linux/poky.git, branch walnascar-5.2.1

build-appliance-image: Update to walnascar head revision

2025-05-23T15:46:09+00:00

(From OE-Core rev: 17affdaa600896282e07fb4d64cb23195673baa1) Signed-off-by: Steve Sakoman

poky.conf: bump version for 5.2.1

2025-05-23T15:42:34+00:00

(From meta-yocto rev: 73ef61468496fd129b90c3f0afe26859b441b26b) Signed-off-by: Steve Sakoman

gcc: Fix LDRD register overlap in register-indexed mode

2025-05-23T15:42:34+00:00

Issue is seen with nodejs ending with Illegal instruction on OE Its also in QT5base and perhaps many other packages using 64bit atomics. Thanks to jeroen (oe IRC) to report and help reduce the problem. (From OE-Core rev: bd62158946e214076686e0709d24771acb60665f) Signed-off-by: Khem Raj Signed-off-by: Steve Sakoman

glibc: stable 2.41 branch update

2025-05-23T15:42:34+00:00

Below commits on glibc-2.41 stable branch are updated. 5cb575ca9a elf: tst-audit10: split AVX512F code into dedicated functions [BZ #32882] 046b33800c x86: Detect Intel Diamond Rapids a53e764657 x86: Handle unknown Intel processor with default tuning aca31d2712 x86: Add ARL/PTL/CWF model detection support f68b407d4b x86: Optimize xstate size calculation d6d56af6e7 elf: Fix arm-linux-gnueabihf build break from b861755a84 b861755a84 elf: Extend glibc.rtld.execstack tunable to force executable stack (BZ 32653) 200d20123c x86: Link tst-gnu2-tls2-x86-noxsave{,c,xsavec} with libpthread 80cd656649 x86: Use separate variable for TLSDESC XSAVE/XSAVEC state size (bug 32810) a282e2c0ae x86: Skip XSAVE state size reset if ISA level requires XSAVE bcd4cf9d5f x86_64: Add atanh with FMA 7e72fa7577 x86_64: Add sinh with FMA 6a3a4a5e58 x86_64: Add tanh with FMA ce9b765522 nptl: Check if thread is already terminated in sigcancel_handler (BZ 32782) 98c712855d nptl: PTHREAD_COND_INITIALIZER compatibility with pre-2.41 versions (bug 32786) e22c132484 nptl: clear the whole rseq area before registration 33bfd9020f Linux: Remove attribute access from sched_getattr (bug 32781) 66fc3bd758 math: Remove an extra semicolon in math function declarations 1a3083b999 posix: Move environ helper variables next to environ definition (bug 32541) 91f8cff2c4 configure: Fix spelling of -Wl,--no-error-execstack option fd202462c5 elf: Check if __attribute__ ((aligned (65536))) is supported 746ef8e939 static-pie: Skip the empty PT_LOAD segment at offset 0 [BZ #32763] 56609f8df1 Pass -Wl,--no-error-execstack for tests where -Wl,-z,execstack is used [PR32717] 89be78704e AArch64: Use prefer_sve_ifuncs for SVE memset c47c3890f1 AArch64: Add SVE memset e0bc5f64ea math: Improve layout of exp/exp10 data 009c5a2dca aarch64: Add GCS test with signal handler 8d98ee8d70 aarch64: Add GCS tests for dlopen 61ba3cdfa9 aarch64: Add GCS tests for transitive dependencies fda5730898 aarch64: Add tests for Guarded Control Stack 6d1f97bb06 aarch64: Add configure checks for GCS support 7774a9d07a AArch64: Improve codegen for SVE powf 2025e27a81 AArch64: Improve codegen for SVE pow f3d9c116cb AArch64: Improve codegen for SVE erfcf 94859e8680 Aarch64: Improve codegen in SVE exp and users, and update expf_inline 7c9a086807 Aarch64: Improve codegen in SVE asinh 30992cb5e9 RISC-V: Fix IFUNC resolver cannot access gp pointer 07288c7445 math: Add optimization barrier to ensure a1 + u.d is not reused [BZ #30664] 2cb04444b9 math: Fix `unknown type name '__float128'` for clang 3.4 to 3.8.1 (bug 32694) a900dbaf70 x86 (__HAVE_FLOAT128): Defined to 0 for Intel SYCL compiler [BZ #32723] 1e0e33e1b1 Fix tst-aarch64-pkey to handle ENOSPC as not supported 69fda28279 assert: Add test for CVE-2025-0395 cf88351b68 math: Fix tanf for some inputs (BZ 32630) cb7f206537 nptl: Correct stack size attribute when stack grows up [BZ #32574] d85a771953 math: Fix sinhf for some inputs (BZ 32627) bdccbfbc52 math: Fix log10p1f internal table value (BZ 32626) Testresults: Before update |After update |Difference PASS: 5816 |PASS: 5826 |PASS: +10 FAIL: 239 |FAIL: 239 |FAIL: 0 XPASS: 4 |XPASS: 4 |XPASS: 0 XFAIL: 16 |XFAIL: 16 |XFAIL: 0 UNSUPPORTED: 164|UNSUPPORTED: 164|UNSUPPORTED: 0 (From OE-Core rev: 60fb9e5200e641d0d108f283d23a7c79b09966d1) Signed-off-by: Deepesh Varatharajan Signed-off-by: Steve Sakoman

libxml2: upgrade 2.13.6 -> 2.13.8

2025-05-23T15:42:34+00:00

This includes CVE-fix for CVE-2025-32414 and CVE-2025-32415. Changelog: =========== https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.7 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8 Regressions * tree: Fix xmlTextMerge with NULL args * io: Fix compressed flag for uncompressed stdin * parser: Fix parsing of DTD content Security * [CVE-2025-32415] schemas: Fix heap buffer overflow inxmlSchemaIDCFillNodeTables * [CVE-2025-32414] python: Read at most len/4 characters. (Maks Verver) (From OE-Core rev: 7680e9a11a63ab8bfbc915e4cf6a385f0970c4a5) Signed-off-by: Divya Chellam Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 0b24113405ab0bbb3200bb47fa8ed6abeaa7481b) Signed-off-by: Steve Sakoman

ruby: upgrade 3.4.2 -> 3.4.3

2025-05-23T15:42:33+00:00

This includes CVE-fix for CVE-2025-27219, CVE-2025-27220 and CVE-2025-27221 Changes between 3.4.2 -> 3.4.3 ============================== https://github.com/ruby/ruby/compare/v3_4_2...v3_4_3 (From OE-Core rev: 37747c99ee32153120b67e65a2f3da34c6d58b0f) Signed-off-by: Divya Chellam Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit d739c52558af986c2ce4c65e1197e8d524d14d22) Signed-off-by: Steve Sakoman

makedumpfile: upgrade 1.7.6 -> 1.7.7

2025-05-23T15:42:33+00:00

ChangeLog: https://github.com/makedumpfile/makedumpfile/releases/tag/1.7.7 This version supports the following new kernels: - 6.12, 6.13, 6.14 Drop backport patch. (From OE-Core rev: 364e15aadcbb3ac754c2c484f7920420b4cb3138) (From OE-Core rev: f2100e704b06913805d0d6d21df0cd73c8199388) Signed-off-by: Yi Zhao Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

openssh: fix CVE-2025-32728

2025-05-23T15:42:33+00:00

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. (From OE-Core rev: fff41e824bb56d4879c65d6dec3605fabb406071) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

iputils: Security fix for CVE-2025-47268

2025-05-23T15:42:33+00:00

CVE-2025-47268 ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-47268 Patch from: https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40 (From OE-Core rev: 59f0d3befe0c828bdc16664af1f8b64b7f3911e7) Signed-off-by: Yi Zhao Signed-off-by: Steve Sakoman

connman :fix CVE-2025-32366

2025-05-23T15:42:33+00:00

In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen) and memcpy(response+offset,*end,*rdlen) without a check for whether the sum of *end and *rdlen exceeds max. Consequently, *rdlen may be larger than the amount of remaining packet data in the current state of parsing. Values of stack memory locations may be sent over the network in a response. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-32366 Upstream-patch: https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4 (From OE-Core rev: 1c908b1c44a006b6707a1f0da59781a6750cf8ce) Signed-off-by: Praveen Kumar Signed-off-by: Steve Sakoman