* [OE-core][kirkstone 00/13] Patch review
@ 2022-06-06 14:38 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2022-06-06 14:38 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for kirkstone and have comments back by end
of day Wednesday.
This is a set of "housekeeping" commits: updating the Upstream-Status of patches
and removing obsolete patches.
The following changes since commit e63013cc38b82659658365da53b14952711d6701:
gcc: Upgrade to 11.3 release (2022-06-02 06:48:32 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Alexander Kanavin (3):
bash: submit patch upstream
valgrind: submit arm patches upstream
zip/unzip: mark all submittable patches as Inactive-Upstream
Jiaqing Zhao (4):
systemd: Drop 0001-test-parse-argument-Include-signal.h.patch
systemd: Remove __compare_fn_t type in musl-specific patch
systemd: Drop 0002-don-t-use-glibc-specific-qsort_r.patch
systemd: Correct path returned in sd_path_lookup()
Khem Raj (4):
systemd: Drop redundant musl patches
systemd: Document future actions needed for set of musl patches
systemd: Drop
0016-Hide-__start_BUS_ERROR_MAP-and-__stop_BUS_ERROR_MAP.patch
systemd: Update patch status
Martin Jansa (1):
makedevs: Don't use COPYING.patch just to add license file into ${S}
Richard Purdie (1):
lzo: Add further info to a patch and mark as Inactive-Upstream
...sysctl.d-binfmt.d-modules-load.d-to-.patch | 73 ++++
...se-ROOTPREFIX-without-suffixed-slash.patch | 42 ---
...test-parse-argument-Include-signal.h.patch | 27 --
.../0002-Add-sys-stat.h-for-S_IFDIR.patch | 2 +-
...002-don-t-use-glibc-specific-qsort_r.patch | 163 ---------
...-missing_type.h-add-comparison_fn_t.patch} | 41 +--
...missing.h-check-for-missing-strndupa.patch | 14 +-
...008-add-missing-FTW_-macros-for-musl.patch | 3 +
..._register_atfork-for-non-glibc-build.patch | 3 +
...S_ERROR_MAP-and-__stop_BUS_ERROR_MAP.patch | 33 --
...ype.h-add-__compar_d_fn_t-definition.patch | 28 --
.../systemd/0019-Handle-missing-LOCK_EX.patch | 24 --
...ible-pointer-type-struct-sockaddr_un.patch | 38 --
.../0021-test-json.c-define-M_PIl.patch | 4 +
meta/recipes-core/systemd/systemd_250.5.bb | 10 +-
.../makedevs/makedevs/COPYING.patch | 346 ------------------
.../makedevs/makedevs/makedevs.c | 4 +
.../makedevs/makedevs_1.0.1.bb | 5 +-
...etting-mcpu-to-cortex-a8-on-arm-arch.patch | 2 +-
...n-for-targets-which-don-t-support-it.patch | 2 +-
...te-march-mcpu-mfpu-for-ARM-test-apps.patch | 2 +-
.../bash/bash/makerace2.patch | 2 +-
...ass-LDFLAGS-to-tests-doing-link-step.patch | 2 +-
.../unzip/unzip/CVE-2021-4217.patch | 2 +-
.../unzip/unzip/avoid-strip.patch | 2 +-
.../unzip/unzip/define-ldflags.patch | 2 +-
.../unzip/unzip/fix-security-format.patch | 2 +-
.../unzip/unzip/symlink.patch | 2 +-
...LAGS-and-LDFLAGS-when-doing-link-tes.patch | 2 +-
.../zip/zip-3.0/10-remove-build-date.patch | 2 +-
.../zip/zip-3.0/fix-security-format.patch | 2 +-
.../zipnote-crashes-with-segfault.patch | 2 +-
...Use-memcpy-instead-of-reinventing-it.patch | 10 +-
33 files changed, 136 insertions(+), 762 deletions(-)
create mode 100644 meta/recipes-core/systemd/systemd/0001-Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-to-.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0001-systemd.pc.in-use-ROOTPREFIX-without-suffixed-slash.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0001-test-parse-argument-Include-signal.h.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0002-don-t-use-glibc-specific-qsort_r.patch
rename meta/recipes-core/systemd/systemd/{0003-missing_type.h-add-__compare_fn_t-and-comparison_fn_.patch => 0003-missing_type.h-add-comparison_fn_t.patch} (63%)
delete mode 100644 meta/recipes-core/systemd/systemd/0016-Hide-__start_BUS_ERROR_MAP-and-__stop_BUS_ERROR_MAP.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0017-missing_type.h-add-__compar_d_fn_t-definition.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0019-Handle-missing-LOCK_EX.patch
delete mode 100644 meta/recipes-core/systemd/systemd/0020-Fix-incompatible-pointer-type-struct-sockaddr_un.patch
delete mode 100644 meta/recipes-devtools/makedevs/makedevs/COPYING.patch
--
2.25.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2022-06-21 23:27 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2022-06-21 23:27 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for kirkstone and have comments back by end
of day Thursday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3811
The following changes since commit b2d10487f80deb04a0893325a1ae79c8629a7655:
liberror-perl: Update sstate/equiv versions to clean cache (2022-06-17 05:02:15 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Alexander Kanavin (1):
python3: use built-in distutils for ptest, rather than setuptools'
'fork'
Davide Gardenal (1):
efivar: add musl libc compatibility
Dmitry Baryshkov (2):
linux-firmware: add support for building snapshots
linux-firmware: upgrade 20220509 -> 20220610
Marta Rybczynska (2):
cve-check: add support for Ignored CVEs
oeqa/selftest/cve_check: add tests for Ignored and partial reports
Martin Jansa (1):
mesa: backport a patch to support compositors without
zwp_linux_dmabuf_v1 again
Michael Opdenacker (1):
rootfs-postcommands.bbclass: correct comments
Nick Potenski (1):
systemd: systemd-systemctl: Support instance conf files during enable
Paulo Neves (2):
python: Avoid shebang overflow on python-config.py
gtk-doc: Fix potential shebang overflow on gtkdoc-mkhtml2
Richard Purdie (2):
python3: Remove problematic paths from sysroot files
python3: Ensure stale empty python module directories don't break the
build
meta/classes/cve-check.bbclass | 43 ++--
meta/classes/rootfs-postcommands.bbclass | 8 +-
meta/lib/oeqa/selftest/cases/cve_check.py | 82 ++++++++
.../efisecdb-fix-build-with-musl-libc.patch | 184 ++++++++++++++++++
meta/recipes-bsp/efivar/efivar_38.bb | 3 +-
.../systemd/systemd-systemctl/systemctl | 14 +-
...shebang-overflow-on-python-config.py.patch | 33 ++++
.../python3/deterministic_imports.patch | 32 +++
.../recipes-devtools/python/python3/run-ptest | 2 +-
.../recipes-devtools/python/python3_3.10.4.bb | 12 +-
meta/recipes-gnome/gtk-doc/gtk-doc_1.33.2.bb | 1 +
...nd-deprecate-drm_handle_format-and-d.patch | 158 +++++++++++++++
meta/recipes-graphics/mesa/mesa.inc | 1 +
...01-Makefile-replace-mkdir-by-install.patch | 84 --------
...20220509.bb => linux-firmware_20220610.bb} | 11 +-
15 files changed, 555 insertions(+), 113 deletions(-)
create mode 100644 meta/recipes-bsp/efivar/efivar/efisecdb-fix-build-with-musl-libc.patch
create mode 100644 meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch
create mode 100644 meta/recipes-devtools/python/python3/deterministic_imports.patch
create mode 100644 meta/recipes-graphics/mesa/files/0001-Revert-egl-wayland-deprecate-drm_handle_format-and-d.patch
delete mode 100644 meta/recipes-kernel/linux-firmware/files/0001-Makefile-replace-mkdir-by-install.patch
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20220509.bb => linux-firmware_20220610.bb} (99%)
--
2.25.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2022-10-17 23:08 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2022-10-17 23:08 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for kirkstone and have comments back by
end of day Wednesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4347
The following changes since commit e728d0965d6fda8ac54e065ca7bf7eb9da9a8170:
coreutils: add openssl PACKAGECONFIG (2022-09-30 09:35:23 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Adrian Freihofer (1):
own-mirrors: add crate
Bhabu Bindu (1):
qemu: Fix CVE-2021-3611
Chen Qi (1):
image_types_wic.bbclass: fix cross binutils dependency
He Zhe (2):
lttng-tools: Upgrade 2.13.4 -> 2.13.8
lttng-modules: Fix crash on powerpc64
Michael Halstead (1):
uninative: Upgrade to 3.7 to work with glibc 2.36
Ross Burton (1):
qemu: fix CVE-2022-2962
Teoh Jay Shen (1):
tiff: Security fixes CVE-2022-2867,CVE-2022-2868 and CVE-2022-2869
Tim Orling (1):
python3: upgrade 3.10.4 -> 3.10.7
Virendra Thakur (1):
qemu: Fix CVE-2021-3750 for qemu
Xiangyu Chen (2):
qemu: Backport patches from upstream to support float128 on qemu-ppc64
linux-yocto-dev: add qemuarm64
pgowda (1):
binutils : Fix CVE-2022-38128
meta/classes/image_types_wic.bbclass | 2 +-
meta/classes/own-mirrors.bbclass | 1 +
meta/classes/sanity.bbclass | 2 +-
meta/conf/distro/include/yocto-uninative.inc | 10 +-
.../binutils/binutils-2.38.inc | 3 +
.../binutils/0018-CVE-2022-38128-1.patch | 350 ++++
.../binutils/0018-CVE-2022-38128-2.patch | 436 +++++
.../binutils/0018-CVE-2022-38128-3.patch | 95 ++
...h-92036-Fix-gc_fini_untrack-GH-92037.patch | 54 -
...report-missing-dependencies-for-disa.patch | 8 +-
.../{python3_3.10.4.bb => python3_3.10.7.bb} | 3 +-
meta/recipes-devtools/qemu/qemu.inc | 49 +
...ulip-Restrict-DMA-engine-to-memories.patch | 64 +
...end-float_exception_flags-to-16-bits.patch | 75 +
...32t-for-reply-queue-head-tail-values.patch | 83 +
...ftfloat-Add-flag-specific-to-Inf-Inf.patch | 59 +
...id_function_take_MemTxAttrs_argument.patch | 60 +
...softfloat-Add-flag-specific-to-Inf-0.patch | 126 ++
...et_function_take_MemTxAttrs_argument.patch | 98 ++
...dd-flags-specific-to-Inf-Inf-and-0-0.patch | 73 +
...ed_function_take_MemTxAttrs_argument.patch | 78 +
...-Add-flag-specific-to-signaling-nans.patch | 121 ++
...rw_function_take_MemTxAttrs_argument.patch | 158 ++
...e-float_invalid_op_addsub-for-new-fl.patch | 114 ++
...te_function_take_MemTxAttrs_argument.patch | 1453 +++++++++++++++++
...e-float_invalid_op_mul-for-new-flags.patch | 86 +
...ap_function_take_MemTxAttrs_argument.patch | 227 +++
...e-float_invalid_op_div-for-new-flags.patch | 99 ++
..._buf_rw_function_take_a_void_pointer.patch | 41 +
...arget-ppc-Update-fmadd-for-new-flags.patch | 102 ++
..._dma_buf_write_functions_take_a_void.patch | 167 ++
.../0010-target-ppc-Split-out-do_fmadd.patch | 71 +
...rw_function_take_MemTxAttrs_argument.patch | 91 ++
...s-max-min-cj-dp-to-use-VSX-registers.patch | 93 ++
...rw_function_take_MemTxAttrs_argument.patch | 65 +
...-Move-xs-max-min-cj-dp-to-decodetree.patch | 121 ++
...te_function_take_MemTxAttrs_argument.patch | 129 ++
...get-ppc-fix-xscvqpdp-register-access.patch | 41 +
...ad_function_take_MemTxAttrs_argument.patch | 222 +++
...rget-ppc-move-xscvqpdp-to-decodetree.patch | 130 ++
...uf_rw_function_propagate_MemTxResult.patch | 91 ++
...tore_fpscr-doesn-t-update-bits-0-to-.patch | 70 +
...ma_function_take_MemTxAttrs_argument.patch | 120 ++
...get-ppc-Introduce-TRANS-FLAGS-macros.patch | 133 ++
...ma_function_take_MemTxAttrs_argument.patch | 151 ++
...get-ppc-Implement-Vector-Expand-Mask.patch | 105 ++
...r_dma_function_propagate_MemTxResult.patch | 65 +
...et-ppc-Implement-Vector-Extract-Mask.patch | 141 ++
...r_dma_function_propagate_MemTxResult.patch | 175 ++
...ppc-Implement-Vector-Mask-Move-insns.patch | 187 +++
...ma_function_take_MemTxAttrs_argument.patch | 303 ++++
...xs-n-madd-am-ds-p-xs-n-msub-am-ds-p-.patch | 258 +++
...ma_function_take_MemTxAttrs_argument.patch | 271 +++
...mplement-xs-n-maddqp-o-xs-n-msubqp-o.patch | 174 ++
...i_dma_function_propagate_MemTxResult.patch | 47 +
...i_dma_function_propagate_MemTxResult.patch | 296 ++++
.../qemu/qemu/CVE-2021-3611_1.patch | 74 +
.../qemu/qemu/CVE-2021-3611_2.patch | 43 +
.../qemu/qemu/CVE-2021-3750-1.patch | 59 +
.../qemu/qemu/CVE-2021-3750-2.patch | 65 +
.../qemu/qemu/CVE-2021-3750-3.patch | 156 ++
meta/recipes-kernel/linux/linux-yocto-dev.bb | 2 +-
...4-fix-kernel-crash-caused-by-do_get_.patch | 94 ++
.../lttng/lttng-modules_2.13.4.bb | 1 +
...-tools_2.13.4.bb => lttng-tools_2.13.8.bb} | 2 +-
.../libtiff/tiff/CVE-2022-2867.patch | 129 ++
.../libtiff/tiff/CVE-2022-2869.patch | 84 +
...ed69a485a9cfb299d9f060eb2a46c54e5903.patch | 45 +
meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 3 +
69 files changed, 8536 insertions(+), 68 deletions(-)
create mode 100644 meta/recipes-devtools/binutils/binutils/0018-CVE-2022-38128-1.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0018-CVE-2022-38128-2.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0018-CVE-2022-38128-3.patch
delete mode 100644 meta/recipes-devtools/python/python3/0001-gh-92036-Fix-gc_fini_untrack-GH-92037.patch
rename meta/recipes-devtools/python/{python3_3.10.4.bb => python3_3.10.7.bb} (99%)
create mode 100644 meta/recipes-devtools/qemu/qemu/0001-net-tulip-Restrict-DMA-engine-to-memories.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0001-softfloat-Extend-float_exception_flags-to-16-bits.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0001-use-uint32t-for-reply-queue-head-tail-values.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0002-softfloat-Add-flag-specific-to-Inf-Inf.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0002_let_dma_memory_valid_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0003-softfloat-Add-flag-specific-to-Inf-0.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0003_let_dma_memory_set_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0004-softfloat-Add-flags-specific-to-Inf-Inf-and-0-0.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0004_let_dma_memory_rw_relaxed_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0005-softfloat-Add-flag-specific-to-signaling-nans.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0005_let_dma_memory_rw_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0006-target-ppc-Update-float_invalid_op_addsub-for-new-fl.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0006_let_dma_memory_read_write_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0007-target-ppc-Update-float_invalid_op_mul-for-new-flags.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0007_let_dma_memory_map_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0008-target-ppc-Update-float_invalid_op_div-for-new-flags.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0008_have_dma_buf_rw_function_take_a_void_pointer.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0009-target-ppc-Update-fmadd-for-new-flags.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0009_have_dma_buf_read_and_dma_buf_write_functions_take_a_void.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0010-target-ppc-Split-out-do_fmadd.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0010_let_pci_dma_rw_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0011-target-ppc-Fix-xs-max-min-cj-dp-to-use-VSX-registers.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0011_let_dma_buf_rw_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0012-target-ppc-Move-xs-max-min-cj-dp-to-decodetree.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0012_let_dma_buf_write_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0013-target-ppc-fix-xscvqpdp-register-access.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0013_let_dma_buf_read_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0014-target-ppc-move-xscvqpdp-to-decodetree.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0014_let_dma_buf_rw_function_propagate_MemTxResult.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0015-target-ppc-ppc_store_fpscr-doesn-t-update-bits-0-to-.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0015_let_st_pointer_dma_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0016-target-ppc-Introduce-TRANS-FLAGS-macros.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0016_let_ld_pointer_dma_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0017-target-ppc-Implement-Vector-Expand-Mask.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0017_let_st_pointer_dma_function_propagate_MemTxResult.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0018-target-ppc-Implement-Vector-Extract-Mask.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0018_let_ld_pointer_dma_function_propagate_MemTxResult.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0019-target-ppc-Implement-Vector-Mask-Move-insns.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0019_let_st_pointer_pci_dma_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0020-target-ppc-move-xs-n-madd-am-ds-p-xs-n-msub-am-ds-p-.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0020_let_ld_pointer_pci_dma_function_take_MemTxAttrs_argument.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0021-target-ppc-implement-xs-n-maddqp-o-xs-n-msubqp-o.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0021_let_st_pointer_pci_dma_function_propagate_MemTxResult.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/0022_let_ld_pointer_pci_dma_function_propagate_MemTxResult.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3611_1.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3611_2.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3750-1.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3750-2.patch
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3750-3.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-wrapper-powerpc64-fix-kernel-crash-caused-by-do_get_.patch
rename meta/recipes-kernel/lttng/{lttng-tools_2.13.4.bb => lttng-tools_2.13.8.bb} (98%)
create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2022-2867.patch
create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2022-2869.patch
create mode 100644 meta/recipes-multimedia/libtiff/tiff/b258ed69a485a9cfb299d9f060eb2a46c54e5903.patch
--
2.25.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2023-02-01 22:15 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-02-01 22:15 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for kirkstone and have comments back by
end of day Friday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4872
The following changes since commit a8c82902384f7430519a31732a4bb631f21693ac:
build-appliance-image: Update to kirkstone head revision (2023-01-26 23:40:27 +0000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Armin Kuster (1):
lttng-modules: Fix for 5.10.163 kernel version
Bruce Ashfield (1):
linux-yocto/5.15: update to v5.15.87
Khem Raj (3):
libtirpc: Check if file exists before operating on it
libusb1: Link with latomic only if compiler has no atomic builtins
libusb1: Strip trailing whitespaces
Niko Mauno (1):
Fix missing leading whitespace with ':append'
Richard Purdie (1):
native: Drop special variable handling
Ross Burton (4):
ppp: backport fix for CVE-2022-4603
quilt: fix intermittent failure in faildiff.test
spirv-headers: set correct branch name
quilt: use upstreamed faildiff.test fix
Thomas Roos (1):
devtool: fix devtool finish when gitmodules file is empty
Xiangyu Chen (1):
numactl: skip test case when target platform doesn't have 2 CPU node
meta/classes/core-image.bbclass | 2 +-
meta/classes/externalsrc.bbclass | 2 +-
meta/classes/native.bbclass | 2 +-
meta/classes/populate_sdk_ext.bbclass | 2 +-
.../distro/include/ptest-packagelists.inc | 2 +-
.../ppp/ppp/CVE-2022-4603.patch | 48 +++++++++++++++
meta/recipes-connectivity/ppp/ppp_2.4.9.bb | 1 +
meta/recipes-devtools/quilt/quilt.inc | 1 +
.../quilt/quilt/faildiff-order.patch | 41 +++++++++++++
.../libtirpc/libtirpc_1.3.2.bb | 2 +-
.../spir/spirv-headers_1.3.204.1.bb | 2 +-
.../linux/linux-yocto-rt_5.15.bb | 6 +-
.../linux/linux-yocto-tiny_5.15.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 ++++----
.../fix-jbd2-upper-bound-for-v5.10.163.patch | 52 ++++++++++++++++
...e-the-correct-print-format-v5.10.163.patch | 61 +++++++++++++++++++
.../lttng/lttng-modules_2.13.8.bb | 2 +
...k-with-latomic-only-if-no-atomic-bui.patch | 46 ++++++++++++++
meta/recipes-support/libusb/libusb1_1.0.26.bb | 13 ++--
.../numactl/Fix-the-test-output-format.patch | 3 +-
.../recipes-support/numactl/numactl/run-ptest | 6 +-
21 files changed, 292 insertions(+), 34 deletions(-)
create mode 100644 meta/recipes-connectivity/ppp/ppp/CVE-2022-4603.patch
create mode 100644 meta/recipes-devtools/quilt/quilt/faildiff-order.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/fix-jbd2-upper-bound-for-v5.10.163.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/fix-jbd2-use-the-correct-print-format-v5.10.163.patch
create mode 100644 meta/recipes-support/libusb/libusb1/0001-configure.ac-Link-with-latomic-only-if-no-atomic-bui.patch
--
2.25.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2023-04-29 17:20 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-04-29 17:20 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for kirkstone and have comments back by
end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5234
The following changes since commit 15c07dff384ce4fb0e90f4f32c182a82101a1c82:
go: fix CVE-2023-24537 Infinite loop in parsing (2023-04-21 03:57:50 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Archana Polampalli (1):
nasm: fix CVE-2022-44370
Bruce Ashfield (3):
linux-yocto/5.15: update to v5.15.106
linux-yocto/5.15: update to v5.15.107
linux-yocto/5.15: update to v5.15.108
Christoph Lauer (1):
populate_sdk_base: add zip options
Deepthi Hemraj (1):
glibc: stable 2.35 branch updates.
Joe Slater (1):
ghostscript: fix CVE-2023-29979
Mingli Yu (1):
ruby: Fix CVE-2023-28755
Pascal Bach (1):
cmake: add CMAKE_SYSROOT to generated toolchain file
Ross Burton (1):
xserver-xorg: backport fix for CVE-2023-1393
Virendra Thakur (1):
qemu: Whitelist CVE-2023-0664
Yogita Urade (2):
xorg-lib-common: Add variable to set tarball type
libxpm: upgrade 3.5.13 -> 3.5.15
meta/classes/cmake.bbclass | 5 +
meta/classes/populate_sdk_base.bbclass | 4 +-
meta/recipes-core/glibc/glibc-version.inc | 2 +-
.../nasm/nasm/CVE-2022-44370.patch | 104 ++++++++++++++++++
meta/recipes-devtools/nasm/nasm_2.15.05.bb | 1 +
meta/recipes-devtools/qemu/qemu.inc | 5 +
.../ruby/ruby/CVE-2023-28755.patch | 68 ++++++++++++
meta/recipes-devtools/ruby/ruby_3.1.3.bb | 1 +
.../ghostscript/cve-2023-28879.patch | 60 ++++++++++
.../ghostscript/ghostscript_9.55.0.bb | 1 +
.../{libxpm_3.5.13.bb => libxpm_3.5.15.bb} | 8 +-
.../xorg-lib/xorg-lib-common.inc | 3 +-
...posite-Fix-use-after-free-of-the-COW.patch | 46 ++++++++
.../xorg-xserver/xserver-xorg_21.1.7.bb | 3 +-
.../linux/linux-yocto-rt_5.15.bb | 6 +-
.../linux/linux-yocto-tiny_5.15.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 ++---
17 files changed, 323 insertions(+), 26 deletions(-)
create mode 100644 meta/recipes-devtools/nasm/nasm/CVE-2022-44370.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2023-28755.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/cve-2023-28879.patch
rename meta/recipes-graphics/xorg-lib/{libxpm_3.5.13.bb => libxpm_3.5.15.bb} (67%)
create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-composite-Fix-use-after-free-of-the-COW.patch
--
2.34.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2023-05-31 2:34 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 01/13] curl: Fix CVE-2023-28319 Steve Sakoman
` (12 more replies)
0 siblings, 13 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Thursday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5365
The following changes since commit 5e26ead1ca016d1691dccba1b58060ac853bf0d2:
piglit: Add missing glslang dependencies (2023-05-25 05:42:54 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Bhabu Bindu (4):
curl: Fix CVE-2023-28319
curl: Fix CVE-2023-28320
curl: Fix CVE-2023-28321
curl: Fix CVE-2023-28322
Bruce Ashfield (5):
linux-yocto/5.10: update to v5.10.176
linux-yocto/5.10: update to v5.10.177
linux-yocto/5.10: update to v5.10.178
linux-yocto/5.10: update to v5.10.179
linux-yocto/5.10: update to v5.10.180
Martin Jansa (1):
kernel-devicetree: make shell scripts posix compliant
Randolph Sapp (3):
kernel-devicetree: allow specification of dtb directory
package: enable recursion on file globs
kernel-devicetree: recursively search for dtbs
meta/classes/kernel-devicetree.bbclass | 22 +-
meta/classes/kernel.bbclass | 2 +
meta/classes/package.bbclass | 2 +-
.../linux/linux-yocto-rt_5.10.bb | 6 +-
.../linux/linux-yocto-tiny_5.10.bb | 8 +-
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +-
.../curl/curl/CVE-2023-28319.patch | 33 ++
.../curl/curl/CVE-2023-28320.patch | 83 ++++
.../curl/curl/CVE-2023-28321.patch | 302 ++++++++++++
.../curl/curl/CVE-2023-28322-1.patch | 84 ++++
.../curl/curl/CVE-2023-28322-2.patch | 436 ++++++++++++++++++
meta/recipes-support/curl/curl_7.82.0.bb | 5 +
12 files changed, 982 insertions(+), 25 deletions(-)
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28319.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28320.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28321.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28322-1.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28322-2.patch
--
2.34.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 01/13] curl: Fix CVE-2023-28319
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 02/13] curl: Fix CVE-2023-28320 Steve Sakoman
` (11 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bhabu Bindu <bhabu.bindu@kpit.com>
Add patch to fix CVE-2023-28319
UAF in SSH sha256 fingerprint check
libcurl offers a feature to verify an SSH server's public key using
a SHA 256hash. When this check fails, libcurl would free the memory
for the fingerprintbefore it returns an error message containing the
(now freed) hash.
This flaw risks inserting sensitive heap-based data into the error
message that might be shown to users or otherwise get
leaked and revealed.
Link: https://curl.se/docs/CVE-2023-28319.html
Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../curl/curl/CVE-2023-28319.patch | 33 +++++++++++++++++++
meta/recipes-support/curl/curl_7.82.0.bb | 1 +
2 files changed, 34 insertions(+)
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28319.patch
diff --git a/meta/recipes-support/curl/curl/CVE-2023-28319.patch b/meta/recipes-support/curl/curl/CVE-2023-28319.patch
new file mode 100644
index 0000000000..c0bca9a56e
--- /dev/null
+++ b/meta/recipes-support/curl/curl/CVE-2023-28319.patch
@@ -0,0 +1,33 @@
+From 8e21b1a05f3c0ee098dbcb6c3d84cb61f102a122 Mon Sep 17 00:00:00 2001
+From: Daniel Stenberg <daniel@haxx.se>
+Date: Mon, 8 May 2023 14:33:54 +0200
+Subject: [PATCH] libssh2: free fingerprint better
+
+Reported-by: Wei Chong Tan
+Closes #11088
+
+CVE: CVE-2023-28319
+Upstream-Status: Backport [https://github.com/curl/curl/commit/8e21b1a05f3c0ee098dbcb6c]
+Comments: Hunks Refreshed
+Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
+---
+ lib/vssh/libssh2.c | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+diff --git a/lib/vssh/libssh2.c b/lib/vssh/libssh2.c
+index bfcc94e160178..dd39a844c646b 100644
+--- a/lib/vssh/libssh2.c
++++ b/lib/vssh/libssh2.c
+@@ -695,11 +695,10 @@
+ */
+ if((pub_pos != b64_pos) ||
+ Curl_strncasecompare(fingerprint_b64, pubkey_sha256, pub_pos) != 1) {
+- free(fingerprint_b64);
+-
+ failf(data,
+ "Denied establishing ssh session: mismatch sha256 fingerprint. "
+ "Remote %s is not equal to %s", fingerprint_b64, pubkey_sha256);
++ free(fingerprint_b64);
+ state(data, SSH_SESSION_FREE);
+ sshc->actualcode = CURLE_PEER_FAILED_VERIFICATION;
+ return sshc->actualcode;
diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.82.0.bb
index 70ceb9f370..e38bf14cc4 100644
--- a/meta/recipes-support/curl/curl_7.82.0.bb
+++ b/meta/recipes-support/curl/curl_7.82.0.bb
@@ -45,6 +45,7 @@ SRC_URI = "https://curl.se/download/${BP}.tar.xz \
file://CVE-2023-27535-pre1.patch \
file://CVE-2023-27535_and_CVE-2023-27538.patch \
file://CVE-2023-27536.patch \
+ file://CVE-2023-28319.patch \
"
SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 02/13] curl: Fix CVE-2023-28320
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 01/13] curl: Fix CVE-2023-28319 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 03/13] curl: Fix CVE-2023-28321 Steve Sakoman
` (10 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bhabu Bindu <bhabu.bindu@kpit.com>
Add patch to fix CVE-2023-28320
siglongjmp race condition
libcurl provides several different backends for resolving host names,
selectedat build time. If it is built to use the synchronous resolver,
it allows nameresolves to time-out slow operations using `alarm()` and
`siglongjmp()`.
When doing this, libcurl used a global buffer that was not mutex
protected anda multi-threaded application might therefore
crash or otherwise misbehave.
Link: https://curl.se/docs/CVE-2023-28320.html
Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../curl/curl/CVE-2023-28320.patch | 83 +++++++++++++++++++
meta/recipes-support/curl/curl_7.82.0.bb | 1 +
2 files changed, 84 insertions(+)
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28320.patch
diff --git a/meta/recipes-support/curl/curl/CVE-2023-28320.patch b/meta/recipes-support/curl/curl/CVE-2023-28320.patch
new file mode 100644
index 0000000000..1e0fc7534a
--- /dev/null
+++ b/meta/recipes-support/curl/curl/CVE-2023-28320.patch
@@ -0,0 +1,83 @@
+From 13718030ad4b3209a7583b4f27f683cd3a6fa5f2 Mon Sep 17 00:00:00 2001
+From: Harry Sintonen <sintonen@iki.fi>
+Date: Tue, 25 Apr 2023 09:22:26 +0200
+Subject: [PATCH] hostip: add locks around use of global buffer for alarm()
+
+When building with the sync name resolver and timeout ability we now
+require thread-safety to be present to enable it.
+
+Closes #11030
+
+CVE: CVE-2023-28320
+Upstream-Status: Backport [https://github.com/curl/curl/commit/13718030ad4b3209a7583b]
+Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
+---
+ lib/hostip.c | 19 +++++++++++++++----
+ 1 file changed, 15 insertions(+), 4 deletions(-)
+
+diff --git a/lib/hostip.c b/lib/hostip.c
+index 2381290fdd43e..e410cda69ae6e 100644
+--- a/lib/hostip.c
++++ b/lib/hostip.c
+@@ -70,12 +70,19 @@
+ #include <SystemConfiguration/SCDynamicStoreCopySpecific.h>
+ #endif
+
+-#if defined(CURLRES_SYNCH) && \
+- defined(HAVE_ALARM) && defined(SIGALRM) && defined(HAVE_SIGSETJMP)
++#if defined(CURLRES_SYNCH) && \
++ defined(HAVE_ALARM) && \
++ defined(SIGALRM) && \
++ defined(HAVE_SIGSETJMP) && \
++ defined(GLOBAL_INIT_IS_THREADSAFE)
+ /* alarm-based timeouts can only be used with all the dependencies satisfied */
+ #define USE_ALARM_TIMEOUT
+ #endif
+
++#ifdef USE_ALARM_TIMEOUT
++#include "easy_lock.h"
++#endif
++
+ #define MAX_HOSTCACHE_LEN (255 + 7) /* max FQDN + colon + port number + zero */
+
+ /*
+@@ -254,11 +261,12 @@ void Curl_hostcache_prune(struct Curl_easy *data)
+ Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
+ }
+
+-#ifdef HAVE_SIGSETJMP
++#ifdef USE_ALARM_TIMEOUT
+ /* Beware this is a global and unique instance. This is used to store the
+ return address that we can jump back to from inside a signal handler. This
+ is not thread-safe stuff. */
+ sigjmp_buf curl_jmpenv;
++curl_simple_lock curl_jmpenv_lock;
+ #endif
+
+ /* lookup address, returns entry if found and not stale */
+@@ -832,7 +840,6 @@ enum resolve_t Curl_resolv(struct Curl_easy *data,
+ static
+ void alarmfunc(int sig)
+ {
+- /* this is for "-ansi -Wall -pedantic" to stop complaining! (rabe) */
+ (void)sig;
+ siglongjmp(curl_jmpenv, 1);
+ }
+@@ -912,6 +919,8 @@ enum resolve_t Curl_resolv_timeout(struct Curl_easy *data,
+ This should be the last thing we do before calling Curl_resolv(),
+ as otherwise we'd have to worry about variables that get modified
+ before we invoke Curl_resolv() (and thus use "volatile"). */
++ curl_simple_lock_lock(&curl_jmpenv_lock);
++
+ if(sigsetjmp(curl_jmpenv, 1)) {
+ /* this is coming from a siglongjmp() after an alarm signal */
+ failf(data, "name lookup timed out");
+@@ -980,6 +989,8 @@ enum resolve_t Curl_resolv_timeout(struct Curl_easy *data,
+ #endif
+ #endif /* HAVE_SIGACTION */
+
++ curl_simple_lock_unlock(&curl_jmpenv_lock);
++
+ /* switch back the alarm() to either zero or to what it was before minus
+ the time we spent until now! */
+ if(prev_alarm) {
diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.82.0.bb
index e38bf14cc4..422c2bec0f 100644
--- a/meta/recipes-support/curl/curl_7.82.0.bb
+++ b/meta/recipes-support/curl/curl_7.82.0.bb
@@ -46,6 +46,7 @@ SRC_URI = "https://curl.se/download/${BP}.tar.xz \
file://CVE-2023-27535_and_CVE-2023-27538.patch \
file://CVE-2023-27536.patch \
file://CVE-2023-28319.patch \
+ file://CVE-2023-28320.patch \
"
SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 03/13] curl: Fix CVE-2023-28321
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 01/13] curl: Fix CVE-2023-28319 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 02/13] curl: Fix CVE-2023-28320 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 04/13] curl: Fix CVE-2023-28322 Steve Sakoman
` (9 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bhabu Bindu <bhabu.bindu@kpit.com>
Add patch to fix CVE-2023-28321
IDN wildcard match
curl supports matching of wildcard patterns when listed as
"Subject Alternative Name" in TLS server certificates. curl can be
built to use its own name matching function for TLS rather than one
provided by a TLS library. This private wildcard matching function
would match IDN (International Domain Name)hosts incorrectly and
could as a result accept patterns that otherwise should mismatch.
IDN hostnames are converted to puny code before used for certificate
checks. Puny coded names always start with `xn--` and should not be
allowed to pattern match, but the wildcard check in curl could still
check for `x*`,which would match even though the IDN name most likely
contained nothing even resembling an `x`.
Link: https://curl.se/docs/CVE-2023-28321.html
Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../curl/curl/CVE-2023-28321.patch | 302 ++++++++++++++++++
meta/recipes-support/curl/curl_7.82.0.bb | 1 +
2 files changed, 303 insertions(+)
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28321.patch
diff --git a/meta/recipes-support/curl/curl/CVE-2023-28321.patch b/meta/recipes-support/curl/curl/CVE-2023-28321.patch
new file mode 100644
index 0000000000..bcd8b112db
--- /dev/null
+++ b/meta/recipes-support/curl/curl/CVE-2023-28321.patch
@@ -0,0 +1,302 @@
+From 199f2d440d8659b42670c1b796220792b01a97bf Mon Sep 17 00:00:00 2001
+From: Daniel Stenberg <daniel@haxx.se>
+Date: Mon, 24 Apr 2023 21:07:02 +0200
+Subject: [PATCH] hostcheck: fix host name wildcard checking
+
+The leftmost "label" of the host name can now only match against single
+'*'. Like the browsers have worked for a long time.
+
+- extended unit test 1397 for this
+- move some SOURCE variables from unit/Makefile.am to unit/Makefile.inc
+
+Reported-by: Hiroki Kurosawa
+Closes #11018
+
+CVE: CVE-2023-28321
+Upstream-Status: Backport [https://github.com/curl/curl/commit/199f2d440d8659b42]
+Comments: Hunks removed as changes already exist
+Removed hunks from files:
+tests/unit/Makefile.am
+tests/unit/Makefile.inc
+Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
+---
+ lib/vtls/hostcheck.c | 50 +++++++--------
+ tests/data/test1397 | 10 ++-
+ tests/unit/Makefile.am | 94 ----------------------------
+ tests/unit/Makefile.inc | 94 ++++++++++++++++++++++++++++
+ tests/unit/unit1397.c | 134 ++++++++++++++++++++++++----------------
+ 5 files changed, 202 insertions(+), 180 deletions(-)
+
+diff --git a/lib/vtls/hostcheck.c b/lib/vtls/hostcheck.c
+index e827dc58f378c..d061c6356f97f 100644
+--- a/lib/vtls/hostcheck.c
++++ b/lib/vtls/hostcheck.c
+@@ -71,7 +71,12 @@ static bool pmatch(const char *hostname, size_t hostlen,
+ * apparent distinction between a name and an IP. We need to detect the use of
+ * an IP address and not wildcard match on such names.
+ *
++ * Only match on "*" being used for the leftmost label, not "a*", "a*b" nor
++ * "*b".
++ *
+ * Return TRUE on a match. FALSE if not.
++ *
++ * @unittest: 1397
+ */
+
+ static bool hostmatch(const char *hostname,
+@@ -79,53 +84,42 @@ static bool hostmatch(const char *hostname,
+ const char *pattern,
+ size_t patternlen)
+ {
+- const char *pattern_label_end, *wildcard, *hostname_label_end;
+- size_t prefixlen, suffixlen;
++ const char *pattern_label_end;
+
+- /* normalize pattern and hostname by stripping off trailing dots */
++ DEBUGASSERT(pattern);
+ DEBUGASSERT(patternlen);
++ DEBUGASSERT(hostname);
++ DEBUGASSERT(hostlen);
++
++ /* normalize pattern and hostname by stripping off trailing dots */
+ if(hostname[hostlen-1]=='.')
+ hostlen--;
+ if(pattern[patternlen-1]=='.')
+ patternlen--;
+
+- wildcard = memchr(pattern, '*', patternlen);
+- if(!wildcard)
++ if(strncmp(pattern, "*.", 2))
+ return pmatch(hostname, hostlen, pattern, patternlen);
+
+ /* detect IP address as hostname and fail the match if so */
+- if(Curl_host_is_ipnum(hostname))
++ else if(Curl_host_is_ipnum(hostname))
+ return FALSE;
+
+ /* We require at least 2 dots in the pattern to avoid too wide wildcard
+ match. */
+ pattern_label_end = memchr(pattern, '.', patternlen);
+ if(!pattern_label_end ||
+- (memrchr(pattern, '.', patternlen) == pattern_label_end) ||
+- strncasecompare(pattern, "xn--", 4))
++ (memrchr(pattern, '.', patternlen) == pattern_label_end))
+ return pmatch(hostname, hostlen, pattern, patternlen);
+-
+- hostname_label_end = memchr(hostname, '.', hostlen);
+- if(!hostname_label_end)
+- return FALSE;
+ else {
+- size_t skiphost = hostname_label_end - hostname;
+- size_t skiplen = pattern_label_end - pattern;
+- if(!pmatch(hostname_label_end, hostlen - skiphost,
+- pattern_label_end, patternlen - skiplen))
+- return FALSE;
++ const char *hostname_label_end = memchr(hostname, '.', hostlen);
++ if(hostname_label_end) {
++ size_t skiphost = hostname_label_end - hostname;
++ size_t skiplen = pattern_label_end - pattern;
++ return pmatch(hostname_label_end, hostlen - skiphost,
++ pattern_label_end, patternlen - skiplen);
++ }
+ }
+- /* The wildcard must match at least one character, so the left-most
+- label of the hostname is at least as large as the left-most label
+- of the pattern. */
+- if(hostname_label_end - hostname < pattern_label_end - pattern)
+- return FALSE;
+-
+- prefixlen = wildcard - pattern;
+- suffixlen = pattern_label_end - (wildcard + 1);
+- return strncasecompare(pattern, hostname, prefixlen) &&
+- strncasecompare(wildcard + 1, hostname_label_end - suffixlen,
+- suffixlen) ? TRUE : FALSE;
++ return FALSE;
+ }
+
+ /*
+diff --git a/tests/data/test1397 b/tests/data/test1397
+index 84f962abebee3..f31b2c2a3f330 100644
+--- a/tests/data/test1397
++++ b/tests/data/test1397
+@@ -2,8 +2,7 @@
+ <info>
+ <keywords>
+ unittest
+-ssl
+-wildcard
++Curl_cert_hostcheck
+ </keywords>
+ </info>
+
+@@ -16,9 +15,8 @@ none
+ <features>
+ unittest
+ </features>
+- <name>
+-Check wildcard certificate matching function Curl_cert_hostcheck
+- </name>
++<name>
++Curl_cert_hostcheck unit tests
++</name>
+ </client>
+-
+ </testcase>
+diff --git a/tests/unit/unit1397.c b/tests/unit/unit1397.c
+index 2f3d3aa4d09e1..3ae75618d5d10 100644
+--- a/tests/unit/unit1397.c
++++ b/tests/unit/unit1397.c
+@@ -23,7 +23,6 @@
+ ***************************************************************************/
+ #include "curlcheck.h"
+
+-#include "vtls/hostcheck.h" /* from the lib dir */
+
+ static CURLcode unit_setup(void)
+ {
+@@ -32,63 +31,94 @@ static CURLcode unit_setup(void)
+
+ static void unit_stop(void)
+ {
+- /* done before shutting down and exiting */
+ }
+
+-UNITTEST_START
+-
+ /* only these backends define the tested functions */
+-#if defined(USE_OPENSSL) || defined(USE_GSKIT)
+-
+- /* here you start doing things and checking that the results are good */
++#if defined(USE_OPENSSL) || defined(USE_GSKIT) || defined(USE_SCHANNEL)
++#include "vtls/hostcheck.h"
++struct testcase {
++ const char *host;
++ const char *pattern;
++ bool match;
++};
+
+-fail_unless(Curl_cert_hostcheck(STRCONST("www.example.com"),
+- STRCONST("www.example.com")), "good 1");
+-fail_unless(Curl_cert_hostcheck(STRCONST("*.example.com"),
+- STRCONST("www.example.com")),
+- "good 2");
+-fail_unless(Curl_cert_hostcheck(STRCONST("xxx*.example.com"),
+- STRCONST("xxxwww.example.com")), "good 3");
+-fail_unless(Curl_cert_hostcheck(STRCONST("f*.example.com"),
+- STRCONST("foo.example.com")), "good 4");
+-fail_unless(Curl_cert_hostcheck(STRCONST("192.168.0.0"),
+- STRCONST("192.168.0.0")), "good 5");
++static struct testcase tests[] = {
++ {"", "", FALSE},
++ {"a", "", FALSE},
++ {"", "b", FALSE},
++ {"a", "b", FALSE},
++ {"aa", "bb", FALSE},
++ {"\xff", "\xff", TRUE},
++ {"aa.aa.aa", "aa.aa.bb", FALSE},
++ {"aa.aa.aa", "aa.aa.aa", TRUE},
++ {"aa.aa.aa", "*.aa.bb", FALSE},
++ {"aa.aa.aa", "*.aa.aa", TRUE},
++ {"192.168.0.1", "192.168.0.1", TRUE},
++ {"192.168.0.1", "*.168.0.1", FALSE},
++ {"192.168.0.1", "*.0.1", FALSE},
++ {"h.ello", "*.ello", FALSE},
++ {"h.ello.", "*.ello", FALSE},
++ {"h.ello", "*.ello.", FALSE},
++ {"h.e.llo", "*.e.llo", TRUE},
++ {"h.e.llo", " *.e.llo", FALSE},
++ {" h.e.llo", "*.e.llo", TRUE},
++ {"h.e.llo.", "*.e.llo", TRUE},
++ {"*.e.llo.", "*.e.llo", TRUE},
++ {"************.e.llo.", "*.e.llo", TRUE},
++ {"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
++ "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB"
++ "CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"
++ "DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD"
++ "EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"
++ ".e.llo.", "*.e.llo", TRUE},
++ {"\xfe\xfe.e.llo.", "*.e.llo", TRUE},
++ {"h.e.llo.", "*.e.llo.", TRUE},
++ {"h.e.llo", "*.e.llo.", TRUE},
++ {".h.e.llo", "*.e.llo.", FALSE},
++ {"h.e.llo", "*.*.llo.", FALSE},
++ {"h.e.llo", "h.*.llo", FALSE},
++ {"h.e.llo", "h.e.*", FALSE},
++ {"hello", "*.ello", FALSE},
++ {"hello", "**llo", FALSE},
++ {"bar.foo.example.com", "*.example.com", FALSE},
++ {"foo.example.com", "*.example.com", TRUE},
++ {"baz.example.net", "b*z.example.net", FALSE},
++ {"foobaz.example.net", "*baz.example.net", FALSE},
++ {"xn--l8j.example.local", "x*.example.local", FALSE},
++ {"xn--l8j.example.net", "*.example.net", TRUE},
++ {"xn--l8j.example.net", "*j.example.net", FALSE},
++ {"xn--l8j.example.net", "xn--l8j.example.net", TRUE},
++ {"xn--l8j.example.net", "xn--l8j.*.net", FALSE},
++ {"xl8j.example.net", "*.example.net", TRUE},
++ {"fe80::3285:a9ff:fe46:b619", "*::3285:a9ff:fe46:b619", FALSE},
++ {"fe80::3285:a9ff:fe46:b619", "fe80::3285:a9ff:fe46:b619", TRUE},
++ {NULL, NULL, FALSE}
++};
+
+-fail_if(Curl_cert_hostcheck(STRCONST("xxx.example.com"),
+- STRCONST("www.example.com")), "bad 1");
+-fail_if(Curl_cert_hostcheck(STRCONST("*"),
+- STRCONST("www.example.com")),"bad 2");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.*.com"),
+- STRCONST("www.example.com")), "bad 3");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.example.com"),
+- STRCONST("baa.foo.example.com")), "bad 4");
+-fail_if(Curl_cert_hostcheck(STRCONST("f*.example.com"),
+- STRCONST("baa.example.com")), "bad 5");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.com"),
+- STRCONST("example.com")), "bad 6");
+-fail_if(Curl_cert_hostcheck(STRCONST("*fail.com"),
+- STRCONST("example.com")), "bad 7");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.example."),
+- STRCONST("www.example.")), "bad 8");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.example."),
+- STRCONST("www.example")), "bad 9");
+-fail_if(Curl_cert_hostcheck(STRCONST(""), STRCONST("www")), "bad 10");
+-fail_if(Curl_cert_hostcheck(STRCONST("*"), STRCONST("www")), "bad 11");
+-fail_if(Curl_cert_hostcheck(STRCONST("*.168.0.0"),
+- STRCONST("192.168.0.0")), "bad 12");
+-fail_if(Curl_cert_hostcheck(STRCONST("www.example.com"),
+- STRCONST("192.168.0.0")), "bad 13");
+-
+-#ifdef ENABLE_IPV6
+-fail_if(Curl_cert_hostcheck(STRCONST("*::3285:a9ff:fe46:b619"),
+- STRCONST("fe80::3285:a9ff:fe46:b619")), "bad 14");
+-fail_unless(Curl_cert_hostcheck(STRCONST("fe80::3285:a9ff:fe46:b619"),
+- STRCONST("fe80::3285:a9ff:fe46:b619")),
+- "good 6");
+-#endif
++UNITTEST_START
++{
++ int i;
++ for(i = 0; tests[i].host; i++) {
++ if(tests[i].match != Curl_cert_hostcheck(tests[i].pattern,
++ strlen(tests[i].pattern),
++ tests[i].host,
++ strlen(tests[i].host))) {
++ fprintf(stderr,
++ "HOST: %s\n"
++ "PTRN: %s\n"
++ "did %sMATCH\n",
++ tests[i].host,
++ tests[i].pattern,
++ tests[i].match ? "NOT ": "");
++ unitfail++;
++ }
++ }
++}
+
+-#endif
++UNITTEST_STOP
++#else
+
+- /* you end the test code like this: */
++UNITTEST_START
+
+ UNITTEST_STOP
++#endif
diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.82.0.bb
index 422c2bec0f..3241867d7e 100644
--- a/meta/recipes-support/curl/curl_7.82.0.bb
+++ b/meta/recipes-support/curl/curl_7.82.0.bb
@@ -47,6 +47,7 @@ SRC_URI = "https://curl.se/download/${BP}.tar.xz \
file://CVE-2023-27536.patch \
file://CVE-2023-28319.patch \
file://CVE-2023-28320.patch \
+ file://CVE-2023-28321.patch \
"
SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 04/13] curl: Fix CVE-2023-28322
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (2 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 03/13] curl: Fix CVE-2023-28321 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 05/13] linux-yocto/5.10: update to v5.10.176 Steve Sakoman
` (8 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bhabu Bindu <bhabu.bindu@kpit.com>
Add patches to fix CVE-2023-28322
more POST-after-PUT confusion
When doing HTTP(S) transfers, libcurl might erroneously use the read
callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when
the `CURLOPT_POSTFIELDS` option has been set, if the same handle
previously was used to issue a `PUT` request which used that callback.
This flaw may surprise the application and cause it to misbehave and
either send off the wrong data or use memory after free or similar in
the second transfer.The problem exists in the logic for a reused
handle when it is (expected tobe) changed from a PUT to a POST.
CVE-2023-28322-1.patch is a supporting patch to resolve hunk
error in the actual patch file : CVE-2023-28322-2.patch
Link: https://curl.se/docs/CVE-2023-28322.html
Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../curl/curl/CVE-2023-28322-1.patch | 84 ++++
.../curl/curl/CVE-2023-28322-2.patch | 436 ++++++++++++++++++
meta/recipes-support/curl/curl_7.82.0.bb | 2 +
3 files changed, 522 insertions(+)
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28322-1.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2023-28322-2.patch
diff --git a/meta/recipes-support/curl/curl/CVE-2023-28322-1.patch b/meta/recipes-support/curl/curl/CVE-2023-28322-1.patch
new file mode 100644
index 0000000000..547127001d
--- /dev/null
+++ b/meta/recipes-support/curl/curl/CVE-2023-28322-1.patch
@@ -0,0 +1,84 @@
+From efbf02111aa66bda9288506b7d5cc0226bf5453e Mon Sep 17 00:00:00 2001
+From: Daniel Stenberg <daniel@haxx.se>
+Date: Sun, 12 Feb 2023 13:24:08 +0100
+Subject: [PATCH] smb: return error on upload without size
+
+The protocol needs to know the size ahead of time, this is now a known
+restriction and not a bug.
+
+Also output a clearer error if the URL path does not contain proper
+share.
+
+Ref: #7896
+Closes #10484
+
+CVE: CVE-2023-28322
+Upstream-Status: Backport [https://github.com/curl/curl/commit/efbf02111aa66bda9288506b7d5cc0226bf5453e]
+Comments: Hunks refreshed
+Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
+---
+ docs/KNOWN_BUGS | 5 -----
+ docs/URL-SYNTAX.md | 3 +++
+ lib/smb.c | 6 ++++++
+ 3 files changed, 9 insertions(+), 5 deletions(-)
+
+diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS
+index cbf5be352a279..a515e7a59bdfd 100644
+--- a/docs/KNOWN_BUGS
++++ b/docs/KNOWN_BUGS
+@@ -58,7 +58,6 @@
+ 5.7 Visual Studio project gaps
+ 5.8 configure finding libs in wrong directory
+ 5.9 Utilize Requires.private directives in libcurl.pc
+- 5.10 curl hangs on SMB upload over stdin
+ 5.11 configure --with-gssapi with Heimdal is ignored on macOS
+ 5.12 flaky Windows CI builds
+
+@@ -332,10 +331,6 @@ problems may have been fixed or changed somewhat since this was written.
+
+ https://github.com/curl/curl/issues/864
+
+-5.10 curl hangs on SMB upload over stdin
+-
+- See https://github.com/curl/curl/issues/7896
+-
+ 5.11 configure --with-gssapi with Heimdal is ignored on macOS
+
+ ... unless you also pass --with-gssapi-libs
+diff --git a/docs/URL-SYNTAX.md b/docs/URL-SYNTAX.md
+index 691fcceacd66c..802bbdef96979 100644
+--- a/docs/URL-SYNTAX.md
++++ b/docs/URL-SYNTAX.md
+@@ -360,6 +360,9 @@ share and directory or the share to upload to and as such, may not be omitted.
+ If the user name is embedded in the URL then it must contain the domain name
+ and as such, the backslash must be URL encoded as %2f.
+
++When uploading to SMB, the size of the file needs to be known ahead of time,
++meaning that you can upload a file passed to curl over a pipe like stdin.
++
+ curl supports SMB version 1 (only)
+
+ ## SMTP
+diff --git a/lib/smb.c b/lib/smb.c
+index 8a76763c157ce..dc0abe784bcee 100644
+--- a/lib/smb.c
++++ b/lib/smb.c
+@@ -763,6 +763,11 @@ static CURLcode smb_request_state(struct Curl_easy *data, bool *done)
+ void *msg = NULL;
+ const struct smb_nt_create_response *smb_m;
+
++ if(data->set.upload && (data->state.infilesize < 0)) {
++ failf(data, "SMB upload needs to know the size up front");
++ return CURLE_SEND_ERROR;
++ }
++
+ /* Start the request */
+ if(req->state == SMB_REQUESTING) {
+ result = smb_send_tree_connect(data);
+@@ -993,6 +998,7 @@ static CURLcode smb_parse_url_path(struct Curl_easy *data,
+ /* The share must be present */
+ if(!slash) {
+ Curl_safefree(smbc->share);
++ failf(data, "missing share in URL path for SMB");
+ return CURLE_URL_MALFORMAT;
+ }
diff --git a/meta/recipes-support/curl/curl/CVE-2023-28322-2.patch b/meta/recipes-support/curl/curl/CVE-2023-28322-2.patch
new file mode 100644
index 0000000000..f2134dd1c3
--- /dev/null
+++ b/meta/recipes-support/curl/curl/CVE-2023-28322-2.patch
@@ -0,0 +1,436 @@
+From 7815647d6582c0a4900be2e1de6c5e61272c496b Mon Sep 17 00:00:00 2001
+From: Daniel Stenberg <daniel@haxx.se>
+Date: Tue, 25 Apr 2023 08:28:01 +0200
+Subject: [PATCH] lib: unify the upload/method handling
+
+By making sure we set state.upload based on the set.method value and not
+independently as set.upload, we reduce confusion and mixup risks, both
+internally and externally.
+
+Closes #11017
+
+CVE: CVE-2023-28322
+Upstream-Status: Backport [https://github.com/curl/curl/commit/7815647d6582c0a4900be2e1de]
+Comments: Hunks refreshed
+Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com>
+---
+ lib/curl_rtmp.c | 4 ++--
+ lib/file.c | 4 ++--
+ lib/ftp.c | 8 ++++----
+ lib/http.c | 4 ++--
+ lib/imap.c | 6 +++---
+ lib/rtsp.c | 4 ++--
+ lib/setopt.c | 6 ++----
+ lib/smb.c | 6 +++---
+ lib/smtp.c | 4 ++--
+ lib/tftp.c | 8 ++++----
+ lib/transfer.c | 4 ++--
+ lib/urldata.h | 2 +-
+ lib/vssh/libssh.c | 6 +++---
+ lib/vssh/libssh2.c | 6 +++---
+ lib/vssh/wolfssh.c | 2 +-
+ 15 files changed, 36 insertions(+), 38 deletions(-)
+
+diff --git a/lib/curl_rtmp.c b/lib/curl_rtmp.c
+index 2679a2cdc1afe..406fb42ac0f44 100644
+--- a/lib/curl_rtmp.c
++++ b/lib/curl_rtmp.c
+@@ -231,7 +231,7 @@ static CURLcode rtmp_connect(struct Curl_easy *data, bool *done)
+ /* We have to know if it's a write before we send the
+ * connect request packet
+ */
+- if(data->set.upload)
++ if(data->state.upload)
+ r->Link.protocol |= RTMP_FEATURE_WRITE;
+
+ /* For plain streams, use the buffer toggle trick to keep data flowing */
+@@ -263,7 +263,7 @@ static CURLcode rtmp_do(struct Curl_easy *data, bool *done)
+ if(!RTMP_ConnectStream(r, 0))
+ return CURLE_FAILED_INIT;
+
+- if(data->set.upload) {
++ if(data->state.upload) {
+ Curl_pgrsSetUploadSize(data, data->state.infilesize);
+ Curl_setup_transfer(data, -1, -1, FALSE, FIRSTSOCKET);
+ }
+diff --git a/lib/file.c b/lib/file.c
+index 51c5d07ce40ab..c751e8861a99b 100644
+--- a/lib/file.c
++++ b/lib/file.c
+@@ -240,7 +240,7 @@ static CURLcode file_connect(struct Curl_easy *data, bool *done)
+ file->freepath = real_path; /* free this when done */
+
+ file->fd = fd;
+- if(!data->set.upload && (fd == -1)) {
++ if(!data->state.upload && (fd == -1)) {
+ failf(data, "Couldn't open file %s", data->state.up.path);
+ file_done(data, CURLE_FILE_COULDNT_READ_FILE, FALSE);
+ return CURLE_FILE_COULDNT_READ_FILE;
+@@ -422,7 +422,7 @@ static CURLcode file_do(struct Curl_easy *data, bool *done)
+
+ Curl_pgrsStartNow(data);
+
+- if(data->set.upload)
++ if(data->state.upload)
+ return file_upload(data);
+
+ file = data->req.p.file;
+diff --git a/lib/ftp.c b/lib/ftp.c
+index f50d7baf622f8..4ff68cc454cbc 100644
+--- a/lib/ftp.c
++++ b/lib/ftp.c
+@@ -1348,7 +1348,7 @@ static CURLcode ftp_state_prepare_transfer(struct Curl_easy *data)
+ data->set.str[STRING_CUSTOMREQUEST]?
+ data->set.str[STRING_CUSTOMREQUEST]:
+ (data->state.list_only?"NLST":"LIST"));
+- else if(data->set.upload)
++ else if(data->state.upload)
+ result = Curl_pp_sendf(data, &ftpc->pp, "PRET STOR %s",
+ conn->proto.ftpc.file);
+ else
+@@ -3384,7 +3384,7 @@ static CURLcode ftp_done(struct Curl_easy *data, CURLcode status,
+ /* the response code from the transfer showed an error already so no
+ use checking further */
+ ;
+- else if(data->set.upload) {
++ else if(data->state.upload) {
+ if((-1 != data->state.infilesize) &&
+ (data->state.infilesize != data->req.writebytecount) &&
+ !data->set.crlf &&
+@@ -3640,7 +3640,7 @@ static CURLcode ftp_do_more(struct Curl_easy *data, int *completep)
+ connected back to us */
+ }
+ }
+- else if(data->set.upload) {
++ else if(data->state.upload) {
+ result = ftp_nb_type(data, conn, data->state.prefer_ascii,
+ FTP_STOR_TYPE);
+ if(result)
+@@ -4233,7 +4233,7 @@
+ ftpc->file = NULL; /* instead of point to a zero byte,
+ we make it a NULL pointer */
+
+- if(data->set.upload && !ftpc->file && (ftp->transfer == PPTRANSFER_BODY)) {
++ if(data->state.upload && !ftpc->file && (ftp->transfer == PPTRANSFER_BODY)) {
+ /* We need a file name when uploading. Return error! */
+ failf(data, "Uploading to a URL without a file name!");
+ free(rawPath);
+diff --git a/lib/http.c b/lib/http.c
+index 80e43f6f361e8..bffdd3468536d 100644
+--- a/lib/http.c
++++ b/lib/http.c
+@@ -2033,7 +2033,7 @@
+ Curl_HttpReq httpreq = data->state.httpreq;
+ const char *request;
+ if((conn->handler->protocol&(PROTO_FAMILY_HTTP|CURLPROTO_FTP)) &&
+- data->set.upload)
++ data->state.upload)
+ httpreq = HTTPREQ_PUT;
+
+ /* Now set the 'request' pointer to the proper request string */
+@@ -2423,7 +2423,7 @@ CURLcode Curl_http_body(struct Curl_easy *data, struct connectdata *conn,
+ if((conn->handler->protocol & PROTO_FAMILY_HTTP) &&
+ (((httpreq == HTTPREQ_POST_MIME || httpreq == HTTPREQ_POST_FORM) &&
+ http->postsize < 0) ||
+- ((data->set.upload || httpreq == HTTPREQ_POST) &&
++ ((data->state.upload || httpreq == HTTPREQ_POST) &&
+ data->state.infilesize == -1))) {
+ if(conn->bits.authneg)
+ /* don't enable chunked during auth neg */
+diff --git a/lib/imap.c b/lib/imap.c
+index c2f675d4b2618..1952e66a1efcd 100644
+--- a/lib/imap.c
++++ b/lib/imap.c
+@@ -1511,11 +1511,11 @@ static CURLcode imap_done(struct Curl_easy *data, CURLcode status,
+ result = status; /* use the already set error code */
+ }
+ else if(!data->set.connect_only && !imap->custom &&
+- (imap->uid || imap->mindex || data->set.upload ||
++ (imap->uid || imap->mindex || data->state.upload ||
+ data->set.mimepost.kind != MIMEKIND_NONE)) {
+ /* Handle responses after FETCH or APPEND transfer has finished */
+
+- if(!data->set.upload && data->set.mimepost.kind == MIMEKIND_NONE)
++ if(!data->state.upload && data->set.mimepost.kind == MIMEKIND_NONE)
+ state(data, IMAP_FETCH_FINAL);
+ else {
+ /* End the APPEND command first by sending an empty line */
+@@ -1581,7 +1581,7 @@ static CURLcode imap_perform(struct Curl_easy *data, bool *connected,
+ selected = TRUE;
+
+ /* Start the first command in the DO phase */
+- if(data->set.upload || data->set.mimepost.kind != MIMEKIND_NONE)
++ if(data->state.upload || data->set.mimepost.kind != MIMEKIND_NONE)
+ /* APPEND can be executed directly */
+ result = imap_perform_append(data);
+ else if(imap->custom && (selected || !imap->mailbox))
+diff --git a/lib/rtsp.c b/lib/rtsp.c
+index ea99d720ec4eb..ccd7264b00e74 100644
+--- a/lib/rtsp.c
++++ b/lib/rtsp.c
+@@ -493,7 +493,7 @@ static CURLcode rtsp_do(struct Curl_easy *data, bool *done)
+ rtspreq == RTSPREQ_SET_PARAMETER ||
+ rtspreq == RTSPREQ_GET_PARAMETER) {
+
+- if(data->set.upload) {
++ if(data->state.upload) {
+ putsize = data->state.infilesize;
+ data->state.httpreq = HTTPREQ_PUT;
+
+@@ -512,7 +512,7 @@ static CURLcode rtsp_do(struct Curl_easy *data, bool *done)
+ result =
+ Curl_dyn_addf(&req_buffer,
+ "Content-Length: %" CURL_FORMAT_CURL_OFF_T"\r\n",
+- (data->set.upload ? putsize : postsize));
++ (data->state.upload ? putsize : postsize));
+ if(result)
+ return result;
+ }
+diff --git a/lib/setopt.c b/lib/setopt.c
+index 38f5711e44191..0c3b9634d1192 100644
+--- a/lib/setopt.c
++++ b/lib/setopt.c
+@@ -333,8 +333,8 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param)
+ * We want to sent data to the remote host. If this is HTTP, that equals
+ * using the PUT request.
+ */
+- data->set.upload = (0 != va_arg(param, long)) ? TRUE : FALSE;
+- if(data->set.upload) {
++ arg = va_arg(param, long);
++ if(arg) {
+ /* If this is HTTP, PUT is what's needed to "upload" */
+ data->set.method = HTTPREQ_PUT;
+ data->set.opt_no_body = FALSE; /* this is implied */
+@@ -625,7 +625,6 @@
+ }
+ else
+ data->set.method = HTTPREQ_GET;
+- data->set.upload = FALSE;
+ break;
+
+ case CURLOPT_HTTPPOST:
+@@ -888,7 +887,6 @@ CURLcode Curl_vsetopt(struct Curl_easy *data, CURLoption option, va_list param)
+ */
+ if(va_arg(param, long)) {
+ data->set.method = HTTPREQ_GET;
+- data->set.upload = FALSE; /* switch off upload */
+ data->set.opt_no_body = FALSE; /* this is implied */
+ }
+ break;
+diff --git a/lib/smb.c b/lib/smb.c
+index a1e444ee6b97e..d6822213529bc 100644
+--- a/lib/smb.c
++++ b/lib/smb.c
+@@ -530,7 +530,7 @@ static CURLcode smb_send_open(struct Curl_easy *data)
+ byte_count = strlen(req->path);
+ msg.name_length = smb_swap16((unsigned short)byte_count);
+ msg.share_access = smb_swap32(SMB_FILE_SHARE_ALL);
+- if(data->set.upload) {
++ if(data->state.upload) {
+ msg.access = smb_swap32(SMB_GENERIC_READ | SMB_GENERIC_WRITE);
+ msg.create_disposition = smb_swap32(SMB_FILE_OVERWRITE_IF);
+ }
+@@ -762,7 +762,7 @@ static CURLcode smb_request_state(struct Curl_easy *data, bool *done)
+ void *msg = NULL;
+ const struct smb_nt_create_response *smb_m;
+
+- if(data->set.upload && (data->state.infilesize < 0)) {
++ if(data->state.upload && (data->state.infilesize < 0)) {
+ failf(data, "SMB upload needs to know the size up front");
+ return CURLE_SEND_ERROR;
+ }
+@@ -813,7 +813,7 @@ static CURLcode smb_request_state(struct Curl_easy *data, bool *done)
+ smb_m = (const struct smb_nt_create_response*) msg;
+ req->fid = smb_swap16(smb_m->fid);
+ data->req.offset = 0;
+- if(data->set.upload) {
++ if(data->state.upload) {
+ data->req.size = data->state.infilesize;
+ Curl_pgrsSetUploadSize(data, data->req.size);
+ next_state = SMB_UPLOAD;
+diff --git a/lib/smtp.c b/lib/smtp.c
+index 7a030308d4689..c182cace742d7 100644
+--- a/lib/smtp.c
++++ b/lib/smtp.c
+@@ -1419,7 +1419,7 @@ static CURLcode smtp_done(struct Curl_easy *data, CURLcode status,
+ result = status; /* use the already set error code */
+ }
+ else if(!data->set.connect_only && data->set.mail_rcpt &&
+- (data->set.upload || data->set.mimepost.kind)) {
++ (data->state.upload || data->set.mimepost.kind)) {
+ /* Calculate the EOB taking into account any terminating CRLF from the
+ previous line of the email or the CRLF of the DATA command when there
+ is "no mail data". RFC-5321, sect. 4.1.1.4.
+@@ -1511,7 +1511,7 @@ static CURLcode smtp_perform(struct Curl_easy *data, bool *connected,
+ smtp->eob = 2;
+
+ /* Start the first command in the DO phase */
+- if((data->set.upload || data->set.mimepost.kind) && data->set.mail_rcpt)
++ if((data->state.upload || data->set.mimepost.kind) && data->set.mail_rcpt)
+ /* MAIL transfer */
+ result = smtp_perform_mail(data);
+ else
+diff --git a/lib/tftp.c b/lib/tftp.c
+index 164d3c723c5b9..8ed1b887b4d21 100644
+--- a/lib/tftp.c
++++ b/lib/tftp.c
+@@ -370,7 +370,7 @@ static CURLcode tftp_parse_option_ack(struct tftp_state_data *state,
+
+ /* tsize should be ignored on upload: Who cares about the size of the
+ remote file? */
+- if(!data->set.upload) {
++ if(!data->state.upload) {
+ if(!tsize) {
+ failf(data, "invalid tsize -:%s:- value in OACK packet", value);
+ return CURLE_TFTP_ILLEGAL;
+@@ -451,7 +451,7 @@ static CURLcode tftp_send_first(struct tftp_state_data *state,
+ return result;
+ }
+
+- if(data->set.upload) {
++ if(data->state.upload) {
+ /* If we are uploading, send an WRQ */
+ setpacketevent(&state->spacket, TFTP_EVENT_WRQ);
+ state->data->req.upload_fromhere =
+@@ -486,7 +486,7 @@ static CURLcode tftp_send_first(struct tftp_state_data *state,
+ if(!data->set.tftp_no_options) {
+ char buf[64];
+ /* add tsize option */
+- if(data->set.upload && (data->state.infilesize != -1))
++ if(data->state.upload && (data->state.infilesize != -1))
+ msnprintf(buf, sizeof(buf), "%" CURL_FORMAT_CURL_OFF_T,
+ data->state.infilesize);
+ else
+@@ -540,7 +540,7 @@ static CURLcode tftp_send_first(struct tftp_state_data *state,
+ break;
+
+ case TFTP_EVENT_OACK:
+- if(data->set.upload) {
++ if(data->state.upload) {
+ result = tftp_connect_for_tx(state, event);
+ }
+ else {
+diff --git a/lib/transfer.c b/lib/transfer.c
+index e9ab8fbf09510..cb69f3365855a 100644
+--- a/lib/transfer.c
++++ b/lib/transfer.c
+@@ -1293,6 +1293,7 @@ void Curl_init_CONNECT(struct Curl_easy *data)
+ {
+ data->state.fread_func = data->set.fread_func_set;
+ data->state.in = data->set.in_set;
++ data->state.upload = (data->state.httpreq == HTTPREQ_PUT);
+ }
+
+ /*
+@@ -1767,7 +1767,6 @@
+ data->state.httpreq != HTTPREQ_POST_MIME) ||
+ !(data->set.keep_post & CURL_REDIR_POST_303))) {
+ data->state.httpreq = HTTPREQ_GET;
+- data->set.upload = false;
+ infof(data, "Switch to %s",
+ data->set.opt_no_body?"HEAD":"GET");
+ }
+@@ -1770,7 +1770,7 @@ CURLcode Curl_retry_request(struct Curl_easy *data, char **url)
+
+ /* if we're talking upload, we can't do the checks below, unless the protocol
+ is HTTP as when uploading over HTTP we will still get a response */
+- if(data->set.upload &&
++ if(data->state.upload &&
+ !(conn->handler->protocol&(PROTO_FAMILY_HTTP|CURLPROTO_RTSP)))
+ return CURLE_OK;
+
+diff --git a/lib/urldata.h b/lib/urldata.h
+index cca992a0295aa..a8580bdb66fe8 100644
+--- a/lib/urldata.h
++++ b/lib/urldata.h
+@@ -1487,6 +1487,7 @@
+ BIT(url_alloc); /* URL string is malloc()'ed */
+ BIT(referer_alloc); /* referer string is malloc()ed */
+ BIT(wildcard_resolve); /* Set to true if any resolve change is a wildcard */
++ BIT(upload); /* upload request */
+ };
+
+ /*
+@@ -1838,7 +1839,6 @@ struct UserDefined {
+ BIT(http_auto_referer); /* set "correct" referer when following
+ location: */
+ BIT(opt_no_body); /* as set with CURLOPT_NOBODY */
+- BIT(upload); /* upload request */
+ BIT(verbose); /* output verbosity */
+ BIT(krb); /* Kerberos connection requested */
+ BIT(reuse_forbid); /* forbidden to be reused, close after use */
+diff --git a/lib/vssh/libssh.c b/lib/vssh/libssh.c
+index b31f741ba9492..d60edaa303642 100644
+--- a/lib/vssh/libssh.c
++++ b/lib/vssh/libssh.c
+@@ -1209,7 +1209,7 @@ static CURLcode myssh_statemach_act(struct Curl_easy *data, bool *block)
+ }
+
+ case SSH_SFTP_TRANS_INIT:
+- if(data->set.upload)
++ if(data->state.upload)
+ state(data, SSH_SFTP_UPLOAD_INIT);
+ else {
+ if(protop->path[strlen(protop->path)-1] == '/')
+@@ -1802,7 +1802,7 @@ static CURLcode myssh_statemach_act(struct Curl_easy *data, bool *block)
+ /* Functions from the SCP subsystem cannot handle/return SSH_AGAIN */
+ ssh_set_blocking(sshc->ssh_session, 1);
+
+- if(data->set.upload) {
++ if(data->state.upload) {
+ if(data->state.infilesize < 0) {
+ failf(data, "SCP requires a known file size for upload");
+ sshc->actualcode = CURLE_UPLOAD_FAILED;
+@@ -1907,7 +1907,7 @@ static CURLcode myssh_statemach_act(struct Curl_easy *data, bool *block)
+ break;
+ }
+ case SSH_SCP_DONE:
+- if(data->set.upload)
++ if(data->state.upload)
+ state(data, SSH_SCP_SEND_EOF);
+ else
+ state(data, SSH_SCP_CHANNEL_FREE);
+diff --git a/lib/vssh/libssh2.c b/lib/vssh/libssh2.c
+index f1154dc47a74e..f2e5352d1fd3a 100644
+--- a/lib/vssh/libssh2.c
++++ b/lib/vssh/libssh2.c
+@@ -2019,7 +2019,7 @@ static CURLcode ssh_statemach_act(struct Curl_easy *data, bool *block)
+ }
+
+ case SSH_SFTP_TRANS_INIT:
+- if(data->set.upload)
++ if(data->state.upload)
+ state(data, SSH_SFTP_UPLOAD_INIT);
+ else {
+ if(sshp->path[strlen(sshp->path)-1] == '/')
+@@ -2691,7 +2691,7 @@ static CURLcode ssh_statemach_act(struct Curl_easy *data, bool *block)
+ break;
+ }
+
+- if(data->set.upload) {
++ if(data->state.upload) {
+ if(data->state.infilesize < 0) {
+ failf(data, "SCP requires a known file size for upload");
+ sshc->actualcode = CURLE_UPLOAD_FAILED;
+@@ -2831,7 +2831,7 @@ static CURLcode ssh_statemach_act(struct Curl_easy *data, bool *block)
+ break;
+
+ case SSH_SCP_DONE:
+- if(data->set.upload)
++ if(data->state.upload)
+ state(data, SSH_SCP_SEND_EOF);
+ else
+ state(data, SSH_SCP_CHANNEL_FREE);
+diff --git a/lib/vssh/wolfssh.c b/lib/vssh/wolfssh.c
+index 17d59ecd23bc8..2ca91b7363b1d 100644
+--- a/lib/vssh/wolfssh.c
++++ b/lib/vssh/wolfssh.c
+@@ -557,7 +557,7 @@ static CURLcode wssh_statemach_act(struct Curl_easy *data, bool *block)
+ }
+ break;
+ case SSH_SFTP_TRANS_INIT:
+- if(data->set.upload)
++ if(data->state.upload)
+ state(data, SSH_SFTP_UPLOAD_INIT);
+ else {
+ if(sftp_scp->path[strlen(sftp_scp->path)-1] == '/')
diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.82.0.bb
index 3241867d7e..96280b31b2 100644
--- a/meta/recipes-support/curl/curl_7.82.0.bb
+++ b/meta/recipes-support/curl/curl_7.82.0.bb
@@ -48,6 +48,8 @@ SRC_URI = "https://curl.se/download/${BP}.tar.xz \
file://CVE-2023-28319.patch \
file://CVE-2023-28320.patch \
file://CVE-2023-28321.patch \
+ file://CVE-2023-28322-1.patch \
+ file://CVE-2023-28322-2.patch \
"
SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 05/13] linux-yocto/5.10: update to v5.10.176
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (3 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 04/13] curl: Fix CVE-2023-28322 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 06/13] linux-yocto/5.10: update to v5.10.177 Steve Sakoman
` (7 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bruce Ashfield <bruce.ashfield@gmail.com>
Updating to the latest korg -stable release that comprises
the following commits:
ca9787bdecfa Linux 5.10.176
e57f797e3ffa HID: uhid: Over-ride the default maximum data buffer value with our own
9bc878756b01 HID: core: Provide new max_buffer_size attribute to over-ride the default
daa97e770e78 xfs: remove xfs_setattr_time() declaration
183ca919544c fs: use consistent setgid checks in is_sxid()
0e9dbde96cac attr: use consistent sgid stripping checks
240b96ffece8 attr: add setattr_should_drop_sgid()
baea3ae425fb fs: move should_remove_suid()
24378d6f7486 attr: add in_group_or_capable()
94ac142c19f1 fs: move S_ISGID stripping into the vfs_*() helpers
347750e1b69c fs: add mode_strip_sgid() helper
f60b68c46444 xfs: use setattr_copy to set vfs inode attributes
8cf9400f8948 xfs: set prealloc flag in xfs_alloc_file_space()
308dfe49eb75 xfs: fallocate() should call file_modified()
35f049abbae3 xfs: remove XFS_PREALLOC_SYNC
c84fb2962680 xfs: don't leak btree cursor when insrec fails after a split
be60f08c03de xfs: purge dquots after inode walk fails during quotacheck
d6f223cfef32 xfs: don't assert fail on perag references on teardown
d0292124bb57 PCI/DPC: Await readiness of secondary bus after reset
337aa99f76ea PCI: Unify delay handling for reset and resume
b5e0b3d74285 s390/ipl: add missing intersection check to ipl_report handling
84e2e393bf9f io_uring: avoid null-ptr-deref in io_arm_poll_handler
5e784a7d07af drm/i915/active: Fix misuse of non-idle barriers as fence trackers
8f27d4321700 drm/i915: Don't use stolen memory for ring buffers with LLC
b4a798374f2d x86/mm: Fix use of uninitialized buffer in sme_enable()
764217184f9e x86/mce: Make sure logged MCEs are processed after sysfs update
15e926dfd820 cpuidle: psci: Iterate backwards over list in psci_pd_remove()
38742635eda9 fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
03fc29e75e44 mmc: sdhci_am654: lower power-on failed message severity
b2747b690cb9 mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
83c3b2f4e7c6 ftrace: Fix invalid address access in lookup_rec() when index is 0
f9a98b8dde09 mptcp: avoid setting TCP_CLOSE state twice
684c7372bbd6 drm/shmem-helper: Remove another errant put in error path
fbc5ffcce72b ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
9addf5e1050a ALSA: hda: intel-dsp-config: add MTL PCI id
c54974ccaff7 KVM: nVMX: add missing consistency checks for CR0 and CR4
7b18dea697e4 cifs: Fix smb2_set_path_size()
ec663c410ce0 tracing: Make tracepoint lockdep check actually test something
8ae86ef7a058 tracing: Check field value in hist_field_name()
de3170bd41de tracing: Make splice_read available again
efae80ca13fa interconnect: fix mem leak when freeing nodes
b37d3ccbd549 firmware: xilinx: don't make a sleepable memory allocation from an atomic context
0c16c20b8787 serial: 8250_em: Fix UART port type
f5a5150c7066 tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted
020166bc6669 ext4: fix possible double unlock when moving a directory
7257070be70e drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
ab7da8d93a6f sh: intc: Avoid spurious sizeof-pointer-div warning
6936525142a0 drm/amdkfd: Fix an illegal memory access
a98160d8f3e6 ext4: fix task hung in ext4_xattr_delete_inode
0bf15bc393a1 ext4: fail ext4_iget if special inode unallocated
8e7f26b9565a jffs2: correct logic when creating a hole in jffs2_write_begin
980d4e70c708 mmc: atmel-mci: fix race between stop command and start of next command
04eaeaa2f79f media: m5mols: fix off-by-one loop termination error
a4c048d502eb hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
a4c3e1132422 hwmon: tmp512: drop of_match_ptr for ID table
c5bd9719b53b hwmon: (ucd90320) Add minimum delay between bus accesses
663c3afee81e hwmon: (ina3221) return prober error code
0a73c8b3cc99 hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
4a8c3ad12c9d hwmon: (adt7475) Fix masking of hysteresis registers
aff84fadba53 hwmon: (adt7475) Display smoothing attributes in correct order
d4dbd26f985c ethernet: sun: add check for the mdesc_grab()
eb80cb66a2c5 qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
1c06d1223728 selftests: net: devlink_port_split.py: skip test if no suitable device available
bd2e78462ae1 net/iucv: Fix size of interrupt data
2cc46ed406bb net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
013fae04b8ff ipv4: Fix incorrect table ID in IOCTL path
1f0586dcc076 net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
cccba1ff0798 ice: xsk: disable txq irq before flushing hw
2f28cb5c2a51 block: sunvdc: add check for mdesc_grab() returning NULL
a6317235da8a nvmet: avoid potential UAF in nvmet_req_complete()
9ebc344ce547 nvme: fix handling single range discard request
4cf15887a41b block: null_blk: Fix handling of fake timeout request
d14d2574a54c null_blk: Move driver into its own directory
d5e61a859a8a drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
e294f0aa47e4 net: usb: smsc75xx: Limit packet length to skb->len
9708efad9ba5 net/smc: fix deadlock triggered by cancel_delayed_work_syn()
43aa468df246 nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
194248138f8d net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
be59b87ee4ae net: tunnels: annotate lockless accesses to dev->needed_headroom
281e86e3fab6 qed/qed_dev: guard against a possible division by zero
31817c530768 net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
3cbecb1c9085 i40e: Fix kernel crash during reboot when adapter is in recovery mode
91eb59240150 ipvlan: Make skb->skb_iif track skb->dev for l3s mode
2703da78849c nfc: pn533: initialize struct pn533_out_arg properly
77ad58bca011 tcp: tcp_make_synack() can be called from process context
68c665bb1850 scsi: core: Fix a procfs host directory removal regression
be5aa2534188 scsi: core: Fix a comment in function scsi_host_dev_release()
0fac20b1806b netfilter: nft_redir: correct value of inet type `.maxattrs`
c144dff64ea9 netfilter: nft_redir: correct length for loading protocol registers
3a0f8ea35ddc netfilter: nft_masq: correct length for loading protocol registers
eff050d83eee netfilter: nft_nat: correct length for loading protocol registers
0c6c5abeb471 ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
6f0c2f70d992 scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
79fe786dab5c docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate
ea1e21d38a8d clk: HI655X: select REGMAP instead of depending on it
081893e254f1 drm/meson: fix 1px pink line on GXM when scaling video overlay
ed9ed2f58ceb cifs: Move the in_send statistic to __smb_send_rqst()
a3c502218cd3 drm/panfrost: Don't sync rpm suspension after mmu flushing
0da0b816972a xfrm: Allow transport-mode states with AF_UNSPEC selector
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../linux/linux-yocto-rt_5.10.bb | 6 ++---
.../linux/linux-yocto-tiny_5.10.bb | 8 +++----
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++----------
3 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
index f25745194a..474c3c6b01 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
@@ -11,13 +11,13 @@ python () {
raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
}
-SRCREV_machine ?= "6462fa707bd003b62bee6042c20e8ab1f391df96"
-SRCREV_meta ?= "8ea689ac1980b5c09cd049a3403f72e75a8739da"
+SRCREV_machine ?= "03d34a4008d35075c61a6202f95cb87bd348879d"
+SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
-LINUX_VERSION ?= "5.10.175"
+LINUX_VERSION ?= "5.10.176"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
index 798fb84565..16533170d1 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
@@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig"
require recipes-kernel/linux/linux-yocto.inc
-LINUX_VERSION ?= "5.10.175"
+LINUX_VERSION ?= "5.10.176"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native"
KMETA = "kernel-meta"
KCONF_BSP_AUDIT_LEVEL = "2"
-SRCREV_machine:qemuarm ?= "d90caed79c490df9aab86920b33698bc29899d45"
-SRCREV_machine ?= "878a6b6459feacfa733cf27a14b9f70b9922ba65"
-SRCREV_meta ?= "8ea689ac1980b5c09cd049a3403f72e75a8739da"
+SRCREV_machine:qemuarm ?= "44b10c10eb958db18819f16cfbd7dbdd75be3abd"
+SRCREV_machine ?= "3166b27713fe990c8bd11ab0a510d7e1a386cf86"
+SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
PV = "${LINUX_VERSION}+git${SRCPV}"
diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
index 92666e4865..a9a79ed916 100644
--- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
@@ -13,23 +13,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base"
KBRANCH:qemux86-64 ?= "v5.10/standard/base"
KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64"
-SRCREV_machine:qemuarm ?= "1784e127b2ebee50ade30dc697d9f2c9ccda64d6"
-SRCREV_machine:qemuarm64 ?= "3189034276f25e203dae9df3df5fd33849a63ddb"
-SRCREV_machine:qemumips ?= "ed305aee0a2d924dd532eea364036736a43b008e"
-SRCREV_machine:qemuppc ?= "43e2751f24c4c35341b877429f5c62f57cc23616"
-SRCREV_machine:qemuriscv64 ?= "96f3a7ef51f544080250e995b21e66004fdbb2bb"
-SRCREV_machine:qemuriscv32 ?= "96f3a7ef51f544080250e995b21e66004fdbb2bb"
-SRCREV_machine:qemux86 ?= "96f3a7ef51f544080250e995b21e66004fdbb2bb"
-SRCREV_machine:qemux86-64 ?= "96f3a7ef51f544080250e995b21e66004fdbb2bb"
-SRCREV_machine:qemumips64 ?= "82870b2da104e88b79174aece820f233e0c4bd72"
-SRCREV_machine ?= "96f3a7ef51f544080250e995b21e66004fdbb2bb"
-SRCREV_meta ?= "8ea689ac1980b5c09cd049a3403f72e75a8739da"
+SRCREV_machine:qemuarm ?= "f04da39302cc51ad80638a0690cee42375d208b5"
+SRCREV_machine:qemuarm64 ?= "71939600c1846b45f44348db7261be30f0aefad7"
+SRCREV_machine:qemumips ?= "1ce574832f8aa9097eb383b406f459b334ffbbb4"
+SRCREV_machine:qemuppc ?= "eba8a3dca0ffff3d5ab722cd007451a4e4a3844c"
+SRCREV_machine:qemuriscv64 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
+SRCREV_machine:qemuriscv32 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
+SRCREV_machine:qemux86 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
+SRCREV_machine:qemux86-64 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
+SRCREV_machine:qemumips64 ?= "8bd572b90c004bea71f9c9ddc15ec343d54ddacc"
+SRCREV_machine ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
+SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "5.10.175"
+LINUX_VERSION ?= "5.10.176"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
DEPENDS += "openssl-native util-linux-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 06/13] linux-yocto/5.10: update to v5.10.177
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (4 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 05/13] linux-yocto/5.10: update to v5.10.176 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 07/13] linux-yocto/5.10: update to v5.10.178 Steve Sakoman
` (6 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bruce Ashfield <bruce.ashfield@gmail.com>
Updating to the latest korg -stable release that comprises
the following commits:
387078f9030c Linux 5.10.177
34a02011c5d1 hsr: ratelimit only when errors are printed
7c414f6f06e9 gfs2: Always check inode size of inline inodes
3392d67af0a4 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
b4781477f397 libbpf: Fix btf_dump's packed struct determination
7ad30ad8c684 selftests/bpf: Add few corner cases to test padding handling of btf_dump
e5a16bcb131c libbpf: Fix BTF-to-C converter's padding logic
b9f7422dd94a selftests/bpf: Test btf dump for struct with padding only fields
f1c17475a9dc zonefs: Fix error message in zonefs_file_dio_append()
b51e4422952b btrfs: scan device in non-exclusive mode
3eeff8d26c6d s390/uaccess: add missing earlyclobber annotations to __clear_user()
7051d51f1241 drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
79815326a516 drm/etnaviv: fix reference leak when mmaping imported buffer
a484f8bec8ee rcu: Fix rcu_torture_read ftrace event
08bfd05987df xtensa: fix KASAN report for show_stack
8ada1b5c8b43 ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
3b6992bdf09d ALSA: usb-audio: Fix regression on detection of Roland VS-100
0044721f4f95 ALSA: hda/conexant: Partial revert of a quirk for Lenovo
3d328a17c8cb NFSv4: Fix hangs when recovering open state after a server reboot
80a4200d51e5 powerpc: Don't try to copy PPR for task with NULL pt_regs
12c2612e18ca pinctrl: at91-pio4: fix domain name assignment
25065ed83b5f pinctrl: amd: Disable and mask interrupts on resume
fbf3fe7f7bc3 net: phy: dp83869: fix default value for tx-/rx-internal-delay
b3d7a4478ce0 xen/netback: don't do grant copy across page boundary
5f6347034341 btrfs: fix race between quota disable and quota assign ioctls
ba5deb64ddde Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
26a32a212bc5 cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
63bbe24b99f9 cifs: prevent infinite recursion in CIFSGetDFSRefer()
8b3d7ad3e8f1 Input: focaltech - use explicitly signed char type
449a1a61f7f1 Input: alps - fix compatibility with -funsigned-char
988061d09972 pinctrl: ocelot: Fix alt mode for ocelot
ed3439a8c4fe net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
8104c795517c bnxt_en: Add missing 200G link speed reporting
62850a076353 bnxt_en: Fix typo in PCI id to device description string mapping
f524d1e55013 i40e: fix registers dump after run ethtool adapter self test
fa7fafedc9fd net: ipa: compute DMA pool size properly
96e34c88000f ALSA: ymfpci: Fix BUG_ON in probe function
688b1178c443 ALSA: ymfpci: Fix assignment in if condition
ee17dea3072d s390/vfio-ap: fix memory leak in vfio_ap device driver
ab2a55907823 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
9b22e0cfc4d7 net: stmmac: don't reject VLANs when IFF_PROMISC is set
f032e125149d net/net_failover: fix txq exceeding warning
1025c471517b regulator: Handle deferred clk
69ed49a7b881 r8169: fix RTL8168H and RTL8107E rx crc error
3907fcb5a439 ptp_qoriq: fix memory leak in probe()
6ff4a54c0218 scsi: megaraid_sas: Fix crash after a double completion
059c3a7a3d6d sfc: ef10: don't overwrite offload features at NIC reset
4a81e2da7297 mtd: rawnand: meson: invalidate cache on polling ECC bit
47a449ec09b4 mips: bmips: BCM6358: disable RAC flush for TP1
ac63f78d9aca ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
8b1269b709c9 tracing: Fix wrong return in kprobe_event_gen_test.c
038765a095fd tools/power turbostat: Fix /dev/cpu_dma_latency warnings
5ec5680dc656 fbdev: au1200fb: Fix potential divide by zero
ce5551db3629 fbdev: lxfb: Fix potential divide by zero
c2be7f80562d fbdev: intelfb: Fix potential divide by zero
78eb964805f9 fbdev: nvidia: Fix potential divide by zero
1f2a94baee43 sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
6eaa2254cc5e fbdev: tgafb: Fix potential divide by zero
baef27176ea5 ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
fcf80111a4f6 ALSA: asihpi: check pao in control_message()
b94ffa287415 net: hsr: Don't log netdev_err message on unknown prp dst node
74d6d33f3695 md: avoid signed overflow in slot_store()
10941fd5c3e1 fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
0b9493b504fc dm crypt: avoid accessing uninitialized tasklet
b2d19565478f bus: imx-weim: fix branch condition evaluates to a garbage value
1635a062fa0e drm/meson: fix missing component unbind on bind errors
794a6cea2268 drm/meson: Fix error handling when afbcd.ops->init fails
f7385e0886cd kcsan: avoid passing -g for test
46ae204069e7 kernel: kcsan: kcsan_test: build without structleak plugin
a5ce0a559b66 usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
ddb1973e6765 usb: dwc3: gadget: move cmd_endtransfer to extra function
01e4c9c03de8 NFSD: fix use-after-free in __nfs42_ssc_open()
34ef9cd887d5 KVM: fix memoryleak in kvm_init()
a6d345c3a31e xfs: don't reuse busy extents on extent trim
cb61e1e36fb3 xfs: shut down the filesystem if we screw up quota reservation
91d7a4bd5656 ocfs2: fix data corruption after failed write
d4a5181ba1b1 sched/fair: Sanitize vruntime of entity being migrated
dfdcda25fb5e sched/fair: sanitize vruntime of entity being placed
66ff37993dd7 dm crypt: add cond_resched() to dmcrypt_write()
c68f08cc7456 dm stats: check for and propagate alloc_percpu failure
1eaa2b7ae90c i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
85b637feee1e firmware: arm_scmi: Fix device node validation for mailbox transport
f632a90f8e39 tee: amdtee: fix race condition in amdtee_open_session
4ede0da36c2f drm/i915: Preserve crtc_state->inherited during state clearing
d5329a06b4cb drm/i915/active: Fix missing debug object activation
d18db946cc6a nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
560437bba14d wifi: mac80211: fix qos on mesh interfaces
a6adfe9bbd6a usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
09671cfc2b22 usb: chipidea: core: fix possible concurrent when switch role
073ce98aa3a6 usb: chipdea: core: fix return -EINVAL if request role is the same with current role
5a36b601aff3 usb: cdns3: Fix issue with using incorrect PCI device function
aae6d1bf4d8e dm thin: fix deadlock when swapping to thin device
4d2626e10709 igb: revert rtnl_lock() that causes deadlock
e66f3039c792 fsverity: Remove WQ_UNBOUND from fsverity read workqueue
33f341c1fc60 usb: gadget: u_audio: don't let userspace block driver unbind
1f01027c51eb usb: dwc2: fix a devres leak in hw_enable upon suspend resume
dce128421554 scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
f7a4ce351426 cifs: empty interface list when server doesn't support query interfaces
8beb18c25bef sh: sanitize the flags on sigreturn
87e800e3dc77 net: usb: qmi_wwan: add Telit 0x1080 composition
27d4ce4aa3bb net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
ddfc06179338 scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
3e0a423a55a7 scsi: lpfc: Avoid usage of list iterator variable after loop
f9a937f75ba2 scsi: ufs: core: Add soft dependency on governor_simpleondemand
522314863f78 scsi: hisi_sas: Check devm_add_action() return value
799d29a447dc scsi: target: iscsi: Fix an error message in iscsi_check_key()
8c42442887db selftests/bpf: check that modifier resolves after pointer
df1da53a7e98 m68k: Only force 030 bus error if PC not in exception table
7df72bedbdd1 ca8210: fix mac_len negative array access
3d8fafc5308f HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
082b8240a66a riscv: Bump COMMAND_LINE_SIZE value to 1024
2d6c2dee59a3 thunderbolt: Use const qualifier for `ring_interrupt_index`
06e04b450bb4 thunderbolt: Use scale field when allocating USB3 bandwidth
32fa53c27ea3 uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
231cfa78ec5b scsi: qla2xxx: Perform lockless command completion in abort path
f73a88df19b7 hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
33c2fa39fb9e hwmon: fix potential sensor registration fail if of_node is missing
f86ff88a1548 platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
da3d3fdfb4d5 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
fce0e47e9ec5 Bluetooth: L2CAP: Fix responding with wrong PDU type
77a61df0a0e6 Bluetooth: L2CAP: Fix not checking for maximum number of DCID
65ceb170749b Bluetooth: btqcomsmd: Fix command timeout after setting BD address
7aa3d03e1b30 net: mdio: thunder: Add missing fwnode_handle_put()
94ef1715d263 gve: Cache link_speed value from device
3c72445dadc3 nvme-tcp: fix nvme_tcp_term_pdu to match spec
73db80dcdc20 net/sonic: use dma_mapping_error() for error check
f8cec30541f5 erspan: do not use skb_mac_header() in ndo_start_xmit()
19aa85b9df48 atm: idt77252: fix kmemleak when rmmod idt77252
5eadc8032829 net/mlx5: E-Switch, Fix an Oops in error handling code
265101aea4c0 net/mlx5: Read the TC mapping of all priorities on ETS query
18cead61e437 net/mlx5: Fix steering rules cleanup
a4bbab27c4bf bpf: Adjust insufficient default bpf_jit_limit
a44e98abcca4 keys: Do not cache key in task struct if key is requested from kernel thread
ec23a669deca bootconfig: Fix testcase to increase max node
56e0bc4a72a0 net/ps3_gelic_net: Use dma_mapping_error
3d5a97283e2a net/ps3_gelic_net: Fix RX sk_buff length
cb5879efde4f net: qcom/emac: Fix use after free bug in emac_remove due to race condition
d04dac7fae75 net: mdio: fix owner field for mdio buses registered using device-tree
1b333766ea7a net: phy: Ensure state transitions are processed from phy_stop()
bfeeb3aaad4e xirc2ps_cs: Fix use after free bug in xirc2ps_detach
39c3b9dd481c qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
33d1603a38e0 net: usb: smsc95xx: Limit packet length to skb->len
c09cdf6eb815 scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
a3ada13f20fd i2c: imx-lpi2c: check only for enabled interrupt flags
bde2e73d5232 igc: fix the validation logic for taprio's gate list
d3e4844c1829 igbvf: Regard vf reset nack as success
fe3850c72a72 intel/igbvf: free irq on the error path in igbvf_request_msix()
155d6d434f86 iavf: fix non-tunneled IPv6 UDP packet type and hashing
15dcb57eba09 iavf: fix inverted Rx hash condition leading to disabled hash
580634b03a55 xsk: Add missing overflow check in xdp_umem_reg
7b5dffe048f9 ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
35a49d27585c ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
75e2144291e8 power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
2b346876b931 power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
18359b8e30c4 power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
1fde5782f187 net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
cfeda9432c1d drm/sun4i: fix missing component unbind on bind errors
b5131ed83c83 serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
5fcb12f00a05 serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED
19a98d56dfed tty: serial: fsl_lpuart: fix race on RX DMA shutdown
ae12308c7d55 serial: fsl_lpuart: Fix comment typo
a43f7d0628e4 KVM: Register /dev/kvm as the _very_ last thing during initialization
7958663668ef KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except()
6100066358ee KVM: Optimize kvm_make_vcpus_request_mask() a bit
ad120bc86930 KVM: KVM: Use cpumask_available() to check for NULL cpumask when kicking vCPUs
4cc54f6ae535 KVM: Clean up benign vcpu->cpu data races when kicking vCPUs
8f9ae017dd35 ipmi:ssif: Add a timer between request retries
c94de7f85d99 ipmi:ssif: resend_msg() cannot fail
cd35cbde0078 ipmi:ssif: Increase the message retry time
4d57c90f24e1 ipmi:ssif: make ssif_i2c_send() void
18dd825b8651 perf: fix perf_event_context->time
ddcf83200036 perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
29ee1495e857 interconnect: qcom: osm-l3: fix icc_onecell_data allocation
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../linux/linux-yocto-rt_5.10.bb | 6 ++---
.../linux/linux-yocto-tiny_5.10.bb | 8 +++----
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++----------
3 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
index 474c3c6b01..e087add2bf 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
@@ -11,13 +11,13 @@ python () {
raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
}
-SRCREV_machine ?= "03d34a4008d35075c61a6202f95cb87bd348879d"
-SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
+SRCREV_machine ?= "f6146935c0b2cb2d342d8d188e7779c8244883a3"
+SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
-LINUX_VERSION ?= "5.10.176"
+LINUX_VERSION ?= "5.10.177"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
index 16533170d1..37eab2d7ab 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
@@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig"
require recipes-kernel/linux/linux-yocto.inc
-LINUX_VERSION ?= "5.10.176"
+LINUX_VERSION ?= "5.10.177"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native"
KMETA = "kernel-meta"
KCONF_BSP_AUDIT_LEVEL = "2"
-SRCREV_machine:qemuarm ?= "44b10c10eb958db18819f16cfbd7dbdd75be3abd"
-SRCREV_machine ?= "3166b27713fe990c8bd11ab0a510d7e1a386cf86"
-SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
+SRCREV_machine:qemuarm ?= "deb2d09b4882f73a460887572816b3408845a5cf"
+SRCREV_machine ?= "63eb02cd1aa6c4f3e75ac2c69944a82979850c79"
+SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
PV = "${LINUX_VERSION}+git${SRCPV}"
diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
index a9a79ed916..ef9a581be4 100644
--- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
@@ -13,23 +13,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base"
KBRANCH:qemux86-64 ?= "v5.10/standard/base"
KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64"
-SRCREV_machine:qemuarm ?= "f04da39302cc51ad80638a0690cee42375d208b5"
-SRCREV_machine:qemuarm64 ?= "71939600c1846b45f44348db7261be30f0aefad7"
-SRCREV_machine:qemumips ?= "1ce574832f8aa9097eb383b406f459b334ffbbb4"
-SRCREV_machine:qemuppc ?= "eba8a3dca0ffff3d5ab722cd007451a4e4a3844c"
-SRCREV_machine:qemuriscv64 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
-SRCREV_machine:qemuriscv32 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
-SRCREV_machine:qemux86 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
-SRCREV_machine:qemux86-64 ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
-SRCREV_machine:qemumips64 ?= "8bd572b90c004bea71f9c9ddc15ec343d54ddacc"
-SRCREV_machine ?= "f027472a5dcddfaff51c9deb6aa6e517b3f88e7f"
-SRCREV_meta ?= "18265875e3652c8edf8c3d86f8ae3e0130b93968"
+SRCREV_machine:qemuarm ?= "98332f8182ad39dbf2a864fdb8a813f03e3c6381"
+SRCREV_machine:qemuarm64 ?= "c8dff1b7b60ce1afbd0b6d5cb25ac335594e0ddc"
+SRCREV_machine:qemumips ?= "ff6ab2848e9bb9342bb128728ac8137f12acf4ae"
+SRCREV_machine:qemuppc ?= "f77b04b2253f1f4466dd7ed67846acdf173dc014"
+SRCREV_machine:qemuriscv64 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
+SRCREV_machine:qemuriscv32 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
+SRCREV_machine:qemux86 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
+SRCREV_machine:qemux86-64 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
+SRCREV_machine:qemumips64 ?= "c1189cd9d1c5149306b2740322b849acf0349b3c"
+SRCREV_machine ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
+SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "5.10.176"
+LINUX_VERSION ?= "5.10.177"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
DEPENDS += "openssl-native util-linux-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 07/13] linux-yocto/5.10: update to v5.10.178
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (5 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 06/13] linux-yocto/5.10: update to v5.10.177 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 08/13] linux-yocto/5.10: update to v5.10.179 Steve Sakoman
` (5 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bruce Ashfield <bruce.ashfield@gmail.com>
Updating to the latest korg -stable release that comprises
the following commits:
791a854ae5a5 Linux 5.10.178
f177b382c339 sysctl: Fix data-races in proc_dou8vec_minmax().
56314b90fd43 panic, kexec: make __crash_kexec() NMI safe
d425f348211f kexec: turn all kexec_mutex acquisitions into trylocks
784b6ba15eb2 kexec: move locking into do_kexec_load
0b077b22ea9f riscv: Handle zicsr/zifencei issues between clang and binutils
c36a25101179 kbuild: check CONFIG_AS_IS_LLVM instead of LLVM_IAS
d5f67f6d4ec4 kbuild: Switch to 'f' variants of integrated assembler flag
83f55e6f298e kbuild: check the minimum assembler version in Kconfig
6facabb4d069 coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
7b78445bce52 watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
10b7a33c5de3 i2c: ocores: generate stop condition after timeout in polling mode
b4210b10dc7e x86/rtc: Remove __init for runtime functions
ba4a2f6d99fc sched/fair: Fix imbalance overflow
68387ae3b63e sched/fair: Move calculate of avg_load to a better location
ccbec01cc99c powerpc/papr_scm: Update the NUMA distance table for the target node
453b3188be89 powerpc/pseries: Add support for FORM2 associativity
498618e0a1e7 powerpc/pseries: Add a helper for form1 cpu distance
18ce785effd9 powerpc/pseries: Consolidate different NUMA distance update code paths
f2ae0eb96bfb powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY
f6d8a3a2eaab powerpc/pseries: rename min_common_depth to primary_domain_index
5abf8af8df97 ubi: Fix deadlock caused by recursively holding work_sem
33611d4a8181 mtd: ubi: wl: Fix a couple of kernel-doc issues
0279e82e1484 ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
37a3cf4abc5a cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
10bda0ec3160 x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
176d7345b89c scsi: ses: Handle enclosure with just a primary component gracefully
cf22c98bcbf8 net: sfp: initialize sfp->i2c_block_size at sfp allocation
2a4835b8ede0 riscv: add icache flush for nommu sigreturn trampoline
c76e79e526cd asymmetric_keys: log on fatal failures in PE/pkcs7
5de2e1f5e26f verify_pefile: relax wrapper length check
e4b9f0bf91a3 drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
9f0ee9ed54e1 efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
e1f80b4dfad9 i2c: imx-lpi2c: clean rx/tx buffers upon new message
81c30f89b9c3 wifi: mwifiex: mark OF related data as maybe unused
ab39582f3081 power: supply: cros_usbpd: reclassify "default case!" as debug
6de0d0699f5c libbpf: Fix single-line struct definition output in btf_dump
1bec9da233f7 net: macb: fix a memory corruption in extended buffer descriptor mode
7d8c844b337d udp6: fix potential access to stale information
d1b9b3191697 RDMA/core: Fix GID entry ref leak when create_ah fails
79b28f42214a sctp: fix a potential overflow in sctp_ifwdtsn_skip
3814d211ff13 net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
dad92d8ada07 qlcnic: check pci_reset_function result
4a519731ece8 drm/armada: Fix a potential double free in an error handling path
a069d4d98cd2 tcp: restrict net.ipv4.tcp_app_win
cc9f9a49f5b3 tcp: convert elligible sysctls to u8
f662a0786dfd ipv4: shrink netns_ipv4 with sysctl conversions
389dab6142d7 sysctl: add proc_dou8vec_minmax()
8a1fdb35459d niu: Fix missing unwind goto in niu_alloc_channels()
9266e939d762 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
ae1149885142 RDMA/cma: Allow UD qp_type to join multicast only
5e567fd29611 IB/mlx5: Add support for 400G_8X lane speed
a1d2fb5d13c9 IB/mlx5: Add support for NDR link speed
8a886f01b85d clk: sprd: set max_register according to mapping range
6e2845284b12 mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
9e946e4e8c3d mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
6b0e71919264 mtd: rawnand: meson: fix bitmask for length in command word
441e57ff87c2 mtdblock: tolerate corrected bit-flips
0d07ea8d385c fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
5635e6940656 btrfs: fix fast csum implementation detection
3576e08f19dc btrfs: print checksum type and implementation at mount time
f7ec5ca433ce Bluetooth: Fix race condition in hidp_session_thread
d9ba36c22a7b Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
8533fe864574 ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
8f6a20a4f4ce ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()
69108a8a45c6 ALSA: i2c/cs8427: fix iec958 mixer control deactivation
e63a515d11de ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
df4af0ddf7f0 ALSA: emu10k1: fix capture interrupt handler unlinking
14e90335bc73 Revert "pinctrl: amd: Disable and mask interrupts on resume"
59dc9767cefb bpftool: Print newline before '}' for struct with padding only fields
2765aca63776 ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
a412ba6b6cc6 Revert "media: ti: cal: fix possible memory leak in cal_ctx_create()"
2d96c8dca946 drm/bridge: lt9611: Fix PLL being unable to lock
a2773afc81fc selftests: intel_pstate: ftime() is deprecated
ea8c42b3b6d9 mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
5a74837809cc ring-buffer: Fix race while reader and writer are on the same page
c1bbe926a1c7 drm/nouveau/disp: Support more modes by checking with lower bpc
8250f7f7ae21 drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
acbbfdba9ca6 ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
6e36373aa5ff tracing: Free error logs of tracing instances
9c5df2f14ee3 can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
70caa596d158 can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
f018ef34c44b ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
eadcad0a47bf ftrace: Mark get_lock_parent_ip() __always_inline
9470fc63ab42 perf/core: Fix the same task check in perf_event_set_output
499757ad3332 scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
4bfdead17443 iio: adc: ad7791: fix IRQ flags
14f9ff7857e7 ALSA: hda/realtek: Add quirk for Clevo X370SNW
1f3b8c3b047a dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
3dbee84bf9e3 nilfs2: fix sysfs interface lifetime
f32297dba338 nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
a17bed82c0d3 tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty
25eff5e7f743 tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
72a3e4fa882d tty: serial: sh-sci: Fix transmit end interrupt handler
741d73fc573c iio: light: cm32181: Unregister second I2C client if present
58bf30479a2e iio: dac: cio-dac: Fix max DAC write value check for 12-bit
f47659f1e942 iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
52a003870ee2 USB: serial: option: add Quectel RM500U-CN modem
e6655d483766 USB: serial: option: add Telit FE990 compositions
9d1f2a6b8d9a usb: typec: altmodes/displayport: Fix configure initial pin assignment
4be2b71e9d36 USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
ec20260950af xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
b4b4f17aa46c usb: xhci: tegra: fix sleep in atomic call
07216da8fb1d NFSD: callback request does not use correct credential for AUTH_SYS
a3c4aa48e5f2 sunrpc: only free unix grouplist after RCU settles
890517a4a255 net: stmmac: fix up RX flow hash indirection table when setting channels
bdbbd3fa58f8 net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
d8c8476c1433 gpio: davinci: Add irq chip flag to skip set wake
605b056d6330 ipv6: Fix an uninit variable access bug in __ip6_make_skb()
ff2565fb8f19 net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
b4b6dfad41aa sctp: check send stream number after wait_for_sndbuf
efda95cebfdd net: don't let netpoll invoke NAPI if in xmit context
ec81049f0957 icmp: guard against too small mtu
98a9cd82c541 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
94c53d294944 net: qrtr: combine nameservice into main module
3fe20515449a wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta
2951229ee7d0 KVM: s390: pv: fix external interruption loop not always detected
b43a8939f1e1 pwm: sprd: Explicitly set .polarity in .get_state()
d59b83494d1b pwm: cros-ec: Explicitly set .polarity in .get_state()
176c6b488919 Drivers: vmbus: Check for channel allocation before looking up relids
c51b336bd951 gpio: GPIO_REGMAP: select REGMAP instead of depending on it
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../linux/linux-yocto-rt_5.10.bb | 6 ++---
.../linux/linux-yocto-tiny_5.10.bb | 8 +++----
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++----------
3 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
index e087add2bf..ccc123d036 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
@@ -11,13 +11,13 @@ python () {
raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
}
-SRCREV_machine ?= "f6146935c0b2cb2d342d8d188e7779c8244883a3"
-SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
+SRCREV_machine ?= "c3918acd783cc421a852e580a8430d00d5e4cd5a"
+SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
-LINUX_VERSION ?= "5.10.177"
+LINUX_VERSION ?= "5.10.178"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
index 37eab2d7ab..41389e4fb9 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
@@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig"
require recipes-kernel/linux/linux-yocto.inc
-LINUX_VERSION ?= "5.10.177"
+LINUX_VERSION ?= "5.10.178"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native"
KMETA = "kernel-meta"
KCONF_BSP_AUDIT_LEVEL = "2"
-SRCREV_machine:qemuarm ?= "deb2d09b4882f73a460887572816b3408845a5cf"
-SRCREV_machine ?= "63eb02cd1aa6c4f3e75ac2c69944a82979850c79"
-SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
+SRCREV_machine:qemuarm ?= "4b892f65338376fcd1e18df926c06f190b539bd2"
+SRCREV_machine ?= "dc18514b51d27ae5446c8a5d068b3f996a42338a"
+SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
PV = "${LINUX_VERSION}+git${SRCPV}"
diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
index ef9a581be4..a20381c7fb 100644
--- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
@@ -13,23 +13,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base"
KBRANCH:qemux86-64 ?= "v5.10/standard/base"
KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64"
-SRCREV_machine:qemuarm ?= "98332f8182ad39dbf2a864fdb8a813f03e3c6381"
-SRCREV_machine:qemuarm64 ?= "c8dff1b7b60ce1afbd0b6d5cb25ac335594e0ddc"
-SRCREV_machine:qemumips ?= "ff6ab2848e9bb9342bb128728ac8137f12acf4ae"
-SRCREV_machine:qemuppc ?= "f77b04b2253f1f4466dd7ed67846acdf173dc014"
-SRCREV_machine:qemuriscv64 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
-SRCREV_machine:qemuriscv32 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
-SRCREV_machine:qemux86 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
-SRCREV_machine:qemux86-64 ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
-SRCREV_machine:qemumips64 ?= "c1189cd9d1c5149306b2740322b849acf0349b3c"
-SRCREV_machine ?= "cf160f367e3ceb54cde11392a80413b152ca4e15"
-SRCREV_meta ?= "1ba4a1bc51cdb8831392fd4c4fca13e85aa6a344"
+SRCREV_machine:qemuarm ?= "8f307a1c5b41dda1afe514cdd5427bb3320489a9"
+SRCREV_machine:qemuarm64 ?= "3539c6a469c2cd6e2beffcdbbbbc94603e00b048"
+SRCREV_machine:qemumips ?= "c501f357b5e8ccb10b25377c1a0c0ddd0f75c5e2"
+SRCREV_machine:qemuppc ?= "86717b18bbfa608b68bec3f8d5b463ea0dfd4802"
+SRCREV_machine:qemuriscv64 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
+SRCREV_machine:qemuriscv32 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
+SRCREV_machine:qemux86 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
+SRCREV_machine:qemux86-64 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
+SRCREV_machine:qemumips64 ?= "56b2142b8f2f4697145676de1a98230c74e82b41"
+SRCREV_machine ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
+SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "5.10.177"
+LINUX_VERSION ?= "5.10.178"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
DEPENDS += "openssl-native util-linux-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 08/13] linux-yocto/5.10: update to v5.10.179
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (6 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 07/13] linux-yocto/5.10: update to v5.10.178 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 09/13] linux-yocto/5.10: update to v5.10.180 Steve Sakoman
` (4 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bruce Ashfield <bruce.ashfield@gmail.com>
Updating to the latest korg -stable release that comprises
the following commits:
f1b32fda06d2 Linux 5.10.179
0367bf3f4a4e ASN.1: Fix check for strdup() success
4ab5f8f9d026 ASoC: fsl_asrc_dma: fix potential null-ptr-deref
42604b4ad5f3 iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
155b2586de3f pwm: hibvt: Explicitly set .polarity in .get_state()
1c3a1211370d pwm: iqs620a: Explicitly set .polarity in .get_state()
b28079807de2 pwm: meson: Explicitly set .polarity in .get_state()
f69112de70a0 sctp: Call inet6_destroy_sock() via sk->sk_destruct().
7da54ddc04e6 dccp: Call inet6_destroy_sock() via sk->sk_destruct().
04d393c4bbf5 inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
b1f06ab985ef tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
0e7b5e1020aa udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
05cf34a2b641 ext4: fix use-after-free in ext4_xattr_set_entry
c75711396c04 ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
9400206d9d5e Revert "ext4: fix use-after-free in ext4_xattr_set_entry"
81775ab858b4 fuse: fix deadlock between atomic O_TRUNC and page invalidation
03cefde986f1 fuse: always revalidate rename target dentry
42dfdbd4dcfa fuse: fix attr version comparison in fuse_read_update_size()
0078a1667cbf fuse: check s_root when destroying sb
6d0d67b05f7b virtiofs: split requests that exceed virtqueue size
cf08dc79168a virtiofs: clean up error handling in virtio_fs_get_tree()
e220438d1e33 purgatory: fix disabling debug info
37df709706ae docs: futex: Fix kernel-doc references after code split-up preparation
77748b0a047e MIPS: Define RUNTIME_DISCARD_EXIT in LD script
4735b6f74f25 sched/fair: Fixes for capacity inversion detection
89ad8a672f57 sched/uclamp: Fix a uninitialized variable warnings
09129798a608 sched/fair: Consider capacity inversion in util_fits_cpu()
30f04dd56dfd sched/fair: Detect capacity inversion
b18cbd359d72 sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition
41a880740c9f sched/uclamp: Make cpu_overutilized() use util_fits_cpu()
07750955e9a2 sched/uclamp: Make asym_fits_capacity() use util_fits_cpu()
2fd1c194e688 sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
8ca2bf63d946 sched/uclamp: Fix fits_capacity() check in feec()
5cb1a56ced30 sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
2523d9d7bb5c mm/khugepaged: check again on anon uffd-wp during isolation
651b0bf43d67 mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
c61928fcca27 kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
e10a6d88ae9b memstick: fix memory leak if card device is never registered
2c90ef37151f nilfs2: initialize unused bytes in segment summary blocks
09daff9c3cd7 iio: light: tsl2772: fix reading proximity-diodes from device tree
77ac8f2ad4ad xfs: drop submit side trans alloc for append ioends
a4e800a7bd67 powerpc/doc: Fix htmldocs errors
c215c636819c xen/netback: use same error messages for same errors
0c9cbfc951c4 nvme-tcp: fix a possible UAF when failing to allocate an io queue
8c746b665089 s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
a36246a7480d net: dsa: b53: mmap: add phy ops
b33f28ea45e9 scsi: core: Improve scsi_vpd_inquiry() checks
24ddcc6a635b scsi: megaraid_sas: Fix fw_crash_buffer_show()
01bd481b1b94 selftests: sigaltstack: fix -Wuninitialized
8b44a83a1680 Input: i8042 - add quirk for Fujitsu Lifebook A574/H
37882b203a2d f2fs: Fix f2fs_truncate_partial_nodes ftrace event
9a8dbfd7f3e5 e1000e: Disable TSO on i219-LM card to increase speed
b1281d008845 bpf: Fix incorrect verifier pruning due to missing register precision taints
b085b5787b4a mlxsw: pci: Fix possible crash during initialization
c972851d3848 net: rpl: fix rpl header size calculation
b6b06c5ee333 mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
880c09bc2f0b i40e: fix i40e_setup_misc_vector() error handling
72df55d3dc96 i40e: fix accessing vsi->active_filters without holding lock
381110d06192 netfilter: nf_tables: fix ifdef to also consider nf_tables=m
6758a51ef36a sfc: Fix use-after-free due to selftest_work
06a72bbf0d98 sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP.
b6dd232f6350 virtio_net: bugfix overflow inside xdp_linearize_page()
ddcf35deb8f2 net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
8e73952957a3 regulator: fan53555: Explicitly include bits header
3224458030a2 netfilter: br_netfilter: fix recent physdev match breakage
08b78037c4f1 arm64: dts: imx8mm-evk: correct pmic clock source
2c06e904c2b7 arm64: dts: meson-g12-common: specify full DMC range
b33dbd06ac5f arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
e662521ec739 ARM: dts: rockchip: fix a typo error for rk3288 spdif node
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../linux/linux-yocto-rt_5.10.bb | 6 ++---
.../linux/linux-yocto-tiny_5.10.bb | 8 +++----
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++----------
3 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
index ccc123d036..f39b28c5fb 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
@@ -11,13 +11,13 @@ python () {
raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
}
-SRCREV_machine ?= "c3918acd783cc421a852e580a8430d00d5e4cd5a"
-SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
+SRCREV_machine ?= "42be00a6acf8aa69c1816ed0022af788eda02635"
+SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
-LINUX_VERSION ?= "5.10.178"
+LINUX_VERSION ?= "5.10.179"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
index 41389e4fb9..c77162c9f9 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
@@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig"
require recipes-kernel/linux/linux-yocto.inc
-LINUX_VERSION ?= "5.10.178"
+LINUX_VERSION ?= "5.10.179"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native"
KMETA = "kernel-meta"
KCONF_BSP_AUDIT_LEVEL = "2"
-SRCREV_machine:qemuarm ?= "4b892f65338376fcd1e18df926c06f190b539bd2"
-SRCREV_machine ?= "dc18514b51d27ae5446c8a5d068b3f996a42338a"
-SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
+SRCREV_machine:qemuarm ?= "c368271929a4b4b419575966578abb32cab23b5d"
+SRCREV_machine ?= "f1b49ee7456e402d93961861e611b9ca829da753"
+SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
PV = "${LINUX_VERSION}+git${SRCPV}"
diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
index a20381c7fb..46b9fdf870 100644
--- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
@@ -13,23 +13,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base"
KBRANCH:qemux86-64 ?= "v5.10/standard/base"
KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64"
-SRCREV_machine:qemuarm ?= "8f307a1c5b41dda1afe514cdd5427bb3320489a9"
-SRCREV_machine:qemuarm64 ?= "3539c6a469c2cd6e2beffcdbbbbc94603e00b048"
-SRCREV_machine:qemumips ?= "c501f357b5e8ccb10b25377c1a0c0ddd0f75c5e2"
-SRCREV_machine:qemuppc ?= "86717b18bbfa608b68bec3f8d5b463ea0dfd4802"
-SRCREV_machine:qemuriscv64 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
-SRCREV_machine:qemuriscv32 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
-SRCREV_machine:qemux86 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
-SRCREV_machine:qemux86-64 ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
-SRCREV_machine:qemumips64 ?= "56b2142b8f2f4697145676de1a98230c74e82b41"
-SRCREV_machine ?= "6f03475538a6d4f1f762ea6e1652499eeb2fb347"
-SRCREV_meta ?= "290ffeb6d028a31fe9c6e146b9ef618d50e36a04"
+SRCREV_machine:qemuarm ?= "7b27b209bb9a594edeb3b4f4b919e8900aade179"
+SRCREV_machine:qemuarm64 ?= "17427c04e8d8c55004e817279ea99e977097787f"
+SRCREV_machine:qemumips ?= "0bd9e4cdcd99d0d4576a1198bba063ba2500ab16"
+SRCREV_machine:qemuppc ?= "123f9fe3b1ce8c60a4b55c0030a8a7428c18a516"
+SRCREV_machine:qemuriscv64 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
+SRCREV_machine:qemuriscv32 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
+SRCREV_machine:qemux86 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
+SRCREV_machine:qemux86-64 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
+SRCREV_machine:qemumips64 ?= "55e025dc1b9a8847f0307b87e07e175c929528a0"
+SRCREV_machine ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
+SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "5.10.178"
+LINUX_VERSION ?= "5.10.179"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
DEPENDS += "openssl-native util-linux-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 09/13] linux-yocto/5.10: update to v5.10.180
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (7 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 08/13] linux-yocto/5.10: update to v5.10.179 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 10/13] kernel-devicetree: allow specification of dtb directory Steve Sakoman
` (3 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Bruce Ashfield <bruce.ashfield@gmail.com>
Updating to the latest korg -stable release that comprises
the following commits:
4c893ff55907 Linux 5.10.180
3ebe5d6d69ce drm/amd/display: Fix hang when skipping modeset
a992c387b411 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
f2656f437fb1 drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
32232bcd4e53 printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
fcfe05990a5c KVM: x86: move guest_pv_has out of user_access section
85cfbaa575ea KVM: x86: do not report preemption if the steal time cache is stale
4bffae22bec7 KVM: x86: revalidate steal time cache if MSR value changes
e10a73f53809 KVM: x86: do not set st->preempted when going back to user space
029662004359 KVM: x86: Remove obsolete disabling of page faults in kvm_arch_vcpu_put()
8e39c2f407af KVM: Fix steal time asm constraints
ebd3010d42ba KVM: x86: Fix recording of guest steal time / preempted status
4b19cbdb1dd3 KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
01c0002ec7bd drbd: correctly submit flush bio on barrier
ef77d602e306 serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
1a8822343e67 ext4: fix invalid free tracking in ext4_xattr_move_to_block()
b0fc279de4bf ext4: remove a BUG_ON in ext4_mb_release_group_pa()
d88fe8e61126 ext4: bail out of ext4_xattr_ibody_get() fails for any reason
4597554b4f7b ext4: add bounds checking in get_max_inline_xattr_value_size()
5f8b55136ad7 ext4: fix deadlock when converting an inline directory in nojournal mode
37c69da3adc4 ext4: improve error recovery code paths in __ext4_remount()
08838aeefa6f ext4: check iomap type only if ext4_iomap_begin() does not fail
4aa7f744fa37 ext4: fix data races when using cached status extents
0dde3141c527 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
5d356d902e9d ext4: fix WARNING in mb_find_extent
529f41f0eb1e KVM: x86: do not report a vCPU as preempted outside instruction boundaries
0cb6e9e7d3f1 KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL
4502ebbdc0e2 HID: wacom: insert timestamp to packed Bluetooth (BT) events
77fd800d3f1b HID: wacom: Set a default resolution for older tablets
c1420276be7a drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
20ca90ceda71 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
eed63477ae06 drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
c85327c1e93c drm/panel: otm8009a: Set backlight parent to panel device
957904f531fd f2fs: fix potential corruption when moving a directory
4a638a958230 ARM: dts: s5pv210: correct MIPI CSIS clock name
fed6318e4722 ARM: dts: exynos: fix WM8960 clock name in Itop Elite
777952ce1187 remoteproc: st: Call of_node_put() on iteration error
30e0834becd8 remoteproc: stm32: Call of_node_put() on iteration error
62fe5d74ef7f sh: nmi_debug: fix return value of __setup handler
9245f34029b7 sh: init: use OF_EARLY_FLATTREE for early init
f19bc0d2a68c sh: mcount.S: fix build error when PRINTK is not enabled
bbad64abd610 sh: math-emu: fix macro redefined warning
2d65c97777e5 inotify: Avoid reporting event with invalid wd
73aef14407de platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
4b87eec73e47 platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet
8c2cdb7326f0 cifs: fix pcchunk length type in smb2_copychunk_range
829c20fd7a7b btrfs: print-tree: parent bytenr must be aligned to sector size
148b16cd30b2 btrfs: don't free qgroup space unless specified
08fa23adbdcc btrfs: fix btrfs_prev_leaf() to not return the same key twice
7a4db11f00f3 perf symbols: Fix return incorrect build_id size in elf_read_build_id()
87a1fa0ad74e crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
be3517ae6b80 perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
604b650fb574 perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents
1ebd0dfb271e perf vendor events power9: Remove UTF-8 characters from JSON files
796616f216d0 net: enetc: check the index of the SFI rather than the handle
b6b15de5129e virtio_net: suppress cpu stall when free_unused_bufs
c043714ef230 virtio_net: split free_unused_bufs()
0773270b1314 net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
0f1ad0ef60cc ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
7f497a9451d7 drm/amdgpu: add a missing lock for AMDGPU_SCHED
f00ef2618fa1 af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
02359ba526ce ionic: remove noise from ethtool rxnfc error msg
3605b3318483 octeontx2-vf: Detach LF resources on probe cleanup
ea7453f5e5b6 octeontx2-pf: Disable packet I/O for graceful exit
15152b8a4bbb rxrpc: Fix hard call timeout units
9291aba0ffa0 sfc: Fix module EEPROM reporting for QSFP modules
774da7052156 net/sched: act_mirred: Add carrier check
f3fae1b1c721 watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
3b7798b42e1d writeback: fix call of incorrect macro
f47f0fb5b58b net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
d6f0687d506d sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
7311c8be3755 net/sched: cls_api: remove block_cb from driver_list before freeing
cc8efc78c3f6 net/ncsi: clear Tx enable mode when handling a Config required AEN
fa19c533ab19 scsi: qedi: Fix use after free bug in qedi_remove()
4285cc0a22d2 dm verity: fix error handling for check_at_most_once on FEC
fc097cfca004 dm verity: skip redundant verity_handle_err() on I/O errors
26b1b0d0bebd mailbox: zynqmp: Fix counts of child nodes
67fb57f24737 mailbox: zynq: Switch to flexible array to simplify code
c4e636f025a1 crypto: ccp - Clear PSP interrupt status register before calling handler
6f60aae72ccc ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus
2fcb12b3f421 tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
6c2ee50c9012 tty: clean include/linux/tty.h up
57b510c7d377 tty: move some tty-only functions to drivers/tty/tty.h
1924d47a2809 tty: move some internal tty lock enums and functions out of tty.h
f665d81ffad7 tty: audit: move some local functions out of tty.h
6a392b806f18 tty: create internal tty.h file
e044a2444718 netfilter: nf_tables: deactivate anonymous set from preparation phase
a222d2794c53 scsi: target: core: Avoid smp_processor_id() in preemptible code
14fc6af67b3f arm64: dts: qcom: sdm845: correct dynamic power coefficients
c820c05c5ff6 sound/oss/dmasound: fix 'dmasound_setup' defined but not used
9079ff34a1ac debugobject: Ensure pool refill (again)
3f225f29c69c arm64: Stash shadow stack pointer in the task struct on interrupt
9134b5a4647e arm64: Always load shadow stack pointer directly from the task struct
a25a403e4b31 perf intel-pt: Fix CYC timestamps after standalone CBR
905f847675cf perf auxtrace: Fix address filter entire kernel size
ea827627a924 dm ioctl: fix nested locking in table_clear() to remove deadlock concern
a1e3fffe02e0 dm flakey: fix a crash with invalid table line
44f29e93a55b dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
717ceb487bc3 dm clone: call kmem_cache_destroy() in dm_clone_init() error path
eded3ad80a04 ia64: fix an addr to taddr in huge_pte_offset()
abb427cb7730 s390/dasd: fix hanging blockdevice after request requeue
c96807a4adbe btrfs: scrub: reject unsupported scrub flags
f7fd1eed3125 scripts/gdb: fix lx-timerlist for Python3
9aabb5f9ef32 afs: Fix updating of i_size with dv jump from server
3530a795bb07 mfd: tqmx86: Correct board names for TQMxE39x
cbe060011b56 mfd: tqmx86: Specify IO port register range more precisely
640a1f7e36e8 mfd: tqmx86: Add support for TQMx110EB and TQMxE40x
4be49b7c2457 mfd: tqmx86: Remove incorrect TQMx90UC board ID
6697a3b0ed83 mfd: tqmx86: Do not access I2C_DETECT register through io_base
15da2acad515 thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe
08012d9edc52 dmaengine: at_xdmac: do not enable all cyclic channels
4f6303fd8f90 dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
b29543194594 dmaengine: dw-edma: Fix to change for continuous transfer
da67d60467dd phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
45e4c00940be pwm: mtk-disp: Disable shadow registers before setting backlight values
6d13804388d6 pwm: mtk-disp: Adjust the clocks to avoid them mismatch
060bd30bf705 pwm: mtk-disp: Don't check the return code of pwmchip_remove()
795cec288e9c leds: tca6507: Fix error handling of using fwnode_property_read_string
033f00eb8969 dmaengine: mv_xor_v2: Fix an error code.
198fbdd10620 leds: TI_LMU_COMMON: select REGMAP instead of depending on it
770b0613637f ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
8f009ae90b2b openrisc: Properly store r31 to pt_regs on unhandled exceptions
1fe1580521dd clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails
3bc78eddf0a0 RDMA/mlx5: Use correct device num_ports when modify DC
95468f165d93 SUNRPC: remove the maximum number of retries in call_bind_status
50440cdb0b47 RDMA/mlx5: Fix flow counter query via DEVX
0d6a5c9489c8 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
09bfd90d040f input: raspberrypi-ts: Release firmware handle when not needed
3aa2503717ba firmware: raspberrypi: Introduce devm_rpi_firmware_get()
73a65744c7fd NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
9c4c6512d733 IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
f84c02597857 IB/hfi1: Add additional usdma traces
1af73620a191 IB/hfi1: Add AIP tx traces
823b59fc5617 IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
8ec6acdb9b6a RDMA/srpt: Add a check for valid 'mad_agent' pointer
16f596cfe956 RDMA/cm: Trace icm_send_rej event before the cm state is reset
3ef7a4c0d5cd RDMA/siw: Remove namespace check from siw_netdev_event()
ac7f79ee11c3 clk: add missing of_node_put() in "assigned-clocks" property parsing
391fbf0d081d power: supply: generic-adc-battery: fix unit scaling
9e5a7c110645 rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
9ad3221c86cc RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
889a2070dc09 rtc: omap: include header for omap_rtc_power_off_program prototype
647781347af9 workqueue: Fix hung time report of worker pools
77d9a64cfbc6 workqueue: Rename "delayed" (delayed by active management) to "inactive"
960167e0e019 RDMA/rdmavt: Delete unnecessary NULL check
f7790aecb3c7 RDMA/siw: Fix potential page_array out of range access
ab8646c9a0b1 clk: at91: clk-sam9x60-pll: fix return value check
8f381b249424 perf/core: Fix hardlockup failure caused by perf throttle
3ea9186a3ef5 powerpc/rtas: use memmove for potentially overlapping buffer copy
6339b9dcdba2 macintosh: via-pmu-led: requires ATA to be set
15f3a811bfde powerpc/sysdev/tsi108: fix resource printk format warnings
4f41f55d82cb powerpc/wii: fix resource printk format warnings
701e3e599913 powerpc/mpc512x: fix resource printk format warning
d68265ec0bb1 macintosh/windfarm_smu_sat: Add missing of_node_put()
c45ab3ab9c37 spmi: Add a check for remove callback when removing a SPMI driver
4ca4a3e45436 staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
d5d628fea5f6 serial: 8250: Add missing wakeup event reporting
fde8ffaaacfa tty: serial: fsl_lpuart: adjust buffer length to the intended size
5a76bc35cce8 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
012936502a9c usb: mtu3: fix kernel panic at qmu transfer done irq handler
e8f64f3200cd usb: chipidea: fix missing goto in `ci_hdrc_probe`
7d667749b3dd usb: gadget: tegra-xudc: Fix crash in vbus_draw
95d97e182dbd sh: sq: Fix incorrect element size for allocating bitmap buffer
a69eb1200eb6 uapi/linux/const.h: prefer ISO-friendly __typeof__
fd7bf900c321 i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
b24f1ecc8fe2 spi: cadence-quadspi: fix suspend-resume implementations
b5a6930fc6a4 ASoC: fsl_mqs: move of_node_put() to the correct location
5bf2d84074dd coresight: etm_pmu: Set the module field
174d7483f15c scripts/gdb: bail early if there are no generic PD
01710564a92a scripts/gdb: bail early if there are no clocks
b4b4409510a3 ia64: salinfo: placate defined-but-not-used warning
65b5b2c5fd86 ia64: mm/contig: fix section mismatch warning/error
fd4e45d8d7c8 PCI/EDR: Clear Device Status after EDR error recovery
9e5ee4fa0d06 of: Fix modalias string generation
85b4aa4eb2e3 vmci_host: fix a race condition in vmci_host_poll() causing GPF
4bdae667f911 spi: fsl-spi: Fix CPM/QE mode Litte Endian
bc88243bbe61 spi: qup: Don't skip cleanup in remove's error path
00c5b5498bd1 linux/vt_buffer.h: allow either builtin or modular for macros
d4a3c912c87b ASoC: es8316: Handle optional IRQ assignment
67b6e077fb89 ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
eb971efca7f0 PCI: imx6: Install the fault handler only on compatible match
36c237b202a4 usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
aa93a46f998a spi: imx: Don't skip cleanup in remove's error path
c3aba912f40e spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
f1f3bc9915b2 iio: light: max44009: add missing OF device matching
ed1f459af644 fpga: bridge: fix kernel-doc parameter description
98bf98e749e6 usb: dwc3: gadget: Change condition for processing suspend event
8a859ac86dea usb: host: xhci-rcar: remove leftover quirk handling
c76ba917915c pstore: Revert pmsg_lock back to a normal mutex
7d285c6cfee6 ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
230a5ed7d813 tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
0abcb0b0d629 net: amd: Fix link leak when verifying config failed
b978d22fa122 netlink: Use copy_to_user() for optval in netlink_getsockopt().
0837d10f6c37 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
566785731c6d ipv4: Fix potential uninit variable access bug in __ip_make_skb()
4b8a05e38016 net/sched: sch_fq: fix integer overflow of "credit"
cb71b24a8927 netfilter: nf_tables: don't write table validation state without mutex
f4fc43fde12a bpf: Don't EFAULT for getsockopt with optval=NULL
80090acb5885 ixgbe: Enable setting RSS table to default values
7a150a5b5468 ixgbe: Allow flow hash to be set via ethtool
89496d6cff29 wifi: iwlwifi: fw: fix memory leak in debugfs
f4eb14d2618f wifi: iwlwifi: mvm: check firmware response size
4ff7c0fbb3fd wifi: iwlwifi: make the loop for card preparation effective
62fde4651759 jdb2: Don't refuse invalidation of already invalidated buffers
038cbab55069 wifi: iwlwifi: fw: move memset before early return
c0ca3824190e wifi: iwlwifi: yoyo: Fix possible division by zero
2a65555f7e0f md/raid10: fix memleak of md thread
6361b0592b46 md/raid10: fix memleak for 'conf->bio_split'
1697fb124c6d md/raid10: fix leak of 'r10bio->remaining' for recovery
fcacaa9d0457 bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
21f2503d37ee nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
e119d1918303 nvme: fix async event trace event
a9e3d9bac963 nvme: handle the persistent internal error AER
2f9307222227 bpf, sockmap: fix deadlocks in the sockhash and sockmap
2be04fa7ee85 net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
bab8dc38b1a0 scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
b2f423fda64f f2fs: fix to avoid use-after-free for cached IPU bio
5877980dc2e4 xsk: Fix unaligned descriptor validation
2a67bc52cd3f crypto: drbg - Only fail when jent is unavailable in FIPS mode
9dbdedd44ff4 crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
27942f477d10 bpftool: Fix bug for long instructions in program CFG dumps
072d16abf567 selftests/bpf: Wait for receive in cg_storage_multi test
d64a12eeb4a6 net: qrtr: correct types of trace event parameters
dc55805db254 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
c621697505b3 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
adc2d82eee22 crypto: sa2ul - Select CRYPTO_DES
de3908e15152 crypto: caam - Clear some memory in instantiate_rng
a8226a45b2a9 f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
d11a74577c21 f2fs: apply zone capacity to all zone type
d420c4a06d8f f2fs: enforce single zone capacity
c3a1914b9678 f2fs: handle dqget error in f2fs_transfer_project_quota()
202048ec1ee5 scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
bfe67e056327 scsi: target: iscsit: Fix TAS handling during conn cleanup
e1f59cd18a10 scsi: target: Fix multiple LUN_RESET handling
008b936bbde3 scsi: target: Make state_list per CPU
7c8a29f1b22e scsi: target: Rename cmd.bad_sector to cmd.sense_info
621c89a0216a scsi: target: Rename struct sense_info to sense_detail
05c6db12aece net/packet: convert po->auxdata to an atomic flag
5ca1be3658cd net/packet: convert po->origdev to an atomic flag
8bb81a925a9f net/packet: annotate accesses to po->xmit
ba6d56b20e8a vlan: partially enable SIOCSHWTSTAMP in container
118df5df1b4b bpf: Remove misleading spec_v1 check on var-offset stack read
10c105126787 scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
10702be8b373 bpf: fix precision propagation verbose logging
6be8ad4cdcac bpf: take into account liveness when propagating precision
243fab8e37d4 wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
1980dd8c53ec wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
3ab6ec6c485b tools: bpftool: Remove invalid \' json escape
1300517e371e wifi: ath6kl: reduce WARN to dev_dbg() in callback
6c91b3b57b1f wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
320d760a3527 wifi: ath9k: hif_usb: fix memory leak of remain_skbs
129c3fb5795d wifi: ath6kl: minor fix for allocation size
c4013689269d tick/common: Align tick period with the HZ tick.
107ea1f63b26 tick: Get rid of tick_period
fdc48767461a tick/sched: Optimize tick_do_update_jiffies64() further
93c43008368d tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()
ca721584e9a4 tick/sched: Use tick_next_period for lockless quick check
780f303233c3 drm/i915: Make intel_get_crtc_new_encoder() less oopsy
9edf5518db25 debugobject: Prevent init race with static objects
f16f065f8ce3 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
55fc2246c46d x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
dfce9bb3517a regulator: stm32-pwr: fix of_iomap leak
a6aeba550c59 media: venus: dec: Fix handling of the start cmd
3a227dc12b1a media: venus: vdec: Handle DRC after drain
5bac3de7f49f media: venus: preserve DRC state across seeks
4c1239274f41 media: venus: vdec: Make decoder return LAST flag for sufficient event
a30297bff881 media: venus: vdec: Fix non reliable setting of LAST flag
025a34716c88 media: rc: gpio-ir-recv: Fix support for wake-up
1acb982e3616 media: rcar_fdp1: Fix refcount leak in probe and remove function
ccc454881f09 media: rcar_fdp1: Fix the correct variable assignments
ee24c9e23206 media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()
bf91fb6c1e9d media: rcar_fdp1: fix pm_runtime_get_sync() usage count
21de9d0daab1 media: rcar_fdp1: simplify error check logic at fdp_open()
7dac96e9cc98 media: saa7134: fix use after free bug in saa7134_finidev due to race condition
e9d64e90a0ad media: dm1105: Fix use after free bug in dm1105_remove due to race condition
de19d02d734e media: rkvdec: fix use after free bug in rkvdec_remove
4883f0f7ee44 x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
06140d6dfe72 regulator: core: Avoid lockdep reports when resolving supplies
4c0b98d87c3e regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
e21c93b20a86 drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
0fc1a90bcef7 ARM: dts: gta04: fix excess dma channel usage
f59421334e94 mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
1487b29030ba ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
ee22417f8299 drm: msm: adreno: Disable preemption on Adreno 510
00f02bb8cb05 drm/msm/adreno: drop bogus pm_runtime_set_active()
f9ba5962ccfc drm/msm/adreno: Defer enabling runpm until hw_init()
9a3a907cf69f media: max9286: Free control handler
f8d28cecf210 drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
076cdba34de2 firmware: qcom_scm: Clear download bit during reboot
4362444dca02 media: bdisp: Add missing check for create_workqueue
a9b9ea0e63a0 x86/MCE/AMD: Use an u64 for bank_map
a8504f9a1304 ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
7d731faebc8e ARM: dts: qcom: ipq8064: reduce pci IO size to 64K
870644bf1bfc ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
45855912958f arm64: dts: qcom: msm8996: Fix the PCI I/O port range
b6082e8caad8 arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
5f6302ab78f4 arm64: dts: qcom: msm8998: Fix the PCI I/O port range
212352542d72 arm64: dts: qcom: sdm845: Fix the PCI I/O port range
eb9c5b383e03 arm64: dts: qcom: sdm845: correct dynamic power coefficients
94e6f7e75729 arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
e951bdaa6586 EDAC/skx: Fix overflows on the DRAM row address mapping arrays
6e6c27b2fb9d drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources
9c4c9010ae80 arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
fbfca9b8399f arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
08310f810975 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
a1e6a4161a27 soc: ti: pm33xx: Enable basic PM runtime support for genpd
e33f374d65d9 drm/probe-helper: Cancel previous job before starting new one
67f07215eb8b drm/vgem: add missing mutex_destroy
ae784c3ed373 drm/rockchip: Drop unbalanced obj unref
056a1217cffa erofs: fix potential overflow calculating xattr_isize
7a4579cd6e49 erofs: stop parsing non-compact HEAD index if clusterofs is invalid
e5ec129158f3 tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
933bfc5ad213 tpm, tpm: Implement usage counter for locality
140735c46d37 tpm, tpm_tis: Claim locality before writing interrupt registers
35ca7f625283 tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
cbb1dd27058e tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
c62a2331abfa tpm, tpm_tis: Do not skip reset of original interrupt vector
3ec77043a27d selinux: ensure av_permissions.h is built when needed
fea314463926 selinux: fix Makefile dependencies of flask.h
0c29f14cf470 selftests/resctrl: Check for return value after write_schemata()
4075fbcde40f selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
d0653cc6e0c7 rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
d1ab8b54b2ce clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
e0dd13b49da9 wifi: rtl8xxxu: RTL8192EU always needs full init
0fd9b0f61119 mailbox: zynqmp: Fix typo in IPI documentation
63314371ebbf mailbox: zynqmp: Fix IPI isr handling
bdbf104b1c91 md/raid10: fix null-ptr-deref in raid10_sync_request
8a89d36a07af nilfs2: fix infinite loop in nilfs_mdt_get_block()
7c3e66204805 nilfs2: do not write dirty data after degenerating to read-only
e4b526442247 parisc: Fix argument pointer in real64_call_asm()
be649ea153b0 sound/oss/dmasound: fix build when drivers are mixed =y/=m
b8f444a4fadf ubifs: Free memory for tmpfile name
5b4b6cb7246e ubi: Fix return value overwrite issue in try_write_vid_and_data()
66e9f2fb3e75 ubifs: Fix memleak when insert_old_idx() failed
a4904c56fc6f Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
87d98984b050 iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
db8b34ffb29b i2c: omap: Fix standard mode false ACK readings
2b00b2a0e642 writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
1b0df44753bf relayfs: fix out-of-bounds access in relay_file_read
e28df70df007 KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
680c419d0d8a reiserfs: Add security prefix to xattr name in reiserfs_security_write()
eb18bc5a8678 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
0a89d4a07552 crypto: safexcel - Cleanup ring IRQ workqueues on load failure
ff86deaba1fa crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
1c99f65d6af2 ring-buffer: Sync IRQ works before buffer destruction
dda1372c8d83 pwm: meson: Fix g12a ao clk81 name
c1cabb10e072 pwm: meson: Fix axg ao mux parents
fcd2da2e6bf2 kheaders: Use array declaration instead of char
1b633da2fecf ipmi: fix SSIF not responding under certain cond.
6d5993d56963 ipmi:ssif: Add send_retries increment
47e61cadc7a5 MIPS: fw: Allow firmware to pass a empty env
2884595932ea tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
29b89908fdd9 xhci: fix debugfs register accesses while suspended
a863ac03fae0 staging: iio: resolver: ads1210: fix config mode
c8714ddf3ccf ext4: use ext4_journal_start/stop for fast commit transactions
701a8220762f blk-crypto: make blk_crypto_evict_key() more robust
5072008bef23 blk-crypto: make blk_crypto_evict_key() return void
874bdf43b4a7 blk-mq: release crypto keyslot before reporting I/O complete
68494eb75f1f perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE)
7c5811b95c57 posix-cpu-timers: Implement the missing timer_wait_running callback
aed39acf7ed6 hwmon: (adt7475) Use device_property APIs when configuring polarity
b009006887e3 hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
a71cb92ec431 USB: dwc3: fix runtime pm imbalance on unbind
27dc207c386e USB: dwc3: fix runtime pm imbalance on probe errors
b978269ddad4 PCI: qcom: Fix the incorrect register usage in v2.7.0 config
2f31633da843 PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
5434c7019d23 wireguard: timers: cast enum limits members to int in prints
69fdbb334d6e asm-generic/io.h: suppress endianness warnings for readq() and writeq()
925cbb725367 ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
f5e96af71eab iio: adc: palmas_gpadc: fix NULL dereference on rmmod
8aa079c2fdfc driver core: Don't require dynamic_debug for initcall_debug probe timing
f964a00386ca USB: serial: option: add UNISOC vendor and TOZED LT70C product
c0e921422359 x86/fpu: Prevent FPU state corruption
98cfbad52fc2 bluetooth: Perform careful capability checks in hci_sock_ioctl()
dc110b20f4ce drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
549825602e3e wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
1dd95b2109de KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
0f29d0e8fc77 counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
d4a895e924b4 seccomp: Move copy_seccomp() to no failure path.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../linux/linux-yocto-rt_5.10.bb | 6 ++---
.../linux/linux-yocto-tiny_5.10.bb | 8 +++----
meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++----------
3 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
index f39b28c5fb..332a19366a 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb
@@ -11,13 +11,13 @@ python () {
raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
}
-SRCREV_machine ?= "42be00a6acf8aa69c1816ed0022af788eda02635"
-SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
+SRCREV_machine ?= "8008621f28248a94b5f1154350a4fc9c71b130d5"
+SRCREV_meta ?= "4476e17760bea9d68c392368f2396a2e9efa86c3"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
-LINUX_VERSION ?= "5.10.179"
+LINUX_VERSION ?= "5.10.180"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
index c77162c9f9..e8d4eeea72 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb
@@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig"
require recipes-kernel/linux/linux-yocto.inc
-LINUX_VERSION ?= "5.10.179"
+LINUX_VERSION ?= "5.10.180"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native"
KMETA = "kernel-meta"
KCONF_BSP_AUDIT_LEVEL = "2"
-SRCREV_machine:qemuarm ?= "c368271929a4b4b419575966578abb32cab23b5d"
-SRCREV_machine ?= "f1b49ee7456e402d93961861e611b9ca829da753"
-SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
+SRCREV_machine:qemuarm ?= "d0dc3a46c784849731fc25990679b676f4306cef"
+SRCREV_machine ?= "5ca66907abef1e8a0be5d3109fd3f0d50f77bc5f"
+SRCREV_meta ?= "4476e17760bea9d68c392368f2396a2e9efa86c3"
PV = "${LINUX_VERSION}+git${SRCPV}"
diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
index 46b9fdf870..cb28294a7f 100644
--- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb
@@ -13,23 +13,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base"
KBRANCH:qemux86-64 ?= "v5.10/standard/base"
KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64"
-SRCREV_machine:qemuarm ?= "7b27b209bb9a594edeb3b4f4b919e8900aade179"
-SRCREV_machine:qemuarm64 ?= "17427c04e8d8c55004e817279ea99e977097787f"
-SRCREV_machine:qemumips ?= "0bd9e4cdcd99d0d4576a1198bba063ba2500ab16"
-SRCREV_machine:qemuppc ?= "123f9fe3b1ce8c60a4b55c0030a8a7428c18a516"
-SRCREV_machine:qemuriscv64 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
-SRCREV_machine:qemuriscv32 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
-SRCREV_machine:qemux86 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
-SRCREV_machine:qemux86-64 ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
-SRCREV_machine:qemumips64 ?= "55e025dc1b9a8847f0307b87e07e175c929528a0"
-SRCREV_machine ?= "15c1b808c9f87a794a15ceaf104514e0a2bc21c1"
-SRCREV_meta ?= "4ffe48fc9d3491d0123ea5698759f2010f22372d"
+SRCREV_machine:qemuarm ?= "1cf6a458134cbbe232467622d8e34d2e9d10e92b"
+SRCREV_machine:qemuarm64 ?= "5db230097771631366812f12c9b04c8379f53c24"
+SRCREV_machine:qemumips ?= "795276fa64f0874a4ee0dcfa9c78e572314bdfa1"
+SRCREV_machine:qemuppc ?= "6ccfcf5138703538662241bf8ed897a1ef2a3def"
+SRCREV_machine:qemuriscv64 ?= "c6515d2a698792220bed8fd39ccbcfec64d1130f"
+SRCREV_machine:qemuriscv32 ?= "c6515d2a698792220bed8fd39ccbcfec64d1130f"
+SRCREV_machine:qemux86 ?= "c6515d2a698792220bed8fd39ccbcfec64d1130f"
+SRCREV_machine:qemux86-64 ?= "c6515d2a698792220bed8fd39ccbcfec64d1130f"
+SRCREV_machine:qemumips64 ?= "4d6b146f00b8efc99e3d3d1d8a63220c29590c8d"
+SRCREV_machine ?= "c6515d2a698792220bed8fd39ccbcfec64d1130f"
+SRCREV_meta ?= "4476e17760bea9d68c392368f2396a2e9efa86c3"
SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \
git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}"
LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "5.10.179"
+LINUX_VERSION ?= "5.10.180"
DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
DEPENDS += "openssl-native util-linux-native"
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 10/13] kernel-devicetree: allow specification of dtb directory
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (8 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 09/13] linux-yocto/5.10: update to v5.10.180 Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 11/13] kernel-devicetree: make shell scripts posix compliant Steve Sakoman
` (2 subsequent siblings)
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Randolph Sapp <rs@ti.com>
Fedora/Redhat and Arch are somewhat standardized on their dtb directory
structure. Let's add some flags to configure yocto to mimic that
behavior.
