summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* maintainers.inc: Fix email address typoRichard Purdie2023-05-301-1/+1
| | | | | | | | (From OE-Core rev: c8837fecf62cbd103103c66c576dac55301cdc1a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2a86ca028980b501e386f6bb8293a094fd77f97b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* systemd-systemctl: fix instance template WantedBy symlink constructionMartin Siegumfeldt2023-05-301-3/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix issue of the below instance template systemd service dependency [Install] WantedBy=svc-wants@%i.service creating the symlink (instance "a" example) /etc/systemd/system/svc-wants@%i.service.wants/svc-wanted-by@a.service which should be /etc/systemd/system/svc-wants@a.service.wants/svc-wanted-by@a.service as implemented by this change. The functionality appears regressed just after "thud" baseline when the logic was refactored from shell script into python (commit 925e30cb104ece7bfa48b78144e758a46dc9ec3f) (From OE-Core rev: 308397f0bb3d6f3d4e9ec2c6a10823184049c9b5) (From OE-Core rev: e572d096e81bb7dba8a07ee9dba93d0944857212) Signed-off-by: Martin Siegumfeldt <mns@gomspace.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 372b29c8ad270d4d430c26a4e614976c7029afaf) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* p11-kit: add native to BBCLASSEXTENDJan Luebbe2023-05-301-1/+1
| | | | | | | | | | | | This recipe is needed to build softhsm (in meta-oe) in with p11-kit support, which is useful when multiple PKCS#11 modules need to be used. (From OE-Core rev: 19498bea309f19d841187a7063286b2a68ce2587) Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4942a42d5a071b283fe49047dcb4fee2c96422e8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* avahi: fix D-Bus introspectionEero Aaltonen2023-05-301-2/+1
| | | | | | | | | | | | Install and package the D-Bus introspection files. (From OE-Core rev: 45714f9ea8bde1c8047d493667b1a1d808ea7949) Signed-off-by: Eero Aaltonen <eero.aaltonen@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit b8183ad25af3bcf23f04dd649b6ef665569fac8c) Signed-off-by: Eero Aaltonen <eero.aaltonen@vaisala.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* nghttp2: Deleted the entries for -client and -server, and removed a ↵leimaohui2023-05-301-4/+2
| | | | | | | | | | | | | | | | | | | dependency on them from the main package. By default there is nothing in nghttp2-client and nghttp2-server ,nghttp2-client and nghttp2-server aren't created. So there are dependences error if install main package. Problem: conflicting requests - nothing provides nghttp2-client >= 1.52.0 needed by nghttp2-1.52.0-r0.core2_64 - nothing provides nghttp2-server >= 1.52.0 needed by nghttp2-1.52.0-r0.core2_64 Upstream-Status: Backport [OE-core d2cbe060955c598bd81923ecd554fbe82c17af99] (From OE-Core rev: 619a643f71eceab73bbbe4dacd1eb42b6d6b01d1) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: backport a fix for build with gcc-13Martin Jansa2023-05-302-0/+32
| | | | | | | | | * needed for llvm-native on hosts with gcc-13 (From OE-Core rev: 3382759cb6c5cee42151e72fd94e99a3060317f5) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc-runtime: Use static dummy libstdc++Khem Raj2023-05-301-1/+2
| | | | | | | | | | | | | some standalone targets e.g. riscv64-elf disable shared linking for baremetal ELF ABI in ld, therefore lets make it a static library (From OE-Core rev: 3c6219dfcbcbde314648ba8cc54a90b32ea1c952) (From OE-Core rev: 4ee9d5839669560ec10f23445fa8bbc03a4c5406) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cpio: Fix wrong CRC with ASCII CRC for large filesMarek Vasut2023-05-302-0/+40
| | | | | | | | | | | | | | | | Due to signedness, the checksum is not computed when filesize is bigger a 2GB. Pick a fix for this problem from CPIO ML, where the fix has been posted for 5 years. Since CPIO upstream is effectively unresponsive and any and all attempts to communicate with the maintainer and get the fix applied upstream failed, add the fix here instead. (From OE-Core rev: bfff138af4bdd356ac66571e6ad91c1a5599b935) (From OE-Core rev: 8320097487cc46045482f5d0d41ad799a2435bce) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* waffle: upgrade 1.7.0 -> 1.7.2Upgrade Helper2023-05-303-27/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Waffle bugfix release 1.7.1 is now available. What is new in this release: - cmake: pass deps' cflags to the build - gbm: fix crash when platform lacks modifier support - gitlab-ci: stabilise CI runs under X - gitlab-ci: add more warnings, make all warnings fatal - gitlab-ci: update to bullseye - meson: add override_* support, when using waffle as submodule - meson: skip installing bash completion when custom prefix is used - meson: silence deprecation warnings - meson: generate cmake files only on Windows - meson: find wayland.xml from wayland-scanner.pc - misc: zsh completion - misc: fix dozens of compiler warnings - misc: update website references - wayland: fix build against wayland 1.20 The Waffle bugfix release 1.7.2 is now available. What is new in this release: - all: use format(gnu_printf), enable in mingw - meson: don't run TLS checks on mingw - wgl: remove unused dummy wgl_error.[ch] Upstream now only generates CMake files on Windows, so remove all references to CMake. A zsh completion is now installed, remove this for now as we don't really use zsh. (From OE-Core rev: 6b1d94fe5d8728e3eb152426cde08634d248e1f7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 94cf6ef11bba381ab6f65b03ed1ed14022438151) Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit e4ebfb5c7892488fc834d9837e9a5a4c28eb676f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gstreamer1.0: upgrade 1.20.5 -> 1.20.6Pablo Saavedra2023-05-3012-312/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== audio: channel-mix: allow up to 64 channels instead of up to 63 channels AOM AV1 encoder timestamp handling improvements AV1 video codec caps handling improvements in aom plugin, isomp4 and matroska muxers/demuxers. avvidenc: fix bitrate control and timestamps off FFmpeg-based video encoders h264parse: fix missing timestamps on outputs when splitting a frame rtspsrc: more workarounds for servers with broken control uri handling playbin3: fix issue with UDP streams, making sure there's enough buffering qmlglsrc: Fix deadlock when stopping and some other fixes qtmux: fix default timescale unit for N/1001 framerates v4l2h264dec: Fix Raspberry Pi4 will not play video in application vtdec: Fix non-deterministic frame output after seeks wasapi2src: Fix loopback capture on Windows 10 Anniversary Update macOS, iOS: Fix Xcode 14 ABI breakage with older Xcode cerbero: Fix some regressions for CentOS in the 1.20 branch cerbero: Fix setuptools site.py breakage in Python 3.11 Fix gst-libav build against FFmpeg from git gobject-introspection annotation fixes for bindings Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements Performance improvements (From OE-Core rev: 102c453668f71dd30c3f0f13502f0993a051d7fe) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: fix CVE-2023-24540Sakib Sajal2023-05-302-0/+94
| | | | | | | | | | | | | References: https://nvd.nist.gov/vuln/detail/CVE-2023-24540 Upstream patch: https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797 (go 1.19.9) (From OE-Core rev: 5defed7d5dc8bc6f68f021d19c4f42832d33472b) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: ignore CVE-2023-25815Archana Polampalli2023-05-301-0/+2
| | | | | | | | | This is specific to Git-for-Windows. (From OE-Core rev: 472a3e05270deace2862973dee2e65e60f9c0c19) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to kirkstone head revisionyocto-4.0.10kirkstone-4.0.10Steve Sakoman2023-05-121-1/+1
| | | | | | (From OE-Core rev: d2713785f9cd2d58731df877bc8b7bcc71b6c8e6) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: bump version for 4.0.10Steve Sakoman2023-05-121-1/+1
| | | | | | (From meta-yocto rev: 4f81a08e7b655968266211cfc943085a69865a90) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* update-alternatives.bbclass: fix old override syntaxPeter Bergin2023-05-121-2/+2
| | | | | | | | | | | | | | | | Function 'gen_updatealternativesvardeps' still used old override syntax when fetching variable flags. Update to use ':' instead to match recipe meta data. This was found by review and no real issue encountered but it is a bug that affects variable dependencies and can affect rebuilds as task hashes might not be accurate. (From OE-Core rev: d5fd577c066fa2fddbd16c286f2dde2883cc7828) Signed-off-by: Peter Bergin <peter.bergin@windriver.com> Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5691f554b2cd50f256a8cbb1d96781e9eb6b930e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel: improve initramfs bundle processing timeBruce Ashfield2023-05-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a partial fix for bugzilla 15059 [https://bugzilla.yoctoproject.org/show_bug.cgi?id=15059] It has been noted by several people that when an initramfs is bundled: - a lot of the kernel is rebuilt - it takes a really long time When looking at the logs, the second kernel compilation (that performs the bundle) is not using the parallel make settings, and builds with -j1. We are already explicitly passing PARALLEL_MAKE when building kernel modules, and by extending that explicit use to the main kernel compilation, we ensure that we always get a parallel build. Build times chnaged from more than 30 minutes for the bundle, to 3 minutes in local testing. The question of whether or not too much is rebuilding during the bundle step is still an open question, but with this tweak, at least the build time is back in the realm of acceptable. (From OE-Core rev: a2a889b760785474dbc04e3ec11521f6da90161d) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 88fd394ecf0f2174b792075d409d87046896426b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/utils/metadata.py: Fix running oe-selftest running with no distro setThomas Roos2023-05-121-3/+3
| | | | | | | | | | | | | This will use default values when no distribution is set. [YOCTO #15086] (From OE-Core rev: 01eb8d4ad71c587d56608d83ec4187375b2f4c44) Signed-off-by: Thomas Roos <throos@amazon.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 888fe63b46efceeff08dbe8c4f66fec33d06cb7a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libpam: Fix the xtests/tst-pam_motd[1|3] failuresZhixiong Chi2023-05-122-0/+109
| | | | | | | | | | | | | | | | | | Reproducer: 1.Enable the ptest of libpam and build the image. 2.Boot the rootfs with nfs, then run the following tests as root: cd /usr/share/Linux-PAM/xtests /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd1 /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd3 After applying this patch, the ptest doesn't be failed. (From OE-Core rev: 928b7e880e6a5d1b807cb7f605649233c7195578) Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 549e54ad6a175359b0a57987ccdab8989df9d3a9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO overrideMartin Jansa2023-05-121-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * otherwise it ends '<unknown>' inside esdk, because of parsing order: # $METADATA_REVISION [3 operations] # set /OE/build/test-D/conf/local.conf:43 # "f2da54ef432eac89b0f18eaad68e602b6990b5de" # immediate /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:9 # "${@oe.buildcfg.detect_revision(d)}" # set /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:10 # [vardepvalue] "${METADATA_REVISION}" # pre-expansion value: # "<unknown>" METADATA_REVISION="<unknown>" * This causes base-files.do_install and following tasks to have different signatures between esdk and the build directory where this esdk was created: bitbake-diffsigs {test-D,poky/build-uninative-disabled}/tmp/stamps/qemux86_64-poky-linux/base-files/*do_install*sigdata* NOTE: Starting bitbake server... basehash changed from 5b6981cf58bfd57d416b0e31611b73a26baae635dd1ac31c08d46f95064c3ffc to dbdce042da4d7813d632b6d1cc87a16f728ad20e55fecbc392830e6acf72babd Variable METADATA_REVISION value changed from '<unknown>' to 'f2da54ef432eac89b0f18eaad68e602b6990b5de' and an warning from "python3 /OE/build/test-D/ext-sdk-prepare.py" when eSDK is being prepared for use: WARNING: The base-files:do_install sig is computed to be 83b9c9a6ef1145baac5a1e0d08814b9156af239c58fc42df95c25a9cd8a7f201, but the sig is locked to 3dc22233059075978e5503691e98e79e7cc60db94259dfcd886bca2291c0add7 in SIGGEN_LOCKEDSIGS_t-qemux86-64 [RP: Add commit about why we need the override for future reference] (From OE-Core rev: da6f6340f97e80cb1b21f6083ef5d0a9a856eef5) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 675ea7281c17f77bf5dea17cfd4d9da0928382a0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libarchive: Enable acls, xattr for native as well as targetPiotr Łobacz2023-05-121-5/+1
| | | | | | | | | | | | | | | | | Libarchive is being used by OPKG package manager as default API for extracting tar files. This fix allows us to extract ipks packages with preserved ACLs and xattrs. Partially addresses [YOCTO #15091] [RP: Merge into main PACKAGECONFIG and tweak commit message] (From OE-Core rev: b1f80f0a2bf30698192c7a214c5802b76464d095) Signed-off-by: Piotr Łobacz <p.lobacz@welotec.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 913aad1ac013368aef8f6af332588ef24bba46bd) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel-devsrc: depend on python3-core instead of python3bkylerussell@gmail.com2023-05-121-1/+1
| | | | | | | | | | | | | | Avoids pulling in potential GPLv3 packages through python3-misc catch-all. python3-core is the intended minimal RDEPENDS for packages requiring python3 support. Other python3 module dependencies should be listed explicitly. (From OE-Core rev: d4e9a2c0c666244f5a197682dabe018a4a3e06f8) Signed-off-by: Kyle Russell <bkylerussell@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 231f93becad619f6afa383f9b1132f1d4b02fa64) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: upgrade 20230210 -> 20230404Dmitry Baryshkov2023-05-121-3/+3
| | | | | | | | | | | | | | The LICENCE.qat_firmware license file was updated to reflect Intel licensing (it removed a term regarding patent licenses). License-Update: additional files (From OE-Core rev: d99e46a7b6574d957b76b14f28ef9d19b31f4890) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit fd43b59ab32e2115fcda7ad63d3a5ccc2683c7d5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: upgrade 21.1.7 -> 21.1.8Wang Mingyu2023-05-121-1/+1
| | | | | | | | | | | | | | | | | | | | | This release contains the fix for CVE-2023-1393 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-March/003374.html Benno Schulenberg (1): xkbUtils: use existing symbol names instead of deleted deprecated ones Olivier Fourdan (2): composite: Fix use-after-free of the COW xserver 21.1.8 git tag: xorg-server-21.1.8 (From OE-Core rev: 732b51f073105d4c6a0e2e06c559bffcac093fbf) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 7b08dff8f46bcaa05f7fbffbe27d524579af4faf) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* Revert "xserver-xorg: backport fix for CVE-2023-1393"Steve Sakoman2023-05-122-48/+1
| | | | | | | | | | This reverts commit dc2c777cab0230fc54e078d20d872aaa9287a8b9. Fixed in subsequent version bump (From OE-Core rev: 151149b590a9051a6de58115a6796ccf17894498) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wpebackend-fdo: upgrade 1.14.0 -> 1.14.2Wang Mingyu2023-05-121-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: ========== - Reverted a change introduced in 1.14.1 which introduced crashes both with WebKitGTK and WPE running under Wayland in some configurations. - Fix a crash caused by wrong assertion, which was typically triggered in debug builds when using the NVidia drivers. - Fix WebKit no longer repainting after provisional navigation with PSON enabled. - Fix graphics buffer leaks by always freeing them in buffer destroy listener callbacks. (From OE-Core rev: 7991fb7aa30cf56105ebbe060195f16aa1c9b6da) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit aa37e18a51714af3281b4127dceb40b38aa8ac3c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto: Exclude 121 CVEs already fixed upstreamYoann Congal2023-05-122-0/+878
| | | | | | | | | | | | | | Exclude CVEs that are fixed in both current linux-yocto version v5.10.175 and v5.15.108. To get the commit fixing a CVE, I used the Debian kernel-sec repo [1]. [1]: https://salsa.debian.org/kernel-team/kernel-sec/-/commit/86d5040aee9275f9555458fcaf9cb43710dff398 (From OE-Core rev: d1de8d75648282a421022becf61c80c3e6e8b75b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libxml2: patch CVE-2023-28484 and CVE-2023-29469Peter Marko2023-05-123-0/+123
| | | | | | | | | | | Backports from: * https://gitlab.gnome.org/GNOME/libxml2/-/commit/e4f85f1bd2eb34d9b49da9154a4cc3a1bc284f68 * https://gitlab.gnome.org/GNOME/libxml2/-/commit/547edbf1cbdccd46b2e8ff322a456eaa5931c5df (From OE-Core rev: 7d03d5dbc98aa701869c73c1c55a5868c70c5287) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: fix CVE-2023-25652Archana Polampalli2023-05-122-0/+95
| | | | | | | | | | | | | | | | | | | | | | | | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists. References: https://nvd.nist.gov/vuln/detail/CVE-2023-25652 Upstream patches: https://github.com/git/git/commit/9db05711c98efc14f414d4c87135a34c13586e0b (From OE-Core rev: 335ad8a6d795cd94b872370e44a033ce3fbf4890) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: fix CVE-2023-29007Archana Polampalli2023-05-122-0/+163
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`. References: https://nvd.nist.gov/vuln/detail/CVE-2023-29007 Upstream patches: https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4 https://github.com/git/git/commit/29198213c9163c1d552ee2bdbf78d2b09ccc98b8 https://github.com/git/git/commit/a5bb10fd5e74101e7c07da93e7c32bbe60f6173a https://github.com/git/git/commit/e91cfe6085c4a61372d1f800b473b73b8d225d0d https://github.com/git/git/commit/3bb3d6bac5f2b496dfa2862dc1a84cbfa9b4449a (From OE-Core rev: 1b55343b6346437b80b8a8180ae1bc9f480d92ef) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* run-postinsts: Set dependency for ldconfig to avoid boot issuesArturo Buzarra2023-05-101-1/+1
| | | | | | | | | | | | | | | | | | | | | If a package with a postsints script requires ldconfig, the package class adds a ldconfig postinst fragment to initialize it before. Systemd has its own ldconfig.service to initialize it and sometimes if both services are running at the same time in the first boot, the first one will work, but the second one will fail with the following error: ldconfig[141]: /sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache failed: No such file or directory This commit adds a ordering dependency between them to make sure that only one service is running at the same time. (From OE-Core rev: 5fca673d8fe0ee97dc37ed2c9941696842cd667a) Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4e9d812e127dc6743f52f4881e509e8e2e833afe) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libbsd: Add correct license for all packagesRanjitsinh Rathod2023-05-101-0/+7
| | | | | | | | | | | | | | | | | | | | | | | BSD-4-Clause is only applicable to the {PN}-doc package as when I check for the source code I find below files which only uses the license BSD-4-Clause ~/sources/libbsd$ grep -rl "All advertising materials mentioning features or use of this software" *|grep -v \.1|grep -v \.5|grep -v \.8 | sort COPYING man/arc4random.3bsd man/getprogname.3bsd ~/sources/libbsd$ grep -rnB5 "BSD-4" COPYING-9-Files: COPYING-10- man/arc4random.3bsd COPYING-11-Copyright: COPYING-12- Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de> COPYING-13- All rights reserved. COPYING:14:License: BSD-4-clause-Niels-Provos (From OE-Core rev: aa5bdac99e187801db56ca4bcc4d5f18b2403f40) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wic/bootimg-efi: if fixed-size is set then use that for mkdosfsRandolph Sapp2023-05-101-0/+7
| | | | | | | | | | | | | | | This is a bit of a compatibility issue more than anything. Some devices get upset if the FAT file system contains less blocks than the partition. The fixed-size argument is currently respected by the partition creation step but not by the file system creation step. Let's make it so the file system respects this value as well. (From OE-Core rev: d16301ccdfb97bf126738262eec594008c282df1) Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3-cryptography: fix for CVE-2023-23931Narpat Mali2023-05-102-0/+50
| | | | | | | | | | | | | | | | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8. (From OE-Core rev: 368e450c2d800790a05924519f34c579e28e9cbb) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* webkitgtk: fix CVE-2022-32888 & CVE-2022-32923Kai Kang2023-05-103-0/+478
| | | | | | | | | | | Backport patches to fix CVE-2022-32888 and CVE-2022-32923 for webkitgtk 2.36.8. The bugzilla IDs of the CVEs are from https://support.apple.com which have been listed in patch headers. (From OE-Core rev: e24e16974e81a0f62dd6f5862a465fc74ad751d3) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* binutils : Fix CVE-2023-25588Deepthi Hemraj2023-05-102-0/+148
| | | | | | | | | Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1] (From OE-Core rev: fd0d01aca6f2aea51e9704e0ba48dc35dfd87b81) Signed-off-by: Deepthi Hemraj <deepadeepthi98@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* binutils : Fix CVE-2023-1972Deepthi Hemraj2023-05-102-0/+42
| | | | | | | | | Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff_plain;h=c22d38baefc5a7a1e1f5cdc9dbb556b1f0ec5c57] (From OE-Core rev: d46891efa23932a048f7cc4d82c6387e03262f76) Signed-off-by: Deepthi Hemraj <deepadeepthi98@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* binutils : Fix CVE-2023-25585Deepthi Hemraj2023-05-102-0/+55
| | | | | | | | | Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=65cf035b8dc1df5d8020e0b1449514a3c42933e7] (From OE-Core rev: 033db4876844b17de7673970860eb155d15c56e7) Signed-off-by: Deepthi Hemraj <deepadeepthi98@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* binutils : Fix CVE-2023-25584Deepthi Hemraj2023-05-104-0/+631
| | | | | | | | | Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=77c225bdeb410cf60da804879ad41622f5f1aa44] (From OE-Core rev: 27278ebd5d102ce5a9d45f94a93932065025657b) Signed-off-by: Deepthi Hemraj <deepadeepthi98@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: Security fix for CVE-2023-24538Shubham Kulkarni2023-05-102-0/+209
| | | | | | | | | | | html/template: disallow actions in JS template literals Backport from https://github.com/golang/go/commit/b1e3ecfa06b67014429a197ec5e134ce4303ad9b (From OE-Core rev: 835462d697a5f294900843b8bcd628709c256605) Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: fix CVE-2023-24534 denial of service from excessive memory allocationVivek Kumbhar2023-05-102-0/+201
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A parsed MIME header is a map[string][]string. In the common case, a header contains many one-element []string slices. To avoid allocating a separate slice for each key, ReadMIMEHeader looks ahead in the input to predict the number of keys that will be parsed, and allocates a single []string of that length. The individual slices are then allocated out of the larger one. The prediction of the number of header keys was done by counting newlines in the input buffer, which does not take into account header continuation lines (where a header key/value spans multiple lines) or the end of the header block and the start of the body. This could lead to a substantial amount of overallocation, for example when the body consists of nothing but a large block of newlines. Fix header key count prediction to take into account the end of the headers (indicated by a blank line) and continuation lines (starting with whitespace). Thanks to Jakob Ackermann (@das7pad) for reporting this issue. Fixes CVE-2023-24534 For #58975 Fixes #59267 (From OE-Core rev: 28bfa033ce965d7316a8b4296d10f3ad74d711db) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* freetype: fix CVE-2023-2004 integer overflowin in tt_hvadvance_adjust() in ↵Vivek Kumbhar2023-05-102-0/+42
| | | | | | | | | | | src/truetype/ttgxvar.c Fix An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c (From OE-Core rev: 6a07e1524746bd3cfa5aec090a882f4a7f954dad) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* connman: fix CVE-2023-28488 DoS in client.cHitendra Prajapati2023-05-102-0/+61
| | | | | | | | | Upstream-Status: Backport from https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=99e2c16ea1cced34a5dc450d76287a1c3e762138 (From OE-Core rev: 7a5d78de47cdd79bcb1b0e62a65e10705d59a7d9) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ffmpeg: fix for CVE-2022-48434Narpat Mali2023-05-102-1/+132
| | | | | | | | | | | | | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used). (From OE-Core rev: 392f984ffd95bcd3ce4c364b40425e7808ca7719) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: stable 2.35 branch updates.Deepthi Hemraj2023-05-031-1/+1
| | | | | | | | | | | | | | | | | | | Below commits on glibc-2.35 stable branch are updated. 1c7f51c75a x86_64: Fix asm constraints in feraiseexcept (bug 30305) 8d07e65d15 gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (bug 30151) b7cc55a24e x86: Check minimum/maximum of non_temporal_threshold [BZ #29953] 3f63f9dfe1 stdlib: Undo post review change to 16adc58e73f3 [BZ #27749] 757d9a6306 elf: Smoke-test ldconfig -p against system /etc/ld.so.cache 416bd20b3f Use 64-bit time_t interfaces in strftime and strptime (bug 30053) ae045ed16b cdefs: Limit definition of fortification macros 6bcd5d8e36 x86: Prevent SIGSEGV in memcmp-sse2 when data is concurrently modified [BZ #29863] 82663d3c03 time: Set daylight to 1 for matching DST/offset change (bug 29951) d9923235f0 elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776) (From OE-Core rev: 2d67702bdfc64358d364dd6484ae41842ee7c52f) Signed-off-by: Deepthi Hemraj <deepadeepthi98@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* populate_sdk_base: add zip optionsChristoph Lauer2023-05-031-1/+3
| | | | | | | | | | | | | Add SDK_ZIP_OPTIONS to remove symbolic link creation in zip archive or add options, e.g. for encryption of the zip archive. (From OE-Core rev: 04b62f9459b401c276255f166d0738b6f902a576) (From OE-Core rev: 4f5bf144bfe4f34adfc22d86783d6ce29e9f6e15) Signed-off-by: Christoph Lauer <christoph.lauer@xtronic.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cmake: add CMAKE_SYSROOT to generated toolchain filePascal Bach2023-05-031-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | This already got fixed in the toolchain file that is used during development in https://github.com/openembedded/openembedded-core/commit/cb42802f2fe1760f894a435b07286bca3a220364 The toolchain file generated by the cmake.bbclass however does not set CMAKE_SYSROOT. Under certain circumstances this also leads to the error: `"stdlib.h: No such file or directory #include_next <stdlib.h>"` during the build of a recipe. An example where this accured was during the upgrade of the Apache Thrift recipe in meta-openembedded to 0.11.0. With this change the build works out of the box. CMAKE_SYSROOT must only be set when crosscompiling, otherwise it will interfere with the native compiler headers. (From OE-Core rev: 1105c67d554bcd155e8247cb16efc8d6a642444f) Signed-off-by: Pascal Bach <pascal.bach@siemens.com> (from http://lists.openembedded.org/pipermail/openembedded-core/2018-August/154791.html ) Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libxpm: upgrade 3.5.13 -> 3.5.15Yogita Urade2023-05-031-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade libxpm 3.5.13 to 3.5.15 License-update: additional copyright holders f0857c0 man pages: Correct Copyright/License notices The above commit is introduced while upgrading the libxpm 3.5.15. which is mentioned in below changelog. Due to this commit LIC_FILES_CHKSUM is changed. Disable reading compressed files as that requires compress/uncompress executables. Following the approach in oe-core/master: 7de4084634 libxpm: upgrade 3.5.14 -> 3.5.15 Changelog: ------------- ------------- ddd8339 libXpm 3.5.15 8178eb0 Use gzip -d instead of gunzip c5ab17b Prevent a double free in the error code path 515294b Fix CVE-2022-4883: compression commands depend on $PATH f80fa6a Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height f7fbbb9 test: add test cases for CVE-2022-44617 (zero-width w/enormous height) a3a7c6d Fix CVE-2022-46285: Infinite loop on unclosed comments f7a167a test: add test case for CVE-2022-46285 (unclosed comments) 0ff2c6a cxpm: getc/ungetc wrappers should not adjust position when c == EOF 501494c test: Add unit tests using glib framework 4841039 configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE aef0c8d man pages: Apply standard man page style/formatting 5d55a0b man pages: Replace "See Also" entries with more useful ones 392cb8f man pages: Fix typos and other minor editing 08bc174 libXpm 3.5.14 f0857c0 man pages: Correct Copyright/License notices deb81a9 man pages: Fix typos 2d5fa4c man pages: Add missing word 'function' where needed 2b7357e man pages: Make function synopses more consistent with other pages fb8590c man pages: Fix shadow man pages bfaebfd man pages: Make file names consistent with their displayed names 7a138a5 gitlab CI: add a basic build test 3433f43 man: strip trailing whitespace 9612454 Fix spelling/wording issues fa16fbd Build xz tarballs instead of bzip2 83e5427 update man pages e48e649 add man pages based on doc/xpm.PS (From OE-Core rev: a549319e5fdae685f93122627226f9b102307bc3) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xorg-lib-common: Add variable to set tarball typeYogita Urade2023-05-031-1/+2
| | | | | | | | | | | | | | | | | | Upstream has switched some new releases from bz2 to xz compression. Add an XORG_EXT variable so recipes can set the file name extension needed for the compression type. Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e xorg-lib-common: Add variable to set tarball type use a variable for the tarball suffix/compression format. (From OE-Core rev: 56ea2b625f81e397e911b3610130d3e838d10938) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.15: update to v5.15.108Bruce Ashfield2023-05-033-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 3299fb36854f Linux 5.15.108 adef0cebea85 nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs c6897dfe2bb6 counter: Add the necessary colons and indents to the comments of counter_compi fa934784fb65 counter: fix docum. build problems after filename change 0cf283340023 panic, kexec: make __crash_kexec() NMI safe 9e1e511119b1 kexec: turn all kexec_mutex acquisitions into trylocks 6fc7a53fcc4c nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD fa43e0591900 nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN a814fc9e6e59 nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM760 972e06d09e86 nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 cf773832139b nvme-pci: Crucial P2 has bogus namespace ids 5a19b9a49aea nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs 65f5dc5dff29 nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG GAMMIX S50 3daaa5f7aae2 i2c: ocores: generate stop condition after timeout in polling mode 0af686415ca2 x86/rtc: Remove __init for runtime functions b11ff3ef4d09 sched/fair: Fix imbalance overflow 90e3dc510106 sched/fair: Move calculate of avg_load to a better location 6d1353781bba powerpc/papr_scm: Update the NUMA distance table for the target node 0b031f5983f8 ubi: Fix deadlock caused by recursively holding work_sem 85d7a7044b75 ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size f0b4a4086cf2 mptcp: stricter state check in mptcp_worker 925e1a510a2e mptcp: use mptcp_schedule_work instead of open-coding it f4f2a1d491e9 cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() 19c7f9329bdb x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot 05143d90ac90 scsi: ses: Handle enclosure with just a primary component gracefully aaae6d303150 net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow b1ca14361d49 net: phy: nxp-c45-tja11xx: add remove callback 0359e505bcd7 net: sfp: initialize sfp->i2c_block_size at sfp allocation a42f565c0e96 riscv: add icache flush for nommu sigreturn trampoline 6eeb1cba4c9d drm/i915: fix race condition UAF in i915_perf_add_config_ioctl 9b344cf6aea0 i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call 6b337a13c144 tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance 1403518ed0d9 tracing: Add trace_array_puts() to write into instance 670e54151b7a counter: 104-quad-8: Fix Synapse action reported for Index signals 6e25d374cd95 counter: Internalize sysfs interface code c4153e662883 counter: stm32-timer-cnt: Provide defines for slave mode selection 4c1010848b12 counter: stm32-lptimer-cnt: Provide defines for clock polarities 189ada57e88c ACPI: resource: Add Medion S17413 to IRQ override quirk 248a18a895e2 wifi: iwlwifi: mvm: fix mvmtxq->stopped handling 0efd9ed92926 asymmetric_keys: log on fatal failures in PE/pkcs7 ae2b44aeade1 verify_pefile: relax wrapper length check 744f80ae0716 drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F 05a24344296e efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L 0f9d2fc58824 i2c: hisi: Avoid redundant interrupts d21a46212009 i2c: imx-lpi2c: clean rx/tx buffers upon new message 8451da304b4a wifi: mwifiex: mark OF related data as maybe unused 9aeff275b7f7 power: supply: cros_usbpd: reclassify "default case!" as debug 788f4a3d3987 ARM: 9290/1: uaccess: Fix KASAN false-positives 53967ac8080b libbpf: Fix single-line struct definition output in btf_dump 906a6689bb01 skbuff: Fix a race between coalescing and releasing SKBs 7ccc58a1a756 net: macb: fix a memory corruption in extended buffer descriptor mode ed2ec39e46fe udp6: fix potential access to stale information e97ff11b396c RDMA/core: Fix GID entry ref leak when create_ah fails 6109f5b13ce3 sctp: fix a potential overflow in sctp_ifwdtsn_skip c6a796ee5a63 net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() 9b1ca43bcf3d qlcnic: check pci_reset_function result ffa4f32952e2 drm/armada: Fix a potential double free in an error handling path a94f5d35fdbb tcp: restrict net.ipv4.tcp_app_win a08ec4ed3b6e niu: Fix missing unwind goto in niu_alloc_channels() e35ae49bc198 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition b41da67451b0 bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp 48e8e7851dc0 RDMA/cma: Allow UD qp_type to join multicast only 1569a4cdb973 IB/mlx5: Add support for 400G_8X lane speed f6711bc5c016 RDMA/irdma: Add ipv4 check to irdma_find_listener() c8c7a7aee861 RDMA/irdma: Increase iWARP CM default rexmit count 810250c9c661 RDMA/irdma: Fix memory leak of PBLE objects aa2607bae45f clk: sprd: set max_register according to mapping range 0004a50c535f drm/i915/dsi: fix DSS CTL register offsets for TGL+ 1bb4a52c3caa KVM: arm64: PMU: Restore the guest's EL0 event counting after migration c7acce3a0eeb mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min 7233b5baba10 mtd: rawnand: stm32_fmc2: remove unsupported EDO mode 5ded9b750f30 mtd: rawnand: meson: fix bitmask for length in command word 0162836a51bb mtdblock: tolerate corrected bit-flips ad574345ce26 fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace a55a95365e08 btrfs: fix fast csum implementation detection 6da03c237d56 btrfs: print checksum type and implementation at mount time 0efb276d5848 Bluetooth: Fix race condition in hidp_session_thread ac6725a634f7 Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} d98498ad5695 ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards c5797c87e74e ALSA: emu10k1: don't create old pass-through playback device on Audigy f1ef453157b4 ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() 7901d787e455 ALSA: i2c/cs8427: fix iec958 mixer control deactivation d8697aa12ae6 ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard 34a0ada0a8b2 ALSA: emu10k1: fix capture interrupt handler unlinking 55e4eef5545d Revert "pinctrl: amd: Disable and mask interrupts on resume" (From OE-Core rev: f13a78efa325d0debf4910756acfcb63d036967c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5339d44b0b0b23f30cb0f8ab395da62e83733c40) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.15: update to v5.15.107Bruce Ashfield2023-05-033-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 4fdad925aa1a Linux 5.15.107 c862d7debe55 bpftool: Print newline before '}' for struct with padding only fields 1585f3fc24b5 ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown b97e4100be37 kbuild: fix single directory build 326b80bd2267 mm: take a page reference when removing device exclusive entries 1fc9263ad795 drm/bridge: lt9611: Fix PLL being unable to lock 4bdf1514b426 mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() cbe5f7fed7f7 ring-buffer: Fix race while reader and writer are on the same page 23ed5af5767a drm/nouveau/disp: Support more modes by checking with lower bpc 6f2180c5273a drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path a184df0de132 mm: vmalloc: avoid warn_alloc noise caused by fatal signal d88d7a9fcf20 ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() 33d5d4e67a0e tracing: Free error logs of tracing instances c74065da695e can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events 4fe1d9b6231a can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access 0af8fae81d8b fs: drop peer group ids under namespace lock 33a503b7c339 ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() 20c5e10950e9 ftrace: Mark get_lock_parent_ip() __always_inline a007b7dc19de perf/core: Fix the same task check in perf_event_set_output 8417eb9aaf1e cifs: sanitize paths in cifs_update_super_prepath. df23c702d11c smb3: lower default deferred close timeout to address perf regression 1d9cad9c5873 smb3: allow deferred close timeout to be configurable 5e5c5f472972 scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() ae73c4dd48f2 scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() c8c17991dab0 iio: adc: ad7791: fix IRQ flags bc61cce6a658 coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug 97302eb6ca48 coresight: etm4x: Do not access TRCIDR1 for identification fd23e9bbfccc ALSA: hda/realtek: Add quirk for Clevo X370SNW f204f38212dc ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN 091b3e31275b dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs d540aea451ab nilfs2: fix sysfs interface lifetime 92684e02654c nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() ba3a88b444cd tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty ad142624ccc3 tty: serial: sh-sci: Fix Rx on RZ/G2L SCI 1184bd5c5ee4 tty: serial: sh-sci: Fix transmit end interrupt handler 1f49173be32d iio: light: cm32181: Unregister second I2C client if present 77593b4e963c iio: dac: cio-dac: Fix max DAC write value check for 12-bit 73742a446e08 iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip 7a1e21d26104 iio: adis16480: select CONFIG_CRC32 4d3841fe16c4 USB: serial: option: add Quectel RM500U-CN modem 7151d2af0656 USB: serial: option: add Telit FE990 compositions e1aa1c1bc51f usb: typec: altmodes/displayport: Fix configure initial pin assignment 9cd66aa2fa04 USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs f8d59e2a36ac usb: dwc3: pci: add support for the Intel Meteor Lake-S 11453332fa40 usb: cdnsp: Fixes error: uninitialized symbol 'len' 83637720ea20 xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu 1122474b757a usb: xhci: tegra: fix sleep in atomic call f5c5934580e7 kbuild: refactor single builds of *.ko e62d179b9177 gve: Secure enough bytes in the first TX desc for all TCP pkts 40c6802d7dae ethtool: reset #lanes when lanes is omitted 4eada1dabdfb ice: Reset FDIR counter in FDIR init stage 391d28c0e38c ice: fix wrong fallback logic for FDIR e215928a510c NFSD: callback request does not use correct credential for AUTH_SYS bbca64f2052e sunrpc: only free unix grouplist after RCU settles ca7c3b4ae03e net: stmmac: fix up RX flow hash indirection table when setting channels 3a997c0d2341 net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe 0ae8cdf0153c gpio: davinci: Add irq chip flag to skip set wake 1c19a42b2863 platform/x86: think-lmi: Clean up display of current_value on Thinkstation cccdb30935c8 platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings b9396d991abe platform/x86: think-lmi: Fix memory leak when showing current settings d65ff2fe877c ipv6: Fix an uninit variable access bug in __ip6_make_skb() 926c8299ac3d net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT 667eb99cf7c1 sctp: check send stream number after wait_for_sndbuf 9692e16b5991 net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit 5d1007e81fb6 net: don't let netpoll invoke NAPI if in xmit context e150a5c9f44c icmp: guard against too small mtu a64160124d5a NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL b9ba5906c420 net: qrtr: Fix a refcount bug in qrtr_recvmsg() 3ef52e4bcfd7 net: qrtr: combine nameservice into main module 30c5a016a37a wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta 32a8dc8d9ebe KVM: s390: pv: fix external interruption loop not always detected fcd6c7476e43 pwm: sprd: Explicitly set .polarity in .get_state() a8ab13c73259 pwm: cros-ec: Explicitly set .polarity in .get_state() c373e49fbb87 Drivers: vmbus: Check for channel allocation before looking up relids b50cd6789dbb gpio: GPIO_REGMAP: select REGMAP instead of depending on it 0a473f834393 bpf: hash map, avoid deadlock with suitable hash mask 543d66a54dbf serial: exar: Add support for Sealevel 7xxxC serial cards 7773bb08e8b6 serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards c73db89da686 iavf/iavf_main: actually log ->src mask when talking about it b2d29830db30 iavf: return errno code instead of status code cdf3f5ef1893 platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode 7798cd69cfc3 platform/x86: int3472: Split into 2 drivers 5cc70e78bbcc RDMA/irdma: Do not request 2-level PBLEs for CQ alloc c22ac849aabb NFSD: pass range end to vfs_fsync_range() instead of count 34a14759d90c NFSD: Fix sparse warning 8059e200259e ocfs2: fix memory leak in ocfs2_mount_volume() b613d8dcdff3 ocfs2: rewrite error handling of ocfs2_fill_super 05abe9c0bf38 ocfs2: ocfs2_mount_volume does cleanup job before return error (From OE-Core rev: 84efe52ea8b1c28614200683289e589211c35b44) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 214643f386a3e4f226acd25903cde14a2c0a7376) Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-15 18:14:33 +0000