diff options
-rw-r--r-- | meta/recipes-kernel/linux/cve-exclusion_6.1.inc | 13 | ||||
-rw-r--r-- | meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb | 6 | ||||
-rw-r--r-- | meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb | 6 | ||||
-rw-r--r-- | meta/recipes-kernel/linux/linux-yocto_6.1.bb | 28 |
4 files changed, 28 insertions, 25 deletions
diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.1.inc b/meta/recipes-kernel/linux/cve-exclusion_6.1.inc index 173bff2813..b6b9ca00d4 100644 --- a/meta/recipes-kernel/linux/cve-exclusion_6.1.inc +++ b/meta/recipes-kernel/linux/cve-exclusion_6.1.inc | |||
@@ -1,9 +1,9 @@ | |||
1 | 1 | ||
2 | # Auto-generated CVE metadata, DO NOT EDIT BY HAND. | 2 | # Auto-generated CVE metadata, DO NOT EDIT BY HAND. |
3 | # Generated at 2023-10-09 16:39:52.745283+00:00 for version 6.1.53 | 3 | # Generated at 2023-09-30 07:26:16.988526+00:00 for version 6.1.55 |
4 | 4 | ||
5 | python check_kernel_cve_status_version() { | 5 | python check_kernel_cve_status_version() { |
6 | this_version = "6.1.53" | 6 | this_version = "6.1.55" |
7 | kernel_version = d.getVar("LINUX_VERSION") | 7 | kernel_version = d.getVar("LINUX_VERSION") |
8 | if kernel_version != this_version: | 8 | if kernel_version != this_version: |
9 | bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version)) | 9 | bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version)) |
@@ -7297,7 +7297,8 @@ CVE_CHECK_IGNORE += "CVE-2023-42752" | |||
7297 | # cpe-stable-backport: Backported in 6.1.53 | 7297 | # cpe-stable-backport: Backported in 6.1.53 |
7298 | CVE_CHECK_IGNORE += "CVE-2023-42753" | 7298 | CVE_CHECK_IGNORE += "CVE-2023-42753" |
7299 | 7299 | ||
7300 | # CVE-2023-42755 needs backporting (fixed from 6.1.55) | 7300 | # cpe-stable-backport: Backported in 6.1.55 |
7301 | CVE_CHECK_IGNORE += "CVE-2023-42755" | ||
7301 | 7302 | ||
7302 | # fixed-version: Fixed from version 5.19rc1 | 7303 | # fixed-version: Fixed from version 5.19rc1 |
7303 | CVE_CHECK_IGNORE += "CVE-2023-4385" | 7304 | CVE_CHECK_IGNORE += "CVE-2023-4385" |
@@ -7327,9 +7328,11 @@ CVE_CHECK_IGNORE += "CVE-2023-4611" | |||
7327 | # cpe-stable-backport: Backported in 6.1.53 | 7328 | # cpe-stable-backport: Backported in 6.1.53 |
7328 | CVE_CHECK_IGNORE += "CVE-2023-4623" | 7329 | CVE_CHECK_IGNORE += "CVE-2023-4623" |
7329 | 7330 | ||
7330 | # CVE-2023-4881 needs backporting (fixed from 6.1.54) | 7331 | # cpe-stable-backport: Backported in 6.1.54 |
7332 | CVE_CHECK_IGNORE += "CVE-2023-4881" | ||
7331 | 7333 | ||
7332 | # CVE-2023-4921 needs backporting (fixed from 6.1.54) | 7334 | # cpe-stable-backport: Backported in 6.1.54 |
7335 | CVE_CHECK_IGNORE += "CVE-2023-4921" | ||
7333 | 7336 | ||
7334 | # CVE-2023-5158 has no known resolution | 7337 | # CVE-2023-5158 has no known resolution |
7335 | 7338 | ||
diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb index 9e94fc5255..a56addd4d5 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.1.bb | |||
@@ -14,13 +14,13 @@ python () { | |||
14 | raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") | 14 | raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") |
15 | } | 15 | } |
16 | 16 | ||
17 | SRCREV_machine ?= "af2faa46d440ee11170ba8233eec0f818988f256" | 17 | SRCREV_machine ?= "4b3040c1dc13aaac356ad4ef45a8926118c732d0" |
18 | SRCREV_meta ?= "59e0fce122a66f7dcaf7a2a8294d81c4b78197dc" | 18 | SRCREV_meta ?= "943c6fe5dac329c7e1c30d602788f409e692b3a8" |
19 | 19 | ||
20 | SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ | 20 | SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ |
21 | git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.1;destsuffix=${KMETA};protocol=https" | 21 | git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.1;destsuffix=${KMETA};protocol=https" |
22 | 22 | ||
23 | LINUX_VERSION ?= "6.1.53" | 23 | LINUX_VERSION ?= "6.1.55" |
24 | 24 | ||
25 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" | 25 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" |
26 | 26 | ||
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb index 04ae601e69..cb94d2d28e 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.1.bb | |||
@@ -8,7 +8,7 @@ require recipes-kernel/linux/linux-yocto.inc | |||
8 | # CVE exclusions | 8 | # CVE exclusions |
9 | include recipes-kernel/linux/cve-exclusion_6.1.inc | 9 | include recipes-kernel/linux/cve-exclusion_6.1.inc |
10 | 10 | ||
11 | LINUX_VERSION ?= "6.1.53" | 11 | LINUX_VERSION ?= "6.1.55" |
12 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" | 12 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" |
13 | 13 | ||
14 | DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" | 14 | DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" |
@@ -17,8 +17,8 @@ DEPENDS += "openssl-native util-linux-native" | |||
17 | KMETA = "kernel-meta" | 17 | KMETA = "kernel-meta" |
18 | KCONF_BSP_AUDIT_LEVEL = "2" | 18 | KCONF_BSP_AUDIT_LEVEL = "2" |
19 | 19 | ||
20 | SRCREV_machine ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 20 | SRCREV_machine ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
21 | SRCREV_meta ?= "59e0fce122a66f7dcaf7a2a8294d81c4b78197dc" | 21 | SRCREV_meta ?= "943c6fe5dac329c7e1c30d602788f409e692b3a8" |
22 | 22 | ||
23 | PV = "${LINUX_VERSION}+git${SRCPV}" | 23 | PV = "${LINUX_VERSION}+git${SRCPV}" |
24 | 24 | ||
diff --git a/meta/recipes-kernel/linux/linux-yocto_6.1.bb b/meta/recipes-kernel/linux/linux-yocto_6.1.bb index 567e0154bd..ef451efea5 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.1.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.1.bb | |||
@@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v6.1/standard/base" | |||
17 | KBRANCH:qemuloongarch64 ?= "v6.1/standard/base" | 17 | KBRANCH:qemuloongarch64 ?= "v6.1/standard/base" |
18 | KBRANCH:qemumips64 ?= "v6.1/standard/mti-malta64" | 18 | KBRANCH:qemumips64 ?= "v6.1/standard/mti-malta64" |
19 | 19 | ||
20 | SRCREV_machine:qemuarm ?= "b11af7d1c8b4337347747977173c878e7672eb15" | 20 | SRCREV_machine:qemuarm ?= "cf771f6d6bc0344e048bdbf7d23d3aacbe3556d0" |
21 | SRCREV_machine:qemuarm64 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 21 | SRCREV_machine:qemuarm64 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
22 | SRCREV_machine:qemuloongarch64 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 22 | SRCREV_machine:qemuloongarch64 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
23 | SRCREV_machine:qemumips ?= "81af09853cc4318fad59e780c830c9cc8ccdc898" | 23 | SRCREV_machine:qemumips ?= "4be1dcc270e6ddeea513af01d91ea3b48ec82470" |
24 | SRCREV_machine:qemuppc ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 24 | SRCREV_machine:qemuppc ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
25 | SRCREV_machine:qemuriscv64 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 25 | SRCREV_machine:qemuriscv64 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
26 | SRCREV_machine:qemuriscv32 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 26 | SRCREV_machine:qemuriscv32 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
27 | SRCREV_machine:qemux86 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 27 | SRCREV_machine:qemux86 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
28 | SRCREV_machine:qemux86-64 ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 28 | SRCREV_machine:qemux86-64 ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
29 | SRCREV_machine:qemumips64 ?= "6ec5ef2f6fa90a5823e131805845738453bc553a" | 29 | SRCREV_machine:qemumips64 ?= "aa0e978c979b84d620ad21132cfdbbf857be3878" |
30 | SRCREV_machine ?= "51f0e0b74445fb47b6544b26667f9d58b2017695" | 30 | SRCREV_machine ?= "644e73fa089ade30c0db7bd54be960be92546ba2" |
31 | SRCREV_meta ?= "59e0fce122a66f7dcaf7a2a8294d81c4b78197dc" | 31 | SRCREV_meta ?= "943c6fe5dac329c7e1c30d602788f409e692b3a8" |
32 | 32 | ||
33 | # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll | 33 | # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll |
34 | # get the <version>/base branch, which is pure upstream -stable, and the same | 34 | # get the <version>/base branch, which is pure upstream -stable, and the same |
35 | # meta SRCREV as the linux-yocto-standard builds. Select your version using the | 35 | # meta SRCREV as the linux-yocto-standard builds. Select your version using the |
36 | # normal PREFERRED_VERSION settings. | 36 | # normal PREFERRED_VERSION settings. |
37 | BBCLASSEXTEND = "devupstream:target" | 37 | BBCLASSEXTEND = "devupstream:target" |
38 | SRCREV_machine:class-devupstream ?= "09045dae0d902f9f78901a26c7ff1714976a38f9" | 38 | SRCREV_machine:class-devupstream ?= "d23900f974e0fb995b36ef47283a5aa74ca25f51" |
39 | PN:class-devupstream = "linux-yocto-upstream" | 39 | PN:class-devupstream = "linux-yocto-upstream" |
40 | KBRANCH:class-devupstream = "v6.1/base" | 40 | KBRANCH:class-devupstream = "v6.1/base" |
41 | 41 | ||
@@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA | |||
43 | git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.1;destsuffix=${KMETA};protocol=https" | 43 | git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.1;destsuffix=${KMETA};protocol=https" |
44 | 44 | ||
45 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" | 45 | LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" |
46 | LINUX_VERSION ?= "6.1.53" | 46 | LINUX_VERSION ?= "6.1.55" |
47 | 47 | ||
48 | PV = "${LINUX_VERSION}+git${SRCPV}" | 48 | PV = "${LINUX_VERSION}+git${SRCPV}" |
49 | 49 | ||