Add the following variables to the kernel class:
- KERNEL_DTBDEST (controls the destination directory for dtbs)
- KERNEL_DTBVENDORED (controls if vendor subdirectories are to
be respected)
Currently KERNEL_DTBDEST is expected to be a subdir of KERNEL_IMAGEDEST
and KERNEL_DTBVENDORED is expected to be "true"/"false". This only
applies to the package directory structure. The deploydir structure is
purposely left untouched for compatibility with existing recipes.
By default this is configured to behave the same as the current recipe
and produce a flat dtb directory at KERNEL_IMAGEDEST.
Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/kernel-devicetree.bbclass | 22 +++++++++++++++++-----
meta/classes/kernel.bbclass | 2 ++
2 files changed, 19 insertions(+), 5 deletions(-)
diff --git a/meta/classes/kernel-devicetree.bbclass b/meta/classes/kernel-devicetree.bbclass
index b4338da1b1..11b57adc92 100644
--- a/meta/classes/kernel-devicetree.bbclass
+++ b/meta/classes/kernel-devicetree.bbclass
@@ -6,7 +6,12 @@ python () {
d.appendVar("PACKAGES", " ${KERNEL_PACKAGE_NAME}-image-zimage-bundle")
}
-FILES:${KERNEL_PACKAGE_NAME}-devicetree = "/${KERNEL_IMAGEDEST}/*.dtb /${KERNEL_IMAGEDEST}/*.dtbo"
+FILES:${KERNEL_PACKAGE_NAME}-devicetree = " \
+ /${KERNEL_DTBDEST}/*.dtb \
+ /${KERNEL_DTBDEST}/*.dtbo \
+ /${KERNEL_DTBDEST}/*/*.dtb \
+ /${KERNEL_DTBDEST}/*/*.dtbo \
+"
FILES:${KERNEL_PACKAGE_NAME}-image-zimage-bundle = "/${KERNEL_IMAGEDEST}/zImage-*.dtb.bin"
# Generate kernel+devicetree bundle
@@ -67,12 +72,16 @@ do_compile:append() {
}
do_install:append() {
+ install -d ${D}/${KERNEL_DTBDEST}
for dtbf in ${KERNEL_DEVICETREE}; do
dtb=`normalize_dtb "$dtbf"`
- dtb_ext=${dtb##*.}
- dtb_base_name=`basename $dtb .$dtb_ext`
dtb_path=`get_real_dtb_path_in_kernel "$dtb"`
- install -m 0644 $dtb_path ${D}/${KERNEL_IMAGEDEST}/$dtb_base_name.$dtb_ext
+ if [ ${KERNEL_DTBVENDORED} == "false" ]; then
+ dtb_ext=${dtb##*.}
+ dtb_base_name=`basename $dtb .$dtb_ext`
+ dtb=$dtb_base_name.$dtb_ext
+ fi
+ install -Dm 0644 $dtb_path ${D}/${KERNEL_DTBDEST}/$dtb
done
}
@@ -82,7 +91,10 @@ do_deploy:append() {
dtb_ext=${dtb##*.}
dtb_base_name=`basename $dtb .$dtb_ext`
install -d $deployDir
- install -m 0644 ${D}/${KERNEL_IMAGEDEST}/$dtb_base_name.$dtb_ext $deployDir/$dtb_base_name-${KERNEL_DTB_NAME}.$dtb_ext
+ if [ ${KERNEL_DTBVENDORED} == "false" ]; then
+ dtb=$dtb_base_name.$dtb_ext
+ fi
+ install -m 0644 ${D}/${KERNEL_DTBDEST}/$dtb $deployDir/$dtb_base_name-${KERNEL_DTB_NAME}.$dtb_ext
if [ "${KERNEL_IMAGETYPE_SYMLINK}" = "1" ] ; then
ln -sf $dtb_base_name-${KERNEL_DTB_NAME}.$dtb_ext $deployDir/$dtb_base_name.$dtb_ext
fi
diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass
index d45fa25c32..87dd46e6fa 100644
--- a/meta/classes/kernel.bbclass
+++ b/meta/classes/kernel.bbclass
@@ -210,6 +210,8 @@ KERNEL_RELEASE ?= "${KERNEL_VERSION}"
# The directory where built kernel lies in the kernel tree
KERNEL_OUTPUT_DIR ?= "arch/${ARCH}/boot"
KERNEL_IMAGEDEST ?= "boot"
+KERNEL_DTBDEST ?= "${KERNEL_IMAGEDEST}"
+KERNEL_DTBVENDORED ?= "false"
#
# configuration
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 11/13] kernel-devicetree: make shell scripts posix compliant
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (9 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 10/13] kernel-devicetree: allow specification of dtb directory Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 12/13] package: enable recursion on file globs Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 13/13] kernel-devicetree: recursively search for dtbs Steve Sakoman
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Martin Jansa <Martin.Jansa@gmail.com>
Use the notation suggested by Martin Jansa to avoid a bashism. Also
switch KERNEL_DTBVENDORED to the more common 0/1 notation instead of
true/false.
Fixes: 04ab57d200 (kernel-devicetree: allow specification of dtb
directory, 2023-05-02)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/kernel-devicetree.bbclass | 4 ++--
meta/classes/kernel.bbclass | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/meta/classes/kernel-devicetree.bbclass b/meta/classes/kernel-devicetree.bbclass
index 11b57adc92..e1e67cbc56 100644
--- a/meta/classes/kernel-devicetree.bbclass
+++ b/meta/classes/kernel-devicetree.bbclass
@@ -76,7 +76,7 @@ do_install:append() {
for dtbf in ${KERNEL_DEVICETREE}; do
dtb=`normalize_dtb "$dtbf"`
dtb_path=`get_real_dtb_path_in_kernel "$dtb"`
- if [ ${KERNEL_DTBVENDORED} == "false" ]; then
+ if "${@'false' if oe.types.boolean(d.getVar('KERNEL_DTBVENDORED')) else 'true'}"; then
dtb_ext=${dtb##*.}
dtb_base_name=`basename $dtb .$dtb_ext`
dtb=$dtb_base_name.$dtb_ext
@@ -91,7 +91,7 @@ do_deploy:append() {
dtb_ext=${dtb##*.}
dtb_base_name=`basename $dtb .$dtb_ext`
install -d $deployDir
- if [ ${KERNEL_DTBVENDORED} == "false" ]; then
+ if "${@'false' if oe.types.boolean(d.getVar('KERNEL_DTBVENDORED')) else 'true'}"; then
dtb=$dtb_base_name.$dtb_ext
fi
install -m 0644 ${D}/${KERNEL_DTBDEST}/$dtb $deployDir/$dtb_base_name-${KERNEL_DTB_NAME}.$dtb_ext
diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass
index 87dd46e6fa..3d5422b09e 100644
--- a/meta/classes/kernel.bbclass
+++ b/meta/classes/kernel.bbclass
@@ -211,7 +211,7 @@ KERNEL_RELEASE ?= "${KERNEL_VERSION}"
KERNEL_OUTPUT_DIR ?= "arch/${ARCH}/boot"
KERNEL_IMAGEDEST ?= "boot"
KERNEL_DTBDEST ?= "${KERNEL_IMAGEDEST}"
-KERNEL_DTBVENDORED ?= "false"
+KERNEL_DTBVENDORED ?= "0"
#
# configuration
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 12/13] package: enable recursion on file globs
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (10 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 11/13] kernel-devicetree: make shell scripts posix compliant Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 13/13] kernel-devicetree: recursively search for dtbs Steve Sakoman
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Randolph Sapp <rs@ti.com>
Enable recursion of file globs. This just allows the use of '**' in file
globs to match 0 or more subdirectories, it should not make all current
globs recursive [1].
[1] https://docs.python.org/3.6/library/glob.html#glob.glob
Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/package.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/classes/package.bbclass b/meta/classes/package.bbclass
index 67acc278d1..fed2f5531d 100644
--- a/meta/classes/package.bbclass
+++ b/meta/classes/package.bbclass
@@ -262,7 +262,7 @@ def files_from_filevars(filevars):
f = '.' + f
if not f.startswith("./"):
f = './' + f
- globbed = glob.glob(f)
+ globbed = glob.glob(f, recursive=True)
if globbed:
if [ f ] != globbed:
files += globbed
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 13/13] kernel-devicetree: recursively search for dtbs
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
` (11 preceding siblings ...)
2023-05-31 2:34 ` [OE-core][kirkstone 12/13] package: enable recursion on file globs Steve Sakoman
@ 2023-05-31 2:34 ` Steve Sakoman
12 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-05-31 2:34 UTC (permalink / raw)
To: openembedded-core
From: Randolph Sapp <rs@ti.com>
Upstream's dtb directory structure has no real standard. They just tend
to idle around the 2/3 directory depth. Recursively search for the
dtb/dtbo files instead of assuming anything.
Fixes: 04ab57d200 (kernel-devicetree: allow specification of dtb
directory, 2023-05-02)
Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/kernel-devicetree.bbclass | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/meta/classes/kernel-devicetree.bbclass b/meta/classes/kernel-devicetree.bbclass
index e1e67cbc56..18ab6b4c4f 100644
--- a/meta/classes/kernel-devicetree.bbclass
+++ b/meta/classes/kernel-devicetree.bbclass
@@ -6,12 +6,12 @@ python () {
d.appendVar("PACKAGES", " ${KERNEL_PACKAGE_NAME}-image-zimage-bundle")
}
+# recursivly search for devicetree files
FILES:${KERNEL_PACKAGE_NAME}-devicetree = " \
- /${KERNEL_DTBDEST}/*.dtb \
- /${KERNEL_DTBDEST}/*.dtbo \
- /${KERNEL_DTBDEST}/*/*.dtb \
- /${KERNEL_DTBDEST}/*/*.dtbo \
+ /${KERNEL_DTBDEST}/**/*.dtb \
+ /${KERNEL_DTBDEST}/**/*.dtbo \
"
+
FILES:${KERNEL_PACKAGE_NAME}-image-zimage-bundle = "/${KERNEL_IMAGEDEST}/zImage-*.dtb.bin"
# Generate kernel+devicetree bundle
--
2.34.1
^ permalink raw reply related [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2023-10-14 21:44 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2023-10-14 21:44 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kikrstone and have comments back by
end of day Tuesday, October 17
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6044
The following changes since commit bca43f95850d395f9dc56644fa1d12910cabb0c5:
glibc: Update to latest on stable 2.35 branch (2023-10-06 12:03:30 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Alexander Kanavin (2):
python3-urllib3: upgrade 1.26.10 -> 1.26.11
python3-urllib3: upgrade 1.26.12 -> 1.26.13
Hitendra Prajapati (2):
libtiff: fix CVE-2022-40090 improved IFD-Loop handling
xdg-utils: Fix CVE-2022-4055
Khem Raj (1):
apt: add missing <cstdint> for uint16_t
Lee Chee Yang (1):
python3-urllib3: 1.26.15 -> 1.26.17
Siddharth Doshi (1):
vim: Upgrade 9.0.1894 -> 9.0.2009
Tim Orling (1):
python3-urllib3: upgrade 1.26.13 -> 1.26.14
Wang Mingyu (1):
python3-urllib3: upgrade 1.26.14 -> 1.26.15
Yash Shinde (2):
binutils: Fix CVE-2022-44840
binutils: Fix CVE-2022-45703
wangmy (2):
python3-urllib3: upgrade 1.26.9 -> 1.26.10
python3-urllib3: upgrade 1.26.11 -> 1.26.12
...001-add-missing-cstdint-for-uint16_t.patch | 35 ++
meta/recipes-devtools/apt/apt_2.4.5.bb | 1 +
.../binutils/binutils-2.38.inc | 3 +
.../binutils/0030-CVE-2022-44840.patch | 151 +++++
.../binutils/0031-CVE-2022-45703-1.patch | 147 +++++
.../binutils/0031-CVE-2022-45703-2.patch | 31 +
...3_1.26.9.bb => python3-urllib3_1.26.17.bb} | 3 +-
.../xdg-utils/xdg-utils/CVE-2022-4055.patch | 165 +++++
.../xdg-utils/xdg-utils_1.1.3.bb | 1 +
.../libtiff/tiff/CVE-2022-40090.patch | 569 ++++++++++++++++++
meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 1 +
meta/recipes-support/vim/vim.inc | 4 +-
12 files changed, 1108 insertions(+), 3 deletions(-)
create mode 100644 meta/recipes-devtools/apt/apt/0001-add-missing-cstdint-for-uint16_t.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0030-CVE-2022-44840.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0031-CVE-2022-45703-1.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/0031-CVE-2022-45703-2.patch
rename meta/recipes-devtools/python/{python3-urllib3_1.26.9.bb => python3-urllib3_1.26.17.bb} (82%)
create mode 100644 meta/recipes-extended/xdg-utils/xdg-utils/CVE-2022-4055.patch
create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2022-40090.patch
--
2.34.1
^ permalink raw reply [flat|nested] 21+ messages in thread
* [OE-core][kirkstone 00/13] Patch review
@ 2025-01-07 13:31 Steve Sakoman
0 siblings, 0 replies; 21+ messages in thread
From: Steve Sakoman @ 2025-01-07 13:31 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for kirkstone and have comments back by
end of day Thursday, January 9
Passed a-full on autobuilder:
https://valkyrie.yoctoproject.org/#/builders/29/builds/751
The following changes since commit a20b02fdfe64c005f7587a1d9077bdc282f7b6b1:
base-passwd: Add the sgx group (2024-12-18 07:06:28 -0800)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-nut
Archana Polampalli (3):
ffmpeg: fix CVE-2024-35366
ffmpeg: fix CVE-2024-35367
ffmpeg: fix CVE-2024-35368
Mikko Rapeli (1):
ovmf-native: remove .pyc files from install
Peter Marko (6):
ghostscript: ignore CVE-2024-46954
tiff: ignore CVE-2023-2731
tiff: patch CVE-2023-3164
gstreame1.0: ignore CVEs from gstreamer1.0-plugins-bad
xwayland: patch CVE-2023-5380 CVE-2024-0229
python3: upgrade 3.10.15 -> 3.10.16
Rohini Sangam (1):
webkitgtk: Security fix for CVE-2024-40776 and CVE-2024-40780
Vijay Anusuri (1):
libsndfile1: Backport fix for CVE-2022-33065
aszh07 (1):
libarchive: Fix CVE-2024-20696
meta/recipes-core/ovmf/ovmf_git.bb | 1 +
...-search-system-for-headers-libraries.patch | 2 +-
...{python3_3.10.15.bb => python3_3.10.16.bb} | 2 +-
.../ghostscript/ghostscript_9.55.0.bb | 2 +-
.../libarchive/CVE-2024-20696.patch | 114 +++++++++
.../libarchive/libarchive_3.6.2.bb | 1 +
.../xwayland/xwayland/CVE-2023-5380.patch | 103 ++++++++
.../xwayland/xwayland/CVE-2024-0229-1.patch | 88 +++++++
.../xwayland/xwayland/CVE-2024-0229-2.patch | 222 +++++++++++++++++
.../xwayland/xwayland/CVE-2024-0229-3.patch | 42 ++++
.../xwayland/xwayland/CVE-2024-0229-4.patch | 46 ++++
.../xwayland/xwayland_22.1.8.bb | 5 +
.../ffmpeg/ffmpeg/CVE-2024-35366.patch | 37 +++
.../ffmpeg/ffmpeg/CVE-2024-35367.patch | 47 ++++
.../ffmpeg/ffmpeg/CVE-2024-35368.patch | 41 ++++
.../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 3 +
.../gstreamer/gstreamer1.0_1.20.7.bb | 4 +-
...022-33065.patch => CVE-2022-33065-1.patch} | 0
.../libsndfile1/CVE-2022-33065-10.patch | 39 +++
.../libsndfile1/CVE-2022-33065-11.patch | 35 +++
.../libsndfile1/CVE-2022-33065-12.patch | 40 +++
.../libsndfile1/CVE-2022-33065-13.patch | 58 +++++
.../libsndfile1/CVE-2022-33065-2.patch | 58 +++++
.../libsndfile1/CVE-2022-33065-3.patch | 34 +++
.../libsndfile1/CVE-2022-33065-4.patch | 60 +++++
.../libsndfile1/CVE-2022-33065-5.patch | 39 +++
.../libsndfile1/CVE-2022-33065-6.patch | 82 +++++++
.../libsndfile1/CVE-2022-33065-7.patch | 48 ++++
.../libsndfile1/CVE-2022-33065-8.patch | 179 ++++++++++++++
.../libsndfile1/CVE-2022-33065-9.patch | 231 ++++++++++++++++++
.../libsndfile/libsndfile1_1.0.31.bb | 14 +-
.../libtiff/tiff/CVE-2023-3164.patch | 114 +++++++++
meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 5 +-
.../webkit/webkitgtk/CVE-2024-40776.patch | 141 +++++++++++
.../webkit/webkitgtk/CVE-2024-40780.patch | 94 +++++++
meta/recipes-sato/webkit/webkitgtk_2.36.8.bb | 2 +
36 files changed, 2025 insertions(+), 8 deletions(-)
rename meta/recipes-devtools/python/{python3_3.10.15.bb => python3_3.10.16.bb} (99%)
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2024-20696.patch
create mode 100644 meta/recipes-graphics/xwayland/xwayland/CVE-2023-5380.patch
create mode 100644 meta/recipes-graphics/xwayland/xwayland/CVE-2024-0229-1.patch
create mode 100644 meta/recipes-graphics/xwayland/xwayland/CVE-2024-0229-2.patch
create mode 100644 meta/recipes-graphics/xwayland/xwayland/CVE-2024-0229-3.patch
create mode 100644 meta/recipes-graphics/xwayland/xwayland/CVE-2024-0229-4.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-35366.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-35367.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-35368.patch
rename meta/recipes-multimedia/libsndfile/libsndfile1/{CVE-2022-33065.patch => CVE-2022-33065-1.patch} (100%)
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-10.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-11.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-12.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-13.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-2.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-3.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-4.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-5.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-6.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-7.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-8.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2022-33065-9.patch
create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2023-3164.patch
create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2024-40776.patch
create mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2024-40780.patch
--
2.43.0
^ permalink raw reply [flat|nested] 21+ messages in thread
end of thread, other threads:[~2025-01-07 13:31 UTC | newest]
Thread overview: 21+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-05-31 2:34 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 01/13] curl: Fix CVE-2023-28319 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 02/13] curl: Fix CVE-2023-28320 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 03/13] curl: Fix CVE-2023-28321 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 04/13] curl: Fix CVE-2023-28322 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 05/13] linux-yocto/5.10: update to v5.10.176 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 06/13] linux-yocto/5.10: update to v5.10.177 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 07/13] linux-yocto/5.10: update to v5.10.178 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 08/13] linux-yocto/5.10: update to v5.10.179 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 09/13] linux-yocto/5.10: update to v5.10.180 Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 10/13] kernel-devicetree: allow specification of dtb directory Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 11/13] kernel-devicetree: make shell scripts posix compliant Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 12/13] package: enable recursion on file globs Steve Sakoman
2023-05-31 2:34 ` [OE-core][kirkstone 13/13] kernel-devicetree: recursively search for dtbs Steve Sakoman
-- strict thread matches above, loose matches on Subject: below --
2025-01-07 13:31 [OE-core][kirkstone 00/13] Patch review Steve Sakoman
2023-10-14 21:44 Steve Sakoman
2023-04-29 17:20 Steve Sakoman
2023-02-01 22:15 Steve Sakoman
2022-10-17 23:08 Steve Sakoman
2022-06-21 23:27 Steve Sakoman
2022-06-06 14:38 Steve Sakoman
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox