summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* libcap: backport Debian patches to fix CVE-2023-2602 and CVE-2023-2603Vijay Anusuri2023-07-043-0/+112
| | | | | | | | | | | | | | | | | import patches from ubuntu to fix CVE-2023-2602 CVE-2023-2603 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/libcap2/tree/debian/patches?h=ubuntu/focal-security Upstream commit https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=bc6b36682f188020ee4770fae1d41bde5b2c97bb & https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=422bec25ae4a1ab03fd4d6f728695ed279173b18] (From OE-Core rev: d0718a43a00223aa074f14e769214ba11d4f8ef2) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: fix CVE-2023-29402 & CVE-2023-29404Hitendra Prajapati2023-07-043-0/+287
| | | | | | | | | | | Backport fixes for: * CVE-2023-29402 - Upstream-Status: Backport from https://github.com/golang/go/commit/c160b49b6d328c86bd76ca2fff9009a71347333f * CVE-2023-29404 - Upstream-Status: Backport from https://github.com/golang/go/commit/bf3c8ce03e175e870763901a3850bca01381a828 (From OE-Core rev: a4a989605d8cab3278d6c6e32eb882815ff36a28) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: Backport fix CVE-2023-29405Ashish Sharma2023-07-043-0/+152
| | | | | | | | | | | | Upstream-Status: Backport [https://github.com/golang/go/commit/fa60c381ed06c12f9c27a7b50ca44c5f84f7f0f4 & https://github.com/golang/go/commit/1008486a9ff979dbd21c7466eeb6abf378f9c637] (From OE-Core rev: ce213403b4e82f1b191fed4ef6494e9dee55c4f8) Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ninja: Whitelist CVE-2021-4336, wrong ninjaRoss Burton2023-07-041-0/+3
| | | | | | | | | | | | (From OE-Core rev: c2dd2c13ff26c3f046e35a2f6b8afeb099ef422a) (From OE-Core rev: a056017d8383686651de6a72b50d95213bacf226) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9a106486ad7900924a87c5869702903204a35b54) Signed-off-by: virendra thakur <virendrak@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libjpeg-turbo: CVE-2020-35538 Null pointer dereference in ↵Vijay Anusuri2023-07-043-0/+859
| | | | | | | | | | | | | | jcopy_sample_rows() function Upstream-Status: Backport [https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30 & https://github.com/libjpeg-turbo/libjpeg-turbo/commit/a46c111d9f3642f0ef3819e7298846ccc61869e0] (From OE-Core rev: 345ffb433060f017d212135a5b2383017f32d321) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* systemd-systemctl: support instance expansion in WantedByIan Ray2023-06-271-7/+2
| | | | | | | | | | | | | | | | | | | | | | Refactor _process_deps to expand systemd instance specifier "%i" to the template instance. This change expands on prior commit e510222b57 ("systemd-systemctl: fix instance template WantedBy symlink construction") by substituting every "%i" pattern-match with the instance name. The regexp handles the following cases: * svc-wants@%i.service * sys-subsystem-net-devices-%i.device (From OE-Core rev: 2aa82324d43467e7c8bfbbb59570ee3306264b75) Signed-off-by: Ian Ray <ian.ray@ge.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9356276137267a29ae2289d796a2940918375308) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* systemd-systemctl: fix instance template WantedBy symlink constructionMartin Siegumfeldt2023-06-271-3/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix issue of the below instance template systemd service dependency [Install] WantedBy=svc-wants@%i.service creating the symlink (instance "a" example) /etc/systemd/system/svc-wants@%i.service.wants/svc-wanted-by@a.service which should be /etc/systemd/system/svc-wants@a.service.wants/svc-wanted-by@a.service as implemented by this change. The functionality appears regressed just after "thud" baseline when the logic was refactored from shell script into python (commit 925e30cb104ece7bfa48b78144e758a46dc9ec3f) (From OE-Core rev: 308397f0bb3d6f3d4e9ec2c6a10823184049c9b5) (From OE-Core rev: 2751472807edc6d2ccc93b6339e6dc57d4abb2da) Signed-off-by: Martin Siegumfeldt <mns@gomspace.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 372b29c8ad270d4d430c26a4e614976c7029afaf) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel-fitimage: use correct kernel imageAndrej Valek2023-06-271-16/+1
| | | | | | | | | | | | | | | | | | | | Even if initramfs_bundle_path was used, a wrong compression was reflected in output its template file. Use linux.bin as universal kernel image. The linux.bin file covers both cases because it's beying created from vmlinux. We know, that vmlinux is created inside compressed directory already, so no external compression will be used. (From OE-Core rev: 8280c089b0df97368476b8bc54ed758e809f42f5) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Walter Schweizer <walter.schweizer@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Backport of 27fbbeaf972bb7e2535c1b23375cfa9d66b69db6 in master branch Signed-off-by: Remi Peuvergne <remi.peuvergne@non.se.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel-fitimage: adding support for Initramfs bundle and u-boot scriptAbdellatif El Khlifi2023-06-271-23/+134
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds Initramfs bundle support to the FIT image in addition to u-boot boot script capability. These new features are selectable. In case of Initramfs, the kernel is configured to be bundled with the rootfs in the same binary (ie: zImage-initramfs-<machine>.bin). When the kernel is copied to RAM and executed, it unpacks the Initramfs rootfs. For more information about Initramfs please read: https://www.kernel.org/doc/Documentation/filesystems/ramfs-rootfs-initramfs.txt For more details about the Initramfs bundle and boot script implementation please check the kernel-fitimage.bbclass paragraph in Yocto reference or mega manual. Current limitations: - Initramfs bundle FIT support has been tested on ARM 32-bit - The kernel image type in case of ARM 32-bit is zImage Change-Id: I901bfd899e8d733c5b9a2b6645b1d4748f4b1fda (From OE-Core rev: e3eb79c0a11e9f67af3161361fb88b00123ecbac) Signed-off-by: Abdellatif El Khlifi <abdellatif.elkhlifi@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Backport of 19fa415c8769a67b52babd80f71d68bf36a21db2 in master branch Signed-off-by: Remi Peuvergne <remi.peuvergne@non.se.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative.bbclass: handle read only files outside of patchelfSteve Sakoman2023-06-271-0/+2
| | | | | | | | | | | | | | We are seeing autobuilder failures with the latest uninative: patchelf: open: Permission denied See upstream discussion which suggests handling read-only files explicitly outside of patchelf: https://github.com/NixOS/patchelf/pull/89 (From OE-Core rev: 3680fcbf9ba327aedb32bb4eb647dd56fcccfd51) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative: Upgrade to 4.0 to include latest gcc 13.1.1Michael Halstead2023-06-271-4/+4
| | | | | | | | | (From OE-Core rev: 0179c939e4abab008d3c3aa9c1c1eb63b78a6e09) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f87becb69e02bdf055dffb633ed4f6d36b36f7a7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative: Upgrade to 3.10 to support gcc 13Michael Halstead2023-06-271-4/+4
| | | | | | | | | (From OE-Core rev: 15287d18c18152efcfc56a2ae16efdc42c53d92a) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f811bffb861b23238e8291394bd6e8407f013619) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative: Upgrade to 3.9 to include glibc 2.37Michael Halstead2023-06-271-5/+5
| | | | | | | | | | | Update uninative to work with the new glibc 2.37. (From OE-Core rev: c95020a30ee8266d4bfa7b14a7526c10590027fd) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 360971a6ba562fa0b29bd062b96ede2d3a47fa2e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative: Upgrade to 3.8.1 to include libgccMichael Halstead2023-06-271-4/+4
| | | | | | | | | | | Including libgcc solves issues with libpthread. (From OE-Core rev: 8bb60a90dbd59b22e5ba884804b3cb47df45e97d) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 36eb46589fb01374d4738a2c376386c68d06aa83) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uninative: Ensure uninative is enabled in all cases for BuildStarted eventRichard Purdie2023-06-271-0/+2
| | | | | | | | | | | | | | | Recent changes in bitbake mean the datastore is not always reset between ConfigParsed and BuildStarted. This means in a fresh buiild, with memory resident bitbake active, uninative may end up disabled. Update the code so the enable code is always run at BuildStarted if needed. (From OE-Core rev: 24897c70980f934cf59a28a0d3b6e8fddcb15a7f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit db743cc78fe5172bb4a4dac9c1dad4f5aa9e1491) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: added the missing http importJan Vermaete2023-06-271-0/+1
| | | | | | | | | (From OE-Core rev: 787acb1cbc22c0f3bd0cc163c527cc7a98007f26) Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 39d2cde7eb922cb0a2cf9402cd8b3ae3b4cc2f62) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-update-nvd2-native: new CVE database fetcherMarta Rybczynska2023-06-272-2/+335
| | | | | | | | | | | | | | | | | | | | Add new fetcher for the NVD database using the 2.0 API [1]. The implementation changes as little as possible, keeping the current database format (but using a different database file for the transition period), with a notable exception of not using the META table. Minor changes that could be visible: - the database starts in 1999 instead of 2002 - the complete fetch is longer (30 minutes typically) [1] https://nvd.nist.gov/developers/vulnerabilities (From OE-Core rev: 191e2c6d7009999f049a0cf8460259f8f91a829d) Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit fb62c4c3dbca4e58f7ce6cf29d4b630a06411a97) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: CVE-2023-2650 Possible DoS translating ASN.1 object identifiersHitendra Prajapati2023-06-272-0/+123
| | | | | | | | | Upstream-Status: Backport from https://github.com/openssl/openssl/commit/9e209944b35cf82368071f160a744b6178f9b098 (From OE-Core rev: 8a9d188b4d838bbbf8aab14fad1ee5aaadb86621) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cups: Fix CVE-2023-32324Sanjay Chitroda2023-06-272-0/+37
| | | | | | | | | | | | | | | | | | | | | | | OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication. References: https://nvd.nist.gov/vuln/detail/CVE-2023-32324 https://security-tracker.debian.org/tracker/CVE-2023-32324 Upstream Patch: https://github.com/OpenPrinting/cups/commit/fd8bc2d32589 (From OE-Core rev: cb46ae57abe3069d6a4dc2ab0b8dfce5a4a5bd15) Signed-off-by: Sanjay Chitroda <schitrod@cisco.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to dunfell head revisionyocto-3.1.26dunfell-23.0.26Steve Sakoman2023-06-171-1/+1
| | | | | | (From OE-Core rev: 77f6fbfa18b4ad77c3756cfdc45d441a20210781) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: bump version for 3.1.26Steve Sakoman2023-06-171-1/+1
| | | | | | (From meta-yocto rev: 5faf10f83e45aceb3d14c904346d82ea3ce9bdcc) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* documentation: update for 3.1.26Steve Sakoman2023-06-171-5/+5
| | | | | | | | (From yocto-docs rev: 9eae543ad41edbc3db7ec465e756507643cebb1d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest/reproducible: Allow native/cross reuse in testRichard Purdie2023-06-171-2/+2
| | | | | | | | | | | | | | We don't compare reproducibility of the native/cross components, only the target ones. With the long build times of rust-native, the test now takes crazy lengths of time so this tweak should allow us to reuse native/cross artefacts from sstate whilst still testing the target output is reproducible. (From OE-Core rev: fd3d9b32256bceacd514bfd5ebfa0a30bcfdbd0c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b494d83c639a877cefeb7cbab6d37195e492f059) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* e2fsprogs: fix ptest bug for second runningQiu Tingting2023-06-172-0/+4
| | | | | | | | | | | | | | | At second running, there are four new failed case: d_loaddump f_bigalloc_badinode f_bigalloc_orphan_list f_dup_resize The test_data.tmp is necessary, but it is deleted by run-ptest. So it should be restored after testing. (From OE-Core rev: 496dc586446d09a77923bc191e5305ba06c8f59e) Signed-off-by: Qiu Tingting <qiutt@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit d0d08dd9a8a179e25b9cfcbac696c1d212a1910c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* vim: upgrade 9.0.1429 -> 9.0.1527Randy MacLeod2023-06-171-2/+2
| | | | | | | | | | | | Fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-2426 caf642c25 patch 9.0.1499: using uninitialized memory with fuzzy matching (From OE-Core rev: 51a6a2f7917f18f67879ea9559084393ab68520b) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 4f9a8df5aca99d0a5c2d2346b27ce7be08e7896c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libwebp: Fix CVE-2023-1999Nikhil R2023-06-172-0/+59
| | | | | | | | | | | Add patch to fix CVE-2023-1999 Link: https://github.com/webmproject/libwebp/commit/a486d800b60d0af4cc0836bf7ed8f21e12974129 (From OE-Core rev: c1f8a40b65d72c8fdd2f4ae77fa4e682184c8891) Signed-off-by: Nikhil R <nikhil.r@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: Move sshdgenkeys.service to sshd.socketAlex Kiernan2023-06-132-2/+1
| | | | | | | | | | | | | | sshd.socket launches the templated sshd@.service, so by moving the sshdgenkeys.service to sshd.socket, key generation can start in advance of a connection. (From OE-Core rev: 96798603273bbab40a7e19bbb67a9a5398648c21) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit af38a39b4bed9e43c5075008be47ca72191a489e) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.243Bruce Ashfield2023-06-133-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: f53660ec669f Linux 5.4.243 d60f15682a5c drm/amd/display: Fix hang when skipping modeset 93ca0d7b88e8 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock 3f231e30cdeb drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag 65a8b6d129cf drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() 62ac943eb2a9 firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() a781ea3437a0 drm/msm: Fix double pm_runtime_disable() call e4e88f74eb2f PM: domains: Restore comment indentation for generic_pm_domain.child_links ddcca7299de3 printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h c2c3ffc79896 PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock 6a24285f64ea PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors dde34ef0bc73 drbd: correctly submit flush bio on barrier 373720b9289c serial: 8250: Fix serial8250_tx_empty() race with DMA Tx f2a1071100fe tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH ba04d6af5ac4 ext4: fix invalid free tracking in ext4_xattr_move_to_block() 185062a21976 ext4: remove a BUG_ON in ext4_mb_release_group_pa() d7ff83a71d77 ext4: bail out of ext4_xattr_ibody_get() fails for any reason 486efbbc9445 ext4: add bounds checking in get_max_inline_xattr_value_size() b4fa4768c9ac ext4: fix deadlock when converting an inline directory in nojournal mode 2dda20290671 ext4: improve error recovery code paths in __ext4_remount() 525c802de3f9 ext4: fix data races when using cached status extents 4f4fd982d972 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum 1b90fbc75901 ext4: fix WARNING in mb_find_extent f9e27d4bdb1f HID: wacom: insert timestamp to packed Bluetooth (BT) events d8b609e66244 HID: wacom: Set a default resolution for older tablets 3decf3a750a9 drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend 625d4112ea25 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras b1fabc379463 drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() c6bb59662432 drm/panel: otm8009a: Set backlight parent to panel device 3e7703624612 f2fs: fix potential corruption when moving a directory dafc5a5c8fda ARM: dts: s5pv210: correct MIPI CSIS clock name ad751b896eae ARM: dts: exynos: fix WM8960 clock name in Itop Elite 823496470790 remoteproc: st: Call of_node_put() on iteration