linux/poky.git/meta, branch yocto-4.0.18

build-appliance-image: Update to kirkstone head revision

2024-04-22T23:59:49+00:00

(From OE-Core rev: b7182571242dc4e23e5250a449d90348e62a6abc) Signed-off-by: Steve Sakoman

systemd: Fix vlan qos mapping

2024-04-21T13:33:35+00:00

Drop unnecessary restriction for QoS mapping. Also adds tests for vlan QoS mapping. Link: https://github.com/systemd/systemd/commit/fe830b84d4002582e7aefb16e5e09fd0195f21c8.patch PR: https://github.com/systemd/systemd/pull/27761 (From OE-Core rev: b5c5e783fe06e3ae3b3e92ffa7f18bee62aca3c0) Signed-off-by: Sana Kazi Signed-off-by: Sana Kazi Signed-off-by: Steve Sakoman

valgrind: skip intermittently failing ptest

2024-04-21T13:33:35+00:00

Intermittent failures on autobuilder: AssertionError: Failed ptests: {'valgrind': ['memcheck/tests/linux/timerfd-syscall']} (From OE-Core rev: 19e7d5e717e6d28e0b64bd382f07b8e709526474) Signed-off-by: Steve Sakoman

nghttp2: Fix CVE-2024-28182

2024-04-21T13:33:34+00:00

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28182 (From OE-Core rev: 85e65af4727695d61c225a5911325764f423c331) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

rust: add CVE_CHECK_IGNORE for CVE-2024-24576

2024-04-21T13:33:34+00:00

CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected. More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576 (From OE-Core rev: 44e0b6b028657d32de5971d6a42a88767ef8c710) Signed-off-by: Harish Sadineni Signed-off-by: Steve Sakoman

ruby: fix CVE-2024-27281

2024-04-21T13:33:34+00:00

ruby: RCE vulnerability with .rdoc_options in RDoc References: https://github.com/ruby/ruby/pull/10316 https://security-tracker.debian.org/tracker/CVE-2024-27281 (From OE-Core rev: d01b73c51ceead4911a9a9306dbe728f1db2e029) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

libssh2: fix CVE-2023-48795

2024-04-21T13:33:34+00:00

References: https://nvd.nist.gov/vuln/detail/CVE-2023-48795 (From OE-Core rev: a4a727839e608d114becc709c511651b4f546c6f) Signed-off-by: Meenali Gupta Signed-off-by: Steve Sakoman

tcl: skip async and event tests in run-ptest

2024-04-19T11:50:39+00:00

These test suites are full of timing-sensitive test cases, so skip them too. [ YOCTO #15321 ] (From OE-Core rev: f94c74cee8b2650dd3211a49dc7e88bf60d2e6a7) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit dd06c3668dbe9ec1cf9a0a84d7a6bc9851f9c662) Signed-off-by: Steve Sakoman

tcl: skip timing-dependent tests in run-ptest

2024-04-19T11:50:39+00:00

There are several tests in the test suite which are very dependent on timing and fail on a loaded host system, so skip them. [ YOCTO #14825 #14882 #15081 ] (From OE-Core rev: 161d336a6c57fddb36a0c4e8c2def84ce70128e3) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni (cherry picked from commit 68beb4f4b5a0bea5d431decddf7656f18ac7a04a) Signed-off-by: Steve Sakoman

tcl: Add a way to skip ptests

2024-04-19T11:50:39+00:00

Some tests hardcode assumptions on locales, which may not be present in musl systems e.g., therefore add a way to skip such tests using -skip option. Skip unixInit-3* test on musl (From OE-Core rev: a70f9039259d7d38c5a3e50f7003d3228d1ab692) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni (cherry picked from commit fa66f1cee2d88c2276442e8b4aaeccde5490f9ea) Signed-off-by: Steve Sakoman