summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* libxcrypt: fix build with perl-5.38 and use master branchMartin Jansa2023-08-023-2/+117
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes do_configure failure: checking whether all ucontext.h functions are available... yes when is deprecated at libxcrypt/4.4.30-r0/git/build-aux/scripts/BuildCommon.pm line 522. Compilation failed in require at ../git/build-aux/scripts/expand-selected-hashes line 28. BEGIN failed--compilation aborted at ../git/build-aux/scripts/expand-selected-hashes line 28. configure: error: bad value 'all' for --enable-hashes NOTE: The following config.log files may provide further information. * with this patch backported it works OK: libxcrypt/4.4.30-r0/git $ perl build-aux/scripts/expand-selected-hashes usage: expand-selected-hashes hashes.conf names,of,selected,hashes * similarly do_compile failure: ../git/build-aux/scripts/move-if-change crypt-hashes.h.T crypt-hashes.h ../git/build-aux/scripts/move-if-change crypt-symbol-vers.h.T crypt-symbol-vers.h given is deprecated at ../git/build-aux/scripts/gen-crypt-h line 41. Makefile:3818: Makefile.deps: No such file or directory make: *** [Makefile:3715: crypt.h.stamp] Error 255 * also use master branch instead of develop, the SRCREV exists in both but stable metadata branches should track stable component branches libxcrypt/4.4.30-r0/git $ git branch -a --contains d7fe1ac04c326dba7e0440868889d1dccb41a175 | tee * develop remotes/origin/HEAD -> origin/develop remotes/origin/develop remotes/origin/master and oe-core master also uses master SRCBRANCH since: https://git.openembedded.org/openembedded-core/commit/?id=d18e89bd2b46c6e266cc39dbe9fdb6c032f5f1fe (From OE-Core rev: 54996f24243a10252d3aa70effc9c13db1d507f8) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* lttng-ust: upgrade 2.13.5 -> 2.13.6Wang Mingyu2023-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: =========== * Fix: segmentation fault on filter interpretation in "switch" mode * Fix: `ip` context is expressed as a base-10 field * Fix: c99: use __asm__ __volatile__ * Fix: c99: static assert: clang build fails due to multiple typedef * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time tracepoint.h is included * Fix: trace events in C++ constructors/destructors * Fix: trace events in C constructors/destructors * Fix: use unaligned pointer accesses for lttng_inline_memcpy (From OE-Core rev: 1361c8f4be21e41db74623dcacc92d8f02e6a2ee) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 656470b4b0db579308d218d1ece77bdacd168d14) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libksba: upgrade 1.6.3 -> 1.6.4Wang Mingyu2023-08-021-1/+1
| | | | | | | | | | | | Changelog: Correctly detect CMS write errors. (From OE-Core rev: 4bc2f5c3a46b76d152fda326f7c8227fe938b97e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0296cf63007542c1cb209a4288be1c82aa2ba843) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libassuan: upgrade 2.5.5 -> 2.5.6Wang Mingyu2023-08-021-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== * Fix logging of confidential data. [rA0fc31770fa] * Fix memory wiping. [T5977] * Fix macOS build problem. [T5440,T5610] * Upgrade autoconf stuff. (From OE-Core rev: a905094c4e7ff3475de657adcf7a0afcc132191a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 90126be6dc32170c08eb90223b6a6cc06c2133ce) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* diffutils: update 3.9 -> 3.10Alexander Kanavin2023-08-022-13/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | * Noteworthy changes in release 3.10 (2023-05-21) [stable] ** Bug fixes cmp/diff can again work with file dates past Y2K38 [bug introduced in 3.9] diff -D no longer fails to output #ifndef lines. [bug#61193 introduced in 3.9] Remove the comment addition from the patch body, as it increases likelyhood of rebase conflicts, and repeats what the commit says. (From OE-Core rev: ab9ae300ce3895cdf64d207b5dc281b65c984211) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 925155acc6922f7e9df2afa45e79ad1b2c57ba24) Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 21e40166870fadee986fb36be80019d3bcdb69e5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3: upgrade 3.10.9 -> 3.10.12Tim Orling2023-08-022-53/+2
| | | | | | | | | | | | | | | | | | | | | | | | Security and bugfix updates. * Drop cve-2023-24329.patch as it is merged in 3.10.12 CVE: CVE-2023-24329 Includes openssl 1.1.1u which addresses: CVE: CVE-2023-0286 CVE: CVE-2022-4304 CVE: CVE-2022-4203 https://docs.python.org/release/3.10.12/whatsnew/changelog.html#python-3-10-12-final https://docs.python.org/release/3.10.12/whatsnew/changelog.html#python-3-10-11-final https://docs.python.org/release/3.10.12/whatsnew/changelog.html#python-3-10-10-final License-Update: Update Copyright years to include 2023 (From OE-Core rev: 4df594dbc1b391afbe703f663fb2d5c9e9d35078) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* dmidecode: fix CVE-2023-30630Yogita Urade2023-08-025-0/+527
| | | | | | | | | | | | | | | | | | | | | Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. References: https://nvd.nist.gov/vuln/detail/CVE-2023-30630 https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00016.html https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00017.html Backport: fixes fuzz in the CVE-2023-30630_2.patch in kirkstone (From OE-Core rev: 4f83427a0a01e8285c9eb42d2a635d1ff7b23779) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit f92e59a0894145a828dc9ac74bf8c7a9355e0587) Signed-off-by: Dhairya Nagodra <dnagodra@cisco.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: fix CVE-2023-38408Archana Polampalli2023-08-025-0/+912
| | | | | | | | | | | | | | | | | | | | | | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. References: https://nvd.nist.gov/vuln/detail/CVE-2023-38408 Upstream patches: https://github.com/openssh/openssh-portable/commit/892506b13654301f69f9545f48213fc210e5c5cc https://github.com/openssh/openssh-portable/commit/1f2731f5d7a8f8a8385c6031667ed29072c0d92a https://github.com/openssh/openssh-portable/commit/29ef8a04866ca14688d5b7fed7b8b9deab851f77 https://github.com/openssh/openssh-portable/commit/099cdf59ce1e72f55d421c8445bf6321b3004755 (From OE-Core rev: 3c01159ab6a843fc922cf779b022c965d4ecd453) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libtiff: fix CVE-2023-26965 heap-based use after freeHitendra Prajapati2023-08-022-0/+98
| | | | | | | | | Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/ec8ef90c1f573c9eb1f17d6a056aa0015f184acf (From OE-Core rev: 9b9f88d8828ee822635ed645cc192829fecec39e) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* tiff: fix multiple CVEsHitendra Prajapati2023-08-023-0/+291
| | | | | | | | | | | Backport fixes for: * CVE-2023-25433 - Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/9c22495e5eeeae9e00a1596720c969656bb8d678 && https://gitlab.com/libtiff/libtiff/-/commit/688012dca2c39033aa2dc7bcea9796787cfd1b44 * CVE-2023-25434 & CVE-2023-25435 - Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/69818e2f2d246e6631ac2a2da692c3706b849c38 (From OE-Core rev: 01b9f7f7bb3eaecd6aa757fa090fcc4424788ce1) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: fix CVE-2023-29406 net/http insufficient sanitization of Host headerVivek Kumbhar2023-08-022-0/+211
| | | | | | | (From OE-Core rev: 5dc74138649ab7a2c0158a43225dc7a8fd732355) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* tiff: fix multiple CVEsHitendra Prajapati2023-08-022-0/+163
| | | | | | | | | | | | | | | | | | | | Bug-Debian: https://bugs.debian.org/1031632 Origin: https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 import from debian http://security.debian.org/debian-security/pool/updates/main/t/tiff/tiff_4.1.0+git191117-2~deb10u7.debian.tar.xz fix multiple CVEs: CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 (From OE-Core rev: 1a4e54d5b7b4d26b9fcdc2be1b115600ca71c9ea) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3: ignore CVE-2023-36632Peter Marko2023-08-021-0/+2
| | | | | | | | | | | | | | This CVE shouldn't have been filed as the "exploit" is described in the documentation as how the library behaves. (From OE-Core rev: 9665121fd9daf1174ec4045071b900de9195b11e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c652f094d86c4efb7ff99accba63b8169493ab18) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libjpeg-turbo: patch CVE-2023-2804Peter Marko2023-08-023-0/+180
| | | | | | | | | | | | | | Relevant links: * linked fronm NVD: * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1492586118 * follow-up analysis: * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1496473989 * picked commits fix all issues mentioned in this analysis (From OE-Core rev: ca8ede6d29c04159e85c2bdd2b635c58ec6a1484) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* package.bbclass: moving field data process before variable process in ↵Xiangyu Chen2023-07-261-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | process_pkgconfig Currently, the latest version abseil-cpp contains a new library named "absl_log_internal_format", it's basic package config(.pc file) as below: prefix=/usr exec_prefix=${prefix} ...... Requires: absl_config = 20230125, absl_core_headers = 20230125, absl_log_internal_append_truncated = 20230125, absl_log_internal_config = 20230125, absl_log_internal_globals = 20230125, absl_log_severity = 20230125, absl_strings = 20230125, absl_str_format = 20230125, absl_time = 20230125, absl_span = 20230125 ...... Normally, the process_pkgconfig() would process variable data before field data in a .pc file, but in the absl_log_internal_format, the field data in "Requires" section contains "xxxx = xxxx" format, the process_pkgconfig() treats them as normal variable and using the setVar() in bitbake's data_smart.py try to process. The absl_log_internal_format field data contains "_append_", this hit the setVar() checking and finally bitbake stop building and reporting an error as below: "Variable xxx contains an operation using the old override syntax. Please convert this layer/metadata before attempting to use with a newer bitbake." This patch move the field data process before variable process to avoid the process_pkgconfig() treat the field data as variable. (From OE-Core rev: e7d3e02a624f7ce23d012bb11ad1df2049066b37) Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> (cherry picked from commit a73e269d3e591a10bb397b94b82e3fb960112d33) Signed-off-by: Clément Péron <peron.clem@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc-testsuite: Fix ppc cpu specificationRichard Purdie2023-07-261-2/+3
| | | | | | | | | | | | | | | | | After this change in qemu: https://gitlab.com/qemu-project/qemu/-/commit/c7e89de13224c1e6409152602ac760ac91f606b4 there is no 'max' cpu model on ppc. Drop it to clean up ppc gcc testsuite failures. In order for this to work we do need to pull in the alternative cpu option from QEMU_EXTRAOPTIONS on powerpc. (From OE-Core rev: 3a1b9f300a796e1216d0094043dba7b0f39ec869) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c447f2b21b20fb2b1829d540af2cc0bf8242700c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* machine/arch-arm64: add -mbranch-protection=standardRoss Burton2023-07-261-0/+5
| | | | | | | | | | | | | | Enable branch protection (PAC/BTI) for all aarch64 builds. This was previously enabled at a global level in the GCC build, but that breaks the gcc test suite. (From OE-Core rev: a1119750e9b3b9fae4fa9698d2ea3710a5a73768) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8905639d1cdc5ce809cc5ecd9672f5e86bf8a579) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc: don't pass --enable-standard-branch-protectionRoss Burton2023-07-261-1/+0
| | | | | | | | | | | | | | | | | | | | | | By changing the default code generation of GCC we're inadvertently breaking the GCC test suite, which has ~120K+ more failures when run for aarch64 compared to x86-64. This was because the generated code fragments included the BTI instructions, which the test case wasn't expecting. We can't tell the tests globally to run without branch protection, as that will break the tests which also turn it on. Remove the enabling of branch protection by standard in GCC, we'll enable it in the tune files instead. (From OE-Core rev: 759327cf6bd79118bae0c68e63742ae4721471d8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bb4b9017db6a893ed054a2d2ad4cc671dec09c42) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.15: update to v5.15.120Bruce Ashfield2023-07-263-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: d54cfc420586 Linux 5.15.120 c06edf13f4cf nubus: Partially revert proc_create_single_data() conversion 6e65fa33edf5 parisc: Delete redundant register definitions in <asm/assembly.h> b4d8f8900021 drm/amdgpu: Validate VM ioctl flags. 26eb191bf5a0 scripts/tags.sh: Resolve gtags empty index generation 989b4a753c7e perf symbols: Symbol lookup with kcore can fail if multiple segments match stext 87f51cf60e3e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" 6a28f3490d3d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. 67ce7724637c HID: wacom: Use ktime_t rather than int when dealing with timestamps 347732317749 bpf: ensure main program has an extable d874cf9799a9 can: isotp: isotp_sendmsg(): fix return error fix on TX path 27d03d15bb8b x86/smp: Use dedicated cache-line for mwait_play_dead() d6c745ca4fc5 x86/microcode/AMD: Load late on both threads too 9052349685e9 drm/amdgpu: Set vmbo destroy after pt bo is created 796481bedc3e mm, hwpoison: when copy-on-write hits poison, take page offline 6713b8f11aa0 mm, hwpoison: try to recover from copy-on write faults b46021ab8304 mptcp: consolidate fallback and non fallback state machine 42ff95b4bd11 mptcp: fix possible divide by zero in recvmsg() (From OE-Core rev: ab60a67c3effda6364fadcf78edf7792c75bff19) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 51c474534c27ac0739a6373595a49ebbc52c3715) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.15: update to v5.15.119Bruce Ashfield2023-07-263-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 4af60700a60c Linux 5.15.119 10fbd2e04e40 act_mirred: remove unneded merge conflict markers 2230b3f874d9 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle 907a069ec38f x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys 7949f83f7ecc vhost_net: revert upend_idx only on retriable error fdac0aa4a175 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl f012d3037c15 drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl a44b4230d2ba drm/exynos: vidi: fix a wrong error return 79b4125bce96 ARM: dts: Fix erroneous ADS touchscreen polarities 9684c4fdeeca s390/purgatory: disable branch profiling 3c4d87e9fa8a ASoC: nau8824: Add quirk to active-high jack-detect d77eac1b14e0 soundwire: dmi-quirks: add new mapping for HP Spectre x360 53ad4af4ec90 ASoC: simple-card: Add missing of_node_put() in case of error bb45dc7b67c5 spi: lpspi: disable lpspi module irq in DMA mode f8d9d8f1727d s390/cio: unregister device when the only path is gone e10d15fdfced Input: soc_button_array - add invalid acpi_index DMI quirk handling 26bde09a1512 nvme: double KA polling frequency to avoid KATO with TBKAS on e3bbc148377d usb: gadget: udc: fix NULL dereference in remove() cce681383d34 nfcsim.c: Fix error checking for debugfs_create_dir 8a5ddd1430d4 media: cec: core: don't set last_initiator if tx in progress 01cf989090da arm64: Add missing Set/Way CMO encodings f97b16c0a538 HID: wacom: Add error check to wacom_parse_and_register() e8bdb1f88699 scsi: target: iscsi: Prevent login threads from racing between each other 1cc379d53b66 gpio: sifive: add missing check for platform_get_irq 497d40140865 gpiolib: Fix GPIO chip IRQ initialization restriction 7973c4b3b97d gpio: Allow per-parent interrupt data c1a2b52d999e sch_netem: acquire qdisc lock in netem_change() 3138c85031e8 selftests: forwarding: Fix race condition in mirror installation b7db41a86541 bpf/btf: Accept function names that contain dots 0f8d81254fd6 Revert "net: phy: dp83867: perform soft reset and retain established link" 57130334da4e netfilter: nfnetlink_osf: fix module autoload 53defc6ecff4 netfilter: nf_tables: disallow updates of anonymous sets 2f2f9eaa6da1 netfilter: nf_tables: reject unbound chain set before commit phase 2938e7d582d7 netfilter: nf_tables: reject unbound anonymous set before commit phase baa3ec1b31f5 netfilter: nf_tables: disallow element updates of bound anonymous sets 45eb6944d0f5 netfilter: nft_set_pipapo: .walk does not deal with generations 4004f12aaca8 netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain 314a8697d080 netfilter: nf_tables: fix chain binding transaction logic 1328e8d4c3ee be2net: Extend xmit workaround to BE3 chip 768f94c5f639 net: dsa: mt7530: fix handling of BPDUs on MT7530 switch aa528e7d379f net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch efea112a87b6 ipvs: align inner_mac_header for encapsulation 24d7d9aee03d mmc: usdhi60rol0: fix deferred probing d1e08bed0307 mmc: sh_mmcif: fix deferred probing 34c4906b9a06 mmc: sdhci-acpi: fix deferred probing 41f1e8dab08d mmc: owl: fix deferred probing b86ca9e08ca9 mmc: omap_hsmmc: fix deferred probing 445a9568dec1 mmc: omap: fix deferred probing 840deb8d1418 mmc: mvsdio: fix deferred probing 92f73c4f927c mmc: mtk-sd: fix deferred probing aedecd013d2c net: qca_spi: Avoid high load if QCA7000 is not available 156dd06fb337 xfrm: Linearize the skb after offloading if needed. d967bd7ea6cc selftests: net: fcnal-test: check if FIPS mode is enabled 964cfdfd4b4f xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets 25e89fa7b5a8 bpf: Fix verifier id tracking of scalars on spill 0b180495f6b0 bpf: track immediate values written to stack by BPF_ST instruction 3229a29e95f5 xfrm: Ensure policies always checked on XFRM-I input path d055ee18cab8 xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c 491ce3c1d98a xfrm: Treat already-verified secpath entries as optional 0ce3d0c068d9 ieee802154: hwsim: Fix possible memory leaks 29672dc47d99 mmc: meson-gx: fix deferred probing 9bac4a2b7326 memfd: check for non-NULL file_seals in memfd_create() syscall 103734b429b9 x86/mm: Avoid using set_pgd() outside of real PGD pages 793d0224bb60 nilfs2: prevent general protection fault in nilfs_clear_dirty_page() 96987c383c2b io_uring/net: disable partial retries for recvmsg with cmsg 25a543ca3005 io_uring/net: clear msg_controllen on partial sendmsg retry 34a7e5021a43 io_uring/net: save msghdr->msg_control for retries b07bb2914ada writeback: fix dereferencing NULL mapping->host on writeback_page_template 3c46a240ddba regmap: spi-avmm: Fix regmap_bus max_raw_write 4796d9b06917 regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK ba9952e2f50b ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN acee272283f4 mmc: mmci: stm32: fix max busy timeout calculation 999173f295cc mmc: meson-gx: remove redundant mmc_request_done() call from irq context 00010b52c705 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 4a557910bbed cgroup: Do not corrupt task iteration when rebinding subsystem 815b24401165 PCI: hv: Add a per-bus mutex state_lock 34e21b8ff3e6 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic 7d852ca7af37 PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev 5e0d33cc7813 Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" ac0df91c7d98 PCI: hv: Fix a race condition bug in hv_pci_query_relations() 80c5d97b4aa1 Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs 4d31eb2e266c Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails 953dd7e2df81 KVM: Avoid illegal stage2 mapping on invalid memory slot 1d6c93206839 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() b12011cea56b nilfs2: fix buffer corruption due to concurrent device reads 485f6be2549c selftests: mptcp: join: skip check if MIB counter not supported 64cb73ea77ab selftests: mptcp: join: use 'iptables-legacy' if available 979a941d7ed3 selftests: mptcp: pm nl: remove hardcoded default limits ac65930751c4 selftests/mount_setattr: fix redefine struct mount_attr build error 726d033133e7 selftests: mptcp: lib: skip if not below kernel version b28fc26683b4 selftests: mptcp: lib: skip if missing symbol 024a24e5d4dd tick/common: Align tick period during sched_timer setup 3c1aa91b37f9 drm/amd/display: Add wrapper to call planes and stream update eea850c025b5 drm/amd/display: Use dc_update_planes_and_stream fb7c68bbccad drm/amd/display: Add minimal pipe split transition state b5f0e898f674 tpm, tpm_tis: Claim locality in interrupt handler 39e787253720 tracing: Add tracing_reset_all_online_cpus_unlocked() function 5a24be76af79 drm/amd/display: fix the system hang while disable PSR (From OE-Core rev: c76f1027756cc83d81b43522a1601b5fda972f86) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 8ecf81b1960ab1001efe41cb3d132accf985e3dc) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2023-36664Archana Polampalli2023-07-263-0/+208
| | | | | | | | | | | | | | | | | Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-36664 Upstream patches: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5e65eeae225c7d02d447de5abaf4a8e6d234fcea https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=fb342fdb60391073a69147cb71af1ac416a81099 (From OE-Core rev: cd3921215cb782ecc9aeda5bb3b76863911bcb61) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: backport Debian patch to fix CVE-2023-0330Vijay Anusuri2023-07-262-0/+76
| | | | | | | | | | | | | import patch from ubuntu to fix CVE-2023-0330 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/qemu/tree/debian/patches?h=ubuntu/jammy-security Upstream commit https://gitlab.com/qemu-project/qemu/-/commit/b987718bbb1d0eabf95499b976212dd5f0120d75] (From OE-Core rev: aae5bf06ad3c67386544f9da55aa21fbf32c3418) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ref-manual: release-process: update for LTS releasesMichael Opdenacker2023-07-212-22/+1800
| | | | | | | (From yocto-docs rev: 145488ac9ee4ad5efb0966f07ff5e7ff804f6562) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ref-manual: add LTS and Mixin termsMichael Opdenacker2023-07-211-0/+12
| | | | | | | (From yocto-docs rev: f9ce60e2a035f3921901d2c6633df6e302cad1c7) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* migration-guides: add release notes for 4.0.11Lee Chee Yang2023-07-212-0/+215
| | | | | | | | (From yocto-docs rev: 96575a0c06d206400a5efde2ec2ddcda54a43105) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* docs: ref-manual: terms: fix typos in SPDX termQuentin Schulz2023-07-211-2/+2
| | | | | | | | | | Fixes: 2c53ac40e99a ("ref-manual: terms.rst: add SBOM and SPDX terms") Cc: Quentin Schulz <foss+yocto@0leil.net> (From yocto-docs rev: aaa554381a46c66d7708967c65893992760aa5fe) Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cmake: Fix CMAKE_SYSTEM_PROCESSOR setting for SDKTom Hochstein2023-07-211-4/+1
| | | | | | | | | | | | | | | | When building using an SDK, cmake complains that the target architecture 'cortexa53-crypto' is unknown. The same build in bitbake uses the target architecture 'aarch64'. Set CMAKE_SYSTEM_PROCESSOR the same as for bitbake. (From OE-Core rev: d877d5f07772ec4a05332068ddc03cf387313036) Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d32a6225eefce2073a1cd401034b5b4c68351bfe) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wic: Add dependencies for erofs-utilsHeiko Thole2023-07-213-2/+3
| | | | | | | | | In order to build erofs filesystems, wic must have the erofs-utils package installed into its sysroot. (From OE-Core rev: c349c7fcb299b123824da9a13ee58222a6cbf9ec) Signed-off-by: Heiko Thole <heiko.thole@entwicklung.eq-3.de> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sysfsutils: fetch a supported fork from githubAlexander Kanavin2023-07-211-7/+3
| | | | | | | | | | | | | Debian does the same: https://packages.debian.org/source/sid/sysfsutils (From OE-Core rev: 9f35ca9d9ed4be4d27318230f4ae42c4885d1f0c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 504b2f590cb94b217c5f48090cfb71a749bd5ac8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* unzip: fix configure check for cross compilationChen Qi2023-07-212-0/+104
| | | | | | | | | | | | | | The original configure runs a generated binary to determine features. This is not correct for cross compilation. So change the runtime tests into compile-time tests to fix the issue. (From OE-Core rev: 7d99f3a9a2a74fe2e8753b00553f07f305d14c87) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b9aca339b59238988c48b90ea5019bfc939ba4b3) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* zip: fix configure check by using _Static_assertChen Qi2023-07-212-0/+97
| | | | | | | | | | | | | | | It's incorrect to run a cross-compiled program on build machine to check if some feature is available or not. As these two checks in zip are basically just checking the size, we can use _Static_assert and sizeof to do such check at compile time. (From OE-Core rev: 6f5986fb520ab89b0950d3e0fa8492de4de7798f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dda778d855b1838ae3004a9af310724b913490b4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sdk.py: fix moving dnf contentsChen Qi2023-07-211-1/+2
| | | | | | | | | | | | The dnf contents should be moved to <host_sysroot>/etc/dnf/xxx instead of just <host_sysroot>/etc. (From OE-Core rev: 006ff31ddad4c53c63adf1dacecbf2783404a546) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 74b78d160a985e98f869c777847ab798e419dd2d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sdk.py: error out when moving file failsChen Qi2023-07-211-1/+1
| | | | | | | | | | | | Instead of printing an error message and continuing, we should just error out when moving file fails. (From OE-Core rev: 4ed94fef70df05c874cf0c68dcc95c5636687825) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 12aecd9da94b5f27041982c661e8bab316d365d4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bitbake.conf: add unzstd in HOSTTOOLSAlberto Planas2023-07-211-1/+1
| | | | | | | | | | | | | | | | | | rpm2cpio.sh can make calls to unzstd to uncompress the RPM payload that conform the cpio file. zstd is already part of HOSTTOOLS, as a link to the system installed zstd. This patch add unzstd in HOSTOOLS list as a non-optional binary, so is available to rpm2cpio.sh when it is required. (From OE-Core rev: 5cee002e34d16e9d82045d3e8e3931ba046403d2) Signed-off-by: Alberto Planas <aplanas@suse.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bff58d337890e804d33d7decbaa46065a4d3bba4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* rust-llvm: backport a fix for build with gcc-13Alexander Sverdlin2023-07-212-1/+35
| | | | | | | | | | | * needed for rust-llvm-native on hosts with gcc-13 Based on commit 3382759cb6c5 ("llvm: backport a fix for build with gcc-13") (From OE-Core rev: d6684a9c9f713ad30442a2a036ff86b534585400) Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* systemd: Backport nspawn: make sure host root can write to the uidmapped ↵Marek Vasut2023-07-212-0/+217
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mounts we prepare for the container payload Backport fix for systemd nspawn uidmap handling from systemd v253 . Without this, attempt to start mkosi generated debian stable 12 container would ultimately fail (per "$ strace -ff") with: " symlinkat("usr/lib/aarch64-linux-gnu", 8, "lib64") = -1 EOVERFLOW (Value too large for defined data type) " Command to generate test container: " mkosi --distribution debian --release stable --architecture arm64 \ --cache-dir /home/oe/cache/ --format tar --compress-output xz \ --output-dir /home/oe/output/ --checksum 1 --root-password root \ --package systemd --package udev --package dbus " Command to import test container and start it, which triggers the failure: " $ machinectl pull-tar http://192.168.1.300/image.tar.xz default $ machinectl read-only default false $ rm -f /var/lib/machines/default/etc/machine-id $ dbus-uuidgen --ensure=/var/lib/machines/default/etc/machine-id $ machinectl start default " Minimal command to trigger the failure once container is imported: " $ strace -ff systemd-nspawn --keep-unit --boot --link-journal=try-guest --network-veth -U --settings=override --machine=default " Extracted from systemd MR: https://github.com/systemd/systemd/pull/22774 Further explanation by Christian Brauner at second half of: https://github.com/systemd/systemd/issues/20989 (From OE-Core rev: 6d190eb0caadcb95c5325ede32164a645abb61f3) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* pybootchartgui: show elapsed time for each taskMauro Queiros2023-07-211-0/+5
| | | | | | | | | | | | | | | | | | Currently, finding the elapsed time of each task in buildtimes.svg is a manual effort of checking the top axis and finding and subtracting the end and start time of the task. This change adds the elapsed time for each task, so that manual effort of comparing start/end time is avoided. (From OE-Core rev: b2678422b411ccbd19a7b198c872b92077567391) Signed-off-by: Mauro Queiros <Mauro.Queiros@criticaltechworks.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3efebd3404de548f0757863da237f2d18ce60013) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* logrotate: Do not create logrotate.status fileJermain Horsman2023-07-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | The first time logrotate runs it reports an error: error: state file /var/lib/logrotate.status is world-readable and thus can be locked from other unprivileged users. Skipping lock acquisition... This check was added with https://github.com/logrotate/logrotate/commit/1f76a381e2caa0603ae3dbc51ed0f1aa0d6658b9 This error is only reported once as logrotate removes the world-readable permissions if this happens. Since logrotate creates this file if it does not exist, there should be no need to install it in the first place. (From OE-Core rev: fbfd62ac655cf00b8f7c8fc832ce7434ad4966a3) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8169cd2d18f1569e4357f082adbef492710e8c36) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libpng: Add ptest for libpngNikhil R2023-07-213-2/+44
| | | | | | | | | | | | | | | | | | | | | | | libpng is a platform-independent library which supports all PNG features. This ptest executes the below binaries, parses the png image and prints the image features. 1. pngfix - provides information about PNG image copyrights details. 2. pngtest - tests, optimizes and optionally fixes the zlib header in PNG files. 3. pngstest - verifies the integrity of PNG image by dumping chunk level information. 4. timepng - provides details about PNG image chunks. (From OE-Core rev: 2d58b38185ca7eed5d885b8d00ca549b57138554) Signed-off-by: Nikhil R <nikhil.r@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest/reproducible: Allow chose the package managerJose Quaresma2023-07-211-1/+5
| | | | | | | | | | | | This is a follow-up of 76e5fcb2 that also allow users to chose the package manager using OEQA_REPRODUCIBLE_TEST_PACKAGE (From OE-Core rev: 4402b746f49611abe71719dd1d174de79bb030bb) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3d414d85b44077bac57aba36707b0fc699a73e97) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest reproducible.py: support different build targetsMikko Rapeli2023-07-211-2/+6
| | | | | | | | | | | | | | | | | | Allow users to set different build reproducibility targets than the defaults using OEQA_REPRODUCIBLE_TEST_TARGET and OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS variables in local.conf. Fixing all issues from "world" builds is not possible in some complex build environments with lots of layers. Limiting the focus to a smaller subset allows using this test to detect and fix build reproduction issues incrementally. (From OE-Core rev: 3b82a7d74995c0670a6914c58b3d7c42327b8ee9) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit c66bebbce5995e386a1a4d055a914a39b6ee518d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* vim: upgrade 9.0.1527 -> 9.0.1592Trevor Gamblin2023-07-211-2/+2
| | | | | | | | | | | | | | | | | Fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-2609 d1ae836 patch 9.0.1531: crash when register contents ends up being invalid https://nvd.nist.gov/vuln/detail/CVE-2023-2610 ab9a2d8 patch 9.0.1532: crash when expanding "~" in substitute causes very long text (From OE-Core rev: a71153cb0a509456dd36466ac15a603f953eb6b8) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1e4b4dfb4145bc00eb6937b5f54a41170e9a5b4c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wireless-regdb: upgrade 2023.02.13 -> 2023.05.03Alexander Kanavin2023-07-211-1/+1
| | | | | | | | | (From OE-Core rev: 1eebdfba70ceaa8d73ab46c3131d022e53245eaa) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 47438402fa430499864a4b1f1a13eaac66aa21c0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: upgrade 20230404 -> 20230515Alexander Kanavin2023-07-211-2/+2
| | | | | | | | | | | License-Update: additional firmwares (From OE-Core rev: 8ac5ebfa83c3e1f5effca5154b771b2f2bed607d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 64603f602d00999220fe5bafeed996ddcb56d36b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wget: upgrade 1.21.3 -> 1.21.4Alexander Kanavin2023-07-212-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Stable version release Noteworthy changes in release 1.21.4 (2023-05-11) ** Document --retry-on-host-error in help text ** Increase read buffer size to 64k. This should speed up downloads on gigabit and faster connections ** Update deprecated option '--html-extension' to '--adjust-extension' in documentation ** Update gnulib compatibility layer. Fixes HSTS test failures on i686. (Thanks to Andreas Enge for ponting it out) License-Update: copyright years (From OE-Core rev: 024feac4827dc847ba83a64de82cef524156a9ea) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 67ec2d5bab891cb92af9ca32304a4927daf51ed0) Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 4e7ec4bef86c79b4221a800ace700c58ce033de1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* serf: upgrade 1.3.9 -> 1.3.10Alexander Kanavin2023-07-215-92/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Apache Serf 1.3.10 [2023-05-31, from tags/1.3.10, r1910048] Support for OpenSSL 3 (r1901937, ...) Fix issue #171: Win32: Running tests fails with "no OPENSSL_Applink" error Fix issue #194: Win32: Linking error when building against OpenSSL 1.1+ Fix issue #198: OpenSSL BIO control method incorrectly handles unknown requests Fix issue #202: SSL tests are not passing with OpenSSL 3 Fix error handling when reading the outgoing request body (r1804534, ...) Fix handling of invalid chunk lengths in the dechunk bucket (r1804005, ...) Fix an endless loop in the deflate bucket with truncated input (r1805301) Fix BIO control handlers to support BIO_CTRL_EOF (r1902208) Fix a CRT mismatch issue caused by using certain OpenSSL functions (r1909252) Build changes to support VS2017, VS2019 and VS2022 (r1712131, ...) Build changes to support Python 3 (r1875933) As serf is undead, we need to reassess all the remaining patches. (From OE-Core rev: 275c6b7ac72330e14ba55907e8494314b63a9adf) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 775cbcc876edcb6c339f342a3253f5afcf6ef163) Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 17a46eee905f0ecfdbebb014533848dc7e906ec7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* tzdata: upgrade to 2023cRoss Burton2023-07-213-306/+3
| | | | | | | | | | | Drop a backport patch as it is now integrated. (From OE-Core rev: 134bac52904722cd63fde07f5784c0cca3fbcb05) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 80d26d1da47dcd9213a7083d9493a7bce0897a57) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libwebp: Fix CVE-2023-1999Soumya2023-07-212-1/+63
| | | | | | | | | | | | | | | | | | | There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-1999 Upstream patch: https://github.com/webmproject/libwebp/commit/a486d800b60d0af4cc0836bf7ed8f21e12974129 (From OE-Core rev: a5d0f8734ca643c25f0952387b38edf8ffd70525) Signed-off-by: Soumya <soumya.sambu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: Added CVE-2023-28320 Follow-up patchVivek Kumbhar2023-07-212-0/+198
| | | | | | | | | | | Introduced by: https://github.com/curl/curl/commit/3c49b405de4fbf1fd7127f91908261268640e54f (curl-7_9_8) Fixed by: https://github.com/curl/curl/commit/13718030ad4b3209a7583b4f27f683cd3a6fa5f2 (curl-8_1_0) Follow-up: https://github.com/curl/curl/commit/f446258f0269a62289cca0210157cb8558d0edc3 (curl-8_1_0) (From OE-Core rev: f19c20c429395c1b4c62a6e0388ef51b830871c5) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libx11: Fix CVE-2023-3138 for kirkstone branchPoonam Jadhav2023-07-212-0/+112
| | | | | | | | | | | Add patch to fix CVE-2023-3138 for kirkstone branch Link: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c.patch (From OE-Core rev: 5491531d4681d3df5a34ebc180e29a8bf4e09e67) Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-09 08:54:57 +0000