Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap-5.0.15 2026-01-02T14:56:54+00:00 2026-01-02T14:56:54+00:00 Vijay Anusuri vanusuri@mvista.com 2025-12-29T15:44:01+00:00 urn:sha1:795103a538c5086f5f0dfcfd9c20e57f1e513811 Upstream-Status: Backport from https://github.com/golang/go/commit/3a842bd5c6aa8eefa13c0174de3ab361e50bd672 (From OE-Core rev: 2d6d68e46a430a1dbba7bd8b7d37ff56f4f5a0e6) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2026-01-02T14:56:54+00:00 Vijay Anusuri vanusuri@mvista.com 2025-12-29T15:44:00+00:00 urn:sha1:d3c87dc830a9ca59ca0fb8b646c2983d484bfcd1 Upstream-Status: Backport from https://github.com/golang/go/commit/04db77a423cac75bb82cc9a6859991ae9c016344 (From OE-Core rev: 647e151485bd10a8bbbdbae4825791723c9a5d8e) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2026-01-02T14:56:54+00:00 Vijay Anusuri vanusuri@mvista.com 2025-12-29T15:43:59+00:00 urn:sha1:a5cecb013be3ae937ac087a30ddcafe645f376df Upstream-Status: Backport from https://github.com/golang/go/commit/ca6a5545ba18844a97c88a90a385eb6335bb7526 (From OE-Core rev: 2d6b089de3ef5e062d852eb93e3ff16997e796ef) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Mingli Yu mingli.yu@windriver.com 2025-12-18T07:27:36+00:00 urn:sha1:4faff2acb8ae732aaa80c2165d4e91cd33a3a066 Per ruby maintenance policy [1], the 3.3.x branch should be still in normal maintenance, so upgrade to the latest version 3.3.10 to fix many security issues and bugs. Remove the fix for CVE-2025-27219, CVE-2025-27220 and CVE-2025-27221 as these fixes have been included in the new version. [1] https://www.ruby-lang.org/en/downloads/branches/ (From OE-Core rev: bad372ad8ec33334c6a74c077bf975851c1e59d2) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Yash Shinde Yash.Shinde@windriver.com 2025-12-19T09:50:16+00:00 urn:sha1:d27f4a8879b206171623fe5192dab4732f008428 CVE-2025-11840 PR 33455 [BUG] A SEGV in vfinfo at ldmisc.c:527 A reloc howto set up with EMPTY_HOWTO has a NULL name. More than one place emitting diagnostics assumes a reloc howto won't have a NULL name. https://sourceware.org/bugzilla/show_bug.cgi?id=33455 Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=f6b0f53a36820da91eadfa9f466c22f92e4256e0] (From OE-Core rev: d477a67f623da424c3165bde25d76152636b1f50) Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Yash Shinde Yash.Shinde@windriver.com 2025-12-19T09:50:15+00:00 urn:sha1:a247883e38bb77c6d5d703de2cf344b6e9e9cd38 CVE-2025-11839 PR 33448 [BUG] Aborted in tg_tag_type at prdbg.c:2452 Remove call to abort in the DGB debug format printing code, thus allowing the display of a fuzzed input file to complete without triggering an abort. https://sourceware.org/bugzilla/show_bug.cgi?id=33448 Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=12ef7d5b7b02d0023db645d86eb9d0797bc747fe] (From OE-Core rev: d60c144e082d6e6db4f9971bb886751199cd433f) Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Deepesh Varatharajan Deepesh.Varatharajan@windriver.com 2025-12-16T09:08:35+00:00 urn:sha1:c65b128458b108c5ec14ca91f693fd41ba521c22 Since x86 .eh_frame section may reference _GLOBAL_OFFSET_TABLE_, keep _GLOBAL_OFFSET_TABLE_ if there is dynamic section and the output .eh_frame section is non-empty. Backport a patch from upstream to fix CVE-2025-11494 Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a] (From OE-Core rev: e087881bece2884f8d1a3c6d0dd7d69b40eb6732) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Daniel Turull daniel.turull@ericsson.com 2025-12-17T09:22:24+00:00 urn:sha1:de3a6b0d2493dfed08c494b608230a6f7fa06f38 Add fix for native recipe, since previous commit for cmake missed it. 5d8a6fb52c cmake: fix CVE-2025-9301 CC: Saravanan <saravanan.kadambathursubramaniyam@windriver.com> CC: Steve Sakoman <steve@sakoman.com> (From OE-Core rev: 24f831be7d99d5ea3fe304b9aa2d82e7e2d4a5fa) Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Jiaying Song jiaying.song.cn@windriver.com 2025-12-17T08:26:33+00:00 urn:sha1:b9843e68be5c2e5dfa2bd47bb0f9425b4893b728 References: https://nvd.nist.gov/vuln/detail/CVE-2025-66418 https://nvd.nist.gov/vuln/detail/CVE-2025-66471 (From OE-Core rev: d9f52c5f86bcc4716e384fe5c01c03d386d60446) Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-31T15:49:31+00:00 Kai Kang kai.kang@windriver.com 2025-12-17T07:51:18+00:00 urn:sha1:67ac024a29cd6f6af1b9e4ad6e650edee76effae Backport patch to fix CVE-2025-12464 for qemu. Reference: https://gitlab.com/qemu-project/qemu/-/commit/a01344d9d7 (From OE-Core rev: c3108b279bd5c49a3c0ea35880fe7fd4f5b75b96) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>