summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
4 hoursglibc: Update to latest on stable 2.35 branchstable/kirkstone-nutPeter Marko
Adresses CVE-2024-2961 Changes: 36280d1ce5 iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961) 4a7de5e215 powerpc: Fix ld.so address determination for PCREL mode (bug 31640) f4a45af368 AArch64: Check kernel version for SVE ifuncs 7f3c143381 aarch64: fix check for SVE support in assembler 9112cda4c6 aarch64: correct CFI in rawmemchr (bug 31113) 153012dda2 AArch64: Remove Falkor memcpy 90b03336d9 AArch64: Add memset_zva64 d166309459 AArch64: Cleanup emag memset 650300d233 AArch64: Cleanup ifuncs 5bfa9f4369 AArch64: Add support for MOPS memcpy/memmove/memset c4e222334b Add HWCAP2_MOPS from Linux 6.5 to AArch64 bits/hwcap.h b9e93c5ff7 AArch64: Improve SVE memcpy and memmove 115c2c7717 AArch64: Improve strrchr 06fad28274 AArch64: Optimize strnlen 3a1557efef AArch64: Optimize strlen 6f2ca6aab9 AArch64: Optimize strcpy 249fff42a8 AArch64: Improve strchrnul 1c1313dbdd AArch64: Optimize strchr 80ad6cd302 AArch64: Improve strlen_asimd 65c4bb41b6 AArch64: Optimize memrchr 23be6f897e AArch64: Optimize memchr 28e40b3909 aarch64: Use memcpy_simd as the default memcpy c503e2206e aarch64: Cleanup memset ifunc 577bd1e049 AArch64: Fix typo in sve configure check (BZ# 29394) ea25fe5599 aarch64: Optimize string functions with shrn instruction 2c4ae9faa5 AArch64: Sort makefile entries 2c92d94407 AArch64: Add SVE memcpy d6d295a95b linux: Use rseq area unconditionally in sched_getcpu (bug 31479) dda5faa65e Include sys/rseq.h in tst-rseq-disable.c c9ee9cc8b8 nptl: Unconditionally use a 32-byte rseq area 3cd02612e8 make ‘struct pthread’ a complete type a24adf3572 support: use 64-bit time_t (bug 30111) d47c5e4db7 malloc: Use __get_nprocs on arena_get2 (BZ 30945) 1a3326df93 x86_64: Optimize ffsll function code size. 914af4fcca NEWS: Mention bug fixes for 29039/30745/30843 5d1fe26b49 x86-64: Fix the tcb field load for x32 [BZ #31185] 2d87262c1c x86-64: Fix the dtv field load for x32 [BZ #31184] 5f08ec08d0 elf: Fix TLS modid reuse generation assignment (BZ 29039) 01ea8d9dde Revert "elf: Move l_init_called_next to old place of l_text_end in link map" 0222f2392d Revert "elf: Always call destructors in reverse constructor order (bug 30785)" 6aa8380cf5 Revert "elf: Remove unused l_text_end field from struct link_map" Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2 daysgo: Fix for CVE-2023-45288Vijay Anusuri
Upstream-Status: Backport from https://github.com/golang/go/commit/e55d7cf8435ba4e58d4a5694e63b391821d4ee9b Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2 daysgnutls: fix CVE-2024-28835Archana Polampalli
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2 daysgnutls: fix CVE-2024-28834Archana Polampalli
A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel. Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
3 daysbuild-appliance-image: Update to kirkstone head revisionstable/kirkstone-nextSteve Sakoman
Signed-off-by: Steve Sakoman <steve@sakoman.com>
8 dayssystemd: Fix vlan qos mappingSana Kazi
Drop unnecessary restriction for QoS mapping. Also adds tests for vlan QoS mapping. Link: https://github.com/systemd/systemd/commit/fe830b84d4002582e7aefb16e5e09fd0195f21c8.patch PR: https://github.com/systemd/systemd/pull/27761 Signed-off-by: Sana Kazi <sana.kazi@kpit.com> Signed-off-by: Sana Kazi <sana.kazisk19@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
8 daysvalgrind: skip intermittently failing ptestSteve Sakoman
Intermittent failures on autobuilder: AssertionError: Failed ptests: {'valgrind': ['memcheck/tests/linux/timerfd-syscall']} Signed-off-by: Steve Sakoman <steve@sakoman.com>
8 daysnghttp2: Fix CVE-2024-28182Soumya Sambu
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28182 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 daysrust: add CVE_CHECK_IGNORE for CVE-2024-24576Harish Sadineni
CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected. More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576 Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 daysruby: fix CVE-2024-27281Yogita Urade
ruby: RCE vulnerability with .rdoc_options in RDoc References: https://github.com/ruby/ruby/pull/10316 https://security-tracker.debian.org/tracker/CVE-2024-27281 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 dayslibssh2: fix CVE-2023-48795Meenali Gupta
References: https://nvd.nist.gov/vuln/detail/CVE-2023-48795 Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 daystcl: skip async and event tests in run-ptestRoss Burton
These test suites are full of timing-sensitive test cases, so skip them too. [ YOCTO #15321 ] Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dd06c3668dbe9ec1cf9a0a84d7a6bc9851f9c662) Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 daystcl: skip timing-dependent tests in run-ptestRoss Burton
There are several tests in the test suite which are very dependent on timing and fail on a loaded host system, so skip them. [ YOCTO #14825 #14882 #15081 ] Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 68beb4f4b5a0bea5d431decddf7656f18ac7a04a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
9 daystcl: Add a way to skip ptestsKhem Raj
Some tests hardcode assumptions on locales, which may not be present in musl systems e.g., therefore add a way to skip such tests using -skip option. Skip unixInit-3* test on musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit fa66f1cee2d88c2276442e8b4aaeccde5490f9ea) Signed-off-by: Steve Sakoman <steve@sakoman.com>
10 daysRevert "expat: fix CVE-2023-52425"Steve Sakoman
This reverts commit 1bdcd10930a2998f6bbe56b3ba4c9b6c91203b39. Causes ptest failures: {'expat': ['test_accounting_precision', 'test_return_ns_triplet', 'test_column_number_after_parse', 'test_default_current', 'test_external_entity_values']} Signed-off-by: Steve Sakoman <steve@sakoman.com>
10 daysncurses: patch CVE-2023-50495Peter Marko
backport relevant parts from https://invisible-island.net/archives/ncurses/6.4/ncurses-6.4-20230424.patch.gz Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
10 daysopenssl: patch CVE-2024-2511Peter Marko
Patch: https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d News: https://github.com/openssl/openssl/commit/daee101e39073d4b65a68faeb2f2de5ad7b05c36 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-10xserver-xorg: Fix for CVE-2024-31080 and CVE-2024-31081Vijay Anusuri
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/96798fc1967491c80a4d0c8d9e0a80586cb2152b & https://gitlab.freedesktop.org/xorg/xserver/-/commit/3e77295f888c67fc7645db5d0c00926a29ffecee Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05openssh: Add CVE-2023-51767 to CVE_CHECK_IGNORESana Kazi
Add CVE-2023-51767 to CVE_CHECK_IGNORE to avoid in cve-check reports as upstream does not consider CVE-2023-51767 a bug underlying in OpenSSH and does not intent to address it in OpenSSH. Signed-off-by: Sana Kazi <sana.kazi@kpit.com> Signed-off-by: Sana Kazi <sana.kazisk19@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05perl: ignore CVE-2023-47100Alex Stewart
CVE-2023-47100 is a duplicate of CVE-2023-47038. They have the same advertised fix commit, which has already been merged into the perl_5.34.3 sources used in kirkstone. Signed-off-by: Alex Stewart <alex.stewart@ni.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05cups: fix typo in CVE-2023-32360 backport patchJonathan GUILLOT
Typo prevents cupsd to start correctly with following error: Unable to read "/etc/cups/cupsd.conf" due to errors. Using `/usr/sbin/cupsd -t` to check the configuration: Unknown authorization type Defaul on line 77 of /etc/cups/cupsd.conf. Unknown Policy Limit directive AuthType on line 77 of /etc/cups/cupsd.conf. Signed-off-by: Jonathan GUILLOT <jonathan@joggee.fr> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02common-licenses: Backport missing licenseColin McAllister
Backports missing license from master to kirkstone. Signed-off-by: Colin McAllister <colin.mcallister@garmin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02gcc: Backport sanitizer fix for 32-bit ALSRClaus Stovgaard
When using the gcc-sanitizers as part of the SDK on a Linux with a newer kernel, the ASAN fails randomly. This was seen on Ubuntu 22.04. This is also described at https://stackoverflow.com/questions/77894856/possible-bug-in-gcc-sanitizers Backport the fix from LLVM project, as gcc has not yet backported anything for the 11 series. Signed-off-by: Claus Stovgaard <claus.stovgaard@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02python3-urllib3: update to v1.26.18Tan Wen Yan
https://github.com/urllib3/urllib3/releases/tag/1.26.18 Major changes in python3-urllib3 1.26.18: - Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (CVE-2023-45803) (cherry picked from OE-Core rev: 74da05b63634c248910594456dae286947f33da5) Signed-off-by: Tan Wen Yan <wen.yan.tan@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02tiff: fix CVE-2023-52356 CVE-2023-6277Lee Chee Yang
import patch from ubuntu to fix CVE-2023-52356 CVE-2023-6277 import from http://archive.ubuntu.com/ubuntu/pool/main/t/tiff/tiff_4.3.0-6ubuntu0.8.debian.tar.xz Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02qemu: Fix for CVE-2023-6683Vijay Anusuri
Upstream-Status: Backport from https://gitlab.com/qemu-project/qemu/-/commit/405484b29f6548c7b86549b0f961b906337aa68a Reference: https://security-tracker.debian.org/tracker/CVE-2023-6683 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02curl: backport Debian patch for CVE-2024-2398Vijay Anusuri
import patch from ubuntu to fix CVE-2024-2398 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/curl/tree/debian/patches/?h=ubuntu%2Fjammy-security Upstream commit https://github.com/curl/curl/commit/deca8039991886a559b67bcd6701db800a5cf764] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-02expat: fix CVE-2023-52425Meenali Gupta
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. References: https://nvd.nist.gov/vuln/detail/CVE-2023-52425 Changes related to test directory are not included as most of the files are not present and are introduced in the later version. Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-28xwayland: fix CVE-2023-6816 CVE-2024-0408/0409Lee Chee Yang
fix CVE-2023-6816 CVE-2024-0408 CVE-2024-0409 Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-21nghttp2: fix CVE-2023-44487aszh07
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. References: https://nvd.nist.gov/vuln/detail/CVE-2023-44487 https://github.com/nghttp2/nghttp2/commit/72b4af6143681f528f1d237b21a9a7aee1738832 Signed-off-by: Zahir Hussain <zahir.basha@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19glibc: Fix subscript typos for get_nscd_addressesHaitao Liu
Fix the following error: root@intel-x86-64:~# wget -6 http://localhost --2024-01-12 07:18:42-- http://localhost/ Resolving localhost... failed: No IPv4/IPv6 addresses for host. wget: unable to resolve host address 'localhost' Reference: https://sourceware.org/bugzilla/show_bug.cgi?id=29605 Upstream-patch: https://sourceware.org/git/?p=glibc.git;a=commit;h=c9226c03da0276593a0918eaa9a14835183343e8 Signed-off-by: Haitao Liu <haitao.liu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19stress-ng: avoid calling sync during do_compileMartin Jansa
calling 'sync' from do_compile in the middle of big OE world build harms the build time. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19yocto-uninative: Update to 4.4 for glibc 2.39Michael Halstead
Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 56fdd8b79e2f7ec30d2cdcfa0c399a6553efac1e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19linux-firmware: upgrade 20231211 -> 20240220Alexander Kanavin
License-Update: additional files Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit add81ef0299ea5260f9bdc59ffc8f5cc0e74276f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23Alex Kiernan
Upstream maintainer has changed to Chen-Yu Tsai <wens@kernel.org>: https://lore.kernel.org/all/CAGb2v657baNMPKU3QADijx7hZa=GUcSv2LEDdn6N=QQaFX8r-g@mail.gmail.com/ Note that fb768d3b13ff ("wifi: cfg80211: Add my certificate") and 3c2a8ebe3fe6 ("wifi: cfg80211: fix certs build to not depend on file order") are required if you are using kernel signature verification. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit abf169fbbf8bab13224adf4c8bfa2e26607f360c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19wireless-regdb: upgrade 2023.05.03 -> 2023.09.01Wang Mingyu
Changelog: ========== wireless-regdb: update regulatory database based on preceding changes wireless-regdb: Update regulatory rules for Australia (AU) for June 2023 wireless-regdb: Update regulatory info for Türkiye (TR) wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidel... wireless-regdb: Update regulatory rules for Philippines (PH) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2f5edb6904bf16a9c52a9b124aeb5297487cd716) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: Remove rejected CVE from databaseYoann Congal
When a CVE is updated to be rejected, matching database entries must be removed. Otherwise: * an incremental update is not equivalent the to an initial download. * rejected CVEs might still appear as Unpatched in cve-check. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f276a980b8930b98e6c8f0e1a865d77dfcfe5085) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: Fix CVE configuration updateYoann Congal