error a1366ecb0905 remoteproc: stm32: Call of_node_put() on iteration error f16bc5111cc6 sh: nmi_debug: fix return value of __setup handler c9871a47f4ce sh: init: use OF_EARLY_FLATTREE for early init 111b08116dac sh: math-emu: fix macro redefined warning 8fb33166aed8 inotify: Avoid reporting event with invalid wd 0ccea97abe6d platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i 871641c7ebe5 cifs: fix pcchunk length type in smb2_copychunk_range 3e2b4bceaaf9 btrfs: print-tree: parent bytenr must be aligned to sector size 1e05bf5e80bb btrfs: don't free qgroup space unless specified b232f5e8cf81 btrfs: fix btrfs_prev_leaf() to not return the same key twice 96f71f669bee perf symbols: Fix return incorrect build_id size in elf_read_build_id() 78190a6ebe4e perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() ffec80cc6761 perf vendor events power9: Remove UTF-8 characters from JSON files 62f1ebfe9aac virtio_net: suppress cpu stall when free_unused_bufs 1dc5faf30a6c virtio_net: split free_unused_bufs() b15637e717ad net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 544b0de2d767 ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` 35f2642f4abd drm/amdgpu: add a missing lock for AMDGPU_SCHED 5cfe3f910f7c af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). fbcfa00386e1 ionic: remove noise from ethtool rxnfc error msg 4a56f1f6fe92 rxrpc: Fix hard call timeout units dfa36eb38020 net/sched: act_mirred: Add carrier check cc5ccfb7c0ee writeback: fix call of incorrect macro 9c1fcb97f98f net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu e80412439030 sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() cc5fe387c629 net/sched: cls_api: remove block_cb from driver_list before freeing 8acd3a28873f net/ncsi: clear Tx enable mode when handling a Config required AEN bc0905a76531 relayfs: fix out-of-bounds access in relay_file_read c038ae623a7c kernel/relay.c: fix read_pos error when multiple readers 4f4de392f492 crypto: safexcel - Cleanup ring IRQ workqueues on load failure b9878f485d70 crypto: inside-secure - irq balance 439d3a7056d5 dm verity: fix error handling for check_at_most_once on FEC 0156f7dbd822 dm verity: skip redundant verity_handle_err() on I/O errors e4875d6e053d mailbox: zynqmp: Fix counts of child nodes ff0d64f5127e mailbox: zynq: Switch to flexible array to simplify code 352b152905cc tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem 9b2ed144318e nohz: Add TICK_DEP_BIT_RCU c8b6063f13ad netfilter: nf_tables: deactivate anonymous set from preparation phase 29fb2a1a5f71 debugobject: Ensure pool refill (again) cef1b8a4df5c perf intel-pt: Fix CYC timestamps after standalone CBR 5ead86d57583 perf auxtrace: Fix address filter entire kernel size 29a1ef57c3be dm ioctl: fix nested locking in table_clear() to remove deadlock concern 337b7af27356 dm flakey: fix a crash with invalid table line 6d126899b074 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path cbe0a7ec67c3 dm clone: call kmem_cache_destroy() in dm_clone_init() error path d8f66a19f8be s390/dasd: fix hanging blockdevice after request requeue 5492d4081274 btrfs: scrub: reject unsupported scrub flags 946e067b4cda scripts/gdb: fix lx-timerlist for Python3 7cf5ce2857b8 clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent 4379d5ce9235 wifi: rtl8xxxu: RTL8192EU always needs full init ecdcefd312d4 mailbox: zynqmp: Fix typo in IPI documentation 38afc633d374 mailbox: zynqmp: Fix IPI isr handling 14964127be77 md/raid10: fix null-ptr-deref in raid10_sync_request fe1cbbcb1a25 nilfs2: fix infinite loop in nilfs_mdt_get_block() 4569a292a84e nilfs2: do not write dirty data after degenerating to read-only fd37a5c6998b parisc: Fix argument pointer in real64_call_asm() 736aeb17b6a0 afs: Fix updating of i_size with dv jump from server 27263ff39784 dmaengine: at_xdmac: do not enable all cyclic channels 8c821199bc28 dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing 24c9c4ad23d3 dmaengine: dw-edma: Fix to change for continuous transfer 2e900f363174 phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port 58e026465814 pwm: mtk-disp: Disable shadow registers before setting backlight values 33f00f0a7368 pwm: mtk-disp: Adjust the clocks to avoid them mismatch e5e9e59c4564 pwm: mtk-disp: Don't check the return code of pwmchip_remove() 8e238e88822f dmaengine: mv_xor_v2: Fix an error code. 026df12f3c4d leds: TI_LMU_COMMON: select REGMAP instead of depending on it a34f6dcb78c6 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline 6dfd85ada867 openrisc: Properly store r31 to pt_regs on unhandled exceptions 2fd44d2bde34 clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails f2aaf419889c clocksource: davinci: axe a pointless __GFP_NOFAIL fc051820d616 clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() 945e9898624d RDMA/mlx5: Use correct device num_ports when modify DC 9bf843683a32 SUNRPC: remove the maximum number of retries in call_bind_status 1dfa3c9dd27b Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe ce6c42f0b644 input: raspberrypi-ts: Release firmware handle when not needed de85be00a8f3 firmware: raspberrypi: Introduce devm_rpi_firmware_get() d537afa08e15 firmware: raspberrypi: Keep count of all consumers 919f470337e1 NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease fe60c3af70bf IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order b4f12e2402a5 RDMA/siw: Remove namespace check from siw_netdev_event() 795d11e8ff35 clk: add missing of_node_put() in "assigned-clocks" property parsing 0c770f95a2d7 power: supply: generic-adc-battery: fix unit scaling 31ca78dc1f50 rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time 8feca6259007 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() 683cd87041ac rtc: omap: include header for omap_rtc_power_off_program prototype a48403e8c325 RDMA/rdmavt: Delete unnecessary NULL check b24e0e4612a5 RDMA/siw: Fix potential page_array out of range access 318bc22decd4 perf/core: Fix hardlockup failure caused by perf throttle ff3edfb3c825 powerpc/rtas: use memmove for potentially overlapping buffer copy 333a2a9846b9 macintosh: via-pmu-led: requires ATA to be set e2dd8bbab7b5 powerpc/sysdev/tsi108: fix resource printk format warnings 770d583cd5ae powerpc/wii: fix resource printk format warnings f60c8d7c16bb powerpc/mpc512x: fix resource printk format warning 97cd970f8add macintosh/windfarm_smu_sat: Add missing of_node_put() 54dda7322255 spmi: Add a check for remove callback when removing a SPMI driver af9bfe1c0a50 staging: rtl8192e: Fix W_DISABLE# does not work after stop/start 572d48361aa0 serial: 8250: Add missing wakeup event reporting 488baa8038fa tty: serial: fsl_lpuart: adjust buffer length to the intended size 8fa80b452bc9 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe 26ca30516b2c usb: mtu3: fix kernel panic at qmu transfer done irq handler bd7a3e6416ab usb: chipidea: fix missing goto in `ci_hdrc_probe` f9e2abb6df6d sh: sq: Fix incorrect element size for allocating bitmap buffer e1431faa89bd uapi/linux/const.h: prefer ISO-friendly __typeof__ 6716203844bc spi: cadence-quadspi: fix suspend-resume implementations caaefbf823ab mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel ee5ffe4cdfea mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure 7c69aeca59f2 mtd: spi-nor: cadence-quadspi: Provide a way to disable DAC mode df9708297bb2 mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry 30ac77e99525 scripts/gdb: bail early if there are no generic PD 35a2681e9937 PM: domains: Fix up terminology with parent/child 0fbc62db7e10 scripts/gdb: bail early if there are no clocks 0988baae3984 ia64: salinfo: placate defined-but-not-used warning d6cb7b6868b9 ia64: mm/contig: fix section mismatch warning/error d3c6d52148a1 of: Fix modalias string generation ca0f4ad2b7a3 vmci_host: fix a race condition in vmci_host_poll() causing GPF 170e22324052 spi: fsl-spi: Fix CPM/QE mode Litte Endian 863238433703 spi: qup: Don't skip cleanup in remove's error path 814a9a6de1b1 linux/vt_buffer.h: allow either builtin or modular for macros 3547e5bd0d10 ASoC: es8316: Handle optional IRQ assignment 9650d5a1e7df ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ f5ce428e3eae genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() 0f31993721f9 PCI: imx6: Install the fault handler only on compatible match 0fee5030c094 usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition 7d2bc728cc8d iio: light: max44009: add missing OF device matching ee0e2f7af02a fpga: bridge: fix kernel-doc parameter description 3fb02404c1e0 usb: host: xhci-rcar: remove leftover quirk handling 36fb7843f1c3 pstore: Revert pmsg_lock back to a normal mutex 602fa8af44fd tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. 638810f5d020 net: amd: Fix link leak when verifying config failed 9ef809945edd netlink: Use copy_to_user() for optval in netlink_getsockopt(). de0ffb5145c9 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" 27c468ec1af1 ipv4: Fix potential uninit variable access bug in __ip_make_skb() 3b9960e21e8b netfilter: nf_tables: don't write table validation state without mutex 64d2c1cfd04f bpf: Don't EFAULT for getsockopt with optval=NULL 3bf918f90f93 ixgbe: Enable setting RSS table to default values 053b36c50bdd ixgbe: Allow flow hash to be set via ethtool ae23fc2b230a wifi: iwlwifi: mvm: check firmware response size ffdfaf27ebf1 wifi: iwlwifi: make the loop for card preparation effective 3725b35fc0e5 md/raid10: fix memleak of md thread fb3f2f2fa0f3 md: update the optimal I/O size on reshape b6460f68c1cc md/raid10: fix memleak for 'conf->bio_split' 8c5d5d7ffd1e md/raid10: fix leak of 'r10bio->remaining' for recovery 1fee7e391d99 bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap d5fdcd2384ff nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" b1e6b3fd1104 nvme: fix async event trace event eaaa0c6b0540 nvme: handle the persistent internal error AER c229821510df bpf, sockmap: fix deadlocks in the sockhash and sockmap 74d90f92eafe scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() 01993768b3e7 crypto: drbg - Only fail when jent is unavailable in FIPS mode b21c7e28e801 crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors 14efbe2499c1 bpftool: Fix bug for long instructions in program CFG dumps 3e3533c56cf8 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() 03109f1870e2 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() e163e64227ad rtlwifi: Replace RT_TRACE with rtl_dbg faec6b865468 rtlwifi: Start changing RT_TRACE into rtl_dbg 7c5e804b6d52 f2fs: handle dqget error in f2fs_transfer_project_quota() 7a2ae008a53c scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS a4245323d272 scsi: target: iscsit: Fix TAS handling during conn cleanup 8e402d5198b3 net/packet: convert po->auxdata to an atomic flag f3ac72c7ab20 net/packet: convert po->origdev to an atomic flag 4760229b820d net/packet: annotate accesses to po->xmit 47464e0c658a vlan: partially enable SIOCSHWTSTAMP in container 8f851a75bbc7 scm: fix MSG_CTRUNC setting condition for SO_PASSSEC 7160c6940a97 wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() 743ae09b28ce wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() 72d5edceb2de tools: bpftool: Remove invalid \' json escape 0d1792c98351 wifi: ath6kl: reduce WARN to dev_dbg() in callback 8d17563174b0 wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() d98993186607 wifi: ath9k: hif_usb: fix memory leak of remain_skbs 1286c4ce1f01 wifi: ath6kl: minor fix for allocation size a3e7a3d472c2 tick/common: Align tick period with the HZ tick. 04be737176e6 tick: Get rid of tick_period 3df29117d8a6 tick/sched: Optimize tick_do_update_jiffies64() further b6fe34d93655 tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() 746eac77e008 tick/sched: Use tick_next_period for lockless quick check a23607579f12 timekeeping: Split jiffies seqlock 22d7ec50ffdd debugobject: Prevent init race with static objects a687da500464 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step 442470948c04 x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() 824683dbec23 regulator: stm32-pwr: fix of_iomap leak 53adb408b170 media: rc: gpio-ir-recv: Fix support for wake-up 9df630dafa1a media: rcar_fdp1: Fix refcount leak in probe and remove function 6fd6e2f29c18 media: rcar_fdp1: Fix the correct variable assignments 75b55a3cbb4a media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() 03d234459259 media: rcar_fdp1: fix pm_runtime_get_sync() usage count aebe8e43d85e media: rcar_fdp1: simplify error check logic at fdp_open() a4b6ab360f56 media: saa7134: fix use after free bug in saa7134_finidev due to race condition cd1583caed7e media: dm1105: Fix use after free bug in dm1105_remove due to race condition 0c61a6897c47 x86/apic: Fix atomic update of offset in reserve_eilvt_offset() 5224ea575196 regulator: core: Avoid lockdep reports when resolving supplies 73b262115f5f regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() 9b53238b3be2 drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() 0a6d476d9c9d mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data f79421c36070 drm/msm/adreno: drop bogus pm_runtime_set_active() 438d00b18d55 drm/msm/adreno: Defer enabling runpm until hw_init() 594726c93841 drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} 37c8085cf9c0 firmware: qcom_scm: Clear download bit during reboot 620b983589e0 media: av7110: prevent underflow in write_ts_to_decoder() 1205c52cf270 media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. c6a315f0b140 media: bdisp: Add missing check for create_workqueue 1a057b68952d ARM: dts: qcom: ipq8064: Fix the PCI I/O port range 699bf5a793ca ARM: dts: qcom: ipq8064: reduce pci IO size to 64K 1d207fcdf670 ARM: dts: qcom: ipq4019: Fix the PCI I/O port range e0162c92973b EDAC/skx: Fix overflows on the DRAM row address mapping arrays acb6f45775bb arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table 0524eb688297 arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table a535b5d4a2c3 drm/probe-helper: Cancel previous job before starting new one 4223f98d4d45 drm/vgem: add missing mutex_destroy 8747cd580b59 drm/rockchip: Drop unbalanced obj unref 9773c58594ff erofs: fix potential overflow calculating xattr_isize 880c79bdb002 erofs: stop parsing non-compact HEAD index if clusterofs is invalid e998107daad2 tpm, tpm_tis: Do not skip reset of original interrupt vector 1c131a32a9b5 selinux: ensure av_permissions.h is built when needed 11458692ebd2 selinux: fix Makefile dependencies of flask.h 823f554747f8 ubifs: Free memory for tmpfile name d3f1b113a503 ubi: Fix return value overwrite issue in try_write_vid_and_data() 6f2eee5457bc ubifs: Fix memleak when insert_old_idx() failed 2c2a76b7c4b5 Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" 5d1f14beabab i2c: omap: Fix standard mode false ACK readings d482617fa662 KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted 67d33b8c5696 reiserfs: Add security prefix to xattr name in reiserfs_security_write() 2399b1fda025 ring-buffer: Sync IRQ works before buffer destruction a7fa8c9dc851 pwm: meson: Fix g12a ao clk81 name a3e0d3430f33 pwm: meson: Fix axg ao mux parents 719459877d58 kheaders: Use array declaration instead of char 4ec3be7003b6 ipmi: fix SSIF not responding under certain cond. bead854bcca2 ipmi:ssif: Add send_retries increment 0f91290774c7 MIPS: fw: Allow firmware to pass a empty env 3092933b2637 xhci: fix debugfs register accesses while suspended 3c5a28658d12 debugfs: regset32: Add Runtime PM support 2298b30010fd staging: iio: resolver: ads1210: fix config mode fbd11f086bf1 perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) 6525d2fd6f83 USB: dwc3: fix runtime pm imbalance on unbind 2d5844aa6e56 USB: dwc3: fix runtime pm imbalance on probe errors 0804f3715c09 asm-generic/io.h: suppress endianness warnings for readq() and writeq() 944ff47a19f2 ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 f00e4bfd7f08 iio: adc: palmas_gpadc: fix NULL dereference on rmmod 85ed09c33021 USB: serial: option: add UNISOC vendor and TOZED LT70C product 48cdcb40d589 bluetooth: Perform careful capability checks in hci_sock_ioctl() c8258fc827c8 drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var 425eea395f1f wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() 3b7509b6f5e2 counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (From OE-Core rev: 1bef1a4cb24e49d23e4d84e05174e0ec1ec7cbe1) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.242Bruce Ashfield2023-06-133-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: ea7862c507ec Linux 5.4.242 d54a9f999ea7 ASN.1: Fix check for strdup() success 2500d7edebfb iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() 760c2e6dee32 pwm: meson: Explicitly set .polarity in .get_state() 7f2b8046da83 xfs: fix forkoff miscalculation related to XFS_LITINO(mp) c27a6bb1788f sctp: Call inet6_destroy_sock() via sk->sk_destruct(). 97ce6cde1f51 dccp: Call inet6_destroy_sock() via sk->sk_destruct(). a01b75620e1a inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). 9374db5bd1e3 tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). 2ac4697b7779 udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). 5a62248c5855 ext4: fix use-after-free in ext4_xattr_set_entry 3b0044cb28f7 ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() 3c4fdbf368ba Revert "ext4: fix use-after-free in ext4_xattr_set_entry" ef2aab86c34c x86/purgatory: Don't generate debug info for purgatory.ro c22aefaef8ae MIPS: Define RUNTIME_DISCARD_EXIT in LD script a5167e902b64 mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 1b8b54fc55a4 memstick: fix memory leak if card device is never registered 5ad61a5268de nilfs2: initialize unused bytes in segment summary blocks 988766b9d124 iio: light: tsl2772: fix reading proximity-diodes from device tree 5cb867f1ecb4 xen/netback: use same error messages for same errors 903f82b1a6b2 nvme-tcp: fix a possible UAF when failing to allocate an io queue 34b74c32ff4f s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling 64cd99da25c1 net: dsa: b53: mmap: add phy ops 89dcf0dd7aae scsi: core: Improve scsi_vpd_inquiry() checks f729b74bb489 scsi: megaraid_sas: Fix fw_crash_buffer_show() 4f4ef354f95d selftests: sigaltstack: fix -Wuninitialized a725dddf2139 Input: i8042 - add quirk for Fujitsu Lifebook A574/H 9df3f502e33d f2fs: Fix f2fs_truncate_partial_nodes ftrace event 2f3730f182fc e1000e: Disable TSO on i219-LM card to increase speed 0f0a291cc520 bpf: Fix incorrect verifier pruning due to missing register precision taints ba610df83b04 mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() d8e120057cee i40e: fix i40e_setup_misc_vector() error handling 59fba01b6c72 i40e: fix accessing vsi->active_filters without holding lock 01125379e2dc netfilter: nf_tables: fix ifdef to also consider nf_tables=m 7c1019391bd6 virtio_net: bugfix overflow inside xdp_linearize_page() 35dceaeab97c net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg d61f24a45410 regulator: fan53555: Explicitly include bits header 36f098e1e4d1 netfilter: br_netfilter: fix recent physdev match breakage 375e445b1022 arm64: dts: meson-g12-common: specify full DMC range cb1f89fe934b ARM: dts: rockchip: fix a typo error for rk3288 spdif node (From OE-Core rev: 012c751c14ad5cdd2ac8c868bf6e9a6ea4011789) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.241Bruce Ashfield2023-06-133-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 58f42ed1cd31 Linux 5.4.241 879593643717 xfs: force log and push AIL to clear pinned inodes when aborting mount c76dd368759a xfs: don't reuse busy extents on extent trim 4679b73a8ed4 xfs: consider shutdown in bmapbt cursor delete assert 9355fd118b4e xfs: shut down the filesystem if we screw up quota reservation 48f75df5b3bb xfs: report corruption only as a regular error 3cce34ceb2ef xfs: set inode size after creating symlink e76bd6da5123 xfs: fix up non-directory creation in SGID directories ad6613c98463 xfs: remove the di_version field from struct icdinode ca4533c951e1 xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize e078b3de3e41 xfs: simplify di_flags2 inheritance in xfs_ialloc 0c553917b61a xfs: only check the superblock version for dinode size calculation 90aab52d062c xfs: add a new xfs_sb_version_has_v3inode helper edd36a57b4a6 xfs: remove the kuid/kgid conversion wrappers 3ef81874f71c xfs: remove the icdinode di_uid/di_gid members cc508a41ae48 xfs: ensure that the inode uid/gid match values match the icdinode ones 7a9dc7977140 xfs: merge the projid fields in struct xfs_icdinode 4f3252e7e132 xfs: show the proper user quota options 799cafa4f304 coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug 440bdc49f744 watchdog: sbsa_wdog: Make sure the timeout programming is within the limits 70ca826d3ddb i2c: ocores: generate stop condition after timeout in polling mode 5fb5bdcdcd5a ubi: Fix deadlock caused by recursively holding work_sem 0b27716f2d44 mtd: ubi: wl: Fix a couple of kernel-doc issues e55588c44255 ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size a652c30fa2ba asymmetric_keys: log on fatal failures in PE/pkcs7 5809dbacc431 verify_pefile: relax wrapper length check 0213f027d030 drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F b3052e5d468b efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L 02a78e653933 i2c: imx-lpi2c: clean rx/tx buffers upon new message 1ef56397449e power: supply: cros_usbpd: reclassify "default case!" as debug 7169d1638824 net: macb: fix a memory corruption in extended buffer descriptor mode c39fa0398a30 udp6: fix potential access to stale information 9c46c49ad3ff RDMA/core: Fix GID entry ref leak when create_ah fails ad831a7079c9 sctp: fix a potential overflow in sctp_ifwdtsn_skip afffe0d1e6b9 qlcnic: check pci_reset_function result a841f6a0a39d niu: Fix missing unwind goto in niu_alloc_channels() fcd084e199b9 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition 1b77cb6f5e4a mtd: rawnand: stm32_fmc2: remove unsupported EDO mode 4c1d882b53a3 mtd: rawnand: meson: fix bitmask for length in command word 266746003439 mtdblock: tolerate corrected bit-flips 50dbfd9dacda btrfs: fix fast csum implementation detection c6db5f2a31cd btrfs: print checksum type and implementation at mount time 8a99e6200c38 Bluetooth: Fix race condition in hidp_session_thread c02421992505 Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} 9025cea8e03b ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards 4d419195d6b8 ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() fe158eeccc38 ALSA: i2c/cs8427: fix iec958 mixer control deactivation aa23fa32e5ff ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard 62ccf2e0b106 ALSA: emu10k1: fix capture interrupt handler unlinking 9a3ba7b24d08 Revert "pinctrl: amd: Disable and mask interrupts on resume" 2945f948aa84 irqdomain: Fix mapping-creation race e8f3aea716d2 irqdomain: Refactor __irq_domain_alloc_irqs() 3804f265c1bf irqdomain: Look for existing mapping only once e7bba7ddb431 mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() fd644712bccd ring-buffer: Fix race while reader and writer are on the same page c208b4321e8f drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path c381527918b1 net_sched: prevent NULL dereference if default qdisc setup failed 987f599fc556 tracing: Free error logs of tracing instances d2136f05690c can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access 5a74a75fc3d3 ftrace: Mark get_lock_parent_ip() __always_inline 95bbfeb4ff0e perf/core: Fix the same task check in perf_event_set_output 666c25d35e5e ALSA: hda/realtek: Add quirk for Clevo X370SNW 83b16a60e413 nilfs2: fix sysfs interface lifetime 613bf23c070d nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() aa8e50688d44 tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty aabba4440409 tty: serial: sh-sci: Fix Rx on RZ/G2L SCI 209ab5c234c5 tty: serial: sh-sci: Fix transmit end interrupt handler 9a2a6443d655 iio: dac: cio-dac: Fix max DAC write value check for 12-bit e469ebb28dbe iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip abc5b4f8cdff USB: serial: option: add Quectel RM500U-CN modem b9c11537efcf USB: serial: option: add Telit FE990 compositions 38c00a22d67b usb: typec: altmodes/displayport: Fix configure initial pin assignment f417d3fea3de USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs 47132be17d7b xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu 5fccf2c546ed NFSD: callback request does not use correct credential for AUTH_SYS 3686380d9d60 sunrpc: only free unix grouplist after RCU settles 1627119153d9 gpio: davinci: Add irq chip flag to skip set wake 0cf600ca1bdf ipv6: Fix an uninit variable access bug in __ip6_make_skb() 0443fff49d63 sctp: check send stream number after wait_for_sndbuf 93f3885211ae net: don't let netpoll invoke NAPI if in xmit context 0d2fa30078af icmp: guard against too small mtu a3593082e0da wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta 4220f83b9f03 pwm: sprd: Explicitly set .polarity in .get_state() 6e1f29397dea pwm: cros-ec: Explicitly set .polarity in .get_state() dbd764e9d422 pinctrl: amd: Disable and mask interrupts on resume dd7e19f97f71 pinctrl: amd: disable and mask interrupts on probe 3f3e4bd3f0cc pinctrl: amd: Use irqchip template 387236b9e002 smb3: fix problem with null cifs super block with previous patch 2e64d7b182c6 treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() 199197660bdd Revert "treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()" 522af69af24f cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() 4311ae04b386 x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot 110d425cdfb1 scsi: ses: Handle enclosure with just a primary component gracefully (From OE-Core rev: 41eacaf738d753632fb17031e58dc898f2290a61) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.240Bruce Ashfield2023-06-133-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 32bea3bac5ca Linux 5.4.240 4d4cb7663613 gfs2: Always check inode size of inline inodes 928240c36891 firmware: arm_scmi: Fix device node validation for mailbox transport 0f5c0e0a4c0b net: sched: fix race condition in qdisc_graft() 22d95b544924 net_sched: add __rcu annotation to netdev->qdisc 14b6ad56df25 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' 9b189af3577e btrfs: scan device in non-exclusive mode 45a9877d6cc3 s390/uaccess: add missing earlyclobber annotations to __clear_user() 0c6df5364798 drm/etnaviv: fix reference leak when mmaping imported buffer 37958ac31fe2 ALSA: usb-audio: Fix regression on detection of Roland VS-100 6dabafd82968 ALSA: hda/conexant: Partial revert of a quirk for Lenovo f3a67268784c NFSv4: Fix hangs when recovering open state after a server reboot c81e2965a9e0 pinctrl: at91-pio4: fix domain name assignment 82c25ac3a258 xen/netback: don't do grant copy across page boundary 99c8ba920fc2 Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table 657d7c215ca9 cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL 03af69bd674d cifs: prevent infinite recursion in CIFSGetDFSRefer() 51d657371106 Input: focaltech - use explicitly signed char type f0f85f5e402b Input: alps - fix compatibility with -funsigned-char 7e71d4d190df pinctrl: ocelot: Fix alt mode for ocelot 70728d639efb net: mvneta: make tx buffer array agnostic 704e06b97920 net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only fd7cff506614 bnxt_en: Fix typo in PCI id to device description string mapping 58279cea0b10 i40e: fix registers dump after run ethtool adapter self test 5195de1d5f66 s390/vfio-ap: fix memory leak in vfio_ap device driver 78bc7f0ab994 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write 105cc2683282 net/net_failover: fix txq exceeding warning e633fd26abfd regulator: Handle deferred clk be7b622cd63f regulator: fix spelling mistake "Cant" -> "Can't" 46c4993a1514 ptp_qoriq: fix memory leak in probe() c122daa0fa4c scsi: megaraid_sas: Fix crash after a double completion 317c07d382b1 mtd: rawnand: meson: invalidate cache on polling ECC bit d65de5ee8b72 mips: bmips: BCM6358: disable RAC flush for TP1 9690e34f2247 dma-mapping: drop the dev argument to arch_sync_dma_for_* f6e2d76aa362 ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() 856fb74f601a fbdev: au1200fb: Fix potential divide by zero deef33c08104 fbdev: lxfb: Fix potential divide by zero 4f5cc5ffa8c5 fbdev: intelfb: Fix potential divide by zero 868f247e47ef fbdev: nvidia: Fix potential divide by zero f3359f5fc9b7 sched_getaffinity: don't assume 'cpumask_size()' is fully initialized 521877bf2651 fbdev: tgafb: Fix potential divide by zero 7f12f99b8017 ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() 9155a5958ed0 ALSA: asihpi: check pao in control_message() 88a3c63a9635 md: avoid signed overflow in slot_store() 9966fc59d3a0 bus: imx-weim: fix branch condition evaluates to a garbage value d121f7883a17 fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY 4c24eb49ab44 ocfs2: fix data corruption after failed write 0c0e566f0387 tun: avoid double free in tun_free_netdev d253120a580a sched/fair: Sanitize vruntime of entity being migrated c23928c70bc8 sched/fair: sanitize vruntime of entity being placed 885c28ceae7d dm crypt: add cond_resched() to dmcrypt_write() 4a32a9a818a8 dm stats: check for and propagate alloc_percpu failure f8cbad984b16 i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() 8f5cbf6a8c0e nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() 4ae966a7f6a7 wifi: mac80211: fix qos on mesh interfaces f558789a886c usb: chipidea: core: fix possible concurrent when switch role 6b3287b14739 usb: chipdea: core: fix return -EINVAL if request role is the same with current role 0b2a56fe4659 usb: cdns3: Fix issue with using incorrect PCI device function e9e93fdfcefb dm thin: fix deadlock when swapping to thin device cd1e320ac095 igb: revert rtnl_lock() that causes deadlock 123698a5c619 fsverity: Remove WQ_UNBOUND from fsverity read workqueue 0eda2004f38d usb: gadget: u_audio: don't let userspace block driver unbind 44f080d7d75a scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR 223274d5c310 cifs: empty interface list when server doesn't support query interfaces 299a309b98df sh: sanitize the flags on sigreturn f4c610f6ca13 net: usb: qmi_wwan: add Telit 0x1080 composition e6b1fa6d0626 net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 04f4a1aa9410 scsi: lpfc: Avoid usage of list iterator variable after loop 11cdced6a03d scsi: ufs: core: Add soft dependency on governor_simpleondemand 54ec697e3ca8 scsi: target: iscsi: Fix an error message in iscsi_check_key() 97115221912c selftests/bpf: check that modifier resolves after pointer 2100e374251a m68k: Only force 030 bus error if PC not in exception table d2b3bd0d4cad ca8210: fix mac_len negative array access 9e7723b684c0 riscv: Bump COMMAND_LINE_SIZE value to 1024 32518cd0fcc0 thunderbolt: Use const qualifier for `ring_interrupt_index` b40fe2e1f91b uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 9189f20b4c53 scsi: qla2xxx: Perform lockless command completion in abort path da0383f0e86c hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs 13493ad6a220 platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl a18fb433ceb5 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work b517808795d3 Bluetooth: btqcomsmd: Fix command timeout after setting BD address dcd4d3646221 net: mdio: thunder: Add missing fwnode_handle_put() 707335918f73 hvc/xen: prevent concurrent accesses to the shared ring 83e442eba39b nvme-tcp: fix nvme_tcp_term_pdu to match spec d673ae18406e net/sonic: use dma_mapping_error() for error check b72f453e886a erspan: do not use skb_mac_header() in ndo_start_xmit() 82e07cc5a6ca atm: idt77252: fix kmemleak when rmmod idt77252 fd6f643dea07 net/mlx5: Read the TC mapping of all priorities on ETS query d69c2ded95b1 bpf: Adjust insufficient default bpf_jit_limit 97674f4cd05e keys: Do not cache key in task struct if key is requested from kernel thread f8ee2c8b0d0c net/ps3_gelic_net: Use dma_mapping_error 6d7e18b1d00a net/ps3_gelic_net: Fix RX sk_buff length 0e5c7d00ec4f net: qcom/emac: Fix use after free bug in emac_remove due to race condition a07ec453e86a xirc2ps_cs: Fix use after free bug in xirc2ps_detach 42d72c6d1edc qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info f2111c791d88 net: usb: smsc95xx: Limit packet length to skb->len 5c4d71424df3 scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() 283fdc5cfbeb i2c: imx-lpi2c: check only for enabled interrupt flags 90116b8289fd igbvf: Regard vf reset nack as success 584771762c3e intel/igbvf: free irq on the error path in igbvf_request_msix() 6999f854184e iavf: fix non-tunneled IPv6 UDP packet type and hashing 4e752d2baea3 iavf: fix inverted Rx hash condition leading to disabled hash 6fe078c2864b power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition 754838aa0205 net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() 09b1a76e7879 Linux 5.4.239 f0c95f229a67 selftests: Fix the executable permissions for fib_tests.sh (From OE-Core rev: ff5d1f37b8a1bc7f51e95e5114890ee5185ff335) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto/5.4: update to v5.4.238Bruce Ashfield2023-06-133-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest korg -stable release that comprises the following commits: 6849d8c4a61a Linux 5.4.238 eb7716a054a6 HID: uhid: Over-ride the default maximum data buffer value with our own b687ac70e66a HID: core: Provide new max_buffer_size attribute to over-ride the default 144019e81396 PCI: Unify delay handling for reset and resume d2130f37a4a0 s390/ipl: add missing intersection check to ipl_report handling 3f5a833dca66 serial: 8250_em: Fix UART port type c5afb97d1b51 drm/i915: Don't use stolen memory for ring buffers with LLC 8d26a4fecce5 x86/mm: Fix use of uninitialized buffer in sme_enable() a976ff743eb1 fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks ac58b88ccbbb ftrace: Fix invalid address access in lookup_rec() when index is 0 65e4c9a6d0c9 KVM: nVMX: add missing consistency checks for CR0 and CR4 6fe55dce9dd6 tracing: Make tracepoint lockdep check actually test something 780f69a2685b tracing: Check field value in hist_field_name() f1e3a20c6019 interconnect: fix mem leak when freeing nodes 325608ab60fa tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted c16cbd8233d6 ext4: fix possible double unlock when moving a directory 6a1bd14d5e34 sh: intc: Avoid spurious sizeof-pointer-div warning bbf5eada4334 drm/amdkfd: Fix an illegal memory access 2c96c52aeaa6 ext4: fix task hung in ext4_xattr_delete_inode 20ba6f8a8073 ext4: fail ext4_iget if special inode unallocated ab519e29891d jffs2: correct logic when creating a hole in jffs2_write_begin 00bfc67c65a1 mmc: atmel-mci: fix race between stop command and start of next command 75f6faae2de6 media: m5mols: fix off-by-one loop termination error 9eb394919c97 hwmon: (ina3221) return prober error code 26c176ce9028 hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition 13efd488d398 hwmon: (adt7475) Fix masking of hysteresis registers 0d3095e958f0 hwmon: (adt7475) Display smoothing attributes in correct order 674fce59d61d ethernet: sun: add check for the mdesc_grab() 71da5991b643 net/iucv: Fix size of interrupt data e0d07a3203c3 net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull 5c06bd3de134 ipv4: Fix incorrect table ID in IOCTL path c4fcfbf80c3c block: sunvdc: add check for mdesc_grab() returning NULL 04c394208831 nvmet: avoid potential UAF in nvmet_req_complete() 9fabdd79051a net: usb: smsc75xx: Limit packet length to skb->len b0c202a8dc63 nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition 668de67d4110 net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails 5aaab217c8f5 net: tunnels: annotate lockless accesses to dev->needed_headroom cba20ade78ef qed/qed_dev: guard against a possible division by zero 6e18f66b704b i40e: Fix kernel crash during reboot when adapter is in recovery mode f0216046aeb8 ipvlan: Make skb->skb_iif track skb->dev for l3s mode 0f9c1f26d434 nfc: pn533: initialize struct pn533_out_arg properly 442aa78ed701 tcp: tcp_make_synack() can be called from process context 88c3d3bb6469 scsi: core: Fix a procfs host directory removal regression 4b4f5e34f08b scsi: core: Fix a comment in function scsi_host_dev_release() 0d59732f2a5b netfilter: nft_redir: correct value of inet type `.maxattrs` 90279211e96b ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() 0b7057c52377 ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid 5bb9fcaadb8c ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid 9efbdc743ded ALSA: hda - controller is in GPU on the DG1 fc52e51c2c30 ALSA: hda - add Intel DG1 PCI and HDMI ids 090305c36185 scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() b8849e31a056 docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate 9e45e4571576 clk: HI655X: select REGMAP instead of depending on it dac08e46f0ad drm/meson: fix 1px pink line on GXM when scaling video overlay d7e48aa17a81 cifs: Move the in_send statistic to __smb_send_rqst() 06c208002d0d drm/panfrost: Don't sync rpm suspension after mmu flushing c9900d1d86f0 xfrm: Allow transport-mode states with AF_UNSPEC selector 4008fb9ad474 ext4: fix cgroup writeback accounting with fs-layer encryption (From OE-Core rev: 175d05d717b972d9b6bf36f170bc6cfa69b57dce) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: Security fix CVE-2023-24540Vijay Anusuri2023-06-132-0/+91
| | | | | | | | | Upstream-Status: Backport [https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797] (From OE-Core rev: e569586ac9095d344967c5b9c4bfb07f70948936) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* golang: Fix CVE-2023-24539Ashish Sharma2023-06-132-0/+61
| | | | | | | | | Improper sanitization of CSS values in html/template (From OE-Core rev: 737333d41d245154eb4b26ec8db79a2f9823c873) Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: Security fix CVE-2023-0494 and CVE-2023-1393Vijay Anusuri2023-06-133-0/+86
| | | | | | | | | | | | Upstream-Status: Backport [https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec & https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110] (From OE-Core rev: 0a29894da0b41f8494f72ded25916887b4a5c729) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: Fix CVE-2023-28879Vijay Anusuri2023-06-132-0/+55
| | | | | | | | | Upstream-Status: Backport [https://git.ghostscript.com/?p=ghostpdl.git;h=37ed5022cecd584de868933b5b60da2e995b3179] (From OE-Core rev: ec0c6f941826903b763be76c450f1d4e0e67908e) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ffmpeg: Fix CVE-2022-48434Nikhil R2023-06-132-0/+137
| | | | | | | | | | | | | | | | Add a patch to fix CVE-2022-48434 which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances Link: https://ubuntu.com/security/CVE-2022-48434 Link: https://nvd.nist.gov/vuln/detail/CVE-2022-48434 (From OE-Core rev: 51c8ffc49d03b231ce76fa00f923e5f3f833f6fc) Signed-off-by: Nikhil R <nikhilar2410@gmail.com> Signed-off-by: Ranjitsinh Rathod ranjitsinh.rathod@kpit.com Signed-off-by: Nikhil R <nikhilar2410@gmail.com> Signed-off-by: Nikhil R <nikhilar2410@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest: skip virgl test on ubuntu 22.10, fedora 37, and all rockySteve Sakoman2023-05-251-0/+6
| | | | | | | | This test will fail any time the host has libdrm > 2.4.107 (From OE-Core rev: e4b98a42970574296e0da06842691b9fc1ffc9a1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/utils/metadata.py: Fix running oe-selftest running with no distro setThomas Roos2023-05-251-3/+3
| | | | | | | | | | | | | This will use default values when no distribution is set. [YOCTO #15086] (From OE-Core rev: 1a28c6cfe0e6c4b44d01778f8034231040c6d4ad) Signed-off-by: Thomas Roos <throos@amazon.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 888fe63b46efceeff08dbe8c4f66fec33d06cb7a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO overrideMartin Jansa2023-05-251-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * otherwise it ends '<unknown>' inside esdk, because of parsing order: # $METADATA_REVISION [3 operations] # set /OE/build/test-D/conf/local.conf:43 # "f2da54ef432eac89b0f18eaad68e602b6990b5de" # immediate /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:9 # "${@oe.buildcfg.detect_revision(d)}" # set /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:10 # [vardepvalue] "${METADATA_REVISION}" # pre-expansion value: # "<unknown>" METADATA_REVISION="<unknown>" * This causes base-files.do_install and following tasks to have different signatures between esdk and the build directory where this esdk was created: bitbake-diffsigs {test-D,poky/build-uninative-disabled}/tmp/stamps/qemux86_64-poky-linux/base-files/*do_install*sigdata* NOTE: Starting bitbake server... basehash changed from 5b6981cf58bfd57d416b0e31611b73a26baae635dd1ac31c08d46f95064c3ffc to dbdce042da4d7813d632b6d1cc87a16f728ad20e55fecbc392830e6acf72babd Variable METADATA_REVISION value changed from '<unknown>' to 'f2da54ef432eac89b0f18eaad68e602b6990b5de' and an warning from "python3 /OE/build/test-D/ext-sdk-prepare.py" when eSDK is being prepared for use: WARNING: The base-files:do_install sig is computed to be 83b9c9a6ef1145baac5a1e0d08814b9156af239c58fc42df95c25a9cd8a7f201, but the sig is locked to 3dc22233059075978e5503691e98e79e7cc60db94259dfcd886bca2291c0add7 in SIGGEN_LOCKEDSIGS_t-qemux86-64 [RP: Add commit about why we need the override for future reference] (From OE-Core rev: 8f0e2e505d11697d0a1280b0a77a3fe8d72a4d49) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 675ea7281c17f77bf5dea17cfd4d9da0928382a0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wic/bootimg-efi: if fixed-size is set then use that for mkdosfsRandolph Sapp2023-05-251-0/+7
| | | | | | | | | | | | | | | | | This is a bit of a compatibility issue more than anything. Some devices get upset if the FAT file system contains less blocks than the partition. The fixed-size argument is currently respected by the partition creation step but not by the file system creation step. Let's make it so the file system respects this value as well. (From OE-Core rev: 2126242c19b0c3dea12c605da8b24b08a9cb803f) Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit d16301ccdfb97bf126738262eec594008c282df1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* perf: Depend on native setuptools3Khem Raj2023-05-251-1/+1
| | | | | | | | | | | | | | perf has need for python setuptools when scripting is enabled from 6.0.0 onwards it seems to throw an explicit error (From OE-Core rev: cfdaa6afaca28dd91c9738a97bb21eab5dae2817) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit da3d00178809bbf7cc453401e0c5937796ebc2c1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cpio: Fix wrong CRC with ASCII CRC for large filesMarek Vasut2023-05-252-0/+40
| | | | | | | | | | | | | | | | Due to signedness, the checksum is not computed when filesize is bigger a 2GB. Pick a fix for this problem from CPIO ML, where the fix has been posted for 5 years. Since CPIO upstream is effectively unresponsive and any and all attempts to communicate with the maintainer and get the fix applied upstream failed, add the fix here instead. (From OE-Core rev: bfff138af4bdd356ac66571e6ad91c1a5599b935) (From OE-Core rev: 0a8fb1c00e75e8434e0ef433d9074d54f038fba1) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: upgrade 20230210 -> 20230404Dmitry Baryshkov2023-05-251-3/+3
| | | | | | | | | | | | | | The LICENCE.qat_firmware license file was updated to reflect Intel licensing (it removed a term regarding patent licenses). License-Update: additional files (From OE-Core rev: 0a6a31e24414e156e005ef1d6a72ff668d83796a) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit fd43b59ab32e2115fcda7ad63d3a5ccc2683c7d5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGEAlex Kiernan2023-05-251-0/+2
| | | | | | | | | | | | | | The CVE product name for PyPI packages is (usually) the same as the PyPI package name (and not our recipe name), so use that as the default. (From OE-Core rev: 1c37b96cd4fdfad21bf24b8b883e371c3bca56de) Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 61f6b0ad09bf87cdc2d3f08770b7c44cad1d0e58) Signed-off-by: Sanjay Chitroda <schitrod@cisco.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: ammend fix for CVE-2023-27534 to fix error when ssh is enabledSiddharth2023-05-253-106/+68
| | | | | | | | | | | | | | | | | | The upstream patch for CVE-2023-27534 does three things: 1) creates new path with dynbuf(dynamic buffer) 2) solves the tilde error which causes CVE-2023-27534 3) modifies the below added functionality to not add a trailing "/" to the user home dir if it already ends with one with dynbuf. dynbuf functionalities are added in curl in later versions and are not essential to fix the vulnerability but does add extra feature in later versions. This patch completes the 3rd task of the patch which was implemented without using dynbuf Upstream-Status: Backport from [https://github.com/curl/curl/commit/6c51adeb71da076c5c40a45e339e06bb4394a86b] (From OE-Core rev: df489f644e41108cf0e2ff55af7ce5e9bca40471) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: fix CVE-2023-25652Hitendra Prajapati2023-05-252-0/+95
| | | | | | | | | | | | | | | | | | | | | | | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists. References: https://nvd.nist.gov/vuln/detail/CVE-2023-25652 Upstream-Status: Backport from https://github.com/git/git/commit/9db05711c98efc14f414d4c87135a34c13586e0b (From OE-Core rev: 6747482316b8f7839a09bf041d8c11b559f84b44) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: fix CVE-2023-29007Hitendra Prajapati2023-05-252-0/+160
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`. References: https://nvd.nist.gov/vuln/detail/CVE-2023-29007 Upstream patches: https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4 https://github.com/git/git/commit/29198213c9163c1d552ee2bdbf78d2b09ccc98b8 https://github.com/git/git/commit/a5bb10fd5e74101e7c07da93e7c32bbe60f6173a https://github.com/git/git/commit/e91cfe6085c4a61372d1f800b473b73b8d225d0d https://github.com/git/git/commit/3bb3d6bac5f2b496dfa2862dc1a84cbfa9b4449a (From OE-Core rev: db4c152441aebe4c04a7bb7aceb88d8941a6576b) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* run-postinsts: Set dependency for ldconfig to avoid boot issuesArturo Buzarra2023-05-161-1/+1
| | | | | | | | | | | | | | | | | | | | | If a package with a postsints script requires ldconfig, the package class adds a ldconfig postinst fragment to initialize it before. Systemd has its own ldconfig.service to initialize it and sometimes if both services are running at the same time in the first boot, the first one will work, but the second one will fail with the following error: ldconfig[141]: /sbin/ldconfig: Renaming of /etc/ld.so.cache~ to /etc/ld.so.cache failed: No such file or directory This commit adds a ordering dependency between them to make sure that only one service is running at the same time. (From OE-Core rev: 1bc254e7969f3d5470bacf9ad9f065d38b7b7fde) Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4e9d812e127dc6743f52f4881e509e8e2e833afe) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libbsd: Add correct license for all packagesRanjitsinh Rathod2023-05-161-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | BSD-4-Clause is only applicable to the {PN}-doc package as when I check for the source code I find below files which only uses the license BSD-4-Clause ~/sources/libbsd$ grep -rl "All advertising materials mentioning features or use of this software" *|grep -v \.1|grep -v \.5|grep -v \.8 | sort COPYING man/arc4random.3bsd man/getprogname.3bsd man/tree.3bsd ~/sources/libbsd$ grep -rnB6 "BSD-4" COPYING-9-Files: COPYING-10- man/arc4random.3bsd COPYING-11- man/tree.3bsd COPYING-12-Copyright: COPYING-13- Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de> COPYING-14- All rights reserved. COPYING:15:License: BSD-4-clause-Niels-Provos (From OE-Core rev: 187f1588240a0eb5cc753c2114fd6c0cef66e14f) Signed-off-by: Steve Sakoman <steve@sakoman.com>