summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
...
* classes: image_types: quote variable assignment needed by dashMartin Hundeb?ll7 days1-1/+1
| | | | | | | | | | | | | | | | | | | The change in commit 39fc503036 ("classes: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs()") assigns $@ to a local variable without quoting it. While this works with bash, it fails with dash. Here, only the first token of $@ is assigned to the variable, and the reamining tokens are passed as arguments to the "local" keyword. Fix it by adding the missing quotes. (From OE-Core rev: a3b51197f3ce868c83ed5ca415bd6506ecc2575d) Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 14ca134f9f72d518c9180156a8efac19f8bb3ab0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* run-postinsts.service: Removed --no-reload to fix reload warning when users ↵Lei Maohui7 days1-1/+1
| | | | | | | | | | | | | | | | execute systemctl in the first boot. This warning is because after systemd has been upgraded to 255, reloading units operation is needed even when "enable/disable" units by systemctl. (From OE-Core rev: 28a7064403f2433ef3cb4d52b03dd73437f2d665) (From OE-Core rev: bdad9d3df6e9e4834803a60af24c072b39d5cbf8) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: upgrade 2.44.0 -> 2.44.1Soumya Sambu7 days1-1/+1
| | | | | | | | | | | | | | | | | Addresses the security issues - CVE-2024-32002, CVE-2024-32004, CVE-2024-32020,CVE-2024-32021 and CVE-2024-32465 Changelog: ========== https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.1.txt (From OE-Core rev: 3a7ef46ebaf8d4b470ef5b6803dc3b76c22a97c2) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 767f9515013790c9a6b945fae9de03c9e5b89b80) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc : upgrade to v13.3Deepthi Hemraj7 days16-3534/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | gcc stable version upgraded from v13.2 to v13.3 Dropped CVE-2023-4039.patch, CVE-2024-0151.patch and 0026-aarch64-Fix-loose-ldpstp-check-PR111411.patch because its been taken to gcc-13.3 with below commits 71a2aa2127283f450c623d3604dbcabe0e14a8d4, 5550214b58e95320b54e42ef0e37c6479e04b27b and 4bb1ae3c13ce4fb72129229de66f5ffbcd45fe4c respectively. For changes in v13.3 see: https://gcc.gnu.org/onlinedocs/gcc-13.3.0/gcc/ Below is the bug fix list for v13.3 https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&list_id=429106&resolution=FIXED&target_milestone=13.3 There are a total 173 bugs are fixed in this release, below is the list of bugs fixed excluding the regression fixes. ID Product Comp Assignee▲ Summary 114408 gcc analyzer dmalcolm ICE when invoking strcmp multiple times with -fsanitize=undefined -O1 -fanalyzer -flto 109251 gcc analyzer dmalcolm -Wanalyzer-deref-before-check false positives seen in Linux kernel due to check in macros 114473 gcc analyzer dmalcolm ICE: in deref_rvalue, at analyzer/region-model.cc:2780 with -fanalyzer -fanalyzer-call-summaries 100988 gcc fortran anlauf Missed optimization: RESTRICT missing for optional arguments 112764 gcc fortran anlauf Associating entity does not have target attribute if selector has pointer attribute in associate block 114001 gcc fortran anlauf is_contiguous considers unlimited polymorphic dummy always as contiguous 112787 gcc target avieira Codegen regression of large GCC vector extensions when enabling SVE 114160 gcc target cmuellner ICE on RISCV (-mcpu=thead-c906) when building glibc in dwarf2out_frame_debug_cfa_offset 110882 gcc analyzer dmalcolm ICE with -fanalyzer on zero-sized array 111289 gcc analyzer dmalcolm Unwarranted -Wanalyzer-va-arg-type-mismatch warning 112790 gcc analyzer dmalcolm Wanalyzer-deref-before-check false positives seen in Linux kernel due to inlining 112792 gcc analyzer dmalcolm Wanalyzer-out-of-bounds false positives seen on Linux kernel with certain unions 114316 gcc libstdc+ fdumont assert failure with _GLIBCXX_DEBUG and empty range of singular iterators passed to std:: algorithm 108121 gcc modula2 gaius Failing tests on x86_64-linux-gnu 110754 gcc middle-e jakub assume create spurious load for volatile variable 105456 gcc libfortr jvdelisle Child I/O does not propage iostat 114747 gcc target kito Wrong SEW set for mixed-size intrinsics 104831 gcc target patrick RISCV libatomic LR.aq/SC.rl pair insufficient for SEQ_CST 108174 gcc target pinskia ICE: tree check: expected function_type or method_type, have ggc_freed in aarch64_resolve_overloaded_memtag, at config/aarch64/aarch64-builtins.cc:3349 114314 gcc driver pinskia ICE: in common_handle_option, at opts.cc:3356 with -fno-multiflags 99493 gcc c++ ppalka Address of template parameter object is not a valid template argument 99631 gcc c++ ppalka decltype of non-type template-parameter shouldn't be const 104634 gcc c++ ppalka Explicit template instantiation does not work when there are multiple partial template specialization using concepts 110809 gcc c++ ppalka ICE: in unify, at cp/pt.cc:25226 with floating-point NTTPs 110927 gcc c++ ppalka GCC fails to parse dependent type in concept through partial specialization 111493 gcc c++ ppalka multidimensional subscript operator inside requires is broken 113242 gcc c++ ppalka g++ rejects-valid template argument of class type containing an lvalue reference 113529 gcc c++ ppalka Incorrect result of requires-expression in case of function call ambiguity and `operator<=>` 108046 gcc libstdc+ redi The dot in the floating-point alternative form has wrong position 110708 gcc libstdc+ redi std::format("{:%EEC %OOd}", std::chrono::system_clock::now()) should be rejected 2023-07-28 110719 gcc libstdc+ redi Should chrono formatters always use std::time_put for locale's representation? 110860 gcc libstdc+ redi std::format("{:f}",2e304) invokes undefined behaviour 110862 gcc libstdc+ redi format out of bounds read on format string "{0:{0}" 110917 gcc libstdc+ redi std::format_to(int*, ...) fails to compile because of _S_make_span 110944 gcc libstdc+ redi std::variant & optional GDB representation is too verbose 110968 gcc libstdc+ redi format out of bounds read on format("{:05L}",-1.f) 110970 gcc libstdc+ redi clang / c++23 missing 'typename' prior to dependent type name 110990 gcc libstdc+ redi `format_to_n` returns wrong value 111511 gcc libstdc+ redi Incorrect ADL in std::to_array in GCC 11/12/13 111826 gcc libstdc+ redi __cpp_lib_format should be 202110, not 202106 111948 gcc libstdc+ redi subrange modifies a const size object 112607 gcc libstdc+ redi _Normalize does not consider char_type for the basic_string_view case 112832 gcc libstdc+ redi Broken non-SFINAE-friendly `set_debug_format()` for `const char *` formatter 113500 gcc libstdc+ redi Using std::format with float or double based std::chrono::time_point causes error: no match for 'operator<<' 13512 gcc libstdc+ redi Incorrect results for std::format("{:#.3g}", flt) 114103 gcc libstdc+ redi FAIL: 29_atomics/atomic/lock_free_aliases.cc -std=gnu++20 (test for excess errors) 114152 gcc libstdc+ redi Wrong exception specifiers for LFTSv3 scope guard destructors 114863 gcc libstdc+ redi std::format applying grouping to nan's and inf's 115063 gcc libstdc+ redi compilation error: std::basic_stracktrace::max_size() 105523 gcc target saaadhu Wrong warning array subscript [0] is outside array bounds 93370 gcc target unassigned Aarch64 accepts but ignores target("+sm4") unless ARMv8.2-A is enabled 93762 gcc fortran unassigned Truncation of deferred-length string when passing as optional 100285 gcc libstdc+ unassigned experimental/net/socket/socket_base.cc fails on arm-eabi (r12-137) 106037 gcc ada unassigned internal error with Aggregate aspect on array type 110127 gcc c++ unassigned -fimplicit-constexpr leads to extremely slow and memory intensive compilation 110133 gcc libstdc+ unassigned System error message should ideally use strerror_r over strerror 110974 gcc libstdc+ unassigned format out of bounds read on invalid format string "{:{}." 111102 gcc libstdc+ unassigned illegal pointer arithmetic invoked by std::format("L{:65536}",1) 112480 gcc libstdc+ unassigned optional<T>::reset emits inefficient code when T is trivially-destructible 113294 gcc libstdc+ unassigned constexpr error from accessing inactive union member in basic_string after move assignment 113815 gcc ada unassigned error: there is no applicable operator "*" for a string type 113824 gcc target unassigned AVR: ATA5795 in wrong multilib set 2024-02-08 113850 gcc libgcc unassigned condition variables timed wait does a lot of spurious wakeups on Win32 threading implementation 113927 gcc target unassigned Sets up a stack-frame even for trivial code 114136 gcc middle-e unassigned wrong code for c23 fully anonymous arg lists on arm 97245 gcc fortran anlauf ASSOCIATED intrinsic does not recognize a pointer variable the second time it is used 101135 gcc fortran anlauf Load of null pointer when passing absent assumed-shape array argument for an optional dummy argument 110825 gcc fortran anlauf TYPE(*) dummy argument to generate an unused hidden argument 110826 gcc fortran anlauf Fortran array of derived type with a pointer to function with dimensional arguments fails 113799 gcc fortran anlauf gfc_replace_expr: double free detected ? 114012 gcc fortran anlauf overloaded unary operator called twice 113601 gcc target gjl avr: Wrong SRAM start for ATmega3208 and ATmega3209 107201 gcc target unassigned -nodevicelib not working for devices -mmcu=avr... 114024 gcc fortran unassigned ICE allocate statement with source=cmp%re and z an array 53372 gcc target unassigned Section attribute ignored with address space 112952 gcc target unassigned avr: attribute address not working with -fdata-sections -fno-common 114752 gcc target unassigned AVR: internal compiler error. Unknown mode: const_double:DF 114794 gcc target unassigned Speed up udivmodqi4 (From OE-Core rev: 20b94a6f3681afc9d5f7c07d571fcc47efcc9827) Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: Upgrade 3.2.1 -> 3.2.2Siddharth7 days4-361/+1
| | | | | | | | | | | | | | | | | | | | | CVE's Fixed by upgrade: CVE-2024-4741: Fixed potential use after free after SSL_free_buffers() is called CVE-2024-4603: Fixed an issue where checking excessively long DSA keys or parameters may be very slow CVE-2024-2511: Fixed unbounded memory growth with session handling in TLSv1.3 Bugs Fixed by upgrade: #23560: Fixed bug where SSL_export_keying_material() could not be used with QUIC connections Removed backports of CVE-2024-2511, CVE-2024-4603 and bti.patch as they are already fixed. Detailed Information: https://github.com/openssl/openssl/blob/openssl-3.2/CHANGES.md#changes-between-321-and-322-4-jun-2024 (From OE-Core rev: f99c9346c225b862cc26923e823c35484beb797f) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gdk-pixbuf: upgrade 2.42.11 -> 2.42.12Ross Burton7 days3-6/+6
| | | | | | | | | | | | | | | | | - Fix a build failure (Christian Heusel) - Fix occasional build failures (Benjamin Gilbert) - ani: Reject files with multiple INA or IART chunks (Benjamin Gilbert) - ani: Reject files with multiple anih chunks (Benjamin Gilbert, CVE-2022-48622) - ani: validate chunk size (Benjamin Gilbert) - Translation updates (From OE-Core rev: 246c1b01ca21a8102ab7a400f88621e8a95281af) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c5b202b0aef56ecf7982887c54b4ecbc4bbe73ae) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gdk-pixbuf: upgrade 2.42.10 -> 2.42.11Wang Mingyu7 days3-10/+9
| | | | | | | | | | | | | | | | | | | 0001-meson.build-allow-a-subset-of-tests-in-cross-compile.patch fatal-loader.patch refreshed for 2.42.11 Changelog: =========== - Disable fringe loaders by default - Introspection fixes - Translation updates (From OE-Core rev: 78d7d14194f25be800fb42c8e81f7709611d26cd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 243a6fce44882ff16c5dfcb518cafd8ee8f7ae24) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* util-linux: Fix CVE-2024-28085Soumya Sambu7 days3-0/+72
| | | | | | | | | | | | | | | | | wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28085 (From OE-Core rev: b40a77416f73955833faeddf6091a99ff9837199) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* git: set --with-gitconfig=/etc/gitconfig for -native buildsRasmus Villemoes2024-06-051-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 6c2ae2346db0 (kern-tools: depend on git-replacement-native) broke our kernel builds. For saving space and time, we have a DL_DIR shared between multiple users/buildbots, not all of which run with the same uid (and with appropriate sticky bits set so that files downloaded by one user become owned by a common group and are readable by others). This works fine also for git sources because the docker images we use all have a /etc/gitconfig with [safe] directory = * But with the mentioned commit, the host's git is no longer used for do_unpack (nor for do_fetch if re-building and sysroot has already been populated by a previous build), causing spurious "fatal: detected dubious ownership..." failures. Currently, the path where the git-native binary searches for system gitconfig is the sysroot from it was built, which obviously doesn't contain a /etc/gitconfig. As for the nativesdk variant, respect the host's /etc/gitconfig if present. (From OE-Core rev: a3f5ac9f9fee2c8e10fec7c3f758e49513fef724) Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 572f511f7ff02fb559ac42d2d5dbd09fec478d97) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ipk: Fix clean up of extracted IPK payloadPhilip Lorenz2024-06-051-4/+2
| | | | | | | | | | | | | | | | | It turns out that the IPK payload tarball was actually cleaned up in the concrete package manager implementation (most likely because at some point Debian and IPK packages used different compression algorithms). Globbing removes this ambiguity so move the removal of the payload into the common extract method. (From OE-Core rev: ec1c6bc79f5ca219e77a379bbabc2dad808d2020) Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1e2b02a54f482159e21902eeb997b21e00e9588e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* lib/package_manager/ipk: Do not hardcode payload compression algorithmPhilip Lorenz2024-06-051-1/+7
| | | | | | | | | | | | | The chosen payload compression algorithm can be changed by overriding `OPKGBUILDCMD`. Ensure that package extraction deals with this by globbing for "data.tar.*" to select the actual payload tarball. (From OE-Core rev: c2b00cd4148d4b08ba5673488a652f8daf3ac085) Signed-off-by: Philip Lorenz <philip.lorenz@bmw.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2ad05635a6da403b4fadcc126fe7734067c12c73) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* update-rc.d: add +git to PVPeter Marko2024-06-051-0/+1
| | | | | | | | | | | | | This hash is ahead of the tag, so adapt PV accordingly. (From OE-Core rev: c94e46019a7d443ccc4763ba16d87e7e97abe977) (From OE-Core rev: 54cbf43e55ec3373f8c2612b787166da35028fd3) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gstreamer1.0-plugins-good: Include qttools-native during the build with qt5 ↵Marek Vasut2024-06-051-1/+1
| | | | | | | | | | | | | | | | | | PACKAGECONFIG The qttools provide 'lrelease' tool, which is checked by recent versions of meson build system. Unless the qttools are available in sysroot, meson will fail to detect qt5 installation at build time and the gstreamer build will fail. Fix this by including the qttools-native. (From OE-Core rev: 4e9274f2719eea91de3c98b9f88a7e2ebebcce90) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ae2ca4af54695003638da38f8548aa8573d18201) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/devtool: add test for updating local files into another layerJulien Stephan2024-06-051-2/+18
