linux/poky.git/meta, branch dunfell-23.0.29

build-appliance-image: Update to dunfell head revision

2023-10-27T14:24:08+00:00

(From OE-Core rev: 0dbf3a15321b8033ff8ed86c6aa261fdb9c3d5bb) Signed-off-by: Steve Sakoman

cve-exclusion_5.4.inc: update for 5.4.257

2023-10-27T14:21:20+00:00

(From OE-Core rev: 0f75737a408aef19937ee023a5e6b3e881cbd99b) Signed-off-by: Steve Sakoman

patch.py: Use shlex instead of deprecated pipe

2023-10-27T14:21:19+00:00

The pipe library is deprecated in Python 3.11 and will be removed in Python 3.13. pipe.quote is just an import of shlex.quote anyway. Clean up imports while we're at it. (From OE-Core rev: a6ef13bdad40826d76a3331cd0878bb22510f375) Signed-off-by: Ola x Nilsson Signed-off-by: Luca Ceresoli (cherry picked from commit 5f33c7b99a991c380d1813da8248ba5470ca4d4e) Signed-off-by: Steve Sakoman

linux-firmware: upgrade 20230625 -> 20230804

2023-10-27T14:21:19+00:00

License-Update: additional firmwares upgrade include fix for CVE-2023-20569 CVE-2022-40982 CVE-2023-20593 Changelog: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/ References: https://nvd.nist.gov/vuln/detail/CVE-2023-20569 https://nvd.nist.gov/vuln/detail/CVE-2022-40982 https://nvd.nist.gov/vuln/detail/CVE-2023-20593 (From OE-Core rev: 42d08fdcd3c95dbef795bb74f0ff5db8ff1b0a19) Signed-off-by: Meenali Gupta Signed-off-by: Steve Sakoman (cherry picked from commit d3f1448246c9711f4f23f2e12c664e0ba3ae3f02) Signed-off-by: Steve Sakoman

vim: Upgrade 9.0.2009 -> 9.0.2048

2023-10-27T14:21:19+00:00

This includes CVE fix for CVE-2023-5535. (From OE-Core rev: 35fc341402f38619922dcfc4dc9e58b00be26259) Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman

binutils: Backport fix CVE-2023-25588

2023-10-27T14:21:19+00:00

Upstream-Status: Backport from [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1] CVE: CVE-2023-25588 (From OE-Core rev: 6ffbb78f63e5adaadfaa9f5d5e9871ce3cfe7abf) Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman

systemd: Backport systemd-resolved: use hostname for certificate validation in DoT

2023-10-20T15:35:31+00:00

Widely accepted certificates for IP addresses are expensive and only affordable for larger organizations. Therefore if the user provides the hostname in the DNS= option, we should use it instead of the IP address. This fixes https://nvd.nist.gov/vuln/detail/CVE-2018-21029 per suggestion https://github.com/systemd/systemd-stable/issues/72 . CVE: CVE-2018-21029 (From OE-Core rev: 6b4a583169ae40a8d51e7ffa33785409b5111a81) Signed-off-by: Marek Vasut Signed-off-by: Steve Sakoman

kernel.bbclass: Add force flag to rm calls

2023-10-20T15:35:31+00:00

The latest 6.5 kernels do not appear to create the source file in ${D}${nonarch_base_libdir}/modules/${KERNEL_VERSION}/source so the recipe errors out when trying to remove it. Simple fix is to add the -f (force) flag to the call. (From OE-Core rev: 2e669bf797b15d803e7d6a700e449bdc467a4bcc) (From OE-Core rev: 844faa7c51ae8ec0966e9c5c3f70a1dbf2222c21) Signed-off-by: Ryan Eatmon Signed-off-by: Richard Purdie Signed-off-by: Alexander Sverdlin Signed-off-by: Steve Sakoman Backported from kirkstone commit 7e177848f97e. Signed-off-by: Paul Barker Signed-off-by: Steve Sakoman

libxpm: upgrade to 3.5.17

2023-10-20T15:35:30+00:00

- This upgrade includes multiple security fixes. CVE-2022-4883 CVE-2022-44617 CVE-2022-46285 CVE-2022-44617 CVE-2023-43788 CVE-2023-43789 - Removed CVE-2022-46285 as it is already fixed by this upgrade. - License-update: additional copyright holders f0857c0 man pages: Correct Copyright/License notices Due to this commit LIC_FILES_CHKSUM is changed - Disable reading compressed files as that requires compress/uncompress executables. Following the approach in oe-core/master: 7de4084634 libxpm: upgrade 3.5.14 -> 3.5.15 - Add XORG_EXT to specify tar.xz as upstream has switched from bz2 to xz compression. (From OE-Core rev: 47e270a4fd2e086b5ee9f38891f326ce505f2319) Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman

xorg-lib-common: Add variable to set tarball type

2023-10-20T15:35:30+00:00

Upstream has switched some new releases from bz2 to xz compression. Add an XORG_EXT variable so recipes can set the file name extension needed for the compression type. Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e xorg-lib-common: Add variable to set tarball type use a variable for the tarball suffix/compression format. (From OE-Core rev: ff386fb5632c26ceb12d2381e9128b0546aef795) Signed-off-by: Robert Joslyn Signed-off-by: Alexandre Belloni Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman