linux/poky.git/meta/recipes-extended, branch yocto-5.0.14

iptables: remove /etc/ethertypes

2025-11-03T15:17:02+00:00

When building an image including iptable built with the libnftnl PACKAGECONFIG, one hits Downloading file:.../oe-rootfs-repo/armv8a/libkmod2 * check_data_file_clashes: Package iptables wants to install file .../rootfs/etc/ethertypes But that file is already provided by package * netbase This used to be handled by 0003-Makefile.am-do-not-install-etc-ethertypes.patch, but that patch got removed with the 1.8.9->1.8.10 upgrade (commit 4616ada82e70). I think the rationale for dropping the patch was wrong; the commit log talks about xtables.conf, which is indeed gone from upstream, but said patch didn't change anything about xtables.conf, it did -dist_conf_DATA = etc/ethertypes etc/xtables.conf +dist_conf_DATA = etc/xtables.conf However, instead of patching iptables to not install ethertypes, and having to forward-port that patch, it is much simpler to just remove the file in this do_install:append. (From OE-Core rev: a970b6c927fb4c04473484f6e4b0a9853c8a5896) Signed-off-by: Rasmus Villemoes Signed-off-by: Richard Purdie Signed-off-by: Uwe Kleine-König Signed-off-by: Steve Sakoman

libpam: mark CVE-2025-6018 as not applicable

2025-11-03T15:17:01+00:00

CVE-2025-6018 is a local privilege escalation in PAM that requires `user_readenv=1` to be enabled in the PAM configuration. The default configuration does not enable reading user environment files (user_readenv is 0 by default). Hence this vulnerability cannot be exploited using the default configuration. (From OE-Core rev: 3f2a9ad03326dc87681cf47ed5f73712ebaa624c) Signed-off-by: Anders Heimer Signed-off-by: Steve Sakoman

ghostscript: patch CVE-2025-59800

2025-10-13T19:42:58+00:00

Pick commit mentioned in the NVD report. (From OE-Core rev: a63bb2ccc8294c8a97f5957f1ca9f0a4880713ac) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

ghostscript: patch CVE-2025-59799

2025-10-13T19:42:58+00:00

Pick commit mentioned in the NVD report. (From OE-Core rev: 2f1d5b9ad1af6d2b28e9e7b46aadd879a67b8fc6) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

ghostscript: patch CVE-2025-59798

2025-10-13T19:42:58+00:00

Pick commit mentioned in the NVD report. (From OE-Core rev: 4a2f47d9541d7a13da7a9ce16bd5088870c45ec4) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

examples: genl: fix wrong attribute size

2025-09-30T15:01:59+00:00

This example no longer works on more recent kernels: genl-family-get error: Invalid argument dmesg says: netlink: 'genl-family-get': attribute type 1 has an invalid length. Fix this and also zero out the reserved field in the genl header, while not validated yet for dumps this could change. Upstream-Status: Backport [https://git.netfilter.org/libmnl/patch/?id=54dea548d796653534645c6e3c8577eaf7d77411] Reported-by: Divyanshu Rathore (From OE-Core rev: bae5ecea1c40847ffc3760173192f85e28ed9d7b) Signed-off-by: Florian Westphal (cherry picked from commit 54dea548d796653534645c6e3c8577eaf7d77411) Signed-off-by: Divyanshu Rathore Signed-off-by: Steve Sakoman

cups: Fix for CVE-2025-58060 and CVE-2025-58364

2025-09-22T20:17:52+00:00

Upstream-Status: Backport from https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221 & https://github.com/OpenPrinting/cups/commit/e58cba9d6fceed4242980e51dbd1302cf638ab1d (From OE-Core rev: 6f3b7e6efdf14d080b74a48d8cdc445255e9025f) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

cups: upgrade 2.4.10 -> 2.4.11

2025-09-22T20:17:52+00:00

Removed CVE-2024-47175 patches which is fixed by upgrade system-cups.slice added to FILES Changelog ========== v2.4.11 CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, modifying printers) and others fixes. Detailed list of changes is available in CHANGES.md (From OE-Core rev: 117a401756a3cf26d1fc0a6694b0c42967e00fec) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

libpam: fix CVE-2024-10963

2025-09-09T16:08:09+00:00

Upstream-Status: Backport from https://github.com/linux-pam/linux-pam/commit/940747f88c16e029b69a74e80a2e94f65cb3e628 (From OE-Core rev: 2be498fd0872d7ccbf0e9b2eb0a1d4879823c968) Signed-off-by: Stanislav Vovk Signed-off-by: Steve Sakoman

sudo: remove devtool FIXME comment

2025-09-01T15:30:57+00:00

This comment should not have been merged. It shows that the license did not change. (From OE-Core rev: a19afb7db1b9995ce433f8bfeb5406c9fd1fdc19) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman