summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* libarchive: upgrade 3.8.1 -> 3.8.2Peter Marko2025-10-271-1/+1
| | | | | | | | | | | | | | | https://github.com/libarchive/libarchive/releases/tag/v3.8.2 Libarchive 3.8.2 is a bugfix and security release. Security fixes: * 7zip: Fix out of boundary access (#2668) * tar reader: fix checking the result of the strftime (#2719, CVE-2025-25724) (From OE-Core rev: d858f87bc9baf4a01f977861c5521f2d5ffeb5fd) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* fmt: add ptest supportGyorgy Sarvari2025-10-273-1/+15
| | | | | | | | | | Execution takes around a second. (From OE-Core rev: bd233792a0e57444acc88bee907b7a98598e7112) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* llvm/clang: Upgrade to 21.1.4 releaseDeepesh Varatharajan2025-10-273-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Brings following bugfixes on top of 21.1.3 222fc11f2b8f Bump version to 21.1.4 480a90482e5b release/21.x: [clang-format] Fix a crash on BAS_BlockIndent (#164047) 3333dd88a493 Update clang/lib/Format/TokenAnnotator.cpp 54cdd973782e [clang-format] Annotate ::operator and Foo::operator correctly (#164048) ceeb93096c79 [libclang/python] Return None instead of null cursors from Token.cursor (#163183) 7e153f5372ed [clang-format] Fix an assertion failure on comment-only config files (#163111) faca424bc5f7 [clang-format] Correctly handle backward compatibility of C headers (#159908) c5a3aa8934b0 [libc++] Properly implement array cookies in the ARM ABI (#160182) 0d819a9104b2 [libunwind] Fix aarch64 SEH unwinding with a debugger attached (#162867) 464d75ad5f26 [MachinePipeliner] Add test missed in #154940 (NFC) (#163350) ffa6b0c365ec [MachinePipeliner] Limit the number of stores in BB (#154940) 570c4c944338 [clang] Fix catching pointers by reference on mingw targets (#162546) c6af6be3cd1c [libc++][docs] Add missing entry for P3379R0 to `21.rst` a2e93dce5f2b [Hexagon][llvm-objdump] Start a fresh packet at symbol boundaries. (#163466) dfdee9a929aa [clang][modules] Derive mtime from PCM timestamps, not PCM files (#162965) bd9bc536b4ac [LLD] [COFF] Fix aarch64 delayimport of sret arguments (#163096) 7b785dcb70f6 [LLD][COFF] Fix tailMergeARM64 delayload thunk 128 MB range limitation (#161844) a847f1832857 [Hexagon] Support lowering of setuo & seto for vector types in Hexagon (#158740) e14b5e82244e [clang-format] Fix a bug in wrapping { after else (#161048) b54051ac74cb [clang-format] Correctly annotate RequiresExpressionLBrace (#155773) c9fbd571b52c dfsan: Fix test with gcc 15. 68f118f265c9 Switch dtls_test.c from XFAIL to UNSUPPORTED on aarch64. a86b1e397e90 compiler-rt: Make the tests pass on AArch64 and with page size != 4096. c03b58bb091e [clangd] Fix code action kind for readability-identifier-naming fixes (#162808) caef7619d5fd [clang-format] Fix a bug in OneLineFormatOffRegex (#162961) 5386abc82ab8 [libc++][ranges] Fix `ranges::join_view` segmented iterator trait (#158347) 18593ab316f6 workflows/release-binaries: Run tests on the same runner as the build (#162421) 13bee3a798b1 [Mips] Fix clang crashes when assembling invalid MIPS beql instructions with --arch=mips (#156413) 0d1b9249d189 [CI] Add dyung and c-rhodes to the Release Asset List (#162478) c000f3226bdf [Mips] Fixed libunwind::Registers_mips_o32::jumpto to allow for load delay (#152942) 276050887539 [LLDB][ProcessWindows] Set exit status on instance rather than going through all targets (#159308) (From OE-Core rev: 343b2e113322859c6c3021215acc498a94b69a0b) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa: runtime: weston: Remove tear down methodMathieu Dubois-Briand2025-10-271-4/+5
| | | | | | | | | | | | | | Tear down method is executed even when the tests are disabled. This lead to SSH being used to run commands on the target, and as it might fail when no SSH server is present, we had to use ignore_ssh_fails=True here. Instead, remove log file just before it is created: it will remain on the target after the test is run, but this should be acceptable. (From OE-Core rev: 8b119b1a0fa618c03fbee1bcc755785fedd2d923) Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa: runtime: logrotate: Remove setup and tear down methodsMathieu Dubois-Briand2025-10-271-11/+8
| | | | | | | | | | | | | | | | | | Setup and tear down methods are executed even when the tests are disabled. This lead to SSH being used to run commands on the target, and as it might fail when no SSH server is present, we had to use ignore_ssh_fails=True here. Instead, run cleanup tasks in tests themselves and remove the tear down method. Also, the wtmp configuration file is not modified since the test was modified a few years ago: there is no need to backup and restore it. (From OE-Core rev: c90f79ae221573b2d5100f2d25b12f77e33113d7) Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd.bbclass: support template files with dotsJason M. Bills2025-10-271-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the SYSTEMD_SERVICE variable contains a template instance that has dots in the name such as "xyz.openbmc_project.my@instance.service", the regex splits on all the dots resulting in the following python exception: Exception: ValueError: too many values to unpack (expected 3) To continue to support service files with dots in the name, this changes to first split only on the '@' to isolate the name, then split the second half on the last dot to get the remaining two parameters. Splitting on the last dot allows dots in the instance name, as well. Confirmed when building that the three parameters for template instances without dots came out the same and that template instances with dots include the full name with dots in the first parameter. Confirmed when using an instance name with dots that the full instance name came out correctly with dots. CC: Ross Burton <Ross.Burton@arm.com> (From OE-Core rev: 09a37ecf0aeff674e49d7bddd5421011a885da2e) Signed-off-by: Jason M. Bills <jason.m.bills@linux.intel.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: upgrade 20251011 -> 20251021Dmitry Baryshkov2025-10-271-2/+7