| | | | | | | | | | | | | | | | We don't have a test to check if we can correctly devtool update-recipe/finish into another layer. So update the existing test_devtool_update_recipe_local_files to also check the updates into another layer. (From OE-Core rev: bd44c895d36e246a25c7a6e40bf9f4089dc7a297) (From OE-Core rev: 0532a6292edbe68303b6d85017ebcdb36a60886f) Signed-off-by: Julien Stephan <jstephan@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Jeff Harris <jefftharris@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libarchive: upgrade 3.7.2 -> 3.7.4Yogita Urade2024-06-052-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changlog: ======== rar: Fix OOB in rar e8 filter zip: Fix out of boundary access 7zip: Limit amount of properties bsdtar: Fix error handling around strtol() usages passphrase: Improve newline handling on Windows passphrase: Never allow empty passwords rar: Fix "File CRC Error" when extracting specific rar4 archives xar: Avoid infinite link loop zip: Update AppleDouble support for directories zstd: Implement core detection PCRE2 support add trailing letter b to bsdtar(1) substitute pattern add support for long options "--group" and "--owner" to tar(1) Fix possible vulnerability in tar error reporting introduced in f27c173 ISO9660: preserve the natural order of links rar5: fix decoding unicode filenames on Windows rar5: fix infinite loop if during rar5 decompression the last block produced no data xz filter: fix incorrect eof at the end of an lzip member zip: fix end-of-data marker processing when decompressing zip archives multiple bsdunzip(1) fixes filetime truncation fix on Windows Adjusted configurehack.patch to align with upgraded version. (From OE-Core rev: 1c789d692e0bbea4c26cfad8c36abf051f54a444) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ptest-runner: Bump to 2.4.4 (95f528c)Changqing Li2024-06-051-1/+1
| | | | | | | | | | | Changes in 2.4.4: 95f528c utils.c: run_ptests improve error handling on ptests iteration c48e5fc utils.c: run-ptests improve pseudo-terminal handling (From OE-Core rev: c0061e8e30c0bbd45c31f56d01ed5b688a641e9e) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: Switch to using release tarballsKhem Raj2024-06-051-7/+6
| | | | | | | | | | | | | | | | git checkouts are in excess of 3G, which is not ideal for everyone to download/clone, instead switch to fetching release tarball which is ~126M as of 18.1.5 release (From OE-Core rev: 800e6576e4f3af10846af13c2f217f986c1afdb4) (From OE-Core rev: 251d626a7d3cf6dfb3c0d8617f6cace666c7ea74) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: Upgrade to 18.1.5Khem Raj2024-06-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Brings 617a15a9eac9 [clang codegen] Fix MS ABI detection of user-provided constructors. (#90151) 20b9ed64ea07 [RISCV][ISel] Fix types in tryFoldSelectIntoOp (#90659) ece9d35f1a70 [GlobalISel] Fix store merging incorrectly classifying an unknown index expr as 0. (#90375) a7b8b890600a [X86] Enable EVEX512 when host CPU has AVX512 (#90479) 4da5b1417493 [GlobalISel] Don't form anyextending atomic loads. a96b04442c9f [AArch64] Remove invalid uabdl patterns. (#89272) aea091b70eda [clang][CoverageMapping] do not emit a gap region when either end doesn't have valid source locations (#89564) 58648f334d62 [X86][EVEX512] Check hasEVEX512 for canExtendTo512DQ (#90390) 6350acdb134d [CGP] Drop poison-generating flags after hoisting (#90382) f341c76b9461 [Clang] Handle structs with inner structs and no fields (#89126) abf6b13085fb [IRCE] Skip icmp ptr in InductiveRangeCheck::parseRangeCheckICmp (#89967) ee5bb0c95667 Fix Objective-C++ Sret of non-trivial data types on Windows ARM64 (#88671) 6dbaa89433f7 [clang-format] Fix a regression in ContinuationIndenter (#88414) 51ff7f38b633 [clang-format] Fix a regression in annotating TrailingReturnArrow (#86624) b544217fb31f [AMDGPU] Fix setting nontemporal in memory legalizer (#83815) 78b99c73ee4b [DAGCombiner] Fix miscompile bug in combineShiftOfShiftedLogic (#89616) 1aa91720cc4f [DAGCombiner] Pre-commit test case for miscompile bug in combineShiftOfShiftedLogic 35fea1032741 release/18.x: [clang-format] Correctly annotate braces in macros (#87953) b9b73814ad8a [libcxx] [modules] Add _LIBCPP_USING_IF_EXISTS on aligned_alloc (#89827) c0b48372d82a release/18.x: [clang-format] Revert breaking stream operators to previous default (#89016) 3b4ba7277bd7 [analyzer] Fix performance of getTaintedSymbolsImpl() (#89606) 7699b341b763 release/18.x: [clang-format] Fix a regression in annotating BK_BracedInit (#87450) fb865928c8e0 [GlobalISel] Fix fewerElementsVectorPhi to insert after G_PHIs (#87927) 111ae4509c96 [X86] Fix miscompile in combineShiftRightArithmetic 76cbd417af50 [X86] Pre-commit tests (NFC) e7c816b3cd3e [InstCombine] Fix unexpected overwriting in foldSelectWithSRem (#89539) 3685a599c866 ReleaseNote: Mention SpecialCaseList change (#89141) a981a4f7653c [X86] Always use 64-bit relocations in no-PIC large code model (#89101) 4ddac856c55f [analyzer] Fix a security.cert.env.InvalidPtr crash c6d63d4fc555 Bump version to 18.1.5 (#89291) (From OE-Core rev: 02df2fc6241ac8fb0e78f2fdff97a04e5c561d54) (From OE-Core rev: b01e94690c3c29cd1e666e671c98e500c13e1942) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: Upgrade to 18.1.4Khem Raj2024-06-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Brings following fixes * e6c3289804a6 [CMake][Release] Disable PGO (#88465) (#89000) * 028e425f86cc [MIPS] Fix the opcode of max.fmt and mina.fmt (#85609) * e3c832b37b0a Fix override keyword being print to the left side * 1deeee3f5da4 Revert "[Mips] Fix missing sign extension in expansion of sub-word atomic max (#77072)" * 995539ce05ba [LLD] [COFF] Don't add pseudo relocs for dangling references (#88487) * db67e6fb9ad1 [libc++] Fix -Wgnu-include-next in stddef.h (#88214) * 647fbc710840 [SelectionDAG] Prevent combination on inconsistent type in `combineCarryDiamond` (#84888) * eaae766a20fd [RISCV] Support rv{32, 64}e in the compiler builtins (#88252) * c24b41d71f2e github-upload-release.py: Fix bug preventing release creation (#84571) * c837970dd7e9 [Codegen][X86] Fix /HOTPATCH with clang-cl and inline asm (#87639) * d0ddcce21d91 [InstSimplify] Make sure the simplified value doesn't generate poison in threadBinOpOverSelect (#87075) * 4056cc29dfd3 Prepend all library intrinsics with `#` when building for Arm64EC (#87542) * 6e071cf30599 [SLP]Fix a crash if the argument of call was affected by minbitwidth analysis. * d89da2ac8839 [libcxx] coerce formatter precision to int (#87738) * b6ebea7972cd [SPARC] Implement L and H inline asm argument modifiers (#87259) * bffecba7ce4c [libc++] Simplify the implementation of <stddef.h> (#86843) * 9899a2d76c8f [lit][ci] Publish lit wheels (#88072) * 3ceccbdb1995 [clang-format] Correctly annotate braces of empty ctors/dtors (#82097) * 429d62872525 [Headers] Don't declare unreachable() from stddef.h in C++ (#86748) * feba8727f805 [ConstantRange] Fix off by 1 bugs in UIToFP and SIToFP handling. (#86041) * e4259b583c92 [Float2Int] Pre-commit test for SIToFP/UIToFP ConstantRange bug. NFC * daca56d8e162 Bump version to 18.1.4 (#87715) (From OE-Core rev: adc2651a8e902af24fee6ff30a72f4b7c63bef6f) (From OE-Core rev: 56ef42d454fb13a0eff0a7210a37ec4b54a2afc3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xserver-xorg: upgrade 21.1.11 -> 21.1.12Archana Polampalli2024-06-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release contains security fixes for * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31082 * CVE-2024-31083 Changelog: =========== 101caa1b0 (tag: xorg-server-21.1.12) xserver 21.1.12 117315640 render: fix refcounting of glyphs during ProcRenderAddGlyphs 0e34d8ebc Xquartz: ProcAppleDRICreatePixmap needs to use unswapped length to send reply cea92ca78 Xi: ProcXIPassiveGrabDevice needs to use unswapped length to send reply 8a7cd0e3e Xi: ProcXIGetSelectedEvents needs to use unswapped length to send reply 5ca3a9513 Xext: SProcSyncCreateFence needs to swap drawable id too 5d7272f05 Allow disabling byte-swapped clients 8a46a463f Initialize Mode->name in xf86CVTMode() f653d9a0a hw/xfree86: fix NULL pointer refrence to mode name 8b75ec34d dix: Fix use after free in input device shutdown https://lists.x.org/archives/xorg-announce/2024-April/003497.html (From OE-Core rev: 64174dc0f593baa4f74c0080726de94802b903ef) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 12dfa6889a1c322d0e20fd9b7638dcb861e032f2) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gcc: Fix for CVE-2024-0151Mark Hatle2024-06-052-0/+316
| | | | | | | | | | | | | | | Fix for insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state. (From OE-Core rev: 165a7007678c27b6c0a27cda25652a00768c2fee) Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2024-29510Archana Polampalli2024-06-052-0/+85
| | | | | | | (From OE-Core rev: 202b2b0a5c447baf7d84c19b7829a81a846413d9) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2024-33871Archana Polampalli2024-06-052-0/+44
| | | | | | | (From OE-Core rev: c28281b7e105536cdf61eef8fe81d85ff2a42e4f) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2024-33869Archana Polampalli2024-06-053-0/+93
| | | | | | | (From OE-Core rev: d24e9c6c1016fbe8522f647aca76d93ab9cc5a41) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2024-33870Archana Polampalli2024-06-052-0/+100
| | | | | | | (From OE-Core rev: b95a08ec9f70a0b21f5fc239eda1857cea54702f) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libusb1: Set CVE_PRODUCTRicardo Simoes2024-06-051-0/+2
| | | | | | | | | | | | | | | This commit sets the CVE_PRODUCT variable to "libusb" to match the product name used in the NIST CPE database [1]. [1]: https://nvd.nist.gov/products/cpe/search (From OE-Core rev: 89e991380aac2bea93732a8dff1c4c646bb2cea1) Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ncurses: Fix CVE-2023-45918Soumya Sambu2024-06-052-0/+181
| | | | | | | | | | | | | | | | ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45918 (From OE-Core rev: 6573995adf4cfd48b036f8463b39f3864fcfd85b) (From OE-Core rev: 5385b15345dddc958fc961246e56b962db735276) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ttyrun: define CVE_PRODUCTPeter Marko2024-06-051-0/+2
