linux/poky.git/meta/recipes-devtools, branch styhead-5.1.3

go: upgrade 1.22.11 -> 1.22.12

2025-02-14T15:49:10+00:00

Upgrade to latest 1.22.x release [1]: $ git --no-pager log --oneline go1.22.11..go1.22.12 5817e65094 (tag: go1.22.12) [release-branch.go1.22] go1.22.12 0cc45e7ca6 [release-branch.go1.22] crypto/internal/fips140/nistec: make p256NegCond constant time on ppc64le c3c6a50095 [release-branch.go1.22] cmd/go/internal/modfetch: do not trust server to send all tags in shallow fetch e0a01acd04 [release-branch.go1.22] cmd/compile: fix write barrier coalescing Fixes CVE-2025-22866 [1] https://github.com/golang/go/compare/go1.22.11...go1.22.12 (From OE-Core rev: 423ad5a67768738dac454b1e2aa27746f74511c5) (From OE-Core rev: ce999920af8c8ac6ce4c3f37edae348919e8a13b) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

python3: upgrade 3.12.8 -> 3.12.9

2025-02-14T15:49:09+00:00

Release notes: https://docs.python.org/release/3.12.9/whatsnew/changelog.html#python-3-12-9 Solves CVE-2025-0938, CVE-2024-12254 and 3 other vulnerabilities without CVE number assigment. Add a patch to fix failure of a new test. (From OE-Core rev: cb0187ed2962e4c140c4f59ce08f94b18b05004c) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

libxml-parser-perl: correct SRC_URI

2025-02-12T14:29:34+00:00

(From OE-Core rev: d2a7186bfc819cc52901b8cf8086d53342586a60) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit b3e44bbf9972968076f06ecac027bd7a2f3fe781) Signed-off-by: Steve Sakoman

go: upgrade 1.22.10 -> 1.22.11

2025-02-03T14:24:37+00:00

Upgrade to latest 1.22.x release [1]: $ git --no-pager log --oneline go1.22.10..go1.22.11 f072884354 (tag: go1.22.11) [release-branch.go1.22] go1.22.11 b72d56f98d [release-branch.go1.22] net/http: persist header stripping across repeated redirects 19d2103415 [release-branch.go1.22] crypto/x509: properly check for IPv6 hosts in URIs ae9996f965 [release-branch.go1.22] runtime: hold traceAcquire across casgstatus in injectglist 223260bc63 [release-branch.go1.22] crypto/tls: fix Config.Time in tests using expired certificates Fixes CVE-2024-45336 and CVE-2024-45341 [1] https://github.com/golang/go/compare/go1.22.10...go1.22.11 (From OE-Core rev: 4589986602319f9ed61e381b333bb53b731eb8d8) (From OE-Core rev: 622f866e00c0c3bdc80670df04378cb49381ea9c) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

go: upgrade 1.22.9 -> 1.22.10

2025-02-03T14:24:37+00:00

Upgrade to latest 1.22.x release [1]: $ git --no-pager log --oneline go1.22.9..go1.22.10 8f3f22eef8 (tag: go1.22.10) [release-branch.go1.22] go1.22.10 6d7a95abca [release-branch.go1.22] runtime: reserve 4kB for system stack on windows-386 6f05fa7a4f [release-branch.go1.22] syscall: mark SyscallN as noescape 3355db9690 [release-branch.go1.22] time: accept "+01" in TestLoadFixed on OpenBSD [1] https://github.com/golang/go/compare/go1.22.9...go1.22.10 (From OE-Core rev: e357c93b39df938dc36195dbd779a58b2951b8e6) (From OE-Core rev: d723fa3573d02cc815ad9706aafd7510eb54eac6) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

go: upgrade 1.22.8 -> 1.22.9

2025-02-03T14:24:37+00:00

Upgrade to latest 1.22.x release [1]: $ git --no-pager log --oneline go1.22.8..go1.22.9 8af39d30a4 (tag: go1.22.9) [release-branch.go1.22] go1.22.9 c19e5887f4 [release-branch.go1.22] cmd/cgo/internal/testcarchive: remove 1-minute timeout e3fd4ba7f9 [release-branch.go1.22] cmd/link: generate Mach-O UUID when -B flag is specified 29252e4c5a [release-branch.go1.22] runtime: fix TestGdbAutotmpTypes on gdb version 15 [1] https://github.com/golang/go/compare/go1.22.8...go1.22.9 (From OE-Core rev: 4f2f202506bcefb4d6c46a11738e159e261a4a4b) (From OE-Core rev: 3425dd4ba1723fb9c660b3941fd92209c3141dd3) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture

2025-01-29T14:20:43+00:00

Using the package architecture to select the right qemu options to pass to qemu-user is incorrect, and fails for recipes that set PACKAGE_ARCH to MACHINE_ARCH (as the qemuppc workarounds suggest) because there are not typically any options set for the machine name. Solve this by using TUNE_PKGARCH instead: for the majority of recipes this is the same value, but for machine-specific recipes it remains the same instead of changing to the machine name. This means we can remove the qemuppc workarounds, as they're obsolete. Also update the gcc-testsuite recipe which uses the same pattern to use TUNE_PKGARCH, and generalise the else codepath to avoid needing to update the list of architectures. [ YOCTO #15647 ] (From OE-Core rev: 6db23345fd653aa0b4e483d2635376dfe7bed3cd) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 414b754a6cbb9cc354b1180efd5c3329568a2537) Signed-off-by: Steve Sakoman

binutils: stable 2.43.1 branch update

2025-01-13T13:49:08+00:00

Below commit on binutils-2.43.1 stable branch are updated. b82e2250574 Automatic date update in version.in 280374309b1 PR32300, --dependency-file: link dependencies are not all collected 263e116833e s390: Add arch15 instructions 645da6d426e s390: Relax risbg[n]z, risb{h|l}gz, {rns|ros|rxs}bgt operand constraints 7f7047a9c6c s390: Simplify (dis)assembly of insn operands with const bits e7592364504 s390: Align opcodes to lower-case d6ab1d2efdc s390: Document syntax to omit base register operand c40337b1784 LoongArch: Add elfNN_loongarch_mkobject to initialize LoongArch tdata 95ed7cf1be2 segv in bfd_elf_get_str_section 0a71d78f6a6 ld: Don't explicitly add .note.gnu.build-id in elf.sc ad2ce1e6457 x86: Turn PLT32 to PC32 only for PC-relative relocations 238493e7f09 x86-64: Disable PIE on PR gas/32189 test 68d5dbd315d x86-64: Never make R_X86_64_GOT64 section relative d77d08180d1 x86/APX: Don't promote AVX/AVX2 instructions out of APX spec f307db3d8b7 bfd: Pass true to ld_plugin_object_p cd3e2b58f2c PR32109, aborting at bfd/bfd.c:1236 in int _bfd_doprnt 2d37b890e56 lto: Add a test for PR ld/32083 d16a1893c44 ld: Add an LTO test for common symbol override e4cfe6dab3e Re-enable development changes on the 2_43 branch Testing was done and there were no regressions found (From OE-Core rev: dce36f0c4a2c1455ecce56377afc3d436096360a) Signed-off-by: Deepthi Hemraj Signed-off-by: Richard Purdie (cherry picked from commit 4950a2d67a85b3f4a643a46fdc54d348abce5ed6) Signed-off-by: Steve Sakoman

binutils: Fix CVE-2024-53589

2025-01-09T14:02:48+00:00

A buffer overflow vulnerability exists in GNU Binutils’ objdump utility when processing tekhex format files. The vulnerability occurs in the Binary File Descriptor (BFD) library’s tekhex parser during format identification. Specifically, the issue manifests when attempting to read 8 bytes at an address that precedes the global variable ‘_bfd_std_section’, resulting in an out-of-bounds read. Backport a patch from upstream to fix CVE-2024-53589. Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=e0323071916878e0634a6e24d8250e4faff67e88] (From OE-Core rev: 04c6b181bf9b1babd647c642ba8598b837f1263b) Signed-off-by: Yash Shinde Signed-off-by: Steve Sakoman

gcc: Fix c++: tweak for Wrange-loop-construct

2025-01-09T14:02:48+00:00

This commit updates the warning to use a check for "trivially constructible" instead of "trivially copyable." The original check was incorrect, as "trivially copyable" only applies to types that can be copied trivially, whereas "trivially constructible" is the correct check for types that can be trivially default-constructed. This change ensures the warning is more accurate and aligns with the proper type traits. LLVM accepted a similar fix: https://github.com/llvm/llvm-project/issues/47355 PR c++/116731 [https://gcc.gnu.org/bugzilla/show_bug.cgi?id=116731] (From OE-Core rev: b8260e5aca93a7000001013f8a950fb040141588) Signed-off-by: Marek Polacek Signed-off-by: Sunil Dora Signed-off-by: Steve Sakoman