linux/poky.git, branch 5.2_M1

build-appliance-image: Update to master head revision

2024-12-15T11:10:45+00:00

(From OE-Core rev: e345b34703d4fa5e0bc9a82ac33b7c1fd84f99fe) Signed-off-by: Richard Purdie

systemd: upgrade 256.8 -> 256.9

2024-12-15T11:10:38+00:00

(From OE-Core rev: 454cd1073bd5df167c284a34d6d1259263a859bb) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

yocto-bsp: Bump the default kernel to v6.12 for x86 machines

2024-12-15T11:09:42+00:00

(From meta-yocto rev: 7a65cd769151a817a771cce6ee70b5437fca60e5) Signed-off-by: Kevin Hao Signed-off-by: Richard Purdie

yocto-bsp: Bump the default kernel to v6.12 for beaglebone

2024-12-15T11:09:42+00:00

There have been no specific patches on beaglebone branche for many years, so I have decided to switch to using the base branch for this machine. This approach eliminates the need to adjust the corresponding SRCREV_machine and LINUX_VERSION with each stable kernel version bump. (From meta-yocto rev: 1570badbf93511f370614c21ccd967af28549b2c) Signed-off-by: Kevin Hao Signed-off-by: Richard Purdie

linux-yocto: enable linux 6.12 for genericarm64

2024-12-13T15:20:23+00:00

Add a bbappend so that genericarm64 can use 6.12.x. We explicitly set the SRCREV to incorporate some required config fixes that have not been integrated into the oe-core recipe at this point in time. (From meta-yocto rev: 3b6d0ee17ac834a0521223eef67db3d39aaa1b78) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

scripts/install-buildtools: Update to 5.1.1

2024-12-13T12:26:01+00:00

Update to the 5.1.1 release of the 5.1 series for buildtools. (From OE-Core rev: 0b746655fcc133db563d791673484c4ca82cda8a) Signed-off-by: Antonin Godard Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

binutils: Fix CVE-2024-53589

2024-12-13T12:26:01+00:00

A buffer overflow vulnerability exists in GNU Binutils’ objdump utility when processing tekhex format files. The vulnerability occurs in the Binary File Descriptor (BFD) library’s tekhex parser during format identification. Specifically, the issue manifests when attempting to read 8 bytes at an address that precedes the global variable ‘_bfd_std_section’, resulting in an out-of-bounds read. Backport a patch from upstream to fix CVE-2024-53589. Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=e0323071916878e0634a6e24d8250e4faff67e88] (From OE-Core rev: 7c9a9020d1e9204ba875ac10b20ab7ccabce82bc) Signed-off-by: Yash Shinde Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

barebox: upgrade 2024.10.0 -> 2024.12.0

2024-12-13T12:26:01+00:00

0001-lib-lz4-use-lz4-instead-of-lz4c.patch removed since it's included in 2024.12.0 Changelog: =========== * ARM: omap: fix NS16550 UART setup in omap_debug_ll_init * Documentation: imd: update information on barebox_update * partitions: efi: Check GPT header size against minimum limit * checkpatch: fix detection of barebox root directory * ARM: omap: add two smaller MLO defconfigs for AM335x * crc: crc-itu-t: generate lookup table on first use * of: fdt: fix possible overflow during parsing of fdt * remoteproc: use I/O memory variants of memcpy/memset * dlmalloc: Fix integer overflow in request2size() * remoteproc: imx: add support for loading ELF data sections into DRAM * remoteproc: elf_loader: skip segment with memsz as zero * of: fdt: fix overflow caused by fdt_prop extending beyond fdt * usb: typec: fix freeing uninitialized memory Ahmad Fatoum * startup: do not bring up networking if console input disabled * sandbox: noshell_defconfig: set CONFIG_CONSOLE_DISABLE_INPUT=y * ARM: dts: i.MX8MP: disable NPU node if hardware is missing * clk: clk-composite: fix callback guard in clk_composite_round_rate * partitions: efi: fix overflow issues while allocating gpt entries * lib: lz4: use lz4 instead of lz4c * clk: rockchip: make it compile again * ARM: i.MX: ele: fix forward_lifecycle * ARM: i.MX9: tqma93xx: workaround warning in variant detection * partitions: efi: fix GPT header size exceeding allocation size * video: Rockchip: add missing dma_alloc_coherent a device parameter * dma: give dma_alloc_coherent a device parameter * common: buffer access out-of-bounds * include: Include to resolve implicit declaration of do_div() * i2c: lpi2c: fix potential read of uninitialized variable (From OE-Core rev: b8c26b320abce65862632f0e832d93ba37c6dc41) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

curl: upgrade 8.11.0 -> 8.11.1

2024-12-13T12:26:01+00:00

Bugfix release for 8.11.0 regressions. Solves CVE-2024-11053 Drop patch which was done differently upstream. (From OE-Core rev: 57731284008c18eee566df3412eaf6d13a59d498) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

curl: upgrade 8.10.1 -> 8.11.0

2024-12-13T12:26:01+00:00

Solves CVE-2024-9681 * refresh patch * add patch for buildpaths issue * add new options for ipfs and websockets, keep them configure as they were previously configures * drop notexists.pl from ptest install as it was removed and code was integrated into the test framework in [1] * add ptest dependency on perl-module-i18n-langinfo due to [2] [1] https://github.com/curl/curl/commit/56183c1d6f7f4d0c18d9065cf870c4cd3fc329eb [2] https://github.com/curl/curl/commit/0b70b23ef4d007031bc2ae4fc63d5ed9136bc2b5 (From OE-Core rev: 86dd3aca63248e1982c2d8c9dc68ae34a358cf8b) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie