summaryrefslogtreecommitdiffstats
path: root/meta
AgeCommit message (Collapse)Author
2021-06-10linux-yocto/5.10: update to v5.10.36Bruce Ashfield
Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 72bb632d15f2 Linux 5.10.36 14b2801ccd9b thermal/core/fair share: Lock the thermal zone while looping over instances c24a20912eef thermal/drivers/cpufreq_cooling: Fix slab OOB issue 051dd0681ce1 lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf() 1cb02dc76f4c dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails 06141465e372 dm integrity: fix missing goto in bitmap_flush_interval error handling df893916b330 dm space map common: fix division bug in sm_ll_find_free_block() fcf763a80e0e dm persistent data: packed struct should have an aligned() attribute too a33614d52e97 tracing: Restructure trace_clock_global() to never block 9e40ef5391df tracing: Map all PIDs to command lines ea6803ff2cd1 tools/power turbostat: Fix offset overflow issue in index converting b84c57762cef rsi: Use resume_noirq for SDIO b1c953dc853a tty: fix memory leak in vc_deallocate 25e9c2c11735 usb: dwc2: Fix session request interrupt handler fce7bbcd07d5 usb: dwc3: core: Do core softreset when switch mode b624b32584ac usb: dwc3: gadget: Fix START_TRANSFER link state check f9ddfaa9703c usb: dwc3: gadget: Remove FS bInterval_m1 limitation 8df75d1296d0 usb: gadget/function/f_fs string table fix for multiple languages ba8ce683076e usb: gadget: Fix double free of device descriptor pointers f12c5cca65f7 usb: gadget: dummy_hcd: fix gpf in gadget_setup 678e76bccee4 media: venus: hfi_parser: Don't initialize parser on v1 5d0f6f5251a3 media: v4l2-ctrls: fix reference to freed memory 4121def7df29 media: staging/intel-ipu3: Fix race condition during set_fmt c6b81b897f6f media: staging/intel-ipu3: Fix set_fmt error handling 517f6f570566 media: staging/intel-ipu3: Fix memory leak in imu_fmt 8acb13189dae media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() a5e9ae5a22b0 media: dvb-usb: Fix use-after-free access 43263fd43083 media: dvbdev: Fix memory leak in dvb_media_device_free() 378a016271ba ext4: Fix occasional generic/418 failure 133e83b5b3b3 ext4: allow the dax flag to be set and cleared on inline directories 72447c925ea9 ext4: fix error return code in ext4_fc_perform_commit() bf4ba04f0161 ext4: fix ext4_error_err save negative errno into superblock 12905cf9e5c4 ext4: fix error code in ext4_commit_super 7e9298f4d139 ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() 098b257563b9 ext4: fix check to prevent false positive report of incorrect used inodes 346190959f97 ext4: annotate data race in jbd2_journal_dirty_metadata() 9aca313726cb ext4: annotate data race in start_this_handle() a27aad321751 kbuild: update config_data.gz only when the content of .config is changed 3aec683ee79b x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported d19a456acaec futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI 2543329485e2 Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") d35c4c959eb4 smb3: do not attempt multichannel to server which does not support it 796b82637528 smb3: when mounting with multichannel include it in requested capabilities 5781c9df77a3 jffs2: check the validity of dstlen in jffs2_zlib_compress() 54708651bc1e Fix misc new gcc warnings f37b9c142e1c security: commoncap: fix -Wstringop-overread warning bf2b941d0a6f sfc: farch: fix TX queue lookup in TX event handling fb791572d674 sfc: farch: fix TX queue lookup in TX flush done handling 11e3ff7e164a exfat: fix erroneous discard when clear cluster bit 1c525c265668 fuse: fix write deadlock 0cd2d2577a98 dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences 661061a45e32 md/raid1: properly indicate failure when ending a failed write request 015cc7ad58d0 crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS 0ba942cbf52b crypto: arm/curve25519 - Move '.fpu' after '.arch' c9adb76c712c tpm: vtpm_proxy: Avoid reading host log when using a virtual device 60a01ecc9f68 tpm: efi: Use local variable for calculating final log size 4a63b2438a93 intel_th: pci: Add Alder Lake-M support 34ceafa62f49 powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h 0bdcaebb1225 powerpc/32: Fix boot failure with CONFIG_STACKPROTECTOR f2aa64979e11 powerpc/kexec_file: Use current CPU info while setting up FDT 481fee8295ab powerpc/eeh: Fix EEH handling for hugepages in ioremap space. 293c30ce25e0 powerpc/powernv: Enable HAIL (HV AIL) for ISA v3.1 processors 643243e31868 jffs2: Hook up splice_write callback 72c282b10951 jffs2: Fix kasan slab-out-of-bounds problem 072f787e8798 Input: ili210x - add missing negation for touch indication on ili210x 2fafe7d5047f NFSv4: Don't discard segments marked for return in _pnfs_return_layout() 334165d9fb69 NFS: Don't discard pNFS layout segments that are marked for return 96fa26b74cdc NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds e0f2d86481ea ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure a1478374b0bd openvswitch: fix stack OOB read while fragmenting IPv4 packets 4248f4649bf3 mlxsw: spectrum_mr: Update egress RIF list before route's action 9aa4602237d5 f2fs: fix to avoid out-of-bounds memory access 39624749c52d f2fs: fix error handling in f2fs_end_enable_verity() 50b0c0c3385d ubifs: Only check replay with inode type to judge if inode linked 5a876a46d7b7 kcsan, debugfs: Move debugfs file creation out of early init d19555ff225d virtiofs: fix memory leak in virtio_fs_probe() 1b41d4e5aa75 fs: fix reporting supported extra file attributes for statx() dc4b67baba3b Makefile: Move -Wno-unused-but-set-variable out of GCC only block 0f9055936668 arm64/vdso: Discard .note.gnu.property sections in vDSO 1d852d6bb4d4 btrfs: fix race when picking most recent mod log operation for an old root b24f0e381036 tools/power/turbostat: Fix turbostat for AMD Zen CPUs d1ca3d2c4fd5 ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx a9d0f7c14789 ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops 3c8a599bc951 ALSA: hda/realtek - Headset Mic issue on HP platform 871234a6ad4c ALSA: hda/realtek: fix mic boost on Intel NUC 8 13ff604c79a0 ALSA: hda/realtek: GA503 use same quirks as GA401 970fbbee55bc ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7 12fea3cb2277 ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 ad7736cebf4d ALSA: usb-audio: Explicitly set up the clock selector cc427a507f29 ALSA: sb: Fix two use after free in snd_sb_qsound_build 1ce8212e80f9 ALSA: hda/conexant: Re-order CX5066 quirk table entries 9b7388931fbb ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer 443467bd6240 power: supply: cpcap-battery: fix invalid usage of list cursor a15f68a5d55c sched,psi: Handle potential task count underflow bugs more gracefully a32a2d831de0 s390/archrandom: add parameter check for s390_arch_random_generate 338a87230228 block/rnbd-clt: Fix missing a memory free when unloading the module ae7fe4794da2 sched,fair: Alternative sched_slice() 94902ee2996a perf: Rework perf_event_exit_event() 2c4de79e9a09 scsi: libfc: Fix a format specifier 97a81d4051c3 mfd: arizona: Fix rumtime PM imbalance on error 14c7e3f5bed5 mfd: da9063: Support SMBus and I2C mode d7ec1dab6be7 mfd: intel-m10-bmc: Fix the register access range c8fe9ef530e9 scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic cc42ea42e250 scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode 1ac2b3720f61 scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response 56488df9f4bc drm/amdgpu: fix NULL pointer dereference d721702f8a82 drm/amd/display: Try YCbCr420 color when YCbCr444 fails f26f33a40952 amdgpu: avoid incorrect %hu format string a98a90048853 drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug 081cec78467f drm/amd/display: Fix UBSAN: shift-out-of-bounds warning cc6215d94de9 drm/amd/display: Fix debugfs link_settings entry bcefa89b3e48 drm/radeon/ttm: Fix memory leak userptr pages 14637a8dfe4f drm/amdgpu/ttm: Fix memory leak userptr pages 6e4ae9b0eb23 drm/msm/mdp5: Do not multiply vclk line count by 100 79f701ec9efa drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal 2f5f4cce496e sched/fair: Ignore percpu threads for imbalance pulls fded2096b153 media: gscpa/stv06xx: fix memory leak f8f2b7ebe03a media: dvb-usb: fix memory leak in dvb_usb_adapter_init 1b61ad26af55 media: sun8i-di: Fix runtime PM imbalance in deinterlace_start_streaming 810cf54025b7 media: platform: sti: Fix runtime PM imbalance in regs_show 67a97525dd6e media: i2c: adv7842: fix possible use-after-free in adv7842_remove() c8e7e6e1780c media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove() 3f9e0eb06258 media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() 651ad9e04f75 media: adv7604: fix possible use-after-free in adv76xx_remove() 8d3ae83d6344 media: tc358743: fix possible use-after-free in tc358743_remove() a931c5791b5e power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() ccb098c053dc power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() 932329941ca8 clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return 573bbb6f80f1 drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver 4066456bb2de media: vivid: update EDID 6fef73a039da media: em28xx: fix memory leak ed7ab208cc2e scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() 486e974358e7 scsi: smartpqi: Add new PCI IDs c3187412d9c7 scsi: smartpqi: Correct request leakage during reset operations bc05560dd756 scsi: smartpqi: Use host-wide tag space dc655d743c2b power: supply: cpcap-charger: Add usleep to cpcap charger to avoid usb plug bounce a669817a3384 selftests/resctrl: Fix checking for < 0 for unsigned values 726d3185b89a selftests/resctrl: Fix incorrect parsing of iMC counters 19eaad1400ea selftests/resctrl: Use resctrl/info for feature detection 0ccead50c386 selftests/resctrl: Fix missing options "-n" and "-p" cd29eef12771 selftests/resctrl: Clean up resctrl features check 6ef95f0b80ec selftests/resctrl: Fix compilation issues for other global variables cf99daf7c3a2 selftests/resctrl: Fix compilation issues for global variables 078d3d75dd4c selftests/resctrl: Enable gcc checks to detect buffer overflows 9ec74da2ac4c nvmet: return proper error code from discovery ctrl 7f9757005cf5 drm/komeda: Fix bit check to import to value of proper type 5e8b58e27ea8 ata: ahci: Disable SXS for Hisilicon Kunpeng920 c753c1a77e7a mmc: sdhci-brcmstb: Remove CQE quirk fdd04d1c8336 mmc: sdhci-pci: Add PCI IDs for Intel LKF 79315ebff432 mmc: sdhci-esdhc-imx: validate pinctrl before use it 47ac226199f0 scsi: qla2xxx: Fix use after free in bsg 1d7935fd022d drm/vkms: fix misuse of WARN_ON 57fa6a6a998c scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() 298778681c10 drm/amd/display: fix dml prefetch validation dd5d6042e5d2 drm/amd/display: DCHUB underflow counter increasing in some scenarios 9cc76f29b9e5 drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' 729b92e68b8e drm/amd/pm: fix workload mismatch on vega10 7cb855dfe5f0 drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f 1874b0ef1426 drm/amdkfd: Fix UBSAN shift-out-of-bounds warning 7b3eb98a3ef4 drm/amdgpu: mask the xgmi number of hops reported from psp to kfd 61c1ddd29f87 backlight: qcom-wled: Fix FSC update issue for WLED5 918a45b65365 backlight: qcom-wled: Use sink_addr for sync toggle 983d10e59fb4 power: supply: Use IRQF_ONESHOT 80ba39ec7cc9 media: gspca/sq905.c: fix uninitialized variable 6a3edc1a5e17 media: media/saa7164: fix saa7164_encoder_register() memory leak bugs 087c2bffb4e9 extcon: arizona: Fix various races on driver unbind b7d2e5097f18 extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged 8ff0d8a0904b power: supply: bq27xxx: fix power_avg for newer ICs 7bb783ec9e0e atomisp: don't let it go past pipes array 12b4b2855024 media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt() f3dd6c47c493 media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB b5261590f309 media: ite-cir: check for receive overflow 3a2270dd3f09 scsi: target: pscsi: Fix warning in pscsi_complete_cmd() 09a27d662006 kvfree_rcu: Use same set of GFP flags as does single-argument 661af9371c32 sched/pelt: Fix task util_est update filtering b168fffa3821 drm/amdgpu: Fix some unload driver issues 5b62053e762c scsi: lpfc: Fix pt2pt connection does not recover after LOGO 7382825b068e scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe b814402fdf37 drm/amd/display/dc/dce/dce_aux: Remove duplicate line causing 'field overwritten' issue 500ec98998c2 drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work bd9477319714 drm/amd/display: Don't optimize bandwidth before disabling planes 6b2132f50d9f drm/amd/display: Check for DSC support instead of ASIC revision 01e03a661872 drm/ast: fix memory leak when unload the driver 100e35484682 drm/amd/display: changing sr exit latency 2c518667f953 drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check 6f64be8f5211 drm/qxl: release shadow on shutdown 423fb866b3fc drm/qxl: do not run release if qxl failed to init 6228456ceb1a drm: Added orientation quirk for OneGX1 Pro 9c60c881d662 btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s f32b84d7c977 btrfs: do proper error handling in btrfs_update_reloc_root 224c654a2eca btrfs: do proper error handling in create_reloc_root c5aa9ea54a00 spi: sync up initial chipselect state b82e8f0bb028 platform/x86: intel_pmc_core: Don't use global pmcdev in quirks 5d60792d1292 crypto: omap-aes - Fix PM reference leak on omap-aes.c 92894b185321 crypto: sa2ul - Fix PM reference leak in sa_ul_probe() 4e7ae0cfaca9 crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c 8a090d492f70 crypto: stm32/hash - Fix PM reference leak on stm32-hash.c 836671775a6e crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe() 2264965f576f crypto: sun8i-ss - Fix PM reference leak when pm_runtime_get_sync() fails a16162a17417 phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() df9105950755 intel_th: Consistency and off-by-one fix b549cc7c9ca2 tty: n_gsm: check error while registering tty devices 8f7cdbbf61f9 usb: dwc3: gadget: Check for disabled LPM quirk 2946f95356cc usb: core: hub: Fix PM reference leak in usb_port_resume() e82da9b21fed usb: musb: fix PM reference leak in musb_irq_work() 015f3f25213e usb: gadget: tegra-xudc: Fix possible use-after-free in tegra_xudc_remove() 0e73535a496c spi: qup: fix PM reference leak in spi_qup_remove() 75e2b4621137 spi: omap-100k: Fix reference leak to master 517e99f22842 spi: dln2: Fix reference leak to master 4ddfac16b5c7 platform/x86: ISST: Account for increased timeout in some cases bc900a7ccdd4 tools/power/x86/intel-speed-select: Increase string size 125b3590d1fb ARM: dts: at91: change the key code of the gpio key 2ed4d587539e bus: mhi: core: Clear context for stopped channels from remove() 3737cf191a80 xhci: fix potential array out of bounds with several interrupters 98599e1045c2 xhci: check control context is valid before dereferencing it. 2b195c32bccd xhci: check port array allocation was successful before dereferencing it b52b1b8c480c fpga: dfl: pci: add DID for D5005 PAC cards e22fd531518d usb: xhci-mtk: support quirk to disable usb2 lpm 5c22421fb35f random: initialize ChaCha20 constants with correct endianness 2d78ede60615 perf/arm_pmu_platform: Fix error handling 167fecaa4311 perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors 64d579453bd6 soundwire: cadence: only prepare attached devices on clock stop 9584ce366cc9 tee: optee: do not check memref size on return from Secure World e5da8b37ce34 arm64: dts: imx8mq-librem5-r3: Mark buck3 as always on 187c001c492c soc/tegra: pmc: Fix completion of power-gate toggling bc24381f5768 efi/libstub: Add $(CLANG_FLAGS) to x86 flags 8829b6ccf49f x86/boot: Add $(CLANG_FLAGS) to compressed KBUILD_CFLAGS fdc9c3cff9e2 x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS) af79dc5ad974 ARM: dts: ux500: Fix up TVK R3 sensors 3f571ae706da ARM: dts: BCM5301X: fix "reg" formatting in /memory node f38f972e14f1 kselftest/arm64: mte: Fix MTE feature detection d16749988d09 PCI: PM: Do not read power state in pci_enable_device_flags() d863389e9f2e ARM: tegra: acer-a500: Rename avdd to vdda of touchscreen node d9a1f62b03da kselftest/arm64: mte: Fix compilation with native compiler 173ab4bb8cbf usb: xhci: Fix port minor revision 45f879b29da7 usb: dwc3: gadget: Ignore EP queue requests during bus reset 85eb84bd818f usb: gadget: f_uac1: validate input parameters f63390de9b43 usb: gadget: f_uac2: validate input parameters df7452f03b7f genirq/matrix: Prevent allocation counter corruption bde50f19ba24 crypto: hisilicon/sec - fixes a printing error 6a6273a65fcd x86/sev: Do not require Hypervisor CPUID bit for SEV guests ba637773a9f9 usb: webcam: Invalid size of Processing Unit Descriptor 930d586646cf usb: gadget: uvc: add bInterval checking for HS mode 6202e708f303 crypto: qat - fix unmap invalid dma address 92f333793a78 crypto: api - check for ERR pointers in crypto_destroy_tfm() 298a44f38171 bus: mhi: core: Destroy SBL devices when moving to mission mode 2e40d8cd3db5 spi: ath79: remove spi-master setup and cleanup assignment 91629921cef9 spi: ath79: always call chipselect function 40e02e167816 staging: wimax/i2400m: fix byte-order issue e160833c9fdf bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first 6af796b4ac45 cpuidle: tegra: Fix C7 idling state on Tegra114 6f85f0497274 fbdev: zero-fill colormap in fbcmap.c af830b27c34d posix-timers: Preserve return value in clock_adjtime32() a4794be7b00b btrfs: fix race between transaction aborts and fsyncs leading to use-after-free af835665ddc9 intel_th: pci: Add Rocket Lake CPU support 97f30747b22c btrfs: fix metadata extent leak after failure to create subvolume 0c48349a6d41 x86/build: Disable HIGHMEM64G selection for M486SX dba16ca6f347 btrfs: handle remount to no compress during compression 5f2adf84624e smb2: fix use-after-free in smb2_ioctl_query_info() 8a90058752e0 cifs: detect dead connections only when echoes are enabled. 23d7b4a8f77a cifs: fix out-of-bound memory access when calling smb3_notify() at mount point aaa0faa5c28a cifs: Return correct error code from smb2_get_enc_key 7be4db5c2b59 irqchip/gic-v3: Do not enable irqs when handling spurious interrups 44faf03f56b8 mmc: core: Fix hanging on I/O during system suspend for removable cards 886da99e8fc4 mmc: core: Set read only for SD cards with permanent write protect bit 140f225218cd mmc: core: Do a power cycle when the CMD11 fails 20d6f231f8f1 mmc: block: Issue a cache flush only when it's enabled b1fba87e60bc mmc: block: Update ext_csd.cache_ctrl if it was written cdc615acade4 mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN bit 6c43290972ed mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers 01db7cb746f0 mmc: sdhci: Check for reset prior to DMA address unmap 25ac6ce65f1a mmc: uniphier-sd: Fix a resource leak in the remove function 83e9e22ba93a mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe() b7a1577a1a79 scsi: mpt3sas: Block PCI config access from userspace during reset 702cdaa2c628 scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() f1cbba5ea75b spi: spi-ti-qspi: Free DMA resources 421f24114c64 spi: stm32-qspi: fix pm_runtime usage_count counter dbaf435ddf97 erofs: add unsupported inode i_format check 34ec706bf0b7 mtd: physmap: physmap-bt1-rom: Fix unintentional stack access 706e60c19237 mtd: rawnand: atmel: Update ecc_stats.corrected counter 907452b3b6a6 mtd: spinand: core: add missing MODULE_DEVICE_TABLE() cb5305ac5bac Revert "mtd: spi-nor: macronix: Add support for mx25l51245g" 2e41cc10660e mtd: spi-nor: core: Fix an issue of releasing resources during read/write 4c44c136f2fa fs/epoll: restore waking from ep_done_scan() 6b5aeb69bb9f ecryptfs: fix kernel panic with null dev_name 3ad1fb97619b arm64: dts: mt8173: fix property typo of 'phys' in dsi node 6c2f97f3887f arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node 011b9e1c2a18 ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld 634684d79733 ftrace: Handle commands when closing set_ftrace_filter file d11fdbee28af ACPI: custom_method: fix a possible memory leak 62dc2440ebb5 ACPI: custom_method: fix potential use-after-free issue 58a762a7f3be tpm: acpi: Check eventlog signature before using it 3b8b6399666a vhost-vdpa: fix vm_flags for virtqueue doorbell mapping 026499a9c2e0 s390/zcrypt: fix zcard and zqueue hot-unplug memleak e534a4b139a8 s390/disassembler: increase ebpf disasm buffer size 90402b6b45f3 dyndbg: fix parsing file query without a line-range suffix ed9cfd60c787 nitro_enclaves: Fix stale file descriptors on failed usercopy a1d2bd164c1c bus: mhi: core: Sanity check values from remote device before use bcb80329e815 bus: mhi: core: Clear configuration from channel context during reset 542fd3e4fde6 bus: mhi: core: Fix check for syserr at power_up Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 86bac399136de151c2b33e715fd8d810707c431c) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10linux-yocto/5.10: ktypes/standard: disable obsolete crypto options by defaultBruce Ashfield
Integrating the following commit(s) to linux-yocto/5.10.: ktypes/standard: disable obsolete crypto options by default CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is on by default, but really shouldn't be on in our kernels for a safe set of baseline options. This is almost never used, so we disable it by default. If something needs it, they can turn it on in a board specific config. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f29be437290a960decdc2d8be8e505e8179c2f58) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10linux-yocto/5.4: update to v5.4.117Bruce Ashfield
Updating linux-yocto/5.4 to the latest korg -stable release that comprises the following commits: b5dbcd05792a Linux 5.4.117 0ee3bfc2c31e vfio: Depend on MMU b246759284d6 perf/core: Fix unconditional security_locked_down() call a1e6a0d1e6cf ovl: allow upperdir inside lowerdir 8198962021fd scsi: ufs: Unlock on a couple error paths 91aa2644a3ab platform/x86: thinkpad_acpi: Correct thermal sensor allocation 164f74391822 USB: Add reset-resume quirk for WD19's Realtek Hub 5922dfc42ac8 USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet 314192f055d9 ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX 6cede11149bf perf ftrace: Fix access to pid in array when setting a pid filter ad4659935e11 perf data: Fix error return code in perf_data__create_dir() cbc6b467610c iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() c7166a529e2b avoid __memcat_p link failure 8ba25a9ef9b9 bpf: Fix leakage of uninitialized bpf stack under speculation 53e0db429b37 bpf: Fix masking negation logic upon negative dst register b0c8fe7ef797 iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() 43b515c52942 igb: Enable RSS for Intel I211 Ethernet Controller 354520d3ea81 net: usb: ax88179_178a: initialize local variables before use 55714a57f369 ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() b3041510f0fc ACPI: tables: x86: Reserve memory occupied by ACPI tables 91b08c5319a5 mips: Do not include hi and lo in clobber list for R6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0bb2a057ed02b94e6f12b0508b5d7f4a535b1ca0) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10linux-yocto/5.10: update to v5.10.35Bruce Ashfield
Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: f53a3a480862 Linux 5.10.35 94c76056fc3f vfio: Depend on MMU 4348d3b5027b perf/core: Fix unconditional security_locked_down() call 399f9c18473c platform/x86: thinkpad_acpi: Correct thermal sensor allocation ac2cd82c7609 USB: Add reset-resume quirk for WD19's Realtek Hub d844aaa49ac8 USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet 59b3f88386b5 ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX 27c1936af506 ovl: allow upperdir inside lowerdir 71d58457a8af ovl: fix leaked dentry 2fa0387fa2d0 nvme-pci: set min_align_mask f8e71c667ee1 swiotlb: respect min_align_mask 85a5a6875ca9 swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single 25ed8827cfbf swiotlb: refactor swiotlb_tbl_map_single 9efd5df078a7 swiotlb: clean up swiotlb_tbl_unmap_single 1f2ef5a0f771 swiotlb: factor out a nr_slots helper 1bbcc985d195 swiotlb: factor out an io_tlb_offset helper 22163a8ec863 swiotlb: add a IO_TLB_SIZE define 2e8b3b0b8e2d driver core: add a min_align_mask field to struct device_dma_parameters 6995512a472f tools/cgroup/slabinfo.py: updated to work on current kernel a7c37332afa8 perf ftrace: Fix access to pid in array when setting a pid filter fb4c1c2e9fd1 capabilities: require CAP_SETFCAP to map uid 0 b571a6302a64 perf data: Fix error return code in perf_data__create_dir() 48ec949ac979 net: qrtr: Avoid potential use after free in MHI send 2fa15d61e4cb bpf: Fix leakage of uninitialized bpf stack under speculation 2cfa537674cd bpf: Fix masking negation logic upon negative dst register a41c193d004e igb: Enable RSS for Intel I211 Ethernet Controller 2e68890993d0 net: usb: ax88179_178a: initialize local variables before use d3598eb3915c netfilter: conntrack: Make global sysctls readonly in non-init netns c239bfc2e4ac mips: Do not include hi and lo in clobber list for R6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 767e6755740204981e5789b7a3066eac855605e8) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10classes/reproducible_build: Use atomic rename for SDE fileJoshua Watt
If an existing source date epoch file was found during do_unpack, it was deleted and a new one would be written in its place. This causes a race with check-before-use code in get_source_date_epoch_value. Resolve the problem by making do_unpack write the new source date epoch to a temporary file, then do an atomic rename to ensure it's always present, and change the check-before-use code to use a EAFP exception instead of checking for file existence. [YOCTO #14384] Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0b5e3b33187bf78a2d62cc886463e4b27d6bd228) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10valgrind: Improve non-deterministic ptest reliabilityTony Tascioglu
Several of the valgrind tests (particulaly helgrind) are unreliable and can fail with a different output. Particularly, there is a higher chance of failure on QEMU instances with SMP enabled and on systems with more interrupts such as laptops on powersave. The tests have been reported upstream as being unreliable dating back over 5 years, due in part to the ordering of threads during an "unwinding" process in helgrind. https://bugs.kde.org/show_bug.cgi?id=345121 https://bugs.kde.org/show_bug.cgi?id=430321 A workaround to improve the reliability of such tests is to force them to run on a single CPU core using taskset. This greatly reduces the chance of a failure. >From my testing, I have found it can help reduce the rate of failures on both a laptop and QEMU by over 5x. Stress-testing in QEMU for several hours did not result in a failure while running the test normally did. The flaky or undeterministic thread-based tests are defined in the taskset_nondeterministic_tests file. These test cases will be run with taskset 0x00000001 to run on a single CPU core rather then the regular test. The edited run-ptest executes the flaky tests first, then ignores them to not duplicate the results from the main tests. Everything modified is restored when testing is complete. The drawback is that this isn't a foolproof solution. It helps the tests fail much less frequently, and considering how this issue has been documented for a long time, a workaround such as this is needed. Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b318944dd72ca7b0408e955f3599381ab3ac3ba8) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10valgrind: fix a typoKai Kang
Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0478d9b04d6a6d10e439116b23b641a1e2553e26) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-10python3: upgrade 3.9.4 -> 3.9.5Trevor Gamblin
Version 3.9.5 includes a fix for CVE-2021-29921. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit be23351f97c1a7362c0ddd240a6de0cddfca1b01) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-02oeqa/runtime/rpm: Drop log message counting test componentRichard Purdie
This test is flawed since multiple parts of the system can write to the log and we obtain different numbers of log messages depending on factors we can't control. Drop the log testing component of the test. [YOCTO #12465] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02package_rpm: pass XZ_THREADS to rpmRoss Burton
By default RPM uses the number of cores as the number of threads to use, which can result in quite antisocial memory usage. As we control the macros for compression anyway, we can pass XZ_THREADS to limit the number of threads if needed. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02pkgconfig: update SRC_URIChangqing Li
The git repo for pkg-config was changed, so update the SRC_URI accordingly with the new link. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02flex: correct license informationNikolay Papenkov
License-Update: Corrected license information flex package is under two licenses: - "BSD-3-Clause" is provided in top-level COPYING file; the license actually include third obligation (without the actual "3" numbering) - "LGPL-2.0+" is explained by src/gettext.h Signed-off-by: Dmitry Kisil <d.kisil@inango-systems.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02expat: set CVE_PRODUCTSteve Sakoman
Upstream database uses both "expat" and "libexpat" to report CVEs Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02curl: fix CVE-2021-22876Trevor Gamblin
Backport and modify the patch for CVE-2021-22876 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22876 Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-02curl: fix CVE-2021-22890Trevor Gamblin
Backport and modify the patch for CVE-2021-22890 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22890 Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31qemu: Exclude CVE-2020-3550[4/5/6] from cve-checkSakib Sajal
CVE's affect ESP (NCR53C90) part of chip STP2000 (Master I/O). On Sparc32 it is the NCR89C100 part of the chip. On Macintosh Quadra it is NCR53C96. Both are not supported by yocto. Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31bind: upgrade 9.16.15 -> 9.16.16Trevor Gamblin
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31bind: upgrade 9.16.13 -> 9.16.15Richard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31bind: upgrade 9.16.12 -> 9.16.13Alexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31xinetd: Exclude CVE-2013-4342 from cve-checkRichard Purdie
We use the SUSE mirror of xinetd. The CVE fix was added to the main repo after the latest release but is included in the version from the SUSE repo. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-24cve-extra-exclusions.inc: add exclusion list for intractable CVE'sRichard Purdie
The preferred methods for CVE resolution are: 1. Version upgrades where possible 2. Patches where not possible 3. Database updates where version info is incorrect 4. Exclusion from checking where it is determined that the CVE does not apply to our environment In some cases none of these methods are possible. For example the CVE may be decades old with no apparent resolution, and with broken links that make further research impractical. Some CVEs are vauge with no specific action the project can take too. This patch creates a mechanism for users to remove this type of CVE from the cve-check results via an optional include file. Based on an initial patch from Steve Sakoman <steve@sakoman.com> but extended heavily by RP. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-24grub: Exclude CVE-2019-14865 from cve-checkRichard Purdie
The CVE only applies to RHEL. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-24grub2: Add CVE whitelist entries for issues fixed in 2.06Richard Purdie
We're using a pre-release version of 2.06 so these issues are fixed but continue to show up in the checks since it is pre-2.06 and the CPE entries are "before but excluding 2.06". Adding these will clean up CVE reports until the 2.06 release comes out. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22lib/oe/gpg_sign.py: Fix gpg verificationDaniel McGregor
