1
0
mirror of https://git.yoctoproject.org/poky synced 2026-05-08 17:19:20 +00:00
Commit Graph

75651 Commits

Author SHA1 Message Date
Bruce Ashfield 25cc9eae17 linux-yocto/6.6: update to v6.6.93
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c2603c511feb4 Linux 6.6.93
    c78abb646ff82 ksmbd: use list_first_entry_or_null for opinfo_get_list()
    106451492d74c net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
    513b27dbd126b platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
    871e44494f5d5 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    af7243148f2eb NFS: Avoid flushing data while holding directory locks in nfs_rename()
    f83097445b7ec nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    e99de95033051 spi: spi-sun4i: fix early activation
    b8435b76971dc phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
    eae121397e278 drm/amd/display: fix link_set_dpms_off multi-display MST corner case
    4728d56dc56f0 um: let 'make clean' properly clean underlying SUBARCH as well
    af288d8e14058 platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    764f8cd8aadcd nfs: don't share pNFS DS connections between net namespaces
    98f7c351a11a1 HID: quirks: Add ADATA XPG alpha wireless mouse support
    46a6ce4812555 dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
    cdb61a705f5f3 coredump: hand a pidfd to the usermode coredump helper
    1846a7b92b863 coredump: fix error handling for replace_fd()
    0ec1e98bf5366 perf/arm-cmn: Initialise cmn->cpu earlier
    10778e2f49a2c perf/arm-cmn: Fix REQ2/SNP2 mixup
    295f7c579b07b net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
    ee1209b9f57ba arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
    cf27046208bd8 arm64: dts: qcom: sm8550: Add missing properties for cryptobam
    feadf31790331 arm64: dts: qcom: sm8450: Add missing properties for cryptobam
    5dd982ff67d1e arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    abf3ffaeef603 arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
    ea61eda1f4b45 af_unix: Fix uninit-value in __unix_walk_scc()
    ed14f8ae9bcf7 af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
    c0c8d419dade9 af_unix: Add dead flag to struct scm_fp_list.
    a288920ff9dab af_unix: Don't access successor in unix_del_edges() during GC.
    3600729b7fc05 af_unix: Try not to hold unix_gc_lock during accept().
    7b1ffbd3b22e7 af_unix: Remove lock dance in unix_peek_fds().
    de7921631ff32 af_unix: Replace garbage collection algorithm.
    2c2d0c662d842 af_unix: Detect dead SCC.
    324005012f65e af_unix: Assign a unique index to SCC.
    d23802221f675 af_unix: Avoid Tarjan's algorithm if unnecessary.
    cdaa3499a8519 af_unix: Skip GC if no cycle exists.
    e0e23fc499920 af_unix: Save O(n) setup of Tarjan's algo.
    27a07364cefdf af_unix: Fix up unix_edge.successor for embryo socket.
    36f924e4bf4e7 af_unix: Save listener for embryo socket.
    3ee9b24bd6f70 af_unix: Detect Strongly Connected Components.
    856aacbe2c520 af_unix: Iterate all vertices by DFS.
    494accabb56e2 af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
    d2d9f382e2db6 af_unix: Link struct unix_edge when queuing skb.
    4fc7df1c6da14 af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
    9e98ba0c73529 af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
    8eb55b667a0e2 af_unix: Remove CONFIG_UNIX_SCM.
    c0d56c028d90f af_unix: Remove io_uring code for GC.
    36f1f6ac53889 af_unix: Replace BUG_ON() with WARN_ON_ONCE().
    acc97866c1eae af_unix: Try to run GC async.
    328840c93bd6a af_unix: Run GC on only one CPU.
    4be073d59068e af_unix: Return struct unix_sock from unix_get_socket().
    c7b1bd52a031a btrfs: check folio mapping after unlock in relocate_one_folio()
    63815bef47ec2 hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
    5a9c0d5cbd02d can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
    f968f28cd14bb drm/gem: Internally test import_attach for imported objects
    10aecdc1c30c7 x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
    367b8b91de2a0 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    1f9170737480d pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
    4a5e6e798ec77 watchdog: aspeed: fix 64-bit division
    a9e4ee7f12886 serial: sh-sci: Save and restore more registers
    517f928cc0c13 pds_core: Prevent possible adminq overflow/stuck condition
    77192e9cfe1b3 highmem: add folio_test_partial_kmap()
    bc133e43cb565 x86/boot: Compile boot code with -std=gnu11 too
    5cdce62dd929a spi: spi-fsl-dspi: Reset SR flags before sending a new message
    7cf42e5f406a5 spi: spi-fsl-dspi: Halt the module after a new message transfer
    9df00bd4769a0 spi: spi-fsl-dspi: restrict register range for regmap access
    0e7efc9acbb56 ksmbd: fix stream write failure
    fa68d5c14a70d Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    f391043332e38 mm/page_alloc.c: avoid infinite retries caused by cpuset race
    363fd868d7a71 memcg: always call cond_resched() after fn()
    f33001a7c1e8f Input: xpad - add more controllers
    ed7d24b0c375f Revert "drm/amd: Keep display off while going into S4"
    bee465c0c464b smb: client: Reset all search buffer pointers when releasing buffer
    17d096c485b89 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    73cadde98f67f smb: client: Fix use-after-free in cifs_fill_dirent
    7227fc0692d53 drm/edid: fixed the bug that hdr metadata was not reset
    7093887a11fe4 thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
    f86465626917d platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
    dde5400dad7e7 can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
    4cfe30f681a3d llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    6764329675f94 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
    74d90875f3d43 ALSA: pcm: Fix race of buffer access at PCM OSS layer
    b5bada85c181f ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
    1beb8c26b1fb1 ASoc: SOF: topology: connect DAI to a single DAI link
    e8be784d30b44 ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
    1f912f8484e9c can: bcm: add missing rcu read protection for procfs content
    76c84c3728178 can: bcm: add locking for bcm_op runtime updates
    e80f4f9c64b0f can: slcan: allow reception of short error messages
    584a729615fa9 padata: do not leak refcount in reorder_work
    134daaba93193 crypto: algif_hash - fix double free in hash_accept
    0c605de7edd68 clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
    35016086ae593 octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
    cc797adde644d octeontx2-af: Set LMT_ENA bit for APR table entries
    b19fc1d0be3c3 net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
    a3d24e4a835cb octeontx2-pf: Add AF_XDP non-zero copy support
    93c276942e75d sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    c844ace5b88d0 io_uring: fix overflow resched cqe reordering
    dbcd0909a1e2c net: lan743x: Restore SGMII CTRL register on resume
    0b4cde7284869 net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    52b2e5579266f pinctrl: qcom: switch to devm_register_sys_off_handler()
    78b70388ca0ec pinctrl: qcom/msm: Convert to platform remove callback returning void
    df941e11772b3 ice: Fix LACP bonds without SRIOV environment
    c8a1a805e6d27 ice: fix vf->num_mac count with port representors
    fa942824b9f4a bridge: netfilter: Fix forwarding of fragmented packets
    feb6bde1a3241 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
    c331a616a0b10 Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    2b82d8e483bf0 dmaengine: fsl-edma: Fix return code for unhandled interrupts
    55f3c97fcba84 dmaengine: idxd: Fix ->poll() return value
    dcdc1aca6880d xfrm: Sanitize marks before insert
    a1fad2da94f00 clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
    c2b52d947c3dd remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    5ff1a234fa4ee kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
    1b388afe88163 dmaengine: idxd: Fix allowing write() from different address spaces
    05298c30b7d9f dmaengine: idxd: add wq driver name support for accel-config user tool
    b58a295d10065 espintcp: remove encap socket caching to avoid reference leak
    3cf3d4f11254e soundwire: bus: Fix race on the creation of the IRQ domain
    d8ece4ced3b05 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
    e6d703b693b4c xenbus: Allow PVH dom0 a non-local xenstore
    85d12487d90ab wifi: iwlwifi: add support for Killer on MTL
    4e3401aa6e447 tools: ynl-gen: validate 0 len strings from kernel
    50d0de59f66cb btrfs: avoid NULL pointer dereference if no valid csum tree
    7a97f961a568a btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
    225cc549ed23f cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
    fc460c12cd1e9 cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
    b72952c8c3668 io_uring/fdinfo: annotate racy sq/cq head/tail reads
    3a982ada411b8 nvmet-tcp: don't restore null sk_state_change
    a7a2315d8d0dc nvme-pci: add quirks for WDC Blue SN550 15b7:5009
    0a3f5efd1c545 nvme-pci: add quirks for device 126f:1001
    1c0d7792cfc71 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    dbb47cbdbe2ad ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    4c017ff3d73dd ASoC: cs42l43: Disable headphone clamps during type detection
    0ab50f622f202 pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    534794c719231 book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
    442a247361f8b ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    fe4a7145f048c drm: Add valid clones check
    1c58b332bc435 drm/panel-edp: Add Starry 116KHD024006
    e585f4f44a102 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    5d4951bad74bf drm: bridge: adv7511: fill stream capabilities
    a7e7cf538939d wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
    2dbcaddcf8eab wifi: ath9k: return by of_get_mac_address
    a21971b4be60f accel/qaic: Mask out SR-IOV PCI resources
    fbdf410d3bd2e wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
    b658e144a0922 regulator: ad5398: Add device tree support
    df76df11fd8be spi: zynqmp-gqspi: Always acknowledge interrupts
    ccf4a818d8c31 wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
    5e479af4999b0 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
    ee71c34d4f415 wifi: rtl8xxxu: retry firmware download on error
    419988f4d0efb perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
    0cb6a1292aaef perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    9610a67963506 firmware: arm_scmi: Relax duplicate name constraint across protocol ids
    38d906f1c54b9 bpftool: Fix readlink usage in get_fd_type
    0e8eb91a4950f drm/ast: Find VBIOS mode from regular display size
    e190ed2c12e77 ASoC: rt722-sdca: Add some missing readable registers
    48c78cf634dba ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
    123ac614e5b34 arm64: zynqmp: add clock-output-names property in clock nodes
    23b0b86ad1db2 HID: usbkbd: Fix the bit shift number for LED_KANA
    c317b0694a6eb wifi: ath12k: Avoid napi_sync() before napi_enable()
    32bcf54138acf scsi: st: Restore some drive settings after reset
    1960bb56a9c83 scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
    3dfeee957aaf3 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    c34ab75adde53 net/mana: fix warning in the writer of client oob
    1d10624a42437 ice: count combined queues using Rx/Tx count
    948664b92e571 perf: Avoid the read if the count is already updated
    f47d605c5e2a6 rcu: fix header guard for rcu_all_qs()
    9abec90c85b22 rcu: handle unstable rdp in rcu_read_unlock_strict()
    4a36d93a01758 rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    cae56998162cc ice: treat dyn_allowed only as suggestion
    9ed3c1b11d7ef bridge: mdb: Allow replace of a host-joined group
    961ee132104b0 r8169: don't scan PHY addresses > 0
    2cb57a887a435 ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
    13cba3f837903 vxlan: Annotate FDB data races
    090c0ba179eaf net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
    f312bd5cf2067 media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
    6fed5e23d2a92 f2fs: introduce f2fs_base_attr for global sysfs entries
    9af429febfedf hwmon: (xgene-hwmon) use appropriate type for the latency value
    70e7df6f69073 clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    ba02bb3a01328 wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
    0b660a7f296b5 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    23fe8aa8cc1a8 ext4: remove writable userspace mappings before truncating page cache
    73e7c65b21274 ext4: don't write back data before punch hole in nojournal mode
    3648ddabcdc25 leds: trigger: netdev: Configure LED blink interval for HW offload
    7ef54a11c199d pstore: Change kmsg_bytes storage size to u32
    09c3a82664d8f r8152: add vendor/device ID pair for Dell Alienware AW1022z
    cc1d408e7c9e2 ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    22ee8dabec1a2 arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
    fa5d374f6bacb powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
    6758d09763f62 net: fec: Refactor MAC reset to function
    2caf52c072059 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    bb1f9d63127e8 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    9ef9ecabc6b55 drm/v3d: Add clock handling
    76016797e7f96 net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
    dce57841d93de net/mlx5e: reduce rep rxq depth to 256 for ECPF
    9411c965e4e6a net/mlx5e: set the tx_queue_len for pfifo_fast
    c31e839649547 net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    353cd6804ea85 scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
    991970293ff8a drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
    26b6548dc7417 drm/amdgpu: enlarge the VBIOS binary size limit
    de67e80ab48f1 drm/amd/display: Increase block_sequence array size
    16c26a6404454 drm/amd/display: Initial psr_version with correct setting
    c59c96b850ea6 drm/amd/display: Update CR AUX RD interval interpretation
    af2d36316a193 drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    6881a3a58852f drm/amd/display: Don't try AUX transactions on disconnected link
    ab83ed96f7587 drm/amdgpu: Set snoop bit for SDMA for MI series
    929cda8e4b75d soundwire: amd: change the soundwire wake enable/disable sequence
    6a7b7e98fec0a phy: core: don't require set_mode() callback for phy_get_mode() to work
    3bf3eae909914 serial: sh-sci: Update the suspend/resume support
    e9bed533ec803 sched: Reduce the default slice to avoid tasks getting an extra tick
    5024d8e58a080 x86/traps: Cleanup and robustify decode_bug()
    cc50c7c1a9898 clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
    fba6e5d44fb8d clk: qcom: ipq5018: allow it to be bulid on arm32
    d655dbd82b555 net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    f8a9f45f75ab3 media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    0b9d2468c3d88 media: i2c: imx219: Correct the minimum vblanking value
    868c3d8cfcff6 kunit: tool: Use qboot on QEMU x86_64
    3d6d13540f776 smack: Revert "smackfs: Added check catlen"
    e30f31434e9c3 smack: recognize ipv4 CIPSO w/o categories
    de4332d7a5f6f pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
    b3d2a8809ef07 ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    35160eda61e74 ASoC: tas2764: Power up/down amp on mute ops
    c1045e770256c ASoC: tas2764: Mark SW_RESET as volatile
    7ac84ee5eec85 ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
    9dcce3f40d54d ASoC: ops: Enforce platform maximum on initial value
    3da8088afd13a firmware: arm_ffa: Reject higher major version as incompatible
    3ec539f1e9195 net/mlx5: Apply rate-limiting to high temperature warning
    69f453ccb9e47 net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
    a9b2bb8a4f25b media: test-drivers: vivid: don't call schedule in loop
    ddddd806ba7de vxlan: Join / leave MC group after remote changes
    d97c38275d12c ACPI: HED: Always initialize before evged
    0d398ed850df9 PCI: Fix old_size lower bound in calculate_iosize() too
    d8afc25580735 eth: mlx4: don't try to complete XDP frames in netpoll
    242272c953e3b bpf: don't do clean_live_states when state->loop_entry->branches > 0
    00e59d1495fba can: c_can: Use of_property_present() to test existence of DT property
    ef7ee9b815345 pmdomain: imx: gpcv2: use proper helper for property detection
    7c5e73608302a RDMA/core: Fix best page size finding when it can cross SG entries
    c504c11b94d6e serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
    df8970a270add drm/amd/display: Add support for disconnected eDP streams
    671fea645a71b i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
    398351dcdb631 EDAC/ie31200: work around false positive build warning
    c81c2ee1c3b05 net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
    35434d1c93c73 wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
    5ce1f780a3bce wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    1b1daafd2e974 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    a95813193ab78 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    f38a1b35c8f4e scsi: mpt3sas: Send a diag reset if target reset fails
    06abee685cc97 clocksource: mips-gic-timer: Enable counter when CPUs start
    2e1b3650f5691 MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    ba41e4e627db5 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
    2ed497f369b2e MIPS: Use arch specific syscall name match function
    b2ea189a958a6 crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
    3a0c8429ab1e4 crypto: ahash - Set default reqsize from ahash_alg
    b1d1b09698e99 x86/kaslr: Reduce KASLR entropy on most x86 systems
    b0556ba85a0f3 net/mlx5: Change POOL_NEXT_SIZE define value and make it global
    52aa28f7b1708 dm: fix unconditional IO throttle caused by REQ_PREFLUSH
    ecd205a5241df libbpf: Fix out-of-bound read
    e17a6ba07929b media: tc358746: improve calculation of the D-PHY timing registers
    ca9f3ab612c62 media: adv7180: Disable test-pattern control on adv7180
    3cd2aa93674ee cpuidle: menu: Avoid discarding useful information
    48fd80f7d7b48 vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
    f5121d5ba7ce4 vhost-scsi: Return queue full for page alloc failures during copy
    de4469a90075b x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
    01768d1564650 ASoC: mediatek: mt8188: Add reference for dmic clocks
    6dadc66f6cf3e ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
    ec6f764ab7009 drm/amd/display: handle max_downscale_src_width fail check
    7472e0da47716 x86/build: Fix broken copy command in genimage.sh when making isoimage
    f32344bf957b4 Octeontx2-af: RPM: Register driver with PCI subsys IDs
    3314310b3f3e6 soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    f4e35b2c5f5cc wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
    fed3038a80bbc bonding: report duplicate MAC address in all situations
    7819a7dcf0412 net: xgene-v2: remove incorrect ACPI_PTR annotation
    7b8fe48cc86b6 net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
    ff01e0d0a61e4 leds: pwm-multicolor: Add check for fwnode_property_read_u32
    2059e6ea11c0d drm/amdkfd: KFD release_work possible circular locking
    0759d154654a8 selftests/net: have `gro.sh -t` return a correct exit code
    b3c8449484848 net/mlx5: Avoid report two health errors on same syndrome
    e2de76c34a8a9 firmware: arm_ffa: Set dma_mask for ffa devices
    a1a5e783d7cab PCI: brcmstb: Add a softdep to MIP MSI-X driver
    1f27e708e36ea PCI: brcmstb: Expand inbound window size up to 64GB
    f6dfaf5905ad6 wifi: ath12k: Report proper tx completion status to mac80211
    c7c729d7a85a9 soc: apple: rtkit: Implement OSLog buffers properly
    78b6b2fe17a2e soc: apple: rtkit: Use high prio work queue
    1ae981c91dc26 perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
    372ed2171031d fpga: altera-cvp: Increase credit timeout
    7b851d6a02da0 drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    d8e57904dc269 ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    a9dd5d748c87d hwmon: (gpio-fan) Add missing mutex locks
    7adb96687ce88 x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
    ca16d144d1f0a clk: imx8mp: inform CCF of maximum frequency of clocks
    032f3bf6471cd media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
    faa24692f7041 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    9459abd770107 drm/rockchip: vop2: Add uv swap for cluster window
    9778a91827272 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    2be4a7d53261b ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
    30ae895966221 perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
    2a9a7d2f19cca net: pktgen: fix mpls maximum labels list parsing
    cf81dae86bf6b net: ethernet: ti: cpsw_new: populate netdev of_node
    2cbe6d551b4a9 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    5c9eca180a423 media: cx231xx: set device_caps for 417
    a7b8f0addf84f drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
    3af9db78423c5 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    fef1e1487dea8 remoteproc: qcom_wcnss: Handle platforms with only single power domain
    c5b23df98a925 net: phylink: use pl->link_interface in phylink_expects_phy()
    b27be76f35010 drm/gem: Test for imported GEM buffers with helper
    121f0335d91e4 orangefs: Do not truncate file size
    3986ef4a9b6a0 dm cache: prevent BUG_ON by blocking retries on failed device resumes
    d5f8c8ec1e783 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
    74eea50b7afa1 ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    da74e11cedd1e ieee802154: ca8210: Use proper setters and getters for bitwise types
    c0acbeac2b287 rtc: ds1307: stop disabling alarms on probe
    fb69189023279 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    8c1a16d612ef7 ALSA: seq: Improve data consistency at polling
    7b1bb4d40dab8 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    d0e3e19564f03 arm64: tegra: Resize aperture for the IGX PCIe C5 slot
    988770bf312cf arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    ab13c8a5f777b drm/amdkfd: Set per-process flags only once cik/vi
    0acdc4d6e679b crypto: lzo - Fix compression buffer overrun
    ab4545a2540b7 watchdog: aspeed: Update bootstatus handling
    ac64f0e893ff3 cpufreq: tegra186: Share policy per cluster
    3123b3d445d16 iommu/amd/pgtbl_v2: Improve error handling
    8c305588bab71 ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    5b518c452ff58 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
    769d1bccd1cac gfs2: Check for empty queue in run_queue
    2e37d331c00c0 drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
    1da3dc73724bb drm/amd/display: calculate the remain segments for all pipes
    4c2a348875646 drm/amd/display: remove minimum Dispclk and apply oem panel timing.
    8ebf2709fe4dc ipv6: save dontfrag in cork
    2b790fe67ed48 wifi: iwlwifi: fix debug actions order
    386a1a0d558d7 printk: Check CON_SUSPEND when unblanking a console
    8a7f2e84f85ad hwmon: (dell-smm) Increment the number of fans
    def5f5bc83ee7 usb: xhci: Don't change the status of stalled TDs on failed Stop EP
    903c4a0c2aff4 mmc: sdhci: Disable SD card clock before changing parameters
    5ae75245939c6 mmc: dw_mmc: add exynos7870 DW MMC support
    110f701e60f98 arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    89947eea8ff91 netfilter: conntrack: Bound nf_conntrack sysctl writes
    da36c3ad7c177 timer_list: Don't use %pK through printk()
    6df3855868eb8 posix-timers: Add cond_resched() to posix_timer_add() search loop
    1bef1811651bc RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    ba841627308a3 ext4: do not convert the unwritten extents if data writeback fails
    d7f3c874ea707 ext4: reject the 'data_err=abort' option in nojournal mode
    baf667f23f609 ASoC: sun4i-codec: support hp-det-gpios property
    f8d946034765a drm/amdgpu: Update SRIOV video codec caps
    2e290e9cf6a17 mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
    aa97ea576a3f2 pinctrl-tegra: Restore SFSEL bit when freeing pins
    0fb6c439d265f xen: Add support for XenServer 6.1 platform device
    3ecfb92c019f2 net/smc: use the correct ndev to find pnetid by pnetid table
    ba8354a613a57 dm: restrict dm device size to 2^63-512 bytes
    44a82d2495e36 crypto: octeontx2 - suppress auth failure screaming due to negative tests
    3edb08b6c21ef kbuild: fix argument parsing in scripts/config
    bc8023ef3b114 bpf: Allow pre-ordering for bpf cgroup progs
    aed5bd3a84e87 ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    bf9cfc7fbe742 thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
    4beb1e55f6b08 objtool: Fix error handling inconsistencies in check()
    72d9ccdcfce24 rtc: rv3032: fix EERD location
    a7b7bc510e9ea tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    ed88717950ba9 jbd2: do not try to recover wiped journal
    5741b9d7bb873 bpf: Return prog btf_id without capable check
    743bb753255d3 vfio/pci: Handle INTx IRQ_NOTCONNECTED
    9f51fa1971239 scsi: st: ERASE does not change tape location
    01195aa1d694b scsi: st: Tighten the page format heuristics with MODE SELECT
    3011cdc5cb46c hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
    4eda8a85d4d01 ext4: reorder capability check last
    57a2882cd4f35 um: Update min_low_pfn to match changes in uml_reserved
    7638182277867 um: Store full CSGSFS and SS register from mcontext
    61225b3395c21 dlm: make tcp still work in multi-link env
    0541822045ae0 i3c: master: svc: Fix missing STOP for master request
    398c541ed0495 drm/amd/display: Guard against setting dispclk low for dcn31x
    3192d59fb7b78 btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
    a7f1c5fb7dd90 btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
    4dc7dcb919f36 btrfs: fix non-empty delayed iputs list on unmount due to async workers
    de635f9bba32e btrfs: run btrfs_error_commit_super() early
    1a012fd4eb9d0 btrfs: avoid linker error in btrfs_find_create_tree_block()
    4e74f91a6f70a btrfs: make btrfs_discard_workfn() block_group ref explicit
    a4666a812792d i2c: pxa: fix call balance of i2c->clk handling routines
    4fc8e3fb8efa8 i2c: qup: Vote for interconnect bandwidth to DRAM
    bffd5f2815c52 x86/mm: Check return value from memblock_phys_alloc_range()
    7124a9b6824e1 x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
    1752ceaa72d37 wifi: mt76: mt7996: revise TXS size
    d9776ce1733c7 wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    17e3ab067dfb6 mmc: host: Wait for Vdd to settle on card power off
    ea3d95e05e97e libnvdimm/labels: Fix divide error in nd_label_data_init()
    f29eb4c63bf4e ext4: on a remount, only log the ro or r/w state when it has changed
    44acbc14ea28d PCI: vmd: Disable MSI remapping bypass under Xen
    aa59ccacf8f33 pNFS/flexfiles: Report ENETDOWN as a connection error
    ec59dfbc1ba2f tools/build: Don't pass test log files to linker
    e4510552c297c PCI: dwc: ep: Ensure proper iteration over outbound map windows
    a74286d17e751 objtool: Properly disable uaccess validation
    454a770aea9fd lockdep: Fix wait context check on softirq for PREEMPT_RT
    0c2aa72f4f352 dql: Fix dql->limit value when reset.
    3854f4e98ef22 thermal/drivers/qoriq: Power down TMU on system suspend
    4a120221661fc spi-rockchip: Fix register out of bounds access
    4a8ebc45f2021 SUNRPC: rpcbind should never reset the port to the value '0'
    3ef02a05c86b4 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    6b8beb8104d73 NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    ee68e068cf92f cifs: Fix establishing NetBIOS session for SMB2+ connection
    89bcd83f67d22 cifs: add validation check for the fields in smb_aces
    88bf6295f065a fbdev: core: tileblit: Implement missing margin clearing for tileblit
    1714afc14dbe6 fbcon: Use correct erase colour for clearing in fbcon
    7f370b7e6fa03 fbdev: fsl-diu-fb: add missing device_remove_file()
    bbf3bb6ddea47 riscv: Allow NOMMU kernels to access all of RAM
    09096ead92f39 mailbox: use error ret code of of_parse_phandle_with_args()
    5641f6b3a4cd5 mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
    7d5b227875fb7 ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
    c1ab9f008ed40 tracing: Mark binary printing functions with __printf() attribute
    50702e7b47ed7 arm64: Add support for HIP09 Spectre-BHB mitigation
    e0b05cd9ece6e SUNRPC: Don't allow waiting for exiting tasks
    c72826efbb5eb NFS: Don't allow waiting for exiting tasks
    a81dd69f859b6 NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
    2371143e41735 fuse: Return EPERM rather than ENOSYS from link()
    209a4da04a27d smb: client: Store original IO parameters and prevent zero IO sizes
    5194597b9cde7 cifs: Fix negotiate retry functionality
    d50f7ce2fc32a cifs: Fix querying and creating MF symlinks over SMB1
    18066188eb90c cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
    f08641cd2152d s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
    a6f24a41ef527 kconfig: merge_config: use an empty file as initfile
    adbb39eca39d1 samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    38aa3cf1545f3 bpf: fix possible endless loop in BPF map iteration
    f5f169cd90769 selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
    f7292fbb41840 drm/amdgpu: Allow P2P access through XGMI
    722a6972defd8 ima: process_measurement() needlessly takes inode_lock() on MAY_READ
    91ba964a752bb net: enetc: refactor bulk flipping of RX buffers to separate function
    c36f5f659ad9c scsi: mpi3mr: Add level check to control event logging
    ca85c2d0db5f8 vhost-scsi: protect vq->log_used with vq->mutex
    20fb292ab5d5d cgroup: Fix compilation issue due to cgroup_mutex not being exported
    c15dc980ffc5a dma-mapping: avoid potential unused data compilation warning
    2cab5ea2f5ab6 intel_th: avoid using deprecated page->mapping, index fields
    b49b5132e4c73 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
    42d15918da268 scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
    fe8421e853ef2 scsi: target: iscsi: Fix timeout on deleted connection
    beb6382add07a nvmem: qfprom: switch to 4-byte aligned reads
    35d77c8d887e1 nvmem: core: update raw_len if the bit reading is required
    497f19cacb3f8 nvmem: core: verify cell's raw_len
    04c81ac33a607 nvmem: rockchip-otp: add rk3576 variant data
    266e5f4813808 nvmem: rockchip-otp: Move read-offset into variant-data
    b3145041e990a cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
    1efbe2c7a0f44 phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
    cf60d19721bc4 phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
    e992f2581b794 phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
    eb4fdee1d6303 phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
    e668cbeb9590a i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
    ad40588df1820 i2c: designware: Use temporary variable for struct device
    0ef9396a7da7a i2c: designware: Remove ->disable() callback
    33378973d843b i2c: designware: Uniform initialization flow for polling mode
    d1954e7aa1313 gpio: pca953x: fix IRQ storm on system wake up
    58e34598436f8 gpio: pca953x: Simplify code with cleanup helpers
    475d6ebc91a24 gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()

(From OE-Core rev: ab51811f918bcf5a72133c5e855949e0c347d093)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Yogita Urade 23e57638ef python3-urllib3: fix CVE-2025-50181
urllib3 is a user-friendly HTTP client library for Python. Prior to
2.5.0, it is possible to disable redirects for all requests by
instantiating a PoolManager and specifying retries in a way that
disable redirects. By default, requests and botocore users are not
affected. An application attempting to mitigate SSRF or open redirect
vulnerabilities by disabling redirects at the PoolManager level will
remain vulnerable. This issue has been patched in version 2.5.0.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-50181

Upstream patch:
https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857

(From OE-Core rev: cf10eafb333daf8acfd3b8bfcb42c1fe6c26a8a5)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Vijay Anusuri 55a6c02c35 sudo: Fix CVE-2025-32462
Upstream-Status: Backport from https://github.com/sudo-project/sudo/commit/d530367828e3713d09489872743eb92d31fb11ff

(From OE-Core rev: d01f888a5ec43fdc8e7bd496ae9317c0fa28da9b)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li 60f859e4be libsoup: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: 6455484a26edc69be806c1356314c018d1940294)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li 7ec28bad4d libsoup-2.4: fix CVE-2025-4945
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/448

(From OE-Core rev: 92039926b164fae418eed988f6fa172c3554b9e7)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li e9cf2ef270 libsoup-2.4: refresh CVE-2025-4969.patch
refresh CVE-2025-4969.patch to fix the following build failure for
libsoup-2.4-native on fedora40/41:

../libsoup-2.74.3/tests/multipart-test.c:578:63: error: passing argument 2 of ‘soup_multipart_new_from_message’ from incompatible pointer type [-Wincompatible-pointer-types]
  578 |         multipart = soup_multipart_new_from_message (headers, bytes);
      |                                                               ^~~~~
      |                                                               |
      |                                                               GBytes * {aka struct _GBytes *}

(From OE-Core rev: aaeea20b5c0f0c5a9d6554dd5e9693a9432cfa54)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Changqing Li 851774c757 icu: fix CVE-2025-5222
CVE-2025-5222:
A stack buffer overflow was found in Internationl components for unicode
(ICU ). While running the genrb binary, the 'subtag' struct overflowed
at the SRBRoot::addTag function. This issue may lead to memory
corruption and local arbitrary code execution.

Refer:
https://nvd.nist.gov/vuln/detail/CVE-2025-5222
https://unicode-org.atlassian.net/browse/ICU-22957
https://github.com/unicode-org/icu/commit/2c667e31cfd0b6bb1923627a932fd3453a5bac77

(From OE-Core rev: a35ff17a0985389842c89e35f264f1d9f2b6bbae)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Virendra Thakur 36526677db curl: set conditional CVE_STATUS for CVE-2025-5025
If openssl packageconfig is enabled, set CVE_STATUS as not-applicable.
This CVE is applicable only when curl built with wolfSSL support.

Reference: https://curl.se/docs/CVE-2025-5025.html

(From OE-Core rev: 8f50b0761fc4d49fae8d174956052e3ff9024a5e)

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Hitendra Prajapati 71e9cf4cd9 libxml2: fix CVE-2025-6021
Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libxml2/-/commit/acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0

(From OE-Core rev: 8777f1b344c7f66a7ef4291bb59af2a5fb466b6a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Archana Polampalli 0717b8bbc0 xwayland: fix CVE-2025-49180
A flaw was found in the RandR extension, where the RRChangeProviderProperty function
does not properly validate input. This issue leads to an integer overflow when
computing the total size to allocate.

(From OE-Core rev: 15881f41f8c00c5f0a68628c2d49ca1aa1999c2e)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli b4ccec2a44 xwayland: fix CVE-2025-49179
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients
function does not check for an integer overflow when computing request length,
which allows a client to bypass length checks.

(From OE-Core rev: de28bff9b54b2725d8c06c4760e0ed2b59d3fa61)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli 65e08ee344 xwayland: fix CVE-2025-49178
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore'
in a client's request can cause the server to skip processing another client's
request, potentially leading to a denial of service.

(From OE-Core rev: 4c6df8320497c2ebf09902a62b6a3f3b061be917)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli 4bf6e39294 xwayland: fix CVE-2025-49177
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler
does not validate the request length, allowing a client to read unintended memory
from previous requests

(From OE-Core rev: 0b2afd59ce8c35083c1cb3596a2f7d4eaa7bd1c8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli 0d8b19752d xwayland: fix CVE-2025-49176
A flaw was found in the Big Requests extension. The request length is multiplied
by 4 before checking against the maximum allowed size, potentially causing an
integer overflow and bypassing the size check.

(From OE-Core rev: 0a2c5179e1f08ccd0fcaccb6f95c892ebafac8a8)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Archana Polampalli a1db9c900f xwayland: fix CVE-2025-49175
A flaw was found in the X Rendering extension's handling of animated cursors.
If a client provides no cursors, the server assumes at least one is present,
leading to an out-of-bounds read and potential crash.

(From OE-Core rev: fec7644b70452794fabfb7d967e2124918215440)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam 37be814fb2 libarchive: fix CVE-2025-5918
A vulnerability has been identified in the libarchive library. This flaw can be triggered whe
n file streams are piped into bsdtar, potentially allowing for reading past the end of the fi
le. This out-of-bounds read can lead to unintended consequences, including unpredictable prog
ram behavior, memory corruption, or a denial-of-service condition.

CVE-2025-5918-0001 is the dependent commit and CVE-2025-5918-0002 is the actual CVE fix.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5918

Upstream-patches:
https://github.com/libarchive/libarchive/commit/89b8c35ff4b5addc08a85bf5df02b407f8af1f6c
https://github.com/libarchive/libarchive/commit/dcbf1e0ededa95849f098d154a25876ed5754bcf

(From OE-Core rev: 369c164a163b2c7f15ee5fc41130be9feaf7245e)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam 3c2bbf4a1c libarchive: fix CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-
one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-
byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, lea
ding to unpredictable program behavior, crashes, or in specific circumstances, could be lever
aged as a building block for more sophisticated exploitation.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5917

Upstream-patch:
https://github.com/libarchive/libarchive/commit/7c02cde37a63580cd1859183fbbd2cf04a89be85

(From OE-Core rev: 2b6832b05bab414df1da7c74a0c6a5e5a9d75b29)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam 0bccc5ec85 libarchive: fix CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw
involves an integer overflow that can be triggered when processing a Web
Archive (WARC) file that claims to have more than INT64_MAX - 4 content
bytes. An attacker could craft a malicious WARC archive to induce this
overflow, potentially leading to unpredictable program behavior, memory
corruption, or a denial-of-service condition within applications that
process such archives using libarchive.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5916

Upstream-patch:
https://github.com/libarchive/libarchive/commit/ef093729521fcf73fa4007d5ae77adfe4df42403

(From OE-Core rev: 9c74d3a096fed68d173f8711b373a42f158d6cc7)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam 0f2564b7c0 libarchive: fix CVE-2025-5915
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap b
uffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer
-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memo
ry buffer, which can result in unpredictable program behavior, crashes (denial of service), o
r the disclosure of sensitive information from adjacent memory regions.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5915

Upstream-patches:
https://github.com/libarchive/libarchive/commit/a612bf62f86a6faa47bd57c52b94849f0a404d8c

(From OE-Core rev: 99fdc86ad57db4d8829a33033918cf78419977af)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Divya Chellam 28f102461a libarchive: fix CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archiv
e_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultim
ately lead to a double-free condition. Exploiting a double-free vulnerability can result in m
emory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service
condition.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-5914

Upstream-patch:
https://github.com/libarchive/libarchive/commit/09685126fcec664e2b8ca595e1fc371bd494d209

(From OE-Core rev: b7d8249bda296620a5bbf592f4cdf566b4537563)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-09 08:43:32 -07:00
Dixit Parmar 7bb9c2255b ref-manual: document KERNEL_SPLIT_MODULES variable
This variable controls the kernel module spliting.

[YOCTO #15771]

(From yocto-docs rev: 80b3bb27e4efa73b982f4bfeccca4deedf78c0d7)

Signed-off-by: Dixit Parmar <dixitparmar19@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 198179d9c6231b5934d4fb6ede716d1dcb1442bb)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Guocai He 21c19ed0f8 tcf-agent: correct the SRC_URI
The SRC_URI is changed to git://gitlab.eclipse.org/eclipse/tcf/tcf.agent.git

(From OE-Core rev: 175cd54fd57266d7dea07121861a4f15be00a882)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Ryan Eatmon 79782ae231 uboot: Allow for customizing installed/deployed file names
Backport from master:
https://git.openembedded.org/openembedded-core/commit/?id=debc691853e2954bd325bad395b8829939afaa08

When assembling all of the various filenames that are installed/deployed
from u-boot, we have been including the PV and PR in the filenames.  This
change introduces a single variable to replace these two in the
filenames.

This change should not be disruptive since the default value for the new
UBOOT_VERSION variable is "${PV}-${PR}".

In one case (UBOOT_EXTLINUX_SYMLINK [1]), PR was used without PV, this
patch assumes this was a mistake and corrects it as PR would not be of
much use alone.

[1] https://git.openembedded.org/openembedded-core/commit/?h=master-next&id=33df3a65f3e8e136811da715d0cc247ce66ae0ea

(From OE-Core rev: 58ad450e84db35d5b38dab65edbbc33bc6fef750)

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Daniel Turull 2366605a35 spdx: add option to include only compiled sources
When SPDX_INCLUDE_COMPILED_SOURCES is enabled, only include the
source code files that are used during compilation.

It uses debugsource information generated during do_package.

This enables an external tool to use the SPDX information to disregard
vulnerabilities that are not compiled.

As example, when used with the default config with linux-yocto, the spdx size is
reduced from 156MB to 61MB.

Tested with bitbake world on oe-core.

(From OE-Core rev: c6a2f1fca76fae4c3ea471a0c63d0b453beea968)
Adapted to existing files for create-spdx-2.2

CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
CC: Joshua Watt <JPEWhacker@gmail.com>
(From OE-Core rev: a2866934e58fb377a73e87576c8594988a63ad1b)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Daniel Turull 5b7a6dec85 package: export debugsources in PKGDESTWORK as json
The source information used during packaging can be use from other tasks to
have more detailed information on the files used during the compilation and
improve SPDX accuracy.

