1
0
mirror of https://git.yoctoproject.org/poky synced 2026-05-08 05:09:24 +00:00
Commit Graph

69346 Commits

Author SHA1 Message Date
Yanis BINARD effcf08ef0 contributor-guide/submit-changes.rst: Added missing word
(From yocto-docs rev: 5b4cc93a2f19019871f66e192f67b96fa3861620)

Signed-off-by: Yanis BINARD <yanis.binard@smile.fr>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4656516415d8ff6b1bc25ef64acabee01dd5a78e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-04-08 16:09:45 +01:00
Paul Barker cf615e1d3b build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: c4194cadb1180da37514c55cd97827eb0269c8e2)

Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:59:25 +00:00
Yoann Congal 1aee6e9648 createrepo-c: Fix createrepo-c-native build on GCC14 hosts (e.g. Fedora 41)
This version of createrepo-c does a wrong pointer assignment, and on GCC14[0]
hosts (e.g. Fedora 41), this fails to build with:
  FAILED: src/python/CMakeFiles/_createrepo_c.dir/createrepo_cmodule.c.o
  build/tmp-glibc/hosttools/gcc [...] python/createrepo_cmodule.c
  python/createrepo_cmodule.c:82:41: error: initialization of ‘PyObject * (*)(PyObject *, PyObject *)’ {aka ‘struct _object * (*)(struct _object *, struct _object *)’} from incompatible pointer type ‘PyObject * (*)(PyObject *, PyObject *, PyObject *)’ {aka ‘struct _object * (*)(struct _object *, struct _object *, struct _object *)’} [-Wincompatible-pointer-types]
     82 |     {"xml_parse_main_metadata_together",(PyCFunctionWithKeywords)py_xml_parse_main_metadata_together,
        |                                         ^
  src/python/createrepo_cmodule.c:82:41: note: (near initialization for ‘createrepo_c_methods[15].ml_meth’)

Add a patch to fix the pointer assignment. The patched code has since
been removed by upstream.

[0]: https://gcc.gnu.org/gcc-14/porting_to.html#incompatible-pointer-types

(From OE-Core rev: 17b1a1cd097c2bd6d690a3cd44561c2d40844088)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Yoann Congal 3a4d4d66ba libcomps: Fix libcomps-native build on GCC14 hosts (e.g. Fedora 41)
This version of libcomps does wrong pointer assignment, and on GCC14
hosts (e.g. Fedora 41), this fails to build with:
| build/tmp-glibc/work/x86_64-linux/libcomps-native/0.1.18-r0/git/libcomps/tests/check_parse.c:588:11: error: assignment to ‘COMPS_DocGroup *’ from incompatible pointer type ‘COMPS_DocCategory *’ [-Wincompatible-pointer-types]
|   588 |         g = (COMPS_DocCategory*)it->comps_obj;

Backport a patch making the assignment correct.

(From OE-Core rev: 1853a4b2e22aaa1e8e7929bb13eaddbdd4542c71)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Aleksandar Nikolic 77a8ab27c4 scripts/install-buildtools: Update to 4.0.33
Update to the 4.0.33 release of the 4.0 series for buildtools

(From OE-Core rev: a082e65235520a888c1413d33f08c9966f3e0e43)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic22@pm.me>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Vijay Anusuri b0c2d6dfec python3-pip: Fix CVE-2026-1703
Pick patch according to [1]

[1] https://security-tracker.debian.org/tracker/CVE-2026-1703
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-1703
[3] https://github.com/pypa/pip/pull/13777

(From OE-Core rev: 0535436a9ceedcf690001cd705be753de4e4915f)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Martin Jansa dde51fb77f lsb.py: strip ' from os-release file
In gentoo the file looks like this:

NAME='Gentoo'
ID='gentoo'
PRETTY_NAME='Gentoo Linux'
VERSION='2.18'
VERSION_ID='2.18'
HOME_URL='https://www.gentoo.org/'
SUPPORT_URL='https://www.gentoo.org/support/'
BUG_REPORT_URL='https://bugs.gentoo.org/'
ANSI_COLOR='1;32'

' were added with:
https://github.com/gentoo/gentoo/commit/2f590e35c9d3d13d5673163527120b2de97fdc80

before that the os-release file looked like this:

NAME=Gentoo
ID=gentoo
PRETTY_NAME="Gentoo Linux"
ANSI_COLOR="1;32"
HOME_URL="https://www.gentoo.org/"
SUPPORT_URL="https://www.gentoo.org/support/"
BUG_REPORT_URL="https://bugs.gentoo.org/"
VERSION_ID="2.18"

The ' is stripped from the ID later in distro_identifier with:
    # Filter out any non-alphanumerics and convert to lowercase
    distro_id = re.sub(r'\W', '', distro_id).lower()
but not from version which results in a weird NATIVELSBSTRING like:
    NATIVELSBSTRING      = "gentoo-'2.18'"

And similarly the directory name in sstate-cache:

oe-core $ ls -d sstate-cache/gentoo-*
"sstate-cache/gentoo-'2.18'"   sstate-cache/gentoo-2.18

(From OE-Core rev: 5786749670fc1fa17e32b9eed286630739ddbc16)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Martin Jansa bfb2f38e30 libpam: re-add missing libgen include
It was added by original commit for CVE-2025-6020-01.patch
https://github.com/linux-pam/linux-pam/commit/475bd60c552b98c7eddb3270b0b4196847c0072e#diff-05f443e6acbe32a148a45648148739bf6f02f13acc5c20c6037bf933223d4d77
but removed here in the rebase, causing:

../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:11: error: call to undeclared function 'dirname'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
  326 |         parent = dirname(buf);
      |                  ^
../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:9: error: incompatible integer to pointer conversion assigning to 'char*' from 'int' [-Wint-conversion]
  326 |         parent = dirname(buf);
      |                ^ ~~~~~~~~~~~~

Backport 6d88a28ac7b6ff61808eb46e5c85dabd17c77f2e from scarthgap.
It's reproducible with clang-18 from kirkstone-clang18 branch of
meta-clang.

(From OE-Core rev: 6888cb09ad069cd937ac4498640fdd5bed2e7a51)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:33 +00:00
Hitendra Prajapati 2e426aeb73 libpam: fix CVE-2024-10963
Pick up "Mitigated by" patch from Debian security tracker.
[0]: https://security-tracker.debian.org/tracker/CVE-2024-10963

patch[1] which fixes this vulnerability as mentioned in Debian report.

[1] https://github.com/linux-pam/linux-pam/commit/940747f88c16e029b69a74e80a2e94f65cb3e628

(From OE-Core rev: 5a9c3998d4924360e0c6a967adfc4b7628a6fa4e)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
[YC: Debian security tracker: "The vulnerable code was introduced in
1.5.3" but the vulnerable code was backported in commit 399d4986a7
(libpam: fix CVE-2022-28321, 2022-10-28)]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Yoann Congal d8712ea143 gtk+3: fix incompatible-pointer-types errors for native build on Fedora 41
Backport 2 patchs to fix incompatible-pointer-types error when building
gtk+3-native on Fedora 41 host:
  tests/testinput.c:197:79: error: passing argument 1 of ‘gdk_event_get_source_device’ from incompatible pointer type [-Wincompatible-pointer-types]
  gtk/gtklabel.c:4235:32: error: passing argument 1 of ‘gtk_widget_queue_resize’ from incompatible pointer type [-Wincompatible-pointer-types]

On autobuilder: fedora41-vk-1:~$ gcc --version
gcc (GCC) 14.3.1 20251022 (Red Hat 14.3.1-4)

GCC 14 notoriously restricted how pointer types are converted:
https://gcc.gnu.org/gcc-14/porting_to.html#incompatible-pointer-types

Suggested-by: Fabien Thomas <fabien.thomas@smile.fr>
(From OE-Core rev: 99c8e2def939f0801a67fb8384c57d08732dd020)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 53045adf7b tiff: set status of CVE-2025-61145 as fixed by patch for CVE-2025-8961
Gitlab issues for these two CVEs mentioned in NVD inks lead to the same
merge request.

(From OE-Core rev: 5c1ca090597aefa55f23ce714409137461dd7dab)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 28f7821cc4 tiff: patch CVE-2025-61144
Pick patch from merge request mentioned in NVD report.

(From OE-Core rev: de9ef3f41dc00ef53231d76560d8d5face7f9a3e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 20c48403c1 tiff: patch CVE-2025-61143
Pick patch from merge request mentioned in NVD report.

(From OE-Core rev: 7a02f5d41c9fdde4dbec9e35d2535a58d727b8f7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 06f1750ad5 busybox: patch CVE-2025-60876
Although the patch was not merged yet, Debian already took it ([1]).
Since busybox CVE handling is slow, follow Debian decision.

[1] https://sources.debian.org/src/busybox/1:1.37.0-10.1/debian/patches/wget-disallow-control-chars-in-URLs-CVE-2025-60876.patch

(From OE-Core rev: 6274e354680db9521d188309cb32d90996ebb3e5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
[YC: fixed weird encoding in URL, added "CVE-" to subject]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 104fe45d36 inetutils: patch CVE-2026-28372
Pick patch according to [1] (equivalent to patch from [2]).

This CVE is needed if util-linux >= 2.40 is used which is not the case
in Yocto kirkstone, however it's always possible that users update
packages in their layers.

[1] https://security-tracker.debian.org/tracker/CVE-2026-28372
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-28372

(From OE-Core rev: 46bceb9c66068f6aa9489ef6a7f1a8eafca690a9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 3f17dff885 ffmpeg: patch CVE-2025-10256
Pick patch metioned in NVD report.

(From OE-Core rev: d02ce6f66ee2a842ef9a27f481ce7f0ac411673b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Shaik Moin 101fc59b73 gdk-pixbuf: Fix CVE-2025-6199
Backport the fix for CVE-2025-6199
Add below patch to fix
CVE-2025-6199.patch

Reference: In Ubuntu and debian, fixed patch is given -> [https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/c4986342b241cdc075259565f3fa7a7597d32a32]

(From OE-Core rev: 214b7bc0d2325ab1f8a5c567abd2851c07f45942)

Signed-off-by: Shaik Moin <moins@kpit.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
[YC: removed the extra ".patch" in patches Backport URL]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Peter Marko 66d06f3bde alsa-lib: patch CVE-2026-25068
Pick patch mentioned in NVD report.
It also includes CVE ID in commit message.

Use older SNDERR funtion as new one is not yet available.
This was copied from Debian patch.

(From OE-Core rev: 2bcdcd8471d9769eaf9304809d9b8e0893cae8e0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Ken Kurematsu 91495b0f53 libtheora: set CVE_PRODUCT
In the NVD database, the product name of libtheora is theora.
This was set to ensure that cve-check works correctly.

(From OE-Core rev: 0c30af4d17c4619e42c84e7f015e27ada5777ff7)

Signed-off-by: Ken Kurematsu <k.kurematsu@nskint.co.jp>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a8ddda60332e2a3219e905c1545b5da917f855c6)
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-20 09:55:32 +00:00
Kristiyan Chakarov 02c15addea overview-manual: escape wildcard in inline markup
This change escapes the wildcard in 'recipes-*' to properly italicize
the string

(From yocto-docs rev: 025ef10f4472082069a3237e21aa773354fa5ad9)

Signed-off-by: Kristiyan Chakarov <kichakarov0@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b5a4dca823bcc04c0254a0f53a28f61969fb6c31)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:25:59 +00:00
Antonin Godard ed80e89d57 ref-manual/system-requirements.rst: update end-of-life distros
Fedora 41 was made obsolete on 2025-12-15 [1].

[1]: https://docs.fedoraproject.org/en-US/releases/eol/

(From yocto-docs rev: 244e1f73d6c402ecb7872337f9850ded87f0154c)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-03-16 10:25:59 +00:00
Yoann Congal 8334e82e1d poky.conf: add fedora-41, debian-12, rocky-8&9 to SANITY_TESTED_DISTROS
Those are already documented as supported:
https://git.yoctoproject.org/yocto-docs/tree/documentation/ref-manual/system-requirements.rst?h=kirkstone#n65

Actually support them in sanity check.

(From meta-yocto rev: 1d3874a383023a5e2433e0fcfd87ac5d1e6d341d)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
yocto-4.0.34
2026-02-28 10:22:50 +00:00
Paul Barker 3f5e203cbf build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 7b6c9faa301a6d058ca34e230586f6a81ffa3ffb)

Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 16:00:35 +00:00
Paul Barker 974e67818b poky.conf: Bump version for 4.0.34 release
(From meta-yocto rev: 30367a5e4c0bf2d5c1b335efd252036ee131a154)

Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Antonin Godard 79851c1eb5 what-i-wish-id-known.rst: replace figure by the new SVG
We have a new SVG figure for the Yocto Project workflow figure, which
was updated with d2aaf54bee49 ("overview-manual: convert
YP-flow-diagram.png to SVG"). The one in the "What I wish I’d known
about Yocto Project" is the same. Remove the PNG and make a reference to
the new one.

(From yocto-docs rev: 7c348dd67cfd169b1a56bf969606b03dccb76c56)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 4023c47cb6628971b0a142067c4a910420408bb9)
[Antonin Godard: fix conflicts]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Michael Opdenacker 5479a272a7 ref-manual/classes.rst: fix broken links to U-Boot documentation
In the chapter describing the "uboot-sign" class

(From yocto-docs rev: 72024530cefd4265036f83ead61030862a13b245)

Signed-off-by: Michael Opdenacker <michael.opdenacker@rootcommit.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7d1caa1d3229fb49d6d08ca4952b046c3164e628)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Yoann Congal 3588c550b1 ref-manual/system-requirements.rst: update untested distros
Some distros were removed from the autobuilder 5 months ago:
* 070e6bf (config.py: Drop ubuntu2004 workers, 2025-10-01)
* 8238327 (config.py: ubuntu24010 was replaced with ubuntu2504, 2025-10-01)

Update their status in the supported distros list.

(From yocto-docs rev: cca4e1c6127f06d63124c67a14a8921dbb3a5409)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 2c9de0d74659fef6d7b0054dfd76905fba6ef81d)
[AG: fix cherry-pick conflicts]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Scott Murray 3255405278 u-boot: move CVE patch out of u-boot-common.inc
Commit f5b980ad added CVE-2024-42040.patch to the base U-Boot
SRC_URI in u-boot-common.inc as opposed to adding it in the
u-boot recipe where all the other patch additions are. This
breaks at least one downstream BSP that reuses u-boot-common.inc
(meta-sifive), so move that patch addition to the recipe file
with all the others.

(From OE-Core rev: 5db1bffe13ec881b7fa4ebf4ed30493e8714d7f2)

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Hugo SIMELIERE fd88d8cc35 libtasn1: Fix CVE-2025-13151
Upstream-Status: Backport from https://gitlab.com/gnutls/libtasn1/-/commit/d276cc495a2a32b182c3c39851f1ba58f2d9f9b8

(From OE-Core rev: 9ec3d69433e1c9d01fc0a140322e5e3cb1496483)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
[YC: pick the merged commit from the MR linked from the NVD report]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Peter Marko caac6c06bb glibc: stable 2.35 branch updates
git log --oneline 4e50046821f05ada5f14c76803845125ddb3ed7d..bb59339d02faebac534a87eea50c83c948f35b77
bb59339d02 (HEAD -> release/2.35/master, origin/release/2.35/master) posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)
66f0cb057c resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
499d1ccafc memalign: reinstate alignment overflow check (CVE-2026-0861)
9e1a305028 nptl: Optimize trylock for high cache contention workloads (BZ #33704)
a94467ce05 ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)

Testing Results:
             Before     After   Diff
PASS         4774      4770     -4
XPASS        6         6         0
FAIL         149       154      +5
XFAIL        16        16        0
UNSUPPORTED  246       246       0

Changes in failed testcases:

testcase-name                                    before  after
malloc/tst-malloc-fork-deadlock-malloc-hugetlb2  FAIL    PASS
posix/tst-wait4                                  FAIL    PASS
malloc/tst-malloc-too-large                      PASS    FAIL
malloc/tst-malloc-too-large-malloc-check         PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb1      PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb2      PASS    FAIL
malloc/tst-malloc-too-large-mcheck               PASS    FAIL
malloc/tst-mallocfork2                           PASS    FAIL
malloc/tst-mallocfork3                           PASS    FAIL

(From OE-Core rev: 8102d2252d50a52fbf48810226bcff92a925a39e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Peter Marko 822c6db93e harfbuzz: ignore CVE-2026-22693
Patch [1] linked in NVD report fixes issue in cache code introduced only
in v6.0.0 (as can be seen in tags containind that commit).

[1] https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae
[2] https://github.com/harfbuzz/harfbuzz/commit/7a004a7ac27da776b623c0892ebced3d12213c39

(From OE-Core rev: 1d7c87fa2e499927cb6a26e4b2ad99e6127b6e33)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:03 +00:00
Yoann Congal b5f43fb19e pseudo: Update to include a fix for systems with kernel <5.6
$ git log --oneline --no-decorate  9ab513512d8b5180a430ae4fa738cb531154cdef..43cbd8fb4914328094ccdb4bb827d74b1bac2046
43cbd8f ports/linux: define __NR_openat2 if missing

(From OE-Core rev: 61c7d9337d63fa6e022c047bc7c21004b038f697)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e9a35f32b983de724d2c2e436c017b49d5b70469)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Richard Purdie 56e5f34c39 pseudo: Update to include an openat2 fix
We're seeing occasional autobuilder failures with tar issues related to openat2.
It appears there are definitions missing on debian 11 and opensuse 15.5 systems
which mean the openat2 syscall intercept isn't compiled in. This then triggers
on systems using the openat2 syscall, such as alma9 where it is used in a tar
CVE fix.

This updates to include the fix from upstream pseudo (along with a compile warning
fix).

This was tested by taking sstate for pseudo-native from a debian 11 system and using
it in a build of "bitbake nativesdk-git -c install" on a alma9 system where that task
failed. After this fix, it completes.

(From OE-Core rev: 2759db87db7529d60a5b2344dc1db7720e3518d6)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c20c05b324e5d6564c8554381019170839509bb)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Richard Purdie c129bb9b7e pseudo: Update to 1.9.3 release
Pulls in the following changes:

  Makefile.in: Bump version to 1.9.3
  configure: Minor code quality changes
  pseudo: code quality scan - resolved various potential issues
  makewrappers: improve error handling and robustness
  Update COPYRIGHT files
  ports/linux/pseudo_wrappers.c: Call the wrappers where possible
  ports/linux/pseudo_wrappers.c: Workaround compile error on Debian 11
  ports/linux/pseudo_wrappers.c: Reorder the syscall operations
  ports/unix/guts/realpath.c: Fix indents
  pseudo_util.c: Skip realpath like expansion for /proc on Linux
  test/test-proc-pipe.sh: Add test case for proc pipes
  ports/unix/guts/realpath.c: realpath fails if the resolved path doesn't exist

(From OE-Core rev: 322ce7900cf25f3a8d96a75360af56815e32ad7e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 524f4bbb11f9c7e0126e8bd46af217b452d48f5e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Ankur Tyagi b600216fd2 avahi: patch CVE-2026-24401
Details https://nvd.nist.gov/vuln/detail/CVE-2026-24401

(From OE-Core rev: 6930162c44ae94824ff66b0a0fcb02a0a92c02e8)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 183d0ee54f1c194e245a7bbf243c19b3c2acf4f5)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Amaury Couderc e7763a1e0a avahi: patch CVE-2025-68471
(From OE-Core rev: 1786f154563c68739d7dc306b0e332d058ccd3f0)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5ec4156330c765bc52dbce28dbba6def9868d30f)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Amaury Couderc 8b83d6e2f9 avahi: patch CVE-2025-68468
(From OE-Core rev: 7bb3001ce034af29b3b09624cf692d8c0e3346f9)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f2ed8adc37a42b561b3c4853cf8106fba39889e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Ankur Tyagi c63dd35b57 avahi: patch CVE-2025-68276
Backport the patch[1] from the PR[2] mentioned in the nvd[3].

[1] https://github.com/avahi/avahi/commit/2d48e42d44a183f26a4d12d1f5d41abb9b7c6355
[2] https://github.com/avahi/avahi/pull/806
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-68276

Dropped CI changes from the original PR during backport.

(From OE-Core rev: a0768998acf23a7d00a5fdbc6fa5302eb144a850)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko e19fc15027 vim: ignore CVE-2025-66476
Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

(From OE-Core rev: a94b793da4e41bd5a31d6ce32860d01e00ca05b0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko f61eb0f68d ffmpeg: set status of CVE-2025-25468 and CVE-2025-25469
These CVEs have the same fix commit per NVD report [3].
Blaming the fix [1] is showing that the return without freeing memory
was introduced in [2].

[1] https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/d5873be583ada9e1fb887e2fe8dcfd4b12e0efcd
[2] https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/d38fc25519cf12a9212dadcba1258fc176ffbade
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-25468

(From OE-Core rev: 67d722ea17ef92e70bfcffbeaba52ddf55d5888a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko 2c14074be7 glib-2.0: patch CVE-2026-1489
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3872
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4984

(From OE-Core rev: ad9c57c36f6afa675468426da4ba1263eaeee2c5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko ad4c2759f0 glib-2.0: patch CVE-2026-1485
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3871
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4981

(From OE-Core rev: 1996441fcebaa2e08eecceb3cf00d39fda8cff35)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko 69d100e7f0 glib-2.0: patch CVE-2026-1484
Pick patches from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3870
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4979

(From OE-Core rev: 045f902fd570df65f6ed2534d8885cee26fb6ef1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko 3825d4306a glib-2.0: patch CVE-2026-0988
Pick relevant commit from [2] linked from [1].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3851
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4944

(From OE-Core rev: bb6a6ab6d948ce5a8a86479c68af43f7f86b98a5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Fabio Berton b249264a0c classes/buildhistory: Do not sign buildhistory commits
This change adds the --no-gpg-sign option to prevent buildhistory
commits from failing due to GPG signing issues. Depending on the setup,
buildhistory may fail to create a commit if the user has the
commit.gpgsign option enabled.

For example, if the user creates a signing key that requires a password,
the commit won't be created and will fail with the following error:

/
|error: Enter passphrase: Load key "/home/<user>/.ssh/id_ed25519":
|incorrect passphrase supplied to decrypt private key?
|fatal: failed to write commit object
\

The bitbake command won't fail, but buildhistory won't have a commit.
Also, the commit may silently fail when building inside a container due
to missing packages or issues with accessing the GPG agent.

This is similar to [1], and signing the buildhistory commit
should be avoided to prevent such issues.

1 - https://git.openembedded.org/openembedded-core/commit/?id=7595a0a63a933af9dd9d1e458dc34a4ba80d9eae

(From OE-Core rev: 5294d15737e176ee96d9b590808ded2164386362)

Signed-off-by: Fabio Berton <fabio.berton@ctw.bmwgroup.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a5e18714aee52db898aaf9d222fb5a4168bde96e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko f210d0fc05 libpng: patch CVE-2026-25646
Backport patch mentioned in NVD CVE report.

(From OE-Core rev: 4d628c57c60dd53b71bb63d00225a7a6e2259442)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko 67e8e2cc2f libpng: patch CVE-2026-22801
Pick comit per [1].

[1] https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

(From OE-Core rev: e7e48abaee6e6e566ef4e5f075b89038bf284714)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko 4597dd50ee libpng: patch CVE-2026-22695
Pick commit per [1].
This CVE is regression of fix for CVE-2025-65018.

[1] https://security-tracker.debian.org/tracker/CVE-2026-22695

(From OE-Core rev: 078627f4a208623bc236887682f8a1f0c88f2626)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Vijay Anusuri a3d6476e85 bind: Upgrade 9.18.41 -> 9.18.44
This upgrade fixes CVE-2025-13878

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.44/doc/arm/html/notes.html

(From OE-Core rev: d8e70bd838c3b399a2b7a0a7672d8f57a0315e5a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Bruce Ashfield 82329c1ced linux-yocto/5.15: update to v5.15.199
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    7b232985052fc Linux 5.15.199
    7e6040853f5b5 wifi: cfg80211: init wiphy_work before allocating rfkill fails
    c6d143fc945f7 wifi: cfg80211: fully move wiphy work to unbound workqueue
    8930a3e1568cf wifi: cfg80211: cancel wiphy_work before freeing wiphy
    d81ebee178731 wifi: cfg80211: fix wiphy delayed work queueing
    4737cc74b2fd8 wifi: cfg80211: use system_unbound_wq for wiphy work
    c8b15b0d2eec3 team: Move team device type change at the end of team_port_add
    9b32d72687cfb pinctrl: meson: mark the GPIO controller as sleeping
    2ccfb37ef544f mptcp: avoid dup SUB_CLOSED events after disconnect
    e69e435ec6e68 writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
    52755c5680ce3 drm/imx/tve: fix probe device leak
    28f5cbcce5d9d pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
    46933b9bc76f4 net/sched: act_ife: convert comma to semicolon
    ffac9893ce8d0 btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
    e11e8a29b304c drm/amdkfd: fix a memory leak in device_queue_manager_init()
    dc934d9667399 can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
    186df821de0f3 genirq/irq_sim: Initialize work context pointers properly
    00d52b2fa6083 HID: uclogic: Add NULL check in uclogic_input_configured()
    51f49e3927ad5 HID: uclogic: Correct devm device reference for hidinput input_dev name
    c3a2e803b24eb wifi: mac80211: move TDLS work to wiphy work
    9ac16e7b0b828 wifi: mac80211: use wiphy work for sdata->work
    ddb1bfbf4ab5c wifi: cfg80211: add a work abstraction with special semantics
    e1fa25a91091b Bluetooth: Fix hci_suspend_sync crash
    b15c9a21950e1 net: stmmac: make sure that ptp_rate is not 0 before configuring EST
    65d04291adf7c usbnet: Fix using smp_processor_id() in preemptible code warnings
    49b57b98fa601 NFSD: fix race between nfsd registration and exports_proc
    98fc9c2cc45cf ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
    05db2b850a2b8 espintcp: fix skb leaks
    0561aa6033dd1 blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
    bdf38063fd15f fs/ntfs3: Initialize allocated memory before use
    446beed646b2e ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
    c4079a34c0ade drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED
    10644e8839544 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
    f87f4de092c7a mm/pagewalk: add walk_page_range_vma()
    f569f5b8bfd51 ksmbd: smbd: fix dma_unmap_sg() nents
    2c34622d9c724 mei: trace: treat reg parameter as string
    d5e80d1f97ae5 ALSA: scarlett2: Fix buffer overflow in config retrieval
    95ab26bc462d7 nvme: fix PCIe subsystem reset controller state transition
    886d98fa48580 nvme-pci: do not directly handle subsys reset fallout
    25c6804cbde4b nvme-fc: rename free_ctrl callback to match name pattern
    937309b52ca26 xfs: set max_agbno to allow sparse alloc of last full inode chunk
    6393da54dcb34 dmaengine: stm32: dmamux: fix device leak on route allocation
    7ff0a6402741e dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
    060b08d72a38b w1: therm: Fix off-by-one buffer overflow in alarms_store
    fb6fcdc03fce4 w1: w1_therm: use swap() to make code cleaner
    7b94e4650020e arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
    427b0fb30ddec scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
    600894c7a2363 iio: adc: exynos_adc: fix OF populate on driver rebind
    f6b672daaca1c of: platform: Use default match table for /firmware
    16c806d04be13 comedi: Fix getting range information for subdevices 16 to 255
    2b1bef126bbb8 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
    10d1b3cf657d5 net: Add locking to protect skb->dev access in ip_output
    aade7df55e12e mptcp: only reset subflow errors when propagated
    461f1832a6d1c scsi: qla2xxx: edif: Fix dma_free_coherent() size
    f8cd47294b4bf scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
    df13548c0a94f ASoC: fsl: imx-card: Do not force slot width to sample width
    a4181b228db3b dma/pool: distinguish between missing and exhausted atomic pools
    1dd15630fc633 gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
    65ba13a5b3d05 scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
    478873f7324f7 net: bridge: fix static key check
    eaa5da5130ded nfc: nci: Fix race between rfkill and nci_unregister_device().
    1d8ae83e1c61b net/mlx5e: Account for netdev stats in ndo_get_stats64
    138dbe22d8854 net/mlx5e: Report rx_discards_phy via rx_dropped
    ba253d322e536 net/mlx5e: Expose rx_oversize_pkts_buffer counter
    b3f0dab4f9682 net/mlx5: Add HW definitions of vport debug counters
    5b47b402f5833 ice: stop counting UDP csum mismatch as rx_errors
    65e976e1f474a nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
    b11e6f926480a rocker: fix memory leak in rocker_world_port_post_fini()
    9fe793a779ce8 ipv6: use the right ifindex when replying to icmpv6 from localhost
    94ae00a809c07 net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
    2b65e3ae33818 net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
    ccc683f597ceb Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
    feae34c992eb7 bpf: Reject narrower access to pointer ctx fields
    e0ffb64a2d72c bpf: Do not let BPF test infra emit invalid GSO types to stack
    ad97b9a55246e migrate: correct lock ordering for hugetlb file folios
    ef6e608e5ee71 can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
    b5a1ccdc63b71 can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
    40a3334ffda47 can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
    f48eabd15194b can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
    e2f9c751f73a2 irqchip/gic-v3-its: Avoid truncating memory addresses
    ede8ce83c2184 perf/x86/intel: Do not enable BTS for guests
    6e0110ea90313 netrom: fix double-free in nr_route_frame()
    8b57bf1d3b1db uacce: ensure safe queue release with state management
    ebfa85658a39b uacce: implement mremap in uacce_vm_ops to return -EPERM
    1bc3e51367c42 uacce: fix cdev handling in the cleanup path
    64015cbf06e8b intel_th: fix device leak on output open()
    948615429c9f2 slimbus: core: fix device reference leak on report present
    00cf6f7478c9f slimbus: core: fix runtime PM imbalance on report present
    6c77ce4da447a octeontx2: Fix otx2_dma_map_page() error return code
    361df59ad0130 arm64: Set __nocfi on swsusp_arch_resume()
    0d7c9e793e351 wifi: rsi: Fix memory corruption due to not set vif driver data size
    de34a80e0d6ec wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
    fc8da65f9fe1b wifi: ath10k: fix dma_free_coherent() pointer
    c1c758ecd68bf mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
    56fb6efd5d04c ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
    afca7ff5d5d4d ALSA: ctxfi: Fix potential OOB access in audio mixer handling
    029efb5adffb1 iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
    fdc8c835c637a iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
    92a2745aa0f66 iio: adc: ad9467: fix ad9434 vref mask
    fb396ee1bc53a of: fix reference count leak in of_alias_scan()
    d117fdcb21b05 leds: led-class: Only Add LED to leds_list when it is fully ready
    f775881f99fa7 x86: make page fault handling disable interrupts properly
    dd9442aedbeae net/sched: act_ife: avoid possible NULL deref
    669bd7a54e626 octeontx2-af: Fix error handling
    3be945abdd228 bonding: provide a net pointer to __skb_flow_dissect()
    92c6dc181a18e be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
    9d02de4b2fd6d drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
    078c6eef1db5f drm/amd/pm: Don't clear SI SMC table when setting power limit
    b339601c238af usbnet: limit max_mtu based on device's hard_mtu
    4630897eb1a03 ipv6: annotate data-race in ndisc_router_discovery()
    13f3b3b870688 mISDN: annotate data-race around dev->work
    bd495244dec6e net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
    7d203254f04ff net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
    435c3bd709642 ALSA: usb: Increase volume range that triggers a warning
    766e243ae8c8b regmap: Fix race condition in hwspinlock irqsave routine
    e18ce45f5c809 iio: adc: ad7280a: handle spi_setup() errors in probe()
    bea5c8df16866 staging:iio:adc:ad7280a: Register define cleanup.
    7023a74cdb01d x86/kfence: avoid writing L1TF-vulnerable PTEs
    4daf82511496a scsi: storvsc: Process unsupported MODE_SENSE_10
    e85531cefe175 Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
    d303e5d338672 Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
    7b673faac4784 Revert "nfc/nci: Add the inconsistency check between the input data length and count"
    c49b1646cc50f w1: fix redundant counter decrement in w1_attach_slave_device()
    2081f7ba69c7b comedi: dmm32at: serialize use of paged registers
    fee86edf5803f crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
    b8c24cf5268fb net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
    ae810e6a8ac4f net/sched: Enforce that teql can only be used as root qdisc
    70feb16e3fbfb ipvlan: Make the addrs_lock be per port
    36c40a80109f1 l2tp: avoid one data-race in l2tp_tunnel_del_work()
    611ef4bd9c73d fou: Don't allow 0 for FOU_ATTR_IPPROTO.
    8568171dec862 net: fou: use policy and operation tables generated from the spec
    9e470606c4448 net: fou: rename the source for linking