| | | | | | | | | | | | | | Upgrade the firmware package, add new package for Intel Sensor Hub on Pather Lake platforms. License-Update: new and updated firmware (From OE-Core rev: d7bb55ef931f1c36fd3adc4989e8c7324bd08771) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* create-spdx-3.0: add SPDX_LICENSES to SPDX3_DEP_FILESJose Quaresma2025-10-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | If we have changes on SPDX_LICENSES content we ended up building invalid sstate-cache archives. The default value for the SPDX_LICENSES is the file meta/files/spdx-licenses.json but this file don't use the bitbake fetcher and because of this their checksum is not validated. So we need to add this file to the build dependency chain of the SPDX. For example, currently we have bump from 3.24.0 to 3.27.0 on master-next for the file meta/files/spdx-licenses.json. Since the file content is not taken into account, we end up creating invalid sstate-cache artifacts on the autobuilder on master-next builds. This created sstate-cache artifacts will also be available to master branch users that are using the upstream sstate-cache mirror. If someone is using the public mirror but still following the master branch they will encounter something like the following error which this change aims to resolve. | ERROR: initramfs-rootfs-image-1.0-r0 do_create_image_sbom_spdx: http://spdxdocs.org/openembedded-alias/by-doc-hash/57301e8063a8bf25308226271627db2b78675cda9f648c5c6c14a2b9c18f48dc/zlib/UNIHASH/license/3_27_0/Zlib not found in /work/build/tmp/deploy/spdx/3.0.1/armv8a/by-spdxid-hash/57/57301e8063a8bf25308226271627db2b78675cda9f648c5c6c14a2b9c18f48dc.spdx.json (From OE-Core rev: 10669f6f615058293671fb16454601580b7b34e9) Signed-off-by: Jose Quaresma <jose.quaresma@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* spdx-3.0: replace SPDX3_LIB_DEP_FILES with SPDX3_DEP_FILESJose Quaresma2025-10-273-8/+8
| | | | | | | | | | | We can have more files types in the chain of dependencies and not just libs. (From OE-Core rev: f400ba75f2d7987abb177a43f94874a7fdc1ec0a) Signed-off-by: Jose Quaresma <jose.quaresma@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Pin native compiler to gcc as wellKhem Raj2025-10-271-0/+1
| | | | | | | | | | | pseudo does not build with clang (From OE-Core rev: acc12802ca9c3d24d6aac2977849110a04aa8888) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc: Pin native toolchain to GCC as wellKhem Raj2025-10-271-0/+1
| | | | | | | | | | | | GCC is not buildable with clang and when using clang for native compiler this fails to build native parts (From OE-Core rev: 38825ed9e8f24a2ae31df377f7f3c971bc617a19) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: Pass OE defined BUILD_CC and BUILD_LDFLAGSKhem Raj2025-10-272-1/+34
| | | | | | | | | | | | This ensures that, native pieces in target builds are build with correct flags to be able to run on build host (From OE-Core rev: c82e49d1707f2057baa3f7fbaeea0b785712a11f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: Do not modify rpaths in llvm-configKhem Raj2025-10-271-5/+1
| | | | | | | | | | | | | | | | No need to edit rpaths in llvm-config, this is not needed anymore because the llvm-config used is from standard install inside sysroot unlike when rust-llvm was used, where it was installed into its own location to avoid conflicts with llvm-config coming from llvm/clang (From OE-Core rev: c91addea22c7e857e583a89d4597f6e676210e6b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gtk+3: Update 3.24.43 -> 3.24.51Jörg Sommer2025-10-272-33/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to https://www.gtk.org/docs/installations/linux/#gtk-v3x the new place for downloads is download.gnome.org aka $GNOME_MIRROR (ftp.g.o redirects to this). And new versions are without `+`. Update opengl.patch, handle new `is_gl_context_current`. Overview of Changes in GTK+ 3.24.51, 29-09-2025 =============================================== * Wayland: - Force window titles to be valid utf8 - Flush tablet events when neccessary * X11: - Avoid a use-after-free with threads * Windows: - Avoid min/max buttons for dialogs * Images: - Replace a few calls to gdk_pixbuf_get_pixels with read_pixels to avoid thread-safety issues * GL: - Try harder to keep the GL context current * Input: - Make compose file parsing more robust * Translation updates: Catalan Esperanto Persian Overview of Changes in GTK+ 3.24.50, 07-08-2025 =============================================== * Themes: - Add a progress-working-symbolic icon - Support strokes in symbolic icons - Update theme CSS - Remove hardcoded Cantarell font * GtkShortcutsWindow: - Differentiate all keypad symbols visually * GtkApplication: - Register unsandboxed apps with the portals * macOS: - Remove redundant NSView calls - Fix some memory leaks - Don't try to use the file transfer portal * Windows: - Always mark windows as minimizable * X11 - Fix problems with gtk_window_get_geometry * Wayland: - Fix a crash * Input: - Make compose sequence visuals configurable * Printing: - Fix the build with libcups 3 - Support gnome-papers as previewer * Translation updates Nepali Persian Uzbek (Latin) Overview of Changes in GTK+ 3.24.49, 05-03-2025 =============================================== * Fix a crash in GtkIMContext * Fix crashes in DND with GtkPlug/GtkSocket * Wayland: - Fix erroneous crossing events, causing menus to malfunction - Support the cursor-shape protocol * X11: - Enforce size limits on windows, preventing lockups * macOS: - Fix pen tilt handling * Translation updates Bulgarian Thai Overview of Changes in GTK+ 3.24.48, 25-02-2025 =============================================== * Switch to the new ci-based release process Overview of Changes in GTK+ 3.24.44, 24-01-2025 =============================================== * GtkFileChooser: - Stop replacing : (colon) with U+2236 (ratio) * GtkEmojiChooser: - Update to Unicode 16 / CLDR 46 * GtkSpinButton: - Use semantically appropriate icon names - Make numeric spin buttons always LTR * GtkEntry: - Stop guessing text direction from keyboard layout - Add a shortcut and context menu item to change text direction * GtkEventControllerMotion: - Make enter and leave signals work * Accessibility: - Use message dialog titles as names * GDK: - Fix portal handling of gvfs files * Wayland: - Support the xdg_foreign_v2 protocol - Try to fix monitor geometry on sway - Improve font setting fallback - Use a better default cursor size - Fix a crash during DND * macOS: - Fix a UI hang * Translation updates: Bulgarian Farsi Hindi Hungarian Icelandic Latvian Serbian (From OE-Core rev: 7f370c3b9c10e723324ea8f924011c5f570749d4) Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: patch CVE-2025-11495Peter Marko2025-10-272-0/+154
| | | | | | | | | | | Pick commit per NVD CVE report. (From OE-Core rev: d3ec5a470bba069dee809780a5c892c7d52e05ac) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: patch CVE-2025-11413Peter Marko2025-10-272-0/+39
| | | | | | | | | | | | | | | | | | | | | Pick commit per NVD CVE report. Note that there were two patches for this, first [1] and then [2]. The second patch moved the original patch to different location. Cherry-pick of second patch is successful leaving out the code removing the code from first location, so the patch attached here is not identical to the upstream commit but is identical to applying both and merging them to a single patch. [1] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=1108620d7a521f1c85d2f629031ce0fbae14e331 [2] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0 (From OE-Core rev: 98df728e6136d04af0f4922b7ffbeffb704de395) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: patch CVE-2025-11412Peter Marko2025-10-272-0/+36
| | | | | | | | | | | Pick commit per NVD CVE report. (From OE-Core rev: 6b94ff6c584a31d2b1e06d1e1dc19392d759b4b7) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: patch CVE-2025-11414Peter Marko2025-10-272-0/+85
| | | | | | | | | | | Pick commit per NVD CVE report. (From OE-Core rev: cd7ce80fa1a99916aa2f93c4d9591c5496c3ef71) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opkg: upgrade 0.7.0 -> 0.8.0Etienne Cordonnier2025-10-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | See release notes at - http://downloads.yoctoproject.org/releases/opkg/opkg-0.8.0.release-notes [0.8.0] - 2025-01-10 The minor version bump in this release is due to the changes to cURL error output line format. - [Changed](https://git.yoctoproject.org/opkg/commit/?id=ab03377868256427279b36c4b2a298edae4260b8) the error output for the curl download backend, to now report the HTTP error code for failed requests. - e.g. `error: log_curl_download_error: Failed to download headers of https://foo.bar/all/Packages.gz: The requested URL returned error: 401` - Enabling debug-verbosity, while using the cURL backend, [will now](https://git.yoctoproject.org/opkg/commit/?id=ce6fede3db931bb0da70d1334cdc4101d0aec702) print cURL's verbose error log to stderr when there is a download failure. - The verbose output may contain confidential information about your cURL transactions. So this is your reminder that debug-verbosity should not be enabled in production systems or sensitive security environments. - The commandline configuration file option (`-f`) [can now](https://git.yoctoproject.org/opkg/commit/?id=36d08b93d2859992b624a4ba2f412cfa5c766050) be specified multiple times, and each configuration file will be loaded and their settings merged. - [Fixed](https://git.yoctoproject.org/opkg/commit/?id=c87188d7535684fddb8cf80993c147b215602b63) a bug in control field parsing where custom fields whose keys are similar to other fields could be confused by the parser. (From OE-Core rev: ff78c4c4453643c24494fa872a58e424b9772f9c) Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* multilib.bbclass: Filter ROOTFS_RO_UNNEEDED to fix uninstallationMike Crowe2025-10-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When building an entire multilib image (e.g. lib32-core-image-minimal) we need to ensure that the unneeded packages in ROOTFS_RO_UNNEEDED get the multilib prefix applied before they are compared against the list of installed packages inside Rootfs._uninstall_unneeded() to decide whether they need to be installed. Before this change with local.conf containing: MACHINE = qemuarm64 require conf/multilib.conf MULTILIBS = "multilib:lib32" DEFAULTTUNE:virtclass-multilib-lib32 = "armv7at-neon" IMAGE_FEATURES = "read-only-rootfs" running: bitbake lib32-core-image-minimal tar tavf tmp/deploy/images/qemuarm64/lib32-core-image-minimal-qemuarm64.rootfs.tar.zst|grep postinst shows three files: -rwxr-xr-x 0/0 25 2018-03-09 12:34 ./etc/init.d/run-postinsts lrwxrwxrwx 0/0 0 2018-03-09 12:34 ./etc/rcS.d/S99run-postinsts -> ../init.d/run-postinsts -rwxr-xr-x 0/0 2153 2018-03-09 12:34 ./usr/sbin/run-postinsts whereas with this change there are no matching files. (From OE-Core rev: 77c35362fb13c75145f9f999216b3d879ab18b77) Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fit-image: Split signing variablesRyan Eatmon2025-10-271-2/+6
| | | | | | | | | | | | | | | | | | Right now all signing is done with a single variable: UBOOT_SIGN_ENABLE. This has the side effect of not allowing for signing the fitImage while not signing the uboot files. This patch creates three new variables specific to FIT_KERNEL and defaults them to the corresponding UBOOT variables. That way all existing code will remain the same, but we can selectively control just signing the fitImage without also signing the uboot files. (From OE-Core rev: 313ff06fdfec36a09328dbd60471bd53127fabe3) Signed-off-by: Ryan Eatmon <reatmon@ti.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* spdx_common: Fix invalid SPDX downloadLocation for Rust cratesJayasurya Maganuru2025-10-271-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes [YOCTO #15909] SPDX validation was failing due to the use of `crate://crates.io/...` as the `downloadLocation`, which is not a valid SPDX URL as per the 2.2 specification. This patch updates `fetch_data_to_uri()` in `spdx_common.py` to detect when the fetcher type is "crate" and instead use the `url` attribute, which contains a valid HTTP(S) URL in the expected format, e.g.: https://crates.io/api/v1/crates/<name>/<version>/download This aligns the SPDX metadata for Rust crates with the specification and avoids validation errors in tools consuming SPDX documents. Tested with the `python3-bcrypt` recipe and verified that the generated `spdx.json` contains a valid `software_downloadLocation`. Reference: https://bugzilla.yoctoproject.org/show_bug.cgi?id=15909 (From OE-Core rev: 7cadbd1a22e18847d03b5baa902f5581d3e0aafa) Signed-off-by: Jayasurya Maganuru <Maganuru.Jayasurya@Windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: fix installation umask to 0022 of meson.Liu Yiding2025-10-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | The default installation umask is 0027 for Kea-built artifacts. And it caused package conflicts as following: Error: Transaction test error: file /usr/lib/pkgconfig conflicts between attempted installs of kea-dev-3.0.1-r0.x86_64_v3 and btrfs-tools-dev-6.16-r0.x86_64_v3 file /usr/lib/pkgconfig conflicts between attempted installs of libgcrypt-dev-1.11.2-r0.x86_64_v3 and kea-dev-3.0.1-r0.x86_64_v3 I submitted an issue to the upstream and found upstream alreadly known this issue. https://gitlab.isc.org/isc-projects/kea/-/issues/4171 https://gitlab.isc.org/isc-projects/kea/-/issues/3993 Then I follow the method in the SPEC file of upstream to fix this problem in Yocto. https://gitlab.isc.org/isc-projects/kea-packaging/-/blob/master/rpm/kea.spec?ref_type=heads meson setup build \ --buildtype release \ --install-umask 0022 \ --bindir %{_bindir} \ (From OE-Core rev: 0294c265a1f662e2b68b3a462da113cfa835485b) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: fix EXTRA_OE config to EXTRA_OEMESONLiu Yiding2025-10-271-1/+2
| | | | | | | | | | | After kea has been upgrade to 3.0.1,the build system changed to meson,but the config of build system is still be EXTRA_OECONF. So this commit fix it. (From OE-Core rev: df3f4196693ae82bddebe134f3af0db92e5d5712) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-selftest: fitimage: fix req_its_fields last field_indexAdrian Freihofer2025-10-271-2/+4
| | | | | | | | | | | | The last enrty of req_its_fields was not taken into account and the test passed even if the last entry was not found in the its file. (From OE-Core rev: 34e872ab23067231fb93c3b31ad5a439e9c17cb8) Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-numpy: upgrade 2.3.3 -> 2.3.4Trevor Gamblin2025-10-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reproducibility looks OK. ptests look OK: |============================================================================ |Testsuite summary |# TOTAL: 48977 |# PASS: 46513 |# SKIP: 2426 |# XFAIL: 33 |# FAIL: 0 |# XPASS: 5 |# ERROR: 0 |DURATION: 119 |END: /usr/lib/python3-numpy/ptest |2025-10-19T16:03 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 Release notes (https://github.com/numpy/numpy/releases/tag/v2.3.4): The NumPy 2.3.4 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. This release is based on Python 3.14.0 final. Changes - The npymath and npyrandom libraries now have a .lib rather than a .a file extension on win-arm64, for compatibility for building with MSVC and setuptools. Please note that using these static libraries is discouraged and for existing projects using it, it's best to use it with a matching compiler toolchain, which is clang-cl on Windows on Arm. (From OE-Core rev: 4e8d533ccecf1310218ad5d36a7ec20ee5e0ccd4) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: drop redundant /var/lock directory creationRicardo Salveti2025-10-271-2/+2
| | | | | | | | | | | | | | | | | base-files already provides /var/lock as a symbolic link to /run/lock, and since /run is created and mounted as tmpfs during init, there is no need to explicitly create /var/lock within initramfs. This avoids the following spurious error during boot: mkdir: can't create directory '/var/lock': No such file or directory (From OE-Core rev: 24629a0e81291900edf0967bb218ba51dfa90ce9) Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.25.2 -> 1.25.3Peter Marko2025-10-277-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | Upgrade to latest 1.25.x release [1]: $ git --no-pager log --oneline go1.25.2..go1.25.3 28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3 e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187 79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date This release addresses breakage caused by a security patch included in Go 1.25.2 and 1.24.8, which enforced overly restrictive validation on the parsing of X.509 certificates. We've removed those restrictions while maintaining the security fix that the initial release addressed [2]. [1] https://github.com/golang/go/compare/go1.25.2...go1.25.3 [2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik (From OE-Core rev: d5f281bf13995117d98af809a2caea91e241713e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* llvm: multilib-header fix for llvm/Config/llvm-config.hLiu Yiding2025-10-271-1/+3
| | | | | | | | | | | | | | Fix following conflicts when enabling multilib. Error: Transaction test error: file /usr/include/llvm/Config/llvm-config.h conflicts between attempted installs of lib32-llvm-dev-21.1.3-r1.core2_32 and llvm-dev-21.1.3-r1.x86_64_v3 (From OE-Core rev: 886b0fb60a0b2ebbe3186c790db6e0a41eeb8741) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: upgrade 3.13.7 -> 3.13.9Peter Marko2025-10-275-30/+5
| | | | | | | | | | | | | | | | | | | | | | Drop upstreamed patch and refresh remaining patches. Release information: * https://www.python.org/downloads/release/python-3138/ * 3.13.8 is the eighth maintenance release of 3.13, containing around 200 bugfixes, build improvements and documentation changes since 3.13.7. * https://www.python.org/downloads/release/python-3139/ * This Python 3.13.9, a maintenance release for Python 3.13. * 3.13.9 is an expedited release containing a fix for one specific regression in Python 3.13.8 (From OE-Core rev: 78d83ced968a46579cff8bfa0b4f462689c46c00) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: upgrade 25.2.4 -> 25.2.5Quentin Schulz2025-10-272-44/+2
| | | | | | | | | | | | | | See https://docs.mesa3d.org/relnotes/25.2.5.html. 0001-glx-provide-glx.pc.patch is in 25.2.5 via commit 293a26135d83 ("glx: provide glx.pc") so can be dropped. (From OE-Core rev: 33498005ff8099b743efaf1ae431ba1a0ba597a0) Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cmake: fix CVE-2025-9301Saravanan2025-10-272-0/+73
| | | | | | | | | | | | | | | | Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-9301 https://gitlab.kitware.com/cmake/cmake/-/issues/27135 Upstream-patch: https://gitlab.kitware.com/cmake/cmake/-/commit/37e27f71bc356d880c908040cd0cb68fa2c371b8 (From OE-Core rev: d31b2201bba808ec82c8d88df25b1106c588720e) Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: upgrade 2.48.5 -> 2.50.0Gyorgy Sarvari2025-10-275-69/+219
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dropped fix-armv7-compilation.patch, because it is included in this release. Dropped no-musttail-arm.patch, because it has been solved by project (a bit differently)[1] Added a new backported patch, fix-musl-compilation.patch to avoid build error when compiling with musl libc: .../Source/bmalloc/libpas/src/libpas/pas_probabilistic_guard_malloc_allocator.c:52:10: fatal error: execinfo.h: No such file or directory | 52 | #include <execinfo.h> | | ^~~~~~~~~~~~ Another patch, fix_op_instanceof_handler_for_32-bit_C-loop_build.patch is under review by upstream. It fixes compiling for 32-bit targets by fixing the following error: error: label 'op_instanceof_return_location' used but not defined [1]: https://github.com/WebKit/WebKit/blob/webkitgtk-2.50.0/Source/WTF/wtf/Compiler.h#L280 Changelog: 2.50.0: - Fix rendering with software rasterization enabled. - Fix WebAudio issues after idling for a minute. - Fix several crashes and rendering issues. 2.49.90: - Add support for font collection / fragment identifiers. - Fix web process deadlock on exit. - Fix stuttering when playing WebP animations - Fix CSS animations with cubic-bezier timing function. - Do not start the MemoryPressureMonitor if it's disabled - Translation updates: Polish, Slovenian. - Fix several crashes and rendering issues. 2.49.4: - Enable CSS property font-variant-emoji is now enabled by default. - Improve emoji font selection. - Add SVT-AV1 encoder support to media backend. - Show device scale factor in webkit://gpu. - Fix font rendering of composed characters with certain fonts. - Fix handling of font synthesis properties (bold/italic). - Fix documentation of WebKitDeviceInfoPermissionRequest. - Fix several crashes and rendering issues. 2.49.3: - Add new API to get the theme color of a WebKitWebView. - Fix rendering with GTK 3. - Notify automation session on abnormal disconnections. - Fix a crash by ensuring SkiaRecordingResult is destroyed on the main thread. - Fix build on s390x. - Fix the build with GTK 3. - Fix several crashes and rendering issues. 2.49.2: - Enable damage propagation to the UI process by default. - Pass available input devices from UI process to web process for Interaction Media Features. - Always have a fallback when domain does not have known base. - Fix URL after HSTS upgrade in case of redirection. - Fix rendering when device scale factor change comes before the web view geometry update. - Ensure web view is focused on tap gesture. - Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0. - Fix several crashes and rendering issues. - Translation updates: Brazilian Portuguese, Swedish. 2.49.1: - Change threaded rendering implementation to use Skia API instead of WebCore display list that is not thread safe. This also allowed to improve performance by recording layers once and replaying every dirty region in different worker threads. - Added hybrid rendering mode that tries to use the GPU worker threads, but if they are all busy the CPU worker threads are used if possible. - Add volume locking support to media player. - Add support for tracing counters with Sysprof. - Fix several crashes and rendering issues. (From OE-Core rev: 4caf886da6c9d74298aab0b953c0540dc2f49942) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: fix conflict between kea-dhcp4 and kea-dhcp6 multilibsLiu Yiding2025-10-271-9/+35
| | | | | | | | | | | | | | | | There are conflict of config files between kea and lib32-kea: | Error: Transaction test error: | file /etc/kea/kea-dhcp4.conf conflicts between attempted installs of lib32-kea-3.0.1-r0.core2_32 and kea-3.0.1-r0.x86_64_v3 | file /etc/kea/kea-dhcp6.conf conflicts between attempted installs of lib32-kea-3.0.1-r0.core2_32 and kea-3.0.1-r0.x86_64_v3 Update this patch after kea was upgraded to 3.0.1. (From OE-Core rev: 5318fba1f4bc50e658aee9461cc919ab093a8293) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: install bitbake+oe-core+meta-yocto, not pokyRoss Burton2025-10-271-13/+21
| | | | | | | | | | | | | | | Change the build-appliance image to include current git trees of the separate bitbake/openembedded-core/meta-yocto repositories, instead of the merged poky repository as that is being discontinued. [ YOCTO #16002 ] (From OE-Core rev: 501e78ea84979d175f5e6b7978c669f3f80a4355) (From OE-Core rev: 57dbe13f87cc2cfc87ed12dcca12382ba710be94) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: Add globbing to FILES where missingZoltan Boszormenyi2025-10-271-78/+78
| | | | | | | | | | | | If compression is used, a lot of compressed firmware files are not packaged otherwise. (From OE-Core rev: 8695d01a47490d48103e9f292e1ea3ee4753d98e) (From OE-Core rev: d3315badb8bf4bc9c32ba13bb31febb6aea3cfe7) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: Fix removing unlicensed firmware if compression is usedZoltan Boszormenyi2025-10-271-6/+10
| | | | | | | | | | | | | | | | | | | | | | If FIRMWARE_COMPRESSION is set, the newly added code to remove unlicensed firmware fails with: | Remove unlicensed firmware: acenic/tg1.bin | rm: cannot remove '.../work/all-oe-linux/linux-firmware/20250917/image/usr/lib/firmware/acenic/tg1.bin': No such file or directory This is because the code does not consider that the file may be compressed. Fix it by factoring out the code to construct the compressed file name suffix from do_install:append() into a python function and also use it for the actual file names listed in REMOVE_UNLICENSED. (From OE-Core rev: 79fc52e2d729bf30a901055a9864280d3055bbeb) (From OE-Core rev: ecfb4494a9bc23cb1b1532cff32d67d4384ded3e) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes/cargo_common: ensure B is cleanRoss Burton2025-10-271-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | The cargo class defaults to out-of-tree builds in WORKDIR/build, but at no point was that directory cleaned. This causes problems with the rust standard library recipe (libstd-rs) which installs manually with cp, so rebuilds can be contaminated with the contents of previous builds. I believe that post-release we should switch cargo.bbclass to mandating out-of-tree builds to reduce the complexity, but for now in out-of-tree builds we can just delete the ${B}/target directory. Note that we use ${B}/target because there at least were reasons to use that name[1], it is unclear if these limitations still hold. We can't simply clean ${B} because that will break recipes that use cargo and something else to build, for example librsvg. [1] https://github.com/rust-lang/cargo/pull/1657 (From OE-Core rev: 1452ac7a44196454a52f3f6d883290ddcccfd3f8) (From OE-Core rev: 9d9ce457630ea7403ffe7028e3370647db0b83fa) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* debianutils: use SPDX SMAIL-GPL licence nameRoss Burton2025-10-272-165/+1
| | | | | | | | | | | | | | | Use the SMAIL-GPL license name, as that is the official SPDX name and we now have it in our license list. This means we can delete the SMAIL_GPL license, that appears to be only used by debianutils and nobody else. (From OE-Core rev: a8b0d3bc7b073cc0e9e8a735df6d36a4816520dc) (From OE-Core rev: af771279f3ef8aa2ba137e018da8fc6bf6a1b335) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* common-licenses: update to SPDX license list v3.27Ross Burton2025-10-2740-670/+2786
| | | | | | | | | | | | Use scripts/pull-sdpx-licenses.py to refresh the license list and add any new licenses that we previously did not have license texts for. (From OE-Core rev: 560acb29d9f9d3a66223122e2cbca7a24a80f209) (From OE-Core rev: f9903f74ee36de4dd592f3bc8b1ce7b08f32608c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libstd-rs: remove redundant CARGO_TARGET_DIRRoss Burton2025-10-271-3/+2
| | | | | | | | | | | | | | The cargo class already sets this, so there's no need to set it again. The value set by cargo.bbclass is actually ${B}/target, so update the do_install task to match. (From OE-Core rev: 3557f1c294531e7f8c34a2b0677e8c03f1b1be77) (From OE-Core rev: ec51c22e902c2556438f1323a71a5e47ef00681e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto-dev: update to v6.18Bruce Ashfield2025-10-191-2/+2
| | | | | | | | | Bumping the -dev kernel to 6.18+ (From OE-Core rev: 7a900ff52d76490f42236f9dd898ded0da77058e) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kern-tools: fix symbol_why for v6.18-rc1+Bruce Ashfield2025-10-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit f589e1df23251d8319063da0a61c1016b2a0bf85 (HEAD -> master) Author: Bruce Ashfield <bruce.ashfield@gmail.com> Date: Wed Oct 15 18:12:20 2025 -0400 tools/Kconfiglib: add support for transitional attribute We need to update the parser to handle: commit f9afce4f32e9a120fc902fa6c9e0b90ad799a6ec Author: Kees Cook <kees@kernel.org> Date: Tue Sep 23 14:34:18 2025 -0700 kconfig: Add transitional symbol attribute for migration support During kernel option migrations (e.g. CONFIG_CFI_CLANG to CONFIG_CFI), existing .config files need to maintain backward compatibility while preventing deprecated options from appearing in newly generated configurations. This is challenging with existing Kconfig mechanisms because: 1. Simply removing old options breaks existing .config files. 2. Manually listing an option as "deprecated" leaves it needlessly visible and still writes them to new .config files. 3. Using any method to remove visibility (.e.g no 'prompt', 'if n', etc) prevents the option from being processed at all. Add a "transitional" attribute that creates symbols which are: - Processed during configuration (can influence other symbols' defaults) - Hidden from user menus (no prompts appear) - Omitted from newly written .config files (gets migrated) - Restricted to only having help sections (no defaults, selects, etc) making it truly just a "prior value pass-through" option. The transitional syntax requires a type argument and prevents type redefinition: config NEW_OPTION bool "New option" default OLD_OPTION config OLD_OPTION bool transitional help Transitional config for OLD_OPTION migration. This allows seamless migration: olddefconfig processes existing CONFIG_OLD_OPTION=y settings to enable CONFIG_NEW_OPTION=y, while CONFIG_OLD_OPTION is omitted from newly generated .config files. Added positive and negative testing via "testconfig" make target. Co-developed-by: Vegard Nossum <vegard.nossum@oracle.com> Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com> Reviewed-by: Nathan Chancellor <nathan@kernel.org> Tested-by: Nathan Chancellor <nathan@kernel.org> Link: https://lore.kernel.org/r/20250923213422.1105654-2-kees@kernel.org Signed-off-by: Kees Cook <kees@kernel.org> (From OE-Core rev: 8306d2bdcc48718aaa35dfa56b5364d90ea2a1db) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.16: genericarm64: feature splits and enablementBruce Ashfield2025-10-193-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Integrating the following commit(s): 9e0a3e81 genericarm64.cfg: enable more power, reset drivers 0293b84e genericarm64.cfg: enable MFD_KHADAS_MCU f9c89a33 genericarm64-regulator.cfg: enable more drivers 01af8892 genericarm64.cfg: enable more IRQCHIP support 96bf1e51 genericarm64.scc: enable USB serial support dc7502db genericarm64.cfg: improve SATA support e85415a3 genericarm64.cfg: improve input device support cb734447 genericarm64.cfg: enable more Hisilicon PCI drivers 362c7b10 genericarm64.cfg: enable USB_CHIPIDEA_NPCM c9127be9 genericarm64.cfg: enable EXTCON_USBC_CROS_EC 3836443f genericarm64.cfg: improve PHY support a25d50d8 genericarm64-clock.cfg: improve Qualcomm, Renesas etc clock driver support 5e47e723 usb-net.cfg: add USB_LAN78XX e5be3915 genericarm64-clock.cfg: add more Renesas support 8d1d61f1 genericarm64.cfg: improve Renesas pmdomain support 89d463fc genericarm64.cfg: enable UACCE 18251d7d genericarm64.cfg: more MTD CFI etc support 070f72bc genericarm64.cfg: enable PCIe error reporting dfa6ca16 genericarm64.cfg: add more ethernet support 5821cdf3 genericarm64.scc: add genericarm64-rtc.cfg and enable more HW support e9847838 genericarm64.cfg: enable Chrome OS platform drivers 549b8af0 genericarm64.scc: enable Mellanox ethernet support 5e172179 mellanox.scc: add network driver feature 27eaec09 genericarm64.cfg: improve USB_DWC3 support c543148b genericarm64.cfg: improve TYPEC_MUX support 62b093b3 genericarm64.scc: enable exFAT support 360d572b cfg/fs/exfat.scc: add config feature 8be64103 genericarm64.cfg: add more USB 3.0 and basic 2.0 support 48e00648 genericarm64-arch.cfg: enable more Renesas support cef54e58 genericarm64.cfg: enable ARM_PSCI_FW support 129993c7 genericarm64.cfg: enable more TPM and FFA support 8cd8cb12 genericarm64.cfg: enable TCG_TIS as module be840fc8 genericarm64.cfg: enable ZYNQMP_FIRMWARE 9f94acee genericarm64.cfg: enable COMMON_CLK_ZYNQMP 10a0e7c7 genericarm64.cfg: enable DMI_SYSFS 705cae9a genericarm64.scc: enable efi-test.scc 08fd4f23 efi-test: add config fragment for EFI test interface 98178196 genericarm64.cfg: enable ARM_PSCI_CPUIDLE_DOMAIN (From OE-Core rev: 8ba930c46d28273edb1a1e9076f9c58876087524) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update CVE exclusions (6.12.52)Bruce Ashfield2025-10-191-22/+36
