linux/poky.git/meta, branch yocto-4.0.15

build-appliance-image: Update to kirkstone head revision

2023-12-15T14:03:05+00:00

(From OE-Core rev: eea685e1caafd8e8121006d3f8b5d0b8a4f2a933) Signed-off-by: Steve Sakoman

openssh: drop sudo from ptest dependencies

2023-12-15T14:00:33+00:00

The tests don't actually need sudo on core-image-ptest-openssh. Based on logs seen in https://bugzilla.yoctoproject.org/show_bug.cgi?id=15178 it seems that socket errors from sudo are creeping into stderr which are failing the banner ptest from openssh. Removing sudo should help removing the stderr messages and possibly cure the banner test failures. (From OE-Core rev: 47e754f483b674b207bfddcc8d4c5d9a3008e102) (From OE-Core rev: bce20153973ceff3ac9fc98b30e726aa6698d8ee) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

gstreamer1.0-plugins-base: enable glx/opengl support

2023-12-15T14:00:33+00:00

This is required by latest webkit when built with x11 support. (From OE-Core rev: 024edebf6f722ae4d05411be348730d9eeb3bd7c) (From OE-Core rev: 9fc0f0a15388af175bd53de5190801750064e60c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Claus Stovgaard Signed-off-by: Steve Sakoman

gnutls: Backport fix for CVE-2023-5981

2023-12-15T14:00:33+00:00

Upstream-Status: Backport [import from debian https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/gnutls28/3.7.3-4ubuntu1.3/gnutls28_3.7.3-4ubuntu1.3.debian.tar.xz Upstream-Commit: https://gitlab.com/gnutls/gnutls/-/commit/29d6298d0b04cfff970b993915db71ba3f580b6d] References: https://ubuntu.com/security/CVE-2023-5981 (From OE-Core rev: 421b468cf48f0d2c493356f482d92e61e39d7e0e) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

bluez5: fix CVE-2023-45866

2023-12-15T14:00:33+00:00

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports,potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45866 Upstream patches: https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675 (From OE-Core rev: f03cb448574a730d85ed6d80bb58561674005ede) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

avahi: backport CVE-2023-1981 & CVE's follow-up patches

2023-12-15T14:00:33+00:00

import patches from ubuntu to fix CVE-2023-1981 CVE-2023-38469-2 CVE-2023-38470-2 CVE-2023-38471-2 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/avahi/tree/debian/patches?h=ubuntu/jammy-security Upstream commit https://github.com/lathiat/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f & https://github.com/lathiat/avahi/commit/c6cab87df290448a63323c8ca759baa516166237 & https://github.com/lathiat/avahi/commit/94cb6489114636940ac683515417990b55b5d66c & https://github.com/lathiat/avahi/commit/b675f70739f404342f7f78635d6e2dcd85a13460] Ref: https://git.openembedded.org/openembedded-core-contrib/commit/?h=stable/nanbield-nut&id=a9203c46cd64c3ec5e5b00e381bbac85733f85df (From OE-Core rev: 32c0a3dc4d65065639260e77783dc427d4b1cfe3) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

Revert "kernel-fitImage: Strip path component from dtb"

2023-12-14T14:08:22+00:00

This change breaks arm64 (and likely mips & riscv) This reverts commit 9a42349a176ca4d7a1bfab3425a0821dbcbd9368. (From OE-Core rev: b77cd331199fa62e3b162f37efca3b927c68d8e5) Signed-off-by: Steve Sakoman

native: Clear TUNE_FEATURES/ABIEXTENSION

2023-12-12T14:20:35+00:00

Some recipes reference these. Rather than continually trying to chase down the references and taskhash issues, clear the variables for an easier life and simpler code. These wouldn't convey anything useful in a native build. (From OE-Core rev: 09ecafaf0e128c4dea062d359de37cbef461aed2) Signed-off-by: Richard Purdie (cherry picked from commit f8edeead263708889d31a7ff578ef8274cb678b4) Signed-off-by: Jermain Horsman Signed-off-by: Steve Sakoman

rust-cross: Simplfy the rust_gen_target calls

2023-12-12T14:20:35+00:00

Match the code in rust-cross-canadian so that further simplifications can be considered in future. (From OE-Core rev: 9fb5f81f58306b2d355049698b6a17d045bd5e1e) Signed-off-by: Richard Purdie (cherry picked from commit 5cb62d0a33777cb9afb1eea5f736a2580ce50dc7) Signed-off-by: Jermain Horsman Signed-off-by: Steve Sakoman

rust-cross/rust-common: Merge arm target handling code to fix cross-canadian

2023-12-12T14:20:35+00:00

rust-cross had special handling for armv7 targets but we also need this for cross-canadian. Merge the code into the main function so everything is consistent. Also then fix the arm definition to be arm-eabi since ABI is correctly being looked up. (From OE-Core rev: 0adada8111c17e8e5a7c32cef86bdb8e7dfd79d3) Signed-off-by: Richard Purdie (cherry picked from commit ff3c3dbbd2bf1bb7bb70b55cca203e9eedcf14a8) Signed-off-by: Jermain Horsman Signed-off-by: Steve Sakoman