69345 Commits

Author SHA1 Message Date
Bruce Ashfield
bcf7200a12 linux-yocto/5.15: update to v5.15.197
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    68efe5a6c16a Linux 5.15.197
    3b7841a78357 libbpf: Fix invalid return address register in s390
    46d78c07ce40 libbpf, riscv: Use a0 for RC register
    9e11d30ab096 libbpf: Fix riscv register names
    aadc10434cd1 selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3
    a5d954802bda scsi: pm80xx: Set phy->enable_completion only when we
    f7b814a132c5 Bluetooth: Add more enc key size check
    4df96f1f47a4 usb: typec: ucsi: psy: Set max current to zero when disconnected
    cd5e86e34c66 usb: renesas_usbhs: Fix synchronous external abort on unbind
    bd6a1b29fa31 usb: renesas_usbhs: Convert to platform remove callback returning void
    d146e96fef87 smb: client: fix memory leak in cifs_construct_tcon()
    7ee8f015eb47 mptcp: Fix proto fallback detection with BPF
    dad1e44ed940 mptcp: avoid unneeded subflow-level drops
    5bd1d0ca17f0 selftests: mptcp: join: rm: set backup flag
    85cc2f990287 staging: rtl8712: Remove driver using deprecated API wext
    f22c55a20a2d libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
    05ec43e9a9de libceph: fix potential use-after-free in have_mon_and_osd_map()
    09092269cb76 drm/amd/display: Check NULL before accessing
    c9a315a56da2 drm: sti: fix device leaks at component probe
    6176101b519f USB: serial: option: add support for Rolling RW101R-GL
    6738408111c2 USB: serial: ftdi_sio: add support for u-blox EVK-M101
    593d93b871dc xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    67192e8cb7f9 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
    66ac05e7b0d6 usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
    26e9b5da3231 usb: storage: sddr55: Reject out-of-bound new_pba
    4aa7426f5326 USB: storage: Remove subclass and protocol overrides from Novatek quirk
    4ba515dfff7e usb: storage: Fix memory leak in USB bulk transport
    5a1628283cd9 usb: gadget: f_eem: Fix memory leak in eem_unwrap
    7fb4b54bbf07 usb: cdns3: Fix double resource release in cdns3_pci_probe
    a4c4118c2af2 most: usb: fix double free on late probe failure
    1f9ba65b019f serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
    354fb03002da firmware: stratix10-svc: fix bug in saving controller data
    113f10c86d7d slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    db0835dfac45 thunderbolt: Add support for Intel Wildcat Lake
    5a0dcabc8a14 drivers/usb/dwc3: fix PCI parent check
    ed69c3db499c dm-verity: fix unreliable memory allocation
    6fdcd310f92a can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    e36369dfa2e7 can: sja1000: fix max irq loop handling
    bd1415efbab5 atm/fore200e: Fix possible data race in fore200e_open()
    19f3ace94943 MIPS: mm: Prevent a TLB shutdown on initial uniquification
    aad9d048a321 iio: accel: bmc150: Fix irq assumption regression
    17a38b85226c iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    57f759d399e7 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    5b9790d2009e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    891775b1b4ed spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    f231314b64c5 mailbox: mailbox-test: Fix debugfs_create_dir error checking
    b0c4d5135b04 net: atlantic: fix fragment overflow handling in RX path
    05c51c116e0b net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
    0bd2b12b3ca9 net: dsa: sja1105: simplify static configuration reload
    1989e6ecee91 net: dsa: sja1105: Convert to mdiobus_c45_read
    18ef3ad1bb57 net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    3c11ac20b5fd net/mlx5e: Fix validation logic in rate limiting
    58a8e250d5b6 net: aquantia: Add missing descriptor cache invalidation on ATL2
    15d560cdf5b3 platform/x86: intel: punit_ipc: fix memory corruption
    4475bac8224c Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    69c7825df64e can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
    0e2d3a8d9fff Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART"
    91db2663893a Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()"
    0b6a100efd9b mptcp: do not fallback when OoO is present
    e2d1ad207174 mptcp: fix a race in mptcp_pm_del_add_timer()
    2cc425276ccb mptcp: fix premature close in case of fallback
    4c3d91386d18 mptcp: fix ack generation for fallback msk
    fab9232b3f27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    444c875c347c ata: libata-scsi: Fix system suspend for a security locked drive
    015b71996269 Input: pegasus-notetaker - fix potential out-of-bounds access
    7bf70ce0a08e Input: remove third argument of usb_maxpacket()
    78acf73dfc30 usb: deprecate the third argument of usb_maxpacket()
    c22cedbc18dd mptcp: Disallow MPTCP subflows from sockmap
    4a4f32f3185a selftests: mptcp: connect: fix fallback note due to OoO
    f3737fc3b8d9 pmdomain: samsung: plug potential memleak during probe
    582f48d22eb5 pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    1d3f3d4c1faf pmdomain: imx: Fix reference count leak in imx_gpc_remove
    890472d6fbf0 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    e9af27d1880a mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    e24a45da635b net: qede: Initialize qede_ll_ops with designated initializer
    c993fd02ba47 btrfs: fix crash on racing fsync and size-extending write into prealloc
    bff4d06c38a7 btrfs: add helper to truncate inode items when logging inode
    707d49dd441a Makefile.compiler: replace cc-ifversion with compiler-specific macros
    4c019e93f0e5 uio_hv_generic: Set event for all channels on the device
    80fe72069168 tracing/tools: Fix incorrcet short option in usage text for --threads
    3afeb909c3e2 net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
    75ccdb4afe41 ALSA: usb-audio: fix uac2 clock source at terminal parser
    bb1c19636aed mm/secretmem: fix use-after-free race in fault handler
    2ef178413183 mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    dcf80cb1bf88 kconfig/nconf: Initialize the default locale at startup
    87297ab1e783 kconfig/mconf: Initialize the default locale at startup
    699c6cc0f18e net: tls: Cancel RX async resync request on rcd_delta overflow
    fbbcd769c800 selftests: net: use BASH for bareudp testing
    804b5b8e3545 scsi: core: Fix a regression triggered by scsi_host_busy()
    674329151458 vsock: Ignore signal/timeout on connect() if already established
    ecbb12caf399 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
    597bbbe023d9 kernel.h: Move ARRAY_SIZE() to a separate header
    ca4452aa69ab platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
    7616e2eee679 s390/ctcm: Fix double-kfree
    f95bef5ba0b8 net: openvswitch: remove never-working support for setting nsh fields
    20d7e6bce8e2 net: dsa: hellcreek: fix missing error handling in LED registration
    ba8d3df04c00 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    5fb232c76334 drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    99908e2d6012 mptcp: fix race condition in mptcp_schedule_work()
    7536472a4575 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    f449a1edd7a1 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    109afbd88ecc scsi: sg: Do not sleep in atomic context
    60ba31330faf nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    4ce5218b1012 Input: imx_sc_key - fix memory corruption on unload
    729d21c82c1b Input: cros_ec_keyb - fix an invalid memory access
    630360c6724e be2net: pass wrb_params in case of OS2BMC
    f2e52a9d10d8 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    9c58c64ec412 mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    de9dc8cbeea0 HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    652b24f07bae net/sched: act_connmark: handle errno on tcf_idr_check_alloc
    b70c24827e11 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    bf51f26c5bcc EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    76eb3ac2f01a EDAC/altera: Handle OCRAM ECC enable after warm reset
    4b63d3858a1e spi: Try to get ACPI GPIO IRQ earlier
    8af069dc2fbf ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
    217d47255a2e ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    4cba73c4c892 fs/proc: fix uaf in proc_readdir_de()
    298f1e0694ab ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    5fb4722507b7 strparser: Fix signed/unsigned mismatch bug
    3b9447e68777 gcov: add support for GCC 15
    b114996a095d NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    d0ee0b42a9c0 HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    4681960bc0f4 netfilter: nf_tables: reject duplicate device on updates
    cbbe9170ca2a mtd: onenand: Pass correct pointer to IRQ handler
    20067f737dc0 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    b69f19244c2b mm/ksm: fix flag-dropping behavior in ksm_madvise
    1a6ed803c4b1 mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    c4cdd143c359 bpf: Add bpf_prog_run_data_pointers()
    9f282104627b ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
    6ec3bfe0ad73 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    709e5c088f9c drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    bfa4f33f0a43 ASoC: cs4271: Fix regulator leak on probe failure
    ee29c2319ee8 regulator: fixed: fix GPIO descriptor leak on register failure
    5c1fd2b81e13 acpi,srat: Fix incorrect device handle check for Generic Initiator
    9d1d7858fc5b Bluetooth: L2CAP: export l2cap_chan_hold for modules
    8b1551cacb66 hsr: Fix supervision frame sending on HSRv0
    f8706e15710f net_sched: limit try_bulk_dequeue_skb() batches
    5af7ec404e85 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    727f158d9a8a net/mlx5e: Fix maxrate wraparound in threshold between units
    37f0680887c5 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    218b67c8c824 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    def0860b2caf net_sched: act_connmark: use RCU in tcf_connmark_dump()
    0d14e8ba20cf net/sched: act_connmark: transition to percpu stats and rcu
    b99642817f60 net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search
    6a45a97e0099 net: sched: act: move global static variable net_id to tc_action_ops
    659e94c35a3f wifi: mac80211: skip rate verification for not captured PSDUs
    1040834078ac net: mdio: fix resource leak in mdiobus_register_device()
    51b8f0ab888f tipc: Fix use-after-free in tipc_mon_reinit_self().
    8a695769c1e8 net/smc: fix mismatch between CLC header and proposal
    abb086b9a95d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    17ef29586b76 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    2f2b940e7fa3 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    d566e9a2bfc8 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    7a6d1e740220 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    d11c10bce6f4 net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    dd60d0ba60f8 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    652585576866 NFS: check if suid/sgid was cleared after a write as needed
    9727b5dc98c3 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    d2560884113c NFS4: Fix state renewals missing after boot
    e5d5b4228e05 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
    be5a8537b2b9 compiler_types: Move unused static inline functions warning to W=2
    e988634d7aae drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    7d316c3c9e53 selftests: netdevsim: set test timeout to 10 minutes
    3694a618609b extcon: adc-jack: Cleanup wakeup source only if it was enabled
    d3eaf1052cd8 lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    3a9f46f5d467 rtc: rx8025: fix incorrect register reference
    38771ab159d9 tracing: Fix memory leaks in create_field_var()
    a304aa581895 bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    25979f34feec bnxt_en: PTP: Refactor PTP initialization functions
    4e6b9004f01d net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
    82b5ddac0843 sctp: Hold sock lock while iterating over address list
    72e3fea68eac sctp: Prevent TOCTOU out-of-bounds write
    ad5ddc33af9f sctp: Hold RCU read lock while iterating over address list
    6618c36f6d86 net: dsa: b53: stop reading ARL entries if search is done
    ae52ba1ad2ed net: dsa: b53: fix enabling ip multicast
    cd8c2419b50b net: dsa: b53: fix resetting speed and pause on forced link
    48df5cc7fd7c net: vlan: sync VLAN features with lower device
    82acad39d05c selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
    f3903664c883 netdevsim: add Makefile for selftests
    c2ce8d37e49e selftests/net: use destination options instead of hop-by-hop
    32c3e1cbc2e6 selftests/net: fix GRO coalesce test and add ext header coalesce tests
    e4603c1c4fd1 selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    a8d549eb5aca net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
    f8d974a0e8c2 riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    53c7a2110285 Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
    b345e06f2d35 ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    676ee2061f72 ceph: add checking of wait_for_completion_killable() return value
    8bff07a8fc0a ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    1943b69e87b0 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
    6da480c32392 ACPI: property: Return present device nodes only on fwnode interface
    a66596cf5643 9p: sysfs_init: don't hardcode error to ENOMEM
    879f6a7e75c3 cpufreq: tegra186: Initialize all cores to max frequencies
    435b42a10995 9p: fix /sys/fs/9p/caches overwriting itself
    66f257db400a clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    c50651c205f6 clk: at91: clk-master: Add check for divide by 3
    e7322da6c50f ARM: at91: pm: save and restore ACR during PLL disable/enable
    a02f2dbdd77a rtc: pcf2127: clear minute/second interrupt
    cebc9f5ee3e3 um: Fix help message for ssl-non-raw
    64ef62fb1c4a fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
    f7af3813ccff btrfs: mark dirty extent range for out of bound prealloc extents
    8a139fe903f3 RDMA/hns: Fix wrong WQE data when QP wraps around
    63bb04cda173 RDMA/irdma: Set irdma_cq cq_num field during CQ create
    e8805e90ff0c RDMA/irdma: Remove unused struct irdma_cq fields
    2380d634959a RDMA/irdma: Fix SD index calculation
    cc9ab6e1a375 ACPICA: Update dsmethod.c to get rid of unused variable warning
    15afebb95974 orangefs: fix xattr related buffer overflow...
    c12ebeacfbae page_pool: Clamp pool size to max 16K pages
    2acf073edeb7 exfat: limit log print for IO error
    c70926971b36 ALSA: usb-audio: add mono main switch to Presonus S1824c
    b65ca9708bfb Bluetooth: bcsp: receive data only if registered
    d2850f037c2a Bluetooth: SCO: Fix UAF on sco_conn_free
    d4d90a419b55 net: macb: avoid dealing with endianness in macb_set_hwaddr()
    bb7d0d13c6e1 fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    b2eef65a3be2 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    fa4daf7d11e4 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
    a8a97e0d0b60 NFSv4.1: fix mount hang after CREATE_SESSION failure
    679fd67bac26 NFSv4: handle ERR_GRACE on delegation recalls
    ca806ebc497b remoteproc: qcom: q6v5: Avoid handling handover twice
    e50066336660 sparc/module: Add R_SPARC_UA64 relocation handling
    eb3d29ca0820 PCI: cadence: Check for the existence of cdns_pcie::ops before using it
    c3f99fd7ed17 r8169: set EEE speed down ratio to 1
    826ad86e1270 net: intel: fm10k: Fix parameter idx set but not used
    eb0c150d0279 wifi: ath10k: Fix connection after GTK rekeying
    0f7f34292071 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    f878bfd2c14c net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    a2aa97cde985 jfs: fix uninitialized waitqueue in transaction manager
    46c76cfa17d1 jfs: Verify inode mode when loading from disk
    14b6f0b3cfe2 ipv6: np->rxpmtu race annotation
    318aeeb3f8fe usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    7a219cbbc9e8 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    311df10cca0e allow finish_no_open(file, ERR_PTR(-E...))
    ffae0417168e scsi: lpfc: Define size of debugfs entry for xri rebalancing
    57225d17cd8d scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
    430e3ca0a53d scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
    41cd00665c99 selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
    0ec2cd5c5879 page_pool: always add GFP_NOWARN for ATOMIC allocations
    a58098c6b91c drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    fd62e1a94cff net/cls_cgroup: Fix task_get_classid() during qdisc run
    45e4e4a8772f udp_tunnel: use netdev_warn() instead of netdev_WARN()
    d276a6c3bb74 selftests: Replace sleep with slowwait
    fbf410aafc85 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    ff4cd9564dc3 selftests: Disable dad for ipv6 in fcnal-test.sh
    b16a010338bf x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
    56c832864e5e netfilter: nf_reject: don't reply to icmp error messages
    0858b8e38884 selftests: traceroute: Use require_command()
    9d2e3da0a0e8 media: redrat3: use int type to store negative error codes
    ffb663e41dde net: sh_eth: Disable WoL if system can not suspend
    eab8d5e5e1d0 phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    04f057e4c156 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    63eb6730ce06 ntfs3: pretend $Extend records as regular files
    8a8d07553583 net: phy: marvell: Fix 88e1510 downshift counter errata
    0f30019f5a58 drm/msm: make sure to not queue up recovery more than once
    0cf9a50af91f usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
    2dc7bcc0b112 usb: gadget: f_hid: Fix zero length packet transfer
    bb8f9de71c9b iommu/amd: Skip enabling command/event buffers for kdump
    66bcd6c577d8 net: call cond_resched() less often in __release_sock()
    07ae8cc64557 net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    fdfd91ac1f44 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    1452d49956d9 drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    b4a4bf4b4452 drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    bda8e00b354a dmaengine: dw-edma: Set status for callback_result
    35e42324c21f dmaengine: mv_xor: match alloc_wc and free_wc
    e12a50e3621f dmaengine: sh: setup_xref error handling
    774e8d44ac88 ptp: Limit time setting of PTP clocks
    48c1d49c64d0 scsi: pm8001: Use int instead of u32 to store error codes
    7ce10ef9a9b6 mips: lantiq: xway: sysctrl: rename stp clock
    e1f79a12bd62 mips: lantiq: danube: add missing device_type in pci node
    a39c88bedb0f mips: lantiq: danube: add missing properties to cpu node
    69f04cdd1a50 media: fix uninitialized symbol warnings
    b751b7f87acb drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    92071a422131 extcon: adc-jack: Fix wakeup source leaks on device unbind
    62443e7d827a scsi: pm80xx: Fix race condition caused by static variables
    866d93632daa scsi: mpi3mr: Fix controller init failure on fault during queue creation
    9650cd59f4e1 rds: Fix endianness annotation for RDS_MPATH_HASH
    fb4f59e66952 ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    30cc10a05b22 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    38edfa2a5a7a net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
    f80a71a29f2d net: When removing nexthops, don't call synchronize_net if it is not necessary
    d2ee1c7fc9c2 char: misc: Does not request module for miscdevice with dynamic minor
    e14d3af189de usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    f979f913b99c iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
    ad22eebd7177 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    26f6a1dd5d81 media: imon: make send_packet() more robust
    0bf756ae1e69 net: ipv6: fix field-spanning memcpy warning in AH output
    15def75e75a7 bridge: Redirect to backup port when port is administratively down
    a65cbffb0e81 powerpc/eeh: Use result of error_detected() in uevent
    e269b500b23f thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    157b7b41a5d2 net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    d178723da249 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    5ba991865cee drm/tidss: Set crtc modesetting parameters with adjusted mode
    603c103f9e30 drm/tidss: Use the crtc_* timings when programming the HW
    965813f1afaf media: pci: ivtv: Don't create fake v4l2_fh
    556da2856798 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    e04e3165bc8b selftests/net: Ensure assert() triggers in psock_tpacket.c
    634d43ee1d23 selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    be80a71699b4 PCI: Disable MSI on RDC PCI to PCIe bridges
    31caf9efba7e drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    19096bddf873 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    b9d1d32766d3 drm/amd/pm: Use cached metrics data on arcturus
    89af20042ea5 drm/amd/pm: Use cached metrics data on aldebaran
    446631df0714 mfd: da9063: Split chip variant reading in two bus transactions
    adde0c657c90 mfd: madera: Work around false-positive -Wininitialized warning
    d7bc1931a256 mfd: stmpe-i2c: Add missing MODULE_LICENSE
    72f7a31793bb mfd: stmpe: Remove IRQ domain upon removal
    fa0d842eea8c tools/power x86_energy_perf_policy: Prefer driver HWP limits
    1c0eb3211e17 tools/power x86_energy_perf_policy: Enhance HWP enable
    87de7b4213c1 tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    2ba32bd019cf tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    481e609c7854 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    2617ae62f086 uprobe: Do not emulate/sstep original instruction when ip is changed
    cf3e51d388e1 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    39805c732891 cpuidle: Fail cpuidle device registration if there is one already
    7f6993bd3224 tools/cpupower: fix error return value in cpupower_write_sysfs()
    6e9e9558da65 video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    e8cde03de867 nvme-fc: use lock accessing port_state and rport state
    2f4852db87e2 nvmet-fc: avoid scheduling association deletion twice
    75a98126757e tee: allow a driver to allocate a tee_device without a pool
    5a7e2d5d1b68 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
    13257496a496 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    e3f7173df91b power: supply: sbs-charger: Support multiple devices
    a59c9c1370db hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    9545f5ef8258 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    799f75a894a6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    2ca16b41e88b irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    1ba13dde6a45 arc: Fix __fls() const-foldability via __builtin_clzl()
    55cf586b9556 cpufreq/longhaul: handle NULL policy in longhaul_exit
    916f62bf6964 selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    76ab1edadf69 ACPI: video: force native for Lenovo 82K8
    edc0b38f26fc memstick: Add timeout to prevent indefinite waiting
    9e18372fcf17 mmc: host: renesas_sdhi: Fix the actual clock
    fd031d98081e pinctrl: single: fix bias pull up/down handling in pin_config_set
    13ce905f0777 bpf: Don't use %pK through printk
    49be75e00d21 soc: ti: pruss: don't use %pK through printk
    ed7b7fbf2d5f spi: loopback-test: Don't use %pK through printk
    d06bbd6f5cd8 soc: qcom: smem: Fix endian-unaware access of num_entries
    9a0d4017a138 soc: aspeed: socinfo: Add AST27xx silicon IDs
    04dde9a7cb73 block: make REQ_OP_ZONE_OPEN a write operation
    6abeff03cb79 drm/sysfb: Do not dereference NULL pointer in plane reset
    afd6e9fe377f drm/sched: Fix race in drm_sched_entity_select_rq()
    9ec40fba7357 usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
    e6f1413b1cfb Revert "docs/process/howto: Replace C89 with C11"
    518eadd15f7e arch: back to -std=gnu89 in < v5.18
    f28b14d235a8 x86/boot: Compile boot code with -std=gnu11 too
    8050bbc2a2b9 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
    fe9092c42877 xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
    79d7094ecd75 xhci: dbc: Improve performance by removing delay in transfer event polling.
    2f5c3743466f xhci: dbc: Allow users to modify DbC poll interval via sysfs
    d596d39e16e3 xhci: dbc: poll at different rate depending on data transfer activity
    902f900b46e9 xhci: dbc: Provide sysfs option to configure dbc descriptors
    42ccfa662c2e x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
    12a895faa0c9 net: phy: dp83867: Disable EEE support as not implemented
    56612e80a80b can: gs_usb: increase max interface to U8_MAX
    941285def6f6 net: ravb: Enforce descriptor type ordering
    6664de2a13b5 ravb: Exclude gPTP feature support for RZ/G2L
    381eb91874a6 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    bfb5e825c206 serial: 8250_dw: handle reset control deassert error
    3299a39f9a09 serial: 8250_dw: Use devm_add_action_or_reset()
    d979639f099c regmap: slimbus: fix bus_context pointer in regmap init calls
    c5279b8c91c9 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    c674a191ada3 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    f64e5bdde3be drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    ca8cc1ae1425 drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    e5e712518b29 net: hns3: return error code when function fails
    8814f060d364 drm/etnaviv: fix flush sequence logic
    43005002b60e usbnet: Prevents free active kevent
    18652ab01a20 libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    e5996b15ab1d libbpf: Normalize PT_REGS_xxx() macro definitions
    82a674170040 riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
    9450d2fe01d0 bpf: Do not audit capability check in do_jit()
    de2ce6b14bc3 bpf: Sync pending IRQ work before freeing ring buffer
    29b6987bdea3 ALSA: usb-audio: fix control pipe direction
    ea48293df43b drm/msm/a6xx: Fix GMU firmware parser
    488f3206325e wifi: ath10k: Fix memory leak on unsupported WMI command
    641e47ea2831 ASoC: qdsp6: q6asm: do not sleep while atomic
    cca3958c5565 mptcp: restore window probe
    90d835caf3eb fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    9c78e8179a14 fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    55f60a72a178 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
    db5c9a162d2f fbdev: bitblit: bound-check glyph index in bit_putcs*
    bc78a4f51d54 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
    4b05bd1d75d3 fbdev: atyfb: Check if pll_ops->init_pll failed
    c7bf258321a1 net: usb: asix_devices: Check return value of usbnet_get_endpoints
    375fdd8993ce NFSD: Fix crash in nfsd4_read_release()
    5fa8b4382c01 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
    5a6f9727ae78 btrfs: always drop log root tree reference in btrfs_replay_log()
    f5c926c9e7fe btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
    a740e71c2344 x86/bugs: Fix reporting of LFENCE retpoline
    1bed56f089f0 net/sched: sch_qfq: Fix null-deref in agg_dequeue

(From OE-Core rev: 873cfb3c627738d4ab03eb3a5e1e3fb42f9f32b9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Bruce Ashfield
ff90622dfc linux-yocto/5.15: update to v5.15.196
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    cc5ec87693063 Linux 5.15.196
    59c78e8fddc1f PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
    83a563fab563f net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
    c5d116862dd3e usb: gadget: f_acm: Refactor bind path to use __free()
    185193a4714aa usb: gadget: f_ncm: Refactor bind path to use __free()
    d44e82f46cd0e usb: gadget: Introduce free_usb_request helper
    97fc7aa654e30 usb: gadget: Store endpoint pointer in usb_request
    02fbea0864fd4 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    9b82da54a0305 xfs: always warn about deprecated mount options
    b57a3760d12bd devcoredump: Fix circular locking dependency with devcd->mutex.
    11300f645870a PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    61d6249ea441b PCI: rcar-host: Drop PMSR spinlock
    9e14fb714ebf5 PCI: rcar: Finish transition to L1 state in rcar_pcie_config_access()
    97ab6a90c72d9 PCI: tegra194: Handle errors in BPMP response
    13981b0555ab4 f2fs: fix wrong block mapping for multi-devices
    ba88a53d7f5df NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    8004d4b8cbf1b vfs: Don't leak disconnected dentries on umount
    0157c469edac2 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    c6fa15fa94016 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    0e143e87264db wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    ddcfc52965c19 PCI: j721e: Fix programming sequence of "strap" settings
    2ddb51e228192 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    cfd1aa3e2b71f fuse: fix livelock in synchronous file put from fuseblk workers
    a39f70d63f437 fuse: allocate ff->release_args only if release is needed
    6012804a77860 padata: Reset next CPU when reorder sequence wraps around
    38d702a06487c iio: imu: inv_icm42600: Simplify pm_runtime setup
    be16df3c3c5dd PM: runtime: Add new devm functions
    0f9f51390c866 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    f35ab1ba853ab iio: imu: inv_icm42600: use = { } instead of memset()
    8e69c8f3ae1c5 NFSD: Fix last write offset handling in layoutcommit
    0570c78e6c707 NFSD: Minor cleanup in layoutcommit processing
    68d615f4b00ab NFSD: Rework encoding and decoding of nfsd4_deviceid
    2dc2bc27578c3 xfs: fix log CRC mismatches between i386 and other architectures
    71f9402044636 xfs: rename the old_crc variable in xlog_recover_process
    6e7f06895db6e s390/cio: Update purge function to unregister the unused subchannels
    dc9f91f849860 arm64: errata: Apply workarounds for Neoverse-V3AE
    a6ef05314d5a8 arm64: cputype: Add Neoverse-V3AE definitions
    1bff561ebe700 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    ad2be44882716 most: usb: hdm_probe: Fix calling put_device() before device initialization
    578eb18cd111a most: usb: Fix use-after-free in hdm_disconnect
    cee4ab233f895 mei: me: add wildcat lake P DID
    2670932f24657 comedi: fix divide-by-zero in comedi_buf_munge()
    97a71d277e759 binder: remove "invalid inc weak" check
    55c7290b1a2af xhci: dbc: enable back DbC in resume if it was enabled before suspend
    6d0edbdb0bf72 usb: raw-gadget: do not limit transfer length
    f9bfb3fc7ffa3 usb/core/quirks: Add Huawei ME906S to wakeup quirk
    1a5afa2b586ee USB: serial: option: add Telit FN920C04 ECM compositions
    443bc87ec125a USB: serial: option: add Quectel RG255C
    57bb21f4e7b1d USB: serial: option: add UNISOC UIS7720
    2c651b835b9f6 net: ravb: Ensure memory write completes before ringing TX doorbell
    a63ab2c3c48a2 net: usb: rtl8150: Fix frame padding
    09bba278ccde2 vsock: fix lock inversion in vsock_assign_transport()
    93b1ab422f196 ocfs2: clear extent cache after moving/defragmenting extents
    f2ef52fbdc5f0 MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    5666bcc3c00f7 Revert "cpuidle: menu: Avoid discarding useful information"
    f49962e51a428 net: bonding: fix possible peer notify event loss or dup issue
    03e80a4b04ef1 sctp: avoid NULL dereference when chunk data buffer is missing
    8a2375b0e9b89 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    c42dbdcde7220 dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    00daafde87d2e net: enetc: correct the value of ENETC_RXB_TRUESIZE
    e7a8c57671a1f rtnetlink: Allow deleting FDB entries in user namespace
    bde6afe89ac15 net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
    7cd416cc0220c net: add ndo_fdb_del_bulk
    31017cda9928e net: rtnetlink: add bulk delete support flag
    a36130f7921c9 net: netlink: add NLM_F_BULK delete request modifier
    40ffa6a8c1907 net: rtnetlink: use BIT for flag values
    fc69b00561e49 net: rtnetlink: add helper to extract msg type's kind
    a6c202c341624 m68k: bitops: Fix find_*_bit() signatures
    1701af4d10b4f hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    2a112cdd66f5a hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    450ac1c490f8d dlm: check for defined force value in dlm_lockspace_release
    9df3c241fbf69 hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    418e48cab99c5 hfs: validate record offset in hfsplus_bmap_alloc
    c135b8dca6552 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    725522af093ff hfs: make proper initalization of struct hfs_find_data
    b92904866b9f3 hfs: clear offset and space out of valid records in b-tree node
    25f09699edd36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    45ec13d6ce557 exec: Fix incorrect type for ret
    3324e5e3ac97a Revert "perf test: Don't leak workload gopipe in PERF_RECORD_*"
    ae9ad3b673252 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    7ab44236b32ed hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    736159f7b296d ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    3c77e994e4ecd ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    fdccb3adc59d7 sched/fair: Fix pelt lost idle time detection
    15fda76f7a57a sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    343e991e2596a drm/amd/powerplay: Fix CIK shutdown temperature
    d38aec7cd3502 riscv: kprobes: Fix probe address validation
    6a90c8381c333 net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    50b2fb48a4733 net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    a6b33d9edf260 net: usb: use eth_hw_addr_set() instead of ether_addr_copy()
    bab04baafc1c5 tls: don't rely on tx_work during send()
    09b1c01df5d46 tls: always set record_type in tls_process_cmsg
    669d389ed231b tls: wait for async encrypt in case of error during latter iterations of sendmsg
    2cb75c87428e0 net: tls: wait for async completion on last message
    4de9057aebb15 splice, net: Add a splice_eof op to file-ops and socket-ops
    01abf7b445062 tg3: prevent use of uninitialized remote_adv and local_adv variables
    c43fe40e67d69 tcp: fix tcp_tso_should_defer() vs large RTT
    14c9047ad5165 amd-xgbe: Avoid spurious link down messages during interface toggle
    402b6985e872b net/ip6_tunnel: Prevent perpetual tunnel growth
    1095322a7e014 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    5b9c949c66846 doc: fix seg6_flowlabel path
    06477bbe26e04 net: dlink: handle dma_map_single() failure properly
    97760193e892b can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    aca91cae0c917 dax: skip read lock assertion for read-only filesystems
    77711d850bed7 HID: multitouch: fix sticky fingers
    a510364e8cac0 cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    9699fd9e13df2 crypto: rockchip - Fix dma_unmap_sg() nents value
    df808a1f1550b drm/exynos: exynos7_drm_decon: remove ctx->suspended
    d6a3c53eebd1f drm/exynos: exynos7_drm_decon: properly clear channels during bind
    0e212fdcea59c drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    4b354a29166a3 blk-crypto: fix missing blktrace bio split events
    5918d914a3a67 media: lirc: Fix error handling in lirc_register()
    ddb9a92a999b6 media: rc: Directly use ida_free()
    723e7084497ef media: s5p-mfc: remove an unused/uninitialized variable
    78f6eaf14fe3d btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    2e9e10657b041 ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    14476553253b2 jbd2: ensure that all ongoing I/O complete before freeing blocks
    34033f75d0ccb r8152: add error handling in rtl8152_driver_init

(From OE-Core rev: 35316957236f12cda3a164d85177ecb4dc5fa434)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Bruce Ashfield
f1a1393dd0 linux-yocto/5.15: update to v5.15.195
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    ac56c046adf41 Linux 5.15.195
    636e7d6bdf205 selftests: mptcp: join: validate C-flag + def limit
    4b9b376856a95 mptcp: pm: in-kernel: usable client side with C-flag
    946771c2a2b11 mm/slab: make __free(kfree) accept error pointers
    81d0664bed91a media: pci: ivtv: Add check for DMA map result
    71285c029dcc4 xen/events: Update virq_to_irq on migration
    9c1df18612fbb media: pci: ivtv: Add missing check after DMA map
    66c8a83bf1de2 media: pci/ivtv: switch from 'pci_' to 'dma_' API
    55a954a54ffc8 arm64: mte: Do not flag the zero page as PG_mte_tagged
    26ea9b6a93a54 media: cx18: Add missing check after DMA map
    cb044864188cc media: switch from 'pci_' to 'dma_' API
    9339cf38762ce writeback: Avoid excessively long inode switching times
    6483eabc195dc writeback: Avoid softlockup when switching many inodes
    9b902f370b93e cramfs: Verify inode mode when loading from disk
    5c64e8be2a7ef fs: Add 'initramfs_options' to set initramfs mount options
    c3b654021931d pid: Add a judgment for ns null in pid_nr_ns
    1d144b4cdde08 minixfs: Verify inode mode when loading from disk
    3fb4c19233a0e minmax.h: remove some #defines that are only expanded once
    092036da9b6d5 minmax.h: simplify the variants of clamp()
    64394017d091a minmax.h: move all the clamp() definitions after the min/max() ones
    4942fcc84a1ee minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    5011c410f9670 minmax.h: reduce the #define expansion of min(), max() and clamp()
    b7ae5d8baa5ca minmax.h: update some comments
    2524736951b23 minmax.h: add whitespace around operators and after commas
    82b39b1090b0e minmax: fix up min3() and max3() too
    b1094b4b54b0f minmax: improve macro expansion and type checking
    3854a23090858 minmax: simplify min()/max()/clamp() implementation
    89f6bf22d039a minmax: don't use max() in situations that want a C constant expression
    e035ca130ff7f minmax: make generic MIN() and MAX() macros available everywhere
    4b5dda7f8b02a minmax: simplify and clarify min_t()/max_t() implementation
    3d1169785a9c1 minmax: add a few more MIN_T/MAX_T users
    e73a9333cdaee minmax: avoid overly complicated constant expressions in VM code
    9ed1e4221cb67 minmax: fix indentation of __cmp_once() and __clamp_once()
    d16b73f6c5939 minmax: deduplicate __unconst_integer_typeof()
    e3774f3281ed1 minmax: Introduce {min,max}_array()
    9c88de0e0c1e5 arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    d238fee82dd83 btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    f2bd5493ef501 fscontext: do not consume log entries when returning -EMSGSIZE
    f550466949e82 locking: Introduce __cleanup() based infrastructure
    a0e54bd8d7ea7 dm: fix NULL pointer dereference in __dm_suspend()
    95dd33361061f tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    41acc922c7811 ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    71a0ba7fdaf8d net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    32097a08ab5de mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    21d79eac5f953 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    715f4914fdd3e mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    5d327391f9faf media: mc: Clear minor number before put device
    fbfc745db628d Squashfs: reject negative file sizes in squashfs_read_inode()
    2ec88c3d9f8fe Squashfs: add additional inode sanity checking
    49f3a867d948c ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    44cee8ef325c0 ASoC: codecs: wcd934x: Simplify with dev_err_probe
    e0ce3ed1048a4 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    6836714a08756 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    a4e7273a45e85 ext4: free orphan info with kvfree
    505e69f76ac49 ext4: guard against EA inode refcount underflow in xattr update
    b975b3607605f ext4: correctly handle queries for metadata mappings
    32702f1ce389f ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    95a21611b14ae ext4: verify orphan file size is not too big
    550e0bccec100 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    8c5b1200596ce NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    735457683e235 mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    fff24a9c116d2 x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    46a986888a149 x86/umip: Check that the instruction opcode is at least two bytes
    eaa16de419692 spi: cadence-quadspi: Flush posted register writes before DAC access
    5a6c760bc332f spi: cadence-quadspi: Flush posted register writes before INDAC access
    f104a67b28053 PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    870457e7b7229 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    5533169bb2539 PCI/AER: Support errors introduced by PCIe r6.0
    09adece72b8c8 PCI/AER: Fix missing uevent on recovery when a reset is requested
    1f06b4864177b PCI/ERR: Fix uevent on failure to recover
    a645ca21de09e PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    690f307a81954 PCI/sysfs: Ensure devices are powered for config reads
    b167bfa432e3c rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    aaaa92ab55f13 rtc: interface: Fix long-standing race when setting alarm
    fa1bdbefe1f46 rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    c19b29291f21c memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    e5caecea44a7a mmc: core: SPI mode remove cmd7
    e614975f9b5df mtd: rawnand: fsmc: Default to autodetect buswidth
    971009a25fb8b sparc: fix error handling in scan_one_device()
    365282fc60155 sparc64: fix hugetlb for sun4u
    1cd60e0d0fb8f sctp: Fix MAC comparison to be constant-time
    d906e61d4d81b scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    9ee5eb3d09217 pwm: berlin: Fix wrong register in suspend/resume
    40c86afc81b51 powerpc/pseries/msi: Fix potential underflow and leak issue
    7bb05500a3ad3 powerpc/powernv/pci: Fix underflow and leak issue
    aa18f55365e93 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    6195d15fe4888 parisc: don't reference obsolete termio struct for TC* constants
    ef84ddf89dab4 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    c2b88b66bc359 lib/genalloc: fix device leak in of_gen_pool_get()
    4ce6902cc67d7 KEYS: trusted_tpm1: Compare HMAC values in constant time
    e94c99c026179 iommu/vt-d: PRS isn't usable if PDS isn't supported
    d202d1ac609bc iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    3ed42a6686f4f init: handle bootloader identifier in kernel parameters
    06d81ce319242 iio: frequency: adf4350: Fix prescaler usage.
    0016356ebd6a3 iio: dac: ad5421: use int type to store negative error codes
    c71fd8dcb7ae6 iio: dac: ad5360: use int type to store negative error codes
    8df273ef0f5ad fs/ntfs3: Fix a resource leak bug in wnd_extend()
    459d819648fe6 crypto: atmel - Fix dma_unmap_sg() direction
    ad4e8f9bdbef1 cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    83b594504d64f copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    816bb8b4e5c46 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    d3a9a8e1275eb btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    184b0aab791a5 drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    a812fc67d8855 media: i2c: mt9v111: fix incorrect type for ret
    e57d98c02ec84 firmware: meson_sm: fix device leak at probe
    0c2ac5a03a209 xen/manage: Fix suspend error path
    6f8e37bff9119 xen/events: Cleanup find_virq() return codes
    846f911295b2a ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    267801317911b arm64: dts: qcom: msm8916: Add missing MDSS reset
    3a0f197dd8e5f ACPI: debug: fix signedness issues in read/write helpers
    85580cbac5d4b ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    e28616ca3d67e bpf: Avoid RCU context warning when unpinning htab with internal structs
    28112b3d86b15 gpio: wcd934x: mark the GPIO controller as sleeping
    512aa949666ef gpio: wcd934x: Remove duplicate assignment of of_gpio_n_cells
    33e49de5dc09b tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    df58651968f82 crypto: essiv - Check ssize for decryption and in-place encryption
    4331a0ba2d15c bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    fa391f17a819f drm/amd/display: Properly disable scaling on DCE6
    cc857ceb2b3b4 drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    736153f3c4933 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    32ee65934d6b7 drm/amdgpu: Add additional DCE6 SCL registers
    057764172fcc6 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    b2986d63303d3 mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    e3602ddfcc2f9 mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    325425b0d066f tools build: Align warning options with perf
    b1d073728ef60 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    eb85ad5f23268 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    dbceedc0213e7 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    4c918f9d1cccc drm/vmwgfx: Fix Use-after-free in validation
    fb5df8006adde drm/vmwgfx: Copy DRM hash-table code into driver
    4139b1e435e3f s390/cio: unregister the subchannel while purging
    2dbf27f672c03 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    6ba7e73cafd15 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    c1f8a7e6efe58 scsi: mvsas: Use sas_task_find_rq() for tagging
    77798c6e94fd2 scsi: mvsas: Delete mvs_tag_init()
    43c3e8ce2f5f0 scsi: libsas: Add sas_task_find_rq()
    9ecd496233772 cpufreq: tegra186: Set target frequency for all cpus in policy
    bb78ef6dc7470 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    7d9eee92ed67a clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    b7e5c59f3b097 perf test: Don't leak workload gopipe in PERF_RECORD_*
    24e296d087f7d perf session: Fix handling when buffer exceeds 2 GiB
    3e97394445a0f rtc: x1205: Fix Xicor X1205 vendor prefix
    8dac32c17b01c perf util: Fix compression checks returning -1 as bool
    250cd976bbda0 clk: at91: peripheral: fix return value
    fcb3b7c30486d libperf event: Ensure tracing data is multiple of 8 sized
    1450bbb0ccd7f perf evsel: Avoid container_of on a NULL leader
    2977f02ee25a1 iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    86e23d78ec177 clocksource/drivers/clps711x: Fix resource leaks in error paths
    ed43bf13a6ac8 fs: always return zero on success from replace_fd()
    70322caf9f193 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    8a4dd74fe413d bus: fsl-mc: Check return value of platform_get_resource()
    d77ef2f621cd1 pinctrl: check the return value of pinmux_ops::get_function_name()
    e63aade22a33e Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    9eed157e5e27f Input: atmel_mxt_ts - allow reset GPIO to sleep
    972cbba5cd384 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    547e123e9d342 mm: hugetlb: avoid soft lockup when mprotect to large memory area
    26b1bfbd84172 ext4: fix checks for orphan inodes
    3901ae3c75a11 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    8fcc7315a10a8 net: nfc: nci: Add parameter validation for packet data
    1d1847812a1a5 fs: udf: fix OOB read in lengthAllocDescs handling
    a44f61f878f32 uio_hv_generic: Let userspace take care of interrupt mask
    61d38b5ce2782 Squashfs: fix uninit-value in squashfs_get_parent
    21c58835634df Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    5aa9b88560281 net: dlink: handle copy_thresh allocation failure
    7973555560eb0 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    3fa52104e4797 nfp: fix RSS hash key size when RSS is not supported
    0eddc0e5aebcc drivers/base/node: fix double free in register_one_node()
    827c8efa0d1af ocfs2: fix double free in user_cluster_connect()
    d76b099011fa0 hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    eb682b765533d Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    54f8ef1a970a8 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    5c06bc0b44ed8 RDMA/siw: Always report immediate post SQ errors
    8f67d2506f0ca usb: vhci-hcd: Prevent suspending virtually attached devices
    a89253eb4e648 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    1d79471414d7b ipvs: Defer ip_vs_ftp unregister during netns cleanup
    eb5da8e9db25a NFSv4.1: fix backchannel max_resp_sz verification check
    cef047e0a55cb coresight: trbe: Return NULL pointer for allocation failures
    0e9ec3bab4622 remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    58ce0b1bc2711 sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    b43c208c40179 sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    37547d8e6eba8 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    1857cdca12c4a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    59424dc0d0e04 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    4acb786042da4 wifi: ath10k: avoid unnecessary wait for service ready message
    c6d3da43b8540 Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    c15829a1fb0b0 IB/sa: Fix sa_local_svc_timeout_ms read race
    d77fb0bdce411 RDMA/core: Resolve MAC of next-hop device without ARP support
    77edaeb4dde29 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    523d184a495be scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    ce75dfd1748e7 scsi: qla2xxx: edif: Fix incorrect sign of error code
    54ded576045ef ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    248776651cef4 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    795c8dbc82827 RDMA/cm: Rate limit destroy CM ID timeout error message
    1bdb3bc5bfd33 drivers/base/node: handle error properly in register_one_node()
    eeeaa4b5a5f52 watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    6a9c2fcf6de54 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    581ba44117ed7 iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    f6b36cfd25cba fs: ntfs3: Fix integer overflow in run_unpack()
    95e29db33b5f7 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    dea9c8c9028c9 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    fbd79072f1cab ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    125527db41805 pps: fix warning in pps_register_cdev when register device fail
    f77e91b4283b5 misc: genwqe: Fix incorrect cmd field being reported in error
    c2024c8abd742 usb: gadget: configfs: Correctly set use_os_string at bind
    fe9fdc066c8cf usb: phy: twl6030: Fix incorrect type for ret
    650368aacbc78 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    82448110ee625 tcp: fix __tcp_close() to only send RST when required
    14ebe743b9647 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    94aa9bf2ddfcb wifi: mwifiex: send world regulatory domain to driver
    8b3589d7a763a drm/amdgpu: Power up UVD 3 for FW validation (v2)
    e00d07d780b3d ALSA: lx_core: use int type to store negative error codes
    39d0e7fd73efb media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    916c7891b59b9 scsi: myrs: Fix dma_alloc_coherent() error check
    eef5ef400893f scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    e0e0ce06f3571 usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    2cd9c97ad5529 drm/radeon/r600_cs: clean up of dead code in r600_cs
    666da97c49c2d i2c: designware: Add disabling clocks when probe fails
    90fb83f7863b6 i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    31660d4d93057 thermal/drivers/qcom/lmh: Add missing IRQ includes
    32240232b2a3b thermal/drivers/qcom: Make LMH select QCOM_SCM
    ae7b1443f4746 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    0b515a2839980 smp: Fix up and expand the smp_call_function_many() kerneldoc
    6d8b1a21fd5c3 bpf: Explicitly check accesses to bpf_sock_addr
    e822f368f758a selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    7ac8f7a186451 i3c: master: svc: Recycle unused IBI slot
    11269c08013f4 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    ebf97395b0a0b pwm: tiehrpwm: Fix corner case in clock divisor calculation
    cc2b2a8c18a96 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    3c8ceb2d4dbdb firmware: firmware: meson-sm: fix compile-test default
    5cfaadc902249 pinctrl: renesas: Use int type to store negative error codes
    45052d922054c PM: sleep: core: Clear power.must_resume in noirq suspend error path
    22863772e94fd block: use int to store blk_stack_limits() return value
    a04120b2d187b regulator: scmi: Use int type to store negative error codes
    2927ef93169a0 ARM: at91: pm: fix MCKx restore routine
    4b97e99b87a77 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    29db98243205b pinctrl: meson-gxl: add missing i2c_d pinmux
    8b063076fa7e1 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    1955c776a6077 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    ce780f740cf44 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    3a502b0eefcfc libbpf: Fix reuse of DEVMAP
    c6552fac71990 regmap: Remove superfluous check for !config in __regmap_init()
    64f14b1ab6f39 x86/vdso: Fix output operand size of RDPID
    5d01f2b815682 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    90ea4c0484ebb coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    0ddd59d58b597 selftests: arm64: Check fread return value in exec_target
    cf038b6bb9ed5 filelock: add FL_RECLAIM to show_fl_flags() macro
    c1db864270eb7 net/9p: fix double req put in p9_fd_cancelled
    3fe58fa612052 minmax: add in_range() macro
    bd903c25b652c crypto: rng - Ensure set_ent is always present
    46263a0b687a0 platform/x86: int3472: Check for adev == NULL
    823671bb8b05d driver core/PM: Set power.no_callbacks along with power.no_pm
    53dab62cda6e7 staging: axis-fifo: flush RX FIFO on read errors
    82e0bb28a060c staging: axis-fifo: fix maximum TX packet length check
    e18cfcb828ed2 serial: stm32: allow selecting console when the driver is module
    48685b39f2fed hid: fix I2C read buffer overflow in raw_event() for mcp2221
    c094712e40488 perf subcmd: avoid crash in exclude_cmds when excludes is empty
    0eb762f420b25 dm-integrity: limit MAX_TAG_SIZE to 255
    8ed134c2520d7 wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    6c7c5b465a7b8 USB: serial: option: add SIMCom 8230C compositions
    663faf1179db9 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    3f876cd47ed8b media: tuner: xc5000: Fix use-after-free in xc5000_release
    3fdeb807b93d0 media: tunner: xc5000: Refactor firmware load
    c3ad8c30b6b10 udp: Fix memory accounting leak.
    20fc1431bcdf4 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
    71c52b073922d media: rc: fix races with imon_disconnect()
    120e221b4bbe9 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    ddc79fba132b8 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    9407809b44dc6 iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support

