15 as well.

This reverts commit 8bfdb53247 which is
not in the master branch as a preparation for cherry-picking the newer
fixes from there.

(From OE-Core rev: 4ea89ba363228aa5e16412f85644608f4c645d5f)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Vijay Anusuri
6a8b1708e0 gstreamer1.0-plugins-bad: Fix CVE-2025-3887
Upstream-Status: Backport from
5463f0e097
& bcaab36098

(From OE-Core rev: 7ef632c2a85e42c16b5509edec822705a236cafb)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Yogita Urade
2ce56bd707 tiff: fix CVE-2025-9900
A flaw was found in Libtiff. This vulnerability is a "write-what-where"
condition, triggered when the library processes a specially crafted TIFF
image file.[EOL][EOL]By providing an abnormally large image height value
in the file's metadata, an attacker can trick the library into writing
attacker-controlled color data to an arbitrary memory location. This
memory corruption can be exploited to cause a denial of service (application
crash) or to achieve arbitrary code execution with the permissions of the user.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9900

Upstream patch:
3e0dcf0ec6

(From OE-Core rev: c1303b8eb4e85a031a175867361876a256bfb763)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-09 12:16:45 -07:00
Antonin Godard
eae801c832 test-manual/yocto-project-compatible.rst: fix a typo
Fix a typo in yocto-project-compatible.rst.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 6b248c541580eadab663f605ce6310302d7a2dae)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a84c234acfedfa714419006c743405e2f9acaedc)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
e9069b0404 contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
There's no need to differentiate crediting contributors from committing
your changes, so let's simply make it the last step of "Commit your
changes" section.

This simply indents the text so it's now part of "Commit your changes"
list instead of the main list in the "Implement and commit changes"
section. Because of this reorganisation, the instruction to use "git
commit --amend" to add the contributors is moved to a note, and the
first few sentences are reworded to better match the wording of other
items in the "Commit your changes" list of instructions.

(From yocto-docs rev: 6ba61d7bc3e641b3d4194f2d99a276f3b29f82b8)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eff4d14e28d323ebfdaeb0c5c805b5f1e2ad153d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
9baa7dfdfd contributor-guide: submit-changes: number instruction list in commit your changes
... so that it's clear that you need to read and follow each and every
instruction in this list.

(From yocto-docs rev: 6dfef402b2785675870d513f4afeed6b7e7a4df1)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c628a489f081925fabaabb5acac6752251150269)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
1b7cb8a80c contributor-guide: submit-changes: reword commit message instructions
This should hopefully make it clearer what is expected from the
contributor.

This follows my understanding of git-commit(1)[1] where the following is
a git commit message:

"""
git commit title

git commit description
"""

I'm putting the "Fixes [YOCTO" line in "body of the commit message" so
it's understood as being different from the git commit description so
that the note admonition allowing us to have an empty commit description
doesn't apply to the "Fixes [YOCTO" line.

[1] https://www.man7.org/linux/man-pages/man1/git-commit.1.html#DISCUSSION

(From yocto-docs rev: f0f9d40a04cba684a476caaa053b6f24ade9fb99)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b84903a760350bd118c56ea9ce4e98039edf6e55)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
afd75083e9 contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
The kernel docs specifies[1] a Cc: tag and not CC: tag, so let's align
with that.

[1] https://www.kernel.org/doc/html/latest/process/submitting-patches.html#when-to-use-acked-by-cc-and-co-developed-by

(From yocto-docs rev: 49934860119ccd0844b0c600ea6be0a776b11a12)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f800fef4e9e2c1d3584ac49be8324638d2923b17)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
42ad822f6b contributor-guide: submit-changes: align CC tag description
The other tag descriptions have the double colon outside of the
highlight, and start the sentence with a lowercase word, so let's align
the CC tag with those.

(From yocto-docs rev: 4dba30a040fd64e4e547bc485878b90e691c1373)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f116e93fb335e9d0f85891c4cb501bcf55b18ccf)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
4ae162f572 contributor-guide: submit-changes: clarify example with Yocto bug ID
The example could be understood as the content of the commit message
once the editor (git config core.editor) opens, where the first
line is the actual commit title and not the commit description.

This example would make the Fixes line the commit title, which is not
what we want.

In short, according to my understanding of git-commit(1):

The following is a git commit message:

"""
git commit title

git commit description
"""

Reported-by: Barne Carstensen <barne.carstensen@danfoss.com>
(From yocto-docs rev: 5244b934db878a5bdb73118f1629cf20e391faa7)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a5862406bf3230befe9db9f2539bbbc86c02015d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Quentin Schulz
93eb8227dd contributor-guide: submit-changes: fix improper bold string
I don't know what was the initial intent but this doesn't seem right, so
let's remove the bold formatting.

Fixes: 4abe87cb20d3 ("contributor-guide: submit-changes: detail commit and patch creation")
Cc: Michael Opdenacker <michael.opdenacker@rootcommit.com>
(From yocto-docs rev: 80be07404bd8215b198f5fb0936e3786072559b6)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6c499b3796a578a0fe4c319c9547b4321b0d41df)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Barne Carstensen
b55b77df5f test-manual: update runtime-testing Exporting Tests section
This has changed since commit ed4238487c81 ("testexport: Fix to work as
an image class") in OE-Core.

[Antonin Godard: mention oecore commit in commit body]

(From yocto-docs rev: fd16d625089eab377ad3061f6aa21f94c251deb9)

Signed-off-by: Barne Carstensen <barne.carstensen@danfoss.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2caa8e581feaf3640bea68108f9a02583b17b21b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Divya Chellam
619804e1fc vim: upgrade 9.1.1652 -> 9.1.1683
Handles CVE-2025-9389

Changes between 9.1.1652 -> 9.1.1683
====================================
https://github.com/vim/vim/compare/v9.1.1652...v9.1.1683

(From OE-Core rev: 55e0c38dc28b73fa689446e2d5e564d235a24084)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Chris Laplante
b079439d07 util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool
This change already exists on master, but it was made as part of the
larger migration to ${UNPACKDIR} and is not cherry-pickable.

See: d73595df696 (recipes: Update WORKDIR references to UNPACKDIR)

(From OE-Core rev: 378f87f087651bacdb6efc6b98168bc6ba865070)

Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Nitin Wankhade
15078fe63f examples: genl: fix wrong attribute size
This example no longer works on more recent kernels:

genl-family-get
error: Invalid argument

dmesg says:
netlink: 'genl-family-get': attribute type 1 has an invalid length.

Fix this and also zero out the reserved field in the genl header,
while not validated yet for dumps this could change.

Upstream-Status: Backport [https://git.netfilter.org/libmnl/patch/?id=54dea548d796653534645c6e3c8577eaf7d77411]

Reported-by: Divyanshu Rathore <Divyanshu.Rathore@bmwtechworks.in>
(From OE-Core rev: bae5ecea1c40847ffc3760173192f85e28ed9d7b)

Signed-off-by: Florian Westphal <fw@strlen.de>
(cherry picked from commit 54dea548d796653534645c6e3c8577eaf7d77411)
Signed-off-by: Divyanshu Rathore <divyanshu.rathore@bmwtechworks.in>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
AshishKumar Mishra
2a912b5065 p11-kit: backport fix for handle USE_NLS from master
Disable NLS in the build when USE_NLS is off.

(From OE-Core rev: b94798ecd535956ef4565663710ea9a701ff21ed)

This change corresponds to upstream eeb3974472
from master .
Since the p11-kit version are different between master & scarthgap
applied the patch manually

(From OE-Core rev: 96602ea67463170c4cadf748525f5615ce9bbd91)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Philip Lorenz
5ee0ccc856 shared-mime-info: Handle USE_NLS
Skip building of translations when NLS is disabled.

(From OE-Core rev: b58a3f4e9c78522423a94821b7ba7a35eb18f75a)

(From OE-Core rev: 49a9aebc0e9f668cf2896d0b522f8194bb4049ad)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
AshishKumar Mishra
b418221cab systemd: backport fix for handle USE_NLS from master
Do not build translations when NLS is disabled.
(From OE-Core rev: 83795ef6c3fa12a863cd20b7ec1a2607606987b6)

This change corresponds to upstream d848b454e6
from master .
Since the systemd version are different between master & scarthgap
applied the patch manually

(From OE-Core rev: 780b902a0fd124420f00ee5e55f4fd362d2d8913)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Martin Jansa
e753480a05 lib/oe/utils: use multiprocessing from bb
Fixes build with python-3.14

It was added to bitbake in 62be9113d98fccb347c6aa0a10d5c4ee2857f8b6
and oe-core now requires latest bitbake already, so we can use this.

[YOCTO #15858]

(From OE-Core rev: 92369c8acf0b4d6c2ced88abbda5f5defd276ba2)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Reviewed-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Martin Jansa
f82e18eee1 sanity.conf: Update minimum bitbake version to 2.8.1
Needed for multiprocessing module in bb used in the next commit.

It was added to bitbake in 62be9113d98fccb347c6aa0a10d5c4ee2857f8b6
which was backported to 2.8 branch and tagged as 2.8.1

(From OE-Core rev: 95888aa944847cf6dbfac501997a3e2980344b66)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Adrian Freihofer
f19d608f58 llvm: fix build with gcc-15
Pick 3 patches from meta-clang's scartsgap branch to fix build with
gcc-15. These patches are already in upstream llvm but not in
18.1.8 release.

Note: the patch 0039-Fix-build-with-GCC-15.patch from meta-clang
is not needed as it targets lldb which we do not build.

(From OE-Core rev: a2c5e1d6ec6c905bbf31f017a010b0496b39b211)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Adrian Freihofer
8cb12165ed llvm: update from 18.1.6 to 18.1.8
(From OE-Core rev: 3a171fde7d5cb0c2dfb6d1b11f08b061826284c2)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Yogita Urade
4543508143 curl: fix CVE-2025-9086
1, A cookie is set using the secure keyword for https://target
2, curl is redirected to or otherwise made to speak with http://target
(same hostname, but using clear text HTTP) using the same cookie set
3, The same cookie name is set - but with just a slash as path (path="/").
Since this site is not secure, the cookie should just be ignored.
4, A bug in the path comparison logic makes curl read outside a heap buffer boundary

The bug either causes a crash or it potentially makes the comparison come to
the wrong conclusion and lets the clear-text site override the contents of
the secure cookie, contrary to expectations and depending on the memory contents
immediately following the single-byte allocation that holds the path.

The presumed and correct behavior would be to plainly ignore the second set of
the cookie since it was already set as secure on a secure host so overriding
it on an insecure host should not be okay.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9086

Upstream patch:
https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6

(From OE-Core rev: b0cc7001a628deaa96d1aebb5ded52797898a0be)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Ross Burton
829e065196 libxslt: apply patch for CVE-2025-7424
This patch is taken from the upstream bug, and is used by Apple in their
build of WebKit.

(From OE-Core rev: f59e07fd9f6c437e30431607763672fde42511ad)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Anil Dongare <adongare@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-30 08:01:59 -07:00
Haixiao Yan
e3ce89324d buildtools-tarball: fix unbound variable issues under 'set -u'
When Bash runs with 'set -u' (nounset), accessing an unset variable
directly (e.g. [ -z "$SSL_CERT_FILE" ]) causes a fatal "unbound variable"
error. As a result, the fallback logic to set SSL_CERT_FILE/SSL_CERT_DIR
is never triggered and the script aborts.

The current code assumes these variables may be unset or empty, but does
not guard against 'set -u'. This breaks builds in stricter shell
environments or when users explicitly enable 'set -u'.

Fix this by using parameter expansion with a default value, e.g.
"${SSL_CERT_FILE:-}", so that unset variables are treated as empty
strings. This preserves the intended logic (respect host env first, then
CAFILE/CAPATH, then buildtools defaults) and makes the script robust
under 'set -u'.

(From OE-Core rev: 4cf131ebd157b79226533b5a5074691dd0e1a4ab)

Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4d880c2eccd534133a2a4e6579d955605c0956ec)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Libo Chen
54578cd039 runqemu: fix special characters bug
Fix the bug in runqemu that happens when the file path contains
the specific words such as 'vmlinux', e.g. /home/frank/vmlinux.

runqemu - ERROR - wic doesn't need kernel

(From OE-Core rev: 0276bd0e8d5cefb6f98d685bc9faa0451780bef9)

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3c186fe7741adecb0887e36c8a9164a58fc16437)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Martin Jansa
d2c6c66c1e license.py: avoid deprecated ast.Str
* it's deprecated since python-3.12 and removed in 3.14 causing:

openembedded-core/meta/lib/oe/license.py', lineno: 176, function: visit
     0172:
     0173:        LicenseVisitor.__init__(self)
     0174:
     0175:    def visit(self, node):
 *** 0176:        if isinstance(node, ast.Str):
     0177:            lic = node.s
     0178:
     0179:            if license_ok(self._canonical_license(self._d, lic),
     0180:                    self._dont_want_licenses) == True:
Exception: AttributeError: module 'ast' has no attribute 'Str'

(From OE-Core rev: df9898f13c261eeac2cc343569c843bc7dcaf163)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Jinfeng Wang
838a12c621 systemtap: Fix task_work_cancel build
Backport a patch to fix:
 107 |         twork = task_work_cancel(task, func);
      |                                        ^~~~
      |                                        |
      |                                        task_work_func_t {aka void (*)(struct callback_head *)}
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:107:40: note: expected 'struct callback_head *' but argument is of type 'task_work_func_t' {aka 'void (*)(struct callback_head *)'}
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:13:26: error: incompatible types when assigning to type 'struct callback_head *' from type 'bool' {aka '_Bool'}
   13 | #define task_work_cancel (* (task_work_cancel_fn)kallsyms_task_work_cancel)
      |                          ^
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:107:17: note: in expansion of macro 'task_work_cancel'
  107 |         twork = task_work_cancel(task, func);
      |                 ^~~~~~~~~~~~~~~~

(From OE-Core rev: 58509b54a464cd5b692ad4ef8dd333eb9c14abfa)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Vijay Anusuri
c0775e4999 cups: Fix for CVE-2025-58060 and CVE-2025-58364
Upstream-Status: Backport from
595d691075
& e58cba9d6f

(From OE-Core rev: 6f3b7e6efdf14d080b74a48d8cdc445255e9025f)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Vijay Anusuri
d4f27582ea cups: upgrade 2.4.10 -> 2.4.11
Removed CVE-2024-47175 patches which is fixed by upgrade
system-cups.slice added to FILES

Changelog
==========

v2.4.11

CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, modifying printers) and others fixes.

Detailed list of changes is available in CHANGES.md

(From OE-Core rev: 117a401756a3cf26d1fc0a6694b0c42967e00fec)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Ross Burton
2eccfb8b45 grub2: fix CVE-2024-56738
Backport an algorithmic change to grub_crypto_memcmp() so that it
completes in constant time and thus isn't susceptible to side-channel
attacks.

(From OE-Core rev: 319210be147ec57518c237cb705857aeda9943e6)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 30a1cc225a2bd5d044bf608d863a67df3f9c03be)
Signed-off-by: Shubham Pushpkar <spushpka@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Divya Chellam
6b93199776 wpa-supplicant: fix CVE-2022-37660
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful
PKEX association. An attacker that successfully bootstrapped public keys with
another entity using PKEX in the past, will be able to subvert a future bootstrapping
by passively observing public keys, re-using the encrypting element Qi and subtracting
it from the captured message M (X = M - Qi). This will result in the public ephemeral
key X; the only element required to subvert the PKEX association.

CVE-2022-37660-0001, CVE-2022-37660-0002, CVE-2022-37660-0003 and  CVE-2022-37660-0004
are dependent commits while CVE-2022-37660-0005 is actual CVE fix.

Reference:
https://security-tracker.debian.org/tracker/CVE-2022-37660

Upstream-patches:
https://git.w1.fi/cgit/hostap/commit/?id=9d3f347a2b14652e767d51142600206a32676b62
https://git.w1.fi/cgit/hostap/commit/?id=80213629981a21825e4688fde1b590e4c4d4bcea
https://git.w1.fi/cgit/hostap/commit/?id=bdcccbc2755dd1a75731496782e02b5435fb9534
https://git.w1.fi/cgit/hostap/commit/?id=d7be749335f2585658cf98c4f0e7d6cd5ac06865
https://git.w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4

(From OE-Core rev: 91848ac13ec18f98469f7f8ed68c6153fea31607)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Lee Chee Yang
31b2c45764 migration-guides: add release notes for 5.0.12
(From yocto-docs rev: 79b37fe79fee03a46a4d791fd9f50e23d4e24797)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e77139b5c616e6e5ad436eb91416fd804389425f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:45 -07:00
Joao Marcos Costa
ef363542ca ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry
There's a (second) overhead factor applied in images generated with Wic,
and this is already documented in the .wks reference. However, the
IMAGE_OVERHEAD_FACTOR entry does not mention it, and by looking at the
partition sizes (e.g. with parted) one may find it confusing that they
don't match with the expected rootfs size (e.g. in a scenario where the
extra space is "0" and IMAGE_OVERHEAD_FACTOR="1.0").

This second overhead is already documented, though:
https://docs.yoctoproject.org/ref-manual/kickstart.html#command-part-or-partition

Mention the '--overhead-factor' option in the glossary entry and add a
reference to the wks documentation.

(From yocto-docs rev: 18a0dcefd4e688d60e57e8531b0ac283764e4e89)

Signed-off-by: Joao Marcos Costa <joaomarcos.costa@bootlin.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b9040e20b015e9b02683ec3014e4ade5eb59d41a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:45 -07:00
Antonin Godard
91a33194a4 dev-manual/security-subjects.rst: update mailing lists
Update mailing lists following changes by Michael Halstead
(https://lists.yoctoproject.org/g/yocto-security/message/1478).

Also fix formatting/spacing.

(From yocto-docs rev: c5c104ea79a42d630e33f4f002aeec0bb9cbb3b3)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8066aa92a1acae6c99fbee92d24ee1feea65d974)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:45 -07:00
Jan Vermaete
4807896466 sdk: The main in the C example should return an int
see C17 (ISO/IEC 9899:2018)

(From yocto-docs rev: 260b386dd2184f9d32547e08d1ed578c45d86cc9)

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1ebaed299f7ef80a49b68608f45bf25884900d13)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:45 -07:00
Lee Chee Yang
3ab5d2556b migration-guides: add release notes for 4.0.29
(From yocto-docs rev: 1c219c46556e59757073f3ca7b94f9ef14d2a8ba)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d3bbfed9cad4cda0960ee0623c728ea2a18e1b29)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:44 -07:00
Martin Jansa
3bb8b0dd37 bitbake: bitbake: Bump version to 2.8.1
To indicate compatibility with python 3.14

[YOCTO #15858]

(Bitbake rev: 1c9ec1ffde75809de34c10d3ec2b40d84d258cb4)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:44 -07:00
Joshua Watt
f00c4968ff bitbake: Use a "fork" multiprocessing context
Python 3.14 changes the default multiprocessing context from "fork" to
"forkserver"; however bitbake heavily relies on "fork" to efficiently
pass data to the child processes. As such, make "fork" context in the bb
namespace and use it in place of the normal multiprocessing module.

Note that multiprocessing contexts were added in Python 3.4, so this
should be safe to use even before Python 3.14

[YOCTO #15858]

(Bitbake rev: 15d7448e04aa78c827d2cef9eb1a62bd6e0dd119)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-17 15:36:44 -07:00
Kyungjik Min
6400741e0c pulseaudio: Add audio group explicitly
Since pulseaudio-server requires the audio group, we explicitly add it.

When use useradd-staticids or do not use the default group in
base-passwd, an error will occur because the audio group is not defined.

NOTE: pulseaudio: Performing useradd with [--root
TOPDIR/tmp/work/cortexa72-poky-linux/pulseaudio/17.0/recipe-sysroot
--home-dir /var/run/pulse --gid 998 --groups audio,pulse
--no-create-home --system --shell /bin/false --uid 998 pulse]
useradd: group 'audio' does not exist
ERROR: pulseaudio: useradd command did not succeed.

(From OE-Core rev: baa5e7ea5f37f54c2a00080798ad7fb4c0664f69)

Signed-off-by: Kyungjik Min <dpmin7@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-09 09:08:09 -07:00
Deepak Rathore
b078df11eb default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
The default CONNECTIVITY_CHECK_URIS uses "https://yoctoproject.org/connectivity.html"
which redirect to "https://www.yoctoproject.org/connectivity.html".

Some network configurations with proxies or restricted internet access
don't handle HTTP redirects properly during the sanity check phase,
causing build failures with:

ERROR:  OE-core's config sanity checker detected a potential misconfiguration.
Either fix the cause of this error or at your own risk disable the checker (see sanity.conf).
Following is the list of potential problems / advisories:

Fetcher failure for URL: 'https://yoctoproject.org/connectivity.html'. URL doesn't work.

Updated the default URL to use the final destination directly to avoid
redirect-related connectivity check failures.

Also updated SDK test cases in https.py to use the corrected URL for
consistency.

(From OE-Core rev: bd624ebbcf4e6d7a24c4ab232ca2e138b1ac3433)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 60cdf960a3560f391babd559737f1afb31fb2c5c)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-09 09:08:09 -07:00
Hongxu Jia
5c8ceb35b4 rpm: keep leading `/' from sed operation
For /usr/lib/rpm/macros, Yocto explicitly set OECMAKE_FIND_ROOT_PATH_MODE_PROGRAM
= "ONLY" [1][2] to search tools from CMAKE_FIND_ROOT_PATH [5] which locates in
native recipe sysroot or HOSTTOOLS_DIR. If found in native recipe sysroot or
HOSTTOOLS_DIR, the sed operation removed leading `/'

root@qemux86-64:~# vi /usr/lib/rpm/macros
...
%__xz                   usr/bin/xz
%__make                 usr/bin/make
%__zstd                 usr/bin/zstd
%__quilt                usr/bin/quilt
%__patch                usr/bin/patch
...

root@qemux86-64:~# rpm --eval "%{__xz} %{__make} %{__zstd} %{__quilt} %{__patch}"
usr/bin/xz usr/bin/make usr/bin/zstd usr/bin/quilt usr/bin/patch

This commit keeps leading `/' from sed operation, and similar reason for
/usr/lib/cmake/rpm/rpm-targets.cmake

After applying this commit:
root@qemux86-64:~# rpm --eval "%{__xz} %{__make} %{__zstd} %{__quilt} %{__patch}"
/usr/bin/xz /usr/bin/make /usr/bin/zstd /usr/bin/quilt /usr/bin/patch

[1] https://git.openembedded.org/openembedded-core/commit/?id=f4ea12f6635125ee793f4dd801c538c0186f9dc3
[2] https://cmake.org/cmake/help/latest/variable/CMAKE_FIND_ROOT_PATH_MODE_PROGRAM.html

(From OE-Core rev: cab720b5508411f9a63025e2765d4d46914a1404)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0d0773879ab9520c475c4a8c930b2e663de0e032)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-09 09:08:09 -07:00
Stanislav Vovk
da9006ac51 libpam: fix CVE-2024-10963
Upstream-Status: Backport from 940747f88c

(From OE-Core rev: 2be498fd0872d7ccbf0e9b2eb0a1d4879823c968)

Signed-off-by: Stanislav Vovk <stanislav.vovk@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-09 09:08:09 -07:00
Vrushti Dabhi
328b35d7e3 curl: update CVE_STATUS for CVE-2025-5025
This CVE applies only when curl is built with wolfSSL support.
Revised CVE_STATUS description to align with CVE details.

Reference: https://github.com/openembedded/openembedded-core/commit/93ae0758ef35

(From OE-Core rev: fddc4dcc89a9491abdf8f5d0ea4df9a6526b1538)

Signed-off-by: Vrushti Dabhi <vdabhi@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-09 09:08:09 -07:00
Peter Marko
9ce8f26d37 sudo: remove devtool FIXME comment
This comment should not have been merged.
It shows that the license did not change.

(From OE-Core rev: a19afb7db1b9995ce433f8bfeb5406c9fd1fdc19)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:57 -07:00
Jiaying Song
844ad4dc30 ruby-ptest : some ptest fixes
- Skip the test_rm_r_no_permissions test under the root user, as
  deletion always succeeds.
- Filter out tests under the -ext- directory in run-ptest. Due to the
  commit [1],the packaging of .so test files under the .ext directory
  was removed. As a result, adjust the test filtering rules to avoid
  test failures caused by missing files.
- Add installation of rdoc.rb and did_you_mean.rb files in
  do_install_ptest to ensure complete test dependencies.
- Add init.rb file to PTEST installation path.

(From OE-Core rev: fbbfbfd59fe74c6f742af29d32fae1327068b9ff)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:57 -07:00
Khem Raj
285b5070bb cpio: Pin to use C17 std
Fixes build with GCC-15 which is defaulting to C23

For scarthgap also add it in BUILD_CFLAGS.

(From OE-Core rev: 874701c4fd96134e18f73eba4bd5c8b513ad251b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Michael Halstead
ebbbada5b8 yocto-uninative: Update to 4.9 for glibc 2.42
(From OE-Core rev: 9f0cc5fe65f71cf1d28b7a34272f29db03dc6778)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Michael Halstead
438c0f8acb yocto-uninative: Update to 4.8 for GCC 15.1
(From OE-Core rev: 02b285fb0258587e9b78ee4b1b4b2eea0e0a4b3e)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
225f4064f3 dbus-glib: fix build with gcc-15
(From OE-Core rev: 6c546567adc84667fc76d777b02fc78e9c472f51)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
41e1323758 binutils: fix build with gcc-15
(From OE-Core rev: f7d791585632b7db5f80090c92b5389eacd60fab)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
cb17b874de elfutils: fix build with gcc-15
(From OE-Core rev: ece06774fd1c261c333f61779579614e0b40b927)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
e2e54e0354 libtirpc: Fix build with gcc-15/C23
Update declarations to allow building with gcc-15 with C23 std
being default now.

Fixes:
error: conflicting types for 'xdr_opaque_auth

(From OE-Core rev: 65036ab0a519c14338fb26ac8162d159d965da2b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
765333686d rust-llvm: fix build with gcc-15
As in meta-clang for clang-native:
f915bbfc71

(From OE-Core rev: 818750db213dc2c0daac4757d078092be6de3fe6)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
52ac1f3309 libgpg-error: fix build with gcc-15
Backport a fix for native build with gcc-15 on host

(From OE-Core rev: cef0a6c3245a2556614f7e009c2e00e1eb16e08e)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
7de6526866 pkgconfig: fix build with gcc-15
* on hosts with gcc-15 or whenever glib PACKAGECONFIG isn't enabled
  and pkgconfig uses own old bundled glib

* fixes:
  http://errors.yoctoproject.org/Errors/Details/853015/
../../../git/glib/glib/goption.c:169:14: error: two or more data types in declaration specifiers
  169 |     gboolean bool;
      |              ^~~~
../../../git/glib/glib/goption.c:169:18: warning: declaration does not declare anything
  169 |     gboolean bool;
      |                  ^

(From OE-Core rev: 948e0170d83949e2d5a676afb81edc44f07c5ba4)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
6b639e1975 unifdef: Don't use C23 constexpr keyword
Fixes build with GCC-15

(From OE-Core rev: 3085783dd5585a85a3853858215689c362429c64)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
2a0bd475e8 gdbm: Use C11 standard
GCC15 is switching defaults to C23 and gdbm is not yet ready to
compile using C23 std.

For scarthgap also add it in BUILD_CFLAGS.

(From OE-Core rev: 97989d81c5e30434594beadd9449e907e98d3ceb)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
0fdc4f72f5 gmp: Fix build with older gcc versions
The fix to make this work with GCC15/C23 caused problems with older gcc versions.
Add a fix for that.

(From OE-Core rev: 237085506a454fb927389d681f30c8c995bc7b2b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
f06f09415b gmp: Fix build with GCC15/C23
(From OE-Core rev: 5114bea0e9fe3cc15cb4f4d264a932d5b9897296)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
9bea9b7394 m4: Stick to C17 standard
GCC15 imposes C23 by default and 1.4.19 release has gnulib version which
can not be compiled without errors, while new release of m4 is in progress
we might use C17 until then and use GCC15 to compile it

For scarthgap also add it in BUILD_CFLAGS.

(From OE-Core rev: 94ec72b332dce71a2756560ddf738f864e3c853d)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
b63fff4544 unzip: Fix build with GCC-15
Add a patch to remove redundant declarations

(From OE-Core rev: b84d6ceb89277462d7069defaeb9ecfed9c30d56)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
38b5ba89e6 git: fix build with gcc-15 on host
(From OE-Core rev: a534cf958f9c7d05af795def43ee5ba09fb34ca2)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Martin Jansa
c345127b52 cmake: fix build with gcc-15 on host
(From OE-Core rev: bdfccaa382c1669bff8788e09953c3a770243fab)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
96cf0503ed vim: upgrade 9.1.1198 -> 9.1.1652
Handles CVE-2025-53905, CVE-2025-53906, CVE-2025-55157, CVE-2025-55158.

Changes between 9.1.1198 -> 9.1.1652
====================================
https://github.com/vim/vim/compare/v9.1.1198...v9.1.1652

Refresh patches.

Disable newly introduced wayland support (in patch version 1485).
To this belongs also adding recursion in delete command for dir auto
which was newly failing as there is wayland directory inside now.
If someone is interested, this can be probably enabled, but without
additional work it results in compilation error due to function
redefinition conflicts.

(From OE-Core rev: e87d427d928234ef0441f9ce1fe8631fbe471094)

(From OE-Core rev: 052fd7e55d2c73f13f63267fbfb5e39fa504baa3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
5368900445 libarchive: patch regression of patch for CVE-2025-5918
Picked commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-5918

(From OE-Core rev: d2b8d2f7d579779a9effcff677960dbc576b1cc8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
bf7f8a0202 dpkg: patch CVE-2025-6297
Pick commit per [1] from 1.22.x branch.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6297

(From OE-Core rev: 859e5a47744a91b40d5d12c46ff4d8657ef5cf6e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
3270b1284e glib-2.0: patch CVE-2025-6052
Pick commit per [1].
Also pick commits from [2] which is referencing this CVE as the original
fix was not complete.

[1] https://security-tracker.debian.org/tracker/CVE-2025-6052
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4681

(From OE-Core rev: 8e85effc1a79e78f34b0b17341dd223bb80b25e4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
3a75849ff5 glib-2.0: patch CVE-2025-7039
Pick commit per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-7039

(From OE-Core rev: 36402f219bc6fc03970e5277d449f2717199cf44)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
3f6144ca20 go-binary-native: ignore CVE-2025-0913
This was already done for all other go recipes.

(From OE-Core rev: 63dfdbf774dc24ea4e736a6d13d6aa8c72ebee4d)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Peter Marko
0ecde9a2a2 qemu: set status of CVE-2024-7730 to fixed
This was backported to v8.2.7 and also it is mentioned in commit
upgrading qemu in oe-core.

(From OE-Core rev: d05df779286288d1f8b69159ebcfc45a853bd23b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Khem Raj
8ade657e16 ncurses: Pin to C17 standard
Newer snapshots of ncurses have the fixes but they are many needed to get
C23 going. Until next release lets stick with C17 even while GCC 15 switches
to C23 defaults.

For scarthgap also add it in BUILD_CFLAGS.

(From OE-Core rev: 2ee706f58a96f30904ac3d292c0ac532739c91ea)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Praveen Kumar
766dfe5115 go: fix CVE-2025-47907
Cancelling a query (e.g. by cancelling the context passed to one of
the query methods) during a call to the Scan method of the returned
Rows can result in unexpected results if other queries are being made
in parallel. This can result in a race condition that may overwrite
the expected results with those of another query, causing the call to
Scan to return either unexpected results from the other query or an
error.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47907

Upstream-patch:
8a924caaf3

(From OE-Core rev: 22d8ac9884208b8f9b2a69ec6a257c62e1f2f8d2)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Archana Polampalli
f584b357c3 ffmpeg: fix CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1.
This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c
of the component AAC Encoder. The manipulation leads to stack-based buffer overflow.
It is possible to initiate the attack remotely. The exploit has been disclosed to the
public and may be used.

(From OE-Core rev: c9a15206bae7f1e85dc3b8812eabb936a7e6d383)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Archana Polampalli
c1b0ad70b4 ffmpeg: upgrade 6.1.2 -> 6.1.3
Fixes:
CVE-2023-6604
CVE-2023-6602
CVE-2025-7700

Changelog:
https://github.com/FFmpeg/FFmpeg/blob/n6.1.3/Changelog

Removed the CVE patches which are already fixed with this upgrade

ref:
c104119c6b
7d79d0a43b
a4b6e37ad5
efedc1d1b6
dcf34f13f5
bed04417b4
b43a12363c
e2b20632b8
43f64690ad

(From OE-Core rev: 901304a22413030b9744006ae18b587146b71953)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Hitendra Prajapati
35cae2014a gstreamer1.0-plugins-base: fix CVE-2025-47807
Upstream-Status: Backport from 9e2238adc1

(From OE-Core rev: 19eca5d7373667dbacd02a2c1dd8c9de8101cd34)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Archana Polampalli
b4135ab254 go: fix CVE-2025-4674
The go command may execute unexpected commands when operating in untrusted VCS repositories.
This occurs when possibly dangerous VCS configuration is present in repositories.
This can happen when a repository was fetched via one VCS (e.g. Git), but contains metadata
for another VCS (e.g. Mercurial). Modules which are retrieved using the go command line,
i.e. via "go get", are not affected.

(From OE-Core rev: efdc4920571677c9051d4402eaa801672eeb24e3)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-01 08:30:56 -07:00
Steve Sakoman
ec220ae083 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 93c7489d843a0e46fe4fc685b356d0ae885300d7)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 06:04:30 -07:00
Steve Sakoman
1df3fcb4a5 poky.conf: bump version for 5.0.12
(From meta-yocto rev: 82602cda1a89644d1acbe230a81c93e3fb5031c8)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 06:01:57 -07:00
Martin Jansa
93c7e11457 bash: use -std=gnu17 also for native CFLAGS
* fixes builds on host with gcc-15:
  http://errors.yoctoproject.org/Errors/Details/853016/

../../bash-5.2.37/builtins/mkbuiltins.c:268:29: error: too many arguments to function ‘xmalloc’; expected 0, have 1
  268 |           error_directory = xmalloc (2 + strlen (argv[arg_index]));
      |                             ^~~~~~~  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~

(From OE-Core rev: 55c144bd17665f70cd15e36f3405f502a962f039)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Khem Raj
fb9746b787 bash: Stick to C17 std
GCC 15 defaults to C23 and bash is not yet ready for that
so keep using C17 like GCC 14 for now

(From OE-Core rev: adf63fe5f76cbd0fd93ce5fa23229a388211e992)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Martin Jansa
dcfcbb21c2 cairo: fix build with gcc-15 on host
* backports from 1.18.2 used since:
  https://git.openembedded.org/openembedded-core/commit/?id=070d79c8adec7e0a8862019cf61910a59b18613a

* fixes build on hosts with gcc-15 (e.g. ubuntu-25.10)

../cairo-1.18.0/test/pdiff/pdiff.h:22:13: error: ‘bool’ cannot be defined via ‘typedef’
   22 | typedef int bool;
      |             ^~~~
../cairo-1.18.0/test/pdiff/pdiff.h:22:13: note: ‘bool’ is a keyword with ‘-std=c23’ onwards
../cairo-1.18.0/test/pdiff/pdiff.h:22:1: warning: useless type name in empty declaration
   22 | typedef int bool;
      | ^~~~~~~

(From OE-Core rev: 6bd49cba1d7e12a6d8a4521a2097ff9f5ddc6368)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Khem Raj
f1647fba72 parted: Fix build with GCC 15
(From OE-Core rev: 67c47f0ed5ba852930e0815691ee7ec06dec1d0e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Khem Raj
19dd05ccc9 e2fsprogs: Fix build failure with gcc 15
Backport a needed fix

(From OE-Core rev: f5a7d9aa471e05d7cdb3127eaec3dba1b15bf72d)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Daniel Turull
3318b5eb4d libxml2: ignore CVE-2025-8732
The code maintainer disputes the CVE as the issue can only be triggered with
untrusted SGML catalogs and it makes absolutely no sense to use untrusted
catalogs.

The issue triggers a crash if an invalid file is provided.
Source: https://gitlab.gnome.org/GNOME/libxml2/-/issues/958"

(From OE-Core rev: 348ce728af1cea4f909de5c3597801b5612719e4)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Peter Marko
9c4fe6dac5 glib-2.0: ignore CVE-2025-4056
NVD report [1] says:
A flaw was found in GLib. A denial of service on **Windows platforms**
may occur if an application attempts to spawn a program using long
command lines.

The fix [3] (linked from [2]) also changes only files
glib/gspawn-win32-helper.c
glib/gspawn-win32.c

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-4056
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3668
[3] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4570

(From OE-Core rev: 5858567a9222d9fff6f0a282cf7c7bda4e19af57)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:55 -07:00
Daniel Turull
819f151bed xz: ignore CVE-2024-47611
According to the NVD entry, it is only applicable when built
for native Windows (MinGW-w64 or MSVC).

(From OE-Core rev: 04ce4704e603cd66f30ffc001541c6497d84050e)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:54 -07:00
Peter Marko
40999c1bbd dropbear: patch CVE-2025-47203
Based on Debian patch for this CVE, pick the same commits as mentioned
in kirkstone for this CVE except those already included in 2022.83.

7f48e75892

(From OE-Core rev: 6d287785611c344aa0c97048c3bfc280b1787ff5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:54 -07:00
Philip Lorenz
00ade479ef cve-check: Add missing call to exit_if_errors
check_cves may raise the cve_status_not_in_db QA check. Call
exit_if_errors to make sure that the task is marked as failed when the
check is categorized as an error.

cve_status_not_in_db was in the meantime dropped in OE-Core
452e605b55ad61c08f4af7089a5a9c576ca28f7d so this change is only required
on scarthgap.

(From OE-Core rev: b3d12589c26f4e86b153bbdcda774985e4e046bd)

Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-22 05:59:54 -07:00
Antonin Godard
4d2729b88c ref-manual/classes.rst: document the testexport class
This class has been in OE-Core for a while but never documented in the
reference manual. Add some description for it and link to the existing
documentation on it.

(From yocto-docs rev: dd665216fa578a1f2f268790d708c6a5d2912ecf)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 362a331255525fc853dab3af4ec905c417fabb0b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Antonin Godard
c030f0e492 ref-manual/variables.rst: document SPL_DTB_BINARY
This variable is part of uboot-sign but not documented.

(From yocto-docs rev: 999e81f17bf60e187e709368ede3965df19bee59)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 05eb461cb1da76ad9cbaf634da7f47447b3f6765)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Antonin Godard
729f2a3d19 ref-manual/variables.rst: document the FIT_CONF_PREFIX variable
Added by commit 7892ee3dc37d ("kernel-fitimage: allow overriding FIT
configuration prefix") in OE-Core, but never documented.

(From yocto-docs rev: 47a0181cc471667d78f7810aa1ef55027a761a82)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860891492b96eb127af5e7bab6348fca12167c68)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Erik Lindsten
1a02f43617 overview-manual/yp-intro.rst: fix broken link to article
(From yocto-docs rev: 1f7bad17b9457c9e74273bceb962c53eb60fdfe3)

Signed-off-by: Erik Lindsten <erik@awto.se>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b9680ad83ad3fc5e2b87594f7c62c057134d198b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Antonin Godard
0a71bd589c ref-manual/system-requirements.rst: update supported distributions
Update the distributions to match the list of workers on the
Autobuilder. This list was generated with the help of
yocto-autobuilder-helper/scripts/yocto-supported-distros.

Also:

- Sort the lists alphabetically.
- Decrease spacing between entries for readability.

(From yocto-docs rev: e99a9283e30ae2b844018d1ffb88560ab6877ab7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Quentin Schulz
61545ac190 go-helloworld: fix license
The example repo doesn't seem to have ever been under MIT to begin with
but rather Apache-2.0. It was then changed to the license used by the
goland projectm that is BSD-3-Clause, 2 years ago in commit 00c7068f9d83
("all: update to Go license").

The license file exists in the sources, so use that one instead of
taking it from the OE-Core license directory.

License-Update: Incorrect license is now proper

(From OE-Core rev: fa45d6d5bec8fe503ff6b9166a3b4af31ea95369)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Nikhil R
95bbe19b02 cmake: Add PACKAGECONFIG option for debugger support
Starting from CMake version 2.27 support for interactive debugging of CMake
scripts and configurations was added. However, by default the `nativesdk-cmake`
is compiled with debugger support turned off.

This change adds debugger support for cmake

(From OE-Core rev: 8acfca456c3502f0d097ba01a2d08f83fb75ab60)

(From OE-Core rev: 776846eb8aa2f5f8c1ec8842cdbaff6b6bcdfa65)

Signed-off-by: Nikhil R <nikhilr5@kpit.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Martin Jansa
83fac1162d libpam: re-add missing libgen include
It was added by original commit for CVE-2025-6020-01.patch
475bd60c55 (diff-05f443e6acbe32a148a45648148739bf6f02f13acc5c20c6037bf933223d4d77)
but removed here in the rebase, causing:

../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:11: error: call to undeclared function 'dirname'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
  326 |         parent = dirname(buf);
      |                  ^
../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:9: error: incompatible integer to pointer conversion assigning to 'char*' from 'int' [-Wint-conversion]
  326 |         parent = dirname(buf);
      |                ^ ~~~~~~~~~~~~

(From OE-Core rev: 6d88a28ac7b6ff61808eb46e5c85dabd17c77f2e)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Hitendra Prajapati
eb487bba3e gstreamer1.0-plugins-good: fix multiple CVEs
* CVE-2025-47183 - Upstream-Status: Backport from c4d0f4bbd9 && d76cae74da
* CVE-2025-47219 - Upstream-Status: Backport from b808039433

(From OE-Core rev: 3e82483c777d0a59a9d93e7c41f8fe88a9d75b22)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Hitendra Prajapati
1db6ffa609 gstreamer1.0-plugins-base: fix CVE-2025-47806
Upstream-Status: Backport from da4380c4df

(From OE-Core rev: fbe8dd2aa6160530b84d3a174f3f8fc14f9fbab5)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Hitendra Prajapati
ba10ae532a gstreamer1.0-plugins-base: fix CVE-2025-47808
Upstream-Status: Backport from 6b19f11751

(From OE-Core rev: 2611a16cad53d2bf0cda2946678e7d31e3ffa007)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Peter Marko
2cc9a0249b go: ignore CVE-2025-0913
This is problem on Windows platform only.

Per NVD report [1], CPE has "and" clause
Running on/with
 cpe:2.3microsoft:windows:-:*:*:*:*:*:*:*

Also linked patch [2] changes Windows files only (and tests).

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-0913
[2] https://go-review.googlesource.com/c/go/+/672396

(From OE-Core rev: ec1c6ab989b298773e8df8a6a4532f88b93617ff)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Peter Marko
6d83b872af python3: patch CVE-2025-8194
Pick commit from 3.12 branch mentioned in NVD report.
https://nvd.nist.gov/vuln/detail/CVE-2025-8194

(From OE-Core rev: 34f1b4877a0601d2057453c159c76a54754f229a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Zhang Peng
0263c3dfa4 avahi: fix CVE-2024-52615
CVE-2024-52615:
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area
DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-52615]
[https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g]

Upstream patches:
[4e2e1ea090]

(From OE-Core rev: ec22ec26b3f40ed5e0d84d60c29d8c315cf72e23)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-20 07:37:19 -07:00
Robert P. J. Day
6f7e929ea6 variables.rst: remove references to obsolete tar packaging
The tar packaging format was removed some time ago. Also, add some
minor grammatical tweaking.

(From yocto-docs rev: 0c154c1f431be918c4c9ce3047c12099925a9c53)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8e9fd1ca232f3c1e8be51cb881a68b4745ee548a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Marco Cavallini
1fd82d514f dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
After compact vsdisk you have to detach it before exiting
  otherwise the vdisk remains attached.

  DISKPART> select vdisk file="<path_to_VHDX_file>"
  DISKPART> attach vdisk readonly
  DISKPART> compact vdisk
  DISKPART> detach     <------------ new missing command
  DISKPART> exit

(From yocto-docs rev: a1dc91850e0353866dc9b461fce8c08724e49dae)

Signed-off-by: Marco Cavallini <m.cavallini@koansoftware.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1cc65ddf1a074f61fe5a63d222f3079b7fcb4c1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Lee Chee Yang
7d110f9a94 migration-guides: add release notes for 5.0.11
(From yocto-docs rev: 736b0b06d8fb48cbf72386464df919745bcce90e)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b5f6113cd95107132aac74b8f0e6e4895b7b0e90)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Fabio Berton
c82f7a0577 linux-libc-headers: Fix invalid conversion in cn_proc.h
Backport 'connector: Fix invalid conversion in cn_proc.h' commit to fix
error:
/
|/usr/include/linux/cn_proc.h: In function 'proc_cn_event
| valid_event(proc_cn_event)':
|/usr/include/linux/cn_proc.h:72:17: error: invalid conversion from
| 'unsigned int' to 'proc_cn_event' [-fpermissive]
|   72 |         ev_type &= PROC_EVENT_ALL;
|      |                 ^
|      |                 |
|      |                 unsigned int
\

Change is already merged in kernel branch linux-6.6.y [1].

1 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.6.y&id=06e785aeb9ea8a43d0a3967c1ba6e69d758e82d4

(From OE-Core rev: f023779af6c0e5c838bdacbd6d9765d1c6740575)

Signed-off-by: Fabio Berton <fbberton@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Aleksandar Nikolic
f6b4415273 scripts/install-buildtools: Update to 5.0.11
Update to the 5.0.11 release of the 5.0 series for buildtools

(From OE-Core rev: 3b3a672ae6c024096cc263a669b1131e3f653b79)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Peter Marko
d9b992de0d glibc: fix CVE-2025-8058
This is a single commit bump containing only CVE fix
$ git log --oneline cff1042cceec3502269947e96cf7023451af22f3..b027d5b145f1b2908f370bdb96dfe40180d0fcb6
b027d5b145 posix: Fix double-free after allocation failure in regcomp (bug 33185)

Test results didn't change except newly added test succeeding.
(tst-regcomp-bracket-free)

(From OE-Core rev: c2b63f171719e2b1c12ba049cbe776adf9e0244b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Peter Marko
2156b7931e libxml2: patch CVE-2025-6170
Pick commit referencing this CVE from 2.13 branch.

(From OE-Core rev: 061610dfca8a72b71e1baca3ad4aa2c9fb64449b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Peter Marko
664f26b3f0 ncurses: patch CVE-2025-6141
Pick relevant part of snapshot commit 20250329, see [1].

That has:
add a buffer-limit check in postprocess_termcap (report/testcase by
Yifan Zhang).

[1] https://invisible-island.net/ncurses/NEWS.html#index-t20250329

(From OE-Core rev: 79b080eb93918431c97edbbc80de5f70a2b09a4a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
114eddfaef gnutls: patch CVE-2025-6395
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 14fbbdc51f7d02bc10b8078c0ba1de17f1563d73)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
f569a0f2d9 gnutls: patch CVE-2025-32990
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 823cdb5574c15a595dfeab413421304007899aa2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
f5aab38227 gnutls: patch CVE-2025-32988
Pick relevant commit from 3.8.10 release MR [1].

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 2838dae57a1236d4f6eb97e32eb500892ba67184)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
bee76dfe7e gnutls: patch reject zero-length version in certificate request
Pick relevant commit from 3.8.10 release MR [1].
The MR contains referece to undiscoled issue, so any security relevant
patch should be picked.

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: d1aaef9bbaa240c83cc7d485b55570449203da0b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
5de981dd1c gnutls: patch read buffer overrun in the "pre_shared_key" extension
Pick relevant commit from 3.8.10 release MR [1].
The ME contains referece to undiscoled issue, so any security relevant
patch should be picked.

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 8f825e7f4ca36d7ac62062e452cea256f3c058aa)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Peter Marko
e9a35f720c gnutls: patch CVE-2025-32989
Pick relevant commit from 3.8.10 release MR [1].

Binary test file was added as separate file as binary diffs are not
supported.

[1] https://gitlab.com/gnutls/gnutls/-/merge_requests/1979

(From OE-Core rev: 9d9ce14e2edceb211c3193cef88715d9c67fd3e0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Richard Purdie
511d3e23f5 bitbake: utils: Optimise signal/sigmask performance
Running "time bitbake -pP idle" with a valid cache shows around 800,000
calls to enum creation from python's signal.py. We don't care about this
overhead and it adversely affects cache load time quite badly.

Try and use _signal directly, falling back to signal, which avoids
this overhead we don't need and makes cache loading much faster.

(Bitbake rev: 982645110a19ebb94d519926a4e14c8a2a205cfd)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ee5fce67ce35b025c68aa61e2e758903269ee346)
Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Mark Hatle
bfb799ef2a bitbake: bitbake: runqueue: Verify mcdepends are valid
In order to avoid a potentially confusing backtrace, check that the mcdepend
is valid when we add it.

Add a test case to ensure invalid configurations are caught and trigger an
error.

[RP: Reworked test case to simplify and improve code]
(Bitbake rev: 9f6f049870e0ec829e171fe91ec8f7a092ddd2ab)

Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:06 -07:00
Jinfeng Wang
e711b2f39a mtools: upgrade 4.0.48 -> 4.0.49
New version includes check for overlong file names, see [1].

[1] https://lists.gnu.org/archive/html/info-mtools/2025-06/msg00005.html

(From OE-Core rev: c374e6cfcdd2c8ba17d82ffcfdeb97d21144e2bf)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>

(From OE-Core rev: 044c2bceefcc12262cb2421e8f1da5f6c2ed9f72)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Wang Mingyu
f578ce2a73 mtools: upgrade 4.0.47 -> 4.0.48
clang_UNUSED.patch
disable-hardcoded-configs.patch
refreshed for 4.0.48

(From OE-Core rev: d2c56de7c9d403c3432213bc20e04c2ed5f1db16)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: 1d5aee7e67cd614073a15b47b832375428865260)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Richard Purdie
057c86df84 mtools: upgrade 4.0.46 -> 4.0.47
(From OE-Core rev: cf705382534d8f5af6880511221f701a733d84d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: 14ef270cc003646e6ca97ff3405507f2b9e92736)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Wang Mingyu
8721aab7af mtools: upgrade 4.0.45 -> 4.0.46
clang_UNUSED.patch
mtools-makeinfo.patch
refreshed for 4.0.46

Changelog:
=============
- iconv buffer overflow fixes
- removed references to mread and mwrite (obsolete subcommands
from mcopy)
- documented mdoctorfat, and addressed 2 bugs/oversights
- removed references to obsolete mread and mwrite
- portability fixes (dietlibc and MacOS X) & simplification

(From OE-Core rev: daab05bc863611c83223a383dd83ff2134cae6f8)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: f5a5b2372669d8be4ae3f19ed6892264ea3999d0)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Wang Mingyu
8b8f23e650 mtools: upgrade 4.0.44 -> 4.0.45
Changelog:
============
- Fixed iconv descriptor leak
- Fixed size of error message buffer

(From OE-Core rev: 77340d2bb1f31e305394df5d589fc0d3a0c5cd9a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: cc1975888ffdc58655e80d3d14450cf68ee0f719)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Alexander Kanavin
93663dc300 mtools: upgrade 4.0.43 -> 4.0.44
(From OE-Core rev: b09b06ed6351685e5351f8bf80a88d2f42093ca4)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(From OE-Core rev: dd8c333576d7ebb8abab3a62b3451439519a0caa)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Vijay Anusuri
0bc339e2fc xserver-xorg: upgrade 21.1.6 -> 21.1.18
xorg-server 21.1.17
This release contains the fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

   * CVE-2025-49175
   * CVE-2025-49176
   * CVE-2025-49177
   * CVE-2025-49178
   * CVE-2025-49179
   * CVE-2025-49180

Additionally, this release includes a fix for CVE-2022-49737 which was
issued after the fix was merged back in 2022 and several other various fixes.

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html

xorg-server 21.1.18
This release contains an additional fix for CVE-2025-49176 from June 17
security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html

(From OE-Core rev: 2ab7c45631f78ac8f6d19889fa8526d062329992)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a59b385184fb3a548dc27310fd04d64351d8dfba)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Deepesh Varatharajan
3327031e2b glibc: stable 2.39 branch updates
$ git log --oneline 06a70769fd0b2e1f2a3085ad50ab620282bd77b3..cff1042cceec3502269947e96cf7023451af22f3
cff1042cce Fix error reporting (false negatives) in SGID tests
1924d341c0 support: Pick group in support_capture_subprogram_self_sgid if UID == 0

Testing Results:
             Before   After    Diff
PASS          5074     5082     +8
XPASS         4        4         0
FAIL          121      116      -5
XFAIL         16       16        0
UNSUPPORTED   157      154      -3

cff1042cce Fix error reporting (false negatives) in SGID tests
Improved SGID test handling by unifying error reporting and using secure temporary directories.
Replaced non-standard exit codes and fixed premature exits to avoid masking failures.
These changes reduced false negatives, increasing overall test pass rates

UNSUPPORTED tests changes
-UNSUPPORTED: stdlib/tst-secure-getenv
-UNSUPPORTED: elf/tst-env-setuid-static
-UNSUPPORTED: elf/tst-env-setuid-tunables

FAILed tests changes
-FAIL: malloc/tst-aligned-alloc-random-thread-cross-malloc-check
-FAIL: malloc/tst-aligned-alloc-random-thread-malloc-check
-FAIL: malloc/tst-dynarray
-FAIL: malloc/tst-dynarray-mem
-FAIL: resolv/tst-resolv-aliases

PASSed tests changes
+PASS: stdlib/tst-secure-getenv
+PASS: elf/tst-env-setuid-static
+PASS: elf/tst-env-setuid-tunables
+PASS: malloc/tst-aligned-alloc-random-thread-cross-malloc-check
+PASS: malloc/tst-aligned-alloc-random-thread-malloc-check
+PASS: malloc/tst-dynarray
+PASS: malloc/tst-dynarray-mem
+PASS: resolv/tst-resolv-aliases

(From OE-Core rev: c40b9c33061c4019ed7790ccb799bb3491998b3d)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:53 -07:00
Hitendra Prajapati
cf89d7b3bf libpam: fix CVE-2025-6020
Upstream-Status: Backport from 475bd60c55 && 592d84e126 && 976c200793

(From OE-Core rev: dd5bbac75b1d8f7ebd83d5c9945bd860e397ba07)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Peter Marko
99f48be958 openssl: patch CVE-2025-27587
Pick commits for Minerva fix between 3.2.4 and 3.2.5 release.

Update to 3.2.5 is blocked due to problem with python ptest errors, so
use patch instead of upgrade for now.

(From OE-Core rev: 57c04a32997c1b045121aff045f3ffaa7bb0b5f5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Peter Marko
ed5a1a7443 openssl: CVE-2024-41996
As discussed in [1], this commit fixes CVE-2024-41996.
Although openssl project does not consider this a vulnerability, it got
CVE number assigned so it deserves attention.

[1] https://github.com/openssl/openssl/pull/25088

(From OE-Core rev: cb49b9e49b4561ccea4c231cac591af557b9749c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Peter Marko
5f469434d3 orc: set CVE_PRODUCT
There are new CVEs reported for this recipe which are not for this
componene, but for a component with same name from apache.

sqlite> select vendor, product, id, count(*) from products where product like 'orc' group by vendor, product, id;
apache|orc|CVE-2018-8015|1
apache|orc|CVE-2025-47436|4
gstreamer|orc|CVE-2024-40897|1

(From OE-Core rev: f5e320c0ea57ce1813ed09da703fe2b33f4976e6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Roland Kovacs
d5613f0d2e sqlite3: fix CVE-2025-6965
There exists a vulnerability in SQLite versions before 3.50.2 where the
number of aggregate terms could exceed the number of columns available.
This could lead to a memory corruption issue.

(From OE-Core rev: 52499a5ea3b4ba145914aca873844ab718953289)

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Deepesh Varatharajan
76f88baf01 binutils: Fix CVE-2025-7545
objcopy: Don't extend the output section size
Since the output section contents are copied from the input, don't
extend the output section size beyond the input section size.

Backport a patch from upstream to fix CVE-2025-7545
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944]

(From OE-Core rev: 128e40c39d8eafdd32fea71b902b38801afec202)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Yash Shinde
b162dfb492 binutils: Fix CVE-2025-7546
Report corrupted group section instead of trying to recover.

CVE: CVE-2025-7546
Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b]
PR  33050 [https://sourceware.org/bugzilla/show_bug.cgi?id=33050]

(From OE-Core rev: 3a54f11b9462905e103e13161a77ef681f14dc92)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Roland Kovacs
6269788fef libxml2: fix CVE-2025-49795
A NULL pointer dereference vulnerability was found in libxml2 when processing
XPath XML expressions. This flaw allows an attacker to craft a malicious XML
input to libxml2, leading to a denial of service.

(From OE-Core rev: b144c3ef3ba1797d925ea44d9450a6ec0fe32047)

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Richard Purdie
0efe19beef bitbake: test/fetch: Switch u-boot based test to use our own mirror
The upstream servers are having issues so switch to our own shadow copy
of the repo.

(Bitbake rev: 86e7a58c0e9904c33b1b94dddc3d683c2da22d1a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-29 07:59:52 -07:00
Joe Slater
792d18b4cb oe-debuginfod: add option for data storage
Storing the data files under $HOME can be unreliable if debuginfod
is used for several projects, especially if $HOME is shared
between machines.  We provide an option to save files under the
project directory.  The default behavior is unchanged.

(From OE-Core rev: e1e0cf82f559077e2a51447baf137086202c0c4a)

(From OE-Core rev: 24c0ab18045920bb5c1e965c0ea6d176fd6de234)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Michal Seben
15a4d0cfb1 timedated: wait for jobs before SetNTP response
Backport a fix to address the dbus SetNTP response timing issue.
Fix is already available since systemd v256-rc1.

(From OE-Core rev: 4db0483cfd14e31c3e7cc87d538d73275fd51bbf)

Signed-off-by: Michal Seben <michal.seben@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Yi Zhao
f2a6317735 kea: set correct permissions for /var/run/kea
Set the permissions of /var/run/kea to 750 to fix kea server startup
error:

ERROR [kea-dhcp4.dhcp4/445.140718820303936] DHCP4_INIT_FAIL failed to
initialize Kea server: configuration error using file
'/etc/kea/kea-dhcp4.conf': 'socket-name' is invalid: socket
path:/var/run/kea does not exist or does not have permssions = 750

This permission check was introduced by commit[1] in kea 2.4.2.

[1] f7061c4e97

(From OE-Core rev: 5b709e2c165bf46f4f35e1783ab7ec54fabd2ec3)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Deepesh Varatharajan
d06bc81271 binutils: stable 2.42 branch updates
Below commit on binutils-2.42 stable branch are updated.

x86: Check MODRM for call and jmp in binutils older than 2.45

Test Results:
                                 Before  After  Diff
No. of expected passes            302     302    0
No. of unexpected failures        2       2      0
No. of untested testcases         1       1      0
No. of unsupported tests          7       7      0

Testing was done and there were no regressions found

(From OE-Core rev: 412def8923a89f3c385eae25901bed0c07859029)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Praveen Kumar
a27ca8e3c0 sudo: upgrade 1.9.15p5 -> 1.9.17p1
Changelog:
===========
* Fixed CVE-2025-32462.  Sudo's -h (--host) option could be specified
   when running a command or editing a file.  This could enable a
   local privilege escalation attack if the sudoers file allows the
   user to run commands on a different host.

* Fixed CVE-2025-32463.  An attacker can leverage sudo's -R
  (--chroot) option to run arbitrary commands as root, even if
  they are not listed in the sudoers file.  The chroot support has
  been deprecated an will be removed entirely in a future release.

License-Update: Copyright updated to 2025

0001-sudo.conf.in-fix-conflict-with-multilib.patch refreshed for 1.9.17

(From OE-Core rev: b04af6db102c97f3d4338dbcfdcab927b5194a69)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Steve Sakoman
38f0ee2ec7 Revert "sudo: Fix CVE-2025-32462"
This CVE is fixed in the following version bump

This reverts commit d01f888a5ec43fdc8e7bd496ae9317c0fa28da9b.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Vijay Anusuri
9302874dda git: Upgrade 2.44.3 -> 2.44.4
Addresses the security issues - CVE-2025-27613, CVE-2025-27614, CVE-2025-46334,
CVE-2025-46835, CVE-2025-48384, CVE-2025-48385, and CVE-2025-48386.

Release Notes:
https://github.com/git/git/blob/v2.44.4/Documentation/RelNotes/2.44.4.txt

(From OE-Core rev: 3a9fdcb2ea0dd2744f59a62f2722bfa276302324)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:22 -07:00
Archana Polampalli
c172c46096 gdk-pixbuf: fix CVE-2025-7345
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function
(io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing
maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding,
allowing out-of-bounds reads from heap memory, potentially causing application crashes or
arbitrary code execution.

(From OE-Core rev: 78a52a7feb995b4ab4f4df6b16feaac60f6ad59b)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:21 -07:00
Peter Marko
83ba977250 iputils: patch CVE-2025-48964
Pick commit referencing this CVE.

(From OE-Core rev: a8193571c8cdba55f568d831a4546e0fed892be0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:21 -07:00
Peter Marko
ef6f8d5f46 busybox: apply patch for CVE-2023-39810
Backport patch referencing this CVE.

Note that the hardening is not activated by default, it adds defconfig
option to enable it.
Since it introduces a breaking change, it shouldn't be enabled in LTS
release by default.
This patch makes busybox cpio equivalent in this release to what is
currently in master and in kirkstone.
Also note that gnu cpio also does not have this hardening, but the CVE
is created only against busybox.

(From OE-Core rev: 3f2b235526d135094408e3895c01bff7b5b938fb)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:21 -07:00
Peter Marko
ae35f06bb1 python3: update CVE product
There are two "new" CVEs reported for python3, their CPEs are:
* CVE-2020-1171: cpe:2.3🅰️microsoft:python:*:*:*:*:*:visual_studio_code:*:* (< 2020.5.0)
* CVE-2020-1192: cpe:2.3🅰️microsoft:python:*:*:*:*:*:visual_studio_code:*:* (< 2020.5.0)
These are for "Visual Studio Code Python extension".

Solve this by addding CVE vendor to python CVE product to avoid
confusion with Microsoft as vendor.

Examining CVE DB for historical python entries shows:
sqlite> select vendor, product, count(*) from products where product = 'python' or product = 'cpython'
   ...> or product like 'python%3' group by vendor, product;
microsoft|python|2
python|python|1054
python_software_foundation|python|2

Note that this already shows that cpython product is not used, so
CVE-2023-33595 mentioned in 62598e1138f21a16d8b1cdd1cfe902aeed854c5c
was updated.
But let's keep it for future in case new CVE starts with that again.

(From OE-Core rev: 72369cd66f78a371608c3fff205e0e96c248f2b3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:21 -07:00
Hitendra Prajapati
6d2f2bd3f7 libxml2: fix CVE-2025-49794 & CVE-2025-49796
Upstream-Status: Backport from 71e1e8af5e

(From OE-Core rev: bb20ddc599314161f3bcd6d5479e81478ceaaa3a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:07:21 -07:00
Steve Sakoman
ae2d52758f build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:17:11 -07:00
Steve Sakoman
e5c05018e0 poky.conf: bump version for 5.0.11
(From meta-yocto rev: 50e5c0d85d3775ac1294bdcd7f11deaa382c9d08)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:14:21 -07:00
Enrico Jörns
045c6b1669 conf.py: improve SearchEnglish to handle terms with dots
While search queries already handled words with hyphens correctly, they
did not do so for words with dots.

To fix this, we

- enhance the word tokenizer to treat both dots ('.') and hyphens ('-')
  as valid characters within words.
  (For robustness, explicitly exclude dots/hyphens at the start or end
  of a word from indexing.)
- adjust query processing to avoid splitting on dots in search input

This allows search queries to correctly match terms such as
'local.conf', 'site.conf', and similar ones now.

Fixes: [YOCTO #14534]

(From yocto-docs rev: 3f88cb85cca8f9128cfaab36882c4563457b03d9)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 80084a4cabdf7f61c7e93eda8ddbd5bc7d54e041)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Antonin Godard
395f818c91 overview-manual/concepts.rst: fix sayhello hardcoded bindir
Replace the hardcoded /usr/bin by ${bindir}, as it should be.

Reported-by: Thomas Perrot <thomas.perrot@bootlin.com>
(From yocto-docs rev: f06601fd09d6394fcc02134f24e337a9e6170584)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 576677eae6960dbc2d2ececeba0fde5bba7bb69f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Lee Chee Yang
5d74429ce9 migration-guides: add release notes for 4.0.28
(From yocto-docs rev: 61968273cf13d8054bc3ffa934b368919409adba)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6959193fddb039c34384fcc391195fdd7fd3dbb8)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Guocai He
7cd69bee25 minicom: correct the SRC_URI
In http://ftp.debian.org/debian/pool/main/m/minicom/, the
tarball of minicom_2.9.orig.tar.bz2 can not be found.
So the old SRC_URI should be updated.

(From OE-Core rev: 49fcec2041071d44289e03cac087de6b929d6153)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Bruce Ashfield
37058c37c0 linux-yocto/6.6: update to v6.6.96
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    a5df3a702b2c Linux 6.6.96
    18d3f9b8e4b9 ARM: 9354/1: ptrace: Use bitfield helpers
    f9917821c527 firmware: arm_scmi: Ensure that the message-id supports fastchannel
    67a50f572178 firmware: arm_scmi: Add a common helper to check if a message is supported
    6f27bbf3de0d nvme: always punt polled uring_cmd end_io work to task_work
    cdfb20e4b34a spi: spi-cadence-quadspi: Fix pm runtime unbalance
    c46358d02759 Revert "ipv6: save dontfrag in cork"
    1583d908cc77 x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
    ed1f395ea5c0 Kunit to check the longest symbol length
    5f4787834cb7 s390/entry: Fix last breaking event handling in case of stack corruption
    56aa7679c9f3 media: uvcvideo: Rollback non processed entities on error
    f165d04c41a3 kbuild: rpm-pkg: simplify installkernel %post
    cca5bb42b736 scripts: clean up IA-64 code
    b90dc5d67b68 ksmbd: remove unsafe_memcpy use in session setup
    107a48df3f94 ksmbd: Use unsafe_memcpy() for ntlm_negotiate
    8302adf60aba drm/amdgpu: switch job hw_fence to amdgpu_fence
    a5d7cc1647f9 drm/amdgpu: Add kicker device detection
    f640d011080d drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
    a8ceffaeb780 drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
    5148c7ea69e9 drm/amd/display: Add null pointer check for get_first_active_display()
    ede04b471596 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
    252e6e96f9b6 drm/bridge: cdns-dsi: Check return value when getting default PHY config
    c4ee1b31a540 drm/bridge: cdns-dsi: Fix connecting to next bridge
    f9b819c39d13 drm/bridge: cdns-dsi: Fix phy de-init and flag it so
    2565ff3ac3f5 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
    76115eafad12 drm/amdkfd: Fix race in GWS queue scheduling
    7946a10f8da7 drm/msm/gpu: Fix crash when throttling GPU immediately during boot
    50e48e940329 drm/udl: Unregister device before cleaning up on disconnect
    5ff3636bcc32 drm/tegra: Fix a possible null pointer dereference
    23134a522758 drm/tegra: Assign plane type before registration
    9ec447c23753 drm/etnaviv: Protect the scheduler's pending list with its lock
    6d7b814c527c drm/cirrus-qemu: Fix pitch programming
    66f122e67261 drm/ast: Fix comment on modeset lock
    bf2c1643abc3 scsi: megaraid_sas: Fix invalid node index
    42cf4f016173 HID: wacom: fix kobject reference count leak
    f531651c394e HID: wacom: fix memory leak on sysfs attribute creation failure
    33acbeeb5ad6 HID: wacom: fix memory leak on kobject creation failure
    f0ffc8076d39 HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
    8a89e9c27b77 net: libwx: fix the creation of page_pool
    9052c7bca391 btrfs: update superblock's device bytes_used when dropping chunk
    aeeae8feeaae btrfs: fix a race between renames and directory logging
    6ad80378f928 dm-raid: fix variable in journal device check
    e395e34b0652 Bluetooth: L2CAP: Fix L2CAP MTU negotiation
    f90d78d65ccc serial: imx: Restore original RXTL for console to fix data loss
    40f62f8cf854 dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
    f89c40520fa1 staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
    e5e6a5aa3915 EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
    c82c7041258d smb: client: fix potential deadlock when reconnecting channels
    ced8eff11a4f drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
    1c9a8a84c5a8 drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
    ee800ff711c9 drm/i915: fix build error some more
    0804d77fd6e6 net: selftests: fix TCP packet checksum
    5b63793da82a ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
    cabed6ba92a9 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
    63528d60673a net: enetc: Correct endianness handling in _enetc_rd_reg64
    ad9c4941d32e libbpf: Fix possible use-after-free for externs
    c61e284d72d6 um: ubd: Add missing error check in start_io_thread()
    8f96a2ae16b5 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
    d58343f81354 af_unix: Don't set -ECONNRESET for consumed OOB skb.
    86136c670569 wifi: mac80211: fix beacon interval calculation overflow
    9b9a87f0bd18 libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
    591f79625702 attach_recursive_mnt(): do not lock the covering tree when sliding something under it
    74fcb3852a2f ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
    3c709dce1699 atm: clip: prevent NULL deref in clip_push()
    64a99eff8dcf lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
    88f3869649ed s390/pkey: Prevent overflow in size calculation for memdup_user()
    db33aa6c5c93 ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
    490a43d07f16 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
    c9036b6390af i2c: robotfuzz-osif: disable zero-length read messages
    4841060d2e7a i2c: tiny-usb: disable zero-length read messages
    fad0a2c16062 af_unix: Don't leave consecutive consumed OOB skbs.
    aabb458c33d9 af_unix: Don't call skb_get() for OOB skb.
    0919388ac44f af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
    fd3af69c14ed af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
    b7904e2fccd0 af_unix: Define locking order for unix_table_double_lock().
    47847495a6ea platform/x86: ideapad-laptop: use usleep_range() for EC polling
    6e7af3d4f67f platform/x86: ideapad-laptop: move ACPI helpers from header to source file
    f8761b11f1c0 platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
    d19ae7b033b2 platform/x86: ideapad-laptop: introduce a generic notification chain
    b6b5bcae7aa5 dummycon: Trigger redraw when switching consoles with deferred takeover
    8853bad7634f tty: vt: make consw::con_switch() return a bool
    e9ba8c528b8f tty: vt: sanitize arguments of consw::con_clear()
    0b10b5ab7d1d tty: vt: make init parameter of consw::con_init() a bool
    7bf946a284c3 PCI: apple: Set only available ports up
    b8704eef56c5 PCI: apple: Use helper function for_each_child_of_node_scoped()
    df1d7e879edd uio_hv_generic: Align ring size to system page
    ca0198894bf9 uio_hv_generic: Query the ringbuffer size for device
    ebba6cc0781c Drivers: hv: vmbus: Add utility function for querying ring size
    3bc5abf8e75a f2fs: don't over-report free space or inodes in statvfs
    9830ef1803a5 ASoC: codecs: wcd9335: Fix missing free of regulator supplies
    28b6ef1ab65d ASoC: codec: wcd9335: Convert to GPIO descriptors
    99d696842287 ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
    0c40fa81f850 jfs: validate AG parameters in dbMount() to prevent crashes
    7747d3f9a506 fs/jfs: consolidate sanity checking in dbMount
    fc97a116dc49 btrfs: handle csum tree error with rescue=ibadroots correctly
    2cbeb47ea983 ovl: Check for NULL d_inode() in ovl_dentry_upper()
    d120737a6da7 scsi: ufs: core: Don't perform UFS clkscaling during host async scan
    acc1d4cc47f1 ceph: fix possible integer overflow in ceph_zero_objects()
    f3465bb32050 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
    789a3f63bd60 ALSA: hda: Add new pci id for AMD GPU display HD audio controller
    b8cd384c53ae ALSA: hda: Ignore unsol events for cards being shut down
    23fe269bfab3 usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
    8851e4058701 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
    00626325dba7 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
    433cb3e70dc9 usb: Add checks for snprintf() calls in usb_alloc_dev()
    0aaf810416c9 usb: common: usb-conn-gpio: use a unique name for usb connector device
    8e958d10dd0c tty: serial: uartlite: register uart driver in init
    a33f507f36d5 usb: potential integer overflow in usbg_make_tpg()
    a8d1b4f219e8 misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
    1063c586a35c iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
    41732f9febdc usb: dwc2: also exit clock_gating when stopping udc while suspended
    8217fa7d92f0 coresight: Only check bottom two claim bits
    8dbc01f09cad um: use proper care when taking mmap lock during segfault
    265ca1741075 um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
    462215a2a3f4 iio: pressure: zpa2326: Use aligned_s64 for the timestamp
    c5734f9bab6f drm/scheduler: signal scheduled fence when kill job
    553f560e0a74 bcache: fix NULL pointer in cache_set_flush()
    9d578589e3ec amd/amdkfd: fix a kfd_process ref leak
    2fb2470bc683 md/md-bitmap: fix dm-raid max_write_behind setting
    aaef4f1f44b3 PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
    969c9646f0d0 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
    7d942dbcd155 dmaengine: xilinx_dma: Set dma_device directions
    e0051a3daa8b dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
    c765f592adc7 rust: module: place cleanup_module() in .exit.text section
    efe5db9d98b1 ksmbd: provide zero as a unique ID to the Mac client
    f72093f270ea ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
    ad804e3648d3 hwmon: (pmbus/max34440) Fix support for max34451
    2d8b3898caf5 NFSv4: xattr handlers should check for absent nfs filehandles
    9d90ab45d3d3 cxl/region: Add a dev_err() on missing target list entries
    96715eb1a120 fuse: fix race between concurrent setattrs from multiple nodes
    a13b2634dd66 leds: multicolor: Fix intensity setting while SW blinking
    c3616dfddf1d sunrpc: don't immediately retransmit on seqno miss
    f0ba7e6d06f2 mfd: max14577: Fix wakeup source leaks on device unbind
    35cda8619d97 mailbox: Not protect module_put with spin_lock_irqsave
    7d03b140af33 NFSv4.2: fix listxattr to return selinux security label
    cad6f283f6a6 NFSv4: Always set NLINK even if the server doesn't support it
    670c1c546cda cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
    0e7f0e6e14ba cifs: Fix cifs_query_path_info() for Windows NT servers
    4a6499ffc84c cifs: Correctly set SMB1 SessionKey field in Session Setup Request
    3f5b4c104b7d Linux 6.6.95
    218c3629fb8f cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function
    6b4311f78a13 gpio: mlxbf3: only get IRQ for device instance 0
    f6071c3cfe3a perf evsel: Missed close() when probing hybrid core PMUs
    2a673aca82fe RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
    e20f0f44ec59 RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
    a77d0a14ed47 scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
    21da6d3561f3 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
    7c631e5cd38e perf/core: Fix WARN in perf_cgroup_switch()
    bddec730501b perf: Fix cgroup state vs ERROR
    2ee6044a6937 perf: Fix sample vs do_exit()
    4ca4f418b761 s390/pci: Fix __pcilg_mio_inuser() inline assembly
    d7094ad35104 platform/loongarch: laptop: Add backlight power control support
    7b47919aff63 smb: client: fix first command failure during re-negotiation
    cc77844d61f7 Revert "cpufreq: tegra186: Share policy per cluster"
    eb74c6f1b209 ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
    94ec33e9600b ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    2f38986e93d3 platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
    e9a011fc6b04 serial: sh-sci: Increment the runtime usage counter for the earlycon device
    cfa7fa02078d net: make for_each_netdev_dump() a little more bug-proof
    b8ced2b9a23a smb: Log an error when close_all_cached_dirs fails
    aaaa689aa29d dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
    6377977485f7 EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
    a5e3a1442688 net: atm: fix /proc/net/atm/lec handling
    dffd03422ae6 net: atm: add lec_mutex
    bde8833eb075 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
    3162d8235c8c ublk: santizize the arguments from userspace when adding a device
    66bba1fd5bad net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
    7382b6f7d102 net: microchip: lan743x: Reduce PTP timeout on HW failure
    235aa081e2d9 tcp: fix passive TFO socket having invalid NAPI ID
    d3dfe821dfe0 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
    9d0ddfb574a2 tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
    3261c017a7c5 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
    a06078164001 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
    4e9ab5c48ad5 wifi: carl9170: do not ping device which has failed to load firmware
    43e3433a48c3 ptp: allow reading of currently dialed frequency to succeed on free-running clocks
    a8c669bbc831 ptp: fix breakage after ptp_vclock_in_use() rework
    aaef8e3a54b9 e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
    f4c19a8e51ee net: ice: Perform accurate aRFS flow match
    8662ac79a634 aoe: clean device rq_list in aoedev_downdev()
    9311d6d1a54f pldmfw: Select CRC32 when PLDMFW is selected
    4c8f5b0483ac hwmon: (occ) fix unaligned accesses
    1312d9bf88be hwmon: (occ) Rework attribute registration for stack usage
    ff3dcf7f8184 drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
    af2f5f21599a drm/nouveau/bl: increase buffer size to avoid truncate warning
    b599b310380a ionic: Prevent driver/fw getting out of sync on devcmd(s)
    002aa3ed19f3 drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
    77087a79779c drm/msm/disp: Correct porch timing for SDM845
    7e6980c225c1 smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels
    599c489eea79 sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
    5e5d2ad9765a erofs: remove unused trace event erofs_destroy_inode
    2536810df13f bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
    f6393e5cb913 net: Fix checksum update for ILA adj-transport
    3977946f61cd mm/huge_memory: fix dereferencing invalid pmd migration entry
    af6cfcd0efb7 mm/hugetlb: unshare page tables during VMA split, not before
    39c86833f973 iio: accel: fxls8962af: Fix temperature calculation
    3d849cc3dfd3 ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
    f80e551050e4 ALSA: hda/intel: Add Thinkpad E15 to PM deny list
    d61975567d9d ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
    6562806f3200 arm64: Restrict pagetable teardown to avoid false warning
    66bde385a1d3 wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
    eeacfbab9842 wifi: cfg80211: init wiphy_work before allocating rfkill fails
    6d60d822809b Input: sparcspkr - avoid unannotated fall-through
    3902205eadf3 atm: Revert atm_account_tx() if copy_from_iter_full() fails.
    c1a2081f0347 platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
    2753481c40af selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
    0902625a24ee ksmbd: fix null pointer dereference in destroy_previous_session
    2a03531c00b2 selftests/x86: Add a test to detect infinite SIGTRAP handler loop
    372b511e9345 udmabuf: use sgtable-based scatterlist wrappers
    bfa4d86e130a net: clear the dst when changing skb protocol
    0357da9149ea net_sched: sch_sfq: reject invalid perturb period
    bb9d4ffff6d8 scsi: s390: zfcp: Ensure synchronous unit_add
    8d60df50e62f scsi: storvsc: Increase the timeouts to storvsc_timeout
    a504536c2923 smb: improve directory cache reuse for readdir operations
    202d7e838967 cifs: do not disable interface polling on failure
    58021a32f25e cifs: serialize other channels when query server interfaces is pending
    b530c44e1f38 cifs: deal with the channel loading lag while picking channels
    cd42ddddd70a jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
    3f46644a5131 jffs2: check that raw node were preallocated before writing summary
    b427d98d5521 LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
    099cfcb98fb4 LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
    782baee5d917 platform/loongarch: laptop: Unregister generic_sub_drivers on exit
    3bce9e6be030 platform/loongarch: laptop: Get brightness setting from EC on probe
    1921781ec4a8 drivers/rapidio/rio_cm.c: prevent possible heap overwrite
    675d90ee874c io_uring: fix task leak issue in io_wq_create()
    3c3c7c66bdfa Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
    af4ed5262d30 powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
    a7f3cfc1eb99 powerpc/vdso: Fix build of VDSO32 with pcrel
    dd95b3e00346 platform/x86: dell_rbu: Stop overwriting data buffer
    f3b840fb1508 platform/x86: dell_rbu: Fix list usage
    523e2f8a7f83 platform/x86/amd: pmc: Clear metrics table at start of cycle
    7d71ba5b0a01 fs/xattr.c: fix simple_xattr_list()
    897e6d88f0e3 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
    cdc1b9b47bc5 tee: Prevent size calculation wraparound on 32-bit kernels
    59b7304d0dff ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
    bca6fe52bd95 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
    c85311a73d74 watchdog: da9052_wdt: respect TWDMIN
    519ba75728ee fbcon: Make sure modelist not set on unregistered console
    8df53ee74cac wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz
    2304e2b5e470 wifi: ath12k: fix incorrect CE addresses
    9db1bf90147c wifi: ath12k: fix link valid field initialization in the monitor Rx
    6bd0f2e71b15 wifi: ath11k: determine PM policy based on machine model
    42d0bfbe0296 octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
    a37888a435b0 net: ethernet: cortina: Use TOE/TSO on all TCP
    38c4106cb4e9 bpf, sockmap: Fix data lost during EAGAIN retries
    bdb4da9e1921 f2fs: fix to set atomic write status more clear
    a3c32f17acbf usbnet: asix AX88772: leave the carrier control to phylink
    e036d648773c ice: fix check for existing switch rule
    8cde755f5616 i40e: fix MMIO write access to an invalid page in i40e_clear_hw
    52a16bafda0e sock: Correct error checking condition for (assign|release)_proto_idx()
    34c0a670556b scsi: lpfc: Use memcpy() for BIOS version
    79dc5e78d13d wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping
    5cf32cef3a38 pinctrl: mcp23s08: Reset all pins to input at probe
    f9397cf7bfb6 software node: Correct a OOB check in software_node_get_reference_args()
    03545901ec09 net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
    c0d8c14d9bf2 vxlan: Do not treat dst cache initialization errors as fatal
    b4c83b37490d net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
    cd97899361bc net: bridge: mcast: update multicast contex when vlan state is changed
    a0ab9e9148dd wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
    172d1e4a6804 wifi: mac80211: VLAN traffic in multicast path
    4fc2b3c0657b wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
    2077cef44d33 wifi: iwlwifi: pcie: make sure to lock rxq->read
    920fcc7adc73 iommu/amd: Ensure GA log notifier callbacks finish running before module unload
    32f25633f366 scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
    c697dac96937 libbpf: Add identical pointer detection to btf_dedup_is_equiv()
    f11cfb48f2d2 clk: rockchip: rk3036: mark ddrphy as critical
    dfec43c50376 wifi: mac80211: do not offer a mesh path if forwarding is disabled
    efa7997ce846 wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
    187829fb0c35 net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
    84d34bd55d6a net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
    ae48bc0b8be8 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
    8a15a5438c58 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
    02c966a8869b pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
    14a26f669206 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
    79f3e44df6e6 net: atlantic: generate software timestamp just before the doorbell
    9121c2ddd177 ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
    62b62a2a6dc5 x86/sgx: Prevent attempts to reclaim poisoned pages
    c1025a54289b tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
    156b6bac7645 tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
    969d61aa168c wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
    f11520c6174c wifi: ath11k: Fix QMI memory reuse logic
    dcf7bb4397de wifi: ath12k: fix a possible dead lock caused by ab->base_lock
    7c4b6d8bd72d wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
    6f79eb2e6816 net: dlink: add synchronization for stats update
    04fa1bef29d5 i2c: npcm: Add clock toggle recovery
    be5f6a65509c i2c: tegra: check msg length in SMBUS block read
    762325441e3a cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
    a620f66675e5 sctp: Do not wake readers in __sctp_write_space()
    a0b91fa813d4 wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
    bf3dcb53ba32 wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
    2c1a2d863b24 emulex/benet: correct command version selection in be_cmd_get_stats()
    24900688ee47 wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
    775fdb4042b2 i2c: designware: Invoke runtime suspend on quick slave re-registration
    7bf4461f1c97 bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
    61fc32485d64 f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
    92dbc2a2e2ec tipc: use kfree_sensitive() for aead cleanup
    088279ff18cd net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
    d2a25ca4134c net: macb: Check return value of dma_set_mask_and_coherent()
    c148af1f398b ACPI: battery: negate current when discharging
    6635356483b8 PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
    6a7c583f56b9 gpiolib: of: Add polarity quirk for s5m8767
    5505ec191f77 ASoC: tegra210_ahub: Add check to of_device_get_match_data()
    cf961a38e450 ACPICA: utilities: Fix overflow check in vsnprintf()
    558ba4afdfe5 power: supply: bq27xxx: Retrieve again when busy
    1fee4324b566 ACPICA: fix acpi parse and parseext cache leaks
    8621fbeb4db9 ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
    0ab90839bf6c ACPI: bus: Bail out if acpi_kobj registration fails
    7d346ca11a6e ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
    30e11a8cff73 ACPICA: Avoid sequence overread in call to strncmp()
    58cf7ba36b94 mmc: Add quirk to disable DDR50 tuning
    74f765e85d4b power: supply: collie: Fix wakeup source leaks on device unbind
    1c24a738971c clocksource: Fix the CPUs' choice in the watchdog per CPU verification
    28ecaebbed55 ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
    755a8006b767 ACPICA: fix acpi operand cache leak in dswstate.c
    3175377e8ee1 iio: adc: ad7606_spi: fix reg write value mask
    f6a5b84f450b iio: imu: inv_icm42600: Fix temperature calculation
    fe684290418e mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
    6a860536306e iio: accel: fxls8962af: Fix temperature scan element sign
    a9f6c1ad6c93 PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
    0b522796a80f PCI: Fix lock symmetry in pci_slot_unlock()
    7f6a2d378425 PCI: Add ACS quirk for Loongson PCIe
    9895f9d9b515 PCI: cadence-ep: Correct PBA offset in .set_msix() callback
    7ca06d696a2f uio_hv_generic: Use correct size for interrupt and monitor pages
    6f824cdd8209 Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
    37166d63e42c smb: client: add NULL check in automount_fullpath
    39ff3774693f cifs: dns resolution is needed only for primary channel
    5713127da855 cifs: update dstaddr whenever channel iface is updated
    9d80e1d37e85 cifs: reset connections for all channels when reconnect requested
    3ee979709e16 remoteproc: core: Release rproc->clean_table after rproc_attach() fails
    9515d74c9d1a remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
    a4df96e2e81c regulator: max14577: Add error check for max14577_read_reg()
    231f6a1de15b mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
    dfa9ef978d9c staging: iio: ad5933: Correct settling cycles encoding per datasheet
    cc3cc41ed670 video: screen_info: Relocate framebuffers behind PCI bridges
    fa2118e9e233 KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
    6bd2569d0b2f net: ch9200: fix uninitialised access during mii_nway_restart
    b1bf167f46dd phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
    83a692a9792a ftrace: Fix UAF when lookup kallsym after ftrace disabled
    6737c4551d2b mtd: rawnand: qcom: Fix read len for onfi param page
    df4918c0bb49 dm-verity: fix a memory leak if some arguments are specified multiple times
    61850a1b2673 dm-mirror: fix a tiny race condition
    fe0ff7d801fb KVM: VMX: Flush shadow VMCS on emergency reboot
    0d7a2ea4351b KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
    7775ab2d53b3 mtd: nand: sunxi: Add randomizer configuration before randomizer enable
    e06a1dadc481 mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
    d3abf0066b5e mm: fix ratelimit_pages update error in dirty_ratio_handler()
    23a707bbcbea RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
    442e80dcf6fe watchdog: fix watchdog may detect false positive of softlockup
    5180561afff8 ipc: fix to protect IPCS lookups using RCU
    f24d42245239 clk: meson-g12a: add missing fclk_div2 to spicc
    ebb8060561d5 parisc: fix building with gcc-15
    2f4040a5855a vgacon: Add check for vc_origin address range in vgacon_scroll()
    7f27859721ae parisc/unaligned: Fix hex output to show 8 hex chars
    3ca78032a388 fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
    e32a40db6796 EDAC/altera: Use correct write width with the INTTEST register
    0909b2b49c45 fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
    061a5dd66608 net: ftgmac100: select FIXED_PHY
    8c5713ce1ced net/sched: fix use-after-free in taprio_dev_notifier
    a8acc7080ad5 NFC: nci: uart: Set tty->disc_data only in success path
    d95d87841d2a hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
    79ef8a6c4ec5 f2fs: fix to do sanity check on sit_bitmap_size
    a87cbcc909cc f2fs: prevent kernel warning due to negative i_nlink from corrupted image
    aaddc6c696bd f2fs: fix to do sanity check on ino and xnid
    0f7100e8d9f0 Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer()
    17474a56acf7 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
    cf6a4c4ac7b6 ext4: only dirty folios when data journaling regular files
    3e8a5163bcd3 ext4: ensure i_size is smaller than maxbytes
    68cea04f1fb2 ext4: factor out ext4_get_maxbytes()
    223091c9897c ext4: fix calculation of credits for extent tree modification
    26e09d18599d ext4: inline: fix len overflow in ext4_prepare_inline_data
    55995f172598 bus: fsl-mc: fix GET/SET_TAILDROP command ids
    1e474b5fab51 bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
    8edfed4439b1 ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
    48f35a32947b cgroup,freezer: fix incomplete freezing when attaching tasks
    96707ff5818f ceph: set superblock s_magic for IMA fsmagic matching
    636391e8c98c can: tcan4x5x: fix power regulator retrieval during probe
    d5d4be47e06c bus: mhi: host: Fix conflict between power_up and SYSERR
    44b9620e82bb bus: mhi: ep: Update read pointer only after buffer is written
    838d63de34a9 ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
    c592d3ceca1a ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
    12cffd5bd1da arm64/mm: Close theoretical race where stale TLB entry remains valid
    a31dce9b561d media: uvcvideo: Fix deferred probing error
    c51c0a0be239 media: uvcvideo: Send control events for partial succeeds
    d314f99b6f19 media: uvcvideo: Return the number of processed controls
    ec26be7d6355 media: imx-jpeg: Cleanup after an allocation error
    20a6db0ef356 media: imx-jpeg: Reset slot data pointers when freed
    683a1db6800e media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
    350d4af0493a media: imx-jpeg: Drop the first error frames
    f6b1b0f8ba0b media: vivid: Change the siize of the composing
    9824e1732a16 media: vidtv: Terminating the subsequent process of initialization failure
    17cb043ea133 media: videobuf2: use sgtable-based scatterlist wrappers
    36318ff3d6bf media: venus: Fix probe error handling
    ae7b143e05b3 media: v4l2-dev: fix error handling in __video_register_device()
    dfb2add0baa7 media: omap3isp: use sgtable-based scatterlist wrappers
    ac3a8e37cb8e media: mediatek: vcodec: Correct vsi_core framebuffer size
    025a943c49c7 media: gspca: Add error handling for stv06xx_read_sensor()
    ec5c328606ba media: davinci: vpif: Fix memory leak in probe error path
    04354c529c82 media: cxusb: no longer judge rbuf when the write fails
    4425db511b9d media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
    1e4b3f166795 media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
    b9e314231ffc media: ccs-pll: Start OP pre-PLL multiplier search from correct value
    ae2fe6606511 media: ccs-pll: Start VT pre-PLL multiplier search from correct value
    eb7a4ea0a18c media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
    ecaf904a55c1 media: nxp: imx8-isi: better handle the m2m usage_count
    585acb354977 media: ov5675: suppress probe deferral errors
    ce4a5a34a2bf media: ov8856: suppress probe deferral errors
    aaf516bb732c wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
    d4356ce8f826 wifi: rtw88: usb: Reduce control message timeout to 500 ms
    2e7c64d7a92c jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
    1eeecd9be9fe wifi: ath12k: fix ring-buffer corruption
    14f5549ad163 fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
    5ee9a07b456d SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
    5060e1a5fef1 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
    e7e943ddd1c6 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
    f08689fe3153 wifi: ath11k: fix ring-buffer corruption
    68b29235778b wifi: ath11k: fix rx completion meta data corruption
    0e4dc150423b wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
    782b3aff6763 net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
    477e4319c371 net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
    278a92b87463 regulator: max20086: Change enable gpio to optional
    420f6942f109 regulator: max20086: Fix MAX200086 chip id
    bf70b3c3df5f powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
    0257c26bbca5 io_uring/kbuf: account ring io_buffer_list memory
    a8b5ef355477 io_uring: account drain memory to cgroup
    abf80985f4d6 ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
    3895a7590e6e ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
    40aefac870c1 gfs2: move msleep to sleepable context
    f5b9144715da crypto: marvell/cesa - Do not chain submitted requests
    0df5e4c7de27 configfs: Do not override creating attribute file failure in populate_attrs()

(From OE-Core rev: 7365af988da35e67e4463a0fd802b93a47d05a77)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Bruce Ashfield
2fb7e02924 linux-yocto/6.6: update to v6.6.94
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    6282921b6825 Linux 6.6.94
    d0e22b854ac6 drm/meson: Use 1000ULL when operating with mode->clock
    65e20c5d99d1 net: usb: aqc111: debug info before sanitation
    0fcfc93576bc regulator: dt-bindings: mt6357: Drop fixed compatible requirement
    1380f68517a7 calipso: unlock rcu before returning -EAFNOSUPPORT
    2cfcbe1554c1 x86/iopl: Cure TIF_IO_BITMAP inconsistencies
    8884c41bae39 xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
    b0e35d563917 usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
    3c7e52cfa86d usb: Flush altsetting 0 endpoints before reinitializating them after reset.
    c40b5e0aad1f usb: cdnsp: Fix issue with detecting USB 3.2 speed
    81dc3db4c3ac usb: cdnsp: Fix issue with detecting command completion event
    6e3af836805e VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
    97f5b57eca7d usb: usbtmc: Fix read_stb function and get_stb ioctl
    b0630d18451a kbuild: Disable -Wdefault-const-init-unsafe
    2c72fe18cc5f posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
    99bc5248a479 Revert "io_uring: ensure deferred completions are posted for multishot"
    029d39ae7ecf io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
    62d5d980b513 io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
    90e11232a62b io_uring: add io_file_can_poll() helper
    4fa7831cf0ac HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
    dd4b8e05f2a2 ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
    37a75cd83dde tools/resolve_btfids: Fix build when cross compiling kernel with clang.
    c9a2e81583d9 block: Fix bvec_set_folio() for very large folios
    9e263d94593b bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
    51c695986fa1 perf: Ensure bpf_perf_link path is properly serialized
    efcd52ba648b nvmet-fcloop: access fcpreq only when holding reqlock
    84ead78a3cf8 fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    0383b25488a5 net_sched: ets: fix a race in ets_qdisc_change()
    057f7a61b04b net_sched: tbf: fix a race in tbf_change()
    2a71924ca4af net_sched: red: fix a race in __red_change()
    46c15c9d0f65 net_sched: prio: fix a race in prio_tune()
    77a72d749701 net/mlx5e: Fix leak of Geneve TLV option object
    a810e484778d net/mlx5: Fix return value when searching for existing flow group
    5953ae44dfe5 net/mlx5: Fix ECVF vports unload on shutdown flow
    7fb33ed59867 net/mlx5: Ensure fw pages are always allocated on same NUMA
    3c40cfcbf18a Bluetooth: MGMT: Fix sparse errors
    c621211b3088 Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
    4bf299105706 Bluetooth: Fix NULL pointer deference on eir_get_service_data
    abb0605ca009 net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
    bab6bca0834c net/mdiobus: Fix potential out-of-bounds read/write access
    7bafe26d7314 macsec: MACsec SCI assignment for ES = 0
    ff55c85a923e net: Fix TOCTOU issue in sk_is_readable()
    c6dad167aade ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
    987c3b8859d6 i40e: retry VFLR handling if there is ongoing VF reset
    dd184939f41e i40e: return false from i40e_reset_vf if reset is in progress
    dc5fc562f1c4 drm/meson: fix more rounding issues with 59.94Hz modes
    81331229971a drm/meson: use vclk_freq instead of pixel_freq in debug print
    e9a5fe781748 drm/meson: fix debug log statement when setting the HDMI clocks
    1f8d03fb90ed drm/meson: use unsigned long long / Hz for frequency types
    d2fc85c90b41 powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
    8635e325b85d powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
    b4e9bab6011b net_sched: sch_sfq: fix a potential crash on gso_skb handling
    d4cbcf274c51 scsi: iscsi: Fix incorrect error path labels for flashnode operations
    581b7c3d8025 pinctrl: qcom: pinctrl-qcm2290: Add missing pins
    de2adfaa9514 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
    6e329771144c wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready
    e8e405757004 wifi: ath11k: don't wait when there is no vdev started
    a0ec9e39cbf7 wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process()
    e57c74d76076 wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
    452f55761513 wifi: ath11k: convert timeouts to secs_to_jiffies()
    d66fd9591ff4 wifi: ath11k: fix soc_dp_stats debugfs file permission
    748da2fc1c3c ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    259119595227 ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
    bdd56875c692 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
    5e64376da212 Bluetooth: MGMT: Remove unused mgmt_pending_find_data
    9f66b6531c2b Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    6edb171845ed Bluetooth: hci_core: fix list_for_each_entry_rcu usage
    21f071261f94 scsi: core: ufs: Fix a hang in the error handler
    44ab21d74f61 serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    9d50955bf215 serial: sh-sci: Move runtime PM enable to sci_probe_single()
    f8f07ea23116 serial: sh-sci: Check if TX data was written to device in .tx_empty()
    6b60251cab3f arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
    9333ced86ca7 arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
    b18568bae6c7 arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
    1e3db0a98cbd arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
    869aafe49c6b arm64: dts: ti: k3-am65-main: Fix sdhci node properties
    c789d2c138ca kasan: use unchecked __memset internally
    91d14d9961b7 Input: synaptics-rmi - fix crash with unsupported versions of F34
    73b8f31337fb pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
    4f091ad0862b do_change_type(): refuse to operate on unmounted/not ours mounts
    3d1ea8e048ac fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    3b699b94727a path_overmount(): avoid false negatives
    3aed255ae4a3 ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
    cc03c899e6d9 ASoC: Intel: avs: Verify content returned by parse_int_array()
    ea739a5492bd ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
    9836cc310ec1 ASoC: codecs: hda: Fix RPM usage count underflow
    0fd2ae401720 scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
    d2507aeea45b seg6: Fix validation of nexthop addresses
    8c9e9cd39877 wireguard: device: enable threaded NAPI
    a21a4937726f net: dsa: b53: allow RGMII for bcm63xx RGMII ports
    02c03865d26a net: dsa: b53: do not enable RGMII delay on bcm63xx
    1c7a023b0cc9 netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    39bab2d3517b netfilter: nf_set_pipapo_avx2: fix initial map fill
    7f6265fce3bd gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
    9c49728b61e1 PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    c07c61ef703a vmxnet3: correctly report gso type for UDP tunnels
    cc89f457d913 net: wwan: t7xx: Fix napi rx poll issue
    85eef1748c02 net: fix udp gso skb_segment after pull from frag_list
    b263088ee8ab net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
    2e02edb66427 net: dsa: tag_brcm: legacy: fix pskb_may_pull length
    18e648163016 ice: fix rebuilding the Tx scheduler tree for large queue counts
    d78e538b65e4 ice: create new Tx scheduler nodes for new queues only
    1d3c5d0dec67 ice: fix Tx scheduler error handling in XDP callback
    55dd7225217c Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
    59d5f3134b5c spi: bcm63xx-hsspi: fix shared reset
    29abb7fc8244 spi: bcm63xx-spi: fix shared reset
    d88839739701 net: lan966x: Make sure to insert the vlan tags also in host mode
    1b2e54f447af net/mlx4_en: Prevent potential integer overflow calculating Hz
    2e3d96ad9549 driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
    acab7ca5ff19 net: tipc: fix refcount warning in tipc_aead_encrypt
    633a80216a44 gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
    6ee70ca1fded net: stmmac: platform: guarantee uniqueness of bus_id
    7a8e87568575 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
    b3b4efa2e623 coresight: prevent deactivate active config while enabling the config
    e69e2cfd8b38 fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
    32b3f3382d6c counter: interrupt-cnt: Protect enable/disable OPs with mutex
    72166de0a1a5 MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
    ec20928ecb1c iio: adc: ad7124: Fix 3dB filter frequency reading
    ca0012a63261 iio: filter: admv8818: Support frequencies >= 2^32
    786cdbd4da1b iio: filter: admv8818: fix range calculation
    61b3b2d62888 iio: filter: admv8818: fix integer overflow
    31fa7dd09a25 iio: filter: admv8818: fix band 4, state 15
    f2829faa3fd5 thunderbolt: Fix a logic error in wake on connect
    a6c7c365734c serial: Fix potential null-ptr-deref in mlb_usio_probe()
    db96a4fd8614 usb: renesas_usbhs: Reorder clock handling and power management in probe
    63df0a22dabc rtc: loongson: Add missing alarm notifications for ACPI RTC events
    56035627865e PCI/DPC: Initialize aer_err_info before using it
    b79e10050d9d dmaengine: ti: Add NULL check in udma_probe()
    127dfb4f1c5a phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
    248f52ad6e82 PCI: apple: Use gpiod_set_value_cansleep in probe flow
    004316d2de7e PCI: cadence: Fix runtime atomic count underflow
    92d879eff459 PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
    2e6d9128fe9b rtc: sh: assign correct interrupts with DT
    848d78e3625f cifs: Fix validation of SMB1 query reparse point response
    c050dc2669c2 nfs: ignore SB_RDONLY when remounting nfs
    c9d9a8995f69 nfs: clear SB_RDONLY before getting superblock
    7101de239633 perf trace: Always print return value for syscalls returning a pid
    494395071e85 perf record: Fix incorrect --user-regs comments
    5ec729bc5b03 perf tests switch-tracking: Fix timestamp comparison
    a20bbd91622f mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
    611efa317b70 mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
    85322ddd449a rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
    3b726bc12624 remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick}
    f1a3c8ceb21d remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
    41581d392c81 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
    53385a400af6 perf intel-pt: Fix PEBS-via-PT data_src
    1737865a12f8 perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
    84126960357d dm-flakey: make corrupting read bios work
    1aef0e1083bb dm-flakey: error all IOs when num_features is absent
    4e9e45746b86 hwmon: (asus-ec-sensors) check sensor index in read_string()
    a0d9d9b5a463 mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
    fde314445332 backlight: pm8941: Add NULL check in wled_configure()
    06f41679d35e dm: free table mempools if not used in __bind
    679d40ca030a dm: don't change md if dm_table_set_restrictions() fails
    e431cc956d67 perf ui browser hists: Set actions->thread before calling do_zoom_thread()
    34e124dc2189 perf build: Warn when libdebuginfod devel files are not available
    655d3c6f8ce7 randstruct: gcc-plugin: Fix attribute addition
    c64a16344c52 randstruct: gcc-plugin: Remove bogus void member
    ab91647acdf4 fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
    8312b1f776f7 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
    b828083b3d7d soc: aspeed: lpc: Fix impossible judgment condition
    fc5a7a966466 ARM: aspeed: Don't select SRAM
    e774ce479f62 arm64: dts: mt6359: Rename RTC node to match binding expectations
    5b91fc48dcbb arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
    0d5dd35f7a73 arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
    867dd8a356a1 arm64: defconfig: mediatek: enable PHY drivers
    978991404adc ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
    9337a54bc620 ARM: dts: qcom: apq8064: add missing clocks to the timer node
    4ca90f54bc65 dt-bindings: vendor-prefixes: Add Liontron name
    4b23c46eb2d8 bus: fsl-mc: fix double-free on mc_dev
    8b8e2966477e nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
    9ab3008bf984 nilfs2: add pointer check for nilfs_direct_propagate()
    681a35b1dcf1 ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
    4f99357dadbf Squashfs: check return result of sb_min_blocksize
    2d4ad56428ed arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
    38caeda97b5d arm64: tegra: Drop remaining serial clock-names and reset-names
    1aaffafdd44b arm64: dts: rockchip: Update eMMC for NanoPi R5 series
    850fd99f22fc arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
    ac25c30462a5 arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
    6145c491d649 arm64: dts: mt6359: Add missing 'compatible' property to regulators node
    018324818ad5 arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
    d6d756d3ea21 arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio
    2eb09d84a00a arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio
    7a276effd506 arm64: dts: imx8mp-beacon: Fix RTC capacitive load
    75b985ef1e64 arm64: dts: imx8mn-beacon: Fix RTC capacitive load
    986c6c52d4aa arm64: dts: imx8mm-beacon: Fix RTC capacitive load
    c8658f43df4f arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
    62f142f9b863 arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
    8af84ebd27fc ARM: dts: at91: at91sam9263: fix NAND chip selects
    e6ef5b282e33 ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
    3c9472989031 arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
    b1253f7c65d1 arm64: dts: qcom: sm8250: Fix CPU7 opp table
    ac0df85cc591 arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
    072b6f8e39ce arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
    618060fc563b arm64: dts: qcom: sdm845-starqltechn: refactor node order
    2bf235c5dddf arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
    8218e21030bd arm64: dts: qcom: sdm845-starqltechn: remove wifi
    c4f2f90ebbad f2fs: fix to correct check conditions in f2fs_cross_rename
    67b800b6d772 f2fs: use d_inode(dentry) cleanup dentry->d_inode
    857b4d2bbeb4 net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
    8ebcd311b486 net: openvswitch: Fix the dead loop of MPLS parse
    946bfdfcb76a calipso: Don't call calipso functions for AF_INET sk.
    5df8db01d6a4 octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
    0b40aeaf83ca net: phy: mscc: Fix memory leak when using one step timestamping
    6486f11ccef4 net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
    4744a5d71d2a net: phy: fix up const issues in to_mdio_device() and to_phy_device()
    363fdf277742 net: phy: clear phydev->devlink when the link is deleted
    6f639c25bfad bpf: Avoid __bpf_prog_ret0_warn when jit fails
    8d5bc5ec6c94 net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
    ac7897c01240 RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
    60790d287c1a net: usb: aqc111: fix error handling of usbnet read calls
    333262e5dd8c RISC-V: KVM: lock the correct mp_state during reset
    68b69b50dfba netfilter: nft_tunnel: fix geneve_opt dump
    4c6fa65ab2ae bpf, sockmap: Avoid using sk_socket after free when sending
    9c73afd7f1c9 Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
    801677040bb2 vfio/type1: Fix error unwind in migration dirty bitmap allocation
    cf008d9a08a7 netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
    1e8b2048f9e9 wifi: mt76: mt7996: fix RX buffer size of MCU event
    800f7e73a679 wifi: mt76: mt7996: set EHT max ampdu length capability
    e9f9cef1877a wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
    6c81f1c7812c kernfs: Relax constraint in draining guard
    713b9bfa939d scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
    5482ef9875ea wifi: ath9k_htc: Abort software beacon handling if disabled
    b5ef128926cd hisi_acc_vfio_pci: bugfix live migration function without VF device driver
    5be5cd86d1e9 hisi_acc_vfio_pci: add eq and aeq interruption restore
    f0423873e7ae hisi_acc_vfio_pci: fix XQE dma address error
    99dbad1b01d3 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
    4b1cf1f040a0 iommu: remove duplicate selection of DMAR_TABLE
    74e18211c2c8 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
    f61b8fecec96 s390/bpf: Store backchain even for leaf progs
    fbd4d6293b53 clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
    6d8f39875a10 bpf: Fix WARN() in get_bpf_raw_tp_regs
    eb435bc4c74a pinctrl: at91: Fix possible out-of-boundary access
    b44672c17ca0 libbpf: Use proper errno value in nlattr
    07680e38b78d ktls, sockmap: Fix missing uncharge operation
    94ade4147a09 tracing: Fix error handling in event_trigger_parse()
    ae015964d7ff tracing: Rename event_trigger_alloc() to trigger_data_alloc()
    3f7724fcc193 efi/libstub: Describe missing 'out' parameter in efi_load_initrd
    3c1adc2f8c73 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
    012fd5987309 clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
    7c95e4a31fc4 clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
    f2692b21774d clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
    a1383eb9d6c4 clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
    ac7ab38c271b tracing: Move histogram trigger variables from stack to per CPU structure
    c60f57a49619 bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
    7c4c84cdcc19 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
    5e4519d8cdd8 netfilter: nft_quota: match correctly when the quota just depleted
    585c9ed565c5 netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
    50bbbd25597d bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
    1066c5a7d083 libbpf: Use proper errno value in linker
    1c005c53cf8e f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
    43cec280496a f2fs: clean up w/ fscrypt_is_bounce_page()
    4b88a4dfbea0 bonding: assign random address if device address is same as bond
    8fa998b842f2 iommu: Protect against overflow in iommu_pgsize()
    cb4b9369463e Use thread-safe function pointer in libbpf_print
    79669facfe92 libbpf: Remove sample_period init in perf_buffer
    624b4cf6c49c scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
    5edd80d4b9c8 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
    be049199dec9 wifi: ath12k: fix node corruption in ar->arvifs list
    c9c9107ffa0e wifi: ath12k: Add MSDU length validation for TKIP MIC error
    f76f399004c6 wifi: rtw88: do not ignore hardware read error during DPK
    7b63e52a8bab wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
    446fcc230d9f wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
    6aa81fc0d67a xfrm: Use xdo.dev instead of xdo.real_dev
    18eb7b5f1e51 libbpf: Fix buffer overflow in bpf_object__init_prog
    0e9c13ed852e net: ncsi: Fix GCPS 64-bit member variables
    a39cc43efc1b f2fs: fix to do sanity check on sbi->total_valid_block_count
    a93db61dfa92 wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
    db1d15a26f21 bpf, sockmap: Fix panic when calling skb_linearize
    34837ae8cded bpf, sockmap: fix duplicated data transmission
    2e36a81d388e bpf: fix ktls panic with sockmap
    7c969106a8ba selftests/bpf: Fix bpf_nf selftest failure
    b524baecb01b IB/cm: use rwlock for MAD agent lock
    f50ba7e7b607 wifi: ath11k: fix node corruption in ar->arvifs list
    3d6e3849b691 xen/x86: fix initial memory balloon target
    7810600b06cb drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
    a2502fd0fa9f drm/mediatek: Fix kobject put for component sub-drivers
    8126855798b0 drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
    77511c2d2d1c perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
    ee96502062ec scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
    e500dff1e4e5 arm64/fpsimd: Do not discard modified SVE state
    99d4011a0a32 firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
    3215e000eff6 drm/tegra: rgb: Fix the unbound reference count
    01f73e104288 drm/vkms: Adjust vkms_state->active_planes allocation type
    4715d2959d3b drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
    5e99bcff7cb5 selftests/seccomp: fix syscall_restart test for arm compat
    cf08a1cba004 arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
    0052f10c25e4 firmware: psci: Fix refcount leak in psci_dt_init
    569829f8fde0 m68k: mac: Fix macintosh_config for Mac II
    428d865fec68 watchdog: exar: Shorten identity name to fit correctly
    701340a25b1a fs/ntfs3: handle hdr_first_de() return value
    94be75619e8c drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
    2f6e645ce64e arm64/fpsimd: Fix merging of FPSIMD state during signal return
    43be952e8854 arm64/fpsimd: Discard stale CPU state when handling SME traps
    8bf6491dab8c arm64/fpsimd: Avoid RES0 bits in the SME trap handler
    0d271c53009a media: rkvdec: Fix frame size enumeration
    cdf7e1ff99ab drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
    079cc1fa46e0 drm/vc4: tests: Use return instead of assert
    83cc36371af8 drm/vmwgfx: Add seqno waiter for sync_files
    8b263e8ab2d3 ASoC: apple: mca: Constrain channels according to TDM mask
    42f7dd4bf5e0 spi: sh-msiof: Fix maximum DMA transfer size
    5174ac310ae7 ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
    fca08cfadd45 PM: sleep: Print PM debug messages during hibernation
    aa7b90057bc3 x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
    2b5459380613 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
    5b71469d77fd ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
    d46af758f63d power: reset: at91-reset: Optimize at91_reset()
    c6c142267952 spi: tegra210-quad: modify chip select (CS) deactivation
    41de2c9e30b7 spi: tegra210-quad: remove redundant error handling code
    04034d43e9b6 spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
    3ff2422442de EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
    3f5d06590009 EDAC/skx_common: Fix general protection fault
    4191b7669e00 ASoC: tas2764: Enable main IRQs
    8b94e19adae3 ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
    f6941e72d352 kunit: Fix wrong parameter to kunit_deactivate_static_stub()
    5810e9d402c4 crypto: sun8i-ce - move fallback ahash_request to the end of the struct
    04a39a3c7d37 crypto: xts - Only add ecb if it is not already there
    ba2af6855c4d crypto: lrw - Only add ecb if it is not already there
    ec91ab135cf0 rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
    402fd6a6fe57 btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
    7cfb9086b6d3 btrfs: scrub: update device stats when an error is detected
    3cf4d9cae435 crypto: marvell/cesa - Avoid empty transfer descriptor
    5e9666ac8b94 crypto: marvell/cesa - Handle zero-length skcipher requests
    62af7780054f x86/cpu: Sanitize CPUID(0x80000000) output
    ce167ff4cd17 x86/microcode/AMD: Do not return error when microcode update is not necessary
    4fb22310892c powerpc/crash: Fix non-smp kexec preparation
    fdc39b3ad8a7 powerpc: do not build ppc_save_regs.o always
    cb1e26f53e59 crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
    c62b79c1c513 crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
    6ce08b3ba52c perf/core: Fix broken throttling when max_samples_per_tick=1
    eec0dd17db02 gfs2: gfs2_create_inode error handling fix
    76c7b1407a7a crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
    5dea6398f2dd x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
    cc5cd8a1719e tools/x86/kcpuid: Fix error handling
    e9019e2214fa Revert "drm/amd/display: more liberal vmin/vmax update for freesync"
    9f837b359d1c dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property
    68c504243737 dt-bindings: usb: cypress,hx3: Add support for all variants
    5a057f261539 thunderbolt: Do not double dequeue a configuration request
    259e4d6e10cd usb: usbtmc: Fix timeout value in get_stb
    3258d7ff8ebf serial: jsm: fix NPE during jsm_uart_port_init
    e2e38c5211b1 Bluetooth: hci_qca: move the SoC type check to the right place
    b63f23fb0ad2 usb: typec: ucsi: fix Clang -Wsign-conversion warning
    5ec1200da929 USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
    ff835ab115f0 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
    73c50fa3ff02 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
    32a5f643ce54 rtc: Fix offset calculation for .start_secs < 0
    b836d94be852 rtc: Make rtc_time64_to_tm() support dates before 1970
    dbd568a30597 acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
    39ed85ae485d pinctrl: armada-37xx: set GPIO output value before setting direction
    8f0f45a31215 pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
    4afa9d57ed5e tracing: Fix compilation warning on arm32

(From OE-Core rev: e92b90ade0b0c3bbb4e2a9d29c7b85e32a161279)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Bruce Ashfield
25cc9eae17 linux-yocto/6.6: update to v6.6.93
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c2603c511feb4 Linux 6.6.93
    c78abb646ff82 ksmbd: use list_first_entry_or_null for opinfo_get_list()
    106451492d74c net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
    513b27dbd126b platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
    871e44494f5d5 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    af7243148f2eb NFS: Avoid flushing data while holding directory locks in nfs_rename()
    f83097445b7ec nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    e99de95033051 spi: spi-sun4i: fix early activation
    b8435b76971dc phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
    eae121397e278 drm/amd/display: fix link_set_dpms_off multi-display MST corner case
    4728d56dc56f0 um: let 'make clean' properly clean underlying SUBARCH as well
    af288d8e14058 platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    764f8cd8aadcd nfs: don't share pNFS DS connections between net namespaces
    98f7c351a11a1 HID: quirks: Add ADATA XPG alpha wireless mouse support
    46a6ce4812555 dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
    cdb61a705f5f3 coredump: hand a pidfd to the usermode coredump helper
    1846a7b92b863 coredump: fix error handling for replace_fd()
    0ec1e98bf5366 perf/arm-cmn: Initialise cmn->cpu earlier
    10778e2f49a2c perf/arm-cmn: Fix REQ2/SNP2 mixup
    295f7c579b07b net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
    ee1209b9f57ba arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
    cf27046208bd8 arm64: dts: qcom: sm8550: Add missing properties for cryptobam
    feadf31790331 arm64: dts: qcom: sm8450: Add missing properties for cryptobam
    5dd982ff67d1e arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    abf3ffaeef603 arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
    ea61eda1f4b45 af_unix: Fix uninit-value in __unix_walk_scc()
    ed14f8ae9bcf7 af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
    c0c8d419dade9 af_unix: Add dead flag to struct scm_fp_list.
    a288920ff9dab af_unix: Don't access successor in unix_del_edges() during GC.
    3600729b7fc05 af_unix: Try not to hold unix_gc_lock during accept().
    7b1ffbd3b22e7 af_unix: Remove lock dance in unix_peek_fds().
    de7921631ff32 af_unix: Replace garbage collection algorithm.
    2c2d0c662d842 af_unix: Detect dead SCC.
    324005012f65e af_unix: Assign a unique index to SCC.
    d23802221f675 af_unix: Avoid Tarjan's algorithm if unnecessary.
    cdaa3499a8519 af_unix: Skip GC if no cycle exists.
    e0e23fc499920 af_unix: Save O(n) setup of Tarjan's algo.
    27a07364cefdf af_unix: Fix up unix_edge.successor for embryo socket.
    36f924e4bf4e7 af_unix: Save listener for embryo socket.
    3ee9b24bd6f70 af_unix: Detect Strongly Connected Components.
    856aacbe2c520 af_unix: Iterate all vertices by DFS.
    494accabb56e2 af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
    d2d9f382e2db6 af_unix: Link struct unix_edge when queuing skb.
    4fc7df1c6da14 af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
    9e98ba0c73529 af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
    8eb55b667a0e2 af_unix: Remove CONFIG_UNIX_SCM.
    c0d56c028d90f af_unix: Remove io_uring code for GC.
    36f1f6ac53889 af_unix: Replace BUG_ON() with WARN_ON_ONCE().
    acc97866c1eae af_unix: Try to run GC async.
    328840c93bd6a af_unix: Run GC on only one CPU.
    4be073d59068e af_unix: Return struct unix_sock from unix_get_socket().
    c7b1bd52a031a btrfs: check folio mapping after unlock in relocate_one_folio()
    63815bef47ec2 hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
    5a9c0d5cbd02d can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
    f968f28cd14bb drm/gem: Internally test import_attach for imported objects
    10aecdc1c30c7 x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
    367b8b91de2a0 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    1f9170737480d pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
    4a5e6e798ec77 watchdog: aspeed: fix 64-bit division
    a9e4ee7f12886 serial: sh-sci: Save and restore more registers
    517f928cc0c13 pds_core: Prevent possible adminq overflow/stuck condition
    77192e9cfe1b3 highmem: add folio_test_partial_kmap()
    bc133e43cb565 x86/boot: Compile boot code with -std=gnu11 too
    5cdce62dd929a spi: spi-fsl-dspi: Reset SR flags before sending a new message
    7cf42e5f406a5 spi: spi-fsl-dspi: Halt the module after a new message transfer
    9df00bd4769a0 spi: spi-fsl-dspi: restrict register range for regmap access
    0e7efc9acbb56 ksmbd: fix stream write failure
    fa68d5c14a70d Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    f391043332e38 mm/page_alloc.c: avoid infinite retries caused by cpuset race
    363fd868d7a71 memcg: always call cond_resched() after fn()
    f33001a7c1e8f Input: xpad - add more controllers
    ed7d24b0c375f Revert "drm/amd: Keep display off while going into S4"
    bee465c0c464b smb: client: Reset all search buffer pointers when releasing buffer
    17d096c485b89 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    73cadde98f67f smb: client: Fix use-after-free in cifs_fill_dirent
    7227fc0692d53 drm/edid: fixed the bug that hdr metadata was not reset
    7093887a11fe4 thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
    f86465626917d platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
    dde5400dad7e7 can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
    4cfe30f681a3d llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    6764329675f94 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
    74d90875f3d43 ALSA: pcm: Fix race of buffer access at PCM OSS layer
    b5bada85c181f ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
    1beb8c26b1fb1 ASoc: SOF: topology: connect DAI to a single DAI link
    e8be784d30b44 ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
    1f912f8484e9c can: bcm: add missing rcu read protection for procfs content
    76c84c3728178 can: bcm: add locking for bcm_op runtime updates
    e80f4f9c64b0f can: slcan: allow reception of short error messages
    584a729615fa9 padata: do not leak refcount in reorder_work
    134daaba93193 crypto: algif_hash - fix double free in hash_accept
    0c605de7edd68 clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
    35016086ae593 octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
    cc797adde644d octeontx2-af: Set LMT_ENA bit for APR table entries
    b19fc1d0be3c3 net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
    a3d24e4a835cb octeontx2-pf: Add AF_XDP non-zero copy support
    93c276942e75d sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    c844ace5b88d0 io_uring: fix overflow resched cqe reordering
    dbcd0909a1e2c net: lan743x: Restore SGMII CTRL register on resume
    0b4cde7284869 net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    52b2e5579266f pinctrl: qcom: switch to devm_register_sys_off_handler()
    78b70388ca0ec pinctrl: qcom/msm: Convert to platform remove callback returning void
    df941e11772b3 ice: Fix LACP bonds without SRIOV environment
    c8a1a805e6d27 ice: fix vf->num_mac count with port representors
    fa942824b9f4a bridge: netfilter: Fix forwarding of fragmented packets
    feb6bde1a3241 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
    c331a616a0b10 Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    2b82d8e483bf0 dmaengine: fsl-edma: Fix return code for unhandled interrupts
    55f3c97fcba84 dmaengine: idxd: Fix ->poll() return value
    dcdc1aca6880d xfrm: Sanitize marks before insert
    a1fad2da94f00 clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
    c2b52d947c3dd remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    5ff1a234fa4ee kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
    1b388afe88163 dmaengine: idxd: Fix allowing write() from different address spaces
    05298c30b7d9f dmaengine: idxd: add wq driver name support for accel-config user tool
    b58a295d10065 espintcp: remove encap socket caching to avoid reference leak
    3cf3d4f11254e soundwire: bus: Fix race on the creation of the IRQ domain
    d8ece4ced3b05 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
    e6d703b693b4c xenbus: Allow PVH dom0 a non-local xenstore
    85d12487d90ab wifi: iwlwifi: add support for Killer on MTL
    4e3401aa6e447 tools: ynl-gen: validate 0 len strings from kernel
    50d0de59f66cb btrfs: avoid NULL pointer dereference if no valid csum tree
    7a97f961a568a btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
    225cc549ed23f cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
    fc460c12cd1e9 cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
    b72952c8c3668 io_uring/fdinfo: annotate racy sq/cq head/tail reads
    3a982ada411b8 nvmet-tcp: don't restore null sk_state_change
    a7a2315d8d0dc nvme-pci: add quirks for WDC Blue SN550 15b7:5009
    0a3f5efd1c545 nvme-pci: add quirks for device 126f:1001
    1c0d7792cfc71 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    dbb47cbdbe2ad ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    4c017ff3d73dd ASoC: cs42l43: Disable headphone clamps during type detection
    0ab50f622f202 pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    534794c719231 book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
    442a247361f8b ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    fe4a7145f048c drm: Add valid clones check
    1c58b332bc435 drm/panel-edp: Add Starry 116KHD024006
    e585f4f44a102 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    5d4951bad74bf drm: bridge: adv7511: fill stream capabilities
    a7e7cf538939d wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
    2dbcaddcf8eab wifi: ath9k: return by of_get_mac_address
    a21971b4be60f accel/qaic: Mask out SR-IOV PCI resources
    fbdf410d3bd2e wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
    b658e144a0922 regulator: ad5398: Add device tree support
    df76df11fd8be spi: zynqmp-gqspi: Always acknowledge interrupts
    ccf4a818d8c31 wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
    5e479af4999b0 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
    ee71c34d4f415 wifi: rtl8xxxu: retry firmware download on error
    419988f4d0efb perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
    0cb6a1292aaef perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    9610a67963506 firmware: arm_scmi: Relax duplicate name constraint across protocol ids
    38d906f1c54b9 bpftool: Fix readlink usage in get_fd_type
    0e8eb91a4950f drm/ast: Find VBIOS mode from regular display size
    e190ed2c12e77 ASoC: rt722-sdca: Add some missing readable registers
    48c78cf634dba ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
    123ac614e5b34 arm64: zynqmp: add clock-output-names property in clock nodes
    23b0b86ad1db2 HID: usbkbd: Fix the bit shift number for LED_KANA
    c317b0694a6eb wifi: ath12k: Avoid napi_sync() before napi_enable()
    32bcf54138acf scsi: st: Restore some drive settings after reset
    1960bb56a9c83 scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
    3dfeee957aaf3 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    c34ab75adde53 net/mana: fix warning in the writer of client oob
    1d10624a42437 ice: count combined queues using Rx/Tx count
    948664b92e571 perf: Avoid the read if the count is already updated
    f47d605c5e2a6 rcu: fix header guard for rcu_all_qs()
    9abec90c85b22 rcu: handle unstable rdp in rcu_read_unlock_strict()
    4a36d93a01758 rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    cae56998162cc ice: treat dyn_allowed only as suggestion
    9ed3c1b11d7ef bridge: mdb: Allow replace of a host-joined group
    961ee132104b0 r8169: don't scan PHY addresses > 0
    2cb57a887a435 ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
    13cba3f837903 vxlan: Annotate FDB data races
    090c0ba179eaf net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
    f312bd5cf2067 media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
    6fed5e23d2a92 f2fs: introduce f2fs_base_attr for global sysfs entries
    9af429febfedf hwmon: (xgene-hwmon) use appropriate type for the latency value
    70e7df6f69073 clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    ba02bb3a01328 wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
    0b660a7f296b5 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    23fe8aa8cc1a8 ext4: remove writable userspace mappings before truncating page cache
    73e7c65b21274 ext4: don't write back data before punch hole in nojournal mode
    3648ddabcdc25 leds: trigger: netdev: Configure LED blink interval for HW offload
    7ef54a11c199d pstore: Change kmsg_bytes storage size to u32
    09c3a82664d8f r8152: add vendor/device ID pair for Dell Alienware AW1022z
    cc1d408e7c9e2 ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    22ee8dabec1a2 arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
    fa5d374f6bacb powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
    6758d09763f62 net: fec: Refactor MAC reset to function
    2caf52c072059 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    bb1f9d63127e8 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    9ef9ecabc6b55 drm/v3d: Add clock handling
    76016797e7f96 net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
    dce57841d93de net/mlx5e: reduce rep rxq depth to 256 for ECPF
    9411c965e4e6a net/mlx5e: set the tx_queue_len for pfifo_fast
    c31e839649547 net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    353cd6804ea85 scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
    991970293ff8a drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
    26b6548dc7417 drm/amdgpu: enlarge the VBIOS binary size limit
    de67e80ab48f1 drm/amd/display: Increase block_sequence array size
    16c26a6404454 drm/amd/display: Initial psr_version with correct setting
    c59c96b850ea6 drm/amd/display: Update CR AUX RD interval interpretation
    af2d36316a193 drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    6881a3a58852f drm/amd/display: Don't try AUX transactions on disconnected link
    ab83ed96f7587 drm/amdgpu: Set snoop bit for SDMA for MI series
    929cda8e4b75d soundwire: amd: change the soundwire wake enable/disable sequence
    6a7b7e98fec0a phy: core: don't require set_mode() callback for phy_get_mode() to work
    3bf3eae909914 serial: sh-sci: Update the suspend/resume support
    e9bed533ec803 sched: Reduce the default slice to avoid tasks getting an extra tick
    5024d8e58a080 x86/traps: Cleanup and robustify decode_bug()
    cc50c7c1a9898 clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
    fba6e5d44fb8d clk: qcom: ipq5018: allow it to be bulid on arm32
    d655dbd82b555 net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    f8a9f45f75ab3 media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    0b9d2468c3d88 media: i2c: imx219: Correct the minimum vblanking value
    868c3d8cfcff6 kunit: tool: Use qboot on QEMU x86_64
    3d6d13540f776 smack: Revert "smackfs: Added check catlen"
    e30f31434e9c3 smack: recognize ipv4 CIPSO w/o categories
    de4332d7a5f6f pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
    b3d2a8809ef07 ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    35160eda61e74 ASoC: tas2764: Power up/down amp on mute ops
    c1045e770256c ASoC: tas2764: Mark SW_RESET as volatile
    7ac84ee5eec85 ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
    9dcce3f40d54d ASoC: ops: Enforce platform maximum on initial value
    3da8088afd13a firmware: arm_ffa: Reject higher major version as incompatible
    3ec539f1e9195 net/mlx5: Apply rate-limiting to high temperature warning
    69f453ccb9e47 net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
    a9b2bb8a4f25b media: test-drivers: vivid: don't call schedule in loop
    ddddd806ba7de vxlan: Join / leave MC group after remote changes
    d97c38275d12c ACPI: HED: Always initialize before evged
    0d398ed850df9 PCI: Fix old_size lower bound in calculate_iosize() too
    d8afc25580735 eth: mlx4: don't try to complete XDP frames in netpoll
    242272c953e3b bpf: don't do clean_live_states when state->loop_entry->branches > 0
    00e59d1495fba can: c_can: Use of_property_present() to test existence of DT property
    ef7ee9b815345 pmdomain: imx: gpcv2: use proper helper for property detection
    7c5e73608302a RDMA/core: Fix best page size finding when it can cross SG entries
    c504c11b94d6e serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
    df8970a270add drm/amd/display: Add support for disconnected eDP streams
    671fea645a71b i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
    398351dcdb631 EDAC/ie31200: work around false positive build warning
    c81c2ee1c3b05 net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
    35434d1c93c73 wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
    5ce1f780a3bce wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    1b1daafd2e974 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    a95813193ab78 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    f38a1b35c8f4e scsi: mpt3sas: Send a diag reset if target reset fails
    06abee685cc97 clocksource: mips-gic-timer: Enable counter when CPUs start
    2e1b3650f5691 MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    ba41e4e627db5 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
    2ed497f369b2e MIPS: Use arch specific syscall name match function
    b2ea189a958a6 crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
    3a0c8429ab1e4 crypto: ahash - Set default reqsize from ahash_alg
    b1d1b09698e99 x86/kaslr: Reduce KASLR entropy on most x86 systems
    b0556ba85a0f3 net/mlx5: Change POOL_NEXT_SIZE define value and make it global
    52aa28f7b1708 dm: fix unconditional IO throttle caused by REQ_PREFLUSH
    ecd205a5241df libbpf: Fix out-of-bound read
    e17a6ba07929b media: tc358746: improve calculation of the D-PHY timing registers
    ca9f3ab612c62 media: adv7180: Disable test-pattern control on adv7180
    3cd2aa93674ee cpuidle: menu: Avoid discarding useful information
    48fd80f7d7b48 vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
    f5121d5ba7ce4 vhost-scsi: Return queue full for page alloc failures during copy
    de4469a90075b x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
    01768d1564650 ASoC: mediatek: mt8188: Add reference for dmic clocks
    6dadc66f6cf3e ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
    ec6f764ab7009 drm/amd/display: handle max_downscale_src_width fail check
    7472e0da47716 x86/build: Fix broken copy command in genimage.sh when making isoimage
    f32344bf957b4 Octeontx2-af: RPM: Register driver with PCI subsys IDs
    3314310b3f3e6 soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    f4e35b2c5f5cc wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
    fed3038a80bbc bonding: report duplicate MAC address in all situations
    7819a7dcf0412 net: xgene-v2: remove incorrect ACPI_PTR annotation
    7b8fe48cc86b6 net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
    ff01e0d0a61e4 leds: pwm-multicolor: Add check for fwnode_property_read_u32
    2059e6ea11c0d drm/amdkfd: KFD release_work possible circular locking
    0759d154654a8 selftests/net: have `gro.sh -t` return a correct exit code
    b3c8449484848 net/mlx5: Avoid report two health errors on same syndrome
    e2de76c34a8a9 firmware: arm_ffa: Set dma_mask for ffa devices
    a1a5e783d7cab PCI: brcmstb: Add a softdep to MIP MSI-X driver
    1f27e708e36ea PCI: brcmstb: Expand inbound window size up to 64GB
    f6dfaf5905ad6 wifi: ath12k: Report proper tx completion status to mac80211
    c7c729d7a85a9 soc: apple: rtkit: Implement OSLog buffers properly
    78b6b2fe17a2e soc: apple: rtkit: Use high prio work queue
    1ae981c91dc26 perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
    372ed2171031d fpga: altera-cvp: Increase credit timeout
    7b851d6a02da0 drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    d8e57904dc269 ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    a9dd5d748c87d hwmon: (gpio-fan) Add missing mutex locks
    7adb96687ce88 x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
    ca16d144d1f0a clk: imx8mp: inform CCF of maximum frequency of clocks
    032f3bf6471cd media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
    faa24692f7041 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    9459abd770107 drm/rockchip: vop2: Add uv swap for cluster window
    9778a91827272 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    2be4a7d53261b ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
    30ae895966221 perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
    2a9a7d2f19cca net: pktgen: fix mpls maximum labels list parsing
    cf81dae86bf6b net: ethernet: ti: cpsw_new: populate netdev of_node
    2cbe6d551b4a9 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    5c9eca180a423 media: cx231xx: set device_caps for 417
    a7b8f0addf84f drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
    3af9db78423c5 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    fef1e1487dea8 remoteproc: qcom_wcnss: Handle platforms with only single power domain
    c5b23df98a925 net: phylink: use pl->link_interface in phylink_expects_phy()
    b27be76f35010 drm/gem: Test for imported GEM buffers with helper
    121f0335d91e4 orangefs: Do not truncate file size
    3986ef4a9b6a0 dm cache: prevent BUG_ON by blocking retries on failed device resumes
    d5f8c8ec1e783 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
    74eea50b7afa1 ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    da74e11cedd1e ieee802154: ca8210: Use proper setters and getters for bitwise types
    c0acbeac2b287 rtc: ds1307: stop disabling alarms on probe
    fb69189023279 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    8c1a16d612ef7 ALSA: seq: Improve data consistency at polling
    7b1bb4d40dab8 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    d0e3e19564f03 arm64: tegra: Resize aperture for the IGX PCIe C5 slot
    988770bf312cf arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    ab13c8a5f777b drm/amdkfd: Set per-process flags only once cik/vi
    0acdc4d6e679b crypto: lzo - Fix compression buffer overrun
    ab4545a2540b7 watchdog: aspeed: Update bootstatus handling
    ac64f0e893ff3 cpufreq: tegra186: Share policy per cluster
    3123b3d445d16 iommu/amd/pgtbl_v2: Improve error handling
    8c305588bab71 ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    5b518c452ff58 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
    769d1bccd1cac gfs2: Check for empty queue in run_queue
    2e37d331c00c0 drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
    1da3dc73724bb drm/amd/display: calculate the remain segments for all pipes
    4c2a348875646 drm/amd/display: remove minimum Dispclk and apply oem panel timing.
    8ebf2709fe4dc ipv6: save dontfrag in cork
    2b790fe67ed48 wifi: iwlwifi: fix debug actions order
    386a1a0d558d7 printk: Check CON_SUSPEND when unblanking a console
    8a7f2e84f85ad hwmon: (dell-smm) Increment the number of fans
    def5f5bc83ee7 usb: xhci: Don't change the status of stalled TDs on failed Stop EP
    903c4a0c2aff4 mmc: sdhci: Disable SD card clock before changing parameters
    5ae75245939c6 mmc: dw_mmc: add exynos7870 DW MMC support
    110f701e60f98 arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    89947eea8ff91 netfilter: conntrack: Bound nf_conntrack sysctl writes
    da36c3ad7c177 timer_list: Don't use %pK through printk()
    6df3855868eb8 posix-timers: Add cond_resched() to posix_timer_add() search loop
    1bef1811651bc RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    ba841627308a3 ext4: do not convert the unwritten extents if data writeback fails
    d7f3c874ea707 ext4: reject the 'data_err=abort' option in nojournal mode
    baf667f23f609 ASoC: sun4i-codec: support hp-det-gpios property
    f8d946034765a drm/amdgpu: Update SRIOV video codec caps
    2e290e9cf6a17 mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
    aa97ea576a3f2 pinctrl-tegra: Restore SFSEL bit when freeing pins
    0fb6c439d265f xen: Add support for XenServer 6.1 platform device
    3ecfb92c019f2 net/smc: use the correct ndev to find pnetid by pnetid table
    ba8354a613a57 dm: restrict dm device size to 2^63-512 bytes
    44a82d2495e36 crypto: octeontx2 - suppress auth failure screaming due to negative tests
    3edb08b6c21ef kbuild: fix argument parsing in scripts/config
    bc8023ef3b114 bpf: Allow pre-ordering for bpf cgroup progs
    aed5bd3a84e87 ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    bf9cfc7fbe742 thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
    4beb1e55f6b08 objtool: Fix error handling inconsistencies in check()
    72d9ccdcfce24 rtc: rv3032: fix EERD location
    a7b7bc510e9ea tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    ed88717950ba9 jbd2: do not try to recover wiped journal
    5741b9d7bb873 bpf: Return prog btf_id without capable check
    743bb753255d3 vfio/pci: Handle INTx IRQ_NOTCONNECTED
    9f51fa1971239 scsi: st: ERASE does not change tape location
    01195aa1d694b scsi: st: Tighten the page format heuristics with MODE SELECT
    3011cdc5cb46c hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
    4eda8a85d4d01 ext4: reorder capability check last
    57a2882cd4f35 um: Update min_low_pfn to match changes in uml_reserved
    7638182277867 um: Store full CSGSFS and SS register from mcontext
    61225b3395c21 dlm: make tcp still work in multi-link env
    0541822045ae0 i3c: master: svc: Fix missing STOP for master request
    398c541ed0495 drm/amd/display: Guard against setting dispclk low for dcn31x
    3192d59fb7b78 btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
    a7f1c5fb7dd90 btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
    4dc7dcb919f36 btrfs: fix non-empty delayed iputs list on unmount due to async workers
    de635f9bba32e btrfs: run btrfs_error_commit_super() early
    1a012fd4eb9d0 btrfs: avoid linker error in btrfs_find_create_tree_block()
    4e74f91a6f70a btrfs: make btrfs_discard_workfn() block_group ref explicit
    a4666a812792d i2c: pxa: fix call balance of i2c->clk handling routines
    4fc8e3fb8efa8 i2c: qup: Vote for interconnect bandwidth to DRAM
    bffd5f2815c52 x86/mm: Check return value from memblock_phys_alloc_range()
    7124a9b6824e1 x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
    1752ceaa72d37 wifi: mt76: mt7996: revise TXS size
    d9776ce1733c7 wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    17e3ab067dfb6 mmc: host: Wait for Vdd to settle on card power off
    ea3d95e05e97e libnvdimm/labels: Fix divide error in nd_label_data_init()
    f29eb4c63bf4e ext4: on a remount, only log the ro or r/w state when it has changed
    44acbc14ea28d PCI: vmd: Disable MSI remapping bypass under Xen
    aa59ccacf8f33 pNFS/flexfiles: Report ENETDOWN as a connection error
    ec59dfbc1ba2f tools/build: Don't pass test log files to linker
    e4510552c297c PCI: dwc: ep: Ensure proper iteration over outbound map windows
    a74286d17e751 objtool: Properly disable uaccess validation
    454a770aea9fd lockdep: Fix wait context check on softirq for PREEMPT_RT
    0c2aa72f4f352 dql: Fix dql->limit value when reset.
    3854f4e98ef22 thermal/drivers/qoriq: Power down TMU on system suspend
    4a120221661fc spi-rockchip: Fix register out of bounds access
    4a8ebc45f2021 SUNRPC: rpcbind should never reset the port to the value '0'
    3ef02a05c86b4 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    6b8beb8104d73 NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    ee68e068cf92f cifs: Fix establishing NetBIOS session for SMB2+ connection
    89bcd83f67d22 cifs: add validation check for the fields in smb_aces
    88bf6295f065a fbdev: core: tileblit: Implement missing margin clearing for tileblit
    1714afc14dbe6 fbcon: Use correct erase colour for clearing in fbcon
    7f370b7e6fa03 fbdev: fsl-diu-fb: add missing device_remove_file()
    bbf3bb6ddea47 riscv: Allow NOMMU kernels to access all of RAM
    09096ead92f39 mailbox: use error ret code of of_parse_phandle_with_args()
    5641f6b3a4cd5 mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
    7d5b227875fb7 ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
    c1ab9f008ed40 tracing: Mark binary printing functions with __printf() attribute
    50702e7b47ed7 arm64: Add support for HIP09 Spectre-BHB mitigation
    e0b05cd9ece6e SUNRPC: Don't allow waiting for exiting tasks
    c72826efbb5eb NFS: Don't allow waiting for exiting tasks
    a81dd69f859b6 NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
    2371143e41735 fuse: Return EPERM rather than ENOSYS from link()
    209a4da04a27d smb: client: Store original IO parameters and prevent zero IO sizes
    5194597b9cde7 cifs: Fix negotiate retry functionality
    d50f7ce2fc32a cifs: Fix querying and creating MF symlinks over SMB1
    18066188eb90c cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
    f08641cd2152d s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
    a6f24a41ef527 kconfig: merge_config: use an empty file as initfile
    adbb39eca39d1 samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    38aa3cf1545f3 bpf: fix possible endless loop in BPF map iteration
    f5f169cd90769 selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
    f7292fbb41840 drm/amdgpu: Allow P2P access through XGMI
    722a6972defd8 ima: process_measurement() needlessly takes inode_lock() on MAY_READ
    91ba964a752bb net: enetc: refactor bulk flipping of RX buffers to separate function
    c36f5f659ad9c scsi: mpi3mr: Add level check to control event logging
    ca85c2d0db5f8 vhost-scsi: protect vq->log_used with vq->mutex
    20fb292ab5d5d cgroup: Fix compilation issue due to cgroup_mutex not being exported
    c15dc980ffc5a dma-mapping: avoid potential unused data compilation warning
    2cab5ea2f5ab6 intel_th: avoid using deprecated page->mapping, index fields
    b49b5132e4c73 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
    42d15918da268 scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
    fe8421e853ef2 scsi: target: iscsi: Fix timeout on deleted connection
    beb6382add07a nvmem: qfprom: switch to 4-byte aligned reads
    35d77c8d887e1 nvmem: core: update raw_len if the bit reading is required
    497f19cacb3f8 nvmem: core: verify cell's raw_len
    04c81ac33a607 nvmem: rockchip-otp: add rk3576 variant data
    266e5f4813808 nvmem: rockchip-otp: Move read-offset into variant-data
    b3145041e990a cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
    1efbe2c7a0f44 phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
    cf60d19721bc4 phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
    e992f2581b794 phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
    eb4fdee1d6303 phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
    e668cbeb9590a i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
    ad40588df1820 i2c: designware: Use temporary variable for struct device
    0ef9396a7da7a i2c: designware: Remove ->disable() callback
    33378973d843b i2c: designware: Uniform initialization flow for polling mode
    d1954e7aa1313 gpio: pca953x: fix IRQ storm on system wake up
    58e34598436f8 gpio: pca953x: Simplify code with cleanup helpers
    475d6ebc91a24 gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()

(From OE-Core rev: ab51811f918bcf5a72133c5e855949e0c347d093)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Yogita Urade
23e57638ef python3-urllib3: fix CVE-2025-50181
urllib3 is a user-friendly HTTP client library for Python. Prior to
2.5.0, it is possible to disable redirects for all requests by
instantiating a PoolManager and specifying retries in a way that
disable redirects. By default, requests and botocore users are not
affected. An application attempting to mitigate SSRF or open redirect
vulnerabilities by disabling redirects at the PoolManager level will
remain vulnerable. This issue has been patched in version 2.5.0.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-50181

Upstream patch:
f05b132912

(From OE-Core rev: cf10eafb333daf8acfd3b8bfcb42c1fe6c26a8a5)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Vijay Anusuri
55a6c02c35 sudo: Fix CVE-2025-32462
Upstream-Status: Backport from d530367828

(From OE-Core rev: d01f888a5ec43fdc8e7bd496ae9317c0fa28da9b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li
60f859e4be libsoup: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: 6455484a26edc69be806c1356314c018d1940294)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li
7ec28bad4d libsoup-2.4: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: 92039926b164fae418eed988f6fa172c3554b9e7)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li
e9cf2ef270 libsoup-2.4: refresh CVE-2025-4969.patch
refresh CVE-2025-4969.patch to fix the following build failure for
libsoup-2.4-native on fedora40/41:

../libsoup-2.74.3/tests/multipart-test.c:578:63: error: passing argument 2 of ‘soup_multipart_new_from_message’ from incompatible pointer type [-Wincompatible-pointer-types]
  578 |         multipart = soup_multipart_new_from_message (headers, bytes);
      |                                                               ^~~~~
      |                                                               |
      |                                                               GBytes * {aka struct _GBytes *}

(From OE-Core rev: aaeea20b5c0f0c5a9d6554dd5e9693a9432cfa54)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li
851774c757 icu: fix CVE-2025-5222
CVE-2025-5222:
A stack buffer overflow was found in Internationl components for unicode
(ICU ). While running the genrb binary, the 'subtag' struct overflowed
at the SRBRoot::addTag function. This issue may lead to memory
corruption and local arbitrary code execution.

Refer:
https://nvd.nist.gov/vuln/detail/CVE-2025-5222
https://unicode-org.atlassian.net/browse/ICU-22957
2c667e31cf

(From OE-Core rev: a35ff17a0985389842c89e35f264f1d9f2b6bbae)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Virendra Thakur
36526677db curl: set conditional CVE_STATUS for CVE-2025-5025
If openssl packageconfig is enabled, set CVE_STATUS as not-applicable.
This CVE is applicable only when curl built with wolfSSL support.

Reference: https://curl.se/docs/CVE-2025-5025.html

(From OE-Core rev: 8f50b0761fc4d49fae8d174956052e3ff9024a5e)

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Hitendra Prajapati
71e9cf4cd9 libxml2: fix CVE-2025-6021
Upstream-Status: Backport from acbbeef9f5

(From OE-Core rev: 8777f1b344c7f66a7ef4291bb59af2a5fb466b6a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Archana Polampalli
0717b8bbc0 xwayland: fix CVE-2025-49180
A flaw was found in the RandR extension, where the RRChangeProviderProperty function
does not properly validate input. This issue leads to an integer overflow when
computing the total size to allocate.

(From OE-Core rev: 15881f41f8c00c5f0a68628c2d49ca1aa1999c2e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli
b4ccec2a44 xwayland: fix CVE-2025-49179
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients
function does not check for an integer overflow when computing request length,
which allows a client to bypass length checks.

(From OE-Core rev: de28bff9b54b2725d8c06c4760e0ed2b59d3fa61)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli
65e08ee344 xwayland: fix CVE-2025-49178
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore'
in a client's request can cause the server to skip processing another client's
request, potentially leading to a denial of service.

(From OE-Core rev: 4c6df8320497c2ebf09902a62b6a3f3b061be917)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli
4bf6e39294 xwayland: fix CVE-2025-49177
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler
does not validate the request length, allowing a client to read unintended memory
from previous requests

(From OE-Core rev: 0b2afd59ce8c35083c1cb3596a2f7d4eaa7bd1c8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli
0d8b19752d xwayland: fix CVE-2025-49176
A flaw was found in the Big Requests extension. The request length is multiplied
by 4 before checking against the maximum allowed size, potentially causing an
integer overflow and bypassing the size check.

(From OE-Core rev: 0a2c5179e1f08ccd0fcaccb6f95c892ebafac8a8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli
a1db9c900f xwayland: fix CVE-2025-49175
A flaw was found in the X Rendering extension's handling of animated cursors.
If a client provides no cursors, the server assumes at least one is present,
leading to an out-of-bounds read and potential crash.

(From OE-Core rev: fec7644b70452794fabfb7d967e2124918215440)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam
37be814fb2 libarchive: fix CVE-2025-5918
A vulnerability has been identified in the libarchive library. This flaw can be triggered whe
n file streams are piped into bsdtar, potentially allowing for reading past the end of the fi
le. This out-of-bounds read can lead to unintended consequences, including unpredictable prog
ram behavior, memory corruption, or a denial-of-service condition.

CVE-2025-5918-0001 is the dependent commit and CVE-2025-5918-0002 is the actual CVE fix.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5918

Upstream-patches:
89b8c35ff4
dcbf1e0ede

(From OE-Core rev: 369c164a163b2c7f15ee5fc41130be9feaf7245e)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam
3c2bbf4a1c libarchive: fix CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-
one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-
byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, lea
ding to unpredictable program behavior, crashes, or in specific circumstances, could be lever
aged as a building block for more sophisticated exploitation.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5917

Upstream-patch:
7c02cde37a

(From OE-Core rev: 2b6832b05bab414df1da7c74a0c6a5e5a9d75b29)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam
0bccc5ec85 libarchive: fix CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw
involves an integer overflow that can be triggered when processing a Web
Archive (WARC) file that claims to have more than INT64_MAX - 4 content
bytes. An attacker could craft a malicious WARC archive to induce this
overflow, potentially leading to unpredictable program behavior, memory
corruption, or a denial-of-service condition within applications that
process such archives using libarchive.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5916

Upstream-patch:
ef09372952

(From OE-Core rev: 9c74d3a096fed68d173f8711b373a42f158d6cc7)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam
0f2564b7c0 libarchive: fix CVE-2025-5915
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap b
uffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer
-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memo
ry buffer, which can result in unpredictable program behavior, crashes (denial of service), o
r the disclosure of sensitive information from adjacent memory regions.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5915

Upstream-patches:
a612bf62f8

(From OE-Core rev: 99fdc86ad57db4d8829a33033918cf78419977af)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam
28f102461a libarchive: fix CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archiv
e_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultim
ately lead to a double-free condition. Exploiting a double-free vulnerability can result in m
emory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service
condition.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-5914

Upstream-patch:
09685126fc

(From OE-Core rev: b7d8249bda296620a5bbf592f4cdf566b4537563)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Dixit Parmar
7bb9c2255b ref-manual: document KERNEL_SPLIT_MODULES variable
This variable controls the kernel module spliting.

[YOCTO #15771]

(From yocto-docs rev: 80b3bb27e4efa73b982f4bfeccca4deedf78c0d7)

Signed-off-by: Dixit Parmar <dixitparmar19@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 198179d9c6231b5934d4fb6ede716d1dcb1442bb)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Guocai He
21c19ed0f8 tcf-agent: correct the SRC_URI
The SRC_URI is changed to git://gitlab.eclipse.org/eclipse/tcf/tcf.agent.git

(From OE-Core rev: 175cd54fd57266d7dea07121861a4f15be00a882)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Ryan Eatmon
79782ae231 uboot: Allow for customizing installed/deployed file names
Backport from master:
https://git.openembedded.org/openembedded-core/commit/?id=debc691853e2954bd325bad395b8829939afaa08

When assembling all of the various filenames that are installed/deployed
from u-boot, we have been including the PV and PR in the filenames.  This
change introduces a single variable to replace these two in the
filenames.

This change should not be disruptive since the default value for the new
UBOOT_VERSION variable is "${PV}-${PR}".

In one case (UBOOT_EXTLINUX_SYMLINK [1]), PR was used without PV, this
patch assumes this was a mistake and corrects it as PR would not be of
much use alone.

[1] https://git.openembedded.org/openembedded-core/commit/?h=master-next&id=33df3a65f3e8e136811da715d0cc247ce66ae0ea

(From OE-Core rev: 58ad450e84db35d5b38dab65edbbc33bc6fef750)

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Daniel Turull
2366605a35 spdx: add option to include only compiled sources
When SPDX_INCLUDE_COMPILED_SOURCES is enabled, only include the
source code files that are used during compilation.

It uses debugsource information generated during do_package.

This enables an external tool to use the SPDX information to disregard
vulnerabilities that are not compiled.

As example, when used with the default config with linux-yocto, the spdx size is
reduced from 156MB to 61MB.

Tested with bitbake world on oe-core.

(From OE-Core rev: c6a2f1fca76fae4c3ea471a0c63d0b453beea968)
Adapted to existing files for create-spdx-2.2

CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
CC: Joshua Watt <JPEWhacker@gmail.com>
(From OE-Core rev: a2866934e58fb377a73e87576c8594988a63ad1b)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Daniel Turull
5b7a6dec85 package: export debugsources in PKGDESTWORK as json
The source information used during packaging can be use from other tasks to
have more detailed information on the files used during the compilation and
improve SPDX accuracy.

Source files used during compilation are store as compressed zstd json in
pkgdata/debugsources/$PN-debugsources.json.zstd
Format:
{ binary1: [src1, src2, ...], binary2: [src1, src2, ...] }

I checked the sstate size, and it slightly increases using core-image-full-cmdline:
without patch: 2456792 KB sstate-cache/
with patch:    2460028 KB sstate-cache/
(4236 KB or 0.17%)

(From OE-Core rev: c507dcb8a8780a42bfe68b1ebaff0909b4236e6b)
Adaptations to match spdx in scarthgap: change BP to PF

CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
CC: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: cba53212f5debf897752453364b9756a05c197de)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Preeti Sachan
20d3851718 ltp: backport patch to fix compilation error for x86_64
When the input compiler enables AVX, stack realignment requirements
causes gcc to fail to omit %rbp use, due to which the test fails to
clobber %rbp in inline asm.  Disable AVX to build the test on x86_64 so
that the test continues working.

Fix compilation with gcc v13.4+. Cherry picked from oe-core, master branch.

(From OE-Core rev: 54d6fa7bc9f4ae6bdb98862488e8d09200d3bc14)

Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Roland Kovacs
ebbddcdb70 gnupg: update 2.4.5 -> 2.4.8
This release includes fix for CVE-2025-30258.
Support for --enable-gpg-is-gpg2 config option has been partially removed in
version 2.4.6.

Changelog:
 https://dev.gnupg.org/T7428

CVE: CVE-2025-30258

(From OE-Core rev: 41ef33ebf3e1a922aa44da8d75b240163d7954b1)

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Victor Giraud
fee92f72e1 busybox: fix CVE-2022-48174
shell: avoid segfault on ${0::0/0~09J}. Closes 15216
CVE: CVE-2022-48174

Upstream-Status: Backport [https://git.launchpad.net/ubuntu/+source/busybox/commit/?id=ca2afcbf42017d998ce3d6726f5ff5072a3fa853]

(From OE-Core rev: a81aff7d810800ce3265422cddde26d11366d514)

Signed-off-by: Victor Giraud <vgiraud.opensource@witekio.com>
Signed-off-by: Bruno Vernay <bruno.vernay@se.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Praveen Kumar
b4562b5fca go: fix CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on
cross-origin redirects potentially leaking sensitive information.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-4673

Upstream-patch:
b897e97c36

(From OE-Core rev: 72279bbc1ff2d85563c5245195435f078c5d1a68)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Moritz Haase
b8f8125f05 cmake: Correctly handle cost data of tests with arbitrary chars in name
ctest automatically optimizes the order of (parallel) test execution based on
historic test case runtime via the COST property (see [0]), which can have a
significant impact on overall test run times. Sadly this feature is broken in
CMake < 4.0.0 for test cases that have spaces in their name (see [1]).

This commit is a backport of f24178f3 (which itself backports the upstream fix).
The patch was adapted slightly to apply cleanly to the older CMake version in
scarthgap. As repeated test runs are expected to mainly take place inside the
SDK, the patch is only applied to 'nativesdk' builds.

[0]: https://cmake.org/cmake/help/latest/prop_test/COST.html
[1]: https://gitlab.kitware.com/cmake/cmake/-/issues/26594

Reported-By: John Drouhard <john@drouhard.dev>
(From OE-Core rev: cfa97a50e06fb0fcc7cbc0ada54ce7ad5ba29ebe)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:10 -07:00
Peter Marko
31bf71ccc5 glibc: stable 2.39 branch updates
$ git log --oneline 3463100f2d47f2897a24ba8023a5c7aaf2d26550..06a70769fd0b2e1f2a3085ad50ab620282bd77b3
06a70769fd ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
3875045da5 ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
c6240a11f7 ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
2caef2827f elf: Fix subprocess status handling for tst-dlopen-sgid (bug 32987)
9e25c0f445 x86_64: Fix typo in ifunc-impl-list.c.
ca99d55315 elf: Test case for bug 32976 (CVE-2025-4802)
71ddb11ccd support: Add support_record_failure_barrier
abdeb4b520 support: Use const char * argument in support_capture_subprogram_self_sgid
147bed0a71 elf: Keep using minimal malloc after early DTV resize (bug 32412)
4e5ee49a43 sysdeps/unix/sysv/linux/x86_64/Makefile: Add the end marker
37b30b6a68 sysdeps/x86_64/Makefile (tests): Add the end marker
9fe51d34bb sort-makefile-lines.py: Allow '_' in name and "^# name"
14ec225d85 libio: Correctly link tst-popen-fork against libpthread
1dcfb9479d libio: Fix a deadlock after fork in popen
e31ac9a639 libio: Sort test variables in Makefile
68f3f1a1d0 Linux: Switch back to assembly syscall wrapper for prctl (bug 29770)
d33d10642f nptl: PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
b1eb369aee nptl: Use all of g1_start and g_signals
ac5da3c0e4 nptl: rename __condvar_quiesce_and_switch_g1
2fdc0afd07 nptl: Fix indentation
582c99b2c0 nptl: Use a single loop in pthread_cond_wait instaed of a nested loop
fc2a25417d nptl: Remove g_refs from condition variables
6f5ba03968 nptl: Remove unnecessary quadruple check in pthread_cond_wait
d0da34ad30 nptl: Remove unnecessary catch-all-wake in condvar group switch
ea13a35e37 nptl: Update comments and indentation for new condvar implementation
2451ef5c4a pthreads NPTL: lost wakeup fix 2

test results:
            Before After  Diff
FAIL           207   207     0
PASS          4912  4915    +3
UNSUPPORTED    230   230     0
XFAIL           16    16     0
XPASS            4     4     0

(From OE-Core rev: c94b6686a1edcaa1bea1ff5e716df96da8e36b7c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Chen Qi
e1d6f5bef4 coreutils: fix CVE-2025-5278
Backport patch to fix CVE-2025-5278.

(From OE-Core rev: 7af711c0a31359b57903503ab37bad53aad89c22)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Peter Marko
e8a99c83b3 go: set status of CVE-2024-3566
NVD ([1]) tracks this as:
cpe:2.3🅰️golang:go:*:*:*:*:*:*:*:*
Running on/with
  cpe:2.3microsoft:windows:-:*:*:*:*:*:*:*

Yocto cve-check ignores the "Running on/with", so it needs to be ignored
explicitly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-3566

(From OE-Core rev: b8841097eaf7545abf56eb52a122e113b54ba2a7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Robert P. J. Day
7500a08bd1 bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file
(From yocto-docs rev: 731bb4a7d58f16e7920b4798409a4db1b57a0344)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5fc7794e9ae326eead16552726d74ea801fe535b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day
0f32f501fa bsp-guide: update lonely "4.12" kernel reference to "6.12"
To accompany earlier updating of kernel version, update this lonely
reference to be consistent.

(From yocto-docs rev: 0493f6e0ff9f52ec74adde584a04a121f5ad76aa)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e26c2018cd663de91ee08e0cba55eda1a4c30210)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day
9acc51fef1 bsp guide: update kernel version example to 6.12
Change the sample kernel version being used from 4.4 to a more modern
6.12.

(From yocto-docs rev: 13235b2c604ccff8737bfb9ee2add626e0ea0503)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1bad12b6ccfe1c0d26918926176a0c743568de26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day
051830ab7d overview-manual: small number of pedantic cleanups
In Sections 4.3.1 and 4.3.2 of the Overview Manual, a bit of tidying
including:

  - provide full list of packaging options
  - add monospaced rendering where appropriate
  - fix broken "ref"
  - make capitalization consistent

(From yocto-docs rev: 7abe7dde0cbb34a56af30452104355688775ef2b)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1cf769e3c8a8442cd05449dc97e91ad482d635f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Quentin Schulz
a3fb537a47 ref-manual: classes: nativesdk: move note to appropriate section
The nativesdk- prefix to the recipe filename should only be used when
using the inherit method as the BBCLASSEXTEND method will do some magic
when generating the "implicit" name of the recipe.

This matches the instructions for the native class.

(From yocto-docs rev: c44d05d11833de4645d72fb8f987123e693494f4)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 15fe239e1e62b9add737aa732dd7f5e9948ee03d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Quentin Schulz
7f3f70747b ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
We explain how to create a native (nativesdk) recipe in two different
ways via a bullet list but reading quickly the instructions may mislead
one into doing both options whereas they are incompatible.

This rewords both the nativesdk and native sections so that the second
bullet point starts with an Or and explicit that this applies to target
recipes.

(From yocto-docs rev: 70194ee42c946e1a2122ac143612e334fcbc5241)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6d0d338a5f2686ddeee5eed7b6e05f3db800d33a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Lee Chee Yang
2ffcd8a9b7 migration-guide: add release notes for 5.0.10
(From yocto-docs rev: 32344c65b167cc19431902eba628bb321690a166)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5bc4c98987ff809294541657b20d2e44f70e1d2c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Savvas Etairidis
7beb2f3a69 systemd: Rename systemd_v255.21 to systemd_255.21
The recipe was accidentally renamed with a 'v'
prefix in 29e623b2ad00555788412fa520fbb9ffec794cbb.

(From OE-Core rev: db02a4cc542d0e7e563ec46c91bf9a7313a71d02)

Signed-off-by: Savvas Etairidis <setairidis@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Poonam Jadhav
39f1520cd7 libpng: Add ptest
Install libpng test-suite to run it as a ptest.
As the test-suite takes more than 30 seconds to run,
add libpng-ptest to PTESTS_SLOW in ptest-packagelists.inc

(From OE-Core rev: 1b52b7ebe5f8fb490088622181cdb95e6b7f5a29)

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Sandeep Gundlupet Raju
6e7a9ff2e1 tune-cortexr52: Remove aarch64 for ARM Cortex-R52
Remove aarch64 for ARM Cortex-R52 processor as it supports only 32-bit
ISA but not 64-bit ISA. Also update ARMPKGARCH for cortexr52hf.

(From OE-Core rev: 8ee21ec40e9f25ee97ec077b93751fea14b66e32)

Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com>
Signed-off-by: Sandeep Gundlupet Raju <grsandeep85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Deepesh Varatharajan
3f2cf790b2 gcc: Upgrade to GCC 13.4
This is a bugfix release in GCC13 release series
100+ bugfixes

https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=13.4

Dropped the following patches:

0028-gcc-Fix-c-tweak-for-Wrange-loop-construct.patch
179dc0f0fe

gcc.git-ab884fffe3fc82a710bea66ad651720d71c938b8.patch
5ceea2ac10

                                 #GCC 13.3      #GCC 13.4       #Diff

No. of expected passes            148863         149440          +577
No. of unexpected failures        14             14              0
No. of expected failures          1415           1414            -1
No. of unresolved testcases       25384          25660           +276
No. of unsupported tests          2692           2689            -3

(From OE-Core rev: 7af83314fea5948937403b5d59ba5df6fecdd81a)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Aleksandar Nikolic
f2648ee380 scripts/install-buildtools: Update to 5.0.10
Update to the 5.0.10 release of the 5.0.10 series for buildtools

(From OE-Core rev: 6c3344ba51a42252e347db2f6013c49d35413ea0)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Jiaying Song
dbc06dd7b1 python3-requests: upgrade 2.32.3 -> 2.32.4
Changelog:
https://requests.readthedocs.io/en/latest/community/updates/#release-history

(From OE-Core rev: 0f0a06ccef45792f65b823ecc0ef10525d94084f)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Colin Pinnell McAllister
ab1c25d1f5 ffmpeg: fix CVE-2025-1373
CVE-2025-1373 does not appear to affect ffmpeg 5.0.3. The CVE has been
marked as "fixed-version".

(From OE-Core rev: 0ffe159d9a4ee434b4c995e1ca9a85b01e0a5d05)

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Peter Marko
a34f20b224 net-tools: patch CVE-2025-46836
Backport patch for this CVE and also patch for its regression.

(From OE-Core rev: 352525443b1844cdfd28355dfc1444046bbb76e8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Peter Marko
10fba0085d testimage: get real os-release file
/etc/os-release is a symlink to /usr/lib.
Symlink is retrieved as a dead link which points to nowhere if also the
original file is not accompanying it.
Fetch the real file in addition to this link.

Alternative could be to use "tar -h" (supported also by busybox tar),
however that could lose some important information if links are relevant
for failure analysis.

(From OE-Core rev: ed43f9ccb3c08845259e24440912631afd780d12)

(From OE-Core rev: f7ee6db8ca5dc72b7a468531e31403b60e6a0020)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Andrew Fernandes
6dfacf4cd3 gtk+: add missing libdrm dependency
Fixes [YOCTO #15513]

When built without the wayland feature, gtk4 does not
build due to a missing explicit dependency on libdrm.

(From OE-Core rev: 46c7f1a8d6b39256479abd8a7bb7be1ccf221267)

Signed-off-by: Andrew Fernandes <andrew@fernandes.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b32290d9bbcfccc9b85fa5acbeaee5d32d9a9091)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Peter Marko
c4f82e3fd5 python3: upgrade 3.12.9 -> 3.12.11
Drop upstreamed patch and refresh remaining patches.

* https://www.python.org/downloads/release/python-31210/

  Python 3.12.10 is the latest maintenance release of Python 3.12, and
  the last full maintenance release. Subsequent releases of 3.12 will be
  security-fixes only.

* https://www.python.org/downloads/release/python-31211/

  Security content in this release
  * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330]
    [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed
    tarfile extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
  * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a
    non-“strict” error handler.
  * gh-128840: Short-circuit the processing of long IPv6 addresses early
    in ipaddress to prevent excessive memory consumption and a minor
    denial-of-service.

gh-133767 got meawhile CVE-2025-4516 assigned.

(From OE-Core rev: 6cca08b2857efd5481e837ecd6bb295cb8a99ee1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Vijay Anusuri
82e8f8c2e0 kea: upgrade 2.4.1 -> 2.4.2
Changelog
https://downloads.isc.org/isc/kea/2.4.2/Kea-2.4.2-ReleaseNotes.txt

License-Update: Update copyright year

Includes security fixes for CVE-2025-32801, CVE-2025-32802 and CVE-2025-32803

(From OE-Core rev: 2f3d2a2848472bdf87fbce00967bc780fc859e05)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Changqing Li
5e4f229917 libsoup: fix CVE-2025-2784
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/422

(From OE-Core rev: 504d92b01ac9a227e8e57b677f016fdfeccd5666)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Changqing Li
8d4c3eb106 libsoup-2.4: fix CVE-2025-2784
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/422

(From OE-Core rev: 9c014c1b96f4ebeb0f6f504b6c7c0d8063b6a6b7)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Changqing Li
47bb754e27 libsoup-2.4: fix CVE-2025-4476
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/440

(From OE-Core rev: ebb87904c97f4b27a023b2347622519c702d4d2d)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Changqing Li
859504c475 libsoup: fix CVE-2025-4948
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/449

(From OE-Core rev: 737d50288a37f51f17cf3fef0422e27dbd115cce)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Changqing Li
e21b122523 libsoup-2.4: fix CVE-2025-4948
Refer:
http://gitlab.gnome.org/GNOME/libsoup/-/issues/449

(From OE-Core rev: b4fb5cd0d3385989842ad5a84d34cf451679c59a)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
2f3419c598 libsoup: fix CVE-2025-46421
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/439

(From OE-Core rev: f1450eea34202a9cc46294e3d8244c829556c369)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
8944014e5c libsoup-2.4: fix CVE-2025-46421
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/439

(From OE-Core rev: 9e32f4fd761b591ea2f5ce26381135e9a8db94ce)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
e4ebf3effd libsoup: fix CVE-2025-32050
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/424

(From OE-Core rev: 563a34faae35e4587fe2740c26c4bc149555a5de)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
a7a45d58e0 libsoup-2.4: fix CVE-2025-32050
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/424

(From OE-Core rev: d16627901125854f5346711e96d635c704438705)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
ee5c55b631 libsoup: fix CVE-2025-32051
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/401

(From OE-Core rev: dd92cad39759b7ad105d8bcd42672847a273bccc)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
df0e54f6ab libsoup: fix CVE-2025-32052
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/425

(From OE-Core rev: 9a8a5072969a326e296d840296cb475fb3c0e2ff)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Changqing Li
d81430958e libsoup-2.4: fix CVE-2025-32052
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/425

(From OE-Core rev: f3890f25cc036fd184578d7b85e6410ee97dc3ad)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:00 -07:00
Quentin Schulz
a435aee807 docs: conf.py: silence SyntaxWarning on js_splitter_code
The js_splitter_code string contains backslashes that Python tries to
use as escape sequence but doesn't manage to, hence the following
SyntaxWarning message:

documentation/conf.py:188: SyntaxWarning: invalid escape sequence '\p'
  .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}-]+/gu)

Considering that we want this to be sent verbatim to the JS, let's make
this a raw string instead.

Fixes: d4a98ee19e0c ("conf.py: tweak SearchEnglish to be hyphen-friendly")
(From yocto-docs rev: 6f424ed4ce749a135be3145a2e9d04030fdbda39)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c1056672ef45b197136eb8815728d426337a5901)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Quentin Schulz
82a7962461 docs: README: specify how to contribute instead of pointing at another file
This repository is partially included in another repository: poky.

However its README isn't making it, so documentation/README pointing at
the README at the root of the git repository would lead the contributor
nowhere.

Instead, let's include the appropriate information directly in
documentation/README which does make it to the poky git repo.

(From yocto-docs rev: 01f1595d87dfb759071198d64c9a62fb00a48545)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0298318cea2947e65754eab97255164e64a862de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Carlos Sánchez de La Lama
d802c98044 ref-manual: clarify KCONFIG_MODE default behaviour
KCONFIG_MODE defaults to 'allnoconfig' when not set, regardless of whether
KBUILD_DEFCONFIG points to an in-tree or a meta-layer defconfig.

(From yocto-docs rev: c9bceea147c807b942ce6bcf085a31d9388ecc79)

Signed-off-by: Carlos Sánchez de La Lama <csanchezdll@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f374b9c426f6c10710e011a4ad660231ee26efb8)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Robert P. J. Day
6341ca8dfc Clean up explanation of minimum required version numbers
Some simple rendering and grammar fixes.

(From yocto-docs rev: 649a440c4f4ed9f2020622c10603489e7b9b27b6)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9a9624bfc4c523a6edf6f3f0c336e663cc939e75)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Lee Chee Yang
c3e2edd4dd migration-guides: add release notes for 4.0.27
(From yocto-docs rev: 223504ea6dca3fde55b14d95832bc3935229225c)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c4748f5079e5193f82afc1b754816edd40ce9254)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Richard Purdie
eadd7c6cfb brief-yoctoprojectqs/ref-manual: Switch to new CDN
The project is switching the way handle our CDN provision of sstate objects,
update the URL accordingly.

(cherry picked from commit 406e8a8e30404c0538f5aa46f211540bae2b206b)

(From yocto-docs rev: bede97cfde51823e262e300aa346902d23530490)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Guðni Már Gilbert
417cecf76b systemd: upgrade 255.18 -> 255.21
The update includes 79 commits. Full list of changes can be found on
Github [1]

All patches were refreshed with devtool.

[1] https://github.com/systemd/systemd-stable/compare/v255.18...v255.21

(From OE-Core rev: 29e623b2ad00555788412fa520fbb9ffec794cbb)

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Divya Chellam
8422c6f52f screen: fix CVE-2025-46804
A minor information leak when running Screen with setuid-root
privileges allosw unprivileged users to deduce information
about a path that would otherwise not be available.

Affected are older Screen versions, as well as version 5.0.0.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-46804

Upstream-patch:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=e0eef5aac453fa98a2664416a56c50ad1d00cb30

(From OE-Core rev: a313af8ca347797214669406ee86f5239997f7e3)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Divya Chellam
fa0fef4a3d screen: fix CVE-2025-46802
For a short time they PTY is set to mode 666, allowing any user on the
system to connect to the screen session.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-46802

Upstream-patch:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=049b26b22e197ba3be9c46e5c193032e01a4724a

(From OE-Core rev: b17e091eb4681b69c5a050d3fa0f9289f524e205)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Deepesh Varatharajan
33fc46afb7 binutils: Fix CVE-2025-5244
PR32858 ld segfault on fuzzed object
We missed one place where it is necessary to check for empty groups.

Backport a patch from upstream to fix CVE-2025-5244
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=d1458933830456e54223d9fc61f0d9b3a19256f5]

(From OE-Core rev: 31fc180f606c5bb141c9c6dd85a7b1d876e1d692)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Deepesh Varatharajan
da4536b978 binutils: Fix CVE-2025-5245
PR32829, SEGV on objdump function debug_type_samep
u.kenum is always non-NULL, see debug_make_enum_type.

Backport a patch from upstream to fix CVE-2025-5245
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a]

(From OE-Core rev: 8202e66670327b02ec3de18b5af4a8b09abdc50d)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Vijay Anusuri
6ba8b8a487 python3-setuptools: Fix CVE-2025-47273
Upstream-Status: Backport from
d8390feaa9
& 250a6d1797

(From OE-Core rev: 9769cd99c32faf7d95a7cab07b8550b438ccaf0c)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
bf752e4e25 libsoup: fix CVE-2025-32053
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/426

(From OE-Core rev: 7ce73ed9b7125d02abcf8ec34c80270c2e340d55)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
ad1d671be0 libsoup-2.4: fix CVE-2025-32053
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/426

(From OE-Core rev: d6fba14b2e98928bbf2736494e571389892da6b4)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
dd4312d080 libsoup-2.4: fix do_compile failure
Remove test code for fixing do_compile failure:
../libsoup-2.74.3/tests/auth-test.c:1554:39: error: unknown type name 'SoupServerMessage'; did you mean 'SoupServerClass'?
 1554 |                                       SoupServerMessage *msg,
      |

(From OE-Core rev: f14a6c98e4cbf4ee2a243387b018e29beab3b56a)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
24f024f042 libsoup-2.4: fix CVE-2025-32907
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/428

(From OE-Core rev: de53b2272919b97719e2b7f704154283caebc59f)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
33fc8121c9 libsoup: fix CVE-2025-32907
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/429

(From OE-Core rev: a729b18103081acf17420cf91ec202e86cc6be0d)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Changqing Li
c04a6271a4 libsoup: fix CVE-2025-32908
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/429

(From OE-Core rev: ff7440fddf5ada072f60cc25f3670cbb74f58167)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Richard Purdie
320b76cc47 bitbake: ast: Change deferred inherits to happen per recipe
Currently deferred inherits get processed once for all class extensions
as a minor speed optimisation. Unfortunately this limits our options for
being able to report deferred classes to our code.

There are two challenges with using our deferred classes in OE at present.
One is that PACKAGECONFIG values don't work well with class overrides like
class-native if there are deferred classes based on PACKAGECONFIG, such
as python support. The second is that toolchain selection is proving
problematic to implement due to interactions between the toolchain deferred
inherit, the class extensions and class overrides being very late.

By changing deferred inherits to be recipe extension specific, we open
the way to generate events and "peek" at where things will end up,
allowing the class overrides to be set earlier.

The class extension code is updated to use a deferred inherit for the
class extension inheriting so that it is still inherited last.

(Bitbake rev: 139f61fe9eec221745184a14b3618d2dfa650b91)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Etienne Cordonnier
4bca6762e5 bitbake: gcp.py: remove slow calls to gsutil stat
The changes of 1ab1d36c0af6fc58a974106b61ff4d37da6cb229 added calls to "gsutil stat" to avoid unhandled exceptions, however:
- in the case of checkstatus() this is redundant with the call to self.gcp_client.bucket(ud.host).blob(path).exists() which already returns True/False
 and does not throw an exception in case the file does not exist.
- Also the call to gsutil stat is much slower than using the python client to call exists() so we should not replace the call to exists() with a call to gsutil stat.
- I think the intent of calling check_network_access in checkstatus() was to error-out in case the error is disabled. We can rather change the string "gsutil stat" to something else to make the code more readable.
- add a try/except block in download() instead of the extra call to gsutil

[RP: Tweak to avoid import until needed so google module isn't required for everyone]
(Bitbake rev: 59df5390381792aba4f3f5185000adf5109267fb)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-11 08:17:34 -07:00
Richard Purdie
9b0e95db58 local.conf.sample: Switch to new CDN
The project is switching the way handle our CDN provision of sstate objects,
update the URL accordingly.

(From meta-yocto rev: 7633f51d53f535728fe035fa866416d2e5ba6a9c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e5b8e76ba8232860943406e1c53e71b3d2790f17)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Richard Purdie
67c7b78bd0 sstatetests: Switch to new CDN
The project is switching the way handle our CDN provision of sstate objects,
update the URL accordingly.

(From OE-Core rev: d1b64f190c1686f081f5ba2c4f2b320048f6a514)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fea96974f1ee6ae6dceb39e3ca8157797d81586c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
NeilBrown
1c91f65601 nfs-utils: don't use signals to shut down nfs server.
Since Linux v2.4 it has been possible to stop all NFS server by running

   rpc.nfsd 0

i.e.  by requesting that zero threads be running.  This is preferred as
it doesn't risk killing some other process which happens to be called
"nfsd".

Since Linux v6.6 - and other stable kernels to which

  Commit: 390390240145 ("nfsd: don't allow nfsd threads to be
  signalled.")

has been backported - sending a signal no longer works to stop nfs server
threads.

This patch changes the nfsserver script to use "rpc.nfsd 0" to stop
server threads.

(From OE-Core rev: 01fca40ba44070891518d4126a34d7c9c0939f6d)

Signed-off-by: NeilBrown <neil@brown.name>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7b09ad289a36)
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Wang Mingyu
ac4b721298 ghostscript: upgrade 10.05.0 -> 10.05.1
(From OE-Core rev: 1d9be1505462822a2b75a1136a27d25b262b1feb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cc9ba7005fb155f4d5f2be9b23c12d14362a306b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
8151ec8269 linux-yocto/6.6: update to v6.6.92
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    ffaf6178137b Linux 6.6.92
    35559ebcdc89 drm/amdgpu: fix pm notifier handling
    c1d42a239be5 phy: tegra: xusb: remove a stray unlock
    3cfec712a439 btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
    b3598f53211b sctp: add mutual exclusion in proc_sctp_do_udp_port()
    93df6da64b00 hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
    7bcd29181bab memblock: Accept allocated memory before use in memblock_double_array()
    6133444518b7 LoongArch: Explicitly specify code model in Makefile
    f521c2a0c0c4 bpf, arm64: Fix address emission with tag-based KASAN enabled
    d9664e6ff040 bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
    bfc26aa3ab4c mm/migrate: correct nr_failed in migrate_pages_sync()
    62798e3291f5 selftests/mm: compaction_test: support platform with huge mount of memory
    962ce9028ca6 usb: typec: ucsi: displayport: Fix deadlock
    a0a736d9857c Bluetooth: btnxpuart: Fix kernel panic during FW release
    98fdd2f612e9 mm/page_alloc: fix race condition in unaccepted memory handling
    e24073cd8f16 x86/its: Fix build error for its_static_thunk()
    d530dd65f6f3 dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
    a6cce316327c dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
    6e94a2c3e4c1 dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
    d2d05fd0fc95 dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
    32ec46adf1a6 dmaengine: idxd: Add missing cleanups in cleanup internals
    404aad9b0c6f dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
    6ab9526e32ac dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
    9ba964b17fca dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
    47846211998a dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
    1c9e4ed01117 dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
    d87f1cddc592 dmaengine: ti: k3-udma: Add missing locking
    5340d0e84d5c net: qede: Initialize qede_ll_ops with designated initializer
    5e700b06b970 wifi: mt76: disable napi on driver removal
    55018ca1cc7a spi: tegra114: Use value to check for invalid delays
    d8843fb1a253 smb: client: fix memory leak during error handling for POSIX mkdir
    c682a193447a scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
    a1546ec7e049 phy: renesas: rcar-gen3-usb2: Set timing registers only once
    99fc6f1c371e phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
    2b169aa46f97 phy: Fix error handling in tegra_xusb_port_init
    ba25131b3c1c phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
    b1627af84e1e tracing: samples: Initialize trace_array_printk() with the correct function
    9d1216bf4910 ftrace: Fix preemption accounting for stacktrace filter command
    fa75d941b104 ftrace: Fix preemption accounting for stacktrace trigger command
    6d2d37520545 Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
    c0f3f0c88f16 Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
    115c7890476e hv_netvsc: Remove rmsg_pgcnt
    307963a3abf8 hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
    da5d5bc3ad3d hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
    c9d2b9a80d06 dma-buf: insert memory barrier before updating num_fences
    fc8fa09d40de ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
    46b33b97252d ALSA: usb-audio: Add sample rate quirk for Audioengine D1
    2759938c4a37 ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
    124522cc6b61 ACPI: PPTT: Fix processor subtable walk
    6456c818dc53 drm/amd/display: Avoid flooding unnecessary info messages
    43b35d404f6d drm/amd/display: Correct the reply value when AUX write incomplete
    34439d470ba0 LoongArch: uprobes: Remove redundant code about resume_era
    840663825ef6 LoongArch: uprobes: Remove user_{en,dis}able_single_step()
    ad1e441016e0 LoongArch: Fix MAX_REG_OFFSET calculation
    e89bd983f3cd LoongArch: Save and restore CSR.CNTC for hibernation
    f4c0a7999fb5 LoongArch: Prevent cond_resched() occurring within kernel-fpu
    7722fba9f3bf udf: Make sure i_lenExtents is uptodate on inode eviction
    a0302cb13918 dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
    e1b755c0d876 NFSv4/pnfs: Reset the layout state after a layoutreturn
    c1dd9ccc0f0c tsnep: fix timestamping with a stacked DSA driver
    0980e62ab822 tsnep: Inline small fragments within TX descriptor
    406d05da2683 net/tls: fix kernel panic when alloc_page failed
    f1ecccb5cdda mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
    fde33ab3c052 wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
    72ee7af61570 octeontx2-af: Fix CGX Receive counters
    398989c7800e net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability
    03c42d35c329 octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
    7bddac8603d4 regulator: max20086: fix invalid memory access
    9c2d0899c680 qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
    b48a47e137ce net/mlx5e: Disable MACsec offload for uplink representor profile
    4a7d4031fab5 ALSA: sh: SND_AICA should depend on SH_DMA_API
    c70c021be025 nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
    64638f3103d0 nvme-pci: make nvme_pci_npages_prp() __always_inline
    cbe3f0445181 net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
    1d60c0781c1b net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
    4e132f56bc64 ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
    8a8dc7fd1e3b ALSA: seq: Fix delivery of UMP events to group ports
    e4d8a517324c net: mctp: Ensure keys maintain only one ref to corresponding dev
    acab78ae12c7 net: mctp: Don't access ifa_index when missing
    2d45eeb7d5d7 mctp: no longer rely on net->dev_index_head[]
    7777ca11a40b tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
    95a9e08ea5bb tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation
    a7d6e0ac0a88 net_sched: Flush gso_skb list too during ->change()
    31492b8386e5 Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
    b8084e8135af spi: loopback-test: Do not split 1024-byte hexdumps
    a6879a076b98 nfs: handle failure of nfs_get_lock_context in unlock path
    ad6caaf29bc2 HID: uclogic: Add NULL check in uclogic_input_configured()
    4715f16b1e43 HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
    ee4c5a2a3859 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
    99173e6f28e4 iio: chemical: sps30: use aligned_s64 for timestamp
    02023c289903 iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
    41ade94ad443 Revert "drm/amd: Stop evicting resources on APUs in suspend"
    c1a4d21a1547 drm/amd: Add Suspend/Hibernate notification callback support
    d59f45595102 drm/amdgpu: trigger flr_work if reading pf2vf data failed
    9a6d2e19448e drm/amdgpu: Fix the runtime resume failure issue
    95db39dbaa8c drm/amd: Stop evicting resources on APUs in suspend
    220192d5141a iio: adc: ad7266: Fix potential timestamp alignment issue.
    ec24e62a1dd3 KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
    635b3cc639b8 KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
    2402a3ef9e8c firmware: arm_scmi: Fix timeout checks on polling path
    b38812942556 firmware: arm_scmi: Track basic SCMI communication debug metrics
    0b175f7c4fe9 firmware: arm_scmi: Add support for debug metrics at the interface
    844b899f7899 firmware: arm_scmi: Add message dump traces for bad and unexpected replies
    6bddbdbeb748 firmware: arm_scmi: Add helper to trace bad messages
    7ea1913daafc tpm: tis: Double the timeout B to 4s
    70417bada46d tracing: probes: Fix a possible race in trace_probe_log APIs
    4e63b6907d07 cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks
    44a4c0dba8c3 platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
    6b92eee6b96d platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)
    bfe0dd3b7329 binfmt_elf: Move brk for static PIE even if ASLR disabled
    622b7267d787 binfmt_elf: Honor PT_LOAD alignment for static PIE
    d9c175875610 binfmt_elf: Calculate total_size earlier
    d3642f29f549 selftests/exec: Build both static and non-static load_address tests
    7435fa1c530d binfmt_elf: Leave a gap between .bss and brk
    0d6a2bada5d9 selftests/exec: load_address: conform test to TAP format output
    fe7eb1f32a85 binfmt_elf: elf_bss no longer used by load_elf_binary()
    c6df4c71ae1c binfmt_elf: Support segments with 0 filesz and misaligned starts
    11689bb0f7a6 fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 25a471e34f0959212b9168e5b9b09987c7fa7f0a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
4c11eb19ac linux-yocto/6.6: update to v6.6.91
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    615b9e10e337 Linux 6.6.91
    772934d9062a x86/its: FineIBT-paranoid vs ITS
    9f69fe3888f6 x86/its: Fix build errors when CONFIG_MODULES=n
    3b2234cd50a9 x86/its: Use dynamic thunks for indirect branches
    6699bf27a471 x86/ibt: Keep IBT disabled during alternative patching
    9e7364c32c6c x86/its: Align RETs in BHB clear sequence to avoid thunking
    ba1d70362658 x86/its: Add support for RSB stuffing mitigation
    61bed1ddb212 x86/its: Add "vmexit" option to skip mitigation on some CPUs
    f7ef7f6ccf2b x86/its: Enable Indirect Target Selection mitigation
    4754e29f43c6 x86/its: Add support for ITS-safe return thunk
    c5a5d8075231 x86/its: Add support for ITS-safe indirect thunk
    195579752c23 x86/its: Enumerate Indirect Target Selection (ITS) bug
    c6c1319d19fc Documentation: x86/bugs/its: Add ITS documentation
    a42e9162314f x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
    0a90b50ebf24 x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
    2eecf5cf21cb x86/speculation: Simplify and make CALL_NOSPEC consistent
    a8a8826bf655 x86/bhi: Do not set BHI_DIS_S in 32-bit mode
    a0ff7f679b5d x86/bpf: Add IBHF call at end of classic BPF
    1afebfeaf1eb x86/bpf: Call branch history clearing sequence on exit
    ca8a5626ca0c arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
    80251f62028f arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
    42a20cf51011 arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
    73591041a551 arm64: proton-pack: Expose whether the branchy loop k value
    854da0ed0671 arm64: proton-pack: Expose whether the platform is mitigated by firmware
    054fc98d691a arm64: insn: Add support for encoding DSB
    746e7d285dcb io_uring: ensure deferred completions are posted for multishot
    51f1389b5fe1 io_uring: always arm linked timeouts prior to issue
    00f0dd1a0166 do_umount(): add missing barrier before refcount checks in sync case
    eba09f42393a nvme: unblock ctrl state transition for firmware update
    f5a7d616a547 drm/panel: simple: Update timings for AUO G101EVN010
    1c0620213f37 MIPS: Fix MAX_REG_OFFSET
    66c4ec15e329 iio: adc: dln2: Use aligned_s64 for timestamp
    8b5273051b61 iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
    9519771908fc types: Complement the aligned types with signed 64-bit one
    85d430aef40a iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
    2b58e7c1e4b2 iio: accel: adxl367: fix setting odr for activity time update
    37a55b692d42 usb: usbtmc: Fix erroneous generic_read ioctl return
    1991ed796d9a usb: usbtmc: Fix erroneous wait_srq ioctl return
    e96be8bd53ab usb: usbtmc: Fix erroneous get_stb ioctl error returns
    e2fef620e5e0 USB: usbtmc: use interruptible sleep in usbtmc_read
    14f298c52188 usb: typec: ucsi: displayport: Fix NULL pointer access
    c9d8b0932e2b usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
    2d44ee69e6f5 usb: host: tegra: Prevent host controller crash when OTG port is used
    9b09b99a9510 usb: gadget: Use get_status callback to set remote wakeup capability
    0b32d03e79c1 usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
    dffa51cf2d3f usb: gadget: f_ecm: Add get_status callback
    1981926eb34a usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
    d84603122591 usb: cdnsp: Fix issue with resuming from L1
    8c133a08524a ocfs2: stop quota recovery before disabling quotas
    cc335d4f4e4f ocfs2: implement handshaking with ocfs2 recovery thread
    c7441aa8d078 ocfs2: switch osb->disable_recovery to enum
    cbd5108119d7 x86/microcode: Consolidate the loader enablement checking
    faa9059631d3 module: ensure that kobject_put() is safe for module type kobjects
    7e1c7748404b clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
    cbfaf46b88a4 xenbus: Use kref to track req lifetime
    ffa14d4dc779 xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
    2ed98e89ebc2 smb: client: Avoid race in open_cached_dir with lease breaks
    671c05434d91 usb: uhci-platform: Make the clock really optional
    03f108a718a7 drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
    1824e914e291 drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
    7133ff3bedf3 drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
    05340a423c92 drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
    f647ce6d9b5d drm/amd/display: Copy AUX read reply data whenever length > 0
    79d982ae2f61 drm/amd/display: Fix wrong handling for AUX_DEFER case
    89850f11bb7c drm/amd/display: Remove incorrect checking in dmub aux handler
    cee6856fbf1c drm/amd/display: Fix the checking condition in dmub aux handling
    c8a91debb020 drm/amd/display: more liberal vmin/vmax update for freesync
    12125f7d9c15 drm/v3d: Add job to pending list if the reset was skipped
    9ce662851380 iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
    da33c4167b9c iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
    3413b87a9e17 iio: adis16201: Correct inclinometer channel resolution
    7748b1b27fbf iio: adc: rockchip: Fix clock initialization sequence
    badda05d6b99 iio: adc: ad7606: fix serial register access
    b229fa0d093c drm/amd/display: Shift DMUB AUX reply command if necessary
    d41072906abe x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
    0f2b18c07604 staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
    f4d6b9f413cb staging: axis-fifo: Remove hardware resets for user errors
    90db122533d2 staging: iio: adc: ad7816: Correct conditional logic for store mode
    f7adc4943853 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
    85961bb7e494 Input: synaptics - enable SMBus for HP Elitebook 850 G1
    cbd085c424db Input: synaptics - enable InterTouch on Dell Precision M3800
    82b02402eee1 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
    c321045f088c Input: synaptics - enable InterTouch on Dynabook Portege X30-D
    2d9d6a4cd3be Input: xpad - fix two controller table values
    56b4e8b62124 Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
    cbc82e7db16d Input: xpad - fix Share button on Xbox One controllers
    90fa6015ff83 Input: mtk-pmic-keys - fix possible null pointer dereference
    f72f0172079c Input: cyttsp5 - fix power control issue on wakeup
    dadbe33fee36 Input: cyttsp5 - ensure minimum reset pulse width
    ce4e826dbfe7 net: dsa: b53: fix learning on VLAN unaware bridges
    b1c9c58d09ed net: dsa: b53: always rejoin default untagged VLAN on bridge leave
    ca071649e291 net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
    a143c39add81 net: dsa: b53: fix flushing old pvid VLAN on pvid change
    aa00a30a28c7 net: dsa: b53: fix clearing PVID of a port
    0121c19ebd53 net: dsa: b53: allow leaky reserved multicast
    355b0526336c bpf: Scrub packet on bpf_redirect_peer
    a3dfec485401 netfilter: ipset: fix region locking in hash types
    adbc8cc11629 ipvs: fix uninit-value for saddr in do_output_route4
    42b7a7c962b2 can: gw: fix RCU/BH usage in cgw_create_job()
    3455e6394fef can: mcp251xfd: fix TDC setting for low data bit rates
    68f29bb97a0e net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
    370635397b62 netdevice: add netdev_tx_reset_subqueue() shorthand
    fa1fe9f3ddb9 gre: Fix again IPv6 link-local address generation.
    31ff70ad3948 sch_htb: make htb_deactivate() idempotent
    af9e2d4732a5 ksmbd: fix memory leak in parse_lease_state()
    0236742bd959 openvswitch: Fix unsafe attribute parsing in output_userspace()
    fec1f9e9a650 ksmbd: Fix UAF in __close_file_table_ids
    04c8a38c6034 ksmbd: prevent out-of-bounds stream writes by validating *pos
    6ee551672c8c ksmbd: prevent rename with empty string
    3482037d0f66 can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
    73dde269a1a4 wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
    d2520dc79c2a can: mcan: m_can_class_unregister(): fix order of unregistration calls
    0efe9965680b arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
    38433aa31b43 dm: add missing unlock on in dm_keyslot_evict()
    9c2dd8954dad Linux 6.6.90
    ed3248a40374 dm: fix copying after src array boundaries
    fe465003bb63 xhci: fix possible null pointer dereference at secondary interrupter removal
    3efb29f6a78d usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
    bbc66abcd297 drm/amd/display: Fix slab-use-after-free in hdcp
    97a918755a4c drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
    4306dbd7676e iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
    3dc33f145a8a iommu/arm-smmu-v3: Use the new rb tree helpers
    8f2451ebaf5b drivers: base: handle module_kobject creation
    ace531f2fea1 kernel: globalize lookup_or_create_module_kobject()
    0ecbb45e30ab kernel: param: rename locate_module_kobject
    baa3ebbad80f xhci: Limit time spent with xHC interrupts disabled during bus resume
    ebb7195dac40 xhci: support setting interrupt moderation IMOD for secondary interrupters
    cc64775afb27 usb: xhci: check if 'requested segments' exceeds ERST capacity
    3733697cb7dd xhci: Add helper to set an interrupters interrupt moderation interval
    bcd191d7bab2 xhci: add support to allocate several interrupters
    ff0a51339a3b xhci: split free interrupter into separate remove and free parts
    3f6e8ad65b1e xhci: Clean up stale comment on ERST_SIZE macro
    f377434945f5 xhci: Use more than one Event Ring segment
    6299fb6190fe xhci: Set DESI bits in ERDP register correctly
    5e8c311318fa Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
    f129d8aea8b1 arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
    ce2fa5bc0158 arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
    fabe73032383 ARM: dts: opos6ul: add ksz8081 phy properties
    f68f93c9d043 firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
    2fbf6c9695ad firmware: arm_scmi: Balance device refcount when destroying devices
    e762ec4c7b34 sch_ets: make est_qlen_notify() idempotent
    36269156033f sch_qfq: make qfq_qlen_notify() idempotent
    9030a91235ae sch_hfsc: make hfsc_qlen_notify() idempotent
    077e355dae44 sch_drr: make drr_qlen_notify() idempotent
    bbbf5e0f8707 sch_htb: make htb_qlen_notify() idempotent
    b9ded1fb298b riscv: Pass patch_text() the length in bytes
    85484bc61138 ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
    54583776e416 ASoC: Use of_property_read_bool()
    29ea1abc7d4f net: vertexcom: mse102x: Fix RX error handling
    6ac8ec92f53f net: vertexcom: mse102x: Add range check for CMD_RTS
    04d9c3407986 net: vertexcom: mse102x: Fix LEN_MASK
    e1301580bf0b net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
    cb5922f74b40 net: hns3: defer calling ptp_clock_register()
    accb5a8ef129 net: hns3: fixed debugfs tm_qset size
    c1b1d3b0d8e4 net: hns3: fix an interrupt residual problem
    67d587bfa349 net: hns3: store rx VLAN tag offload state for VF
    7e1ca1bed3f6 octeon_ep: Fix host hang issue during device reboot
    0e32cbcbc4cb net: fec: ERR007885 Workaround for conventional TX
    dae1ce27ceae net: lan743x: Fix memleak issue when GSO enabled
    ec00ea56450e nvme-tcp: fix premature queue removal and I/O failover
    252a5a67adc7 bnxt_en: Fix ethtool -d byte order for 32-bit values
    4d69864915a3 bnxt_en: Fix out-of-bound memcpy() during ethtool -w
    3facfd720055 bnxt_en: Fix coredump logic to free allocated buffer
    e0272844995a net: ipv6: fix UDPv6 GSO segmentation with NAT
    8acf08b1e4ec net: dsa: felix: fix broken taprio gate states after clock jump
    cb625f783f70 net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
    683ad6d7f489 igc: fix lock order in igc_ptp_reset
    2399d1a75033 net: mdio: mux-meson-gxl: set reversed bit when using internal phy
    1bbbdfc247f4 net: dlink: Correct endianness handling of led_mode
    012a413b28e1 nvme-pci: fix queue unquiesce check on slot_reset
    ce4f77bef276 ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
    eae60cfe25d0 ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
    a43783119e01 net_sched: qfq: Fix double list add in class with netem as child qdisc
    72c3da7e6ceb net_sched: ets: Fix double list add in class with netem as child qdisc
    6082a87af4c5 net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
    db205b92dfe0 net_sched: drr: Fix double list add in class with netem as child qdisc
    9b467c5bcdb4 pds_core: remove write-after-free of client_id
    0861fccd43b8 pds_core: specify auxiliary_device to be created
    da23d7edb215 pds_core: make pdsc_auxbus_dev_del() void
    452fa190dd2e pds_core: delete VF dev on reset
    5e51c0b51b25 pds_core: check health in devcmd wait
    5ba9380f79f2 net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
    7cb10f17bddc net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
    a74777bb1827 net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
    dc7ffe02adda net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
    8c7bfb6198a7 Bluetooth: L2CAP: copy RX timestamp to new fragments
    8dde02229b3c net: Rename mono_delivery_time to tstamp_type for scalabilty
    2e8d44ebaa7b Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
    dd20a33a0db0 net/mlx5: E-switch, Fix error handling for enabling roce
    bab395c89127 net/mlx5: E-Switch, Initialize MAC Address for Default GID
    3576e9a80b6c vxlan: vnifilter: Fix unlocked deletion of default FDB entry
    029f11349ec9 powerpc/boot: Fix dash warning
    36a9a2647810 wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
    c5a5de348c05 drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
    27a1efe21f9e powerpc/boot: Check for ld-option support
    9a8d4d7072d4 book3s64/radix : Align section vmemmap start address to PAGE_SIZE
    8890eeae5c82 ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
    a6dbcf69d4c4 iommu: Handle race with default domain setup
    a1723e9c53fe KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
    46acbfbcc0e2 PCI: imx6: Skip controller_id generation logic for i.MX7D
    28cfd94980bb Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
    47e24c86cb20 selftests/bpf: extend changes_pkt_data with cases w/o subprograms
    3a467d938da2 bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
    b7c0d2d4ef13 selftests/bpf: validate that tail call invalidates packet pointers
    f1692ee23dca bpf: consider that tail calls invalidate packet pointers
    70234fbfa266 selftests/bpf: freplace tests for tracking of changes_packet_data
    7197fc4acdf2 bpf: check changes_pkt_data property for extension programs
    85a30a46396a selftests/bpf: test for changing packet data from global functions
    79751e9227a5 bpf: track changes_pkt_data property for global functions
    3d496a1eaaec bpf: refactor bpf_helper_changes_pkt_data to use helper number
    f0b56f1d2fcc bpf: add find_containing_subprog() utility function
    056ebbddb8fa tracing: Fix oob write in trace_seq_to_buffer()
    25687fd19633 cpufreq: Fix setting policy limits when frequency tables are used
    cbd54987db25 cpufreq: Avoid using inconsistent policy->min and policy->max
    e76948644ec7 smb: client: fix zero length for mkdir POSIX create context
    b44746356223 ksmbd: fix use-after-free in kerberos authentication
    a45445b6093d platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
    3a868a7f8da4 platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
    f39493cf7023 iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
    13d67528e1ae iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
    64e95bb37916 dm: always update the array size in realloc_argv on success
    ecc7f159d17e dm-integrity: fix a warning on invalid table line
    c8c83052283b dm-bufio: don't schedule in atomic context
    08424a0922fb wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
    8daa71c694b3 tracing: Do not take trace_event_sem in print_event_fields()
    75fda0e59168 spi: tegra114: Don't fail set_cs_timing when delays are zero
    3aa4aff158ea mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
    4d1a2d136356 mm/memblock: repeat setting reserved region nid if array is doubled
    c0fabecd6510 mm/memblock: pass size instead of end to memblock_set_node()
    dfbaecf7e38f irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
    e51dd7126693 amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
    34b6fa11431a perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
    6a098c51d18e parisc: Fix double SIGFPE crash
    3821cae9bd5a arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
    ddf4e7f0f509 i2c: imx-lpi2c: Fix clock count when probe defers
    78cf306f7214 EDAC/altera: Set DDR and SDMMC interrupt mask before registration
    726641633413 EDAC/altera: Test the correct error reg offset
    126f5c6e0cb8 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
    94808275aa6c drm/fdinfo: Protect against driver unbind
    b364ee98aca9 btrfs: fix COW handling in run_delalloc_nocow()
    3ac18e0a94c1 ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
    f73ecbfa78ce ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
    fd1aeef3e9c7 Revert "rndis_host: Flag RNDIS modems as WWAN devices"
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: f6a1bfbf070c357eab8f148ac99812718ec91cf1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
7731f673c3 linux-yocto/6.6: update to v6.6.89
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    71e4ec9b2abc Linux 6.6.89
    20bab4eb1c7c objtool: Silence more KCOV warnings, part 2
    014a761be083 objtool: Ignore end-of-section jumps for KCOV/GCOV
    26084aa1a143 nvme: fixup scan failure for non-ANA multipath controllers
    17d41d0f3a26 MIPS: cm: Fix warning if MIPS_CM is disabled
    eee19a803731 net: dsa: mv88e6xxx: enable STU methods for 6320 family
    cd17c8638d21 net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
    13685484072a net: dsa: mv88e6xxx: enable PVT for 6321 switch
    bfbd730e100b net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
    551667f99bcf ext4: goto right label 'out_mmap_sem' in ext4_setattr()
    ffe79cc6c71d comedi: jr3_pci: Fix synchronous deletion of timer
    c4312c4d244a vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
    abe56be73eb1 driver core: fix potential NULL pointer dereference in dev_uevent()
    a55111066205 driver core: introduce device_set_driver() helper
    d29c2d53357f Revert "drivers: core: synchronize really_probe() and dev_uevent()"
    0fd13033d4e7 x86/pvh: Call C code via the kernel virtual mapping
    2b4479eb462e spi: spi-imx: Add check for spi_imx_setupxfer()
    459098685edf md/raid1: Add check for missing source disk in process_checks()
    41866aa93d2e x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
    aa0cf04b6959 ubsan: Fix panic from test_ubsan_out_of_bounds
    96ae4c19ed71 spi: tegra210-quad: add rate limiting and simplify timeout error message
    0134e326abc3 spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
    6c2e136ffd05 loop: aio inherit the ioprio of original request
    f0209397ed2c riscv: Provide all alternative macros all the time
    ce7e04d26a35 iomap: skip unnecessary ifs_block_is_uptodate check
    bb7878cca969 x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
    a862d24e1fc3 scsi: pm80xx: Set phy_attached to zero when device is gone
    4cdb02e9f963 scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
    fa99f1886e0a scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
    a8550ac19d46 ext4: make block validity check resistent to sb bh corruption
    ea92c93887f5 cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
    dc18c5b1301a timekeeping: Add a lockdep override in tick_freeze()
    e5208da73954 cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
    f444c139e820 nvmet-fc: put ref when assoc->del_work is already scheduled
    e45e8f0dd324 nvmet-fc: take tgtport reference only once
    0cad1849e903 x86/bugs: Don't fill RSB on context switch with eIBRS
    b73c62b1ca43 x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
    19160ed5e5fa x86/bugs: Use SBPB in write_ibpb() if applicable
    84b52a6cd012 selftests/mincore: Allow read-ahead pages to reach the end of the file
    4978a798a38d gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
    18082da6ce0e objtool: Stop UNRET validation on UD2
    0cf5fd802452 nvme: multipath: fix return value of nvme_available_path
    60ed102378a3 nvme: re-read ANA log page after ns scan completes
    4c97ba1b0b98 ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
    fcf524eaff20 ACPI: EC: Set ec_no_wakeup for Lenovo Go S
    fe063491e90d nvme: requeue namespace scan on missed AENs
    892fcde9941d xen: Change xen-acpi-processor dom0 dependency
    1fe9b92eede3 perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
    eee189ccd46b selftests: ublk: fix test_stripe_04
    b2ff4e9c599b udmabuf: fix a buf size overflow issue during udmabuf creation
    6234a3c72784 KVM: s390: Don't use %pK through debug printing
    1b2c45697f43 KVM: s390: Don't use %pK through tracepoints
    b205d02726b3 sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
    c5d4d103005d io_uring: always do atomic put from iowq
    7e9b836182c1 rtc: pcf85063: do a SW reset if POR failed
    a68768e280b7 9p/net: fix improper handling of bogus negative read/write replies
    04ebabdbe99d ntb_hw_amd: Add NTB PCI ID for new gen CPU
    27f6ee168c00 ntb: reduce stack usage in idt_scan_mws
    5d53e88d8370 qibfs: fix _another_ leak
    db437e985469 objtool, lkdtm: Obfuscate the do_nothing() pointer
    11c16b644934 objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
    547695db502c objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
    4ab980b5c309 objtool, panic: Disable SMAP in __stack_chk_fail()
    97f70d27bee2 objtool: Silence more KCOV warnings
    d5ada7bf3dc8 thunderbolt: Scan retimers after device router has been enumerated
    e59fc484d424 usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
    cfa7984f6935 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
    8b26eb1d8bb2 usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
    2c6a11eaec65 dmaengine: dmatest: Fix dmatest waiting less when interrupted
    5be9407b41ea sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
    a7f9991e4e3c usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
    e5aabc76d101 usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
    db56636beb3e fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
    46a150788e16 usb: host: max3421-hcd: Add missing spi_device_id table
    1a0a2d8c6d77 mailbox: pcc: Always clear the platform ack interrupt first
    a6e3026e0ad6 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
    10cf3135c6dc bpf: Reject attaching fexit/fmod_ret to __noreturn functions
    4ed42d1a4a5b bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
    c487fcc632e7 bpf: bpftool: Setting error code in do_loader()
    7f30987294b7 s390/tty: Fix a potential memory leak bug
    28e5a867aa54 s390/sclp: Add check for get_zeroed_page()
    96eab3c96a24 parisc: PDT: Fix missing prototype warning
    51ae5b7aa96c clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
    b5a528a34e1f bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
    1b66a5920b7f crypto: null - Use spin lock instead of mutex
    d999b11302c4 crypto: ccp - Add support for PCI device 0x1134
    02f53b8f2ffc MIPS: cm: Detect CM quirks from device tree
    979ba0d694ea pinctrl: renesas: rza2: Fix potential NULL pointer dereference
    9c97886f8085 USB: wdm: add annotation
    4b0369c53088 USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
    54f7f8978af1 USB: wdm: close race between wdm_open and wdm_wwan_port_stop
    8312053acc99 USB: wdm: handle IO errors in wdm_wwan_port_start
    e455bf315eee USB: VLI disk crashes if LPM is used
    097d3c27f871 usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
    57beab8ea4ff usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
    127b6aba32d8 usb: dwc3: xilinx: Prevent spike in reset signal
    c4d80e41cb42 usb: dwc3: gadget: check that event count does not exceed event buffer length
    6a91a198cd30 USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
    23d4bb3b0698 usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
    15120673da69 usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
    121e9f80ea54 usb: chipidea: ci_hdrc_imx: fix usbmisc handling
    48a62deb857f usb: cdns3: Fix deadlock when using NCM gadget
    142273a49f2c usb: xhci: Fix invalid pointer dereference in Etron workaround
    01eeddf93a8a USB: serial: simple: add OWON HDS200 series oscilloscope support
    51d4b23ae5e6 USB: serial: option: add Sierra Wireless EM9291
    c6dc3b71bd4b USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
    3b377f805e97 serial: sifive: lock port in startup()/shutdown() callbacks
    c2af265beab7 serial: msm: Configure correct working mode before starting earlycon
    5d5e8a880c48 misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
    62957f58ab3a misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
    5f253cc40e8d char: misc: register chrdev region with all possible minors
    3481fd96d801 KVM: x86: Reset IRTE to host control if *new* route isn't postable
    9514202882a0 KVM: x86: Explicitly treat routing entry type changes as changes
    ac0fe095ac21 mei: me: add panther lake H DID
    164bc7e26d89 scsi: Improve CDL control
    4c2de359b1a2 USB: storage: quirk for ADATA Portable HDD CH94
    ff733a91a06b ata: libata-scsi: Fix ata_msense_control_ata_feature()
    f0a1b054871f ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
    f92d5d7134d1 ata: libata-scsi: Improve CDL control
    96838eb1836f mcb: fix a double free bug in chameleon_parse_gdd()
    406ca74adea0 cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
    ff826d60d9a8 KVM: SVM: Allocate IR data using atomic allocation
    b675b4c863f1 io_uring: fix 'sync' handling of io_fallback_tw()
    20a3f73dd424 LoongArch: Remove a bogus reference to ZONE_DMA
    2ca9380b1271 LoongArch: Return NULL from huge_pte_offset() for invalid PMD
    2f2803e4b5e4 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
    3d36fae38312 drm/amd/display: Force full update in gpu reset
    253827297c4d drm/amd/display: Fix gpu reset in multidisplay config
    689d5be94faa net: phy: microchip: force IRQ polling mode for lan88xx
    a7b8358eb403 net: selftests: initialize TCP header and skb payload with zero
    cefd8a2e2de4 xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
    284db2f35b39 crypto: atmel-sha204a - Set hwrng quality to lowest possible
    ad787442af7b virtio_console: fix missing byte order handling for cols and rows
    b74fb07153dc LoongArch: Make do_xyz() exception handlers more robust
    eaa0849818eb LoongArch: Make regs_irqs_disabled() more clear
    5767f4ac6428 LoongArch: Select ARCH_USE_MEMTEST
    cd5970e001f7 perf/x86: Fix non-sampling (counting) events on certain x86 platforms
    9e0d94a29222 splice: remove duplicate noinline from pipe_clear_nowait
    415f3481ca76 iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
    1d7c4b2b0bbf pds_core: make wait_context part of q_info
    c918ce100d17 pds_core: Remove unnecessary check in pds_client_adminq_cmd()
    cdd784c96fe2 pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
    49083dc3cbb3 net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
    76c4c22c2437 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
    3aa852e36050 net_sched: hfsc: Fix a UAF vulnerability in class handling
    4f435c1f4c48 fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
    e9f67da07753 net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
    dd6cb0a8575b tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
    618541a6cc15 net: phy: leds: fix memory leak
    d5093d6486d7 net: lwtunnel: disable BHs when required
    4d6919dd7c69 scsi: core: Clear flags for scsi_cmnd that did not complete
    4a1b61f91078 btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
    1845e03ea787 cpufreq: cppc: Fix invalid return value in .get() callback
    d6979fabe812 scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
    19e0eaa62e88 cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
    ea834c90aa7c cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
    1053dcf8a504 cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
    92d55d705183 dma/contiguous: avoid warning about unused size_bytes
    f55e7f8abbd3 ceph: Fix incorrect flush end position calculation
    d70c078c26c0 cpufreq/sched: Explicitly synchronize limits_changed flag handling
    ada8d7fa0ad4 sched/cpufreq: Rework schedutil governor performance estimation
    7fc781ca938f sched/topology: Consolidate and clean up access to a CPU's max compute capacity
    485104cd6353 scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
    bd2a352a0d72 PCI: Fix reference leak in pci_register_host_bridge()
    81435b85b2eb of: resolver: Fix device node refcount leakage in of_resolve_phandles()
    f549a4d2e029 of: resolver: Simplify of_resolve_phandles() using __free()
    9549391bb64b clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
    3b6f9b555d5b clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
    d56be1857909 clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
    a15ff92d5f06 clk: renesas: rzg2l: Refactor SD mux driver
    1b9daac2383e clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
    2e1162149b39 clk: renesas: rzg2l: Add struct clk_hw_data
    aa487374d7f6 clk: renesas: rzg2l: Use u32 for flag and mux_flags
    e56acd53a91a arm64: tegra: Remove the Orin NX/Nano suspend key
    6f21dfc4fadb iio: adc: ad7768-1: Fix conversion result sign
    28aadcb759cf iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
    8df02691d09e ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
    175cb0c28aea ASoC: qcom: Fix trivial code style issues
    9f5d3022d8ca ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
    0addfbfd605b ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
    860c028415d9 ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
    9973c8192e07 net: dsa: mv88e6xxx: fix VTU methods for 6320 family
    70d2b16cdd12 net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
    83c12c052cf5 auxdisplay: hd44780: Fix an API misuse in hd44780.c
    ab239a12fdb2 auxdisplay: hd44780: Convert to platform remove callback returning void
    880b1c98d1b4 mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
    d4f5f29c26a1 soc: qcom: ice: introduce devm_of_qcom_ice_get
    a505075730d2 media: vimc: skip .s_stream() for stopped entities
    a64a102e01eb media: subdev: Add v4l2_subdev_is_streaming()
    2b3dc697a465 media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
    beeeea11ee2a media: subdev: Fix use of sd->enabled_streams in call_s_stream()
    4d11fac941d8 tracing: Verify event formats that have "%*p.."
    e13358c4884d tracing: Add __print_dynamic_array() helper
    896e30f76840 tracing: Add __string_len() example
    5724654a084f x86/mce: use is_copy_from_user() to determine copy-from-user context
    415620362062 x86/extable: Remove unused fixup type EX_TYPE_COPY
    247395cbec42 module: sign with sha512 instead of sha1 by default
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 85e4fc3931465b18f53db6078a71d46b9f63869f)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
613f1b0e7a linux-yocto/6.6: update to v6.6.88
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    23ec0b405729 Linux 6.6.88
    e7144dae6bba ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
    03af77aa9c03 drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
    b6b77ca4c980 btrfs: fix the length of reserved qgroup to free
    81faa5bfba73 MIPS: ds1287: Match ds1287_set_base_clock() function types
    1dab036557e6 MIPS: cevt-ds1287: Add missing ds1287.h include
    9cac3ed9ca51 MIPS: dec: Declare which_prom() as static
    2eb70f54ad86 sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
    f8dafdafddcf sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
    1e2d849efc32 sign-file,extract-cert: move common SSL helper functions to a header
    202bca49b7f9 xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
    0a721f240a68 nvmet-fc: Remove unused functions
    efde4462b321 landlock: Add the errata interface
    c84632096722 drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
    31ff06b4a8a8 wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
    48128f54f572 wifi: rtw89: pci: add pre_deinit to be called after probe complete
    84464db2ec2a btrfs: fix qgroup reserve leaks in cow_file_range
    e8336d3c9ab7 usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
    0e66fd8e5a2e usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
    37491e1dbb50 LoongArch: Eliminate superfluous get_numa_distances_cnt()
    1f1feff02e9d powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
    427036030f4d nvme-rdma: unquiesce admin_q before destroy it
    6f8d51051d80 x86/split_lock: Fix the delayed detection logic
    29f040d4efb0 x86/tdx: Fix arch_safe_halt() execution for TDX VMs
    e5f0581ecb2a x86/xen: fix memblock_reserve() usage on PVH
    fa1103f21b7a x86/xen: move xen_reserve_extra_memory()
    dafbcfb8ffe6 efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
    4f687721a981 Fix mmu notifiers for range-based invalidates
    da210d4f884f misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
    9d8d2899c5b9 misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
    5a4b71812132 misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
    11a2f91f1844 selftests: mptcp: add mptcp_lib_wait_local_port_listen
    392dfed4af72 mptcp: sockopt: fix getting freebind & transparent
    d69a23d8e925 md: fix mddev uaf while iterating all_mddevs list
    9b1f50da6054 kbuild: Add '-fno-builtin-wcslen'
    8c8d0e800044 cpufreq: Reference count policy in cpufreq_update_limits()
    7e2449ee6693 io_uring/net: fix accept multishot handling
    3184297d6ff0 drm/i915/gvt: fix unterminated-string-initialization warning
    3309feab2b26 drm/sti: remove duplicate object names
    31e94c798957 drm/nouveau: prime: fix ttm_bo_delayed_delete oops
    ae73db71a2a1 drm/amdgpu/dma_buf: fix page_link check
    068091b79648 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
    c3ff73e3bddf drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
    b0742a709be7 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
    de2cba068c9c drm/amd/pm/smu11: Prevent division by zero
    587de3ca7875 drm/amd/pm/powerplay: Prevent division by zero
    509617407411 drm/amd/pm: Prevent division by zero
    d189b32f9dd8 drm/amd: Handle being compiled without SI or CIK support better
    42c2525bc0a8 drm/msm/a6xx: Fix stale rpmh votes from GPU
    31330248abad drm/repaper: fix integer overflows in repeat functions
    0df68b586020 perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
    9686a16c35ef perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
    aea923afeae4 perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
    196a4eecb87b perf/x86/intel: Allow to update user space GPRs from PEBS records
    c2b169fc7a12 RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
    064dc7a70cec scsi: ufs: exynos: Ensure consistent phy reference counts
    92d8a4e6217e scsi: megaraid_sas: Block zero-length ATA VPD inquiry
    bbb6b149c339 x86/boot/sev: Avoid shared GHCB page for early memory acceptance
    5e036349bb01 x86/cpu/amd: Fix workaround for erratum 1054
    971ba6a64c53 x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
    f6ec52710dc5 virtiofs: add filesystem context source name check
    89baf6bbe6b6 tracing: Fix filter string testing
    596cbe632068 string: Add load_unaligned_zeropad() code path to sized_strscpy()
    d5421baa0e15 smb3 client: fix open hardlink on deferred close file error
    607723b13a0c selftests/mm: generate a temporary mountpoint for cgroup filesystem
    e0e1b00208ec riscv: Avoid fortify warning in syscall_get_arguments()
    8dbf06048023 Revert "smb: client: fix TCP timers deadlock after rmmod"
    fd8973b625b6 Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"
    b7ce8db49028 ksmbd: fix the warning from __kernel_write_iter
    160935d81f2c ksmbd: Prevent integer overflow in calculation of deadtime
    296cb5457cc6 ksmbd: fix use-after-free in smb_break_all_levII_oplock()
    1db2451de23e ksmbd: Fix dangling pointer in krb_authenticate
    0874b629f653 ovl: don't allow datadir only
    23385f567b03 mm: fix apply_to_existing_page_range()
    c3b3987bae52 mm: fix filemap_get_folios_contig returning batches of identical folios
    006b67ac6131 mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
    2912683a104e loop: LOOP_SET_FD: send uevents for partitions
    f8530400f21c loop: properly send KOBJ_CHANGED uevent for disk device
    952e7a7e317f isofs: Prevent the use of too small fid
    e89bf1311d44 i2c: cros-ec-tunnel: defer probe if parent EC is not present
    9f77aa584a65 hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
    8a53d36ba10b crypto: caam/qi - Fix drv_ctx refcount bug
    78b1126ca42b btrfs: correctly escape subvol in btrfs_show_options()
    ab46314a4e90 Bluetooth: vhci: Avoid needless snprintf() calls
    600a099bec16 Bluetooth: l2cap: Process valid commands in too long frame
    0a6c0fc1f83f ftrace: fix incorrect hash size in register_ftrace_direct()
    42203e004d8e i2c: atr: Fix wrong include
    7d192e27a431 nfsd: decrease sc_count directly if fail to queue dl_recall
    b699aeb91b10 nfs: add missing selections of CONFIG_CRC32
    e446b60a2be1 asus-laptop: Fix an uninitialized variable
    a12c14577882 ASoC: qcom: Fix sc7280 lpass potential buffer overflow
    bf39a185a626 ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
    444139d6c43b ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
    3d6102ae330a Revert "PCI: Avoid reset when disabled via sysfs"
    411b7005f4e8 writeback: fix false warning in inode_to_wb()
    404faab1dd6b cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
    d217f7a82291 riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
    ba433e6c1002 riscv: KGDB: Do not inline arch_kgdb_breakpoint()
    ec95d0dfc672 kunit: qemu_configs: SH: Respect kunit cmdline
    d7c65ecad959 riscv: Properly export reserved regions in /proc/iomem
    a2874f0dff63 net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
    d853feb79d7e net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
    7891619d21f0 net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
    8b9808b1f64e net: ti: icss-iep: Add phase offset configuration for perout signal
    d64a7166fd12 net: ti: icss-iep: Add pwidth configuration for perout signal
    06ec3c18810f ptp: ocp: fix start time alignment in ptp_ocp_signal_set
    c7ee467f29a8 net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
    fb12b460ec46 net: dsa: free routing table on probe failure
    86c6613a69bc net: dsa: clean up FDB, MDB, VLAN entries on unbind
    afae90873014 net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
    bbb80f004f7a net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
    0f0284285ad3 net: bridge: switchdev: do not notify new brentries as changed
    c9dbc7ec442f net: b53: enable BPDU reception for management port
    2315cfaf4782 netlink: specs: rt-link: adjust mctp attribute naming
    2f6e52cab1d4 netlink: specs: rt-link: add an attr layer around alt-ifname
    08aa59c0be76 cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
    e729dd9602e3 ata: libata-sata: Save all fields from sense data descriptor
    94d5809c7fa8 net: ethernet: ti: am65-cpsw: fix port_np reference counting
    422b7b9d1362 net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
    7c2b66a31c7a net: ngbe: fix memory leak in ngbe_probe() error path
    824a7c2df512 net: openvswitch: fix nested key length validation in the set() action
    549cbbd14bbe block: fix resource leak in blk_register_queue() error path
    a8a3b61ce140 net: mctp: Set SOCK_RCU_FREE
    9027e0735670 pds_core: fix memory leak in pdsc_debugfs_add_qcq()
    86dc3a05fa70 test suite: use %zu to print size_t
    b45b7a0bb88f igc: add lock preventing multiple simultaneous PTM transactions
    d8dde48a1ca6 igc: cleanup PTP module if probe fails
    bcb2d6bfa5e2 igc: handle the IGC_PTP_ENABLED flag correctly
    5262d34f5e40 igc: move ktime snapshot into PTM retry loop
    b1f3e69dc984 igc: increase wait time before retrying PTM
    16194ca3f3b4 igc: fix PTM cycle trigger logic
    6f1ac9b5a9ce Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9e3114958d87 Bluetooth: l2cap: Check encryption key size on incoming connection
    3db6605043b5 Bluetooth: btrtl: Prevent potential NULL dereference
    fd1621f38fbe Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
    ae470d06320d RDMA/core: Silence oversized kvmalloc() warning
    d1d6fa08b1ef ASoC: cs42l43: Reset clamp override on jack removal
    efeddd8acecf RDMA/hns: Fix wrong maximum DMA segment size
    344baf8c1fb1 RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
    4f7b6029ae8e ovl: remove unused forward declaration
    aaa93b884610 ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
    4a655ba2830a ASoC: dwc: always enable/disable i2s irqs
    0b5390aeaa85 md/md-bitmap: fix stats collection for external bitmaps
    f10aa9bc94de md/raid10: fix missing discard IO accounting
    b0348f33940f scsi: iscsi: Fix missing scsi_host_put() in error path
    4a43fd367106 wifi: wl1251: fix memory leak in wl1251_tx_work
    c74b84544dee wifi: mac80211: Purge vif txq in ieee80211_do_stop()
    7fa75affe2a9 wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
    7ca513631fa6 wifi: at76c50x: fix use after free access in at76_disconnect
    a70ea9296419 scsi: hisi_sas: Enable force phy when SATA disk directly connected
    58eb29dba712 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
    02e1bcdfdf76 Bluetooth: hci_uart: Fix another race during initialization
    fa43166f2e8b media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
    5029c8f2d7ea x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
    bf56f45b167e iommufd: Fail replace if device has not been attached
    e5eadb652014 ACPI: platform-profile: Fix CFI violation when accessing sysfs files
    8d25a8e275bb x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
    4117975672c4 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
    d784cb189035 selftests: mptcp: fix incorrect fd checks in main_loop
    970688e64df9 selftests: mptcp: close fd_in before returning in main_loop
    0d527afa7698 pinctrl: qcom: Clear latched interrupt status when changing IRQ type
    d11839156653 phy: freescale: imx8m-pcie: assert phy reset and perst in power off
    6176fa57dd30 PCI: Fix reference leak in pci_alloc_child_bus()
    1fea7726276e PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
    468773325ec1 of/irq: Fix device node refcount leakages in of_irq_init()
    b48732849dbb of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
    eac3d34101ab of/irq: Fix device node refcount leakages in of_irq_count()
    37ff581ddfea of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
    77e3fd880376 of/irq: Fix device node refcount leakage in API of_irq_parse_one()
    6ea67933af7c ntb: use 64-bit arithmetic for the MSI doorbell mask
    8a3df0aa1087 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
    8cb249d56e63 KVM: x86: Explicitly zero-initialize on-stack CPUID unions
    504464fd01dc gve: handle overflow when reporting TX consumed descriptors
    bbc702d73f71 gpio: zynq: Fix wakeup source leaks on device unbind
    4009ad6c7695 gpio: tegra186: fix resource handling in ACPI probe path
    5d336ac215e5 ftrace: Add cond_resched() to ftrace_graph_set_hash()
    2eec9e2eb6e3 dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
    39cf18f8ec42 dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
    f46260c3dd44 dm-verity: fix prefetch-vs-suspend race
    7958b71d8baa dm-integrity: set ti->error on memory allocation failure
    841ca9e9224c dm-ebs: fix prefetch-vs-suspend race
    5baddc08066a crypto: ccp - Fix check for the primary ASP device
    ecc44297ac4c clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
    fe25487f2dd1 clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
    1be6fe9527b1 clk: qcom: gdsc: Release pm subdomains in reverse add order
    541c1a5554ee clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
    5569a2c55780 cifs: Ensure that all non-client-specific reparse points are processed by the server
    b350dab6d4f4 cifs: fix integer overflow in match_server()
    864ba5c651b0 cifs: avoid NULL pointer dereference in dbg call
    f75eb9acf9df thermal/drivers/rockchip: Add missing rk3328 mapping entry
    233b9cef917c tracing: Do not add length to print format in synthetic events
    8d4750f06359 x86/xen: fix balloon target initialization for PVH dom0
    c6fefcb71d24 sctp: detect and prevent references to a freed transport in sendmsg
    b5681a8b997e mm/hugetlb: move hugetlb_sysctl_init() to the __init section
    94b3a19cedb3 mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
    0b83b941d387 mm/userfaultfd: fix release hang over concurrent GUP
    376183178f42 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
    e351ffc48b5e mm/mremap: correctly handle partial mremap() of VMA starting at 0
    f4bc11b3c55f mm: fix lazy mmu docs and usage
    402769cde5eb mm: make page_mapped_in_vma() hugetlb walk aware
    e09661ac0b84 mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
    70ec7d13bbd4 sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
    b266dd4d2256 sparc/mm: disable preemption in lazy mmu mode
    e02c44b6ecfd iommufd: Fix uninitialized rc in iommufd_access_rw()
    e921fce3a295 btrfs: zoned: fix zone finishing with missing devices
    fa55f2a31ba2 btrfs: zoned: fix zone activation with missing devices
    897ad7f70dd7 btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
    1c82f5a393d8 backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
    c8fa7ffc1c23 arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
    8db1206d834b arm64: mm: Correct the update of max_pfn
    bfbbef7f1d38 mtd: rawnand: Add status chack in r852_ready()
    7772621041ee mtd: inftlcore: Add error check for inftl_read_oob()
    29b21145721a mptcp: only inc MPJoinAckHMacFailure for HMAC failures
    7f9ae060ed64 mptcp: fix NULL pointer in can_accept_new_subflow
    8ddd124f8a9e lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
    8385532d4dd4 locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
    388ba8781616 mailbox: tegra-hsp: Define dimensioning masks in SoC data
    ea07760676bb mfd: ene-kb3930: Fix a potential NULL pointer dereference
    b20ec02fcb34 leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
    5d97ee4d8d61 leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
    c88f7328bb0f jbd2: remove wrong sb->s_sequence check
    6871a676aa53 i3c: Add NULL pointer check in i3c_master_queue_ibi()
    c3250bdf5da9 i3c: master: svc: Use readsb helper for reading MDB
    b00b040abfbb smb311 client: fix missing tcon check when mounting with linux/posix extensions
    5f80fd2ff8bf soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
    1404dff1e11b tpm: do not start chip while suspended
    a64d8972f00f udf: Fix inode_getblk() return value
    a5434db74bf2 vdpa/mlx5: Fix oversized null mkey longer than 32bit
    a5464ac3eeff f2fs: fix to avoid atomicity corruption of atomic file
    2eeb1085bf7b ext4: fix off-by-one error in do_split
    5f084993c90d bus: mhi: host: Fix race between unprepare and queue_buf
    7e439ff5efab ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
    7ed8f978a894 ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
    b860a99800bc ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
    176e7c9a0f62 ASoC: q6apm: add q6apm_get_hw_pointer helper
    35c4a652d833 io_uring/kbuf: reject zero sized provided buffers
    21b0c54546d6 wifi: mac80211: fix integer overflow in hwmp_route_info_get()
    f86e2d083753 wifi: mt76: Add check for devm_kstrdup()
    f304da692876 clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
    ce6cabc080c1 mtd: Replace kcalloc() with devm_kcalloc()
    64baf646846e net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
    7a083ad29fd4 mtd: Add check for devm_kcalloc()
    92b68442790f mptcp: sockopt: fix getting IPV6_V6ONLY
    8a19d34f1e0a media: i2c: imx219: Rectify runtime PM handling in probe and remove
    05b07e52a0d0 media: venus: hfi_parser: refactor hfi packet parsing logic
    d4d88ece4ba9 media: venus: hfi_parser: add check to avoid out of bound access
    28bdf7b9140a media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
    f249c05416ea media: i2c: ov7251: Set enable GPIO low in probe
    86c20c4ebc91 media: i2c: ccs: Set the device's runtime PM status correctly in probe
    2f282e88c2aa media: i2c: ccs: Set the device's runtime PM status correctly in remove
    c3d68e38aa04 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
    571a1873da47 media: platform: stm32: Add check for clk_enable()
    bedb5a7b9783 media: visl: Fix ERANGE error when setting enum controls
    3eaf580cbaa3 media: streamzap: prevent processing IR data on URB failure
    3fcff11317b2 tpm, tpm_tis: Fix timeout handling when waiting for TPM status
    9bd51723ab51 mtd: rawnand: brcmnand: fix PM resume warning
    b8e772e2d8b3 spi: cadence-qspi: Fix probe on AM62A LP SK
    5085e02362b9 KVM: arm64: Tear down vGIC on failed vCPU creation
    db8a657980e7 arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
    3ca6b0c9171b arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
    1577657f5efc arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
    892d24d7e355 arm64: cputype: Add MIDR_CORTEX_A76AE
    9da005f88418 xenfs/xensyms: respect hypervisor's "next" indication
    192b87608c2c media: siano: Fix error handling in smsdvb_module_init()
    3e7fc0606e71 media: vim2m: print device name after registering device
    40084302f639 media: venus: hfi: add check to handle incorrect queue size
    5af611c70fb8 media: venus: hfi: add a check to handle OOB in sfr region
    259dafed1879 media: i2c: adv748x: Fix test pattern selection mask
    8895a7af8452 media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
    fd7bb97ede48 media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
    39cb5a29cd60 dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
    480faed292f2 ext4: don't treat fhandle lookup of ea_inode as FS corruption
    d5cba7730d76 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
    0e1816d8c277 pwm: fsl-ftm: Handle clk_get_rate() returning 0
    d837f37cd4d9 pwm: rcar: Improve register calculation
    8ddbec73ea25 pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
    a0171967abdd tpm, tpm_tis: Workaround failed command reception on Infineon devices
    16fae241f49a ktest: Fix Test Failures Due to Missing LOG_FILE Directories
    14345d5d7db7 tracing: probe-events: Add comments about entry data storing code
    fda15c5b96b8 fbdev: omapfb: Add 'plane' value check
    3ab9cd2d2e9a drm/amdgpu: grab an additional reference on the gang fence v2
    13e5148f70e8 PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
    f8693e1bae9c drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
    988705e558f0 drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
    50967df6e4d2 drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
    a36f8d544522 drm/amdkfd: debugfs hang_hws skip GPU with MES
    864d739fbc72 drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
    89af6b39f028 drm/amdkfd: Fix mode1 reset crash issue
    06a1db4cb7ac drm/amdkfd: clamp queue size to minimum
    61d1a8296eeb drivers: base: devres: Allow to release group on device release
    100cf2fa0140 drm/bridge: panel: forbid initializing a panel with unknown connector type
    1e27e6050c8c drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
    49ef9e47e72b drm: panel-orientation-quirks: Add new quirk for GPD Win 2
    118f95e3ff6c drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
    14dc15279512 drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
    bfea2e6f0305 drm: panel-orientation-quirks: Add support for AYANEO 2S
    d74554965cac drm/amd/display: add workaround flag to link to force FFE preset
    2528ccb0f2fc drm/amd/display: Update Cursor request mode to the beginning prefetch always
    f5b168c309a7 drm: allow encoder mode_set even when connectors change for crtc
    fb95ab35d0e1 Bluetooth: qca: simplify WCN399x NVM loading
    806464634e7f Bluetooth: hci_uart: fix race during initialization
    e711501970a0 tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
    d537859e56bc net: vlan: don't propagate flags on open
    efd75512e38a wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
    e4d1ca0a84a6 scsi: st: Fix array overflow in st_setup()
    06f20cd706d7 cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
    362a90cecd36 ext4: ignore xattrs past end
    b7cc9e3adfee Revert "f2fs: rebuild nat_bits during umount"
    1dbece9c2fbc ext4: protect ext4_release_dquot against freezing
    1263713795d0 ahci: add PCI ID for Marvell 88SE9215 SATA Controller
    8b5e5aac44fe f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
    7f1d986da5c6 wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
    da3ba4a44e96 net: sfp: add quirk for 2.5G OEM BX SFP
    7568e5e4486d ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
    cc0bc4cb62ce jfs: add sanity check for agwidth in dbMount
    b3c4884b987e jfs: Prevent copying of nlink with value 0 from disk inode
    7ccf3b352745 fs/jfs: Prevent integer overflow in AG size calculation
    a14b2592a7a7 fs/jfs: cast inactags to s64 to prevent potential overflow
    067347e00a3a jfs: Fix uninit-value access of imap allocated in the diMount() function
    95f17738b86f page_pool: avoid infinite loop to schedule delayed worker
    809bf3a7d05d net: usb: asix_devices: add FiberGecko DeviceID
    4ae2e891552e scsi: target: spc: Fix RSOC parameter data header size
    4fc5c17538cb f2fs: don't retry IO for corrupted data scenario
    2c512f2eadab wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
    b3e04472a87b ASoC: amd: yc: update quirk data for new Lenovo model
    01529e60ae14 ASoC: amd: Add DMI quirk for ACP6X mic support
    63f516088870 ALSA: usb-audio: Fix CME quirk for UF series keyboards
    0932950d3a3f mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
    035c6e60074f media: uvcvideo: Add quirk for Actions UVC05
    bd095d3a9dff ASoC: fsl_audmix: register card device depends on 'dais' property
    1d91458b126e ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
    fb44392bd5a4 ALSA: hda: intel: Fix Optimus when GPU has no sound
    be706a48bb78 HID: pidff: Fix null pointer dereference in pidff_find_fields
    4d5bcca217ae HID: pidff: Add PERIODIC_SINE_ONLY quirk
    c1fde337b317 HID: Add hid-universal-pidff driver and supported device ids
    fd6055c1a103 HID: pidff: Add FIX_WHEEL_DIRECTION quirk
    123e94f66d2a HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
    b2f378891cb2 HID: pidff: Add PERMISSIVE_CONTROL quirk
    1830b4166f01 HID: pidff: Add MISSING_PBO quirk and its detection
    bf284760372b HID: pidff: Add MISSING_DELAY quirk and its detection
    a08ee3c7eeca HID: pidff: Do not send effect envelope if it's empty
    520e0371d1dc HID: pidff: Convert infinite length from Linux API to PID standard
    4a29465fbe60 ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
    1e5b04f08e52 zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
    af71db7de067 xen/mcelog: Add __nonstring annotations for unterminated strings
    150d1cbdf781 arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
    f14d29b89186 perf: arm_pmu: Don't disable counter in armpmu_add()
    c7dec3461275 x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
    8449fd2a1433 x86/ia32: Leave NULL selector values 0~3 unchanged
    d0f4b75a8f96 x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
    942a4b97fc77 pm: cpupower: bench: Prevent NULL dereference on malloc failure
    4ec80a68733f umount: Allow superblock owners to force umount
    323960a187a9 fs: consistently deref the files table with rcu_dereference_raw()
    6abd09bed43b iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
    90cdd7e5a484 nft_set_pipapo: fix incorrect avx2 match of 5th field octet
    fbaffe8bccf1 net: ppp: Add bound checking for skb data on ppp_sync_txmung
    6509e2e17d32 ipv6: Align behavior across nexthops during path selection
    d2718324f9e3 net_sched: sch_sfq: move the limit validation
    00d44fe29e75 net_sched: sch_sfq: use a temporary work area for validating configuration
    a8008b975890 nvmet-fcloop: swap list_add_tail arguments
    9f5ef4a5eaa6 drm/i915/huc: Fix fence not released on early probe errors
    44984339d38e ata: sata_sx4: Add error handling in pdc20621_i2c_read()
    c17ef974bfcf net: libwx: handle page_pool_dev_alloc_pages error
    9649d08010ff drm/tests: probe-helper: Fix drm_display_mode memory leak
    718a892e2def drm/tests: modes: Fix drm_display_mode memory leak
    cea2c8ace75c drm/tests: cmdline: Fix drm_display_mode memory leak
    742a084c6a9e drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
    0c6550ab45c3 drm/tests: helpers: Fix compiler warning
    85926abafad5 drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
    60f481fdf1e7 drm/tests: Add helper to create mock crtc
    af1dccab386f drm/tests: Add helper to create mock plane
    a31fd0eaf75e drm/tests: helpers: Add atomic helpers
    eceb15bbf6ed drm/tests: modeset: Fix drm_display_mode memory leak
    c5ed0eaddcbd net: ethtool: Don't call .cleanup_data when prepare_data fails
    8b158a0d19ed tc: Ensure we have enough buffer space when sending filter netlink notifications
    28f2cd143b5b net/sched: cls_api: conditional notification of events
    aa258dbf4598 rtnl: add helper to check if a notification is needed
    abd07987f7fe rtnl: add helper to check if rtnl group has listeners
    af4e364fb1c3 octeontx2-pf: qos: fix VF root node parent queue index
    2bcad8fefcec net: tls: explicitly disallow disconnect
    2f9761a94bae codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
    09c2dcda2c55 tipc: fix memory leak in tipc_link_xmit
    ae7e9d29a3c3 objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
    5b09bf6243b0 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
    4d4bf6d6b147 drm/i915: Disable RPG during live selftest
    303d76047514 drm/i915/dg2: wait for HuC load completion before running selftests
    8b2148daa73b drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
    18520ecc3cfa drm/i915/mocs: use to_gt() instead of direct &i915->gt
    58c1e8c569bd selftests/futex: futex_waitv wouldblock test should fail
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: d71c6367029c6c758068daa6ef01044c49d9095c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
09f41bde8e linux-yocto/6.6: update to v6.6.87
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

:ddddddddddddddddddddddddddddddddddddddddddddd
bbbbbbbbbbbb  bbbbbbbbbb
    814637ca257f Linux 6.6.87
    47ee832819f4 tracing: Do not use PERF enums when perf is not defined
    661f09d39a59 NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
    9a81cde8c7ce nfsd: put dl_stid if fail to queue dl_recall
    15483afb930f media: streamzap: fix race between device disconnection and urb callback
    753a620a7f8e exec: fix the racy usage of fs_struct->in_exec
    72a3b5c3d16e jfs: add index corruption check to DT_GETPAGE()
    a8c31808925b jfs: fix slab-out-of-bounds read in ea_get()
    52a5509ab19a ext4: fix OOB read when checking dotdot dir
    d12a6016281a ext4: don't over-report free space or inodes in statvfs
    617a4b0084a5 arm64: Don't call NULL in do_compat_alignment_fixup()
    77029c613fac tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
    fad52c9ae5bd tracing: Fix synth event printk format for str fields
    fc128e85cfc4 tracing: Ensure module defining synth event cannot be unloaded while tracing
    099ef3385800 tracing: Fix use-after-free in print_graph_function_flags during tracer switching
    0e36a3e080d6 ksmbd: validate zero num_subauth before sub_auth is accessed
    3980770cb147 ksmbd: fix session use-after-free in multichannel connection
    a8a8ae303a83 ksmbd: fix use-after-free in ksmbd_sessions_deregister()
    60b7207893a8 ksmbd: add bounds check for create lease context
    8d4848c45943 ksmbd: add bounds check for durable handle context
    68d64f7329a5 mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
    d8d7b50586ec mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
    261f51775ef5 mmc: omap: Fix memory leak in mmc_omap_new_slot
    90bcdefe220a ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
    c90402d2a226 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
    7085895c59e4 x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
    e329d137b076 x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
    67e4ca7ddc67 btrfs: handle errors from btrfs_dec_ref() properly
    99ddb9c58511 kunit/overflow: Fix UB in overflow_allocation_test
    e7f6922c8a5b perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
    79159fbd13f6 perf/x86/intel: Apply static call for drain_pebs
    2e6df032a0b6 ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
    3820d20d51fd platform/x86: ISST: Correct command storage data length
    b1a673850c58 ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
    763f4d638f71 x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
    10edc4cecad4 x86/hyperv: Fix check of return value from snp_set_vmsa()
    7cf8fe2b2bcc LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
    7df2696256a0 LoongArch: BPF: Don't override subprog's return value
    b3ffad2f02db LoongArch: BPF: Fix off-by-one error in build_prologue()
    279ec25c2df4 LoongArch: Increase ARCH_DMA_MINALIGN up to 16
    acacd48a37b5 usbnet:fix NPE during rx_complete
    032c5407a608 drm/amd/display: Check link_index before accessing dc->links[]
    41a2c7abc339 tracing: Correct the refcount if the hist/hist_debug file fails to open
    d24e5e631849 tracing/hist: Support POLLPRI event for poll on histogram
    13edaf997904 tracing/hist: Add poll(POLLIN) support on hist file
    77b7dbd3420e tracing: Switch trace_events_hist.c code over to use guard()
    f568fbe8c603 tracing: Allow creating instances with specified system events
    1913adb58b84 perf/core: Fix child_total_time_enabled accounting bug at task exit
    40316f29b043 drm/amdgpu/gfx11: fix num_mec
    1e458c292f4c net: ibmveth: make veth_pool_store stop hanging
    ececf8eff6c2 arcnet: Add NULL check in com20020pci_probe()
    fa2f9fc35f56 ipv6: Do not consider link down nexthops in path selection
    21f678f672dc ipv6: Start path selection from the first nexthop
    5a2976cc4d9c net: fix geneve_opt length integer overflow
    0ae509b075b2 net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
    fbab7bbf7204 ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
    28d88ee1e1cc netfilter: nft_tunnel: fix geneve_opt type confusion addition
    ccc331fd5bca net: decrease cached dst counters in dst_release
    858695324644 tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
    b0a1055e0a9e vsock: avoid timeout during connect() if the socket is closing
    aeef6456692c udp: Fix memory accounting leak.
    5b0ae1723a7d net: mvpp2: Prevent parser TCAM memory corruption
    864ca690ff13 net_sched: skbprio: Remove overly strict queue assertions
    1927d0bcd5b8 netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
    6134d1ea1e14 netfilter: nf_tables: don't unregister hook when table is dormant
    073b04796c07 netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
    aff1860507ea e1000e: change k1 configuration on MTP and later platforms
    e283a5bf4337 ASoC: imx-card: Add NULL check in imx_card_probe()
    8db65e4432b2 riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
    992678427eff ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
    a59594c370cd x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
    f7a53d32cc60 RISC-V: errata: Use medany for relocatable builds
    b52e13bfd69c ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
    c37616f1521d firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
    830169a5ceeb ntb: intel: Fix using link status DB's
    c61a3f2df162 ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
    2174fa133dcc riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
    239ea3c34673 spufs: fix a leak in spufs_create_context()
    324f280806aa spufs: fix gang directory lifetimes
    90d1b276d1b1 spufs: fix a leak on spufs_new_file() failure
    6e75137ac8de hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
    aaf534ad0720 memory: omap-gpmc: drop no compatible check
    68adc6f17a36 can: statistics: use atomic access in hot path
    2a435a8cb891 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
    05413508bc35 drm/amd: Keep display off while going into S4
    5272e986ea96 nvme-pci: fix stuck reset on concurrent DPC and HP
    d276f4050067 x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
    83fa62a06e40 x86/hyperv: Fix output argument to hypercall that changes page visibility
    e7d8c5703238 locking/semaphore: Use wake_q to wake up processes outside lock critical section
    e87b8f209cb2 wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
    c0863207c012 x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
    0ada80483275 sched/deadline: Use online cpus for validating runtime
    264f9a797c18 ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
    b9fa3901b612 ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA
    4c8865331899 HID: i2c-hid: improve i2c_hid_get_report error message
    64f974466183 platform/x86/intel/vsec: Add Diamond Rapids support
    84d6da6738ba platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
    fa19b53716f9 cifs: fix incorrect validation for num_aces field of smb_acl
    68ee6f71a2a9 perf/core: Fix perf_pmu_register() vs. perf_init_event()
    11e2ae4fe025 ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
    fc424138592a ALSA: hda/realtek: Fix Asus Z13 2025 audio
    54fd5a5b7583 affs: don't write overlarge OFS data block size fields
    9fcab9c72142 affs: generate OFS sequence numbers starting at 1
    ec7315e68d88 wifi: brcmfmac: keep power during suspend if board requires it
    d9189555fbe5 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
    a74dad107e52 nvme-pci: clean up CMBMSC when registering CMB fails
    9ca8c6f6a227 nvme-tcp: fix possible UAF in nvme_tcp_poll
    60856e6cdb3e wifi: iwlwifi: mvm: use the right version of the rate API
    aadb8a9a90c0 wifi: iwlwifi: fw: allocate chained SG tables for dump
    a3160e7f6d90 rcu-tasks: Always inline rcu_irq_work_resched()
    0a0813d1277e context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
    698243234d63 sched/smt: Always inline sched_smt_active()
    7ae00d2903ee objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
    08796bd2389a octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
    aa042c453227 octeontx2-af: Fix mbox INTR handler when num VFs > 64
    f9b61f837eb7 ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
    d32f20470c9e LoongArch: Rework the arch_kgdb_breakpoint() implementation
    37319d6d8540 LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
    8f77c286d5e0 objtool: Fix segfault in ignore_unreachable_insn()
    de37b82be68d ring-buffer: Fix bytes_dropped calculation issue
    17e3c520aeef net/mlx5e: SHAMPO, Make reserved size independent of page size
    4790bcb269e5 ksmbd: fix r_count dec/increment mismatch
    a32086cc6444 ksmbd: fix multichannel connection failure
    1de7fec4d301 ksmbd: use aead_request_free to match aead_request_alloc
    8857aadaecef rndis_host: Flag RNDIS modems as WWAN devices
    15f150771e0e rtnetlink: Allocate vfinfo size for VF GUIDs when supported
    af089264d108 exfat: fix the infinite loop in exfat_find_last_cluster()
    c6b6b8dcef4a smb: client: Fix netns refcount imbalance causing leaks and use-after-free
    d7ca0969bf87 NFS: Shut down the nfs_client only after all the superblocks
    75b42dfe8765 objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
    f2dc3c3b1b85 perf tools: annotate asm_pure_loop.S
    e6fe7f82f3b9 fs/procfs: fix the comment above proc_pid_wchan()
    0a3bf3bc3444 tty: n_tty: use uint for space returned by tty_write_room()
    357c1a3deb1f staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
    769a0f187ba2 perf python: Check if there is space to copy all the event
    88f5dd0002f4 perf python: Don't keep a raw_data pointer to consumed ring buffer space
    6bc0c3e7582c perf python: Decrement the refcount of just created event on failure
    b8e2e2cfa319 perf python: Fixup description of sample.id event member
    9c764db1794e i3c: master: svc: Fix missing the IBI rules
    4ee8160c47e0 um: hostfs: avoid issues on inode number reuse by host
    c9a6cf3fe680 um: remove copy_from_kernel_nofault_allowed
    5e06e6412a73 selftests/mm/cow: fix the incorrect error handling
    db75d49a4107 fuse: fix dax truncate/punch_hole fault path
    4e2a03d766f1 NFSv4: Don't trigger uneccessary scans for return-on-close delegations
    d03ce46090f6 arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
    3d012ba4404a ocfs2: validate l_tree_depth to avoid out-of-bounds access
    8c69e83028bf kexec: initialize ELF lowest address to ULONG_MAX
    4159cb408f8c kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
    fa55abb99de9 perf units: Fix insufficient array space
    8a832ed0f6d6 perf evlist: Add success path to evlist__create_syswide_maps
    1f562f8efa72 iio: adc: ad7124: Fix comparison of channel configs
    a2ae5afa0837 iio: adc: ad4130: Fix comparison of channel setups
    cb7687e37735 dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
    f6d44b1aa46d fs/ntfs3: Prevent integer overflow in hdr_first_de()
    0dfe700fbd35 fs/ntfs3: Fix a couple integer overflows on 32bit systems
    0566a11d5e65 usb: xhci: correct debug message page size calculation
    fe2ada4ed436 perf bench: Fix perf bench syscall loop count
    31ebc5701a82 perf arm-spe: Fix load-store operation checking
    d3f0bad2c43e iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
    2d8c171e6212 iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
    1287c788f33b ucsi_ccg: Don't show failed to get FW build information error
    d2b1ee18c1d3 perf pmu: Don't double count common sysfs and json events
    a8b3879b2e3b coresight-etm4x: add isb() before reading the TRCSTATR
    2b34bdc42df0 vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
    01592ce19138 coresight: catu: Fix number of pages while using 64k pages
    b302c4d3f42a soundwire: slave: fix an OF node reference leak in soundwire slave device
    98fa452d0cf2 isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
    6258b8ac583b perf stat: Fix find_stat for mixed legacy/non-legacy events
    a7bae9f76636 clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
    f2176ab4b30f pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
    75f095daf623 crypto: hisilicon/sec2 - fix for aead auth key length
    b6fc1fdd3e71 x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
    966fdfc45373 leds: Fix LED_OFF brightness race
    d6f517e8d866 mfd: sm501: Switch to BIT() to mitigate integer overflows
    7d8e0ac233d7 pinctrl: renesas: rzv2m: Fix missing of_node_put() call
    7c51a6964b45 RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
    c4db297e8896 crypto: nx - Fix uninitialised hv_nxc on error
    a278a4164bde power: supply: max77693: Fix wrong conversion of charge input threshold value
    02586692acdb x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
    3d39022704e0 clk: amlogic: g12a: fix mmc A peripheral clock
    c6f63ae9b51b clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
    48e5f4fdadd7 selftests/bpf: Select NUMA_NO_NODE to create map
    7061afacc89d clk: amlogic: gxbb: drop non existing 32k clock parent
    b36254e8f865 clk: amlogic: g12b: fix cluster A parent data
    4dc225623804 pinctrl: tegra: Set SFIO mode to Mux Register
    5fa3bfd3d025 IB/mad: Check available slots before posting receive WRs
    1b2641d16167 remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
    667a628ab67d RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
    68438629de34 RDMA/mlx5: Fix calculation of total invalidated pages
    0cf80f924aec RDMA/core: Don't expose hw_counters outside of init net namespace
    02527e62d7ee clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
    622d52c99a91 pinctrl: renesas: rzg2l: Fix missing of_node_put() call
    182ae87e1435 pinctrl: renesas: rza2: Fix missing of_node_put() call
    77461377d3be lib: 842: Improve error handling in sw842_compress()
    43681d603ff0 bpf: Use preempt_count() directly in bpf_send_signal_common()
    8e3e21129cfe remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
    b32da6cf9d4e RDMA/mana_ib: Ensure variable err is initialized
    db6f0b88d772 clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
    4d29a6dcb51e clk: samsung: Fix UBSAN panic in samsung_clk_init()
    b07398e8a5da x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
    22280deb312f selftests/bpf: Fix string read in strncmp benchmark
    b55c47027511 libbpf: Fix hypothetical STT_SECTION extern NULL deref case
    5db897802c39 remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
    ba1a885c9012 of: property: Increase NR_FWNODE_REFERENCE_ARGS
    7c6bb82a6f3d remoteproc: core: Clear table_sz when rproc_shutdown
    8594bbffc266 crypto: hisilicon/sec2 - fix for sec spec check
    0aafd0ec5101 crypto: hisilicon/sec2 - fix for aead authsize alignment
    2ff09de2c8ff clk: amlogic: gxbb: drop incorrect flag on 32k clock
    ce88afbc0934 fbdev: sm501fb: Add some geometry checks.
    6ed70f3dc68f mdacon: rework dependency list
    88ebc63d6a67 fbdev: au1100fb: Move a variable assignment behind a null pointer check
    f6c1a08e9163 PCI: pciehp: Don't enable HPIE when resuming in poll mode
    cbcb02cc0e2f PCI: histb: Fix an error handling path in histb_pcie_probe()
    b3a93a2407ad drm/amd/display: avoid NPD when ASIC does not support DMUB
    390304035b32 drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
    13ec849fd2ea drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
    48b5e31bc354 PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
    745783303c41 PCI: Remove stray put_device() in pci_register_host_bridge()
    d5563f120575 drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
    431f51068a0c PCI: Avoid reset when disabled via sysfs
    0aad0d291690 PCI/portdrv: Only disable pciehp interrupts early when needed
    eeeac24b42e6 PCI: brcmstb: Fix potential premature regulator disabling
    eedd05483493 PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
    8b2853fd6ef8 PCI: brcmstb: Use internal register to change link capability
    17a37367d032 PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
    0f88894aa628 drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
    a984e6108c9c drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
    7570e5693092 drm/msm/dsi: Use existing per-interface slice count in DSC timing
    45e03341d2b1 drm/msm/dpu: don't use active in atomic_check()
    8b930ddc2044 PCI/ASPM: Fix link state exit during switch upstream function removal
    9c44e29cfd76 drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
    34c1720a3830 drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
    347641b02fbe PCI: Use downstream bridges for distributing resources
    561fc0c5cf41 drm/vkms: Fix use after free and double free on init error
    e2b310717382 drm: xlnx: zynqmp: Fix max dma segment size
    d360c02cdedb drm/bridge: it6505: fix HDCP V match check is not performed correctly
    c3b8e7c6809a drm/dp_mst: Fix drm RAD print
    8830a2a324c4 drm/bridge: ti-sn65dsi86: Fix multiple instances
    1b5f3dc474cb ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
    a589f15d4014 ALSA: hda/realtek: Always honor no_shutup_pins
    f8e2e91bae08 dt-bindings: vendor-prefixes: add GOcontroll
    ba65e56f717a HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
    20bbf66ab4e2 ASoC: cs35l41: check the return value from spi_setup()
    756945c13fbb platform/x86: dell-ddv: Fix temperature calculation
    693b38ee7c2f media: platform: allgro-dvt: unregister v4l2_device on the error path
    57e257d9744c media: verisilicon: HEVC: Initialize start_bit field
    63a0b0d052b3 x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
    4c94efdc5140 x86/traps: Make exc_double_fault() consistently noreturn
    36aee8100e8b perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
    477b6882f18b lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
    01c5ab292477 PM: sleep: Fix handling devices with direct_complete set on errors
    ac2eb7378319 thermal: int340x: Add NULL check for adev
    12c5e76acf55 EDAC/ie31200: Fix the error path order of ie31200_init()
    9ca0c34ac1f5 EDAC/ie31200: Fix the DIMM size mask for several SoCs
    a26d5a100ae0 EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    06ca76e7e353 selinux: Chain up tool resolving errors in install_policy.sh
    b9ad6385ca4d RISC-V: KVM: Disable the kernel perf counter during configure
    3c64a5bacb6b PM: sleep: Adjust check before setting power.must_resume
    913b739cd2bf lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
    71fc439af51a x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
    7c376f91f2e1 x86/platform: Only allow CONFIG_EISA for 32-bit
    2541b0d1ced5 x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
    b58c6545db04 x86/fpu: Fix guest FPU state buffer allocation size
    f2d51d45a507 EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
    62173b2fc2ed cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    f7a1e1c2d6de smack: dont compile ipv6 code unless ipv6 is configured
    e4b3585ad908 cpufreq: scpi: compare kHz instead of Hz
    b8db5776f042 x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
    6dafa2776418 watch_queue: fix pipe accounting mismatch
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 4f4f2674e3b12759ef9e7fe7eef05a064cc3ee6f)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
a5187e6267 linux-yocto/6.6: update to v6.6.86
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    3fa1ea3ede18 Linux 6.6.86
    72a68d2bede3 usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
    367a281315ec serial: 8250_dma: terminate correct DMA in tx_dma_flush()
    6186fb2cd363 memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
    2beb999f73b4 net: usb: usbnet: restore usb%d name exception for local mac addresses
    3007115c2e40 net: usb: qmi_wwan: add Telit Cinterion FE990B composition
    ad43b150e109 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
    5ec93d77200e tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
    fe14cfba6c16 tty: serial: 8250: Add Brainboxes XC devices
    be28a3dabdca tty: serial: 8250: Add some more device IDs
    52eed361c250 counter: microchip-tcb-capture: Fix undefined counter channel state on probe
    fa15592e9d92 counter: stm32-lptimer-cnt: fix error handling when enabling
    835807f54fad ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
    525104157385 netfilter: socket: Lookup orig tuple for IPv6 SNAT
    f16a097047e3 scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
    3918b2016d28 reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
    790d30578faa mm/page_alloc: fix memory accept before watermarks gets initialized
    404d85a71d5a drm/amd/display: Don't write DP_MSTM_CTRL after LT
    5f57a96e92c6 drm/dp_mst: Add a helper to queue a topology probe
    93ccb0fb3606 drm/dp_mst: Factor out function to queue a topology probe work
    b9264aa24f62 drm/amd/display: Check denominator crb_pipes before used
    ad0410346cc4 ARM: Remove address checking for MMUless devices
    1809cabfe0e9 ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
    fe17c8aaa90f ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
    9da6b6340dbc atm: Fix NULL pointer dereference
    f99afc594a2b HID: hid-plantronics: Add mic mute mapping and generalize quirks
    8ecdc85b5cab ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
    6a5b2ed82152 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 28f489e042107855e7567e34f101e36b1bf9aaf1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
6a56962e84 linux-yocto/6.6: fix beaglebone ethernet
Integrating the following commit(s) to linux-yocto/6.6:

1/1 [
    Author: Colin Foster
    Email: colin.foster@in-advantage.com
    Subject: ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    Date: Fri, 31 May 2024 13:38:17 -0500

    Prior to commit df16c1c51d81 ("net: phy: mdio_device: Reset device only
    when necessary") MDIO reset deasserts were performed twice during boot.
    Now that the second deassert is no longer performed, device probe
    failures happen due to the change in timing with the following error
    message:

    SMSC LAN8710/LAN8720: probe of 4a101000.mdio:00 failed with error -5

    Restore the original effective timing, which resolves the probe
    failures.

    Signed-off-by: Colin Foster <colin.foster@in-advantage.com>
    Link: https://lore.kernel.org/r/20240531183817.2698445-1-colin.foster@in-advantage.com
    Signed-off-by: Kevin Hilman <khilman@baylibre.com>
]

(From OE-Core rev: c315a5739b373a33e24e3b84db3fbb4bec9b9353)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Bruce Ashfield
dfc1ab0595 linux-yocto/6.6: update to v6.6.85
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    d57a7c616960 Linux 6.6.85
    fa81cb19f5b7 netfilter: nft_counter: Use u64_stats_t for statistic.
    35afffaddbe8 wifi: iwlwifi: mvm: ensure offloading TID queue exists
    fd82d29c4cfb wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
    7f306c651fea bnxt_en: Fix receive ring space parameters when XDP is active
    9dff3e36ea89 btrfs: make sure that WRITTEN is set on all metadata blocks
    690597da35d9 Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
    04cd1dc3df7f arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
    7d5669629422 KVM: arm64: Eagerly switch ZCR_EL{1,2}
    93074abedecb KVM: arm64: Mark some header functions as inline
    2afe039450a0 KVM: arm64: Refactor exit handlers
    30253b3eb685 KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
    88adb7a00754 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
    73f64c676a6b KVM: arm64: Remove host FPSIMD saving for non-protected KVM
    806d5c1e1d2e KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
    20c6561c4918 KVM: arm64: Calculate cptr_el2 traps on activating traps
    b44a37824878 mptcp: Fix data stream corruption in the address announcement
    d0f87370622a ksmbd: fix incorrect validation for num_aces field of smb_acl
    5e0f5166e2dc drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
    7803ca385941 drm/amd/display: should support dmub hw lock on Replay
    28780816ca29 drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
    e66a1a616fa6 drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
    c76bd3c99293 drm/sched: Fix fence reference count leak
    3ce08215cad5 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
    f2bbfd50e95b soc: qcom: pdr: Fix the potential deadlock
    6e38b4a4b382 batman-adv: Ignore own maximum aggregation size during RX
    b7b4be1fa432 xsk: fix an integer overflow in xp_create_and_assign_umem()
    19f4e715f665 efi/libstub: Avoid physical address 0x0 when doing random allocation
    0baa10cf97b5 ARM: shmobile: smp: Enforce shmobile_smp_* alignment
    d6274b9472d5 ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
    63b53198aff2 proc: fix UAF in proc_get_inode()
    29124ae980e2 mm/migrate: fix shmem xarray update during migration
    9efb6b502104 mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
    f42c361843fa mmc: atmel-mci: Add missing clk_disable_unprepare()
    6d2f8c59747a mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
    db59b24b3858 arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
    3db71cf02250 arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
    62b5b2eca3e5 arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
    4b2a170c2586 accel/qaic: Fix integer overflow in qaic_validate_req()
    998b1aae22dc regulator: check that dummy regulator has been probed before using it
    e26f24ca4fb9 regulator: dummy: force synchronous probing
    f793c0fdaaf1 riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
    7cd375d46afc drm/v3d: Don't run jobs that have errors flagged in its fence
    c8eebc9d5b9c can: flexcan: disable transceiver during system PM
    6f5481d4ed39 can: flexcan: only change CAN state when link up in system PM
    cc29775a8a72 can: ucan: fix out of bound read in strscpy() source
    e5e6bd8e0de5 can: rcar_canfd: Fix page entries in the AFL list
    b202afc54e94 i2c: omap: fix IRQ storms
    f0372a4cf285 Revert "gre: Fix IPv6 link-local address generation."
    ae2ec5a51fa0 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
    e4f6de68deba net: lwtunnel: fix recursion loops
    9566f6ee13b1 net: atm: fix use after free in lec_send()
    a235ec29c945 ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
    119dcafe3679 ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
    1e842b459008 ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
    3d123ec74d81 accel/qaic: Fix possible data corruption in BOs > 2G
    59b683594ff3 Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
    ecd06ad0823a Bluetooth: Fix error code in chan_alloc_skb_cb()
    9524af58447d RDMA/hns: Fix wrong value of max_sge_rd
    0edfba91b773 RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
    5df88c383715 RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
    975355faba56 RDMA/hns: Fix soft lockup during bt pages loop
    dba5577d8e33 RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
    1e8d0765da64 ARM: dts: bcm2711: Don't mark timer regs unconfigured
    e68954ecf8b8 ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
    0e6aa61b54a8 RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
    6a788e32f64e RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
    25be7f9bde2d arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
    61820187b3ef ARM: dts: bcm2711: PL011 UARTs are actually r1p5
    1b7b036685c3 soc: imx8m: Unregister cpufreq and soc dev in cleanup path
    4a58a332eedd soc: imx8m: Use devm_* to simplify probe failure handling
    d1fb2e767e1c soc: imx8m: Remove global soc_uid
    8e1704e5b205 xfrm_output: Force software GSO only in tunnel mode
    bfb9b9404a53 xfrm: fix tunnel mode TX datapath in packet offload mode
    e432cb123d89 arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
    555f05de6f46 firmware: imx-scu: fix OF node leak in .probe()
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 09ebb505598f383d9ec6550a39e77c4ed1dab202)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Ashish Sharma
f8d52ece40 screen: patch CVE-2025-46805
Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/screen/patch/?id=aa9f51f996a22470b8461d2b6a32e62c7ec30ed5
Upstream commit https://git.savannah.gnu.org/cgit/screen.git/commit/?id=161f85b98b7e1d5e4893aeed20f4cdb5e3dfaaa4]

(From OE-Core rev: 69dd9b16fbd18a1a960887ee9479a2e731b5a184)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Hitendra Prajapati
d56536a618 libsoup-2.4: Fix CVE-2025-4969
Upstream-Status: Backport from 07b94e27af

(From OE-Core rev: 565ce534e6061913978c7e42dac6b2ff34169b85)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Hitendra Prajapati
edc0010d0d libsoup-3.4.4: Fix CVE-2025-4969
Upstream-Status: Backport from 07b94e27af

(From OE-Core rev: 9716cdacb4378e0274246c39c5fb808e4d86b4ce)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Richard Purdie
fde1131108 bitbake: fetch2: Avoid deprecation warning
>From re on python 3.13 onwards: "Passing count and flags as positional arguments is deprecated.
In future Python versions they will be keyword-only parameters."

Avoid the warning.

(Bitbake rev: 65b744bec9756ee2f43adbfa33c14899638e2b9f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Richard Purdie
706ea47eaf bitbake: toaster/tests/buildtest: Switch to new CDN
The project is switching the way handle our CDN provision of sstate objects,
update the URL accordingly.

(Bitbake rev: aef3536b6e4cdbff6d3a171e183811509370b9f9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3372524cb961d95993b27fe4a8d794cdb7255e09)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-05 08:41:15 -07:00
Steve Sakoman
ac257900c3 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: d5342ffc570d47a723b18297d75bd2f63c2088db)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:22:19 -07:00
Steve Sakoman
1c462cc39e poky.conf: bump version for 5.0.10
(From meta-yocto rev: 70e3095506c9d8f37dc8963158d4c7d146852dea)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:19:04 -07:00
Rogerio Guerra Borin
339fe2fe1c u-boot: ensure keys are generated before assembling U-Boot FIT image
Add the task dependency:

do_uboot_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys

to ensure the kernel FIT image signing keys are available when creating
the U-Boot DTB. This is done only if the signing of the kernel FIT image
is enabled (UBOOT_SIGN_ENABLE="1").

The lack of the dependency causes build errors when executing a build
with no kernel FIT keys initially present in the keys directory. In such
cases one would see an output like this in the Bitbake logs:

Log data follows:
| DEBUG: Executing shell function do_uboot_assemble_fitimage
| Couldn't open RSA private key: '/workdir/build/keys/fit/dev.key': No such file or directory
| Failed to sign 'signature' signature node in 'conf-1' conf node
| FIT description: Kernel Image image with one or more FDT blobs
| ...

This issue was introduced by commit 259bfa86f384 where the dependency
between U-Boot and the kernel was removed (for good reasons). Before
that commit the dependency was set via DEPENDS so that, in terms of
tasks, one had:

u-boot:do_configure -> virtual/kernel:do_populate_sysroot

and the chain leading to the key generation was:

virtual/kernel:do_populate_sysroot -> virtual/kernel:do_install
virtual/kernel:do_install -> virtual/kernel:do_assemble_fitimage
virtual/kernel:do_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys

With the removal of the first dependency, no more guarantees exist that
the keys would be present when assembling the U-Boot FIT image. That's
the situation we are solving with the present commit.

(From OE-Core rev: 036f20156b3c7d0a8b912e90aa29a9b986106d5a)

Fixes: d7bd9c627661 ("u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled")
(From OE-Core rev: 56431a98ac661eaa42803e83a9ede6eae0b72b67)

Signed-off-by: Rogerio Guerra Borin <rogerio.borin@toradex.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Virendra Thakur
09edf92b0d util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
During ptest execution, util-linux adds mount entries in /etc/fstab
and runs `mount -a`, which mounts all available entries from
/etc/fstab. This can cause unintended mounts that are unrelated to
the test, leading to incorrect test behavior.

To avoid this, upstream util-linux introduced a mechanism using
CUSTOM_FSTAB,which isolates test-specific fstab entries. Only entries
listed in CUSTOM_FSTAB are mounted during test execution, ensuring
tests do not interfere with or depend on the system's /etc/fstab.

This commit backports below upstream changes to use CUSTOM_FSTAB.
ed3d33faff
b1580bd760
6aa8d17b6b

(From OE-Core rev: e7420db0d77611140149ccfefefc8becfad4f34b)

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Divyanshu Rathore
51ae2b0ed0 ffmpeg: upgrade 6.1.1 -> 6.1.2
ffmpeg_6.1.2 is the newest available stable release for 6.1.
It introduces quite a few bug and CVE fixes, which should help all.

CVEs that are fixed in the upgrade:
CVE-2024-32230
CVE-2024-35366
CVE-2024-36613
CVE-2024-36616
CVE-2024-36617
CVE-2024-36619
CVE-2024-7055

During upgrade it was noticed that the CVE scan doesn't pick up the CVEs as unpatched
(CVE-2025-0518, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473,
CVE-2024-36618, CVE-2024-35369, CVE-2024-35368, CVE-2024-35367,
CVE-2024-35365, CVE-2024-28661, CVE-2023-50007, CVE-2023-49528,
CVE-2023-49501), due to improper versioning in NVD,
they are affecting 6.1.2 and hence we are leaving the patches in.

check the changelog mention below for information about fixes.
changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n6.1.2

This upgrade fixes CVE's hence remove those patches.
Refresh vulkan_av1_stable_API.patch as per new codebase.

(From OE-Core rev: 57e25585abf34677451c68d581374245e5b4b418)

Signed-off-by: Divyanshu Rathore <divyanshurathore2022@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Harish Sadineni
4d40c0f355 binutils: set CVE_STATUS for CVE-2025-1180
CVE-2025-1180 is fixed with patch from CVE-2025-1176.
More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2025-1179

(From OE-Core rev: 9c63f1c73426532a94f01fbbe26c9f52a3c4fdf7)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Ashish Sharma
474ee8d5de libsoup: patch CVE-2025-4476
Upstream-Status: Backport [e64c221f9c]

(From OE-Core rev: 91231813d04680f93a08cb29540073bb4749e22f)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Divya Chellam
7ad1d26688 ruby: fix CVE-2025-27221
In the URI gem before 1.0.3 for Ruby, the URI handling methods
(URI.join, URI#merge, URI#+) have an inadvertent leakage of
authentication credentials because userinfo is retained even
after changing the host.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-27221

Upstream-patches:
3675494839
2789182478

(From OE-Core rev: 421d7011269f4750f5942b815d68f77fa4559d69)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Harish Sadineni
186e2b2b05 binutils: Fix CVE-2025-1179
CVE-2025-1179-pre.patch is dependency patch for CVE-2025-1179.patch

Upstream-Status: Submitted [https://sourceware.org/pipermail/binutils/2025-May/141322.html &&
https://sourceware.org/pipermail/binutils/2025-May/141321.html]
CVE: CVE-2025-1179

cherry picked from upstream commit:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=67e30b15212adc1502b898a1ca224fdf65dc110d
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1d68a49ac5d71b648304f69af978fce0f4413800

(From OE-Core rev: 8f54548f784ef60eaf7fb6b3f539d48b0f7192a3)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Vijay Anusuri
53ab80ae8f libsoup-2.4: Fix CVE-2025-32914
import patch from debian to fix
 CVE-2025-32914

Upstream-Status: Backport [import from debian https://salsa.debian.org/gnome-team/libsoup/-/tree/debian/bullseye/debian/patches?ref_type=heads
Upstream commit 5bfcf81575]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/450
https://security-tracker.debian.org/tracker/CVE-2025-32914

(From OE-Core rev: 8eba970123aca651cbce13e52d43ddaddd76a7cc)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Vijay Anusuri
a6c55c0bd7 libsoup-2.4: Fix CVE-2025-32912
Upstream-Status: Backport from
cd077513f2
& 910ebdcd3d

(From OE-Core rev: c45c8ad64aafd1f8a447f4fce6a2e7c0f22ef5f0)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Vijay Anusuri
a0e298a849 libsoup-2.4: Fix CVE-2025-32911 & CVE-2025-32913
Upstream-Status: Backport from
7b4ef0e004
& f4a761fb66

(From OE-Core rev: 7bdeb2217253a86c941edb7c4c28ba57d855c606)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Vijay Anusuri
cca757c461 libsoup-2.4: Fix CVE-2025-32910
import patch from debian to fix
 CVE-2025-32910

Upstream-Status: Backport [import from debian https://salsa.debian.org/gnome-team/libsoup/-/tree/debian/bullseye/debian/patches?ref_type=heads
Upstream commit e40df6d48a
&
405a8a3459
&
ea16eeacb0]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/417
https://security-tracker.debian.org/tracker/CVE-2025-32910

(From OE-Core rev: 0fc936f23e6f70021acf4e711ef49d3a5cc966fe)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-02 07:12:34 -07:00
Alper Ak
a817e2016f ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS
Fix [YOCTO #15753]

(From yocto-docs rev: 3996388e337377bedc113d072a51fe9d68dd40c6)

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5f5a406d4acdfcbf655ac014d0d2807056f95291)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Etienne Cordonnier
e71727aa85 ref-manual/variables.rst: document SSTATE_SKIP_CREATION
(From yocto-docs rev: 40045299491087d3f7d269b696ae48d513dae435)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 3982720668aafa18c9ed27304d09f896740b1653)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Alper Ak
8b9911c2eb ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS
Fix [YOCTO #15755]

(From yocto-docs rev: 2eb345ffa74d58d209a6a8deb27b228c37628034)

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit fd143a04bab38f6aeec23ec229657b16fcaecdf1)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Enrico Jörns
d5d8a11fc9 conf.py: tweak SearchEnglish to be hyphen-friendly
This modifies the default indexer split() and js splitQuery()
methods to support searching for words with hyphens.

While this might not be an ideal, rock solid, and fully future-proof
solution, it allows at least to search for strings inlcuding hyphens,
such as 'bitbake-layers', 'send-error-report', or 'oe-core'.

Below is a bit more detailed explanation of the two modifications done:

1) The default split regex in the sphinx-doc SearchLanguage base class
   is:

   | _word_re = re.compile(r'\w+')

   which we simply extend to include hyphens '-'.

   This will result in a searchindex.js that contains words with hyphens,
   too.

2) The 'searchtool.js' code notes for its splitQuery() implementation:

   | /**
   |  * Default splitQuery function. Can be overridden in ``sphinx.search`` with a
   |  * custom function per language.
   |  *
   |  * The regular expression works by splitting the string on consecutive characters
   |  * that are not Unicode letters, numbers, underscores, or emoji characters.
   |  * This is the same as ``\W+`` in Python, preserving the surrogate pair area.
   |  */
   | if (typeof splitQuery === "undefined") {
   |   var splitQuery = (query) => query
   |       .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}]+/gu)
   |       .filter(term => term)  // remove remaining empty strings
   | }

   The hook for this is documented in the sphinx-docs 'SearchLanguage'
   base class.

   |    .. attribute:: js_splitter_code
   |
   |       Return splitter function of JavaScript version.  The function should be
   |       named as ``splitQuery``.  And it should take a string and return list of
   |       strings.
   |
   |       .. versionadded:: 3.0

   We use this to define a simplified splitQuery() function with a split
   argument that splits on empty spaces only.

We extend SearchEnglish (which extends SearchLanguage) here to retain
the stemmer code and stopwords for English.

[YOCTO #14534]

(From yocto-docs rev: ce18901b1059746069a0dea8893ba4a357772b51)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d4a98ee19e0cbd6be96923dc72faee143a6b294b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Christos Gavros
e159b7c251 ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable
This variable specifies the maximum allowed size
of the initramfs image in Kbytes.
Fixes [YOCTO #15797]

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
CC: Antonin Godard <antonin.godard@bootlin.com>
(From yocto-docs rev: 123d1ec8e532751ac416c21e3eaa92fd904e2171)

Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 07bcdddaf71c76cdec186cf0ddd97a47eec54972)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Christos Gavros
f5f2c66470 ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable
This variable specifies the maximum allowed size
of the generated image in kilobytes.

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
CC: Antonin Godard <antonin.godard@bootlin.com>
CC: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: d45174d03e1ccd422b9210e3ba1f648d2f6b5173)

Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f3ddc92081363aa7ef7d4fc2c3b918f32f7bda05)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Trevor Woerner
a2f2212436 sphinx-lint: unbalanced inline literal markup
Fix as many instances of unbalanced-inline-literals-delimiters as reported by
'make sphinx-lint' as possible. Sphinx and/or its linter seem to get tripped
up randomly when references contain links to heading which contain literals
enclosed in double-back-tics, and not all of them can be "fixed" to pass both
building and linting.

(From yocto-docs rev: 0ba5429953dfa0cdc983ed13ddd06351116031c7)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Trevor Woerner
3d3c34d4c4 sphinx-lint: missing space after literal
Fix all instances of missing-space-after-literal as reported by 'make
sphinx-lint'.

(From yocto-docs rev: b562ea5563adc744703b10e0c9a530ed7476d51a)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Trevor Woerner
539ee0aa4f sphinx-lint: trailing whitespace
Fix all instances of trailing-whitespace as reported by 'make sphinx-lint'.

(From yocto-docs rev: d754df8f2084ad45305cfd9c1cf35da727240aa4)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Nguyen Dat Tho
e8c615a169 libatomic-ops: Update GITHUB_BASE_URI
libatomic-ops moves to new repo https://github.com/ivmai/libatomic_ops
according to topic: https://github.com/bdwgc/libatomic_ops/issues/66

(From OE-Core rev: 29d920f4c2249df7a69f00100924b4525e03c0d9)

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Vyacheslav Yurkov
65828b60db systemd: Password agents shouldn't be optional
If extra-utils package is not included in the image, you'll always
see a warning that password agent is missing whenever you start/stop a
service:

Failed to execute /usr/bin/systemd-tty-ask-password-agent: No such file or directory

(From OE-Core rev: 180455ee76a3819933f45ddd6ce9a5610b3ba947)

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Sunil Dora
163530690f binutils: Fix CVE-2025-1153
PR 32603 [https://sourceware.org/bugzilla/show_bug.cgi?id=32603]

Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=0b7f992b78fe0984fc7d84cc748d0794e4a400e3
&& https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=31e9e2e8d1090da0c1da97a70005d8841fff8ddd
&& https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=fe459e33c676883b5f28cc96c00e242973d906a9]

(From OE-Core rev: c8cb463ccee514935fe14544173c85001d66e60b)

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Ashish Sharma
79babbe58a libsoup-2.4: Fix CVE-2025-46420
Upstream-Status: Backport [c9083869ec]

(From OE-Core rev: 7c963f68cb8dfdea3e1664078037303ea3f29e65)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Praveen Kumar
4ff1ba9c72 glib-2.0: fix CVE-2025-4373
A flaw was found in GLib, which is vulnerable to an integer overflow
in the g_string_insert_unichar() function. When the position at which
to insert the character is large, the position will overflow, leading
to a buffer underwrite.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-4373
https://security-tracker.debian.org/tracker/CVE-2025-4373

Upstream-patches:
cc647f9e46
4d435bb480

(From OE-Core rev: 02e2f5211962394ec3d66882daab240cb465ef85)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Praveen Kumar
f80b122315 connman :fix CVE-2025-32366
In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length
that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen)
and memcpy(response+offset,*end,*rdlen) without a check for whether
the sum of *end and *rdlen exceeds max. Consequently, *rdlen may be
larger than the amount of remaining packet data in the current state
of parsing. Values of stack memory locations may be sent over the
network in a response.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32366

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4

(From OE-Core rev: 02e046149b1cc5eca5188eec7b4e1a9970b97faf)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Vijay Anusuri
ac204a6bf9 openssh: Fix for CVE-2025-32728
Upstream-Status: Backport
[fc86875e6a]

(From OE-Core rev: 6565ae2b01d6eb1e3a83ed387a5e3b765f85b8cf)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-27 09:38:57 -07:00
Trevor Woerner
fa7dd6d5da ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS
Fixes [YOCTO #15509]

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 38706f0e743447da9a39a6369620fa039ab6df3b)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f1cdecb6da91dbfac59359c83038cb4a4c36ad0a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Trevor Woerner
941f3a9527 contributor-guide/submit-changes: encourage patch version changelogs
Add a section after the 'git format-patch' information encouraging developers
to add patch version changelogs to their patch updates.

(From yocto-docs rev: 78fd3b3f1ec797dfe3648509a1945241b50640d5)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2e3a37c4607b296956993e557d1786c4876e5722)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Lee Chee Yang
8f02cfd627 migration-guides: add release notes for 5.0.9
(From yocto-docs rev: 5b91bfc02ad35fa7b391e39b9559c65dca808d1e)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 0d070439259d72f66a71c148f6c7926f6f233b6d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Enrico Jörns
9ca35cf808 ref-manual/variables.rst: update ROOT_HOME documentation
* Since scarthgap [1], the default will be overridden when using
  'systemd' as INIT_MANAGER. Reflect this in the documentation.
* The distro configuration is probably the better place for
  customization, thus at least mention this together with the
  local.conf.
* While at it, drop the probably redundant description on how to
  override weak default variables.
  The example on how to set "/root" is still given indirectly, anyway.

[1] ebafe463 ("systemd: upgrade to 255.1")

(From yocto-docs rev: f1f92f0a5a881c45ffecf9cf9bd070c992aff35a)

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 50e92009d309fc4ae406174feb8f6578142748cc)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Adrian Freihofer
cd1cf85730 ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME
The kernel-fitimage.bbclass uses the UBOOT_* variables. The SPL_*
variables are handled by uboot-sign.bbclass.

(From yocto-docs rev: 0d4cda12f2c3f89f64043c30cc0830dfa632e76e)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 8ceffee908a039deb1021361faa7637e83ef26f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Lee Chee Yang
7cf9a3dde0 migration-guides: add release notes for 4.0.26
(From yocto-docs rev: 4bbf915547adcd667247df22a1ff2e7e5f223c3e)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 656dc03101705bba718517b7017f71ce00541b72)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Antonin Godard
4b89b04ff0 ref-manual/release-process: update releases.svg
- Add the future "Whinlatter" (5.3) and "Wrynose" (6.0) releases.
- Make the "Walnascar" release a current release.
- Update the month in Current.

(From yocto-docs rev: 0c08c88aad0a2acf04d2da0f2935f29bc6a6eb99)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit adb8573b54626e033921a9f4e3db259312b79207)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Antonin Godard
a07ff0dcdc test-manual/intro: remove Buildbot version used
The version has changed now (3.10.12 as of writing). Avoid having to
maintain this information by removing the version info from the intro.
Also fix a typo ("uses now uses") and give a link to yocto-autobuilder2.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: a7000370ca9c1c623cd9272738f1a252e6556951)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1ed64dbdf4a60b000305cdc2c67dc24f4bc97ef7)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Antonin Godard
1f2eca0a8e dev-manual/sbom.rst: fix wrong build outputs
This document was written with SPDX 3.0 in mind (create-spdx-3.0 class)
on OE-Core's master, but Scarthgap only supports SPDX 2.2
(create-spdx-2.2).

The create-spdx-2.2 class only generate a tar.zst output, so remove the
other outputs listed here.

Also, ancillary outputs are not only deployed in tmp/deploy/spdx/MACHINE
but tmp/deploy/spdx in general.

(From yocto-docs rev: deedc7395f565e9820d914de9ffc3b14f8b143eb)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
rajmohan r
2a501e4f1b glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe
This recipe takes longer time >20min when bitbake for package
write stage. When cross-verified for longer time duration, found
that do_check() stage taking 20min while other stages completes
before 6min.

This recipe gives only below two test binaries in the packages to
test (ptest: glibc-y2038-tests):
     io/ftwtest
     io/ftwtest-time64

The above test binaries are already included for testing in recipe
glibc-testsuite_2.39.bb.

It is by now well established that glibc itself works as it should,
that all affected 32 bit targets are configured to use 64 bit time_t,
and that any lingering y2038 issues are in components other than the c
library, and usually come from C programming mistakes (e.g. storing
timestamps in long). So this recipe seems to be redundant and
can be removed.

Review comments for fixing above longer time duration ended up in
removing this recipe as a proposal is below
https://lists.openembedded.org/g/openembedded-core/topic/112188476#msg214636

Removed lines having reference to glibc-y2038-tests in the files.

For master branch requested for integration and below is the link
https://lists.openembedded.org/g/openembedded-core/message/215655

(From OE-Core rev: b214cc84a922f7a3fb7ebbc501189ce25e8bd2bd)

Signed-off-by: rajmohan r <semc.2042@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Niko Mauno
848da2f632 cve-check.bbclass: Fix symlink handling also for text files
While backporting commit 7543e4e24a ("cve-check.bbclass: Mitigate
symlink related error") I failed to address the fact that in Scarthgap
this bbclass still generates also the text CVE file, in addition to the
JSON file.

In order to avoid the error that occurred with JSON files from
occurring now with CVE files:

  ERROR: core-image-base-1.0-r0 do_image_complete: Recipe core-image-base is trying to install files into a shared area when those files already exist. The files and the manifests listing them are:
    /home/poky/build/tmp/deploy/images/qemux86-64/.cve
      (matched in manifest-qemux86_64-core-image-minimal.image_complete)
  Please adjust the recipes so only one recipe provides a given file.

update the symlink handling for the text file variant too.

(From OE-Core rev: 81e702c85c62782dbedd5ca2a5e6569e6339dd60)

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Alon Bar-Lev
8940ebb70a module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
Symbols are used during install as well, adding KBUILD_EXTRA_SYMBOLS enables
successful installation.

    | DEBUG: Executing shell function do_install
    | NOTE: make -j 22 KERNEL_SRC=xxx/kernel-source -C xxx/drivers
    KDIR=xxx/kernel-source DEPMOD=echo
    MODLIB=xxx/image/lib/modules/6.6.75-yocto-standard-00189-g530c419bc9db
    INSTALL_FW_PATH=xxx/image/lib/firmware CC=aarch64-poky-linux-gcc
    -fuse-ld=bfd -fcanon-prefix-map  LD=aarch64-poky-linux-ld.bfd
    OBJCOPY=aarch64-poky-linux-objcopy  STRIP=aarch64-poky-linux-strip
    O=xxx/kernel-build-artifacts modules_install
    | make: Entering directory 'xxx/drivers'
    | make -C xxx/kernel-source M=xxx/drivers modules
    | make[1]: Entering directory 'xxx/kernel-source'
    | make[2]: Entering directory 'xxx/kernel-build-artifacts'
    |   MODPOST xxx/drivers/Module.symvers
    | ERROR: modpost: "xxx" [xxx/xxx.ko] undefined!

(From OE-Core rev: e8b90907f9c12808ac7137779f16edb62763e1c3)

Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0ef80eeda967a9e04ff91c3583aabbc35c9868e8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Aleksandar Nikolic
264f11fd98 scripts/install-buildtools: Update to 5.0.9
Update to the 5.0.9 release of the 5.0 series for buildtools

(From OE-Core rev: 653b2ce8e7b19f668f337cab8726674f595a8dbe)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:49 -07:00
Yi Zhao
57560c118d iputils: Security fix for CVE-2025-47268
CVE-2025-47268
ping in iputils through 20240905 allows a denial of service (application
error or incorrect data collection) via a crafted ICMP Echo Reply
packet, because of a signed 64-bit integer overflow in timestamp
multiplication.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47268

Patch from:
070cfacd73

(From OE-Core rev: 6b0dd564249754ab8ec20ce69b137466e051501e)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-19 08:32:48 -07:00
Haixiao Yan
fa7bc4c1a8 glibc: Add single-threaded fast path to rand()
Backport a patch [1] to improve performance of rand() and __random()[2]
by adding a single-threaded fast path.

[1] https://sourceware.org/git/?p=glibc.git;a=commit;h=be0cfd848d9ad7378800d6302bc11467cf2b514f
[2] https://sourceware.org/bugzilla/show_bug.cgi?id=32777
(From OE-Core rev: 68ee8d16fa5419acba9111d3aca285be92bd93d3)

Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:58 -07:00
Vijay Anusuri
c418c7ec51 libsoup: Fix CVE-2025-32914
Upstream-Status: Backport
[5bfcf81575]

(From OE-Core rev: 6dd125b619974c8102b3050900781c22c2db4b10)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:58 -07:00
Praveen Kumar
86ea2699ac connman :fix CVE-2025-32743
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c
can be NULL or an empty string when the TC (Truncated) bit is set in
a DNS response. This allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code, because those
lookup values lead to incorrect length calculations and incorrect
memcpy operations.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32743

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=d90b911f6760959bdf1393c39fe8d1118315490f

(From OE-Core rev: 9558ec2091964556b47b0909c5d243aee5bafb6f)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Vijay Anusuri
e4df627b22 libsoup-2.4: Fix CVE-2025-32909
Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libsoup/-/comm
it/ba4c3a6f988beff59e45801ab36067293d24ce92

(From OE-Core rev: 90359036300731b6c26b646afbf3d66127b72fa2)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Vijay Anusuri
adc945c074 libsoup-2.4: Fix CVE-2025-32906
Upstream-Status: Backport from
1f509f31b6
& af5b9a4a39

(From OE-Core rev: 6e373ec360151b212ae6eedc4c663fb9e760ae75)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Vijay Anusuri
929989c6c3 libsoup-2.4: Fix CVE-2024-52532
Upstream-Status: Backport from 6adc0e3eb7
&
29b96fab25
& 4c9e75c667

(From OE-Core rev: dfde13ecffad3426846bd4b366d1e0cdb77b1be0)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Vijay Anusuri
e2e65311f8 libsoup-2.4: Fix CVE-2024-52531
import patch from ubuntu to fix
 CVE-2024-52531

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/libsoup2.4/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
a35222dd0b
&
825fda3425]

Reference:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407/
https://ubuntu.com/security/CVE-2024-52531

(From OE-Core rev: c7ab8b45b1f533ca1b27b07c30f44b7b64a3cfde)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Vijay Anusuri
ecdb5e1785 libsoup-2.4: Fix CVE-2024-52530
Upstream-Status: Backport from
04df03bc09

(From OE-Core rev: ef1bff79d6b84eacccff2a3f8a5c3b8ed92fe0c4)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-14 09:08:57 -07:00
Jeroen Hofstee
488cf4238a bluez5: backport a patch to fix btmgmt -i
Without this patch btmgmt will always use hci0 in
non interactive mode.

(From OE-Core rev: 45c50169fa7e34349acf3e24fc19e573cbab4e65)

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:30 -07:00
Jeroen Hofstee
b19f30b8a0 bluez5: make media control a PACKAGECONFIG option
When not building with the default PACKAGECONFIG options, the build can fail
with:

undefined reference to `media_player_controller_create'
undefined reference to `media_player_set_status'

Otherwise. So disable it when not set and enable it by default.

The packageconfig option is the same as in Styhead.
ebbdb7cf5c (diff-9d9284f6f27a81c75dffffd6d601b40c8266ae12e678d0a49c46bdb8356a0e91R52)

(From OE-Core rev: 82448a6c8b720cefc200513daa41115961b43e8f)

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:30 -07:00
Deepesh Varatharajan
679db8c1a3 binutils: stable 2.42 branch updates
Below commit on binutils-2.42 stable branch is updated.

6558f9f5f0c s390: Add support for z17 as CPU name

Testing was done and there were no regressions found

(From OE-Core rev: 08d6ca500e6dd571f5882f82f6ad804bd2eec8c8)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:30 -07:00
Deepesh Varatharajan
5ede912795 glibc: stable 2.39 branch updates
3463100f2d x86: Detect Intel Diamond Rapids
e09436c2cb x86: Handle unknown Intel processor with default tuning
7620d98186 x86: Add ARL/PTL/CWF model detection support
765ff3d0d4 x86: Optimize xstate size calculation
65ae73be01 x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
2be36448c4 x86: Tunables may incorrectly set Prefer_PMINUB_for_stringop (bug 32047)
bde201e92c x86: Disable non-temporal memset on Skylake Server
38a7632f2d x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
cc59fa5dbc x86: Enable non-temporal memset tunable for AMD
0da58e8be0 x86: Add seperate non-temporal tunable for memset
837a36c371 x86: Link tst-gnu2-tls2-x86-noxsave{,c,xsavec} with libpthread
87ab0c7f7f x86: Use separate variable for TLSDESC XSAVE/XSAVEC state size (bug 32810)
60cd7123a6 x86: Skip XSAVE state size reset if ISA level requires XSAVE
4cf3f9df54 x86_64: Add atanh with FMA
01ed435e2e x86_64: Add sinh with FMA
0edcc77fe7 x86_64: Add tanh with FMA
7ecf0d3bde x86-64: Exclude FMA4 IFUNC functions for -mapxf
e1fe22368e nptl: clear the whole rseq area before registration
dd8c0c3bbd math: Improve layout of exp/exp10 data
a1b09e59e2 AArch64: Use prefer_sve_ifuncs for SVE memset
d0e2133470 AArch64: Add SVE memset
0cc12d9c47 math: Improve layout of expf data
0cd10047bf AArch64: Remove zva_128 from memset
dd1e63ab58 AArch64: Optimize memset
65a96a6f2b AArch64: Improve generic strlen
4073e4ee2c AArch64: Improve codegen for SVE logs
78abd3ef6e AArch64: Improve codegen in SVE tans
a10183b633 AArch64: Improve codegen of AdvSIMD atan(2)(f)
dcd1229e5b AArch64: Improve codegen of AdvSIMD logf function family
72156cb90b AArch64: Improve codegen in AdvSIMD logs
5e354bf4e2 AArch64: Simplify rounding-multiply pattern in several AdvSIMD routines
80df456112 aarch64: Avoid redundant MOVs in AdvSIMD F32 logs
d591876303 aarch64: Fix AdvSIMD libmvec routines for big-endian
f6d48470ae assert: Add test for CVE-2025-0395

Testresults:
Before update	|After update	 |Difference
PASS: 5068	|PASS: 5072	 |PASS: +4
FAIL: 120	|FAIL: 120	 |FAIL: 0
XPASS: 4	|XPASS: 4	 |XPASS: 0
XFAIL: 16	|XFAIL: 16	 |XFAIL: 0
UNSUPPORTED: 157|UNSUPPORTED: 157|UNSUPPORTED: 0

(From OE-Core rev: f14c2e6a6ba72673a0e30cde48ec1d5573be3e01)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:30 -07:00
Peter Marko
5d362ec2d7 sqlite3: mark CVE-2025-29087 as patched
Description of CVE-2025-29087 and CVE-2025-3277 are very similar.
There is no lonk from NVD, but [1] and [2] from Debian mark these two
CVEs as duplicates with the same link for patch.

[1] https://security-tracker.debian.org/tracker/CVE-2025-29087
[2] https://security-tracker.debian.org/tracker/CVE-2025-3277

(From OE-Core rev: 3f951941c758b6982a3cd30d085460756b7fefd9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:29 -07:00
Soumya Sambu
38a5779745 elfutils: Fix CVE-2025-1371
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic.
This vulnerability affects the function handle_dynamic_symtab of the file readelf.c
of the component eu-read. The manipulation leads to null pointer dereference.
Attacking locally is a requirement. The exploit has been disclosed to the public and
may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It
is recommended to apply a patch to fix this issue.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-1371
https://ubuntu.com/security/CVE-2025-1371

Upstream patch:
https://sourceware.org/cgit/elfutils/commit/?id=b38e562a4c907e08171c76b8b2def8464d5a104a

(From OE-Core rev: 11c44bde4f3d9e63506ece2f9b27114914aacc4b)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:29 -07:00
Ashish Sharma
2e1dd3c3d6 libsoup: patch CVE-2025-46420
Upstream-Status: Backport [c9083869ec]

(From OE-Core rev: 0e4a77c928e2eb0e8b012f2bba13b2ef3929cb34)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-08 13:37:29 -07:00
Peter Marko
9c63e0c964 Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
This reverts commit 7adaec468d.

It does not seem to fix the issue it was supposed to fix.
Additionally it breaks code which decides in full/partial update,
because it manipulates timestamp that code is relying on.

(From OE-Core rev: 00dd4901e364d16d96cfab864823a9cfdd336eeb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ebc65fdddd7ce51f0f1008baa30d0ae7918ae0bb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Changqing Li
18206fc2db buildtools-tarball: Make buildtools respects host CA certificates
To adapt user network enviroment, buildtools should first try to use
the user configured envs like SSL_CERT_FILE/CURL_CA_BUNDLE/..., if these
envs is not set, then use the auto-detected ca file and ca path, and
finally use the CA certificates in buildtools.

nativesdk-openssl set OPENSSLDIR as "/not/builtin", need set SSL_CERT_FILE/SSL_CERT_DIR to work

nativesdk-curl don't set default ca file, need
SSL_CERT_FILE/SSL_CERT_DIR or CURL_CA_BUNDLE/CURL_CA_PATH to work

nativesdk-git actually use libcurl, and GIT_SSL_CAPATH/GIT_SSL_CAINFO
also works

nativesdk-python3-requests will use cacert.pem under python module certifi by
default, need to set REQUESTS_CA_BUNDLE

(From OE-Core rev: 0653b96bac6d0800dc5154557706a323418808be)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Changqing Li
397d432a62 buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONS
Here is one testcase:
For recipe tensorflow-lite-host-tools_2.18.0.bb, refer [1],
do_configure[network] = "1"
and it will git clone some repos in CMakeLists.txt

When buildtools is used and nativesdk-git is installed into sdk,
do_configure failed with error:
[1/9] Performing download step (git clone) for 'protobuf-populate'
Cloning into 'protobuf'...
fatal: unable to access 'https://github.com/protocolbuffers/protobuf/': error setting certificate file: /usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-wrlinuxsdk-linux/etc/ssl/certs/ca-certificates.crt

Fix by adding GIT_SSL_CAINFO in BB_ENV_PASSTHROUGH_ADDITIONS, so that
user can export GIT_SSL_CAINFO=${GIT_SSL_CAINFO} in their
do_configure:prepend() to fix above do_configure failure

CURL_CA_BUNDLE and REQUESTS_CA_BUNDLE is similar envvars, so all add
into BB_ENV_PASSTHROUGH_ADDITIONS

[1] https://github.com/nxp-imx/meta-imx/blob/styhead-6.12.3-1.0.0/meta-imx-ml/recipes-libraries/tensorflow-lite/tensorflow-lite-host-tools_2.18.0.bb

(From OE-Core rev: 27f018d8e8ace97d0b1cdfb8782a2a7a0a319816)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Changqing Li
2e0b9e9a86 buildtools-tarball: move setting of envvars to respective envfile
* make git,curl,python3-requests align with openssl, move the setting of
  envvars into respective envfile
* for environment.d-openssl.sh, also check if ca-certificates.crt exist
  before export envvars

(From OE-Core rev: 5f4fd544d3df7365224599c9efdce4e545f51d5e)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Changqing Li
f587cfcb8a initscripts: add function log_success_msg/log_failure_msg/log_warning_msg
* add function log_success_msg/log_failure_msg/log_warning_msg, some
packages still use these functions, like mariadb, refer [1], without
these function, with sysV init manager, mariadb will report error:

root@qemux86-64:~# /etc/init.d/mysqld status
/etc/init.d/mysqld: line 383: log_success_msg: command not found

* remove RCONFLICTS with lsbinitscripts, LSB support already remove in
  [2]

[1] https://github.com/MariaDB/server/blob/main/support-files/mysql.server.sh#L104
[2] https://git.openembedded.org/openembedded-core/commit/?id=fb064356af615d67d85b65942103bf943d84d290
[3] https://refspecs.linuxbase.org/LSB_4.0.0/LSB-Core-generic/LSB-Core-generic/iniscrptfunc.html

(From OE-Core rev: 90cf409ba74c4bb398199667ea2819759a720373)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Priyal Doshi
1feef3d75d tzdata/tzcode-native: upgrade 2025a -> 2025b
(From OE-Core rev: 0d93972dc2d67853b7ddb0d9e55522930fb51df2)

Signed-off-by: Priyal Doshi <pdoshi@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b1ff8b45da27b533477cf6d9ace7a47f7f3a28b1)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Archana Polampalli
c8b84eb224 perl: upgrade 5.38.2 -> 5.38.4
update include fix for CVE-2024-56406

https://perldoc.perl.org/5.38.4/perl5384delta

(From OE-Core rev: a9edffbd3c129966d4028505940ae6286273f399)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:12 -07:00
Archana Polampalli
c27fc7a119 perlcross: 1.6 -> 1.6.2
https://github.com/arsv/perl-cross/releases/tag/1.6.2

Provide support for Perl 5.38.4

(From OE-Core rev: 53dc46381ee3c8b04e507707d96f048b8a31e709)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Alexander Kanavin
71e6d76122 perlcross: update 1.5.2 -> 1.6
(From OE-Core rev: dee97a3d3127eeba77bc6be05dea25f89aa734e5)

(From OE-Core rev: e78d04202b7e73b22d8434b148c52bc4bd539f81)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Soumya Sambu
378e5c8dc2 git: Upgrade 2.44.1 -> 2.44.3
Addresses the security issues - CVE-2024-50349 and CVE-2024-52006

Release Notes:
https://github.com/git/git/blob/v2.44.3/Documentation/RelNotes/2.44.3.txt

(From OE-Core rev: f4f7a3af706bd6923362633a56423526a5264c6c)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Peter Marko
985894f4af glib-2.0: patch CVE-2025-3360
Backport commits from [1] fixing [2] for 2.82.x.

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4499
[2] https://gitlab.gnome.org/GNOME/glib/-/issues/3647

(From OE-Core rev: 2047764e0126ee6273d9c340235ddc2e3cdfea2f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Peter Marko
0396fbd2d9 libxml2: patch CVE-2025-32415
Pick commit from 2.13 branch as 2.12 branch is unmaintained now.

(From OE-Core rev: 2335d4f0d1826647eaee224c469331980fc84ed2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Peter Marko
02c6da2ecf libxml2: patch CVE-2025-32414
Pick commit which has been backported to 2.12 release branch.

(From OE-Core rev: 187052ce4ddd43b46b8335cc955a63ca19ee6994)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Peter Marko
f9ef163a43 ppp: patch CVE-2024-58250
Backport patch to remove vulnerable component.

This is a breaking change, but there will be no other fix for this CVE
as upstream did the deletion without providing a fix first.
If someone really needs this feature, which the commit message describes
as deprecated, bbappend with patch removal is possible.

License-Update: passprompt plugin removed

(From OE-Core rev: 5350ef531ded14f0b4c32c211aaf993354be1ec9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Shubham Kulkarni
46aa1e0eba libpam: Update fix for CVE-2024-10041
Initially, PAM community fixed CVE-2024-10041 in the version v1.6.0 via commit b3020da.
But not all cases were covered with this fix and issues were reported after the release.
In the v1.6.1 release, PAM community fixed these issues via commit b7b9636.
Backport this commit b7b9636, which
Fixes: b3020da ("pam_unix/passverify: always run the helper to obtain shadow password file entries")

Backport from b7b9636208

(From OE-Core rev: 78a04ce17e7d828c0cf8cae2164882683d46275e)

Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-05-02 08:20:11 -07:00
Antonin Godard
c162696dae Fix dead links that use the DISTRO macro
After introducing the DISTRO_LATEST_TAG and DISTRO_REL_LATEST_TAG
macros, use them in links that currently use DISTRO/DISTRO_REL_TAG. When
building for the tip of a branch, this will replace the current A.B.999
in links to the latest existing tag.

The links were found across the documentation by running 'grep -r
"http.*5\.2\.999"' inside the _build/html output after building the
docs.

[YOCTO #14802]

(From yocto-docs rev: d1f3616b373334a5aa75ad7874f05ee4b0e6591f)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 29be069ebbf2c55d72fc51d99ed5a558af37c05e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
2323e6e07a poky.yaml: introduce DISTRO_LATEST_TAG
Introduce the DISTRO_LATEST_TAG macro, which should always point to the
latest existing tag in the documentation, unlike DISTRO which may point
to A.B.999 to represent the tip of a branch.

This variable is needed to fix dead links in the documentation that
currently use the DISTRO macro.

Also, make DISTRO_REL_TAG use the DISTRO macro directly, to avoid
repetition, and add a DISTRO_REL_LATEST_TAG macro that has the same role
as DISTRO_LATEST_TAG but with "yocto-" prepended to it.

In set_versions.py, run the "git describe --abbrev=0 --tags
--match='yocto-*'" command to get the latest existing tag on the
currently checked out commit. Fallback to ourversion in case we didn't
find any.

(From yocto-docs rev: 4195f52117b8132b46dd562acaf40e6e4480be33)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a85b0e500c94921f77fa7b7dbb877e4945f96d1e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Andrew Kreimer
c9de4c568e manuals: remove repeated word
The word "modern" appears twice, remove the extra one.

(From yocto-docs rev: 6d2715b74d43c39fcee3ad7631d93b5396ce84bf)

Signed-off-by: Andrew Kreimer <algonell@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
911317c777 ref-manual/variables.rst: improve the PKGV documentation
It may be confusing for users that source control information is not
present in the BitBake environment. Document it as a warning block.

(From yocto-docs rev: 990b3708d7131ccfb4e435e8a53e987195de3e06)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
084ebc4980 ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference
When building for nativesdk recipes, HOST_CC_ARCH equals SDK_CC_ARCH,
not BUILDSDK_CC_ARCH which doesn't exist.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: ba030d9d65702889b089bd3c9cb6a719a7e0a413)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 08fc3446cb13b5bd8781874d2d996899ce12b082)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
d271e51d30 ref-manual/variables.rst: document HOST_*_ARCH variables
These variables control the flags for the assembler, compiler and
linker, but depend on the context.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 1520ba47f66c6d51f710005cdd4f4b880eccd5b0)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f8eb33569a5e8cadc036855e2d95eee77e627cb4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
65fcbaa89a ref-manual/variables.rst: document missing SDK_*_ARCH variables
These variables control the flags for the assembler, compiler and linker
when building for nativesdk recipes.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 95f4aabe48a6e06f8391e032c6a7038bf0e10332)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c08f6d3c8aee86264c069b7c30850cb02de76076)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
7dbc9bff22 ref-manual/variables.rst: add missing documentation for BUILD_* variables
These toolchain variables are used in a native context. Some of the
BUILD_* variables missed documentation. Also, some of the base commands
were also not there so document them.

Some of existing BUILD_* variable documentation were missing the note
about their usage in a native context, so add it too so that all BUILD_*
variables are documented the same way.

[YOCTO #15719]

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: e692a7553ccf7496288f2eb7df71766cb5261eb4)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 87103afa1cb6690e9aaa87ca1f23e45eaaa359ac)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
05b8139395 ref-manual/variables.rst: add manpage links for toolchain variables
Use the :manpage: role to provide links to common toolchain utilities.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: adfb1a4a768f53a0404b65297f7fa9ed12b77088)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7023e5f176efde05a6798476712c8a4e006a6b0d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
5d81e92acd documentation/conf.py: define a manpage url
By defining the manpages_url we can use the :manpage: role in the
documentation for providing links to manpages. See:
https://www.sphinx-doc.org/en/master/usage/configuration.html#confval-manpages_url

Replace existing manpages links to use this role.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 73faf4a4fdd3d536e8af92b49bf067746cd9fa05)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4e63cd74cd1a330ea5e96bb04243a90f607b2857)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
cb1da2f825 ref-manual/variables.rst: document autotools class related variables
Document the AUTOTOOLS_SCRIPT_PATH and the CONFIGURE_SCRIPT variables.

(From yocto-docs rev: b63d665549e14e1a468ffbf07c8494a491833770)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Antonin Godard
f8946ec779 ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name
This variable affects the watchdog-config recipe, not the watchdog
recipe.

(From yocto-docs rev: b3676b26b02e6e3861dd1d7dcf05dfcf6836bcd5)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d3350c38910c47c76ed17f24579120013589ca1f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Lee Chee Yang
8e65482664 migration-guides: add release notes for 5.0.8
(From yocto-docs rev: 0fad3824f060805c9c3e974c8db830bb03520d20)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7494df521ed9c70e877dbdef1adfe38ad717682f)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Guðni Már Gilbert
3c9b461dd0 bluez5: add missing tools to noinst-tools package
This change will prevent these tools from being installed if the image doesn't install bluez5-noinst-tools package.

BlueZ 5.66: tools/mesh-tester
BlueZ 5.66: tools/ioctl-tester
BlueZ 5.65: tools/iso-tester
BlueZ 5.56: tools/btpclientctl
BlueZ 5.51: tools/bcmfw
BlueZ 5.49: tools/rtlfw
BlueZ 5.47: tools/btconfig (not a new tool, but it was moved from bin_PROGRAMS to noinst_PROGRAMS)

(From OE-Core rev: 87cadf62ba0d6b0fc3dc0151a5d320919b7eb1ab)

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Soumya Sambu
2e0aa8a92d python3-jinja2: upgrade 3.1.4 -> 3.1.6
Includes fix for - CVE-2024-56326, CVE-2025-27516, CVE-2024-56201

Changelog:
https://github.com/pallets/jinja/blob/3.1.6/CHANGES.rst
https://github.com/pallets/jinja/blob/3.1.5/CHANGES.rst

(From OE-Core rev: a935ef8f205c9510ebc5539c133960bc72504902)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Guðni Már Gilbert
5df928793c systemd: upgrade 255.17 -> 255.18
The update includes 82 commits. Full list of changes can be found on Github [1]

All patches were refreshed with devtool.

[1] systemd/systemd-stable@v255.17...v255.18

(From OE-Core rev: 121e1fb42c4c909115bc550585b2ebcb3a13e0a5)

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Igor Opaniuk
8b22b1239b wic: bootimg-efi: Support + symbol in filenames
Allow the '+' symbol as a valid character in filenames listed in the
IMAGE_EFI_BOOT_FILES variable.

The '+' symbol might be used to support boot counting for boot entries,
as described in the UAPI Boot Loader Specification [1]:

The boot counting data is stored in the name of the boot loader entry.
A boot loader entry file name may contain a plus (+) followed by a
number. This may optionally be followed by a minus (-)
followed by a second number. The dot (.) and file name suffix
(conf or efi) must immediately follow.
Boot counting is enabled for entries which match this pattern.

Example:
IMAGE_EFI_BOOT_FILES:append = " entry.conf;loader/entries/entry+3.conf"

[1] https://uapi-group.org/specifications/specs/boot_loader_specification/#boot-counting
(From OE-Core rev: 081fa0ebb33dbbfd0f6e8239690261c0a9dcdb2c)

Signed-off-by: Igor Opaniuk <igor.opaniuk@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3f25822281eb9423ff86105eaebb0bed48663648)
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Yogita Urade
26b25ba673 curl: fix CVE-2025-0167
When asked to use a `.netrc` file for credentials *and* to
follow HTTP redirects, curl could leak the password used
for the first host to the followed-to host under certain
circumstances.

This flaw only manifests itself if the netrc file has a
`default` entry that omits both login and password. A
rare circumstance.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-0167

Upstream patch:
https://github.com/curl/curl/commit/0e120c5b925e8ca75d5319e

(From OE-Core rev: b74dba43f2d6896245232373f2a9fdf07086a237)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Yogita Urade
2e67952192 curl: fix CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to
follow HTTP redirects, curl could leak the password used for
the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry
that matches the redirect target hostname but the entry either
omits just the password or omits both login and password.

CVE-2024-11053-0001 is the dependent commit, CVE-2024-11053-0002 is
actual CVE fix and the actual fix caused a regression that was fixed
by CVE-2024-11053-0003.

Reference:
https://curl.se/docs/CVE-2024-11053.html
https://git.launchpad.net/ubuntu/+source/curl/commit/?h=applied/ubuntu/noble-devel&id=9ea469c352a313104f750dea93e78df8d868c435

Upstream patches:
9bee39bfed
https://github.com/curl/curl/commit/e9b9bbac22c26cf67316fa8e6c6b9e831af3194
9fce2c55d4

(From OE-Core rev: 084d8ca3b47b47333edba87f6aa427a12ee574f2)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Peter Marko
f8ca40f3d1 sqlite3: patch CVE-2025-29088
Pick commit [1] mentioned in [2].

[1] 56d2fd008b
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-29088

(From OE-Core rev: 6a65833a53487571b1ed0831dcc0b1fb04946557)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Peter Marko
72bb9edc9a sqlite3: patch CVE-2025-3277
Pick commit [1] mentioned in [2].

[1] https://sqlite.org/src/info/498e3f1cf57f164f
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-3277

(From OE-Core rev: 2f800295919ac337f038e1678f4c0abb2a6e7f95)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Ashish Sharma
f261fbc7a6 binutils: patch CVE-2025-1182
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b425859021d17adf62f06fb904797cf8642986ad]

(From OE-Core rev: d27416eb05643afcd80435dd7ed27d6cd3d85650)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:53 -07:00
Vijay Anusuri
92701ca3e3 libsoup: Fix CVE-2025-32906
Upstream-Status: Backport from
1f509f31b6
& af5b9a4a39

(From OE-Core rev: c3ba6b665a907b8f8340aedcbf51bef79f1048b8)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:52 -07:00
Vijay Anusuri
83671ce4eb libsoup: Fix CVE-2025-32912
Upstream-Status: Backport from
cd077513f2
& 910ebdcd3d

(From OE-Core rev: f18f762edd7ffa02ead1f382856066d2157015ed)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:52 -07:00
Vijay Anusuri
9927baf245 libsoup: Fix CVE-2025-32911 & CVE-2025-32913
Upstream-Status: Backport from
7b4ef0e004
& f4a761fb66

(From OE-Core rev: c1bf4fca316c67b9ce1134c7e5bdc9c0ac9ab878)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:52 -07:00
Vijay Anusuri
ef68583826 libsoup: Fix CVE-2025-32909
Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libsoup/-/comm
it/ba4c3a6f988beff59e45801ab36067293d24ce92

(From OE-Core rev: 9eba43f18664a20d7f5dc8942eb39cfbd83c066e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:52 -07:00
Vijay Anusuri
1ec178a3cb libsoup: Fix CVE-2025-32910
Upstream-Status: Backport from
e40df6d48a
&
405a8a3459
& ea16eeacb0

(From OE-Core rev: c9c6c8c5be4df8cb2c44f1e6fe0954c9ee666e5a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-28 08:18:52 -07:00
Steve Sakoman
bab0f9f62a build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: 04038ecd1edd6592b826665a2b787387bb7074fa)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:45:35 -07:00
Steve Sakoman
0ce88bc347 poky.conf: bump version for 5.0.9
(From meta-yocto rev: 7f1be5a930554ea5036d2c806aa752ae0b2de826)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Vishwas Udupa
48cd4ee393 openssl: rewrite ptest installation
Rewrite (again) the openssl test suite installation.

Depend on and reuse already installed libraries and modules instead of
installing them twice.

Be more selective when installing from the build tree so we don't install
intermediate .c .d .o files.

This further reduces the size of openssl-dbg from ~120MB to ~18MB.

(From OE-Core rev: 8baa0ce7eae65026cb3a784adaf3a4fc724ce9c9)

Upstream-Status: Backport[https://git.yoctoproject.org/poky/commit/?id=76212866402edb947f745f837e3c3b98b3056e58]

(From OE-Core rev: b3cd05f123625c4c301fee925cdbb9641bc73412)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7621286640)
Signed-off-by: Vishwas Udupa <quic_vudupa@quicinc.com>

Change-Id: Ifc0e3a019c2abe5142d0f1e359ae5aa33dae1608
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Peter Marko
06d60d3877 libarchive: upgrade 3.7.4 -> 3.7.9
These is update with only bug and security releases.
On top of previous CVE patches, also CVE-2024-48615 is handled.
Also many security fixes without CVE assigment are included.

Note that upgrade to 3.7.5 on master required fix of test in
python3-libarchive-c, however that recipe does not yet have ptest in
scarthgap and the fix was in test only, not in productive code, so it is
not necessary in scarthgap.

Also remove CVE_STATUS which was obsolete already before this upgrade.

(From OE-Core rev: f20516a3ed8a39d7e4deddf11dd2acd871894048)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Ashish Sharma
9ef34c9ce9 binutils: patch CVE-2025-1181
Import patches from ubuntu:

Upstream-Status: Backport [ https://git.launchpad.net/ubuntu/+source/binutils/plain/debian/patches/CVE-2025-1181-pre.patch?h=applied/ubuntu/noble-security&id=d6b5bf57cf048c42e4bcd3a4ab32116d0b809774 &&
https://git.launchpad.net/ubuntu/+source/binutils/plain/debian/patches/CVE-2025-1181.patch?h=applied/ubuntu/noble-security&id=d6b5bf57cf048c42e4bcd3a4ab32116d0b809774

Upstream commit: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24 ]

(From OE-Core rev: abb575f6ac1f5badae2825f1cb6152379a6658ee)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Ashish Sharma
757102953a binutils: patch CVE-2025-1178 & CVE-2024-57360
Backport Fixes for:

*CVE-2025-1178 - Upstream-Status: Backport from [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=75086e9de1707281172cc77f178e7949a4414ed0]

*CVE-2024-57360 - Upstream-Status: Backport from  [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=5f8987d3999edb26e757115fe87be55787d510b9]

(From OE-Core rev: 15a7f68ce14f635acf9b988fc1958ee625de4e11)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Ashish Sharma
d13450d713 binutils: Fix CVE-2025-1176
Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/binutils/plain/debian/patches/CVE-2025-1176.patch?h=applied/ubuntu/jammy-security
Upstream commit https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=f9978defb6fab0bd8583942d97c112b0932ac814]

(From OE-Core rev: 8d02a680b415f3145f4a4ef71842f336d8e3513b)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-19 14:42:10 -07:00
Changqing Li
dcf9e34e51 patch.py: set commituser and commitemail for addNote
When PATCHTOOL is set to 'git', and user don't setup
user.name and user.email for git, do_patch fail with
the following error, fix by passing -c options.
CmdError("git notes --ref refs/notes/devtool append -m 'original patch: 0001-PATCH-increase-to-cpp17-version.patch' HEAD", 0, 'stdout:
stderr: Author identity unknown
*** Please tell me who you are.
Run
  git config --global user.email "you@example.com"
  git config --global user.name "Your Name"

(From OE-Core rev: 9de38ac99c2b19f549c00ea5277faf621c6f4e65)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Archana Polampalli
0b1e8f405c ghostscript: upgrade 10.04.0 -> 10.05.0
This upgrade addresses CVEs:
CVE-2025-27835 CVE-2025-27832
CVE-2025-27831 CVE-2025-27836
CVE-2025-27830 CVE-2025-27833
CVE-2025-27833 CVE-2025-27834

Changelog:
https://ghostscript.readthedocs.io/en/gs10.05.0/News.html

(From OE-Core rev: 2c851f74fa72c30d447d59d450eb9bc036404f55)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Hitendra Prajapati
5cf979eb70 go: fix CVE-2025-22871
Upstream-Status: Backport from 15e01a2e43

(From OE-Core rev: b343da566856ad17b5dc03d42d9241bcb44cad1b)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Peter Marko
1c7d2139ec xz: patch CVE-2025-31115
Cherry-pick commits from [1] linked from [2] from branch v5.4

[1] https://tukaani.org/xz/xz-cve-2025-31115.patch
[2] https://tukaani.org/xz/threaded-decoder-early-free.html

(From OE-Core rev: 952ea12f08a4e42f787a21fb98adaf4b17d0aee1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Peter Marko
5e34528a09 xz: upgrade 5.4.6 -> 5.4.7
License-Update: homepage update in [1]

[1] c5c091332c

(From OE-Core rev: e6565ca37da4821f8e3924fe6bc6a6f4eeedd9a9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Peter Marko
ef7ca876cd cve-update-nvd2-native: add workaround for json5 style list
NVD responses changed to an invalid json between:
* April 5, 2025 at 3:03:44 AM GMT+2
* April 5, 2025 at 4:19:48 AM GMT+2

The last response is since then in format
{
  "resultsPerPage": 625,
  "startIndex": 288000,
  "totalResults": 288625,
  "format": "NVD_CVE",
  "version": "2.0",
  "timestamp": "2025-04-07T07:17:17.534",
  "vulnerabilities": [
    {...},
    ...
    {...},
  ]
}

Json does not allow trailing , in responses, that is json5 format.
So cve-update-nvd2-native do_Fetch task fails with log backtrace ending:

...
File: '/builds/ccp/meta-siemens/projects/ccp/../../poky/meta/recipes-core/meta/cve-update-nvd2-native.bb', lineno: 234, function: update_db_file
     0230:            if raw_data is None:
     0231:                # We haven't managed to download data
     0232:                return False
     0233:
 *** 0234:            data = json.loads(raw_data)
     0235:
     0236:            index = data["startIndex"]
     0237:            total = data["totalResults"]
     0238:            per_page = data["resultsPerPage"]
...
File: '/usr/lib/python3.11/json/decoder.py', lineno: 355, function: raw_decode
     0351:        """
     0352:        try:
     0353:            obj, end = self.scan_once(s, idx)
     0354:        except StopIteration as err:
 *** 0355:            raise JSONDecodeError("Expecting value", s, err.value) from None
     0356:        return obj, end
Exception: json.decoder.JSONDecodeError: Expecting value: line 1 column 1442633 (char 1442632)
...

There was no announcement about json format of API v2.0 by nvd.
Also this happens only if whole database is queried (database update is
fine, even when multiple pages as queried).
And lastly it's only the cve list, all other lists inside are fine.
So this looks like a bug in NVD 2.0 introduced with some update.

Patch this with simple character deletion for now and let's monitor the
situation and possibly switch to json5 in the future.
Note that there is no native json5 support in python, we'd have to use
one of external libraries for it.

(From OE-Core rev: 4358fdfdd7a8908df98f7c4def2c8c1a6efb7256)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6e526327f5c9e739ac7981e4a43a4ce53a908945)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Archana Polampalli
60feedab22 go: fix CVE-2025-22870
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID
as a hostname component. For example, when the NO_PROXY environment variable
is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly
match and not be proxied.

(From OE-Core rev: 88e79f915137edc5a37a110abdc79f5800404e45)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Peter Marko
92c44bc788 ofono: patch CVE-2024-7537
Pick commit
https://web.git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=e6d8d526d5077c0b6ab459efeb6b882c28e0fdeb

(From OE-Core rev: 54ce53f7c2daf4f9d536e4e1f721035064c57b30)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-16 06:41:24 -07:00
Martin Jansa
78626a6f18 mc: set ac_cv_path_ZIP to avoid buildpaths QA issues
* in builds with zip in HOSTTOOLS mc fails with:
  ERROR: mc-4.8.31-r0 do_package_qa: QA Issue: File /usr/libexec/mc/extfs.d/uzip in package mc-helpers-perl contains reference to TMPDIR [buildpaths]
  and it's because of the path to zip:
  mc/4.8.31/package $ grep -R styhead .
  ./usr/libexec/mc/extfs.d/uzip:my $app_zip = "TMPDIR/hosttools/zip";

* don't use /usr/bin/env as in other cases, because app_zip is then used e.g. with:
  my $cmd_addlink = "$app_zip -g -y";

(From OE-Core rev: 4003b5faa1e5acfa025e1d0df4e021e06cf8724c)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-07 06:34:44 -07:00
Michael Halstead
32656e13ad yocto-uninative: Update to 4.7 for glibc 2.41
(From OE-Core rev: 7626067432743657e9c536ca16a2dac513ba4929)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-07 06:34:44 -07:00
Virendra Thakur
dc767c786b rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402
This CVE was created because fix for CVE-2024-24576 was incomplete.
Ignore the new CVE in the same way as the old one.

See https://nvd.nist.gov/vuln/detail/CVE-2024-43402

As per NVD, this CVE only affects to Windows platform

Reference: https://git.yoctoproject.org/meta-lts-mixins/commit/?h=scarthgap/rust&id=13f045acf6388d1e320fd4c0f3ca19ca7a75ef44

(From OE-Core rev: ef2ba1f04f6f21530dc4efe5c4f61cbb0c76c032)

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-07 06:34:44 -07:00
Peter Marko
24d8cf6f9f freetype: follow-up patch for CVE-2025-27363
Per [1] there are two patches needed - [2] which is already included in
3.13.1 and [3] which is only in 2.13.3.
Backport the second patch.

[1] https://gitlab.freedesktop.org/freetype/freetype/-/issues/1322
[2] ef63669652
[3] 73720c7c99

(From OE-Core rev: 41f855ea5a2018d08e0e9457d710032e96fe669b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-07 06:34:44 -07:00
Peter Marko
5ceb4646d2 expat: patch CVE-2024-8176
Backport https://github.com/libexpat/libexpat/pull/973
Patch created by:
git diff 2fc36833334340ff7ddca374d86daa8744c1dfa3..99529768b4a722f46c69b04b874c1d45b3eb819c

Additional backport (containing changes in tests only) was needed to
apply it cleanly.

Additional backport https://github.com/libexpat/libexpat/pull/989
which has fixed regression of the first fix.
Patch created by:
git diff 91ca72e913af94ed44ef2a80a9dd542be3e5766c..308c31ed647f2c6aebe33ca3a4fa9e1436f461e2

(From OE-Core rev: 3ece58813faaf4e5f66c7b52f736e84615ccfef6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-07 06:34:44 -07:00
Peter Marko
2af52d4819 cve-update-nvd2-native: handle missing vulnStatus
There is a new CVE which is missing vulnStatus field:
https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-2682

This leads to:
File: '<snip>/poky/meta/recipes-core/meta/cve-update-nvd2-native.bb', lineno: 336, function: update_db
     0332:
     0333:    accessVector = None
     0334:    vectorString = None
     0335:    cveId = elt['cve']['id']
 *** 0336:    if elt['cve']['vulnStatus'] ==  "Rejected":
     0337:        c = conn.cursor()
     0338:        c.execute("delete from PRODUCTS where ID = ?;", [cveId])
     0339:        c.execute("delete from NVD where ID = ?;", [cveId])
     0340:        c.close()
Exception: KeyError: 'vulnStatus'

(From OE-Core rev: 2f242f2a269bb18aab703f685e27f9c3ba761db8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Stefan Mueller-Klieser
fe7c269b02 kernel-arch: add macro-prefix-map in KERNEL_CC
When building external modules, macros can include absolute names of
kernel headers. The macro-prefix-map for the STAGING_KERNEL_DIR is
currently missing. Add it in the same way as its done in bitbake.conf.

This fixes reproducible builds and following build error:
ERROR: cryptodev-module-1.14-r0 do_package_qa: QA Issue: File <..>
cryptodev.ko <..> contains reference to TMPDIR [buildpaths]

(From OE-Core rev: a741e11751bfb8f52be58cf51abeddca4559e5e9)

(From OE-Core rev: 58eb15cdc2dd95bf5eb0bed2a0f1c43bf29cf273)

Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
98299d81f2 linux-yocto/6.6: update to v6.6.84
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4b6a8fa777d2 Linux 6.6.84
    a561c6a034c9 netfilter: nf_tables: allow clone callbacks to sleep
    f6de68e154ef netfilter: nf_tables: bail out if stateful expression provides no .clone
    7fa2e2960fff netfilter: nf_tables: use timestamp to check for set element timeout
    50b22a98c184 rust: lockdep: Remove support for dynamically allocated LockClassKeys
    812080b01dac nvme-tcp: Fix a C2HTermReq error message
    62485737050d HID: apple: disable Fn key handling on the Omoton KB066
    a09e085ba84b nvme-fc: rely on state transitions to handle connectivity loss
    efc30877bd4b Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
    fb0800cbea02 smb: client: Fix match_session bug preventing session reuse
    7dc9abfa00ab smb3: add support for IAKerb
    643607a53f07 stmmac: loongson: Pass correct arg to PCI function
    6653927733e1 i2c: sis630: Fix an error handling path in sis630_probe()
    9e3bef10e480 i2c: ali15x3: Fix an error handling path in ali15x3_probe()
    beb68cfcb3ff i2c: ali1535: Fix an error handling path in ali1535_probe()
    10cbae84fed8 cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
    474c08712d5f cifs: Validate content of WSL reparse point buffers
    6c13fcb7cf59 cifs: Fix integer overflow while processing closetimeo mount option
    d5fff81c4375 cifs: Fix integer overflow while processing actimeo mount option
    9e438d0410a4 cifs: Fix integer overflow while processing acdirmax mount option
    0252c33cc943 cifs: Fix integer overflow while processing acregmax mount option
    d3f9fdc298b8 scripts: generate_rust_analyzer: add missing macros deps
    a70259447d80 ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
    69a900480941 ASoC: rt722-sdca: add missing readable registers
    2592a628743e rust: init: add missing newline to pr_info! calls
    f69b8f42893e ASoC: cs42l43: Fix maximum ADC Volume
    b05b5627f0f1 drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
    5da54be46960 rust: error: add missing newline to pr_warn! calls
    544055329560 ASoC: ops: Consistently treat platform_max as control value
    86d97d49f198 mm: split critical region in remap_file_pages() and invoke LSMs in between
    b2fe954a4ddc lib/buildid: Handle memfd_secret() files in build_id_parse()
    aa4d9b54f11c rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>`
    b78467d3ba1c rust: Disallow BTF generation with Rust + LTO
    d026392e3f87 smb: client: fix regression with guest option
    2bff992a5505 qlcnic: fix memory leak issues in qlcnic_sriov_common.c
    7b2c29b7ea29 arm64: mm: Populate vmemmap at the page level if not section aligned
    818330f756f3 dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
    cfae6a5dad50 ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
    4f6c0f75293a clk: samsung: update PLL locktime for PLL142XX used on FSD platform
    09aeab680331 ksmbd: prevent connection release during oplock break notification
    fb776765bfc2 ksmbd: fix use-after-free in ksmbd_free_work_struct
    378b361e2e30 drm/amd/display: Fix slab-use-after-free on hdcp_work
    a8f77e1658d7 drm/amd/display: Assign normalized_pix_clk when color depth = 14
    8e91a6167889 drm/amd/display: Restore correct backlight brightness after a GPU reset
    8082ca0dd244 drm/amd/display: Disable unneeded hpd interrupts during dm_init
    b5c283501581 drm/dp_mst: Fix locking when skipping CSN before topology probing
    b3ddebaece2c drm/atomic: Filter out redundant DPMS calls
    6736975ee30d drm/i915/cdclk: Do cdclk post plane programming later
    e686349cc19e x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
    ab0f6e770d39 USB: serial: option: match on interface class for Telit FN990B
    61e540094fae USB: serial: option: fix Telit Cinterion FE990A name
    e1bfbf0f18ab USB: serial: option: add Telit Cinterion FE990B compositions
    528ac204851e USB: serial: ftdi_sio: add support for Altera USB Blaster 3
    392e9b29769a Input: i8042 - swap old quirk combination with new quirk for more devices
    e7c95c01064b Input: i8042 - swap old quirk combination with new quirk for several devices
    e690d0c52cde Input: i8042 - add required quirks for missing old boardnames
    105a21163750 Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
    d639d5531ad7 Input: xpad - rename QH controller to Legion Go S
    0c4484cdcbb8 Input: xpad - add support for TECNO Pocket Go
    dc9839dcc232 Input: xpad - add support for ZOTAC Gaming Zone
    8cf88f390e74 Input: xpad - add multiple supported devices
    5184e44bef75 Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
    0b5b6512f674 Input: iqs7222 - preserve system status register
    cbd68fca8878 Input: ads7846 - fix gpiod allocation
    78aefac7efdf io_uring: fix error pbuf checking
    1fdb9c9eb2ad io_uring: use unpin_user_pages() where appropriate
    46b1b3d81a7e io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
    af8f27ef1a00 io_uring/kbuf: vmap pinned buffer ring
    6168ec87bf12 io_uring: unify io_pin_pages()
    719e745ee31c io_uring: use vmap() for ring mapping
    b89f95b94cf7 io_uring: fix corner case forgetting to vunmap
    a0b21f2aca04 io_uring: don't attempt to mmap larger than what the user asks for
    2905c4fe7e52 io_uring: get rid of remap_pfn_range() for mapping rings/sqes
    b6690a4172a3 mm: add nommu variant of vm_insert_pages()
    0446d868190b block: fix 'kmem_cache of name 'bio-108' already exists'
    474cebf2978d net: Handle napi_schedule() calls from non-interrupt
    deb9982c4d55 drm/nouveau: Do not override forced connector status
    47f427220796 mptcp: safety check before fallback
    bb41ef31906e x86/irq: Define trace events conditionally
    cdf7658ea205 perf/x86/intel: Use better start period for frequency mode
    791eaeaa0935 drm/vkms: Round fixp2int conversion in lerp_u16
    fcfb7ea1f4c6 fuse: don't truncate cached, mutated symlink
    08ee4f873bd0 ASoC: tas2764: Set the SDOUT polarity correctly
    6c703ceaf6a6 ASoC: tas2764: Fix power control mask
    8f677fb436ef ASoC: tas2770: Fix volume scale
    f33c09085519 nvme: only allow entering LIVE from CONNECTING state
    6df3939d9301 sctp: Fix undefined behavior in left shift operation
    d3ca799203e5 cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
    492be1cd9e55 apple-nvme: Release power domains when probe fails
    bf78e63235c4 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
    e9764289d765 nvme-tcp: add basic support for the C2HTermReq PDU
    aca3cdc3a673 nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
    570f4d6e94ad io-wq: backoff when retrying worker creation
    f3288ffd33ea net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
    f623c04f7a63 ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
    a4859a07c383 ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
    7e97147479ff ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
    544f38b43fe8 ASoC: rsnd: adjust convert rate limitation
    7fe470e618aa ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
    fa51c913402f ASoC: rsnd: indicate unsupported clock rate
    aa2e8245052a ALSA: hda/realtek: Limit mic boost on Positivo ARN50
    9f303c35f9e8 ASoC: simple-card-utils.c: add missing dlc->of_node
    dfbaf8a6ae62 selftests/bpf: Fix invalid flag of recv()
    c96cce853542 Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
    45a5d06e7e69 Xen/swiotlb: mark xen_swiotlb_fixup() __init
    f225a79bd23b thermal/cpufreq_cooling: Remove structure member documentation
    051a7980f77e s390/cio: Fix CHPID "configure" attribute caching
    194dc8c7ac0e platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
    7f417bd96a1b platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
    265c03699e9b sched: Clarify wake_up_q()'s write to task->wake_q.next
    5b1c48532f71 objtool: Ignore dangling jump table entries
    be2051f81bf3 HID: apple: fix up the F6 key on the Omoton KB066 keyboard
    68eddb06f0ed HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
    945166034600 HID: topre: Fix n-key rollover on Realforce R3S TKL boards
    490eb24d6602 usb: phy: generic: Use proper helper for property detection
    7a7ada33879a HID: ignore non-functional sensor in HP 5MP Camera
    2a11cee9a9e2 HID: intel-ish-hid: Send clock sync message immediately after reset
    cc4c96f1fdc3 HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
    5d01a4ec46a4 vboxsf: fix building with GCC 15
    52df961953e8 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
    dd33c1a3859f smb: client: fix noisy when tree connecting to DFS interlink targets
    1b9cd0404e32 ACPI: resource: IRQ override for Eluktronics MECH-17
    ea371d1cdefb scsi: qla1280: Fix kernel oops when debug level > 2
    caa383226495 scsi: ufs: core: Fix error return with query response
    e9d4044f4b12 scsi: core: Use GFP_NOIO to avoid circular locking dependency
    c79ac6a812a9 platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
    6c8b1efdc487 sched/debug: Provide slice length for fair tasks
    2d1eef248107 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
    a470f80ef3a9 powercap: call put_device() on an error path in powercap_register_control_type()
    a625ad9b5b1b hrtimers: Mark is_migration_base() with __always_inline
    fa5bfdd93fa9 nvme-fc: do not ignore connectivity loss during connecting
    aef373bb9ab5 nvme-fc: go straight to connecting state when initializing
    885b7279819e net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
    bd7e3a428007 net/mlx5: Bridge, fix the crash caused by LAG state check
    4e79d865f019 net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
    4b1a0ee6164c net: openvswitch: remove misbehaving actions length check
    ecc19a9380e1 gre: Fix IPv6 link-local address generation.
    181b68fa55ac netfilter: nft_exthdr: fix offset with ipv4_find_option()
    78533c4a29ac net_sched: Prevent creation of classes with TC_H_ROOT
    1bd2a8bb1ccb ipvs: prevent integer overflow in do_ip_vs_get_ctl()
    fda50302a137 netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
    6e4edd9e2deb bonding: fix incorrect MAC address setting to receive NS messages
    1f7d051814e7 net: switchdev: Convert blocking notification chain to a raw one
    ee086c8e775f eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
    637105ef0d46 net/mlx5: handle errors in mlx5_chains_create_table()
    466ae740f88c Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
    ad27b4a51495 drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
    9d1966bdaf76 netpoll: hold rcu read lock in __netpoll_send_skb()
    6c5bb3f7acb7 net: mctp i2c: Copy headers if cloned
    78f83ea6b81a net: dsa: mv88e6xxx: Verify after ATU Load ops
    20b667285306 net/mlx5: Fill out devlink dev info only for PFs
    5e8ce74fb041 Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
    7e8cd2bc09b0 Bluetooth: hci_event: Fix enabling passive scanning
    75d262ad3c36 wifi: cfg80211: cancel wiphy_work before freeing wiphy
    0f0a152957d6 sched: address a potential NULL pointer dereference in the GRED scheduler.
    0a9f0cfd2ae8 netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
    5d30d256661f ice: fix memory leak in aRFS after reset
    29bde9751cb7 netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
    21e65f1fef64 pinctrl: bcm281xx: Fix incorrect regmap max_registers value
    c198157ae158 fbdev: hyperv_fb: iounmap() the correct memory when removing a device
    372df1f2057c tcp: fix forever orphan socket caused by tcp_abort
    abadaa355730 tcp: fix races in tcp_abort()
    f9543375d9b1 bpf: Use raw_spinlock_t in ringbuf
    472173544e74 hrtimer: Use and report correct timerslack values for realtime tasks
    c7ee791e5385 zram: fix NULL pointer in comp_algorithm_show()
    6e0447fa7d87 sched/isolation: Prevent boot crash when the boot CPU is nohz_full
    de47f33dde89 clockevents/drivers/i8253: Fix stop sequence for timer 0
    ceb5fadbf450 Revert "v6.6 -stable -rt merge fixup"
    1c2962a164ff v6.6 -stable -rt merge fixup
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: e36ac493ace6cdb9aee6cff8c0121ee98cfbc4bd)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
0a47b798e5 linux-yocto/6.6: update to v6.6.83
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    1c2962a164ff v6.6 -stable -rt merge fixup
    594a1dd5138a Linux 6.6.83
    d5285e088b50 kbuild: userprogs: use correct lld when linking through clang
    79a955ea4a2e pfifo_tail_enqueue: Drop new packet when sch->limit == 0
    f9825c3f507d spi-mxs: Fix chipselect glitch
    aa6ef9ceab9c x86/boot: Sanitize boot params before parsing command line
    c59843e87791 x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
    5b6eac63d157 ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
    bb4425498707 x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
    eff00c5e29ab uprobes: Fix race in uprobe_free_utask
    53402e17b1a7 drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
    03f1b76fcdbc Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
    e4c6eff5a3b5 Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
    36f688adf413 Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
    9e4b27250fcd Revert "KVM: e500: always restore irqs"
    52fffb4a1f86 riscv: Fix enabling cbo.zero when running in M-mode
    76c9f76d4ad1 ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
    128962f5ab56 kbuild: hdrcheck: fix cross build with clang
    62112e7f5cbd arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
    c04035ce803e mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
    11f0e95d6300 iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
    12012d432478 iio: dac: ad3552r: clear reset status flag
    82d94af45644 iio: filter: admv8818: Force initialization of SDO
    d7e5031fe3f1 drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
    47aa0f5c6370 eeprom: digsy_mtc: Make GPIO lookup table match the device
    1f9eb7078bc6 bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
    faac8e894014 slimbus: messaging: Free transaction ID in delayed interrupt scenario
    e49700a7d6d4 drivers: core: fix device leak in __fw_devlink_relax_cycles()
    d43b3f646686 char: misc: deallocate static minor in error path
    a5e10461dec0 intel_th: pci: Add Panther Lake-P/U support
    d66d16c32a5a intel_th: pci: Add Panther Lake-H support
    9d3c428e3eb4 intel_th: pci: Add Arrow Lake support
    693958465a6d mei: me: add panther lake P DID
    d7b339bbc887 cdx: Fix possible UAF error in driver_override_show()
    4f1ca393ea56 KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
    33bf2b75c1e9 KVM: SVM: Suppress DEBUGCTL.BTF on AMD
    978df364a3e0 KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
    c401b1b4b835 usb: xhci: Enable the TRB overfetch quirk on VIA VL805
    af091756c4c7 xhci: pci: Fix indentation in the PCI device ID definitions
    2c271df31868 usb: gadget: Check bmAttributes only if configuration is valid
    0af020298b06 usb: gadget: Fix setting self-powered state on suspend
    b7768bba6a69 usb: gadget: Set self-powered based on MaxPower and bmAttributes
    68f7ef440a15 usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
    8233c63fca35 usb: typec: ucsi: increase timeout for PPM reset operations
    656a99b581f5 usb: dwc3: gadget: Prevent irq storm when TH re-executes
    13f9b888ad0c usb: dwc3: Set SUSPENDENABLE soon after phy init
    a0475a885d69 usb: atm: cxacru: fix a flaw in existing endpoint checks
    0f6850613fe3 usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
    d50f5c0cd949 usb: renesas_usbhs: Flush the notify_hotplug_work
    46fba7be161b usb: typec: ucsi: Fix NULL pointer access
    7f0441af6ca5 usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
    7817af8b0b8e usb: hub: lack of clearing xHC resources
    ef0820290494 usb: renesas_usbhs: Use devm_usb_get_phy()
    d72f4475717e usb: renesas_usbhs: Call clk_put()
    3cae0b7e9639 Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
    897b7b76f021 gpio: rcar: Fix missing of_node_put() call
    9ff13800d6a8 net: ipv6: fix missing dst ref drop in ila lwtunnel
    925933d2cc63 net: ipv6: fix dst ref loop in ila lwtunnel
    88afbcb450c2 net: dsa: mt7530: Fix traffic flooding for MMIO devices
    9cc7f0018609 sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
    c6292a2ac392 ublk: set_params: properly check if parameters can be applied
    04ab4df09de8 net-timestamp: support TCP GSO case for a few missing flags
    747de766f804 exfat: fix soft lockup in exfat_clear_bitmap
    470537263443 x86/sgx: Fix size overflows in sgx_encl_create()
    356144259980 vlan: enforce underlying device type
    1eacd47636a9 ppp: Fix KMSAN uninit-value warning with bpf
    65dcc3af0215 net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
    5dc8312162de net: ipa: Fix QSB data for v4.7
    b9a3f30b30f3 net: ipa: Fix v4.7 resource group names
    026714ec7546 HID: hid-steam: Fix use-after-free when detaching device
    2c04e507f3a5 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
    41d731e79203 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
    4f5cc62f9a81 drm/sched: Fix preprocessor guard
    b1e17ebd82b9 hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
    416e8b4c20c6 llc: do not use skb_get() before dev_queue_xmit()
    8c48c26f5f6d ALSA: usx2y: validate nrpacks module parameter on probe
    2efd6cc2c772 tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
    c3dafdf77b97 hwmon: (ad7314) Validate leading zero bits and return error
    b5cc1496a090 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
    395c28f3c0c4 hwmon: (pmbus) Initialise page count in pmbus_identify()
    7c823e4c30d6 perf/core: Fix pmus_lock vs. pmus_srcu ordering
    90d302619ee7 caif_virtio: fix wrong pointer check in cfv_probe()
    01a83237644d net: gso: fix ownership in __udp_gso_segment
    84cce23da477 nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
    127c8905ea8e bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
    560f4d129934 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
    d0ef5f19b69d HID: google: fix unused variable warning under !CONFIG_ACPI
    b02f8d5a71c8 wifi: iwlwifi: limit printed string from FW file
    5c18fae5808d mm: don't skip arch_sync_kernel_mappings() in error paths
    b56b6cfdc7a7 mm/page_alloc: fix uninitialized variable
    f4e39e0ffbaf block: fix conversion of GPT partition name to 7-bit
    ab0727d6e219 NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
    272abd47f7d2 s390/traps: Fix test_monitor_call() inline assembly
    18519478b9a0 dma: kmsan: export kmsan_handle_dma() for modules
    2537f01d57f0 rapidio: fix an API misues when rio_add_net() fails
    e6411c3b9512 rapidio: add check for rio_add_net() in rio_scan_alloc_net()
    ebebbb0eded2 wifi: nl80211: reject cooked mode if it is set along with other flags
    35ef07112b61 wifi: cfg80211: regulatory: improve invalid hints checking
    bdb1805c248e Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
    c5845c73cbac Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
    f3fcdb2de9fd mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
    bd8dd64611ca x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
    672bc566cfe6 x86/cpu: Validate CPUID leaf 0x2 EDX output
    db79249be184 x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
    8d1fcb467e6f platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
    c9dbc5c774ad drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
    3b3c2be58d52 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
    c144d1995873 hwmon: (peci/dimmtemp) Do not provide fake thresholds data
    8e507b3798c6 ALSA: hda/realtek: update ALC222 depop optimize
    0b60d5b2f81f ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
    3f63e8fe7b56 ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
    5e1b3bf72710 ALSA: seq: Avoid module auto-load handling at event delivery
    d99dc8f7ea01 gpio: aggregator: protect driver attr handlers against module unload
    c10365031f16 gpio: rcar: Use raw_spinlock to protect register access
    8994f0ce8259 ksmbd: fix bug on trap in smb2_lock
    8573571060ca ksmbd: fix use-after-free in smb2_lock
    c1569dbbe2d4 ksmbd: fix out-of-bounds in parse_sec_desc()
    76861630b29e ksmbd: fix type confusion via race condition when using ipc_msg_send_request
    fc69e2c3219d HID: appleir: Fix potential NULL dereference at raw event handle
    8a998a80335e LoongArch: Set max_pfn with the PFN of the last page
    abf16e748aaa LoongArch: Use polling play_dead() when resuming from hibernation
    7929d3623303 LoongArch: Convert unreachable() to BUG()
    35415b915a81 tracing: tprobe-events: Fix a memory leak when tprobe with $retval
    a9704893eec8 Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
    2d62d8f3fcf8 x86/microcode/AMD: Add some forgotten models to the SHA check
    dd8aad26c5e4 riscv: signal: fix signal_minsigstksz
    1b0a08a4fd6a RISC-V: Enable cbo.zero in usermode
    19c9976b8123 riscv: cacheinfo: Use of_property_present() for non-boolean properties
    80aec5a85510 riscv: Prevent a bad reference count on CPU nodes
    ebccacb0b599 riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
    e1f99e0bae58 riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
    017df7c71477 NFS: O_DIRECT writes must check and adjust the file length
    6e954923b72e x86/speculation: Add __update_spec_ctrl() helper
    174853183929 net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
    f22f7ba83f00 net: enetc: Replace ifdef with IS_ENABLED
    54e0f2d2d340 net: enetc: Remove setting of RX software timestamp
    2a3f4e270dcf drm/amdgpu: disable BAR resize on Dell G5 SE
    c18438959b1d drm/amdgpu: Check extended configuration space register when system uses large bar
    4d2a7df718c3 ibmvnic: Inspect header requirements before using scrq direct
    6511585ed6e2 ibmvnic: Perform tx CSO during send scrq direct
    2c55d671849a smb: client: fix chmod(2) regression with ATTR_READONLY
    75cc3357a331 arm64: dts: rockchip: add rs485 support on uart5 of px30-ringneck-haikou
    9afdcba9489f drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
    dbae718671de drm/i915/xe2lpd: Move D2D enable/disable
    ea3f0b362dfe efi: Don't map the entire mokvar table to determine its size
    8f43ba5ee498 x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 38034511b7d854f168d9dc297881d9b6fc33f921)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
95670e76ff linux-yocto/6.6: update to v6.6.82
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    1998f703f4d7 Linux 6.6.82
    c92bd953243b x86/boot/32: Temporarily map initrd for microcode loading
    d4c860bb425d x86/microcode: Provide CONFIG_MICROCODE_INITRD32
    258f72d0acb5 x86/boot/32: Restructure mk_early_pgtbl_32()
    fa23256c09f0 x86/boot/32: De-uglify the 2/3 level paging difference in mk_early_pgtbl_32()
    5b10ecbadbaa x86/boot: Use __pa_nodebug() in mk_early_pgtbl_32()
    5fd09dda0ae0 x86/boot/32: Disable stackprotector and tracing for mk_early_pgtbl_32()
    640fad833ddc Linux 6.6.81
    57479e37d3f6 scsi: ufs: core: Cancel RTC work during ufshcd_remove()
    6e34b9d7caa5 scsi: ufs: core: Start the RTC update work later
    9aa1f0da237d scsi: ufs: core: Fix another deadlock during RTC update
    98a44622be2f x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
    a4921b76bc94 scsi: ufs: core: Fix deadlock during RTC update
    bef830144feb x86/microcode/AMD: Load only SHA256-checksummed patches
    12412835e296 x86/microcode/AMD: Add get_patch_level()
    5e253de2e514 x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration
    8a76fed3e5d1 x86/microcode/AMD: Merge early_apply_microcode() into its single callsite
    be5a41a9b5e4 x86/microcode/AMD: Have __apply_microcode_amd() return bool
    1f4caaf02c7c x86/microcode/AMD: Make __verify_patch_size() return bool
    5b330c18c1e4 x86/microcode/AMD: Return bool from find_blobs_in_containers()
    60675acfbc07 x86/microcode/AMD: Flush patch buffer mapping after application
    d31d50b35d35 x86/microcode/intel: Remove unnecessary cache writeback and invalidation
    9b86a44ea2c2 x86/microcode/AMD: Split load_microcode_amd()
    e7b2ccfed0d0 x86/microcode/AMD: Pay attention to the stepping dynamically
    0433b8e9f4a2 x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
    dbdf088ff85c x86/microcode/intel: Set new revision only after a successful update
    73aba0a0df21 x86/microcode: Rework early revisions reporting
    fba6e6fcabf3 x86/microcode: Prepare for minimal revision check
    287a86b4a4cb x86/microcode: Handle "offline" CPUs correctly
    8390133d68ac x86/apic: Provide apic_force_nmi_on_cpu()
    f2be90992d52 x86/microcode: Protect against instrumentation
    52b5dd846ff2 x86/microcode: Rendezvous and load in NMI
    9c31ea5b1be5 x86/microcode: Replace the all-in-one rendevous handler
    058370ffef99 x86/microcode: Provide new control functions
    08631b02ad07 x86/microcode: Add per CPU control field
    05baf15d045f x86/microcode: Add per CPU result state
    738aa6b98613 x86/microcode: Sanitize __wait_for_cpus()
    346bc32a465d x86/microcode: Clarify the late load logic
    7412a65d9562 x86/microcode: Handle "nosmt" correctly
    bb9646a9e45c x86/microcode: Clean up mc_cpu_down_prep()
    32096e8c3dac x86/microcode: Get rid of the schedule work indirection
    b42122933da3 x86/microcode: Mop up early loading leftovers
    021ab466701c x86/microcode/amd: Use cached microcode for AP load
    628478b1e42c x86/microcode/amd: Cache builtin/initrd microcode early
    b1bcf0d973ae x86/microcode/amd: Cache builtin microcode too
    465e490c986d x86/microcode/amd: Use correct per CPU ucode_cpu_info
    5481c4a48cbb x86/microcode: Remove pointless apply() invocation
    433f975e60fa x86/microcode/intel: Rework intel_find_matching_signature()
    15fd553a54f5 x86/microcode/intel: Reuse intel_cpu_collect_info()
    198ea646360d x86/microcode/intel: Rework intel_cpu_collect_info()
    149e3e4ad2eb x86/microcode/intel: Unify microcode apply() functions
    b6365c7c6cac x86/microcode/intel: Switch to kvmalloc()
    abbe616adec4 x86/microcode/intel: Save the microcode only after a successful late-load
    1dcf3264c173 x86/microcode/intel: Simplify early loading
    53d07dfbac0d x86/microcode/intel: Cleanup code further
    1092852de036 x86/microcode/intel: Simplify and rename generic_load_microcode()
    cc049de7c9a2 x86/microcode/intel: Simplify scan_microcode()
    67f9ed54896a x86/microcode/intel: Rip out mixed stepping support for Intel CPUs
    4a148d0054f3 x86/microcode/32: Move early loading after paging enable
    bcc87e2e0163 arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
    3b7d2d1b42d2 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
    9921e266029c gve: set xdp redirect target only when it is available
    c52d6aaf8ee8 amdgpu/pm/legacy: fix suspend/resume issues
    39854d382125 rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
    129b81f6912f rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
    7ec6b4bd2900 Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
    736b206d4e06 Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
    687322acb1eb riscv: signal: fix signal frame size
    06316f435b0f riscv/futex: sign extend compare value in atomic cmpxchg
    d82826201ffe rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
    32fb5ec825f6 scsi: ufs: core: bsg: Fix crash when arpmb command fails
    68786ab0935c sched/core: Prevent rescheduling when interrupts are disabled
    1d26aaa86124 rcuref: Plug slowpath race in rcuref_put()
    3df2bf42a03c vmlinux.lds: Ensure that const vars with relocations are mapped R/O
    3d7e7ef8fa1a mptcp: reset when MPTCP opts are dropped after join
    a05da2be18aa mptcp: always handle address removal under msk socket lock
    4bddfde8b692 phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
    9e728c1149f8 phy: tegra: xusb: reset VBUS & ID OVERRIDE
    12733d6e442a net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
    093d1753b857 net: enetc: correct the xdp_tx statistics
    3e89f019d8cb net: enetc: update UDP checksum when updating originTimestamp field
    5642c3aa1690 net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
    9561b0550c49 net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
    a2ee5e55b50a usbnet: gl620a: fix endpoint checking in genelink_bind()
    3035581db280 i2c: ls2x: Fix frequency division register access
    1b267e1b87d5 i2c: npcm: disable interrupt enable bit before devm_request_irq
    739f35f027ae drm/amd/display: Fix HPD after gpu reset
    574b3cf0412e drm/amd/display: Disable PSR-SU on eDP panels
    01d516530474 perf/core: Fix low freq setting via IOC_PERIOD
    dc972fd125e7 perf/x86: Fix low freqency setting issue
    f390c2eea571 perf/core: Add RCU read lock protection to perf_iterate_ctx()
    0bd89017e4e1 ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
    e9839cf12e9f ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
    f58a3f8e284d ftrace: Avoid potential division by zero in function_stat_show()
    43b254d46c74 tracing: Fix bad hist from corrupting named_triggers list
    2e06f42e88fc riscv: KVM: Fix SBI TIME error generation
    f9dd51830d30 riscv: KVM: Fix SBI IPI error generation
    9111be8870e1 riscv: KVM: Fix hart suspend status check
    c1a524d7f762 RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
    57b243058dc2 phy: rockchip: naneng-combphy: compatible reset with old DT
    788f6b5474a7 x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
    685da33c81d0 io_uring/net: save msg_control for compat
    0b6f19714588 uprobes: Reject the shared zeropage in uprobe_write_opcode()
    f0c3971405ce perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
    973421d5862b net: ti: icss-iep: Reject perout generation request
    8a299cc110a3 net: ti: icss-iep: Remove spinlock-based synchronization
    73b769252d69 net: ipv6: fix dst ref loop on input in rpl lwt
    25d8e065c797 net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
    c441f9281d7a net: ipv6: fix dst ref loop on input in seg6 lwt
    ab9de9c48316 net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
    665d91b0e465 include: net: add static inline dst_dev_overhead() to dst.h
    0df388df81fb net/mlx5: IRQ, Fix null string in debug print
    e79a4da90926 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
    28e5a2d14340 net: Clear old fragment checksum value in napi_reuse_skb
    e8352f7e1e81 tcp: Defer ts_recent changes until req is owned
    3c01102bec95 ice: Fix deinitializing VF in error path
    52a98adcc48e ice: add E830 HW VF mailbox message limit support
    88f7ac6c4fce ice: Add E830 device IDs, MAC type and registers
    ab82f7a80b64 ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
    b0738e182e75 ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
    26c8641769f0 firmware: cs_dsp: Remove async regmap writes
    abdbedfe8974 ipvs: Always clear ipvs_property flag in skb_scrub_packet()
    53cdb4c36830 ASoC: es8328: fix route from DAC to output
    5d7d7e5b6cf9 net: cadence: macb: Synchronize stats calculations
    4ec48f812804 ipvlan: ensure network headers are in skb linear part
    cc6c6b7a2fe9 ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos conversion.
    661c63cb34cf ipv4: Convert ip_route_input() to dscp_t.
    7dde0ade0d66 ipv4: Convert icmp_route_lookup() to dscp_t.
    ed8f499f87ce ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
    35c4d95749f5 ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
    6631345c8fb2 ipv4: icmp: Pass full DS field to ip_route_input()
    21b28f97e621 net/ipv4: add tracepoint for icmp_send
    5f303538c393 net: set the minimum for net_hotdata.netdev_budget_usecs
    799556c2f976 net: loopback: Avoid sending IP packets without an Ethernet header
    51dc41111089 afs: Fix the server_list to unuse a displaced server rather than putting it
    0b2bf6fb5353 afs: Make it possible to find the volumes that are using a server
    2c8de882158d rxrpc: rxperf: Fix missing decoding of terminal magic cookie
    fbe5582ad767 Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
    790e85fc3223 ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
    df7d2f8bcb15 sunrpc: suppress warnings for unused procfs functions
    b0c5a8977e2c RDMA/mlx5: Fix bind QP error cleanup flow
    06518de45eba scsi: core: Clear driver private data when retrying request
    876fe386df5d RDMA/mlx5: Fix AH static rate parsing
    b993c450f94d IB/core: Add support for XDR link speed
    fc238db6bffa SUNRPC: Handle -ETIMEDOUT return from tlshd
    c688d2d8b0d8 SUNRPC: Prevent looping due to rpc_signal_task() races
    93200181c56e SUNRPC: convert RPC_TASK_* constants to enum
    64455c8051c3 ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
    abc1d60a0205 scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
    3f82f8ae0d20 scsi: ufs: core: Prepare to introduce a new clock_gating lock
    21641160fb31 scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
    06701a545e9a scsi: ufs: core: Add UFS RTC support
    372b9333e078 scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
    44247323d75c RDMA/mana_ib: Allocate PAGE aligned doorbell index
    8f16e0b94ab5 IB/mlx5: Set and get correct qp_num for a DCT QP
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: 6c80848cd9ee79d7e92bcdbe9cbbc55b47645ac9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
91afd92a3d linux-yocto/6.6: update to v6.6.80
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    568e253c3e3b Linux 6.6.80
    60ba9b8a5b76 x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
    7891ac3b0a5c nilfs2: handle errors that nilfs_prepare_chunk() may return
    35dcb8a3a70e nilfs2: eliminate staggered calls to kunmap in nilfs_rename
    944a4f8f0b07 nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
    ad75c8ef506c perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
    be2778b6ddbd arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
    8fab939c5d62 md: Fix md_seq_ops() regressions
    4b79bee3e3c0 md: fix missing flush of sync_work
    d6fe973c8873 net/mlx5e: Don't call cleanup on profile rollback failure
    59bdc12fe980 ftrace: Do not add duplicate entries in subops manager ops
    ac35a1db0327 ftrace: Correct preemption accounting for function tracing.
    ae2661f0793b EDAC/qcom: Correct interrupt enable register configuration
    9e5d99a4cf2e smb: client: Add check for next_buffer in receive_encrypted_standard()
    8380ebc6f91b mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
    ad9393467fbd mtd: rawnand: cadence: use dma_map_resource for sdma address
    fcae111830a4 mtd: rawnand: cadence: fix error code in cadence_nand_init()
    91f0e576f937 mm,madvise,hugetlb: check for 0-length range after end address adjustment
    28d23f1351b2 acct: block access to kernel internal filesystems
    5c928e14a2cc acct: perform last write from workqueue
    f69d2cd84600 ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
    868f6223d2b1 ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
    edcb866a93bb ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
    afa500d47165 ASoC: fsl_micfil: Enable default case in micfil_set_quality()
    2b3878baf909 ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
    29ccb1e4040d nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
    95b93d542c75 lib/iov_iter: fix import_iovec_ubuf iovec management
    4f31247ecb37 soc: loongson: loongson2_guts: Add check for devm_kstrdup()
    0efa6c42f81c drop_monitor: fix incorrect initialization order
    d61cc1a435e6 tee: optee: Fix supplicant wait loop
    b9826e3b26ec io_uring: prevent opcode speculation
    f16a74c5f247 drm/i915/dp: Fix error handling during 128b/132b link training
    7cdb066a28f7 drm/i915: Make sure all planes in use by the joiner have their crtc included
    9546aaf0cbd7 drm/msm/dpu: Disable dither in phys encoder cleanup
    80824cef1759 arm64: dts: mediatek: mt8183: Disable DSI display output by default
    fbb770b97e18 drm/nouveau/pmu: Fix gp10b firmware guard
    586f0114875a bpf: skip non exist keys in generic_map_lookup_batch
    d3acd2a4c852 nvme/ioctl: add missing space in err message
    3b4d899d823c drm/msm: Avoid rounding up to one jiffy
    668ee1a95298 nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
    ab438396837a power: supply: da9150-fg: fix potential overflow
    6ecb9fa14eec bpf: Fix deadlock when freeing cgroup storage
    eab50afcf715 bpf: Disable non stream socket for strparser
    05a571ee23c0 bpf: Fix wrong copied_seq calculation
    a26f95b6e317 strparser: Add read_sock callback
    29cfda62ab4d bpf: avoid holding freeze_mutex during mmap operation
    fc01ba097319 bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
    d56d8a23d951 bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
    2b99b2c4621d drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
    c620a776d776 drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
    f8d9cc332161 drm/tidss: Fix race condition while handling interrupt registers
    ed14b2afe18c drm/tidss: Add simple K2G manual reset
    f1d5e6a5e468 tcp: drop secpath at the same time as we currently drop dst
    820cb874cfa5 net: axienet: Set mac_managed_pm
    24e0ede914a3 arp: switch to dev_getbyhwaddr() in arp_req_set_public()
    026b2a1b6a6f net: Add non-RCU dev_getbyhwaddr() helper
    ef3d41c51eb3 flow_dissector: Fix port range key handling in BPF conversion
    dfc61b8bd1df flow_dissector: Fix handling of mixed port and port-range keys
    87db59995eb1 geneve: Suppress list corruption splat in geneve_destroy_tunnels().
    9d03e7e37187 gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
    4907686790b0 tcp: adjust rcvq_space after updating scaling ratio
    61004a518920 vsock/bpf: Warn on socket without transport
    cc9a7832ede5 sockmap, vsock: For connectible sockets allow only connected
    093b0e5c9059 ibmvnic: Don't reference skb after sending to VIOS
    da8c1f9d8c96 ibmvnic: Add stat for tx direct vs tx batched
    4b1555f9f9fb ibmvnic: Introduce send sub-crq direct
    b43a1ad2b262 ibmvnic: Return error code on TX scrq flush fail
    940d15254d22 s390/ism: add release function for struct device
    48e348ff3e18 ALSA: seq: Drop UMP events when no UMP-conversion is set
    de4b679aa3b4 net/sched: cls_api: fix error handling causing NULL dereference
    a0675917bed1 ALSA: hda/cirrus: Correct the full scale volume set logic
    3ce92ca990cf geneve: Fix use-after-free in geneve_find_dev().
    2d542f13d263 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
    5c83016dfc3d ALSA: hda/realtek: Fixup ALC225 depop procedure
    044ce3bd2441 powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
    a2726229aed7 powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
    9dd4ff502813 ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
    deeee3adb2c0 USB: gadget: f_midi: f_midi_complete to call queue_work
    859cb45aefa6 usb: gadget: core: flush gadget workqueue after device removal
    e79e6f2490b3 USB: gadget: core: create sysfs link between udc and gadget
    2c49e894389a nvmem: imx-ocotp-ele: fix MAC address byte order
    a0ee898a5024 nvmem: Move and rename ->fixup_cell_info()
    276dae17ad97 nvmem: Simplify the ->add_cells() hook
    39dfc17a38f7 nvmem: Create a header for internal sharing
    4dbaa738c583 media: uvcvideo: Remove dangling pointers
    08384382e1db media: uvcvideo: Only save async fh if success
    bd747c0a1a0d media: uvcvideo: Refactor iterators
    a5128b5f2905 soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
    feea30e0754d soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
    3cce694e7e19 arm64: dts: qcom: sm8550: Fix ADSP memory base and length
    5d285b468ed6 arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
    5369d3b31f2f arm64: dts: qcom: sm8550: Add dma-coherent property
    5a8f1613a18a arm64: dts: qcom: sm8450: Fix ADSP memory base and length
    e96ddc4f0040 arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
    3cfce644d8a7 scsi: core: Do not retry I/Os during depopulation
    7f818ac0ac7f scsi: core: Handle depopulation and restoration in progress
    b11052c8c4f2 firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
    67f04c52e5f9 ASoC: renesas: rz-ssi: Add a check for negative sample_space
    a2cbcd70133d Input: synaptics - fix crash when enabling pass-through port
    c02d630398e4 Input: serio - define serio_pause_rx guard to pause and resume serio ports
    ab8b6bf2bf61 Bluetooth: qca: Fix poor RF performance for WCN6855
    ae2d111c09dc Bluetooth: qca: Update firmware-name to support board specific nvm
    e68d2b880ea9 Bluetooth: qca: Support downloading board id specific NVM for WCN7850
    5d8ba57800a7 cpufreq: fix using cpufreq-dt as module
    a9b868213e7d cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
    972486d37169 memcg: fix soft lockup in the OOM process
    0a657f6e7f3d mm: update mark_victim tracepoints fields
    52848a095b55 md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
    754fffa651d2 md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
    023d5bc95086 md/md-cluster: fix spares warnings for __le64
    ba9e0f057844 md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
    87ebc90e8423 md: simplify md_seq_ops
    452f50807917 md: factor out a helper from mddev_put()
    13231893fb7a md: use separate work_struct for md_start_sync()
    4534162e0916 xfs: don't over-report free space or inodes in statvfs
    1603b0b65731 xfs: report realtime block quota limits on realtime directories
    b887d2fe4a2b xfs: Check for delayed allocations before setting extsize
    067ee59f11bd xfs: streamline xfs_filestream_pick_ag
    1fe5c2aa3903 xfs: Reduce unnecessary searches when searching for the best extents
    c904df659911 xfs: update the pag for the last AG at recovery time
    7a2c24661db6 xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
    5a9f8279988b xfs: error out when a superblock buffer update reduces the agcount
    a9c1ebae75fc xfs: update the file system geometry after recoverying superblock buffers
    bb305f888d6c xfs: pass the exact range to initialize to xfs_initialize_perag
    5a9e3dbb0bf2 xfs: Remove empty declartion in header file
    b5d917a63987 xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
    9716ff882426 xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
    a8a80b75b443 xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
    479e112ddf30 xfs: don't ifdef around the exact minlen allocations
    41e7f8ffee95 xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
    f37a5f0e916c xfs: distinguish extra split from real ENOSPC from xfs_attr_node_try_addname
    512a91114295 xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
    702e1ac48f17 xfs: return bool from xfs_attr3_leaf_add
    3d58507d6c7a xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
    7b5b119191bf xfs: don't free cowblocks from under dirty pagecache on unshare
    f56db9ce3cd6 xfs: skip background cowblock trims on inodes open for write
    3e2f7c20510d xfs: fix a typo
    a6790b50bfa0 xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
    629e6a35dd53 xfs: validate inumber in xfs_iget
    ed6282de3d04 xfs: assert a valid limit in xfs_rtfind_forw
    14cc006ed668 arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
    c0249d3a0c3c Linux 6.6.79
    50a0821c8203 Revert "vfio/platform: check the bounds of read/write syscalls"
    c02c52036e6d x86/i8253: Disable PIT timer 0 when not in use
    f3b8e9d3414b vsock: Orphan socket after transport release
    3f4354016612 vsock: Keep the binding until socket destruction
    146a185f6c05 io_uring/kbuf: reallocate buf lists on upgrade
    4c8f958a07ff HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
    fd0d07cb8b47 alpha: replace hardcoded stack offsets with autogenerated ones
    933b08c0edfa mm: gup: fix infinite loop within __get_longterm_locked
    cad0406ad780 arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
    96156eb57726 md/md-bitmap: move bitmap_{start, end}write to md upper layer
    b29e6400be51 md/raid5: implement pers->bitmap_sector()
    14bc83e97fbd md: add a new callback pers->bitmap_sector()
    3e41ab9aef12 md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
    3b666dad3828 md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
    03877cb32666 md/raid5: recheck if reshape has finished with device_lock held
    f6b49d4617ad selftests: rtnetlink: update netdevsim ipsec output format
    30472935f708 netdevsim: print human readable IP address
    39a580cd1539 drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
    16ce8fd94da8 drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
    ff5d9e3705a3 x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
    eb0e0eca0eab drm/v3d: Stop active perfmon if it is being destroyed
    d7fa812845f6 drm/rcar-du: dsi: Fix PHY lock bit check
    e85e8d48bf6d drm/tidss: Clear the interrupt status for interrupts being disabled
    f99429229916 drm/tidss: Fix issue in irq handling causing irq-flood issue
    1b91c597b021 ipv6: mcast: add RCU protection to mld_newpack()
    81b25a07ebf5 ipv6: mcast: extend RCU protection in igmp6_send()
    ae38982f5216 ndisc: extend RCU protection in ndisc_send_skb()
    8ec57509c36c openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
    e9f4dee534eb arp: use RCU protection in arp_xmit()
    1cbb2aa90cd3 neighbour: use RCU protection in __neigh_notify()
    62091d80e155 neighbour: delete redundant judgment statements
    9e0ec817eb41 ndisc: use RCU protection in ndisc_alloc_skb()
    e1147961b214 HID: hid-steam: Move hidraw input (un)registering to work
    d6187df36586 HID: hid-steam: Make sure rumble work is canceled on removal
    4b996b618294 HID: hid-steam: Add Deck IMU support
    9f82ed6e4197 HID: hid-steam: Fix cleanup in probe()
    0c38fefe773f HID: hid-steam: remove pointless error message
    c68606bdfce3 HID: hid-steam: Add gamepad-only mode switched to by holding options
    622ee123a0d1 HID: hid-steam: Update list of identifiers from SDL
    9544708c64bc HID: hid-steam: Clean up locking
    463b37836e40 HID: hid-steam: Disable watchdog instead of using a heartbeat
    747035cde16f HID: hid-steam: Avoid overwriting smoothing parameter
    463a45592fa5 ipv6: icmp: convert to dev_net_rcu()
    4176a68b0db8 ipv6: use RCU protection in ip6_default_advmss()
    e99e146bf948 flow_dissector: use RCU protection to fetch dev_net()
    338f6418869f ipv4: icmp: convert to dev_net_rcu()
    9b1766d1ff5f ipv4: use RCU protection in __ip_rt_update_pmtu()
    3bed2abab4a6 net: ipv4: Cache pmtu for all packet paths if multipath enabled
    91d93fb59765 ipv4: use RCU protection in inet_select_addr()
    1f778d7a8ba2 ipv4: use RCU protection in rt_is_expired()
    30a26bffd759 ipv4: use RCU protection in ipv4_default_advmss()
    81f369b67006 net: add dev_net_rcu() helper
    4cfecb7fc742 net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
    afd983f102f8 ipv4: add RCU protection to ip4_dst_hoplimit()
    8783ceeee797 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
    0cc5bb930079 clocksource: Use pr_info() for "Checking clocksource synchronization" message
    29775681433c btrfs: fix hole expansion when writing at an offset beyond EOF
    7511887fcae7 mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
    d73d4c9588fc igc: Set buffer type for empty frames in igc_init_empty_frame
    79cf42024050 mmc: mtk-sd: Fix register settings for hs400(es) mode
    c1cf034d8de7 arm64: Handle .ARM.attributes section in linker scripts
    c727f338ab3a regmap-irq: Add missing kfree()
    9722e5b90725 regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
    92527100be38 partitions: mac: fix handling of bogus partition table
    bc7fe1a879fc gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
    98fde755d661 gpiolib: acpi: Add a quirk for Acer Nitro ANV14
    0f4573f8fe00 alpha: align stack for page fault and user unaligned trap handlers
    5e00346deb7b serial: 8250: Fix fifo underflow on flush
    ccdca0a0ff44 serial: port: Always update ->iotype in __uart_read_properties()
    357c267e5d30 serial: port: Assign ->iotype correctly when ->iobase is set
    a00e607102eb cgroup: fix race between fork and cgroup.kill
    b5bfb235f7e1 efi: Avoid cold plugged memory for placing the kernel
    16467ffd3d20 kbuild: userprogs: fix bitsize and target detection on clang
    f8bef3f067b6 wifi: ath12k: fix handling of 6 GHz rules
    147495d02a7f alpha: make stack 16-byte aligned (most cases)
    1590667a6075 can: etas_es58x: fix potential NULL pointer dereference on udev->serial
    2a6ea31d597d can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
    bb4fbd870cd9 can: c_can: fix unbalanced runtime PM disable in error path
    e505b83b9ee6 can: ctucanfd: handle skb allocation failure
    0947a24193c8 USB: serial: option: drop MeiG Smart defines
    ced6965f55e1 USB: serial: option: fix Telit Cinterion FN990A name
    5a3544d8ba22 USB: serial: option: add Telit Cinterion FN990B compositions
    4e6bd3620aa9 USB: serial: option: add MeiG Smart SLM828
    db89b3bebd08 usb: cdc-acm: Fix handling of oversized fragments
    6abb510251e7 usb: cdc-acm: Check control transfer buffer size before access
    1a3c2c4dce8a USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
    e905a0fca7bf USB: hub: Ignore non-compliant devices with too many configs or interfaces
    6ae6dee9f005 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
    8b6efb4d389e USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
    483cfd0f58fd USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
    54a5e0156ea7 usb: core: fix pipe creation for get_bMaxPacketSize0
    add6d8a137cb USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
    da1b45064fb2 usb: dwc2: gadget: remove of_node reference upon udc_stop
    e3470d4c5c7b usb: gadget: udc: renesas_usb3: Fix compiler warning
    5d6749bb1b1b usb: roles: set switch registered flag early on
    2f71a89d63d7 usb: dwc3: Fix timeout issue during controller enter/exit from halt state
    3aba54561999 usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
    1dde83a88392 perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
    d680a1e20222 KVM: nSVM: Enter guest mode before initializing nested NPT MMU
    874ff13c73c4 KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
    e43a8b9c4d70 drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
    a7aa23172858 batman-adv: Drop unmanaged ELP metric worker
    96405e2c499e batman-adv: Ignore neighbor throughput metrics in error case
    072b27873219 batman-adv: fix panic during interface removal
    ec4180dc87b1 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
    2b84a231910c orangefs: fix a oob in orangefs_debug_write
    a04fe3bfc71e x86/mm/tlb: Only trim the mm_cpumask once a second
    a3bcd891e113 ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
    3d9f63e2ac52 selftests: gpio: gpio-sim: Fix missing chip disablements
    207efb2f4ee5 Grab mm lock before grabbing pt lock
    19b3ca651b4b NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
    2a0696363da4 vfio/pci: Enable iowrite64 and ioread64 for vfio pci
    5ed11d00737d rtla/timerlat_top: Abort event processing on second signal
    a20341b7a167 rtla/timerlat_hist: Abort event processing on second signal
    5f782d4741bf scsi: ufs: bsg: Set bsg_queue to NULL after removal
    ac7ed282a0f1 PCI: switchtec: Add Microchip PCI100X device IDs
    d8fd38b901ef PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
    2c5601b99d79 media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
    06ffcc72121e media: uvcvideo: Add Kurokesu C1 PRO camera
    ec5fa3282465 media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
    a7e1b1388d41 media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
    95d0d793b678 media: i2c: ds90ub953: Add error handling for i2c reads/writes
    75ba1588c559 media: i2c: ds90ub913: Add error handling to ub913_hw_init()
    db84810d9996 media: cxd2841er: fix 64-bit division on gcc-9
    3a4f623bb6f2 soc/tegra: fuse: Update Tegra234 nvmem keepout list
    fb6a5edb6092 fbdev: omap: use threaded IRQ for LCD DMA
    edc64c0f686d RDMA/efa: Reset device on probe failure
    627218d4ac85 tools: fix annoying "mkdir -p ..." logs when building tools in parallel
    4d9b2b62e113 gpiolib: Fix crash on error in gpiochip_get_ngpios()
    99ca540851ee block: cleanup and fix batch completion adding conditions
    5a32765ac724 x86/xen: allow larger contiguous memory regions in PV guests
    461d9e8acaa4 xen/swiotlb: relax alignment requirements
    3f40a7ff39d9 drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
    7159b7e13743 gpio: bcm-kona: Add missing newline to dev_err format string
    0d091da7f9da gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
    88a78a7bdbaf gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
    b1da0f6264a3 drm/i915/selftests: avoid using uninitialized context
    b25ba45fcfdb cgroup: Remove steal time from usage_usec
    ab90894f33c1 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
    d071a91fa614 team: better TEAM_OPTION_TYPE_STRING validation
    964a8895704a LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
    1dfcc04e3cb4 LoongArch: Fix idle VS timer enqueue
    a303649b99b6 vxlan: check vxlan_vnigroup_init() return value
    c40cb5c03e37 vrf: use RCU protection in l3mdev_l3_out()
    35b3f615fbd4 ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
    94a0de224ed5 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
    966328191b4c spi: sn-f-ospi: Fix division by zero
    f3ce05283f6c HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
    62f8bf06262b HID: multitouch: Add NULL check in mt_input_configured
    c5d46ae55a51 pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
    23ad7797c74c NFSD: fix hang in nfsd4_shutdown_callback
    55d947315fb5 nfsd: clear acl_access/acl_default after releasing them
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: f9eb23de00c7d3b5d542c5a321769a778ac73a2c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
8f3c94e38c linux-yocto/6.6: update to v6.6.78
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4407146cf3fc Linux 6.6.78
    e8ad068c6ab8 KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
    4fc0f9eadda8 KVM: x86: Make x2APIC ID 100% readonly
    8ea0e7b3d7b8 tty: xilinx_uartps: split sysrq handling
    d113f9723f2b x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
    690c7fa03ebb selftests: mptcp: join: fix AF_INET6 variable
    a77201459464 mptcp: prevent excessive coalescing on receive
    de3b8d41d254 mptcp: pm: only set fullmesh for subflow endp
    785408bbafcf cachefiles: Fix NULL pointer dereference in object->file
    893b28374aba btrfs: avoid monopolizing a core when activating a swap file
    b4e355e70e12 Revert "btrfs: avoid monopolizing a core when activating a swap file"
    94459962b862 ocfs2: check dir i_size in ocfs2_find_entry
    2cc0f0e1b976 net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
    b85a15619899 spi: atmel-qspi: Memory barriers after memory-mapped I/O
    34e7a2360c1c spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
    96c40135d8a8 MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
    ec8aa93c30f4 rtc: zynqmp: Fix optional clock name property
    81846070cba1 ptp: Ensure info->enable callback is always set
    0228e5a6672d pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
    52ad6195bdb9 rtla/timerlat_top: Stop timerlat tracer on signal
    094809f6aff4 rtla/timerlat_hist: Stop timerlat tracer on signal
    5a9eb34972cb rtla: Add trace_instance_stop
    41955b6c2681 rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
    83b74901bdc9 rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
    d5eae440f718 rtla/osnoise: Distinguish missing workload option
    ee8c4c39a8f9 tracing/osnoise: Fix resetting of tracepoints
    d86c6f80972e scripts/gdb: fix aarch64 userspace detection in get_current_task
    82aa8d362a2a maple_tree: simplify split calculation
    78a73c6fe0d8 net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
    ab9f2ec09f17 net/ncsi: wait for the last response to Deselect Package before configuring channel
    c0464bad0e85 misc: fastrpc: Fix copy buffer page size
    e563ccd6be3c misc: fastrpc: Fix registered buffer page address
    24bcf8f6f9c0 misc: fastrpc: Deregister device nodes properly in error scenarios
    3df72111c39f misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
    5d19ca5d2591 mtd: onenand: Fix uninitialized retlen in do_otp_read()
    221e874ea5bf irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
    069a8680af14 i3c: master: Fix missing 'ret' assignment in set_speed()
    172cdfc3a5ea NFC: nci: Add bounds checking in nci_hci_create_pipe()
    88f4311d1d5e mailbox: tegra-hsp: Clear mailbox before using message
    f2bd0f1ab478 nilfs2: fix possible int overflows in nilfs_fiemap()
    b6833b38984d ocfs2: handle a symlink read error correctly
    e763392da6b1 ocfs2: fix incorrect CPU endianness conversion causing mount failure
    e5d289c972eb pnfs/flexfiles: retry getting layout segment for reads
    7a9b86bd2261 selftests: mptcp: connect: -f: no reconnect
    03844b190811 vfio/platform: check the bounds of read/write syscalls
    644636ee7eb2 io_uring/rw: commit provided buffer state on async
    a94592ec30ff io_uring: fix io_req_prep_async with provided buffers
    130675a21942 io_uring/net: don't retry connect operation on EPOLLERR
    b86f1d51731e io_uring: fix multishots with selected buffers
    a9206d8a512e nvmem: imx-ocotp-ele: set word length to 1
    bb2b7ba5faaa nvmem: imx-ocotp-ele: fix reading from non zero offset
    cb091f37cc1c nvmem: imx-ocotp-ele: simplify read beyond device check
    0ba8ea28918b nvmem: core: improve range check for nvmem_cell_write()
    12f428f59748 nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
    e914b2f795b6 crypto: qce - unregister previously registered algos in error path
    37b71cec0bda crypto: qce - fix goto jump in error path
    d5e6e3000309 ata: libata-sff: Ensure that we cannot write outside the allocated buffer
    19b22dadd487 mm: kmemleak: fix upper boundary check for physical address objects
    aed5248fe9e1 media: uvcvideo: Remove redundant NULL assignment
    5448ac02e9c0 media: uvcvideo: Support partial control reads
    53107a8f17df media: uvcvideo: Fix event flags in uvc_ctrl_send_events
    0b5e0445bc83 media: uvcvideo: Fix crash during unbind if gpio unit is in use
    1eb8e73eb4a3 media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
    c3c9300062b6 media: i2c: ds90ub960: Fix UB9702 VC map
    45e2ad4e1253 media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
    474d7baf91d3 media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
    68b645edc412 media: ccs: Fix cleanup order in ccs_probe()
    08cb112ca61b media: ccs: Fix CCS static data parsing for large block sizes
    747c04b1aac9 media: ov5640: fix get_light_freq on auto
    25abffee5ceb media: imx296: Add standby delay during probe
    3e4a43a965a8 media: mc: fix endpoint iteration
    4ab7185ad5a6 media: mmp: Bring back registration of the device
    88792f3992cb soc: qcom: smem_state: fix missing of_node_put in error path
    56eefe1f2fb7 soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
    8eb80b9c9bdf iio: light: as73211: fix channel handling in only-color triggered buffer
    1d447317022e media: ccs: Clean up parsed CCS static data on parse failure
    7753ef5ba2a6 kfence: skip __GFP_THISNODE allocations on NUMA systems
    0796fa13788c rv: Reset per-task monitors also for idle tasks
    50365a6304a5 tpm: Change to kvalloc() in eventlog/acpi.c
    df6c8203f2cb ACPI: PRM: Remove unnecessary strict handler address checks
    970e92cac159 xfs: Add error handling for xfs_reflink_cancel_cow_range
    1af7697727d0 xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
    3a525fcaa1bb pwm: microchip-core: fix incorrect comparison with max period
    705f566f91ca arm64: tegra: Disable Tegra234 sce-fabric node
    b8cf1649c31d arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
    73142af4e3bf crypto: qce - fix priority to be less than ARMv8 CE
    cb8612851892 arm64: dts: qcom: sm8550: correct MDSS interconnects
    a0f741013a78 arm64: dts: qcom: sm8550: Fix MPSS memory length
    27145756466f arm64: dts: qcom: sm8550: Fix CDSP memory length
    b57466d4638c arm64: dts: qcom: sm8450: Fix MPSS memory length
    29e2abea06fa arm64: dts: qcom: sm8450: Fix CDSP memory length
    e7f3016bd6f5 arm64: dts: qcom: sm8350: Fix MPSS memory length
    62692dd301ee arm64: dts: qcom: sm8350: Fix CDSP memory base and length
    18a384670b3f arm64: dts: qcom: sm8350: Fix ADSP memory base and length
    a77d7958c3ab arm64: dts: qcom: sm6375: Fix MPSS memory base and length
    91ed86aa8c8a arm64: dts: qcom: sm6375: Fix CDSP memory base and length
    7aa20f255751 arm64: dts: qcom: sm6375: Fix ADSP memory length
    4c3ada3f57ac arm64: dts: qcom: sm6350: Fix uart1 interconnect path
    f2d430edb3af arm64: dts: qcom: sm6350: Fix MPSS memory length
    601e6204cc02 arm64: dts: qcom: sm6350: Fix ADSP memory length
    d4a06764feda arm64: dts: qcom: sm6115: Fix ADSP memory base and length
    55c42a2df0b6 arm64: dts: qcom: sm6115: Fix CDSP memory length
    425d3f99fd5c arm64: dts: qcom: sm6115: Fix MPSS memory length
    5538b1b2eeb7 ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
    1995976dc590 ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
    9a6550bbe419 ubi: Add a check for ubi_num
    e5fe2d01dd97 x86/boot: Use '-std=gnu11' to fix build with GCC 15
    6a42d6378387 rust: init: use explicit ABI to clean warning in future compilers
    3ae5615f48cd kbuild: Move -Wenum-enum-conversion to W=2
    7df68980e8b7 scsi: storvsc: Set correct data length for sending SCSI command without payload
    7f1e0af18198 scsi: ufs: qcom: Fix crypto key eviction
    217230bc8796 scsi: qla2xxx: Move FCE Trace buffer allocation to user control
    7bfa83ee25a6 scsi: st: Don't set pos_unknown just after device recognition
    42385f9c4c67 nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
    9db27ba3a127 nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
    97bc165a0686 PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
    8852e056e297 PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
    ce5bcb573279 arm64: tegra: Fix Tegra234 PCIe interrupt-map
    3cef733e15cd ALSA: hda: Fix headset detection failure due to unstable sort
    125c6cb70934 ALSA: hda/realtek: Enable headset mic on Positivo C6400
    a80f82d31ca6 Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
    84671b0630cc block: don't revert iter for -EIOCBQUEUED
    0b0c4d1de598 mips/math-emu: fix emulation of the prefx instruction
    53be273d8def dm-crypt: track tag_offset in convert_context
    179a3e8740a3 dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
    4a3909268073 powerpc/pseries/eeh: Fix get PE state translation
    cfa6d9424c0e LoongArch: Extend the maximum number of watchpoints
    18f34beba652 MIPS: Loongson64: remove ROM Size unit in boardinfo
    92f59f8b45bf serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
    3b49a756b70b serial: sh-sci: Drop __initdata macro for port_cfg
    47470acd719d soc: qcom: socinfo: Avoid out of bounds read of serial number
    1f4580e049cc ASoC: acp: Support microphone from Lenovo Go S
    d4bbd291c9fe usbnet: ipheth: document scope of NCM implementation
    22475242ddb7 usbnet: ipheth: fix DPE OoB read
    ed9866898e19 usbnet: ipheth: break up NCM header size computation
    e94fb338b523 usbnet: ipheth: refactor NCM datagram loop
    92f2a8094f1f usbnet: ipheth: check that DPE points past NCM header
    8fb062178e1c usbnet: ipheth: use static NDP16 location in URB
    18bf6f5cce31 usbnet: ipheth: fix possible overflow in DPE length check
    ae7045a20d32 usb: gadget: f_tcm: Don't prepare BOT write request twice
    d0d36fb2fea5 usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
    9ec6b25b7c7a usb: gadget: f_tcm: Decrement command ref count on cleanup
    bbe8e62f31cd usb: gadget: f_tcm: Translate error to sense
    9875dc6ef9b5 wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
    2955a92db595 wifi: rtw88: sdio: Fix disconnection after beacon loss
    7b279f966c3e wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
    3877fc67bd3d wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
    5fb45870eba0 wifi: rtlwifi: rtl8821ae: Fix media status report
    8d02b61a0a6e HID: hid-sensor-hub: don't use stale platform-data on remove
    bcf0fb1a4600 of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
    b9f177d535e8 of: Fix of_find_node_opts_by_path() handling of alias+path+options
    fe44f5f5887c of: Correct child specifier used as input of the 2nd nexus node
    0176c4af3f71 scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
    8da6b450a17f perf bench: Fix undefined behavior in cmpworker()
    b480d2b5dcc9 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    993121481b5a blk-cgroup: Fix class @block_class's subsystem refcount leakage
    fc60e9357f15 clk: mediatek: mt2701-mm: add missing dummy clk
    6f4868e6b288 clk: mediatek: mt2701-img: add missing dummy clk
    a1fa3dda6bf0 clk: mediatek: mt2701-bdp: add missing dummy clk
    20210b5c775d clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
    b6c5237ab7af clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
    118c66164fbe clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
    ebe1322167c1 clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
    3ad28517385e clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
    08b77ed7cfaa clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
    9b6c92663afe clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
    c242fd39dc20 clk: qcom: clk-alpha-pll: fix alpha mode configuration
    30f605e8b8de media: i2c: ds90ub960: Fix UB9702 refclk register access
    61ff966c6481 clk: sunxi-ng: a100: enable MMC clock reparenting
    aa91d5401614 Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
    245d48c1ba3e Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    c48f7a360f3c drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
    065385499ccf drm/komeda: Add check for komeda_get_layer_fourcc_list()
    dc4a876538e6 drm/i915: Fix page cleanup on DMA remap failure
    cce94ba65bbd drm/i915/guc: Debug print LRC state entries only if the context is pinned
    dcc3f2c06d80 Revert "drm/amd/display: Use HW lock mgr for PSR1"
    f4c931e9d203 drm/amdkfd: only flush the validate MES contex
    12457cf8e004 drm/amd/pm: Mark MM activity as unsupported
    82f59d64e629 ksmbd: fix integer overflows on 32 bit systems
    fcd06731f59f KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
    125da53b3c0c KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
    b7ced74c7e93 arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
    f12f0457748c drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
    6f796f08856e KVM: arm64: timer: Always evaluate the need for a soft timer
    d17ca8f2dfcf binfmt_flat: Fix integer overflow bug on 32 bit systems
    553fbae0effd fs/proc: do_task_stat: Fix ESP not readable during coredump
    0be6beead8c4 m68k: vga: Fix I/O defines
    44d85a423b56 s390/futex: Fix FUTEX_OP_ANDN implementation
    3c0866372ab8 smb: client: change lease epoch type from unsigned int to __u16
    7a5f926b3737 smb: client: fix order of arguments of tracepoints
    fc962f508a03 drm/modeset: Handle tiled displays in pan_display_atomic.
    af5128c9ebd7 ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
    1abeeb919910 leds: lp8860: Write full EEPROM, not only half of it
    96616a37a0f6 cpufreq: s3c64xx: Fix compilation warning
    7770b2211d63 rxrpc: Fix call state set to not include the SERVER_SECURING state
    d2f275112c3a net: sched: Fix truncation of offloaded action statistics
    e8390a47a343 tun: revert fix group permission check
    1f8e3f4a4b8b netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
    db4ae2879085 ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
    b960062afa89 x86/xen: add FRAME_END to xen_hypercall_hvm()
    242f7584da3a x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
    e0384efd45f6 net: rose: lock the socket in rose_bind()
    a86f51724a10 net: atlantic: fix warning during hot unplug
    2d1637afc4eb gpio: pca953x: Improve interrupt support
    f7627c81983c rxrpc: Fix the rxrpc_connection attend queue handling
    eaf4268850dd udp: gso: do not drop small packets when PMTU reduces
    66c96550fe24 tg3: Disable tg3 PCIe AER on system reboot
    858e1feac50d vmxnet3: Fix tx queue race condition with XDP
    14a28eb9bdac ice: Add check for devm_kzalloc()
    fcb2be1b3c2d net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
    40a29e84995d nvme-fc: use ctrl state getter
    ac1728cf370b ice: put Rx buffers after being done with current frame
    e31e65661c54 gpu: drm_dp_cec: fix broken CEC adapter properties check
    5848c712c82a firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
    795786303295 nvme: handle connectivity loss in nvme_set_queue_count
    ba32f06e15c6 net/ncsi: fix locking in Get MAC Address handling
    67515088591e net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
    b9d93eda1214 KVM: e500: always restore irqs
    ba3cf83f4a50 KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
    59e21c4613b0 KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
    15d60c13b704 KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
    b8261bfaebbb platform/x86: acer-wmi: Ignore AC events
    530a91be13af Input: allocate keycode for phone linking
    a9e33a054cac ASoC: amd: Add ACPI dependency to fix build error
    79b8c7c93beb ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
    f9c7cc44758f platform/x86: int3472: Check for adev == NULL
    d9aa993ae5ba iommu/arm-smmu-v3: Clean up more on probe failure
    cae133ab8df3 iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
    e2612a5437a0 x86/kexec: Allocate PGD for x86_64 transition page tables separately
    decefd41316b selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
    44b4b97439a5 tipc: re-order conditions in tipc_crypto_key_rcv()
    b4f6aa16663f mmc: sdhci-msm: Correctly set the load for the regulator
    2f0fd471cc03 net: wwan: iosm: Fix hibernation by re-binding the driver around it
    4ebbcb9bc794 Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
    c09a05b3a394 APEI: GHES: Have GHES honor the panic= setting
    1b00ccd73312 i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
    d32136e5ba2b wifi: iwlwifi: avoid memory leak
    c9480e9f2d10 wifi: brcmfmac: Check the return value of of_property_read_string_index()
    c2813471b663 net/mlx5: use do_aux_work for PHC overflow checks
    9955d4064d59 HID: Wacom: Add PCI Wacom device support
    8a68e1c374fa clk: qcom: Make GCC_8150 depend on QCOM_GDSC
    6aa0de131f53 mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
    fe1c021eb03d tomoyo: don't emit warning in tomoyo_write_control()
    093286c33409 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
    9211e3220738 mmc: core: Respect quirk_max_rate for non-UHS SDIO card
    0b41f8c84167 tun: fix group permission check
    19d452a94632 wifi: rtw89: add crystal_cap check to avoid setting as overflow value
    96fae5bd1589 safesetid: check size of policy writes
    4723df76ac9e drm/bridge: it6505: fix HDCP CTS KSV list wait timer
    a51b9affe5d6 drm/bridge: it6505: fix HDCP CTS compare V matching
    810b6f6aea59 drm/bridge: it6505: fix HDCP encryption when R0 ready
    3a4487883121 drm/bridge: it6505: fix HDCP Bstatus check
    3da5be16af92 drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
    df6fc38a37d4 drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
    662c20e449dc drm/vc4: hdmi: use eld_mutex to protect access to connector->eld
    300c6efc95fb drm/sti: hdmi: use eld_mutex to protect access to connector->eld
    83e4ac9f87f1 drm/radeon: use eld_mutex to protect access to connector->eld
    0493070d7cee drm/exynos: hdmi: use eld_mutex to protect access to connector->eld
    ac7d01ab10f4 drm/amd/display: use eld_mutex to protect access to connector->eld
    d698cbfef632 drm/bridge: ite-it66121: use eld_mutex to protect access to connector->eld
    ad8870a64714 drm/bridge: anx7625: use eld_mutex to protect access to connector->eld
    f2196ad7c0b3 drm/connector: add mutex to protect ELD from concurrent access
    4acf6bab775d printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
    f94036559312 drm/virtio: New fence for every plane update
    737ae6ddec9c x86/amd_nb: Restrict init function to AMD-based systems
    5fbad86fae1e lockdep: Fix upper limit for LOCKDEP_*_BITS configs
    7380819963f5 sched: Don't try to catch up excess steal time.
    3c884b6bd823 btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
    726d36347b0f btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
    52c0b3cb6f03 s390/stackleak: Use exrl instead of ex in __stackleak_poison()
    dc5da273051e exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
    4227ce0c5e3f arm64/mm: Ensure adequate HUGE_MAX_HSTATE
    8f5cff471039 btrfs: fix use-after-free when attempting to join an aborted transaction
    927b930f117b btrfs: fix assertion failure when splitting ordered extent after transaction abort
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: d0efefc0b58827bd1810f0bb3d41eb12da6f468b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:43 -07:00
Bruce Ashfield
6b08410d0e linux-yocto/6.6: update to v6.6.77
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c719455843a8 Linux 6.6.77
    c903f4959a59 Revert "hostfs: convert hostfs to use the new mount API"
    f55d1ee3a43c Revert "hostfs: fix string handling in __dentry_name()"
    dd942aca6445 Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
    fd5799f2ddd4 Revert "hostfs: fix the host directory parse when mounting."
    ef3ce4bf49dc Linux 6.6.76
    9b7f5ef4bace LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
    cefbf9f892ce s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
    49b8241c5aaf btrfs: output the reason for open_ctree() failure
    1b2af918bb71 media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
    dfde3d63afba staging: media: max96712: fix kernel oops when removing module
    16907219ad67 usb: gadget: f_tcm: Don't free command immediately
    cd3bbcb6b3a7 pps: Fix a use-after-free
    6c36dcd662ec media: uvcvideo: Fix double free in error path
    b32d60a852bb remoteproc: core: Fix ida_free call while not allocated
    0263fb2e7b7b mptcp: handle fastopen disconnect correctly
    7f6c72b8ef81 mptcp: consolidate suboption status
    6f10f641b489 usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
    76bae35d44f3 usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
    876b1bf63b6f usb: dwc3: core: Defer the probe until USB power supply ready
    0962220d7a98 usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
    0e7fc92a0572 usb: gadget: f_tcm: Fix Get/SetInterface return value
    9e490b665ca3 drivers/card_reader/rtsx_usb: Restore interrupt based detection
    b649f0d5bc25 usb: xhci: Fix NULL pointer dereference on certain command aborts
    3c706829ceb6 net: usb: rtl8150: enable basic endpoint checking
    5e75091a93b9 ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
    fe215b8dd76c ktest.pl: Check kernelrelease return in get_version
    bab3e9f342e0 selftests/rseq: Fix handling of glibc without rseq support
    82e491e08571 netfilter: nf_tables: reject mismatching sum of field_len with set key length
    cbfb30ae17d4 kbuild: switch from lz4c to lz4 for compression
    225b88642aef Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
    18edc1d03ca0 NFSD: Reset cb_seq_status after NFS4ERR_DELAY
    0bf2adad03e1 f2fs: Introduce linear search for dentries
    aa420dee3392 hexagon: Fix unbalanced spinlock in die()
    97517cba7671 hexagon: fix using plain integer as NULL pointer warning in cmpxchg
    29f5ee6c9774 kconfig: fix memory leak in sym_warn_unmet_dep()
    582e70f1eddf kconfig: WERROR unmet symbol dependency
    487852a55a48 kconfig: deduplicate code in conf_read_simple()
    94d9ee3b85d2 kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
    26341c1bb766 kconfig: require a space after '#' for valid input
    13dc6f1692e0 kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
    089d1c188a5a cifs: Fix getting and setting SACLs over SMB1
    32cc06a68d3a cifs: Validate EAs for WSL reparse points
    563ba1701bc1 io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
    730071ea1ea7 ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
    b730c68ea282 RISC-V: Mark riscv_v_init() as __init
    be80de30b347 hostfs: fix the host directory parse when mounting.
    1fbe93dd7e6a hostfs: Add const qualifier to host_root in hostfs_fill_super()
    86ec56b25476 hostfs: fix string handling in __dentry_name()
    d073828fe0f5 hostfs: convert hostfs to use the new mount API
    4517f37bf54e genksyms: fix memory leak when the same symbol is read from *.symref file
    9dc841e89ae0 genksyms: fix memory leak when the same symbol is added from source
    62289ebb2554 net: hsr: fix fill_frame_info() regression vs VLAN packets
    f59acc3f9441 net: sh_eth: Fix missing rtnl lock in suspend/resume path
    b1bc4a35a04c net: xdp: Disallow attaching device-bound programs in generic mode
    b01e7ceb35dc tcp: correct handling of extreme memory squeeze
    5e6e723675e5 bgmac: reduce max frame size to support just MTU 1500
    77ad90dd18ae vsock: Allow retrying on connect() failure
    3924c153761c Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
    d2cd915aea83 perf trace: Fix runtime error of index out of bounds
    6d3693d402a8 net: stmmac: Limit FIFO size by hardware capability
    80083bd4c214 net: stmmac: Limit the number of MTL queues to hardware capability
    2a6d1e1d022b ptp: Properly handle compat ioctls
    c411f9a5fdc9 net: davicom: fix UAF in dm9000_drv_remove
    a84d511165d6 vxlan: Fix uninit-value in vxlan_vnifilter_dump()
    b91034314ad2 net: netdevsim: try to close UDP port harness races
    51c128ba038c net: rose: fix timer races against user threads
    5385c1d1c08f iavf: allow changing VLAN state without calling PF
    02794e35ab0d PM: hibernate: Add error handling for syscore_suspend()
    b379b3162ff5 ipmr: do not call mr_mfc_uses_dev() for unres entries
    d063bec046a0 net: fec: implement TSO descriptor cleanup
    d5a17441bb38 gpio: mxc: remove dead code after switch to DT-only
    b5a8bc47aa0a net: hns3: fix oops when unload drivers paralleling
    c0f6111bb525 regulator: core: Add missing newline character
    40e25a3c0063 ubifs: skip dumping tnc tree when zroot is null
    20f0f55e6d68 rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
    9adefa7b9559 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
    c6e1b2cac24b xfrm: delete intermediate secpath entry in packet offload mode
    b0f47b08786d dmaengine: ti: edma: fix OF node reference leaks in edma_driver
    68a5e8b9125b xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
    9e0f793ee961 tools/bootconfig: Fix the wrong format specifier
    d49ab6857d98 LoongArch: Fix warnings during S3 suspend
    34c3ea55d1a7 NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
    cedab4047828 NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
    fe616b82bc46 serial: 8250: Adjust the timeout for FIFO mode
    f4b9bc823b0c driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
    91c9ec5a208d module: Extend the preempt disabled section in dereference_symbol_descriptor().
    8e1b9201c9a2 nilfs2: protect access to buffers with no active references
    61a8a1917a4b nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
    724dc6daebb1 buffer: make folio_create_empty_buffers() return a buffer_head
    3e6e5acf4c7d ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
    e5565240c648 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
    495dcb00d4fe scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
    c994716d3391 PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
    48349476ae13 PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
    2a12efc567a2 PCI: imx6: Skip controller_id generation logic for i.MX7D
    c64da8e0ad76 PCI: imx6: Simplify clock handling by using clk_bulk*() function
    2c54b9fca175 PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
    0d3f69add24e media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
    aba54e4583f6 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
    09ab93b4b6b2 watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
    7f6802ca6d13 media: nxp: imx8-isi: fix v4l2-compliance test errors
    4ca60562c0d2 mtd: hyperbus: hbmc-am654: fix an OF node reference leak
    3ec44b69e48f mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
    2d95397b1792 mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
    ada9f380e799 media: uvcvideo: Propagate buf->error to userspace
    6981619d56a6 media: camif-core: Add check for clk_enable()
    79bf1c4773ba media: mipi-csis: Add check for clk_enable()
    11c7649c9ec3 media: i2c: ov9282: Correct the exposure offset
    c4c35f6958de media: i2c: imx412: Add missing newline to prints
    0e4300717701 media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
    88d08ca77266 media: marvell: Add check for clk_enable()
    c0f94441a1de PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
    dfccddd5874f media: lmedm04: Handle errors for lme2510_int_read
    eb06c7bbf172 media: rc: iguanair: handle timeouts
    e2d565d93d07 spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
    38ac76fc06bc iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
    45e567800492 RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
    07f8ce734df7 efi: sysfb_efi: fix W=1 warnings when EFI is not set
    c14c6d0a6aa4 of: reserved-memory: Do not make kmemleak ignore freed address
    6ea9e3895f8c RDMA/mlx5: Fix indirect mkey ODP page count
    60d2fb033a99 i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
    c30508bb0b4b i3c: dw: Add hot-join support.
    e713ca2e6526 arm64: tegra: Fix DMA ID for SPI2
    35f444b3104a fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
    b2c5d45b05d2 ARM: dts: mediatek: mt7623: fix IR nodename
    fb6f0553f8dc arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
    ad28a017b542 arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
    c7e2f0ee4301 arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
    64f51b68e296 dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
    30fb7a297f16 arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
    df5c93e0c0a0 arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
    e3ec2298c34e arm64: dts: qcom: sc7180: fix psci power domain node names
    1f11e59d464c arm64: dts: qcom: sc7180: change labels to lower-case
    78e69e507f89 arm64: dts: qcom: Add SM7125 device tree
    0789f1224758 arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
    0da37d987580 arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
    d92cbcfb10cf arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
    4d1dccadf21b arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
    4fa6d6e521ed arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
    6c59ba194002 ARM: omap1: Fix up the Retu IRQ on Nokia 770
    e746da4b0cd6 RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
    94526fbf58c4 arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
    a5e386065e5a arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
    64100cdc3df3 arm64: dts: ti: k3-am62: Remove duplicate GICR reg
    b3b30a524c46 ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
    7e16a59c7672 ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
    6919d6d65c71 arm64: dts: qcom: sm8450: correct sleep clock frequency
    a3bc622b2046 arm64: dts: qcom: sm8350: correct sleep clock frequency
    c1574f607d83 arm64: dts: qcom: sm8250: correct sleep clock frequency
    4fed5d47fe8d arm64: dts: qcom: sm6375: correct sleep clock frequency
    78b611083305 arm64: dts: qcom: sm6125: correct sleep clock frequency
    dd951e7b04bc arm64: dts: qcom: sm4450: correct sleep clock frequency
    36cded5e139d arm64: dts: qcom: sdx75: correct sleep clock frequency
    4ba4d5c19ea9 arm64: dts: qcom: sc7280: correct sleep clock frequency
    c38070e3b8a3 arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
    29bb336761ed arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
    a2e31fadc52e arm64: dts: qcom: qcs404: correct sleep clock frequency
    d68ef84ca10d arm64: dts: qcom: msm8994: correct sleep clock frequency
    b7c8c08640d1 arm64: dts: qcom: msm8939: correct sleep clock frequency
    db975f5e7cb2 arm64: dts: qcom: msm8916: correct sleep clock frequency
    f23f69f0f224 arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
    7e466bb7f544 arm64: dts: qcom: msm8994: Describe USB interrupts
    585081791387 arm64: dts: qcom: msm8996: Fix up USB3 interrupts
    a0753f8993cf arm64: dts: qcom: sa8775p: Update sleep_clk frequency
    74f3061e0330 arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
    823536e1128b arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
    9316d15e7d4e arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
    0aff49ed0d2a arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
    367e43d89b91 arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
    d13b39e072f8 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
    c144423cb07e memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
    5607d1e7944f ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
    cac3340a2fe4 ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
    2fbfacbbf6ee arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
    eb9a5a953b64 RDMA/srp: Fix error handling in srp_add_port
    3013bcfc0c2b arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
    90cc73be437c arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
    3a01e2dc9f01 RDMA/rxe: Fix mismatched max_msg_sz
    5dfd5a88823c RDMA/rxe: Improve newline in printing messages
    a332e101fcbf arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
    c62ceade98a0 ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
    4064a22702d3 ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
    b94b27e715cb ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
    4b14695a7bda arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
    08f2d1bcc022 arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
    2495b1f85dd9 arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
    8fad7737a92e arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
    a4a7aea0c4fb arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
    32ddffac4201 arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
    206d385b1237 arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
    de8d88b68d0c rdma/cxgb4: Prevent potential integer overflow on 32bit
    47b3acbf31e0 RDMA/mlx4: Avoid false error about access to uninitialized gids array
    410b99a3d062 ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
    434b724ce471 arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
    a17b2390322a arm64: dts: mediatek: mt8516: add i2c clock-div property
    8c9cda5a2074 arm64: dts: mediatek: mt8516: fix wdt irq type
    5a10685c816f arm64: dts: mediatek: mt8516: fix GICv2 range
    8bea7ece086b arm64: dts: mt8183: set DMIC one-wire mode on Damu
    ac8f8cc0b2b2 arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
    4aa4a0045753 ARM: at91: pm: change BU Power Switch to automatic mode
    5908e04d7388 soc: atmel: fix device_node release in atmel_soc_device_init()
    7f298125b365 cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
    3f901c35e1a1 smb: client: fix oops due to unset link speed
    6f45ef616775 padata: avoid UAF for reorder_work
    b5981c994671 padata: add pd get/put refcnt helper
    bbccae982e9f padata: fix UAF in padata_reorder
    55f75ce472ae perf lock: Fix parse_lock_type which only retrieve one lock flag
    40f8b565d595 ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
    670ef7b2900b bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
    eeef8e65041a bpf: Send signals asynchronously if !preemptible
    01220c10a7f4 pinctrl: amd: Take suspend type into consideration which pins are non-wake
    3872b4eec88a pinctrl: stm32: Add check for clk_enable()
    2e09336f352f perf report: Fix misleading help message about --demangle
    49bc44a51d72 ASoC: Intel: avs: Fix theoretical infinite loop
    5e6f12d554ae ASoC: Intel: avs: Do not readq() u32 registers
    b9db15cf2d69 ASoC: Intel: avs: Abstract IPC handling
    b5a41d42396e ASoC: Intel: avs: Prefix SKL/APL-specific members
    125066c32953 perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
    d43c2447032c perf namespaces: Introduce nsinfo__set_in_pidns()
    4318e26fe4f4 perf machine: Don't ignore _etext when not a text symbol
    8487f93db855 perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
    e6e97a24de83 padata: fix sysfs store callback check
    19f17a762ebd ALSA: seq: Make dependency on UMP clearer
    7bd0bb51bd92 ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
    78f2ac97823c crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
    cfb531141bda crypto: hisilicon/sec2 - fix for aead invalid authsize
    2309cf3f5e9d crypto: hisilicon/sec2 - fix for aead icv error
    a4cc472ea0d8 crypto: hisilicon/sec2 - optimize the error return process
    3392fa605d7c bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
    3c7f63d94087 ktest.pl: Remove unused declarations in run_bisect_test function
    1ee00cc23cc8 perf expr: Initialize is_test value in expr__ctx_new()
    dd95e117530e ASoC: renesas: rz-ssi: Use only the proper amount of dividers
    c7d067a47bf8 perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
    bce9da3aca14 perf header: Fix one memory leakage in process_bpf_prog_info()
    4f2582dacad4 perf header: Fix one memory leakage in process_bpf_btf()
    3885a4d4a519 crypto: caam - use JobR's space to access page 0 regs
    e2a5487487bd selftests/bpf: Fix fill_link_info selftest on powerpc
    557065f0a493 ASoC: sun4i-spdif: Add clock multiplier settings
    ccb01198f01d libbpf: Fix segfault due to libelf functions not setting errno
    8d0c37831e28 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
    3676e5741739 libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
    352daa50946c net/rose: prevent integer overflows in rose_setsockopt()
    617d7308bd38 tcp_cubic: fix incorrect HyStart round start detection
    88fd5db8c007 net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
    e3c1a0e4ba0a netfilter: nft_flow_offload: update tcp state flags under lock
    d9aaae892d46 netfilter: nf_tables: fix set size with rbtree backend
    c80fcb6caa9b netfilter: nft_set_rbtree: prefer sync gc to async worker
    b7e81ae38643 netfilter: nft_set_rbtree: rename gc deactivate+erase function
    6f8277b97ad4 netfilter: nf_tables: de-constify set commit ops function argument
    7e2bd8c13b07 net: sched: Disallow replacing of child qdisc from one parent to another
    2f29127e94ae net: avoid race between device unregistration and ethnl ops
    f9ad8c928921 octeon_ep: remove firmware stats fetch in ndo_get_stats64
    cf7d4b9ca534 net/mlxfw: Drop hard coded max FW flash image size
    6ce38b5a6a49 net: let net.core.dev_weight always be non-zero
    627f67b6d099 selftests/landlock: Fix error message
    c7efca80bdec pwm: stm32: Add check for clk_enable()
    b8e33f0a3c86 clk: analogbits: Fix incorrect calculation of vco rate delta
    5960f4d87398 inet: ipmr: fix data-races
    1c73ffb62422 wifi: cfg80211: adjust allocation of colocated AP data
    1138cf80bbbf wifi: cfg80211: Handle specific BSSID in 6GHz scanning
    2c23036b53a0 selftests: harness: fix printing of mismatch values in __EXPECT()
    e75ae3db46b5 selftests: timers: clocksource-switch: Adapt progress to kselftest framework
    dc343336b7c0 cpufreq: ACPI: Fix max-frequency computation
    5f97a0b96e14 wifi: mt76: mt7996: fix ldpc setting
    7fd26afa1da9 wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
    b9288a136a0a wifi: mt76: mt7996: fix HE Phy capability
    b20cda1df8ba wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
    566b749f0d64 wifi: mt76: mt7996: add max mpdu len capability
    0d6961b57365 wifi: mt76: mt7996: fix register mapping
    59e4ebeb43f2 wifi: mt76: mt7915: fix register mapping
    1e474cbe5db6 wifi: mt76: mt7915: fix omac index assignment after hardware reset
    c71d2db21f15 wifi: mt76: mt7915: improve hardware restart reliability
    9d19f26ecf26 wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
    72eabd4c1986 wifi: mt76: mt7915: firmware restart on devices with a second pcie link
    7a249ebfc80e wifi: mt76: mt7996: fix rx filter setting for bfee functionality
    987e8224da66 wifi: mt76: mt7915: fix overflows seen when writing limit attributes
    b823e541dcc1 wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
    824813ea30a5 wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
    39bb3d56f1c3 landlock: Handle weird files
    d433ccd98736 net/smc: fix data error when recvmsg with MSG_PEEK flag
    d0edcd0d18d7 clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
    cf21ef3d4308 wifi: mac80211: don't flush non-uploaded STAs
    43b67fb2fea3 wifi: mac80211: Fix common size calculation for ML element
    69226421a5bc wifi: mac80211: fix tid removal during mesh forwarding
    d36e48a4d81c wifi: mac80211: prohibit deactivating all links
    a4ba608bd427 wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
    849fb90ccc3d wifi: wlcore: fix unbalanced pm_runtime calls
    9450b3c3c4ff samples/landlock: Fix possible NULL dereference in parse_path()
    e30d21ed451d mfd: syscon: Fix race in device_node_get_regmap()
    4bbe56ed428d mfd: syscon: Use scoped variables with memory allocators to simplify error paths
    b45fd493da18 mfd: syscon: Add of_syscon_register_regmap() API
    d6c5f73c31f0 mfd: syscon: Remove extern from function prototypes
    c2c3949cebef leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
    68834217baaf HID: fix generic desktop D-Pad controls
    ae730deded66 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
    1efa37f8b548 clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
    eb47144d9111 wifi: ath12k: fix tx power, max reg power update to firmware
    2851acb600d6 ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
    7ec98ebb38dc OPP: OF: Fix an OF node leak in _opp_add_static_v2()
    7705d8a7f2c2 ax25: rcu protect dev->ax25_ptr
    d54308079d05 regulator: of: Implement the unwind path of of_regulator_match()
    32d90424651b clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
    e121a4f42b4d clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
    11f5bdeff93e dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
    184a564e6000 team: prevent adding a device which is already a team device lower
    a32da24ef8cc clk: imx8mp: Fix clkout1/2 support
    3319bebda6df cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
    f757327c4ce6 cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
    b38f66273f89 gpio: pca953x: log an error when failing to get the reset GPIO
    f66aed661bf2 gpio: pca953x: Fully convert to device managed resources
    e657dc10c4d4 gpio: pca953x: Drop unused fields in struct pca953x_platform_data
    50bcea7af924 cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
    0f06dd950d04 pwm: stm32-lp: Add check for clk_enable()
    280fb099c1dd inetpeer: do not get a refcount in inet_getpeer()
    e22c073471b5 inetpeer: update inetpeer timestamp in inet_getpeer()
    cb8449c34910 inetpeer: remove create argument of inet_getpeer()
    fdaa6b3c7e36 inetpeer: remove create argument of inet_getpeer_v[46]()
    d01e6a675950 leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
    7fd7fd629a33 dt-bindings: mfd: bd71815: Fix rsense and typos
    97294d480d4b cpupower: fix TSC MHz calculation
    45f1432e74d1 ACPI: fan: cleanup resources in the error path of .probe()
    19958067c4be wifi: brcmfmac: add missing header include for brcmf_dbg
    3afc51492ad9 regulator: dt-bindings: mt6315: Drop regulator-compatible property
    2d259ac7e0c5 HID: multitouch: fix support for Goodix PID 0x01e9
    c2fe1678e04d wifi: rtlwifi: pci: wait for firmware loading before releasing memory
    624cea89a086 wifi: rtlwifi: fix memory leaks and invalid access at probe error path
    c37901c0c8eb wifi: rtlwifi: destroy workqueue at rtl_deinit_core
    465d01ef6962 wifi: rtlwifi: remove unused check_buddy_priv
    43c47210dae3 dt-bindings: leds: class-multicolor: Fix path to color definitions
    1ffbe3a0b816 clk: fix an OF node reference leak in of_clk_get_parent_name()
    914ef7d1a702 of: remove internal arguments from of_property_for_each_u32()
    8b84c2cee295 clk: si5351: allow PLLs to be adjusted without reset
    2321288c4357 serial: sc16is7xx: use device_property APIs when configuring irda mode
    0523ac72a8d8 dt-bindings: mmc: controller: clarify the address-cells description
    9c6702260557 rxrpc: Fix handling of received connection abort
    6bb87d8823d4 spi: zynq-qspi: Add check for clk_enable()
    833e9a1c27b8 net_sched: sch_sfq: don't allow 1 packet limit
    58ae7465f0e7 net_sched: sch_sfq: handle bigger packets
    ab18d76f7852 net_sched: sch_sfq: annotate data-races around q->perturb_period
    e95f9c408ff8 wifi: wcn36xx: fix channel survey memory allocation size
    568460c3c935 wifi: rtlwifi: usb: fix workqueue leak when probe fails
    82a843e949f7 wifi: rtlwifi: fix init_sw_vars leak when probe fails
    20893ffe7a48 wifi: rtlwifi: wait for firmware loading before releasing memory
    d8a376b7b5f5 wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
    b304e1f7edc5 wifi: rtlwifi: do not complete firmware loading needlessly
    f4b764d99183 wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
    4c9caf86d04d ipmi: ipmb: Add check devm_kasprintf() returned value
    20412f04bce8 genirq: Make handle_enforce_irqctx() unconditionally available
    c9d24e47419b drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
    e576f132cb42 drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
    41b72c3401a3 drm/msm: Check return value of of_dma_configure()
    d69ded4b4fd3 drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
    d44b7452a58d drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
    ab3077fe61b8 drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
    4ec5e1495ffe drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
    396c05f170da drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
    84ff05c9bd57 OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
    eb6ffa0192ba OPP: add index check to assert to avoid buffer overflow in _read_freq()
    753c018fce5a drm/amdgpu/vcn: reset fw_shared under SRIOV
    26862f0223ef drm/rockchip: vop2: include rockchip_drm_drv.h
    b7a2cc4952d1 drm/rockchip: move output interface related definition to rockchip_drm_drv.h
    b126c585fa3a drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
    674bb131f70b drm/rockchip: vop2: Fix the windows switch between different layers
    66eeb05b7f7d drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
    a56ec21a2972 drm/rockchip: vop2: Set YUV/RGB overlay mode
    0b12c1f8c557 drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
    556178977bfe drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
    6a30634a2e0f drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
    d0c34936c3bb drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
    ed3d38834764 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
    f029961b2d47 drm/etnaviv: Fix page property being used for non writecombine buffers
    d453d03a5e71 drm/msm/dp: set safe_to_exit_level before printing it
    ccfdd3e19c79 x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
    046cf2bacea6 x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
    cbef443cab0e sched/topology: Rename 'DIE' domain to 'PKG'
    32fe5c4c3e55 sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
    c0dbecb204cf perf/core: Save raw sample data conditionally based on sample type
    c89b19e96281 afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
    db996ed19901 nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
    e1951c169377 select: Fix unbalanced user_access_end()
    a6cfeb1c2850 partitions: ldm: remove the initial kernel-doc notation
    525dc0f60469 nvme: Add error path for xa_store in nvme_init_effects
    136f70dc96b8 selftests/powerpc: Fix argument order to timer_sub()
    48ef61d25e79 nvme: Add error check for xa_store in nvme_get_effects_log
    df62fac30c06 pstore/blk: trivial typo fixes
    d208d2c52b65 nbd: don't allow reconnect after disconnect
    b1e537fa2307 block: retry call probe after request_module in blk_request_module
    5aa2d3a88726 fs: fix proc_handler for sysctl_nr_open
    a5e157074798 afs: Fix cleanup of immediately failed async calls
    7e8ea8e80a46 afs: Fix directory format encoding struct
    684ce13e3f1a afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
    5ee9c048089f dlm: fix srcu_read_lock() return type to int
    905507850170 powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
    18abb2787b53 x86/syscall: Mark exit[_group] syscall handlers __noreturn
    2879d995e569 pnmtologo: sync with 6.6
    43ea1c5e6eb3 lib/build_OID_registry: take -stable reproducibility changes
    35046aea43c8 bpftool: Fix undefined bpf macro for unix socket
    9a558d4b8621 tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids
    42b2eec2e503 bpftool: Query only cgroup-related attach types
    f71bb11887ba cpu/amd: inhibit SMP check for qemux86
    c31365597a17 powerpc/uaccess: Fix build errors seen with GCC 13/14
    64ebf485c56b usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
    7c76aad68f6d kselftest: Add a ksft_perror() helper
    06644f0d7193 drm/tilcdc: Set preferred depth
    ff7ae7b32324 crypto: jitter - add RCT/APT support for different OSRs
    50cd24ddb6f0 arm64: defconfig: remove CONFIG_IPQ_APSS_5018
    58e5c91d6701 x86/alternatives: Disable interrupts and sync when optimizing NOPs in place
    c878fd2d4c79 x86/alternatives: Sync core before enabling interrupts
    c2d64b9f52b6 qemux86: add configuration symbol to select values
    630c33229e6d sched/isolation: really align nohz_full with rcu_nocbs
    0e5e0f68e2e6 clear_warn_once: add a clear_warn_once= boot parameter
    46934791b902 clear_warn_once: bind a timer to written reset value
    cdee9e38ff32 clear_warn_once: expand debugfs to include read support
    82b562b81841 tools: Remove some options from CLANG_CROSS_FLAGS
    36dc380b776b libbpf: Fix build warning on ref_ctr_off
    9e3e1fe20982 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel.
    e497a4a5da65 perf: x86-32: explicitly include <errno.h>
    7b57ddd89565 perf: mips64: Convert __u64 to unsigned long long
    1cfc19423dc7 perf: fix bench numa compilation
    98bc2815fade perf: add SLANG_INC for slang.h
    17209a70b9b3 perf: add sgidefs.h to for mips builds
    9cd4258d910a perf: change --root to --prefix for python install
    8110a4f26628 perf: add 'libperl not found' warning
    bc89d5e08f77 perf: force include of <stdbool.h>
    4f6c760cc876 fat: Replace prandom_u32() with get_random_u32()
    bc53117b12b2 fat: don't use obsolete random32 call in namei_vfat
    30b2236ab378 FAT: Added FAT_NO_83NAME
    cef98d22b4ed FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option
    0bbd7daba9e1 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option
    5883fc340084 aufs6: adapt to v6.6 i_op->ctime changes
    c4342d979bf2 aufs6: fix magic.mk include path
    35266bc2dc81 aufs6: adapt to v6.6
    8edede4e98be aufs6: core
    712248233ebe aufs6: standalone
    3b71a8a848d8 aufs6: mmap
    3e2924871f37 aufs6: base
    7f4907a93101 aufs6: kbuild
    d2f7b03e4aa7 yaffs2: update VFS ctime operations to 6.6+
    bcd6cfcd1aa0 yaffs2: v6.5 fixups
    cc615704b5f5 yaffs2: Fix miscalculation of devname buffer length
    8ef2e22dcf91 yaffs2: convert user_namespace to mnt_idmap
    c9c749f9f7d3 yaffs2: replace bdevname call with sprintf
    395b01cdc39d yaffs2: convert read_page -> readfolio
    d98b07e43ba6 yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL
    613c6d50fdbe yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name
    622c4648936f yaffs2: v5.12+ build fixups (not runtime tested)
    7562133d4090 yaffs: include blkdev.h
    dbd44252cd59 yaffs: fix misplaced variable declaration
    c223a10b1ac0 yaffs2: v5.6 build fixups
    90f6007cfbf4 yaffs2: fix memory leak when /proc/yaffs is read
    37ee169c5ea1 yaffs: add strict check when call yaffs_internal_read_super
    b6e007b8abb6 yaffs: repair yaffs_get_mtd_device
    fb98f65a466a yaffs: Fix build failure by handling inode i_version with proper atomic API
    51e0aac75ea2 yaffs2: fix memory leak in mount/umount
    2b74a0cae7b0 yaffs: Avoid setting any ACL releated xattr
    ff4130a9c376 Yaffs:check oob size before auto selecting Yaffs1
    ba95b409c67c fs: yaffs2: replace CURRENT_TIME by other appropriate apis
    8fa35eba9056 yaffs2: adjust to proper location of MS_RDONLY
    1eb5deaad8c4 yaffs2: import git revision b4ce1bb (jan, 2020)
    4dce67c1e8c8 initramfs: allow an optional wrapper script around initramfs generation
    2f603d83fcc4 pnmtologo: use relocatable file name
    664a6a0a484b tools: use basename to identify file in gen-mach-types
    9de64bc0c185 lib/build_OID_registry: fix reproducibility issues
    ae9b80797295 vt/conmakehash: improve reproducibility
    a972323151bd iwlwifi: select MAC80211_LEDS conditionally
    15d2adcc0198 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119)
    5556a6c04b19 arm64/perf: Fix wrong cast that may cause wrong truncation
    5552dc768ffc defconfigs: drop obselete options
    00fe4152df31 arm64/perf: fix backtrace for AAPCS with FP enabled
    3888d0652edf linux-yocto: Handle /bin/awk issues
    3d55d299f23a uvesafb: provide option to specify timeout for task completion
    23c068c080be uvesafb: print error message when task timeout occurs
    edbfc939266e compiler.h: Undef before redefining __attribute_const__
    c99ae7e2a19a vmware: include jiffies.h
    572d84d928c8 Resolve jiffies wrapping about arp
    fdcd47cac843 nfs: Allow default io size to be configured.
    927d48801098 check console device file on fs when booting
    57cc27f821dd mount_root: clarify error messages for when no rootfs found
    1b53d82a8152 mconf: fix output of cflags and libraries
    1811da09f42c menuconfig,mconf-cfg: Allow specification of ncurses location
    83c2e0c6eb1f modpost: mask trivial warnings
    6de673039484 kbuild: exclude meta directory from distclean processing
    6decd32815f5 powerpc: serialize image targets
    f6b683b38318 arm: serialize build targets
    e798b09ebf57 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition
    dc8a1e5a88f8 x86_64_defconfig: Fix warnings
    68491e5f72b6 powerpc/ptrace: Disable array-bounds warning with gcc8
    d71ebfce3004 powerpc: Disable attribute-alias warnings from gcc8
    62f50884b8b1 powerpc: kexec fix for powerpc64
    da6871c62c37 powerpc: Add unwind information for SPE registers of E500 core
    f161c880c11d mips: make current_cpu_data preempt safe
    5e94a8247ce7 mips: vdso: fix 'jalr $t9' crash in vdso code
    19e36714b1c7 mips: Kconfig: add QEMUMIPS64 option
    e2e537db3cbd 4kc cache tlb hazard: tlbp cache coherency
    aee9870611e5 malta uhci quirks: make allowance for slow 4k(e)c
    881948cd1517 drm/fb-helper: move zeroing code to drm_fb_helper_fill_var
    98ec1963fcb7 arm64: defconfig: cleanup config options
    f1727c537ba8 vexpress: Pass LOADADDR to Makefile
    4474c32dc24a arm: ARM EABI socketcall
    75e31a2b70fd ARM: LPAE: Invalidate the TLB for module addresses during translation fault

(From OE-Core rev: de820279ecffd9102807c58701a09fbf52be0a65)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:42 -07:00
Vijay Anusuri
83284e1efa vim: Upgrade 9.1.1115 -> 9.1.1198
This includes CVE-fix for CVE-2025-27423 and CVE-2025-29768

Changes between 9.1.1115 -> 9.1.1198
====================================
https://github.com/vim/vim/compare/v9.1.1115...v9.1.1198

(From OE-Core rev: a6cf72f3a01d8e6ea310d6759d5b98813e3edaac)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8e540bd287fd56e3a714f81395b59dd508a6d957)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:42 -07:00
Divya Chellam
ba85fa8c93 ruby: fix CVE-2025-27220
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial
of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-27220

Upstream-patch:
cd1eb08076

(From OE-Core rev: 8c31f8e142894f103409ee10deccc22fdeea897c)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:42 -07:00
Madhu Marri
f82d945d50 qemu 8.2.7: ignore CVE-2023-1386
Upstream Repository: https://gitlab.com/qemu-project/qemu.git

Bug Details:  https://nvd.nist.gov/vuln/detail/CVE-2023-1386
Type: Security Advisory
CVE: CVE-2023-1386
Score: 3.3

Analysis:
- According to redhat[1] this CVE has closed as not a bug.

Reference:
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2223985

(From OE-Core rev: 6a5d9e3821246c39ec57fa483802e1bb74fca724)

Signed-off-by: Madhu Marri <madmarri@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-04-01 09:08:42 -07:00
Antonin Godard
9036bc090c overview-manual/concepts: remove PR from the build dir list
PR was removed by cc83e4548465 ("bitbake.conf: Drop PE and PR from
WORKDIR and STAMP") on OE-Core.

(From yocto-docs rev: 56db4fd81f6235428bef9e46a61c11ca0ba89733)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d7a1038ee7c8c463623f0996963f9e8f29d40555)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Denys Dmytriyenko
52bee5a085 nativesdk-libtool: sanitize the script, remove buildpaths
Use the same sed command to sanitize libtool script for target recipe
and nativesdk one. Otherwise fails with buildpaths QA error:

ERROR: nativesdk-libtool-2.5.0-r0 do_package_qa: QA Issue: File /usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/usr/bin/libtool in package nativesdk-libtool contains reference to TMPDIR [buildpaths]

(From OE-Core rev: f08df9adf290fb6cbebff24df6bbbbe8e5ce95e0)

Upstream-Status: Backport[https://git.yoctoproject.org/poky/commit/?id=89e184da6c9d95a99fd34334df5ac6c5ae87f13a]

(From OE-Core rev: a720df7ad77af1f8b1c00a211c88537e5f23edbc)

Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 89e184da6c)
Signed-off-by: Nikhil R <nikhilr5@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Denys Dmytriyenko
25a23bd2d5 gcc: unify cleanup of include-fixed, apply to cross-canadian
Since target and cross variants were already doing similar cleanup
of include-fixed headers, as those aren't used, unify the code and
also apply the same to cross-canadian variant.

Some of those header files get processed with a tool that leaves
absolute buildpaths inside the file's commented section, causing
QA errors. Since those aren't used, let's remove them.

This may be a temporary solution until the tool itself gets fixed
to not embed absolute buildpaths in the header files:
https://lists.openembedded.org/g/openembedded-core/topic/107268307

(From OE-Core rev: 621e0ac9308cc163fb767a27d63fff6570896b92)

Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Makarios Christakis
157b779e76 icu: Adjust ICU_DATA_DIR path on big endian targets
On big-endian systems the preprocessor define ICU_DATA_DIR
is currently being set to a path ending with the ${PV} of
the recipe.

The PV version string has changed to a '-' separator
since oe-core commit cebe8439cdc656d53355506a31a3782312bf03c5
whereas the build system installs the data files into a
path ending with the dot-separated version of ICU.

This causes the ICU data file to not be detected at runtime,
consequently breaking any dependant applications.

We therefore substitute ${PV} with the dot-separated version
string of ICU, as returned from the icu_install_folder function,
on the ICU_DATA_DIR define on big-endian targets.

(From OE-Core rev: 345ebe7046eab4a0588aa33c595f48cfe90f899e)

Signed-off-by: Makarios Christakis <makchrbiz@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 28cdc0110def011e3d690da1d591076385267ef7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Vijay Anusuri
985aeff01a libxslt: upgrade 1.1.39 -> 1.1.43
Include fixes for CVE-2024-24855 and CVE-2024-55549

Release Notes:
https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.43

Remove mem-debug option [1]

[1] c65a7c05f9

(From OE-Core rev: 7196f0a9a9f31c8692cd54877e6a34d10947b5c7)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Peter Marko
8cde060aa3 xserver-xorg: mark CVEs fixed in 21.1.16 as fixed
These are tracked as versionless redhat CVEs in NVD DB.

(From OE-Core rev: 84b1631bcbead1409ff44a1ed430244784c382be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-26 08:48:51 -07:00
Steve Sakoman
dcb242eb19 Revert "gcc-cross-canadian.inc: Fix buildpaths error for pthread.h"
This patch is causing build failures where pthread.h does not exist:

sed: can't read
No such file or directory

This reverts commit d3c294ee0afe4d2eb46320945d41064ebfb5cbff.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-20 07:36:10 -07:00
Sana Kazi
8f74fa4073 gcc-cross-canadian.inc: Fix buildpaths error for pthread.h
Replace the hardcoded path with /not/exist as used for other
options[--with-sysroot] to ensure pthread.h does not contain
hardocded references to TMPDIR:

ERROR: gcc-cross-canadian-x86-64-13.3.0-r0 do_package_qa: QA Issue:
File /usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/
usr/lib/x86_64-poky-linux/gcc/x86_64-poky-linux/13.3.0/include-fixed/
pthread.h in package gcc-cross-canadian-x86-64 contains reference to
TMPDIR [buildpaths]

(From OE-Core rev: d3c294ee0afe4d2eb46320945d41064ebfb5cbff)

Signed-off-by: Sana Kazi <sanakazi720@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:25:56 -07:00
Oleksandr Hnatiuk
8f52a92dbb gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian
Apply fixes from gcc-cross (84a78f46d594 and 0ead8cbdfb96) to gcc-cross-canadian.
This will improve (but not fix) reproducibility of gcc-cross-canadian.
Also move this code to functions to avoid code duplication.

[RP: Tweak patch to make the function parameters clear and fix quoting issues
ensuring the code exactly matches the original replacements with an additional
parameter.]

(From OE-Core rev: 350ff7d53f7506de2bc01f0efc569b8294b9afea)

(From OE-Core rev: b1aa13b9f656666458189d4dae0c25564abe2f25)

Signed-off-by: Oleksandr Hnatiuk <ohnatiuk@cisco.com>
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f1ad5be433)
Signed-off-by: Sana Kazi <sanakazi720@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:25:56 -07:00
Zhang Peng
6b6beab939 mpg123: upgrade 1.32.6 -> 1.32.10
Changelog:
==========
1.32.10
  - scripts/tag_lyrics.py: fix for python3
  - libout123: Use strtok_r() to avoid conflicts multithreaded contexts
  - libmpg123: Un-break DLL builds that need I/O functions defined in libmpg123.c
  - ports/cmake: More fixup to also produce .pc files with Libs.private.
1.32.9
  - libmpg123:
    -- enable 64 bit offset path for MSVCRT and avoid warnings about
       MS's game about POSIX API with and without underscores
    -- Increase the library patchlevel, as was forgotten on previous
      release.
1.32.8
  Update: The buffer overflow got assigned the CVE ID CVE-2024-10573.
  - libmpg123:
    -- Add sections to assembly to support PAC/BTI code
       for aarch64 (-mbranch-protection variants)
    -- Prevent premature application of header info into decoding structure,
       at worst having triggered out-of-bounds writes of decoded PCM data
  - out123: Show --quiet in --longhelp.
1.32.7
  - ports/cmake: Work around bug in CMake that does not detect FPU on Apple ARM CPUs.
  - Fix some laziness (func() to func(void)) for standards conformance.

(From OE-Core rev: a3db638932e76ac0972d7905072cc7ab3f2abb75)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:25:56 -07:00
Peter Marko
abc7c3eeab libarchive: patch CVE-2025-1632 and CVE-2025-25724
Pick commit referencing this MR which was merged to master.

(From OE-Core rev: a4ff82c789d50a3f411170636679ce46c8f84b25)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-19 07:25:56 -07:00
Changqing Li
d243dbc41b babeltrace2: extend to nativesdk
This allows anyone using the SDK to be able to analyze the logs
collected on target

(From OE-Core rev: b00b0d744a1768843386cfd529b73cc17c88bec9)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Changqing Li
1b87b3fefb babeltrace: extend to nativesdk
This allows anyone using the SDK to be able to analyze the logs
collected on target

(From OE-Core rev: b422b4d3c04fb04fddb22da82aa91c39f1b54b2a)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Vijay Anusuri
5615291af4 xserver-xorg: upgrade 21.1.15 -> 21.1.16
Includes security fix

  * CVE-2025-26594
  * CVE-2025-26595
  * CVE-2025-26596
  * CVE-2025-26597
  * CVE-2025-26598
  * CVE-2025-26599
  * CVE-2025-26600
  * CVE-2025-26601

Ref: https://lists.x.org/archives/xorg-announce/2025-February/003584.html
     https://lists.x.org/archives/xorg-announce/2025-February/003585.html

(From OE-Core rev: 60d1d54a1c23f007434a1f2c1940fd8ccabe656f)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b5491688a045e52b2a1a00d04b746ed6af456784)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Ross Burton
f0ba45e07d xserver-xf86-config: remove obsolete configuration files
For reasons we have explicit xorg.conf files for a number of the qemu
machines, but not all of them. These mainly disabled screen blanking
(which is now down with a separate fragment) but also explictly set the
device driver to fbdev which meant they didn't use the modesettings
driver as they should (with the virtio framebuffer from qemu).

This is the root cause of why the xserver 21.1.16 upgrade doesn't work
on a number of machines: the /sys probing changed and the fbdev driver
now refuses to use the PCI framebuffer device as there are better
drivers, but we've explictly told xorg to use the wrong driver.

For more details, see https://gitlab.freedesktop.org/xorg/xserver/-/issues/1798.

(From OE-Core rev: ccbb0f5491e13d61015872fba93417b91c3213a2)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8c8039bf4c2d011e3d12c970ce45036b184902a9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Ross Burton
e3e29d6cb7 xserver-xf86-config: add a configuration fragment to disable screen blanking
Add a configuration fragment that disables screen blanking, and add it
to all qemu machines.

(From OE-Core rev: bb16526a4a0c39b6c156edbf68c7377bfdfa0bd1)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 780a5ccaa51d5aed18200883a686387e70847e4b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Wang Mingyu
f388746046 xserver-xorg: upgrade 21.1.14 -> 21.1.15
(From OE-Core rev: 1fdd0a6824f34ce18c4adac8f0014935896b3e21)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ba94110d70ebfb1b4798ecf05389f7ea602b1f55)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Divya Chellam
9714332c7b vim: Upgrade 9.1.1043 -> 9.1.1115
This includes CVE-fix for CVE-2025-26603 and CVE-2025-1215

Changes between 9.1.1043 -> 9.1.1115
====================================
https://github.com/vim/vim/compare/v9.1.1043...v9.1.1115

(From OE-Core rev: f390badfe5b3a1a8cc70051075a5e641ff5abf2c)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
700657a6e7 grub: patch CVE-2025-0678 and CVE-2025-1125
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: d96bf8ec82ed07c006167e15f7aa0d5e81440977)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
c5b4efb1b0 grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: f25e1296b8265414061b0b8f12110c6ee22bc7be)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
6a280848be grub: patch CVE-2024-45778 and CVE-2024-45779
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: eb9811ef2a38f1dcd4074eef6f809fd63e98454f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
e39736012b grub: patch CVE-2025-1118
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 77abb78b5d4dd0e54b656170c03ac68b919b8784)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
f3aada6039 grub: patch CVE-2025-0690
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: d9fb00f71380ad39ea5b61e60c4f458371460862)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
5690f247a4 grub: patch CVE-2024-45777
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 2ec4bcda16b92cabf7cf5cb7c68cbe45da269364)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
322d87b846 grub: patch CVE-2024-45776
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: e1e13086f38b021a8aabfe8d044b5755d62ee846)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
c7e339c0c7 grub: patch CVE-2025-0622
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: d9d99bd5baddcb0438e0c28ab6e302ee9fa0c327)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
0dedd305c7 grub: patch CVE-2024-45775
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 4e01993bf71d3b8e2375ab43857b671738953507)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
bfc2c48c83 grub: patch CVE-2024-45774
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: f24f2dc0b7504508357cbe5d5f7a577639a6548e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
a608a3df02 grub: patch CVE-2025-0624
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 0c860bf1765b49a7540ae3cb206ce09cf25f30a7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
fa7c2c327b grub: patch CVE-2024-45783
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 70a15bc790025e3241274d3e92674928c41537b6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
7ca876a09a grub: patch CVE-2024-45780
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: f3a14813ed012904e64fd9897ea4ddaf622059dd)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
678750a33b grub: patch CVE-2024-45782 and CVE-2024-56737
Cherry-pick patch mentioning these CVEs.

(From OE-Core rev: 61268080ba160a4965873ba5aad6ebbfd1ee2fe1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
f475700be6 grup: patch CVE-2024-45781
Cherry-pick patch mentioning this CVE.

(From OE-Core rev: 120d8cc7b91654557a3101a5f8fda44fb703e5b2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
8a84d05ced grub: backport strlcpy function
It is used to fix multiple CVEs.

(From OE-Core rev: c12baf254a37ff4921c2be0e4d3f626a91980d1a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Peter Marko
42a576f335 grub: drop obsolete CVE statuses
CVE-2021-46705 was needed only with 2.06
CVE-2023-4692 and CVE-2023-4693 were fixed in NVD DB meanwhile

(From OE-Core rev: fab492f32a8630a353d307119dd4109dac81ad45)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Niko Mauno
7543e4e24a cve-check.bbclass: Mitigate symlink related error
According to Yocto reference manual, in description of the
IMAGE_LINK_NAME variable, it is said that

  It is possible to set this to "" to disable symlink creation,
  however, you also need to set :term:`IMAGE_NAME` to still have
  a reasonable value e.g.::

    IMAGE_LINK_NAME = ""
    IMAGE_NAME = "${IMAGE_BASENAME}${IMAGE_MACHINE_SUFFIX}${IMAGE_VERSION_SUFFIX}"

However, when using following additions in local.conf file:

  INHERIT += "cve-check"
  IMAGE_LINK_NAME = ""
  IMAGE_NAME = "${IMAGE_BASENAME}${IMAGE_MACHINE_SUFFIX}${IMAGE_VERSION_SUFFIX}"

the implicit symlink creation in cve_check_write_rootfs_manifest leads
to following build failure

  $ bitbake core-image-minimal core-image-base
  ...
  ERROR: core-image-base-1.0-r0 do_image_complete: Recipe core-image-base is trying to install files into a shared area when those files already exist. The files and the manifests listing them are:
    /home/poky/build/tmp/deploy/images/qemux86-64/.json
      (matched in manifest-qemux86_64-core-image-minimal.image_complete)
  Please adjust the recipes so only one recipe provides a given file.

Mitigate the issue by creating the symlink only in case IMAGE_LINK_NAME
has not been set to empty string.

(From OE-Core rev: 64bfec359bd909761ce0a6a716286d938ed162d1)

(From OE-Core rev: 35e210e3ebe21f1f4466760076b7140618af536e)

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:08 -07:00
Ross Burton
216fcf2458 puzzles: ignore three new CVEs for a different puzzles
As we just match on product by default, ignore three CVEs which are
for the "Puzzles" WordPress theme by ThemeREX (CPE themerex:puzzles).

(From OE-Core rev: 87326573c82ac1e8dc335319442236ef2341501e)

(From OE-Core rev: 9543945bb935e9a3e2bfbf731412188fc52ad2c9)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Ashish Sharma
1c48e482e2 ruby: Fix CVE-2025-27219
Upstream-Status: Backport from [9907b76dad]

(From OE-Core rev: 7e0a96b5c0b7a5ca593df83861086d0980ea72e9)

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Archana Polampalli
3d975e8f01 openssh: fix CVE-2025-26465
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled.
A machine-in-the-middle attack can be performed by a malicious machine impersonating
a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific
conditions when verifying the host key. For an attack to be considered successful,
the attacker needs to manage to exhaust the client's memory resource first, turning
the attack complexity high.

(From OE-Core rev: 60b5df194a5bea491489fdae2f32e33ffd21c9c7)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Richard Purdie
83fda1bb2e bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events
We've been seeing intermittent failures on Ubuntu 22.04 in oe-selftest which
were problematic to debug. The failure was inside lock_timeout and once that was
identified and the backtrace obtained, the problem becomes clearer:

  File "X/bitbake/lib/bb/server/process.py", line 466, in idle_thread_internal
    retval = function(self, data, False)
  File "X/bitbake/lib/bb/command.py", line 123, in runAsyncCommand
    self.cooker.updateCache()
  File "X/bitbake/lib/bb/cooker.py", line 1629, in updateCache
    self.parser = CookerParser(self, mcfilelist, total_masked)
  File "X/bitbake/lib/bb/cooker.py", line 2141, in __init__
    self.bb_caches = bb.cache.MulticonfigCache(self.cfgbuilder, self.cfghash, cooker.caches_array)
  File "X/bitbake/lib/bb/cache.py", line 772, in __init__
    loaded += c.prepare_cache(progress)
  File "X/bitbake/lib/bb/cache.py", line 435, in prepare_cache
    loaded = self.load_cachefile(progress)
  File "X/bitbake/lib/bb/cache.py", line 516, in load_cachefile
    progress(cachefile.tell() + previous_progress)
  File "X/bitbake/lib/bb/cache.py", line 751, in progress
    bb.event.fire(bb.event.CacheLoadProgress(current_progress, cachesize),
  File "X/bitbake/lib/bb/event.py", line 234, in fire
    fire_ui_handlers(event, d)
  File "X/bitbake/lib/bb/event.py", line 210, in fire_ui_handlers
    _ui_handlers[h].event.send(event)
  File "X/bitbake/lib/bb/cooker.py", line 117, in send
    str_event = codecs.encode(pickle.dumps(event), \'base64\').decode(\'utf-8\')
  File "/usr/lib/python3.10/asyncio/sslproto.py", line 320, in __del__
    _warn(f"unclosed transport {self!r}", ResourceWarning, source=self)
  File "/usr/lib/python3.10/warnings.py", line 109, in _showwarnmsg
    sw(msg.message, msg.category, msg.filename, msg.lineno,
  File "X/bitbake/lib/bb/main.py", line 113, in _showwarning
    warnlog.warning(s)
  File "/usr/lib/python3.10/logging/__init__.py", line 1489, in warning
    self._log(WARNING, msg, args, **kwargs)
  File "/usr/lib/python3.10/logging/__init__.py", line 1624, in _log
    self.handle(record)
  File "/usr/lib/python3.10/logging/__init__.py", line 1634, in handle
    self.callHandlers(record)
  File "/usr/lib/python3.10/logging/__init__.py", line 1696, in callHandlers
    hdlr.handle(record)
  File "/usr/lib/python3.10/logging/__init__.py", line 968, in handle
    self.emit(record)
  File "X/bitbake/lib/bb/event.py", line 778, in emit
    fire(record, None)
  File "X/bitbake/lib/bb/event.py", line 234, in fire
    fire_ui_handlers(event, d)
  File "X/bitbake/lib/bb/event.py", line 197, in fire_ui_handlers
    with bb.utils.lock_timeout(_thread_lock):
  File "/usr/lib/python3.10/contextlib.py", line 135, in __enter__
    return next(self.gen)
  File "X/bitbake/lib/bb/utils.py", line 1888, in lock_timeout
    bb.server.process.serverlog("Couldn\'t get the lock for 5 mins, timed out, exiting. %s" % traceback.format_stack())

or put in simpler terms, whilst sending an event(), an unrelated warning
message happens to be triggered from asyncio:

/usr/lib/python3.10/asyncio/sslproto.py:320: ResourceWarning: unclosed transport <asyncio.sslproto._SSLProtocolTransport object at 0x7f0e797d3100>

which triggers a second event() which can't be sent as we're already
in the critcal section and already hold the lock.

That warning is due to the version of asyncio used on Ubuntu 22.04 with
python 3.10 and that comined with timing issues explains why we don't
see it on other python versions or distros.

We can't handle the second event as the lock is there to serialise the
events. Instead, we queue the event and then process the queue later.

Add a new version of lock_timeout which allows us to handle the situation
more gracefully.

(Bitbake rev: 696c2c1ef095f8b11c7d2eff36fae50f58c62e5e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c590ff1aff89d23b25ce808650f200013a1e6af)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Richard Purdie
7eea22a7cd bitbake: utils: Add signal blocking for lock_timeout
We never want to exit whilst holding these locks as it deadlocks all python
threads. Add signal blocking around the lock critical part so a signal
shouldn't cause such an exit.

(Bitbake rev: 5cc1dde1ffd9382b3a9e4cc182be067defba16a7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a097755c671e2b530dea6200a94b39fa9dca246c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Richard Purdie
7985134409 bitbake: utils: Tweak lock_timeout logic
We should really try and take the lock in the try/finally block so that
in some rare cases such as badly timed interrupt/signal, we always release
the lock.

(Bitbake rev: 5dbbca616a71047fc3573a2be49846d5c9cdd15a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a9eb8bf7174b6962b5ba07192fe95b8c7112d9d2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
Richard Purdie
e9aa48f807 bitbake: utils: Print information about lock issue before exiting
(Bitbake rev: d41fad7fadde59dd63647bbbeb074604314bf310)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cdf6c51a064f8f335c3262b7f102618996f1a229)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-03-15 06:40:07 -07:00
899 changed files with 78584 additions and 5318 deletions

View File

@@ -22,7 +22,7 @@ for full details on how to submit changes.
As a quick guide, patches should be sent to openembedded-core@lists.openembedded.org
The git command to do that would be:
git send-email -M -1 --to openembedded-core@lists.openembedded.org
git send-email -M -1 --to openembedded-core@lists.openembedded.org --subject-prefix='scarthgap][PATCH'
Mailing list:

View File

@@ -27,7 +27,7 @@ from bb.main import bitbake_main, BitBakeConfigParameters, BBMainException
bb.utils.check_system_locale()
__version__ = "2.8.0"
__version__ = "2.8.1"
if __name__ == "__main__":
if __version__ != bb.__version__:

View File

@@ -36,8 +36,9 @@ class COWDictMeta(COWMeta):
__marker__ = tuple()
def __str__(cls):
# FIXME: I have magic numbers!
return "<COWDict Level: %i Current Keys: %i>" % (cls.__count__, len(cls.__dict__) - 3)
ignored_keys = set(["__count__", "__doc__", "__module__", "__firstlineno__", "__static_attributes__"])
keys = set(cls.__dict__.keys()) - ignored_keys
return "<COWDict Level: %i Current Keys: %i>" % (cls.__count__, len(keys))
__repr__ = __str__
@@ -161,8 +162,9 @@ class COWDictMeta(COWMeta):
class COWSetMeta(COWDictMeta):
def __str__(cls):
# FIXME: I have magic numbers!
return "<COWSet Level: %i Current Keys: %i>" % (cls.__count__, len(cls.__dict__) - 3)
ignored_keys = set(["__count__", "__doc__", "__module__", "__firstlineno__", "__static_attributes__"])
keys = set(cls.__dict__.keys()) - ignored_keys
return "<COWSet Level: %i Current Keys: %i>" % (cls.__count__, len(keys))
__repr__ = __str__

View File

@@ -9,7 +9,7 @@
# SPDX-License-Identifier: GPL-2.0-only
#
__version__ = "2.8.0"
__version__ = "2.8.1"
import sys
if sys.version_info < (3, 8, 0):
@@ -37,6 +37,34 @@ class BBHandledException(Exception):
import os
import logging
from collections import namedtuple
import multiprocessing as mp
# Python 3.14 changes the default multiprocessing context from "fork" to
# "forkserver". However, bitbake heavily relies on "fork" behavior to
# efficiently pass data to the child processes. Places that need this should do:
# from bb import multiprocessing
# in place of
# import multiprocessing
class MultiprocessingContext(object):
"""
Multiprocessing proxy object that uses the "fork" context for a property if
available, otherwise goes to the main multiprocessing module. This allows
it to be a drop-in replacement for the multiprocessing module, but use the
fork context
"""
def __init__(self):
super().__setattr__("_ctx", mp.get_context("fork"))
def __getattr__(self, name):
if hasattr(self._ctx, name):
return getattr(self._ctx, name)
return getattr(mp, name)
def __setattr__(self, name, value):
raise AttributeError(f"Unable to set attribute {name}")
multiprocessing = MultiprocessingContext()
class NullHandler(logging.Handler):

View File

@@ -11,7 +11,7 @@ import os
import signal
import socket
import sys
import multiprocessing
from bb import multiprocessing
import logging
from .connection import StreamConnection, WebsocketConnection
from .exceptions import ClientError, ServerError, ConnectionClosedError, InvokeError

View File

@@ -12,7 +12,7 @@
import sys, os, glob, os.path, re, time
import itertools
import logging
import multiprocessing
from bb import multiprocessing
import threading
from io import StringIO, UnsupportedOperation
from contextlib import closing

View File

@@ -194,7 +194,12 @@ def fire_ui_handlers(event, d):
ui_queue.append(event)
return
with bb.utils.lock_timeout(_thread_lock):
with bb.utils.lock_timeout_nocheck(_thread_lock) as lock:
if not lock:
# If we can't get the lock, we may be recursively called, queue and return
ui_queue.append(event)
return
errors = []
for h in _ui_handlers:
#print "Sending event %s" % event
@@ -213,6 +218,9 @@ def fire_ui_handlers(event, d):
for h in errors:
del _ui_handlers[h]
while ui_queue:
fire_ui_handlers(ui_queue.pop(), d)
def fire(event, d):
"""Fire off an Event"""

View File

@@ -237,7 +237,7 @@ class URI(object):
# to RFC compliant URL format. E.g.:
# file://foo.diff -> file:foo.diff
if urlp.scheme in self._netloc_forbidden:
uri = re.sub("(?<=:)//(?!/)", "", uri, 1)
uri = re.sub(r"(?<=:)//(?!/)", "", uri, count=1)
reparse = 1
if reparse:
@@ -460,7 +460,7 @@ def uri_replace(ud, uri_find, uri_replace, replacements, d, mirrortarball=None):
for k in replacements:
uri_replace_decoded[loc] = uri_replace_decoded[loc].replace(k, replacements[k])
#bb.note("%s %s %s" % (regexp, uri_replace_decoded[loc], uri_decoded[loc]))
result_decoded[loc] = re.sub(regexp, uri_replace_decoded[loc], uri_decoded[loc], 1)
result_decoded[loc] = re.sub(regexp, uri_replace_decoded[loc], uri_decoded[loc], count=1)
if loc == 2:
# Handle path manipulations
basename = None

View File

@@ -23,7 +23,6 @@ import urllib.parse, urllib.error
from bb.fetch2 import FetchMethod
from bb.fetch2 import FetchError
from bb.fetch2 import logger
from bb.fetch2 import runfetchcmd
class GCP(FetchMethod):
"""
@@ -48,7 +47,6 @@ class GCP(FetchMethod):
ud.basename = os.path.basename(ud.path)
ud.localfile = d.expand(urllib.parse.unquote(ud.basename))
ud.basecmd = "gsutil stat"
def get_gcp_client(self):
from google.cloud import storage
@@ -59,17 +57,20 @@ class GCP(FetchMethod):
Fetch urls using the GCP API.
Assumes localpath was called first.
"""
from google.api_core.exceptions import NotFound
logger.debug2(f"Trying to download gs://{ud.host}{ud.path} to {ud.localpath}")
if self.gcp_client is None:
self.get_gcp_client()
bb.fetch2.check_network_access(d, ud.basecmd, f"gs://{ud.host}{ud.path}")
runfetchcmd("%s %s" % (ud.basecmd, f"gs://{ud.host}{ud.path}"), d)
bb.fetch2.check_network_access(d, "blob.download_to_filename", f"gs://{ud.host}{ud.path}")
# Path sometimes has leading slash, so strip it
path = ud.path.lstrip("/")
blob = self.gcp_client.bucket(ud.host).blob(path)
blob.download_to_filename(ud.localpath)
try:
blob.download_to_filename(ud.localpath)
except NotFound:
raise FetchError("The GCP API threw a NotFound exception")
# Additional sanity checks copied from the wget class (although there
# are no known issues which mean these are required, treat the GCP API
@@ -91,8 +92,7 @@ class GCP(FetchMethod):
if self.gcp_client is None:
self.get_gcp_client()
bb.fetch2.check_network_access(d, ud.basecmd, f"gs://{ud.host}{ud.path}")
runfetchcmd("%s %s" % (ud.basecmd, f"gs://{ud.host}{ud.path}"), d)
bb.fetch2.check_network_access(d, "gcp_client.bucket(ud.host).blob(path).exists()", f"gs://{ud.host}{ud.path}")
# Path sometimes has leading slash, so strip it
path = ud.path.lstrip("/")

View File

@@ -344,8 +344,11 @@ class Wget(FetchMethod):
opener = urllib.request.build_opener(*handlers)
try:
uri_base = ud.url.split(";")[0]
uri = "{}://{}{}".format(urllib.parse.urlparse(uri_base).scheme, ud.host, ud.path)
parts = urllib.parse.urlparse(ud.url.split(";")[0])
if parts.query:
uri = "{}://{}{}?{}".format(parts.scheme, parts.netloc, parts.path, parts.query)
else:
uri = "{}://{}{}".format(parts.scheme, parts.netloc, parts.path)
r = urllib.request.Request(uri)
r.get_method = lambda: "HEAD"
# Some servers (FusionForge, as used on Alioth) require that the

View File

@@ -391,6 +391,14 @@ def finalize(fn, d, variant = None):
if d.getVar("_FAILPARSINGERRORHANDLED", False) == True:
raise bb.BBHandledException()
while True:
inherits = d.getVar('__BBDEFINHERITS', False) or []
if not inherits:
break
inherit, filename, lineno = inherits.pop(0)
d.setVar('__BBDEFINHERITS', inherits)
bb.parse.BBHandler.inherit(inherit, filename, lineno, d, deferred=True)
for var in d.getVar('__BBHANDLERS', False) or []:
# try to add the handler
handlerfn = d.getVarFlag(var, "filename", False)
@@ -444,14 +452,6 @@ def multi_finalize(fn, d):
logger.debug("Appending .bbappend file %s to %s", append, fn)
bb.parse.BBHandler.handle(append, d, True)
while True:
inherits = d.getVar('__BBDEFINHERITS', False) or []
if not inherits:
break
inherit, filename, lineno = inherits.pop(0)
d.setVar('__BBDEFINHERITS', inherits)
bb.parse.BBHandler.inherit(inherit, filename, lineno, d, deferred=True)
onlyfinalise = d.getVar("__ONLYFINALISE", False)
safe_d = d
@@ -487,7 +487,9 @@ def multi_finalize(fn, d):
d.setVar("BBEXTENDVARIANT", variantmap[name])
else:
d.setVar("PN", "%s-%s" % (pn, name))
bb.parse.BBHandler.inherit(extendedmap[name], fn, 0, d)
inherits = d.getVar('__BBDEFINHERITS', False) or []
inherits.append((extendedmap[name], fn, 0))
d.setVar('__BBDEFINHERITS', inherits)
safe_d.setVar("BBCLASSEXTEND", extended)
_create_variants(datastores, extendedmap.keys(), extendfunc, onlyfinalise)

View File

@@ -729,6 +729,8 @@ class RunQueueData:
if mc == frommc:
fn = taskData[mcdep].build_targets[pn][0]
newdep = '%s:%s' % (fn,deptask)
if newdep not in taskData[mcdep].taskentries:
bb.fatal("Task mcdepends on non-existent task %s" % (newdep))
taskData[mc].taskentries[tid].tdepends.append(newdep)
for mc in taskData:

View File

@@ -13,7 +13,7 @@
import bb
import bb.event
import logging
import multiprocessing
from bb import multiprocessing
import threading
import array
import os

View File

@@ -1421,7 +1421,7 @@ class FetchLatestVersionTest(FetcherTest):
# combination version pattern
("sysprof", "git://git.yoctoproject.org/sysprof.git;protocol=https;branch=master", "cd44ee6644c3641507fb53b8a2a69137f2971219", "", "")
: "1.2.0",
("u-boot-mkimage", "git://source.denx.de/u-boot/u-boot.git;branch=master;protocol=https", "62c175fbb8a0f9a926c88294ea9f7e88eb898f6c", "", "")
("u-boot-mkimage", "git://git.yoctoproject.org/bbfetchtests-u-boot.git;branch=master;protocol=https", "62c175fbb8a0f9a926c88294ea9f7e88eb898f6c", "", "")
: "2014.01",
# version pattern "yyyymmdd"
("mobile-broadband-provider-info", "git://git.yoctoproject.org/mobile-broadband-provider-info.git;protocol=https;branch=master", "4ed19e11c2975105b71b956440acdb25d46a347d", "", "")

View File

@@ -0,0 +1,2 @@
do_build[mcdepends] = "mc::mc-1:h1:do_invalid"

View File

@@ -26,7 +26,7 @@ class RunQueueTests(unittest.TestCase):
a1_sstatevalid = "a1:do_package a1:do_package_qa a1:do_packagedata a1:do_package_write_ipk a1:do_package_write_rpm a1:do_populate_lic a1:do_populate_sysroot"
b1_sstatevalid = "b1:do_package b1:do_package_qa b1:do_packagedata b1:do_package_write_ipk b1:do_package_write_rpm b1:do_populate_lic b1:do_populate_sysroot"
def run_bitbakecmd(self, cmd, builddir, sstatevalid="", slowtasks="", extraenv=None, cleanup=False):
def run_bitbakecmd(self, cmd, builddir, sstatevalid="", slowtasks="", extraenv=None, cleanup=False, allowfailure=False):
env = os.environ.copy()
env["BBPATH"] = os.path.realpath(os.path.join(os.path.dirname(__file__), "runqueue-tests"))
env["BB_ENV_PASSTHROUGH_ADDITIONS"] = "SSTATEVALID SLOWTASKS TOPDIR"
@@ -41,6 +41,8 @@ class RunQueueTests(unittest.TestCase):
output = subprocess.check_output(cmd, env=env, stderr=subprocess.STDOUT,universal_newlines=True, cwd=builddir)
print(output)
except subprocess.CalledProcessError as e:
if allowfailure:
return e.output
self.fail("Command %s failed with %s" % (cmd, e.output))
tasks = []
tasklog = builddir + "/task.log"
@@ -314,6 +316,13 @@ class RunQueueTests(unittest.TestCase):
["mc_2:a1:%s" % t for t in rerun_tasks]
self.assertEqual(set(tasks), set(expected))
# Check that a multiconfig that doesn't exist rasies a correct error message
error_output = self.run_bitbakecmd(["bitbake", "g1"], tempdir, "", extraenv=extraenv, cleanup=True, allowfailure=True)
self.assertIn("non-existent task", error_output)
# If the word 'Traceback' or 'KeyError' is in the output we've regressed
self.assertNotIn("Traceback", error_output)
self.assertNotIn("KeyError", error_output)
self.shutdown(tempdir)
def test_hashserv_single(self):

View File

@@ -3,7 +3,7 @@
#
import http.server
import multiprocessing
from bb import multiprocessing
import os
import traceback
import signal
@@ -43,7 +43,7 @@ class HTTPService(object):
self.process = multiprocessing.Process(target=self.server.server_start, args=[self.root_dir, self.logger])
# The signal handler from testimage.bbclass can cause deadlocks here
# if the HTTPServer is terminated before it can restore the standard
# if the HTTPServer is terminated before it can restore the standard
#signal behaviour
orig = signal.getsignal(signal.SIGTERM)
signal.signal(signal.SIGTERM, signal.SIG_DFL)

View File

@@ -131,7 +131,7 @@ class TerminalFilter(object):
def getTerminalColumns(self):
def ioctl_GWINSZ(fd):
try:
cr = struct.unpack('hh', fcntl.ioctl(fd, self.termios.TIOCGWINSZ, '1234'))
cr = struct.unpack('hhhh', fcntl.ioctl(fd, self.termios.TIOCGWINSZ, b'12345678'))[0:2]
except:
return None
return cr
@@ -145,7 +145,7 @@ class TerminalFilter(object):
pass
if not cr:
try:
cr = (os.environ['LINES'], os.environ['COLUMNS'])
cr = (int(os.environ['LINES']), int(os.environ['COLUMNS']))
except:
cr = (25, 80)
return cr

View File

@@ -14,7 +14,7 @@ import logging
import bb
import bb.msg
import locale
import multiprocessing
from bb import multiprocessing
import fcntl
import importlib
import importlib.machinery
@@ -1174,8 +1174,6 @@ def process_profilelog(fn, pout = None):
#
def multiprocessingpool(*args, **kwargs):
import multiprocessing.pool
#import multiprocessing.util
#multiprocessing.util.log_to_stderr(10)
# Deal with a multiprocessing bug where signals to the processes would be delayed until the work
# completes. Putting in a timeout means the signals (like SIGINT/SIGTERM) get processed.
@@ -1854,15 +1852,42 @@ def path_is_descendant(descendant, ancestor):
return False
# Recomputing the sets in signal.py is expensive (bitbake -pP idle)
# so try and use _signal directly to avoid it
valid_signals = signal.valid_signals()
try:
import _signal
sigmask = _signal.pthread_sigmask
except ImportError:
sigmask = signal.pthread_sigmask
# If we don't have a timeout of some kind and a process/thread exits badly (for example
# OOM killed) and held a lock, we'd just hang in the lock futex forever. It is better
# we exit at some point than hang. 5 minutes with no progress means we're probably deadlocked.
# This function can still deadlock python since it can't signal the other threads to exit
# (signals are handled in the main thread) and even os._exit() will wait on non-daemon threads
# to exit.
@contextmanager
def lock_timeout(lock):
held = lock.acquire(timeout=5*60)
try:
s = sigmask(signal.SIG_BLOCK, valid_signals)
held = lock.acquire(timeout=5*60)
if not held:
bb.server.process.serverlog("Couldn't get the lock for 5 mins, timed out, exiting.\n%s" % traceback.format_stack())
os._exit(1)
yield held
finally:
lock.release()
sigmask(signal.SIG_SETMASK, s)
# A version of lock_timeout without the check that the lock was locked and a shorter timeout
@contextmanager
def lock_timeout_nocheck(lock):
try:
s = sigmask(signal.SIG_BLOCK, valid_signals)
l = lock.acquire(timeout=10)
yield l
finally:
if l:
lock.release()
sigmask(signal.SIG_SETMASK, s)

View File

@@ -11,7 +11,7 @@ from bb.asyncrpc import InvokeError
from .client import ClientPool
import hashlib
import logging
import multiprocessing
from bb import multiprocessing
import os
import sys
import tempfile

View File

@@ -128,7 +128,7 @@ class BuildTest(unittest.TestCase):
if os.environ.get("TOASTER_TEST_USE_SSTATE_MIRROR"):
ProjectVariable.objects.get_or_create(
name="SSTATE_MIRRORS",
value="file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH",
value="file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH",
project=project)
ProjectTarget.objects.create(project=project,

View File

@@ -43,11 +43,11 @@ PNGs := $(foreach dir, $(IMAGEDIRS), $(patsubst %.svg,%.png,$(wildcard $(SOURCED
# Pattern rule for converting SVG to PDF
%.pdf : %.svg
$(SVG2PDF) --format=Pdf --output=$@ $<
$(SVG2PDF) --format=pdf --output=$@ $<
# Pattern rule for converting SVG to PNG
%.png : %.svg
$(SVG2PNG) --format=Png --output=$@ $<
$(SVG2PNG) --format=png --output=$@ $<
clean:
@rm -rf $(BUILDDIR) $(PNGs) $(PDFs) poky.yaml sphinx-static/switchers.js releases.rst
@@ -68,7 +68,7 @@ epub: $(PNGs)
# Unable to read an entire line---bufsize=200000. Please increase buf_size in texmf.cnf.
latexpdf: $(PDFs)
$(SOURCEDIR)/set_versions.py
buf_size=10000000 $(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
buf_size=10000000 LATEXMKOPTS="-silent" $(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
all: html epub latexpdf

View File

@@ -429,5 +429,22 @@ both the Yocto Project and BitBake manuals:
Submitting documentation changes
================================
Please see the top level README file in this repository for details of where
to send patches.
Please refer to our contributor guide here: https://docs.yoctoproject.org/contributor-guide/
for full details on how to submit changes.
As a quick guide, patches should be sent to docs@lists.yoctoproject.org
The git command to do that would be:
git send-email -M -1 --to docs@lists.yoctoproject.org
The 'To' header can be set as default for this repository:
git config sendemail.to docs@lists.yoctoproject.org
Now you can just do 'git send-email origin/master..' to send all local patches.
Read the other sections in this document and documentation/standards.md for
rules to follow when contributing to the documentation.
Git repository: https://git.yoctoproject.org/yocto-docs
Mailing list: docs@lists.yoctoproject.org

View File

@@ -44,7 +44,7 @@ following requirements:
much more will help to run multiple builds and increase
performance by reusing build artifacts.
- At least &MIN_RAM; Gbytes of RAM, though a modern modern build host with as
- At least &MIN_RAM; Gbytes of RAM, though a modern build host with as
much RAM and as many CPU cores as possible is strongly recommended to
maximize build performance.
@@ -57,7 +57,7 @@ following requirements:
:ref:`dev-manual/start:preparing the build host`
section in the Yocto Project Development Tasks Manual.
-
- Ensure that the following utilities have these minimum version numbers:
- Git &MIN_GIT_VERSION; or greater
- tar &MIN_TAR_VERSION; or greater
@@ -65,7 +65,7 @@ following requirements:
- gcc &MIN_GCC_VERSION; or greater.
- GNU make &MIN_MAKE_VERSION; or greater
If your build host does not meet any of these three listed version
If your build host does not satisfy all of the above version
requirements, you can take steps to prepare the system so that you
can still use the Yocto Project. See the
:ref:`ref-manual/system-requirements:required git, tar, python, make and gcc versions`
@@ -182,7 +182,7 @@ an entire Linux distribution, including the toolchain, from source.
page of the Yocto Project Wiki.
#. **Initialize the Build Environment:** From within the ``poky``
directory, run the :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``
directory, run the :ref:`ref-manual/structure:``oe-init-build-env```
environment
setup script to define Yocto Project's build environment on your
build host.
@@ -252,7 +252,7 @@ an entire Linux distribution, including the toolchain, from source.
file in the :term:`Build Directory`::
BB_HASHSERVE_UPSTREAM = "wss://hashserv.yoctoproject.org/ws"
SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH"
SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH"
BB_HASHSERVE = "auto"
BB_SIGNATURE_HANDLER = "OEEquivHash"

View File

@@ -81,7 +81,7 @@ directory of that Layer. This directory is what you add to the
``conf/bblayers.conf`` file found in your
:term:`Build Directory`, which is
established after you run the OpenEmbedded build environment setup
script (i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``).
script (i.e. :ref:`ref-manual/structure:``oe-init-build-env```).
Adding the root directory allows the :term:`OpenEmbedded Build System`
to recognize the BSP
layer and from it build an image. Here is an example::
@@ -166,7 +166,7 @@ section.
BSPs, which are maintained in their own layers or in layers designed
to contain several BSPs. To get an idea of machine support through
BSP layers, you can look at the
:yocto_dl:`index of machines </releases/yocto/yocto-&DISTRO;/machines>`
:yocto_dl:`index of machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines>`
for the release.
#. *Optionally Clone the meta-intel BSP Layer:* If your hardware is
@@ -229,7 +229,7 @@ section.
#. *Initialize the Build Environment:* While in the root directory of
the Source Directory (i.e. ``poky``), run the
:ref:`ref-manual/structure:\`\`oe-init-build-env\`\`` environment
:ref:`ref-manual/structure:``oe-init-build-env``` environment
setup script to define the OpenEmbedded build environment on your
build host. ::
@@ -674,21 +674,21 @@ to the kernel recipe by using a similarly named append file, which is
located in the BSP Layer for your target device (e.g. the
``meta-bsp_root_name/recipes-kernel/linux`` directory).
Suppose you are using the ``linux-yocto_4.4.bb`` recipe to build the
Suppose you are using the ``linux-yocto_6.12.bb`` recipe to build the
kernel. In other words, you have selected the kernel in your
``"bsp_root_name".conf`` file by adding
:term:`PREFERRED_PROVIDER` and :term:`PREFERRED_VERSION`
statements as follows::
PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto"
PREFERRED_VERSION_linux-yocto ?= "4.4%"
PREFERRED_VERSION_linux-yocto ?= "6.12%"
.. note::
When the preferred provider is assumed by default, the :term:`PREFERRED_PROVIDER`
statement does not appear in the ``"bsp_root_name".conf`` file.
You would use the ``linux-yocto_4.4.bbappend`` file to append specific
You would use the ``linux-yocto_6.12.bbappend`` file to append specific
BSP settings to the kernel, thus configuring the kernel for your
particular BSP.
@@ -698,14 +698,19 @@ in the Yocto Project Linux Kernel Development Manual.
An alternate scenario is when you create your own kernel recipe for the
BSP. A good example of this is the Raspberry Pi BSP. If you examine the
``recipes-kernel/linux`` directory you see the following::
``recipes-kernel/linux`` directory in that layer you see the following
Raspberry Pi-specific recipes and associated files::
files/
linux-raspberrypi_6.12.bb
linux-raspberrypi_6.1.bb
linux-raspberrypi_6.6.bb
linux-raspberrypi-dev.bb
linux-raspberrypi.inc
linux-raspberrypi_4.14.bb
linux-raspberrypi_4.9.bb
The directory contains three kernel recipes and a common include file.
linux-raspberrypi-v7_6.12.bb
linux-raspberrypi-v7_6.1.bb
linux-raspberrypi-v7_6.6.bb
linux-raspberrypi-v7.inc
Developing a Board Support Package (BSP)
========================================
@@ -1177,7 +1182,7 @@ Use these steps to create a BSP layer:
- *Create a Kernel Recipe:* Create a kernel recipe in
``recipes-kernel/linux`` by either using a kernel append file or a
new custom kernel recipe file (e.g. ``linux-yocto_4.12.bb``). The BSP
new custom kernel recipe file (e.g. ``linux-yocto_6.12.bb``). The BSP
layers mentioned in the previous step also contain different kernel
examples. See the ":ref:`kernel-dev/common:modifying an existing recipe`"
section in the Yocto Project Linux Kernel Development Manual for
@@ -1242,7 +1247,7 @@ located in :yocto_git:`poky/meta-yocto-bsp/conf/machine/beaglebone-yocto.conf
PREFERRED_PROVIDER_virtual/xserver ?= "xserver-xorg"
MACHINE_EXTRA_RRECOMMENDS = "kernel-modules kernel-devicetree"
MACHINE_EXTRA_RRECOMMENDS = "kernel-modules"
EXTRA_IMAGEDEPENDS += "virtual/bootloader"
@@ -1258,23 +1263,21 @@ located in :yocto_git:`poky/meta-yocto-bsp/conf/machine/beaglebone-yocto.conf
SERIAL_CONSOLES ?= "115200;ttyS0 115200;ttyO0 115200;ttyAMA0"
PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto"
PREFERRED_VERSION_linux-yocto ?= "6.1%"
PREFERRED_VERSION_linux-yocto ?= "6.12%"
KERNEL_IMAGETYPE = "zImage"
KERNEL_DEVICETREE = "am335x-bone.dtb am335x-boneblack.dtb am335x-bonegreen.dtb"
KERNEL_EXTRA_ARGS += "LOADADDR=${UBOOT_ENTRYPOINT}"
DTB_FILES = "am335x-bone.dtb am335x-boneblack.dtb am335x-bonegreen.dtb"
KERNEL_DEVICETREE = '${@' '.join('ti/omap/%s' % d for d in '${DTB_FILES}'.split())}'
PREFERRED_PROVIDER_virtual/bootloader ?= "u-boot"
SPL_BINARY = "MLO"
UBOOT_SUFFIX = "img"
UBOOT_MACHINE = "am335x_evm_defconfig"
UBOOT_ENTRYPOINT = "0x80008000"
UBOOT_LOADADDRESS = "0x80008000"
MACHINE_FEATURES = "usbgadget usbhost vfat alsa"
IMAGE_BOOT_FILES ?= "u-boot.${UBOOT_SUFFIX} ${SPL_BINARY} ${KERNEL_IMAGETYPE} ${KERNEL_DEVICETREE}"
IMAGE_BOOT_FILES ?= "u-boot.${UBOOT_SUFFIX} ${SPL_BINARY} ${KERNEL_IMAGETYPE} ${DTB_FILES}"
# support runqemu
EXTRA_IMAGEDEPENDS += "qemu-native qemu-helper-native"
@@ -1328,12 +1331,12 @@ Project Reference Manual.
needed in the root filesystem. In this case, the U-Boot recipe must
be built for the image.
At the end of the file, we also use this setings to implement
At the end of the file, we also use this setting to implement
``runqemu`` support on the host machine.
- :term:`DEFAULTTUNE`: Machines
use tunings to optimize machine, CPU, and application performance.
These features, which are collectively known as "tuning features",
These features --- collectively known as "tuning features" ---
are set in the :term:`OpenEmbedded-Core (OE-Core)` layer. In this
example, the default tuning file is :oe_git:`tune-cortexa8
</openembedded-core/tree/meta/conf/machine/include/arm/armv7a/tune-cortexa8.inc>`.
@@ -1363,8 +1366,7 @@ Project Reference Manual.
to create the sysroot when building a Wic image.
- :term:`SERIAL_CONSOLES`:
Defines a serial console (TTY) to enable using getty. In this case,
the baud rate is "115200" and the device name is "ttyO0".
Defines one or more serial consoles (TTYs) to enable using getty.
- :term:`PREFERRED_PROVIDER_virtual/kernel <PREFERRED_PROVIDER>`:
Specifies the recipe that provides "virtual/kernel" when more than
@@ -1374,7 +1376,7 @@ Project Reference Manual.
- :term:`PREFERRED_VERSION_linux-yocto <PREFERRED_VERSION>`:
Defines the version of the recipe used to build the kernel, which is
"6.1" in this case.
"6.12" in this case.
- :term:`KERNEL_IMAGETYPE`:
The type of kernel to build for the device. In this case, the
@@ -1416,12 +1418,6 @@ Project Reference Manual.
Specifies the value passed on the make command line when building
a U-Boot image.
- :term:`UBOOT_ENTRYPOINT`:
Specifies the entry point for the U-Boot image.
- :term:`UBOOT_LOADADDRESS`:
Specifies the load address for the U-Boot image.
- :term:`MACHINE_FEATURES`:
Specifies the list of hardware features the BeagleBone device is
capable of supporting. In this case, the device supports "usbgadget

View File

@@ -13,6 +13,7 @@
# documentation root, use os.path.abspath to make it absolute, like shown here.
#
import os
import re
import sys
import datetime
try:
@@ -111,6 +112,9 @@ extlinks = {
'wikipedia': ('https://en.wikipedia.org/wiki/%s', None),
}
# To be able to use :manpage:`<something>` in the docs.
manpages_url = 'https://manpages.debian.org/{path}'
# Intersphinx config to use cross reference with BitBake user manual
intersphinx_mapping = {
'bitbake': ('https://docs.yoctoproject.org/bitbake/' + bitbake_version, None)
@@ -170,6 +174,24 @@ latex_elements = {
'preamble': '\\usepackage[UTF8]{ctex}\n\\setcounter{tocdepth}{2}',
}
from sphinx.search import SearchEnglish
from sphinx.search import languages
class DashFriendlySearchEnglish(SearchEnglish):
# Accept words that can include 'inner' hyphens or dots
_word_re = re.compile(r'[\w]+(?:[\.\-][\w]+)*')
js_splitter_code = r"""
function splitQuery(query) {
return query
.split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}\-\.]+/gu)
.filter(term => term.length > 0);
}
"""
languages['en'] = DashFriendlySearchEnglish
# Make the EPUB builder prefer PNG to SVG because of issues rendering Inkscape SVG
from sphinx.builders.epub3 import Epub3Builder
Epub3Builder.supported_image_types = ['image/png', 'image/gif', 'image/jpeg']

View File

@@ -221,6 +221,20 @@ Recipes need to define both the :term:`LICENSE` and
``meta/files/common-licenses/`` or the :term:`SPDXLICENSEMAP` flag names
defined in ``meta/conf/licenses.conf``.
.. note::
Setting a :term:`LICENSE` in a recipe applies to the software to be built
by this recipe, not to the recipe file itself. The license of recipes,
configuration files and scripts should also be clearly specified, for
example via comments or via a license found in the :term:`layer` that
holds these files. These license files are usually found at the root of
the layer. Exceptions should be clearly stated in the layer README or
LICENSE file.
For example, the :term:`OpenEmbedded-Core (OE-Core)` layer provides both
the GPL-2.0-only and MIT license files, and a "LICENSE" file to explain
how these two licenses are attributed to files found in the layer.
- :term:`LIC_FILES_CHKSUM`: The OpenEmbedded build system uses this
variable to make sure the license text has not changed. If it has,
the build produces an error and it affords you the chance to figure

View File

@@ -123,110 +123,116 @@ to add the upgraded version.
$ git commit -s file1 file2 dir1 dir2 ...
To include **a**\ ll staged files::
To include all staged files::
$ git commit -sa
- The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line
to your commit message. There is the same requirement for contributing
to the Linux kernel. Adding such a line signifies that you, the
submitter, have agreed to the `Developer's Certificate of Origin 1.1
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__
as follows:
#. The ``-s`` option of ``git commit`` adds a "Signed-off-by:" line
to your commit message. There is the same requirement for contributing
to the Linux kernel. Adding such a line signifies that you, the
submitter, have agreed to the `Developer's Certificate of Origin 1.1
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#sign-your-work-the-developer-s-certificate-of-origin>`__
as follows:
.. code-block:: none
.. code-block:: none
Developer's Certificate of Origin 1.1
Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
- Provide a single-line summary of the change and, if more
explanation is needed, provide more detail in the body of the
commit. This summary is typically viewable in the "shortlist" of
changes. Thus, providing something short and descriptive that
gives the reader a summary of the change is useful when viewing a
list of many commits. You should prefix this short description
with the recipe name (if changing a recipe), or else with the
short form path to the file being changed.
#. Provide a single-line summary of the change and, if more
explanation is needed, provide more detail in the description of the
commit. This summary is typically viewable in the "shortlist" of
changes. Thus, providing something short and descriptive that
gives the reader a summary of the change is useful when viewing a
list of many commits. You should prefix this short description
with the recipe name (if changing a recipe), or else with the
short form path to the file being changed.
.. note::
To find a suitable prefix for the commit summary, a good idea
is to look for prefixes used in previous commits touching the
same files or directories::
git log --oneline <paths>
#. For the commit description, provide detailed information
that describes what you changed, why you made the change, and the
approach you used. It might also be helpful if you mention how you
tested the change. Provide as much detail as you can in the commit
description.
.. note::
If the single line summary is enough to describe a simple
change, the commit description can be left empty.
#. If the change addresses a specific bug or issue that is associated
with a bug-tracking ID, include a reference to that ID in the body of the
commit message. For example, the Yocto Project uses a
specific convention for bug references --- any commit that addresses
a specific bug should use the following form for the body of the commit
message. Be sure to use the actual bug-tracking ID from
Bugzilla for bug-id::
single-line summary of change
Fixes [YOCTO #bug-id]
detailed description of change
#. If other people participated in this patch, add some tags to the commit
description to credit other contributors to the change:
- ``Reported-by``: name and email of a person reporting a bug
that your commit is trying to fix. This is a good practice
to encourage people to go on reporting bugs and let them
know that their reports are taken into account.
- ``Suggested-by``: name and email of a person to credit for the
idea of making the change.
- ``Tested-by``, ``Reviewed-by``: name and email for people having
tested your changes or reviewed their code. These fields are
usually added by the maintainer accepting a patch, or by
yourself if you submitted your patches to early reviewers,
or are submitting an unmodified patch again as part of a
new iteration of your patch series.
- ``Cc``: name and email of people you want to send a copy
of your changes to. This field will be used by ``git send-email``.
See `more guidance about using such tags
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__
in the Linux kernel documentation.
.. note::
To find a suitable prefix for the commit summary, a good idea
is to look for prefixes used in previous commits touching the
same files or directories::
git log --oneline <paths>
- For the body of the commit message, provide detailed information
that describes what you changed, why you made the change, and the
approach you used. It might also be helpful if you mention how you
tested the change. Provide as much detail as you can in the body
of the commit message.
.. note::
If the single line summary is enough to describe a simple
change, the body of the commit message can be left empty.
- If the change addresses a specific bug or issue that is associated
with a bug-tracking ID, include a reference to that ID in your
detailed description. For example, the Yocto Project uses a
specific convention for bug references --- any commit that addresses
a specific bug should use the following form for the detailed
description. Be sure to use the actual bug-tracking ID from
Bugzilla for bug-id::
Fixes [YOCTO #bug-id]
detailed description of change
#. *Crediting contributors:* By using the ``git commit --amend`` command,
you can add some tags to the commit description to credit other contributors
to the change:
- ``Reported-by``: name and email of a person reporting a bug
that your commit is trying to fix. This is a good practice
to encourage people to go on reporting bugs and let them
know that their reports are taken into account.
- ``Suggested-by``: name and email of a person to credit for the
idea of making the change.
- ``Tested-by``, ``Reviewed-by``: name and email for people having
tested your changes or reviewed their code. These fields are
usually added by the maintainer accepting a patch, or by
yourself if you submitted your patches to early reviewers,
or are submitting an unmodified patch again as part of a
new iteration of your patch series.
- ``CC:`` Name and email of people you want to send a copy
of your changes to. This field will be used by ``git send-email``.
See `more guidance about using such tags
<https://www.kernel.org/doc/html/latest/process/submitting-patches.html#using-reported-by-tested-by-reviewed-by-suggested-by-and-fixes>`__
in the Linux kernel documentation.
One can amend an existing git commit message to add missing tags for
contributors with the ``git commit --amend`` command.
Test your changes
-----------------
@@ -323,10 +329,10 @@ Validating Patches with Patchtest
``patchtest`` is available in ``openembedded-core`` as a tool for making
sure that your patches are well-formatted and contain important info for
maintenance purposes, such as ``Signed-off-by`` and ``Upstream-Status``
tags. Note that no functional testing of the changes will be performed by ``patchtest``.
Currently, it only supports testing patches for ``openembedded-core`` branches.
To setup, perform the following::
maintenance purposes, such as the ``Signed-off-by`` presence. Note that no
functional testing of the changes will be performed by ``patchtest``. Currently,
it only supports testing patches for ``openembedded-core`` branches. To setup,
perform the following::
pip install -r meta/lib/patchtest/requirements.txt
source oe-init-build-env
@@ -691,8 +697,8 @@ backported to a stable branch unless the bug in question does not affect the
master branch or the fix on the master branch is unsuitable for backporting.
The list of stable branches along with the status and maintainer for each
branch can be obtained from the
:yocto_wiki:`Releases wiki page </Releases>`.
branch can be obtained from the :yocto_home:`Releases </development/releases/>`
page.
.. note::
@@ -776,6 +782,38 @@ argument to ``git format-patch`` with a version number::
git format-patch -v2 <ref-branch>
After generating updated patches (v2, v3, and so on) via ``git
format-patch``, ideally developers will add a patch version changelog
to each patch that describes what has changed between each revision of
the patch. Add patch version changelogs after the ``---`` marker in the
patch, indicating that this information is part of this patch, but is not
suitable for inclusion in the commit message (i.e. the git history) itself.
Providing a patch version changelog makes it easier for maintainers and
reviewers to succinctly understand what changed in all versions of the
patch, without having to consult alternate sources of information, such as
searching through messages on a mailing list. For example::
<patch title>
<commit message>
<Signed-off-by/other trailers>
---
changes in v4:
- provide a clearer commit message
- fix spelling mistakes
changes in v3:
- replace func() to use other_func() instead
changes in v2:
- this patch was added in v2
---
<diffstat output>
<unified diff>
Lastly please ensure that you also test your revised changes. In particular
please don't just edit the patch file written out by ``git format-patch`` and
resend it.

View File

@@ -909,6 +909,11 @@ to point to that directory::
EXTERNALSRC_BUILD:pn-myrecipe = "path-to-your-source-tree"
.. note::
The values of :term:`EXTERNALSRC` and :term:`EXTERNALSRC_BUILD`
must be absolute paths.
Replicating a Build Offline
===========================

View File

@@ -36,7 +36,7 @@ section:
use the BitBake ``-e`` option to examine variable values after a
recipe has been parsed.
- ":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``"
- ":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```"
describes how to use the ``oe-pkgdata-util`` utility to query
:term:`PKGDATA_DIR` and
display package-related information for built packages.
@@ -111,17 +111,17 @@ occurred in your project. Perhaps an attempt to :ref:`modify a variable
<bitbake-user-manual/bitbake-user-manual-metadata:modifying existing
variables>` did not work out as expected.
BitBake's ``-e`` option is used to display variable values after
parsing. The following command displays the variable values after the
configuration files (i.e. ``local.conf``, ``bblayers.conf``,
BitBake's ``bitbake-getvar`` command is used to display variable values after
parsing. The following command displays the variable value for :term:`OVERRIDES`
after the configuration files (i.e. ``local.conf``, ``bblayers.conf``,
``bitbake.conf`` and so forth) have been parsed::
$ bitbake -e
$ bitbake-getvar OVERRIDES
The following command displays variable values after a specific recipe has
been parsed. The variables include those from the configuration as well::
The following command displays the value of :term:`PV` after a specific recipe
has been parsed::
$ bitbake -e recipename
$ bitbake-getvar -r recipename PV
.. note::
@@ -135,19 +135,25 @@ been parsed. The variables include those from the configuration as well::
the recipe datastore, which means that variables set within one task
will not be visible to other tasks.
In the output of ``bitbake -e``, each variable is preceded by a
description of how the variable got its value, including temporary
values that were later overridden. This description also includes
variable flags (varflags) set on the variable. The output can be very
In the output of ``bitbake-getvar``, the line containing the value of the
variable is preceded by a description of how the variable got its value,
including temporary values that were later overridden. This description also
includes variable flags (varflags) set on the variable. The output can be very
helpful during debugging.
Variables that are exported to the environment are preceded by
``export`` in the output of ``bitbake -e``. See the following example::
``export`` in the output of ``bitbake-getvar``. See the following example::
export CC="i586-poky-linux-gcc -m32 -march=i586 --sysroot=/home/ulf/poky/build/tmp/sysroots/qemux86"
In addition to variable values, the output of the ``bitbake -e`` and
``bitbake -e`` recipe commands includes the following information:
Shell functions and tasks can also be inspected with the same mechanism::
$ bitbake-getvar -r recipename do_install
For Python functions and tasks, ``bitbake -e recipename`` can be used instead.
Moreover, the output of the ``bitbake -e`` and ``bitbake -e`` recipe commands
includes the following information:
- The output starts with a tree listing all configuration files and
classes included globally, recursively listing the files they include

View File

@@ -41,7 +41,6 @@ Yocto Project Development Tasks Manual
build-quality
debugging
licenses
security-subjects
vulnerabilities
sbom
error-reporting-tool

View File

@@ -123,10 +123,9 @@ Follow these general steps to create your layer without using tools:
Lists all layers on which this layer depends (if any).
- :term:`LAYERSERIES_COMPAT`:
Lists the :yocto_wiki:`Yocto Project </Releases>`
releases for which the current version is compatible. This
variable is a good way to indicate if your particular layer is
current.
Lists the :yocto_home:`Yocto Project releases </development/releases/>`
for which the current version is compatible. This variable is a good
way to indicate if your particular layer is current.
.. note::
@@ -832,6 +831,8 @@ The following list describes the available commands:
can replicate the directory structure and revisions of the layers in a current build.
For more information, see ":ref:`dev-manual/layers:saving and restoring the layers setup`".
- ``show-machines``: Lists the machines available in the currently configured layers.
Creating a General Layer Using the ``bitbake-layers`` Script
============================================================

View File

@@ -56,7 +56,7 @@ necessary when adding a recipe to build a new piece of software to be
included in a build.
You can find a complete description of the ``devtool add`` command in
the ":ref:`sdk-manual/extensible:a closer look at \`\`devtool add\`\``" section
the ":ref:`sdk-manual/extensible:a closer look at ``devtool add```" section
in the Yocto Project Application Development and the Extensible Software
Development Kit (eSDK) manual.
@@ -83,19 +83,20 @@ command::
OpenEmbedded recipe tool
options:
-d, --debug Enable debug output
-q, --quiet Print only errors
--color COLOR Colorize output (where COLOR is auto, always, never)
-h, --help show this help message and exit
-d, --debug Enable debug output
-q, --quiet Print only errors
--color COLOR Colorize output (where COLOR is auto, always, never)
-h, --help show this help message and exit
subcommands:
create Create a new recipe
newappend Create a bbappend for the specified target in the specified
layer
setvar Set a variable within a recipe
appendfile Create/update a bbappend to replace a target file
appendsrcfiles Create/update a bbappend to add or replace source files
appendsrcfile Create/update a bbappend to add or replace a source file
newappend Create a bbappend for the specified target in the specified layer
create Create a new recipe
setvar Set a variable within a recipe
appendfile Create/update a bbappend to replace a target file
appendsrcfiles Create/update a bbappend to add or replace source files
appendsrcfile Create/update a bbappend to add or replace a source file
edit Edit the recipe and appends for the specified target. This obeys $VISUAL if set,
otherwise $EDITOR, otherwise vi.
Use recipetool <subcommand> --help to get help on a specific command
Running ``recipetool create -o OUTFILE`` creates the base recipe and
@@ -218,9 +219,9 @@ compilation and packaging files, and so forth.
The path to the per-recipe temporary work directory depends on the
context in which it is being built. The quickest way to find this path
is to have BitBake return it by running the following::
is to use the ``bitbake-getvar`` utility::
$ bitbake -e basename | grep ^WORKDIR=
$ bitbake-getvar -r basename WORKDIR
As an example, assume a Source Directory
top-level folder named ``poky``, a default :term:`Build Directory` at
@@ -438,7 +439,7 @@ Licensing
=========
Your recipe needs to define variables related to the license
under whith the software is distributed. See the
under which the software is distributed. See the
:ref:`contributor-guide/recipe-style-guide:recipe license fields`
section in the Contributor Guide for details.

View File

@@ -274,8 +274,23 @@ with a number. The number used depends on the state of the PR Service:
.. code-block:: none
hello-world-git_0.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_0.0+git1+dd2f5c3565-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git1+dd2f5c3565-r0.1_armv7a-neon.ipk
Two numbers got incremented here:
- ``gitX`` changed from ``git0`` to ``git1``. This is because there was a
change in the source code (``SRCREV``).
- ``r0.X`` changed from ``r0.0`` to ``r0.1``. This is because the hash of
the :ref:`ref-tasks-package` task changed.
The reason for this change can be many. To understand why the hash of the
:ref:`ref-tasks-package` task changed, you can run the following command:
.. code-block:: console
$ bitbake-diffsigs -t hello-world package
- If PR Service is not enabled, the build system replaces the
``AUTOINC`` placeholder with zero (i.e. "0"). This results in
@@ -285,8 +300,8 @@ with a number. The number used depends on the state of the PR Service:
.. code-block:: none
hello-world-git_0.0+git0+b6558dd387-r0.0_armv7a-neon.ipk
hello-world-git_0.0+git0+dd2f5c3565-r0.0_armv7a-neon.ipk
hello-world-git_1.0+git0+b6558dd387-r0_armv7a-neon.ipk
hello-world-git_1.0+git0+dd2f5c3565-r0_armv7a-neon.ipk
In summary, the OpenEmbedded build system does not track the history of
binary package versions for this purpose. ``AUTOINC``, in this case, is
@@ -549,12 +564,12 @@ variable to specify the format:
PACKAGE_CLASSES ?= "package_packageformat"
where packageformat can be "ipk", "rpm",
"deb", or "tar" which are the supported package formats.
where packageformat can be "ipk", "rpm", or
"deb" which are the supported package formats.
.. note::
Because the Yocto Project supports four different package formats,
Because the Yocto Project supports three different package formats,
you can set the variable with more than one argument. However, the
OpenEmbedded build system only uses the first argument when
creating an image or Software Development Kit (SDK).

View File

@@ -75,7 +75,7 @@ available. Follow these general steps to run QEMU:
your :term:`Build Directory`.
- If you have not built an image, you can go to the
:yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu/>` area and download a
:yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu/>` area and download a
pre-built image that matches your architecture and can be run on
QEMU.

View File

@@ -24,22 +24,16 @@ users can read in standardized format.
:term:`SBOM` information is also critical to performing vulnerability exposure
assessments, as all the components used in the Software Supply Chain are listed.
The OpenEmbedded build system doesn't generate such information by default.
To make this happen, you must inherit the
:ref:`ref-classes-create-spdx` class from a configuration file::
The OpenEmbedded build system generates such information by default (by
inheriting the :ref:`ref-classes-create-spdx` class in :term:`INHERIT_DISTRO`).
INHERIT += "create-spdx"
If needed, it can be disabled from a :term:`configuration file`::
Upon building an image, you will then get:
INHERIT_DISTRO:remove = "create-spdx"
- :term:`SPDX` output in JSON format as an ``IMAGE-MACHINE.spdx.json`` file in
``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`.
- This toplevel file is accompanied by an ``IMAGE-MACHINE.spdx.index.json``
containing an index of JSON :term:`SPDX` files for individual recipes.
- The compressed archive ``IMAGE-MACHINE.spdx.tar.zst`` contains the index
and the files for the single recipes.
Upon building an image, you will then get the compressed archive
``IMAGE-MACHINE.spdx.tar.zst`` contains the index and the files for the single
recipes.
The :ref:`ref-classes-create-spdx` class offers options to include
more information in the output :term:`SPDX` data:
@@ -56,7 +50,7 @@ more information in the output :term:`SPDX` data:
Though the toplevel :term:`SPDX` output is available in
``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`, ancillary
generated files are available in ``tmp/deploy/spdx/MACHINE`` too, such as:
generated files are available in ``tmp/deploy/spdx`` too, such as:
- The individual :term:`SPDX` JSON files in the ``IMAGE-MACHINE.spdx.tar.zst``
archive.

View File

@@ -1,189 +0,0 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Dealing with Vulnerability Reports
**********************************
The Yocto Project and OpenEmbedded are open-source, community-based projects
used in numerous products. They assemble multiple other open-source projects,
and need to handle security issues and practices both internal (in the code
maintained by both projects), and external (maintained by other projects and
organizations).
This manual assembles security-related information concerning the whole
ecosystem. It includes information on reporting a potential security issue,
the operation of the YP Security team and how to contribute in the
related code. It is written to be useful for both security researchers and
YP developers.
How to report a potential security vulnerability?
=================================================
If you would like to report a public issue (for example, one with a released
CVE number), please report it using the
:yocto_bugs:`Security Bugzilla </enter_bug.cgi?product=Security>`.
If you are dealing with a not-yet-released issue, or an urgent one, please send
a message to security AT yoctoproject DOT org, including as many details as
possible: the layer or software module affected, the recipe and its version,
and any example code, if available. This mailing list is monitored by the
Yocto Project Security team.
For each layer, you might also look for specific instructions (if any) for
reporting potential security issues in the specific ``SECURITY.md`` file at the
root of the repository. Instructions on how and where submit a patch are
usually available in ``README.md``. If this is your first patch to the
Yocto Project/OpenEmbedded, you might want to have a look into the
Contributor's Manual section
":ref:`contributor-guide/submit-changes:preparing changes for submission`".
Branches maintained with security fixes
---------------------------------------
See the
:ref:`Release process <ref-manual/release-process:Stable Release Process>`
documentation for details regarding the policies and maintenance of stable
branches.
The :yocto_wiki:`Releases page </Releases>` contains a list
of all releases of the Yocto Project. Versions in gray are no longer actively
maintained with security patches, but well-tested patches may still be accepted
for them for significant issues.
Security-related discussions at the Yocto Project
-------------------------------------------------
We have set up two security-related mailing lists:
- Public List: yocto [dash] security [at] yoctoproject[dot] org
This is a public mailing list for anyone to subscribe to. This list is an
open list to discuss public security issues/patches and security-related
initiatives. For more information, including subscription information,
please see the :yocto_lists:`yocto-security mailing list info page </g/yocto-security>`.
- Private List: security [at] yoctoproject [dot] org
This is a private mailing list for reporting non-published potential
vulnerabilities. The list is monitored by the Yocto Project Security team.
What you should do if you find a security vulnerability
-------------------------------------------------------
If you find a security flaw: a crash, an information leakage, or anything that
can have a security impact if exploited in any Open Source software built or
used by the Yocto Project, please report this to the Yocto Project Security
Team. If you prefer to contact the upstream project directly, please send a
copy to the security team at the Yocto Project as well. If you believe this is
highly sensitive information, please report the vulnerability in a secure way,
i.e. encrypt the email and send it to the private list. This ensures that
the exploit is not leaked and exploited before a response/fix has been generated.
Security team
=============
The Yocto Project/OpenEmbedded security team coordinates the work on security
subjects in the project. All general discussion takes place publicly. The
Security Team only uses confidential communication tools to deal with private
vulnerability reports before they are released.
Security team appointment
-------------------------
The Yocto Project Security Team consists of at least three members. When new
members are needed, the Yocto Project Technical Steering Committee (YP TSC)
asks for nominations by public channels including a nomination deadline.
Self-nominations are possible. When the limit time is
reached, the YP TSC posts the list of candidates for the comments of project
participants and developers. Comments may be sent publicly or privately to the
YP and OE TSCs. The candidates are approved by both YP TSC and OpenEmbedded
Technical Steering Committee (OE TSC) and the final list of the team members
is announced publicly. The aim is to have people representing technical
leadership, security knowledge and infrastructure present with enough people
to provide backup/coverage but keep the notification list small enough to
minimize information risk and maintain trust.
YP Security Team members may resign at any time.
Security Team Operations
------------------------
The work of the Security Team might require high confidentiality. Team members
are individuals selected by merit and do not represent the companies they work
for. They do not share information about confidential issues outside of the team
and do not hint about ongoing embargoes.
Team members can bring in domain experts as needed. Those people should be
added to individual issues only and adhere to the same standards as the YP
Security Team.
The YP security team organizes its meetings and communication as needed.
When the YP Security team receives a report about a potential security
vulnerability, they quickly analyze and notify the reporter of the result.
They might also request more information.
If the issue is confirmed and affects the code maintained by the YP, they
confidentially notify maintainers of that code and work with them to prepare
a fix.
If the issue is confirmed and affects an upstream project, the YP security team
notifies the project. Usually, the upstream project analyzes the problem again.
If they deem it a real security problem in their software, they develop and
release a fix following their security policy. They may want to include the
original reporter in the loop. There is also sometimes some coordination for
handling patches, backporting patches etc, or just understanding the problem
or what caused it.
When the fix is publicly available, the YP security team member or the
package maintainer sends patches against the YP code base, following usual
procedures, including public code review.
What Yocto Security Team does when it receives a security vulnerability
-----------------------------------------------------------------------
The YP Security Team team performs a quick analysis and would usually report
the flaw to the upstream project. Normally the upstream project analyzes the
problem. If they deem it a real security problem in their software, they
develop and release a fix following their own security policy. They may want
to include the original reporter in the loop. There is also sometimes some
coordination for handling patches, backporting patches etc, or just
understanding the problem or what caused it.
The security policy of the upstream project might include a notification to
Linux distributions or other important downstream projects in advance to
discuss coordinated disclosure. These mailing lists are normally non-public.
When the upstream project releases a version with the fix, they are responsible
for contacting `Mitre <https://www.cve.org/>`__ to get a CVE number assigned and
the CVE record published.
If an upstream project does not respond quickly
-----------------------------------------------
If an upstream project does not fix the problem in a reasonable time,
the Yocto's Security Team will contact other interested parties (usually
other distributions) in the community and together try to solve the
vulnerability as quickly as possible.
The Yocto Project Security team adheres to the 90 days disclosure policy
by default. An increase of the embargo time is possible when necessary.
Current Security Team members
-----------------------------
For secure communications, please send your messages encrypted using the GPG
keys. Remember, message headers are not encrypted so do not include sensitive
information in the subject line.
- Ross Burton: <ross@burtonini.com> `Public key <https://keys.openpgp.org/search?q=ross%40burtonini.com>`__
- Michael Halstead: <mhalstead [at] linuxfoundation [dot] org>
`Public key <https://pgp.mit.edu/pks/lookup?op=vindex&search=0x3373170601861969>`__
or `Public key <https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xd1f2407285e571ed12a407a73373170601861969>`__
- Richard Purdie: <richard.purdie@linuxfoundation.org> `Public key <https://keys.openpgp.org/search?q=richard.purdie%40linuxfoundation.org>`__
- Marta Rybczynska: <marta DOT rybczynska [at] syslinbit [dot] com> `Public key <https://keys.openpgp.org/search?q=marta.rybczynska@syslinbit.com>`__
- Steve Sakoman: <steve [at] sakoman [dot] com> `Public key <https://keys.openpgp.org/search?q=steve%40sakoman.com>`__

View File

@@ -543,6 +543,7 @@ your Yocto Project build host:
DISKPART> select vdisk file="<path_to_VHDX_file>"
DISKPART> attach vdisk readonly
DISKPART> compact vdisk
DISKPART> detach
DISKPART> exit
.. note::
@@ -615,7 +616,7 @@ Accessing Source Archives
The Yocto Project also provides source archives of its releases, which
are available on :yocto_dl:`/releases/yocto/`. Then, choose the subdirectory
containing the release you wish to use, for example
:yocto_dl:`yocto-&DISTRO; </releases/yocto/yocto-&DISTRO;/>`.
:yocto_dl:`&DISTRO_REL_LATEST_TAG; </releases/yocto/&DISTRO_REL_LATEST_TAG;/>`.
You will find there source archives of individual components (if you wish
to use them individually), and of the corresponding Poky release bundling
@@ -650,7 +651,7 @@ described in the ":ref:`dev-manual/start:accessing source archives`" section.
.. note::
For a "map" of Yocto Project releases to version numbers, see the
:yocto_wiki:`Releases </Releases>` wiki page.
:yocto_home:`Releases </development/releases/>` page.
You can use the "RELEASE ARCHIVE" link to reveal a menu of all Yocto
Project releases.

View File

@@ -36,11 +36,11 @@ The path to the work directory for the recipe
(:term:`WORKDIR`) is defined as
follows::
${TMPDIR}/work/${MULTIMACH_TARGET_SYS}/${PN}/${EXTENDPE}${PV}-${PR}
${BASE_WORKDIR}/${MULTIMACH_TARGET_SYS}/${PN}/${PV}
The actual directory depends on several things:
- :term:`TMPDIR`: The top-level build
- :term:`BASE_WORKDIR`: The top-level build
output directory.
- :term:`MULTIMACH_TARGET_SYS`:
@@ -48,19 +48,13 @@ The actual directory depends on several things:
- :term:`PN`: The recipe name.
- :term:`EXTENDPE`: The epoch --- if
:term:`PE` is not specified, which is
usually the case for most recipes, then :term:`EXTENDPE` is blank.
- :term:`PV`: The recipe version.
- :term:`PR`: The recipe revision.
As an example, assume a Source Directory top-level folder named
``poky``, a default :term:`Build Directory` at ``poky/build``, and a
``project``, a default :term:`Build Directory` at ``project/build``, and a
``qemux86-poky-linux`` machine target system. Furthermore, suppose your
recipe is named ``foo_1.3.0.bb``. In this case, the work directory the
build system uses to build the package would be as follows::
poky/build/tmp/work/qemux86-poky-linux/foo/1.3.0-r0
project/build/tmp/work/qemux86-poky-linux/foo/1.3.0

View File

@@ -333,7 +333,7 @@ Manually Upgrading a Recipe
If for some reason you choose not to upgrade recipes using
:ref:`dev-manual/upgrading-recipes:Using the Auto Upgrade Helper (AUH)` or
by :ref:`dev-manual/upgrading-recipes:Using \`\`devtool upgrade\`\``,
by :ref:`dev-manual/upgrading-recipes:Using ``devtool upgrade```,
you can manually edit the recipe files to upgrade the versions.
.. note::

View File

@@ -12,7 +12,7 @@ known security vulnerabilities, as tracked by the public
database.
The Yocto Project maintains a `list of known vulnerabilities
<https://autobuilder.yocto.io/pub/non-release/patchmetrics/>`__
<https://valkyrie.yocto.io/pub/non-release/patchmetrics/>`__
for packages in Poky and OE-Core, tracking the evolution of the number of
unpatched CVEs and the status of patches. Such information is available for
the current development version and for each supported release.
@@ -314,7 +314,7 @@ products defined in :term:`CVE_PRODUCT`. Then, for each found CVE:
The CVE database is stored in :term:`DL_DIR` and can be inspected using
``sqlite3`` command as follows::
sqlite3 downloads/CVE_CHECK/nvdcve_1.1.db .dump | grep CVE-2021-37462
sqlite3 downloads/CVE_CHECK/nvd*.db .dump | grep CVE-2021-37462
When analyzing CVEs, it is recommended to:

Binary file not shown.

Before

Width:  |  Height:  |  Size: 214 KiB

View File

@@ -20,7 +20,6 @@ Welcome to the Yocto Project Documentation
Yocto Project Software Overview <https://www.yoctoproject.org/software-overview/>
Tips and Tricks Wiki <https://wiki.yoctoproject.org/wiki/TipsAndTricks>
.. toctree::
:maxdepth: 1
:caption: Manuals
@@ -37,6 +36,12 @@ Welcome to the Yocto Project Documentation
Test Environment Manual <test-manual/index>
bitbake
.. toctree::
:maxdepth: 1
:caption: Security
Yocto Project Security Reference <security-reference/index>
.. toctree::
:maxdepth: 1
:caption: Release Manuals

View File

@@ -650,13 +650,9 @@ the Broadcom 2708/2709 chipset::
KBUILD_DEFCONFIG:raspberrypi2 ?= "bcm2709_defconfig"
Aside from modifying your kernel recipe and providing your own
``defconfig`` file, you need to be sure no files or statements set
:term:`SRC_URI` to use a ``defconfig`` other than your "in-tree" file (e.g.
a kernel's ``linux-``\ `machine`\ ``.inc`` file). In other words, if the
build system detects a statement that identifies an "out-of-tree"
``defconfig`` file, that statement will override your
:term:`KBUILD_DEFCONFIG` variable.
If the build system detects a statement that identifies an "out-of-tree"
``defconfig`` file, your :term:`KBUILD_DEFCONFIG` variable will take precedence
over it.
See the
:term:`KBUILD_DEFCONFIG`
@@ -672,7 +668,7 @@ The steps in this procedure show you how you can patch the kernel using
Before attempting this procedure, be sure you have performed the
steps to get ready for updating the kernel as described in the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section.
Patching the kernel involves changing or adding configurations to an
@@ -685,7 +681,7 @@ output at boot time through ``printk`` statements in the kernel's
``calibrate.c`` source code file. Applying the patch and booting the
modified image causes the added messages to appear on the emulator's
console. The example is a continuation of the setup procedure found in
the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Section.
the ":ref:`kernel-dev/common:getting ready to develop using ``devtool```" Section.
#. *Check Out the Kernel Source Files:* First you must use ``devtool``
to checkout the kernel source code in its workspace.
@@ -693,7 +689,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se
.. note::
See this step in the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section for more information.
Use the following ``devtool`` command to check out the code::
@@ -804,7 +800,7 @@ the ":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``" Se
.. note::
See Step 3 of the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section for information on setting up this layer.
Once the command
@@ -1190,15 +1186,17 @@ appear in the ``.config`` file, which is in the :term:`Build Directory`.
For more information about where the ``.config`` file is located, see the
example in the
":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
":ref:`kernel-dev/common:using ``menuconfig```"
section.
It is simple to create a configuration fragment. One method is to use
shell commands. For example, issuing the following from the shell
creates a configuration fragment file named ``my_smp.cfg`` that enables
multi-processor support within the kernel::
creates a configuration fragment file named ``my_changes.cfg`` that enables
multi-processor support within the kernel and disables the FPGA
Configuration Framework::
$ echo "CONFIG_SMP=y" >> my_smp.cfg
$ echo "CONFIG_SMP=y" >> my_changes.cfg
$ echo "# CONFIG_FPGA is not set" >> my_changes.cfg
.. note::
@@ -1286,7 +1284,7 @@ when you override a policy configuration in a hardware configuration
fragment.
In order to run this task, you must have an existing ``.config`` file.
See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``" section for
See the ":ref:`kernel-dev/common:using ``menuconfig```" section for
information on how to create a configuration file.
Here is sample output from the :ref:`ref-tasks-kernel_configcheck` task:
@@ -1359,7 +1357,7 @@ and
tasks until they produce no warnings.
For more information on how to use the ``menuconfig`` tool, see the
:ref:`kernel-dev/common:using \`\`menuconfig\`\`` section.
:ref:`kernel-dev/common:using ``menuconfig``` section.
Fine-Tuning the Kernel Configuration File
-----------------------------------------
@@ -1435,15 +1433,13 @@ Expanding Variables
===================
Sometimes it is helpful to determine what a variable expands to during a
build. You can examine the values of variables by examining the
output of the ``bitbake -e`` command. The output is long and is more
easily managed in a text file, which allows for easy searches::
build. You can examine the value of a variable by running the ``bitbake-getvar``
command::
$ bitbake -e virtual/kernel > some_text_file
$ bitbake-getvar -r virtual/kernel VARIABLE
Within the text file, you can see
exactly how each variable is expanded and used by the OpenEmbedded build
system.
The output of the command explains exactly how the variable is expanded and used
by the :term:`OpenEmbedded Build System`.
Working with a "Dirty" Kernel Version String
============================================

View File

@@ -122,7 +122,7 @@ general information and references for further information.
Using ``devtool`` requires that you have a clean build
of the image. For
more information, see the
":ref:`kernel-dev/common:getting ready to develop using \`\`devtool\`\``"
":ref:`kernel-dev/common:getting ready to develop using ``devtool```"
section.
Using traditional kernel development requires that you have the

View File

@@ -32,3 +32,10 @@ Release 4.0 (kirkstone)
release-notes-4.0.23
release-notes-4.0.24
release-notes-4.0.25
release-notes-4.0.26
release-notes-4.0.27
release-notes-4.0.28
release-notes-4.0.29
release-notes-4.0.30
release-notes-4.0.31
release-notes-4.0.32

View File

@@ -14,4 +14,11 @@ Release 5.0 (scarthgap)
release-notes-5.0.5
release-notes-5.0.6
release-notes-5.0.7
release-notes-5.0.8
release-notes-5.0.9
release-notes-5.0.10
release-notes-5.0.11
release-notes-5.0.12
release-notes-5.0.13
release-notes-5.0.14
release-notes-5.0.15

View File

@@ -0,0 +1,263 @@
Release notes for Yocto-4.0.26 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve_nist:`2024-11187` and :cve_nist:`2024-12705`
- binutils: Fix :cve_nist:`2025-0840`
- elfutils: Fix :cve_nist:`2025-1352` and :cve_nist:`2025-1372`
- ffmpeg: Fix CVE-2024-28661, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`, :cve_nist:`2024-36616`,
:cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2025-0518` and :cve_nist:`2025-25473`
- ffmpeg: Ignore :cve_nist:`2023-46407`, :cve_nist:`2023-47470`, :cve_nist:`2024-7272`,
:cve_nist:`2024-22860`, :cve_nist:`2024-22861` and :cve_nist:`2024-22862`
- freetype: Fix :cve_nist:`2025-27363`
- gnutls: Fix :cve_nist:`2024-12243`
- grub: Fix :cve_nist:`2024-45774`, :cve_nist:`2024-45775`, :cve_nist:`2024-45776`,
:cve_nist:`2024-45777`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`, :cve_nist:`2024-45780`,
:cve_nist:`2024-45781`, :cve_nist:`2024-45782`, :cve_nist:`2024-45783`, :cve_nist:`2024-56737`,
:cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, :cve_nist:`2025-0684`,
:cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`, :cve_nist:`2025-0678`,
:cve_nist:`2025-0690`, :cve_nist:`2025-1118` and :cve_nist:`2025-1125`
- gstreamer1.0-rtsp-server: fix :cve_nist:`2024-44331`
- libarchive: Fix :cve_nist:`2025-25724`
- libarchive: Ignore :cve_nist:`2025-1632`
- libcap: Fix :cve_nist:`2025-1390`
- linux-yocto/5.10: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-43098`, :cve_nist:`2024-47143`,
:cve_nist:`2024-48881`, :cve_nist:`2024-50051`, :cve_nist:`2024-50074`, :cve_nist:`2024-50082`,
:cve_nist:`2024-50083`, :cve_nist:`2024-50099`, :cve_nist:`2024-50115`, :cve_nist:`2024-50116`,
:cve_nist:`2024-50117`, :cve_nist:`2024-50142`, :cve_nist:`2024-50148`, :cve_nist:`2024-50150`,
:cve_nist:`2024-50151`, :cve_nist:`2024-50167`, :cve_nist:`2024-50168`, :cve_nist:`2024-50171`,
:cve_nist:`2024-50185`, :cve_nist:`2024-50192`, :cve_nist:`2024-50193`, :cve_nist:`2024-50194`,
:cve_nist:`2024-50195`, :cve_nist:`2024-50198`, :cve_nist:`2024-50201`, :cve_nist:`2024-50202`,
:cve_nist:`2024-50205`, :cve_nist:`2024-50208`, :cve_nist:`2024-50209`, :cve_nist:`2024-50229`,
:cve_nist:`2024-50230`, :cve_nist:`2024-50233`, :cve_nist:`2024-50234`, :cve_nist:`2024-50236`,
:cve_nist:`2024-50237`, :cve_nist:`2024-50251`, :cve_nist:`2024-50262`, :cve_nist:`2024-50264`,
:cve_nist:`2024-50265`, :cve_nist:`2024-50267`, :cve_nist:`2024-50268`, :cve_nist:`2024-50269`,
:cve_nist:`2024-50273`, :cve_nist:`2024-50278`, :cve_nist:`2024-50279`, :cve_nist:`2024-50282`,
:cve_nist:`2024-50287`, :cve_nist:`2024-50292`, :cve_nist:`2024-50296`, :cve_nist:`2024-50299`,
:cve_nist:`2024-50301`, :cve_nist:`2024-50302`, :cve_nist:`2024-53042`, :cve_nist:`2024-53052`,
:cve_nist:`2024-53057`, :cve_nist:`2024-53059`, :cve_nist:`2024-53060`, :cve_nist:`2024-53061`,
:cve_nist:`2024-53063`, :cve_nist:`2024-53066`, :cve_nist:`2024-53096`, :cve_nist:`2024-53097`,
:cve_nist:`2024-53101`, :cve_nist:`2024-53103`, :cve_nist:`2024-53104`, :cve_nist:`2024-53145`,
:cve_nist:`2024-53146`, :cve_nist:`2024-53150`, :cve_nist:`2024-53155`, :cve_nist:`2024-53156`,
:cve_nist:`2024-53157`, :cve_nist:`2024-53161`, :cve_nist:`2024-53165`, :cve_nist:`2024-53171`,
:cve_nist:`2024-53173`, :cve_nist:`2024-53174`, :cve_nist:`2024-53194`, :cve_nist:`2024-53197`,
:cve_nist:`2024-53217`, :cve_nist:`2024-53226`, :cve_nist:`2024-53227`, :cve_nist:`2024-53237`,
:cve_nist:`2024-53239`, :cve_nist:`2024-55916`, :cve_nist:`2024-56548`, :cve_nist:`2024-56558`,
:cve_nist:`2024-56567`, :cve_nist:`2024-56568`, :cve_nist:`2024-56569`, :cve_nist:`2024-56572`,
:cve_nist:`2024-56574`, :cve_nist:`2024-56581`, :cve_nist:`2024-56587`, :cve_nist:`2024-56593`,
:cve_nist:`2024-56595`, :cve_nist:`2024-56596`, :cve_nist:`2024-56598`, :cve_nist:`2024-56600`,
:cve_nist:`2024-56601`, :cve_nist:`2024-56602`, :cve_nist:`2024-56603`, :cve_nist:`2024-56605`,
:cve_nist:`2024-56606`, :cve_nist:`2024-56615`, :cve_nist:`2024-56619`, :cve_nist:`2024-56623`,
:cve_nist:`2024-56629`, :cve_nist:`2024-56634`, :cve_nist:`2024-56642`, :cve_nist:`2024-56643`,
:cve_nist:`2024-56648`, :cve_nist:`2024-56650`, :cve_nist:`2024-56659`, :cve_nist:`2024-56662`,
:cve_nist:`2024-56670`, :cve_nist:`2024-56688`, :cve_nist:`2024-56698`, :cve_nist:`2024-56704`,
:cve_nist:`2024-56716`, :cve_nist:`2024-56720`, :cve_nist:`2024-56723`, :cve_nist:`2024-56724`,
:cve_nist:`2024-56728`, :cve_nist:`2024-56739`, :cve_nist:`2024-56746`, :cve_nist:`2024-56747`,
:cve_nist:`2024-56748`, :cve_nist:`2024-56754`, :cve_nist:`2024-56756`, :cve_nist:`2024-56770`,
:cve_nist:`2024-56779`, :cve_nist:`2024-56780`, :cve_nist:`2024-56781`, :cve_nist:`2024-56785`,
:cve_nist:`2024-57802`, :cve_nist:`2024-57807`, :cve_nist:`2024-57850`, :cve_nist:`2024-57874`,
:cve_nist:`2024-57890`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`,
:cve_nist:`2024-57902`, :cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57913`,
:cve_nist:`2024-57922`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57946`,
:cve_nist:`2024-57951`, :cve_nist:`2025-21638`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`,
:cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699`
- linux-yocto/5.15: Fix :cve_nist:`2024-57979`, :cve_nist:`2024-58034`, :cve_nist:`2024-58052`,
:cve_nist:`2024-58055`, :cve_nist:`2024-58058`, :cve_nist:`2024-58063`, :cve_nist:`2024-58069`,
:cve_nist:`2024-58071`, :cve_nist:`2024-58076`, :cve_nist:`2024-58083`, :cve_nist:`2025-21700`,
:cve_nist:`2025-21703`, :cve_nist:`2025-21715`, :cve_nist:`2025-21722`, :cve_nist:`2025-21727`,
:cve_nist:`2025-21731`, :cve_nist:`2025-21753`, :cve_nist:`2025-21756`, :cve_nist:`2025-21760`,
:cve_nist:`2025-21761`, :cve_nist:`2025-21762`, :cve_nist:`2025-21763`, :cve_nist:`2025-21764`,
:cve_nist:`2025-21796`, :cve_nist:`2025-21811`, :cve_nist:`2025-21887`, :cve_nist:`2025-21898`,
:cve_nist:`2025-21904`, :cve_nist:`2025-21905`, :cve_nist:`2025-21912`, :cve_nist:`2025-21917`,
:cve_nist:`2025-21919`, :cve_nist:`2025-21920`, :cve_nist:`2025-21922`, :cve_nist:`2025-21934`,
:cve_nist:`2025-21943`, :cve_nist:`2025-21948` and :cve_nist:`2025-21951`
- libpcre2: Ignore :cve_nist:`2022-1586`
- libtasn1: Fix :cve_nist:`2024-12133`
- libxml2: Fix :cve_nist:`2022-49043`, :cve_nist:`2024-56171`, :cve_nist:`2025-24928` and
:cve_nist:`2025-27113`
- libxslt: Fix :cve_nist:`2024-55549` and :cve_nist:`2025-24855`
- llvm: Fix :cve_nist:`2024-0151`
- mpg123: Fix :cve_nist:`2024-10573`
- openssh: Fix :cve_nist:`2025-26465`
- ovmf: Revert Fix for CVE-2023-45236 :cve_nist:`2023-45237`
- perl: Ignore :cve_nist:`2023-47038`
- puzzles: Ignore :cve_nist:`2024-13769`, :cve_nist:`2024-13770` and :cve_nist:`2025-0837`
- python3: Fix :cve_nist:`2025-0938`
- ruby: Fix :cve_nist:`2024-41946`, :cve_nist:`2025-27219` and :cve_nist:`2025-27220`
- subversion: Ignore :cve_nist:`2024-45720`
- systemd: Fix :cve_nist:`2022-3821`, :cve_nist:`2022-4415`, :cve_nist:`2022-45873` and
:cve_nist:`2023-7008`
- tiff: mark :cve_nist:`2023-30774` as patched with existing patch
- u-boot: Fix :cve_nist:`2022-2347`, :cve_nist:`2022-30767`, :cve_nist:`2022-30790`,
:cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`, :cve_nist:`2024-57257`,
:cve_nist:`2024-57258` and :cve_nist:`2024-57259`
- vim: Fix :cve_nist:`2025-1215`, :cve_nist:`2025-22134`, :cve_nist:`2025-24014`,
:cve_nist:`2025-26603`, :cve_nist:`2025-27423` and :cve_nist:`2025-29768`
- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`,
:cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`,
:cve_nist:`2025-26600` and :cve_nist:`2025-26601`
- xwayland: Fix :cve_nist:`2022-49737`, :cve_nist:`2024-9632`, :cve_nist:`2024-21885`,
:cve_nist:`2024-21886`, :cve_nist:`2024-31080`, :cve_nist:`2024-31081`, :cve_nist:`2024-31083`,
:cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`, :cve_nist:`2025-26597`,
:cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600` and :cve_nist:`2025-26601`
- zlib: Fix :cve_nist:`2014-9485`
Fixes in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~
- bind: Upgrade to 9.18.33
- bitbake: cache: bump cache version
- bitbake: siggen.py: Improve taskhash reproducibility
- boost: fix do_fetch error
- build-appliance-image: Update to kirkstone head revision
- contributor-guide/submit-changes: add policy on AI generated code
- cve-update-nvd2-native: handle missing vulnStatus
- docs: Add favicon for the documentation html
- docs: Remove all mention of core-image-lsb
- libtasn1: upgrade to 4.20.0
- libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt
- libxml2: fix compilation of explicit child axis in pattern
- linux-yocto/5.10: update to v5.10.234
- linux-yocto/5.15: update to v5.15.179
- mesa: Fix missing GLES3 headers in SDK sysroot
- mesa: Update :term:`SRC_URI`
- meta: Enable '-o pipefail' for the SDK installer
- migration-guides: add release notes for 4.0.25
- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS`
- poky.conf: bump version for 4.0.26
- procps: replaced one use of fputs(3) with a write(2) call
- ref-manual: don't refer to poky-lsb
- scripts/install-buildtools: Update to 4.0.24
- scritps/runqemu: Ensure we only have two serial ports
- systemd: upgrade to 250.14
- tzcode-native: Fix compiler setting from 2023d version
- tzcode: Update :term:`SRC_URI`
- tzdata/tzcode-native: upgrade 2025a
- vim: Upgrade to 9.1.1198
- virglrenderer: fix do_fetch error
- vulnerabilities/classes: remove references to cve-check text format
- xz: Update :term:`SRC_URI`
- yocto-uninative: Update to 4.7 for glibc 2.41
Known Issues in Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic
- Alessio Cascone
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Carlos Dominguez
- Deepesh Varatharajan
- Divya Chellam
- Guocai He
- Hitendra Prajapati
- Hongxu Jia
- Jiaying Song
- Johannes Kauffmann
- Kai Kang
- Lee Chee Yang
- Libo Chen
- Marta Rybczynska
- Michael Halstead
- Mingli Yu
- Moritz Haase
- Narpat Mali
- Paulo Neves
- Peter Marko
- Priyal Doshi
- Richard Purdie
- Robert Yang
- Ross Burton
- Sakib Sajal
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
- Zhang Peng
Repositories / Downloads for Yocto-4.0.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </poky/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`d70d287a77d5026b698ac237ab865b2dafd36bb8 </poky/commit/?id=d70d287a77d5026b698ac237ab865b2dafd36bb8>`
- Release Artefact: poky-d70d287a77d5026b698ac237ab865b2dafd36bb8
- sha: 3ebfadb8bff4c1ca12b3cf3e4ef6e3ac2ce52b73570266daa98436c9959249f2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/poky-d70d287a77d5026b698ac237ab865b2dafd36bb8.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.26 </openembedded-core/log/?h=yocto-4.0.26>`
- Git Revision: :oe_git:`1efbe1004bc82e7c14c1e8bd4ce644f5015c3346 </openembedded-core/commit/?id=1efbe1004bc82e7c14c1e8bd4ce644f5015c3346>`
- Release Artefact: oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346
- sha: d3805e034dabd0865dbf55488b2c16d4ea0351d37aa826f0054a6bfdde5a8be9
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/oecore-1efbe1004bc82e7c14c1e8bd4ce644f5015c3346.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </meta-mingw/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </meta-gplv2/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.26 </bitbake/log/?h=yocto-4.0.26>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.26/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.26 </yocto-docs/log/?h=yocto-4.0.26>`
- Git Revision: :yocto_git:`9b4c36f7b02dd4bedfec90206744a1e90e37733c </yocto-docs/commit/?id=9b4c36f7b02dd4bedfec90206744a1e90e37733c>`

View File

@@ -0,0 +1,153 @@
Release notes for Yocto-4.0.27 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-1178`
- busybox: fix :cve_nist:`2023-39810`
- connman :fix :cve_nist:`2025-32743`
- curl: Ignore :cve_nist:`2025-0725`
- ghostscript: Fix :cve_nist:`2025-27830`, :cve_nist:`2025-27831`, :cve_nist:`2025-27832`,
:cve_nist:`2025-27834`, :cve_nist:`2025-27835` and :cve_nist:`2025-27836`
- ghostscript: Ignore :cve_nist:`2024-29507`, :cve_nist:`2025-27833` and :cve_nist:`2025-27837`
- glib-2.0: Fix :cve_nist:`2025-3360`
- go: Fix :cve_nist:`2025-22871`
- libarchive: Ignore :cve_nist:`2024-48615`
- libpam: Fix :cve_nist:`2024-10041`
- libsoup-2.4: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906` and :cve_nist:`2025-32909`
- libsoup: Fix :cve_nist:`2024-52532`, :cve_nist:`2025-32906`, :cve_nist:`2025-32909`,
:cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, :cve_nist:`2025-32913`
and :cve_nist:`2025-32914`
- libxml2: Fix :cve_nist:`2025-32414` and :cve_nist:`2025-32415`
- ofono: Fix :cve_nist:`2024-7537`
- perl: Fix :cve_nist:`2024-56406`
- ppp: Fix :cve_nist:`2024-58250`
- python3-setuptools: Fix :cve_nist:`2024-6345`
- qemu: Ignore :cve_nist:`2023-1386`
- ruby: Fix :cve_nist:`2024-43398`
- sqlite3: Fix :cve_nist:`2025-29088`
- systemd: Ignore :cve_nist:`2022-3821`, :cve_nist:`2022-4415` and :cve_nist:`2022-45873`
Fixes in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~
- Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
- build-appliance-image: Update to kirkstone head revision
- cve-update-nvd2-native: add workaround for json5 style list
- docs: Fix dead links that use the :term:`DISTRO` macro
- docs: manuals: remove repeated word
- docs: poky.yaml: introduce DISTRO_LATEST_TAG
- glibc: Add single-threaded fast path to rand()
- glibc: stable 2.35 branch updates
- module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
- perl: enable _GNU_SOURCE define via d_gnulibc
- poky.conf: bump version for 4.0.27
- ref-manual/variables.rst: document autotools class related variables
- scripts/install-buildtools: Update to 4.0.26
- systemd: backport patch to fix journal issue
- systemd: systemd-journald fails to setup LogNamespace
- tzdata/tzcode-native: upgrade to 2025b
Known Issues in Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Alexander Kanavin
- Alon Bar-Lev
- Andrew Kreimer
- Antonin Godard
- Chen Qi
- Deepesh Varatharajan
- Divya Chellam
- Haitao Liu
- Haixiao Yan
- Hitendra Prajapati
- Peter Marko
- Praveen Kumar
- Priyal Doshi
- Shubham Kulkarni
- Soumya Sambu
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
Repositories / Downloads for Yocto-4.0.27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </poky/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`ab9a994a8cd8e06b519a693db444030999d273b7 </poky/commit/?id=ab9a994a8cd8e06b519a693db444030999d273b7>`
- Release Artefact: poky-ab9a994a8cd8e06b519a693db444030999d273b7
- sha: 77a366c17cf29eef15c6ff3f44e73f81c07288c723fd4a6dbd8c7ee9b79933f3
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/poky-ab9a994a8cd8e06b519a693db444030999d273b7.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.27 </openembedded-core/log/?h=yocto-4.0.27>`
- Git Revision: :oe_git:`e8be08a624b2d024715a5c8b0c37f2345a02336b </openembedded-core/commit/?id=e8be08a624b2d024715a5c8b0c37f2345a02336b>`
- Release Artefact: oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b
- sha: cc5b0fadab021c6dc61f37fc4ff01a1cf657e7c219488ce264bede42f7f6212f
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/oecore-e8be08a624b2d024715a5c8b0c37f2345a02336b.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </meta-mingw/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </meta-gplv2/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.27 </bitbake/log/?h=yocto-4.0.27>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.27/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.27 </yocto-docs/log/?h=yocto-4.0.27>`
- Git Revision: :yocto_git:`0d51e553d5f83eea6634e03ddc9c7740bf72fcea </yocto-docs/commit/?id=0d51e553d5f83eea6634e03ddc9c7740bf72fcea>`

View File

@@ -0,0 +1,224 @@
Release notes for Yocto-4.0.28 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-1180`, :cve_nist:`2025-1182`, :cve_nist:`2025-5244` and
:cve_nist:`2025-5245`
- connman: Fix :cve_nist:`2025-32366`
- ffmpeg: Fix :cve_nist:`2025-1373`, :cve_nist:`2025-22919` and :cve_nist:`2025-22921`
- ffmpeg: Ignore :cve_nist:`2022-48434`
- ghostscript: Fix :cve_nist:`2025-48708`
- git: Fix :cve_nist:`2024-50349` and :cve_nist:`2024-52006`
- glib-2.0: Fix :cve_nist:`2025-4373`
- glibc: Fix for :cve_nist:`2025-4802`
- go: Fix :cve_nist:`2025-4673`
- go: ignore :cve_nist:`2024-3566`
- icu: Fix :cve_nist:`2025-5222`
- iputils: Fix :cve_nist:`2025-47268`
- libsoup-2.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`,
:cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32052`, :cve_nist:`2025-32053`,
:cve_nist:`2025-32907`, :cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`,
:cve_nist:`2025-32913`, :cve_nist:`2025-32914`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421`
- libsoup: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4948`,
:cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32051`, :cve_nist:`2025-32052`,
:cve_nist:`2025-32053`, :cve_nist:`2025-32907`, :cve_nist:`2025-46420` and :cve_nist:`2025-46421`
- linux-yocto/5.15: Fix :cve_nist:`2024-26952`, :cve_nist:`2025-21941`, :cve_nist:`2025-21957`,
:cve_nist:`2025-21959`, :cve_nist:`2025-21962`, :cve_nist:`2025-21963`, :cve_nist:`2025-21964`,
:cve_nist:`2025-21968`, :cve_nist:`2025-21996`, :cve_nist:`2025-22018`, :cve_nist:`2025-22020`,
:cve_nist:`2025-22035`, :cve_nist:`2025-22054`, :cve_nist:`2025-22056`, :cve_nist:`2025-22063`,
:cve_nist:`2025-22066`, :cve_nist:`2025-22081`, :cve_nist:`2025-22097`, :cve_nist:`2025-23136`,
:cve_nist:`2025-37785`, :cve_nist:`2025-37803`, :cve_nist:`2025-37805`, :cve_nist:`2025-38152`,
:cve_nist:`2025-39728` and :cve_nist:`2025-39735`
- net-tools: Fix :cve_nist:`2025-46836`
- openssh: Fix :cve_nist:`2025-32728`
- python3: Fix :cve_nist:`2024-12718`, :cve_nist:`2025-0938`, :cve_nist:`2025-4138`,
:cve_nist:`2025-4330`, :cve_nist:`2025-4435`, :cve_nist:`2025-4516` and :cve_nist:`2025-4517`
- python3-requests: Fix :cve_nist:`2024-47081`
- python3-setuptools: Fix :cve_nist:`2025-47273`
- ruby: Fix :cve_nist:`2025-27221`
- screen: Fix :cve_nist:`2025-46802`, :cve_nist:`2025-46804` and :cve_nist:`2025-46805`
- taglib: Fix :cve_nist:`2023-47466`
Fixes in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~
- babeltrace/libatomic-ops: correct the :term:`SRC_URI`
- brief-yoctoprojectqs/ref-manual: Switch to new CDN
- bsp guide: update kernel version example to 6.12
- bsp-guide: update lonely "4.12" kernel reference to "6.12"
- build-appliance-image: Update to kirkstone head revision
- cmake: Correctly handle cost data of tests with arbitrary chars in name
- conf.py: tweak SearchEnglish to be hyphen-friendly
- contributor-guide/submit-changes: encourage patch version changelogs
- dev-manual/sbom.rst: fix wrong build outputs
- docs: Clean up explanation of minimum required version numbers
- docs: README: specify how to contribute instead of pointing at another file
- docs: conf.py: silence SyntaxWarning on js_splitter_code
- e2fsprogs: removed 'sed -u' option
- ffmpeg: Add "libswresample libavcodec" to :term:`CVE_PRODUCT`
- ffmpeg: upgrade to 5.0.3
- gcc: AArch64 - Fix strict-align cpymem/setmem
- glibc: nptl Fix indentation
- glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
- glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
- glibc: nptl Update comments and indentation for new condvar implementation
- glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
- glibc: nptl Use all of g1_start and g_signals
- glibc: nptl rename __condvar_quiesce_and_switch_g1
- glibc: pthreads NPTL lost wakeup fix 2
- kernel.bbclass: add original package name to :term:`RPROVIDES` for -image and -base
- libpng: Improve ptest
- linux-yocto/5.15: update to v5.15.184
- migration-guides: add release notes for 4.0.26 and 4.0.27
- nfs-utils: don't use signals to shut down nfs server.
- poky.conf: bump version for 4.0.28
- python3: upgrade to 3.10.18
- ref-manual/release-process: update releases.svg
- ref-manual/variables.rst: document :term:`INHIBIT_DEFAULT_RUST_DEPS`
:term:`INHIBIT_UPDATERCD_BBCLASS` :term:`SSTATE_SKIP_CREATION` :term:`WIC_CREATE_EXTRA_ARGS`
:term:`IMAGE_ROOTFS_MAXSIZE` :term:`INITRAMFS_MAXSIZE`
- ref-manual: clarify :term:`KCONFIG_MODE` default behaviour
- ref-manual: classes: nativesdk: move note to appropriate section
- ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
- ref-manual: kernel-fitimage.bbclass does not use :term:`SPL_SIGN_KEYNAME`
- scripts/install-buildtools: Update to 4.0.27
- sphinx-lint: role missing opening tag colon
- sphinx-lint: trailing whitespace
- sphinx-lint: unbalanced inline literal markup
- sysstat: correct the :term:`SRC_URI`
- systemtap: add sysroot Python paths to configure flags
- test-manual/intro: remove Buildbot version used
- util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
- xz: Update :term:`LICENSE` variable for xz packages
Known Issues in Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aditya Tayade
- Adrian Freihofer
- Aleksandar Nikolic
- Alper Ak
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Carlos Sánchez de La Lama
- Changqing Li
- Christos Gavros
- Colin Pinnell McAllister
- Deepesh Varatharajan
- Divya Chellam
- Enrico Jörns
- Etienne Cordonnier
- Guocai He
- Harish Sadineni
- Hitendra Prajapati
- Jiaying Song
- Lee Chee Yang
- Martin Jansa
- Moritz Haase
- NeilBrown
- Peter Marko
- Poonam Jadhav
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Soumya Sambu
- Steve Sakoman
- Sundeep KOKKONDA
- Sunil Dora
- Trevor Woerner
- Vijay Anusuri
- Virendra Thakur
- Yi Zhao
- aszh07
Repositories / Downloads for Yocto-4.0.28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </poky/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`78c9cb3eaf071932567835742608404d5ce23cc4 </poky/commit/?id=78c9cb3eaf071932567835742608404d5ce23cc4>`
- Release Artefact: poky-78c9cb3eaf071932567835742608404d5ce23cc4
- sha: 9c73c6f89e70c2041a52851e5cc582e5a2f05ad2fdc110d2c518f2c4994e8de3
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/poky-78c9cb3eaf071932567835742608404d5ce23cc4.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.28 </openembedded-core/log/?h=yocto-4.0.28>`
- Git Revision: :oe_git:`75e54301c5076eb0454aee33c870adf078f563fd </openembedded-core/commit/?id=75e54301c5076eb0454aee33c870adf078f563fd>`
- Release Artefact: oecore-75e54301c5076eb0454aee33c870adf078f563fd
- sha: c5ffceab90881c4041ec4304da8b7b32d9c1f89a4c63ee7b8cbd53c796b0187b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/oecore-75e54301c5076eb0454aee33c870adf078f563fd.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-mingw/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-gplv2/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.28 </bitbake/log/?h=yocto-4.0.28>`
- Git Revision: :oe_git:`046871d9fd76efdca7b72718b328d8f545523f7e </bitbake/commit/?id=046871d9fd76efdca7b72718b328d8f545523f7e>`
- Release Artefact: bitbake-046871d9fd76efdca7b72718b328d8f545523f7e
- sha: e9df0a9f5921b583b539188d66b23f120e1751000e7822e76c3391d5c76ee21a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.28/bitbake-046871d9fd76efdca7b72718b328d8f545523f7e.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </meta-yocto/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`0bf3dcef1caa80fb047bf9c3514314ab658e30ea </meta-yocto/commit/?id=0bf3dcef1caa80fb047bf9c3514314ab658e30ea>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.28 </yocto-docs/log/?h=yocto-4.0.28>`
- Git Revision: :yocto_git:`97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b </yocto-docs/commit/?id=97cd3ee7f3bf1de8454708d1852ea9cdbd45c39b>`

View File

@@ -0,0 +1,178 @@
Release notes for Yocto-4.0.29 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- avahi: Fix :cve_nist:`2024-52615`
- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546`
- coreutils: Fix :cve_nist:`2025-5278`
- curl: Fix :cve_nist:`2024-11053` and :cve_nist:`2025-0167`
- dropbear: Fix :cve_nist:`2025-47203`
- ffmpeg: Ignore :cve_nist:`2022-3109` and :cve_nist:`2022-3341`
- gdk-pixbuf: Fix :cve_nist:`2025-7345`
- ghostscript: Ignore :cve_nist:`2025-46646`
- gnupg: Fix :cve_nist:`2025-30258`
- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and
:cve_nist:`2025-32990`
- iputils: Fix :cve_nist:`2025-48964`
- libarchive: Fix :cve_nist:`2025-5914`, :cve_nist:`2025-5915`, :cve_nist:`2025-5916` and
:cve_nist:`2025-5917`
- libpam: Fix :cve_nist:`2025-6020`
- libsoup-2.4: Fix :cve_nist:`2025-4945`
- libsoup-2.4: Fix :cve_nist:`2025-4969` (update patch)
- libsoup: Fix :cve_nist:`2025-4945`, :cve_nist:`2025-6021`, :cve_nist:`2025-6170`,
:cve_nist:`2025-49794` and :cve_nist:`2025-49796`
- ncurses: Fix :cve_nist:`2025-6141`
- ofono: Fix :cve_nist:`2023-4232` and :cve_nist:`2023-4235`
- openssl: Fix :cve_nist:`2024-41996`
- python3-urllib3: Fix :cve_nist:`2025-50181`
- ruby: Fix :cve_nist:`2024-43398` (update patches)
- sqlite3: Fix :cve_nist:`2025-6965` and :cve_nist:`2025-7458`
- sqlite3: Ignore :cve_nist:`2025-3277`
- systemd: Fix :cve_nist:`2025-4598`
- xwayland: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`,
:cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180`
Fixes in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~
- bintuils: stable 2.38 branch update
- bitbake: test/fetch: Switch u-boot based test to use our own mirror
- build-appliance-image: Update to kirkstone head revision
- conf.py: improve SearchEnglish to handle terms with dots
- db: ignore implicit-int and implicit-function-declaration issues fatal with gcc-14
- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
- glibc: stable 2.35 branch updates
- gnutls: patch read buffer overrun in the "pre_shared_key" extension
- gnutls: patch reject zero-length version in certificate request
- linux-yocto/5.15: update to v5.15.186
- migration-guides: add release notes for 4.0.28
- oeqa/core/decorator: add decorators to skip based on :term:`HOST_ARCH`
- openssl: upgrade to 3.0.17
- orc: set :term:`CVE_PRODUCT`
- overview-manual/concepts.rst: fix sayhello hardcoded bindir
- poky.conf: bump version for 4.0.29
- python3: update CVE product
- ref-manual: document :term:`KERNEL_SPLIT_MODULES` variable
- scripts/install-buildtools: Update to 4.0.28
- sudo: upgrade to 1.9.17p1
- tcf-agent: correct the :term:`SRC_URI`
Known Issues in Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Aleksandar Nikolic
- Antonin Godard
- Archana Polampalli
- Bruce Ashfield
- Changqing Li
- Chen Qi
- Colin Pinnell McAllister
- Daniel Díaz
- Deepesh Varatharajan
- Divya Chellam
- Dixit Parmar
- Enrico Jörns
- Guocai He
- Hitendra Prajapati
- Lee Chee Yang
- Marco Cavallini
- Martin Jansa
- Peter Marko
- Praveen Kumar
- Richard Purdie
- Rob Woolley
- Ross Burton
- Steve Sakoman
- Vijay Anusuri
- Yash Shinde
- Yogita Urade
- Zhang Peng
Repositories / Downloads for Yocto-4.0.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </poky/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`81ab000fa437ca04f584a3327b076f7a512dc6d0 </poky/commit/?id=81ab000fa437ca04f584a3327b076f7a512dc6d0>`
- Release Artefact: poky-81ab000fa437ca04f584a3327b076f7a512dc6d0
- sha: 2fecf3cac5c2361c201b5ae826960af92289862ec9be13837a8431138e534fd2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/poky-81ab000fa437ca04f584a3327b076f7a512dc6d0.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.29 </openembedded-core/log/?h=yocto-4.0.29>`
- Git Revision: :oe_git:`bd620eb14660075fd0f7476bbbb65d5da6293874 </openembedded-core/commit/?id=bd620eb14660075fd0f7476bbbb65d5da6293874>`
- Release Artefact: oecore-bd620eb14660075fd0f7476bbbb65d5da6293874
- sha: f32ab195c7090268e6e87ccf8db2813cf705c517030654326d14b25d926de88e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/oecore-bd620eb14660075fd0f7476bbbb65d5da6293874.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-mingw/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-gplv2/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.29 </bitbake/log/?h=yocto-4.0.29>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.29/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </meta-yocto/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`e916d3bad58f955b73e2c67aba975e63cd191394 </meta-yocto/commit/?id=e916d3bad58f955b73e2c67aba975e63cd191394>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.29 </yocto-docs/log/?h=yocto-4.0.29>`
- Git Revision: :yocto_git:`bf855ecaf4bec4cef9bbfea2e50caa65a8339828 </yocto-docs/commit/?id=bf855ecaf4bec4cef9bbfea2e50caa65a8339828>`

View File

@@ -0,0 +1,170 @@
Release notes for Yocto-4.0.30 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- cups: Fix :cve_nist:`2025-58060` and :cve_nist:`2025-58364`
- dpkg: Fix :cve_nist:`2025-6297`
- ffmpeg: Fix :cve_nist:`2023-6602`, :cve_nist:`2023-6604`, :cve_nist:`2023-6605`,
:cve_nist:`2025-1594` and CVE-2025-7700
- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`,
:cve_nist:`2025-46835` and :cve_nist:`2025-48384`
- glib-2.0: Fix :cve_nist:`2025-7039`
- glib-2.0: Ignore :cve_nist:`2025-4056`
- go: Ignore :cve_nist:`2024-24790` and :cve_nist:`2025-0913`
- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806`, :cve_nist:`2025-47807` and
:cve_nist:`2025-47808`
- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219`
- libarchive: Fix :cve_nist:`2025-5918`
- libxslt: Fix :cve_nist:`2023-40403`
- openssl: Fix :cve_nist:`2023-50781`
- python3: Fix :cve_nist:`2025-8194`
- qemu: Ignore :cve_nist:`2024-7730`
- sqlite3: Revert "sqlite3: patch CVE-2025-7458"
- tiff: Fix :cve_nist:`2024-13978`, :cve_nist:`2025-8176`, :cve_nist:`2025-8177`,
:cve_nist:`2025-8534` and :cve_nist:`2025-8851`
- vim: Fix :cve_nist:`2025-53905` and :cve_nist:`2025-53906`
- wpa-supplicant: Fix :cve_nist:`2022-37660`
- xserver-xorg: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`,
:cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180`
Fixes in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~
- build-appliance-image: Update to kirkstone head revision
- default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
- dev-manual/security-subjects.rst: update mailing lists
- gnupg: disable tests to avoid running target binaries at build time
- go-helloworld: fix license
- insane: Ensure that `src-uri-bad` fails correctly
- insane: Improve patch warning/error handling
- libubootenv: backport patch to fix unknown type name 'size_t'
- llvm: fix typo in CVE-2024-0151.patch
- migration-guides: add release notes for 4.0.29
- overview-manual/yp-intro.rst: fix broken link to article
- poky.conf: bump version for 4.0.30
- pulseaudio: Add audio group explicitly
- ref-manual/classes.rst: document the testexport class
- ref-manual/system-requirements.rst: update supported distributions
- ref-manual/variables.rst: document :term:`FIT_CONF_PREFIX` :term:`SPL_DTB_BINARY` variable
- ref-manual/variables.rst: expand :term:`IMAGE_OVERHEAD_FACTOR` glossary entry
- sdk: The main in the C example should return an int
- sudo: remove devtool FIXME comment
- systemd: Fix manpage build after :cve_nist:`2025-4598`
- vim: not adjust script pathnames for native scripts either
- vim: upgrade to 9.1.1652
Known Issues in Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Antonin Godard
- Archana Polampalli
- Dan McGregor
- Deepak Rathore
- Divya Chellam
- Erik Lindsten
- Guocai He
- Gyorgy Sarvari
- Hitendra Prajapati
- Jan Vermaete
- Jiaying Song
- Joao Marcos Costa
- Kyungjik Min
- Lee Chee Yang
- Mingli Yu
- Peter Marko
- Philip Lorenz
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Steve Sakoman
- Vijay Anusuri
- Yogita Urade
- Youngseok Jeong
Repositories / Downloads for Yocto-4.0.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </poky/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`51dc9c464de0703bfbc6f1ee71ac9bea20933a45 </poky/commit/?id=51dc9c464de0703bfbc6f1ee71ac9bea20933a45>`
- Release Artefact: poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45
- sha: 2b5db0a07598df7684975c0839e6f31515a8e78d366503feb9917ef1ca56c0b2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/poky-51dc9c464de0703bfbc6f1ee71ac9bea20933a45.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.30 </openembedded-core/log/?h=yocto-4.0.30>`
- Git Revision: :oe_git:`d381eeb5e70bd0ce9e78032c909e4a23564f4dd7 </openembedded-core/commit/?id=d381eeb5e70bd0ce9e78032c909e4a23564f4dd7>`
- Release Artefact: oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7
- sha: 022ab4ef5ac59ac3f01a9dacd8b1d6310cc117c6bed2e86e195ced88e0689c85
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/oecore-d381eeb5e70bd0ce9e78032c909e4a23564f4dd7.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-mingw/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-gplv2/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.30 </bitbake/log/?h=yocto-4.0.30>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-4.0.30/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </meta-yocto/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`edf7950e4d81dd31f29a58acdd8022dabd2be494 </meta-yocto/commit/?id=edf7950e4d81dd31f29a58acdd8022dabd2be494>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.30 </yocto-docs/log/?h=yocto-4.0.30>`
- Git Revision: :yocto_git:`71a3933c609ce73ff07e5be48d9e7b03f22ef8d7 </yocto-docs/commit/?id=71a3933c609ce73ff07e5be48d9e7b03f22ef8d7>`

View File

@@ -0,0 +1,210 @@
Release notes for Yocto-4.0.31 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-8225`, :cve_nist:`2025-11081`, :cve_nist:`2025-11082` and
:cve_nist:`2025-11083`
- busybox: Fix :cve_nist:`2025-46394`
- cmake: Fix :cve_nist:`2025-9301`
- curl: Fix :cve_nist:`2025-9086`
- ffmpeg: Ignore :cve_nist:`2023-6603`
- ffmpeg: mark :cve_nist:`2023-6601` as Fixed
- ghostscript: Fix :cve_nist:`2025-59798`, :cve_nist:`2025-59799` and :cve_nist:`2025-59800`
- git: Fix :cve_nist:`2025-48386`
- glib-networking: Fix :cve_nist:`2025-60018` and :cve_nist:`2025-60019`
- go: Fix :cve_nist:`2025-47906` and :cve_nist:`2025-47907`
- grub2: Fix :cve_nist:`2024-56738`
- grub: Ignore :cve_nist:`2024-2312`
- gstreamer1.0-plugins-bad: Fix :cve_nist:`2025-3887`
- gstreamer1.0: Ignore :cve_nist:`2025-2759`, :cve_nist:`2025-3887`, :cve_nist:`2025-47183`,
:cve_nist:`2025-47219`, :cve_nist:`2025-47806`, :cve_nist:`2025-47807` and :cve_nist:`2025-47808`
- python3-jinja2: Fix :cve_nist:`2024-56201`, :cve_nist:`2024-56326` and :cve_nist:`2025-27516`
- libxml2: Fix :cve_nist:`2025-9714`
- libxslt: Fix :cve_nist:`2025-7424`
- lz4: Fix :cve_nist:`2025-62813`
- openssl: Fix :cve_nist:`2025-9230` and :cve_nist:`2025-9232`
- pulseaudio: Ignore :cve_nist:`2024-11586`
- python3: Fix :cve_nist:`2024-6345`, :cve_nist:`2025-47273` and :cve_nist:`2025-59375`
- qemu: Fix :cve_nist:`2024-8354`
- tiff: Fix :cve_nist:`2025-8961`, :cve_nist:`2025-9165` and :cve_nist:`2025-9900`
- vim: Fix :cve_nist:`2025-9389`
Fixes in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~
- build-appliance-image: Update to kirkstone head revision
- poky.conf: bump version for 4.0.31
- ref-manual/classes.rst: document the relative_symlinks class
- ref-manual/classes.rst: gettext: extend the documentation of the class
- ref-manual/variables.rst: document the CCACHE_DISABLE, UNINATIVE_CHECKSUM, UNINATIVE_URL, USE_NLS,
REQUIRED_COMBINED_FEATURES, REQUIRED_IMAGE_FEATURES, :term:`REQUIRED_MACHINE_FEATURES` variable
- ref-manual/variables.rst: fix :term:`LAYERDEPENDS` description
- dev-manual, test-manual: Update autobuilder output links
- ref-manual/classes.rst: extend the uninative class documentation
- python3: upgrade to 3.10.19
- linux-yocto/5.15: update to v5.15.194
- glibc: : PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
- glibc: nptl Use all of g1_start and g_signals
- glibc: nptl rename __condvar_quiesce_and_switch_g1
- glibc: nptl Fix indentation
- glibc: nptl Use a single loop in pthread_cond_wait instaed of a nested loop
- glibc: Remove g_refs from condition variables
- glibc: nptl Remove unnecessary quadruple check in pthread_cond_wait
- glibc: nptl Remove unnecessary catch-all-wake in condvar group switch
- glibc: nptl Update comments and indentation for new condvar implementation
- glibc: pthreads NPTL lost wakeup fix 2
- glibc: Remove partial BZ#25847 backport patches
- vulnerabilities: update nvdcve file name
- migration-guides: add release notes for 4.0.30
- oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
- selftest/cases/meta_ide.py: use use gnu mirror instead of main server
- conf/bitbake.conf: use gnu mirror instead of main server
- p11-kit: backport fix for handle :term:`USE_NLS` from master
- systemd: backport fix for handle :term:`USE_NLS` from master
- glibc: stable 2.35 branch updates
- openssl: upgrade to 3.0.18
- scripts/install-buildtools: Update to 4.0.30
- ref-manual/variables.rst: fix the description of :term:`STAGING_DIR`
- ref-manual/structure: document the auto.conf file
- dev-manual/building.rst: add note about externalsrc variables absolute paths
- ref-manual/variables.rst: fix the description of :term:`KBUILD_DEFCONFIG`
- kernel-dev/common.rst: fix the in-tree defconfig description
- test-manual/yocto-project-compatible.rst: fix a typo
- contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
- contributor-guide: submit-changes: number instruction list in commit your changes
- contributor-guide: submit-changes: reword commit message instructions
- contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
- contributor-guide: submit-changes: align :term:`CC` tag description
- contributor-guide: submit-changes: clarify example with Yocto bug ID
- contributor-guide: submit-changes: fix improper bold string
- libhandy: update git branch name
- python3-jinja2: upgrade to 3.1.6
- vim: upgrade to 9.1.1683
Known Issues in Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Adam Blank
- Aleksandar Nikolic
- Antonin Godard
- Archana Polampalli
- AshishKumar Mishra
- Bruce Ashfield
- Deepesh Varatharajan
- Divya Chellam
- Gyorgy Sarvari
- Hitendra Prajapati
- João Marcos Costa
- Lee Chee Yang
- Paul Barker
- Peter Marko
- Praveen Kumar
- Quentin Schulz
- Rajeshkumar Ramasamy
- Saravanan
- Soumya Sambu
- Steve Sakoman
- Sunil Dora
- Talel BELHAJ SALEM
- Theo GAIGE
- Vijay Anusuri
- Yash Shinde
- Yogita Urade
Repositories / Downloads for Yocto-4.0.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </yocto-docs/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`073f3bca4c374b03398317e7f445d2440a287741 </yocto-docs/commit/?id=073f3bca4c374b03398317e7f445d2440a287741>`
- Release Artefact: yocto-docs-073f3bca4c374b03398317e7f445d2440a287741
- sha: 3bfde9b6ad310dd42817509b67f61cd69552f74b2bc5011bd20788fe96d6823b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/yocto-docs-073f3bca4c374b03398317e7f445d2440a287741.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </poky/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`04b39e5b7eb19498215d85c88a5fffb460fea1eb </poky/commit/?id=04b39e5b7eb19498215d85c88a5fffb460fea1eb>`
- Release Artefact: poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb
- sha: 0ca18ab1ed25c0d77412ba30dbb03d74811756c7c2fe2401940f848a5e734930
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/poky-04b39e5b7eb19498215d85c88a5fffb460fea1eb.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.31 </openembedded-core/log/?h=yocto-4.0.31>`
- Git Revision: :oe_git:`99204008786f659ab03538cd2ae2fd23ed4164c5 </openembedded-core/commit/?id=99204008786f659ab03538cd2ae2fd23ed4164c5>`
- Release Artefact: oecore-99204008786f659ab03538cd2ae2fd23ed4164c5
- sha: aa97bf826ad217b3a5278b4ad60bef4d194f0f1ff617677cf2323d3cc4897687
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/oecore-99204008786f659ab03538cd2ae2fd23ed4164c5.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-yocto/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`3b2df00345b46479237fe0218675a818249f891c </meta-yocto/commit/?id=3b2df00345b46479237fe0218675a818249f891c>`
- Release Artefact: meta-yocto-3b2df00345b46479237fe0218675a818249f891c
- sha: 630e99e0f515bab8a316b2e32aff1352b4404f15aa087e8821b84093596a08ce
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-yocto-3b2df00345b46479237fe0218675a818249f891c.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-mingw/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.31 </meta-gplv2/log/?h=yocto-4.0.31>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.31 </bitbake/log/?h=yocto-4.0.31>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.31/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2

View File

@@ -0,0 +1,194 @@
Release notes for Yocto-4.0.32 (Kirkstone)
------------------------------------------
Security Fixes in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve_nist:`2025-8677`, :cve_nist:`2025-40778` and :cve_nist:`2025-40780`
- binutils: Fix :cve_nist:`2025-11412` and :cve_nist:`2025-11413`
- curl: Ignore :cve_nist:`2025-10966`
- elfutils: Fix :cve_nist:`2025-1376` and :cve_nist:`2025-1377`
- gnutls: Fix :cve_nist:`2025-9820`
- go: Fix :cve_nist:`2024-24783`, :cve_nist:`2025-58187`, :cve_nist:`2025-58189`,
:cve_nist:`2025-61723` and :cve_nist:`2025-61724`
- libarchive: Fix :cve_nist:`2025-60753`
- libarchive: Fix 2 security issue (https://github.com/libarchive/libarchive/pull/2753 and
https://github.com/libarchive/libarchive/pull/2768)
- libpng: Fix :cve_nist:`2025-64505`, :cve_nist:`2025-64506`, :cve_nist:`2025-64720`,
:cve_nist:`2025-65018` and :cve_nist:`2025-66293`
- libxml2: Fix :cve_nist:`2025-7425`
- musl: Fix :cve_nist:`2025-26519`
- openssh: Fix :cve_nist:`2025-61984` and :cve_nist:`2025-61985`
- python3-idna: Fix :cve_nist:`2024-3651`
- python3-urllib3: Fix :cve_nist:`2024-37891`
- python3: fix :cve_nist:`2025-6075`
- ruby: Fix :cve_nist:`2024-35176`, :cve_nist:`2024-39908` and :cve_nist:`2024-41123`
- rust-cross-canadian: Ignore :cve_nist:`2024-43402`
- u-boot: Fix :cve_nist:`2024-42040`
- wpa-supplicant: Fix :cve_nist:`2025-24912`
- xserver-xorg: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
- xwayland: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
Fixes in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~
- babeltrace2: fetch with https protocol
- bind: upgrade to 9.18.41
- build-appliance-image: Update to kirkstone head revision
- dev-manual/layers.rst: document "bitbake-layers show-machines"
- dev-manual/new-recipe.rst: replace 'bitbake -e' with 'bitbake-getvar'
- dev-manual/new-recipe.rst: typo, "whith" -> "which"
- dev-manual/new-recipe.rst: update "recipetool -h" output
- dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
- documentation: link to the Releases page on yoctoproject.org instead of wiki
- efibootmgr: update :term:`SRC_URI` branch
- flac: patch seeking bug
- goarch.bbclass: do not leak :term:`TUNE_FEATURES` into crosssdk task signatures
- kernel-dev: add disable config example
- kernel-dev: common: migrate bitbake -e to bitbake-getvar
- libmicrohttpd: disable experimental code by default
- migration-guides: add release notes for 4.0.31
- oe-build-perf-report: relax metadata matching rules
- overview-manual: migrate to SVG + fix typo
- poky.conf: bump version for 4.0.32
- python3-urllib3: upgrade to 1.26.20
- recipes: Don't use ftp.gnome.org
- ref-manual: variables: migrate the :term:`OVERRIDES` note to bitbake-getvar
- systemd-bootchart: update :term:`SRC_URI` branch
- xf86-video-intel: correct :term:`SRC_URI` as freedesktop anongit is down
Known Issues in Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Alexander Kanavin
- Archana Polampalli
- Divya Chellam
- Gyorgy Sarvari
- Hitendra Prajapati
- Hongxu Jia
- Jason Schonberg
- Lee Chee Yang
- Peter Marko
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Ross Burton
- Saquib Iltaf
- Soumya Sambu
- Steve Sakoman
- Vijay Anusuri
- Walter Werner SCHNEIDER
Repositories / Downloads for Yocto-4.0.32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`kirkstone </yocto-docs/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </yocto-docs/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`4b9df539fa06fb19ed8b51ef2d46e5c56779de81 </yocto-docs/commit/?id=4b9df539fa06fb19ed8b51ef2d46e5c56779de81>`
- Release Artefact: yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81
- sha: 70ee2caf576683c5f31ac5a592cde1c0650ece25cfcd5ff3cc7eedf531575611
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/yocto-docs-4b9df539fa06fb19ed8b51ef2d46e5c56779de81.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`kirkstone </poky/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </poky/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`2c05660b21c7cc1082aeac8b75d8a2d82e249f63 </poky/commit/?id=2c05660b21c7cc1082aeac8b75d8a2d82e249f63>`
- Release Artefact: poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63
- sha: d7a55a18a597a7b140a81586b7ca6379c208ebbb3285de36c48fde10882947d8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/poky-2c05660b21c7cc1082aeac8b75d8a2d82e249f63.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`kirkstone </openembedded-core/log/?h=kirkstone>`
- Tag: :oe_git:`yocto-4.0.32 </openembedded-core/log/?h=yocto-4.0.32>`
- Git Revision: :oe_git:`2ed3f8b938579dbbb804e04c45a968cc57761db7 </openembedded-core/commit/?id=2ed3f8b938579dbbb804e04c45a968cc57761db7>`
- Release Artefact: oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7
- sha: 11b9632586dfbf3f0ef69eca2014a8002f25ca8d53cfe9424e27361ba3a20831
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/oecore-2ed3f8b938579dbbb804e04c45a968cc57761db7.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`kirkstone </meta-yocto/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-yocto/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`77b40877c179ea3ce5c37c7ba1831e9c0e289266 </meta-yocto/commit/?id=77b40877c179ea3ce5c37c7ba1831e9c0e289266>`
- Release Artefact: meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266
- sha: e908d42690881cd6e07b9ca18a21eb8761a0ec72d940b12905622e75ba913974
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-yocto-77b40877c179ea3ce5c37c7ba1831e9c0e289266.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`kirkstone </meta-mingw/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-mingw/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`87c22abb1f11be430caf4372e6b833dc7d77564e </meta-mingw/commit/?id=87c22abb1f11be430caf4372e6b833dc7d77564e>`
- Release Artefact: meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e
- sha: f0bc4873e2e0319fb9d6d6ab9b98eb3f89664d4339a167d2db6a787dd12bc1a8
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-mingw-87c22abb1f11be430caf4372e6b833dc7d77564e.tar.bz2
meta-gplv2
- Repository Location: :yocto_git:`/meta-gplv2`
- Branch: :yocto_git:`kirkstone </meta-gplv2/log/?h=kirkstone>`
- Tag: :yocto_git:`yocto-4.0.32 </meta-gplv2/log/?h=yocto-4.0.32>`
- Git Revision: :yocto_git:`d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a </meta-gplv2/commit/?id=d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a>`
- Release Artefact: meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a
- sha: c386f59f8a672747dc3d0be1d4234b6039273d0e57933eb87caa20f56b9cca6d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/meta-gplv2-d2f8b5cdb285b72a4ed93450f6703ca27aa42e8a.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.0 </bitbake/log/?h=2.0>`
- Tag: :oe_git:`yocto-4.0.32 </bitbake/log/?h=yocto-4.0.32>`
- Git Revision: :oe_git:`8e2d1f8de055549b2101614d85454fcd1d0f94b2 </bitbake/commit/?id=8e2d1f8de055549b2101614d85454fcd1d0f94b2>`
- Release Artefact: bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2
- sha: fad4e7699bae62082118e89785324b031b0af0743064caee87c91ba28549afb0
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-4.0.32/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2
https://mirrors.edge.kernel.org/yocto/yocto/yocto-4.0.32/bitbake-8e2d1f8de055549b2101614d85454fcd1d0f94b2.tar.bz2

View File

@@ -274,7 +274,7 @@ New Features / Enhancements in 4.3
- New :doc:`../contributor-guide/index` document.
- New :doc:`../dev-manual/security-subjects` chapter in the Development
- New "Dealing with Vulnerability Reports" chapter in the Development
Tasks Manual.
- Long overdue documentation for the :ref:`ref-classes-devicetree` class.
@@ -295,7 +295,7 @@ New Features / Enhancements in 4.3
- Generation of :term:`SPDX` manifests is now enabled by default.
- Git based recipes in OE-Core which used the ``git`` protocol have been
changed to use `https`` where possible, as it is typically faster and
changed to use ``https`` where possible, as it is typically faster and
more reliable.
- The ``os-release`` recipe added a ``CPE_NAME`` to the fields provided, with the

View File

@@ -0,0 +1,208 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.10 (Scarthgap)
------------------------------------------
Security Fixes in Yocto-5.0.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-1153`, :cve_nist:`2025-1179`, :cve_nist:`2025-1180` and
:cve_nist:`2025-1182`
- connman: Fix :cve_nist:`2025-32366` and :cve_nist:`2025-32743`
- curl: Fix :cve_nist:`2024-11053` and :cve_nist:`2025-0167`
- elfutils: Fix :cve_nist:`2025-1371`
- ffmpeg: Fix :cve_nist:`2024-7055`, :cve_nist:`2024-32230`, :cve_nist:`2024-35366`,
:cve_nist:`2024-36613`, :cve_nist:`2024-36616`, :cve_nist:`2024-36617` and :cve_nist:`2024-36619`
- git: Fix :cve_nist:`2024-50349` and :cve_nist:`2024-52006`
- glib-2.0: fix :cve_nist:`2025-3360` and :cve_nist:`2025-4373`
- iputils: Fix :cve_nist:`2025-47268`
- libpam: Fix :cve_nist:`2024-10041`
- libsoup-2.4: Fix :cve_nist:`2024-52530`, :cve_nist:`2024-52531`, :cve_nist:`2024-52532`,
:cve_nist:`2025-32906`, :cve_nist:`2025-32909`, :cve_nist:`2025-32910`, :cve_nist:`2025-32911`,
:cve_nist:`2025-32912`, :cve_nist:`2025-32913`, :cve_nist:`2025-32914` and :cve_nist:`2025-46420`
- libsoup: Fix :cve_nist:`2025-4476`, :cve_nist:`2025-32906`, :cve_nist:`2025-32909`,
:cve_nist:`2025-32910`, :cve_nist:`2025-32911`, :cve_nist:`2025-32912`, :cve_nist:`2025-32913`,
:cve_nist:`2025-32914` and :cve_nist:`2025-46420`
- libxml2: Fix :cve_nist:`2025-32414` and :cve_nist:`2025-32415`
- openssh: Fix :cve_nist:`2025-32728`
- perl: Fix :cve_nist:`2024-56406`
- ppp: Fix :cve_nist:`2024-58250`
- python3-jinja2: Fix :cve_nist:`2024-56201`, :cve_nist:`2024-56326` and :cve_nist:`2025-27516`
- ruby: Fix :cve_nist:`2025-27221`
- sqlite3: Fix :cve_nist:`2025-3277`, :cve_nist:`2025-29087` and :cve_nist:`2025-29088`
Fixes in Yocto-5.0.10
~~~~~~~~~~~~~~~~~~~~~
- binutils: stable 2.42 branch updates
- bluez5: add missing tools to noinst-tools package
- bluez5: backport a patch to fix btmgmt -i
- bluez5: make media control a :term:`PACKAGECONFIG` option
- build-appliance-image: Update to scarthgap head revision
- buildtools-tarball: Make buildtools respects host CA certificates
- buildtools-tarball: add envvars into :term:`BB_ENV_PASSTHROUGH_ADDITIONS`
- buildtools-tarball: move setting of envvars to respective envfile
- contributor-guide/submit-changes: encourage patch version changelogs
- cve-check.bbclass: Fix symlink handling also for text files
- cve-update-nvd2-native: Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
- dev-manual/sbom.rst: fix wrong build outputs
- docs: Fix dead links that use the :term:`DISTRO` macro
- docs: conf.py: tweak SearchEnglish to be hyphen-friendly
- docs:conf.py: define a manpage url
- ffmpeg: upgrade to 6.1.2
- git: upgrade to 2.44.3
- glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe
- glibc: Add single-threaded fast path to rand()
- glibc: stable 2.39 branch updates
- initscripts: add function log_success_msg/log_failure_msg/log_warning_msg
- libatomic-ops: Update :term:`GITHUB_BASE_URI`
- manuals: remove repeated word
- migration-guides: add release notes for 4.0.26, 5.0.8, 5.0.9
- module.bbclass: add KBUILD_EXTRA_SYMBOLS to install
- perl: upgrade to 5.38.4
- perlcross: upgrade to 1.6.2
- poky.conf: bump version for 5.0.10
- poky.yaml: introduce DISTRO_LATEST_TAG
- python3-jinja2: upgrade to 3.1.6
- ref-manual/release-process: update releases.svg
- ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference
- ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name
- ref-manual/variables.rst: add manpage links for toolchain variables
- ref-manual/variables.rst: add missing documentation for BUILD_* variables
- ref-manual/variables.rst: document HOST_*_ARCH variables
- ref-manual/variables.rst: document :term:`INHIBIT_DEFAULT_RUST_DEPS`
- ref-manual/variables.rst: document :term:`INHIBIT_UPDATERCD_BBCLASS`
- ref-manual/variables.rst: document :term:`SSTATE_SKIP_CREATION`
- ref-manual/variables.rst: document :term:`WIC_CREATE_EXTRA_ARGS`
- ref-manual/variables.rst: document autotools class related variables
- ref-manual/variables.rst: document missing SDK_*_ARCH variables
- ref-manual/variables.rst: document the :term:`IMAGE_ROOTFS_MAXSIZE` variable
- ref-manual/variables.rst: document the :term:`INITRAMFS_MAXSIZE` variable
- ref-manual/variables.rst: improve the :term:`PKGV` documentation
- ref-manual/variables.rst: update :term:`ROOT_HOME` documentation
- ref-manual: kernel-fitimage.bbclass does not use :term:`SPL_SIGN_KEYNAME`
- scripts/install-buildtools: Update to 5.0.9
- sphinx-lint: missing space after literal
- sphinx-lint: trailing whitespace
- sphinx-lint: unbalanced inline literal markup
- systemd: Password agents shouldn't be optional
- systemd: upgrade to 255.18
- test-manual/intro: remove Buildbot version used
- tzdata/tzcode-native: upgrade 2025a -> 2025b
- u-boot: ensure keys are generated before assembling U-Boot FIT image
- util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
- wic: bootimg-efi: Support + symbol in filenames
Known Issues in Yocto-5.0.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- There is an issue where the target libsoup-2.4 build may fail if apachectl is present on the build
host. The issue only affects test binaries which aren't actually used. The issue can be fixed by
disabling the tests or updating to more recent changes on the scarthgap branch which fix this.
Contributors to Yocto-5.0.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Adrian Freihofer
- Aleksandar Nikolic
- Alexander Kanavin
- Alon Bar-Lev
- Alper Ak
- Andrew Kreimer
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Changqing Li
- Christos Gavros
- Deepesh Varatharajan
- Divya Chellam
- Divyanshu Rathore
- Enrico Jörns
- Etienne Cordonnier
- Guðni Már Gilbert
- Haixiao Yan
- Harish Sadineni
- Igor Opaniuk
- Jeroen Hofstee
- Lee Chee Yang
- Nguyen Dat Tho
- Niko Mauno
- Peter Marko
- Praveen Kumar
- Priyal Doshi
- Rogerio Guerra Borin
- Shubham Kulkarni
- Soumya Sambu
- Steve Sakoman
- Sunil Dora
- Trevor Woerner
- Vijay Anusuri
- Virendra Thakur
- Vyacheslav Yurkov
- Yi Zhao
- Yogita Urade
- rajmohan r
Repositories / Downloads for Yocto-5.0.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.10 </poky/log/?h=yocto-5.0.10>`
- Git Revision: :yocto_git:`ac257900c33754957b2696529682029d997a8f28 </poky/commit/?id=ac257900c33754957b2696529682029d997a8f28>`
- Release Artefact: poky-ac257900c33754957b2696529682029d997a8f28
- sha: ddca7e54b331e78214bea65b346320d4fbcddf4b51103bfbbd9fc3960f32cdc7
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.10 </openembedded-core/log/?h=yocto-5.0.10>`
- Git Revision: :oe_git:`d5342ffc570d47a723b18297d75bd2f63c2088db </openembedded-core/commit/?id=d5342ffc570d47a723b18297d75bd2f63c2088db>`
- Release Artefact: oecore-d5342ffc570d47a723b18297d75bd2f63c2088db
- sha: daa62094f2327f4b3fbcc485e8964d1b86a4722f58fb37e0d8e8e9885094a262
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.10 </meta-mingw/log/?h=yocto-5.0.10>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.10 </bitbake/log/?h=yocto-5.0.10>`
- Git Revision: :oe_git:`696c2c1ef095f8b11c7d2eff36fae50f58c62e5e </bitbake/commit/?id=696c2c1ef095f8b11c7d2eff36fae50f58c62e5e>`
- Release Artefact: bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e
- sha: fc83f879cd6dd14b9b7eba0161fec23ecc191fed0fb00556ba729dceef6c145f
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.10 </yocto-docs/log/?h=yocto-5.0.10>`
- Git Revision: :yocto_git:`3996388e337377bedc113d072a51fe9d68dd40c6 </yocto-docs/commit/?id=3996388e337377bedc113d072a51fe9d68dd40c6>`

View File

@@ -0,0 +1,219 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.11 (Scarthgap)
------------------------------------------
Security Fixes in Yocto-5.0.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-5244` and :cve_nist:`2025-5245`
- busybox: Fix :cve_nist:`2022-48174`
- coreutils: Fix :cve_nist:`2025-5278`
- curl: Ignore :cve_nist:`2025-5025` if :term:`PACKAGECONFIG` set with openssl
- ffmpeg: Fix :cve_nist:`2025-1373`
- glibc: fix :cve_nist:`2025-4802` and :cve_nist:`2025-5702`
- gnupg: Fix :cve_nist:`2025-30258`
- go: Fix :cve_nist:`2025-4673`
- go: Ignore :cve_nist:`2024-3566`
- icu: Fix :cve_nist:`2025-5222`
- kea: Fix :cve_nist:`2025-32801`, :cve_nist:`2025-32802` and :cve_nist:`2025-32803`
- libarchive: fix :cve_nist:`2025-5914`, :cve_nist:`2025-5915`, :cve_nist:`2025-5916`,
:cve_nist:`2025-5917` and :cve_nist:`2025-5918`
- libsoup-2.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4476`, :cve_nist:`2025-4945`,
:cve_nist:`2025-4948`, :cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32052`,
:cve_nist:`2025-32053`, :cve_nist:`2025-32907` and :cve_nist:`2025-46421`
- libsoup-3.4: Fix :cve_nist:`2025-2784`, :cve_nist:`2025-4945`, :cve_nist:`2025-4948`,
:cve_nist:`2025-4969`, :cve_nist:`2025-32050`, :cve_nist:`2025-32051`, :cve_nist:`2025-32052`,
:cve_nist:`2025-32053`, :cve_nist:`2025-32907`, :cve_nist:`2025-32908` and :cve_nist:`2025-46421`
- libxml2: Fix :cve_nist:`2025-6021`
- linux-yocto-6.6: Fix :cve_nist:`2025-21995`, :cve_nist:`2025-21996`, :cve_nist:`2025-21997`,
:cve_nist:`2025-21999`, :cve_nist:`2025-22001`, :cve_nist:`2025-22003`, :cve_nist:`2025-22004`,
:cve_nist:`2025-22005`, :cve_nist:`2025-22007`, :cve_nist:`2025-22009`, :cve_nist:`2025-22010`,
:cve_nist:`2025-22014`, :cve_nist:`2025-22018`, :cve_nist:`2025-22020`, :cve_nist:`2025-22027`,
:cve_nist:`2025-22033`, :cve_nist:`2025-22035`, :cve_nist:`2025-22038`, :cve_nist:`2025-22040`,
:cve_nist:`2025-22041`, :cve_nist:`2025-22054`, :cve_nist:`2025-22056`, :cve_nist:`2025-22063`,
:cve_nist:`2025-22066`, :cve_nist:`2025-22080`, :cve_nist:`2025-22081`, :cve_nist:`2025-22088`,
:cve_nist:`2025-22097`, :cve_nist:`2025-23136`, :cve_nist:`2025-37785`, :cve_nist:`2025-37800`,
:cve_nist:`2025-37801`, :cve_nist:`2025-37803`, :cve_nist:`2025-37805`, :cve_nist:`2025-37838`,
:cve_nist:`2025-37893`, :cve_nist:`2025-38152`, :cve_nist:`2025-39728` and :cve_nist:`2025-39735`
- net-tools: Fix :cve_nist:`2025-46836`
- python3-setuptools: Fix :cve_nist:`2025-47273`
- python3-requests: fix :cve_nist:`2024-47081`
- python3-urllib3: Fix :cve_nist:`2025-50181`
- python3: Fix CVE 2024-12718 CVE 2025-4138 CVE 2025-4330 CVE 2025-4435 :cve_nist:`2025-4516` CVE
2025-4517
- screen: fix :cve_nist:`2025-46802`, :cve_nist:`2025-46804` and :cve_nist:`2025-46805`
- sudo: Fix :cve_nist:`2025-32462`
- xwayland: Fix :cve_nist:`2025-49175`, :cve_nist:`2025-49176`, :cve_nist:`2025-49177`,
:cve_nist:`2025-49178`, :cve_nist:`2025-49179` and :cve_nist:`2025-49180`
Fixes in Yocto-5.0.11
~~~~~~~~~~~~~~~~~~~~~
- bitbake: ast: Change deferred inherits to happen per recipe
- bitbake: fetch2: Avoid deprecation warning
- bitbake: gcp.py: remove slow calls to gsutil stat
- bitbake: toaster/tests/buildtest: Switch to new CDN
- brief-yoctoprojectqs/ref-manual: Switch to new CDN
- bsp-guide: update kernel version example to 6.12
- bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file
- bsp-guide: update lonely "4.12" kernel reference to "6.12"
- build-appliance-image: Update to scarthgap head revision
- cmake: Correctly handle cost data of tests with arbitrary chars in name
- conf.py: improve SearchEnglish to handle terms with dots
- docs: Clean up explanation of minimum required version numbers
- docs: README: specify how to contribute instead of pointing at another file
- docs: conf.py: silence SyntaxWarning on js_splitter_code
- gcc: Upgrade to GCC 13.4
- ghostscript: upgrade to 10.05.1
- glibc: stable 2.39 branch updates (06a70769fd...)
- gnupg: update to 2.4.8
- gtk+: add missing libdrm dependency
- kea: upgrade to 2.4.2
- libpng: Add ptest
- libsoup-2.4: fix do_compile failure
- linux-yocto/6.6: fix beaglebone ethernet
- linux-yocto/6.6: update to v6.6.96
- local.conf.sample: Switch to new CDN
- ltp: backport patch to fix compilation error for x86_64
- migration-guides: add release notes for 4.0.27, 4.0.28, 5.0.10
- minicom: correct the :term:`SRC_URI`
- nfs-utils: don't use signals to shut down nfs server.
- overview-manual/concepts.rst: fix sayhello hardcoded bindir
- overview-manual: small number of pedantic cleanups
- package: export debugsources in :term:`PKGDESTWORK` as json
- poky.conf: bump version for 5.0.11
- python3-requests: upgrade to 2.32.4
- python3: upgrade to 3.12.11
- ref-manual: clarify :term:`KCONFIG_MODE` default behaviour
- ref-manual: classes: nativesdk: move note to appropriate section
- ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
- ref-manual: document :term:`KERNEL_SPLIT_MODULES` variable
- scripts/install-buildtools: Update to 5.0.10
- spdx: add option to include only compiled sources
- sstatetests: Switch to new CDN
- systemd: Rename systemd_v255.21 to systemd_255.21
- systemd: upgrade to 255.21
- tcf-agent: correct the :term:`SRC_URI`
- testimage: get real os-release file
- tune-cortexr52: Remove aarch64 for ARM Cortex-R52
- uboot: Allow for customizing installed/deployed file names
Known Issues in Yocto-5.0.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic
- Andrew Fernandes
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Carlos Sánchez de La Lama
- Changqing Li
- Chen Qi
- Colin Pinnell McAllister
- Daniel Turull
- Deepesh Varatharajan
- Divya Chellam
- Dixit Parmar
- Enrico Jörns
- Etienne Cordonnier
- Guocai He
- Guðni Már Gilbert
- Hitendra Prajapati
- Jiaying Song
- Lee Chee Yang
- Moritz Haase
- NeilBrown
- Peter Marko
- Poonam Jadhav
- Praveen Kumar
- Preeti Sachan
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Roland Kovacs
- Ryan Eatmon
- Sandeep Gundlupet Raju
- Savvas Etairidis
- Steve Sakoman
- Victor Giraud
- Vijay Anusuri
- Virendra Thakur
- Wang Mingyu
- Yogita Urade
Repositories / Downloads for Yocto-5.0.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.11 </poky/log/?h=yocto-5.0.11>`
- Git Revision: :yocto_git:`ae2d52758fc2fcb0ed996aa234430464ebf4b310 </poky/commit/?id=ae2d52758fc2fcb0ed996aa234430464ebf4b310>`
- Release Artefact: poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310
- sha: 48dec434dd51e5c9c626abdccc334da300fa2b4975137d526f5df6703e5a930e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/poky-ae2d52758fc2fcb0ed996aa234430464ebf4b310.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.11 </openembedded-core/log/?h=yocto-5.0.11>`
- Git Revision: :oe_git:`7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b </openembedded-core/commit/?id=7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b>`
- Release Artefact: oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b
- sha: fb50992a28298915fe195e327628d6d5872fd2dbc74189c2d840178cd860bb2e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/oecore-7a59dc5ee6edd9596e87c2fbcd1f2594c06b3d1b.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.11 </meta-mingw/log/?h=yocto-5.0.11>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.11 </bitbake/log/?h=yocto-5.0.11>`
- Git Revision: :oe_git:`139f61fe9eec221745184a14b3618d2dfa650b91 </bitbake/commit/?id=139f61fe9eec221745184a14b3618d2dfa650b91>`
- Release Artefact: bitbake-139f61fe9eec221745184a14b3618d2dfa650b91
- sha: 86669d4220c50d35c0703f151571954ad9c6285cc91a870afbb878d2e555d2ca
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.11/bitbake-139f61fe9eec221745184a14b3618d2dfa650b91.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.11/bitbake-139f61fe9eec221745184a14b3618d2dfa650b91.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.11 </meta-yocto/log/?h=yocto-5.0.11>`
- Git Revision: :yocto_git:`50e5c0d85d3775ac1294bdcd7f11deaa382c9d08 </meta-yocto/commit/?id=50e5c0d85d3775ac1294bdcd7f11deaa382c9d08>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.11 </yocto-docs/log/?h=yocto-5.0.11>`
- Git Revision: :yocto_git:`3f88cb85cca8f9128cfaab36882c4563457b03d9 </yocto-docs/commit/?id=3f88cb85cca8f9128cfaab36882c4563457b03d9>`

View File

@@ -0,0 +1,184 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.12 (Scarthgap)
------------------------------------------
Security Fixes in Yocto-5.0.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- avahi: Fix :cve_nist:`2024-52615`
- binutils: Fix :cve_nist:`2025-7545` and :cve_nist:`2025-7546`
- busybox: Fix :cve_nist:`2023-39810`
- dropbear: Fix :cve_nist:`2025-47203`
- gdk-pixbuf: Fix :cve_nist:`2025-7345`
- git: Fix :cve_nist:`2025-27613`, :cve_nist:`2025-27614`, :cve_nist:`2025-46334`,
:cve_nist:`2025-46835`, :cve_nist:`2025-48384`, :cve_nist:`2025-48385` and :cve_nist:`2025-48386`
- glib-2.0: Ignore :cve_nist:`2025-4056`
- glibc: Fix :cve_nist:`2025-8058`
- gnutls: Fix :cve_nist:`2025-6395`, :cve_nist:`2025-32988`, :cve_nist:`2025-32989` and
:cve_nist:`2025-32990`
- go: Ignore :cve_nist:`2025-0913`
- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47806` and :cve_nist:`2025-47808`
- gstreamer1.0-plugins-good: Fix :cve_nist:`2025-47183` and :cve_nist:`2025-47219`
- iputils: Fix :cve_nist:`2025-48964`
- libpam: Fix :cve_nist:`2025-6020`
- libxml2: Fix :cve_nist:`2025-6170`, :cve_nist:`2025-49794`, :cve_nist:`2025-49795` and
:cve_nist:`2025-49796`
- libxml2: Ignore :cve_nist:`2025-8732`
- ncurses: Fix :cve_nist:`2025-6141`
- openssl: Fix :cve_nist:`2024-41996` and :cve_nist:`2025-27587`
- python3: Fix :cve_nist:`2025-8194`
- sqlite3: Fix :cve_nist:`2025-6965`
- sudo: Fix :cve_nist:`2025-32463`
- xserver-xorg: Fix :cve_nist:`2022-49737`, :cve_nist:`2025-49175`, :cve_nist:`2025-49176`,
:cve_nist:`2025-49177`, :cve_nist:`2025-49178`, :cve_nist:`2025-49179`, :cve_nist:`2025-49180`
and :cve_nist:`2025-49176`
- xz: Ignore :cve_nist:`2024-47611`
Fixes in Yocto-5.0.12
~~~~~~~~~~~~~~~~~~~~~
- bash: Stick to C17 std
- bash: use -std=gnu17 also for native :term:`CFLAGS`
- binutils: stable 2.42 branch updates
- bitbake: bitbake: runqueue: Verify mcdepends are valid
- bitbake: test/fetch: Switch u-boot based test to use our own mirror
- bitbake: utils: Optimise signal/sigmask performance
- build-appliance-image: Update to scarthgap head revision
- cairo: fix build with gcc-15 on host
- cmake: Add :term:`PACKAGECONFIG` option for debugger support
- cve-check: Add missing call to exit_if_errors
- dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart
- e2fsprogs: Fix build failure with gcc 15
- git: Upgrade to 2.44.4
- glibc: stable 2.39 branch updates
- gnutls: patch read buffer overrun in the "pre_shared_key" extension
- gnutls: patch reject zero-length version in certificate request
- go-helloworld: fix license
- kea: set correct permissions for /var/run/kea
- linux-libc-headers: Fix invalid conversion in cn_proc.h
- migration-guides: add release notes for 5.0.11
- mtools: upgrade to 4.0.49
- oe-debuginfod: add option for data storage
- orc: set :term:`CVE_PRODUCT`
- overview-manual/yp-intro.rst: fix broken link to article
- parted: Fix build with GCC 15
- poky.conf: bump version for 5.0.12
- python3: update CVE product
- ref-manual/classes.rst: document the testexport class
- ref-manual/system-requirements.rst: update supported distributions
- ref-manual/variables.rst: document :term:`SPL_DTB_BINARY` :term:`FIT_CONF_PREFIX` variable
- scripts/install-buildtools: Update to 5.0.11
- sudo: upgrade to 1.9.17p1
- timedated: wait for jobs before SetNTP response
- variables.rst: remove references to obsolete tar packaging
- xserver-xorg: upgrade to 21.1.18
Known Issues in Yocto-5.0.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Aleksandar Nikolic
- Alexander Kanavin
- Antonin Godard
- Archana Polampalli
- Daniel Turull
- Deepesh Varatharajan
- Erik Lindsten
- Fabio Berton
- Hitendra Prajapati
- Jinfeng Wang
- Joe Slater
- Khem Raj
- Lee Chee Yang
- Marco Cavallini
- Mark Hatle
- Martin Jansa
- Michal Seben
- Nikhil R
- Peter Marko
- Philip Lorenz
- Praveen Kumar
- Quentin Schulz
- Richard Purdie
- Robert P. J. Day
- Roland Kovacs
- Steve Sakoman
- Vijay Anusuri
- Wang Mingyu
- Yash Shinde
- Yi Zhao
- Zhang Peng
Repositories / Downloads for Yocto-5.0.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.12 </poky/log/?h=yocto-5.0.12>`
- Git Revision: :yocto_git:`ec220ae083dba35c279192b2249ad03fe238446e </poky/commit/?id=ec220ae083dba35c279192b2249ad03fe238446e>`
- Release Artefact: poky-ec220ae083dba35c279192b2249ad03fe238446e
- sha: a5f8c2ad491c59d0bdfb85f46a136b0ee66cfdd4359ab1ab9dac2430d0a52c17
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/poky-ec220ae083dba35c279192b2249ad03fe238446e.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.12 </openembedded-core/log/?h=yocto-5.0.12>`
- Git Revision: :oe_git:`93c7489d843a0e46fe4fc685b356d0ae885300d7 </openembedded-core/commit/?id=93c7489d843a0e46fe4fc685b356d0ae885300d7>`
- Release Artefact: oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7
- sha: 49695592179cd777eee337d922aae354dad4ab503628f0344b1b53329900c4d9
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/oecore-93c7489d843a0e46fe4fc685b356d0ae885300d7.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.12 </meta-mingw/log/?h=yocto-5.0.12>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.12 </bitbake/log/?h=yocto-5.0.12>`
- Git Revision: :oe_git:`982645110a19ebb94d519926a4e14c8a2a205cfd </bitbake/commit/?id=982645110a19ebb94d519926a4e14c8a2a205cfd>`
- Release Artefact: bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd
- sha: f8d777d322b8f05372d7ce75c67df2db2b7de3f64d5b7769b8051c507161245d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.12/bitbake-982645110a19ebb94d519926a4e14c8a2a205cfd.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.12 </meta-yocto/log/?h=yocto-5.0.12>`
- Git Revision: :yocto_git:`82602cda1a89644d1acbe230a81c93e3fb5031c8 </meta-yocto/commit/?id=82602cda1a89644d1acbe230a81c93e3fb5031c8>`
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.12 </yocto-docs/log/?h=yocto-5.0.12>`
- Git Revision: :yocto_git:`dd665216fa578a1f2f268790d708c6a5d2912ecf </yocto-docs/commit/?id=dd665216fa578a1f2f268790d708c6a5d2912ecf>`

View File

@@ -0,0 +1,241 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.13 (Scarthgap)
------------------------------------------
Security Fixes in Yocto-5.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- busybox: Fix :cve_nist:`2025-46394`
- cups: Fix :cve_nist:`2025-58060` and :cve_nist:`2025-58364`
- curl: Fix :cve_nist:`2025-9086`
- dpkg: Fix :cve_nist:`2025-6297`
- expat: follow-up Fix :cve_nist:`2024-8176`
- ffmpeg: Fix :cve_nist:`2025-1594`
- ffmpeg: Ignore :cve_nist:`2023-49502`, :cve_nist:`2023-50007`, :cve_nist:`2023-50008`,
:cve_nist:`2023-50009`, :cve_nist:`2023-50010`, :cve_nist:`2024-31578`, :cve_nist:`2024-31582`
and :cve_nist:`2024-31585`
- ghostscript: Fix :cve_nist:`2025-59798`, :cve_nist:`2025-59799` and :cve_nist:`2025-59800`
- glib-2.0: Fix :cve_nist:`2025-6052` and :cve_nist:`2025-7039`
- go-binary-native: Ignore :cve_nist:`2025-0913`
- go: Fix :cve_nist:`2025-4674`, :cve_nist:`2025-47906` and :cve_nist:`2025-47907`
- grub2: Fix :cve_nist:`2024-56738`
- grub2: Ignore :cve_nist:`2024-2312`
- gstreamer1.0-plugins-bad: Fix :cve_nist:`2025-3887`
- gstreamer1.0-plugins-base: Fix :cve_nist:`2025-47807`
- gstreamer1.0-plugins-base: Ignore :cve_nist:`2025-47806` and :cve_nist:`2025-47808`
- gstreamer1.0-plugins-good: Ignore :cve_nist:`2025-47183` and :cve_nist:`2025-47219`
- gstreamer1.0: Ignore :cve_nist:`2025-2759`
- libpam: Fix :cve_nist:`2024-10963`
- libxslt: Fix :cve_nist:`2025-7424`
- openssl: Fix :cve_nist:`2025-9230`, :cve_nist:`2025-9231` and :cve_nist:`2025-9232`
- pulseaudio: Ignore :cve_nist:`2024-11586`
- qemu: Ignore :cve_nist:`2024-7730`
- tiff: Fix :cve_nist:`2025-9900`
- tiff: Ignore :cve_nist:`2024-13978`, :cve_nist:`2025-8176`, :cve_nist:`2025-8177`,
:cve_nist:`2025-8534` and :cve_nist:`2025-8851`
- vim: Fix :cve_nist:`2025-9389`
- wpa-supplicant: Fix :cve_nist:`2022-37660`
Fixes in Yocto-5.0.13
~~~~~~~~~~~~~~~~~~~~~
- binutils: fix build with gcc-15
- bitbake: Use a "fork" multiprocessing context
- bitbake: bitbake: Bump version to 2.8.1
- build-appliance-image: Update to scarthgap head revision
- buildtools-tarball: fix unbound variable issues under 'set -u'
- cmake: fix build with gcc-15 on host
- conf/bitbake.conf: use gnu mirror instead of main server
- contributor-guide: submit-changes: align :term:`CC` tag description
- contributor-guide: submit-changes: clarify example with Yocto bug ID
- contributor-guide: submit-changes: fix improper bold string
- contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"
- contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
- contributor-guide: submit-changes: number instruction list in commit your changes
- contributor-guide: submit-changes: reword commit message instructions
- cpio: Pin to use C17 std
- cups: upgrade to 2.4.11
- curl: update :term:`CVE_STATUS` for :cve_nist:`2025-5025`
- dbus-glib: fix build with gcc-15
- default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
- dev-manual/building.rst: add note about externalsrc variables absolute paths
- dev-manual/security-subjects.rst: update mailing lists
- elfutils: fix build with gcc-15
- examples: genl: fix wrong attribute size
- expect: Fix build with GCC 15
- expect: Revert "expect-native: fix do_compile failure with gcc-14"
- expect: cleanup do_install
- expect: don't run aclocal in do_configure
- expect: fix native build with GCC 15
- expect: update code for Tcl channel implementation
- ffmpeg: upgrade to 6.1.3
- gdbm: Use C11 standard
- git: fix build with gcc-15 on host
- gmp: Fix build with GCC15/C23
- gmp: Fix build with older gcc versions
- kernel-dev/common.rst: fix the in-tree defconfig description
- lib/oe/utils: use multiprocessing from bb
- libarchive: patch regression of patch for :cve_nist:`2025-5918`
- libgpg-error: fix build with gcc-15
- libtirpc: Fix build with gcc-15/C23
- license.py: avoid deprecated ast.Str
- llvm: fix build with gcc-15
- llvm: update to 18.1.8
- m4: Stick to C17 standard
- migration-guides: add release notes for 4.0.29 5.0.12
- ncurses: Pin to C17 standard
- oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
- openssl: upgrade to 3.2.6
- p11-kit: backport fix for handle :term:`USE_NLS` from master
- pkgconfig: fix build with gcc-15
- poky.conf: bump version for 5.0.13
- pulseaudio: Add audio group explicitly
- ref-manual/structure: document the auto.conf file
- ref-manual/variables.rst: expand :term:`IMAGE_OVERHEAD_FACTOR` glossary entry
- ref-manual/variables.rst: fix the description of :term:`KBUILD_DEFCONFIG` :term:`STAGING_DIR`
- rpm: keep leading "/" from sed operation
- ruby-ptest: some ptest fixes
- runqemu: fix special characters bug
- rust-llvm: fix build with gcc-15
- sanity.conf: Update minimum bitbake version to 2.8.1
- scripts/install-buildtools: Update to 5.0.12
- sdk: The main in the C example should return an int
- selftest/cases/meta_ide.py: use use gnu mirror instead of main server
- shared-mime-info: Handle :term:`USE_NLS`
- sudo: remove devtool FIXME comment
- systemd: backport fix for handle :term:`USE_NLS` from master
- systemtap: Fix task_work_cancel build
- test-manual/yocto-project-compatible.rst: fix a typo
- test-manual: update runtime-testing Exporting Tests section
- unifdef: Don't use C23 constexpr keyword
- unzip: Fix build with GCC-15
- util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool
- vim: upgrade to 9.1.1683
- yocto-uninative: Update to 4.9 for glibc 2.42 GCC 15.1
Known Issues in Yocto-5.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Adam Blank
- Adrian Freihofer
- Aleksandar Nikolic
- Antonin Godard
- Archana Polampalli
- AshishKumar Mishra
- Barne Carstensen
- Chris Laplante
- Deepak Rathore
- Divya Chellam
- Gyorgy Sarvari
- Haixiao Yan
- Hitendra Prajapati
- Hongxu Jia
- Jan Vermaete
- Jiaying Song
- Jinfeng Wang
- Joao Marcos Costa
- Joshua Watt
- Khem Raj
- Kyungjik Min
- Lee Chee Yang
- Libo Chen
- Martin Jansa
- Michael Halstead
- Nitin Wankhade
- Peter Marko
- Philip Lorenz
- Praveen Kumar
- Quentin Schulz
- Ross Burton
- Stanislav Vovk
- Steve Sakoman
- Talel BELHAJ SALEM
- Vijay Anusuri
- Vrushti Dabhi
- Yogita Urade
Repositories / Downloads for Yocto-5.0.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.13 </yocto-docs/log/?h=yocto-5.0.13>`
- Git Revision: :yocto_git:`6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a </yocto-docs/commit/?id=6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a>`
- Release Artefact: yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a
- sha: 454601d8b6034268212f74ca689ed360b08f7a4c7de5df726aa3706586ca4351
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/yocto-docs-6f086fd3d9dbbb0c80f6c3e89b8df4fed422e79a.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.13 </poky/log/?h=yocto-5.0.13>`
- Git Revision: :yocto_git:`f16cffd030d21d12dd57bb95cfc310bda41f8a1f </poky/commit/?id=f16cffd030d21d12dd57bb95cfc310bda41f8a1f>`
- Release Artefact: poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f
- sha: 1367e43907f5ffa725f3afb019cd7ca07de21f13e5e73a1f5d1808989ae6ed2a
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/poky-f16cffd030d21d12dd57bb95cfc310bda41f8a1f.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.13 </openembedded-core/log/?h=yocto-5.0.13>`
- Git Revision: :oe_git:`7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b </openembedded-core/commit/?id=7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b>`
- Release Artefact: oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b
- sha: 4dcf636ec4a7b38b47a24e9cb3345b385bc126bb19620bf6af773bf292fef6b2
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/oecore-7af6b75221d5703ba5bf43c7cd9f1e7a2e0ed20b.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.13 </meta-yocto/log/?h=yocto-5.0.13>`
- Git Revision: :yocto_git:`3ff7ca786732390cd56ae92ff4a43aba46a1bf2e </meta-yocto/commit/?id=3ff7ca786732390cd56ae92ff4a43aba46a1bf2e>`
- Release Artefact: meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e
- sha: 8efbaeab49dc3e1c4b67ff8d5801df1b05204c2255d18cff9a6857769ae33b23
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-yocto-3ff7ca786732390cd56ae92ff4a43aba46a1bf2e.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.13 </meta-mingw/log/?h=yocto-5.0.13>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.13 </bitbake/log/?h=yocto-5.0.13>`
- Git Revision: :oe_git:`1c9ec1ffde75809de34c10d3ec2b40d84d258cb4 </bitbake/commit/?id=1c9ec1ffde75809de34c10d3ec2b40d84d258cb4>`
- Release Artefact: bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4
- sha: 98bf54fa3abe237b73a93b1e33842a429209371fca6e409c258a441987879d16
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.13/bitbake-1c9ec1ffde75809de34c10d3ec2b40d84d258cb4.tar.bz2

View File

@@ -0,0 +1,211 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.14 (Scarthgap)
------------------------------------------
Security Fixes in Yocto-5.0.14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- bind: Fix :cve_nist:`2025-8677`, :cve_nist:`2025-40778` and :cve_nist:`2025-40780`
- binutils: Fix :cve_nist:`2025-8225`, :cve_nist:`2025-11081`, :cve_nist:`2025-11082`,
:cve_nist:`2025-11083`, :cve_nist:`2025-11412`, :cve_nist:`2025-11413` and :cve_nist:`2025-11414`
- cmake: fix :cve_nist:`2025-9301`
- curl: Ignore :cve_nist:`2025-10966`
- elfutils: Fix :cve_nist:`2025-1376` and :cve_nist:`2025-1377`
- expat: Fix :cve_nist:`2025-59375`
- glib-networking: Fix :cve_nist:`2025-60018` and :cve_nist:`2025-60019`
- gnupg: Ignore :cve_nist:`2025-30258`
- go: Fix :cve_nist:`2025-47912`, :cve_nist:`2025-58185`, :cve_nist:`2025-58187`,
:cve_nist:`2025-58188`, :cve_nist:`2025-58189`, :cve_nist:`2025-61723` and :cve_nist:`2025-61724`
- libpam: Ignore :cve_nist:`2025-6018`
- lz4: Fix :cve_nist:`2025-62813`
- openssh: Fix :cve_nist:`2025-61984` and :cve_nist:`2025-61985`
- python3: Fix :cve_nist:`2025-59375`
- python3-xmltodict: Fix :cve_nist:`2025-9375`
- qemu: Fix :cve_nist:`2024-8354`
- tiff: Ignore :cve_nist:`2025-8961`
- u-boot: Fix :cve_nist:`2024-42040`
- wpa-supplicant: Fix :cve_nist:`2025-24912`
Fixes in Yocto-5.0.14
~~~~~~~~~~~~~~~~~~~~~
- bind: upgrade to 9.18.41
- bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace()
- bitbake: fetch2/wget: Keep query parameters in URL during checkstatus
- build-appliance-image: Update to scarthgap head revision
- ca-certificates: Add comment for provenance of :term:`SRCREV`
- ca-certificates: fix on-target postinstall script
- ca-certificates: get sources from debian tarballs
- ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch
- ca-certificates: upgrade to 20250419
- classes/create-spdx-2.2: align DEPLOY_DIR_SPDX with SPDX_VERSION layout
- classes/create-spdx-2.2: Handle empty packages
- classes-global/license: Move functions to library code
- classes-global/staging: Exclude do_create_spdx from automatic sysroot extension
- classes-recipe/baremetal-image: Add image file manifest
- classes-recipe/image: Add image file manifest
- curl: only set CA bundle in target build
- dev-manual, test-manual: Update autobuilder output links
- flex: fix build with gcc-15 on host
- glibc: stable 2.39 branch updates
- gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs
- icu: Backport patch to fix build issues with long paths (>512 chars)
- iptables: remove /etc/ethertypes
- lib/license: Move package license skip to library
- lib: oe: license: Add missing import
- lib: oeqa: spdx: Add tests for extra options
- linux-yocto/6.6: update to v6.6.111
- meta: backport :term:`SPDX` 3.0 fixes and tasks from upstream version Walnascar
- migration-guides: add release notes for 4.0.30
- oe-build-perf-report: relax metadata matching rules
- oe-core: Remove empty file
- oeqa/runtime/ping: don't bother trying to ping localhost
- oeqa/selftest: Add :term:`SPDX` 3.0 include source case for work-share
- oeqa/selftest/devtool: Update after upstream repo changes
- oeqa: spdx: Add tar test for :term:`SPDX` 2.2
- overview-manual/yp-intro.rst: update on-target packaging info
- perf: add arm64 source files for unistd_64.h
- poky.conf: bump version for 5.0.14
- python3: upgrade to 3.12.12
- ref-manual/classes.rst: document the relative_symlinks class
- ref-manual/classes.rst: extend the uninative class documentation
- ref-manual/classes.rst: gettext: extend the documentation of the class
- ref-manual/variables.rst: document :term:`CCACHE_DISABLE` CHECKSUM :term:`UNINATIVE_URL`
:term:`REQUIRED_COMBINED_FEATURES` :term:`REQUIRED_IMAGE_FEATURES`
:term:`REQUIRED_MACHINE_FEATURES` :term:`USE_NLS` variable
- ref-manual/variables.rst: fix :term:`LAYERDEPENDS` description
- selftest: spdx: Add :term:`SPDX` 3.0 test cases
- selftest/spdx: Fix for SPDX_VERSION addition
- spdx 3.0: Rework how :term:`SPDX` aliases are linked
- spdx30_tasks: adapt CVE handling to new cve-check API
- spdx30_tasks: fix FetchData attribute in add_download_files
- util-linux: fix pointer usage in hwclock param handling
- vulnerabilities: update nvdcve file name
- webkitgtk: upgrade to 2.44.4
- wireless-regdb: upgrade to 2025.10.07
- xf86-video-intel: correct :term:`SRC_URI` as freedesktop anongit is down
Known Issues in Yocto-5.0.14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Alexander Kanavin
- Anders Heimer
- Ankur Tyagi
- Antonin Godard
- Archana Polampalli
- Bastian Krause
- Bin Lan
- Bruce Ashfield
- Carlos Alberto Lopez Perez
- Daniel Semkowicz
- David Nyström
- Deepesh Varatharajan
- Gyorgy Sarvari
- Hongxu Jia
- Joshua Watt
- João Marcos Costa
- Kamel Bouhara (Schneider Electric)
- Lee Chee Yang
- Martin Jansa
- Matthias Schiffer
- Michael Haener
- Paul Barker
- Peter Marko
- Philippe-Alexandre Mathieu
- Praveen Kumar
- Rajeshkumar Ramasamy
- Rasmus Villemoes
- Richard Purdie
- Robert P. J. Day
- Saravanan
- Soumya Sambu
- Steve Sakoman
- Theodore A. Roth
- Wang Mingyu
- Yannic Moog
- Yash Shinde
- Yogita Urade
Repositories / Downloads for Yocto-5.0.14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.14 </yocto-docs/log/?h=yocto-5.0.14>`
- Git Revision: :yocto_git:`a8687e4bb2e822670b6ad110613a12fa02943d3d </yocto-docs/commit/?id=a8687e4bb2e822670b6ad110613a12fa02943d3d>`
- Release Artefact: yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d
- sha: 72a51b6049a59f773720d9b0aa94f090222a41aeb22d65c5f4211c78418fb6fa
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/yocto-docs-a8687e4bb2e822670b6ad110613a12fa02943d3d.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.14 </poky/log/?h=yocto-5.0.14>`
- Git Revision: :yocto_git:`7e8674996b0164b07e56bc066d0fba790e627061 </poky/commit/?id=7e8674996b0164b07e56bc066d0fba790e627061>`
- Release Artefact: poky-7e8674996b0164b07e56bc066d0fba790e627061
- sha: 071e189ebccfad99d4d79ea9021475296fa642611828249f0963b019f842a021
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/poky-7e8674996b0164b07e56bc066d0fba790e627061.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.14 </openembedded-core/log/?h=yocto-5.0.14>`
- Git Revision: :oe_git:`471adaa5f77fa3b974eab60a2ded48e360042828 </openembedded-core/commit/?id=471adaa5f77fa3b974eab60a2ded48e360042828>`
- Release Artefact: oecore-471adaa5f77fa3b974eab60a2ded48e360042828
- sha: 4dfad047a68aea2293845cdb4a86911bb3b1b0444a63f51b4e5a2448018d6a5e
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/oecore-471adaa5f77fa3b974eab60a2ded48e360042828.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.14 </meta-yocto/log/?h=yocto-5.0.14>`
- Git Revision: :yocto_git:`bf6aea52c4009e08f26565c33ce432eec7cfb090 </meta-yocto/commit/?id=bf6aea52c4009e08f26565c33ce432eec7cfb090>`
- Release Artefact: meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090
- sha: 92c9da1027efaf945d80bcd44984d5f8e7606c7ded485b57c0c8f47c9fa1302d
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-yocto-bf6aea52c4009e08f26565c33ce432eec7cfb090.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.14 </meta-mingw/log/?h=yocto-5.0.14>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.14 </bitbake/log/?h=yocto-5.0.14>`
- Git Revision: :oe_git:`8dcf084522b9c66a6639b5f117f554fde9b6b45a </bitbake/commit/?id=8dcf084522b9c66a6639b5f117f554fde9b6b45a>`
- Release Artefact: bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a
- sha: 766eda21f2a914276d2723b1d8248be11507f954aef8fc5bb1767f3cb65688dd
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.14/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2

View File

@@ -0,0 +1,219 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.15 (Scarthgap)
------------------------------------------
Users of Alma 9, Rocky 9 and Centos Stream 9 rolling releases have seen obtuse failures in the execution of tar in various tasks after recent host distro updates. These newer versions of tar contain a CVE fix which uses a new glibc call/syscall (openat2). The fix is to update to a newer pseudo version which handles this syscall. This is not included in this stable release but we aim to include it in the next one.
Security Fixes in Yocto-5.0.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-11494`, :cve_nist:`2025-11839` and :cve_nist:`2025-11840`
- cmake-native: Fix :cve_nist:`2025-9301`
- cups: Fix :cve_nist:`2025-58436` and :cve_nist:`2025-61915`
- gnutls: Fix CVE-2025-9820
- go: Fix :cve_nist:`2025-61727` and :cve_nist:`2025-61729`
- go: Update :cve_nist:`2025-58187` patches
- grub: Fix :cve_nist:`2025-54770`, :cve_nist:`2025-61661`, :cve_nist:`2025-61662`,
:cve_nist:`2025-61663` and :cve_nist:`2025-61664`
- libarchive: Fix :cve_nist:`2025-60753`
- libarchive: Fix 2 security issue (https://github.com/libarchive/libarchive/pull/2753 and
https://github.com/libarchive/libarchive/pull/2768)
- libmicrohttpd: Ignore :cve_nist:`2025-59777` and :cve_nist:`2025-62689`
- libpng: Fix :cve_nist:`2025-64505`, :cve_nist:`2025-64506`, :cve_nist:`2025-64720`,
:cve_nist:`2025-65018` and :cve_nist:`2025-66293`
- libsoup: Fix :cve_nist:`2025-12105`
- libssh2: Fix :cve_nist:`2023-48795`
- libxml2: Fix :cve_nist:`2025-7425`
- libxslt: Fix :cve_nist:`2025-11731`
- musl: Fix :cve_nist:`2025-26519`
- python3-urllib3: Fix :cve_nist:`2025-66418` and :cve_nist:`2025-66471`
- python3: Fix :cve_nist:`2025-6075`
- qemu: Fix :cve_nist:`2025-12464`
- rsync: Fix :cve_nist:`2025-10158`
- ruby: Fix :cve_nist:`2025-24294`, :cve_nist:`2025-25186` and :cve_nist:`2025-61594`
- sqlite3: Fix :cve_nist:`2025-7709`
- xserver-xorg: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
- xwayland: Fix :cve_nist:`2025-62229`, :cve_nist:`2025-62230` and :cve_nist:`2025-62231`
Fixes and Feature Changes in Yocto-5.0.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- build-appliance-image: Update to scarthgap head revision
- classes/create-spdx-2.2: Define SPDX_VERSION to 2.2
- cml1.bbclass: use consistent make flags for menuconfig
- cross.bbclass: Propagate dependencies to outhash
- curl: Ensure 'CURL_CA_BUNDLE' from host env is indeed respected
- curl: Use host CA bundle by default for native(sdk) builds
- cve-check: extract extending :term:`CVE_STATUS` to library function
- dev-manual/layers.rst: document "bitbake-layers show-machines"
- dev-manual/new-recipe.rst: replace 'bitbake -e' with 'bitbake-getvar'
- dev-manual/new-recipe.rst: typo, "whith" -> "which"
- dev-manual/new-recipe.rst: update "recipetool -h" output
- dev-manual/sbom.rst: reflect that create-spdx is enabled by default
- dev-manual: debugging: use bitbake-getvar in Viewing Variable Values section
- documentation: link to the Releases page on yoctoproject.org instead of wiki
- glslang: fix compiling with gcc15
- go: add sdk test
- go: extend runtime test
- go: remove duplicate arch map in sdk test
- goarch.bbclass: do not leak :term:`TUNE_FEATURES` into crosssdk task signatures
- kernel-dev: add disable config example
- kernel-dev: common: migrate bitbake -e to bitbake-getvar
- kernel.bbclass: Add task to export kernel configuration to :term:`SPDX`
- libssh2: fix regression in KEX method validation (GH-1553)
- libssh2: upgrade to 1.11.1
- migration-guides: add release notes for 4.0.31 and 5.0.13
- oe/sdk: fix empty SDK manifests
- oeqa/sdk/buildepoxy: skip test in eSDK
- oeqa/selftest: oe-selftest: Add :term:`SPDX` tests for kernel config and :term:`PACKAGECONFIG`
- oeqa: drop unnecessary dependency from go runtime tests
- oeqa: fix package detection in go sdk tests
- overview-manual: migrate to SVG + fix typo
- poky.conf: bump version for 5.0.15
- ref-manual: variables: migrate the :term:`OVERRIDES` note to bitbake-getvar
- ruby: Upgrade to 3.3.10
- rust-target-config: fix nativesdk-libstd-rs build with baremetal
- scripts/install-buildtools: Update to 5.0.14
- spdx30: Provide software_packageUrl field in :term:`SPDX` 3.0 SBOM
- spdx30: fix cve status for patch files in VEX
- spdx30: provide all CVE_STATUS, not only Patched status
- spdx30_tasks: Add support for exporting :term:`PACKAGECONFIG` to :term:`SPDX`
- spdx: Revert "spdx: Update for bitbake changes"
- spdx: extend :term:`CVE_STATUS` variables
- testsdk: allow user to specify which tests to run
- vex.bbclass: add a new class
- vex: fix rootfs manifest
- xserver-xorg: remove redundant patch
Known Issues in Yocto-5.0.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Adarsh Jagadish Kamini
- Aleksandar Nikolic
- Alexander Kanavin
- Benjamin Robin (Schneider Electric)
- Changqing Li
- Daniel Turull
- Deepak Rathore
- Deepesh Varatharajan
- Enrico Jörns
- Gyorgy Sarvari
- Hitendra Prajapati
- Hongxu Jia
- Hugo SIMELIERE
- Jiaying Song
- Kai Kang
- Kamel Bouhara (Schneider Electric)
- Lee Chee Yang
- Martin Jansa
- Mingli Yu
- Moritz Haase
- Osama Abdelkader
- Ovidiu Panait
- Peter Marko
- Praveen Kumar
- Quentin Schulz
- Robert P. J. Day
- Ross Burton
- Steve Sakoman
- Vijay Anusuri
- Walter Werner SCHNEIDER
- Yash Shinde
- Yogita Urade
Repositories / Downloads for Yocto-5.0.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.15 </yocto-docs/log/?h=yocto-5.0.15>`
- Git Revision: :yocto_git:`b0f5cc276639916df197435780b3e94accd4af41 </yocto-docs/commit/?id=b0f5cc276639916df197435780b3e94accd4af41>`
- Release Artefact: yocto-docs-b0f5cc276639916df197435780b3e94accd4af41
- sha: 28ebedfa6471e4ed7583aca0925cd31f4429af3d27ffc0a7e250f7b75404edd7
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/yocto-docs-b0f5cc276639916df197435780b3e94accd4af41.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/yocto-docs-b0f5cc276639916df197435780b3e94accd4af41.tar.bz2
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.15 </poky/log/?h=yocto-5.0.15>`
- Git Revision: :yocto_git:`72983ac391008ebceb45edc7a8f0f6d5f4fe715c </poky/commit/?id=72983ac391008ebceb45edc7a8f0f6d5f4fe715c>`
- Release Artefact: poky-72983ac391008ebceb45edc7a8f0f6d5f4fe715c
- sha: d5336d1ef1dd48b88cb92748c669360901004d458b7786ddc1918da12fef4edd
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/poky-72983ac391008ebceb45edc7a8f0f6d5f4fe715c.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/poky-72983ac391008ebceb45edc7a8f0f6d5f4fe715c.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.15 </openembedded-core/log/?h=yocto-5.0.15>`
- Git Revision: :oe_git:`6988157ad983978ffd6b12bcefedd4deaffdbbd1 </openembedded-core/commit/?id=6988157ad983978ffd6b12bcefedd4deaffdbbd1>`
- Release Artefact: oecore-6988157ad983978ffd6b12bcefedd4deaffdbbd1
- sha: 98a691ce87f9aba57007e91b56bbe0af6d6c8f62aacb68820026478ff8e1f819
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/oecore-6988157ad983978ffd6b12bcefedd4deaffdbbd1.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/oecore-6988157ad983978ffd6b12bcefedd4deaffdbbd1.tar.bz2
meta-yocto
- Repository Location: :yocto_git:`/meta-yocto`
- Branch: :yocto_git:`scarthgap </meta-yocto/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.15 </meta-yocto/log/?h=yocto-5.0.15>`
- Git Revision: :yocto_git:`9bb6e6e8b016a0c9dfe290369a6ed91ef4020535 </meta-yocto/commit/?id=9bb6e6e8b016a0c9dfe290369a6ed91ef4020535>`
- Release Artefact: meta-yocto-9bb6e6e8b016a0c9dfe290369a6ed91ef4020535
- sha: 01778c43673ef11ec5d0fb76bd7c600031f5fc9bcfd9bfa586d5fb6b6babff95
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/meta-yocto-9bb6e6e8b016a0c9dfe290369a6ed91ef4020535.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/meta-yocto-9bb6e6e8b016a0c9dfe290369a6ed91ef4020535.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.15 </meta-mingw/log/?h=yocto-5.0.15>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.15 </bitbake/log/?h=yocto-5.0.15>`
- Git Revision: :oe_git:`8dcf084522b9c66a6639b5f117f554fde9b6b45a </bitbake/commit/?id=8dcf084522b9c66a6639b5f117f554fde9b6b45a>`
- Release Artefact: bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a
- sha: 766eda21f2a914276d2723b1d8248be11507f954aef8fc5bb1767f3cb65688dd
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.15/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.15/bitbake-8dcf084522b9c66a6639b5f117f554fde9b6b45a.tar.bz2

View File

@@ -0,0 +1,226 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.8 (Scarthgap)
-----------------------------------------
Security Fixes in Yocto-5.0.8
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2025-0840`
- curl: Ignore :cve_nist:`2025-0725`
- elfutils: Fix :cve_nist:`2025-1352`, :cve_nist:`2025-1365` and :cve_nist:`2025-1372`
- ffmpeg: Fix :cve_nist:`2024-35365`, :cve_nist:`2024-35369`, :cve_nist:`2024-36613`,
:cve_nist:`2024-36616`, :cve_nist:`2024-36617`, :cve_nist:`2024-36618`, :cve_nist:`2024-36619`,
:cve_nist:`2025-0518`, :cve_nist:`2025-22919`, :cve_nist:`2025-22921` and :cve_nist:`2025-25473`
- glibc: Fix :cve_nist:`2025-0395`
- gnutls: Fix :cve_nist:`2024-12243`
- go: Fix :cve_nist:`2024-45336`, :cve_nist:`2024-45341` and :cve_nist:`2025-22866`
- gstreamer1.0-rtsp-server: Fix :cve_nist:`2024-44331`
- libcap: Fix :cve_nist:`2025-1390`
- libtasn1: Fix :cve_nist:`2024-12133`
- libxml2: Fix :cve_nist:`2024-56171` and :cve_nist:`2025-24928`
- linux-yocto/6.6: Fix :cve_nist:`2024-36476`, :cve_nist:`2024-53179`, :cve_nist:`2024-56582`,
:cve_nist:`2024-56703`, :cve_nist:`2024-57801`, :cve_nist:`2024-57802`, :cve_nist:`2024-57841`,
:cve_nist:`2024-57882`, :cve_nist:`2024-57887`, :cve_nist:`2024-57890`, :cve_nist:`2024-57892`,
:cve_nist:`2024-57895`, :cve_nist:`2024-57896`, :cve_nist:`2024-57900`, :cve_nist:`2024-57901`,
:cve_nist:`2024-57902`, :cve_nist:`2024-57906`, :cve_nist:`2024-57907`, :cve_nist:`2024-57908`,
:cve_nist:`2024-57910`, :cve_nist:`2024-57911`, :cve_nist:`2024-57912`, :cve_nist:`2024-57913`,
:cve_nist:`2024-57916`, :cve_nist:`2024-57922`, :cve_nist:`2024-57925`, :cve_nist:`2024-57926`,
:cve_nist:`2024-57933`, :cve_nist:`2024-57938`, :cve_nist:`2024-57939`, :cve_nist:`2024-57940`,
:cve_nist:`2024-57949`, :cve_nist:`2024-57951`, :cve_nist:`2025-21631`, :cve_nist:`2025-21636`,
:cve_nist:`2025-21637`, :cve_nist:`2025-21638`, :cve_nist:`2025-21639`, :cve_nist:`2025-21640`,
:cve_nist:`2025-21642`, :cve_nist:`2025-21652`, :cve_nist:`2025-21658`, :cve_nist:`2025-21665`,
:cve_nist:`2025-21666`, :cve_nist:`2025-21667`, :cve_nist:`2025-21669`, :cve_nist:`2025-21670`,
:cve_nist:`2025-21671`, :cve_nist:`2025-21673`, :cve_nist:`2025-21674`, :cve_nist:`2025-21675`,
:cve_nist:`2025-21676`, :cve_nist:`2025-21680`, :cve_nist:`2025-21681`, :cve_nist:`2025-21683`,
:cve_nist:`2025-21684`, :cve_nist:`2025-21687`, :cve_nist:`2025-21689`, :cve_nist:`2025-21690`,
:cve_nist:`2025-21692`, :cve_nist:`2025-21694`, :cve_nist:`2025-21697` and :cve_nist:`2025-21699`
- openssh: Fix :cve_nist:`2025-26466`
- openssl: Fix :cve_nist:`2024-9143`, :cve_nist:`2024-12797` and :cve_nist:`2024-13176`
- pyhton3: Fix :cve_nist:`2024-12254` and :cve_nist:`2025-0938`
- subversion: Ignore :cve_nist:`2024-45720`
- u-boot: Fix :cve_nist:`2024-57254`, :cve_nist:`2024-57255`, :cve_nist:`2024-57256`,
:cve_nist:`2024-57257`, :cve_nist:`2024-57258` and :cve_nist:`2024-57259`
- vim: Fix :cve_nist:`2025-22134` and :cve_nist:`2025-24014`
- xwayland: Fix :cve_nist:`2024-9632`, :cve_nist:`2025-26594`, :cve_nist:`2025-26595`,
:cve_nist:`2025-26596`, :cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`,
:cve_nist:`2025-26600` and :cve_nist:`2025-26601`
Fixes in Yocto-5.0.8
~~~~~~~~~~~~~~~~~~~~
- base-files: Drop /bin/sh dependency
- bind: upgrade to 9.18.33
- binutils: File name too long causing failure to open temporary head file in dlltool
- binutils: stable 2.42 branch update
- bitbake: bblayers/query: Fix using "removeprefix" string method
- bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile
- bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars
- bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__
- bitbake: data_smart.py: simple clean up
- build-appliance-image: Update to scarthgap head revision
- ccache.conf: Add include_file_ctime to sloppiness
- cmake: apply parallel build settings to ptest tasks
- contributor-guide/submit-changes: add policy on AI generated code
- dev-manual/building: document the initramfs-framework recipe
- devtool: ide-sdk recommend :term:`DEBUG_BUILD`
- devtool: ide-sdk remove the plugin from eSDK installer
- devtool: ide-sdk sort cmake preset
- devtool: modify support debug-builds
- docs: Add favicon for the documentation html
- docs: Fix typo in standards.md
- docs: Remove all mention of core-image-lsb
- docs: vulnerabilities/classes: remove references to cve-check text format
- files: Amend overlayfs unit descriptions with path information
- files: overlayfs-create-dirs: Improve mount unit dependency
- glibc: stable 2.39 branch updates
- gnupg: upgrade to 2.4.5
- go: upgrade 1.22.12
- icu: remove host references in nativesdk to fix reproducibility
- libtasn1: upgrade to 4.20.0
- libxml2: upgrade to 2.12.10
- linux-yocto/6.6: upgrade to v6.6.75
- meta: Enable '-o pipefail' for the SDK installer
- migration-guides: add release notes for 4.0.24, 4.0.25 and 5.0.7
- oe-selftest: devtool ide-sdk use modify debug-build
- oeqa/sdk/context: fix for gtk3 test failure during do_testsdk
- oeqa/selftest/rust: skip on all MIPS platforms
- openssl: upgrade to 3.2.4
- pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
- poky.conf: add ubuntu2404 to :term:`SANITY_TESTED_DISTROS`
- poky.conf: bump version for 5.0.8
- ppp: Revert lock path to /var/lock
- python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES
- python3: upgrade to 3.12.9
- qemu: Do not define sched_attr with glibc >= 2.41
- ref-manual/faq: add q&a on systemd as default
- ref-manual: Add missing variable :term:`IMAGE_ROOTFS_MAXSIZE`
- ref-manual: don't refer to poky-lsb
- ref-manual: remove OE_IMPORTS
- rust-common.bbclass: soft assignment for RUSTLIB path
- rust: fix for rust multilib sdk configuration
- rust: remove redundant cargo config file
- scripts/install-buildtools: Update to 5.0.7
- sdk-manual: extensible.rst: devtool ide-sdk improve
- sdk-manual: extensible.rst: update devtool ide-sdk
- selftest/rust: correctly form the PATH environment variable
- systemd: add libpcre2 as :term:`RRECOMMENDS` if pcre2 is enabled
- systemd: upgrade to 255.17
- test-manual/ptest: link to common framework ptest classes
- tzcode-native: Fix compiler setting from 2023d version
- tzdata/tzcode-native: upgrade to 2025a
- u-boot: kernel-fitimage: Fix dependency loop if :term:`UBOOT_SIGN_ENABLE` and UBOOT_ENV enabled
- u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior
- uboot-config: fix devtool modify with kernel-fitimage
- vim: upgrade to 9.1.1043
Known Issues in Yocto-5.0.8
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.8
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Adrian Freihofer
- Aleksandar Nikolic
- Alessio Cascone
- Alexander Kanavin
- Alexis Cellier
- Antonin Godard
- Archana Polampalli
- Bruce Ashfield
- Chen Qi
- Deepesh Varatharajan
- Divya Chellam
- Enrico Jörns
- Esben Haabendal
- Etienne Cordonnier
- Fabio Berton
- Guðni Már Gilbert
- Harish Sadineni
- Hitendra Prajapati
- Hongxu Jia
- Jiaying Song
- Joerg Schmidt
- Johannes Schneider
- Khem Raj
- Lee Chee Yang
- Marek Vasut
- Marta Rybczynska
- Moritz Haase
- Oleksandr Hnatiuk
- Pedro Ferreira
- Peter Marko
- Poonam Jadhav
- Priyal Doshi
- Ross Burton
- Simon A. Eugster
- Steve Sakoman
- Vijay Anusuri
- Wang Mingyu
- Weisser, Pascal
Repositories / Downloads for Yocto-5.0.8
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.8 </poky/log/?h=yocto-5.0.8>`
- Git Revision: :yocto_git:`dc4827b3660bc1a03a2bc3b0672615b50e9137ff </poky/commit/?id=dc4827b3660bc1a03a2bc3b0672615b50e9137ff>`
- Release Artefact: poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff
- sha: ace7264e16e18ed02ef0ad2935fa10b5fad2c4de38b2356f4192b38ef2184504
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/poky-dc4827b3660bc1a03a2bc3b0672615b50e9137ff.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.8 </openembedded-core/log/?h=yocto-5.0.8>`
- Git Revision: :oe_git:`cd2b6080a4c0f2ed2c9939ec0b87763aef595048 </openembedded-core/commit/?id=cd2b6080a4c0f2ed2c9939ec0b87763aef595048>`
- Release Artefact: oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048
- sha: 14c7cd5c62a96ceb9c2141164ea0f087fdbaed99ca3e9a722977a3f12d6381f6
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/oecore-cd2b6080a4c0f2ed2c9939ec0b87763aef595048.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.8 </meta-mingw/log/?h=yocto-5.0.8>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.8 </bitbake/log/?h=yocto-5.0.8>`
- Git Revision: :oe_git:`7375d32e8c1af20c51abec4eb3b072b4ca58b239 </bitbake/commit/?id=7375d32e8c1af20c51abec4eb3b072b4ca58b239>`
- Release Artefact: bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239
- sha: 13dffbc162c5b6e2c95fa72936a430b9a542d52d81d502a5d0afc592fbf4a16b
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.8/bitbake-7375d32e8c1af20c51abec4eb3b072b4ca58b239.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.8 </yocto-docs/log/?h=yocto-5.0.8>`
- Git Revision: :yocto_git:`7d3cce5b962ca9f73b29affceb7ebc6710627739 </yocto-docs/commit/?id=7d3cce5b962ca9f73b29affceb7ebc6710627739>`

View File

@@ -0,0 +1,206 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for Yocto-5.0.9 (Scarthgap)
-----------------------------------------
Security Fixes in Yocto-5.0.9
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- binutils: Fix :cve_nist:`2024-57360`, :cve_nist:`2025-1176`, :cve_nist:`2025-1178` and
:cve_nist:`2025-1181`
- expat: Fix :cve_nist:`2024-8176`
- freetype: Fix :cve_nist:`2025-27363`
- ghostscript: Fix :cve_nist:`2025-27830`, :cve_nist:`2025-27831`, :cve_nist:`2025-27832`,
:cve_nist:`2025-27833`, :cve_nist:`2025-27833`, :cve_nist:`2025-27834`, :cve_nist:`2025-27835`
and :cve_nist:`2025-27836`
- go: fix :cve_nist:`2025-22870` and :cve_nist:`2025-22871`
- grub: Fix :cve_nist:`2024-45781`, :cve_nist:`2024-45774`, :cve_nist:`2024-45775`,
:cve_nist:`2024-45776`, :cve_nist:`2024-45777`, :cve_nist:`2024-45778`, :cve_nist:`2024-45779`,
:cve_nist:`2024-45780`, :cve_nist:`2024-45782`, :cve_nist:`2024-45783`, :cve_nist:`2024-56737`,
:cve_nist:`2025-0622`, :cve_nist:`2025-0624`, :cve_nist:`2025-0677`, :cve_nist:`2025-0678`,
:cve_nist:`2025-0684`, :cve_nist:`2025-0685`, :cve_nist:`2025-0686`, :cve_nist:`2025-0689`,
:cve_nist:`2025-0690`, :cve_nist:`2025-1118` and :cve_nist:`2025-1125`
- libarchive: Fix :cve_nist:`2024-20696`, :cve_nist:`2024-48957`, :cve_nist:`2024-48958`,
:cve_nist:`2025-1632` and :cve_nist:`2025-25724`
- libxslt: Fix :cve_nist:`2024-24855` and :cve_nist:`2024-55549`
- linux-yocto/6.6: Fix :cve_nist:`2024-54458`, :cve_nist:`2024-57834`, :cve_nist:`2024-57973`,
:cve_nist:`2024-57978`, :cve_nist:`2024-57979`, :cve_nist:`2024-57980`, :cve_nist:`2024-57981`,
:cve_nist:`2024-57984`, :cve_nist:`2024-57996`, :cve_nist:`2024-57997`, :cve_nist:`2024-58002`,
:cve_nist:`2024-58005`, :cve_nist:`2024-58007`, :cve_nist:`2024-58010`, :cve_nist:`2024-58011`,
:cve_nist:`2024-58013`, :cve_nist:`2024-58017`, :cve_nist:`2024-58020`, :cve_nist:`2024-58034`,
:cve_nist:`2024-58052`, :cve_nist:`2024-58055`, :cve_nist:`2024-58058`, :cve_nist:`2024-58063`,
:cve_nist:`2024-58068`, :cve_nist:`2024-58069`, :cve_nist:`2024-58070`, :cve_nist:`2024-58071`,
:cve_nist:`2024-58076`, :cve_nist:`2024-58080`, :cve_nist:`2024-58083`, :cve_nist:`2024-58088`,
:cve_nist:`2025-21700`, :cve_nist:`2025-21703`, :cve_nist:`2025-21707`, :cve_nist:`2025-21711`,
:cve_nist:`2025-21715`, :cve_nist:`2025-21716`, :cve_nist:`2025-21718`, :cve_nist:`2025-21726`,
:cve_nist:`2025-21727`, :cve_nist:`2025-21731`, :cve_nist:`2025-21735`, :cve_nist:`2025-21736`,
:cve_nist:`2025-21741`, :cve_nist:`2025-21742`, :cve_nist:`2025-21743`, :cve_nist:`2025-21744`,
:cve_nist:`2025-21745`, :cve_nist:`2025-21748`, :cve_nist:`2025-21749`, :cve_nist:`2025-21753`,
:cve_nist:`2025-21756`, :cve_nist:`2025-21759`, :cve_nist:`2025-21760`, :cve_nist:`2025-21761`,
:cve_nist:`2025-21762`, :cve_nist:`2025-21763`, :cve_nist:`2025-21764`, :cve_nist:`2025-21773`,
:cve_nist:`2025-21775`, :cve_nist:`2025-21776`, :cve_nist:`2025-21779`, :cve_nist:`2025-21780`,
:cve_nist:`2025-21782`, :cve_nist:`2025-21783`, :cve_nist:`2025-21785`, :cve_nist:`2025-21787`,
:cve_nist:`2025-21789`, :cve_nist:`2025-21790`, :cve_nist:`2025-21791`, :cve_nist:`2025-21792`,
:cve_nist:`2025-21793`, :cve_nist:`2025-21796`, :cve_nist:`2025-21811`, :cve_nist:`2025-21812`,
:cve_nist:`2025-21814`, :cve_nist:`2025-21820`, :cve_nist:`2025-21844`, :cve_nist:`2025-21846`,
:cve_nist:`2025-21847`, :cve_nist:`2025-21848`, :cve_nist:`2025-21853`, :cve_nist:`2025-21854`,
:cve_nist:`2025-21855`, :cve_nist:`2025-21856`, :cve_nist:`2025-21857`, :cve_nist:`2025-21858`,
:cve_nist:`2025-21859`, :cve_nist:`2025-21862`, :cve_nist:`2025-21863`, :cve_nist:`2025-21864`,
:cve_nist:`2025-21865`, :cve_nist:`2025-21866`, :cve_nist:`2025-21867`, :cve_nist:`2025-21887`,
:cve_nist:`2025-21891`, :cve_nist:`2025-21898`, :cve_nist:`2025-21904`, :cve_nist:`2025-21905`,
:cve_nist:`2025-21908`, :cve_nist:`2025-21912`, :cve_nist:`2025-21915`, :cve_nist:`2025-21917`,
:cve_nist:`2025-21918`, :cve_nist:`2025-21919`, :cve_nist:`2025-21920`, :cve_nist:`2025-21922`,
:cve_nist:`2025-21928`, :cve_nist:`2025-21934`, :cve_nist:`2025-21936`, :cve_nist:`2025-21937`,
:cve_nist:`2025-21941`, :cve_nist:`2025-21943`, :cve_nist:`2025-21945`, :cve_nist:`2025-21947`,
:cve_nist:`2025-21948`, :cve_nist:`2025-21951`, :cve_nist:`2025-21957`, :cve_nist:`2025-21959`,
:cve_nist:`2025-21962`, :cve_nist:`2025-21963`, :cve_nist:`2025-21964`, :cve_nist:`2025-21966`,
:cve_nist:`2025-21967`, :cve_nist:`2025-21968`, :cve_nist:`2025-21969`, :cve_nist:`2025-21979`,
:cve_nist:`2025-21980`, :cve_nist:`2025-21981`, :cve_nist:`2025-21991` and :cve_nist:`2025-21993`
- mpg123: Fix :cve_nist:`2024-10573`
- ofono: Fix :cve_nist:`2024-7537`
- openssh: Fix :cve_nist:`2025-26465`
- puzzles: Ignore :cve_nist:`2024-13769`, :cve_nist:`2024-13770` and :cve_nist:`2025-0837`
- qemu: Ignore :cve_nist:`2023-1386`
- ruby: Fix :cve_nist:`2025-27219` and :cve_nist:`2025-27220`
- rust-cross-canadian: Ignore :cve_nist:`2024-43402`
- vim: Fix :cve_nist:`2025-1215`, :cve_nist:`2025-26603`, :cve_nist:`2025-27423` and
:cve_nist:`2025-29768`
- xserver-xorg: Fix :cve_nist:`2025-26594`, :cve_nist:`2025-26595`, :cve_nist:`2025-26596`,
:cve_nist:`2025-26597`, :cve_nist:`2025-26598`, :cve_nist:`2025-26599`, :cve_nist:`2025-26600`
and :cve_nist:`2025-26601`
- xz: Fix :cve_nist:`2025-31115`
Fixes in Yocto-5.0.9
~~~~~~~~~~~~~~~~~~~~
- babeltrace2: extend to nativesdk
- babeltrace: extend to nativesdk
- bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events
- bitbake: utils: Add signal blocking for lock_timeout
- bitbake: utils: Print information about lock issue before exiting
- bitbake: utils: Tweak lock_timeout logic
- build-appliance-image: Update to scarthgap head revision
- cve-check.bbclass: Mitigate symlink related error
- cve-update-nvd2-native: add workaround for json5 style list
- cve-update-nvd2-native: handle missing vulnStatus
- gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian
- gcc: unify cleanup of include-fixed, apply to cross-canadian
- ghostscript: upgrade to 10.05.0
- grub: backport strlcpy function
- grub: drop obsolete CVE statuses
- icu: Adjust ICU_DATA_DIR path on big endian targets
- kernel-arch: add macro-prefix-map in KERNEL_CC
- libarchive: upgrade to 3.7.9
- libxslt: upgrade to 1.1.43
- linux-yocto/6.6: update to v6.6.84
- mc: set ac_cv_path_ZIP to avoid buildpaths QA issues
- mpg123: upgrade to 1.32.10
- nativesdk-libtool: sanitize the script, remove buildpaths
- openssl: rewrite ptest installation
- overview-manual/concepts: remove :term:`PR` from the build dir list
- patch.py: set commituser and commitemail for addNote
- poky.conf: bump version for 5.0.9
- vim: Upgrade to 9.1.1198
- xserver-xf86-config: add a configuration fragment to disable screen blanking
- xserver-xf86-config: remove obsolete configuration files
- xserver-xorg: upgrade to 21.1.16
- xz: upgrade to 5.4.7
- yocto-uninative: Update to 4.7 for glibc 2.41
Known Issues in Yocto-5.0.9
~~~~~~~~~~~~~~~~~~~~~~~~~~~
- N/A
Contributors to Yocto-5.0.9
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks to the following people who contributed to this release:
- Antonin Godard
- Archana Polampalli
- Ashish Sharma
- Bruce Ashfield
- Changqing Li
- Denys Dmytriyenko
- Divya Chellam
- Hitendra Prajapati
- Madhu Marri
- Makarios Christakis
- Martin Jansa
- Michael Halstead
- Niko Mauno
- Oleksandr Hnatiuk
- Peter Marko
- Richard Purdie
- Ross Burton
- Sana Kazi
- Stefan Mueller-Klieser
- Steve Sakoman
- Vijay Anusuri
- Virendra Thakur
- Vishwas Udupa
- Wang Mingyu
- Zhang Peng
Repositories / Downloads for Yocto-5.0.9
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
poky
- Repository Location: :yocto_git:`/poky`
- Branch: :yocto_git:`scarthgap </poky/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.9 </poky/log/?h=yocto-5.0.9>`
- Git Revision: :yocto_git:`bab0f9f62af9af580744948dd3240f648a99879a </poky/commit/?id=bab0f9f62af9af580744948dd3240f648a99879a>`
- Release Artefact: poky-bab0f9f62af9af580744948dd3240f648a99879a
- sha: ee6811d9fb6c4913e19d6e3569f1edc8ccd793779b237520596506446a6b4531
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/poky-bab0f9f62af9af580744948dd3240f648a99879a.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/poky-bab0f9f62af9af580744948dd3240f648a99879a.tar.bz2
openembedded-core
- Repository Location: :oe_git:`/openembedded-core`
- Branch: :oe_git:`scarthgap </openembedded-core/log/?h=scarthgap>`
- Tag: :oe_git:`yocto-5.0.9 </openembedded-core/log/?h=yocto-5.0.9>`
- Git Revision: :oe_git:`04038ecd1edd6592b826665a2b787387bb7074fa </openembedded-core/commit/?id=04038ecd1edd6592b826665a2b787387bb7074fa>`
- Release Artefact: oecore-04038ecd1edd6592b826665a2b787387bb7074fa
- sha: 6e201a4b486dfbdfcb7e96d83b962a205ec4764db6ad0e34bd623db18910eddb
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/oecore-04038ecd1edd6592b826665a2b787387bb7074fa.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/oecore-04038ecd1edd6592b826665a2b787387bb7074fa.tar.bz2
meta-mingw
- Repository Location: :yocto_git:`/meta-mingw`
- Branch: :yocto_git:`scarthgap </meta-mingw/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.9 </meta-mingw/log/?h=yocto-5.0.9>`
- Git Revision: :yocto_git:`bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f </meta-mingw/commit/?id=bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f>`
- Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f
- sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2
bitbake
- Repository Location: :oe_git:`/bitbake`
- Branch: :oe_git:`2.8 </bitbake/log/?h=2.8>`
- Tag: :oe_git:`yocto-5.0.9 </bitbake/log/?h=yocto-5.0.9>`
- Git Revision: :oe_git:`696c2c1ef095f8b11c7d2eff36fae50f58c62e5e </bitbake/commit/?id=696c2c1ef095f8b11c7d2eff36fae50f58c62e5e>`
- Release Artefact: bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e
- sha: fc83f879cd6dd14b9b7eba0161fec23ecc191fed0fb00556ba729dceef6c145f
- Download Locations:
https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.9/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2
https://mirrors.kernel.org/yocto/yocto/yocto-5.0.9/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2
yocto-docs
- Repository Location: :yocto_git:`/yocto-docs`
- Branch: :yocto_git:`scarthgap </yocto-docs/log/?h=scarthgap>`
- Tag: :yocto_git:`yocto-5.0.9 </yocto-docs/log/?h=yocto-5.0.9>`
- Git Revision: :yocto_git:`56db4fd81f6235428bef9e46a61c11ca0ba89733 </yocto-docs/commit/?id=56db4fd81f6235428bef9e46a61c11ca0ba89733>`

View File

@@ -98,7 +98,7 @@ files, and how to package the compiled output.
The term "package" is sometimes used to refer to recipes. However, since
the word "package" is used for the packaged output from the OpenEmbedded
build system (i.e. ``.ipk`` or ``.deb`` files), this document avoids
build system (i.e. ``.ipk``, ``.deb`` or ``.rpm`` files), this document avoids
using the term "package" when referring to recipes.
Classes
@@ -162,7 +162,7 @@ The following diagram represents the high-level workflow of a build. The
remainder of this section expands on the fundamental input, output,
process, and metadata logical blocks that make up the workflow.
.. image:: figures/YP-flow-diagram.png
.. image:: svg/yp-flow-diagram.*
:width: 100%
In general, the build's workflow consists of several functional areas:
@@ -256,7 +256,7 @@ development environment.
.. note::
The
scripts/oe-setup-builddir
``scripts/oe-setup-builddir``
script uses the
``$TEMPLATECONF``
variable to determine which sample configuration files to locate.
@@ -352,7 +352,7 @@ layers the build system uses to further control the build. These layers
provide Metadata for the software, machine, and policies.
In general, there are three types of layer input. You can see them below
the "User Configuration" box in the `general workflow
the "User Configuration" box in the :ref:`general workflow
figure <overview-manual/concepts:openembedded build system concepts>`:
- *Metadata (.bb + Patches):* Software layers containing
@@ -420,16 +420,17 @@ build.
Distro Layer
~~~~~~~~~~~~
The distribution layer provides policy configurations for your
A distribution layer provides policy configurations for your
distribution. Best practices dictate that you isolate these types of
configurations into their own layer. Settings you provide in
``conf/distro/distro.conf`` override similar settings that BitBake finds
in your ``conf/local.conf`` file in the :term:`Build Directory`.
The following list provides some explanation and references for what you
typically find in the distribution layer:
typically find in a distribution layer:
- *classes:* Class files (``.bbclass``) hold common functionality that
- *classes*, *classes-global*, *classes-recipe:* Class files (``.bbclass``)
hold common functionality that
can be shared among recipes in the distribution. When your recipes
inherit a class, they take on the settings and functions for that
class. You can read more about class files in the
@@ -441,7 +442,7 @@ typically find in the distribution layer:
(``conf/distro/distro.conf``), and any distribution-wide include
files.
- *recipes-*:* Recipes and append files that affect common
- *recipes-\*:* Recipes and append files that affect common
functionality across the distribution. This area could include
recipes and append files to add distribution-specific configuration,
initialization scripts, custom image recipes, and so forth. Examples
@@ -454,7 +455,7 @@ typically find in the distribution layer:
BSP Layer
~~~~~~~~~
The BSP Layer provides machine configurations that target specific
A BSP layer provides machine configurations that target specific
hardware. Everything in this layer is specific to the machine for which
you are building the image or the SDK. A common structure or form is
defined for BSP layers. You can learn more about this structure in the
@@ -465,7 +466,7 @@ defined for BSP layers. You can learn more about this structure in the
In order for a BSP layer to be considered compliant with the Yocto
Project, it must meet some structural requirements.
The BSP Layer's configuration directory contains configuration files for
A BSP layer's configuration directory contains configuration files for
the machine (``conf/machine/machine.conf``) and, of course, the layer
(``conf/layer.conf``).
@@ -477,18 +478,18 @@ formfactors, graphics support systems, and so forth.
.. note::
While the figure shows several
recipes-\*
``recipes-*``
directories, not all these directories appear in all BSP layers.
Software Layer
~~~~~~~~~~~~~~
The software layer provides the Metadata for additional software
A software layer provides the Metadata for additional software
packages used during the build. This layer does not include Metadata
that is specific to the distribution or the machine, which are found in
their respective layers.
This layer contains any recipes, append files, and patches, that your
This layer contains any recipes, append files, and patches that your
project needs.
Sources
@@ -560,9 +561,8 @@ source tree used by the group).
The canonical method through which to include a local project is to use the
:ref:`ref-classes-externalsrc` class to include that local project. You use
either the ``local.conf`` or a recipe's append file to override or set the
recipe to point to the local directory on your disk to pull in the whole
source tree.
either ``local.conf`` or a recipe's append file to override or set the
recipe to point to the local directory from which to fetch the source.
Source Control Managers (Optional)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -736,9 +736,6 @@ following list describe the :term:`Build Directory`'s hierarchy:
- :term:`PV`: The version of the
recipe used to build the package.
- :term:`PR`: The revision of the
recipe used to build the package.
- :term:`S`: Contains the unpacked source
files for a given recipe.
@@ -956,7 +953,7 @@ package.
For more information on the ``oe-pkgdata-util`` utility, see the section
:ref:`dev-manual/debugging:Viewing Package Information with
\`\`oe-pkgdata-util\`\`` of the Yocto Project Development Tasks Manual.
``oe-pkgdata-util``` of the Yocto Project Development Tasks Manual.
To add a custom package variant of the ``${PN}`` recipe named
``${PN}-extra`` (name is arbitrary), one can add it to the
@@ -2204,7 +2201,7 @@ require root privileges, the fact that some earlier steps ran in a fake
root environment does not cause problems.
The capability to run tasks in a fake root environment is known as
"`fakeroot <http://man.he.net/man1/fakeroot>`__", which is derived from
":manpage:`fakeroot <fakeroot(1)>`", which is derived from
the BitBake keyword/variable flag that requests a fake root environment
for a task.
@@ -2398,8 +2395,8 @@ The contents of ``sayhello_0.1.bb`` are::
S = "${WORKDIR}/git"
do_install(){
install -d ${D}/usr/bin
install -m 0700 sayhello ${D}/usr/bin
install -d ${D}${bindir}
install -m 0700 sayhello ${D}${bindir}
}
After placing the recipes in a custom layer we can run ``bitbake sayhello``

Binary file not shown.

Before

Width:  |  Height:  |  Size: 186 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 20 KiB

View File

@@ -0,0 +1,172 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
width="164.765mm"
height="72.988113mm"
viewBox="0 0 164.765 72.988114"
version="1.1"
id="svg1"
xml:space="preserve"
inkscape:version="1.4.2 (ebf0e940d0, 2025-05-08)"
sodipodi:docname="key-dev-elements.svg"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"><sodipodi:namedview
id="namedview1"
pagecolor="#ffffff"
bordercolor="#000000"
borderopacity="0.25"
inkscape:showpageshadow="false"
inkscape:pageopacity="0.0"
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
inkscape:document-units="mm"
inkscape:zoom="1"
inkscape:cx="341.5"
inkscape:cy="-31.5"
inkscape:window-width="2560"
inkscape:window-height="1440"
inkscape:window-x="0"
inkscape:window-y="0"
inkscape:window-maximized="0"
inkscape:current-layer="layer2"
showborder="false"
borderlayer="false"
inkscape:antialias-rendering="true"
showguides="true" /><defs
id="defs1" /><g
inkscape:groupmode="layer"
id="layer2"
inkscape:label="Layer "
style="display:inline"
transform="translate(-20.664242,-129.6793)"><rect
style="display:inline;fill:#f1e9cc;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect1"
width="164.112"
height="54.273098"
x="20.990742"
y="130.0058"
ry="0"
inkscape:label="yp-rect" /><rect
style="display:inline;fill:#f3d770;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect2"
width="101.45864"
height="41.151588"
x="28.1292"
y="137.10953"
inkscape:label="poky-rect" /><rect
style="display:inline;fill:#c0ebf5;fill-opacity:1;stroke:#6d8eb4;stroke-width:0.653;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-opacity:1;paint-order:fill markers stroke"
id="rect3"
width="50.652737"
height="53.04562"
x="35.516178"
y="149.29529"
inkscape:label="oe-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3"
inkscape:label="poky-title"
transform="matrix(0.90889596,0,0,0.81399719,-26.072941,39.399474)"><tspan
x="136.38763"
y="137.69727"
id="tspan2">Poky</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3-8"
inkscape:label="oe-title"
transform="matrix(0.90889596,0,0,0.81399719,-78.327995,83.175189)"><tspan
x="136.38763"
y="137.69727"
id="tspan4">OpenEmbedded</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:4.23333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;white-space:pre;inline-size:46.7487;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="136.38763"
y="137.69727"
id="text3-0"
inkscape:label="yp-title"
transform="matrix(0.8469291,0,0,0.81399719,21.497595,28.033837)"><tspan
x="136.38763"
y="137.69727"
id="tspan5">YOCTO PROJECT (YP)</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="137.19444"
y="150.50006"
id="text4"
transform="scale(1.0050579,0.9949676)"
inkscape:label="yp-text"><tspan
sodipodi:role="line"
id="tspan3"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="150.50006">Umbrella Open Source Project</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="154.2294"
id="tspan6">that Builds and Maintains</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="157.95874"
id="tspan7">Validated Open Source Tools and</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="161.68808"
id="tspan8">Components Associated with</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.98347px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="137.19444"
y="165.4174"
id="tspan9">Embedded Linux</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="90.582634"
y="159.10139"
id="text10"
transform="scale(1.0018079,0.9981954)"
inkscape:label="poky-text"><tspan
sodipodi:role="line"
id="tspan10"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="159.10139">Yocto Project Open</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="162.81487"
id="tspan11">Source Reference</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:2.97078px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="90.582634"
y="166.52835"
id="tspan12">Embedded Distribution</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:start;writing-mode:lr-tb;direction:ltr;text-anchor:start;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:7.4;stroke-dasharray:none;stroke-opacity:1;paint-order:fill markers stroke"
x="40.36692"
y="160.98824"
id="text13"
transform="scale(0.99784993,1.0021547)"
inkscape:label="oe-text"><tspan
sodipodi:role="line"
id="tspan13"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="160.98824">Open Source Build Engine</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="164.7592"
id="tspan14">and YP-Compatible Metadata</tspan><tspan
sodipodi:role="line"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:3.01677px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;stroke-width:0"
x="40.36692"
y="168.53017"
id="tspan15">for Embedded Linux</tspan></text></g></svg>

After

Width:  |  Height:  |  Size: 12 KiB

View File

@@ -0,0 +1,950 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Generator: Adobe Illustrator 13.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 14948) -->
<svg
version="1.1"
id="Layer_1"
x="0px"
y="0px"
width="760.50098"
height="352.582"
viewBox="0 0 760.50095 352.582"
enable-background="new 0 0 758.189 424.276"
xml:space="preserve"
sodipodi:docname="yp-flow-diagram.svg"
inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"><defs
id="defs86">
</defs><sodipodi:namedview
id="namedview86"
pagecolor="#ffffff"
bordercolor="#000000"
borderopacity="0.25"
inkscape:showpageshadow="2"
inkscape:pageopacity="0.0"
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
inkscape:zoom="2.8284271"
inkscape:cx="296.80807"
inkscape:cy="212.83914"
inkscape:window-width="1906"
inkscape:window-height="934"
inkscape:window-x="0"
inkscape:window-y="0"
inkscape:window-maximized="0"
inkscape:current-layer="Layer_1" />
<g
id="g17"
transform="matrix(1,0,0,1.0035497,-2.0824824,-11.037238)"><rect
style="opacity:1;fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11"
width="484.25"
height="249"
x="90"
y="112.5" /><rect
style="fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8"
width="12"
height="12"
x="507.56818"
y="-301.10004"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1"
width="12"
height="12"
x="361.46231"
y="-89.463524"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-1"
width="12"
height="12"
x="389.40585"
y="-60.842598"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-1-0"
width="12"
height="12"
x="416.47607"
y="-33.116081"
ry="0"
transform="rotate(44.313856)" /></g><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-9"
width="87"
height="216"
x="193.91776"
y="119.24599" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-8-1-4"
width="12"
height="12"
x="487.27533"
y="-296.15897"
ry="0"
transform="rotate(44.313856)" /><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-9-3"
width="85.75"
height="219.75"
x="470.16751"
y="119.49599" /><g
id="g2"
transform="translate(2.3119996,-71.694)">
<g
id="g1">
<polygon
fill="#00b6de"
points="703.77,340.194 712.852,349.277 721.934,340.194 758.189,340.194 758.189,256.861 723.582,256.861 713.171,267.274 702.758,256.861 628.582,256.861 618.171,267.274 607.758,256.861 561.523,256.861 561.523,340.194 609.104,340.194 618.186,349.277 627.268,340.194 "
id="polygon1" />
</g>
</g>
<g
id="g4"
transform="translate(2.3119996,-71.694)">
<g
id="g3">
<polygon
fill="#e6e6e6"
points="712.837,278.274 707.221,272.658 676.557,272.658 676.557,333.657 706.983,333.657 713.055,339.729 719.128,333.657 751.557,333.657 751.557,272.658 718.452,272.658 "
id="polygon2" />
</g>
</g>
<g
id="g6"
transform="translate(2.3119996,-71.694)">
<g
id="g5">
<polygon
fill="#e6e6e6"
points="618.171,278.274 611.555,271.658 581.558,271.658 581.558,332.657 611.983,332.657 618.056,338.729 624.128,332.657 656.558,332.657 656.558,271.658 624.786,271.658 "
id="polygon4" />
</g>
</g>
<g
id="g8"
transform="translate(2.3119996,-71.694)"
style="fill:#000080">
<g
id="g7"
style="fill:#000080">
<polygon
fill="#ed1849"
points="722.166,349.277 712.504,358.941 702.84,349.277 670.523,349.277 670.523,424.276 757.523,424.276 757.523,349.277 "
id="polygon6"
style="fill:#000080" />
</g>
</g>
<g
id="g10"
transform="translate(2.3119996,-71.694)"
style="fill:#000080">
<g
id="g9"
style="fill:#000080">
<polygon
fill="#ed1849"
points="628.371,348.611 618.043,358.941 607.713,348.611 575.523,348.611 575.523,423.61 662.523,423.61 662.523,348.611 "
id="polygon8"
style="fill:#000080" />
</g>
</g>
<g
id="g14"
transform="translate(2.3119996,-71.694)">
<g
id="g13">
<polygon
fill="#c1d82f"
points="575.428,217.35 575.428,250.526 610.09,250.526 618.171,258.607 626.251,250.526 705.09,250.526 713.171,258.607 721.251,250.526 757.427,250.526 757.427,173.527 575.428,173.527 575.428,199.703 584.252,208.525 "
id="polygon12" />
</g>
</g>
<g
id="g26"
transform="translate(0.4155534,-73.944)">
<g
id="g25">
<polygon
fill="#4a4a30"
points="177.974,133.944 125.111,133.944 118.043,141.013 110.974,133.944 86.834,133.944 86.834,166.944 178.263,166.944 184.834,173.514 191.403,166.944 281.833,166.944 281.833,133.944 258.611,133.944 251.543,141.013 244.474,133.944 192.111,133.944 185.043,141.013 "
id="polygon24" />
</g>
</g>
<g
id="g28"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g27">
<polygon
fill="#e6e6e6"
points="330.188,290.202 330.188,296.444 511.188,296.444 511.188,289.015 517.259,282.942 511.188,276.87 511.188,268.444 330.188,268.444 330.188,277.683 336.447,283.942 "
id="polygon26" />
</g>
</g>
<g
id="g30"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g29">
<polygon
fill="#e6e6e6"
points="330.188,251.536 330.188,257.944 511.188,257.944 511.188,250.515 517.259,244.442 511.188,238.37 511.188,229.944 330.188,229.944 330.188,239.016 336.447,245.276 "
id="polygon28" />
</g>
</g>
<g
id="g32"
transform="matrix(0.93986241,0,0,1,-22.331287,-17.694)">
<g
id="g31">
<polygon
fill="#e6e6e6"
points="330.188,211.18 330.188,218.444 511.188,218.444 511.188,211.015 517.259,204.942 511.188,198.87 511.188,190.444 330.188,190.444 330.188,199.372 336.092,205.276 "
id="polygon30" />
</g>
</g>
<g
id="g34"
transform="translate(-40.188,-71.694)">
<g
id="g33">
<polygon
fill="#e6e6e6"
points="144.188,342.944 144.188,406.944 225.188,406.944 225.188,381.515 231.259,375.442 225.188,369.37 225.188,342.944 190.445,342.944 184.043,349.348 177.639,342.944 "
id="polygon32" />
</g>
</g>
<g
id="g36"
transform="translate(-40.188,-71.694)">
<g
id="g35">
<polygon
fill="#e6e6e6"
points="177.618,330.944 184.188,337.514 190.757,330.944 225.188,330.944 225.188,266.944 190.778,266.944 183.71,274.014 176.64,266.944 144.188,266.944 144.188,330.944 "
id="polygon34" />
</g>
</g>
<g
id="g38"
transform="translate(-40.188,-71.694)">
<g
id="g37">
<polygon
fill="#e6e6e6"
points="177.118,254.944 183.688,261.514 190.257,254.944 224.688,254.944 224.688,190.944 191.445,190.944 184.376,198.014 177.306,190.944 143.688,190.944 143.688,254.944 "
id="polygon36" />
</g>
</g>
<g
id="g40"
transform="matrix(1,0,0,0.86327911,0.062,-77.645148)">
<g
id="g39">
<polygon
fill="#4a4a30"
points="81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 87.259,254.109 81.188,248.037 "
id="polygon38" />
</g>
</g><g
id="g40-0"
transform="matrix(1,0,0,0.86327911,0.312,-18.368819)">
<g
id="g39-6">
<polygon
fill="#4a4a30"
points="87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 "
id="polygon38-4" />
</g>
</g><g
id="g40-0-2"
transform="matrix(1,0,0,0.86327911,0.062,40.907511)">
<g
id="g39-6-5">
<polygon
fill="#4a4a30"
points="87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 81.188,285.61 81.188,260.181 "
id="polygon38-4-8" />
</g>
</g><g
id="g40-0-28"
transform="matrix(1,0,0,0.86327911,-0.188,100.18384)">
<g
id="g39-6-4">
<polygon
fill="#4a4a30"
points="81.188,285.61 81.188,260.181 87.259,254.109 81.188,248.037 81.188,221.611 0.188,221.611 0.188,285.61 "
id="polygon38-4-7" />
</g>
</g>
<g
id="g42"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g41"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="178.618,123.944 185.188,130.514 191.757,123.944 215.188,123.944 215.188,71.944 154.188,71.944 154.188,123.944 "
id="polygon40"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="126.062"
y="75.334"
fill="none"
width="116.666"
height="21.333"
id="rect42" />
<text
fill="#ffffff"
font-family="MyriadPro-Regular"
font-size="12px"
id="text42"
x="139.47949"
y="82.440079"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Source Materials</text>
<rect
x="155.41699"
y="10.834001"
fill="none"
width="58.666"
height="40.667"
id="rect43" />
<text
id="text44"
x="190.00726"
y="29.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:49.6985"
transform="translate(-5.5244746,-7.8775879)"
xml:space="preserve"><tspan
x="190.00726"
y="29.10741"
id="tspan1">Local<tspan
y="29.10741"
id="tspan2"> </tspan></tspan><tspan
x="190.00726"
y="42.440787"
id="tspan3">Projects</tspan></text>
<g
id="g45"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g44"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="245.118,123.944 251.688,130.514 258.257,123.944 281.688,123.944 281.688,71.944 220.688,71.944 220.688,123.944 "
id="polygon44"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="221.91699"
y="7.8340006"
fill="none"
width="58.666"
height="40.667"
id="rect45" />
<text
id="text47"
x="258.17291"
y="26.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:56.5275;fill:#000000"
transform="translate(-6.4360358,-3.6326896)"
xml:space="preserve"><tspan
x="258.17291"
y="26.10741"
id="tspan4">SCMs<tspan
y="26.10741"
id="tspan5"> </tspan></tspan><tspan
x="258.17291"
y="39.440787"
id="tspan6">(optional)</tspan></text>
<g
id="g48"
transform="translate(0.062,-71.944)"
style="fill:#ff7f2a">
<g
id="g47"
style="fill:#ff7f2a">
<polygon
fill="#7e8082"
points="111.618,123.944 118.188,130.514 124.757,123.944 148.188,123.944 148.188,71.944 87.188,71.944 87.188,123.944 "
id="polygon47"
style="fill:#ff7f2a" />
</g>
</g>
<rect
x="88.417007"
y="10.834001"
fill="none"
width="58.666"
height="40.667"
id="rect48" />
<text
id="text49"
x="125.51399"
y="29.10741"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:64.823"
transform="translate(-8.2169997,-13.75401)"
xml:space="preserve"><tspan
x="125.51399"
y="29.10741"
id="tspan7">Upstream<tspan
y="29.10741"
id="tspan8"> </tspan></tspan><tspan
x="125.51399"
y="42.440787"
id="tspan9">Project<tspan
y="42.440787"
id="tspan10"> </tspan></tspan><tspan
x="125.51399"
y="55.774165"
id="tspan11">Releases</tspan></text>
<rect
x="115.167"
y="137.084"
fill="none"
width="58.666"
height="40.667"
id="rect49" />
<text
id="text51"
x="128.34723"
y="147.37112"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="128.34723"
y="147.37112"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan50"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Source </tspan><tspan
x="123.54125"
y="161.77113"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan51"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Fetching</tspan></text>
<rect
x="115.167"
y="215.08401"
fill="none"
width="58.666"
height="40.666"
id="rect51" />
<text
id="text53"
x="131.82678"
y="224.31099"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="131.82678"
y="224.31099"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan52"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Patch </tspan><tspan
x="117.00081"
y="238.70999"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan53"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Application</tspan></text>
<rect
x="107.167"
y="279.08401"
fill="none"
width="74.166"
height="69.237"
id="rect53" />
<text
id="text57"
x="149.00055"
y="297.35791"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:74.8743"
transform="translate(-3.496696,4.953096)"
xml:space="preserve"><tspan
x="149.00055"
y="297.35791"
id="tspan12">Configuration /<tspan
y="297.35791"
id="tspan13"> </tspan></tspan><tspan
x="149.00055"
y="310.69127"
id="tspan14">Compile</tspan></text>
<rect
x="201.16699"
y="184.084"
fill="none"
width="74.166"
height="89.237"
id="rect57" />
<text
id="text63"
x="221.86859"
y="192.60429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="221.86859"
y="192.60429"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan58"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Output </tspan><tspan
x="211.42859"
y="207.0043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan59"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Analysis for </tspan><tspan
x="218.94058"
y="221.4043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan60"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">package </tspan><tspan
x="207.54759"
y="235.80429"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan61"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">splitting plus </tspan><tspan
x="218.94058"
y="250.2043"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan62"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">package </tspan><tspan
x="207.81059"
y="264.60431"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan63"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">relationships</tspan></text><text
id="text63-1"
x="555.48315"
y="202.90402"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:31.0495"
transform="translate(-42.334211,23.629617)"
xml:space="preserve"><tspan
x="555.48315"
y="202.90402"
id="tspan15">QA<tspan
y="202.90402"
id="tspan16"> </tspan></tspan><tspan
x="555.48315"
y="216.2374"
id="tspan18">Tests</tspan></text>
<rect
x="319.146"
y="127.084"
fill="none"
width="116.666"
height="21.333"
id="rect63" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text64"
x="335.19238"
y="189.60429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.rpm generation</text>
<rect
x="319.146"
y="166.584"
fill="none"
width="116.666"
height="21.333"
id="rect64" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text65"
x="335.76849"
y="229.10429"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.deb generation</text>
<rect
x="319.146"
y="205.08401"
fill="none"
width="116.666"
height="21.333"
id="rect65" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text66"
x="337.9404"
y="267.60391"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">.ipk generation</text>
<rect
x="296.16699"
y="307.08401"
fill="none"
width="77.166"
height="30.237"
id="rect66" />
<rect
x="299.66699"
y="261.08401"
fill="none"
width="71.853996"
height="33.664001"
id="rect67" />
<rect
x="395.97998"
y="261.08401"
fill="none"
width="71.853996"
height="33.664001"
id="rect69" />
<rect
x="390.66699"
y="307.08401"
fill="none"
width="77.166"
height="30.237"
id="rect71" />
<rect
y="133"
fill="none"
width="81.666"
height="39.334"
id="rect73"
x="0.061999973" />
<text
id="text75"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-23.458902,-49.50401)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan20"><tspan
style="fill:#ffffff"
id="tspan19">User</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan22"><tspan
style="fill:#ffffff"
id="tspan21">Configuration</tspan></tspan></text><text
id="text75-4"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-24.603766,70.32617)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan24"><tspan
style="fill:#ffffff"
id="tspan23">Machine BSP</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan26"><tspan
style="fill:#ffffff"
id="tspan25">Configuration</tspan></tspan></text><text
id="text75-4-6"
x="64.610138"
y="186.94585"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:66.7773"
transform="translate(-25.353766,128.82617)"
xml:space="preserve"><tspan
x="64.610138"
y="186.94585"
id="tspan28"><tspan
style="fill:#ffffff"
id="tspan27">Policy</tspan>
</tspan><tspan
x="64.610138"
y="200.27922"
id="tspan30"><tspan
style="fill:#ffffff"
id="tspan29">Configuration</tspan></tspan></text>
<rect
y="211.16798"
fill="none"
width="81.666"
height="39.333"
id="rect76"
x="0.061999973" />
<text
id="text78"
x="70.02713"
y="265.4418"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:89.4625"
transform="translate(-28.848315,-69.549143)"
xml:space="preserve"><tspan
x="70.02713"
y="265.4418"
id="tspan32"><tspan
style="fill:#ffffff"
id="tspan31">Metadata
</tspan></tspan><tspan
x="70.02713"
y="278.77516"
id="tspan34"><tspan
style="fill:#ffffff"
id="tspan33">(.bb + patches)</tspan></tspan></text>
<rect
x="612.83502"
y="131.418"
fill="none"
width="112.186"
height="20.163"
id="rect78" />
<text
font-family="MyriadPro-Regular"
font-size="12px"
id="text79"
x="629.87451"
y="142.68779"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Package Feeds</text>
<rect
x="579.98102"
y="306.25101"
fill="none"
width="81.666"
height="39.332001"
id="rect79" />
<text
fill="#ffffff"
font-family="MyriadPro-Regular"
font-size="12px"
id="text80"
x="604.24854"
y="319.7699"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Images</text>
<rect
x="584.14703"
y="216.08499"
fill="none"
width="71.853996"
height="33.664001"
id="rect80" />
<text
id="text81"
x="606.88434"
y="227.1058"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="606.88434"
y="227.1058"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan80"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Image </tspan><tspan
x="594.48834"
y="241.50479"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan81"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Generation</tspan></text>
<rect
x="678.83301"
y="215.08499"
fill="none"
width="77.166"
height="30.237"
id="rect81" />
<text
id="text83"
x="708.21045"
y="228.6058"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"><tspan
x="708.21045"
y="228.6058"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan82"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">SDK </tspan><tspan
x="690.33142"
y="243.00479"
font-family="MyriadPro-Regular"
font-size="12px"
id="tspan83"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal">Generation</tspan></text>
<rect
x="379.06299"
y="86.834"
fill="none"
width="199.03999"
height="21.164"
id="rect83" />
<text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84"
x="426.28253"
y="26.005543"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333">OpenEmbedded Architecture Workflow</text><g
id="g18"
transform="translate(-10.254525,-9.75401)"><rect
style="fill:#00b6de;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17">Build System</tspan></text></g><g
id="g18-4"
transform="translate(-10.254525,-25.970712)"><rect
style="fill:#4a4a30;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4">Metadata/Inputs</tspan></text></g><g
id="g18-4-9"
transform="translate(-10.254525,-42.187414)"><rect
style="fill:#ff7f2a;fill-opacity:1;stroke:#ff631a;stroke-width:0.49911493;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0">Upstream Source</tspan></text></g><g
id="g18-4-9-2"
transform="translate(101.50803,-40.934366)"><rect
style="fill:#c1d82f;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0">Output Packages</tspan></text></g><g
id="g18-4-9-2-5"
transform="translate(101.50803,-24.709046)"><rect
style="fill:#e6e6e6;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2-2"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2-9"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0-0">Process steps (tasks)</tspan></text></g><g
id="g18-4-9-2-5-8"
transform="translate(101.50803,-8.4837252)"><rect
style="fill:#000080;fill-opacity:1;stroke:#ff631a;stroke-width:0;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-dasharray:none"
id="rect11-5-8-6-2-2-3"
width="10"
height="9.9646282"
x="442.00568"
y="76.711205"
transform="matrix(1,0,0,1.0035497,0,-1.2832284)" /><text
fill="#333333"
font-family="MyriadPro-Regular"
font-size="12px"
id="text84-6-0-1-2-9-8"
x="456.48013"
y="84.126945"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:12px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#333333"><tspan
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:9.33333px;font-family:Sans;-inkscape-font-specification:'Sans, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal"
id="tspan17-4-0-0-0-0">Output Imaga Data</tspan></text></g>
<rect
x="675.64801"
y="304.91699"
fill="none"
width="81.666"
height="39.332001"
id="rect85" />
<text
id="text86"
x="720.58508"
y="322.93991"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10.6667px;font-family:'Nimbus Sans L';-inkscape-font-specification:'Nimbus Sans L, Normal';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;white-space:pre;inline-size:65.518"
transform="translate(-2.5824824,-12.25401)"
xml:space="preserve"><tspan
x="720.58508"
y="322.93991"
id="tspan36"><tspan
style="fill:#ffffff"
id="tspan35">Application</tspan><tspan
y="322.93991"
id="tspan37"> </tspan></tspan><tspan
x="720.58508"
y="336.27327"
id="tspan39"><tspan
style="fill:#ffffff"
id="tspan38">Development</tspan><tspan
y="336.27327"
id="tspan40"> </tspan></tspan><tspan
x="720.58508"
y="349.60665"
id="tspan42"><tspan
style="fill:#ffffff"
id="tspan41">SDK</tspan></tspan></text>
</svg>

After

Width:  |  Height:  |  Size: 38 KiB

View File

@@ -23,12 +23,12 @@ comes to delivering embedded software stacks. The project allows
software customizations and build interchange for multiple hardware
platforms as well as software stacks that can be maintained and scaled.
.. image:: figures/key-dev-elements.png
.. image:: svg/key-dev-elements.*
:width: 100%
For further introductory information on the Yocto Project, you might be
interested in this
`article <https://www.embedded.com/electronics-blogs/say-what-/4458600/Why-the-Yocto-Project-for-my-IoT-Project->`__
`article <https://www.embedded.com/why-the-yocto-project-for-my-iot-project/>`__
by Drew Moseley and in this short introductory
`video <https://www.youtube.com/watch?v=utZpKM7i5Z4>`__.
@@ -44,7 +44,7 @@ Here are features and advantages of the Yocto Project:
system, software, and service vendors adopt and support the Yocto
Project in their products and services. For a look at the Yocto
Project community and the companies involved with the Yocto Project,
see the "COMMUNITY" and "ECOSYSTEM" tabs on the
see the "COMMUNITY" and "ABOUT" tabs on the
:yocto_home:`Yocto Project <>` home page.
- *Architecture Agnostic:* Yocto Project supports Intel, ARM, MIPS,
@@ -60,10 +60,9 @@ Here are features and advantages of the Yocto Project:
move between architectures without moving to new development
environments. Additionally, if you have used the Yocto Project to
create an image or application and you find yourself not able to
support it, commercial Linux vendors such as Wind River, Mentor
Graphics, Timesys, and ENEA could take it and provide ongoing
support. These vendors have offerings that are built using the Yocto
Project.
support it, commercial Linux vendors listed on :yocto_home:`/members/` and
:yocto_home:`/about/participants/` could take it and provide ongoing
support.
- *Flexibility:* Corporations use the Yocto Project many different
ways. One example is to create an internal Linux distribution as a
@@ -172,11 +171,12 @@ Here are challenges you might encounter when developing using the Yocto Project:
changes on the development system within the BitBake environment and
then deploying only the updated packages to the target.
The Yocto Project :term:`OpenEmbedded Build System`
produces packages
in standard formats (i.e. RPM, DEB, IPK, and TAR). You can deploy
these packages into the running system on the target by using
utilities on the target such as ``rpm`` or ``ipk``.
The Yocto Project :term:`OpenEmbedded Build System` produces packages
in standard formats (i.e. RPM, DEB and/or IPK). If you included the
runtime package management feature in your image, you can deploy
these packages into the running system on the target by using the
corresponding utilities on the target such as
``rpm``/``dnf``, ``dpkg``/``apt`` or ``opkg``.
- *Initial Build Times Can be Significant:* Long initial build times
are unfortunately unavoidable due to the large number of packages
@@ -400,7 +400,7 @@ Yocto Project:
Autobuilder :doc:`here </test-manual/understand-autobuilder>`.
- *Pseudo:* Pseudo is the Yocto Project implementation of
`fakeroot <http://man.he.net/man1/fakeroot>`__, which is used to run
:manpage:`fakeroot <fakeroot(1)>`, which is used to run
commands in an environment that seemingly has root privileges.
During a build, it can be necessary to perform operations that
@@ -734,7 +734,7 @@ The :term:`OpenEmbedded Build System` uses a "workflow" to
accomplish image and SDK generation. The following figure overviews that
workflow:
.. image:: figures/YP-flow-diagram.png
.. image:: svg/yp-flow-diagram.*
:width: 100%
Here is a brief summary of the "workflow":
@@ -760,7 +760,8 @@ Here is a brief summary of the "workflow":
package feed that is used to create the final root file image.
#. The build system generates the file system image and a customized
Extensible SDK (eSDK) for application development in parallel.
:doc:`SDK </sdk-manual/index>` (Software Development Kit) for application
development in parallel.
For a very detailed look at this workflow, see the
":ref:`overview-manual/concepts:openembedded build system concepts`" section.

View File

@@ -2,13 +2,22 @@
# Macros used in the documentation
#
# The DISTRO variable represents the current docs version. It should be used
# when referring to the current docs version. See also DISTRO_LATEST_TAG.
DISTRO : "5.0"
# The DISTRO_LATEST_TAG represents the latest tag on the current branch. It
# should be used in HTTP link referring to the current docs version. In these
# cases, the DISTRO may point to A.B.999 which does not exist (just used to
# represent the latest HEAD revision on the branch). DISTRO_LATEST_TAG should
# always point to an existing tag.
DISTRO_LATEST_TAG : "5.0"
DISTRO_NAME_NO_CAP : "scarthgap"
DISTRO_NAME : "Scarthgap"
DISTRO_NAME_NO_CAP_MINUS_ONE : "nanbield"
DISTRO_NAME_NO_CAP_LTS : "scarthgap"
YOCTO_DOC_VERSION : "5.0"
DISTRO_REL_TAG : "yocto-5.0"
DISTRO_REL_TAG : "yocto-$DISTRO;"
DISTRO_REL_LATEST_TAG : "yocto-&DISTRO_LATEST_TAG;"
DOCCONF_VERSION : "dev"
BITBAKE_SERIES : ""
YOCTO_DL_URL : "https://downloads.yoctoproject.org"

View File

@@ -355,8 +355,12 @@ file for details about how to enable this mechanism in your configuration
file, how to disable it for specific recipes, and how to share ``ccache``
files between builds.
However, using the class can lead to unexpected side-effects. Thus, using
this class is not recommended.
Recipes can also explicitly disable `Ccache` support even when the
:ref:`ref-classes-ccache` class is enabled, by setting the
:term:`CCACHE_DISABLE` variable to "1".
Using the :ref:`ref-classes-ccache` class can lead to unexpected side-effects.
Using this class is not recommended.
.. _ref-classes-chrpath:
@@ -909,6 +913,14 @@ software that uses the GNU ``gettext`` internationalization and localization
system. All recipes building software that use ``gettext`` should inherit this
class.
This class will configure recipes to build translations *unless*:
- the :term:`USE_NLS` variable is set to ``no``, or
- the :term:`INHIBIT_DEFAULT_DEPS` variable is set and the recipe inheriting
the :ref:`ref-classes-gettext` class does not also inherit the
:ref:`ref-classes-cross-canadian` class.
.. _ref-classes-github-releases:
``github-releases``
@@ -1236,6 +1248,53 @@ The :ref:`ref-classes-image_types` class also handles conversion and compression
:term:`IMAGE_FSTYPES`. This would also be similar for Virtual Box Virtual Disk
Image ("vdi") and QEMU Copy On Write Version 2 ("qcow2") images.
.. _ref-classes-image-container:
``image-container``
===================
The :ref:`ref-classes-image-container` class is automatically inherited in
:doc:`image </ref-manual/images>` recipes that have the ``container`` image type
in :term:`IMAGE_FSTYPES`. It provides relevant settings to generate an image
ready for use with an :wikipedia:`OCI <Open_Container_Initiative>`-compliant
container management tool, such as :wikipedia:`Podman <Podman>` or
:wikipedia:`Docker <Docker_(software)>`.
.. note::
This class neither builds nor installs container management tools on the
target. Those tools are available in the :yocto_git:`meta-virtualization
</meta-virtualization>` layer.
You should set the :term:`PREFERRED_PROVIDER` for the Linux kernel to
``linux-dummy`` in a :term:`configuration file`::
PREFERRED_PROVIDER_virtual/kernel = "linux-dummy"
Otherwise an error is triggered. If desired, the
:term:`IMAGE_CONTAINER_NO_DUMMY` variable can be set to "1" to avoid triggering
this error.
The ``linux-dummy`` recipe acts as a Linux kernel recipe but builds nothing. It
is relevant to use as the preferred Linux kernel provider in this case as a
container image does not need to include a Linux kernel. Selecting it as the
preferred provider for the kernel will also decrease build time.
Using this class only deploys an additional ``tar.bz2`` archive to
:term:`DEPLOY_DIR_IMAGE`. This archive can be used in a container file (a file
typically named ``Dockerfile`` or ``Containerfile``). For example, to be used with
:wikipedia:`Podman <Podman>` or :wikipedia:`Docker <Docker_(software)>`, the
`container file <https://docs.docker.com/reference/dockerfile/>`__ could contain
the following instructions:
.. code-block:: dockerfile
FROM scratch
ADD ./image-container-qemux86-64.rootfs.tar.bz2 /
ENTRYPOINT /bin/sh
This is suitable to build a container using our generated root filesystem image.
.. _ref-classes-image-live:
``image-live``
@@ -1993,7 +2052,8 @@ a couple different ways:
Not using this naming convention can lead to subtle problems
caused by existing code that depends on that naming convention.
- Create or modify a target recipe that contains the following::
- Or, create a :ref:`ref-classes-native` variant of any target recipe (e.g.
``myrecipe.bb``) by adding the following to the recipe::
BBCLASSEXTEND = "native"
@@ -2024,7 +2084,18 @@ couple different ways:
inherit statement in the recipe after all other inherit statements so
that the :ref:`ref-classes-nativesdk` class is inherited last.
- Create a :ref:`ref-classes-nativesdk` variant of any recipe by adding the following::
.. note::
When creating a recipe, you must follow this naming convention::
nativesdk-myrecipe.bb
Not doing so can lead to subtle problems because there is code that
depends on the naming convention.
- Or, create a :ref:`ref-classes-nativesdk` variant of any target recipe (e.g.
``myrecipe.bb``) by adding the following to the recipe::
BBCLASSEXTEND = "nativesdk"
@@ -2033,16 +2104,6 @@ couple different ways:
specify any functionality specific to the respective SDK machine or
target case.
.. note::
When creating a recipe, you must follow this naming convention::
nativesdk-myrecipe.bb
Not doing so can lead to subtle problems because there is code that
depends on the naming convention.
Although applied differently, the :ref:`ref-classes-nativesdk` class is used with both
methods. The advantage of the second method is that you do not need to
have two separate recipes (assuming you need both) for the SDK machine
@@ -2690,6 +2751,25 @@ The :ref:`ref-classes-recipe_sanity` class checks for the presence of any host s
recipe prerequisites that might affect the build (e.g. variables that
are set or software that is present).
.. _ref-classes-relative_symlinks:
``relative_symlinks``
=====================
The :ref:`ref-classes-relative_symlinks` class walks the symbolic links in the
:term:`D` directory and replaces links pointing to absolute paths to relative
paths. This is occasionally used in some recipes that create wrong symbolic
links when their :ref:`ref-classes-native` version is built, and/or would cause
breakage in the :ref:`overview-manual/concepts:shared state cache`.
For example, if the following symbolic link is found in :term:`D`::
/usr/bin/foo -> /sbin/bar
It is replaced by::
/usr/bin/foo -> ../../sbin/bar
.. _ref-classes-relocatable:
``relocatable``
@@ -3184,6 +3264,22 @@ class assuming :term:`PATCHRESOLVE` is set to "user", the
:ref:`ref-classes-cml1` class, and the :ref:`ref-classes-devshell` class all
use the :ref:`ref-classes-terminal` class.
.. _ref-classes-testexport:
``testexport``
==============
Based on the :ref:`ref-classes-testimage` class, the
:ref:`ref-classes-testexport` class can be used to export the test environment
outside of the :term:`OpenEmbedded Build System`. This will generate the
directory structure to execute the runtime tests using the
:oe_git:`runexported.py </openembedded-core/tree/meta/lib/oeqa/runexported.py>`
Python script.
For more details on how to use :ref:`ref-classes-testexport`, see
the :ref:`test-manual/runtime-testing:Exporting Tests` section in the Yocto
Project Test Environment Manual.
.. _ref-classes-testimage:
``testimage``
@@ -3314,6 +3410,9 @@ The variables used by this class are:
- :term:`SPL_SIGN_ENABLE`: enable signing the FIT image.
- :term:`SPL_SIGN_KEYDIR`: directory containing the signing keys.
- :term:`SPL_SIGN_KEYNAME`: base filename of the signing keys.
- :term:`SPL_DTB_BINARY`: Name of the SPL device tree binary. Can be set to an
empty string to indicate that no SPL should be created and added to the FIT
image.
- :term:`UBOOT_FIT_ADDRESS_CELLS`: ``#address-cells`` value for the FIT image.
- :term:`UBOOT_FIT_DESC`: description string encoded into the FIT image.
- :term:`UBOOT_FIT_GENERATE_KEYS`: generate the keys if they don't exist yet.
@@ -3330,9 +3429,9 @@ The variables used by this class are:
rebuilding the FIT image containing the kernel.
See U-Boot's documentation for details about `verified boot
<https://source.denx.de/u-boot/u-boot/-/blob/master/doc/uImage.FIT/verified-boot.txt>`__
<https://docs.u-boot.org/en/latest/usage/fit/verified-boot.html>`__
and the `signature process
<https://source.denx.de/u-boot/u-boot/-/blob/master/doc/uImage.FIT/signature.txt>`__.
<https://docs.u-boot.org/en/latest/usage/fit/signature.html>`__.
See also the description of :ref:`ref-classes-kernel-fitimage` class, which this class
imitates.
@@ -3342,22 +3441,51 @@ imitates.
``uninative``
=============
Attempts to isolate the build system from the host distribution's C
library in order to make re-use of native shared state artifacts across
different host distributions practical. With this class enabled, a
tarball containing a pre-built C library is downloaded at the start of
the build. In the Poky reference distribution this is enabled by default
through ``meta/conf/distro/include/yocto-uninative.inc``. Other
distributions that do not derive from poky can also
"``require conf/distro/include/yocto-uninative.inc``" to use this.
Alternatively if you prefer, you can build the uninative-tarball recipe
yourself, publish the resulting tarball (e.g. via HTTP) and set
``UNINATIVE_URL`` and ``UNINATIVE_CHECKSUM`` appropriately. For an
example, see the ``meta/conf/distro/include/yocto-uninative.inc``.
The :ref:`ref-classes-uninative` class allows binaries to run on systems with
older or newer :wikipedia:`Glibc <Glibc>` versions. This means
:ref:`ref-classes-native` recipe :ref:`overview-manual/concepts:shared state
cache` can be shared among different host distributions of different versions,
i.e. the :ref:`overview-manual/concepts:shared state cache` is "universal".
The :ref:`ref-classes-uninative` class is also used unconditionally by the extensible
SDK. When building the extensible SDK, ``uninative-tarball`` is built
and the resulting tarball is included within the SDK.
To allow this to work, the dynamic loader is changed to our own :manpage:`ld.so
<ld.so.8>` when binaries are compiled using the
``--dynamic-linker`` option. This means when the binary is executed, it finds
our own :manpage:`ld.so <ld.so.8>` and that loader has a modified search path
which finds a newer Glibc version.
The linking of the binaries is not changed at link time since the
headers on the system wouldn't match the newer Glibc and this causes
obtuse failures. Changing the loader is effectively the same as if the
system had a Glibc upgrade after the binary was compiled, so it is a
mechanism supported by upstream.
One caveat to this approach is that the uninative Glibc binary must be
equal to or newer in version to the versions on all the systems using
the common :ref:`overview-manual/concepts:shared state cache`. This is why
:ref:`ref-classes-uninative` is regularly changed on the development and stable
branches.
Another potential issue is static linking: static libraries created on
a system with a new Glibc version may have symbols not present in older
versions, which would then fail during linking on older systems. This
is one reason we don't use static linking for our :ref:`ref-classes-native`
binaries.
With this class enabled, a tarball containing a pre-built C library is
downloaded at the start of the build. In the Poky reference distribution this is
enabled by default through :oe_git:`meta/conf/distro/include/yocto-uninative.inc
</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`. Other distributions that do
not derive from Poky can also "``require conf/distro/include/yocto-uninative.inc``"
to use this. Alternatively if you prefer, you can build the uninative-tarball
recipe yourself, publish the resulting tarball (e.g. via HTTP) and set
:term:`UNINATIVE_URL` and :term:`UNINATIVE_CHECKSUM` appropriately. For an
example, see :oe_git:`meta/conf/distro/include/yocto-uninative.inc
</openembedded-core/tree/meta/conf/distro/include/yocto-uninative.inc>`.
The :ref:`ref-classes-uninative` class is also used unconditionally by the
:doc:`extensible SDK </sdk-manual/extensible>`. When building the extensible
SDK, ``uninative-tarball`` is built and the resulting tarball is included within
the SDK.
.. _ref-classes-update-alternatives:

View File

@@ -435,7 +435,7 @@ You can read more on the ``devtool upgrade`` workflow in the
":ref:`sdk-manual/extensible:use \`\`devtool upgrade\`\` to create a version of the recipe that supports a newer version of the software`"
section in the Yocto Project Application Development and the Extensible
Software Development Kit (eSDK) manual. You can also see an example of
how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using \`\`devtool upgrade\`\``"
how to use ``devtool upgrade`` in the ":ref:`dev-manual/upgrading-recipes:using ``devtool upgrade```"
section in the Yocto Project Development Tasks Manual.
.. _devtool-resetting-a-recipe:

View File

@@ -45,6 +45,45 @@ release process validates the content of the new branch.
Realize that there can be patches merged onto the stable release
branches as and when they become available.
.. _ref-yp-development-cycle:
Development Cycle
=================
As explained in the previous :ref:`ref-manual/release-process:Major and Minor
Release Cadence` section, a new release comes out every six months.
During this six-months period of time, the Yocto Project releases four
"Milestone" releases which represent distinct points of time. The milestone
releases are tested through the :ref:`ref-manual/release-process:Testing and
Quality Assurance` process and helps spotting issues before the actual release
is out.
The time span between milestone releases can vary, but they are in general
evenly spaced out during this six-months period of time.
These milestone releases are tagged with a capital "M" after the future release
tag name. For example, the milestone tags "&DISTRO_RELEASE_SERIES;M1",
"&DISTRO_RELEASE_SERIES;M2", and "&DISTRO_RELEASE_SERIES;M3" are released before
the actual "&DISTRO_RELEASE_SERIES;" release.
.. note::
The fourth milestone (M4) is not actually released and announced, but
represents a point of time for the Quality Assurance team to start the
:ref:`ref-manual/release-process:Testing and Quality Assurance` process
before tagging and delivering the final release.
After the third milestone release (M3), the Yocto Project enters **Feature
Freeze**. This means that the maintainers of :term:`OpenEmbedded-Core
(OE-Core)`, :term:`BitBake` and other core repositories stop accepting
significant changes on the "master" branch. Changes that may be accepted are
minor upgrades to core components and security/bug fixes.
During feature freeze, a new branch is created and maintained separately to
test new features and enhancements received from contributors, but these changes
will only make it to the master branch after the release is out.
Major Release Codenames
=======================
@@ -62,7 +101,8 @@ codename are likely to be compatible and thus work together.
Releases are given a nominal release version as well but the codename is
used in repositories for this reason. You can find information on Yocto
Project releases and codenames at :yocto_wiki:`/Releases`.
Project releases and codenames in the :yocto_home:`Releases page
</development/releases/>`.
Our :doc:`/migration-guides/index` detail how to migrate from one release of
the Yocto Project to the next.

View File

@@ -344,6 +344,15 @@ This configuration file is generated by :doc:`bblock </dev-manual/bblock>` and
contains the signatures locked by ``bblock``. By default, it does not exist
and will be created upon the first invocation of ``bblock``.
.. _structure-build-conf-auto.conf:
``build/conf/auto.conf``
------------------------
This file contains configuration variables that are automatically modified by
tools such as :oe_git:`bitbake-config-build </bitbake/tree/bin/bitbake-config-build>`.
This file should not be modified manually.
.. _structure-build-downloads:
``build/downloads/``
@@ -515,7 +524,7 @@ generated during the :ref:`ref-tasks-packagedata` task. The files stored in this
directory contain information about each output package produced by the
OpenEmbedded build system, and are used in different ways by the build system
such as ":ref:`dev-manual/debugging:viewing package information with
\`\`oe-pkgdata-util\`\``".
``oe-pkgdata-util```".
.. _structure-build-tmp-sstate-control:

View File

@@ -2,11 +2,11 @@
<svg
version="1.1"
id="svg2"
width="1523.001"
height="504.30499"
viewBox="0 0 1523.001 504.30497"
width="1992.7236"
height="613.35602"
viewBox="0 0 1992.7236 613.35599"
sodipodi:docname="releases.svg"
inkscape:version="1.3.2 (091e20ef0f, 2023-11-25, custom)"
inkscape:version="1.4.1 (93de688d07, 2025-03-30)"
inkscape:export-filename="../../../../../../../../tmp/releases.png"
inkscape:export-xdpi="96"
inkscape:export-ydpi="96"
@@ -70,7 +70,7 @@
scale_width="1"
end_linecap_type="zerowidth"
not_jump="false"
message="&lt;b&gt;Ctrl + click&lt;/b&gt; on existing node and move it" />
message="" />
<marker
style="overflow:visible"
id="marker5783"
@@ -412,9 +412,9 @@
inkscape:window-height="2069"
id="namedview4"
showgrid="true"
inkscape:zoom="2.1971372"
inkscape:cx="1068.2082"
inkscape:cy="287.87461"
inkscape:zoom="1.5536106"
inkscape:cx="1158.2696"
inkscape:cy="273.55632"
inkscape:window-x="2256"
inkscape:window-y="60"
inkscape:window-maximized="1"
@@ -433,8 +433,8 @@
<inkscape:grid
type="xygrid"
id="grid1257"
originx="-289.99936"
originy="369.99997"
originx="-289.06071"
originy="478.43017"
spacingy="1"
spacingx="1"
units="px"
@@ -444,66 +444,90 @@
inkscape:groupmode="layer"
inkscape:label="Image"
id="g10"
transform="translate(-289.99936,370.00003)">
transform="translate(-289.06072,478.43022)">
<rect
style="fill:#333333;fill-opacity:0;stroke:#000000;stroke-width:0.713896;stroke-linejoin:bevel;stroke-miterlimit:0;stroke-opacity:0"
id="rect1"
width="1992.0098"
height="612.64215"
x="289.41766"
y="-478.07327"
ry="24.97636" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 563.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 563.40434,64.000628 v -524.414808 0 0"
id="path207708" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 683.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 683.40434,64.000628 v -524.414808 0 0"
id="path207708-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 803.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 803.40434,64.000628 v -524.414808 0 0"
id="path207708-4-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 923.40434,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 923.40434,64.000577 v -524.414757 0 0"
id="path207708-4-3-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1043.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1043.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1163.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1163.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1283.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1283.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1403.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1403.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.475347;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000568 v -415.757648 0 0"
id="path207708-4-3-6-2-8-4-3-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000588 v -415.635898 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1523.4043,64.000577 v -524.414757 0 0"
id="path207708-4-3-6-2-8-4-3-8-0" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1643.3583,64.000578 v -415.635868 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1643.3583,64.000565 v -524.414715 0 0"
id="path207708-4-3-6-2-8-4-3-8-4" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000578 v -415.635868 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000565 v -524.414715 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 443.40434,64.000628 v -415.635938 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1883.7877,64.878769 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2002.9599,64.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.2232,62.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2243.313,63.984489 v -524.414709 0 0"
id="path207708-4-3-6-2-8-4-3-8-4-0-8-8-1-9" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 443.40434,64.000628 v -524.414808 0 0"
id="path207708-9" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000608 v -375.000008 0 0"
id="path207708-9-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.449183;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000618 v -415.635908 0 0"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:0.50455;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000616 v -524.414766 0 0"
id="path207708-9-6-2" />
<text
xml:space="preserve"
@@ -536,7 +560,7 @@
x="-59.575905"
y="580.05695" /></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1;opacity:0.5"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4"
width="160.00002"
height="45.000004"
@@ -584,15 +608,7 @@
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4">4.2</tspan></text>
<rect
style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3"
width="140"
height="45.000004"
x="1043.132"
y="-328.2114"
ry="2.2558987" />
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-6"
width="140"
height="45.000004"
@@ -615,22 +631,78 @@
y="-238.332"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6">5.1</tspan></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1;opacity:0.5"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-6-2"
width="140"
height="45.000004"
x="1043.4697"
y="-328.48172"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1094.2197"
y="-309.83084"
id="text1185-3-55-4-0-0-0-1-1-6-4-3"><tspan
x="1090.4542"
y="-309.61823"
id="text1185-3-55-4-0-0-0-1-1-6-4-7"><tspan
sodipodi:role="line"
x="1094.2197"
y="-309.83084"
x="1090.4542"
y="-309.61823"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5">Walnascar</tspan><tspan
id="tspan957-2-8-6-3-9-7-4-2-0-0">Walnascar</tspan><tspan
sodipodi:role="line"
x="1094.2197"
y="-291.83417"
x="1090.4542"
y="-291.62155"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6">5.2</tspan></text>
id="tspan10317-2-9-1-4-6-5-6-9">5.2</tspan></text>
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:2;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-67"
width="140"
height="45.000004"
x="1223.8723"
y="-382.27469"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1275.2014"
y="-363.89413"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-53"><tspan
sodipodi:role="line"
x="1275.2014"
y="-363.89413"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5-5">Whinlatter</tspan><tspan
sodipodi:role="line"
x="1275.2014"
y="-345.89746"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-6">5.3</tspan></text>
<rect
style="opacity:0.75;fill:#251f32;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:5.29752;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-3-67-6"
width="982.23163"
height="45.000004"
x="1283.7023"
y="-436.77539"
ry="2.2558987" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1335.1118"
y="-418.39484"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-53-0"><tspan
sodipodi:role="line"
x="1335.1118"
y="-418.39484"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan957-2-8-6-3-9-7-4-2-0-5-5-6">Wrynose</tspan><tspan
sodipodi:role="line"
x="1335.1118"
y="-400.39816"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#fffefe;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-6-2">6.0</tspan></text>
<g
id="g1591"
transform="translate(-516.59566,64.000598)">
@@ -681,7 +753,7 @@
id="tspan10317-2-9-0-1">5.0</tspan></text>
<g
id="g1125-0"
transform="matrix(0.42240595,0,0,0.41654472,330.77064,-441.11721)"
transform="matrix(0.42240595,0,0,0.41654472,330.77064,-497.11721)"
style="stroke:none;stroke-width:2.38399">
<rect
style="opacity:1;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:4.76797;stroke-opacity:1"
@@ -923,8 +995,8 @@
y="345.7359" /></text>
<path
id="path29430"
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1.72671;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="M 307.54809,63.999718 H 1783.4043 Z" />
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1.99503;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="M 307.54809,63.999718 H 2277.72 Z" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 323.40434,64.000618 v 9.99995 0"
@@ -1437,50 +1509,324 @@
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1763.4043,64.000578 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1885.6029"
y="94.285194"
id="text1185-9-7-1-1-8-1-0-4-2-8-2"><tspan
sodipodi:role="line"
x="1885.6029"
y="94.285194"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8">Oct.</tspan><tspan
sodipodi:role="line"
x="1885.6029"
y="112.28188"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9">2028</tspan></text>
<g
id="g1267-4-5-2-7"
transform="translate(563.45518,-155.9782)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1883.4551,64.021829 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2005.5908"
y="94.339828"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4"><tspan
sodipodi:role="line"
x="2005.5908"
y="94.339828"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7">Apr.</tspan><tspan
sodipodi:role="line"
x="2005.5908"
y="112.33651"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8">2029</tspan></text>
<g
id="g1267-4-5-2-7-4"
transform="translate(683.44312,-155.92356)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2003.443,64.076464 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2125.6079"
y="94.692207"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2"><tspan
sodipodi:role="line"
x="2125.6079"
y="94.692207"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7-0">Oct.</tspan><tspan
sodipodi:role="line"
x="2125.6079"
y="112.68889"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8-6">2029</tspan></text>
<g
id="g1267-4-5-2-7-4-1"
transform="translate(803.46019,-155.57118)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.4601,64.428843 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2123.3825,64.223284 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-3" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="2245.5474"
y="94.839027"
id="text1185-9-7-1-1-8-1-0-4-2-8-2-4-2-7"><tspan
sodipodi:role="line"
x="2245.5474"
y="94.839027"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan31345-4-0-4-81-5-2-8-7-0-4">Apr.</tspan><tspan
sodipodi:role="line"
x="2245.5474"
y="112.83571"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;text-align:center;text-anchor:middle;stroke:none"
id="tspan49906-7-3-8-2-8-9-9-8-6-5">2030</tspan></text>
<g
id="g1267-4-5-2-7-4-1-2"
transform="translate(923.39972,-155.42436)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<g
id="g1267-4-5-2-7-4-1-2-0"
transform="translate(1043.3579,-155.33829)">
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1200,220.00002 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-1-3-5-5-5-6" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1220,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-0-5-0-0-5-6-0-5-4-8"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1240,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-7-5-3-5-9-1-3-4-7-9"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1260,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-5-2-0-9-9-2-6-7-4-2"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1280,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-8-9-9-4-1-9-1-6-4-6"
inkscape:transform-center-x="14.782001"
inkscape:transform-center-y="-0.085282837" />
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:1;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 1299.7216,219.99997 v 5.00004 0"
id="path29548-8-5-0-6-4-6-2-9-0-8-1-3-1-9-6-9-3-4-0-4-6-2-2-7-6-1-9-9-1-4-9-7-0-2-6-4-3-0-5-3-6"
inkscape:transform-center-x="-14.78205"
inkscape:transform-center-y="-0.085282837" />
</g>
<path
style="fill:none;fill-rule:evenodd;stroke:#000000;stroke-width:2;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
d="m 2243.3996,64.575663 v 9.99999 0"
id="path29548-5-1-3-6-3-1-0-3-4-2-0-0-1-6-6-0" />
<rect
style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.751473;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-36"
width="38.418175"
height="23.151052"
x="1605.6135"
y="-41.172161"
x="2047.6135"
y="-45.172161"
ry="1.1605872" />
<rect
style="opacity:1;fill:#ffffff;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:1.98878;stroke-dasharray:none;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-36-7"
width="186.42949"
height="110.40546"
x="1594.5294"
y="-73.753708"
x="2036.5294"
y="-77.753708"
ry="5.5347452" />
<rect
style="opacity:0.75;fill:#241f31;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-6"
width="21.197233"
height="19.28739"
x="1611.8163"
y="-41.883858"
x="2053.8164"
y="-45.883858"
ry="0.96689767" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1690.4917"
y="-53.687912"
x="2132.4917"
y="-57.687912"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5"><tspan
sodipodi:role="line"
x="1690.4917"
y="-53.687912"
x="2132.4917"
y="-57.687912"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans Bold';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5">Legend</tspan></text>
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1656.0988"
y="-27.899874"
x="2098.0986"
y="-31.899874"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2"><tspan
sodipodi:role="line"
x="1656.0988"
y="-27.899874"
x="2098.0986"
y="-31.899874"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9">Future</tspan></text>
<rect
@@ -1488,38 +1834,38 @@
id="rect917-0-0-4-4-9-4-5-3-9-2-6-1"
width="21.197233"
height="19.28739"
x="1611.8671"
y="-17.756365"
x="2053.8672"
y="-21.756365"
ry="0.96689767" />
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1686.7159"
y="-3.6722763"
x="2128.7158"
y="-7.6722765"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2"><tspan
sodipodi:role="line"
x="1686.7159"
y="-3.6722763"
x="2128.7158"
y="-7.6722765"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7">Current (Oct. 24)</tspan></text>
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7">Current (Dec. 25)</tspan></text>
<text
xml:space="preserve"
style="font-weight:bold;font-size:13.3333px;line-height:125%;font-family:'Nimbus Roman';-inkscape-font-specification:'Nimbus Roman, Bold';letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;fill:#fffefe;fill-opacity:1;stroke:#000000;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
x="1667.363"
y="20.03771"
x="2109.363"
y="16.03771"
id="text1185-3-55-4-0-0-0-1-1-6-4-3-5-2-2-9"><tspan
sodipodi:role="line"
x="1667.363"
y="20.03771"
x="2109.363"
y="16.03771"
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:13.3333px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans';text-align:center;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none"
id="tspan10317-2-9-1-4-6-5-6-6-5-9-7-3">End-of-life</tspan></text>
<rect
style="fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1;opacity:0.5"
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:0.50949;stroke-opacity:1"
id="rect917-0-0-4-4-9-4-5-3-9-2-6-1-0"
width="21.197233"
height="19.28739"
x="1612.0239"
y="5.9667883"
x="2054.0239"
y="1.9667883"
ry="0.96689767" />
<rect
style="opacity:0.5;fill:#333333;fill-opacity:1;fill-rule:evenodd;stroke:none;stroke-width:1.85786;stroke-opacity:1"

Before

Width:  |  Height:  |  Size: 93 KiB

After

Width:  |  Height:  |  Size: 117 KiB

View File

@@ -58,36 +58,33 @@ Supported Linux Distributions
Currently, the &DISTRO; release ("&DISTRO_NAME;") of the Yocto Project is
supported on the following distributions:
- Ubuntu 20.04 (LTS)
- Ubuntu 22.04 (LTS)
- Ubuntu 23.04
- Fedora 38
- Fedora 39
- CentOS Stream 8
- Debian GNU/Linux 11 (Bullseye)
- Debian GNU/Linux 12 (Bookworm)
- OpenSUSE Leap 15.4
..
Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros:
yocto-supported-distros --release scarthgap --config yocto-autobuilder2/config.py --output-format docs --poky-distros
- AlmaLinux 8
- AlmaLinux 9
- Rocky 9
- Debian 11
- Debian 12
- Fedora 39
- Fedora 40
- Fedora 41
- Rocky Linux 8
- Rocky Linux 9
- Ubuntu 22.04 (LTS)
- Ubuntu 24.04 (LTS)
The following distribution versions are still tested, even though the
organizations publishing them no longer make updates publicly available:
- Ubuntu 18.04 (LTS)
..
This list contains EOL distros that are still tested on the Autobuilder
(meaning there are running workers).
See https://endoflife.date for information of EOL releases.
- Ubuntu 23.04
- Fedora 39
- Fedora 40
- Fedora 41
Note that the Yocto Project doesn't have access to private updates
that some of these versions may have. Therefore, our testing has
@@ -96,7 +93,17 @@ limited value if you have access to such updates.
Finally, here are the distribution versions which were previously
tested on former revisions of "&DISTRO_NAME;", but no longer are:
*This list is currently empty*
..
Can be generated with yocto-autobuilder-helper's scripts/yocto-supported-distros.
yocto-supported-distros --release scarthgap --config yocto-autobuilder2/config.py --output-format docs --old-distros
- CentOS Stream 8
- Fedora 38
- OpenSUSE Leap 15.4
- Ubuntu 18.04
- Ubuntu 20.04
- Ubuntu 23.04
- Ubuntu 24.10
.. note::
@@ -371,7 +378,7 @@ If you would prefer not to use the ``install-buildtools`` script, you can instea
download and run a pre-built :term:`buildtools` installer yourself with the following
steps:
#. Go to :yocto_dl:`/releases/yocto/yocto-&DISTRO;/buildtools/`, locate and
#. Go to :yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/buildtools/`, locate and
download the ``.sh`` file corresponding to your host architecture
and to :term:`buildtools`, :term:`buildtools-extended` or :term:`buildtools-make`.

View File

@@ -727,7 +727,7 @@ tool, which you then use to modify the kernel configuration.
$ bitbake linux-yocto -c menuconfig
See the ":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
See the ":ref:`kernel-dev/common:using ``menuconfig```"
section in the Yocto Project Linux Kernel Development Manual for more
information on this configuration tool.
@@ -751,7 +751,7 @@ which can then be applied by subsequent tasks such as
Runs ``make menuconfig`` for the kernel. For information on
``menuconfig``, see the
":ref:`kernel-dev/common:using \`\`menuconfig\`\``"
":ref:`kernel-dev/common:using ``menuconfig```"
section in the Yocto Project Linux Kernel Development Manual.
.. _ref-tasks-savedefconfig:

View File

@@ -63,7 +63,7 @@ universal, the list includes them just in case:
This term refers to the area used by the OpenEmbedded build system for
builds. The area is created when you ``source`` the setup environment
script that is found in the Source Directory
(i.e. :ref:`ref-manual/structure:\`\`oe-init-build-env\`\``). The
(i.e. :ref:`ref-manual/structure:``oe-init-build-env```). The
:term:`TOPDIR` variable points to the :term:`Build Directory`.
You have a lot of flexibility when creating the :term:`Build Directory`.
@@ -452,7 +452,7 @@ universal, the list includes them just in case:
the Source Directory, if you do, the top-level directory name of the
Source Directory is derived from the Yocto Project release tarball.
For example, downloading and unpacking poky tarballs from
:yocto_dl:`/releases/yocto/&DISTRO_REL_TAG;/`
:yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/`
results in a Source Directory whose root folder is named poky.

View File

@@ -143,7 +143,7 @@ system and gives an overview of their function and contents.
information on how this variable is used.
:term:`AR`
The minimal command and arguments used to run ``ar``.
The minimal command and arguments used to run :manpage:`ar <ar(1)>`.
:term:`ARCHIVER_MODE`
When used with the :ref:`ref-classes-archiver` class,
@@ -165,7 +165,8 @@ system and gives an overview of their function and contents.
``meta/classes/archiver.bbclass`` file in the :term:`Source Directory`.
:term:`AS`
Minimal command and arguments needed to run the assembler.
Minimal command and arguments needed to run the :manpage:`assembler
<as(1)>`.
:term:`ASSUME_PROVIDED`
Lists recipe names (:term:`PN` values) BitBake does not
@@ -224,6 +225,12 @@ system and gives an overview of their function and contents.
must set this variable in your recipe. The
:ref:`ref-classes-syslinux` class checks this variable.
:term:`AUTOTOOLS_SCRIPT_PATH`
When using the :ref:`ref-classes-autotools` class, the
:term:`AUTOTOOLS_SCRIPT_PATH` variable stores the location of the
different scripts used by the Autotools build system. The default
value for this variable is :term:`S`.
:term:`AVAILTUNES`
The list of defined CPU and Application Binary Interface (ABI)
tunings (i.e. "tunes") available for use by the OpenEmbedded build
@@ -971,55 +978,165 @@ system and gives an overview of their function and contents.
variable is a useful pointer in case a bug in the software being
built needs to be manually reported.
:term:`BUILD_AR`
Specifies the architecture-specific :manpage:`archiver <ar(1)>` for the
build host, and its default definition is derived in part from
:term:`BUILD_PREFIX`::
BUILD_AR = "${BUILD_PREFIX}ar"
When building a :ref:`ref-classes-native` recipe, :term:`AR` is set to the
value of this variable by default.
The :term:`BUILD_AR` variable should not be set manually, and is rarely
used in recipes as :term:`AR` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the :manpage:`archiver <ar(1)>` from the build
host at some point during the build.
:term:`BUILD_ARCH`
Specifies the architecture of the build host (e.g. ``i686``). The
OpenEmbedded build system sets the value of :term:`BUILD_ARCH` from the
machine name reported by the ``uname`` command.
:term:`BUILD_AS`
Specifies the architecture-specific :manpage:`assembler <as(1)>` for the
build host, and its default definition is derived in part from
:term:`BUILD_PREFIX`::
BUILD_AS = "${BUILD_PREFIX}as ${BUILD_AS_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`AS` is set to the
value of this variable by default.
The :term:`BUILD_AS` variable should not be set manually, and is rarely
used in recipes as :term:`AS` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the :manpage:`assembler <as(1)>` from the build
host at some point during the build.
:term:`BUILD_AS_ARCH`
Specifies the architecture-specific assembler flags for the build
host. By default, the value of :term:`BUILD_AS_ARCH` is empty.
:term:`BUILD_CC`
Specifies the architecture-specific C compiler for the build host,
and its default definition is derived in part from :term:`BUILD_PREFIX`
and :term:`BUILD_CC_ARCH`::
BUILD_CC = "${CCACHE}${BUILD_PREFIX}gcc ${BUILD_CC_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`CC` is set to the
value of this variable by default.
The :term:`BUILD_CC` variable should not be set manually, and is rarely
used in recipes as :term:`CC` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the compiler from the build host at some point
during the build.
:term:`BUILD_CC_ARCH`
Specifies the architecture-specific C compiler flags for the build
host. By default, the value of :term:`BUILD_CC_ARCH` is empty.
:term:`BUILD_CCLD`
Specifies the linker command to be used for the build host when the C
compiler is being used as the linker. By default, :term:`BUILD_CCLD`
points to GCC and passes as arguments the value of
:term:`BUILD_CC_ARCH`, assuming
:term:`BUILD_CC_ARCH` is set.
Specifies the :manpage:`linker <ld(1)>` command to be used for the build
host when the C compiler is being used as the linker, and its default
definition is derived in part from :term:`BUILD_PREFIX` and
:term:`BUILD_CC_ARCH`::
BUILD_CCLD = "${BUILD_PREFIX}gcc ${BUILD_CC_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`CCLD` is set to
the value of this variable by default.
The :term:`BUILD_CCLD` variable should not be set manually, and is rarely
used in recipes as :term:`CCLD` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the :manpage:`linker <ld(1)>` from the build host
at some point during the build.
:term:`BUILD_CFLAGS`
Specifies the flags to pass to the C compiler when building for the
build host. When building in the ``-native`` context,
build host. When building a :ref:`ref-classes-native` recipe,
:term:`CFLAGS` is set to the value of this variable by
default.
:term:`BUILD_CPP`
Specifies the C preprocessor command (to both the C and the C++ compilers)
when building for the build host, and its default definition is derived in
part from :term:`BUILD_PREFIX` and :term:`BUILD_CC_ARCH`::
BUILD_CPP = "${BUILD_PREFIX}gcc ${BUILD_CC_ARCH} -E"
When building a :ref:`ref-classes-native` recipe, :term:`CPP` is set to
the value of this variable by default.
The :term:`BUILD_CPP` variable should not be set manually, and is rarely
used in recipes as :term:`CPP` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the preprocessor from the build host at some
point during the build.
:term:`BUILD_CPPFLAGS`
Specifies the flags to pass to the C preprocessor (i.e. to both the C
and the C++ compilers) when building for the build host. When
building in the ``-native`` context, :term:`CPPFLAGS`
is set to the value of this variable by default.
:term:`BUILD_CXX`
Specifies the architecture-specific C++ compiler for the build host,
and its default definition is derived in part from :term:`BUILD_PREFIX`
and :term:`BUILD_CC_ARCH`::
BUILD_CXX = "${CCACHE}${BUILD_PREFIX}g++ ${BUILD_CC_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`CXX` is set to
the value of this variable by default.
The :term:`BUILD_CXX` variable should not be set manually, and is rarely
used in recipes as :term:`CXX` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the C++ compiler from the build host at some
point during the build.
:term:`BUILD_CXXFLAGS`
Specifies the flags to pass to the C++ compiler when building for the
build host. When building in the ``-native`` context,
build host. When building a :ref:`ref-classes-native` recipe,
:term:`CXXFLAGS` is set to the value of this variable
by default.
:term:`BUILD_FC`
Specifies the Fortran compiler command for the build host. By
default, :term:`BUILD_FC` points to Gfortran and passes as arguments the
value of :term:`BUILD_CC_ARCH`, assuming
:term:`BUILD_CC_ARCH` is set.
Specifies the Fortran compiler command for the build host, and its default
definition is derived in part from :term:`BUILD_PREFIX` and
:term:`BUILD_CC_ARCH`::
BUILD_FC = "${BUILD_PREFIX}gfortran ${BUILD_CC_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`FC` is set to the
value of this variable by default.
The :term:`BUILD_FC` variable should not be set manually, and is rarely
used in recipes as :term:`FC` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the Fortran compiler from the build host at some
point during the build.
:term:`BUILD_LD`
Specifies the linker command for the build host. By default,
:term:`BUILD_LD` points to the GNU linker (ld) and passes as arguments
the value of :term:`BUILD_LD_ARCH`, assuming
:term:`BUILD_LD_ARCH` is set.
Specifies the linker command for the build host, and its default
definition is derived in part from :term:`BUILD_PREFIX` and
:term:`BUILD_LD_ARCH`::
BUILD_LD = "${BUILD_PREFIX}ld ${BUILD_LD_ARCH}"
When building a :ref:`ref-classes-native` recipe, :term:`LD` is set to the
value of this variable by default.
The :term:`BUILD_LD` variable should not be set manually, and is rarely
used in recipes as :term:`LD` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the linker from the build host at some point
during the build.
:term:`BUILD_LD_ARCH`
Specifies architecture-specific linker flags for the build host. By
@@ -1027,10 +1144,58 @@ system and gives an overview of their function and contents.
:term:`BUILD_LDFLAGS`
Specifies the flags to pass to the linker when building for the build
host. When building in the ``-native`` context,
host. When building a :ref:`ref-classes-native` recipe,
:term:`LDFLAGS` is set to the value of this variable
by default.
:term:`BUILD_NM`
Specifies the architecture-specific utility to list symbols from object
files for the build host, and its default definition is derived in part
from :term:`BUILD_PREFIX`::
BUILD_NM = "${BUILD_PREFIX}nm"
When building a :ref:`ref-classes-native` recipe, :term:`NM` is set to the
value of this variable by default.
The :term:`BUILD_NM` variable should not be set manually, and is rarely
used in recipes as :term:`NM` contains the appropriate value depending on
the context (native or target recipes). Exception be made for target
recipes that need to use the utility from the build host at some point
during the build.
:term:`BUILD_OBJCOPY`
Specifies the architecture-specific utility to copy object files for the
build host, and its default definition is derived in part from
:term:`BUILD_PREFIX`::
BUILD_OBJCOPY = "${BUILD_PREFIX}objcopy"
When building a :ref:`ref-classes-native` recipe, :term:`OBJCOPY` is set
to the value of this variable by default.
The :term:`BUILD_OBJCOPY` variable should not be set manually, and is
rarely used in recipes as :term:`OBJCOPY` contains the appropriate value
depending on the context (native or target recipes). Exception be made for
target recipes that need to use the utility from the build host at some
point during the build.
:term:`BUILD_OBJDUMP`
Specifies the architecture-specific utility to display object files
information for the build host, and its default definition is derived in
part from :term:`BUILD_PREFIX`::
BUILD_OBJDUMP = "${BUILD_PREFIX}objdump"
When building a :ref:`ref-classes-native` recipe, :term:`OBJDUMP` is set
to the value of this variable by default.
The :term:`BUILD_OBJDUMP` variable should not be set manually, and is
rarely used in recipes as :term:`OBJDUMP` contains the appropriate value
depending on the context (native or target recipes). Exception be made for
target recipes that need to use the utility from the build host at some
point during the build.
:term:`BUILD_OPTIMIZATION`
Specifies the optimization flags passed to the C compiler when
building for the build host or the SDK. The flags are passed through
@@ -1051,11 +1216,53 @@ system and gives an overview of their function and contents.
build system uses the :term:`BUILD_PREFIX` value to set the
:term:`TARGET_PREFIX` when building for :ref:`ref-classes-native` recipes.
:term:`BUILD_RANLIB`
Specifies the architecture-specific utility to generate indexes for
archives for the build host, and its default definition is derived in part
from :term:`BUILD_PREFIX`::
BUILD_RANLIB = "${BUILD_PREFIX}ranlib -D"
When building a :ref:`ref-classes-native` recipe, :term:`RANLIB` is set to
the value of this variable by default.
The :term:`BUILD_RANLIB` variable should not be set manually, and is
rarely used in recipes as :term:`RANLIB` contains the appropriate value
depending on the context (native or target recipes). Exception be made for
target recipes that need to use the utility from the build host at some
point during the build.
:term:`BUILD_READELF`
Specifies the architecture-specific utility to display information about
ELF files for the build host, and its default definition is derived in
part from :term:`BUILD_PREFIX`::
BUILD_READELF = "${BUILD_PREFIX}readelf"
When building a :ref:`ref-classes-native` recipe, :term:`READELF` is set
to the value of this variable by default.
The :term:`BUILD_READELF` variable should not be set manually, and is
rarely used in recipes as :term:`READELF` contains the appropriate value
depending on the context (native or target recipes). Exception be made for
target recipes that need to use the utility from the build host at some
point during the build.
:term:`BUILD_STRIP`
Specifies the command to be used to strip debugging symbols from
binaries produced for the build host. By default, :term:`BUILD_STRIP`
points to
``${``\ :term:`BUILD_PREFIX`\ ``}strip``.
Specifies the command to be used to strip debugging symbols from binaries
produced for the build host, and its default definition is derived in part
from :term:`BUILD_PREFIX`::
BUILD_STRIP = "${BUILD_PREFIX}strip"
When building a :ref:`ref-classes-native` recipe, :term:`STRIP` is set to
the value of this variable by default.
The :term:`BUILD_STRIP` variable should not be set manually, and is
rarely used in recipes as :term:`STRIP` contains the appropriate value
depending on the context (native or target recipes). Exception be made for
target recipes that need to use the utility from the build host at some
point during the build.
:term:`BUILD_SYS`
Specifies the system, including the architecture and the operating
@@ -1251,6 +1458,21 @@ system and gives an overview of their function and contents.
:term:`CC`
The minimal command and arguments used to run the C compiler.
:term:`CCACHE_DISABLE`
When inheriting the :ref:`ref-classes-ccache` class, the
:term:`CCACHE_DISABLE` variable can be set to "1" in a recipe to disable
`Ccache` support. This is useful when the recipe is known to not support it.
:term:`CCACHE_TOP_DIR`
When inheriting the :ref:`ref-classes-ccache` class, the
:term:`CCACHE_TOP_DIR` variable can be set to the location of where
`Ccache` stores its cache files. This directory can be shared between
builds.
:term:`CCLD`
The minimal command and arguments used to run the linker when the C
compiler is being used as the linker.
:term:`CFLAGS`
Specifies the flags to pass to the C compiler. This variable is
exported to an environment variable and thus made visible to the
@@ -1494,6 +1716,17 @@ system and gives an overview of their function and contents.
:term:`CONFIGURE_FLAGS`
The minimal arguments for GNU configure.
:term:`CONFIGURE_SCRIPT`
When using the :ref:`ref-classes-autotools` class, the
:term:`CONFIGURE_SCRIPT` variable stores the location of the ``configure``
script for the Autotools build system. The default definition for this
variable is::
CONFIGURE_SCRIPT ?= "${AUTOTOOLS_SCRIPT_PATH}/configure"
Where :term:`AUTOTOOLS_SCRIPT_PATH` is the location of the of the
Autotools build system scripts, which defaults to :term:`S`.
:term:`CONFLICT_DISTRO_FEATURES`
When inheriting the :ref:`ref-classes-features_check`
class, this variable identifies distribution features that would be
@@ -1977,7 +2210,7 @@ system and gives an overview of their function and contents.
resides within the :term:`Build Directory` as ``${TMPDIR}/deploy``.
For more information on the structure of the Build Directory, see
":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section.
":ref:`ref-manual/structure:the build directory --- ``build/```" section.
For more detail on the contents of the ``deploy`` directory, see the
":ref:`overview-manual/concepts:images`",
":ref:`overview-manual/concepts:package feeds`", and
@@ -2019,7 +2252,7 @@ system and gives an overview of their function and contents.
contents of :term:`IMGDEPLOYDIR` by the :ref:`ref-classes-image` class.
For more information on the structure of the :term:`Build Directory`, see
":ref:`ref-manual/structure:the build directory --- \`\`build/\`\``" section.
":ref:`ref-manual/structure:the build directory --- ``build/```" section.
For more detail on the contents of the ``deploy`` directory, see the
":ref:`overview-manual/concepts:images`" and
":ref:`overview-manual/concepts:application development sdk`" sections both in
@@ -2768,6 +3001,9 @@ system and gives an overview of their function and contents.
:term:`FAKEROOTNOENV`
See :term:`bitbake:FAKEROOTNOENV` in the BitBake manual.
:term:`FC`
The minimal command and arguments used to run the Fortran compiler.
:term:`FEATURE_PACKAGES`
Defines one or more packages to include in an image when a specific
item is included in :term:`IMAGE_FEATURES`.
@@ -3045,6 +3281,10 @@ system and gives an overview of their function and contents.
This variable is used in the :ref:`ref-classes-kernel-fitimage` class.
:term:`FIT_CONF_PREFIX`
When using the :ref:`ref-classes-kernel-fitimage`, this is the prefix
used for creating FIT configuration nodes. Its default value is "conf-".
:term:`FIT_DESC`
Specifies the description string encoded into a FIT image. The
default value is set by the :ref:`ref-classes-kernel-fitimage` class as
@@ -3347,6 +3587,20 @@ system and gives an overview of their function and contents.
- mips
- mipsel
:term:`HOST_AS_ARCH`
Specifies architecture-specific assembler flags.
Default initialization for :term:`HOST_AS_ARCH` varies depending on what
is being built:
- :term:`TARGET_AS_ARCH` when building for the
target
- :term:`BUILD_AS_ARCH` when building for the build host (i.e.
``-native``)
- :term:`SDK_AS_ARCH` when building for an SDK (i.e. ``nativesdk-``)
:term:`HOST_CC_ARCH`
Specifies architecture-specific compiler flags that are passed to the
C compiler.
@@ -3360,8 +3614,20 @@ system and gives an overview of their function and contents.
- :term:`BUILD_CC_ARCH` when building for the build host (i.e.
``-native``)
- ``BUILDSDK_CC_ARCH`` when building for an SDK (i.e.
``nativesdk-``)
- :term:`SDK_CC_ARCH` when building for an SDK (i.e. ``nativesdk-``)
:term:`HOST_LD_ARCH`
Specifies architecture-specific linker flags.
Default initialization for :term:`HOST_LD_ARCH` varies depending on what
is being built:
- :term:`TARGET_LD_ARCH` when building for the target
- :term:`BUILD_LD_ARCH` when building for the build host (i.e.
``-native``)
- :term:`SDK_LD_ARCH` when building for an SDK (i.e. ``nativesdk-``)
:term:`HOST_OS`
Specifies the name of the target operating system, which is normally
@@ -3577,6 +3843,24 @@ system and gives an overview of their function and contents.
variable, see the :ref:`ref-classes-image_types`
class file, which is ``meta/classes-recipe/image_types.bbclass``.
:term:`IMAGE_CONTAINER_NO_DUMMY`
When an image recipe has the ``container`` image type in
:term:`IMAGE_FSTYPES`, it expects the :term:`PREFERRED_PROVIDER` for
the Linux kernel (``virtual/kernel``) to be set to ``linux-dummy`` from a
:term:`configuration file`. Otherwise, an error is triggered.
When set to "1", the :term:`IMAGE_CONTAINER_NO_DUMMY` variable allows the
:term:`PREFERRED_PROVIDER` variable to be set to another value, thus
skipping the check and not triggering the build error. Any other value
will keep the check.
This variable should be set from the image recipe using the ``container``
image type.
See the documentation of the :ref:`ref-classes-image-container` class for
more information on why setting the :term:`PREFERRED_PROVIDER` to
``linux-dummy`` is advised with this class.
:term:`IMAGE_DEVICE_TABLES`
Specifies one or more files that contain custom device tables that
are passed to the ``makedevs`` command as part of creating an image.
@@ -3824,14 +4108,20 @@ system and gives an overview of their function and contents.
added to the image by using the :term:`IMAGE_ROOTFS_EXTRA_SPACE`
variable.
When using Wic tool, beware that a second overhead factor is also applied.
This overhead value is defined by the ``--overhead-factor`` option, which
defaults to "1.3" when omitted. See the
:ref:`ref-manual/kickstart:command: part or partition` chapter in
:doc:`/ref-manual/kickstart` for details.
:term:`IMAGE_PKGTYPE`
Defines the package type (i.e. DEB, RPM, IPK, or TAR) used by the
Defines the package type (i.e. DEB, RPM or IPK) used by the
OpenEmbedded build system. The variable is defined appropriately by
the :ref:`ref-classes-package_deb`, :ref:`ref-classes-package_rpm`,
or :ref:`ref-classes-package_ipk` class.
one of the :ref:`ref-classes-package_deb`, :ref:`ref-classes-package_rpm`,
or :ref:`ref-classes-package_ipk` classes.
The :ref:`ref-classes-populate-sdk-*` and :ref:`ref-classes-image`
classes use the :term:`IMAGE_PKGTYPE` for packaging up images and SDKs.
classes use the :term:`IMAGE_PKGTYPE` for packaging images and SDKs.
You should not set the :term:`IMAGE_PKGTYPE` manually. Rather, the
variable is set indirectly through the appropriate
@@ -3840,12 +4130,6 @@ system and gives an overview of their function and contents.
OpenEmbedded build system uses the first package type (e.g. DEB, RPM,
or IPK) that appears with the variable
.. note::
Files using the ``.tar`` format are never used as a substitute
packaging format for DEB, RPM, and IPK formatted files for your image
or SDK.
:term:`IMAGE_POSTPROCESS_COMMAND`
Specifies a list of functions to call once the OpenEmbedded build
system creates the final image output files. You can specify
@@ -3903,9 +4187,33 @@ system and gives an overview of their function and contents.
IMAGE_ROOTFS_EXTRA_SPACE = "41943040"
:term:`IMAGE_ROOTFS_MAXSIZE`
Defines the maximum size in Kbytes for the generated image. If the
generated image size is above that, the build will fail. It's a good
idea to set this variable for images that need to fit on a limited
Defines the maximum allowed size of the generated image in kilobytes.
The build will fail if the generated image size exceeds this value.
The generated image size undergoes several calculation steps before being
compared to :term:`IMAGE_ROOTFS_MAXSIZE`.
In the first step, the size of the directory pointed to by :term:`IMAGE_ROOTFS`
is calculated.
In the second step, the result from the first step is multiplied
by :term:`IMAGE_OVERHEAD_FACTOR`.
In the third step, the result from the second step is compared with
:term:`IMAGE_ROOTFS_SIZE`. The larger value of these is added to
:term:`IMAGE_ROOTFS_EXTRA_SPACE`.
In the fourth step, the result from the third step is checked for
a decimal part. If it has one, it is rounded up to the next integer.
If it does not, it is simply converted into an integer.
In the fifth step, the :term:`IMAGE_ROOTFS_ALIGNMENT` is added to the result
from the fourth step and "1" is subtracted.
In the sixth step, the remainder of the division between the result
from the fifth step and :term:`IMAGE_ROOTFS_ALIGNMENT` is subtracted from the
result of the fifth step. In this way, the result from the fourth step is
rounded up to the nearest multiple of :term:`IMAGE_ROOTFS_ALIGNMENT`.
Thus, if the :term:`IMAGE_ROOTFS_MAXSIZE` is set, is compared with the result
of the above calculations and is independent of the final image type.
No default value is set for :term:`IMAGE_ROOTFS_MAXSIZE`.
It's a good idea to set this variable for images that need to fit on a limited
space (e.g. SD card, a fixed-size partition, ...).
:term:`IMAGE_ROOTFS_SIZE`
@@ -4089,6 +4397,23 @@ system and gives an overview of their function and contents.
Set the variable to "1" to prevent the default dependencies from
being added.
:term:`INHIBIT_DEFAULT_RUST_DEPS`
Prevents the :ref:`ref-classes-rust` class from automatically adding
its default build-time dependencies.
When a recipe inherits the :ref:`ref-classes-rust` class, several
tools such as ``rust-native`` and ``${RUSTLIB_DEP}`` (only added when cross-compiling) are added
to :term:`DEPENDS` to support the ``rust`` build process.
To prevent the build system from adding these dependencies automatically,
set the :term:`INHIBIT_DEFAULT_RUST_DEPS` variable as follows::
INHIBIT_DEFAULT_RUST_DEPS = "1"
By default, the value of :term:`INHIBIT_DEFAULT_RUST_DEPS` is empty. Setting
it to "0" does not disable inhibition. Only the empty string will disable
inhibition.
:term:`INHIBIT_PACKAGE_DEBUG_SPLIT`
Prevents the OpenEmbedded build system from splitting out debug
information during packaging. By default, the build system splits out
@@ -4135,6 +4460,25 @@ system and gives an overview of their function and contents.
even if the toolchain's binaries are strippable, there are other files
needed for the build that are not strippable.
:term:`INHIBIT_UPDATERCD_BBCLASS`
Prevents the :ref:`ref-classes-update-rc.d` class from automatically
installing and registering SysV init scripts for packages.
When a recipe inherits the :ref:`ref-classes-update-rc.d` class, init
scripts are typically installed and registered for the packages listed in
:term:`INITSCRIPT_PACKAGES`. This ensures that the relevant
services are started and stopped at the appropriate runlevels using the
traditional SysV init system.
To prevent the build system from adding these scripts and configurations
automatically, set the :term:`INHIBIT_UPDATERCD_BBCLASS` variable as follows::
INHIBIT_UPDATERCD_BBCLASS = "1"
By default, the value of :term:`INHIBIT_UPDATERCD_BBCLASS` is empty. Setting
it to "0" does not disable inhibition. Only the empty string will disable
inhibition.
:term:`INIT_MANAGER`
Specifies the system init manager to use. Available options are:
@@ -4301,6 +4645,20 @@ system and gives an overview of their function and contents.
See the :term:`MACHINE` variable for additional
information.
:term:`INITRAMFS_MAXSIZE`
Defines the maximum allowed size of the :term:`Initramfs` image in Kbytes.
The build will fail if the :term:`Initramfs` image size exceeds this value.
The :term:`Initramfs` image size undergoes several calculation steps before
being compared to :term:`INITRAMFS_MAXSIZE`.
These steps are the same as those used for :term:`IMAGE_ROOTFS_MAXSIZE`
and are described in detail in that entry.
Thus, :term:`INITRAMFS_MAXSIZE` is compared with the result of the calculations
and is independent of the final image type (e.g. compressed).
A default value for :term:`INITRAMFS_MAXSIZE` is set in
:oe_git:`meta/conf/bitbake.conf </openembedded-core/tree/meta/conf/bitbake.conf>`.
:term:`INITRAMFS_MULTICONFIG`
Defines the multiconfig to create a multiconfig dependency to be used by
the :ref:`ref-classes-kernel` class.
@@ -4366,8 +4724,7 @@ system and gives an overview of their function and contents.
The value in :term:`INITSCRIPT_PARAMS` is passed through to the
``update-rc.d`` command. For more information on valid parameters,
please see the ``update-rc.d`` manual page at
https://manpages.debian.org/buster/init-system-helpers/update-rc.d.8.en.html
please see the manual page: :manpage:`update-rc.d <update-rc.d(8)>`.
:term:`INSANE_SKIP`
Specifies the QA checks to skip for a specific package within a
@@ -4448,8 +4805,7 @@ system and gives an overview of their function and contents.
would place patch files and configuration fragment files (i.e.
"out-of-tree"). However, if you want to use a ``defconfig`` file that
is part of the kernel tree (i.e. "in-tree"), you can use the
:term:`KBUILD_DEFCONFIG` variable and append the
:term:`KMACHINE` variable to point to the
:term:`KBUILD_DEFCONFIG` variable to point to the
``defconfig`` file.
To use the variable, set it in the append file for your kernel recipe
@@ -4484,15 +4840,8 @@ system and gives an overview of their function and contents.
options not explicitly specified will be disabled in the kernel
config.
In case :term:`KCONFIG_MODE` is not set the behaviour will depend on where
the ``defconfig`` file is coming from. An "in-tree" ``defconfig`` file
will be handled in ``alldefconfig`` mode, a ``defconfig`` file placed
in ``${WORKDIR}`` through a meta-layer will be handled in
``allnoconfig`` mode.
An "in-tree" ``defconfig`` file can be selected via the
:term:`KBUILD_DEFCONFIG` variable. :term:`KCONFIG_MODE` does not need to
be explicitly set.
In case :term:`KCONFIG_MODE` is not set the ``defconfig`` file
will be handled in ``allnoconfig`` mode.
A ``defconfig`` file compatible with ``allnoconfig`` mode can be
generated by copying the ``.config`` file from a working Linux kernel
@@ -4794,6 +5143,27 @@ system and gives an overview of their function and contents.
the :term:`KERNEL_PATH` variable. Both variables are common variables
used by external Makefiles to point to the kernel source directory.
:term:`KERNEL_SPLIT_MODULES`
When inheriting the :ref:`ref-classes-kernel-module-split` class, this
variable controls whether kernel modules are split into separate packages
or bundled into a single package.
For some use cases, a monolithic kernel module package
:term:`KERNEL_PACKAGE_NAME` that contains all modules built from the
kernel sources may be preferred to speed up the installation.
By default, this variable is set to ``1``, resulting in one package per
module. Setting it to any other value will generate a single monolithic
package containing all kernel modules.
.. note::
If :term:`KERNEL_SPLIT_MODULES` is set to 0, it is still possible to
install all kernel modules at once by adding ``kernel-modules`` (assuming
:term:`KERNEL_PACKAGE_NAME` is ``kernel-modules``) to :term:`IMAGE_INSTALL`.
The way it works is that a placeholder "kernel-modules" package will be
created and will depend on every other individual kernel module packages.
:term:`KERNEL_SRC`
The location of the kernel sources. This variable is set to the value
of the :term:`STAGING_KERNEL_DIR` within the :ref:`ref-classes-module`
@@ -4883,7 +5253,7 @@ system and gives an overview of their function and contents.
information on how this variable is used.
:term:`LAYERDEPENDS`
Lists the layers, separated by spaces, on which this recipe depends.
Lists the layers, separated by spaces, on which this layer depends.
Optionally, you can specify a specific layer version for a dependency
by adding it to the end of the layer name. Here is an example::
@@ -4936,7 +5306,8 @@ system and gives an overview of their function and contents.
``LAYERVERSION_mylayer``).
:term:`LD`
The minimal command and arguments used to run the linker.
The minimal command and arguments used to run the :manpage:`linker
<ld(1)>`.
:term:`LDFLAGS`
Specifies the flags to pass to the linker. This variable is exported
@@ -5542,7 +5913,7 @@ system and gives an overview of their function and contents.
variable is set.
:term:`NM`
The minimal command and arguments to run ``nm``.
The minimal command and arguments to run :manpage:`nm <nm(1)>`.
:term:`NO_GENERIC_LICENSE`
Avoids QA errors when you use a non-common, non-CLOSED license in a
@@ -5616,10 +5987,10 @@ system and gives an overview of their function and contents.
NON_MULTILIB_RECIPES = "grub grub-efi make-mod-scripts ovmf u-boot"
:term:`OBJCOPY`
The minimal command and arguments to run ``objcopy``.
The minimal command and arguments to run :manpage:`objcopy <objcopy(1)>`.
:term:`OBJDUMP`
The minimal command and arguments to run ``objdump``.
The minimal command and arguments to run :manpage:`objdump <objdump(1)>`.
:term:`OE_BINCONFIG_EXTRA_MANGLE`
When inheriting the :ref:`ref-classes-binconfig` class,
@@ -5825,8 +6196,8 @@ system and gives an overview of their function and contents.
.. note::
An easy way to see what overrides apply is to search for :term:`OVERRIDES`
in the output of the ``bitbake -e`` command. See the
An easy way to see what overrides apply is to run the command
``bitbake-getvar -r myrecipe OVERRIDES``. See the
":ref:`dev-manual/debugging:viewing variable values`" section in the Yocto
Project Development Tasks Manual for more information.
@@ -6479,7 +6850,7 @@ system and gives an overview of their function and contents.
For examples of how this data is used, see the
":ref:`overview-manual/concepts:automatically added runtime dependencies`"
section in the Yocto Project Overview and Concepts Manual and the
":ref:`dev-manual/debugging:viewing package information with \`\`oe-pkgdata-util\`\``"
":ref:`dev-manual/debugging:viewing package information with ``oe-pkgdata-util```"
section in the Yocto Project Development Tasks Manual. For more
information on the shared, global-state directory, see
:term:`STAGING_DIR_HOST`.
@@ -6520,6 +6891,23 @@ system and gives an overview of their function and contents.
The version of the package(s) built by the recipe. By default,
:term:`PKGV` is set to :term:`PV`.
If :term:`PV` contains the ``+`` sign, source control information will be
included in :term:`PKGV` later in the packaging phase. For more
information, see the :doc:`/dev-manual/external-scm` section of the Yocto
Project Development Tasks Manual.
.. warning::
Since source control information is included in a late stage by the
:ref:`ref-classes-package` class, it cannot be seen from the BitBake
environment with ``bitbake -e`` or ``bitbake-getvar``. Instead, after
the package is built, the version information can be retrieved with
``oe-pkgdata-util package-info <package name>``. See the
:ref:`dev-manual/debugging:Viewing Package Information with
``oe-pkgdata-util``` section of the Yocto Project Development Tasks
Manual for more information on ``oe-pkgdata-util``.
:term:`PN`
This variable can have two separate functions depending on the
context: a recipe name or a resulting package name.
@@ -6883,7 +7271,7 @@ system and gives an overview of their function and contents.
QA_EMPTY_DIRS_RECOMMENDATION:/dev = "but all devices must be created at runtime"
:term:`RANLIB`
The minimal command and arguments to run ``ranlib``.
The minimal command and arguments to run :manpage:`ranlib <ranlib(1)>`.
:term:`RCONFLICTS`
The list of packages that conflict with packages. Note that packages
@@ -7020,6 +7408,9 @@ system and gives an overview of their function and contents.
":ref:`bitbake-user-manual/bitbake-user-manual-execution:dependencies`" sections in the
BitBake User Manual for additional information on tasks and dependencies.
:term:`READELF`
The minimal command and arguments to run :manpage:`readelf <readelf(1)>`.
:term:`RECIPE_MAINTAINER`
This variable defines the name and e-mail address of the maintainer of a
recipe. Such information can be used by human users submitted changes,
@@ -7076,6 +7467,16 @@ system and gives an overview of their function and contents.
:term:`REPODIR`
See :term:`bitbake:REPODIR` in the BitBake manual.
:term:`REQUIRED_COMBINED_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies combined features (the intersection of :term:`MACHINE_FEATURES`
and :term:`DISTRO_FEATURES`) that must exist in the current configuration
in order for the :term:`OpenEmbedded Build System` to build the recipe. In
other words, if the :term:`REQUIRED_COMBINED_FEATURES` variable lists a
feature that does not appear in :term:`COMBINED_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
:term:`REQUIRED_DISTRO_FEATURES`
When inheriting the :ref:`ref-classes-features_check`
class, this variable identifies distribution features that must exist
@@ -7086,6 +7487,32 @@ system and gives an overview of their function and contents.
the recipe will be skipped, and if the build system attempts to build
the recipe then an error will be triggered.
:term:`REQUIRED_IMAGE_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies image features that must exist in the current
configuration in order for the :term:`OpenEmbedded Build System` to build
the recipe. In other words, if the :term:`REQUIRED_IMAGE_FEATURES` variable
lists a feature that does not appear in :term:`IMAGE_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
Compared to other ``REQUIRED_*_FEATURES`` variables, the
:term:`REQUIRED_IMAGE_FEATURES` varible only targets image recipes, as the
:term:`IMAGE_FEATURES` variable is handled by the :ref:`ref-classes-core-image`
class). However, the :term:`REQUIRED_IMAGE_FEATURES` varible can also be
set from a :term:`Configuration File`, such as a distro
configuration file, if the list of required image features should apply to
all images using this :term:`DISTRO`.
:term:`REQUIRED_MACHINE_FEATURES`
When inheriting the :ref:`ref-classes-features_check` class, this variable
identifies :term:`MACHINE_FEATURES` that must exist in the current
configuration in order for the :term:`OpenEmbedded Build System` to build
the recipe. In other words, if the :term:`REQUIRED_MACHINE_FEATURES` variable
lists a feature that does not appear in :term:`MACHINE_FEATURES` within the
current configuration, then the recipe will be skipped, and if the build
system attempts to build the recipe then an error will be triggered.
:term:`REQUIRED_VERSION`
If there are multiple versions of a recipe available, this variable
determines which version should be given preference.
@@ -7114,17 +7541,12 @@ system and gives an overview of their function and contents.
prefer to have a read-only root filesystem and prefer to keep
writeable data in one place.
You can override the default by setting the variable in any layer or
in the ``local.conf`` file. Because the default is set using a "weak"
assignment (i.e. "??="), you can use either of the following forms to
define your override::
When setting ``INIT_MANAGER = systemd``, the default will be set to::
ROOT_HOME = "/root"
ROOT_HOME ?= "/root"
These
override examples use ``/root``, which is probably the most commonly
used override.
You can also override the default by setting the variable in your distro
configuration or in the ``local.conf`` file.
:term:`ROOTFS`
Indicates a filesystem image to include as the root filesystem.
@@ -7369,11 +7791,21 @@ system and gives an overview of their function and contents.
Only one archive type can be specified.
:term:`SDK_AS_ARCH`
Specifies architecture-specific assembler flags when building
:ref:`ref-classes-nativesdk` recipes. By default, the value of
:term:`SDK_AS_ARCH` equals the one of :term:`BUILD_AS_ARCH`.
:term:`SDK_BUILDINFO_FILE`
When using the :ref:`ref-classes-image-buildinfo` class,
specifies the file in the SDK to write the build information into. The
default value is "``/buildinfo``".
:term:`SDK_CC_ARCH`
Specifies the architecture-specific C compiler flags when building
:ref:`ref-classes-nativesdk` recipes. By default, the value of
:term:`SDK_CC_ARCH` equals the one of :term:`BUILD_CC_ARCH`.
:term:`SDK_CUSTOM_TEMPLATECONF`
When building the extensible SDK, if :term:`SDK_CUSTOM_TEMPLATECONF` is set to
"1" and a ``conf/templateconf.cfg`` file exists in the :term:`Build Directory`
@@ -7455,6 +7887,11 @@ system and gives an overview of their function and contents.
:term:`SDK_EXT_TYPE` is set to "minimal", and defaults to "1" if
:term:`SDK_EXT_TYPE` is set to "full".
:term:`SDK_LD_ARCH`
Specifies architecture-specific linker flags when building
:ref:`ref-classes-nativesdk` recipes. By default, the value of
:term:`SDK_LD_ARCH` equals the one of :term:`BUILD_LD_ARCH`.
:term:`SDK_NAME`
The base name for SDK output files. The default value (as set in
``meta-poky/conf/distro/poky.conf``) is derived from the
@@ -8082,6 +8519,11 @@ system and gives an overview of their function and contents.
section in the Yocto Project Board Support Package Developer's Guide
for additional information.
:term:`SPL_DTB_BINARY`
When inheriting the :ref:`ref-classes-uboot-sign` class, the
:term:`SPL_DTB_BINARY` variable contains the name of the SPL binary to be
compiled.
:term:`SPL_MKIMAGE_DTCOPTS`
Options for the device tree compiler passed to ``mkimage -D`` feature
while creating a FIT image with the :ref:`ref-classes-uboot-sign`
@@ -8102,7 +8544,7 @@ system and gives an overview of their function and contents.
class.
:term:`SPL_SIGN_KEYNAME`
The name of keys used by the :ref:`ref-classes-kernel-fitimage` class
The name of keys used by the :ref:`ref-classes-uboot-sign` class
for signing U-Boot FIT image stored in the :term:`SPL_SIGN_KEYDIR`
directory. If we have for example a ``dev.key`` key and a ``dev.crt``
certificate stored in the :term:`SPL_SIGN_KEYDIR` directory, you will
@@ -8366,7 +8808,7 @@ system and gives an overview of their function and contents.
The Yocto Project actually shares the cache data objects built by its
autobuilder::
SSTATE_MIRRORS ?= "file://.* http://cdn.jsdelivr.net/yocto/sstate/all/PATH;downloadfilename=PATH"
SSTATE_MIRRORS ?= "file://.* http://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH"
As such binary artifacts are built for the generic QEMU machines
supported by the various Poky releases, they are less likely to be
@@ -8390,6 +8832,26 @@ system and gives an overview of their function and contents.
For details on the process, see the :ref:`ref-classes-staging` class.
:term:`SSTATE_SKIP_CREATION`
The :term:`SSTATE_SKIP_CREATION` variable can be used to skip the
creation of :ref:`shared state <overview-manual/concepts:shared state cache>`
tarball files. It makes sense e.g. for image creation tasks as tarring images
and keeping them in sstate would consume a lot of disk space.
In general it is not recommended to use this variable as missing sstate
artefacts adversely impact the build, particularly for entries in the
middle of dependency chains. The case it can make sense is where the
size and time costs of the artefact are similar to just running the
tasks. This generally only applies to end artefact output like images.
The syntax to disable it for one task is::
SSTATE_SKIP_CREATION:task-image-complete = "1"
The syntax to disable it for the whole recipe is::
SSTATE_SKIP_CREATION = "1"
:term:`STAGING_BASE_LIBDIR_NATIVE`
Specifies the path to the ``/lib`` subdirectory of the sysroot
directory for the build host.
@@ -8431,7 +8893,7 @@ system and gives an overview of their function and contents.
directory for the build host.
:term:`STAGING_DIR`
Helps construct the ``recipe-sysroots`` directory, which is used
Helps construct the ``recipe-sysroot*`` directories, which are used
during packaging.
For information on how staging for recipe-specific sysroots occurs,
@@ -8580,8 +9042,8 @@ system and gives an overview of their function and contents.
places stamps. The default directory is ``${TMPDIR}/stamps``.
:term:`STRIP`
The minimal command and arguments to run ``strip``, which is used to
strip symbols.
The minimal command and arguments to run :manpage:`strip <strip(1)>`,
which is used to strip symbols.
:term:`SUMMARY`
The short (72 characters or less) summary of the binary package for
@@ -9781,6 +10243,22 @@ system and gives an overview of their function and contents.
passes and uses "all" for the target during the U-Boot building
process.
:term:`UNINATIVE_CHECKSUM`
When inheriting the :ref:`ref-classes-uninative` class, the
:term:`UNINATIVE_CHECKSUM` variable flags contain the checksums of the
uninative tarball as specified by the :term:`UNINATIVE_URL` variable.
There should be one checksum per tarballs published at
:term:`UNINATIVE_URL`, which match architectures. For example::
UNINATIVE_CHECKSUM[aarch64] ?= "812045d826b7fda88944055e8526b95a5a9440bfef608d5b53fd52faab49bf85"
UNINATIVE_CHECKSUM[i686] ?= "5cc28efd0c15a75de4bcb147c6cce65f1c1c9d442173a220f08427f40a3ffa09"
UNINATIVE_CHECKSUM[x86_64] ?= "4c03d1ed2b7b4e823aca4a1a23d8f2e322f1770fc10e859adcede5777aff4f3a"
:term:`UNINATIVE_URL`
When inheriting the :ref:`ref-classes-uninative` class, the
:term:`UNINATIVE_URL` variable contains the URL where the uninative
tarballs are published.
:term:`UNKNOWN_CONFIGURE_OPT_IGNORE`
Specifies a list of options that, if reported by the configure script
as being invalid, should not generate a warning during the
@@ -9871,6 +10349,18 @@ system and gives an overview of their function and contents.
the Yocto Project Development Tasks Manual for information on how to
use this variable.
:term:`USE_NLS`
Determine if language translations should be built for recipes that can
build them. This variable can be equal to:
- ``yes``: translations are enabled.
- ``no``: translation are disabled.
Recipes can use the value of this variable to enable language
translations in their build. Classes such as :ref:`ref-classes-gettext`
use the value of this variable to enable :wikipedia:`Gettext <Gettext>`
support.
:term:`USE_VT`
When using
:ref:`SysVinit <dev-manual/new-recipe:enabling system services>`,
@@ -10085,8 +10575,22 @@ system and gives an overview of their function and contents.
":ref:`ref-classes-insane`" section.
:term:`WATCHDOG_TIMEOUT`
Specifies the timeout in seconds used by the ``watchdog`` recipe and
also by ``systemd`` during reboot. The default is 60 seconds.
Specifies the timeout in seconds used by the ``watchdog-config`` recipe
and also by ``systemd`` during reboot. The default is 60 seconds.
:term:`WIC_CREATE_EXTRA_ARGS`
If the :term:`IMAGE_FSTYPES` variable contains "wic", the build
will generate a
:ref:`Wic image <dev-manual/wic:creating partitioned images using wic>`
automatically when BitBake builds an image recipe. As part of
this process BitBake will invoke the "`wic create`" command. The
:term:`WIC_CREATE_EXTRA_ARGS` variable is placed at the end of this
command which allows the user to supply additional arguments.
One such useful purpose for this mechanism is to add the ``-D`` (or
``--debug``) argument to the "`wic create`" command. This increases the
amount of debugging information written out to the Wic log during the
Wic creation process.
:term:`WIRELESS_DAEMON`
For ``connman`` and ``packagegroup-base``, specifies the wireless

View File

@@ -147,7 +147,9 @@ from the :term:`DISTRO` variable.
The
:ref:`populate_sdk_base <ref-classes-populate-sdk-*>`
class defines the default value of the :term:`SDK_TITLE` variable as
follows::
follows:
.. code-block:: none
SDK_TITLE ??= "${@d.getVar('DISTRO_NAME') or d.getVar('DISTRO')} SDK"
@@ -159,7 +161,9 @@ an example, assume you have your own layer for your distribution named
does the default "poky" distribution. If so, you could update the
:term:`SDK_TITLE` variable in the
``~/meta-mydistro/conf/distro/mydistro.conf`` file using the following
form::
form:
.. code-block:: none
SDK_TITLE = "your_title"
@@ -189,7 +193,9 @@ the installed SDKs to update the installed SDKs by using the
#. Build the extensible SDK normally (i.e., use the
``bitbake -c populate_sdk_ext`` imagename command).
#. Publish the SDK using the following command::
#. Publish the SDK using the following command:
.. code-block:: console
$ oe-publish-sdk some_path/sdk-installer.sh path_to_shared_http_directory
@@ -212,7 +218,9 @@ installation directory for the SDK is based on the
:term:`SDKEXTPATH` variables from
within the
:ref:`populate_sdk_base <ref-classes-populate-sdk-*>`
class as follows::
class as follows:
.. code-block:: none
SDKEXTPATH ??= "~/${@d.getVar('DISTRO')}_sdk"
@@ -229,7 +237,9 @@ assume you have your own layer for your distribution named
does the default "poky" distribution. If so, you could update the
:term:`SDKEXTPATH` variable in the
``~/meta-mydistro/conf/distro/mydistro.conf`` file using the following
form::
form:
.. code-block:: none
SDKEXTPATH = "some_path_for_your_installed_sdk"
@@ -263,7 +273,9 @@ source, you need to do a number of things:
#. Set the appropriate configuration so that the produced SDK knows how
to find the configuration. The variable you need to set is
:term:`SSTATE_MIRRORS`::
:term:`SSTATE_MIRRORS`:
.. code-block:: none
SSTATE_MIRRORS = "file://.* https://example.com/some_path/sstate-cache/PATH"
@@ -276,7 +288,9 @@ source, you need to do a number of things:
side, and its contents will not interfere with the build), then
you can set the variable in your ``local.conf`` or custom distro
configuration file. You can then pass the variable to the SDK by
adding the following::
adding the following:
.. code-block:: none
ESDK_LOCALCONF_ALLOW = "SSTATE_MIRRORS"
@@ -299,7 +313,9 @@ everything needed to reconstruct the image for which the SDK was built.
This bundling can lead to an SDK installer file that is a Gigabyte or
more in size. If the size of this file causes a problem, you can build
an SDK that has just enough in it to install and provide access to the
``devtool command`` by setting the following in your configuration::
``devtool command`` by setting the following in your configuration:
.. code-block:: none
SDK_EXT_TYPE = "minimal"
@@ -321,7 +337,9 @@ information enables the ``devtool search`` command to return useful
results.
To facilitate this wider range of information, you would need to set the
following::
following:
.. code-block:: none
SDK_INCLUDE_PKGDATA = "1"

View File

@@ -29,7 +29,7 @@ and then run the script to hand-install the toolchain.
Follow these steps to locate and hand-install the toolchain:
#. *Go to the Installers Directory:* Go to
:yocto_dl:`/releases/yocto/yocto-&DISTRO;/toolchain/`
:yocto_dl:`/releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/`
#. *Open the Folder for Your Build Host:* Open the folder that matches
your :term:`Build Host` (i.e.
@@ -40,15 +40,20 @@ Follow these steps to locate and hand-install the toolchain:
hardware, and image type.
The installer files (``*.sh``) follow this naming convention:
``poky-glibc-host_system-core-image-type-arch-toolchain[-ext]-release.sh``:
- ``host_system``: string representing your development system: ``i686`` or ``x86_64``
.. parsed-literal::
- ``type``: string representing the image: ``sato`` or ``minimal``
poky-glibc-*host_system*-core-image-*type*-*arch*-toolchain[-ext]-*release*.sh
- ``arch``: string representing the target architecture such as ``cortexa57-qemuarm64``
With:
- ``release``: version of the Yocto Project.
- *host_system*: string representing your development system: ``i686`` or ``x86_64``
- *type*: string representing the image: ``sato`` or ``minimal``
- *arch*: string representing the target architecture such as ``cortexa57-qemuarm64``
- *release*: version of the Yocto Project.
.. note::
The standard SDK installer does not have the ``-ext`` string as
@@ -61,13 +66,17 @@ Follow these steps to locate and hand-install the toolchain:
For example, if your build host is a 64-bit x86 system and you need
an extended SDK for a 64-bit core2 QEMU target, go into the ``x86_64``
folder and download the following installer::
folder and download the following installer:
.. code-block:: text
poky-glibc-x86_64-core-image-sato-core2-64-qemux86-64-toolchain-&DISTRO;.sh
#. *Run the Installer:* Be sure you have execution privileges and run
the installer. Here is an example from the ``Downloads``
directory::
directory:
.. code-block:: console
$ ~/Downloads/poky-glibc-x86_64-core-image-sato-core2-64-qemux86-64-toolchain-&DISTRO;.sh
@@ -104,7 +113,9 @@ build the SDK installer. Follow these steps:
the Source Directory (i.e. ``poky``), run the
:ref:`structure-core-script` environment
setup script to define the OpenEmbedded build environment on your
build host::
build host:
.. code-block:: console
$ source oe-init-build-env
@@ -130,7 +141,9 @@ build the SDK installer. Follow these steps:
:term:`SDKMACHINE` value must be set for the architecture of the
machine you are using to build the installer. If :term:`SDKMACHINE`
is not set appropriately, the build fails and provides an error
message similar to the following::
message similar to the following:
.. code-block:: text
The extensible SDK can currently only be built for the same
architecture as the machine being built on - SDK_ARCH
@@ -141,11 +154,15 @@ build the SDK installer. Follow these steps:
#. *Build the SDK Installer:* To build the SDK installer for a standard
SDK and populate the SDK image, use the following command form. Be
sure to replace ``image`` with an image (e.g. "core-image-sato")::
sure to replace ``image`` with an image (e.g. "core-image-sato"):
.. code-block:: console
$ bitbake image -c populate_sdk
You can do the same for the extensible SDK using this command form::
You can do the same for the extensible SDK using this command form:
.. code-block:: console
$ bitbake image -c populate_sdk_ext
@@ -170,7 +187,9 @@ build the SDK installer. Follow these steps:
libc-staticdev"
#. *Run the Installer:* You can now run the SDK installer from
``tmp/deploy/sdk`` in the :term:`Build Directory`. Here is an example::
``tmp/deploy/sdk`` in the :term:`Build Directory`. Here is an example:
.. code-block:: console
$ cd poky/build/tmp/deploy/sdk
$ ./poky-glibc-x86_64-core-image-sato-core2-64-toolchain-ext-&DISTRO;.sh
@@ -201,7 +220,7 @@ Follow these steps to extract the root filesystem:
Image File:* You need to find and download the root filesystem image
file that is appropriate for your target system. These files are kept
in machine-specific folders in the
:yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>`
:yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>`
in the "machines" directory.
The machine-specific folders of the "machines" directory contain
@@ -209,14 +228,19 @@ Follow these steps to extract the root filesystem:
also contain flattened root filesystem image files (``*.ext4``),
which you can use with QEMU directly.
The pre-built root filesystem image files follow the
``core-image-profile-machine.tar.bz2`` naming convention:
The pre-built root filesystem image files follow this naming convention:
- ``profile``: filesystem image's profile, such as ``minimal``,
.. parsed-literal::
core-image-*profile*-*machine*.tar.bz2
With:
- *profile*: filesystem image's profile, such as ``minimal``,
``minimal-dev`` or ``sato``. For information on these types of image
profiles, see the "Images" chapter in the Yocto Project Reference Manual.
- ``machine``: same string as the name of the parent download directory.
- *machine*: same string as the name of the parent download directory.
The root filesystems
provided by the Yocto Project are based off of the
@@ -224,7 +248,9 @@ Follow these steps to extract the root filesystem:
For example, if you plan on using a BeagleBone device as your target
hardware and your image is a ``core-image-sato-sdk`` image, you can
download the following file::
download the following file:
.. code-block:: text
core-image-sato-sdk-beaglebone-yocto.tar.bz2
@@ -236,7 +262,9 @@ Follow these steps to extract the root filesystem:
installed the toolchain (e.g. ``poky_sdk``).
Here is an example based on the toolchain installed in the
":ref:`sdk-manual/appendix-obtain:locating pre-built sdk installers`" section::
":ref:`sdk-manual/appendix-obtain:locating pre-built sdk installers`" section:
.. code-block:: console
$ source poky_sdk/environment-setup-core2-64-poky-linux
@@ -245,9 +273,11 @@ Follow these steps to extract the root filesystem:
Here is an example command that extracts the root filesystem
from a previously built root filesystem image that was downloaded
from the :yocto_dl:`Index of Releases </releases/yocto/yocto-&DISTRO;/machines/>`.
from the :yocto_dl:`Index of Releases </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>`.
This command extracts the root filesystem into the ``core2-64-sato``
directory::
directory:
.. code-block:: console
$ runqemu-extract-sdk ~/Downloads/core-image-sato-sdk-beaglebone-yocto.tar.bz2 ~/beaglebone-sato
@@ -256,24 +286,52 @@ Follow these steps to extract the root filesystem:
Installed Standard SDK Directory Structure
==========================================
The following figure shows the resulting directory structure after you
install the Standard SDK by running the ``*.sh`` SDK installation
script:
After you install the Standard SDK by running the ``*.sh`` SDK installation
script, the following directory structure should be observed:
.. image:: figures/sdk-installed-standard-sdk-directory.png
:scale: 100%
.. parsed-literal::
*install_dir*/*version*/
├── buildinfo
├── environment-setup-*target*-poky-linux
├── site-config-*target*-poky-linux
├── sysroots/
│ ├── *target*-poky-linux/
│ │ ├── bin/
│ │ ├── boot/
│ │ ├── etc/
│ │ ├── home/
│ │ ├── lib/
│ │ ├── media/
│ │ ├── mnt/
│ │ ├── proc/
│ │ ├── run/
│ │ ├── sbin/
│ │ ├── sys/
│ │ ├── tmp/
│ │ ├── usr/
│ │ └── var/
│ └── *host*-pokysdk-linux/
│ ├── bin/
│ ├── environment-setup.d/
│ ├── etc/
│ ├── lib/
│ ├── sbin/
│ ├── usr/
│ └── var/
└── version-*target*-poky-linux
The installed SDK consists of an environment setup script for the SDK, a
configuration file for the target, a version file for the target, and
the root filesystem (``sysroots``) needed to develop objects for the
target system.
Within the figure, italicized text is used to indicate replaceable
portions of the file or directory name. For example, install_dir/version
is the directory where the SDK is installed. By default, this directory
is ``/opt/poky/``. And, version represents the specific snapshot of the
SDK (e.g. &DISTRO;). Furthermore, target represents the target architecture
(e.g. ``i586``) and host represents the development system's
In the layout above, italicized text is used to indicate replaceable
portions of the file or directory name. For example, *install_dir*/*version*
is the directory where the SDK is installed. By default, *install_dir*
is ``/opt/poky/``. And, *version* represents the specific snapshot of the
SDK (e.g. &DISTRO;). Furthermore, *target* represents the target architecture
(e.g. ``i586``) and *host* represents the development system's
architecture (e.g. ``x86_64``). Thus, the complete names of the two
directories within the ``sysroots`` could be ``i586-poky-linux`` and
``x86_64-pokysdk-linux`` for the target and host, respectively.
@@ -281,13 +339,29 @@ directories within the ``sysroots`` could be ``i586-poky-linux`` and
Installed Extensible SDK Directory Structure
============================================
The following figure shows the resulting directory structure after you
install the Extensible SDK by running the ``*.sh`` SDK installation
script:
After you install the Extensible SDK by running the ``*.sh`` SDK installation
script, the following directory structure should be observed:
.. image:: figures/sdk-installed-extensible-sdk-directory.png
:scale: 80%
:align: center
.. parsed-literal::
*install_dir*/
├── bitbake-cookerdaemon.log
├── buildinfo
├── buildtools/
├── cache/
├── conf/
├── .devtoolbase
├── downloads/
├── environment-setup-*target*-poky-linux
├── layers/
├── oe-time-dd-test.dat
├── preparing_system_build.log
├── site-config-*target*-poky-linux
├── sstate-cache/
├── sysroots/
├── tmp/
├── version-*target*-poky-linux
└── workspace/
The installed directory structure for the extensible SDK is quite
different than the installed structure for the standard SDK. The
@@ -300,7 +374,7 @@ the SDK, a configuration file for the target, a version file for the
target, and log files for the OpenEmbedded build system preparation
script run by the installer and BitBake.
Within the figure, italicized text is used to indicate replaceable
portions of the file or directory name. For example, install_dir is the
directory where the SDK is installed, which is ``poky_sdk`` by default,
and target represents the target architecture (e.g. ``i586``).
In the layout above, italicized text is used to indicate replaceable
portions of the file or directory name. For example, *install_dir* is the
directory where the SDK is installed, which is by default ``poky_sdk`` in your
home directory and *target* represents the target architecture (e.g. ``i586``).

View File

@@ -71,7 +71,9 @@ Setting up the Extensible SDK environment directly in a Yocto build
#. Set up all the needed layers and a Yocto :term:`Build Directory`, e.g. a regular Yocto
build where ``bitbake`` can be executed.
#. Run::
#. Run:
.. code-block:: console
$ bitbake meta-ide-support
$ bitbake -c populate_sysroot gtk+3
@@ -87,7 +89,7 @@ Host` by running the ``*.sh`` installation script.
You can download a tarball installer, which includes the pre-built
toolchain, the ``runqemu`` script, the internal build system,
``devtool``, and support files from the appropriate
:yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within the Index of
:yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within the Index of
Releases. Toolchains are available for several 32-bit and 64-bit
architectures with the ``x86_64`` directories, respectively. The
toolchains the Yocto Project provides are based off the
@@ -98,30 +100,27 @@ The names of the tarball installer scripts are such that a string
representing the host system appears first in the filename and then is
immediately followed by a string representing the target architecture.
An extensible SDK has the string "-ext" as part of the name. Following
is the general form::
is the general form:
poky-glibc-host_system-image_type-arch-toolchain-ext-release_version.sh
.. parsed-literal::
Where:
host_system is a string representing your development system:
poky-glibc-*host_system*-*image_type*-*arch*-toolchain-ext-*release_version*.sh
i686 or x86_64.
Where:
image_type is the image for which the SDK was built:
- *host_system* is a string representing your development system: ``i686`` or ``x86_64``.
core-image-sato or core-image-minimal
- *image_type* is the image for which the SDK was built: ``core-image-sato`` or ``core-image-minimal``.
arch is a string representing the tuned target architecture:
- *arch* is a string representing the tuned target architecture: ``aarch64``, ``armv5e``, ``core2-64``, ``i586``, ``mips32r2``, ``mips64``, ``ppc7400``, or ``cortexa8hf-neon``.
aarch64, armv5e, core2-64, i586, mips32r2, mips64, ppc7400, or cortexa8hf-neon
release_version is a string representing the release number of the Yocto Project:
&DISTRO;, &DISTRO;+snapshot
- *release_version* is a string representing the release number of the Yocto Project: ``&DISTRO;``, ``&DISTRO;+snapshot``.
For example, the following SDK installer is for a 64-bit
development host system and a i586-tuned target architecture based off
the SDK for ``core-image-sato`` and using the current &DISTRO; snapshot::
the SDK for ``core-image-sato`` and using the current &DISTRO; snapshot:
.. code-block:: text
poky-glibc-x86_64-core-image-sato-i586-toolchain-ext-&DISTRO;.sh
@@ -142,7 +141,9 @@ must be writable for whichever users need to use the SDK.
The following command shows how to run the installer given a toolchain
tarball for a 64-bit x86 development host system and a 64-bit x86 target
architecture. The example assumes the SDK installer is located in
``~/Downloads/`` and has execution rights::
``~/Downloads/`` and has execution rights:
.. code-block:: console
$ ./Downloads/poky-glibc-x86_64-core-image-minimal-core2-64-toolchain-ext-2.5.sh
Poky (Yocto Project Reference Distro) Extensible SDK installer version 2.5
@@ -192,7 +193,9 @@ begin with the string "``environment-setup``" and include as part of
their name the tuned target architecture. As an example, the following
commands set the working directory to where the SDK was installed and
then source the environment setup script. In this example, the setup
script is for an IA-based target machine using i586 tuning::
script is for an IA-based target machine using i586 tuning:
.. code-block:: console
$ cd /home/scottrif/poky_sdk
$ source environment-setup-core2-64-poky-linux
@@ -200,7 +203,9 @@ script is for an IA-based target machine using i586 tuning::
Run devtool --help for further details.
When using the environment script directly in a Yocto build, it can
be run similarly::
be run similarly:
.. code-block:: console
$ source tmp/deploy/images/qemux86-64/environment-setup-core2-64-poky-linux
@@ -669,7 +674,7 @@ SDK or eSDK:
``devtool build``.
It also allows to benefit from the very good integration that IDEs like
VSCode offer for tools like CMake or GDB.
However, supporting many programming languages and multiple
IDEs is quite an elaborate and constantly evolving thing. Support for IDEs
is therefore implemented as plugins. Plugins can also be provided by
@@ -802,7 +807,7 @@ the two modes:
This instance of VSCode uses plugins that are useful for the development
of the application. ``devtool ide-sdk`` generates the necessary
``extensions.json``, ``settings.json``, ``tasks.json``and ``launch.json``
``extensions.json``, ``settings.json``, ``tasks.json`` and ``launch.json``
configuration files for all the involved plugins.
When the source code folder present in the workspace folder is opened in
@@ -1585,7 +1590,9 @@ populated on-demand. Sometimes you must explicitly install extra items
into the SDK. If you need these extra items, you can first search for
the items using the ``devtool search`` command. For example, suppose you
need to link to libGL but you are not sure which recipe provides libGL.
You can use the following command to find out::
You can use the following command to find out:
.. code-block:: console
$ devtool search libGL mesa
A free implementation of the OpenGL API
@@ -1598,7 +1605,9 @@ When using the extensible SDK directly in a Yocto build
In this scenario, the Yocto build tooling, e.g. ``bitbake``
is directly accessible to build additional items, and it
can simply be executed directly::
can simply be executed directly:
.. code-block:: console
$ bitbake curl-native
# Add newly built native items to native sysroot
@@ -1610,14 +1619,16 @@ can simply be executed directly::
When using a standalone installer for the Extensible SDK
--------------------------------------------------------
::
.. code-block:: console
$ devtool sdk-install mesa
By default, the ``devtool sdk-install`` command assumes
the item is available in pre-built form from your SDK provider. If the
item is not available and it is acceptable to build the item from
source, you can add the "-s" option as follows::
source, you can add the "-s" option as follows:
.. code-block:: console
$ devtool sdk-install -s mesa
@@ -1633,7 +1644,9 @@ If you are working with an installed extensible SDK that gets
occasionally updated (e.g. a third-party SDK), then you will need to
manually "pull down" the updates into the installed SDK.
To update your installed SDK, use ``devtool`` as follows::
To update your installed SDK, use ``devtool`` as follows:
.. code-block:: console
$ devtool sdk-update
@@ -1641,7 +1654,9 @@ The previous command assumes your SDK provider has set the default update URL
for you through the :term:`SDK_UPDATE_URL` variable as described in the
":ref:`sdk-manual/appendix-customizing:Providing Updates to the Extensible SDK After Installation`"
section. If the SDK provider has not set that default URL, you need to
specify it yourself in the command as follows::
specify it yourself in the command as follows:
.. code-block:: console
$ devtool sdk-update path_to_update_directory

Binary file not shown.

Before

Width:  |  Height:  |  Size: 41 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 65 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 38 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 30 KiB

View File

@@ -148,7 +148,7 @@ SDK Development Model
Fundamentally, the SDK fits into the development process as follows:
.. image:: figures/sdk-environment.png
.. image:: svg/sdk-environment.*
:width: 100%
The SDK is installed on any machine and can be used to develop applications,
@@ -173,7 +173,7 @@ You just need to follow these general steps:
root filesystem images.
If you are going to develop your application on hardware, go to the
:yocto_dl:`machines </releases/yocto/yocto-&DISTRO;/machines/>` download area and choose a
:yocto_dl:`machines </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/>` download area and choose a
target machine area from which to download the kernel image and root
filesystem. This download area could have several files in it that
support development using actual hardware. For example, the area
@@ -183,7 +183,7 @@ You just need to follow these general steps:
If you are going to develop your application and then run and test it
using the QEMU emulator, go to the
:yocto_dl:`machines/qemu </releases/yocto/yocto-&DISTRO;/machines/qemu>` download area. From this
:yocto_dl:`machines/qemu </releases/yocto/&DISTRO_REL_LATEST_TAG;/machines/qemu>` download area. From this
area, go down into the directory for your target architecture (e.g.
``qemux86_64`` for an Intel-based 64-bit architecture). Download the
kernel, root filesystem, and any other files you need for your

View File

@@ -0,0 +1,463 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
width="152.07843mm"
height="104.79381mm"
viewBox="0 0 152.07843 104.79381"
version="1.1"
id="svg1"
xml:space="preserve"
inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
sodipodi:docname="sdk-environment.svg"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"><sodipodi:namedview
id="namedview1"
pagecolor="#ffffff"
bordercolor="#000000"
borderopacity="0.25"
inkscape:showpageshadow="2"
inkscape:pageopacity="0.0"
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
inkscape:document-units="mm"
inkscape:zoom="1.7923962"
inkscape:cx="323.86813"
inkscape:cy="222.32808"
inkscape:window-width="2560"
inkscape:window-height="1440"
inkscape:window-x="0"
inkscape:window-y="0"
inkscape:window-maximized="0"
inkscape:current-layer="layer2" /><defs
id="defs1"><marker
style="overflow:visible"
id="marker27"
refX="0"
refY="0"
orient="auto-start-reverse"
inkscape:stockid="Triangle arrow"
markerWidth="1.5"
markerHeight="1"
viewBox="0 0 1 1"
inkscape:isstock="true"
inkscape:collect="always"
preserveAspectRatio="none"><path
transform="scale(0.5)"
style="fill:context-stroke;fill-rule:evenodd;stroke:context-stroke;stroke-width:1pt"
d="M 5.77,0 -2.88,5 V -5 Z"
id="path27" /></marker><marker
style="overflow:visible"
id="marker24"
refX="0"
refY="0"
orient="auto-start-reverse"
inkscape:stockid="Triangle arrow"
markerWidth="1.5"
markerHeight="1"
viewBox="0 0 1 1"
inkscape:isstock="true"
inkscape:collect="always"
preserveAspectRatio="none"><path
transform="scale(0.5)"
style="fill:context-stroke;fill-rule:evenodd;stroke:context-stroke;stroke-width:1pt"
d="M 5.77,0 -2.88,5 V -5 Z"
id="path24" /></marker><marker
style="overflow:visible"
id="Triangle"
refX="-1"
refY="0"
orient="auto-start-reverse"
inkscape:stockid="Triangle arrow"
markerWidth="0.25"
markerHeight="0.44999999"
viewBox="0 0 1 1"
inkscape:isstock="true"
inkscape:collect="always"
preserveAspectRatio="none"
markerUnits="strokeWidth"><path
transform="scale(0.5)"
style="fill:context-stroke;fill-rule:evenodd;stroke:context-stroke;stroke-width:1pt"
d="M 5.77,0 -2.88,5 V -5 Z"
id="path135" /></marker></defs><g
inkscape:groupmode="layer"
id="layer2"
inkscape:label="Layer 2"
style="display:inline"
transform="translate(-15.261151,-139.49913)"><g
id="g5"
inkscape:label="yp-machine"><rect
style="display:inline;fill:#7399cb;fill-opacity:1;stroke:#4d6fad;stroke-width:0.4;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
id="rect1"
width="79.70993"
height="38.067791"
x="15.552484"
y="150.90607"
inkscape:label="yp-machine-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.153561"
y="161.57883"
id="text3"
inkscape:label="yp-machine-rect-hosts-yp-text"><tspan
sodipodi:role="line"
id="tspan3"
style="stroke-width:0"
x="19.153561"
y="161.57883">Hosts Yocto Project</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.240089"
y="166.77032"
id="text3-0"
inkscape:label="yp-machine-rect-host-sdk-text"><tspan
sodipodi:role="line"
id="tspan3-5"
style="stroke-width:0"
x="19.240089"
y="166.77032">Can Host an SDK</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.36305"
y="171.6631"
id="text3-0-3"
inkscape:label="yp-machine-rect-build-sdk-text"><tspan
sodipodi:role="line"
id="tspan3-5-3"
style="stroke-width:0"
x="19.36305"
y="171.6631">Can Build an SDK</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.291393"
y="176.81357"
id="text3-0-3-3"
inkscape:label="yp-machine-rect-build-img-text"><tspan
sodipodi:role="line"
id="tspan3-5-3-4"
style="stroke-width:0"
x="19.291393"
y="176.81357">Can Build an Image</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.267235"
y="181.81523"
id="text3-0-3-3-8"
inkscape:label="yp-machine-rect-build-app-text"><tspan
sodipodi:role="line"
id="tspan3-5-3-4-1"
style="stroke-width:0"
x="19.267235"
y="181.81523">Can Build an Application</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.93636px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#4d6fad;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="15.660255"
y="155.1917"
id="text2"
inkscape:label="yp-machine-text"
transform="scale(1.0510998,0.95138443)"><tspan
id="tspan2"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.93636px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;fill:#000000;stroke:#000000;stroke-width:0;stroke-dasharray:none;stroke-opacity:1"
x="15.660255"
y="155.1917"
sodipodi:role="line">Yocto Project Machine</tspan></text></g><g
id="g7"
inkscape:label="target-hw"><rect
style="display:inline;fill:#ff8e98;fill-opacity:1;stroke:#4d6fad;stroke-width:0.4;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
id="rect5"
width="54.540253"
height="21.210974"
x="15.461151"
y="222.88196"
inkscape:label="target-hw-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.230175"
y="229.96002"
id="text3-0-3-3-8-6"
inkscape:label="target-hw-rect-boot-run-app-text"><tspan
sodipodi:role="line"
id="tspan3-5-3-4-1-7"
style="stroke-width:0"
x="19.230175"
y="229.96002">Boots and Runs Images</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.216074"
y="235.00998"
id="text3-0-3-3-8-6-3"
inkscape:label="target-hw-rect-rt-debug-text"><tspan
sodipodi:role="line"
id="tspan3-5-3-4-1-7-7"
style="stroke-width:0"
x="19.216074"
y="235.00998">Real Time Debugging</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="19.318588"
y="239.95505"
id="text3-0-3-3-8-6-3-1"
inkscape:label="target-hw-rect-run-apps-text"><tspan
sodipodi:role="line"
id="tspan3-5-3-4-1-7-7-0"
style="stroke-width:0"
x="19.318588"
y="239.95505">Runs Applications</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.85198px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="15.431406"
y="240.36668"
id="text5"
transform="scale(1.0919034,0.9158319)"
inkscape:label="target-hw-text"><tspan
sodipodi:role="line"
id="tspan5"
style="stroke-width:0"
x="15.431406"
y="240.36668">Target Hardware</tspan></text></g><g
id="g22"
inkscape:label="sdk-machine-bot"
transform="translate(-0.02339256,71.952437)"
style="display:inline"><rect
style="display:inline;opacity:1;fill:#bcff75;fill-opacity:1;stroke:#4d6fad;stroke-width:0.4;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
id="rect18"
width="35.780399"
height="24.143047"
x="131.34613"
y="144.82916"
inkscape:label="sdk-machine-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.18832"
y="163.78954"
id="text19"
inkscape:label="sdk-machine-rect-host-sdk-text"><tspan
sodipodi:role="line"
id="tspan19"
style="stroke-width:0"
x="135.18832"
y="163.78954">Hosts an SDK</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.28667"
y="158.73506"
id="text20"
inkscape:label="sdk-machine-rect-dbg-text"><tspan
sodipodi:role="line"
id="tspan20"
style="stroke-width:0"
x="135.28667"
y="158.73506">Debug Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.0829"
y="153.75328"
id="text21"
inkscape:label="sdk-machine-rect-compile-text"><tspan
sodipodi:role="line"
id="tspan21"
style="stroke-width:0"
x="135.0829"
y="153.75328">Compile Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.8036px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="123.12138"
y="153.16264"
id="text22"
transform="scale(1.0781897,0.92748058)"
inkscape:label="sdk-machine-text"><tspan
sodipodi:role="line"
id="tspan22"
style="stroke-width:0"
x="123.12138"
y="153.16264">SDK Machine</tspan></text></g><g
id="g11"
inkscape:label="sdk-machine-mid"
transform="translate(0.01304739,36.040971)"
style="display:inline"><rect
style="display:inline;opacity:1;fill:#bcff75;fill-opacity:1;stroke:#4d6fad;stroke-width:0.4;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
id="rect8"
width="35.780399"
height="24.143047"
x="131.34613"
y="144.82916"
inkscape:label="sdk-machine-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.18832"
y="163.78954"
id="text8"
inkscape:label="sdk-machine-rect-host-sdk-text"><tspan
sodipodi:role="line"
id="tspan8"
style="stroke-width:0"
x="135.18832"
y="163.78954">Hosts an SDK</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.28667"
y="158.73506"
id="text9"
inkscape:label="sdk-machine-rect-dbg-text"><tspan
sodipodi:role="line"
id="tspan9"
style="stroke-width:0"
x="135.28667"
y="158.73506">Debug Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.0829"
y="153.75328"
id="text10"
inkscape:label="sdk-machine-rect-compile-text"><tspan
sodipodi:role="line"
id="tspan10"
style="stroke-width:0"
x="135.0829"
y="153.75328">Compile Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.8036px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="123.12138"
y="153.16264"
id="text11"
transform="scale(1.0781897,0.92748058)"
inkscape:label="sdk-machine-text"><tspan
sodipodi:role="line"
id="tspan11"
style="stroke-width:0"
x="123.12138"
y="153.16264">SDK Machine</tspan></text></g><g
id="g18"
inkscape:label="sdk-machine-top"
style="display:inline"><rect
style="display:inline;opacity:1;fill:#bcff75;fill-opacity:1;stroke:#4d6fad;stroke-width:0.4;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
id="rect15"
width="35.780399"
height="24.143047"
x="131.34613"
y="144.82916"
inkscape:label="sdk-machine-rect" /><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.18832"
y="163.78954"
id="text15"
inkscape:label="sdk-machine-rect-host-sdk-text"><tspan
sodipodi:role="line"
id="tspan15"
style="stroke-width:0"
x="135.18832"
y="163.78954">Hosts an SDK</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.28667"
y="158.73506"
id="text16"
inkscape:label="sdk-machine-rect-dbg-text"><tspan
sodipodi:role="line"
id="tspan16"
style="stroke-width:0"
x="135.28667"
y="158.73506">Debug Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="135.0829"
y="153.75328"
id="text17"
inkscape:label="sdk-machine-rect-compile-text"><tspan
sodipodi:role="line"
id="tspan17"
style="stroke-width:0"
x="135.0829"
y="153.75328">Compile Code</tspan></text><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.8036px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="123.12138"
y="153.16264"
id="text18"
transform="scale(1.0781897,0.92748058)"
inkscape:label="sdk-machine-text"><tspan
sodipodi:role="line"
id="tspan18"
style="stroke-width:0"
x="123.12138"
y="153.16264">SDK Machine</tspan></text></g><g
id="g24"
inkscape:label="deploy"><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.52777px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="67.689835"
y="202.65199"
id="text4"
inkscape:label="deploy-text"><tspan
sodipodi:role="line"
id="tspan4"
style="stroke-width:0"
x="67.689835"
y="202.65199">Deploy</tspan></text><path
style="opacity:1;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:6;stroke-linecap:square;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1;marker-end:url(#Triangle)"
d="m 61.112324,191.97241 -0.104376,23.8825"
id="path22"
sodipodi:nodetypes="cc"
inkscape:label="arrow-deploy" /></g><g
id="g27"
inkscape:label="objects-bot"
style="display:inline"><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.55315px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="112.58056"
y="228.37267"
id="text4-0-7-2"
inkscape:label="objects-text"
transform="scale(1.0071938,0.99285757)"><tspan
sodipodi:role="line"
id="tspan4-7-2-7"
style="stroke-width:0"
x="112.58056"
y="228.37267">Objects</tspan></text><path
style="opacity:1;fill:none;fill-opacity:1;stroke:#000000;stroke-width:0.799999;stroke-linecap:square;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1;marker-end:url(#marker27)"
d="m 130.78047,228.73371 -20.13864,0.0652 0.10438,-43.68265 -10.933713,-0.10439"
id="path26"
sodipodi:nodetypes="cccc"
inkscape:label="arrow" /></g><g
id="g26"
style="display:inline"
inkscape:label="objects-mid"><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.56577px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="104.3705"
y="170.58327"
id="text4-0-7"
inkscape:label="objects-text"
transform="scale(1.0107715,0.98934328)"><tspan
sodipodi:role="line"
id="tspan4-7-2"
style="stroke-width:0"
x="104.3705"
y="170.58327">Objects</tspan></text><path
style="display:inline;opacity:1;fill:none;fill-opacity:1;stroke:#000000;stroke-width:0.8;stroke-linecap:square;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1;marker-end:url(#marker24)"
d="m 130.9339,191.93551 -11.2556,-0.0369 0.18452,-21.88383 -20.038641,0.18453"
id="path25"
sodipodi:nodetypes="cccc"
inkscape:label="arrow" /></g><g
id="g25"
inkscape:label="objects-top"><text
xml:space="preserve"
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:3.55676px;font-family:'Liberation Sans';-inkscape-font-specification:'Liberation Sans, Bold';font-variant-ligatures:normal;font-variant-caps:normal;font-variant-numeric:normal;font-variant-east-asian:normal;writing-mode:lr-tb;direction:ltr;display:inline;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
x="104.78993"
y="157.1425"
id="text4-0"
inkscape:label="objects-text"
transform="scale(1.0082173,0.99184966)"><tspan
sodipodi:role="line"
id="tspan4-7"
style="stroke-width:0"
x="104.78993"
y="157.1425">Objects</tspan></text><path
style="opacity:1;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:0.9;stroke-linecap:square;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1;marker-end:url(#marker24)"
d="m 130.91375,157.65432 -30.64596,-0.24975"
id="path23"
sodipodi:nodetypes="cc"
inkscape:label="arrow" /></g></g></svg>

After

Width:  |  Height:  |  Size: 29 KiB

View File

@@ -43,7 +43,7 @@ Host` by running the ``*.sh`` installation script.
You can download a tarball installer, which includes the pre-built
toolchain, the ``runqemu`` script, and support files from the
appropriate :yocto_dl:`toolchain </releases/yocto/yocto-&DISTRO;/toolchain/>` directory within
appropriate :yocto_dl:`toolchain </releases/yocto/&DISTRO_REL_LATEST_TAG;/toolchain/>` directory within
the Index of Releases. Toolchains are available for several 32-bit and
64-bit architectures with the ``x86_64`` directories, respectively. The
toolchains the Yocto Project provides are based off the
@@ -52,32 +52,29 @@ libraries appropriate for developing against the corresponding image.
The names of the tarball installer scripts are such that a string
representing the host system appears first in the filename and then is
immediately followed by a string representing the target architecture::
immediately followed by a string representing the target architecture:
poky-glibc-host_system-image_type-arch-toolchain-release_version.sh
.. parsed-literal::
Where:
host_system is a string representing your development system:
poky-glibc-*host_system*-*image_type*-*arch*-toolchain-*release_version*.sh
i686 or x86_64.
Where:
image_type is the image for which the SDK was built:
- *host_system* is a string representing your development system: ``i686`` or ``x86_64``.
core-image-minimal or core-image-sato.
- *image_type* is the image for which the SDK was built: ``core-image-minimal`` or ``core-image-sato``.
arch is a string representing the tuned target architecture:
- *arch* is a string representing the tuned target architecture: ``aarch64``, ``armv5e``, ``core2-64``, ``i586``, ``mips32r2``, ``mips64``, ``ppc7400``, or ``cortexa8hf-neon``.
aarch64, armv5e, core2-64, i586, mips32r2, mips64, ppc7400, or cortexa8hf-neon.
release_version is a string representing the release number of the Yocto Project:
&DISTRO;, &DISTRO;+snapshot
- *release_version* is a string representing the release number of the Yocto Project: ``&DISTRO;``, ``&DISTRO;+snapshot``.
For example, the following SDK installer is for a 64-bit
development host system and a i586-tuned target architecture based off
the SDK for ``core-image-sato`` and using the current DISTRO snapshot::
the SDK for ``core-image-sato`` and the ``&DISTRO;`` release:
poky-glibc-x86_64-core-image-sato-i586-toolchain-DISTRO.sh
.. code-block:: text
poky-glibc-x86_64-core-image-sato-i586-toolchain-&DISTRO;.sh
.. note::
@@ -96,7 +93,9 @@ must be writable for whichever users need to use the SDK.
The following command shows how to run the installer given a toolchain
tarball for a 64-bit x86 development host system and a 64-bit x86 target
architecture. The example assumes the SDK installer is located in
``~/Downloads/`` and has execution rights::
``~/Downloads/`` and has execution rights:
.. code-block:: console
$ ./Downloads/poky-glibc-x86_64-core-image-sato-i586-toolchain-&DISTRO;.sh
Poky (Yocto Project Reference Distro) SDK installer version &DISTRO;
@@ -136,7 +135,9 @@ begin with the string "``environment-setup``" and include as part of
their name the tuned target architecture. As an example, the following
commands set the working directory to where the SDK was installed and
then source the environment setup script. In this example, the setup
script is for an IA-based target machine using i586 tuning::
script is for an IA-based target machine using i586 tuning:
.. code-block:: console
$ source /opt/poky/&DISTRO;/environment-setup-i586-poky-linux

View File

@@ -33,7 +33,9 @@ project:
#. *Create a Working Directory and Populate It:* Create a clean
directory for your project and then make that directory your working
location::
location:
.. code-block:: console
$ mkdir $HOME/helloworld
$ cd $HOME/helloworld
@@ -45,23 +47,30 @@ project:
respectively.
Use the following command to create an empty README file, which is
required by GNU Coding Standards::
required by GNU Coding Standards:
.. code-block:: console
$ touch README
Create the remaining
three files as follows:
- ``hello.c``::
- ``hello.c``:
.. code-block:: c
#include <stdio.h>
main()
int main()
{
printf("Hello World!\n");
return 0;
}
- ``configure.ac``::
- ``configure.ac``:
.. code-block:: none
AC_INIT(hello,0.1)
AM_INIT_AUTOMAKE([foreign])
@@ -69,7 +78,9 @@ project:
AC_CONFIG_FILES(Makefile)
AC_OUTPUT
- ``Makefile.am``::
- ``Makefile.am``:
.. code-block:: none
bin_PROGRAMS = hello
hello_SOURCES = hello.c
@@ -83,17 +94,23 @@ project:
which is followed by the string "poky-linux". For this example, the
command sources a script from the default SDK installation directory
that uses the 32-bit Intel x86 Architecture and the &DISTRO; Yocto
Project release::
Project release:
.. code-block:: console
$ source /opt/poky/&DISTRO;/environment-setup-i586-poky-linux
Another example is sourcing the environment setup directly in a Yocto
build::
build:
.. code-block:: console
$ source tmp/deploy/images/qemux86-64/environment-setup-core2-64-poky-linux
#. *Create the configure Script:* Use the ``autoreconf`` command to
generate the ``configure`` script::
generate the ``configure`` script:
.. code-block:: console
$ autoreconf
@@ -112,7 +129,9 @@ project:
the cross-compiler. The
:term:`CONFIGURE_FLAGS`
environment variable provides the minimal arguments for GNU
configure::
configure:
.. code-block:: console
$ ./configure ${CONFIGURE_FLAGS}
@@ -125,12 +144,16 @@ project:
``armv5te-poky-linux-gnueabi``. You will notice that the name of the
script is ``environment-setup-armv5te-poky-linux-gnueabi``. Thus, the
following command works to update your project and rebuild it using
the appropriate cross-toolchain tools::
the appropriate cross-toolchain tools:
.. code-block:: console
$ ./configure --host=armv5te-poky-linux-gnueabi --with-libtool-sysroot=sysroot_dir
#. *Make and Install the Project:* These two commands generate and
install the project into the destination directory::
install the project into the destination directory:
.. code-block:: console
$ make
$ make install DESTDIR=./tmp
@@ -145,13 +168,17 @@ project:
This next command is a simple way to verify the installation of your
project. Running the command prints the architecture on which the
binary file can run. This architecture should be the same
architecture that the installed cross-toolchain supports::
architecture that the installed cross-toolchain supports:
.. code-block:: console
$ file ./tmp/usr/local/bin/hello
#. *Execute Your Project:* To execute the project, you would need to run
it on your target hardware. If your target hardware happens to be
your build host, you could run the project as follows::
your build host, you could run the project as follows:
.. code-block:: console
$ ./tmp/usr/local/bin/hello
@@ -197,7 +224,9 @@ regarding variable behavior:
.. note::
Regardless of how you set your variables, if you use the "-e" option
with ``make``, the variables from the SDK setup script take precedence::
with ``make``, the variables from the SDK setup script take precedence:
.. code-block:: console
$ make -e target
@@ -208,7 +237,9 @@ demonstrates these variable behaviors.
In a new shell environment variables are not established for the SDK
until you run the setup script. For example, the following commands show
a null value for the compiler variable (i.e.
:term:`CC`)::
:term:`CC`):
.. code-block:: console
$ echo ${CC}
@@ -218,7 +249,9 @@ Running the
SDK setup script for a 64-bit build host and an i586-tuned target
architecture for a ``core-image-sato`` image using the current &DISTRO;
Yocto Project release and then echoing that variable shows the value
established through the script::
established through the script:
.. code-block:: console
$ source /opt/poky/&DISTRO;/environment-setup-i586-poky-linux
$ echo ${CC}
@@ -229,7 +262,9 @@ example:
#. *Create a Working Directory and Populate It:* Create a clean
directory for your project and then make that directory your working
location::
location:
.. code-block:: console
$ mkdir $HOME/helloworld
$ cd $HOME/helloworld
@@ -242,7 +277,9 @@ example:
Create the three files as follows:
- ``main.c``::
- ``main.c``:
.. code-block:: c
#include "module.h"
void sample_func();
@@ -252,12 +289,16 @@ example:
return 0;
}
- ``module.h``::
- ``module.h``:
.. code-block:: c
#include <stdio.h>
void sample_func();
- ``module.c``::
- ``module.c``:
.. code-block:: c
#include "module.h"
void sample_func()
@@ -275,12 +316,16 @@ example:
which is followed by the string "poky-linux". For this example, the
command sources a script from the default SDK installation directory
that uses the 32-bit Intel x86 Architecture and the &DISTRO_NAME; Yocto
Project release::
Project release:
.. code-block:: console
$ source /opt/poky/&DISTRO;/environment-setup-i586-poky-linux
Another example is sourcing the environment setup directly in a Yocto
build::
build:
.. code-block:: console
$ source tmp/deploy/images/qemux86-64/environment-setup-core2-64-poky-linux
@@ -288,7 +333,9 @@ example:
two lines that can be used to set the :term:`CC` variable. One line is
identical to the value that is set when you run the SDK environment
setup script, and the other line sets :term:`CC` to "gcc", the default
GNU compiler on the build host::
GNU compiler on the build host:
.. code-block:: Makefile
# CC=i586-poky-linux-gcc -m32 -march=i586 --sysroot=/opt/poky/2.5/sysroots/i586-poky-linux
# CC="gcc"
@@ -305,7 +352,9 @@ example:
#. *Make the Project:* Use the ``make`` command to create the binary
output file. Because variables are commented out in the Makefile, the
value used for :term:`CC` is the value set when the SDK environment setup
file was run::
file was run:
.. code-block:: console
$ make
i586-poky-linux-gcc -m32 -march=i586 --sysroot=/opt/poky/2.5/sysroots/i586-poky-linux -I . -c main.c
@@ -318,7 +367,9 @@ example:
You can override the :term:`CC` environment variable with the same
variable as set from the Makefile by uncommenting the line in the
Makefile and running ``make`` again::
Makefile and running ``make`` again:
.. code-block:: console
$ make clean
rm -rf *.o
@@ -339,7 +390,9 @@ example:
variable as part of the command line. Go into the Makefile and
re-insert the comment character so that running ``make`` uses the
established SDK compiler. However, when you run ``make``, use a
command-line argument to set :term:`CC` to "gcc"::
command-line argument to set :term:`CC` to "gcc":
.. code-block:: console
$ make clean
rm -rf *.o
@@ -363,7 +416,9 @@ example:
environment variable.
In this last case, edit Makefile again to use the "gcc" compiler but
then use the "-e" option on the ``make`` command line::
then use the "-e" option on the ``make`` command line:
.. code-block:: console
$ make clean
rm -rf *.o
@@ -388,7 +443,9 @@ example:
Makefile.
#. *Execute Your Project:* To execute the project (i.e. ``target_bin``),
use the following command::
use the following command:
.. code-block:: console
$ ./target_bin
Hello World!

View File

@@ -0,0 +1,14 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
================================
Yocto Project Security Reference
================================
.. toctree::
:caption: Table of Contents
:numbered:
security-team
reporting-vulnerabilities
.. include:: /boilerplate.rst

View File

@@ -0,0 +1,85 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Reporting Vulnerabilities
*************************
The Yocto Project and OpenEmbedded are open-source, community-based projects
used in numerous products. They assemble multiple other open-source projects,
and need to handle security issues and practices both internal (in the code
maintained by both projects), and external (maintained by other projects and
organizations).
This manual assembles security-related information concerning the whole
ecosystem. It includes information on reporting a potential security issue,
the operation of the YP Security team and how to contribute in the
related code. It is written to be useful for both security researchers and
YP developers.
How to report a potential security vulnerability?
=================================================
If you would like to report a public issue (for example, one with a released
CVE number), please report it using the
:yocto_bugs:`Security Bugzilla </enter_bug.cgi?product=Security>`.
If you are dealing with a not-yet-released issue, or an urgent one, please send
a message to security AT yoctoproject DOT org, including as many details as
possible: the layer or software module affected, the recipe and its version,
and any example code, if available. This mailing list is monitored by the
Yocto Project Security team.
For each layer, you might also look for specific instructions (if any) for
reporting potential security issues in the specific ``SECURITY.md`` file at the
root of the repository. Instructions on how and where submit a patch are
usually available in ``README.md``. If this is your first patch to the
Yocto Project/OpenEmbedded, you might want to have a look into the
Contributor's Manual section
":ref:`contributor-guide/submit-changes:preparing changes for submission`".
Branches maintained with security fixes
---------------------------------------
See the
:ref:`Release process <ref-manual/release-process:Stable Release Process>`
documentation for details regarding the policies and maintenance of stable
branches.
The :yocto_home:`Releases </development/releases/>` page contains a list of all
releases of the Yocto Project, grouped into current and previous releases.
Previous releases are no longer actively maintained with security patches, but
well-tested patches may still be accepted for them for significant issues.
Security-related discussions at the Yocto Project
-------------------------------------------------
We have set up two security-related emails/mailing lists:
- Public Mailing List: yocto [dash] security [at] yoctoproject[dot] org
This is a public mailing list for anyone to subscribe to. This list is an
open list to discuss public security issues/patches and security-related
initiatives. For more information, including subscription information,
please see the :yocto_lists:`yocto-security mailing list info page
</g/yocto-security>`.
This list requires moderator approval for new topics to be posted, to avoid
private security reports to be posted by mistake.
- Yocto Project Security Team: security [at] yoctoproject [dot] org
This is an email for reporting non-published potential vulnerabilities.
Emails sent to this address are forwarded to the Yocto Project Security
Team members.
What you should do if you find a security vulnerability
-------------------------------------------------------
If you find a security flaw: a crash, an information leakage, or anything that
can have a security impact if exploited in any Open Source software built or
used by the Yocto Project, please report this to the Yocto Project Security
Team. If you prefer to contact the upstream project directly, please send a
copy to the security team at the Yocto Project as well. If you believe this is
highly sensitive information, please report the vulnerability in a secure way,
i.e. encrypt the email and send it to the private list. This ensures that
the exploit is not leaked and exploited before a response/fix has been generated.

View File

@@ -0,0 +1,110 @@
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Security team
*************
The Yocto Project/OpenEmbedded security team coordinates the work on security
subjects in the project. All general discussion takes place publicly. The
Security Team only uses confidential communication tools to deal with private
vulnerability reports before they are released.
Security team appointment
=========================
The Yocto Project Security Team consists of at least three members. When new
members are needed, the Yocto Project Technical Steering Committee (YP TSC)
asks for nominations by public channels including a nomination deadline.
Self-nominations are possible. When the limit time is
reached, the YP TSC posts the list of candidates for the comments of project
participants and developers. Comments may be sent publicly or privately to the
YP and OE TSCs. The candidates are approved by both YP TSC and OpenEmbedded
Technical Steering Committee (OE TSC) and the final list of the team members
is announced publicly. The aim is to have people representing technical
leadership, security knowledge and infrastructure present with enough people
to provide backup/coverage but keep the notification list small enough to
minimize information risk and maintain trust.
YP Security Team members may resign at any time.
Security Team Operations
========================
The work of the Security Team might require high confidentiality. Team members
are individuals selected by merit and do not represent the companies they work
for. They do not share information about confidential issues outside of the team
and do not hint about ongoing embargoes.
Team members can bring in domain experts as needed. Those people should be
added to individual issues only and adhere to the same standards as the YP
Security Team.
The YP security team organizes its meetings and communication as needed.
When the YP Security team receives a report about a potential security
vulnerability, they quickly analyze and notify the reporter of the result.
They might also request more information.
If the issue is confirmed and affects the code maintained by the YP, they
confidentially notify maintainers of that code and work with them to prepare
a fix.
If the issue is confirmed and affects an upstream project, the YP security team
notifies the project. Usually, the upstream project analyzes the problem again.
If they deem it a real security problem in their software, they develop and
release a fix following their security policy. They may want to include the
original reporter in the loop. There is also sometimes some coordination for
handling patches, backporting patches etc, or just understanding the problem
or what caused it.
When the fix is publicly available, the YP security team member or the
package maintainer sends patches against the YP code base, following usual
procedures, including public code review.
What Yocto Security Team does when it receives a security vulnerability
=======================================================================
The YP Security Team team performs a quick analysis and would usually report
the flaw to the upstream project. Normally the upstream project analyzes the
problem. If they deem it a real security problem in their software, they
develop and release a fix following their own security policy. They may want
to include the original reporter in the loop. There is also sometimes some
coordination for handling patches, backporting patches etc, or just
understanding the problem or what caused it.
The security policy of the upstream project might include a notification to
Linux distributions or other important downstream projects in advance to
discuss coordinated disclosure. These mailing lists are normally non-public.
When the upstream project releases a version with the fix, they are responsible
for contacting `Mitre <https://www.cve.org/>`__ to get a CVE number assigned and
the CVE record published.
If an upstream project does not respond quickly
===============================================
If an upstream project does not fix the problem in a reasonable time,
the Yocto's Security Team will contact other interested parties (usually
other distributions) in the community and together try to solve the
vulnerability as quickly as possible.
The Yocto Project Security team adheres to the 90 days disclosure policy
by default. An increase of the embargo time is possible when necessary.
Security Team Members
=====================
For secure communications, please send your messages encrypted using the GPG
keys. Remember, message headers are not encrypted so do not include sensitive
information in the subject line.
- Ross Burton: <ross [at] burtonini [dot] com> `Public key <https://keys.openpgp.org/search?q=ross%40burtonini.com>`__
- Michael Halstead: <mhalstead [at] linuxfoundation [dot] org>
`Public key <https://pgp.mit.edu/pks/lookup?op=vindex&search=0x3373170601861969>`__
or `Public key <https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xd1f2407285e571ed12a407a73373170601861969>`__
- Richard Purdie: <richard.purdie [at] linuxfoundation [dot] org> `Public key <https://keys.openpgp.org/search?q=richard.purdie%40linuxfoundation.org>`__
- Marta Rybczynska: <marta DOT rybczynska [at] syslinbit [dot] com> `Public key <https://keys.openpgp.org/search?q=marta.rybczynska@syslinbit.com>`__
- Steve Sakoman: <steve [at] sakoman [dot] com> `Public key <https://keys.openpgp.org/search?q=steve%40sakoman.com>`__

View File

@@ -168,17 +168,29 @@ series = [k for k in release_series]
previousseries = series[series.index(ourseries)+1:] or [""]
lastlts = [k for k in previousseries if k in ltsseries] or "dunfell"
latestreltag = subprocess.run(["git", "describe", "--abbrev=0", "--tags", "--match", "yocto-*"], capture_output=True, text=True).stdout
latestreltag = latestreltag.strip()
if latestreltag:
if latestreltag.startswith("yocto-"):
latesttag = latestreltag[6:]
else:
# fallback on the calculated version
print("Did not find a tag with 'git describe', falling back to %s" % ourversion)
latestreltag = "yocto-" + ourversion
latesttag = ourversion
print("Version calculated to be %s" % ourversion)
print("Latest release tag found is %s" % latestreltag)
print("Release series calculated to be %s" % ourseries)
replacements = {
"DISTRO" : ourversion,
"DISTRO_LATEST_TAG": latesttag,
"DISTRO_NAME_NO_CAP" : ourseries,
"DISTRO_NAME" : ourseries.capitalize(),
"DISTRO_NAME_NO_CAP_MINUS_ONE" : previousseries[0],
"DISTRO_NAME_NO_CAP_LTS" : lastlts[0],
"YOCTO_DOC_VERSION" : ourversion,
"DISTRO_REL_TAG" : "yocto-" + ourversion,
"DOCCONF_VERSION" : docconfver,
"BITBAKE_SERIES" : bitbakeversion,
}
@@ -316,3 +328,5 @@ with open('releases.rst', 'w') as f:
if tag == release_series[series] or tag.startswith('%s.' % release_series[series]):
f.write('- :yocto_docs:`%s Documentation </%s>`\n' % (tag, tag))
f.write('\n')

View File

@@ -51,13 +51,11 @@ fashion. Basically, during the development of a Yocto Project release,
the Autobuilder tests if things work. The Autobuilder builds all test
targets and runs all the tests.
The Yocto Project uses now uses standard upstream
Buildbot (`version 3.8 <https://docs.buildbot.net/3.8.0/>`__) to
drive its integration and testing. Buildbot has a plug-in interface
that the Yocto Project customizes using code from the
``yocto-autobuilder2`` repository, adding its own console UI plugin. The
resulting UI plug-in allows you to visualize builds in a way suited to
the project's needs.
The Yocto Project uses standard upstream Buildbot to drive its integration and
testing. Buildbot has a plug-in interface that the Yocto Project customizes
using code from the :yocto_git:`yocto-autobuilder2 </yocto-autobuilder2>`
repository, adding its own console UI plugin. The resulting UI plug-in allows
you to visualize builds in a way suited to the project's needs.
A ``helper`` layer provides configuration and job management through
scripts found in the ``yocto-autobuilder-helper`` repository. The

View File

@@ -84,6 +84,25 @@ test. Here is what you have to do for each recipe:
cd test
make -k runtest-TESTS
- *Return an appropriate exit code*: The ``run-ptest`` script must return 0 on
success, 1 on failure. This is needed by ``ptest-runner`` to keep track of
the successful and failed tests.
- *Make sure the test prints at least one test result*: The execution of the
``run-ptest`` script must result in at least one test result output on the
console, with the following format::
result: testname
Where ``result`` can be one of ``PASS``, ``SKIP``, or ``FAIL``. ``testname``
can be any name.
There can be as many test results as desired.
This information is read by the :ref:`ref-classes-testimage` class and
:oe_git:`logparser </openembedded-core/tree/meta/lib/oeqa/utils/logparser.py>`
module.
- *Ensure dependencies are met:* If the test adds build or runtime
dependencies that normally do not exist for the package (such as
requiring "make" to run the test suite), use the

View File

@@ -113,7 +113,7 @@ If ``OEQA_DEBUGGING_SAVED_OUTPUT`` is set, any differing packages will be saved
here. The test is also able to run the ``diffoscope`` command on the output to
generate HTML files showing the differences between the packages, to aid
debugging. On the Autobuilder, these appear under
https://autobuilder.yocto.io/pub/repro-fail/ in the form ``oe-reproducible +
https://valkyrie.yocto.io/pub/repro-fail/ in the form ``oe-reproducible +
<date> + <random ID>``, e.g. ``oe-reproducible-20200202-1lm8o1th``.
The project's current reproducibility status can be seen at

View File

@@ -403,7 +403,7 @@ defined in :term:`TEST_SUITES`.
If your image is already built, make sure the following are set in your
``local.conf`` file::
INHERIT += "testexport"
IMAGE_CLASSES += "testexport"
TEST_TARGET_IP = "IP-address-for-the-test-target"
TEST_SERVER_IP = "IP-address-for-the-test-server"
@@ -413,18 +413,23 @@ following BitBake command form::
$ bitbake image -c testexport
Exporting the tests places them in the :term:`Build Directory` in
``tmp/testexport/``\ image, which is controlled by the :term:`TEST_EXPORT_DIR`
``tmp/testimage/``\ image, which is controlled by the :term:`TEST_EXPORT_DIR`
variable.
You can now run the tests outside of the build environment::
$ cd tmp/testexport/image
$ ./runexported.py testdata.json
$ cd tmp/testimage/image
$ ./oe-test runtime
.. note::
You might need to run the image under QEMU or deploy it to your
hardware before you can run the tests.
Here is a complete example that shows IP addresses and uses the
``core-image-sato`` image::
INHERIT += "testexport"
IMAGE_CLASSES += "testexport"
TEST_TARGET_IP = "192.168.7.2"
TEST_SERVER_IP = "192.168.7.1"
@@ -435,8 +440,8 @@ Use BitBake to export the tests::
Run the tests outside of
the build environment using the following::
$ cd tmp/testexport/core-image-sato
$ ./runexported.py testdata.json
$ cd tmp/testimage/core-image-sato
$ ./oe-test runtime
Writing New Tests
=================

View File

@@ -69,7 +69,7 @@ box to "generate an email to QA" is also checked.
When the build completes, an email is sent out using the ``send-qa-email``
script in the :yocto_git:`yocto-autobuilder-helper </yocto-autobuilder-helper>`
repository to the list of people configured for that release. Release builds
are placed into a directory in https://autobuilder.yocto.io/pub/releases on the
are placed into a directory in https://valkyrie.yocto.io/pub/releases on the
Autobuilder which is included in the email. The process from here is
more manual and control is effectively passed to release engineering.
The next steps include:

Some files were not shown because too many files have changed in this diff Show More