A stray space made it into the command for verifying gpg signatures. This caused verification to fail, at least on my host. Removing the space makes it work as expected. Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22sstate: Ignore sstate signing keyDaniel McGregor
What key is used to sign sstate artefacts should not affect the hash of the object, otherwise everyone would need to use the same signing key. Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22boost: fix do_fetch failureStefan Ghinea
Bintray service has been discontinued causing boost do_fetch to fail: WARNING: boost-1.76.0-r0 do_fetch: Failed to fetch URL https://dl.bintray.com/boostorg/release/1.75.0/source/boost_1_75_0.tar.bz2, attempting MIRRORS if available RP: Backport to 1.75.0 Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22baremetal-image: Fix post process command rootfs_update_timestampAlejandro Hernandez Samaniego
When running: execute_pre_post_process(d, d.getVar(ROOTFS_POSTPROCESS_COMMAND)) rootfs_update_timestamp is run, which assumes that rootfs/${sysconfdir} is already created (usually done through the do_rootfs task on linux). This causes the build to fail if ${sysconfdir} does not exist. This may be overlooked if debug-tweaks is enabled since some other commands are added, one of which creates the required path (see postinst_enable_logging). See [1] for more info: [1] https://github.com/aehs29/meta-freertos/issues/4 Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22ltp: Disable problematic tests causing autobuilder hangsRichard Purdie
We've seen three hangs in cgroup_xattr and two in proc01 so far. The new plan is just to disable any tests seen to hang. I've had enough of these causing problems on our testing infrastructure. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libxml2: Fix CVE-2021-3541Tony Tascioglu
Upstream commit: This is related to parameter entities expansion and following the line of the billion laugh attack. Somehow in that path the counting of parameters was missed and the normal algorithm based on entities "density" was useless. CVE: CVE-2021-3541 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/8598060bacada41a0eb09d95c97744ff4e428f8e] Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libxml2: Fix CVE-2021-3518Tony Tascioglu
This patch fixes CVE-2021-3518. The fix for the CVE is the following 3 lines in 1098c30a: - (cur->children->type != XML_ENTITY_DECL) && - (cur->children->type != XML_XINCLUDE_START) && - (cur->children->type != XML_XINCLUDE_END)) { + ((cur->type == XML_DOCUMENT_NODE) || + (cur->type == XML_ELEMENT_NODE))) { This relies on an updated version of xinclude.c from upstream which also adds several new tests. Those changes are brought in first so that the CVE patch can be applied cleanly. The first patch updates xinclude.c and adds the new tests from upstream, and the second applies the fix for the CVE. CVE: CVE-2021-3518 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/1098c30a040e72a4654968547f415be4e4c40fe7] Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libxml2: fix CVE-2021-3537Tony Tascioglu
Parsing specially crafted Mixed Content while parsing XML data may lead to invalid data structure being created, as errors were not propagated. This could lead to several NULL Pointer Dereference when post-validating documents parsed in recovery mode. CVE: CVE-2021-3537 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/babe75030c7f64a37826bb3342317134568bef61] Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libxml2: fix CVE-2021-3516Tony Tascioglu
Fixes use-after-free in xmlEncodeEntitiesInternal() in entities.c CVE: CVE-2021-3516 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539] Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libxml2: fix CVE-2021-3517Tony Tascioglu
Fixes heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c CVE: CVE-2021-3517 Upstream-status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/bf22713507fe1fc3a2c4b525cf0a88c2dc87a3a2] Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22ccache: add packageconfig docs optionBastian Krause
Before, ccache's configure stage built HTML documentation and man pages depending on if asciidoc is installed. This patch makes it configurable. Pass the new cmake option ENABLE_DOCUMENTATION along and add the asciidoc dependency if necessary. This fixes an issue when ccache's configure stage found asciidoc/a2x on the system outside of the sysroot (e.g. installed via 'apt install asciidoc'). ccache would then decide to build docs and manual pages, but would fail during compilation: the system's a2x could not find the system's asciidoc because it did not reside in the set PATH. By enabling/disabling docs/man page generation explicitly and adding asciidoc to DEPENDS as necessary, this is no longer an issue. [ This corresponds to commit b0aedd74 and parts of commit 1eedc5f8, with the patch replaced by the upstream version. ] Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22sstate: Handle manifest 'corruption' issueRichard Purdie
Under certain build patterns, warnings about missing manifests can appear. These are real issues where the manifest was removed and shouldn't have been. Martin Jansa was able to find a reproducer of: MACHINE=qemux86 bitbake zlib-native echo 'PR = "r1"' >> meta/recipes-core/zlib/zlib_1.2.11.bb MACHINE=qemux86-64 bitbake zlib-native MACHINE=qemux86 bitbake zlib-native <the zlib-native manifest is now removed along with the sysroot-components contents> The code maintains a per machine list of stamps but a per PACAGE_ARCH list of stamp/manifest/workdir mappings. The latter is only appended to for speed with the assumption that once stamps are gone, the code wouldn't trigger. The code only ever appends to the mapping list (for speed/efficency under lock) meaning that multiple entries can result where the stamp/workdir differs due to version changes but the manifest remains the same. By switching MACHINE part way through the build, the older stamp is referenced and the manifest is incorrectly removed as it matches an now obsolete entry in the mapping file. There are two possible fixes, one is to rewrite the mapping file every time which means adding regexs, iterating and generally complicating that code. The second option is to only use the last mapping entry in the file for a given manifest and ignore any earlier ones. This patch implments the latter. Also drop the stale entries if we are rewriting it. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22cups: whitelist CVE-2021-25317Ross Burton
This CVE relates to bad ownership of /var/log/cups, which we don't have. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22glibc: Add 8GB VM usage cap for usermode test suiteRichard Purdie
We've noticed that: MACHINE=qemuarm oe-selftest -r glibc.GlibcSelfTest.test_glibc ends up with one process growing to about the size of system memory and triggering the OOM killer. This has been taking out other builds running on the system on the autobuilders and is one cause of our intermittent failures. This was tracked down to: WORKDIR=XXX/tmp/work/armv7vet2hf-neon-poky-linux-gnueabi/glibc-testsuite/2.33-r0 BUILDDIR=$WORKDIR/build-arm-poky-linux-gnueabi QEMU_SYSROOT=$WORKDIR/recipe-sysroot QEMU_OPTIONS="$WORKDIR/recipe-sysroot-native/usr/bin/qemu-arm -r 3.2.0" \ $WORKDIR/check-test-wrapper user env GCONV_PATH=$BUILDDIR/iconvdata LOCPATH=$BUILDDIR/localedata LC_ALL=C $BUILDDIR/elf/ld-linux-armhf.so.3 \ --library-path $BUILDDIR:$BUILDDIR/math:$BUILDDIR/elf:$BUILDDIR/dlfcn:$BUILDDIR/nss:$BUILDDIR/nis:$BUILDDIR/rt:$BUILDDIR/resolv:$BUILDDIR/mathvec:$BUILDDIR/support:$BUILDDIR/nptl \ $BUILDDIR/nptl/tst-pthread-timedlock-lockloop although other glibc tests appear to use 16GB of memory before failing anyway. By capping the VM size to 8GB, we see the same number of failures but no OOM situations. There may be some issue in qemu or the test which could be improved to avoid this entirely but this provides a necessary and useful safeguard to other builds and doensn't appear to make the situation worse. On a loaded system OOM may not occur as the test timeout may be triggered first. An experiment with a 5GB limit showed an additional 7 failures. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22uninative: Upgrade to 3.2 (gcc11 support)Michael Halstead
This upgrade builds unnative with gcc11 allowing it to work with newer distros using gcc 11. Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22meta/lib/oe/rootfs.py: Fix typo "Restoreing" -> "Restoring"Robert P. J. Day
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22image.bbclass: fix comment "pacackages" -> "packages"Robert P. J. Day
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22avahi: Exclude CVE-2021-26720 from cve-checkRichard Purdie
Issue only affects Debian and SUSE. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22librsvg: Exclude CVE-2018-1000041 from cve-checkRichard Purdie
Issue only affects windows. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22coreutils: Exclude CVE-2016-2781 from cve-checkRichard Purdie
http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=v8.27-101-gf5d7c0842 "Given runcon is not really a sandbox command, the advice is to use `runcon ... setsid ...` to avoid this particular issue. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22tiff: Exclude CVE-2015-7313 from cve-checkRichard Purdie
Some fix upstream addresses the issue, it isn't clear which change this was. Our current version doesn't have issues with the test image though so we can exclude. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22bluez: Exclude CVE-2020-12352 CVE-2020-24490 from cve-checkRichard Purdie
These CVEs are fixed with kernel changes and don't affect the bluez recipe. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22ghostscript: Exclude CVE-2013-6629 from cve-checkRichard Purdie
The CVE is in the jpeg sources included with ghostscript. We use our own external jpeg library so this doesn't affect us. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22cpio: Exclude CVE-2010-4226 from cve-checkRichard Purdie
Issue applies to use of cpio in SUSE/OBS, doesn't apply to us. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22unzip: Exclude CVE-2008-0888 from cve-checkRichard Purdie
The patch mentioned as the fix for the CVE is applied to the 6.0 source code. Zip versioning makes CPE entry changes hard. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22openssh: Exclude CVE-2008-3844 from cve-checkRichard Purdie
CVE only applies to some distributed RHEL binaries so irrelavent to us. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22openssh: Exclude CVE-2007-2768 from cve-checkRichard Purdie
We don't build/use the OPIE PAM module, exclude the CVE from this recipe. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-04 08:12:50 +0000