Source files used during compilation are store as compressed zstd json in
pkgdata/debugsources/$PN-debugsources.json.zstd
Format:
{ binary1: [src1, src2, ...], binary2: [src1, src2, ...] }

I checked the sstate size, and it slightly increases using core-image-full-cmdline:
without patch: 2456792 KB sstate-cache/
with patch:    2460028 KB sstate-cache/
(4236 KB or 0.17%)

(From OE-Core rev: c507dcb8a8780a42bfe68b1ebaff0909b4236e6b)
Adaptations to match spdx in scarthgap: change BP to PF

CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
CC: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: cba53212f5debf897752453364b9756a05c197de)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Preeti Sachan 20d3851718 ltp: backport patch to fix compilation error for x86_64
When the input compiler enables AVX, stack realignment requirements
causes gcc to fail to omit %rbp use, due to which the test fails to
clobber %rbp in inline asm.  Disable AVX to build the test on x86_64 so
that the test continues working.

Fix compilation with gcc v13.4+. Cherry picked from oe-core, master branch.

(From OE-Core rev: 54d6fa7bc9f4ae6bdb98862488e8d09200d3bc14)

Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Roland Kovacs ebbddcdb70 gnupg: update 2.4.5 -> 2.4.8
This release includes fix for CVE-2025-30258.
Support for --enable-gpg-is-gpg2 config option has been partially removed in
version 2.4.6.

Changelog:
 https://dev.gnupg.org/T7428

CVE: CVE-2025-30258

(From OE-Core rev: 41ef33ebf3e1a922aa44da8d75b240163d7954b1)

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Victor Giraud fee92f72e1 busybox: fix CVE-2022-48174
shell: avoid segfault on ${0::0/0~09J}. Closes 15216
CVE: CVE-2022-48174

Upstream-Status: Backport [https://git.launchpad.net/ubuntu/+source/busybox/commit/?id=ca2afcbf42017d998ce3d6726f5ff5072a3fa853]

(From OE-Core rev: a81aff7d810800ce3265422cddde26d11366d514)

Signed-off-by: Victor Giraud <vgiraud.opensource@witekio.com>
Signed-off-by: Bruno Vernay <bruno.vernay@se.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Praveen Kumar b4562b5fca go: fix CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on
cross-origin redirects potentially leaking sensitive information.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-4673

Upstream-patch:
https://github.com/golang/go/commit/b897e97c36cb62629a458bc681723ca733404e32

(From OE-Core rev: 72279bbc1ff2d85563c5245195435f078c5d1a68)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-07 07:42:58 -07:00
Moritz Haase b8f8125f05 cmake: Correctly handle cost data of tests with arbitrary chars in name
ctest automatically optimizes the order of (parallel) test execution based on
historic test case runtime via the COST property (see [0]), which can have a
significant impact on overall test run times. Sadly this feature is broken in
CMake < 4.0.0 for test cases that have spaces in their name (see [1]).

This commit is a backport of f24178f3 (which itself backports the upstream fix).
The patch was adapted slightly to apply cleanly to the older CMake version in
scarthgap. As repeated test runs are expected to mainly take place inside the
SDK, the patch is only applied to 'nativesdk' builds.

[0]: https://cmake.org/cmake/help/latest/prop_test/COST.html
[1]: https://gitlab.kitware.com/cmake/cmake/-/issues/26594

Reported-By: John Drouhard <john@drouhard.dev>
(From OE-Core rev: cfa97a50e06fb0fcc7cbc0ada54ce7ad5ba29ebe)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:10 -07:00
Peter Marko 31bf71ccc5 glibc: stable 2.39 branch updates
$ git log --oneline 3463100f2d47f2897a24ba8023a5c7aaf2d26550..06a70769fd0b2e1f2a3085ad50ab620282bd77b3
06a70769fd ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
3875045da5 ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
c6240a11f7 ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
2caef2827f elf: Fix subprocess status handling for tst-dlopen-sgid (bug 32987)
9e25c0f445 x86_64: Fix typo in ifunc-impl-list.c.
ca99d55315 elf: Test case for bug 32976 (CVE-2025-4802)
71ddb11ccd support: Add support_record_failure_barrier
abdeb4b520 support: Use const char * argument in support_capture_subprogram_self_sgid
147bed0a71 elf: Keep using minimal malloc after early DTV resize (bug 32412)
4e5ee49a43 sysdeps/unix/sysv/linux/x86_64/Makefile: Add the end marker
37b30b6a68 sysdeps/x86_64/Makefile (tests): Add the end marker
9fe51d34bb sort-makefile-lines.py: Allow '_' in name and "^# name"
14ec225d85 libio: Correctly link tst-popen-fork against libpthread
1dcfb9479d libio: Fix a deadlock after fork in popen
e31ac9a639 libio: Sort test variables in Makefile
68f3f1a1d0 Linux: Switch back to assembly syscall wrapper for prctl (bug 29770)
d33d10642f nptl: PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786)
b1eb369aee nptl: Use all of g1_start and g_signals
ac5da3c0e4 nptl: rename __condvar_quiesce_and_switch_g1
2fdc0afd07 nptl: Fix indentation
582c99b2c0 nptl: Use a single loop in pthread_cond_wait instaed of a nested loop
fc2a25417d nptl: Remove g_refs from condition variables
6f5ba03968 nptl: Remove unnecessary quadruple check in pthread_cond_wait
d0da34ad30 nptl: Remove unnecessary catch-all-wake in condvar group switch
ea13a35e37 nptl: Update comments and indentation for new condvar implementation
2451ef5c4a pthreads NPTL: lost wakeup fix 2

test results:
            Before After  Diff
FAIL           207   207     0
PASS          4912  4915    +3
UNSUPPORTED    230   230     0
XFAIL           16    16     0
XPASS            4     4     0

(From OE-Core rev: c94b6686a1edcaa1bea1ff5e716df96da8e36b7c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Chen Qi e1d6f5bef4 coreutils: fix CVE-2025-5278
Backport patch to fix CVE-2025-5278.

(From OE-Core rev: 7af711c0a31359b57903503ab37bad53aad89c22)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Peter Marko e8a99c83b3 go: set status of CVE-2024-3566
NVD ([1]) tracks this as:
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
Running on/with
  cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Yocto cve-check ignores the "Running on/with", so it needs to be ignored
explicitly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-3566

(From OE-Core rev: b8841097eaf7545abf56eb52a122e113b54ba2a7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-25 08:35:09 -07:00
Robert P. J. Day 7500a08bd1 bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file
(From yocto-docs rev: 731bb4a7d58f16e7920b4798409a4db1b57a0344)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5fc7794e9ae326eead16552726d74ea801fe535b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day 0f32f501fa bsp-guide: update lonely "4.12" kernel reference to "6.12"
To accompany earlier updating of kernel version, update this lonely
reference to be consistent.

(From yocto-docs rev: 0493f6e0ff9f52ec74adde584a04a121f5ad76aa)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e26c2018cd663de91ee08e0cba55eda1a4c30210)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day 9acc51fef1 bsp guide: update kernel version example to 6.12
Change the sample kernel version being used from 4.4 to a more modern
6.12.

(From yocto-docs rev: 13235b2c604ccff8737bfb9ee2add626e0ea0503)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1bad12b6ccfe1c0d26918926176a0c743568de26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Robert P. J. Day 051830ab7d overview-manual: small number of pedantic cleanups
In Sections 4.3.1 and 4.3.2 of the Overview Manual, a bit of tidying
including:

  - provide full list of packaging options
  - add monospaced rendering where appropriate
  - fix broken "ref"
  - make capitalization consistent

(From yocto-docs rev: 7abe7dde0cbb34a56af30452104355688775ef2b)

Signed-off-by: "Robert P. J. Day" <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 1cf769e3c8a8442cd05449dc97e91ad482d635f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Quentin Schulz a3fb537a47 ref-manual: classes: nativesdk: move note to appropriate section
The nativesdk- prefix to the recipe filename should only be used when
using the inherit method as the BBCLASSEXTEND method will do some magic
when generating the "implicit" name of the recipe.

This matches the instructions for the native class.

(From yocto-docs rev: c44d05d11833de4645d72fb8f987123e693494f4)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 15fe239e1e62b9add737aa732dd7f5e9948ee03d)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Quentin Schulz 7f3f70747b ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
We explain how to create a native (nativesdk) recipe in two different
ways via a bullet list but reading quickly the instructions may mislead
one into doing both options whereas they are incompatible.

This rewords both the nativesdk and native sections so that the second
bullet point starts with an Or and explicit that this applies to target
recipes.

(From yocto-docs rev: 70194ee42c946e1a2122ac143612e334fcbc5241)

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6d0d338a5f2686ddeee5eed7b6e05f3db800d33a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Lee Chee Yang 2ffcd8a9b7 migration-guide: add release notes for 5.0.10
(From yocto-docs rev: 32344c65b167cc19431902eba628bb321690a166)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 5bc4c98987ff809294541657b20d2e44f70e1d2c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Savvas Etairidis 7beb2f3a69 systemd: Rename systemd_v255.21 to systemd_255.21
The recipe was accidentally renamed with a 'v'
prefix in 29e623b2ad00555788412fa520fbb9ffec794cbb.

(From OE-Core rev: db02a4cc542d0e7e563ec46c91bf9a7313a71d02)

Signed-off-by: Savvas Etairidis <setairidis@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Poonam Jadhav 39f1520cd7 libpng: Add ptest
Install libpng test-suite to run it as a ptest.
As the test-suite takes more than 30 seconds to run,
add libpng-ptest to PTESTS_SLOW in ptest-packagelists.inc

(From OE-Core rev: 1b52b7ebe5f8fb490088622181cdb95e6b7f5a29)

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Sandeep Gundlupet Raju 6e7a9ff2e1 tune-cortexr52: Remove aarch64 for ARM Cortex-R52
Remove aarch64 for ARM Cortex-R52 processor as it supports only 32-bit
ISA but not 64-bit ISA. Also update ARMPKGARCH for cortexr52hf.

(From OE-Core rev: 8ee21ec40e9f25ee97ec077b93751fea14b66e32)

Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com>
Signed-off-by: Sandeep Gundlupet Raju <grsandeep85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Deepesh Varatharajan 3f2cf790b2 gcc: Upgrade to GCC 13.4
This is a bugfix release in GCC13 release series
100+ bugfixes

https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=13.4

Dropped the following patches:

0028-gcc-Fix-c-tweak-for-Wrange-loop-construct.patch
https://github.com/gcc-mirror/gcc/commit/179dc0f0fe01012675c1b430591b9891ce96c26e

gcc.git-ab884fffe3fc82a710bea66ad651720d71c938b8.patch
https://github.com/gcc-mirror/gcc/commit/5ceea2ac106d6dd1aa8175670b15a801316cf1c9

                                 #GCC 13.3      #GCC 13.4       #Diff

No. of expected passes            148863         149440          +577
No. of unexpected failures        14             14              0
No. of expected failures          1415           1414            -1
No. of unresolved testcases       25384          25660           +276
No. of unsupported tests          2692           2689            -3

(From OE-Core rev: 7af83314fea5948937403b5d59ba5df6fecdd81a)

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Aleksandar Nikolic f2648ee380 scripts/install-buildtools: Update to 5.0.10
Update to the 5.0.10 release of the 5.0.10 series for buildtools

(From OE-Core rev: 6c3344ba51a42252e347db2f6013c49d35413ea0)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic@zeiss.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Jiaying Song dbc06dd7b1 python3-requests: upgrade 2.32.3 -> 2.32.4
Changelog:
https://requests.readthedocs.io/en/latest/community/updates/#release-history

(From OE-Core rev: 0f0a06ccef45792f65b823ecc0ef10525d94084f)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Colin Pinnell McAllister ab1c25d1f5 ffmpeg: fix CVE-2025-1373
CVE-2025-1373 does not appear to affect ffmpeg 5.0.3. The CVE has been
marked as "fixed-version".

(From OE-Core rev: 0ffe159d9a4ee434b4c995e1ca9a85b01e0a5d05)

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Peter Marko a34f20b224 net-tools: patch CVE-2025-46836
Backport patch for this CVE and also patch for its regression.

(From OE-Core rev: 352525443b1844cdfd28355dfc1444046bbb76e8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-20 08:38:12 -07:00
Peter Marko 10fba0085d testimage: get real os-release file
/etc/os-release is a symlink to /usr/lib.
Symlink is retrieved as a dead link which points to nowhere if also the
original file is not accompanying it.
Fetch the real file in addition to this link.

Alternative could be to use "tar -h" (supported also by busybox tar),
however that could lose some important information if links are relevant
for failure analysis.

(From OE-Core rev: ed43f9ccb3c08845259e24440912631afd780d12)

(From OE-Core rev: f7ee6db8ca5dc72b7a468531e31403b60e6a0020)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00
Andrew Fernandes 6dfacf4cd3 gtk+: add missing libdrm dependency
Fixes [YOCTO #15513]

When built without the wayland feature, gtk4 does not
build due to a missing explicit dependency on libdrm.

(From OE-Core rev: 46c7f1a8d6b39256479abd8a7bb7be1ccf221267)

Signed-off-by: Andrew Fernandes <andrew@fernandes.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b32290d9bbcfccc9b85fa5acbeaee5d32d9a9091)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-06-13 08:58:01 -07:00