| | | | | | | | | | | | | | | | | Data pulled from: https://github.com/CVEProject/cvelistV5 1/1 [ Author: cvelistV5 Github Action Email: github_action@example.com Subject: 10 changes (9 new | 1 updated): - 9 new CVEs: CVE-2025-42901, CVE-2025-42902, CVE-2025-42903, CVE-2025-42906, CVE-2025-42908, CVE-2025-42909, CVE-2025-42910, CVE-2025-42937, CVE-2025-42939 - 1 updated CVEs: CVE-2025-42907 Date: Tue, 14 Oct 2025 00:35:23 +0000 ] (From OE-Core rev: aee153dd5ccbfaeeca9f76df7b8f8b453ee478d2) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update to v6.12.52Bruce Ashfield2025-10-193-20/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating linux-yocto/6.12 to the latest korg -stable release that comprises the following commits: 2b2cbdcede38 Linux 6.12.52 e7177c7e32cb KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O 716dceb19a9f net/9p: fix double req put in p9_fd_cancelled c5c703b50e91 crypto: rng - Ensure set_ent is always present 77dd0e6cb9f9 driver core/PM: Set power.no_callbacks along with power.no_pm 99d67efda945 staging: axis-fifo: flush RX FIFO on read errors 7441d70d5cd6 staging: axis-fifo: fix TX handling on copy_from_user() failure cc9cfbfb2916 staging: axis-fifo: fix maximum TX packet length check 65422a6a0d2d serial: stm32: allow selecting console when the driver is module c301ec61ce6f binder: fix double-free in dbitmap 1855e18bff88 nvmem: layouts: fix automatic module loading 4827bd6548e0 hid: fix I2C read buffer overflow in raw_event() for mcp2221 647d6b8d22be ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free c611b9e55174 ALSA: usb-audio: Kill timer properly at removal 5980a35c9d13 drm/amdgpu: Enable MES lr_compute_wa by default 2dedc6b77bf8 drm/amd/include : Update MES v12 API for fence update ff2b82286fc8 drm/amd/include : MES v11 and v12 API header update bfd0bec4cb2c drm/amd : Update MES API header file for v11 & v12 44d41506d697 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list 4a918985a35f can: rcar_canfd: Fix controller mode setting 1d2ef21f02ba can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled 60bbfc295a33 netfs: Prevent duplicate unlocking ec045333522e btrfs: ref-verify: handle damaged extent root tree 31a834865209 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue 467dd7cab347 platform/x86/amd/pmf: Support new ACPI ID AMDI0108 1773f674c4f2 perf subcmd: avoid crash in exclude_cmds when excludes is empty 6263c898761b platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list 27a0a815dbba dm-integrity: limit MAX_TAG_SIZE to 255 6a3a7b13ad74 ASoC: amd: acp: Adjust pdm gain value e005b52b8398 rust: block: fix `srctree/` links 1713796d6538 wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 914d02595ba6 wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 7c1e37878a2f Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 dad2ac26ac76 USB: serial: option: add SIMCom 8230C compositions f92181c0e13c media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe 895cccf639ac wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (From OE-Core rev: 6830e9b1991e889b5377f73660920c8252964197) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update CVE exclusions (6.12.51)Bruce Ashfield2025-10-191-5/+239
| | | | | | | | | | | | | | | | | Data pulled from: https://github.com/CVEProject/cvelistV5 1/1 [ Author: cvelistV5 Github Action Email: github_action@example.com Subject: 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2025-11401 - 0 updated CVEs: Date: Tue, 7 Oct 2025 17:07:09 +0000 ] (From OE-Core rev: ea39fc234a7e42e46e6cb4d893a73f8b40555224) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update to v6.12.51Bruce Ashfield2025-10-193-20/+20
| | | | | | | | | | | | | | | | | | | | | | Updating linux-yocto/6.12 to the latest korg -stable release that comprises the following commits: a9152eb181ad Linux 6.12.51 4dda55d04caa ASoC: qcom: audioreach: fix potential null pointer dereference 1f52119809b7 wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() 4e5f060d7347 mm: swap: check for stable address space before operating on the VMA 000b2a6bed7f media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID fd5d3e6b149e media: rc: fix races with imon_disconnect() effb1c19583b media: tuner: xc5000: Fix use-after-free in xc5000_release 514a519baa9e media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove 53c6351597e6 scsi: target: target_core_configfs: Add length check to avoid buffer overflow fc998bccee32 gcc-plugins: Remove TODO_verify_il for GCC >= 16 70165dc3ec8c crypto: sha256 - fix crash at kexec (From OE-Core rev: f8f4f550cf24c4fbf12671bd55b7bdb9062ed791) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update CVE exclusions (6.12.50)Bruce Ashfield2025-10-191-34/+662
| | | | | | | | | | | | | | | | | Data pulled from: https://github.com/CVEProject/cvelistV5 1/1 [ Author: cvelistV5 Github Action Email: github_action@example.com Subject: 15 changes (1 new | 14 updated): - 1 new CVEs: CVE-2025-11344 - 14 updated CVEs: CVE-2025-11293, CVE-2025-11294, CVE-2025-11295, CVE-2025-11325, CVE-2025-11343, CVE-2025-54086, CVE-2025-55191, CVE-2025-58586, CVE-2025-59951, CVE-2025-60967, CVE-2025-61587, CVE-2025-61792, CVE-2025-61984, CVE-2025-61985 Date: Mon, 6 Oct 2025 18:40:24 +0000 ] (From OE-Core rev: 6b09bcb0e1d9ac33c2517090fda83dd5dc76eea9) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/6.12: update to v6.12.50Bruce Ashfield2025-10-193-20/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating linux-yocto/6.12 to the latest korg -stable release that comprises the following commits: 72b82d56b8213 Linux 6.12.50 f89a0f1459dbc drm/i915/backlight: Return immediately when scale() finds invalid parameters cbfd3c7d4ed26 Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" 17195a7d754a5 iommufd: Fix race during abort for file descriptors 51b8258efe254 fbcon: Fix OOB access in font allocation 4a4bac869560f fbcon: fix integer overflow in fbcon_do_set_font 910d7749346c4 mm/hugetlb: fix folio is still mapped when deleted f84e487070518 kmsan: fix out-of-bounds access to shadow memory 159c156fd7148 gpiolib: Extend software-node support to support secondary software-nodes ca988dcdc6683 fs/proc/task_mmu: check p->vec_buf for NULL a13dbc5e20c72 afs: Fix potential null pointer dereference in afs_put_server aae514959d82b drm/ast: Use msleep instead of mdelay for edid read e2ded0872300c arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports 562a1342224f9 arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes cb20fe9502635 ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address 573b1e39edfcb tracing: dynevent: Add a missing lockdown check on dynevent 316b090c2fee9 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx 494ebb7b2f056 i40e: improve VF MAC filters accounting be4b969d28923 i40e: add mask to apply valid bits for itr_idx d33e5d6631ac4 i40e: add max boundary check for VF filters 6128bbc7adc25 i40e: fix validation of VF state in get resources 3118f41d8fa57 i40e: fix input validation logic for action_meta bfcc1dff429d4 i40e: fix idx validation in config queues msg cc4191e8ef40d i40e: fix idx validation in i40e_validate_queue_map 05fe81fb9db20 i40e: add validation for ring_len param 980ddc3a1ba65 HID: asus: add support for missing PX series fn keys bfb1e2aad1fec smb: client: fix wrong index reference in smb2_compound_op() 26923ea48e33a platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() 894e005a01bdd drm/panthor: Defer scheduler entitiy destruction to queue release a170b9c0dde83 futex: Prevent use-after-free during requeue-PI f800f7054d2cf drm/gma500: Fix null dereference in hdmi teardown 895fab2a4257a mm: folio_may_be_lru_cached() unless folio_test_large() 9422cfa89e1dc mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" 0db0d69bc962c mm/gup: local lru_add_drain() to avoid lru_add_drain_all() c41b2941a024d octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() ca74b67b475b9 net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port 7d7e29b959f9b net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() fbf6548f0f0f9 selftests: fib_nexthops: Fix creation of non-FDB nexthops f0e49fd13afe9 nexthop: Forbid FDB status change while nexthop is in a group 3bc813c5e6bf3 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS 90cfbb4e73db7 bnxt_en: correct offset handling for IPv6 destination address d2be773a92874 vhost: Take a reference on the task in struct vhost_task. 484c7d571a3d1 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync 23c9c485fa4c7 Bluetooth: hci_sync: Fix hci_resume_advertising_sync 262f3836962c2 ethernet: rvu-af: Remove slash from the driver name 14fc4fdae42e3 net/smc: fix warning in smc_rx_splice() when calling get_page() 953200d56fc23 net: tun: Update napi->skb after XDP process eb79ed9706703 can: peak_usb: fix shift-out-of-bounds issue 6b9fb82df8868 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow de77841652e57 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow def814b4ba31b can: hi311x: populate ndo_change_mtu() to prevent buffer overflow b26cccd87dcdd can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow 9fcedabaae009 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI 452ad25358504 bpf: Reject bpf_timer for PREEMPT_RT 7a75aae4c0c21 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI 79dc6d4932de4 wifi: virt_wifi: Fix page fault on connect 7b478122cd39b btrfs: don't allow adding block device of less than 1 MB 3d429cb1278e9 bpf: Check the helper function is valid in get_helper_proto ecb6383b79c3f smb: server: use disable_work_sync in transport_rdma.c 1d6e5bd5b6114 smb: server: don't use delayed_work for post_recv_credits_work 596575060f4cd cpufreq: Initialize cpufreq-based invariance before subsys 6833714e12d12 ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients 88c1bb807f79a arm64: dts: imx8mp: Correct thermal sensor index d755823f2c0b3 firmware: imx: Add stub functions for SCMI MISC API edeae8be4d263 HID: amd_sfh: Add sync across amd sfh work functions 7a7bb18680eaa IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions d2be6c429d8cc net: sfp: add quirk for FLYPRO copper SFP+ module 2368ce440dfbc ALSA: usb-audio: Add mute TLV for playback volumes on more devices c2564438d30a8 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk 6074537a680de ALSA: usb-audio: Add DSD support for Comtrue USB Audio device 5cae5420519d8 i2c: designware: Add quirk for Intel Xe aaac704646b8f mmc: sdhci-cadence: add Mobileye eyeQ support 34a8909831836 net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick 7edb8abcc9773 net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info 9e85e98516e13 usb: core: Add 0x prefix to quirks debug output 6b66c7181d265 ALSA: usb-audio: Fix build with CONFIG_INPUT=n a9bed48ddee3d ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA 1f1bc26ba97af ALSA: usb-audio: Convert comma to semicolon a705899ec6085 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 1847877529d71 ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks 80fffa366ad64 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks 33b1035eec4b4 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks d7a58b4d5ccf6 ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks 9fdb2390b0e49 ALSA: usb-audio: Fix block comments in mixer_quirks 058cfa459cc70 ALSA: usb-audio: Fix code alignment in mixer_quirks b728110b16467 firewire: core: fix overlooked update of subsystem ABI version 8d685863f557c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE (From OE-Core rev: a0ca79598f3b8564c4e1f0063dbae077a0a79fbb) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-10-11 18:01:41 +0000