summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* build-appliance-image: Update to dunfell head revisionyocto-3.1.21dunfell-23.0.21Richard Purdie2022-11-221-1/+1
| | | | | | (From OE-Core rev: 1ee082e979baaba871bbe1d91181bb04951faf3b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: utils: Fix lockfile path length issuesRichard Purdie2022-11-221-3/+6
| | | | | | | | | | | | | | | | If the path to bitbake.lock is in a deep directory, bitbake will hang. The reason was that the max file length limiting code (to 255 chars) was including the directory name and it should only act on the filename within the directory. Fix it to just use the base filename. [YOCTO #14766] (Bitbake rev: e3db9c2e9eded3c5cb6040714a6054b44f6b3880) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 89d70e7b71eecfe06592202f326e566c579ba01d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: utils: Handle lockfile filenames that are too long for filesystemsRichard Purdie2022-11-221-1/+5
| | | | | | | | | | | | | | | | The fetcher mirror code can go crazy creating lock filenames which exceed the filesystem limits. When this happens, the code will loop/hang. Handle the filename too long exception correctly but also truncate lockfile lengths to under 256 since the worst case situation is lockfile overlap and lack of parallelism. (Bitbake rev: 30d42ef030d03e11322b6b05ea7bbb64ab3d6f21) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 63baf3440b16e41ac6601de21ced94a94bdf1509) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to dunfell head revisionRichard Purdie2022-11-221-1/+1
| | | | | | (From OE-Core rev: a5d90bf22c037044c471daefe326ae14702b173e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* poky.conf: bump version for 3.1.21Steve Sakoman2022-11-221-1/+1
| | | | | | | (From meta-yocto rev: 9b713fe0cc7c5f5cb51bcf760d1a1c6540b485f1) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* documentation: update for 3.1.21Steve Sakoman2022-11-221-5/+5
| | | | | | | | (From yocto-docs rev: 01d31151d5c4a87a466cb49b97eabf75cf47ed98) Signed-off-by: Steve Sakoman <steve@sakoman.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic: swap partitions are not added to fstabciarancourtney2022-11-201-1/+1
| | | | | | | | | | | | - Regression in 7aa678ce804c21dc1dc51b9be442671bc33c4041 (From OE-Core rev: ce99d451a54b8ce46b7f9030deaba86355009b1a) Signed-off-by: Ciaran Courtney <ciaran.courtney@activeenergy.ie> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit f1243572ad6b6303fe562e4eb7a9826fd51ea3c3) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sanity: check for GNU tar specificallyRoss Burton2022-11-201-0/+8
| | | | | | | | | | | | | | | We need the system tar to be GNU tar, as we reply on --xattrs. Some distributions may be using libarchive's tar binary, which is definitely not as featureful, so check for this and abort early with a clear message instead of later with mysterious errors. (From OE-Core rev: 8f852648fe730615c99bcdaace8a4748ef4e96a5) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 7dd2b1cd1bb10e67485dab8600c0787df6c2eee7) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* externalsrc.bbclass: Remove a trailing slash from ${B}Peter Kjellerstedt2022-11-201-1/+1
| | | | | | | | | | | | | | | The trailing slash in ${B} caused -fdebug-prefix-map=${B}=... to not match as intended, resulting in ${TMPDIR} ending up in files in ${PN}-dbg when externalsrc was in use, which in turn triggered buildpath QA warnings. (From OE-Core rev: fa89e048e223ae2e96d0f55979f93f29904b5229) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9b5031ed5a0d102905fa75acc418246c23df6eef) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* externalsrc.bbclass: fix git repo detectionMartin Jansa2022-11-201-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix issue introduced in: https://git.openembedded.org/openembedded-core/commit/?id=95fbac8dcad6c93f4c9737e9fe13e92ab6befa09 * it added check for s_dir + git-dir (typically '.git') isn't the same as ${TOPDIR} + git-dir, but due to copy-paste issue it was just comparing it with s_dir + git-dir again, resulting in most external repos (where git-dir is '.git') to be processed as regular directory (not taking advantage of git write-tree). * normally this wouldn't be an issue, but for big repo with a lot of files this added a lot of checksums in: d.setVarFlag('do_compile', 'file-checksums', '${@srctree_hash_files(d)}') and I mean *a lot, e.g. in chromium build it was 380227 paths which still wouldn't that bad, but the checksum processing in siggen.py isn't trivial and just looping through all these checksums takes very long time (over 1000sec on fast NVME drive with warm cache) and then https://git.openembedded.org/bitbake/commit/?id=b4975d2ecf615ac4c240808fbc5a3f879a93846b made the processing a bit more complicated and the loop in get_taskhash() function took 6448sec and to make things worse there was no output from bitbake during that time, so even with -DDD it looks like this: DEBUG: virtual/libgles2 resolved to: mesa (langdale/oe-core/meta/recipes-graphics/mesa/mesa_22.2.0.bb) Bitbake still alive (no events for 600s). Active tasks: Bitbake still alive (no events for 1200s). Active tasks: Bitbake still alive (no events for 1800s). Active tasks: Bitbake still alive (no events for 2400s). Active tasks: Bitbake still alive (no events for 3000s). Active tasks: Bitbake still alive (no events for 3600s). Active tasks: Bitbake still alive (no events for 4200s). Active tasks: Bitbake still alive (no events for 4800s). Active tasks: Bitbake still alive (no events for 5400s). Active tasks: Bitbake still alive (no events for 6000s). Active tasks: DEBUG: Starting bitbake-worker without -DDD it will get stuck for almost 2 hours in: "Initialising tasks..." before it finally writes sstate summary like: "Sstate summary: Wanted 3102 Local 0 Mirrors 0 Missed 3102 Current 1483 (0% match, 32% complete)" * fix the copy&paste typo to use git work-tree in most cases, but be aware that this issue still exists for huge local source trees not in git [YOCTO #14942] (From OE-Core rev: 1f0e4de8d92edd7438d462c779d917ac0ccd5499) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9102e5a94b8146cb1da27afbe41d3db999a914ff) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: upgrade 1.1.1q to 1.1.1sAlex Kiernan2022-11-201-1/+1
| | | | | | | | | | | | | | | | Major changes between OpenSSL 1.1.1r and OpenSSL 1.1.1s [1 Nov 2022] * Fixed a regression introduced in OpenSSL 1.1.1r not refreshing the certificate data to be signed before signing the certificate. Major changes between OpenSSL 1.1.1q and OpenSSL 1.1.1r [11 Oct 2022] * Added a missing header for memcmp that caused compilation failure on some platforms (From OE-Core rev: a39a32efd41c92a3ada49d667979c79101a4a2da) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc : stable 2.31 branch updates.Sundeep KOKKONDA2022-11-202-16/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Below commits on glibc-2.31 stable branch are updated. d4b7559457 x86-64: Require BMI2 for avx2 functions [BZ #29611] b8bb48a18d x86-64: Require BMI2 for strchr-avx2.S [BZ #29611] c8f2a3e803 Add test for bug 29530 e6ae5b25cd Fix memmove call in vfprintf-internal.c:group_number 1dbe841a67 Remove most vfprintf width/precision-dependent allocations (bug 14231, bug 26211). 5a802723db stdio: Add tests for printf multibyte convertion leak [BZ#25691] ae7748e67f stdio: Remove memory leak from multibyte convertion [BZ#25691] 174d0b61c7 Linux: Require properly configured /dev/pts for PTYs 0a167374fd Linux: Detect user namespace support in io/tst-getcwd-smallbuff 4ad1659d8c getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999) 3319cea99e support: Add helpers to create paths longer than PATH_MAX f733e291bb support: Fix xclone build failures on ia64 and hppa 43757c70ee support: Add xclone 29d3aeb0e8 Add xchdir to libsupport. 2d7720f316 support: Add create_temp_file_in_dir 183709983d NEWS: Add a bug fix entry for BZ #28896 d385079bd5 x86: Fix TEST_NAME to make it a string in tst-strncmp-rtm.c 7df3ad6560 x86: Test wcscmp RTM in the wcsncmp overflow case [BZ #28896] fc133fcf49 x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #28896] 775c05b28c string: Add a testcase for wcsncmp with SIZE_MAX [BZ #28755] c6b346ec55 x86-64: Test strlen and wcslen with 0 in the RSI register [BZ #28064] 0675185923 x86: Remove wcsnlen-sse4_1 from wcslen ifunc-impl-list [BZ #28064] 5db3239baf x86: Black list more Intel CPUs for TSX [BZ #27398] 5b99f172b8 x86: Check RTM_ALWAYS_ABORT for RTM [BZ #28033] 70d293a158 NEWS: Add a bug fix entry for BZ #27974 a2be2c0f5d String: Add overflow tests for strnlen, memchr, and strncat [BZ #27974] 489006c3c5 x86: Optimize strlen-evex.S 937f2c783a x86: Fix overflow bug in wcsnlen-sse4_1 and wcsnlen-avx2 [BZ #27974] 0058c73d11 x86-64: Add wcslen optimize for sse4.1 665d0252f1 x86-64: Move strlen.S to multiarch/strlen-vec.S 82ff13e2cc x86-64: Fix an unknown vector operation in memchr-evex.S 539b593a1d x86: Optimize memchr-evex.S 7b37ae60c6 x86: Optimize strlen-avx2.S 0381c1c10d x86: Fix overflow bug with wmemchr-sse2 and wmemchr-avx2 [BZ #27974] 10368cb76b x86: Optimize memchr-avx2.S 66ca40582e test-strnlen.c: Check that strnlen won't go beyond the maximum length 927bcaf892 test-strnlen.c: Initialize wchar_t string with wmemset [BZ #27655] 0d4159c36c x86-64: Require BMI2 for __strlen_evex and __strnlen_evex c0cbb9345e NEWS: Add a bug fix entry for BZ #27457 e81b975fcc x86-64: Fix ifdef indentation in strlen-evex.S aa4e48e73c x86-64: Use ZMM16-ZMM31 in AVX512 memmove family functions ac911d3b57 x86-64: Use ZMM16-ZMM31 in AVX512 memset family functions 20d37de533 x86: Add string/memory function tests in RTM region fbaa99ed41 x86-64: Add AVX optimized string/memory functions for RTM 096e14f632 x86-64: Add memcmp family functions with 256-bit EVEX f00fad4e4c x86-64: Add memset family functions with 256-bit EVEX cf239ddd2e x86-64: Add memmove family functions with 256-bit EVEX 7257ba7bf2 x86-64: Add strcpy family functions with 256-bit EVEX db9071c0f6 x86-64: Add ifunc-avx2.h functions with 256-bit EVEX 2d612b2c5f x86: Set Prefer_No_VZEROUPPER and add Prefer_AVX2_STRCMP 5b13651085 NEWS: Add a bug fix entry for BZ #28755 5ee8a436ab x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755] (From OE-Core rev: 1d047a1f19ea57f919180273589cdf7fb4dacaa3) Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: stable 2.34 branch updatesSundeep KOKKONDA2022-11-203-45/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Below commits on binutils-2.34 stable branch are updated. c4e78c0868a PR27755, powerpc-ld infinite loop 33973d228c9 gas, arm: PR26858 Fix availability of single precision vmul/vmla in arm mode 0c8652fe288 x86: Update GNU property tests 5c1bd3f52c6 x86: Properly merge -z ibt and -z shstk 93b9bf1651a PowerPC TPREL_HA/LO optimisation 58950a3bfd4 Date update e3b314d3a61 aarch64: set sh_entsize of .plt to 0 26b6ab7a0e4 S/390: z13: Accept vector alignment hints 7324292cd94 gas: Fix checking for backwards .org with negative offset 463ec189fe9 Prevent a potential use-after-fee memory corruption bug in the linker (for PE format files). ef2826c0fdb Fix the ARM assembler to generate a Realtime profile for armv8-r. 8524bb5bd28 Re: Fix tight loop on recursively-defined symbols 5768460022b Fix tight loop on recursively-defined symbols a72427b1ae0 gas: PR 25863: Fix scalar vmul inside it block when assembling for MVE 9f57ab49b32 BFD: Exclude sections with no content from compress check. aaf3f0599a2 Arm: Fix LSB of GOT for Thumb2 only PLT. 97f92b3e90a Arm: Fix thumb2 PLT branch offsets. 3053d7a163c include: Sync plugin-api.h with GCC f7aec2b8e09 PR25745, powerpc64-ld overflows string buffer in --stats mode 1b2bf0f65c1 include: Sync plugin-api.h with GCC 5e8619b9597 include: Sync lto-symtab.h and plugin-api.h with GCC 23820109ced plugin: Don't invoke LTO-wrapper 64f5c0afcc4 plugin: Use LDPT_ADD_SYMBOLS_V2 to get symbol type aaa1e160040 Silence warnings due to plugin API change e7c0ee5110c Include: Sync lto-symtab.h and plugin-api.h with GCC b6520be37fd Fix dwarf.c build with GCC 10 a560c29ca5a bfd: Change num_group to unsigned int 3ca4cd1ebde gas, arm: Fix bad backport b3174859c4b gas, arm: PR25660L Fix vadd/vsub with lt and le condition codes for MVE de9c1b7cfe6 powerpc64-ld infinite loop 0318fc4e18e Adjust PR25355 testcase 40bfb976274 Re: PR24511, nm should not mark symbols in .init_array as "t" 42b2380cdce Don't call lto-wrapper for ar and ranlib acc4a8b8ac8 PR25585, PHDR segment not covered by LOAD segment (From OE-Core rev: ad15d44b6c56ccbbe8e4c12717e7dfe3492a659a) Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2021-3638 ati-vga: inconsistent check in ati_2d_blt() may lead ↵Vivek Kumbhar2022-11-202-0/+81
| | | | | | | | | | | | to out-of-bounds write Upstream-Status: Backport from https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html (From OE-Core rev: 8b5d38abdbfd3bdeb175c793b4d33f9054e89f77) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: fix CVE-2022-32221 POST following PUTVivek Kumbhar2022-11-202-0/+30
| | | | | | | | | | Upstream-Status: Backport from https://github.com/curl/curl/commit/a64e3e59938abd7d6 (From OE-Core rev: 9af175e122acb93a412ad7a099f0eaa793a1c097) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Security Fix for CVE-2022-2879Sunil Kumar2022-11-202-0/+112
| | | | | | | | | | | | | | | | archive/tar: limit size of headers Set a 1MiB limit on special file blocks (PAX headers, GNU long names, GNU link names), to avoid reading arbitrarily large amounts of data into memory. Link: https://github.com/golang/go/commit/0a723816cd2 (From OE-Core rev: a8e2f91edfe2df5204a482c4e53fbdd08f80e878) Signed-off-by: Sunil Kumar <sukumar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez: CVE-2022-3637 A DoS exists in monitor/jlink.cHitendra Prajapati2022-11-202-0/+40
| | | | | | | | | | Upstream-Status: Backport from https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/monitor/jlink.c?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f (From OE-Core rev: c008c56e9b03f0ce3eccf4c01799ae8e987e5cd5) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: add dbus to RDEPENDSBartosz Golaszewski2022-11-091-0/+1
| | | | | | | | | | | | | | | Unless we're using systemd, dbus is not pulled into the system automatically. Bluez5 will not work without dbus so add it to RDEPENDS explicitly. (From OE-Core rev: babcb7cd3bbefe9c0ea28e960e4fd6cefbc03cae) Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 377ef7009a8638efe688b6b61f67ae399eb1f23d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: add openssl PACKAGECONFIGDaniel McGregor2022-11-091-0/+1
| | | | | | | | | | | | | | | | | coreutils-native will pick up openssl on the host if it's GPL compatible (version >= 3), which causes uninative failures with hosts that don't have openssl3. Add a PACKAGECONFIG entry for openssl so it can be enabled, but isn't by default. (From OE-Core rev: 590d8f2bdbb7ea558b9e99e58a1dae2b5eb58153) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9859a8124a0c09ac38d476445e7df7097f41d153) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzdata: update to 2022dAlexander Kanavin2022-11-091-3/+3
| | | | | | | | | | (From OE-Core rev: d325f5389a09ba03b4ded7c57c29dad773dbc0af) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ceac0492e75baa63a46365d8b63275437ad5671f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.0.0598 -> 9.0.0614Teoh Jay Shen2022-11-091-2/+2
| | | | | | | | | | | | Include fixes for CVE-2022-3352. (From OE-Core rev: 30ade05280760253bb1de4f5d757363e1b7e4fc0) Signed-off-by: Teoh Jay Shen <jay.shen.teoh@intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 8aa707f80ae1cfe89d5e20ec1f1632a65149aed4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: add timeout to urlopen() callsFrank de Brabander2022-11-091-2/+7
| | | | | | | | | | | | | | | | | | The urlopen() call can block indefinitely under some circumstances. This can result in the bitbake process to run endlessly because of the 'do_fetch' task of cve-update-bb-native to remain active. This adds a default timeout of 60 seconds to avoid this hang, while being large enough to minimize the risk of unwanted timeouts. (From OE-Core rev: f51a6742bcae3a151a326d17cd44935815eb78c7) Signed-off-by: Frank de Brabander <debrabander@gmail.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e5f6652854f544106b40d860de2946954de642f3) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* expat: Fix CVE-2022-43680 for expatRanjitsinh Rathod2022-11-092-0/+34
| | | | | | | | | | | | | Add a patch to fix CVE-2022-43680 issue where use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations Link: https://nvd.nist.gov/vuln/detail/CVE-2022-43680 (From OE-Core rev: ac4476e6594417b14bfb05a110009ef245f419b0) Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libX11: CVE-2022-3554 Fix memory leakHitendra Prajapati2022-11-092-0/+59
| | | | | | | | | | Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/1d11822601fd24a396b354fa616b04ed3df8b4ef (From OE-Core rev: 1d36df9c9ec0ea13c4e0c3794b0d97305e2c6ac1) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* golang: CVE-2022-2880 ReverseProxy should not forward unparseable query ↵Hitendra Prajapati2022-11-092-0/+165
| | | | | | | | | | | | parameters Upstream-Status: Backport from https://github.com/golang/go/commit/9d2c73a9fd69e45876509bb3bdb2af99bf77da1e (From OE-Core rev: f977d712455411c091aeee04ea7096d9e8c5b563) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest: skip virgl test on all Alma LinuxSteve Sakoman2022-10-271-2/+2
| | | | | | | | | This test will fail any time the host has libdrm > 2.4.107 (From OE-Core rev: 54bbfe94ae4514386c572564bf221edfdbb2ce38) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* devtool: add HostKeyAlgorithms option to ssh and scp commandsSteve Sakoman2022-10-272-5/+5
| | | | | | | | | | | | | | | With the newer version of ssh in Ubuntu 22.04 we are getting errors of this type: Unable to negotiate with 192.168.7.2 port 22: no matching host key type found. Their offer: ssh-rsa Add -o HostKeyAlgorithms=+ssh-rsa to command invocation as suggested at: http://www.openssh.com/legacy.html (From OE-Core rev: 9275d23c782071382c201bca2d647f6426a64e2f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes/kernel-fitimage: add ability to add additional signing optionsPaul Eggleton2022-10-271-1/+5
| | | | | | | | | | | | | | | Add a UBOOT_MKIMAGE_SIGN_ARGS variable to enable passing additional options to uboot-mkimage when it is run the second time to perform signing. (From OE-Core rev: fd39b936b03a6416e7a66408c47578daa2a08cf1) Signed-off-by: Paul Eggleton <paul.eggleton@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8fd7ee7414b45a1feeef7982af3583475902a677) Signed-off-by: Massimiliano Minella <massimiliano.minella@se.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dbus: upgrade 1.12.22 -> 1.12.24Omkar2022-10-273-1/+1
| | | | | | | | | | | | | | | Upgrade dbus from 1.12.22 to 1.12.24 Fix Below CVE's: 2022-42010 2022-42011 2022-42012 (From OE-Core rev: f00cb90cb4169ecbc003c61b50ae9e0dd4b75254) Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dbus: upgrade 1.12.20 -> 1.12.22wangmy2022-10-273-2/+1
| | | | | | | | | | | | | (From OE-Core rev: 1fb8ea03cf6c4df4d8c2cc9329dfe80c83a37e2d) (From OE-Core rev: f2632f0e5f814aac9f0c8f7294fb1d8439167c36) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dc98fba73aeac4d1e661475dfb4acfca94d6c8f8) Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/5.4: update to v5.4.219Bruce Ashfield2022-10-273-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: fd92cfed8bc6 Linux 5.4.219 0cb5be43dc4b wifi: mac80211: fix MBSSID parsing use-after-free 9478c5f9c007 wifi: mac80211: don't parse mbssid in assoc response 7f441a6c90fe mac80211: mlme: find auth challenge directly c248c3330d5f Revert "fs: check FMODE_LSEEK to control internal pipe splicing" 1d0da8674c23 Linux 5.4.218 3ff54a91e4ea Input: xpad - fix wireless 360 controller breaking after suspend 690467759573 Input: xpad - add supported devices as contributed on github 9389750ac6b0 wifi: cfg80211: update hidden BSSes to avoid WARN_ON 7fab3bf52059 wifi: mac80211_hwsim: avoid mac80211 warning on bad rate 77bb20ccb9df wifi: cfg80211: avoid nontransmitted BSS list corruption 785eaabfe310 wifi: cfg80211: fix BSS refcounting bugs 359ce507f751 wifi: cfg80211: ensure length byte is present before access 43689bf2cd8e wifi: cfg80211/mac80211: reject bad MBSSID elements 020402c7dd58 wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() c634a9107f6a random: use expired timer rather than wq for mixing fast pool 39800adc38f6 random: avoid reading two cache lines on irq randomness bc0375ca434b random: restore O_NONBLOCK support 49d2fc9f998b USB: serial: qcserial: add new usb-id for Dell branded EM7455 20a5bde60597 scsi: stex: Properly zero out the passthrough command structure 46b822a7550d efi: Correct Macmini DMI match in uefi cert quirk b719d10f7ec3 ALSA: hda: Fix position reporting on Poulsbo e5d25a3bfde4 random: clamp credited irq bits to maximum mixed 194f59391d6c ceph: don't truncate file in atomic_open 259c0f68168a nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure b7e409d11db9 nilfs2: fix leak of nilfs_root in case of writer thread creation failure 792211333ad7 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() 963089ad76cb rpmsg: qcom: glink: replace strncpy() with strscpy_pad() 2da677c0c725 mmc: core: Terminate infinite loop in SD-UHS voltage switch 373eca05b5b8 mmc: core: Replace with already defined values for readability 7ec8f073c2bf USB: serial: ftdi_sio: fix 300 bps rate for SIO 21446ad9cb98 usb: mon: make mmapped memory read only d2f3a51ca27e arch: um: Mark the stack non-executable to fix a binutils warning bb2d4c37b1fc um: Cleanup compiler warning in arch/x86/um/tls_32.c 9e26e0eef622 um: Cleanup syscall_handler_t cast in syscalls_32.h 3c9a75b3d2f7 net/ieee802154: fix uninit value bug in dgram_sendmsg 61be8898d704 scsi: qedf: Fix a UAF bug in __qedf_probe() c790d3a00d42 ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer aefe2f55a986 dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure db702ecd713a dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property 59684c877783 firmware: arm_scmi: Add SCMI PM driver remove routine 70e4f70d54e0 fs: fix UAF/GPF bug in nilfs_mdt_destroy 398312c687bb perf tools: Fixup get_current_dir_name() compilation 393a1aa4215b mm: pagewalk: Fix race between unmap and page walker 6e150d605c9e Linux 5.4.217 0c41153c367b docs: update mediator information in CoC docs 096740d67560 Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 e911caf9a158 Revert "drm/amdgpu: use dirty framebuffer helper" ae19c3c76dc4 xfs: remove unused variable 'done' 538657def702 xfs: fix uninitialized variable in xfs_attr3_leaf_inactive 9ff41b8d71ba xfs: streamline xfs_attr3_leaf_inactive c893fedaf10c xfs: move incore structures out of xfs_da_format.h 5e13ad940a2a xfs: fix memory corruption during remote attr value buffer invalidation 821e0951b4b3 xfs: refactor remote attr value buffer invalidation a1b66abe30da xfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read 1e4a0723eb38 xfs: fix s_maxbytes computation on 32-bit kernels 16de74ee3ad6 xfs: truncate should remove all blocks, not just to the end of the page cache 87e73331e4b7 xfs: introduce XFS_MAX_FILEOFF bd67d06b099d xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag 24f45c878299 x86/speculation: Add RSB VM Exit protections 564275d4b93f x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts 4891e5fd1001 x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current 9862c0f4fd6c x86/speculation: Disable RRSBA behavior b9ae02c3c253 x86/bugs: Add Cannon lake to RETBleed affected CPU list d6a8a470dc22 x86/cpu/amd: Enumerate BTC_NO 2edfa537f3b1 x86/common: Stamp out the stepping madness 17a9fc4a7b91 x86/speculation: Fill RSB on vmexit for IBRS 2242cf215013 KVM: VMX: Fix IBRS handling after vmexit 51c71ed134e9 KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS a31bdec99a95 KVM: VMX: Convert launched argument to flags 5895a9297e60 KVM: VMX: Flatten __vmx_vcpu_run() 64723cd346ea KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw 57ba312f1037 KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S 87dfe68a3513 x86/speculation: Remove x86_spec_ctrl_mask 4109a8ce107d x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit 0fd086edf887 x86/speculation: Fix SPEC_CTRL write on SMT state change 18d5a93fd202 x86/speculation: Fix firmware entry SPEC_CTRL handling 03a575a0f954 x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n 8afd1c7da2b0 x86/speculation: Change FILL_RETURN_BUFFER to work with objtool 3ee9e9a5af07 intel_idle: Disable IBRS during long idle 97bc52c14a93 x86/bugs: Report Intel retbleed vulnerability fd67fe3db93f x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() 2d4ce2d72c3b x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS e2d793a3742a x86/bugs: Optimize SPEC_CTRL MSR writes a3111faed5c1 x86/entry: Add kernel IBRS implementation fd32a31553a1 x86/entry: Remove skip_r11rcx 3c93ff4e23ea x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value 9a596426d7bd x86/bugs: Add AMD retbleed= boot parameter 063b7f980607 x86/bugs: Report AMD retbleed vulnerability 954d591a84d0 x86/cpufeatures: Move RETPOLINE flags to word 11 893cd858b09c x86/kvm/vmx: Make noinstr clean f62d272c2fec x86/cpu: Add a steppings field to struct x86_cpu_id 69460b1ed63d x86/cpu: Add consistent CPU match macros 87449d94e75c x86/devicetable: Move x86 specific macro out of generic code fbd29b7549b2 Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" 3a8ff61e6f13 Revert "x86/speculation: Add RSB VM Exit protections" (From OE-Core rev: 285fdd43a20ccb12231bd36e5e75fe13ad2a32fd) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/5.4: update to v5.4.216Bruce Ashfield2022-10-273-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: f28b7414ab71 Linux 5.4.216 b8b87cb13681 clk: iproc: Do not rely on node name for correct PLL setup d417d5eb29d7 clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks 762706bd12a6 selftests: Fix the if conditions of in test_extra_filter() ae0d3a431639 nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices 18ef5cd4c53c nvme: add new line after variable declatation 3ea4a5342452 usbnet: Fix memory leak in usbnet_disconnect() 6ca922ec7598 Input: melfas_mip4 - fix return value check in mip4_probe() 38c4d8230f93 Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" 7291d19a9eeb soc: sunxi: sram: Fix debugfs info for A64 SRAM C cdbcdfc96126 soc: sunxi: sram: Fix probe function ordering issues 73dbc6e136b5 soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() 26170e4fd145 soc: sunxi: sram: Prevent the driver from being unbound 883778a1f4fa soc: sunxi: sram: Actually claim SRAM regions 1ba52486082b ARM: dts: am33xx: Fix MMCHS0 dma properties d0c69c722ff1 ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver d18565280076 media: dvb_vb2: fix possible out of bound access 0f4634f70bfd mm: fix madivse_pageout mishandling on non-LRU page ffd11370b74f mm/migrate_device.c: flush TLB while holding PTL b9e31f4885c4 mm: prevent page_frag_alloc() from corrupting the memory d535fb83844e mm/page_alloc: fix race condition between build_all_zonelists and page allocation 2ec4949738c8 mmc: moxart: fix 4-bit bus width and remove 8-bit bus width bb7c23e4e523 libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 5cebfac6a8c9 Revert "net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()" 9a3740f448be ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() 46e784cf4a84 ARM: dts: integrator: Tag PCI host with device_type 85b5edb1b429 clk: ingenic-tcu: Properly enable registers before accessing timers f8a2e22289e4 net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 43699b8fbcf1 uas: ignore UAS for Thinkplus chips fc540f6e4bb4 usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS 383c663c7359 uas: add no-uas quirk for Hiksemi usb_disk 6215647d9699 Linux 5.4.215 579976dc0d9f ext4: make directory inode spreading reflect flexbg size 26e7c965f41b xfs: fix use-after-free when aborting corrupt attr inactivation 8b3c9eb1b3dd xfs: fix an ABBA deadlock in xfs_rename 37ec5a20c80d xfs: don't commit sunit/swidth updates to disk if that would cause repair failures 4668f08cda30 xfs: split the sunit parameter update into two parts fd6c5da3fa2b xfs: refactor agfl length computation function 6363fdf7acac xfs: use bitops interface for buf log item AIL flag check a95582d9d500 xfs: stabilize insert range start boundary to avoid COW writeback race 7a20c664a7d8 xfs: fix some memory leaks in log recovery ad9759d48802 xfs: always log corruption errors 0336599b645e xfs: constify the buffer pointer arguments to error functions 8856a6572fed xfs: convert EIO to EFSCORRUPTED when log contents are invalid 9185003c93b3 xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() 796ff09598cd xfs: attach dquots and reserve quota blocks during unwritten conversion a33bcad48b48 xfs: range check ri_cnt when recovering log items a102869fb173 xfs: add missing assert in xfs_fsmap_owner_from_rmap 979eb1230413 xfs: slightly tweak an assert in xfs_fs_map_blocks c494dbca9928 xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata bb7eb3ca4b3b ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 04aa8187eba5 workqueue: don't skip lockdep work dependency in cancel_work_sync() a874609522b5 drm/rockchip: Fix return type of cdn_dp_connector_mode_valid 75ed7dee26ab drm/amd/display: Limit user regamma to a valid value c89849ecfd2e drm/amdgpu: use dirty framebuffer helper 0b467eab0aad Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region 8c8d0f7ac82f cifs: always initialize struct msghdr smb_msg completely 1438e412aeda usb: xhci-mtk: fix issue of out-of-bounds array access 2e473351400e s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup 9eb710d1843a serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting 6cc0434f9d44 serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting 556e827b0f63 serial: Create uart_xmit_advance() 903f7d322c17 net: sched: fix possible refcount leak in tc_new_tfilter() 0e8de8f54b04 net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD 67199c26a006 perf kcore_copy: Do not check /proc/modules is unchanged 80b2f37b3370 perf jit: Include program header in ELF files 95c5637d3d1f can: gs_usb: gs_can_open(): fix race dev->can.state condition 11ebf32fde46 netfilter: ebtables: fix memory leak when blob is malformed 6a3239f80682 net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs d12a1eb07003 net/sched: taprio: avoid disabling offload when it was never enabled 420c9b10737b of: mdio: Add of_node_put() when breaking out of for_each_xx d2ac2baf1fc4 i40e: Fix set max_tx_rate when it is lower than 1 Mbps 450d106804ff i40e: Fix VF set max MTU size 3daf09781982 iavf: Fix set max MTU size with port VLAN and jumbo frames bfaff9adaa89 iavf: Fix bad page state 9bf52411eeaa MIPS: Loongson32: Fix PHY-mode being left unspecified 405bd0ebb00c MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko 37f79374bba4 net: team: Unsync device addresses on ndo_stop 346e94aa4a99 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header b84fdb6be105 iavf: Fix cached head and tail value for iavf_get_tx_pending 721ea8ac063d netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() d0a24bc8e2aa netfilter: nf_conntrack_irc: Tighten matching on DCC message 0376a77fa7bc netfilter: nf_conntrack_sip: fix ct_sip_walk_headers c9355b7e5a6f arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma 312eb4574d16 arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz a52ef6ae2842 arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob 016b150992ee mm/slub: fix to return errno if kmalloc() fails cafb9cad9bcc efi: libstub: check Shim mode using MokSBStateRT 9599d4601941 ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop befadcf8f7f2 ALSA: hda/realtek: Add quirk for ASUS GA503R laptop b90ac48c0540 ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack 5f622518a7d0 ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack 8f8a740e9160 ALSA: hda/realtek: Re-arrange quirk table entries dafeac1226a4 ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 95b9a7f0bfbb ALSA: hda: add Intel 5 Series / 3400 PCI DID 7fff38ab90b8 ALSA: hda/tegra: set depop delay for tegra 78d3ae9bfad6 USB: serial: option: add Quectel RM520N 55f0f59e8227 USB: serial: option: add Quectel BG95 0x0203 composition 95b97afdde75 USB: core: Fix RST error in hub.c f5e322ffe7aa Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" 430c9bd664ec Revert "usb: add quirks for Lenovo OneLink+ Dock" 05ec31717feb usb: cdns3: fix issue with rearming ISO OUT endpoint 10c5d34f6f68 usb: gadget: udc-xilinx: replace memcpy with memcpy_toio ddf7bc221817 usb: add quirks for Lenovo OneLink+ Dock da8ac086943e tty: serial: atmel: Preserve previous USART mode if RS485 disabled e56a40281997 serial: atmel: remove redundant assignment in rs485_config 85a64208b319 tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data 9ad48cbf8b07 wifi: mac80211: Fix UAF in ieee80211_scan_rx() 9a3695bde9c7 usb: xhci-mtk: relax TT periodic bandwidth allocation 174645cc63c3 usb: xhci-mtk: allow multiple Start-Split in a microframe 6cfde07c5d8e usb: xhci-mtk: add some schedule error number 664b0b8f4efa usb: xhci-mtk: add a function to (un)load bandwidth info d1eed0d3fb8c usb: xhci-mtk: use @sch_tt to check whether need do TT schedule 1833e8e049d0 usb: xhci-mtk: add only one extra CS for FS/LS INTR 3826d4f0ef89 usb: xhci-mtk: get the microframe boundary for ESIT 4ccf7afa4729 usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop a5bdea59f43d usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() 67bf926f16b3 usb: dwc3: gadget: Refactor pullup() 24e4f6308d95 usb: dwc3: gadget: Prevent repeat pullup() 62b6cbc5983e usb: dwc3: Issue core soft reset before enabling run/stop e24f90d7617b usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind 85371aad2855 ALSA: hda/sigmatel: Fix unused variable warning for beep power change 07191f984842 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() 1878eaf0edb8 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 47c5ef29e52f mksysmap: Fix the mismatch of 'L0' symbols in System.map f0ebdfc10bd1 MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() c53c3cbca5ef afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked 1aea20f98ed3 net: usb: qmi_wwan: add Quectel RM520N 447f95d41397 ALSA: hda/tegra: Align BDL entry to 4KB boundary 9f55da12d05d ALSA: hda/sigmatel: Keep power up while beep is enabled 39265647c4a6 rxrpc: Fix calc of resend age cc273ed79e7c rxrpc: Fix local destruction being repeated da01ec04a0b0 regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() 17a21341d953 ASoC: nau8824: Fix semaphore unbalance at error paths 323f289a9044 iomap: iomap that extends beyond EOF should be marked dirty d88039e6fee4 MAINTAINERS: add Chandan as xfs maintainer for 5.4.y 36128fd71f03 cifs: don't send down the destination address to sendmsg for a SOCK_STREAM 81081a5c9c74 cifs: revalidate mapping when doing direct writes 834f4d856fda tracing: hold caller_addr to hardirq_{enable,disable}_ip 2c4e260d45fd task_stack, x86/cea: Force-inline stack helpers 4051324a6daf ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC 47d7e6af5bd4 parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() 2aae9b7d0723 drm/meson: Fix OSD1 RGB to YCbCr coefficient 5dd9cb66b712 drm/meson: Correct OSD1 global alpha value f1de50e1db99 gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx 82e276e5fcdc NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 e0e88c25f88b of: fdt: fix off-by-one error in unflatten_dt_nodes() 9f02aa34e179 Linux 5.4.214 c629ec4ddd4f tracefs: Only clobber mode/uid/gid on remount if asked fe26b6ca0404 soc: fsl: select FSL_GUTS driver for DPIO 1bd66f1053be net: dp83822: disable rx error interrupt c128bff9ff35 mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() bf3cd8f2c69b usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS 72b31dc26415 platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes 0573dc9f154a perf/arm_pmu_platform: fix tests for platform_get_irq() failure baba0cfc3df0 nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() 161e7555520b Input: iforce - add support for Boeder Force Feedback Wheel a725bc34d81a ieee802154: cc2520: add rc code in cc2520_tx() 2670d1d3f59c tg3: Disable tg3 device on system reboot to avoid triggering AER c118ae56a5fb hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message 3e89e8d1c634 HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo 7e214f5b2f34 drm/msm/rd: Fix FIFO-full deadlock (From OE-Core rev: 8cf29e02798b98ed8f5fe504cf5f10f63d491300) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Avoid accidental librdmacm linkageRichard Purdie2022-10-271-0/+1
| | | | | | | | | | | | | Avoid accidentally linking to the rdma library from the host by adding a PACKAGECONFIG for the option. This was found on new Fedora 36 autobuilder workers. (From OE-Core rev: aa9d0c2b777c10bb6c68b0232d54cbcd1af1493f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2a0f3cb225e4d5471155abbcd05d09bd6bf1620f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Add PACKAGECONFIG for rbdSteve Sakoman2022-10-271-0/+1
| | | | | | | | | | Avoid accidentally linking to the rbd library from the host by adding a PACKAGECONFIG for the option. (From OE-Core rev: bb32854dbe68335d834aaa80e42d6a524ea4e1b2) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Avoid accidental libvdeplug linkageSteve Sakoman2022-10-271-0/+1
| | | | | | | | | | | | | Avoid accidentally linking to the vde library from the host by adding a PACKAGECONFIG for the option. (From OE-Core rev: cc979908beec8a40a636d00a1fdcf2769358377f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8839e9540528b0b46c4fb4f95e508f038bcef8b9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* externalsrc: git submodule--helper list unsupportedJohn Edward Broadbent2022-10-271-9/+10
| | | | | | | | | | | | | | | | | | | | Git has removed support for "git submodule--helper list". https://github.com/git/git/commit/31955475d1c283120d5d84247eb3fd55d9f5fdd9 This change provides an alternate method for gathering the submodules information. Tested: Build recipes with and without submodules (From OE-Core rev: 6c50d83af0af677c2dff864ac40c580ae446372b) Signed-off-by: Carson Labrado <clabrado@google.com> Signed-off-by: John Edward Broadbent <jebr@google.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6d9364e5f3535954f65cbbc694ee7933ac1d664f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* uninative: Upgrade to 3.7 to work with glibc 2.36Michael Halstead2022-10-271-5/+5
| | | | | | | | | | | | Update uninative to work with the new glibc 2.36 version (From OE-Core rev: 1ca9b676175d7efc72185fed5b09aba40ac0f669) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 410226b053e14e32add1f9b4b811f84a1c445a7c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest: skip virgl test on ubuntu 22.04Steve Sakoman2022-10-271-0/+2
| | | | | | | | | This test will fail any time the host has libdrm > 2.4.107 (From OE-Core rev: 8f53bba4936b79dfe8dfa30216990b3d440150a7) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: upgrade 3.8.13 -> 3.8.14Tim Orling2022-10-272-138/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security and bug fixes. * Drop CVE-2021-28861.patch as it was merged in 3.8.14 release. Fixes: * CVE-2020-10735 https://nvd.nist.gov/vuln/detail/CVE-2020-10735 * CVE-2021-28861 https://nvd.nist.gov/vuln/detail/CVE-2021-28861 * CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 Python 3.8.14 Release Date: Sept. 6, 2022 This is a security release of Python 3.8 Note: The release you're looking at is Python 3.8.14, a security bugfix release for the legacy 3.8 series. Python 3.10 is now the latest feature release series of Python 3. Security content in this release CVE-2020-10735: converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees to avoid a potential crash of the interpreter. gh-90355: Fix ensurepip environment isolation for the subprocess running pip. gh-80254: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters. (From OE-Core rev: 25fafd35a4698daa0d4abb814a91601e68223128) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: CVE-2021-3750 hcd-ehci: DMA reentrancy issue leads to use-after-freeHitendra Prajapati2022-10-272-0/+181
| | | | | | | | | | | | | | | | Source: https://git.qemu.org/?p=qemu.git MR: 117886 Type: Security Fix Disposition: Backport from https://git.qemu.org/?p=qemu.git;a=commit;h=b9d383ab797f54ae5fa8746117770709921dc529 && https://git.qemu.org/?p=qemu.git;a=commit;h=3ab6fdc91b72e156da22848f0003ff4225690ced && https://git.qemu.org/?p=qemu.git;a=commit;h=58e74682baf4e1ad26b064d8c02e5bc99c75c5d9 ChangeID: 3af901d20ad8ff389468eda2c53b4943e3a77bb8 Description: CVE-2021-3750 QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free. (From OE-Core rev: 0f4b1db4fdc655e880ec66525eb7642978529e82) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcp: Fix CVE-2022-2928 & CVE-2022-2929Hitendra Prajapati2022-10-273-0/+162
| | | | | | | | | | | | | | | | | | | Source: https://downloads.isc.org/isc/dhcp MR: 122797, 122812 Type: Security Fix Disposition: Backport from https://downloads.isc.org/isc/dhcp/4.4.3-P1/patches/ ChangeID: 31490133cae8fc9c77073f9023955d3ff39c0b6e Description: Fixed CVEs: 1. CVE-2022-2928 2. CVE-2022-2929 (From OE-Core rev: 89d8ac907cbb5a0e214cb306a2d7bb4896165278) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: tests/fetch: Allow handling of a file:// url within a submoduleRichard Purdie2022-10-271-2/+2
| | | | | | | | | CVE-2022-39253 in git meant file:// urls within submodules were disabled. Add a parameter to the commands in the tests to allow this to continue to work. (Bitbake rev: 8ea8e443005ad92f4ad264d9abd9e90e33fb5c17) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dev-manual: fix reference to BitBake user manualMichael Opdenacker2022-10-111-1/+1
| | | | | | | | | | Fix a wrong reference no longer tolerated by Sphinx 5.x (missing "bitbake:" prefix) (From yocto-docs rev: 2359aff814f5faccffbf3cb2cd180979c248fc3c) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to dunfell head revisionyocto-3.1.20dunfell-23.0.20Richard Purdie2022-10-091-1/+1
| | | | | | (From OE-Core rev: dbad46a0079843b380cf3dda6008b12ab9526688) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* poky.conf: bump version for 3.1.20 releaseSteve Sakoman2022-10-051-1/+1
| | | | | | | (From meta-yocto rev: 56e2baf3d5d51a0491fb295b8a0bcacacdd1e2f9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* documentation: update for 3.1.20Steve Sakoman2022-10-051-5/+5
| | | | | | | (From yocto-docs rev: d2abea88ce793d2a31836cbffae096190dd54563) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* licenses: Handle newer SPDX license namesPaul Barker2022-10-051-0/+7
| | | | | | | | | | | | | | License names were updated in commit 2456f523cfbb (after the dunfell release) to match the current SPDX license list. We don't want to do any wholesale renaming on the dunfell stable branch but we should add mappings for the newer '*-only' names to allow for layers which support both dunfell and newer releases. (From OE-Core rev: 2a646cbdaca914e6f2c76ccb75065a811a9f94de) Signed-off-by: Paul Barker <paul.barker@sancloud.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: Fix CVEs 2022-2795, 2022-38177, 2022-38178Mathieu Dubois-Briand2022-10-054-0/+134
| | | | | | | | (From OE-Core rev: 9632481dc14868c0f92572472834a2a0c4f46e2e) Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* create-pull-request: don't switch the git remote protocol to git://Martin Jansa2022-09-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Many git repos prefer https:// nowadays and many removed support for git://. This breaks the script when using github.com even when selected remote is ssh (git@github.com:openembedded/...), it will re-write it to git:// before calling git pull-request causing: openembedded-core $ scripts/create-pull-request -u github -b jansa/artifacts -o pull-kernel NOTE: Assuming local branch HEAD, use -l to override. fatal: unable to connect to github.com: github.com[0: 140.82.121.3]: errno=Connection timed out warn: No match for commit ea003bd026aa24bb4c8b7562f44ed6512e921259 found at git://github.com/shr-distribution/oe-core warn: Are you sure you pushed 'jansa/artifacts' there? ERROR: git request-pull reported an error (From OE-Core rev: 7a08f2ae1c12e3511b409c4535d2eab83a27b64a) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 64c466920b808c35d1ac87b47cf438bc79becea7) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Add fix for CVE-2022-32190Shubham Kulkarni2022-09-305-0/+244
| | | | | | | | | | Link: https://github.com/golang/go/commit/28335508913a46e05ef0c04a18e8a1a6beb775ec (From OE-Core rev: 3362bbb1a1ce599418dc8377043f7549f9327315) Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-06 20:00:52 +0000