1
0
mirror of https://git.yoctoproject.org/poky synced 2026-05-07 16:59:22 +00:00
Commit Graph

68177 Commits

Author SHA1 Message Date
Alex Stewart f2bfbbdcea perl: ignore CVE-2023-47100
CVE-2023-47100 is a duplicate of CVE-2023-47038. They have the same
advertised fix commit, which has already been merged into the
perl_5.34.3 sources used in kirkstone.

(From OE-Core rev: 8df158f39f1eed1e3ae88ddf935c67e067b72525)

Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-19 04:50:38 -07:00
Jonathan GUILLOT 9627817bff cups: fix typo in CVE-2023-32360 backport patch
Typo prevents cupsd to start correctly with following error:
Unable to read "/etc/cups/cupsd.conf" due to errors.

Using `/usr/sbin/cupsd -t` to check the configuration:
Unknown authorization type Defaul on line 77 of /etc/cups/cupsd.conf.
Unknown Policy Limit directive AuthType on line 77 of /etc/cups/cupsd.conf.

(From OE-Core rev: eab100205bc5cdffc5ccc7752e1ee5abd9ebb58a)

Signed-off-by: Jonathan GUILLOT <jonathan@joggee.fr>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-19 04:50:38 -07:00
Alexander Kanavin 1e0d58c53b dev-manual: improve descriptions of 'bitbake -S printdiff'
Try to particularly emphasize that it can be used to find
out why something rebuilds when it shouldn't.

(From yocto-docs rev: 1cd543e62e8f1b65e65108d919c2f481001e044c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:24:00 -07:00
BELOUARGA Mohamed 77e76a23c4 ref-manual: add documentation of the variable SPDX_NAMESPACE_PREFIX
The documentation of the variable SPDX_NAMESPACE_PREFIX does not exist.
This variable is used to change the prefix of some links in SPDX docs.

(From yocto-docs rev: 0055b7ea1cdf72359695e08fe6d2ca9a405fba51)

Signed-off-by: BELOUARGA Mohamed <m.belouarga@technologyandstrategy.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:24:00 -07:00
Michael Opdenacker 2b4a64396e profile-manual: usage.rst: further style improvements
According to errors reported by "make stylecheck"

(From yocto-docs rev: b3aaf4523190f7528d49c29a9aea234bb1647eae)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:24:00 -07:00
Martin Jansa 28cd826b57 contributor-guide: be more specific about meta-* trees
* this is often confused to apply for e.g. meta-oe as well
  where it doesn't apply as meta-oe has own ML mentioned
  in README.

(From yocto-docs rev: 98102408fe5468529e040a138f09c8fbc5fe065a)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:24:00 -07:00
Lee Chee Yang be6f929830 migration-guides: add release notes for 4.0.17
(From yocto-docs rev: 8267ccacea77a657cf92bcd2b48bec5f2ef61849)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:24:00 -07:00
Michael Opdenacker 3004d3e2eb profile-manual: usage.rst: fix reference to bug report
Allowing to remove nested parentheses in the text!

(From yocto-docs rev: a0ba062f8b31426f80ccd760e29b054405ee2a8e)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Michael Opdenacker 832975f59d manuals: use "manual page(s)"
Instead of "manpage(s)" or "man page(s)".
To address one of the errors reported by "make stylecheck"

(From yocto-docs rev: f6e69f8877d1d33200993f21b448e7fa3cf7859b)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Michael Opdenacker 8b7e9c67e3 profile-manual: usage.rst: formatting fixes
Plus a few text styling improvements, some reported by "make stylecheck"

(From yocto-docs rev: ce0e83716197773d8eae0c2f0edc1cf290ebd60f)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Michael Opdenacker 15034b32a5 manuals: add initial stylechecks with Vale
Use the "Vale" (https://vale.sh) tool to perform text style checks
Run "make stylecheck" to run the checks.

This just checks the text, not the Sphinx syntax style choices.

(From yocto-docs rev: e3e4ba2aa963d4d178c4e9e842e66f4ee4bd3736)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Suggested-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Colin McAllister 85da954465 common-licenses: Backport missing license
Backports missing license from master to kirkstone.

(From OE-Core rev: 26a878cbfbb3bc7a6e892e105577ebf8138ce150)

Signed-off-by: Colin McAllister <colin.mcallister@garmin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Claus Stovgaard de3d966d73 gcc: Backport sanitizer fix for 32-bit ALSR
When using the gcc-sanitizers as part of the SDK on a Linux with a newer
kernel, the ASAN fails randomly. This was seen on Ubuntu 22.04.

This is also described at
https://stackoverflow.com/questions/77894856/possible-bug-in-gcc-sanitizers

Backport the fix from LLVM project, as gcc has not yet backported
anything for the 11 series.

(From OE-Core rev: 7af8e24d6c60a01e398b10a57939947fb156feec)

Signed-off-by: Claus Stovgaard <claus.stovgaard@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Tan Wen Yan 3eb39d2618 python3-urllib3: update to v1.26.18
https://github.com/urllib3/urllib3/releases/tag/1.26.18

Major changes in python3-urllib3 1.26.18:
- Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (CVE-2023-45803)

(cherry picked from OE-Core rev: 74da05b63634c248910594456dae286947f33da5)

(From OE-Core rev: c473f32184ea0ab41f6eb4c8dcc1d7bb5fd7b16f)

Signed-off-by: Tan Wen Yan <wen.yan.tan@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Lee Chee Yang 1921c27946 tiff: fix CVE-2023-52356 CVE-2023-6277
import patch from ubuntu to fix CVE-2023-52356 CVE-2023-6277
import from
http://archive.ubuntu.com/ubuntu/pool/main/t/tiff/tiff_4.3.0-6ubuntu0.8.debian.tar.xz

(From OE-Core rev: 4728df36bb3888df4d3cc0db1fd66138e865c511)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Vijay Anusuri ebebf9d948 qemu: Fix for CVE-2023-6683
Upstream-Status: Backport from https://gitlab.com/qemu-project/qemu/-/commit/405484b29f6548c7b86549b0f961b906337aa68a

Reference: https://security-tracker.debian.org/tracker/CVE-2023-6683

(From OE-Core rev: f099f9ff95c42444cbfa63630a6f160fd98997ed)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Vijay Anusuri 418e54ce5c curl: backport Debian patch for CVE-2024-2398
import patch from ubuntu to fix
 CVE-2024-2398

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/curl/tree/debian/patches/?h=ubuntu%2Fjammy-security
Upstream commit https://github.com/curl/curl/commit/deca8039991886a559b67bcd6701db800a5cf764]

(From OE-Core rev: 67026cbb62e166b6a9f5509708531ebe0f36c36d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Meenali Gupta f9653f1118 expat: fix CVE-2023-52425
libexpat through 2.5.0 allows a denial of service (resource consumption) because
many full reparsings are required in the case of a large token for which multiple
buffer fills are needed.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-52425

Changes related to test directory are not included as most of the files are not present
and are introduced in the later version.

(From OE-Core rev: 1bdcd10930a2998f6bbe56b3ba4c9b6c91203b39)

Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:59 -07:00
Lee Chee Yang 65e2df5990 xwayland: fix CVE-2023-6816 CVE-2024-0408/0409
fix CVE-2023-6816 CVE-2024-0408 CVE-2024-0409

(From OE-Core rev: e8feba36e09aefffcafcebc85ec75abb5b97b3eb)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:58 -07:00
aszh07 cf1c9d3daa nghttp2: fix CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption)
because request cancellation can reset many streams quickly, as exploited in
the wild in August through October 2023.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://github.com/nghttp2/nghttp2/commit/72b4af6143681f528f1d237b21a9a7aee1738832

(From OE-Core rev: 0156b57dcdb2e5acdd9421a7c24c235f13da2d97)

Signed-off-by: Zahir Hussain <zahir.basha@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-05 07:23:58 -07:00
Michael Opdenacker b6f6c72945 manuals: document VIRTUAL-RUNTIME variables
Document the convention to use variables prefixed by VIRTUAL_RUNTIME.
Add references to the new term where possible.

Another reason is that such variables are recommended
in a warning issued by meta/classes-global/insane.bbclass

(From yocto-docs rev: db88c2021062c95fe49b54351952753390d45a6a)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Tim Orling <ticotimo@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Simone Weiß ccb4e6abb4 contributor-guide: add notes for tests
This adds some hints that and how changes should be tested when contributing.

Fixes [YOCTO #15412]

(From yocto-docs rev: 649843f4d20d1d840e1c6c4ce15e89b3a8508e0f)

Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Michael Opdenacker 5b75b5cbcf manuals: replace hyphens with em dashes
Fix some hyphens being improperly used as em dashes.
See https://www.grammarly.com/blog/hyphens-and-dashes/

Using em dashes may also allow Sphinx to hyphenate
and break lines in the best way.

Note that the first character after an em dash not
supposed to be capitalized, unless a specific
rule applies, typically when what follows is a proper noun.

Fix a few misuses of parentheses in following text.

(From yocto-docs rev: a0d93ea1ddfdfbcde8dac3aa328307be778f9e3c)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Michael Opdenacker 3b7e326704 dev-manual: packages: fix capitalization
Using "PR service" instead of "PR Service", like in the other
two instances in this document.

(From yocto-docs rev: ef8b7d30738fe8ae6702da111bbafdc0e00e86bf)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reported-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Reviewed-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Geoff Parker d51c7e990b ref-manual: variables: adding multiple groups in GROUPADD_PARAM
Add missing documentation on how to add multiple groups with a single
GROUPADD_PARAM:${PN}

(From yocto-docs rev: 46f82dcb3b4042491efd44b9c15a06e3c910ec85)

Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Johan Bezem 48bd3888df ref-manual: variables: correct sdk installation default path
The SDKPATH variable seems mistakenly identified as the
default path where the SDK will be installed by the generated
installation script, unless option '-d' or a manual input
overrides this default.

The intended variable is SDKPATHINSTALL. SDKPATH indicates
where the SDK is being composed and built.

The definitions have been added/updated.

(From yocto-docs rev: f7ce2abbdcff625356b337137e91f642ff6a4dc2)

Signed-off-by: Johan Bezem <jbezem.extern@arri.de>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Luca Ceresoli 0b59f7efc6 ref-manual: tasks: do_cleansstate: recommend using '-f' instead for a shared sstate
do_cleansstat can produce build errors when using a shared sstate cache.

Add a note to clearly discourage, provide a safe alternative (bitbake -f),
and the rationale.

Suggested-by: Quentin Schulz  <quentin.schulz@theobroma-systems.com>
Link: https://lore.kernel.org/yocto-docs/20240219155513.76738-1-luca.ceresoli@bootlin.com/T/#m5529687ecb0f9ec2dacddcb6ff58e2df73af9cde
(From yocto-docs rev: 3fb8b5ad7edfa186744396deb7111ba3e31a857b)

Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Luca Ceresoli 59b33ce497 ref-manual: tasks: do_cleanall: recommend using '-f' instead
do_cleanall can produce failures when used in legitimate cases, such as
with recipe variants (foo and foo-native) or a shared DL_DIR. This is why
it is forbidden when writing tests that will run on the autobuilders
(https://docs.yoctoproject.org/test-manual/intro.html?highlight=cleanall#considerations-when-writing-tests).

Reword the documentation to clearly discourage, provide a safe alternative
(bitbake -f -c fetch), and the rationale with an example.

Reported-by: Sam Liddicott
Link: https://bootlin.com/blog/yocto-sharing-the-sstate-cache-and-download-directories/#comment-2650335
(From yocto-docs rev: 92e1d1fba336de12637b75b043b86485b80324a2)

Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Haitao Liu e8d1874bf0 glibc: Fix subscript typos for get_nscd_addresses
Fix the following error:

root@intel-x86-64:~# wget -6 http://localhost
--2024-01-12 07:18:42--  http://localhost/
Resolving localhost... failed: No IPv4/IPv6 addresses for host.
wget: unable to resolve host address 'localhost'

Reference:
https://sourceware.org/bugzilla/show_bug.cgi?id=29605

Upstream-patch:
https://sourceware.org/git/?p=glibc.git;a=commit;h=c9226c03da0276593a0918eaa9a14835183343e8

(From OE-Core rev: 1b5405955c7c2579ed1f52522e2e177d0281fa33)

Signed-off-by: Haitao Liu <haitao.liu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Martin Jansa 1ca3aed8af stress-ng: avoid calling sync during do_compile
calling 'sync' from do_compile in the middle of big OE world
build harms the build time.

(From OE-Core rev: b2de7d75692fd4c9e0a6f46a099b89089edb10d4)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Michael Halstead 529c7c30e6 yocto-uninative: Update to 4.4 for glibc 2.39
(From OE-Core rev: d8e3d1eb489f658c8c328a35d41b29bc849c3207)

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 56fdd8b79e2f7ec30d2cdcfa0c399a6553efac1e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Alexander Kanavin f0645d6efc linux-firmware: upgrade 20231211 -> 20240220
License-Update: additional files

(From OE-Core rev: e5956d94ba9fa5b5b2f6bfda8e533bc8c6d4c59f)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit add81ef0299ea5260f9bdc59ffc8f5cc0e74276f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Alex Kiernan e011bb9e8d wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23
Upstream maintainer has changed to Chen-Yu Tsai <wens@kernel.org>:

https://lore.kernel.org/all/CAGb2v657baNMPKU3QADijx7hZa=GUcSv2LEDdn6N=QQaFX8r-g@mail.gmail.com/

Note that fb768d3b13ff ("wifi: cfg80211: Add my certificate") and
3c2a8ebe3fe6 ("wifi: cfg80211: fix certs build to not depend on file
order") are required if you are using kernel signature verification.

(From OE-Core rev: 11c9c6eec5ff45cd1fd4858bc28f38693c5d0fde)

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit abf169fbbf8bab13224adf4c8bfa2e26607f360c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Wang Mingyu 5325ae0e06 wireless-regdb: upgrade 2023.05.03 -> 2023.09.01
Changelog:
==========
wireless-regdb: update regulatory database based on preceding changes
wireless-regdb: Update regulatory rules for Australia (AU) for June 2023
wireless-regdb: Update regulatory info for Türkiye (TR)
wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidel...
wireless-regdb: Update regulatory rules for Philippines (PH)

(From OE-Core rev: 3af65ed130493e14a87818b76b06f9ca7c717874)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2f5edb6904bf16a9c52a9b124aeb5297487cd716)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal 4b6fc4f642 cve-update-nvd2-native: Remove rejected CVE from database
When a CVE is updated to be rejected, matching database entries must be
removed. Otherwise:
* an incremental update is not equivalent the to an initial download.
* rejected CVEs might still appear as Unpatched in cve-check.

(From OE-Core rev: 717f0df5f35272f7706e4f92cc8b57cdda8066b6)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f276a980b8930b98e6c8f0e1a865d77dfcfe5085)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal ab504237a5 cve-update-nvd2-native: Fix CVE configuration update
When a CVE is created, it often has no precise version information and
this is stored as "-" (matching any version). After an update, version
information is added. The previous "-" must be removed, otherwise, the
CVE is still "Unpatched" for cve-check.

(From OE-Core rev: 38402b5e89d43bf2a45c8f5f2d631033be5019cd)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 641ae3f36e09af9932dc33043a0a5fbfce62122e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal ea0af985cb cve-update-nvd2-native: nvd_request_next: Improve comment
Add a URL to the doc of the API used in the function.
... and fix a small typo dabase -> database

(From OE-Core rev: a98387021d80b5055a773f909eb685513902fb12)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e0157b3b81333a24abd31dbb23a6abebca3e7ba7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal 0c780cd9c8 cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
CVE_CHECK_DB_FILE is already defined in cve-check.bbclass which is
always inherited in cve-update-nvd2-native (There is a check line 40).

Remove it to avoid confusion. Otherwise, this should not change
anything.

(From OE-Core rev: b6285f0549d1c708adfe147c63eb6cda24462ff3)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e5f3f223885c17b7007c310273fc7c80b90a4105)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal bcd26a2342 cve-update-nvd2-native: Add an age threshold for incremental update
Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to
specify the maximum age of the database for doing an incremental update
For older databases, a full re-download is done.

With a value of "0", this forces a full-redownload.

(From OE-Core rev: 5259971a4785e7f664c0f588f34f8ef537c5c4c5)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 74c1765111b6610348eae4b7e41d7045ce58ef86)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:26 -10:00
Yoann Congal a2271ac5a9 cve-update-nvd2-native: Fix typo in comment
attmepts -> attempts

(From OE-Core rev: 6f49c54a0ecc9d6e79816ce8dd7b65e5a8013df6)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dc18aaeda8e810f9082a0ceac08e5e4275bbd0f7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:25 -10:00
Vijay Anusuri 6269fbcd4f python3-cryptography: Backport fix for CVE-2024-26130
Upstream-Status: Backport from https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55

(From OE-Core rev: 7864c4605cde4851df644dd1d2867bd28d155710)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:25 -10:00
Meenali Gupta 9fce626d58 expat: fix CVE-2023-52426
A flaw was found in Expat (libexpat). If XML_DTD is undefined at compile time, a
recursive XML Entity Expansion condition can be triggered.This issue may lead to
a condition where data is expanded exponentially, which will quickly consume system
resources and cause a denial of service.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-52426
https://github.com/libexpat/libexpat/pull/777

(From OE-Core rev: aa20dd9eb68f04a5f1556123ad1b2398de911d93)

Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:25 -10:00
Peter Marko fe9d4cb613 expat: patch CVE-2024-28757
Picked patch from https://github.com/libexpat/libexpat/pull/842
which is referenced in the NVD CVE report.

(From OE-Core rev: c02175e97348836429cecbfad15d89be040bbd92)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-25 04:11:25 -10:00
Steve Sakoman 6d1a878bbf build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 2501534c9581c6c3439f525d630be11554a57d24)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
kirkstone-4.0.17 yocto-4.0.17
2024-03-13 07:43:53 -10:00
Steve Sakoman ff7353b24f poky.conf: bump version for 4.0.17
(From meta-yocto rev: 2e1962250eeb91ac4037ddaa844b5611ce287745)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:39:09 -10:00
Bruce Ashfield 587b5725bd yocto-bsp: update to v5.15.150
Bumping the reference BSPs to match the version of the qemu*
BSPs in oe-core.

(From meta-yocto rev: 26e04e6682c2658673b0295f853a59c630d5e16d)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:39:09 -10:00
Nikhil R d9dd05b088 librsvg: Fix do_package_qa error for librsvg
When using meta-rust layer for rust below
do_package_qa error in librsvg is observed

Fix the below error:
ERROR: librsvg-2.52.10-r0 do_package_qa: QA Issue: File /usr/bin/rsvg-convert in package rsvg doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/rsvg-convert in package rsvg doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags] ERROR: librsvg-2.52.10-r0 do_package_qa: Fatal QA errors were found, failing task.

(From OE-Core rev: 8829495c716d48bae47b5f738abb3c85ad3f21b1)

Signed-off-by: Nikhil R <nikhil.r@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:36:51 -10:00
Bruce Ashfield 8c81ddc78f linux-yocto/5.15: fix partion scanning
Integrating the following commit(s) to linux-yocto/5.15:

1/1 [
    Author: Christoph Hellwig
    Email: hch@lst.de
    Subject: block, loop: support partitions without scanning
    Date: Fri, 27 May 2022 07:58:06 +0200

    Historically we did distinguish between a flag that surpressed partition
    scanning, and a combinations of the minors variable and another flag if
    any partitions were supported.  This was generally confusing and doesn't
    make much sense, but some corner case uses of the loop driver actually
    do want to support manually added partitions on a device that does not
    actively scan for partitions.  To make things worsee the loop driver
    also wants to dynamically toggle the scanning for partitions on a live
    gendisk, which makes the disk->flags updates non-atomic.

    Introduce a new GD_SUPPRESS_PART_SCAN bit in disk->state that disables
    just scanning for partitions, and toggle that instead of GENHD_FL_NO_PART
    in the loop driver.

    [bva: Notes for this backport:
       - drop return code in disk_scan_partitions for GD_SUPPRESS_PART_SCAN.
         The check doesn't strictly need ot be in this routine in 5.15, but
         this faciliates future changes in this area, since there are
         other checks in the same function.
       - GD_SUPPRESS_PART_SCAN could go to genh.c, but genhd.c includes
         blkdev.h, so we leave the new GD_SUPPRESS_PART_SCAN definition
         in the same places as where it was introduced upstream to keep
         the changes to a minimum
       - upstream commit e16e506ccd673 merges blkdev_reread_part into
         disk_scan_partitions. Backporting that change is more churn
         than we need, so we also add the check for GD_SUPPRESS_PART_SCAN
         into that routine to have the check hit in a 5.15 context.
    ]

    Upstream-Status: Backport [commit b9684a71fca79]

    Fixes: 1ebe2e5f9d68 ("block: remove GENHD_FL_EXT_DEVT")
    Reported-by: Ming Lei <ming.lei@redhat.com>
    Signed-off-by: Christoph Hellwig <hch@lst.de>
    Reviewed-by: Ming Lei <ming.lei@redhat.com>
    Link: https://lore.kernel.org/r/20220527055806.1972352-1-hch@lst.de
    Signed-off-by: Jens Axboe <axboe@kernel.dk>
    Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]

(From OE-Core rev: 768ac24afff43d58c32617025391049d5d0d166b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:36:51 -10:00
Bruce Ashfield 317981524d linux-yocto/5.15: update CVE exclusions (5.15.150)
Data pulled from: https://github.com/nluedtke/linux_kernel_cves

    1/1 [
        Author: Nicholas Luedtke
        Email: nicholas.luedtke@uwalumni.com
        Subject: Update 25Feb24
        Date: Sun, 25 Feb 2024 07:03:08 -0500

    ]

(From OE-Core rev: 253dd177e608f3e2d6fb8ea73d265e4d1a74b7cd)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:36:51 -10:00
Bruce Ashfield 37b1dff212 linux-yocto/5.15: update to v5.15.150
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    80efc6265290 Linux 5.15.150
    da6cabc1981e r8169: use new PM macros
    b7f3fac6d301 netfilter: nf_tables: can't schedule in nft_chain_validate
    a4efc62cd1ed ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
    c1317822e2de ext4: regenerate buddy after block freeing failed if under fc replay
    d82ec7529c5f netfilter: nf_tables: fix scheduling-while-atomic splat
    97eaa2955db4 arp: Prevent overflow in arp_req_get().
    d7b6fa97ec89 fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
    df31d05f0678 cifs: fix mid leak during reconnection after timeout threshold
    aade859419ce i2c: imx: when being a target, mark the last read as processed
    cb21407f0b39 i2c: imx: Add timer for handling the stop condition
    33f649f1b1ce drm/amd/display: Fix memory leak in dm_sw_fini()
    9a03126588e5 drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
    13b57b5cd591 netfilter: nft_flow_offload: release dst in case direct xmit path is used
    4c167af9f6b5 netfilter: nft_flow_offload: reset dst in route object after setting up flow
    7c71b831220e netfilter: flowtable: simplify route logic
    664264a5c55b netfilter: nf_tables: set dormant flag on hook register failure
    4338032aa90b tls: stop recv() if initial process_rx_list gave us non-DATA
    ea845237a39d tls: rx: drop pointless else after goto
    8b32e43a80a1 tls: rx: jump to a more appropriate label
    39603a6d4e71 s390: use the correct count for __iowrite64_copy()
    8cae520f21ad octeontx2-af: Consider the action set by PF
    6dae096960bc drm/nouveau/instmem: fix uninitialized_var.cocci warning
    4d3b2bd995ed net: dev: Convert sa_data to flexible array in struct sockaddr
    d65ec3e48f70 packet: move from strlcpy with unused retval to strscpy
    91b020aaa1e5 ipv6: sr: fix possible use-after-free and null-ptr-deref
    e56662160fc2 afs: Increase buffer size in afs_update_volume_status()
    5268bb02107b bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
    6800ad7417f3 ata: ahci_ceva: fix error handling for Xilinx GT PHY support
    7fcc31a3a705 ata: libahci_platform: Introduce reset assertion/deassertion methods
    ddac2e0e656e ata: libahci_platform: Convert to using devm bulk clocks API
    302b92b37304 ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
    a75b49547831 ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
    2a7b878a7dad net: stmmac: Fix incorrect dereference in interrupt handlers
    a41d9142d2dd nouveau: fix function cast warnings
    1087c284fd11 scsi: jazz_esp: Only build if SCSI core is builtin
    4e395fb89e7e bpf, scripts: Correct GPL license name
    cd6070d9f5e7 RDMA/srpt: fix function pointer cast warnings
    656bd1702fea arm64: dts: rockchip: set num-cs property for spi on px30
    135e5465fefa RDMA/qedr: Fix qedr_create_user_qp error flow
    989af2f29342 RDMA/srpt: Support specifying the srpt_service_guid parameter
    b6e660e07622 RDMA/irdma: Add AE for too many RNRS
    056ed95befd1 RDMA/irdma: Set the CQ read threshold for GEN 1
    a95d4cf82775 RDMA/irdma: Validate max_send_wr and max_recv_wr
    635d79aa477f RDMA/irdma: Fix KASAN issue with tasklet
    aeb5ac1c9d10 RDMA/bnxt_re: Return error for SRQ resize
    52de5805c147 IB/hfi1: Fix a memleak in init_credit_return
    48c63a174489 cifs: add a warning when the in-flight count goes negative
    6538b6d13ce3 xhci: track port suspend state correctly in unsuccessful resume cases
    8839d5728baa xhci: decouple usb2 port resume and get_port_status request handling
    8af9de2a5ba1 xhci: clear usb2 resume related variables in one place.
    a99c8f1abef9 xhci: rename resume_done to resume_timestamp
    63f0e79cf382 xhci: move port specific items such as state completions to port structure
    ea6c19c7365d xhci: cleanup xhci_hub_control port references
    95973afc870c ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
    4f080b6487bd ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
    c2a9376d507e ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
    1b64ff947a5a ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
    f3607954f2e6 ACPI: resource: Add ASUS model S5402ZA to quirks
    27e99d785721 ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
    cb1003c07e74 ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
    28e5e3e59b3b arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
    99c8b2e99783 arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
    371036bf7666 arm64: dts: rockchip: fix regulator name on rk3399-rock-4
    92dcd7d6c606 exfat: support dynamic allocate bh for exfat_entry_set_cache
    b4dc693b29ef wifi: iwlwifi: mvm: avoid baid size integer overflow
    fa92c463eba7 igb: Fix igb_down hung on surprise removal
    16f653776caf wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
    7552020e3aa8 devlink: report devlink_port_type_warn source device
    819ca25444b3 bpf: Address KCSAN report on bpf_lru_list
    f97832620d7f wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
    3cb43222bab8 sched/fair: Don't balance task to its current running CPU
    621619f626cb arm64: mm: fix VA-range sanity check
    0bd309f22663 arm64: set __exception_irq_entry with __irq_entry as a default
    dd0802f0a9d6 ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version)
    3cc2d66b12e0 ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
    54da51be3b7e ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
    fa33b70513a0 btrfs: add xxhash to fast checksum implementations
    ef535e0315af posix-timers: Ensure timer ID search-loop limit is valid
    84a578961b25 md/raid10: prevent soft lockup while flush writes
    6b03364b29bd md: fix data corruption for raid456 when reshape restart while grow up
    638eaac37464 nbd: Add the maximum limit of allocated index in nbd_dev_add
    173e191012aa debugobjects: Recheck debug_objects_enabled before reporting
    de2efb42d693 netfilter: nf_tables: add rescheduling points during loop detection walks
    a022c339afca net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
    65acad6791bf Input: iqs269a - do not poll during ATI
    13b1dee7e110 Input: iqs269a - do not poll during suspend or resume
    f33ba1ec4ad9 Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
    dba06912727b PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
    995e77b87389 mmc: mxc: Use the new PM macros
    8bc597732c85 mmc: jz4740: Use the new PM macros
    75d4f92d8788 PM: core: Add new *_PM_OPS macros, deprecate old ones
    53f7337519a1 PM: core: Redefine pm_ptr() macro
    a51c253d8321 powerpc/eeh: Set channel state after notifying the drivers
    4570db06b724 powerpc/eeh: Small refactor of eeh_handle_normal_event()
    12dd4a0848c4 powerpc/rtas: ensure 4KB alignment for rtas_data_buf
    8afaf74307f8 powerpc/rtas: make all exports GPL
    2240f4c5f5d5 net: ethernet: ti: add missing of_node_put before return
    18721a837387 dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
    fb100de77846 clk: imx8mp: add clkout1/2 support
    3c8a513f0f6b clk: imx8mp: Add DISP2 pixel clock
    3517b6d6146c serial: 8250: Remove serial_rs485 sanitization from em485
    54974aad4a76 cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
    15c3ddd11803 kernel/sched: Remove dl_boosted flag comment
    a1733ffd88d9 drm/i915/dg1: Update DMC_DEBUG3 register
    8102416c05bb f2fs: write checkpoint during FG_GC
    cfd5d011d6f6 f2fs: don't set GC_FAILURE_PIN for background GC
    56b522f46681 drm/amdgpu: init iommu after amdkfd device init
    572ee5086e47 tools/virtio: fix build
    80f2a246225c perf beauty: Update copy of linux/socket.h with the kernel sources
    47b6345ddb6c tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
    c65a23e98e38 ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
    2eb3d2a54ad7 acpi: property: Let args be NULL in __acpi_node_get_property_reference
    7abdd666a06f platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
    7de3c1535bdf clk: linux/clk-provider.h: fix kernel-doc warnings and typos
    b184742d2788 RDMA/siw: Correct wrong debug message
    6f6ec8aff219 RDMA/siw: Balance the reference of cep->kref in the error path
    71475bcee001 ARM: dts: BCM53573: Drop nonexistent #usb-cells
    832cf206dfe2 selftests: net: vrf-xfrm-tests: change authentication and encryption algos
    14e1f63b3918 vdpa/mlx5: Don't clear mr struct on destroy MR
    5b4f6c5ff65c MIPS: vpe-mt: drop physical_memsize
    1be5de5b642a MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
    cc24b32d7d62 powerpc/pseries/lpar: add missing RTAS retry status handling
    3212606148b8 powerpc/perf/hv-24x7: add missing RTAS retry status handling
    e3835122ea28 powerpc/pseries/lparcfg: add missing RTAS retry status handling
    228d3c49194b clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
    d0e4a444557a clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
    e7076cfb72d5 clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
    83c043b92b0f powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
    8c373aa1f784 Input: ads7846 - don't check penirq immediately for 7845
    6a37a429b3ee Input: ads7846 - always set last command to PWRDOWN
    199e666477d5 clk: imx: avoid memory leak
    94957e54dc70 clk: renesas: cpg-mssr: Remove superfluous check in resume code
    2d89ed2e0629 Input: ads7846 - don't report pressure for ads7845
    f992d1afd17f clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
    d73cf59d2446 Input: iqs269a - increase interrupt handler return delay
    db06a2ae0707 Input: iqs269a - configure device with a single block write
    fdbceead4ac1 Input: iqs269a - drop unused device node references
    d93c68661ad8 RISC-V: fix funct4 definition for c.jalr in parse_asm.h
    5c5c02b069cc mtd: rawnand: sunxi: Fix the size of the last OOB region
    11fcd28df8d3 clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
    9fcba5e7bb5c clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
    7602e5e1bd04 clk: imx: imx8mp: add shared clk gate for usb suspend clk
    7d6e8d7ee13b mptcp: fix lockless access in subflow ULP diag
    256c3e6192ed usb: roles: don't get/set_role() when usb_role_switch is unregistered
    ef982fc41055 usb: roles: fix NULL pointer issue when put module's reference
    2cb66b62a5d6 usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
    3a2a909942b5 usb: cdns3: fix memory double free when handle zero packet
    4e5c73b15d95 usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
    f4928121f707 usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
    7c532fb96ac1 usb: cdnsp: blocked some cdns3 specific code
    c98f2d25f8f6 usb: dwc3: gadget: Don't disconnect if not started
    f4fab74cb83c serial: amba-pl011: Fix DMA transmission in RS485 mode
    2c62c8984b96 x86/alternative: Make custom return thunk unconditional
    b0c9fcacf218 Revert "x86/alternative: Make custom return thunk unconditional"
    ae815291f0da x86/returnthunk: Allow different return thunks
    5ca1f6adac69 x86/ftrace: Use alternative RET encoding
    b9d69bfff6fd x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
    b810c58d8b01 x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
    8943e3c9446d Revert "x86/ftrace: Use alternative RET encoding"
    eec6cbbfa1e8 ARM: ep93xx: Add terminator to gpiod_lookup_table
    0da15a703951 l2tp: pass correct message length to ip6_append_data
    9d71d7a9f2a6 PCI/MSI: Prevent MSI hardware interrupt number truncation
    a576308800be gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
    d81e2dc20395 KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
    4deb8413eccb KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
    e20b24b175c9 platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
    79d7504a24a3 platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
    1a4371db68a3 dm-crypt: don't modify the data when using authenticated encryption
    d580f0dcb5e3 drm/ttm: Fix an invalid freeing on already freed page in error path
    47ae64df23ed IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
    77cbc04a1a86 erofs: fix lz4 inplace decompression
    fbb662ffa005 pmdomain: renesas: r8a77980-sysc: CR7 must be always on
    43ea43b6fa17 ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
    475426ad1ae0 pmdomain: mediatek: fix race conditions with genpd
    2a52590ac523 virtio-blk: Ensure no requests in virtqueues before deleting vqs.
    b9a61ee2bb27 drm/amdgpu: reset gpu for s3 suspend abort case
    afc74fda2b5d drm/amdgpu: skip to program GFXDEC registers for suspend abort
    dcd33edd854a firewire: core: send bus reset promptly on gap count error
    a74270a1b784 scsi: lpfc: Use unsigned type for num_sge
    26b8bdb5561a hwmon: (coretemp) Enlarge per package core count limit
    a2f99731ab31 efi: Don't add memblocks for soft-reserved memory
    4aa36b62c3ea efi: runtime: Fix potential overflow of soft-reserved region size
    262dc4fb1517 wifi: mac80211: adding missing drv_mgd_complete_tx() call
    a585faf05915 fs/ntfs3: Fix oob in ntfs_listxattr
    0a3548e82424 fs/ntfs3: Update inode->i_size after success write into compressed file
    c39c689a82b3 fs/ntfs3: Correct function is_rst_area_valid
    54142e95dfc8 fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
    095d6a66bc69 fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
    3f3a6ebf6a32 fs/ntfs3: Disable ATTR_LIST_ENTRY size check
    ee8db6475cb1 fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()
    56dacb722b76 fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name"
    3532bceaed11 fs/ntfs3: Print warning while fixing hard links count
    f14132b88315 fs/ntfs3: Correct hard links updating when dealing with DOS names
    cd465584d501 fs/ntfs3: Improve ntfs_dir_count
    3f7920b36da0 fs/ntfs3: Modified fix directory element type detection
    b4663b406aee Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
    9b1e3cf9ed29 ext4: correct the hole length returned by ext4_map_blocks()
    46e64b9a4b6f nvmet-fc: take ref count on tgtport before delete assoc
    5e0bc09a52b6 nvmet-fc: avoid deadlock on delete association path
    f323185c7923 nvmet-fc: abort command when there is no binding
    59b4ca71ab70 nvmet-fc: hold reference on hostport match
    8fd604d4b0d7 nvmet-fc: defer cleanup using RCU properly
    8f7104e18ffd nvmet-fc: release reference on target port
    071f116416a1 nvmet-fcloop: swap the list_add_tail arguments
    0bf567d6d9ff nvme-fc: do not wait in vain when unloading module
    75e34de642a3 ALSA: usb-audio: Ignore clock selector errors for single connection
    a75d89666c57 netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
    4a5ed4697232 Input: xpad - add Lenovo Legion Go controllers
    1e9af43d5d02 spi: sh-msiof: avoid integer overflow in constants
    ef1e3f277a7f ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
    e59905cfb195 ALSA: usb-audio: Check presence of valid altsetting control
    065da538e6a6 nvmet-tcp: fix nvme tcp ida memory leak
    f8dee8e4893c regulator: pwm-regulator: Add validity checks in continuous .get_voltage
    4fe4e5adc7d2 dmaengine: ti: edma: Add some null pointer checks to the edma_probe
    8de8305a25bf ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
    4c21fa60a6f4 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
    687061cfaa2a ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt
    3700475e0961 platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
    343c19816883 MIPS: reserve exception vector space ONLY ONCE
    b4c13deff359 ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
    1a8bd6244963 ahci: asm1166: correct count of reported ports
    0399d7eba41d spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
    df6e2088c6f4 fbdev: sis: Error out if pixclock equals zero
    8c54acf33e5a fbdev: savage: Error out if pixclock equals zero
    88c18fd06608 wifi: mac80211: fix race condition on enabling fast-xmit
    212f20d5b16e wifi: cfg80211: fix missing interfaces when dumping
    37d82e6ac9b2 dmaengine: fsl-qdma: increase size of 'irq_name'
    3692c6f2b564 dmaengine: shdma: increase size of 'dev_id'
    a9849b67b440 scsi: target: core: Add TMF to tmr_list handling
    0766e7317aab sched/rt: Disallow writing invalid values to sched_rt_period_us
    5295b5f2e561 sched/rt: Fix sysctl_sched_rr_timeslice intial value
    8bd3eee7720c x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    c017fbf10596 zonefs: Improve error handling
    bbc432e632d4 userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
    4bbb93ad84b3 bpf: Remove trace_printk_lock
    4b349c55bbd3 bpf: Do cleanup in bpf_bprintf_cleanup only when needed
    bcbaeb081ad8 bpf: Add struct for bin_args arg in bpf_bprintf_prepare
    8495c34dff0d bpf: Merge printk and seq_printf VARARG max macros
    ab2e127896a2 PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
    50349893930a sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
    ee0fb9baa7a4 smb: client: fix parsing of SMB3.1.1 POSIX create context
    890bc4fac3c0 smb: client: fix potential OOBs in smb2_parse_contexts()
    858e73ff2563 smb: client: fix OOB in receive_encrypted_standard()
    6e5e93fd51fe net/sched: Retire dsmark qdisc
    c3fdf76849c6 net/sched: Retire ATM qdisc
    78bac52c290a net/sched: Retire CBQ qdisc

(From OE-Core rev: 024d0778139277523f37d1a2857c6adbf69fd1c5)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-13 07:36:51 -10:00