From patchwork Wed Jul 9 02:51:12 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66458 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3DD1DC83F10 for ; Wed, 9 Jul 2025 02:51:41 +0000 (UTC) Received: from mail-pl1-f182.google.com (mail-pl1-f182.google.com [209.85.214.182]) by mx.groups.io with SMTP id smtpd.web10.5563.1752029492111917424 for ; Tue, 08 Jul 2025 19:51:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=V1Qtvg/b; spf=softfail (domain: sakoman.com, ip: 209.85.214.182, mailfrom: steve@sakoman.com) Received: by mail-pl1-f182.google.com with SMTP id d9443c01a7336-235ef62066eso81350635ad.3 for ; Tue, 08 Jul 2025 19:51:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029491; x=1752634291; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=8tLVss/Z32A/JcLanDABM5+HBuk6BU2D0dYvlJjfvmE=; b=V1Qtvg/bLhO87jGlaxK5zZyk8CWuu1pvqiRPMzBvTnpJeRqIgL26S+hFZT9mxTABQO u8caPIwnj245/J2ISI3ckGQzSK0aLW62BANzpjJZvJUdWQs6zgU2O5loNgF6Yok5gV/A Ltu/4vJ2xiLzt/1cqU5JIhcUgbS9dLuIzDMFSvJ/0um957CxsiLvTvsIydggzIijoDit 8C68FZ8iBoM+8XdBBqCgYoPL67rSVNhBhpJiLOSgH2aL6fn8qZPjHjJrGSn50boca2PM prJI+beVJQhYmdSEYBKTXFX+B/hn0JnM/PRVOlY0UMt9CITqXnPwIDTA1KPnTBh854Fd RVag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029491; x=1752634291; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=8tLVss/Z32A/JcLanDABM5+HBuk6BU2D0dYvlJjfvmE=; b=uqEclJ9xrx3owjGGzbDbDXnmBaOMuItfBGcWZO4RleiXHiw29P7i88WVgb6TAS8dCt 1jZj5Oon7mwrUbNVDOTWDhDEfdDwi6cxYTA08W62ouZ3KuCz6RRMNoHK92lmH4davl+F vfnWqeILuQi7kcwCYbxClwNGCxREiuXCIPelR3tOHW3aX+sZ15Im1zakZ8UG/w3bvFCE ElVwZZmO6Y3d3EpexaQib+9WBlETq2lLW6OEF//xdh778q7VgQXY5funiWGUD7gLdlNp yll0j6J/2tN4FLnWNb+M0IfljH6K9wfV6Dw3EODH6pYZtJpegKwngKISSzu3fEEyyCLc fdJQ== X-Gm-Message-State: AOJu0Yzk0mKaGiKmmmX7nFEcUqOCIOa/lAahPGuLAKhplCbyqWu15KfW /1p1tt1HUWlTC8RGWX8axOfkNtORf3WE7CrN+s5qsdhK7bFwR4mxoL1dWLx1HlZaLyxqwPiAHNA K/6e/ X-Gm-Gg: ASbGncugdBbFcvJK5+hYDuZ8JcPKmdjC4Z6xpjZdyTwsVLqiOdi0feg5FT5VEAFXKVL bHk7Zn3gdBA6UJW4ktLlV4eHA3t5icAfW6HX0G+L+mqcbWdSmM0S60NCzu2+iWzBr9A1XuzOyR0 rUgM27bDdtUYR1RmjB3RSDopOwM61CAbwuG9Yqx68s+UlJcAh8GwmaoTF9w0fubV7P826o1X4YD KB1n86j5rjiN2KJC0z2MxRC/xb7V47VMUtOPl95yMXKVl7tGNnDFx6+7YhvquMZBuoJ2nqP/Z5p L2Nj/moFoc1buq6CIOcImBOcsYMuRhGNzyc3MnqlBeafqsFPCylb1w== X-Google-Smtp-Source: AGHT+IHc6VX1Meeo6roVM8ShNPU16Sxc53huJc5wn+av5J8oTl679r/VmNvUrrCWy4iHIMzsjnrgXQ== X-Received: by 2002:a17:902:e890:b0:235:f1e4:3383 with SMTP id d9443c01a7336-23ddb199307mr10953255ad.7.1752029491349; Tue, 08 Jul 2025 19:51:31 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:30 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 01/12] libxml2: fix CVE-2025-6021 Date: Tue, 8 Jul 2025 19:51:12 -0700 Message-ID: <8777f1b344c7f66a7ef4291bb59af2a5fb466b6a.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220058 From: Hitendra Prajapati Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/libxml2/-/commit/acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0 Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman --- .../libxml/libxml2/CVE-2025-6021.patch | 56 +++++++++++++++++++ meta/recipes-core/libxml/libxml2_2.12.10.bb | 1 + 2 files changed, 57 insertions(+) create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch diff --git a/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch b/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch new file mode 100644 index 0000000000..e28a9edb74 --- /dev/null +++ b/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch @@ -0,0 +1,56 @@ +From acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0 Mon Sep 17 00:00:00 2001 +From: Nick Wellnhofer +Date: Tue, 27 May 2025 12:53:17 +0200 +Subject: [PATCH] tree: Fix integer overflow in xmlBuildQName + +This issue affects memory safety. + +Fixes #926. + +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0] +CVE: CVE-2025-6021 +Signed-off-by: Hitendra Prajapati +--- + tree.c | 12 +++++++++--- + 1 file changed, 9 insertions(+), 3 deletions(-) + +diff --git a/tree.c b/tree.c +index dc3ac4f..f89e3cd 100644 +--- a/tree.c ++++ b/tree.c +@@ -47,6 +47,10 @@ + #include "private/error.h" + #include "private/tree.h" + ++#ifndef SIZE_MAX ++#define SIZE_MAX ((size_t) -1) ++#endif ++ + int __xmlRegisterCallbacks = 0; + + /************************************************************************ +@@ -216,16 +220,18 @@ xmlGetParameterEntityFromDtd(const xmlDtd *dtd, const xmlChar *name) { + xmlChar * + xmlBuildQName(const xmlChar *ncname, const xmlChar *prefix, + xmlChar *memory, int len) { +- int lenn, lenp; ++ size_t lenn, lenp; + xmlChar *ret; + +- if (ncname == NULL) return(NULL); ++ if ((ncname == NULL) || (len < 0)) return(NULL); + if (prefix == NULL) return((xmlChar *) ncname); + + lenn = strlen((char *) ncname); + lenp = strlen((char *) prefix); ++ if (lenn >= SIZE_MAX - lenp - 1) ++ return(NULL); + +- if ((memory == NULL) || (len < lenn + lenp + 2)) { ++ if ((memory == NULL) || ((size_t) len < lenn + lenp + 2)) { + ret = (xmlChar *) xmlMallocAtomic(lenn + lenp + 2); + if (ret == NULL) { + xmlTreeErrMemory("building QName"); +-- +2.49.0 + diff --git a/meta/recipes-core/libxml/libxml2_2.12.10.bb b/meta/recipes-core/libxml/libxml2_2.12.10.bb index 2eea65732b..1ecac70b4c 100644 --- a/meta/recipes-core/libxml/libxml2_2.12.10.bb +++ b/meta/recipes-core/libxml/libxml2_2.12.10.bb @@ -20,6 +20,7 @@ SRC_URI += "http://www.w3.org/XML/Test/xmlts20130923.tar;subdir=${BP};name=testt file://install-tests.patch \ file://CVE-2025-32414.patch \ file://CVE-2025-32415.patch \ + file://CVE-2025-6021.patch \ " SRC_URI[archive.sha256sum] = "c3d8c0c34aa39098f66576fe51969db12a5100b956233dc56506f7a8679be995" From patchwork Wed Jul 9 02:51:13 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66460 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3C891C8303C for ; Wed, 9 Jul 2025 02:51:41 +0000 (UTC) Received: from mail-pl1-f169.google.com (mail-pl1-f169.google.com [209.85.214.169]) by mx.groups.io with SMTP id smtpd.web10.5564.1752029494048709729 for ; Tue, 08 Jul 2025 19:51:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=AuaAbM43; spf=softfail (domain: sakoman.com, ip: 209.85.214.169, mailfrom: steve@sakoman.com) Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-23c703c471dso4656665ad.0 for ; Tue, 08 Jul 2025 19:51:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029493; x=1752634293; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=UdjEflhjdkDQ/L71LUmZOvxtewYt31QsakG124oORIg=; b=AuaAbM43vKCNX0b8VYJNoH5WKE+KLg8nFFGiWA5F8H3h5VWhfXNrjiDvyWSTpajYei a8WH8QHm/p3zF+BGTvSbIevR+a4YIT9inSYSoQsQb5mCLBCvNQsc23yLZ3Wo4FQDg7+c OIsMcK3k/cB9u5Lph8tvFIrKTBipuHxhKFsDQf7Td1UDjLD+EI4BMS5bEJ0UK7RFtZJt 7tslwAUBmMzpBsoOXxfke/MIXWPlcYFzPd5mO+UE+CTXGvR4E8cyB/b664KyoiufhZ6w P2KVQYRNRh/qVNUFWl6HvCgt4b2gdwqX/5vXQphPn0ZR2//knn7t/w5k2y9mVaeXQBT4 BZyQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029493; x=1752634293; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=UdjEflhjdkDQ/L71LUmZOvxtewYt31QsakG124oORIg=; b=Teh1qitqK6qzrfR5xhCbWqXJWR/MriCN/vpg2f2CxdFTy0IZAU2/zvnXxgG9q0bekC k6ezHdZ+29Wbh4eVFarlBz+Nby9glcg33hsvHTJS7pkRQ9DfH6PrbNkZzlPUirTXM11C 7ln9siR0N1OkJ92bkIUaOWgbE77hnK+rBJSuS3BMdJhTwKWEfP4cipH3lbpUMfM5Klh1 pn00alejHcKV1kmCU99jfDxaxIJdScogxlLFaXn80fC0uqCID/Fj4jxOybhTfBpMpp66 6FQyzV/7/MjjQsLlHIdFhLj1fUkwY5/Vpq8d3Bl/lQuM9u1uk/JC6PEVlXVS2pCSMoak MNGQ== X-Gm-Message-State: AOJu0Yx4SCbLRND9zRmhoq8rzbI06Te/+HZdm6wWAcPXyjBVv1LAtd9g fFyYScWuj5IrVGbBTyNKKORofLFifTgsyg+KrgBd0/43Rs0Sva+g0KF1Ys0rAUPUphkEwtkve8E 3JHao X-Gm-Gg: ASbGncvvk9rI7it3nKuC4kG9hVX3Et5Pc2/Dxy5ZaxKelx4TExQ8DkQoA9LfBdYDyu+ joTSq7sHGjIVAxqbw1e0FRO4Te3btl1bz8NaHuCPAR2Pr5JR4I6iJ9SBoOYblIPWP4VAACGg+3G tdSU3zlfVvtc8IeBvT+pVRDE1sqlw+MSs7NG6cHzSJ9kecymRwTQajb6RHTyVn7tjNFRTK3w6Ql gfmFZ7/+iye2tvcb8+JgqaOyIHdyl60lh94xmGLzgsk6w5KmrqXXN/+7pKDOnS86G8FXi+C9D+B drIy/S6b9xXAprg+auj5jrIuh8YmjG8tlT7qQLZ2x2Hkv/HnEhB7zA== X-Google-Smtp-Source: AGHT+IHLVxc/375Cqf5YFCWFl8iqvKEZcIMP2DdavAq7lMz4rzreacg1HgtjTGicYi/NKsrqNH8isg== X-Received: by 2002:a17:902:e88c:b0:237:e753:1808 with SMTP id d9443c01a7336-23dd1b43dc5mr69522575ad.20.1752029493241; Tue, 08 Jul 2025 19:51:33 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:32 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 02/12] curl: set conditional CVE_STATUS for CVE-2025-5025 Date: Tue, 8 Jul 2025 19:51:13 -0700 Message-ID: <8f50b0761fc4d49fae8d174956052e3ff9024a5e.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220059 From: Virendra Thakur If openssl packageconfig is enabled, set CVE_STATUS as not-applicable. This CVE is applicable only when curl built with wolfSSL support. Reference: https://curl.se/docs/CVE-2025-5025.html Signed-off-by: Virendra Thakur Signed-off-by: Steve Sakoman --- meta/recipes-support/curl/curl_8.7.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-support/curl/curl_8.7.1.bb b/meta/recipes-support/curl/curl_8.7.1.bb index 2f5bf8c8fd..a21a086f40 100644 --- a/meta/recipes-support/curl/curl_8.7.1.bb +++ b/meta/recipes-support/curl/curl_8.7.1.bb @@ -37,6 +37,8 @@ CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl dan CVE_STATUS[CVE-2024-32928] = "ignored: CURLOPT_SSL_VERIFYPEER was disabled on google cloud services causing a potential man in the middle attack" CVE_STATUS[CVE-2025-0725] = "not-applicable-config: gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, using zlib 1.2.0.3 or older" +CVE_STATUS[CVE-2025-5025] = "${@bb.utils.contains('PACKAGECONFIG', 'openssl', 'not-applicable-config: build with openssl','unpatched',d)}" + inherit autotools pkgconfig binconfig multilib_header ptest From patchwork Wed Jul 9 02:51:14 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66459 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 43EA4C83F14 for ; Wed, 9 Jul 2025 02:51:41 +0000 (UTC) Received: from mail-pg1-f170.google.com (mail-pg1-f170.google.com [209.85.215.170]) by mx.groups.io with SMTP id smtpd.web11.5625.1752029495732724043 for ; Tue, 08 Jul 2025 19:51:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=f8mAoBev; spf=softfail (domain: sakoman.com, ip: 209.85.215.170, mailfrom: steve@sakoman.com) Received: by mail-pg1-f170.google.com with SMTP id 41be03b00d2f7-b34ab678931so3708658a12.0 for ; Tue, 08 Jul 2025 19:51:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029495; x=1752634295; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=PGnudlt+U8rAXBOd6hnlQskqRTW15rYb/bXpG1t0+qI=; b=f8mAoBevnGx2bXt9kHx7hKkg1+J0hpUS2Lnx5KInBeLI2igjn63TXfj/G7+fzkehaK L1v41v4KRzgcHcZYiBU5NVKVbdcQZfj+TMKYo/umsmlkO0pqunTq5r2dv5W6M8GwUu80 XkN1eOFKeyjgZZVUIMn2EaP3SICswevbyOXDjzdJEpYph/jIbCaswkmZL204MZTJAyDS iyZiGdzU5KIuQqoZR3zfrknpCopeCOe01bZf///lpgyPm3n2aXCTqcpFy7b6W5eEeozp pfoD/+w6wMo+d4XOmoIGGzmCQDE5ZkqfSO9tHc7GZgPBjpFyTNEiDTvLTW2x/pNh3/Ya baSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029495; x=1752634295; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=PGnudlt+U8rAXBOd6hnlQskqRTW15rYb/bXpG1t0+qI=; b=WDz14Pn1L4y4wWZKAjXnFxKdGVnUL2nJla8xUikRYFQdh8poYRRR9iF0pibNmlcnwp 1Zb5ZotqyiGJmj1WOBeXSt75b1GnwRnXgxFIokB83Em9aZumJKGnvav7Q08fJqkdX1BF kqZJ8ZnR86Qycwpf1Uh3Q/eiOLcdvrVqRk//XCwaUBL63zKGjzQ/q2Q15cuTs+DD+PeG YxxMBV59z9r4gTbYs2epFRxqls89H2IlES0fRf/N3SRn+iN+Ncp6kJiAhFqOnrO6YaGu eFxGoUgt5UxRBhMueHBu57/ild8s70zI73jogqWe+bKyGo/WiMO32P79wklh5LHds23o iI8g== X-Gm-Message-State: AOJu0Yyl6jbYS2RUOCvq9NRJLd46Tfg0s9tWbCz13KXW6y+KeVk1jC8C VcgY/euPdFwFDWhFliWmbBs13IR6JMcJOdDfeH5Rnaw0AXWv2smv4cmowVdn+i2nykagllmymSv 6GyGw X-Gm-Gg: ASbGncvWF8vovh+vbb1ksCwm2Ms0p/z8BuHJ/w6EgYZn+wro5W0F3iHol7XHpz496dU ktDAJQLX3/j4PscAdd445Zx7qcAO6rU4OF0CZfJBE4ZjQIAB/qpMG52V22RrwVvSk4MYWS9zVVz +LZQilHAhY8pvodhMbqh4vg8G27mdX6L8zX379LkiWxuwsMA2SXcIGAbhD4clj5U1sGGy4KHV/g bBjpEES/pq412KTvs6V650cb2WXuQ5PTpOgQxH8s55nATV4QBG5+vkrmUz9qy+iybhukaSBgIR6 ExUkvU/tSwVRH9TbbGCMXCGqXH8iuhWwoWTHE+oBPr39c7glwzhBiA== X-Google-Smtp-Source: AGHT+IG73PfPZzKT6jSKS/4Lu2ojH6+RFT3/iLlZhpvwzpl4zTr+peT62fEa/kLcD/gPr2c8L5EuEw== X-Received: by 2002:a17:903:484:b0:234:8c64:7878 with SMTP id d9443c01a7336-23ddb19ae5dmr8489835ad.11.1752029494891; Tue, 08 Jul 2025 19:51:34 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.34 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:34 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 03/12] icu: fix CVE-2025-5222 Date: Tue, 8 Jul 2025 19:51:14 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220060 From: Changqing Li CVE-2025-5222: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. Refer: https://nvd.nist.gov/vuln/detail/CVE-2025-5222 https://unicode-org.atlassian.net/browse/ICU-22957 https://github.com/unicode-org/icu/commit/2c667e31cfd0b6bb1923627a932fd3453a5bac77 Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- .../icu/icu/CVE-2025-5222.patch | 166 ++++++++++++++++++ meta/recipes-support/icu/icu_74-2.bb | 1 + 2 files changed, 167 insertions(+) create mode 100644 meta/recipes-support/icu/icu/CVE-2025-5222.patch diff --git a/meta/recipes-support/icu/icu/CVE-2025-5222.patch b/meta/recipes-support/icu/icu/CVE-2025-5222.patch new file mode 100644 index 0000000000..276d9e4f90 --- /dev/null +++ b/meta/recipes-support/icu/icu/CVE-2025-5222.patch @@ -0,0 +1,166 @@ +From b5fd1ccf1068140ca9333878f2172a0947986ca8 Mon Sep 17 00:00:00 2001 +From: Frank Tang +Date: Wed, 22 Jan 2025 11:50:59 -0800 +Subject: [PATCH] ICU-22973 Fix buffer overflow by using CharString + +CVE: CVE-2025-5222 +Upstream-Status: Backport [https://github.com/unicode-org/icu/commit/2c667e31cfd0b6bb1923627a932fd3453a5bac77] + +Signed-off-by: Changqing Li +--- + tools/genrb/parse.cpp | 49 +++++++++++++++++++++--------------- + 1 file changed, 29 insertions(+), 20 deletions(-) + +diff --git a/tools/genrb/parse.cpp b/tools/genrb/parse.cpp +index f487241..eb85d51 100644 +--- a/tools/genrb/parse.cpp ++++ b/tools/genrb/parse.cpp +@@ -1153,7 +1153,7 @@ addCollation(ParseState* state, TableResource *result, const char *collationTyp + struct UString *tokenValue; + struct UString comment; + enum ETokenType token; +- char subtag[1024]; ++ CharString subtag; + UnicodeString rules; + UBool haveRules = false; + UVersionInfo version; +@@ -1189,15 +1189,15 @@ addCollation(ParseState* state, TableResource *result, const char *collationTyp + return nullptr; + } + +- u_UCharsToChars(tokenValue->fChars, subtag, u_strlen(tokenValue->fChars) + 1); +- ++ subtag.clear(); ++ subtag.appendInvariantChars(tokenValue->fChars, u_strlen(tokenValue->fChars), *status); + if (U_FAILURE(*status)) + { + res_close(result); + return nullptr; + } + +- member = parseResource(state, subtag, nullptr, status); ++ member = parseResource(state, subtag.data(), nullptr, status); + + if (U_FAILURE(*status)) + { +@@ -1208,7 +1208,7 @@ addCollation(ParseState* state, TableResource *result, const char *collationTyp + { + // Ignore the parsed resources, continue parsing. + } +- else if (uprv_strcmp(subtag, "Version") == 0 && member->isString()) ++ else if (uprv_strcmp(subtag.data(), "Version") == 0 && member->isString()) + { + StringResource *sr = static_cast(member); + char ver[40]; +@@ -1225,11 +1225,11 @@ addCollation(ParseState* state, TableResource *result, const char *collationTyp + result->add(member, line, *status); + member = nullptr; + } +- else if(uprv_strcmp(subtag, "%%CollationBin")==0) ++ else if(uprv_strcmp(subtag.data(), "%%CollationBin")==0) + { + /* discard duplicate %%CollationBin if any*/ + } +- else if (uprv_strcmp(subtag, "Sequence") == 0 && member->isString()) ++ else if (uprv_strcmp(subtag.data(), "Sequence") == 0 && member->isString()) + { + StringResource *sr = static_cast(member); + rules = sr->fString; +@@ -1395,7 +1395,7 @@ parseCollationElements(ParseState* state, char *tag, uint32_t startline, UBool n + struct UString *tokenValue; + struct UString comment; + enum ETokenType token; +- char subtag[1024], typeKeyword[1024]; ++ CharString subtag, typeKeyword; + uint32_t line; + + result = table_open(state->bundle, tag, nullptr, status); +@@ -1437,7 +1437,8 @@ parseCollationElements(ParseState* state, char *tag, uint32_t startline, UBool n + return nullptr; + } + +- u_UCharsToChars(tokenValue->fChars, subtag, u_strlen(tokenValue->fChars) + 1); ++ subtag.clear(); ++ subtag.appendInvariantChars(tokenValue->fChars, u_strlen(tokenValue->fChars), *status); + + if (U_FAILURE(*status)) + { +@@ -1445,9 +1446,9 @@ parseCollationElements(ParseState* state, char *tag, uint32_t startline, UBool n + return nullptr; + } + +- if (uprv_strcmp(subtag, "default") == 0) ++ if (uprv_strcmp(subtag.data(), "default") == 0) + { +- member = parseResource(state, subtag, nullptr, status); ++ member = parseResource(state, subtag.data(), nullptr, status); + + if (U_FAILURE(*status)) + { +@@ -1466,22 +1467,29 @@ parseCollationElements(ParseState* state, char *tag, uint32_t startline, UBool n + if(token == TOK_OPEN_BRACE) { + token = getToken(state, &tokenValue, &comment, &line, status); + TableResource *collationRes; +- if (keepCollationType(subtag)) { +- collationRes = table_open(state->bundle, subtag, nullptr, status); ++ if (keepCollationType(subtag.data())) { ++ collationRes = table_open(state->bundle, subtag.data(), nullptr, status); + } else { + collationRes = nullptr; + } + // need to parse the collation data regardless +- collationRes = addCollation(state, collationRes, subtag, startline, status); ++ collationRes = addCollation(state, collationRes, subtag.data(), startline, status); + if (collationRes != nullptr) { + result->add(collationRes, startline, *status); + } + } else if(token == TOK_COLON) { /* right now, we'll just try to see if we have aliases */ + /* we could have a table too */ + token = peekToken(state, 1, &tokenValue, &line, &comment, status); +- u_UCharsToChars(tokenValue->fChars, typeKeyword, u_strlen(tokenValue->fChars) + 1); +- if(uprv_strcmp(typeKeyword, "alias") == 0) { +- member = parseResource(state, subtag, nullptr, status); ++ typeKeyword.clear(); ++ typeKeyword.appendInvariantChars(tokenValue->fChars, u_strlen(tokenValue->fChars), *status); ++ if (U_FAILURE(*status)) ++ { ++ res_close(result); ++ return nullptr; ++ } ++ ++ if(uprv_strcmp(typeKeyword.data(), "alias") == 0) { ++ member = parseResource(state, subtag.data(), nullptr, status); + if (U_FAILURE(*status)) + { + res_close(result); +@@ -1523,7 +1531,7 @@ realParseTable(ParseState* state, TableResource *table, char *tag, uint32_t star + struct UString *tokenValue=nullptr; + struct UString comment; + enum ETokenType token; +- char subtag[1024]; ++ CharString subtag; + uint32_t line; + UBool readToken = false; + +@@ -1562,7 +1570,8 @@ realParseTable(ParseState* state, TableResource *table, char *tag, uint32_t star + } + + if(uprv_isInvariantUString(tokenValue->fChars, -1)) { +- u_UCharsToChars(tokenValue->fChars, subtag, u_strlen(tokenValue->fChars) + 1); ++ subtag.clear(); ++ subtag.appendInvariantChars(tokenValue->fChars, u_strlen(tokenValue->fChars), *status); + } else { + *status = U_INVALID_FORMAT_ERROR; + error(line, "invariant characters required for table keys"); +@@ -1575,7 +1584,7 @@ realParseTable(ParseState* state, TableResource *table, char *tag, uint32_t star + return nullptr; + } + +- member = parseResource(state, subtag, &comment, status); ++ member = parseResource(state, subtag.data(), &comment, status); + + if (member == nullptr || U_FAILURE(*status)) + { +-- +2.34.1 + diff --git a/meta/recipes-support/icu/icu_74-2.bb b/meta/recipes-support/icu/icu_74-2.bb index 3a4e197308..83753a18e5 100644 --- a/meta/recipes-support/icu/icu_74-2.bb +++ b/meta/recipes-support/icu/icu_74-2.bb @@ -121,6 +121,7 @@ SRC_URI = "${BASE_SRC_URI};name=code \ file://filter.json \ file://fix-install-manx.patch \ file://0001-icu-Added-armeb-support.patch \ + file://CVE-2025-5222.patch \ " SRC_URI:append:class-target = "\ From patchwork Wed Jul 9 02:51:15 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66461 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 528C1C83F16 for ; Wed, 9 Jul 2025 02:51:41 +0000 (UTC) Received: from mail-pl1-f181.google.com (mail-pl1-f181.google.com [209.85.214.181]) by mx.groups.io with SMTP id smtpd.web10.5567.1752029498172454162 for ; Tue, 08 Jul 2025 19:51:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=q7EAHSZh; spf=softfail (domain: sakoman.com, ip: 209.85.214.181, mailfrom: steve@sakoman.com) Received: by mail-pl1-f181.google.com with SMTP id d9443c01a7336-23694cec0feso45136145ad.2 for ; Tue, 08 Jul 2025 19:51:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029497; x=1752634297; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Clp4Zzv4lp/5my0Ec+R76LEGQ+wb4RhPXhQx5cjx/kg=; b=q7EAHSZhjXesfadoEdYXPBjv2qK/LYZ3QryQJzpBUVEu8xoveCgGYQwKh7FepVog0q 6W9uZC74Cj5dOiBmlaOyTy8UiPKqzxEmXx6XtgOhzOjkqfycGCxh0a8eQZQK3IHfbHcR eOB09Yt0FHx6FLoR6vDgs95hHjptNnZlMZD2bJ0c6/MP/iJCkb8VI3O/c7DsQBMcnaau g0c7iCX5VXQ9F+AwHJDvc+FTzdxqNpq4tAfcAEUzfar4qZfPiJ9L+mv/3Ciz1TrlEK8T q0bUleryKcMX2cM5TPzaNyk5o9oTLxVkq00BFBhky9oRgzfcHIXpF19dRRW//tO22IWQ ccMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029497; x=1752634297; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Clp4Zzv4lp/5my0Ec+R76LEGQ+wb4RhPXhQx5cjx/kg=; b=SrEB+volydLrCHIQEh7RhysPPhYBoaPTuTV7/7uYgokrfu19U7P4mNN9oqNdsCcjYY