(From OE-Core rev: a6b566b362d8d4f200d48bfa4c97297c45c9443e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Aleksandar Nikolic
1d5c8af9c4 scripts/install-buildtools: Update to 4.0.32
Update to the 4.0.32 release of the 4.0 series for buildtools

(From OE-Core rev: 7c3f192e5f29eb54c1aa64d31b92255d13e4605a)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic22@pm.me>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9a24d18f40 inetutils: patch CVE-2026-24061
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-24061

(From OE-Core rev: 042f02ff7072e9cf4b02a335d1d3186d68ba669b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Vijay Anusuri
7cdc92f5cb openssl: upgrade 3.0.18 -> 3.0.19
This release incorporates the following bug fixes and mitigations:

Fixed Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467)
Fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160)
Fixed Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418)
Fixed Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion. (CVE-2025-69419)
Fixed Missing ASN1_TYPE validation in TS_RESP_verify_response() function. (CVE-2025-69420)
Fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex() function. (CVE-2025-69421)
Fixed Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795)
Fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function. (CVE-2026-22796)

Changelog:
https://github.com/openssl/openssl/blob/openssl-3.0.19/NEWS.md

Refreshed CVE-2023-50781 patches for openssl-3.0.19

Reference: https://openssl-library.org/news/secadv/20260127.txt

(From OE-Core rev: 9b419ead79a1c137ba98d86969fd29808d6da49e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
99c192aae2 expat: patch CVE-2026-25210
Pick patches from [1].

[1] https://github.com/libexpat/libexpat/pull/1075

(From OE-Core rev: 406471f765fd1ce6bc5aab51c724476684e40d21)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
3a7aa79ca2 expat: patch CVE-2026-24515
Pick fix commit from PR linked in NVD report.

(From OE-Core rev: e3c0ac137e50d35e83e8e4ed2c4e09f2eb9d3bca)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
a8c5e5e573 libxml2: add follow-up patch for CVE-2026-0992
References:
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
* https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/377

(From OE-Core rev: 957244b2861f394237b8a3ec4d549d5118627955)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9998d74d24 libxml2: patch CVE-2026-0992
Pick patch which closed [1].
Adapt for missing xmlCatalogPrintDebug per [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
[2] 728869809e

(From OE-Core rev: efef4d450500eb3a43b9f1f399ca84f9ca837d8b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
bd6c85cfa6 libxml2: patch CVE-2026-0990
Pick patch which closed [1].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018

(From OE-Core rev: 3af64204dec407546bed8f1dc0cb8b4a1501e471)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
e7b549ecaa python3: patch CVE-2025-12084
Pick patch for this CVE merged into 3.10 branch.

(From OE-Core rev: 8888cd14eb102574d530b6c683ce5beaad1aaa39)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
4ad238e9c1 python3: patch CVE-2025-13837
Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: cfbac1d5edae4b0204ec4c01b5f710d100ceb2ad)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
ad756dec39 zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

(From OE-Core rev: 1bdcd62d34b0b060b0e1e5142c5f3e7075f21cc2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Lee Chee Yang
58f9b898da migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 398a2a080361eb22b9c447dbde31fca58bf4e0bb)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
e60019c6eb dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: a48ab61034d50be1026b939112f4a5c58bed7b88)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7794952de8 dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: 4c64db73fa68b6dbc11fe4b64452b0d6b7ee0280)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7bb35f44d9 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 8d7b549d095c2ca04d4c7ff5a92f6de9fceb8496)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Richard Purdie
c3b734f0a7 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: e2994ca0076ec99038790e7a40936236a5078135)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
ff118ede82 contributor-guide/recipe-style-guide.rst: explain difference between layer and recipe license(s)
Explain that the LICENSE set in a recipe does not apply to the recipe
file itself, but to the underlying software. The license of the recipe
file is the license provided in the layer itself. Give OpenEmbedded-Core
as an example for this.

Fixes [YOCTO #14410]

(From yocto-docs rev: 6799b1be5d48f4bf5dcd0b16c2dbc2e297d4ecd9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b8a56b8b2e8c0417b2f7204f80c79b05d95e9ce4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
yocto-4.0.33 kirkstone-4.0.33
2026-01-26 18:54:18 +00:00
Antonin Godard
d5bcc413d0 ref-manual/variables.rst: document the CCACHE_TOP_DIR variable
Added by commit 35d7fe73bba1 ("ccache.bbclass: Make it can be shared
between different builds") in OE-Core.

Fixes [YOCTO #16052]

(From yocto-docs rev: e4f5ba7bb34586cd7bee7f0fe69c39b36dabb357)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 550ef8340b550f8d4e9c3d0672190dc09592c621)
Fix conflicts: CCLD variable in master not on kirkstone.
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
72eb266009 overview-manual: convert YP-flow-diagram.png to SVG
Based on diagrams/poky-buildprocess/Pokyarch_diag.svg, replace the PNG
graphic for the YP flow to an SVG graphic.

(From yocto-docs rev: 2983418bec7a2faeaae4e831b8f642ff0cd95980)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d2aaf54bee49295bdf81021648cb27499930edc6)
Fix conflicts (different alignment on master, keep one from kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
d66f9ee0ef overview-manual/yp-intro.rst: fix SDK type in bullet list
The YP generates an SDK by default, which can be meta-toolchain, an
image-specific one, or an extensible SDK (eSDK). Don't be specific in
this bullet list.

(From yocto-docs rev: 3c455c5a2892611d2323610170f9600ceb953f6c)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f02c64286504353e97c7e5fe5c0d193776469ad1)
Fix conflict (#. on master, 7. on kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
5489d2b5b6 ref-manual/release-process.rst: add a "Development Cycle" section
Add a new section to release-process.rst to document the development
cycle of each release and namely the milestones and feature freeze
occuring after M3.

Fixes [YOCTO #15979]

(From yocto-docs rev: f7888e3c3267ec7c39374f694f86088598bea649)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77c04cc5944acda7575546a7434e014e4a75ba58)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e3fdce60c0 test-manual/ptest.rst: detail the exit code and output requirements
A ptest must emit at least one test result on the console, as this is
required by the testimage class (which ignores the exit code).
ptest-runner on the other hand, ignore the output and only cares about
the exit code.

Add these two items as requirements for a ptest to be valid.

Fixes [YOCTO #15832]

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 916be11467d87d39e4ad5ea218237258523f3953)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9292f61d7ba89598c89033ea7ee3b11a20d873f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
a4aa1bc237 ref-manual/classes.rst: document the image-container class
Add documentation for the image-container class, which is a simple class
to generate an image suitable for creating a container.

This answers in part to questions asked in [YOCTO #14368].

It also adds documentation for IMAGE_CONTAINER_NO_DUMMY, which was added
in OE-Core with commit f0645e172bb8 ("image-container.bbclass: Error if
not using linux-dummy").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cebe8ff0508e0fc2de8378a1cf93eb8054e12699)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6ce00e5875eb3469fefd55cc22acaaeaf620053a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
cb99d0b1c5 Add a new "Security" section
The current security-related documentation is a bit hard to find and
hidden within the development manual. However these are processes that
are not part of a development task but is rather a vulnerability
reporting process.

Create a new "Security" section in the documentation to gather this
information. This will be directly visible in the sidebar when opening
the documentation.

Split the previous security-subjects.rst document into 2 documents:

- security-team.rst: defines the roles of the security teams and its
  members.

- reporting-vulnerabilities.rst: guide to report vulnerabilities to the
  security team.

The plan is to backport these documents to active releases. As a
consequence, this section should be free of instructions and information
that only make sense for a specific release. It should _not_ contain
documents on how to enable security features with Yocto on target
devices, this is unrelated and can be left in the development manual
(for example: dev-manual/vulnerabilities.rst to deal with CVEs).

(From yocto-docs rev: 3fd0f37d708d88534dd6dbb51dc264911c349352)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 81e14ca2d5cff9e2104c556655144b069633790c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e1c9a5d58f ref-manual/svg/releases.svg: mark whinlatter as current release
Whinlatter is the new current Yocto Project release, mark it as an
active one. Move it as released in December 2025.

(From yocto-docs rev: 7f6dff5c3d549cbd5040c15261bdb38a54dbd69e)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6f8e97c6e529f3c47f45f34d9e04e3ad7bddd587)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
0071164ce8 ref-manual/svg/releases.svg: mark styhead and walnascar EOL
Walnascar has stopped being updated a while ago, and Styhead is EOL
since May 2025.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 2425f0cf64c35b9f7d0676dd31c2ea94fcdb3a31)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 834de77b543de43ee3c1c12ca1d6277e67e126de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
10233e97f7 overview-manual/yp-intro.rst: link to YP members and participants
Instead of a fixed list of commercial vendors, link to existing lists on
the YP website.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 69ad32040baf8ca7c79265fd83041b3241353e2d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9d394db4f88b66500e4d5a2a518d25f08a0c9472)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
941d1d47c1 overview-manual/yp-intro.rst: change removed ECOSYSTEM to ABOUT
The ABOUT tab is where the members/participants are listed now.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 8e216cd6e17fe4bc367c11d2ad3e3d7a29701af8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a8a8d810f0505529aaaa90678e03152c8ac0c00b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Richard Purdie
5abd143cb5 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 036f76ea35c49a78d612093dcd8eb1fac7ded8d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:42 +00:00
Paul Barker
71ae82a596 poky.conf: Bump version for 4.0.33 release
(From meta-yocto rev: 677379f21941363d50f9d946963542b4ccb7e27c)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:26 +00:00
Khem Raj
6f2c1098a6 oeqa: Use 2.14 release of cpio instead of 2.13
2.13 may not be buildable with latest compilers without patching

(From OE-Core rev: 64d56cf416b31ae92438deefe4028402120ed998)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 406a33f896accc35a9cb6ab156f1e0f42dda67d8)
Backport: Fix [YOCTO #16137] by using the same archive as the cpio
recipe, ensuring the archive is in DL_DIR and so, avoiding reaching
unreliable upstream server.
This upgrade is safe to do because this archive is only use to test that
it compiles.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
74924f0891 pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'
The pseudo update was causing hangs in builds, pull in the fix.

(From OE-Core rev: e514b1ac74ae8a69b15e3459cb3b327a35cabff8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8acdbefd0a148c8b7713f46066ae8489984c5d2d)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
d087748248 pseudo: Update to pull in openat2 and efault return code changes
Pulls in the following fixes:

 * makewrappers: Enable a new efault option
 * ports/linux/openat2: Add dummy wrapper
 * test-syscall: Add a syscall test
 * ports/linux/pseudo_wrappers: Avoid openat2 usage via syscall

which should fix issues with the tar CVE fix on Centos/Alma/Rocky 9 distros
that uses openat2 as well as the efault issue breaking rust based uutils.

(From OE-Core rev: edc8c8e0ae511b03cb9d0501d472bb42fbea2c8b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 51f1388dd1679a28ec3ca468cf16aa0ea32bccf9)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Paul Barker
401a9cdd7d pseudo: Add hard sstate dependencies for pseudo-native
Where a task (such as do_package) runs under fakeroot, the corresponding
setscene task (do_package_setscene) will also run under fakeroot when
restoring from sstate. Assuming pseudo is used as the fakeroot
implementation, we need pseudo-native and all its runtime dependencies
to be available in the sysroot before running any setscene tasks under
fakeroot.

We already add a hard dependency from all do_package_setscene tasks to
virtual/fakeroot-native:do_populate_sysroot in base.bbclass, but this
does not cover transitive dependencies. So, extend the dependencies of
pseudo-native:do_populate_sysroot_setscene to ensure that the sqlite3
library is also available in the sysroot before running fakeroot
setscene tasks.

[YOCTO #15963]

(From OE-Core rev: e3c07672d22343cd7ac68cb84716b05ec7cd438b)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c146ca657440550e00bc5e53d13502ef7aa945b)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
42eb45b3a0 pseudo: Update to pull in memleak fix
(From OE-Core rev: d789b03d33d9a0fce335080f667c29ed45515726)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 42137b6f97da0672af365cd841678f39ce5907d2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Robert Yang
3a3b526edb pseudo: 1.9.0 -> 1.9.2
(From OE-Core rev: 2093a9c80e391795abbac8766569583a3547e43b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a42747fd280ce68283e1491971d22273e3bdf2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
8a6b3d82f6 pseudo: Upgrade to version 1.9.1
This brings in:
 * nftw, nftw64: add wrapper
 * ftw, nftw, ftw64, nftw64: add tests
 * Move ftw and ftw64 to calling ntfw and nftw64
 * makewrappers: Introduce 'array' support
 * pseudo_util.c: Avoid warning when we intentionally discard const
 * pseudo_client.c: Fix warning
 * yocto-older-glibc-symbols.path: Add as a reference patch
 * pseudo/pseudo_client: Add wrapper functions to operate correctly with glibc 2.38 onwards
 * configure: Prune PIE flags
 * test/test-parallel-rename.sh: Add parallel rename test
 * test/test-parallel-symlinks.sh: Add parallel symlink test
 * ports/linux/guts: Add .gitignore to ignore generated files

(From OE-Core rev: b3140c624504b19a2b2faec8df89f57a99cefce1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 994e508b2a0ede8b5cc4fe39444cf25dc9a53faf)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Vijay Anusuri
2c23fc4f0e binutils: Fix CVE-2025-1181
import patch from ubuntu to fix
 CVE-2025-1181

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/binutils/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24
&
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=18cc11a2771d9e40180485da9a4fb660c03efac3]

(From OE-Core rev: 55d4b81b15b6eb2e221ff69dc791d2e319fad234)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>

[Yoann Congal: Corrected the second patch SHA1 in URLs "18cc11a..."]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
71966f1bad gnupg: patch CVE-2025-68973
Pick patch from 2.4 branch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-68973

(From OE-Core rev: 403a9bc3da3574d828cfbce805df48d0181eafed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
cd8f4444b2 curl: patch CVE-2025-15224
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15224.html

(From OE-Core rev: db87200a8ae19d40e7a8f038d9fe4e426f159ad3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2bf97e4e41 curl: patch CVE-2025-15079
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15079.html

(From OE-Core rev: 8ce2a761c2f00e9c7782654cf6d6384ccd3f6e16)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
fd21399bac curl: patch CVE-2025-14017
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-14017.html

(From OE-Core rev: ae23e163f7399e957a100dc13d9cd0b829eef2f4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2654f4f66c libarchive: fix CVE-2025-60753 regression
Pick patch from PR mentioned in v3.8.5 release notes.

(From OE-Core rev: dc3d99c419a913e66cb73bf098291c21985b0432)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Hitendra Prajapati
cfb6825c35 python3: fix CVE-2025-13836
Upstream-Status: Backport from 289f29b0fe

(From OE-Core rev: d3bcb5ded27003612ad591764f648e83e91c27ca)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
51201f6c54 libpcap: patch CVE-2025-11964
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11964

(From OE-Core rev: 026c6e7ee386ae09b9a2ef22d69730fc838ddf4f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
a12f120831 libpcap: patch CVE-2025-11961
Pick patch per [1].
Also pick additional preparation patch to apply it cleanly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11961

(From OE-Core rev: 714fb7c711b414407598e3a94b0600fe7f857e38)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
4c8419bebe python3-urllib3: patch CVE-2025-66418
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-66418

(From OE-Core rev: 469fcdd5f07635fa9e308c968126807c1ca09647)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00