Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap 2026-05-12T20:31:34+00:00 2026-05-12T20:31:34+00:00 Martin Jansa martin.jansa@gmail.com 2026-04-28T07:04:47+00:00 urn:sha1:e9575f38d797516853b75bfe8b9fdec56a435a62 (From OE-Core rev: 0769c461e545073772aecc34e81fa309ade68dcb) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 02e282f6417274a93c6f01978bf33e2d171297b0) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-05-12T20:31:34+00:00 Fabien Thomas fabien.thomas@smile.fr 2026-04-30T14:34:48+00:00 urn:sha1:03667e9860ac9d2244637369b23eaa39dd761555 The code defines a custom 'bool' type (as an 'int'), which is incompatible with C23 in which bool is a keyword, and trying to use <stdbool.h> fails because 'int' and 'bool' are used interchangeably in the code. Add the flag to CC variable, since CFLAGS is used by both c and c++ compilers and clang++ is less forgiving when C compiler only option is used on its cmdline so it complains about -std=gnu17 and bails out. (From OE-Core rev: 0647201fb4729be3b10b3da2b19645c59147b40a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (From OE-Core rev: 49657089ef215824f8f79a81deb7baf4f27d0030) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2025-10-13T19:42:58+00:00 Peter Marko peter.marko@siemens.com 2025-10-07T22:11:12+00:00 urn:sha1:9fb26deedd87cc96de9b3c61773fec57c9f2313c Pick commit mentioned in the NVD report. (From OE-Core rev: a63bb2ccc8294c8a97f5957f1ca9f0a4880713ac) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-10-13T19:42:58+00:00 Peter Marko peter.marko@siemens.com 2025-10-07T22:11:11+00:00 urn:sha1:0db5ae637d40158d7b2ed0c737cb65737fb26f33 Pick commit mentioned in the NVD report. (From OE-Core rev: 2f1d5b9ad1af6d2b28e9e7b46aadd879a67b8fc6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-10-13T19:42:58+00:00 Peter Marko peter.marko@siemens.com 2025-10-07T22:11:10+00:00 urn:sha1:7698e2910dcada48bfee4fdb6edd2371f9e855de Pick commit mentioned in the NVD report. (From OE-Core rev: 4a2f47d9541d7a13da7a9ce16bd5088870c45ec4) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-06-05T15:41:15+00:00 Wang Mingyu wangmy@fujitsu.com 2025-05-12T09:02:58+00:00 urn:sha1:ac4b7212985ba7c62dde28a3b27c69e75398afea (From OE-Core rev: 1d9be1505462822a2b75a1136a27d25b262b1feb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cc9ba7005fb155f4d5f2be9b23c12d14362a306b) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-04-16T13:41:24+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-04-02T11:45:33+00:00 urn:sha1:0b1e8f405cfbc8afd4f4517ed78e28af517896df This upgrade addresses CVEs: CVE-2025-27835 CVE-2025-27832 CVE-2025-27831 CVE-2025-27836 CVE-2025-27830 CVE-2025-27833 CVE-2025-27833 CVE-2025-27834 Changelog: https://ghostscript.readthedocs.io/en/gs10.05.0/News.html (From OE-Core rev: 2c851f74fa72c30d447d59d450eb9bc036404f55) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-11-26T14:11:30+00:00 Hitendra Prajapati hprajapati@mvista.com 2024-11-14T06:15:22+00:00 urn:sha1:03e5a3f5f5cbc0d59dbb83e66d0ee29faf5654d9 avoid-host-contamination.patch refreshed for 10.04.0 Changelog: =========== - addresses CVEs: CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955, CVE-2024-46956 - add protection for device selection from PostScript input. - efforts in code hygiene and maintainability continue. - The usual round of bug fixes, compatibility changes, and incremental improvements. - add the capability to build with the Tesseract OCR engine. (From OE-Core rev: a0c802e9b1d8400589aede20e52f40d10a344314) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-07-12T12:47:20+00:00 Hitendra Prajapati hprajapati@mvista.com 2024-07-08T06:28:40+00:00 urn:sha1:262cb8eb147844e746464f97c12f772d1c33563e avoid-host-contamination.patch refreshed for 10.03.1 Below patches are no longer needed as it's included in this upgrade. 1. CVE-2024-29510.patch 2. CVE-2024-33869-0001.patch 3. CVE-2024-33869-0002.patch 4. CVE-2024-33870.patch 5. CVE-2024-33871.patch 6. configure.ac-add-option-to-explicitly-disable-neon.patch other patch release to address security bugs: CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511 (From OE-Core rev: 9a424fbcdc0c792ff3b99bf0e8a5e380582f53bc) (From OE-Core rev: 2a19132aca9d62be0d1e58444b0a8881456311dc) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-06-05T12:57:12+00:00 Archana Polampalli archana.polampalli@windriver.com 2024-05-29T05:42:25+00:00 urn:sha1:96b48c195a60ef6de2a43a66a8fa61b6a4baff10 (From OE-Core rev: 202b2b0a5c447baf7d84c19b7829a81a846413d9) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>