Mju4ZCJx61H4eQ4OY93jBpX3EKT2pd6FxKGw/kfK3XlUPme/O1qgeCaQ/YcNTjhuzNgZ Zu/MW09aV8TA9GzfVeVX/f3S14DBU80DFq3K6Ro+YnBNQcfIaOReFPZiAr+0esj1uGgw +AhPkl+OiJ0kwBu4Wx0+1zc9Gs2xllSN852nscxAFesM7Ghb/L2v3UisJK3a9wxR8xgN 4Vfqt2J9QzTK3u6ZC8awOcN6oCI2ploxE+LMgQDoW05xkxFOFHO4ylY0RQsm8XEevvzb XZDw== X-Gm-Message-State: AOJu0YzKJfiiCbGrIG1DZDdyiX5NdBnYmNvAA0m6L12pzpHVbRyxHXpO hL/svsTzC5nBlcJdBxS7D7xaexUMdFeCS7GRIk9pbtpxTXbPbDsLsHmG/mUPFlkMDAikrzNq/vY xlluQ X-Gm-Gg: ASbGncuCa4xlpJIu3b+iK/UAbLVMaD1YtEl/6bUpvteKT3Zh63LlqS+4W9x1kv7hW5j TCAtMqLz6IOg2TCx6dSnKbWV8WrGWFxM32xrsFv5E60SpS/YYpHOlHmXOj5EIoq2CDx4Q2kqulv 7RjUrD4jPsrpMsVq0YU9qYTvY6yO4Q4YrFwIAIXwVqajchkT3PYRiwB5QCmSFYxZZsu+1oewsfN xjSZd52oEqIFxFiiKAK96rJKlP0rYIxxcQKnjzczhKCZnzW95Sf+uJ9oAkgAz/Sj3Z2DhqMO5Dx qvJ/oa5QDZYHFuWvmKjgTJIurhVdqI/fsAzOUhkmO5dzuOfV4tDj3A== X-Google-Smtp-Source: AGHT+IGfylbhUSzY8QZNgCWSqUgP5EfjRgNg3LIKrGma6tDr/qrhz/Y8uTCHgpDkw9kB5ahCl6fYOw== X-Received: by 2002:a17:903:6c8:b0:226:38ff:1d6a with SMTP id d9443c01a7336-23ddb1a0471mr7975525ad.7.1752029497343; Tue, 08 Jul 2025 19:51:37 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:37 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 04/12] libsoup-2.4: refresh CVE-2025-4969.patch Date: Tue, 8 Jul 2025 19:51:15 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220061 From: Changqing Li refresh CVE-2025-4969.patch to fix the following build failure for libsoup-2.4-native on fedora40/41: ../libsoup-2.74.3/tests/multipart-test.c:578:63: error: passing argument 2 of ‘soup_multipart_new_from_message’ from incompatible pointer type [-Wincompatible-pointer-types] 578 | multipart = soup_multipart_new_from_message (headers, bytes); | ^~~~~ | | | GBytes * {aka struct _GBytes *} Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- .../libsoup/libsoup-2.4/CVE-2025-4969.patch | 54 +++++-------------- 1 file changed, 12 insertions(+), 42 deletions(-) diff --git a/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4969.patch b/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4969.patch index d45b2a2cb0..c1936b0b0c 100644 --- a/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4969.patch +++ b/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4969.patch @@ -13,10 +13,20 @@ Closes https://gitlab.gnome.org/GNOME/libsoup/-/issues/447 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/07b94e27afafebf31ef3cd868866a1e383750086] CVE: CVE-2025-4969 Signed-off-by: Hitendra Prajapati + +Refresh the patch, remove the test part, following commit in libsoup3 has a +type refactor, which make the test is not suitable for libsoup2 +[0d7e672e forms: Use GBytes instead of SoupMessageBody] +The test part will cause libsoup-2.3-native build failed on fedora40/41: +../libsoup-2.74.3/tests/multipart-test.c:578:63: error: passing argument 2 of ‘soup_multipart_new_from_message’ from incompatible pointer type [-Wincompatible-pointer-types] + 578 | multipart = soup_multipart_new_from_message (headers, bytes); + | ^~~~~ + | | + | GBytes * {aka struct _GBytes *} + --- libsoup/soup-multipart.c | 2 +- - tests/multipart-test.c | 22 ++++++++++++++++++++++ - 2 files changed, 23 insertions(+), 1 deletion(-) + 1 files changed, 1 insertions(+), 1 deletion(-) diff --git a/libsoup/soup-multipart.c b/libsoup/soup-multipart.c index dd93973..b3611db 100644 @@ -31,46 +41,6 @@ index dd93973..b3611db 100644 continue; /* Check for "--" or "\r\n" after boundary */ -diff --git a/tests/multipart-test.c b/tests/multipart-test.c -index 834b181..980eb68 100644 ---- a/tests/multipart-test.c -+++ b/tests/multipart-test.c -@@ -562,6 +562,27 @@ test_multipart_bounds_bad (void) - g_bytes_unref (bytes); - } - -+static void -+test_multipart_bounds_bad_2 (void) -+{ -+ SoupMultipart *multipart; -+ SoupMessageHeaders *headers; -+ GBytes *bytes; -+ const char *raw_data = "\n--123\r\nline\r\n--123--\r"; -+ -+ headers = soup_message_headers_new (SOUP_MESSAGE_HEADERS_MULTIPART); -+ soup_message_headers_append (headers, "Content-Type", "multipart/mixed; boundary=\"123\""); -+ -+ bytes = g_bytes_new (raw_data, strlen (raw_data)); -+ -+ multipart = soup_multipart_new_from_message (headers, bytes); -+ g_assert_nonnull (multipart); -+ -+ soup_multipart_free (multipart); -+ soup_message_headers_free (headers); -+ g_bytes_unref (bytes); -+} -+ - int - main (int argc, char **argv) - { -@@ -593,6 +614,7 @@ main (int argc, char **argv) - g_test_add_data_func ("/multipart/async-small-reads", GINT_TO_POINTER (ASYNC_MULTIPART_SMALL_READS), test_multipart); - g_test_add_func ("/multipart/bounds-good", test_multipart_bounds_good); - g_test_add_func ("/multipart/bounds-bad", test_multipart_bounds_bad); -+ g_test_add_func ("/multipart/bounds-bad-2", test_multipart_bounds_bad_2); - - ret = g_test_run (); - -- 2.49.0 From patchwork Wed Jul 9 02:51:16 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66462 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 517E8C83F12 for ; Wed, 9 Jul 2025 02:51:41 +0000 (UTC) Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171]) by mx.groups.io with SMTP id smtpd.web11.5626.1752029499823529260 for ; Tue, 08 Jul 2025 19:51:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=jTF98YA5; spf=softfail (domain: sakoman.com, ip: 209.85.215.171, mailfrom: steve@sakoman.com) Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-b391d6780d2so1819751a12.1 for ; Tue, 08 Jul 2025 19:51:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029499; x=1752634299; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ENGpRpQ50q20j0pihOxl+6vpwF6kNRB50YTScI+LXdc=; b=jTF98YA5G8ERqCpqK6x+Rn1lh366LcFpZkFrVWoDaB2rmuIIoavlarzoEOXHgEdwSc YCiJoHRQnWF2i7ma2dWVpHl2Fec0bhTREDt5rgDTk8COLZ0atLBm7yCIPHCmlsZbc5+e E++ZSea5+47jPr7oVvlhetvrQtBwSbWNQDfZg39gf1COQkTRfyFW9flOAAB3FoAcLxae KzKsWUQdn8eu6VeyyVzjJgbYauAJDorIRwOZt7JDDr8UxvyTajCMnpQqD47zzA2IpGU/ PUdgF9ImPE5cOTzgPDW2zGgK2CEaIfF6VvR780lxHonTMS3jZqWasIQiqoaXe8l6k6S3 a5Bw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029499; x=1752634299; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ENGpRpQ50q20j0pihOxl+6vpwF6kNRB50YTScI+LXdc=; b=dwL+GOcXE3W6rJUbUYPuLvPuwQ4RPyr78MZ6nUPM7LGgyfABiaFH7licSXUQasHQ8E 9CKwJ3RiCTBcj12PSHVKnn1z1a1J+msEWvBtTTNVnSuooW5/vlElXyhR97rsVc0KhH/s iQSbWQ7ci0CIXKWPTQWGV7V4c6Aq9SE4+Tu5NPL1glxV2Ky0n37PnoQEcS0G14e9lgW5 VZfHg8ioNBHE1lCezPSu85VdrN/YKnZ4iPJF7K5gsG9vQLNdVsMwSZPurH80upXbtW4I riknNBIxP3pW7vqlcK/Bc6XwpuQZPupCCtxtiZyjJyAvPpN9R4X4IkGLs1R54/4kYUZj /pxg== X-Gm-Message-State: AOJu0Yz0F8p79q1k6kR7BPvzDlh6O5AaWGAsD5kQS8SCJTdflOrYiB2z aec0fKg4JTUQ7dPjCdm5NzPduIY8pDqXqHy7u80i0vUHwY0sxHdAK1P9V32+248pV0hpR1BTHDi 1Ps9W X-Gm-Gg: ASbGncv6IIOZiqPZPcZmWIellfU7zxnhFarZJpfZSiicBDR+IBU4rMdWLqjUza92f8P qBdzUlb3y5NuF5y9NXPLYYIsbadXJkew2eQqTnRpFLxxItd7Kk03yVXC+bzOsm3SUszM1WYD0tP OWV0S4lzivRo/X1SUK2a7+LRGEgpNCNXCpMv1pv78Tb14I7UTaOCWyI334JJkirOp+wze2vlg7u ruSpvF/FhunoUHsOHVAQBeFSuGRR92mC5vKhedlZlvTefzXuDgI2JlQsuhZATRgHXQY8J/ASjVU VId8E4CVwbu6ErSC5U+VsywDxkR4M9B3eWfgj9hzduZ4yD6k4K/j3g== X-Google-Smtp-Source: AGHT+IEAmHrMYoJ94nVZ78KchGXltzvTl0YzRxMjf3AFV95I0dlX+EUmYpUoT0DqJSoVdzU7057PUw== X-Received: by 2002:a17:903:41cb:b0:234:d7c5:a0f6 with SMTP id d9443c01a7336-23ddb2f2d05mr13869555ad.31.1752029498970; Tue, 08 Jul 2025 19:51:38 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.38 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:38 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 05/12] libsoup-2.4: fix CVE-2025-4945 Date: Tue, 8 Jul 2025 19:51:16 -0700 Message-ID: <92039926b164fae418eed988f6fa172c3554b9e7.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220062 From: Changqing Li Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- .../libsoup/libsoup-2.4/CVE-2025-4945.patch | 117 ++++++++++++++++++ .../libsoup/libsoup-2.4_2.74.3.bb | 1 + 2 files changed, 118 insertions(+) create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4945.patch diff --git a/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4945.patch b/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4945.patch new file mode 100644 index 0000000000..c9fbdbacc8 --- /dev/null +++ b/meta/recipes-support/libsoup/libsoup-2.4/CVE-2025-4945.patch @@ -0,0 +1,117 @@ +From 3844026f74a41dd9ccab955899e005995293d246 Mon Sep 17 00:00:00 2001 +From: Changqing Li +Date: Tue, 8 Jul 2025 14:58:30 +0800 +Subject: [PATCH] soup-date-utils: Add value checks for date/time parsing + +Reject date/time when it does not represent a valid value. + +Closes #448 + +CVE: CVE-2025-4945 +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/8988379984e33dcc7d3aa58551db13e48755959f] + +Signed-off-by: Changqing Li +--- + libsoup/soup-date.c | 21 +++++++++++++++------ + tests/cookies-test.c | 10 ++++++++++ + 2 files changed, 25 insertions(+), 6 deletions(-) + +diff --git a/libsoup/soup-date.c b/libsoup/soup-date.c +index 9602d1f..4c114c1 100644 +--- a/libsoup/soup-date.c ++++ b/libsoup/soup-date.c +@@ -284,7 +284,7 @@ parse_day (SoupDate *date, const char **date_string) + while (*end == ' ' || *end == '-') + end++; + *date_string = end; +- return TRUE; ++ return date->day >= 1 && date->day <= 31; + } + + static inline gboolean +@@ -324,7 +324,7 @@ parse_year (SoupDate *date, const char **date_string) + while (*end == ' ' || *end == '-') + end++; + *date_string = end; +- return TRUE; ++ return date->year > 0 && date->year < 9999; + } + + static inline gboolean +@@ -348,7 +348,7 @@ parse_time (SoupDate *date, const char **date_string) + while (*p == ' ') + p++; + *date_string = p; +- return TRUE; ++ return date->hour >= 0 && date->hour < 24 && date->minute >= 0 && date->minute < 60 && date->second >= 0 && date->second < 60; + } + + static inline gboolean +@@ -361,8 +361,15 @@ parse_timezone (SoupDate *date, const char **date_string) + gulong val; + int sign = (**date_string == '+') ? -1 : 1; + val = strtoul (*date_string + 1, (char **)date_string, 10); ++ if (val > 9999) ++ return FALSE; + if (**date_string == ':') +- val = 60 * val + strtoul (*date_string + 1, (char **)date_string, 10); ++ { ++ gulong val2 = strtoul (*date_string + 1, (char **)date_string, 10); ++ if (val > 99 || val2 > 99) ++ return FALSE; ++ val = 60 * val + val2; ++ } + else + val = 60 * (val / 100) + (val % 100); + date->offset = sign * val; +@@ -407,7 +414,8 @@ parse_textual_date (SoupDate *date, const char *date_string) + if (!parse_month (date, &date_string) || + !parse_day (date, &date_string) || + !parse_time (date, &date_string) || +- !parse_year (date, &date_string)) ++ !parse_year (date, &date_string) || ++ !g_date_valid_dmy(date->day, date->month, date->year)) + return FALSE; + + /* There shouldn't be a timezone, but check anyway */ +@@ -419,7 +427,8 @@ parse_textual_date (SoupDate *date, const char *date_string) + if (!parse_day (date, &date_string) || + !parse_month (date, &date_string) || + !parse_year (date, &date_string) || +- !parse_time (date, &date_string)) ++ !parse_time (date, &date_string) || ++ !g_date_valid_dmy(date->day, date->month, date->year)) + return FALSE; + + /* This time there *should* be a timezone, but we +diff --git a/tests/cookies-test.c b/tests/cookies-test.c +index 2e2a54f..6035a86 100644 +--- a/tests/cookies-test.c ++++ b/tests/cookies-test.c +@@ -413,6 +413,15 @@ do_remove_feature_test (void) + soup_uri_free (uri); + } + ++static void ++do_cookies_parsing_int32_overflow (void) ++{ ++ SoupCookie *cookie = soup_cookie_parse ("Age=1;expires=3Mar9 999:9:9+ 999999999-age=main=gne=", NULL); ++ g_assert_nonnull (cookie); ++ g_assert_null (soup_cookie_get_expires (cookie)); ++ soup_cookie_free (cookie); ++} ++ + int + main (int argc, char **argv) + { +@@ -434,6 +443,7 @@ main (int argc, char **argv) + g_test_add_func ("/cookies/accept-policy-subdomains", do_cookies_subdomain_policy_test); + g_test_add_func ("/cookies/parsing", do_cookies_parsing_test); + g_test_add_func ("/cookies/parsing/no-path-null-origin", do_cookies_parsing_nopath_nullorigin); ++ g_test_add_func ("/cookies/parsing/int32-overflow", do_cookies_parsing_int32_overflow); + g_test_add_func ("/cookies/get-cookies/empty-host", do_get_cookies_empty_host_test); + g_test_add_func ("/cookies/remove-feature", do_remove_feature_test); + g_test_add_func ("/cookies/secure-cookies", do_cookies_strict_secure_test); +-- +2.34.1 + diff --git a/meta/recipes-support/libsoup/libsoup-2.4_2.74.3.bb b/meta/recipes-support/libsoup/libsoup-2.4_2.74.3.bb index 0da309ebd8..7e00cd678a 100644 --- a/meta/recipes-support/libsoup/libsoup-2.4_2.74.3.bb +++ b/meta/recipes-support/libsoup/libsoup-2.4_2.74.3.bb @@ -40,6 +40,7 @@ SRC_URI = "${GNOME_MIRROR}/libsoup/${SHRT_VER}/libsoup-${PV}.tar.xz \ file://CVE-2025-4948.patch \ file://CVE-2025-4476.patch \ file://CVE-2025-2784.patch \ + file://CVE-2025-4945.patch \ " SRC_URI[sha256sum] = "e4b77c41cfc4c8c5a035fcdc320c7bc6cfb75ef7c5a034153df1413fa1d92f13" From patchwork Wed Jul 9 02:51:17 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66464 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 53537C83F09 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.web10.5569.1752029501204638758 for ; Tue, 08 Jul 2025 19:51:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=OKRYZHbp; spf=softfail (domain: sakoman.com, ip: 209.85.214.170, mailfrom: steve@sakoman.com) Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-23636167afeso50950965ad.3 for ; Tue, 08 Jul 2025 19:51:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029500; x=1752634300; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Qnu1ASSsskY1dpCUwsXGvrauLOXQpsDPxW6pTR10w+Y=; b=OKRYZHbpDeSgp2M5EFJBFjpTPMkARPc/Ij4UYBnCTUHaf+Gkhc2ffjGDT8GNrIkrp9 Rq769mT4WPJ8Ln/0YArjXvVxvzf5jFpbFW4TjioFuZa3gXRwt52dwBJvPh45sqQZyThk TDF9+kyYSsa+A9EhlUJWVGafBQUoZ52akdKlGNQBJvIYsK7jYnYnqvvpE+zywSXA3EOr ifoH1V7m4zaDHcptqGhfuE7Ar9Gcgrbyuk5wBcnCceDfl2wt7biii8r0wa610Grg5JZ/ 2o0W2Bqp3NJFrmZtblst7haCcqs8s6pU8mkZ++BV7voYuS2snQI/mhCrcKv0F0jCojvo WzDQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029500; x=1752634300; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Qnu1ASSsskY1dpCUwsXGvrauLOXQpsDPxW6pTR10w+Y=; b=qtdZxEJGVKLClpHw0bzP25BHs1AeeafGVyFmNnmSRXTVpmTjF7zD2of8oIiqapVthN HK2Hgmy5rPdyihWEKFP/EwHf6jC8BfNmA6XYfVctosk4PgsHL4d7erKaGzZJ3M6CGy5D RRm4dMFKx+nUfk812wYtd3yMC5i7ku4ngmJ8bWCjksPVC6T3k15so/ch599iTR6kKuxA V9xuaE2mMqveBk3uyXyodc9kslpSqosmLJsKUS/uzyl5XQND7ZqQX0PIBKlvEw/bvWyW QrBFY3AfPTuh+snkY9MiKxRPW+0PRA/thHzf7IcsvH86/4EgMAUbWwEJzEBrLJHKhzcE aR3Q== X-Gm-Message-State: AOJu0Yxl++MYBxh9lkiTr/4zKekw0kI8DJThj5BPY2u1qeA3SquOmWG+ xrcRV13Gpmu8sdP0a2G03OC6wtNIJcwp9uJ5/4USjaTvhY+ZtprugzId1aoBP5IupH8sJ3atWML 2zejN X-Gm-Gg: ASbGncsTbY1Z2Sqfo9dqh8TimXfazhH3fbveIWf+9KGokEgy/LgjhoCjzpayx7k3E/y NXQdVZZejXG+SWwGM8/woVmSNz4Bf2C66O32D8+GnmBZFzg1F1rhDkuYPVjo9ioGmkEkUIjl0N3 VTw+/EomQ/S/EaNdp09sPZJb0gwvDfjrfjlFs/wB+CD8cGOa2YO375jyysxJJhzvVy7KIGnt/99 mP588vHaE5NBN31Uif0fE0rac+l58fDlJKpAhG5iC3ipAaWMB+3mXDJpfyTBerdZR1O+rWx/bnH z9PtbO977+XL/rXnl1m7ETRNJAlS4kl3x4nNd5LECKTqOVSNsQMpWQ== X-Google-Smtp-Source: AGHT+IGJTcuxC63p4ZiiAzx6RSdxNmRxgaDs6mESdANMg16ncWIPlIY0o9e6xk58mg+LSjZ9K/pmRQ== X-Received: by 2002:a17:902:e88a:b0:234:9375:e081 with SMTP id d9443c01a7336-23ddb305b33mr13750815ad.42.1752029500396; Tue, 08 Jul 2025 19:51:40 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:40 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 06/12] libsoup: fix CVE-2025-4945 Date: Tue, 8 Jul 2025 19:51:17 -0700 Message-ID: <6455484a26edc69be806c1356314c018d1940294.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220063 From: Changqing Li Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 Signed-off-by: Changqing Li Signed-off-by: Steve Sakoman --- .../libsoup/libsoup-3.4.4/CVE-2025-4945.patch | 118 ++++++++++++++++++ meta/recipes-support/libsoup/libsoup_3.4.4.bb | 1 + 2 files changed, 119 insertions(+) create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-4945.patch diff --git a/meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-4945.patch b/meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-4945.patch new file mode 100644 index 0000000000..cf34dcd231 --- /dev/null +++ b/meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-4945.patch @@ -0,0 +1,118 @@ +From f168bc7d6dbf04915cd7bf6bfe962bd23f63ec3b Mon Sep 17 00:00:00 2001 +From: Milan Crha +Date: Thu, 15 May 2025 07:59:14 +0200 +Subject: [PATCH] soup-date-utils: Add value checks for date/time parsing + +Reject date/time when it does not represent a valid value. + +Closes https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 + +CVE: CVE-2025-4945 +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/8988379984e33dcc7d3aa58551db13e48755959f] + +Signed-off-by: Changqing Li +--- + libsoup/soup-date-utils.c | 23 +++++++++++++++-------- + tests/cookies-test.c | 10 ++++++++++ + 2 files changed, 25 insertions(+), 8 deletions(-) + +diff --git a/libsoup/soup-date-utils.c b/libsoup/soup-date-utils.c +index fd785f5..34ca995 100644 +--- a/libsoup/soup-date-utils.c ++++ b/libsoup/soup-date-utils.c +@@ -129,7 +129,7 @@ parse_day (int *day, const char **date_string) + while (*end == ' ' || *end == '-') + end++; + *date_string = end; +- return TRUE; ++ return *day >= 1 && *day <= 31; + } + + static inline gboolean +@@ -169,7 +169,7 @@ parse_year (int *year, const char **date_string) + while (*end == ' ' || *end == '-') + end++; + *date_string = end; +- return TRUE; ++ return *year > 0 && *year < 9999; + } + + static inline gboolean +@@ -193,7 +193,7 @@ parse_time (int *hour, int *minute, int *second, const char **date_string) + while (*p == ' ') + p++; + *date_string = p; +- return TRUE; ++ return *hour >= 0 && *hour < 24 && *minute >= 0 && *minute < 60 && *second >= 0 && *second < 60; + } + + static inline gboolean +@@ -209,9 +209,14 @@ parse_timezone (GTimeZone **timezone, const char **date_string) + gulong val; + int sign = (**date_string == '+') ? 1 : -1; + val = strtoul (*date_string + 1, (char **)date_string, 10); +- if (**date_string == ':') +- val = 60 * val + strtoul (*date_string + 1, (char **)date_string, 10); +- else ++ if (val > 9999) ++ return FALSE; ++ if (**date_string == ':') { ++ gulong val2 = strtoul (*date_string + 1, (char **)date_string, 10); ++ if (val > 99 || val2 > 99) ++ return FALSE; ++ val = 60 * val + val2; ++ } else + val = 60 * (val / 100) + (val % 100); + offset_minutes = sign * val; + utc = (sign == -1) && !val; +@@ -264,7 +269,8 @@ parse_textual_date (const char *date_string) + if (!parse_month (&month, &date_string) || + !parse_day (&day, &date_string) || + !parse_time (&hour, &minute, &second, &date_string) || +- !parse_year (&year, &date_string)) ++ !parse_year (&year, &date_string) || ++ !g_date_valid_dmy (day, month, year)) + return NULL; + + /* There shouldn't be a timezone, but check anyway */ +@@ -276,7 +282,8 @@ parse_textual_date (const char *date_string) + if (!parse_day (&day, &date_string) || + !parse_month (&month, &date_string) || + !parse_year (&year, &date_string) || +- !parse_time (&hour, &minute, &second, &date_string)) ++ !parse_time (&hour, &minute, &second, &date_string) || ++ !g_date_valid_dmy (day, month, year)) + return NULL; + + /* This time there *should* be a timezone, but we +diff --git a/tests/cookies-test.c b/tests/cookies-test.c +index cafa26e..ccf7a4c 100644 +--- a/tests/cookies-test.c ++++ b/tests/cookies-test.c +@@ -434,6 +434,15 @@ do_cookies_parsing_nopath_nullorigin (void) + soup_cookie_free (cookie); + } + ++static void ++do_cookies_parsing_int32_overflow (void) ++{ ++ SoupCookie *cookie = soup_cookie_parse ("Age=1;expires=3Mar9 999:9:9+ 999999999-age=main=gne=", NULL); ++ g_assert_nonnull (cookie); ++ g_assert_null (soup_cookie_get_expires (cookie)); ++ soup_cookie_free (cookie); ++} ++ + static void + do_cookies_equal_nullpath (void) + { +@@ -655,6 +664,7 @@ main (int argc, char **argv) + g_test_add_func ("/cookies/accept-policy-subdomains", do_cookies_subdomain_policy_test); + g_test_add_func ("/cookies/parsing", do_cookies_parsing_test); + g_test_add_func ("/cookies/parsing/no-path-null-origin", do_cookies_parsing_nopath_nullorigin); ++ g_test_add_func ("/cookies/parsing/int32-overflow", do_cookies_parsing_int32_overflow); + g_test_add_func ("/cookies/parsing/equal-nullpath", do_cookies_equal_nullpath); + g_test_add_func ("/cookies/parsing/control-characters", do_cookies_parsing_control_characters); + g_test_add_func ("/cookies/get-cookies/empty-host", do_get_cookies_empty_host_test); +-- +2.34.1 + diff --git a/meta/recipes-support/libsoup/libsoup_3.4.4.bb b/meta/recipes-support/libsoup/libsoup_3.4.4.bb index 37319f007f..f64d0d6745 100644 --- a/meta/recipes-support/libsoup/libsoup_3.4.4.bb +++ b/meta/recipes-support/libsoup/libsoup_3.4.4.bb @@ -44,6 +44,7 @@ SRC_URI = "${GNOME_MIRROR}/libsoup/${SHRT_VER}/libsoup-${PV}.tar.xz \ file://CVE-2025-46421.patch \ file://CVE-2025-4948.patch \ file://CVE-2025-2784.patch \ + file://CVE-2025-4945.patch \ " SRC_URI[sha256sum] = "291c67725f36ed90ea43efff25064b69c5a2d1981488477c05c481a3b4b0c5aa" From patchwork Wed Jul 9 02:51:18 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66463 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 53573C83F10 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.web10.5571.1752029502725602895 for ; Tue, 08 Jul 2025 19:51:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=ComOdXkg; spf=softfail (domain: sakoman.com, ip: 209.85.214.179, mailfrom: steve@sakoman.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-23aeac7d77aso46007365ad.3 for ; Tue, 08 Jul 2025 19:51:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029502; x=1752634302; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=j/8z0lQNhANEV07f5Mr95fpF75Hy8azbo0F1u4bdfzM=; b=ComOdXkgkmJnZB3cGitINZOG6R1CeRkHToBgOsuLdYZYcFFEkxV3sMaqysthOWT366 MsDs2WTz+YIhBOsrxHdE4Ze8iua4Ljtzdpjs0ZYCHBrmVj7V+JHiICwrwd0MpGjrtxpp MbAyl883dLTUu74uSbmZg5JYUICwFpmmiTyVF7qryn6YeTrphHORNE7GBxZh8Tv7tL+H x/hEdkDAl4pPuzvvtzPI+j5aHDQoFOWpgViCw1+w2Iahi6QbUd6kyVBMYsOiFR2mQRzV OtB6WPRz4xi2JcNlS2mK8x06ghU8jbhWZ3vE9h3zJ/bcOIJbsSfwXKrGDdZkexA5pllH ewCg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029502; x=1752634302; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=j/8z0lQNhANEV07f5Mr95fpF75Hy8azbo0F1u4bdfzM=; b=wUNUelh41Ss3xJV3wY3TBbYqWpWNWyTmzREnAHhdO5kriXZGMaT3epQTChnCUn+1IF aj4t2fvE+om0GE5+cRcbJPGHh8G6nrw1qZT2EJDIluQU1bFZNoeqxdymwN//ST4YxlTe pIffp45ZEzrmLaVuvAN5YgFWgvJG9YWQ/0tX1IbMZk4Xh/xzc9gzTkWe622n82uKjXU8 fhbIOMk3xZGkQJMy5nBWYRL3EsxqcFMFaTm9pBc8U2ZJU912f1T3yVqpxnvRXOlPXsn/ yhrn/mIZSlcVy8tPnzEBKh4bnSbF4E1PsOG1ce9vE0nKDooSe59HG7NtoTm0abvYnjU1 I88Q== X-Gm-Message-State: AOJu0Yxb28bgodO6uif9/8nSz/LoVudoiXV9ETXqJmSwIWzg/TNKxRwO y8+6IUmddhDO6eA0nK81cg1P4sNnngjfDTuMxnUaR+o2wT8o8u/KUqLkRCC0nz2EYkgB6fn8Os6 g9ga4 X-Gm-Gg: ASbGnctChBKB/bA9aMDjFsQea6jqPgRAaSYAwWRWqC/WbgXDmYehVrBfYCKwdUq/qe8 L4+JvWZ2Ary65nbwgrWtSen4hc9n5w+hfVYJqShogD6JQ3K20rAMqWZuwaPE+zzBcrJwY5ICG6z +lPr2WBjIjfzfO8f5cbxsS5wSu5PgIIxZHTkDwchZTXnOTAlIcxg59AM+/EKCVhUhgSj8VrzvUb F3uz/VAr73Au1NUus5TV0L321IDpYo1SwmCyxNsgqtJUkcmWAYR9G3UMU+4sk7pn9/jYyKLedtl V1anLI/0VwMNAVj5fD8SZ4Ri/XJCj4/iJT1cKC/gqGq1mqWc9Zu4mw== X-Google-Smtp-Source: AGHT+IFN2jpHd6E0YoQyq45ARfm7jcr0pdCZYLodVyQkS4q9U+RsJVKRcijOUcRjUUZpmEDS4gRCHw== X-Received: by 2002:a17:903:b8c:b0:235:f3b0:ae81 with SMTP id d9443c01a7336-23ddb2e6362mr13164155ad.27.1752029501838; Tue, 08 Jul 2025 19:51:41 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:41 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 07/12] sudo: Fix CVE-2025-32462 Date: Tue, 8 Jul 2025 19:51:18 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220064 From: Vijay Anusuri Upstream-Status: Backport from https://github.com/sudo-project/sudo/commit/d530367828e3713d09489872743eb92d31fb11ff Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../sudo/files/CVE-2025-32462.patch | 42 +++++++++++++++++++ meta/recipes-extended/sudo/sudo_1.9.15p5.bb | 1 + 2 files changed, 43 insertions(+) create mode 100644 meta/recipes-extended/sudo/files/CVE-2025-32462.patch diff --git a/meta/recipes-extended/sudo/files/CVE-2025-32462.patch b/meta/recipes-extended/sudo/files/CVE-2025-32462.patch new file mode 100644 index 0000000000..04610d40fd --- /dev/null +++ b/meta/recipes-extended/sudo/files/CVE-2025-32462.patch @@ -0,0 +1,42 @@ +From d530367828e3713d09489872743eb92d31fb11ff Mon Sep 17 00:00:00 2001 +From: "Todd C. Miller" +Date: Tue, 1 Apr 2025 09:24:51 -0600 +Subject: [PATCH] Only allow a remote host to be specified when listing + privileges. + +This fixes a bug where a user with sudoers privileges on a different +host could execute a command on the local host, even if the sudoers +file would not otherwise allow this. CVE-2025-32462 + +Reported by Rich Mirch @ Stratascale Cyber Research Unit (CRU). + +Upstream-Status: Backport [https://github.com/sudo-project/sudo/commit/d530367828e3713d09489872743eb92d31fb11ff] +CVE: CVE-2025-32462 +Signed-off-by: Vijay Anusuri +--- + plugins/sudoers/sudoers.c | 12 ++++++++++++ + 1 file changed, 12 insertions(+) + +diff --git a/plugins/sudoers/sudoers.c b/plugins/sudoers/sudoers.c +index 70a0c1a528..ad2fa2f61c 100644 +--- a/plugins/sudoers/sudoers.c ++++ b/plugins/sudoers/sudoers.c +@@ -350,6 +350,18 @@ sudoers_check_common(struct sudoers_context *ctx, int pwflag) + time_t now; + debug_decl(sudoers_check_common, SUDOERS_DEBUG_PLUGIN); + ++ /* The user may only specify a host for "sudo -l". */ ++ if (!ISSET(ctx->mode, MODE_LIST|MODE_CHECK)) { ++ if (strcmp(ctx->runas.host, ctx->user.host) != 0) { ++ log_warningx(ctx, SLOG_NO_STDERR|SLOG_AUDIT, ++ N_("user not allowed to set remote host for command")); ++ sudo_warnx("%s", ++ U_("a remote host may only be specified when listing privileges.")); ++ ret = false; ++ goto done; ++ } ++ } ++ + /* If given the -P option, set the "preserve_groups" flag. */ + if (ISSET(ctx->mode, MODE_PRESERVE_GROUPS)) + def_preserve_groups = true; diff --git a/meta/recipes-extended/sudo/sudo_1.9.15p5.bb b/meta/recipes-extended/sudo/sudo_1.9.15p5.bb index 8e542015ad..30860eb75e 100644 --- a/meta/recipes-extended/sudo/sudo_1.9.15p5.bb +++ b/meta/recipes-extended/sudo/sudo_1.9.15p5.bb @@ -3,6 +3,7 @@ require sudo.inc SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \ ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \ file://0001-sudo.conf.in-fix-conflict-with-multilib.patch \ + file://CVE-2025-32462.patch \ " PAM_SRC_URI = "file://sudo.pam" From patchwork Wed Jul 9 02:51:19 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66466 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 582F7C8303C for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web10.5572.1752029504392656975 for ; Tue, 08 Jul 2025 19:51:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=hGnAeZGf; spf=softfail (domain: sakoman.com, ip: 209.85.214.172, mailfrom: steve@sakoman.com) Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-236377f00a1so46490785ad.3 for ; Tue, 08 Jul 2025 19:51:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029504; x=1752634304; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=DLfySM3wJyXl41L97fvO9hJow3IFh6MgYF0ZdZfhKjw=; b=hGnAeZGf88DTRHqARenOpFGmd6vUjBSHSL7aazvnLxdTZaM/I7cRIgLkoVb9/Oubxb nlZZa+HZtmsTQNFmL0+QWwPpwz2pXgmGGytR32BFOOlGni3uI2X8xRa2GGpkr7mgNeB7 tEHstxVEwHJ1s9UAqD+g2I8Bt+7n1SodjyOI4OFaA7DBDVF03DVEbSckl5bTCyc6ANuL 372ZRqNa77P7F50HSUs0wz9ynBOfiqqEW/BtaZOyBfycLlyetGFXqHj88XUFzK7EMWr1 MQyAgbQs1azitbyTouqDrGW4tfeBEyNpdgpGxphFAoyB0JpC0ylVSguSbg3AafQxjkqv ot6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029504; x=1752634304; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=DLfySM3wJyXl41L97fvO9hJow3IFh6MgYF0ZdZfhKjw=; b=j0VXRUvigFk0PgVO/Spg82jZfnOEgHp8Q5Nn0g0yd+fqyoh7KyouYFDGEF+IIA25Iz bQGM6aAfTezmM16v74mR/tHCKYLro+v0Ws70vHsWkT29uI+yXEyqrdDB7k1XhdRKNhuR 5fr1cC1gYQ4YEBJZDvhgO4Gxtihw3se+COEahqFvAAqUMuG5A5wh/pTkinLrSHO3ZvJM l0uso7tiCNk6HG9e9r6+GdMTZHCRTdKRZPvNt/hUJMEkGSl8NYqzpWatNDaiD/57Iyeo uVDjbSqFjvyayKfg2hH0ij1LUmIgJ08ObZ57VJwFxTXohQ+TiWDoZfxssHz9sv54PEht ZYhA== X-Gm-Message-State: AOJu0Yxm0exUiP6l/0/rrMe2MXlAhI1KruEUgQ8luPNYxLybBS8zr7oP +EeWfDwgck35cY1loLFfQqBTT+gsKIdEh2YZzAwLIt6/gtr3zgSuwd0RS1juyDcXjHykMYfMSNE GdezF X-Gm-Gg: ASbGncvF6k5zNwuJwuTXph4rCbD1NUsmFAC/DCKESCYjT4pF07KLptdnK+bfW+CAwKQ DzD3325B3iuLHg8MnjoK5wTDulrXgWCckFdbQJVwAaJ05mPYIaxQ5aDE0wfxfu5kcFQgc6I3htb TXpy8T64AgQ1cuL6SnlowIZn9nbyskLvDCzhQGsNPpmsiiFGOkEsGZxm9GqTZMqDDzvtN3RvCIt jqIQOR2Db+/5mNpX0fF8Y1aHEymwyqgzsXj1iDoj0bCP1vKE3FQ2YI0NAW4SVUMv3zmcQVPgVfl qU4DJt+6qgLnGKxQ8aYhef7tfVTKqZWZXrgITBkSOai0Nsr12BXD7A== X-Google-Smtp-Source: AGHT+IHZbeLEIya/4LH/AunzOHoQudujE8ZCj9LtEUkR1yJlsCWfsW90yhiuEhWEyg6ekch4b2ed3A== X-Received: by 2002:a17:903:124a:b0:234:a139:11fb with SMTP id d9443c01a7336-23ddb312533mr14211385ad.27.1752029503531; Tue, 08 Jul 2025 19:51:43 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.42 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:43 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 08/12] python3-urllib3: fix CVE-2025-50181 Date: Tue, 8 Jul 2025 19:51:19 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220065 From: Yogita Urade urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-50181 Upstream patch: https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857 Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman --- .../python3-urllib3/CVE-2025-50181.patch | 283 ++++++++++++++++++ .../python/python3-urllib3_2.2.2.bb | 4 + 2 files changed, 287 insertions(+) create mode 100644 meta/recipes-devtools/python/python3-urllib3/CVE-2025-50181.patch diff --git a/meta/recipes-devtools/python/python3-urllib3/CVE-2025-50181.patch b/meta/recipes-devtools/python/python3-urllib3/CVE-2025-50181.patch new file mode 100644 index 0000000000..d4f6e98cc1 --- /dev/null +++ b/meta/recipes-devtools/python/python3-urllib3/CVE-2025-50181.patch @@ -0,0 +1,283 @@ +From f05b1329126d5be6de501f9d1e3e36738bc08857 Mon Sep 17 00:00:00 2001 +From: Illia Volochii +Date: Wed, 18 Jun 2025 16:25:01 +0300 +Subject: [PATCH] Merge commit from fork + +* Apply Quentin's suggestion + +Co-authored-by: Quentin Pradet + +* Add tests for disabled redirects in the pool manager + +* Add a possible fix for the issue with not raised `MaxRetryError` + +* Make urllib3 handle redirects instead of JS when JSPI is used + +* Fix info in the new comment + +* State that redirects with XHR are not controlled by urllib3 + +* Remove excessive params from new test requests + +* Add tests reaching max non-0 redirects + +* Test redirects with Emscripten + +* Fix `test_merge_pool_kwargs` + +* Add a changelog entry + +* Parametrize tests + +* Drop a fix for Emscripten + +* Apply Seth's suggestion to docs + +Co-authored-by: Seth Michael Larson + +* Use a minor release instead of the patch one + +--------- + +Co-authored-by: Quentin Pradet +Co-authored-by: Seth Michael Larson + +CVE: CVE-2025-50181 +Upstream-Status: Backport [https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857] + +Signed-off-by: Yogita Urade +--- + docs/reference/contrib/emscripten.rst | 2 +- + dummyserver/app.py | 1 + + src/urllib3/poolmanager.py | 18 +++- + test/contrib/emscripten/test_emscripten.py | 16 ++++ + test/test_poolmanager.py | 5 +- + test/with_dummyserver/test_poolmanager.py | 101 +++++++++++++++++++++ + 6 files changed, 139 insertions(+), 4 deletions(-) + +diff --git a/docs/reference/contrib/emscripten.rst b/docs/reference/contrib/emscripten.rst +index 9e85629..c88e422 100644 +--- a/docs/reference/contrib/emscripten.rst ++++ b/docs/reference/contrib/emscripten.rst +@@ -68,7 +68,7 @@ Features which are usable with Emscripten support are: + * Timeouts + * Retries + * Streaming (with Web Workers and Cross-Origin Isolation) +-* Redirects ++* Redirects (determined by browser/runtime, not restrictable with urllib3) + * Decompressing response bodies + + Features which don't work with Emscripten: +diff --git a/dummyserver/app.py b/dummyserver/app.py +index 9fc9d1b..96e0dab 100644 +--- a/dummyserver/app.py ++++ b/dummyserver/app.py +@@ -228,6 +228,7 @@ async def encodingrequest() -> ResponseReturnValue: + + + @hypercorn_app.route("/redirect", methods=["GET", "POST", "PUT"]) ++@pyodide_testing_app.route("/redirect", methods=["GET", "POST", "PUT"]) + async def redirect() -> ResponseReturnValue: + "Perform a redirect to ``target``" + values = await request.values +diff --git a/src/urllib3/poolmanager.py b/src/urllib3/poolmanager.py +index 085d1db..5763fea 100644 +--- a/src/urllib3/poolmanager.py ++++ b/src/urllib3/poolmanager.py +@@ -203,6 +203,22 @@ class PoolManager(RequestMethods): + **connection_pool_kw: typing.Any, + ) -> None: + super().__init__(headers) ++ if "retries" in connection_pool_kw: ++ retries = connection_pool_kw["retries"] ++ if not isinstance(retries, Retry): ++ # When Retry is initialized, raise_on_redirect is based ++ # on a redirect boolean value. ++ # But requests made via a pool manager always set ++ # redirect to False, and raise_on_redirect always ends ++ # up being False consequently. ++ # Here we fix the issue by setting raise_on_redirect to ++ # a value needed by the pool manager without considering ++ # the redirect boolean. ++ raise_on_redirect = retries is not False ++ retries = Retry.from_int(retries, redirect=False) ++ retries.raise_on_redirect = raise_on_redirect ++ connection_pool_kw = connection_pool_kw.copy() ++ connection_pool_kw["retries"] = retries + self.connection_pool_kw = connection_pool_kw + + self.pools: RecentlyUsedContainer[PoolKey, HTTPConnectionPool] +@@ -456,7 +472,7 @@ class PoolManager(RequestMethods): + kw["body"] = None + kw["headers"] = HTTPHeaderDict(kw["headers"])._prepare_for_method_change() + +- retries = kw.get("retries") ++ retries = kw.get("retries", response.retries) + if not isinstance(retries, Retry): + retries = Retry.from_int(retries, redirect=redirect) + +diff --git a/test/contrib/emscripten/test_emscripten.py b/test/contrib/emscripten/test_emscripten.py +index 17264d8..0e107fa 100644 +--- a/test/contrib/emscripten/test_emscripten.py ++++ b/test/contrib/emscripten/test_emscripten.py +@@ -949,6 +949,22 @@ def test_retries( + pyodide_test(selenium_coverage, testserver_http.http_host, find_unused_port()) + + ++def test_redirects( ++ selenium_coverage: typing.Any, testserver_http: PyodideServerInfo ++) -> None: ++ @run_in_pyodide # type: ignore[misc] ++ def pyodide_test(selenium_coverage: typing.Any, host: str, port: int) -> None: ++ from urllib3 import request ++ ++ redirect_url = f"http://{host}:{port}/redirect" ++ response = request("GET", redirect_url) ++ assert response.status == 200 ++ ++ pyodide_test( ++ selenium_coverage, testserver_http.http_host, testserver_http.http_port ++ ) ++ ++ + @install_urllib3_wheel() + def test_insecure_requests_warning( + selenium_coverage: typing.Any, testserver_http: PyodideServerInfo +diff --git a/test/test_poolmanager.py b/test/test_poolmanager.py +index ab5f203..b481a19 100644 +--- a/test/test_poolmanager.py ++++ b/test/test_poolmanager.py +@@ -379,9 +379,10 @@ class TestPoolManager: + + def test_merge_pool_kwargs(self) -> None: + """Assert _merge_pool_kwargs works in the happy case""" +- p = PoolManager(retries=100) ++ retries = retry.Retry(total=100) ++ p = PoolManager(retries=retries) + merged = p._merge_pool_kwargs({"new_key": "value"}) +- assert {"retries": 100, "new_key": "value"} == merged ++ assert {"retries": retries, "new_key": "value"} == merged + + def test_merge_pool_kwargs_none(self) -> None: + """Assert false-y values to _merge_pool_kwargs result in defaults""" +diff --git a/test/with_dummyserver/test_poolmanager.py b/test/with_dummyserver/test_poolmanager.py +index af77241..7f163ab 100644 +--- a/test/with_dummyserver/test_poolmanager.py ++++ b/test/with_dummyserver/test_poolmanager.py +@@ -84,6 +84,89 @@ class TestPoolManager(HypercornDummyServerTestCase): + assert r.status == 200 + assert r.data == b"Dummy server!" + ++ @pytest.mark.parametrize( ++ "retries", ++ (0, Retry(total=0), Retry(redirect=0), Retry(total=0, redirect=0)), ++ ) ++ def test_redirects_disabled_for_pool_manager_with_0( ++ self, retries: typing.Literal[0] | Retry ++ ) -> None: ++ """ ++ Check handling redirects when retries is set to 0 on the pool ++ manager. ++ """ ++ with PoolManager(retries=retries) as http: ++ with pytest.raises(MaxRetryError): ++ http.request("GET", f"{self.base_url}/redirect") ++ ++ # Setting redirect=True should not change the behavior. ++ with pytest.raises(MaxRetryError): ++ http.request("GET", f"{self.base_url}/redirect", redirect=True) ++ ++ # Setting redirect=False should not make it follow the redirect, ++ # but MaxRetryError should not be raised. ++ response = http.request("GET", f"{self.base_url}/redirect", redirect=False) ++ assert response.status == 303 ++ ++ @pytest.mark.parametrize( ++ "retries", ++ ( ++ False, ++ Retry(total=False), ++ Retry(redirect=False), ++ Retry(total=False, redirect=False), ++ ), ++ ) ++ def test_redirects_disabled_for_pool_manager_with_false( ++ self, retries: typing.Literal[False] | Retry ++ ) -> None: ++ """ ++ Check that setting retries set to False on the pool manager disables ++ raising MaxRetryError and redirect=True does not change the ++ behavior. ++ """ ++ with PoolManager(retries=retries) as http: ++ response = http.request("GET", f"{self.base_url}/redirect") ++ assert response.status == 303 ++ ++ response = http.request("GET", f"{self.base_url}/redirect", redirect=True) ++ assert response.status == 303 ++ ++ response = http.request("GET", f"{self.base_url}/redirect", redirect=False) ++ assert response.status == 303 ++ ++ def test_redirects_disabled_for_individual_request(self) -> None: ++ """ ++ Check handling redirects when they are meant to be disabled ++ on the request level. ++ """ ++ with PoolManager() as http: ++ # Check when redirect is not passed. ++ with pytest.raises(MaxRetryError): ++ http.request("GET", f"{self.base_url}/redirect", retries=0) ++ response = http.request("GET", f"{self.base_url}/redirect", retries=False) ++ assert response.status == 303 ++ ++ # Check when redirect=True. ++ with pytest.raises(MaxRetryError): ++ http.request( ++ "GET", f"{self.base_url}/redirect", retries=0, redirect=True ++ ) ++ response = http.request( ++ "GET", f"{self.base_url}/redirect", retries=False, redirect=True ++ ) ++ assert response.status == 303 ++ ++ # Check when redirect=False. ++ response = http.request( ++ "GET", f"{self.base_url}/redirect", retries=0, redirect=False ++ ) ++ assert response.status == 303 ++ response = http.request( ++ "GET", f"{self.base_url}/redirect", retries=False, redirect=False ++ ) ++ assert response.status == 303 ++ + def test_cross_host_redirect(self) -> None: + with PoolManager() as http: + cross_host_location = f"{self.base_url_alt}/echo?a=b" +@@ -138,6 +221,24 @@ class TestPoolManager(HypercornDummyServerTestCase): + pool = http.connection_from_host(self.host, self.port) + assert pool.num_connections == 1 + ++ # Check when retries are configured for the pool manager. ++ with PoolManager(retries=1) as http: ++ with pytest.raises(MaxRetryError): ++ http.request( ++ "GET", ++ f"{self.base_url}/redirect", ++ fields={"target": f"/redirect?target={self.base_url}/"}, ++ ) ++ ++ # Here we allow more retries for the request. ++ response = http.request( ++ "GET", ++ f"{self.base_url}/redirect", ++ fields={"target": f"/redirect?target={self.base_url}/"}, ++ retries=2, ++ ) ++ assert response.status == 200 ++ + def test_redirect_cross_host_remove_headers(self) -> None: + with PoolManager() as http: + r = http.request( +-- +2.40.0 diff --git a/meta/recipes-devtools/python/python3-urllib3_2.2.2.bb b/meta/recipes-devtools/python/python3-urllib3_2.2.2.bb index 31a03a60b3..bdb1c7ca8d 100644 --- a/meta/recipes-devtools/python/python3-urllib3_2.2.2.bb +++ b/meta/recipes-devtools/python/python3-urllib3_2.2.2.bb @@ -7,6 +7,10 @@ SRC_URI[sha256sum] = "dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f inherit pypi python_hatchling +SRC_URI += " \ + file://CVE-2025-50181.patch \ +" + RDEPENDS:${PN} += "\ python3-certifi \ python3-cryptography \ From patchwork Wed Jul 9 02:51:20 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66469 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 649F2C83F12 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.web11.5627.1752029507056822084 for ; Tue, 08 Jul 2025 19:51:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Lps7yBI5; spf=softfail (domain: sakoman.com, ip: 209.85.214.179, mailfrom: steve@sakoman.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2350fc2591dso5095845ad.1 for ; Tue, 08 Jul 2025 19:51:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029506; x=1752634306; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=zAgb5NoCJaoy8pEOOshfuJ/tVZSnv0esPLtzeF+pZrA=; b=Lps7yBI5TguD3TlStYdBrA+LtAkaprKJ90/7mcM3jUKXUhtbFEz0TnLesE/7WGoXzh NQJQH2G/x3SG5f40wfVYCcaoWm7Sjf9ZMFnjNPHRJ1zrM59cW619D2eg02gwKcwcraEK yaxLOWsD+w3oP7opgVYoiXokkdBHg5t0BI3Dromnzw2+u0M6+rAy/PemcaXo9zSz2i7B jBqNiwFOVN5ThJ/fUWjDhvzGqdqYuattkgZ91Bh40IeMsxAv96prvARuNnjMoMljoyQG H7bwV1vEoGxyzN6q4Y7K4VFd+knBOPf2HyUXN3uLwbTSW7NjvU6KLkpEnkTNM2LmABLY 4u7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029506; x=1752634306; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=zAgb5NoCJaoy8pEOOshfuJ/tVZSnv0esPLtzeF+pZrA=; b=pBu+VqmuI4xvLvosF4E2fBOvK9eIDknQ4pm+zVrwc0q31fQvrQKQbah+NuW16Mivdu HN9RCcbncsgQrDpPzCXPbFZXSUYUFSr7/K5JNmvu97qKXIaZhb4Bd/ySYf1pRfbnW2VU NlebzPaU6jlaVmmHwzZSHEwJkHj+Z/MiNn2zQOUJQYV/8u1w1yeFkBS9X3YjJlik0wwV w8AV6E1l9p/Z7NFUWkRQS7rZTiBQnoWej1ri0iwC2t0LAX9d97iXcIe5b1oCm9Q0zwH6 x39+MTchDpWrvnm6TPAPDrpIR2mUow7hog290fiOrYp0G4h2s96wvBaV0W0nzS4nhivm wsvg== X-Gm-Message-State: AOJu0Yx/NB7Itdux/bPkxJBpFT+uKVFmTcxMKpj1yt4exrdy3RPvbF6y q3N0ZQ4PZZlW5XiCUrFcj4N2S105fZtccxUDlUubcZ3+HKhFIVa6q/WDKMrWNcNrRw8BXCnmvza 8WlUA X-Gm-Gg: ASbGnctPycJor3c4Od3YMH3ENsHkiHmgYlpcIPDzSOdhUW5tpxkGpXOCnJdeFLfcczS 4nCQRSR6VDHFWMZzF3fPjyA8ft52ItUqIUZZv6JNUSLpQLwEa/0ZmMOsJHQYb1vt6ssBiY5HA7x KA7HoLho9KwwtNH5+fHzthWwTXusXDFPxrHzb0rZMIsklh4gACZZEVuAWUj2lCooT4SS/9NIhg4 OsdwIHKQZGwF63pz0uv3XFUueFBHa+H6zUQvX/lhucMMahntC0MTSLgucMboUBwYmqgj7fe594H oJcBD5Xs/k2GKfO4gS3pV9TQTZ0FvJa7w0HiJNpWaWCDEBPnDFHj7A== X-Google-Smtp-Source: AGHT+IEbnu2mUpaOKjXK0qZkv704K/wDiVx6lfKisqhCM0PzE3NkCvM37xaZYqkUacTPXM8JNh/tZw== X-Received: by 2002:a17:902:ef47:b0:236:15b7:62e3 with SMTP id d9443c01a7336-23ddb586dbdmr10588555ad.9.1752029505528; Tue, 08 Jul 2025 19:51:45 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.44 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:45 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 09/12] linux-yocto/6.6: update to v6.6.93 Date: Tue, 8 Jul 2025 19:51:20 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220066 From: Bruce Ashfield Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: c2603c511feb4 Linux 6.6.93 c78abb646ff82 ksmbd: use list_first_entry_or_null for opinfo_get_list() 106451492d74c net: ethernet: ti: am65-cpsw: Lower random mac address error print to info 513b27dbd126b platform/x86: thinkpad_acpi: Ignore battery threshold change event notification 871e44494f5d5 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys af7243148f2eb NFS: Avoid flushing data while holding directory locks in nfs_rename() f83097445b7ec nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro e99de95033051 spi: spi-sun4i: fix early activation b8435b76971dc phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure eae121397e278 drm/amd/display: fix link_set_dpms_off multi-display MST corner case 4728d56dc56f0 um: let 'make clean' properly clean underlying SUBARCH as well af288d8e14058 platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS 764f8cd8aadcd nfs: don't share pNFS DS connections between net namespaces 98f7c351a11a1 HID: quirks: Add ADATA XPG alpha wireless mouse support 46a6ce4812555 dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open cdb61a705f5f3 coredump: hand a pidfd to the usermode coredump helper 1846a7b92b863 coredump: fix error handling for replace_fd() 0ec1e98bf5366 perf/arm-cmn: Initialise cmn->cpu earlier 10778e2f49a2c perf/arm-cmn: Fix REQ2/SNP2 mixup 295f7c579b07b net_sched: hfsc: Address reentrant enqueue adding class to eltree twice ee1209b9f57ba arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy cf27046208bd8 arm64: dts: qcom: sm8550: Add missing properties for cryptobam feadf31790331 arm64: dts: qcom: sm8450: Add missing properties for cryptobam 5dd982ff67d1e arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node abf3ffaeef603 arm64: dts: qcom: ipq9574: Add missing properties for cryptobam ea61eda1f4b45 af_unix: Fix uninit-value in __unix_walk_scc() ed14f8ae9bcf7 af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS c0c8d419dade9 af_unix: Add dead flag to struct scm_fp_list. a288920ff9dab af_unix: Don't access successor in unix_del_edges() during GC. 3600729b7fc05 af_unix: Try not to hold unix_gc_lock during accept(). 7b1ffbd3b22e7 af_unix: Remove lock dance in unix_peek_fds(). de7921631ff32 af_unix: Replace garbage collection algorithm. 2c2d0c662d842 af_unix: Detect dead SCC. 324005012f65e af_unix: Assign a unique index to SCC. d23802221f675 af_unix: Avoid Tarjan's algorithm if unnecessary. cdaa3499a8519 af_unix: Skip GC if no cycle exists. e0e23fc499920 af_unix: Save O(n) setup of Tarjan's algo. 27a07364cefdf af_unix: Fix up unix_edge.successor for embryo socket. 36f924e4bf4e7 af_unix: Save listener for embryo socket. 3ee9b24bd6f70 af_unix: Detect Strongly Connected Components. 856aacbe2c520 af_unix: Iterate all vertices by DFS. 494accabb56e2 af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. d2d9f382e2db6 af_unix: Link struct unix_edge when queuing skb. 4fc7df1c6da14 af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. 9e98ba0c73529 af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. 8eb55b667a0e2 af_unix: Remove CONFIG_UNIX_SCM. c0d56c028d90f af_unix: Remove io_uring code for GC. 36f1f6ac53889 af_unix: Replace BUG_ON() with WARN_ON_ONCE(). acc97866c1eae af_unix: Try to run GC async. 328840c93bd6a af_unix: Run GC on only one CPU. 4be073d59068e af_unix: Return struct unix_sock from unix_get_socket(). c7b1bd52a031a btrfs: check folio mapping after unlock in relocate_one_folio() 63815bef47ec2 hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING 5a9c0d5cbd02d can: kvaser_pciefd: Force IRQ edge in case of nested IRQ f968f28cd14bb drm/gem: Internally test import_attach for imported objects 10aecdc1c30c7 x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers 367b8b91de2a0 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() 1f9170737480d pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() 4a5e6e798ec77 watchdog: aspeed: fix 64-bit division a9e4ee7f12886 serial: sh-sci: Save and restore more registers 517f928cc0c13 pds_core: Prevent possible adminq overflow/stuck condition 77192e9cfe1b3 highmem: add folio_test_partial_kmap() bc133e43cb565 x86/boot: Compile boot code with -std=gnu11 too 5cdce62dd929a spi: spi-fsl-dspi: Reset SR flags before sending a new message 7cf42e5f406a5 spi: spi-fsl-dspi: Halt the module after a new message transfer 9df00bd4769a0 spi: spi-fsl-dspi: restrict register range for regmap access 0e7efc9acbb56 ksmbd: fix stream write failure fa68d5c14a70d Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" f391043332e38 mm/page_alloc.c: avoid infinite retries caused by cpuset race 363fd868d7a71 memcg: always call cond_resched() after fn() f33001a7c1e8f Input: xpad - add more controllers ed7d24b0c375f Revert "drm/amd: Keep display off while going into S4" bee465c0c464b smb: client: Reset all search buffer pointers when releasing buffer 17d096c485b89 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs 73cadde98f67f smb: client: Fix use-after-free in cifs_fill_dirent 7227fc0692d53 drm/edid: fixed the bug that hdr metadata was not reset 7093887a11fe4 thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature f86465626917d platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() dde5400dad7e7 can: kvaser_pciefd: Continue parsing DMA buf after dropped RX 4cfe30f681a3d llc: fix data loss when reading from a socket in llc_ui_recvmsg() 6764329675f94 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 74d90875f3d43 ALSA: pcm: Fix race of buffer access at PCM OSS layer b5bada85c181f ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction 1beb8c26b1fb1 ASoc: SOF: topology: connect DAI to a single DAI link e8be784d30b44 ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext 1f912f8484e9c can: bcm: add missing rcu read protection for procfs content 76c84c3728178 can: bcm: add locking for bcm_op runtime updates e80f4f9c64b0f can: slcan: allow reception of short error messages 584a729615fa9 padata: do not leak refcount in reorder_work 134daaba93193 crypto: algif_hash - fix double free in hash_accept 0c605de7edd68 clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() 35016086ae593 octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG cc797adde644d octeontx2-af: Set LMT_ENA bit for APR table entries b19fc1d0be3c3 net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done a3d24e4a835cb octeontx2-pf: Add AF_XDP non-zero copy support 93c276942e75d sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() c844ace5b88d0 io_uring: fix overflow resched cqe reordering dbcd0909a1e2c net: lan743x: Restore SGMII CTRL register on resume 0b4cde7284869 net: dwmac-sun8i: Use parsed internal PHY address instead of 1 52b2e5579266f pinctrl: qcom: switch to devm_register_sys_off_handler() 78b70388ca0ec pinctrl: qcom/msm: Convert to platform remove callback returning void df941e11772b3 ice: Fix LACP bonds without SRIOV environment c8a1a805e6d27 ice: fix vf->num_mac count with port representors fa942824b9f4a bridge: netfilter: Fix forwarding of fragmented packets feb6bde1a3241 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling c331a616a0b10 Bluetooth: L2CAP: Fix not checking l2cap_chan security level 2b82d8e483bf0 dmaengine: fsl-edma: Fix return code for unhandled interrupts 55f3c97fcba84 dmaengine: idxd: Fix ->poll() return value dcdc1aca6880d xfrm: Sanitize marks before insert a1fad2da94f00 clk: sunxi-ng: d1: Add missing divider for MMC mod clocks c2b52d947c3dd remoteproc: qcom_wcnss: Fix on platforms without fallback regulators 5ff1a234fa4ee kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() 1b388afe88163 dmaengine: idxd: Fix allowing write() from different address spaces 05298c30b7d9f dmaengine: idxd: add wq driver name support for accel-config user tool b58a295d10065 espintcp: remove encap socket caching to avoid reference leak 3cf3d4f11254e soundwire: bus: Fix race on the creation of the IRQ domain d8ece4ced3b05 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock e6d703b693b4c xenbus: Allow PVH dom0 a non-local xenstore 85d12487d90ab wifi: iwlwifi: add support for Killer on MTL 4e3401aa6e447 tools: ynl-gen: validate 0 len strings from kernel 50d0de59f66cb btrfs: avoid NULL pointer dereference if no valid csum tree 7a97f961a568a btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref 225cc549ed23f cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function fc460c12cd1e9 cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() b72952c8c3668 io_uring/fdinfo: annotate racy sq/cq head/tail reads 3a982ada411b8 nvmet-tcp: don't restore null sk_state_change a7a2315d8d0dc nvme-pci: add quirks for WDC Blue SN550 15b7:5009 0a3f5efd1c545 nvme-pci: add quirks for device 126f:1001 1c0d7792cfc71 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx dbb47cbdbe2ad ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 4c017ff3d73dd ASoC: cs42l43: Disable headphone clamps during type detection 0ab50f622f202 pinctrl: meson: define the pull up/down resistor value as 60 kOhm 534794c719231 book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n 442a247361f8b ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() fe4a7145f048c drm: Add valid clones check 1c58b332bc435 drm/panel-edp: Add Starry 116KHD024006 e585f4f44a102 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset 5d4951bad74bf drm: bridge: adv7511: fill stream capabilities a7e7cf538939d wifi: ath12k: Fix end offset bit definition in monitor ring descriptor 2dbcaddcf8eab wifi: ath9k: return by of_get_mac_address a21971b4be60f accel/qaic: Mask out SR-IOV PCI resources fbdf410d3bd2e wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override b658e144a0922 regulator: ad5398: Add device tree support df76df11fd8be spi: zynqmp-gqspi: Always acknowledge interrupts ccf4a818d8c31 wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet 5e479af4999b0 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate ee71c34d4f415 wifi: rtl8xxxu: retry firmware download on error 419988f4d0efb perf/amd/ibs: Fix ->config to sample period calculation for OP PMU 0cb6a1292aaef perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt 9610a67963506 firmware: arm_scmi: Relax duplicate name constraint across protocol ids 38d906f1c54b9 bpftool: Fix readlink usage in get_fd_type 0e8eb91a4950f drm/ast: Find VBIOS mode from regular display size e190ed2c12e77 ASoC: rt722-sdca: Add some missing readable registers 48c78cf634dba ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode 123ac614e5b34 arm64: zynqmp: add clock-output-names property in clock nodes 23b0b86ad1db2 HID: usbkbd: Fix the bit shift number for LED_KANA c317b0694a6eb wifi: ath12k: Avoid napi_sync() before napi_enable() 32bcf54138acf scsi: st: Restore some drive settings after reset 1960bb56a9c83 scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails 3dfeee957aaf3 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine c34ab75adde53 net/mana: fix warning in the writer of client oob 1d10624a42437 ice: count combined queues using Rx/Tx count 948664b92e571 perf: Avoid the read if the count is already updated f47d605c5e2a6 rcu: fix header guard for rcu_all_qs() 9abec90c85b22 rcu: handle unstable rdp in rcu_read_unlock_strict() 4a36d93a01758 rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y cae56998162cc ice: treat dyn_allowed only as suggestion 9ed3c1b11d7ef bridge: mdb: Allow replace of a host-joined group 961ee132104b0 r8169: don't scan PHY addresses > 0 2cb57a887a435 ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only 13cba3f837903 vxlan: Annotate FDB data races 090c0ba179eaf net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled f312bd5cf2067 media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available 6fed5e23d2a92 f2fs: introduce f2fs_base_attr for global sysfs entries 9af429febfedf hwmon: (xgene-hwmon) use appropriate type for the latency value 70e7df6f69073 clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs ba02bb3a01328 wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU 0b660a7f296b5 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU 23fe8aa8cc1a8 ext4: remove writable userspace mappings before truncating page cache 73e7c65b21274 ext4: don't write back data before punch hole in nojournal mode 3648ddabcdc25 leds: trigger: netdev: Configure LED blink interval for HW offload 7ef54a11c199d pstore: Change kmsg_bytes storage size to u32 09c3a82664d8f r8152: add vendor/device ID pair for Dell Alienware AW1022z cc1d408e7c9e2 ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). 22ee8dabec1a2 arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src fa5d374f6bacb powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory 6758d09763f62 net: fec: Refactor MAC reset to function 2caf52c072059 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call bb1f9d63127e8 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() 9ef9ecabc6b55 drm/v3d: Add clock handling 76016797e7f96 net/mlx5e: reduce the max log mpwrq sz for ECPF and reps dce57841d93de net/mlx5e: reduce rep rxq depth to 256 for ECPF 9411c965e4e6a net/mlx5e: set the tx_queue_len for pfifo_fast c31e839649547 net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB 353cd6804ea85 scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() 991970293ff8a drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() 26b6548dc7417 drm/amdgpu: enlarge the VBIOS binary size limit de67e80ab48f1 drm/amd/display: Increase block_sequence array size 16c26a6404454 drm/amd/display: Initial psr_version with correct setting c59c96b850ea6 drm/amd/display: Update CR AUX RD interval interpretation af2d36316a193 drm/amdgpu: reset psp->cmd to NULL after releasing the buffer 6881a3a58852f drm/amd/display: Don't try AUX transactions on disconnected link ab83ed96f7587 drm/amdgpu: Set snoop bit for SDMA for MI series 929cda8e4b75d soundwire: amd: change the soundwire wake enable/disable sequence 6a7b7e98fec0a phy: core: don't require set_mode() callback for phy_get_mode() to work 3bf3eae909914 serial: sh-sci: Update the suspend/resume support e9bed533ec803 sched: Reduce the default slice to avoid tasks getting an extra tick 5024d8e58a080 x86/traps: Cleanup and robustify decode_bug() cc50c7c1a9898 clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate fba6e5d44fb8d clk: qcom: ipq5018: allow it to be bulid on arm32 d655dbd82b555 net/mlx4_core: Avoid impossible mlx4_db_alloc() order value f8a9f45f75ab3 media: v4l: Memset argument to 0 before calling get_mbus_config pad op 0b9d2468c3d88 media: i2c: imx219: Correct the minimum vblanking value 868c3d8cfcff6 kunit: tool: Use qboot on QEMU x86_64 3d6d13540f776 smack: Revert "smackfs: Added check catlen" e30f31434e9c3 smack: recognize ipv4 CIPSO w/o categories de4332d7a5f6f pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map b3d2a8809ef07 ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() 35160eda61e74 ASoC: tas2764: Power up/down amp on mute ops c1045e770256c ASoC: tas2764: Mark SW_RESET as volatile 7ac84ee5eec85 ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG 9dcce3f40d54d ASoC: ops: Enforce platform maximum on initial value 3da8088afd13a firmware: arm_ffa: Reject higher major version as incompatible 3ec539f1e9195 net/mlx5: Apply rate-limiting to high temperature warning 69f453ccb9e47 net/mlx5: Modify LSB bitmask in temperature event to include only the first bit a9b2bb8a4f25b media: test-drivers: vivid: don't call schedule in loop ddddd806ba7de vxlan: Join / leave MC group after remote changes d97c38275d12c ACPI: HED: Always initialize before evged 0d398ed850df9 PCI: Fix old_size lower bound in calculate_iosize() too d8afc25580735 eth: mlx4: don't try to complete XDP frames in netpoll 242272c953e3b bpf: don't do clean_live_states when state->loop_entry->branches > 0 00e59d1495fba can: c_can: Use of_property_present() to test existence of DT property ef7ee9b815345 pmdomain: imx: gpcv2: use proper helper for property detection 7c5e73608302a RDMA/core: Fix best page size finding when it can cross SG entries c504c11b94d6e serial: mctrl_gpio: split disable_ms into sync and no_sync APIs df8970a270add drm/amd/display: Add support for disconnected eDP streams 671fea645a71b i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) 398351dcdb631 EDAC/ie31200: work around false positive build warning c81c2ee1c3b05 net: pktgen: fix access outside of user given buffer in pktgen_thread_write() 35434d1c93c73 wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() 5ce1f780a3bce wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 1b1daafd2e974 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU a95813193ab78 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU f38a1b35c8f4e scsi: mpt3sas: Send a diag reset if target reset fails 06abee685cc97 clocksource: mips-gic-timer: Enable counter when CPUs start 2e1b3650f5691 MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core ba41e4e627db5 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie 2ed497f369b2e MIPS: Use arch specific syscall name match function b2ea189a958a6 crypto: skcipher - Zap type in crypto_alloc_sync_skcipher 3a0c8429ab1e4 crypto: ahash - Set default reqsize from ahash_alg b1d1b09698e99 x86/kaslr: Reduce KASLR entropy on most x86 systems b0556ba85a0f3 net/mlx5: Change POOL_NEXT_SIZE define value and make it global 52aa28f7b1708 dm: fix unconditional IO throttle caused by REQ_PREFLUSH ecd205a5241df libbpf: Fix out-of-bound read e17a6ba07929b media: tc358746: improve calculation of the D-PHY timing registers ca9f3ab612c62 media: adv7180: Disable test-pattern control on adv7180 3cd2aa93674ee cpuidle: menu: Avoid discarding useful information 48fd80f7d7b48 vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines f5121d5ba7ce4 vhost-scsi: Return queue full for page alloc failures during copy de4469a90075b x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() 01768d1564650 ASoC: mediatek: mt8188: Add reference for dmic clocks 6dadc66f6cf3e ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile ec6f764ab7009 drm/amd/display: handle max_downscale_src_width fail check 7472e0da47716 x86/build: Fix broken copy command in genimage.sh when making isoimage f32344bf957b4 Octeontx2-af: RPM: Register driver with PCI subsys IDs 3314310b3f3e6 soc: ti: k3-socinfo: Do not use syscon helper to build regmap f4e35b2c5f5cc wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band fed3038a80bbc bonding: report duplicate MAC address in all situations 7819a7dcf0412 net: xgene-v2: remove incorrect ACPI_PTR annotation 7b8fe48cc86b6 net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only ff01e0d0a61e4 leds: pwm-multicolor: Add check for fwnode_property_read_u32 2059e6ea11c0d drm/amdkfd: KFD release_work possible circular locking 0759d154654a8 selftests/net: have `gro.sh -t` return a correct exit code b3c8449484848 net/mlx5: Avoid report two health errors on same syndrome e2de76c34a8a9 firmware: arm_ffa: Set dma_mask for ffa devices a1a5e783d7cab PCI: brcmstb: Add a softdep to MIP MSI-X driver 1f27e708e36ea PCI: brcmstb: Expand inbound window size up to 64GB f6dfaf5905ad6 wifi: ath12k: Report proper tx completion status to mac80211 c7c729d7a85a9 soc: apple: rtkit: Implement OSLog buffers properly 78b6b2fe17a2e soc: apple: rtkit: Use high prio work queue 1ae981c91dc26 perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters 372ed2171031d fpga: altera-cvp: Increase credit timeout 7b851d6a02da0 drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence d8e57904dc269 ARM: at91: pm: fix at91_suspend_finish for ZQ calibration a9dd5d748c87d hwmon: (gpio-fan) Add missing mutex locks 7adb96687ce88 x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 ca16d144d1f0a clk: imx8mp: inform CCF of maximum frequency of clocks 032f3bf6471cd media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value faa24692f7041 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map 9459abd770107 drm/rockchip: vop2: Add uv swap for cluster window 9778a91827272 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). 2be4a7d53261b ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 30ae895966221 perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type 2a9a7d2f19cca net: pktgen: fix mpls maximum labels list parsing cf81dae86bf6b net: ethernet: ti: cpsw_new: populate netdev of_node 2cbe6d551b4a9 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" 5c9eca180a423 media: cx231xx: set device_caps for 417 a7b8f0addf84f drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination 3af9db78423c5 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c fef1e1487dea8 remoteproc: qcom_wcnss: Handle platforms with only single power domain c5b23df98a925 net: phylink: use pl->link_interface in phylink_expects_phy() b27be76f35010 drm/gem: Test for imported GEM buffers with helper 121f0335d91e4 orangefs: Do not truncate file size 3986ef4a9b6a0 dm cache: prevent BUG_ON by blocking retries on failed device resumes d5f8c8ec1e783 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() 74eea50b7afa1 ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 da74e11cedd1e ieee802154: ca8210: Use proper setters and getters for bitwise types c0acbeac2b287 rtc: ds1307: stop disabling alarms on probe fb69189023279 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() 8c1a16d612ef7 ALSA: seq: Improve data consistency at polling 7b1bb4d40dab8 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 d0e3e19564f03 arm64: tegra: Resize aperture for the IGX PCIe C5 slot 988770bf312cf arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator ab13c8a5f777b drm/amdkfd: Set per-process flags only once cik/vi 0acdc4d6e679b crypto: lzo - Fix compression buffer overrun ab4545a2540b7 watchdog: aspeed: Update bootstatus handling ac64f0e893ff3 cpufreq: tegra186: Share policy per cluster 3123b3d445d16 iommu/amd/pgtbl_v2: Improve error handling 8c305588bab71 ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() 5b518c452ff58 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" 769d1bccd1cac gfs2: Check for empty queue in run_queue 2e37d331c00c0 drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch 1da3dc73724bb drm/amd/display: calculate the remain segments for all pipes 4c2a348875646 drm/amd/display: remove minimum Dispclk and apply oem panel timing. 8ebf2709fe4dc ipv6: save dontfrag in cork 2b790fe67ed48 wifi: iwlwifi: fix debug actions order 386a1a0d558d7 printk: Check CON_SUSPEND when unblanking a console 8a7f2e84f85ad hwmon: (dell-smm) Increment the number of fans def5f5bc83ee7 usb: xhci: Don't change the status of stalled TDs on failed Stop EP 903c4a0c2aff4 mmc: sdhci: Disable SD card clock before changing parameters 5ae75245939c6 mmc: dw_mmc: add exynos7870 DW MMC support 110f701e60f98 arm64/mm: Check PUD_TYPE_TABLE in pud_bad() 89947eea8ff91 netfilter: conntrack: Bound nf_conntrack sysctl writes da36c3ad7c177 timer_list: Don't use %pK through printk() 6df3855868eb8 posix-timers: Add cond_resched() to posix_timer_add() search loop 1bef1811651bc RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() ba841627308a3 ext4: do not convert the unwritten extents if data writeback fails d7f3c874ea707 ext4: reject the 'data_err=abort' option in nojournal mode baf667f23f609 ASoC: sun4i-codec: support hp-det-gpios property f8d946034765a drm/amdgpu: Update SRIOV video codec caps 2e290e9cf6a17 mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check aa97ea576a3f2 pinctrl-tegra: Restore SFSEL bit when freeing pins 0fb6c439d265f xen: Add support for XenServer 6.1 platform device 3ecfb92c019f2 net/smc: use the correct ndev to find pnetid by pnetid table ba8354a613a57 dm: restrict dm device size to 2^63-512 bytes 44a82d2495e36 crypto: octeontx2 - suppress auth failure screaming due to negative tests 3edb08b6c21ef kbuild: fix argument parsing in scripts/config bc8023ef3b114 bpf: Allow pre-ordering for bpf cgroup progs aed5bd3a84e87 ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect bf9cfc7fbe742 thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer 4beb1e55f6b08 objtool: Fix error handling inconsistencies in check() 72d9ccdcfce24 rtc: rv3032: fix EERD location a7b7bc510e9ea tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() ed88717950ba9 jbd2: do not try to recover wiped journal 5741b9d7bb873 bpf: Return prog btf_id without capable check 743bb753255d3 vfio/pci: Handle INTx IRQ_NOTCONNECTED 9f51fa1971239 scsi: st: ERASE does not change tape location 01195aa1d694b scsi: st: Tighten the page format heuristics with MODE SELECT 3011cdc5cb46c hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure 4eda8a85d4d01 ext4: reorder capability check last 57a2882cd4f35 um: Update min_low_pfn to match changes in uml_reserved 7638182277867 um: Store full CSGSFS and SS register from mcontext 61225b3395c21 dlm: make tcp still work in multi-link env 0541822045ae0 i3c: master: svc: Fix missing STOP for master request 398c541ed0495 drm/amd/display: Guard against setting dispclk low for dcn31x 3192d59fb7b78 btrfs: send: return -ENAMETOOLONG when attempting a path that is too long a7f1c5fb7dd90 btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() 4dc7dcb919f36 btrfs: fix non-empty delayed iputs list on unmount due to async workers de635f9bba32e btrfs: run btrfs_error_commit_super() early 1a012fd4eb9d0 btrfs: avoid linker error in btrfs_find_create_tree_block() 4e74f91a6f70a btrfs: make btrfs_discard_workfn() block_group ref explicit a4666a812792d i2c: pxa: fix call balance of i2c->clk handling routines 4fc8e3fb8efa8 i2c: qup: Vote for interconnect bandwidth to DRAM bffd5f2815c52 x86/mm: Check return value from memblock_phys_alloc_range() 7124a9b6824e1 x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP 1752ceaa72d37 wifi: mt76: mt7996: revise TXS size d9776ce1733c7 wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 17e3ab067dfb6 mmc: host: Wait for Vdd to settle on card power off ea3d95e05e97e libnvdimm/labels: Fix divide error in nd_label_data_init() f29eb4c63bf4e ext4: on a remount, only log the ro or r/w state when it has changed 44acbc14ea28d PCI: vmd: Disable MSI remapping bypass under Xen aa59ccacf8f33 pNFS/flexfiles: Report ENETDOWN as a connection error ec59dfbc1ba2f tools/build: Don't pass test log files to linker e4510552c297c PCI: dwc: ep: Ensure proper iteration over outbound map windows a74286d17e751 objtool: Properly disable uaccess validation 454a770aea9fd lockdep: Fix wait context check on softirq for PREEMPT_RT 0c2aa72f4f352 dql: Fix dql->limit value when reset. 3854f4e98ef22 thermal/drivers/qoriq: Power down TMU on system suspend 4a120221661fc spi-rockchip: Fix register out of bounds access 4a8ebc45f2021 SUNRPC: rpcbind should never reset the port to the value '0' 3ef02a05c86b4 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting 6b8beb8104d73 NFSv4: Treat ENETUNREACH errors as fatal for state recovery ee68e068cf92f cifs: Fix establishing NetBIOS session for SMB2+ connection 89bcd83f67d22 cifs: add validation check for the fields in smb_aces 88bf6295f065a fbdev: core: tileblit: Implement missing margin clearing for tileblit 1714afc14dbe6 fbcon: Use correct erase colour for clearing in fbcon 7f370b7e6fa03 fbdev: fsl-diu-fb: add missing device_remove_file() bbf3bb6ddea47 riscv: Allow NOMMU kernels to access all of RAM 09096ead92f39 mailbox: use error ret code of of_parse_phandle_with_args() 5641f6b3a4cd5 mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() 7d5b227875fb7 ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list c1ab9f008ed40 tracing: Mark binary printing functions with __printf() attribute 50702e7b47ed7 arm64: Add support for HIP09 Spectre-BHB mitigation e0b05cd9ece6e SUNRPC: Don't allow waiting for exiting tasks c72826efbb5eb NFS: Don't allow waiting for exiting tasks a81dd69f859b6 NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() 2371143e41735 fuse: Return EPERM rather than ENOSYS from link() 209a4da04a27d smb: client: Store original IO parameters and prevent zero IO sizes 5194597b9cde7 cifs: Fix negotiate retry functionality d50f7ce2fc32a cifs: Fix querying and creating MF symlinks over SMB1 18066188eb90c cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES f08641cd2152d s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log a6f24a41ef527 kconfig: merge_config: use an empty file as initfile adbb39eca39d1 samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora 38aa3cf1545f3 bpf: fix possible endless loop in BPF map iteration f5f169cd90769 selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure f7292fbb41840 drm/amdgpu: Allow P2P access through XGMI 722a6972defd8 ima: process_measurement() needlessly takes inode_lock() on MAY_READ 91ba964a752bb net: enetc: refactor bulk flipping of RX buffers to separate function c36f5f659ad9c scsi: mpi3mr: Add level check to control event logging ca85c2d0db5f8 vhost-scsi: protect vq->log_used with vq->mutex 20fb292ab5d5d cgroup: Fix compilation issue due to cgroup_mutex not being exported c15dc980ffc5a dma-mapping: avoid potential unused data compilation warning 2cab5ea2f5ab6 intel_th: avoid using deprecated page->mapping, index fields b49b5132e4c73 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN 42d15918da268 scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices fe8421e853ef2 scsi: target: iscsi: Fix timeout on deleted connection beb6382add07a nvmem: qfprom: switch to 4-byte aligned reads 35d77c8d887e1 nvmem: core: update raw_len if the bit reading is required 497f19cacb3f8 nvmem: core: verify cell's raw_len 04c81ac33a607 nvmem: rockchip-otp: add rk3576 variant data 266e5f4813808 nvmem: rockchip-otp: Move read-offset into variant-data b3145041e990a cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist 1efbe2c7a0f44 phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off cf60d19721bc4 phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data e992f2581b794 phy: renesas: rcar-gen3-usb2: Move IRQ request in probe eb4fdee1d6303 phy: renesas: rcar-gen3-usb2: Add support to initialize the bus e668cbeb9590a i2c: designware: Fix an error handling path in i2c_dw_pci_probe() ad40588df1820 i2c: designware: Use temporary variable for struct device 0ef9396a7da7a i2c: designware: Remove ->disable() callback 33378973d843b i2c: designware: Uniform initialization flow for polling mode d1954e7aa1313 gpio: pca953x: fix IRQ storm on system wake up 58e34598436f8 gpio: pca953x: Simplify code with cleanup helpers 475d6ebc91a24 gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context() Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_6.6.bb | 6 ++-- .../linux/linux-yocto-tiny_6.6.bb | 6 ++-- meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb index d855ee3f8a..d9937c2f73 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb @@ -14,13 +14,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "1933814ca46d38977965bbfe58ee3a1f8aacfb36" -SRCREV_meta ?= "8e66f449e449f9ae2809b6c395ed7089aa37d7a3" +SRCREV_machine ?= "c39ccd8635d045d2fb41df620e389b14224822bd" +SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.6.92" +LINUX_VERSION ?= "6.6.93" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb index 382a74f648..3c9dea9fcc 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb @@ -8,7 +8,7 @@ require recipes-kernel/linux/linux-yocto.inc # CVE exclusions include recipes-kernel/linux/cve-exclusion_6.6.inc -LINUX_VERSION ?= "6.6.92" +LINUX_VERSION ?= "6.6.93" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -17,8 +17,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "c72b190dc393b310be436153c864144694b184a6" -SRCREV_meta ?= "8e66f449e449f9ae2809b6c395ed7089aa37d7a3" +SRCREV_machine ?= "467bfb36ac1bc218abb76541fd702ad01cf2b08f" +SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.6.bb b/meta/recipes-kernel/linux/linux-yocto_6.6.bb index c1bb736e04..2c9dfec885 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.6.bb @@ -18,25 +18,25 @@ KBRANCH:qemux86-64 ?= "v6.6/standard/base" KBRANCH:qemuloongarch64 ?= "v6.6/standard/base" KBRANCH:qemumips64 ?= "v6.6/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "1d95b0a9486ae02a4eb38df55b94cb64485bd4c0" -SRCREV_machine:qemuarm64 ?= "8cd580eb06e43c9a4e9c26e1dd954a334f656fbd" -SRCREV_machine:qemuloongarch64 ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_machine:qemumips ?= "a3bbede9b1c6dbd0b51132b8447adbbde1f46f85" -SRCREV_machine:qemuppc ?= "a5bba7e08dbb26c0dc7d7ec0624e903b7c6bac94" -SRCREV_machine:qemuriscv64 ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_machine:qemuriscv32 ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_machine:qemux86 ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_machine:qemux86-64 ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_machine:qemumips64 ?= "a1ed8408c3b0bc729270cc2bd2c9dd0056ab9271" -SRCREV_machine ?= "6032c9c1ac18edd7c8eadd6f9f655556b5f5e77c" -SRCREV_meta ?= "8e66f449e449f9ae2809b6c395ed7089aa37d7a3" +SRCREV_machine:qemuarm ?= "28044337d9d2d6fd8ce6dea661ddc35284d69299" +SRCREV_machine:qemuarm64 ?= "2765162684e8e1e08c832efb20e946b033ece5ae" +SRCREV_machine:qemuloongarch64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_machine:qemumips ?= "3fd113a19fa0301bdde9411662c460be81bfd054" +SRCREV_machine:qemuppc ?= "a687cdebe38217504d5077460e25c16684412f37" +SRCREV_machine:qemuriscv64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_machine:qemuriscv32 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_machine:qemux86 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_machine:qemux86-64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_machine:qemumips64 ?= "7eaf772c836fa74ce0a5b0cc8135dd578715e6f4" +SRCREV_machine ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" +SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "ffaf6178137b9cdcc9742d6677b70be164dfeb8c" +SRCREV_machine:class-devupstream ?= "c2603c511feb427b2b09f74b57816a81272932a1" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.6/base" @@ -44,7 +44,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.6.92" +LINUX_VERSION ?= "6.6.93" PV = "${LINUX_VERSION}+git" From patchwork Wed Jul 9 02:51:21 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66467 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6B6D3C83F16 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f181.google.com (mail-pl1-f181.google.com [209.85.214.181]) by mx.groups.io with SMTP id smtpd.web11.5628.1752029508644718360 for ; Tue, 08 Jul 2025 19:51:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=a+rG7yU9; spf=softfail (domain: sakoman.com, ip: 209.85.214.181, mailfrom: steve@sakoman.com) Received: by mail-pl1-f181.google.com with SMTP id d9443c01a7336-2353a2bc210so49482605ad.2 for ; Tue, 08 Jul 2025 19:51:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029508; x=1752634308; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=dBNMoWlmlKLGzZbK4/Ul0aSqqpRer1yDspltY0KzBcc=; b=a+rG7yU9PSM82ct1jHFTep3UYKCN8gc1eVzxPguEP0qOhcAO6+Uh/jv5JI8jdgsV+y KhG9V30ohEs8rNiGVpIX1hgoAnsjYnA5dcAyi9jnVnu1OTpKb5bwUrCWiwMzdvy4J/99 c0sfKkevs9FjqdAZIWyWk1hwG3cEuG1l2oPSi9CtvM0lRjkojSQkZKGfcI7wVB8Lrjfb K4m3qyiktLVEb0Je/Hu7NIXDcolKUd4FfPsMI0bPygRPmFv98Vy5Mfi0VMKSsEg2Tdg3 1sWRtc8DC47a+d2kXP29i1VtOLMozY94sqrozrfTyJZd9EddqXQyPvH6p/nGBHIya0W7 p45w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029508; x=1752634308; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=dBNMoWlmlKLGzZbK4/Ul0aSqqpRer1yDspltY0KzBcc=; b=qTSIhT8zRUX+y2m32P0YmN/+NsFQqb09aEBD8D9zcMoujfGbqbmHMrzjyk0Gxj3sGU tn1DS+onQwjuTbfpvA07zBSz1ldpHwGH7jCiU9KtPY0YbM2yttM1vXrzrAJ7teh7ydfM 1uNe95m4Dz4/QW+NF8yyf4QDSIeIUeEZ8oW01up/0jkvbCmB6xF6lr2hrWtnWf93vD+i mjrSXpFY8RKplLftsddf9M/zFiBhO4k9nwTuh7YwCcVIx+9fS3M+zNLf02ypqfhP/yN6 Ri8SJXnzFaMvEQ+8XzLBEblqkP2XLAJRfnYDrtGLq9i7T6BmSTD9KxUWiyJqywi7sfIK 68PA== X-Gm-Message-State: AOJu0YwWPxDk+7vAau0RAPh3xi7AKgOY+8bxjfMeQ0JnqghNl1cWn3JY U3OfS5pCnZOt5HduU5g2b7Jd6qI+Bg8m0DpbiOgeaRlBKU5cUHhRlhHBN9N5p1cY9dWhO83cm0i pZ8fI X-Gm-Gg: ASbGncvRjh4ULUGiNmb4K5eg+ajglENdUWgkpFQwL8fc349b4zT6k/pZaqaQRRAQXYk EamiPzGPHNkrysW2RYXLNlqvcHqU3vBmR2k1KgEsRutdDSs3/kQh3E5oVNiuDZ7PrcIiXh27YLs f1HCoaajLcEYjNnftoV0YpMPUxqfsiY//iXJKiIEJOPiHDmIL3ItmGqMkPfUYgXPKBXOqVLn+Rf LxCvaQGZ56unfWSdiCl8yzvhSvGIIAD8sOxDNuyMaYEee7IxZe+y++mYM86C0c6Irdpd5Fg6LD4 ULnmiiL+ikKADZiQuzwSI0JLwB2esG2OLuks0b9BCDfDjHN4nk0m3g== X-Google-Smtp-Source: AGHT+IFrq/9qrvaldVRH76tqwh/LHPGBIycLwgdZi3dvwD7VwQxlYuo7nhOzDaNt0elQe+ILE6O7eg== X-Received: by 2002:a17:902:ce06:b0:224:10a2:cae7 with SMTP id d9443c01a7336-23ddb31207dmr14330745ad.40.1752029507293; Tue, 08 Jul 2025 19:51:47 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.46 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:46 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 10/12] linux-yocto/6.6: update to v6.6.94 Date: Tue, 8 Jul 2025 19:51:21 -0700 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220067 From: Bruce Ashfield Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 6282921b6825 Linux 6.6.94 d0e22b854ac6 drm/meson: Use 1000ULL when operating with mode->clock 65e20c5d99d1 net: usb: aqc111: debug info before sanitation 0fcfc93576bc regulator: dt-bindings: mt6357: Drop fixed compatible requirement 1380f68517a7 calipso: unlock rcu before returning -EAFNOSUPPORT 2cfcbe1554c1 x86/iopl: Cure TIF_IO_BITMAP inconsistencies 8884c41bae39 xen/arm: call uaccess_ttbr0_enable for dm_op hypercall b0e35d563917 usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() 3c7e52cfa86d usb: Flush altsetting 0 endpoints before reinitializating them after reset. c40b5e0aad1f usb: cdnsp: Fix issue with detecting USB 3.2 speed 81dc3db4c3ac usb: cdnsp: Fix issue with detecting command completion event 6e3af836805e VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify 97f5b57eca7d usb: usbtmc: Fix read_stb function and get_stb ioctl b0630d18451a kbuild: Disable -Wdefault-const-init-unsafe 2c72fe18cc5f posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() 99bc5248a479 Revert "io_uring: ensure deferred completions are posted for multishot" 029d39ae7ecf io_uring/rw: fix wrong NOWAIT check in io_rw_init_file() 62d5d980b513 io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT 90e11232a62b io_uring: add io_file_can_poll() helper 4fa7831cf0ac HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() dd4b8e05f2a2 ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 37a75cd83dde tools/resolve_btfids: Fix build when cross compiling kernel with clang. c9a2e81583d9 block: Fix bvec_set_folio() for very large folios 9e263d94593b bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP 51c695986fa1 perf: Ensure bpf_perf_link path is properly serialized efcd52ba648b nvmet-fcloop: access fcpreq only when holding reqlock 84ead78a3cf8 fs/filesystems: Fix potential unsigned integer underflow in fs_name() 0383b25488a5 net_sched: ets: fix a race in ets_qdisc_change() 057f7a61b04b net_sched: tbf: fix a race in tbf_change() 2a71924ca4af net_sched: red: fix a race in __red_change() 46c15c9d0f65 net_sched: prio: fix a race in prio_tune() 77a72d749701 net/mlx5e: Fix leak of Geneve TLV option object a810e484778d net/mlx5: Fix return value when searching for existing flow group 5953ae44dfe5 net/mlx5: Fix ECVF vports unload on shutdown flow 7fb33ed59867 net/mlx5: Ensure fw pages are always allocated on same NUMA 3c40cfcbf18a Bluetooth: MGMT: Fix sparse errors c621211b3088 Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance 4bf299105706 Bluetooth: Fix NULL pointer deference on eir_get_service_data abb0605ca009 net/mdiobus: Fix potential out-of-bounds clause 45 read/write access bab6bca0834c net/mdiobus: Fix potential out-of-bounds read/write access 7bafe26d7314 macsec: MACsec SCI assignment for ES = 0 ff55c85a923e net: Fix TOCTOU issue in sk_is_readable() c6dad167aade ACPI: CPPC: Fix NULL pointer dereference when nosmp is used 987c3b8859d6 i40e: retry VFLR handling if there is ongoing VF reset dd184939f41e i40e: return false from i40e_reset_vf if reset is in progress dc5fc562f1c4 drm/meson: fix more rounding issues with 59.94Hz modes 81331229971a drm/meson: use vclk_freq instead of pixel_freq in debug print e9a5fe781748 drm/meson: fix debug log statement when setting the HDMI clocks 1f8d03fb90ed drm/meson: use unsigned long long / Hz for frequency types d2fc85c90b41 powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() 8635e325b85d powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap b4e9bab6011b net_sched: sch_sfq: fix a potential crash on gso_skb handling d4cbcf274c51 scsi: iscsi: Fix incorrect error path labels for flashnode operations 581b7c3d8025 pinctrl: qcom: pinctrl-qcm2290: Add missing pins de2adfaa9514 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() 6e329771144c wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready e8e405757004 wifi: ath11k: don't wait when there is no vdev started a0ec9e39cbf7 wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() e57c74d76076 wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() 452f55761513 wifi: ath11k: convert timeouts to secs_to_jiffies() d66fd9591ff4 wifi: ath11k: fix soc_dp_stats debugfs file permission 748da2fc1c3c ath10k: snoc: fix unbalanced IRQ enable in crash recovery 259119595227 ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() bdd56875c692 Bluetooth: MGMT: Protect mgmt_pending list with its own lock 5e64376da212 Bluetooth: MGMT: Remove unused mgmt_pending_find_data 9f66b6531c2b Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete 6edb171845ed Bluetooth: hci_core: fix list_for_each_entry_rcu usage 21f071261f94 scsi: core: ufs: Fix a hang in the error handler 44ab21d74f61 serial: sh-sci: Clean sci_ports[0] after at earlycon exit 9d50955bf215 serial: sh-sci: Move runtime PM enable to sci_probe_single() f8f07ea23116 serial: sh-sci: Check if TX data was written to device in .tx_empty() 6b60251cab3f arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators 9333ced86ca7 arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances b18568bae6c7 arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux 1e3db0a98cbd arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 869aafe49c6b arm64: dts: ti: k3-am65-main: Fix sdhci node properties c789d2c138ca kasan: use unchecked __memset internally 91d14d9961b7 Input: synaptics-rmi - fix crash with unsupported versions of F34 73b8f31337fb pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() 4f091ad0862b do_change_type(): refuse to operate on unmounted/not ours mounts 3d1ea8e048ac fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) 3b699b94727a path_overmount(): avoid false negatives 3aed255ae4a3 ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init cc03c899e6d9 ASoC: Intel: avs: Verify content returned by parse_int_array() ea739a5492bd ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX 9836cc310ec1 ASoC: codecs: hda: Fix RPM usage count underflow 0fd2ae401720 scsi: ufs: qcom: Prevent calling phy_exit() before phy_init() d2507aeea45b seg6: Fix validation of nexthop addresses 8c9e9cd39877 wireguard: device: enable threaded NAPI a21a4937726f net: dsa: b53: allow RGMII for bcm63xx RGMII ports 02c03865d26a net: dsa: b53: do not enable RGMII delay on bcm63xx 1c7a023b0cc9 netfilter: nf_nat: also check reverse tuple to obtain clashing entry 39bab2d3517b netfilter: nf_set_pipapo_avx2: fix initial map fill 7f6265fce3bd gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO 9c49728b61e1 PM: sleep: Fix power.is_suspended cleanup for direct-complete devices c07c61ef703a vmxnet3: correctly report gso type for UDP tunnels cc89f457d913 net: wwan: t7xx: Fix napi rx poll issue 85eef1748c02 net: fix udp gso skb_segment after pull from frag_list b263088ee8ab net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping 2e02edb66427 net: dsa: tag_brcm: legacy: fix pskb_may_pull length 18e648163016 ice: fix rebuilding the Tx scheduler tree for large queue counts d78e538b65e4 ice: create new Tx scheduler nodes for new queues only 1d3c5d0dec67 ice: fix Tx scheduler error handling in XDP callback 55dd7225217c Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION 59d5f3134b5c spi: bcm63xx-hsspi: fix shared reset 29abb7fc8244 spi: bcm63xx-spi: fix shared reset d88839739701 net: lan966x: Make sure to insert the vlan tags also in host mode 1b2e54f447af net/mlx4_en: Prevent potential integer overflow calculating Hz 2e3d96ad9549 driver: net: ethernet: mtk_star_emac: fix suspend/resume issue acab7ca5ff19 net: tipc: fix refcount warning in tipc_aead_encrypt 633a80216a44 gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt 6ee70ca1fded net: stmmac: platform: guarantee uniqueness of bus_id 7a8e87568575 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() b3b4efa2e623 coresight: prevent deactivate active config while enabling the config e69e2cfd8b38 fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() 32b3f3382d6c counter: interrupt-cnt: Protect enable/disable OPs with mutex 72166de0a1a5 MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a ec20928ecb1c iio: adc: ad7124: Fix 3dB filter frequency reading ca0012a63261 iio: filter: admv8818: Support frequencies >= 2^32 786cdbd4da1b iio: filter: admv8818: fix range calculation 61b3b2d62888 iio: filter: admv8818: fix integer overflow 31fa7dd09a25 iio: filter: admv8818: fix band 4, state 15 f2829faa3fd5 thunderbolt: Fix a logic error in wake on connect a6c7c365734c serial: Fix potential null-ptr-deref in mlb_usio_probe() db96a4fd8614 usb: renesas_usbhs: Reorder clock handling and power management in probe 63df0a22dabc rtc: loongson: Add missing alarm notifications for ACPI RTC events 56035627865e PCI/DPC: Initialize aer_err_info before using it b79e10050d9d dmaengine: ti: Add NULL check in udma_probe() 127dfb4f1c5a phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug 248f52ad6e82 PCI: apple: Use gpiod_set_value_cansleep in probe flow 004316d2de7e PCI: cadence: Fix runtime atomic count underflow 92d879eff459 PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus() 2e6d9128fe9b rtc: sh: assign correct interrupts with DT 848d78e3625f cifs: Fix validation of SMB1 query reparse point response c050dc2669c2 nfs: ignore SB_RDONLY when remounting nfs c9d9a8995f69 nfs: clear SB_RDONLY before getting superblock 7101de239633 perf trace: Always print return value for syscalls returning a pid 494395071e85 perf record: Fix incorrect --user-regs comments 5ec729bc5b03 perf tests switch-tracking: Fix timestamp comparison a20bbd91622f mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE 611efa317b70 mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() 85322ddd449a rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() 3b726bc12624 remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick} f1a3c8ceb21d remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe 41581d392c81 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 53385a400af6 perf intel-pt: Fix PEBS-via-PT data_src 1737865a12f8 perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() 84126960357d dm-flakey: make corrupting read bios work 1aef0e1083bb dm-flakey: error all IOs when num_features is absent 4e9e45746b86 hwmon: (asus-ec-sensors) check sensor index in read_string() a0d9d9b5a463 mtd: nand: ecc-mxic: Fix use of uninitialized variable ret fde314445332 backlight: pm8941: Add NULL check in wled_configure() 06f41679d35e dm: free table mempools if not used in __bind 679d40ca030a dm: don't change md if dm_table_set_restrictions() fails e431cc956d67 perf ui browser hists: Set actions->thread before calling do_zoom_thread() 34e124dc2189 perf build: Warn when libdebuginfod devel files are not available 655d3c6f8ce7 randstruct: gcc-plugin: Fix attribute addition c64a16344c52 randstruct: gcc-plugin: Remove bogus void member ab91647acdf4 fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() 8312b1f776f7 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() b828083b3d7d soc: aspeed: lpc: Fix impossible judgment condition fc5a7a966466 ARM: aspeed: Don't select SRAM e774ce479f62 arm64: dts: mt6359: Rename RTC node to match binding expectations 5b91fc48dcbb arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups 0d5dd35f7a73 arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou 867dd8a356a1 arm64: defconfig: mediatek: enable PHY drivers 978991404adc ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device 9337a54bc620 ARM: dts: qcom: apq8064: add missing clocks to the timer node 4ca90f54bc65 dt-bindings: vendor-prefixes: Add Liontron name 4b23c46eb2d8 bus: fsl-mc: fix double-free on mc_dev 8b8e2966477e nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() 9ab3008bf984 nilfs2: add pointer check for nilfs_direct_propagate() 681a35b1dcf1 ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery 4f99357dadbf Squashfs: check return result of sb_min_blocksize 2d4ad56428ed arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E 38caeda97b5d arm64: tegra: Drop remaining serial clock-names and reset-names 1aaffafdd44b arm64: dts: rockchip: Update eMMC for NanoPi R5 series 850fd99f22fc arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning ac25c30462a5 arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply 6145c491d649 arm64: dts: mt6359: Add missing 'compatible' property to regulators node 018324818ad5 arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles d6d756d3ea21 arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio 2eb09d84a00a arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio 7a276effd506 arm64: dts: imx8mp-beacon: Fix RTC capacitive load 75b985ef1e64 arm64: dts: imx8mn-beacon: Fix RTC capacitive load 986c6c52d4aa arm64: dts: imx8mm-beacon: Fix RTC capacitive load c8658f43df4f arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO 62f142f9b863 arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains 8af84ebd27fc ARM: dts: at91: at91sam9263: fix NAND chip selects e6ef5b282e33 ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select 3c9472989031 arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies b1253f7c65d1 arm64: dts: qcom: sm8250: Fix CPU7 opp table ac0df85cc591 arm64: dts: qcom: sm8350: Reenable crypto & cryptobam 072b6f8e39ce arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios 618060fc563b arm64: dts: qcom: sdm845-starqltechn: refactor node order 2bf235c5dddf arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake 8218e21030bd arm64: dts: qcom: sdm845-starqltechn: remove wifi c4f2f90ebbad f2fs: fix to correct check conditions in f2fs_cross_rename 67b800b6d772 f2fs: use d_inode(dentry) cleanup dentry->d_inode 857b4d2bbeb4 net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames 8ebcd311b486 net: openvswitch: Fix the dead loop of MPLS parse 946bfdfcb76a calipso: Don't call calipso functions for AF_INET sk. 5df8db01d6a4 octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback 0b40aeaf83ca net: phy: mscc: Fix memory leak when using one step timestamping 6486f11ccef4 net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy 4744a5d71d2a net: phy: fix up const issues in to_mdio_device() and to_phy_device() 363fdf277742 net: phy: clear phydev->devlink when the link is deleted 6f639c25bfad bpf: Avoid __bpf_prog_ret0_warn when jit fails 8d5bc5ec6c94 net: lan966x: Fix 1-step timestamping over ipv4 or ipv6 ac7897c01240 RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work 60790d287c1a net: usb: aqc111: fix error handling of usbnet read calls 333262e5dd8c RISC-V: KVM: lock the correct mp_state during reset 68b69b50dfba netfilter: nft_tunnel: fix geneve_opt dump 4c6fa65ab2ae bpf, sockmap: Avoid using sk_socket after free when sending 9c73afd7f1c9 Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() 801677040bb2 vfio/type1: Fix error unwind in migration dirty bitmap allocation cf008d9a08a7 netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy 1e8b2048f9e9 wifi: mt76: mt7996: fix RX buffer size of MCU event 800f7e73a679 wifi: mt76: mt7996: set EHT max ampdu length capability e9f9cef1877a wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() 6c81f1c7812c kernfs: Relax constraint in draining guard 713b9bfa939d scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort() 5482ef9875ea wifi: ath9k_htc: Abort software beacon handling if disabled b5ef128926cd hisi_acc_vfio_pci: bugfix live migration function without VF device driver 5be5cd86d1e9 hisi_acc_vfio_pci: add eq and aeq interruption restore f0423873e7ae hisi_acc_vfio_pci: fix XQE dma address error 99dbad1b01d3 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event 4b1cf1f040a0 iommu: remove duplicate selection of DMAR_TABLE 74e18211c2c8 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds f61b8fecec96 s390/bpf: Store backchain even for leaf progs fbd4d6293b53 clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz 6d8f39875a10 bpf: Fix WARN() in get_bpf_raw_tp_regs eb435bc4c74a pinctrl: at91: Fix possible out-of-boundary access b44672c17ca0 libbpf: Use proper errno value in nlattr 07680e38b78d ktls, sockmap: Fix missing uncharge operation 94ade4147a09 tracing: Fix error handling in event_trigger_parse() ae015964d7ff tracing: Rename event_trigger_alloc() to trigger_data_alloc() 3f7724fcc193 efi/libstub: Describe missing 'out' parameter in efi_load_initrd 3c1adc2f8c73 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() 012fd5987309 clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs 7c95e4a31fc4 clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs f2692b21774d clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs a1383eb9d6c4 clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs ac7ab38c271b tracing: Move histogram trigger variables from stack to per CPU structure c60f57a49619 bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ 7c4c84cdcc19 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction 5e4519d8cdd8 netfilter: nft_quota: match correctly when the quota just depleted 585c9ed565c5 netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it 50bbbd25597d bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps 1066c5a7d083 libbpf: Use proper errno value in linker 1c005c53cf8e f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() 43cec280496a f2fs: clean up w/ fscrypt_is_bounce_page() 4b88a4dfbea0 bonding: assign random address if device address is same as bond 8fa998b842f2 iommu: Protect against overflow in iommu_pgsize() cb4b9369463e Use thread-safe function pointer in libbpf_print 79669facfe92 libbpf: Remove sample_period init in perf_buffer 624b4cf6c49c scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk 5edd80d4b9c8 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h be049199dec9 wifi: ath12k: fix node corruption in ar->arvifs list c9c9107ffa0e wifi: ath12k: Add MSDU length validation for TKIP MIC error f76f399004c6 wifi: rtw88: do not ignore hardware read error during DPK 7b63e52a8bab wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally 446fcc230d9f wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT 6aa81fc0d67a xfrm: Use xdo.dev instead of xdo.real_dev 18eb7b5f1e51 libbpf: Fix buffer overflow in bpf_object__init_prog 0e9c13ed852e net: ncsi: Fix GCPS 64-bit member variables a39cc43efc1b f2fs: fix to do sanity check on sbi->total_valid_block_count a93db61dfa92 wifi: ath12k: Fix WMI tag for EHT rate in peer assoc db1d15a26f21 bpf, sockmap: Fix panic when calling skb_linearize 34837ae8cded bpf, sockmap: fix duplicated data transmission 2e36a81d388e bpf: fix ktls panic with sockmap 7c969106a8ba selftests/bpf: Fix bpf_nf selftest failure b524baecb01b IB/cm: use rwlock for MAD agent lock f50ba7e7b607 wifi: ath11k: fix node corruption in ar->arvifs list 3d6e3849b691 xen/x86: fix initial memory balloon target 7810600b06cb drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err a2502fd0fa9f drm/mediatek: Fix kobject put for component sub-drivers 8126855798b0 drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr 77511c2d2d1c perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() ee96502062ec scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops e500dff1e4e5 arm64/fpsimd: Do not discard modified SVE state 99d4011a0a32 firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES 3215e000eff6 drm/tegra: rgb: Fix the unbound reference count 01f73e104288 drm/vkms: Adjust vkms_state->active_planes allocation type 4715d2959d3b drm: rcar-du: Fix memory leak in rcar_du_vsps_init() 5e99bcff7cb5 selftests/seccomp: fix syscall_restart test for arm compat cf08a1cba004 arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX 0052f10c25e4 firmware: psci: Fix refcount leak in psci_dt_init 569829f8fde0 m68k: mac: Fix macintosh_config for Mac II 428d865fec68 watchdog: exar: Shorten identity name to fit correctly 701340a25b1a fs/ntfs3: handle hdr_first_de() return value 94be75619e8c drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() 2f6e645ce64e arm64/fpsimd: Fix merging of FPSIMD state during signal return 43be952e8854 arm64/fpsimd: Discard stale CPU state when handling SME traps 8bf6491dab8c arm64/fpsimd: Avoid RES0 bits in the SME trap handler 0d271c53009a media: rkvdec: Fix frame size enumeration cdf7e1ff99ab drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table 079cc1fa46e0 drm/vc4: tests: Use return instead of assert 83cc36371af8 drm/vmwgfx: Add seqno waiter for sync_files 8b263e8ab2d3 ASoC: apple: mca: Constrain channels according to TDM mask 42f7dd4bf5e0 spi: sh-msiof: Fix maximum DMA transfer size 5174ac310ae7 ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" fca08cfadd45 PM: sleep: Print PM debug messages during hibernation aa7b90057bc3 x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() 2b5459380613 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() 5b71469d77fd ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type d46af758f63d power: reset: at91-reset: Optimize at91_reset() c6c142267952 spi: tegra210-quad: modify chip select (CS) deactivation 41de2c9e30b7 spi: tegra210-quad: remove redundant error handling code 04034d43e9b6 spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers 3ff2422442de EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0 3f5d06590009 EDAC/skx_common: Fix general protection fault 4191b7669e00 ASoC: tas2764: Enable main IRQs 8b94e19adae3 ACPICA: exserial: don't forget to handle FFixedHW opregions for reading f6941e72d352 kunit: Fix wrong parameter to kunit_deactivate_static_stub() 5810e9d402c4 crypto: sun8i-ce - move fallback ahash_request to the end of the struct 04a39a3c7d37 crypto: xts - Only add ecb if it is not already there ba2af6855c4d crypto: lrw - Only add ecb if it is not already there ec91ab135cf0 rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture 402fd6a6fe57 btrfs: scrub: fix a wrong error type when metadata bytenr mismatches 7cfb9086b6d3 btrfs: scrub: update device stats when an error is detected 3cf4d9cae435 crypto: marvell/cesa - Avoid empty transfer descriptor 5e9666ac8b94 crypto: marvell/cesa - Handle zero-length skcipher requests 62af7780054f x86/cpu: Sanitize CPUID(0x80000000) output ce167ff4cd17 x86/microcode/AMD: Do not return error when microcode update is not necessary 4fb22310892c powerpc/crash: Fix non-smp kexec preparation fdc39b3ad8a7 powerpc: do not build ppc_save_regs.o always cb1e26f53e59 crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions c62b79c1c513 crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() 6ce08b3ba52c perf/core: Fix broken throttling when max_samples_per_tick=1 eec0dd17db02 gfs2: gfs2_create_inode error handling fix 76c7b1407a7a crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run() 5dea6398f2dd x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() cc5cd8a1719e tools/x86/kcpuid: Fix error handling e9019e2214fa Revert "drm/amd/display: more liberal vmin/vmax update for freesync" 9f837b359d1c dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property 68c504243737 dt-bindings: usb: cypress,hx3: Add support for all variants 5a057f261539 thunderbolt: Do not double dequeue a configuration request 259e4d6e10cd usb: usbtmc: Fix timeout value in get_stb 3258d7ff8ebf serial: jsm: fix NPE during jsm_uart_port_init e2e38c5211b1 Bluetooth: hci_qca: move the SoC type check to the right place b63f23fb0ad2 usb: typec: ucsi: fix Clang -Wsign-conversion warning 5ec1200da929 USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB ff835ab115f0 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device 73c50fa3ff02 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE 32a5f643ce54 rtc: Fix offset calculation for .start_secs < 0 b836d94be852 rtc: Make rtc_time64_to_tm() support dates before 1970 dbd568a30597 acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() 39ed85ae485d pinctrl: armada-37xx: set GPIO output value before setting direction 8f0f45a31215 pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 4afa9d57ed5e tracing: Fix compilation warning on arm32 Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_6.6.bb | 6 ++-- .../linux/linux-yocto-tiny_6.6.bb | 6 ++-- meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb index d9937c2f73..06146fb3f7 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb @@ -14,13 +14,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "c39ccd8635d045d2fb41df620e389b14224822bd" -SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" +SRCREV_machine ?= "27bfdf2a5a0230142c8bd610d0f6d029b32b874c" +SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.6.93" +LINUX_VERSION ?= "6.6.94" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb index 3c9dea9fcc..fd5b1467bd 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb @@ -8,7 +8,7 @@ require recipes-kernel/linux/linux-yocto.inc # CVE exclusions include recipes-kernel/linux/cve-exclusion_6.6.inc -LINUX_VERSION ?= "6.6.93" +LINUX_VERSION ?= "6.6.94" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -17,8 +17,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "467bfb36ac1bc218abb76541fd702ad01cf2b08f" -SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" +SRCREV_machine ?= "1843bb6576a42f208754285f170a824c6777e15b" +SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.6.bb b/meta/recipes-kernel/linux/linux-yocto_6.6.bb index 2c9dfec885..5683c9b861 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.6.bb @@ -18,25 +18,25 @@ KBRANCH:qemux86-64 ?= "v6.6/standard/base" KBRANCH:qemuloongarch64 ?= "v6.6/standard/base" KBRANCH:qemumips64 ?= "v6.6/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "28044337d9d2d6fd8ce6dea661ddc35284d69299" -SRCREV_machine:qemuarm64 ?= "2765162684e8e1e08c832efb20e946b033ece5ae" -SRCREV_machine:qemuloongarch64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_machine:qemumips ?= "3fd113a19fa0301bdde9411662c460be81bfd054" -SRCREV_machine:qemuppc ?= "a687cdebe38217504d5077460e25c16684412f37" -SRCREV_machine:qemuriscv64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_machine:qemuriscv32 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_machine:qemux86 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_machine:qemux86-64 ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_machine:qemumips64 ?= "7eaf772c836fa74ce0a5b0cc8135dd578715e6f4" -SRCREV_machine ?= "dbc28205654b693ad9557f6ed0387b33eb9b1766" -SRCREV_meta ?= "2ad3db8c94fece927ad59267524d42ac6353b137" +SRCREV_machine:qemuarm ?= "78cd415ed1379770d897a235b1af4dee842b551a" +SRCREV_machine:qemuarm64 ?= "84e1934158c201425a17e5b42e1ca1b3b2186ffb" +SRCREV_machine:qemuloongarch64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_machine:qemumips ?= "0edc239358dfb8fa8147dd27df814d6200c852d1" +SRCREV_machine:qemuppc ?= "ff8bafa847fbe675cc041d2b99a6ae2f476ef459" +SRCREV_machine:qemuriscv64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_machine:qemuriscv32 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_machine:qemux86 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_machine:qemux86-64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_machine:qemumips64 ?= "37ef59b7c4942d3c54938ef6a34a13977a741e0d" +SRCREV_machine ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" +SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "c2603c511feb427b2b09f74b57816a81272932a1" +SRCREV_machine:class-devupstream ?= "6282921b6825fef6a1243e1c80063421d41e2576" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.6/base" @@ -44,7 +44,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.6.93" +LINUX_VERSION ?= "6.6.94" PV = "${LINUX_VERSION}+git" From patchwork Wed Jul 9 02:51:22 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66468 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 72693C83F14 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by mx.groups.io with SMTP id smtpd.web11.5629.1752029510769969591 for ; Tue, 08 Jul 2025 19:51:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=W+blG3KV; spf=softfail (domain: sakoman.com, ip: 209.85.215.182, mailfrom: steve@sakoman.com) Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-b390d09e957so3436448a12.1 for ; Tue, 08 Jul 2025 19:51:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029510; x=1752634310; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=c8BdrIIFHanQA6ctQwJbSCBgPURgvBFD8djpvPeRUR8=; b=W+blG3KVNwCV5MVSrNX7Nwp9kKzT+wqIMClkbxGvuffZKPJ33JqQ5+/321ctkB5Wx6 oN7jlUHzOgghBEmylC9sjzeRESgLkug1es5Vzgrc9ZAextr1YDVlO9YdtcLsKjP2TYeB 8sViEQUy0Rtz4m47sYlGxde4wGn+lP06cAISKrzKGldxUMcQD4Izxyvq3h1SfTHZoxVT uk2D93rAJzJekM6tMe7+jt8oQv+hbSL4U9KdenwdjygAY4AGhnXMG08XNaWwsLgYmqjR 5XqmmYjZuhL4xBNqFS/X4In1K9QwCneNfpBxZn/2HpBTJ7OkniO4uQck7tJfhJMrbWZf t8mw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029510; x=1752634310; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=c8BdrIIFHanQA6ctQwJbSCBgPURgvBFD8djpvPeRUR8=; b=Lbr73bzEmyXGxZdheCUYWz9AoTkihGMbjfkPHNm/t8Wpf4UqQIritAj6iQQDBI8Xev AEaQ6UiUr4+QPsot6Sk5rY8D5uUwpj+0l2kGzKTVZz6mUbR0ZBwA4Qk87FsScqnOvVNI 8GIVTn/u4Cc9cHsBJfOAwW2uRZwfq9G0d3aFIM66Jscy5cfh+9KQ3EgmLHazD/SAbF7V 6ILrP61FwNhRZnr4JbgcY+lKo6ArKnSrvWY8I1jZKiGbIjMW5xNigybG+/OYzNQLdI74 cq7Tc4ldi1gV2PQM4Pjt8xHKhmDdz2xEOTBNVFsimWUQ1cPuMgG0dIzTDPNCEFgrP5Hm H+bg== X-Gm-Message-State: AOJu0Yxn8pp5hHq7npEGY5vkF0o2KD4K/qO5CUssztR+TbNs54pQBB2y QiUD87YJT6JgPyXkRim8PRn7rLqIl7FOdvnrvhBiQMtho49HD6mg3nCI4b6cCq4UVbt8VHpEjlN UWHEr X-Gm-Gg: ASbGnctec1utIg2kC129KqZ89Y/36FTK6OPTEMoxjqQptAkG7DTU6suC9yK46j/wmGD h9vZ3CmcUbzkx/JsZUn6zluabNnMVSOsDV6bMUF1L0Op7wzW8LedHg5kZJ7hOiX+0iqvFXK4LQ0 wa9Nc8UjgQ/ZlM/bXnoDdHofqj1ran8Wk/DyMdrFL2n7GHjRAHyh65EjnLqg5DU1vxYjdvnwu3z C5oMM96+bAs0JvjUtHMvffzEn3ES+JZaLaOx3xe/HJMlahQm75LMB6RKI6mP2QCaEYRJtDIhbnq rj6MCpDpCRIdw+mCXfOxgj30XU5iF5rASTrDvt4TvweiDm/Ggm9fGw== X-Google-Smtp-Source: AGHT+IGfLRT0mRj83/oy2AMUT0cBPp6+2s4rJiNLnwR2QzVycUqbkYXjbZFvF1ACw7XhI+1wc2X3IQ== X-Received: by 2002:a17:903:3d0f:b0:234:ba75:836 with SMTP id d9443c01a7336-23ddb1dc453mr11313625ad.7.1752029509013; Tue, 08 Jul 2025 19:51:49 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:48 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 11/12] linux-yocto/6.6: update to v6.6.96 Date: Tue, 8 Jul 2025 19:51:22 -0700 Message-ID: <7365af988da35e67e4463a0fd802b93a47d05a77.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220068 From: Bruce Ashfield Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: a5df3a702b2c Linux 6.6.96 18d3f9b8e4b9 ARM: 9354/1: ptrace: Use bitfield helpers f9917821c527 firmware: arm_scmi: Ensure that the message-id supports fastchannel 67a50f572178 firmware: arm_scmi: Add a common helper to check if a message is supported 6f27bbf3de0d nvme: always punt polled uring_cmd end_io work to task_work cdfb20e4b34a spi: spi-cadence-quadspi: Fix pm runtime unbalance c46358d02759 Revert "ipv6: save dontfrag in cork" 1583d908cc77 x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c ed1f395ea5c0 Kunit to check the longest symbol length 5f4787834cb7 s390/entry: Fix last breaking event handling in case of stack corruption 56aa7679c9f3 media: uvcvideo: Rollback non processed entities on error f165d04c41a3 kbuild: rpm-pkg: simplify installkernel %post cca5bb42b736 scripts: clean up IA-64 code b90dc5d67b68 ksmbd: remove unsafe_memcpy use in session setup 107a48df3f94 ksmbd: Use unsafe_memcpy() for ntlm_negotiate 8302adf60aba drm/amdgpu: switch job hw_fence to amdgpu_fence a5d7cc1647f9 drm/amdgpu: Add kicker device detection f640d011080d drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 a8ceffaeb780 drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram 5148c7ea69e9 drm/amd/display: Add null pointer check for get_first_active_display() ede04b471596 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready 252e6e96f9b6 drm/bridge: cdns-dsi: Check return value when getting default PHY config c4ee1b31a540 drm/bridge: cdns-dsi: Fix connecting to next bridge f9b819c39d13 drm/bridge: cdns-dsi: Fix phy de-init and flag it so 2565ff3ac3f5 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() 76115eafad12 drm/amdkfd: Fix race in GWS queue scheduling 7946a10f8da7 drm/msm/gpu: Fix crash when throttling GPU immediately during boot 50e48e940329 drm/udl: Unregister device before cleaning up on disconnect 5ff3636bcc32 drm/tegra: Fix a possible null pointer dereference 23134a522758 drm/tegra: Assign plane type before registration 9ec447c23753 drm/etnaviv: Protect the scheduler's pending list with its lock 6d7b814c527c drm/cirrus-qemu: Fix pitch programming 66f122e67261 drm/ast: Fix comment on modeset lock bf2c1643abc3 scsi: megaraid_sas: Fix invalid node index 42cf4f016173 HID: wacom: fix kobject reference count leak f531651c394e HID: wacom: fix memory leak on sysfs attribute creation failure 33acbeeb5ad6 HID: wacom: fix memory leak on kobject creation failure f0ffc8076d39 HID: lenovo: Restrict F7/9/11 mode to compact keyboards only 8a89e9c27b77 net: libwx: fix the creation of page_pool 9052c7bca391 btrfs: update superblock's device bytes_used when dropping chunk aeeae8feeaae btrfs: fix a race between renames and directory logging 6ad80378f928 dm-raid: fix variable in journal device check e395e34b0652 Bluetooth: L2CAP: Fix L2CAP MTU negotiation f90d78d65ccc serial: imx: Restore original RXTL for console to fix data loss 40f62f8cf854 dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive f89c40520fa1 staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() e5e6a5aa3915 EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs c82c7041258d smb: client: fix potential deadlock when reconnecting channels ced8eff11a4f drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type 1c9a8a84c5a8 drm/bridge: ti-sn65dsi86: make use of debugfs_init callback ee800ff711c9 drm/i915: fix build error some more 0804d77fd6e6 net: selftests: fix TCP packet checksum 5b63793da82a ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR cabed6ba92a9 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). 63528d60673a net: enetc: Correct endianness handling in _enetc_rd_reg64 ad9c4941d32e libbpf: Fix possible use-after-free for externs c61e284d72d6 um: ubd: Add missing error check in start_io_thread() 8f96a2ae16b5 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors d58343f81354 af_unix: Don't set -ECONNRESET for consumed OOB skb. 86136c670569 wifi: mac80211: fix beacon interval calculation overflow 9b9a87f0bd18 libbpf: Fix null pointer dereference in btf_dump__free on allocation failure 591f79625702 attach_recursive_mnt(): do not lock the covering tree when sliding something under it 74fcb3852a2f ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() 3c709dce1699 atm: clip: prevent NULL deref in clip_push() 64a99eff8dcf lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() 88f3869649ed s390/pkey: Prevent overflow in size calculation for memdup_user() db33aa6c5c93 ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 490a43d07f16 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write c9036b6390af i2c: robotfuzz-osif: disable zero-length read messages 4841060d2e7a i2c: tiny-usb: disable zero-length read messages fad0a2c16062 af_unix: Don't leave consecutive consumed OOB skbs. aabb458c33d9 af_unix: Don't call skb_get() for OOB skb. 0919388ac44f af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb(). fd3af69c14ed af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock(). b7904e2fccd0 af_unix: Define locking order for unix_table_double_lock(). 47847495a6ea platform/x86: ideapad-laptop: use usleep_range() for EC polling 6e7af3d4f67f platform/x86: ideapad-laptop: move ACPI helpers from header to source file f8761b11f1c0 platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc d19ae7b033b2 platform/x86: ideapad-laptop: introduce a generic notification chain b6b5bcae7aa5 dummycon: Trigger redraw when switching consoles with deferred takeover 8853bad7634f tty: vt: make consw::con_switch() return a bool e9ba8c528b8f tty: vt: sanitize arguments of consw::con_clear() 0b10b5ab7d1d tty: vt: make init parameter of consw::con_init() a bool 7bf946a284c3 PCI: apple: Set only available ports up b8704eef56c5 PCI: apple: Use helper function for_each_child_of_node_scoped() df1d7e879edd uio_hv_generic: Align ring size to system page ca0198894bf9 uio_hv_generic: Query the ringbuffer size for device ebba6cc0781c Drivers: hv: vmbus: Add utility function for querying ring size 3bc5abf8e75a f2fs: don't over-report free space or inodes in statvfs 9830ef1803a5 ASoC: codecs: wcd9335: Fix missing free of regulator supplies 28b6ef1ab65d ASoC: codec: wcd9335: Convert to GPIO descriptors 99d696842287 ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe() 0c40fa81f850 jfs: validate AG parameters in dbMount() to prevent crashes 7747d3f9a506 fs/jfs: consolidate sanity checking in dbMount fc97a116dc49 btrfs: handle csum tree error with rescue=ibadroots correctly 2cbeb47ea983 ovl: Check for NULL d_inode() in ovl_dentry_upper() d120737a6da7 scsi: ufs: core: Don't perform UFS clkscaling during host async scan acc1d4cc47f1 ceph: fix possible integer overflow in ceph_zero_objects() f3465bb32050 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock 789a3f63bd60 ALSA: hda: Add new pci id for AMD GPU display HD audio controller b8cd384c53ae ALSA: hda: Ignore unsol events for cards being shut down 23fe269bfab3 usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set 8851e4058701 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode 00626325dba7 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s 433cb3e70dc9 usb: Add checks for snprintf() calls in usb_alloc_dev() 0aaf810416c9 usb: common: usb-conn-gpio: use a unique name for usb connector device 8e958d10dd0c tty: serial: uartlite: register uart driver in init a33f507f36d5 usb: potential integer overflow in usbg_make_tpg() a8d1b4f219e8 misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() 1063c586a35c iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos 41732f9febdc usb: dwc2: also exit clock_gating when stopping udc while suspended 8217fa7d92f0 coresight: Only check bottom two claim bits 8dbc01f09cad um: use proper care when taking mmap lock during segfault 265ca1741075 um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h 462215a2a3f4 iio: pressure: zpa2326: Use aligned_s64 for the timestamp c5734f9bab6f drm/scheduler: signal scheduled fence when kill job 553f560e0a74 bcache: fix NULL pointer in cache_set_flush() 9d578589e3ec amd/amdkfd: fix a kfd_process ref leak 2fb2470bc683 md/md-bitmap: fix dm-raid max_write_behind setting aaef4f1f44b3 PCI: apple: Fix missing OF node reference in apple_pcie_setup_port 969c9646f0d0 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane 7d942dbcd155 dmaengine: xilinx_dma: Set dma_device directions e0051a3daa8b dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using c765f592adc7 rust: module: place cleanup_module() in .exit.text section efe5db9d98b1 ksmbd: provide zero as a unique ID to the Mac client f72093f270ea ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension ad804e3648d3 hwmon: (pmbus/max34440) Fix support for max34451 2d8b3898caf5 NFSv4: xattr handlers should check for absent nfs filehandles 9d90ab45d3d3 cxl/region: Add a dev_err() on missing target list entries 96715eb1a120 fuse: fix race between concurrent setattrs from multiple nodes a13b2634dd66 leds: multicolor: Fix intensity setting while SW blinking c3616dfddf1d sunrpc: don't immediately retransmit on seqno miss f0ba7e6d06f2 mfd: max14577: Fix wakeup source leaks on device unbind 35cda8619d97 mailbox: Not protect module_put with spin_lock_irqsave 7d03b140af33 NFSv4.2: fix listxattr to return selinux security label cad6f283f6a6 NFSv4: Always set NLINK even if the server doesn't support it 670c1c546cda cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode 0e7f0e6e14ba cifs: Fix cifs_query_path_info() for Windows NT servers 4a6499ffc84c cifs: Correctly set SMB1 SessionKey field in Session Setup Request 3f5b4c104b7d Linux 6.6.95 218c3629fb8f cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function 6b4311f78a13 gpio: mlxbf3: only get IRQ for device instance 0 f6071c3cfe3a perf evsel: Missed close() when probing hybrid core PMUs 2a673aca82fe RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs e20f0f44ec59 RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls a77d0a14ed47 scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() 21da6d3561f3 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() 7c631e5cd38e perf/core: Fix WARN in perf_cgroup_switch() bddec730501b perf: Fix cgroup state vs ERROR 2ee6044a6937 perf: Fix sample vs do_exit() 4ca4f418b761 s390/pci: Fix __pcilg_mio_inuser() inline assembly d7094ad35104 platform/loongarch: laptop: Add backlight power control support 7b47919aff63 smb: client: fix first command failure during re-negotiation cc77844d61f7 Revert "cpufreq: tegra186: Share policy per cluster" eb74c6f1b209 ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms 94ec33e9600b ARM: dts: am335x-bone-common: Increase MDIO reset deassert time 2f38986e93d3 platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys e9a011fc6b04 serial: sh-sci: Increment the runtime usage counter for the earlycon device cfa7fa02078d net: make for_each_netdev_dump() a little more bug-proof b8ced2b9a23a smb: Log an error when close_all_cached_dirs fails aaaa689aa29d dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties 6377977485f7 EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh a5e3a1442688 net: atm: fix /proc/net/atm/lec handling dffd03422ae6 net: atm: add lec_mutex bde8833eb075 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). 3162d8235c8c ublk: santizize the arguments from userspace when adding a device 66bba1fd5bad net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() 7382b6f7d102 net: microchip: lan743x: Reduce PTP timeout on HW failure 235aa081e2d9 tcp: fix passive TFO socket having invalid NAPI ID d3dfe821dfe0 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer 9d0ddfb574a2 tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior 3261c017a7c5 atm: atmtcp: Free invalid length skb in atmtcp_c_send(). a06078164001 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). 4e9ab5c48ad5 wifi: carl9170: do not ping device which has failed to load firmware 43e3433a48c3 ptp: allow reading of currently dialed frequency to succeed on free-running clocks a8c669bbc831 ptp: fix breakage after ptp_vclock_in_use() rework aaef8e3a54b9 e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 f4c19a8e51ee net: ice: Perform accurate aRFS flow match 8662ac79a634 aoe: clean device rq_list in aoedev_downdev() 9311d6d1a54f pldmfw: Select CRC32 when PLDMFW is selected 4c8f5b0483ac hwmon: (occ) fix unaligned accesses 1312d9bf88be hwmon: (occ) Rework attribute registration for stack usage ff3dcf7f8184 drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled af2f5f21599a drm/nouveau/bl: increase buffer size to avoid truncate warning b599b310380a ionic: Prevent driver/fw getting out of sync on devcmd(s) 002aa3ed19f3 drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate 77087a79779c drm/msm/disp: Correct porch timing for SDM845 7e6980c225c1 smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels 599c489eea79 sunrpc: handle SVC_GARBAGE during svc auth processing as auth error 5e5d2ad9765a erofs: remove unused trace event erofs_destroy_inode 2536810df13f bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE f6393e5cb913 net: Fix checksum update for ILA adj-transport 3977946f61cd mm/huge_memory: fix dereferencing invalid pmd migration entry af6cfcd0efb7 mm/hugetlb: unshare page tables during VMA split, not before 39c86833f973 iio: accel: fxls8962af: Fix temperature calculation 3d849cc3dfd3 ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged f80e551050e4 ALSA: hda/intel: Add Thinkpad E15 to PM deny list d61975567d9d ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card 6562806f3200 arm64: Restrict pagetable teardown to avoid false warning 66bde385a1d3 wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE eeacfbab9842 wifi: cfg80211: init wiphy_work before allocating rfkill fails 6d60d822809b Input: sparcspkr - avoid unannotated fall-through 3902205eadf3 atm: Revert atm_account_tx() if copy_from_iter_full() fails. c1a2081f0347 platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL 2753481c40af selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len 0902625a24ee ksmbd: fix null pointer dereference in destroy_previous_session 2a03531c00b2 selftests/x86: Add a test to detect infinite SIGTRAP handler loop 372b511e9345 udmabuf: use sgtable-based scatterlist wrappers bfa4d86e130a net: clear the dst when changing skb protocol 0357da9149ea net_sched: sch_sfq: reject invalid perturb period bb9d4ffff6d8 scsi: s390: zfcp: Ensure synchronous unit_add 8d60df50e62f scsi: storvsc: Increase the timeouts to storvsc_timeout a504536c2923 smb: improve directory cache reuse for readdir operations 202d7e838967 cifs: do not disable interface polling on failure 58021a32f25e cifs: serialize other channels when query server interfaces is pending b530c44e1f38 cifs: deal with the channel loading lag while picking channels cd42ddddd70a jffs2: check jffs2_prealloc_raw_node_refs() result in few other places 3f46644a5131 jffs2: check that raw node were preallocated before writing summary b427d98d5521 LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() 099cfcb98fb4 LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg 782baee5d917 platform/loongarch: laptop: Unregister generic_sub_drivers on exit 3bce9e6be030 platform/loongarch: laptop: Get brightness setting from EC on probe 1921781ec4a8 drivers/rapidio/rio_cm.c: prevent possible heap overwrite 675d90ee874c io_uring: fix task leak issue in io_wq_create() 3c3c7c66bdfa Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older af4ed5262d30 powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery a7f3cfc1eb99 powerpc/vdso: Fix build of VDSO32 with pcrel dd95b3e00346 platform/x86: dell_rbu: Stop overwriting data buffer f3b840fb1508 platform/x86: dell_rbu: Fix list usage 523e2f8a7f83 platform/x86/amd: pmc: Clear metrics table at start of cycle 7d71ba5b0a01 fs/xattr.c: fix simple_xattr_list() 897e6d88f0e3 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" cdc1b9b47bc5 tee: Prevent size calculation wraparound on 32-bit kernels 59b7304d0dff ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY bca6fe52bd95 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value c85311a73d74 watchdog: da9052_wdt: respect TWDMIN 519ba75728ee fbcon: Make sure modelist not set on unregistered console 8df53ee74cac wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz 2304e2b5e470 wifi: ath12k: fix incorrect CE addresses 9db1bf90147c wifi: ath12k: fix link valid field initialization in the monitor Rx 6bd0f2e71b15 wifi: ath11k: determine PM policy based on machine model 42d0bfbe0296 octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() a37888a435b0 net: ethernet: cortina: Use TOE/TSO on all TCP 38c4106cb4e9 bpf, sockmap: Fix data lost during EAGAIN retries bdb4da9e1921 f2fs: fix to set atomic write status more clear a3c32f17acbf usbnet: asix AX88772: leave the carrier control to phylink e036d648773c ice: fix check for existing switch rule 8cde755f5616 i40e: fix MMIO write access to an invalid page in i40e_clear_hw 52a16bafda0e sock: Correct error checking condition for (assign|release)_proto_idx() 34c0a670556b scsi: lpfc: Use memcpy() for BIOS version 79dc5e78d13d wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping 5cf32cef3a38 pinctrl: mcp23s08: Reset all pins to input at probe f9397cf7bfb6 software node: Correct a OOB check in software_node_get_reference_args() 03545901ec09 net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER c0d8c14d9bf2 vxlan: Do not treat dst cache initialization errors as fatal b4c83b37490d net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions cd97899361bc net: bridge: mcast: update multicast contex when vlan state is changed a0ab9e9148dd wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 172d1e4a6804 wifi: mac80211: VLAN traffic in multicast path 4fc2b3c0657b wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled 2077cef44d33 wifi: iwlwifi: pcie: make sure to lock rxq->read 920fcc7adc73 iommu/amd: Ensure GA log notifier callbacks finish running before module unload 32f25633f366 scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands c697dac96937 libbpf: Add identical pointer detection to btf_dedup_is_equiv() f11cfb48f2d2 clk: rockchip: rk3036: mark ddrphy as critical dfec43c50376 wifi: mac80211: do not offer a mesh path if forwarding is disabled efa7997ce846 wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn() 187829fb0c35 net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi 84d34bd55d6a net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info ae48bc0b8be8 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() 8a15a5438c58 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() 02c966a8869b pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() 14a26f669206 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() 79f3e44df6e6 net: atlantic: generate software timestamp just before the doorbell 9121c2ddd177 ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT 62b62a2a6dc5 x86/sgx: Prevent attempts to reclaim poisoned pages c1025a54289b tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows 156b6bac7645 tcp: always seek for minimal rtt in tcp_rcv_rtt_update() 969d61aa168c wifi: rtw89: leave idle mode when setting WEP encryption for AP mode f11520c6174c wifi: ath11k: Fix QMI memory reuse logic dcf7bb4397de wifi: ath12k: fix a possible dead lock caused by ab->base_lock 7c4b6d8bd72d wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET 6f79eb2e6816 net: dlink: add synchronization for stats update 04fa1bef29d5 i2c: npcm: Add clock toggle recovery be5f6a65509c i2c: tegra: check msg length in SMBUS block read 762325441e3a cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs a620f66675e5 sctp: Do not wake readers in __sctp_write_space() a0b91fa813d4 wifi: mt76: mt7921: add 160 MHz AP for mt7922 device bf3dcb53ba32 wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R 2c1a2d863b24 emulex/benet: correct command version selection in be_cmd_get_stats() 24900688ee47 wifi: mt76: mt7996: drop fragments with multicast or broadcast RA 775fdb4042b2 i2c: designware: Invoke runtime suspend on quick slave re-registration 7bf4461f1c97 bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() 61fc32485d64 f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx 92dbc2a2e2ec tipc: use kfree_sensitive() for aead cleanup 088279ff18cd net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices d2a25ca4134c net: macb: Check return value of dma_set_mask_and_coherent() c148af1f398b ACPI: battery: negate current when discharging 6635356483b8 PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() 6a7c583f56b9 gpiolib: of: Add polarity quirk for s5m8767 5505ec191f77 ASoC: tegra210_ahub: Add check to of_device_get_match_data() cf961a38e450 ACPICA: utilities: Fix overflow check in vsnprintf() 558ba4afdfe5 power: supply: bq27xxx: Retrieve again when busy 1fee4324b566 ACPICA: fix acpi parse and parseext cache leaks 8621fbeb4db9 ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case 0ab90839bf6c ACPI: bus: Bail out if acpi_kobj registration fails 7d346ca11a6e ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change 30e11a8cff73 ACPICA: Avoid sequence overread in call to strncmp() 58cf7ba36b94 mmc: Add quirk to disable DDR50 tuning 74f765e85d4b power: supply: collie: Fix wakeup source leaks on device unbind 1c24a738971c clocksource: Fix the CPUs' choice in the watchdog per CPU verification 28ecaebbed55 ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 755a8006b767 ACPICA: fix acpi operand cache leak in dswstate.c 3175377e8ee1 iio: adc: ad7606_spi: fix reg write value mask f6a5b84f450b iio: imu: inv_icm42600: Fix temperature calculation fe684290418e mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race 6a860536306e iio: accel: fxls8962af: Fix temperature scan element sign a9f6c1ad6c93 PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() 0b522796a80f PCI: Fix lock symmetry in pci_slot_unlock() 7f6a2d378425 PCI: Add ACS quirk for Loongson PCIe 9895f9d9b515 PCI: cadence-ep: Correct PBA offset in .set_msix() callback 7ca06d696a2f uio_hv_generic: Use correct size for interrupt and monitor pages 6f824cdd8209 Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary 37166d63e42c smb: client: add NULL check in automount_fullpath 39ff3774693f cifs: dns resolution is needed only for primary channel 5713127da855 cifs: update dstaddr whenever channel iface is updated 9d80e1d37e85 cifs: reset connections for all channels when reconnect requested 3ee979709e16 remoteproc: core: Release rproc->clean_table after rproc_attach() fails 9515d74c9d1a remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() a4df96e2e81c regulator: max14577: Add error check for max14577_read_reg() 231f6a1de15b mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS dfa9ef978d9c staging: iio: ad5933: Correct settling cycles encoding per datasheet cc3cc41ed670 video: screen_info: Relocate framebuffers behind PCI bridges fa2118e9e233 KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY 6bd2569d0b2f net: ch9200: fix uninitialised access during mii_nway_restart b1bf167f46dd phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() 83a692a9792a ftrace: Fix UAF when lookup kallsym after ftrace disabled 6737c4551d2b mtd: rawnand: qcom: Fix read len for onfi param page df4918c0bb49 dm-verity: fix a memory leak if some arguments are specified multiple times 61850a1b2673 dm-mirror: fix a tiny race condition fe0ff7d801fb KVM: VMX: Flush shadow VMCS on emergency reboot 0d7a2ea4351b KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs 7775ab2d53b3 mtd: nand: sunxi: Add randomizer configuration before randomizer enable e06a1dadc481 mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk d3abf0066b5e mm: fix ratelimit_pages update error in dirty_ratio_handler() 23a707bbcbea RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction 442e80dcf6fe watchdog: fix watchdog may detect false positive of softlockup 5180561afff8 ipc: fix to protect IPCS lookups using RCU f24d42245239 clk: meson-g12a: add missing fclk_div2 to spicc ebb8060561d5 parisc: fix building with gcc-15 2f4040a5855a vgacon: Add check for vc_origin address range in vgacon_scroll() 7f27859721ae parisc/unaligned: Fix hex output to show 8 hex chars 3ca78032a388 fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var e32a40db6796 EDAC/altera: Use correct write width with the INTTEST register 0909b2b49c45 fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var 061a5dd66608 net: ftgmac100: select FIXED_PHY 8c5713ce1ced net/sched: fix use-after-free in taprio_dev_notifier a8acc7080ad5 NFC: nci: uart: Set tty->disc_data only in success path d95d87841d2a hwmon: (ftsteutates) Fix TOCTOU race in fts_read() 79ef8a6c4ec5 f2fs: fix to do sanity check on sit_bitmap_size a87cbcc909cc f2fs: prevent kernel warning due to negative i_nlink from corrupted image aaddc6c696bd f2fs: fix to do sanity check on ino and xnid 0f7100e8d9f0 Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() 17474a56acf7 Input: ims-pcu - check record size in ims_pcu_flash_firmware() cf6a4c4ac7b6 ext4: only dirty folios when data journaling regular files 3e8a5163bcd3 ext4: ensure i_size is smaller than maxbytes 68cea04f1fb2 ext4: factor out ext4_get_maxbytes() 223091c9897c ext4: fix calculation of credits for extent tree modification 26e09d18599d ext4: inline: fix len overflow in ext4_prepare_inline_data 55995f172598 bus: fsl-mc: fix GET/SET_TAILDROP command ids 1e474b5fab51 bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device 8edfed4439b1 ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 48f35a32947b cgroup,freezer: fix incomplete freezing when attaching tasks 96707ff5818f ceph: set superblock s_magic for IMA fsmagic matching 636391e8c98c can: tcan4x5x: fix power regulator retrieval during probe d5d4be47e06c bus: mhi: host: Fix conflict between power_up and SYSERR 44b9620e82bb bus: mhi: ep: Update read pointer only after buffer is written 838d63de34a9 ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 c592d3ceca1a ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() 12cffd5bd1da arm64/mm: Close theoretical race where stale TLB entry remains valid a31dce9b561d media: uvcvideo: Fix deferred probing error c51c0a0be239 media: uvcvideo: Send control events for partial succeeds d314f99b6f19 media: uvcvideo: Return the number of processed controls ec26be7d6355 media: imx-jpeg: Cleanup after an allocation error 20a6db0ef356 media: imx-jpeg: Reset slot data pointers when freed 683a1db6800e media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead 350d4af0493a media: imx-jpeg: Drop the first error frames f6b1b0f8ba0b media: vivid: Change the siize of the composing 9824e1732a16 media: vidtv: Terminating the subsequent process of initialization failure 17cb043ea133 media: videobuf2: use sgtable-based scatterlist wrappers 36318ff3d6bf media: venus: Fix probe error handling ae7b143e05b3 media: v4l2-dev: fix error handling in __video_register_device() dfb2add0baa7 media: omap3isp: use sgtable-based scatterlist wrappers ac3a8e37cb8e media: mediatek: vcodec: Correct vsi_core framebuffer size 025a943c49c7 media: gspca: Add error handling for stv06xx_read_sensor() ec5c328606ba media: davinci: vpif: Fix memory leak in probe error path 04354c529c82 media: cxusb: no longer judge rbuf when the write fails 4425db511b9d media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case 1e4b3f166795 media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div b9e314231ffc media: ccs-pll: Start OP pre-PLL multiplier search from correct value ae2fe6606511 media: ccs-pll: Start VT pre-PLL multiplier search from correct value eb7a4ea0a18c media: i2c: ds90ub913: Fix returned fmt from .set_fmt() ecaf904a55c1 media: nxp: imx8-isi: better handle the m2m usage_count 585acb354977 media: ov5675: suppress probe deferral errors ce4a5a34a2bf media: ov8856: suppress probe deferral errors aaf516bb732c wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 d4356ce8f826 wifi: rtw88: usb: Reduce control message timeout to 500 ms 2e7c64d7a92c jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() 1eeecd9be9fe wifi: ath12k: fix ring-buffer corruption 14f5549ad163 fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() 5ee9a07b456d SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls 5060e1a5fef1 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference e7e943ddd1c6 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request f08689fe3153 wifi: ath11k: fix ring-buffer corruption 68b29235778b wifi: ath11k: fix rx completion meta data corruption 0e4dc150423b wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() 782b3aff6763 net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() 477e4319c371 net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() 278a92b87463 regulator: max20086: Change enable gpio to optional 420f6942f109 regulator: max20086: Fix MAX200086 chip id bf70b3c3df5f powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states 0257c26bbca5 io_uring/kbuf: account ring io_buffer_list memory a8b5ef355477 io_uring: account drain memory to cgroup abf80985f4d6 ASoC: meson: meson-card-utils: use of_property_present() for DT parsing 3895a7590e6e ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() 40aefac870c1 gfs2: move msleep to sleepable context f5b9144715da crypto: marvell/cesa - Do not chain submitted requests 0df5e4c7de27 configfs: Do not override creating attribute file failure in populate_attrs() Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_6.6.bb | 6 ++-- .../linux/linux-yocto-tiny_6.6.bb | 6 ++-- meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb index 06146fb3f7..9323918502 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_6.6.bb @@ -14,13 +14,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "27bfdf2a5a0230142c8bd610d0f6d029b32b874c" -SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" +SRCREV_machine ?= "a02058f9508e565ca6d62ff4fda707d1b8894ea0" +SRCREV_meta ?= "533e8057057d5eb7400a400e53972c54ac1169b0" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" -LINUX_VERSION ?= "6.6.94" +LINUX_VERSION ?= "6.6.96" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb index fd5b1467bd..7424dacc42 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_6.6.bb @@ -8,7 +8,7 @@ require recipes-kernel/linux/linux-yocto.inc # CVE exclusions include recipes-kernel/linux/cve-exclusion_6.6.inc -LINUX_VERSION ?= "6.6.94" +LINUX_VERSION ?= "6.6.96" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -17,8 +17,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "1843bb6576a42f208754285f170a824c6777e15b" -SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" +SRCREV_machine ?= "d68fff9b37fe90feaef6e6e24d560f07420d2044" +SRCREV_meta ?= "533e8057057d5eb7400a400e53972c54ac1169b0" PV = "${LINUX_VERSION}+git" diff --git a/meta/recipes-kernel/linux/linux-yocto_6.6.bb b/meta/recipes-kernel/linux/linux-yocto_6.6.bb index 5683c9b861..de6952dad0 100644 --- a/meta/recipes-kernel/linux/linux-yocto_6.6.bb +++ b/meta/recipes-kernel/linux/linux-yocto_6.6.bb @@ -18,25 +18,25 @@ KBRANCH:qemux86-64 ?= "v6.6/standard/base" KBRANCH:qemuloongarch64 ?= "v6.6/standard/base" KBRANCH:qemumips64 ?= "v6.6/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "78cd415ed1379770d897a235b1af4dee842b551a" -SRCREV_machine:qemuarm64 ?= "84e1934158c201425a17e5b42e1ca1b3b2186ffb" -SRCREV_machine:qemuloongarch64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_machine:qemumips ?= "0edc239358dfb8fa8147dd27df814d6200c852d1" -SRCREV_machine:qemuppc ?= "ff8bafa847fbe675cc041d2b99a6ae2f476ef459" -SRCREV_machine:qemuriscv64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_machine:qemuriscv32 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_machine:qemux86 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_machine:qemux86-64 ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_machine:qemumips64 ?= "37ef59b7c4942d3c54938ef6a34a13977a741e0d" -SRCREV_machine ?= "a05382452c269c3c3bd7b593e5e44ef817fe3d5e" -SRCREV_meta ?= "c5e24825003b998f786b65f6e397904a50daa66c" +SRCREV_machine:qemuarm ?= "a2c45f6283ecd822468883d493f90ab0cc4f3a8a" +SRCREV_machine:qemuarm64 ?= "d72e5d8e6d1a220a18fb2d9848fadbe443c9d555" +SRCREV_machine:qemuloongarch64 ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_machine:qemumips ?= "09314f2a0c95b59863247654f75555489cae9e11" +SRCREV_machine:qemuppc ?= "7ee481d1b7be6cb8897494430119c4a00d40c29e" +SRCREV_machine:qemuriscv64 ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_machine:qemuriscv32 ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_machine:qemux86 ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_machine:qemux86-64 ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_machine:qemumips64 ?= "3b2b3b16411baea07773b9c74093d139a0d0ab25" +SRCREV_machine ?= "cfb2162b885f040f7d3d2c95103af0d62ad94b28" +SRCREV_meta ?= "533e8057057d5eb7400a400e53972c54ac1169b0" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "6282921b6825fef6a1243e1c80063421d41e2576" +SRCREV_machine:class-devupstream ?= "a5df3a702b2cba82bcfb066fa9f5e4a349c33924" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v6.6/base" @@ -44,7 +44,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-6.6;destsuffix=${KMETA};protocol=https" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "6.6.94" +LINUX_VERSION ?= "6.6.96" PV = "${LINUX_VERSION}+git" From patchwork Wed Jul 9 02:51:23 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 66465 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 79097C83F17 for ; Wed, 9 Jul 2025 02:51:51 +0000 (UTC) Received: from mail-pl1-f174.google.com (mail-pl1-f174.google.com [209.85.214.174]) by mx.groups.io with SMTP id smtpd.web10.5575.1752029511118325961 for ; Tue, 08 Jul 2025 19:51:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=X981fpKH; spf=softfail (domain: sakoman.com, ip: 209.85.214.174, mailfrom: steve@sakoman.com) Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-234b9dfb842so46380105ad.1 for ; Tue, 08 Jul 2025 19:51:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1752029510; x=1752634310; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=3uck+MBQ5BfFLV8Zm2WLiulLLu2fVK4ooXGAP4CpAoE=; b=X981fpKHiBTH7Yh0VbXn88E4xLI1TpHM9MwqvaAue4mWP8JSRodS0AkgXZ1c4+CvJO XOi6zfLgbYibJglxi6usiZ/aUoIHW8dWxdGQfDYRE9f5JAo1IFGMdjQPSrQlHl2GANbG H2BNfNM+mboF87HN4T1wcpiF5YC8EV1sOtK8QEtHG2+NtqU9CE5me8NCmNmy+IFkJBP+ P8Op4X2wXDSXHb6ZuYsRsjqg/LaTJdUscPQAfpkqXbUar/qF0foJtFIpKMZaRN7bErsM r9X8kbGqAWevsaI1B1KxTqV3N1DT4NBD8MomK8IP3d//BEFZcIWgIdTY6CTx2t2nNh+R GQew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752029510; x=1752634310; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=3uck+MBQ5BfFLV8Zm2WLiulLLu2fVK4ooXGAP4CpAoE=; b=WLdM6TJsN1zO/udJtsa3vvAO+Z/jOtrsK+Ta49Hl+dxMfcICP7XTI8BrqbeoW3cRYX ecoQLNSfsQ4UeDPKDpbfZoPYrSyA23w24OHP+o3ZOVKkMAfBq2tEo9l7nV7ZezTMSRkc LxMc78trUaOK/SS8yejFGD5qDcyQnqRz5e5uzxvw6AvWo4wkC8CwpWmEKdJM1JYkyOrO fOIOfXXU9R0Ypn5V8NrLABEMfVXfoXkRsBSSsTnm5UQ5++NH87Em50PjtBiXqe0Tg9Tc PeDFdFNWGFN1jyX2FFwOJJ5GVjVNZr7bIMgzjaZdvxUVgIIdm7xPSyoNMkAIBN1h9U7H P9iQ== X-Gm-Message-State: AOJu0YyhkM7KQsVPORr75VbSfhAdHCc58b2RYi9eCNhtVxLljI53i6Op U0sx41kC/YaDzqdgj70s8Yv2nsbRWNAhe3N3JQxajhB58LomXg0JtB8Sdkliru20+I8nQ6hbUEj QFpK7 X-Gm-Gg: ASbGncuJrqqARS67WPfUj6nh7MrPZj6rDpLUnmkD4IiI7L7aHlf/Jb30+LpbQYtmNmV +BdxxdPE95C5KuCWPe9bfrxH5LPCA2ta8PM5TDQHUILFFiP1vr6zEzoz1fbD6uC3AJiW0TH7sAg J3HrrfZc/aShls5R+UZXVLL90yWJJOfamxyCSisqoex9reoIakMvvwuw0dEjDVT0JpJzEA0kV74 2tgG65yTi+3ogkvsSKCEcFAndFcD+vgWIti0/aIZDoYp1IcV/nrLnwAJUVsBBJXe/ErpzSA2+b7 lZJZkIjK/yyQy1hMP660N17ghB5j5ohkFrgV10UrJGcgtI47A81+wA== X-Google-Smtp-Source: AGHT+IEs2Ppojjd3oHH/Jwe5UYE8C6zYIrz3pNvN5YnyherLUuGTu2ulIdt1nbx2X3WV8ZbcMzroCQ== X-Received: by 2002:a17:902:c94c:b0:234:ba37:879e with SMTP id d9443c01a7336-23ddb305362mr14401905ad.38.1752029510340; Tue, 08 Jul 2025 19:51:50 -0700 (PDT) Received: from hexa.. ([2602:feb4:3b:2100:a6e1:d218:3fcc:fd7d]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-23c845922b5sm121979075ad.199.2025.07.08.19.51.49 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jul 2025 19:51:50 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 12/12] minicom: correct the SRC_URI Date: Tue, 8 Jul 2025 19:51:23 -0700 Message-ID: <49fcec2041071d44289e03cac087de6b929d6153.1752029282.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 09 Jul 2025 02:51:51 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/220069 From: Guocai He In http://ftp.debian.org/debian/pool/main/m/minicom/, the tarball of minicom_2.9.orig.tar.bz2 can not be found. So the old SRC_URI should be updated. Signed-off-by: Guocai He Signed-off-by: Steve Sakoman --- meta/recipes-extended/minicom/minicom_2.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/minicom/minicom_2.9.bb b/meta/recipes-extended/minicom/minicom_2.9.bb index 907d5c79c9..38f517f2a2 100644 --- a/meta/recipes-extended/minicom/minicom_2.9.bb +++ b/meta/recipes-extended/minicom/minicom_2.9.bb @@ -7,7 +7,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=420477abc567404debca0a2a1cb6b645 \ file://src/minicom.h;beginline=1;endline=12;md5=a58838cb709f0db517f4e42730c49e81" -SRC_URI = "${DEBIAN_MIRROR}/main/m/${BPN}/${BPN}_${PV}.orig.tar.bz2" +SRC_URI = "https://salsa.debian.org/minicom-team/${BPN}/-/archive/${PV}/${BPN}-${PV}.tar.bz2" SRC_URI[sha256sum] = "9efbb6458140e5a0de445613f0e76bcf12cbf7a9892b2f53e075c2e7beaba86c"