| | | | | | | | | | | | | | | | | Single executable ttyrun is taken ouf of s390-tools repository containing ton of other helper tools. CVEs are not assigned to executables, but to whole components. Historically there also already exists one CVE for s390-tools. Most of the CVEs will not be for ttyrun, but this is the way how to get notified even if most we get will have to be ignored. (From oe-core rev: df28547387c2c122aef3e5326b216ec3f4d3caa7) (From OE-Core rev: 9e07ff39c1b2794d6de7f8d14cdf47707db50f5a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/debuginfod: use localpkgfeed to speed server startupRoss Burton2024-05-231-6/+8
| | | | | | | | | | | | | | | | | | Sometimes the debuginfod selftest fails due to a timeout, because it spends too long scanning a huge deploy directory that due to what tests were ran previously can contain 30K packages. The test only needs a subset of the feed, so use the new localpkgfeed class to construct a minimal feed before running the test. [ YOCTO #14937 ] (From OE-Core rev: 0795169be206f1d4d140fe378e2476a44d0ce02b) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 855376f518b28248ccd82ef5b2e89e6a8c970542) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* lib/oe/package-manager: allow including self in create_packages_dirRoss Burton2024-05-231-3/+6
| | | | | | | | | | | | | | | | This function is typically used to construct a limited feed for image creation, but there are other cases when you might want a limited feed and include the current recipe's packages in it. To ensure that existing behaviour is preserved, add a boolean to control this behaviour and default it to False. (From OE-Core rev: 20a6f55328733ad6f0c05b1353e8d525019aeea7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aada7fda2b118152d82b1ab295d92b8251afe4ac) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bash: Fix file-substitution error-handling bugZev Weiss2024-05-232-0/+35
| | | | | | | | | | | | | | This is part of a patch that's been upstream for a while but hasn't yet been released. The bug is causing some downstream difficulties, so a local patch to tide us over until the next release makes things a bit easier. (From OE-Core rev: 6a81ccc68f8389ca1c9c8eed009388045beea9e4) Signed-off-by: Zev Weiss <zev@bewilderbeest.net> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit bf384d6618780dea2df24adac88ba4364cb65b9b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* patchtest: test_metadata: fix invalid escape sequencesTrevor Gamblin2024-05-231-2/+2
| | | | | | | | | | | | | | | | Clear up the following warnings seen during patchtest runs: |/workspace/yocto/poky/meta/lib/patchtest/tests/test_metadata.py:21: SyntaxWarning: invalid escape sequence '\+' | add_mark = pyparsing.Regex('\+ ') |/workspace/yocto/poky/meta/lib/patchtest/tests/test_metadata.py:26: SyntaxWarning: invalid escape sequence '\:' | git_regex = pyparsing.Regex('^git\:\/\/.*') (From OE-Core rev: b5406d3691341c050a62fc9a32dc5573fd0c484f) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 2d64317835a768898aac592b24fcbdfaf6c8357a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libcgroup_3.1.0: fix build on non-systemd systemsAdriaan Schmidt2024-05-232-0/+38
| | | | | | | | | | backport upstream commit 592dcdcf243576bd2517d3da9bc18990de08e37e to fix packaging when building with --enable-systemd=no (From OE-Core rev: c0708adce620bcce5e503851fa6598bd941276eb) Signed-off-by: Adriaan Schmidt <adriaan.schmidt@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* classes: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs()Martin Hundebøll2024-05-231-8/+12
| | | | | | | | | | | | | | | | | | | | Since commit c991f9d6031 ("image_types: Set SOURCE_DATE_EPOCH for squashfs"), I assume, the EXTRA_IMAGECMD:squashfs* variable(s) has been ignored. This is due to the override magic, which isn't applied to functions called by IMAGE_CMD:<type>, but only to the IMAGE_CMD:<type> itself. Other image types (e.g. ext*) works around this by passing the EXTRA_IMAGECMD variable as an argument to the called function. To do the same for oe_mksquashfs(), the number of mandatory arguments is fixed to one (with a little logic to handle the zstd filename). This allows passing ${EXTRA_IMAGECMD} as an argument to oe_mksquashfs(), which makes the variable functional again. (From OE-Core rev: 39fc503036312e38ff0b9d8fb90b4c929b5ca7df) Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* Revert "goarch: disable dynamic linking globally"Jose Quaresma2024-05-231-7/+7
| | | | | | | | | | | | | | This reverts commit 827c60b79e7fcafd14e68870f6b69dcc48ac9c39. Fixed with the drop of the linkmode (From OE-Core rev: 137bb70ddf9dce30374cbb366196da0d8cc94205) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8f46f60a703defc3e74adad382320c129cef0b06) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: Drop the linkmode completelyJose Quaresma2024-05-232-3/+1
| | | | | | | | | | | | | This will make possible to restore the default dynamic linking globally which is what we had before the 1.20.X release. (From OE-Core rev: 941c8535eaaca5790c9bc2b3d21d8ce402dbb431) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6ad90fc2fc49c4199a59dfb1c1d81a7ba184a522) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* uboot-sign: fix loop in do_uboot_assemble_fitimageRalph Siemsen2024-05-231-1/+1
| | | | | | | | | | | | | When using multiple u-boot configurations in UBOOT_CONFIG, the helper function uboot_assemble_fitimage_helper() was not called with all combinations of type & binary, due to a copy-n-paste indexing error. (From OE-Core rev: 0862abfede2680ff8d67c5e9ece2017f594cb8a1) Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2d338548a4b745a71eaf6c29231adc93c4165778) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* webkitgtk: 2.44.0 -> 2.44.1Kai Kang2024-05-232-40/+1
| | | | | | | | | | | | | | | | | | | | | | | | Update webkitgtk from 2.44.0 to the first bug fix release in the stable 2.44 series 2.44.1. * remove backported patch What's new in the WebKitGTK 2.44.1 release? =========================================== - Fix handling of lifetime of web view child dialogs in GTK4. - Do not schedule layer flushes when drawing area size is empty. - Fix videos with alpha when using the DMA-BUF sink. - Fix the build with USE_GBM=OFF. - Fix the build in 32bit platforms - Fix several crashes and rendering issues. (From OE-Core rev: f891b66b981b0e023ffcf7e5cb2cd3fe99008f16) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit c129c47cf9fa119005ea6e3946ebdee0da1db7e0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: upgrade 18.1.2 -> 18.1.3Wang Mingyu2024-05-231-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | 0001-AsmMatcherEmitter-sort-ClassInfo-lists-by-name-as-we.patch refreshed for 18.1.3 Changelog: ============ -DFixes tsan failures for glibc's LoongArch and certain RISC-V ports when fstat is used. -transform.structured.convert_to_loops now properly deletes its target op. -Fix a llvm.usub.with.overflow.i128 wrong code generation regression that was introduced with LLVM 18.1.0. -MemorySanitizer on Linux can now run even when maximum-entropy address-space layout randomization is configured globally -Fixed a Clang 18.x regression which increased binary size and stack usage with -ftrivial-auto-var-init. (From OE-Core rev: c2666c09e9ef1f523cbbcc7c9b91fc36c4872823) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit d2159f92ddbb6b999c1d14ac62647b4a35360377) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: correct licensePeter Marko2024-05-231-1/+1
| | | | | | | | | | | | | | | | | The license per [1] is LGPL-2.1-or-later and [2] converted last LGPL-2.1-only references. License-Update: corrected from LGPL-2.1-only to LGPL-2.1-or-later based on [1] and [2] [1] https://www.gnu.org/software/libc/ [2] https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=273a835fe7c685cc54266bb8b502787bad5e9bae (From OE-Core rev: 939140fa7201ae0e7d365648c2ff5629e4c25ff9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b7ad15a59d048ca7561a03cb0fc8e2c24680ce5c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: Update to latest on stable 2.39 branchPeter Marko2024-05-233-11/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | Adresses CVEs: CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 Changes: 273a835fe7 time: Allow later version licensing. acc56074b0 nscd: Use time_t for return type of addgetnetgrentX 836d43b989 login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701) 9831f98c26 login: Check default sizes of structs utmp, utmpx, lastlog fd658f026f elf: Also compile dl-misc.os with $(rtld-early-cflags) a9a8d3eebb CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680) c99f886de5 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678) 5a508e0b50 CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678) 1263d583d2 CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677) 2f8f157eb0 x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676] e701c7d761 i386: ulp update for SSE2 --disable-multi-arch configurations e828914cf9 nptl: Fix tst-cancel30 on kernels without ppoll_time64 support Since glibc introduced file sysdeps/arm/bits/wordsize.h our multilib patch needed to be updated. (From OE-Core rev: a8b1034d978e745951d5f690c89b9fca4e01e72e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: Update to latest on stable 2.39 branchPeter Marko2024-05-234-65/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adresses CVE-2024-2961 Remove backported patch included in hash update. Changes: 31da30f23c iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961) 423099a032 x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch 04df8652eb Apply the Makefile sorting fix edb9a76e30 powerpc: Fix ld.so address determination for PCREL mode (bug 31640) 7b92f46f04 x86-64: Simplify minimum ISA check ifdef conditional with if 9883f4304c x86-64: Don't use SSE resolvers for ISA level 3 or above 9d92452c70 AArch64: Check kernel version for SVE ifuncs 395a89f61e aarch64: fix check for SVE support in assembler b0e0a07018 aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR 31c7d69af5 i386: Use generic memrchr in libc (bug 31316) 5d070d12b3 x86: Expand the comment on when REP STOSB is used on memset 6484a92698 x86: Do not prefer ERMS for memset on Zen3+ aa4249266e x86: Fix Zen3/Zen4 ERMS selection (BZ 30994) 5a461f2949 Add tst-gnu2-tls2mod1 to test-internal-extras aded2fc004 elf: Enable TLS descriptor tests on aarch64 a8ba52bde5 arm: Update _dl_tlsdesc_dynamic to preserve caller-saved registers (BZ 31372) 15aebdbada Ignore undefined symbols for -mtls-dialect=gnu2 354cabcb26 x86-64: Allocate state buffer space for RDI, RSI and RBX 853e915fdd x86-64: Update _dl_tlsdesc_dynamic to preserve AMX registers a364304718 x86: Update _dl_tlsdesc_dynamic to preserve caller-saved registers 7fc8242bf8 x86-64: Save APX registers in ld.so trampoline 983f34a125 LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf aad45c8ac3 powerpc: Placeholder and infrastructure/build support to add Power11 related changes. ee7f4c54e1 powerpc: Add HWCAP3/HWCAP4 data to TCB for Power Architecture. 71fcdba577 linux: Use rseq area unconditionally in sched_getcpu (bug 31479) (From OE-Core rev: 7f3e6019a902eb3dcee3798e9ea0f94865d51c7f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8b0124782510389bdc376fab645a0920b3fb94c8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glib-2.0: Upgrade 2.78.5 -> 2.78.6Peter Marko2024-05-231-1/+1
| | | | | | | | | | | | | | | | | | | | Handle regression of CVE-2024-34397 fix. News (https://gitlab.gnome.org/GNOME/glib/-/commit/d40f72e98e4734ba826ba9a278814530720ba760): Overview of changes in GLib 2.78.6, 2024-05-08 ============================================== * Fix a regression with IBus caused by the fix for CVE-2024-34397 (#3353, work by Simon McVittie) * Bugs fixed: - #3353 Fixing CVE-2024-34397 caused regressions for ibus (Simon McVittie) - !4056 Backport !4053 “gdbusconnection: Allow name owners to have the syntax of a well-known name” to glib-2-78 (From OE-Core rev: 51da20dc574a7f2a9759a4368d7668e3421e379f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glib-2.0: Upgrade 2.78.4 -> 2.78.5Peter Marko2024-05-232-56/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Handle CVE-2024-34397 Remove backported patch included in this release. News (https://gitlab.gnome.org/GNOME/glib/-/commit/d18807b5ffc6dedc2db5225b044063f65720bf56): Overview of changes in GLib 2.78.5, 2024-05-07 ============================================== * Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing (#3268, work by Simon McVittie, reported by Alicia Boya García) * Bugs fixed: - #3168 gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree() due to filename with bad encoding (Ondrej Holy) - #3268 CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing (Simon McVittie) - !3825 glib-2-78: ci: Drop FreeBSD 12 CI runner as it’s EOL - !3960 gcontenttype: Make filename valid utf-8 string before processing - !4040 Backport !4038 “gdbusconnection: Don't deliver signals if the sender doesn't match” to glib-2-78 - !4043 CI: Ignore MSYS2 CI failures for this older stable-branch * Translation updates: - English (United Kingdom) (Andi Chandler) - Georgian (Ekaterine Papava) - Portuguese (Brazil) (Juliano de Souza Camargo) (From OE-Core rev: 14de0c10f6b65eac758220d95e6d31066649a214) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: patch CVE-2024-4603Peter Marko2024-05-232-0/+180
| | | | | | | | | Advisory: https://github.com/advisories/GHSA-85xr-ghj6-6m46 (From OE-Core rev: bd6a6733c9a7af90ef86ef9316ff31bc996250b5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ncurses: Fix CVE-2023-50495Mingli Yu2024-05-232-0/+302
| | | | | | | | | | | | | Backport a patch [1] to fix CVE-2023-50495. [1] http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commitdiff;h=7723dd6799ab10b32047ec73b14df9f107bafe99 (From OE-Core rev: 55cca070799a236b06f5cba6f53487fca458f25d) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit bdf7b7460a4816e3d447264730a2814209667fb0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to scarthgap head revisionyocto-5.0.1scarthgap-5.0.1Steve Sakoman2024-05-091-1/+1
| | | | | | (From OE-Core rev: 294a7dbe44f6b7c8d3a1de8c2cc182af37c4f916) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3: skip test_concurrent_futures/test_shutdownTrevor Gamblin2024-05-092-0/+47
| | | | | | | | | | These tests are causing hangs on the Autobuilder, so disable them for now. (From OE-Core rev: e3b4a05f19e3ba8f84b5d892b787e67bef565e48) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to scarthgap head revisionSteve Sakoman2024-05-061-1/+1
| | | | | | (From OE-Core rev: 704d3695092148cfbf5d67c81af81665949847b5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* systemd: sed ROOT_HOME only if sysusers PACKAGECONFIG is setChristian Bräuner Sørensen2024-05-061-8/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | Fixes a bug introducted in ebafe46379 systemd: upgrade to 255.1. Besides updating systemd, that commit also made other changes. One of them being when to perform the replacement in order to fix ROOT_HOME. Previously, that happened on a configure prefunc and on ${S}/sysusers.d/basic.conf.in. Now it happens in install and on image/usr/lib/sysusers.d/basic.conf. However, that file is not present if sysusers is not in PACKAGECONFIG, since that file in that case is not installed hence resulting in: sed: can't read <redactedpath>/image/usr/lib/sysusers.d/basic.conf: No such file or directory Previously, in the case of sysusers not being in PACKAGECONFIG, that was a "silent error" since the replacement was done but the file was not really used since the file was not installed. (From OE-Core rev: 6954cd4bb60762f86981621e8b37dbe5e8236640) Signed-off-by: Christian Bräuner Sørensen <yocto@bsorensen.net> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-21 22:28:12 +0000