When a CVE is created, it often has no precise version information and this is stored as "-" (matching any version). After an update, version information is added. The previous "-" must be removed, otherwise, the CVE is still "Unpatched" for cve-check. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 641ae3f36e09af9932dc33043a0a5fbfce62122e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: nvd_request_next: Improve commentYoann Congal
Add a URL to the doc of the API used in the function. ... and fix a small typo dabase -> database Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e0157b3b81333a24abd31dbb23a6abebca3e7ba7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definitionYoann Congal
CVE_CHECK_DB_FILE is already defined in cve-check.bbclass which is always inherited in cve-update-nvd2-native (There is a check line 40). Remove it to avoid confusion. Otherwise, this should not change anything. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e5f3f223885c17b7007c310273fc7c80b90a4105) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: Add an age threshold for incremental updateYoann Congal
Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to specify the maximum age of the database for doing an incremental update For older databases, a full re-download is done. With a value of "0", this forces a full-redownload. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 74c1765111b6610348eae4b7e41d7045ce58ef86) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19cve-update-nvd2-native: Fix typo in commentYoann Congal
attmepts -> attempts Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dc18aaeda8e810f9082a0ceac08e5e4275bbd0f7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-19python3-cryptography: Backport fix for CVE-2024-26130Vijay Anusuri
Upstream-Status: Backport from https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-18expat: fix CVE-2023-52426Meenali Gupta
A flaw was found in Expat (libexpat). If XML_DTD is undefined at compile time, a recursive XML Entity Expansion condition can be triggered.This issue may lead to a condition where data is expanded exponentially, which will quickly consume system resources and cause a denial of service. References: https://nvd.nist.gov/vuln/detail/CVE-2023-52426 https://github.com/libexpat/libexpat/pull/777 Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-14expat: patch CVE-2024-28757Peter Marko
Picked patch from https://github.com/libexpat/libexpat/pull/842 which is referenced in the NVD CVE report. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13build-appliance-image: Update to kirkstone head revisionSteve Sakoman
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-11librsvg: Fix do_package_qa error for librsvgNikhil R
When using meta-rust layer for rust below do_package_qa error in librsvg is observed Fix the below error: ERROR: librsvg-2.52.10-r0 do_package_qa: QA Issue: File /usr/bin/rsvg-convert in package rsvg doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/rsvg-convert in package rsvg doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags] ERROR: librsvg-2.52.10-r0 do_package_qa: Fatal QA errors were found, failing task. Signed-off-by: Nikhil R <nikhil.r@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-11linux-yocto/5.15: fix partion scanningBruce Ashfield
Integrating the following commit(s) to linux-yocto/5.15: 1/1 [ Author: Christoph Hellwig Email: hch@lst.de Subject: block, loop: support partitions without scanning Date: Fri, 27 May 2022 07:58:06 +0200 Historically we did distinguish between a flag that surpressed partition scanning, and a combinations of the minors variable and another flag if any partitions were supported. This was generally confusing and doesn't make much sense, but some corner case uses of the loop driver actually do want to support manually added partitions on a device that does not actively scan for partitions. To make things worsee the loop driver also wants to dynamically toggle the scanning for partitions on a live gendisk, which makes the disk->flags updates non-atomic. Introduce a new GD_SUPPRESS_PART_SCAN bit in disk->state that disables just scanning for partitions, and toggle that instead of GENHD_FL_NO_PART in the loop driver. [bva: Notes for this backport: - drop return code in disk_scan_partitions for GD_SUPPRESS_PART_SCAN. The check doesn't strictly need ot be in this routine in 5.15, but this faciliates future changes in this area, since there are other checks in the same function. - GD_SUPPRESS_PART_SCAN could go to genh.c, but genhd.c includes blkdev.h, so we leave the new GD_SUPPRESS_PART_SCAN definition in the same places as where it was introduced upstream to keep the changes to a minimum - upstream commit e16e506ccd673 merges blkdev_reread_part into disk_scan_partitions. Backporting that change is more churn than we need, so we also add the check for GD_SUPPRESS_PART_SCAN into that routine to have the check hit in a 5.15 context. ] Upstream-Status: Backport [commit b9684a71fca79] Fixes: 1ebe2e5f9d68 ("block: remove GENHD_FL_EXT_DEVT") Reported-by: Ming Lei <ming.lei@redhat.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Ming Lei <ming.lei@redhat.com> Link: https://lore.kernel.org/r/20220527055806.1972352-1-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> ] Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-11linux-yocto/5.15: update CVE exclusions (5.15.150)Bruce Ashfield
Data pulled from: https://github.com/nluedtke/linux_kernel_cves 1/1 [ Author: Nicholas Luedtke Email: nicholas.luedtke@uwalumni.com Subject: Update 25Feb24 Date: Sun, 25 Feb 2024 07:03:08 -0500 ] Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-11linux-yocto/5.15: update to v5.15.150Bruce Ashfield
Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 80efc6265290 Linux 5.15.150 da6cabc1981e r8169: use new PM macros b7f3fac6d301 netfilter: nf_tables: can't schedule in nft_chain_validate a4efc62cd1ed ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() c1317822e2de ext4: regenerate buddy after block freeing failed if under fc replay d82ec7529c5f netfilter: nf_tables: fix scheduling-while-atomic splat 97eaa2955db4 arp: Prevent overflow in arp_req_get(). d7b6fa97ec89 fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio df31d05f0678 cifs: fix mid leak during reconnection after timeout threshold aade859419ce i2c: imx: when being a target, mark the last read as processed cb21407f0b39 i2c: imx: Add timer for handling the stop condition 33f649f1b1ce drm/amd/display: Fix memory leak in dm_sw_fini() 9a03126588e5 drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set 13b57b5cd591 netfilter: nft_flow_offload: release dst in case direct xmit path is used 4c167af9f6b5 netfilter: nft_flow_offload: reset dst in route object after setting up flow 7c71b831220e netfilter: flowtable: simplify route logic 664264a5c55b netfilter: nf_tables: set dormant flag on hook register failure 4338032aa90b tls: stop recv() if initial process_rx_list gave us non-DATA ea845237a39d tls: rx: drop pointless else after goto 8b32e43a80a1 tls: rx: jump to a more appropriate label 39603a6d4e71 s390: use the correct count for __iowrite64_copy() 8cae520f21ad octeontx2-af: Consider the action set by PF 6dae096960bc drm/nouveau/instmem: fix uninitialized_var.cocci warning 4d3b2bd995ed net: dev: Convert sa_data to flexible array in struct sockaddr d65ec3e48f70 packet: move from strlcpy with unused retval to strscpy 91b020aaa1e5 ipv6: sr: fix possible use-after-free and null-ptr-deref e56662160fc2 afs: Increase buffer size in afs_update_volume_status() 5268bb02107b bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel 6800ad7417f3 ata: ahci_ceva: fix error handling for Xilinx GT PHY support 7fcc31a3a705 ata: libahci_platform: Introduce reset assertion/deassertion methods ddac2e0e656e ata: libahci_platform: Convert to using devm bulk clocks API 302b92b37304 ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid a75b49547831 ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid 2a7b878a7dad net: stmmac: Fix incorrect dereference in interrupt handlers a41d9142d2dd nouveau: fix function cast warnings 1087c284fd11 scsi: jazz_esp: Only build if SCSI core is builtin 4e395fb89e7e bpf, scripts: Correct GPL license name cd6070d9f5e7 RDMA/srpt: fix function pointer cast warnings 656bd1702fea arm64: dts: rockchip: set num-cs property for spi on px30 135e5465fefa RDMA/qedr: Fix qedr_create_user_qp error flow 989af2f29342 RDMA/srpt: Support specifying the srpt_service_guid parameter b6e660e07622 RDMA/irdma: Add AE for too many RNRS 056ed95befd1 RDMA/irdma: Set the CQ read threshold for GEN 1 a95d4cf82775 RDMA/irdma: Validate max_send_wr and max_recv_wr 635d79aa477f RDMA/irdma: Fix KASAN issue with tasklet aeb5ac1c9d10 RDMA/bnxt_re: Return error for SRQ resize 52de5805c147 IB/hfi1: Fix a memleak in init_credit_return 48c63a174489 cifs: add a warning when the in-flight count goes negative 6538b6d13ce3 xhci: track port suspend state correctly in unsuccessful resume cases 8839d5728baa xhci: decouple usb2 port resume and get_port_status request handling 8af9de2a5ba1 xhci: clear usb2 resume related variables in one place. a99c8f1abef9 xhci: rename resume_done to resume_timestamp 63f0e79cf382 xhci: move port specific items such as state completions to port structure ea6c19c7365d xhci: cleanup xhci_hub_control port references 95973afc870c ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA 4f080b6487bd ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA c2a9376d507e ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks 1b64ff947a5a ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA f3607954f2e6 ACPI: resource: Add ASUS model S5402ZA to quirks 27e99d785721 ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 cb1003c07e74 ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch 28e5e3e59b3b arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 99c8b2e99783 arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 371036bf7666 arm64: dts: rockchip: fix regulator name on rk3399-rock-4 92dcd7d6c606 exfat: support dynamic allocate bh for exfat_entry_set_cache b4dc693b29ef wifi: iwlwifi: mvm: avoid baid size integer overflow fa92c463eba7 igb: Fix igb_down hung on surprise removal 16f653776caf wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() 7552020e3aa8 devlink: report devlink_port_type_warn source device 819ca25444b3 bpf: Address KCSAN report on bpf_lru_list f97832620d7f wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range 3cb43222bab8 sched/fair: Don't balance task to its current running CPU 621619f626cb arm64: mm: fix VA-range sanity check 0bd309f22663 arm64: set __exception_irq_entry with __irq_entry as a default dd0802f0a9d6 ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) 3cc2d66b12e0 ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 54da51be3b7e ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A fa33b70513a0 btrfs: add xxhash to fast checksum implementations ef535e0315af posix-timers: Ensure timer ID search-loop limit is valid 84a578961b25 md/raid10: prevent soft lockup while flush writes 6b03364b29bd md: fix data corruption for raid456 when reshape restart while grow up 638eaac37464 nbd: Add the maximum limit of allocated index in nbd_dev_add 173e191012aa debugobjects: Recheck debug_objects_enabled before reporting de2efb42d693 netfilter: nf_tables: add rescheduling points during loop detection walks a022c339afca net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs 65acad6791bf Input: iqs269a - do not poll during ATI 13b1dee7e110 Input: iqs269a - do not poll during suspend or resume f33ba1ec4ad9 Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() dba06912727b PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro 995e77b87389 mmc: mxc: Use the new PM macros 8bc597732c85 mmc: jz4740: Use the new PM macros 75d4f92d8788 PM: core: Add new *_PM_OPS macros, deprecate old ones 53f7337519a1 PM: core: Redefine pm_ptr() macro a51c253d8321 powerpc/eeh: Set channel state after notifying the drivers 4570db06b724 powerpc/eeh: Small refactor of eeh_handle_normal_event() 12dd4a0848c4 powerpc/rtas: ensure 4KB alignment for rtas_data_buf 8afaf74307f8 powerpc/rtas: make all exports GPL 2240f4c5f5d5 net: ethernet: ti: add missing of_node_put before return 18721a837387 dt-bindings: clocks: imx8mp: Add ID for usb suspend clock fb100de77846 clk: imx8mp: add clkout1/2 support 3c8a513f0f6b clk: imx8mp: Add DISP2 pixel clock 3517b6d6146c serial: 8250: Remove serial_rs485 sanitization from em485 54974aad4a76 cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() 15c3ddd11803 kernel/sched: Remove dl_boosted flag comment a1733ffd88d9 drm/i915/dg1: Update DMC_DEBUG3 register 8102416c05bb f2fs: write checkpoint during FG_GC cfd5d011d6f6 f2fs: don't set GC_FAILURE_PIN for background GC 56b522f46681 drm/amdgpu: init iommu after amdkfd device init 572ee5086e47 tools/virtio: fix build 80f2a246225c perf beauty: Update copy of linux/socket.h with the kernel sources 47b6345ddb6c tools headers UAPI: Sync linux/fscrypt.h with the kernel sources c65a23e98e38 ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger 2eb3d2a54ad7 acpi: property: Let args be NULL in __acpi_node_get_property_reference 7abdd666a06f platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute 7de3c1535bdf clk: linux/clk-provider.h: fix kernel-doc warnings and typos b184742d2788 RDMA/siw: Correct wrong debug message 6f6ec8aff219 RDMA/siw: Balance the reference of cep->kref in the error path 71475bcee001 ARM: dts: BCM53573: Drop nonexistent #usb-cells 832cf206dfe2 selftests: net: vrf-xfrm-tests: change authentication and encryption algos 14e1f63b3918 vdpa/mlx5: Don't clear mr struct on destroy MR 5b4f6c5ff65c MIPS: vpe-mt: drop physical_memsize 1be5de5b642a MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set cc24b32d7d62 powerpc/pseries/lpar: add missing RTAS retry status handling 3212606148b8 powerpc/perf/hv-24x7: add missing RTAS retry status handling e3835122ea28 powerpc/pseries/lparcfg: add missing RTAS retry status handling 228d3c49194b clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() d0e4a444557a clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC e7076cfb72d5 clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC 83c043b92b0f powerpc/powernv/ioda: Skip unallocated resources when mapping to PE 8c373aa1f784 Input: ads7846 - don't check penirq immediately for 7845 6a37a429b3ee Input: ads7846 - always set last command to PWRDOWN 199e666477d5 clk: imx: avoid memory leak 94957e54dc70 clk: renesas: cpg-mssr: Remove superfluous check in resume code 2d89ed2e0629 Input: ads7846 - don't report pressure for ads7845 f992d1afd17f clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed d73cf59d2446 Input: iqs269a - increase interrupt handler return delay db06a2ae0707 Input: iqs269a - configure device with a single block write fdbceead4ac1 Input: iqs269a - drop unused device node references d93c68661ad8 RISC-V: fix funct4 definition for c.jalr in parse_asm.h 5c5c02b069cc mtd: rawnand: sunxi: Fix the size of the last OOB region 11fcd28df8d3 clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents 9fcba5e7bb5c clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents 7602e5e1bd04 clk: imx: imx8mp: add shared clk gate for usb suspend clk 7d6e8d7ee13b mptcp: fix lockless access in subflow ULP diag 256c3e6192ed usb: roles: don't get/set_role() when usb_role_switch is unregistered ef982fc41055 usb: roles: fix NULL pointer issue when put module's reference 2cb66b62a5d6 usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs 3a2a909942b5 usb: cdns3: fix memory double free when handle zero packet 4e5c73b15d95 usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() f4928121f707 usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers 7c532fb96ac1 usb: cdnsp: blocked some cdns3 specific code c98f2d25f8f6 usb: dwc3: gadget: Don't disconnect if not started f4fab74cb83c serial: amba-pl011: Fix DMA transmission in RS485 mode 2c62c8984b96 x86/alternative: Make custom return thunk unconditional b0c9fcacf218 Revert "x86/alternative: Make custom return thunk unconditional" ae815291f0da x86/returnthunk: Allow different return thunks 5ca1f6adac69 x86/ftrace: Use alternative RET encoding b9d69bfff6fd x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() b810c58d8b01 x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR 8943e3c9446d Revert "x86/ftrace: Use alternative RET encoding" eec6cbbfa1e8 ARM: ep93xx: Add terminator to gpiod_lookup_table 0da15a703951 l2tp: pass correct message length to ip6_append_data 9d71d7a9f2a6 PCI/MSI: Prevent MSI hardware interrupt number truncation a576308800be gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() d81e2dc20395 KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() 4deb8413eccb KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler e20b24b175c9 platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names 79d7504a24a3 platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler 1a4371db68a3 dm-crypt: don't modify the data when using authenticated encryption d580f0dcb5e3 drm/ttm: Fix an invalid freeing on already freed page in error path 47ae64df23ed IB/hfi1: Fix sdma.h tx->num_descs off-by-one error 77cbc04a1a86 erofs: fix lz4 inplace decompression fbb662ffa005 pmdomain: renesas: r8a77980-sysc: CR7 must be always on 43ea43b6fa17 ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails 475426ad1ae0 pmdomain: mediatek: fix race conditions with genpd 2a52590ac523 virtio-blk: Ensure no requests in virtqueues before deleting vqs. b9a61ee2bb27 drm/amdgpu: reset gpu for s3 suspend abort case afc74fda2b5d drm/amdgpu: skip to program GFXDEC registers for suspend abort dcd33edd854a firewire: core: send bus reset promptly on gap count error a74270a1b784 scsi: lpfc: Use unsigned type for num_sge 26b8bdb5561a hwmon: (coretemp) Enlarge per package core count limit a2f99731ab31 efi: Don't add memblocks for soft-reserved memory 4aa36b62c3ea efi: runtime: Fix potential overflow of soft-reserved region size 262dc4fb1517 wifi: mac80211: adding missing drv_mgd_complete_tx() call a585faf05915 fs/ntfs3: Fix oob in ntfs_listxattr 0a3548e82424 fs/ntfs3: Update inode->i_size after success write into compressed file c39c689a82b3 fs/ntfs3: Correct function is_rst_area_valid 54142e95dfc8 fs/ntfs3: Prevent generic message "attempt to access beyond end of device" 095d6a66bc69 fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache 3f3a6ebf6a32 fs/ntfs3: Disable ATTR_LIST_ENTRY size check ee8db6475cb1 fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() 56dacb722b76 fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name" 3532bceaed11 fs/ntfs3: Print warning while fixing hard links count f14132b88315 fs/ntfs3: Correct hard links updating when dealing with DOS names cd465584d501 fs/ntfs3: Improve ntfs_dir_count 3f7920b36da0 fs/ntfs3: Modified fix directory element type detection b4663b406aee Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table 9b1e3cf9ed29 ext4: correct the hole length returned by ext4_map_blocks() 46e64b9a4b6f nvmet-fc: take ref count on tgtport before delete assoc 5e0bc09a52b6 nvmet-fc: avoid deadlock on delete association path f323185c7923 nvmet-fc: abort command when there is no binding 59b4ca71ab70 nvmet-fc: hold reference on hostport match 8fd604d4b0d7 nvmet-fc: defer cleanup using RCU properly 8f7104e18ffd nvmet-fc: release reference on target port 071f116416a1 nvmet-fcloop: swap the list_add_tail arguments 0bf567d6d9ff nvme-fc: do not wait in vain when unloading module 75e34de642a3 ALSA: usb-audio: Ignore clock selector errors for single connection a75d89666c57 netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new 4a5ed4697232 Input: xpad - add Lenovo Legion Go controllers 1e9af43d5d02 spi: sh-msiof: avoid integer overflow in constants ef1e3f277a7f ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 e59905cfb195 ALSA: usb-audio: Check presence of valid altsetting control 065da538e6a6 nvmet-tcp: fix nvme tcp ida memory leak f8dee8e4893c regulator: pwm-regulator: Add validity checks in continuous .get_voltage 4fe4e5adc7d2 dmaengine: ti: edma: Add some null pointer checks to the edma_probe 8de8305a25bf ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() 4c21fa60a6f4 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() 687061cfaa2a ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt 3700475e0961 platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet 343c19816883 MIPS: reserve exception vector space ONLY ONCE b4c13deff359 ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers 1a8bd6244963 ahci: asm1166: correct count of reported ports 0399d7eba41d spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected df6e2088c6f4 fbdev: sis: Error out if pixclock equals zero 8c54acf33e5a fbdev: savage: Error out if pixclock equals zero 88c18fd06608 wifi: mac80211: fix race condition on enabling fast-xmit 212f20d5b16e wifi: cfg80211: fix missing interfaces when dumping 37d82e6ac9b2 dmaengine: fsl-qdma: increase size of 'irq_name' 3692c6f2b564 dmaengine: shdma: increase size of 'dev_id' a9849b67b440 scsi: target: core: Add TMF to tmr_list handling 0766e7317aab sched/rt: Disallow writing invalid values to sched_rt_period_us 5295b5f2e561 sched/rt: Fix sysctl_sched_rr_timeslice intial value 8bd3eee7720c x86/fpu: Stop relying on userspace for info to fault in xsave buffer c017fbf10596 zonefs: Improve error handling bbc432e632d4 userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb 4bbb93ad84b3 bpf: Remove trace_printk_lock 4b349c55bbd3 bpf: Do cleanup in bpf_bprintf_cleanup only when needed bcbaeb081ad8 bpf: Add struct for bin_args arg in bpf_bprintf_prepare 8495c34dff0d bpf: Merge printk and seq_printf VARARG max macros ab2e127896a2 PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() 50349893930a sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset ee0fb9baa7a4 smb: client: fix parsing of SMB3.1.1 POSIX create context 890bc4fac3c0 smb: client: fix potential OOBs in smb2_parse_contexts() 858e73ff2563 smb: client: fix OOB in receive_encrypted_standard() 6e5e93fd51fe net/sched: Retire dsmark qdisc c3fdf76849c6 net/sched: Retire ATM qdisc 78bac52c290a net/sched: Retire CBQ qdisc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>