    cef28f55a515b netlink: add a proto specification for FOU
    380a82d36e37d gue: Fix skb memleak with inner IP protocol 0.
    8f4e8887d43d4 amd-xgbe: avoid misleading per-packet error log
    784428ab1889e sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
    72925dbb0c8c7 bonding: limit BOND_MODE_8023AD to Ethernet devices
    e85cf62f75505 net: usb: dm9601: remove broken SR9700 support
    bef3a83a9a67c testptp: Add option to open PHC in readonly mode
    6b32d042aa825 selftest/ptp: update ptp selftest to exercise the gettimex options
    8510559c0fa1e ptp: add testptp mask test
    3d4f2eda35897 selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE
    3d58f0709a292 selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED
    3cc43c9b568a5 testptp: Add support for testing ptp_clock_info .adjphase callback
    f33c4d3f4b3f3 testptp: add option to shift clock by nanoseconds
    7d9aa9032d0a9 ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
    9c46bf50b676f posix-clock: Store file pointer in struct posix_clock_context
    62a5adf57b56e Fix memory leak in posix_clock_open()
    a006fc4485159 posix-clock: introduce posix_clock_context concept
    dc84036c173cf btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
    41aac90212612 dmaengine: ti: k3-udma: fix device leak on udma lookup
    c933aa74d9f8d dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
    1d8478b31a3da dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
    68ed0d88d1a70 dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
    4532f18e4ab36 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
    499ddae78c4ba dmaengine: lpc18xx-dmamux: fix device leak on route allocation
    b7bd948f89271 dmaengine: idxd: fix device leaks on compat bind and unbind
    4730f12a192d7 dmaengine: bcm-sba-raid: fix device leak on probe
    4c67b4f45c854 dmaengine: at_hdmac: fix device leak on of_dma_xlate()
    e8758f114a922 drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
    bb309377eece5 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
    c775abb6cd82a drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
    eda99622e6f39 mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
    c85c550eff812 x86/resctrl: Fix memory bandwidth counter width for Hygon
    fa226f722e2fe x86/resctrl: Add missing resctrl initialization for Hygon
    d35365d8f8888 EDAC/i3200: Fix a resource leak in i3200_probe1()
    123a6bbe87cc1 EDAC/x38: Fix a resource leak in x38_probe1()
    6cf35964a8150 hrtimer: Fix softirq base check in update_needs_ipi()
    6241cd1d0acc2 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
    e306c64bd2c56 nvme-pci: disable secondary temp for Wodposit WPBSNM8
    2e8ea7257c5fd USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
    7e4c68838c605 USB: serial: option: add Telit LE910 MBIM composition
    23defd20f98f3 USB: OHCI/UHCI: Add soft dependencies on ehci_platform
    14739a3543c8d usb: dwc3: Check for USB4 IP_NAME
    742ff37b51270 phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
    e7e87af627449 phy: rockchip: inno-usb2: fix communication disruption in gadget mode
    53b1ed2f400ee phy: rockchip: inno-usb2: fix disconnection in gadget mode
    b6923f0ffb981 x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
    adabf01c19561 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
    aab3a76c03b7c ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
    7d76380e98bfa HID: usbhid: paper over wrong bNumDescriptor field
    2b29f38f4f966 dmaengine: omap-dma: fix dma_pool resource leak in error paths
    23a52bffe415f phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
    fb9d513cdf161 phy: stm32-usphyc: Fix off by one in probe()
    d8f1e61238799 dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
    76992310f8077 dmaengine: tegra-adma: Fix use-after-free
    b36b4c0dd281b mm, kfence: describe @slab parameter in __kfence_obj_info()
    ea46adfe5cc03 textsearch: describe @list member in ts_ops search
    209f350326c8d ASoC: tlv320adcx140: fix word length
    cff6cd703f41d net/sched: sch_qfq: do not free existing class in qfq_change_class()
    0badf6ffd2c39 selftests: drv-net: fix RPS mask handling for high CPU numbers
    bf1dfd389b6ae net/mlx5e: Restore destroying state bit after profile cleanup
    014ba8f2953c0 vsock/test: add a final full barrier after run all tests
    8d5b6b2d79c1c ipv4: ip_gre: make ipgre_header() robust
    484919832e2db macvlan: fix possible UAF in macvlan_forward_source()
    45126b1249757 net: update netdev_lock_{type,name}
    64c71d60a21a9 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
    76abc83a9d255 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
    4fcde4590de2d nvmet-tcp: remove boilerplate code
    97250eb05e4b6 can: etas_es58x: allow partial RX URB allocation to succeed
    27c90d8ed81e7 pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

(From OE-Core rev: 79dfd0a547e1c56e11360c774489bae39ae0c3c1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00