linux/poky.git, branch yocto-4.0.30

build-appliance-image: Update to kirkstone head revision

2025-09-19T14:06:05+00:00

(From OE-Core rev: d381eeb5e70bd0ce9e78032c909e4a23564f4dd7) Signed-off-by: Steve Sakoman

poky.conf: bump version for 4.0.30

2025-09-19T14:03:31+00:00

(From meta-yocto rev: edf7950e4d81dd31f29a58acdd8022dabd2be494) Signed-off-by: Steve Sakoman

ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry

2025-09-19T14:03:31+00:00

There's a (second) overhead factor applied in images generated with Wic, and this is already documented in the .wks reference. However, the IMAGE_OVERHEAD_FACTOR entry does not mention it, and by looking at the partition sizes (e.g. with parted) one may find it confusing that they don't match with the expected rootfs size (e.g. in a scenario where the extra space is "0" and IMAGE_OVERHEAD_FACTOR="1.0"). This second overhead is already documented, though: https://docs.yoctoproject.org/ref-manual/kickstart.html#command-part-or-partition Mention the '--overhead-factor' option in the glossary entry and add a reference to the wks documentation. (From yocto-docs rev: 71a3933c609ce73ff07e5be48d9e7b03f22ef8d7) Signed-off-by: Joao Marcos Costa Reviewed-by: Quentin Schulz Signed-off-by: Antonin Godard (cherry picked from commit b9040e20b015e9b02683ec3014e4ade5eb59d41a) Signed-off-by: Antonin Godard Signed-off-by: Steve Sakoman

dev-manual/security-subjects.rst: update mailing lists

2025-09-19T14:03:31+00:00

Update mailing lists following changes by Michael Halstead (https://lists.yoctoproject.org/g/yocto-security/message/1478). Also fix formatting/spacing. (From yocto-docs rev: 31f35193c61a1f0b4fd76f98887b709c48768121) Signed-off-by: Antonin Godard (cherry picked from commit 8066aa92a1acae6c99fbee92d24ee1feea65d974) Signed-off-by: Antonin Godard Signed-off-by: Steve Sakoman

sdk: The main in the C example should return an int

2025-09-19T14:03:31+00:00

see C17 (ISO/IEC 9899:2018) (From yocto-docs rev: 1118f1bde785e153c4ddd2bf4e4d70f956fde948) Signed-off-by: Jan Vermaete Signed-off-by: Antonin Godard (cherry picked from commit 1ebaed299f7ef80a49b68608f45bf25884900d13) Signed-off-by: Antonin Godard Signed-off-by: Steve Sakoman

migration-guides: add release notes for 4.0.29

2025-09-19T14:03:31+00:00

(From yocto-docs rev: e4d3b5bb106d19e4ef224dc39ae970abed234814) Signed-off-by: Lee Chee Yang Signed-off-by: Antonin Godard (cherry picked from commit d3bbfed9cad4cda0960ee0623c728ea2a18e1b29) Signed-off-by: Antonin Godard Signed-off-by: Steve Sakoman

cups: Fix for CVE-2025-58060 and CVE-2025-58364

2025-09-19T14:03:31+00:00

import patch from debian to fix CVE-2025-58060 CVE-2025-58364 Upstream-Status: Backport [import from debian cups 2.4.2-3+deb12u9 Upstream commit https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221 & https://github.com/OpenPrinting/cups/commit/e58cba9d6fceed4242980e51dbd1302cf638ab1d] (From OE-Core rev: 88585645a041c3c2ee7b39bf5f72885ed7c8775f) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

insane: Ensure that `src-uri-bad` fails correctly

2025-09-19T14:03:31+00:00

`src-uri-bad` is missing the required call to `oe.qa.exit_if_errors` so the corresponding task is not marked as failed when the QA check is classified as an error. This issue was fixed by the introduction of the do_recipe_qa task in OE-core (e0c71367ab59021fc430ef215bbfc3b525036ba4) which is not part of kirkstone yet. (From OE-Core rev: 4b593ea8df9b1d3dda0adf38786845168360311f) Signed-off-by: Philip Lorenz Signed-off-by: Steve Sakoman

insane: Improve patch warning/error handling

2025-09-19T14:03:31+00:00

Currently, whilst patch errors or warnings are shown, the errors don't stop builds. The configuration isn't very configurable from WARN_QA and ERROR_QA either. This patch: * Uses the standard mechanisms to handle the patch fuzz warnings/errors * Makes Upstream-Status checking configurable from WARN/ERROR_QA * Allows that checking to be used with non-core layers * Makes patch-fuzz an error by default (From OE-Core rev: 76a685bfcf927593eac67157762a53259089ea8a) (From OE-Core rev: 4899961965d70281e63582234f0ed299431eff32) Signed-off-by: Richard Purdie (cherry picked from commit 3c3fd6a65e8103f74ae382d196d486b31a168b39) The backported commit was modified to not mark "patch-fuzz" as an error by default (which retains compatibility with kirkstone behaviour). Signed-off-by: Philip Lorenz Signed-off-by: Steve Sakoman

go: ignore CVE-2024-24790

2025-09-19T14:03:31+00:00

CVE-2024-24790: net/netip module was introduced in go1.18beta1 via a59e33224e42d60a97fa720a45e1b74eb6aaa3d0 (From OE-Core rev: e304b139a8c43a88604ceb93aa933057b1e1748c) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman