Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-5.0.8 2025-03-10T19:34:01+00:00 2025-03-10T19:34:01+00:00 Steve Sakoman steve@sakoman.com 2025-03-10T19:32:35+00:00 urn:sha1:dc4827b3660bc1a03a2bc3b0672615b50e9137ff (From OE-Core rev: cd2b6080a4c0f2ed2c9939ec0b87763aef595048) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-10T19:30:52+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-24T06:30:37+00:00 urn:sha1:e9bddcfed49eef609dbe7825d4927415534d4268 * Noteworthy changes in release 4.20.0 (2025-02-01) [stable] - The release tarball is now reproducible. - We publish a minimal source-only tarball generated by 'git archive'. - Update gnulib files and various build/maintenance fixes. - Fix CVE-2024-12133: Potential DoS in handling of numerous SEQUENCE OF or SET OF elements License-Update: file COPYING.LESSER renamed to COPYING.LESSERv2 & Copyright year updated to 2025 (From OE-Core rev: fc5814dfa49c67157def00b323656f15e8bc457b) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-10T19:30:52+00:00 Alessio Cascone alessio.cascone@vimar.com 2025-01-29T07:31:29+00:00 urn:sha1:103af48c363e91cf9398f1a4bea1bd1852efc1ea Starting from 2023d version, tzcode makefile does not use anymore "cc" variable for C compiler, due to Makefile refactoring. Replacing "cc" with "CC" fixes the issue. (From OE-Core rev: c297d2cd8d28463adca5158c9895f1492754d569) Signed-off-by: Alessio Cascone <alessio.cascone@vimar.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b3cdfca5ef84ed2054faef9abddef3aeed930e17) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-10T19:30:52+00:00 Priyal Doshi pdoshi@mvista.com 2025-01-27T10:40:16+00:00 urn:sha1:14a67aa5b47a93474603f0c3a57f9fc209bd17ad (From OE-Core rev: 34b0f99ffd9beab4d400b05f259fc26f3da0386b) Signed-off-by: Priyal Doshi <pdoshi@mvista.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a15c4e6793c55c8084a61298ef3695e1db2f60cd) Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Alexis Cellier alexis.cellier@smile.fr 2025-03-03T18:36:32+00:00 urn:sha1:b5b0e1fc3d0ddee7fb6ba6b99227a6c7f946485b The libpcre2 is now dlopen'ed, so it is not automatically added to the RDEPENDS anymore. Add it to the RRECOMMENDS list (and not RDEPENDS as systemd tags the library as "suggested"). This issue is not on master, the systemd v257 recipe uses a tool that systemd provides to get this kind of dependencies. But this cannot be backported to scarthgap as systemd v255 does not have this tool yet. Cc: Yoann Congal <yoann.congal@smile.fr> (From OE-Core rev: 45fc7048c511c433ecc23840fe6fdd61f6366a47) Signed-off-by: Alexis Cellier <alexis.cellier@smile.fr> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Deepesh Varatharajan Deepesh.Varatharajan@windriver.com 2025-03-06T05:43:48+00:00 urn:sha1:dc83c0c30ad57eaccd4a238c7719c4b104063172 PR32560 stack-buffer-overflow at objdump disassemble_bytes Backport a patch from upstream to fix CVE-2025-0840 Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893] (From OE-Core rev: 338a2a95eb9a99c8e56dfb1f6336497ddd654372) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-03-06T06:59:23+00:00 urn:sha1:a18a302dba4acc867e92abc0856cb0f5fce6d8a8 A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file. (From OE-Core rev: bf0ad79c46d8a01aafc91620ddf415749aa8849a) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-03-05T16:14:43+00:00 urn:sha1:a7888d9d2f2f0f77426370175d234f9cd54420d7 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C This issue affects FFmpeg: 7.1. Issue was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosma (From OE-Core rev: 75ad6e004de95ff6208820ccf2c0af01d9363749) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-03-05T16:14:42+00:00 urn:sha1:6dfa4d7a28a7d790b2722756858b7a7510493a88 FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. (From OE-Core rev: bc9cdf3701b937d40964903a3489898a69525d17) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-08T14:22:57+00:00 Archana Polampalli archana.polampalli@windriver.com 2025-03-05T16:14:41+00:00 urn:sha1:674351742d381e2006f335ff088f55e424afc83c FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c. (From OE-Core rev: a8331b11d5d7aa8f1997eaa189b74aaab7cc44da) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>