Wang Mingyu [Tue, 3 Mar 2026 10:09:26 +0000 (18:09 +0800)]
ttyrun: upgrade 2.40.0 -> 2.41.0
Changes of existing tools:
------------------------------
- chreipl: Make --bootparms work for ECKD re-IPL
- cpacfstats: Add 'unauthorized' state to CPU-MF counters
- cpictl: Detect RHCOS using VARIANT_ID
- hsci: Automatically set appropriate MTU for HSCI
- libutil: Add util_readlink() and util_readlinkat() helpers
- libutil: Add util_startswith() to util_str
- libutil: Add utility parsing functions
- lschp: Add support for structured output (--format)
- lsreipl: Suppress 'clear' output if not supported
- pvimg: Add '--format text' support to 'pvimg info'
- pvimg: Add '--print-schema ' option to 'pvimg info'
- pvimg: Add '--show-secrets' flag to 'pvimg info'
- pvimg: Provide improved JSON output to 'pvimg info --format json'
- pvinfo: Improve User experience on non-SE enabled systems
- zipl/ngdump: Ensure ext4 file system is used on dump partition
- zkey: Add support for integrity protected disks using HMAC keys
Bug Fixes:
-------------
- cpumf/pai: Handle different size of perf_event_attr
- lscss: Fix memory leak
- zipl: Fix dump job on tape devices
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:25 +0000 (18:09 +0800)]
taglib: upgrade 2.1.1 -> 2.2
Changelog:
=========
* Support for Matroska (MKA, MKV) and WebM files.
* Support for NI STEM in MP4 files.
* New method isDsd() in WavPack Properties.
* Stricter verification of ID3v2 frames.
* Fix setting the last header flag in Ogg FLAC files.
* Fix reading of the last page in Ogg streams.
* Avoid corrupting invalid Ogg FLAC files without Vorbis comment.
* Windows: Support MP4 files with 64-bit atoms.
* Fix use of property keys with non-ASCII characters in C bindings.
* Fix building with Android NDK 29.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:16 +0000 (18:09 +0800)]
libsoup: upgrade 3.6.5 -> 3.6.6
Changelog:
============
* websocket: Fix out-of-bounds read in process_frame
* Check nulls returned by soup_date_time_new_from_http_string()
* Numerous fixes to handling of Range headers
* server: close the connection after responsing a request containing Content-Length and Transfer-Encoding
* Use CRLF as line boundary when parsing chunked enconding data
* websocket: do not accept messages frames after closing due to an error
* Sanitize filename of content disposition header values
* Always validate the headers value when coming from untrusted source
* uri-utils: do host validation when checking if a GUri is valid
* multipart: check length of bytes read soup_filter_input_stream_read_until()
* message-headers: Reject duplicate Host headers
* server: null-check soup_date_time_to_string()
* auth-digest: fix crash in soup_auth_digest_get_protection_space()
* session: fix 'heap-use-after-free' caused by 'finishing' queue item twice
* cookies: Avoid expires attribute if date is invalid
* http1: Set EOF flag once content-length bytes have been read
* date-utils: Add value checks for date/time parsing
* multipart: Fix multiple boundry limits
* Fixed multiple possible memory leaks
* message-headers: Correct merge of ranges
* body-input-stream: Correct chunked trailers end detection
* server-http2: Correctly validate URIs
* multipart: Fix read out of buffer bounds under soup_multipart_new_from_message()
* headers: Ensure Request-Line comprises entire first line
* tests: Fix MSVC build error
* Fix possible deadlock on init from gmodule usage
* Add Cornish translation
* Update Turkish translation
* Update Uighur translation
* Update Romanian translation
* Add Uzbek (Latin) translation
* Add Kazakh translation
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:15 +0000 (18:09 +0800)]
libgpg-error: upgrade 1.58 -> 1.59
License-Update: Copyright year updated to 2026.
Changelog:
=============
* Take care of POSIX semaphore "shared" semantics. This fixes a
problem on NetBSD.
* Fix preparing the environment block on Windows.
* Fix for GPGRT_PROCESS_*_KEEP flags on Windows.
* Update Russian and Swedish translations.
* Introduce autogen.rc variable autogen_use_force.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:14 +0000 (18:09 +0800)]
libfontenc: upgrade 1.1.8 -> 1.1.9
Changelog:
===========
- gitlab CI: drop the ci-fairy check-mr job
- meson: Add option to build with meson
- configure: Use pkg-config to handle zlib dependency if possible
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:13 +0000 (18:09 +0800)]
libcap-ng/libcap-ng-python: Upgrade 0.9 -> 0.9.1
Changelog:
==============
- Deprecate captest
- In cap-audit, if tested app uses file system based capabilities, drop setpcap
- In cap-audit, fully resolve paths before classifying
- In cap-audit, add JSON escaping to output
- In cap-audit, filter pre-exec, startup, and shutdown capability noise
- pscap now has a --tree disply mode
- More code cleanups
- Improve output alignment of various utilities
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:12 +0000 (18:09 +0800)]
less: upgrade 691 -> 692
Changelog:
==========
- Revert HOME key to scroll to beginning of file and END key to scroll to end of file
- Configure tty to leave CR and NL unmodified
- Add commands to lesskey parser (forw-bell-hilite, goto-pos and osc8-jump).
- Add key sequences to lesskey parser (\kE, \kF, \kH, \kI, \kM, and \kS).
- Fix bug using negative value with -z option
- Fix bug handling empty terminfo capabilties
- Fix memory leak in setupterm
- Make lesstest ignore system locale (nl_langinfo)
License-Update: Copyright year updated to 2026.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:10 +0000 (18:09 +0800)]
fastfloat: upgrade 8.2.2 -> 8.2.3
Changelog:
=========
- add base check for uint8
- fix issue with s390x.
- optimize uint16 parsing
- optimize fastfloat_strncasecmp
- Bump the github-actions group across 1 directory with 4 updates
- fix early return error in fastfloat_strncasecmp
- Clarify behavior for underflow
- Fix overzealous build-time /permissive- propagating to compile-time (cross-compilation bug)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:09 +0000 (18:09 +0800)]
enchant2: upgrade 2.8.14 -> 2.8.15
Bugfix:
=========
- removing a word that happens to be at the end of a personal word list
file has not worked since 2.7.0.
- the way that personal word lists are merged with the current
session has been changed so that personal word list words now appear in
suggestions with providers that support adding words to the current session
(Aspell and Hunspell).
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 3 Mar 2026 10:09:08 +0000 (18:09 +0800)]
ed: upgrade 1.22.4 -> 1.22.5
Changelog:
============
- Use 'sizeof active_list[0]' instead of 'sizeof (line_node **)'.
- A file name ending in slash '/' is now diagnosed as 'Invalid filename'
instead of 'Is a directory'.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
commit 1cb1d8e0284870a03970a0a45d1c8cfe7ec6a696
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Sun May 18 16:31:05 2025 -0700
man page: fix warnings from `mandoc -T lint` and `groff -rCHECKSTYLE=10`
mandoc: xauth.1:26:13: WARNING: cannot parse date, using it verbatim: TH xauth 1.1.4
mandoc: xauth.1:33:2: WARNING: skipping paragraph macro: PP after SH
mandoc: xauth.1:225:2: WARNING: skipping paragraph macro: sp after PP
mandoc: xauth.1:216:2: WARNING: skipping paragraph macro: PP after SH
mandoc: xauth.1:254:2: WARNING: skipping paragraph macro: PP after SH
an.tmac:xauth.1:96: style: blank line in input
an.tmac:xauth.1:104: style: blank line in input
an.tmac:xauth.1:114: style: blank line in input
an.tmac:xauth.1:122: style: blank line in input
an.tmac:xauth.1:130: style: blank line in input
an.tmac:xauth.1:135: style: blank line in input
an.tmac:xauth.1:142: style: blank line in input
an.tmac:xauth.1:166: style: blank line in input
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/28>
Hongxu Jia [Tue, 3 Mar 2026 06:56:38 +0000 (14:56 +0800)]
python3-uv-build: upgrade 0.9.28 -> 0.10.4
Released on 2026-02-17[1].
Enhancements
Remove duplicate references to the affected paths when showing uv python errors (#18008)
Skip discovery of workspace members that contain only git-ignored files, including in sub-directories (#18051)
Bug fixes
Don't panic when initialising a package at the filesystem root (e.g. uv init / --name foo) (#17983)
Fix permissions on wheel and sdist files produced by the uv_build build backend (#18020)
Revert locked file change to fix locked files on NFS mounts (#18071)
Update __init__.py to add Cygwin as a classifier (#232)
Add "Environment :: Cygwin (MS Windows)" as a classifier as some modules,
such as mine, work on Windows but only via the Cygwin POSIX layer (www.cygwin.com)
Hongxu Jia [Tue, 3 Mar 2026 06:56:36 +0000 (14:56 +0800)]
python3-testtools: upgrade 2.8.2 -> 2.8.3
What's Changed [1]
- Support binary contents in FileContains matcher by @jelmer in #553
- Be more lenient to stream=None being passed into TestResult classes by @jelmer in #554
- Support async setUp/tearDown validation with Deferreds by @jelmer in #552
- Bump ruff from 0.14.9 to 0.14.10 by @dependabot[bot] in #555
- Add more typing, reduce size of testtools.compat by @jelmer in #556
- Bump ruff from 0.14.10 to 0.14.11 by @dependabot[bot] in #558
- Add more typing by @jelmer in #559
- Finish typing by @jelmer in #561
This release refactors a lot of the internals to break up conversion and validation.
This should not be noticeable except for better error messages in some cases. We also
now test on some downstream projects; if you are using pyproject-metadata for a backend,
you can suggest adding a downstream test to our noxfile.
Refactoring:
Restructured internals around conversion.
Internal and CI:
Test on some downstream projects.
Remove some PEP 621 terminology
Hongxu Jia [Tue, 3 Mar 2026 06:56:33 +0000 (14:56 +0800)]
python3-pycparser: upgrade 2.23 -> 3.0
Convert to python_setuptools_build_meta to fix
WARNING: python3-pycparser-3.0-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]
What's Changed [1]
- Removed dependency on PLY, by rewriting pycparser to use a hand-written lexer
and recursive-descent parser for C. No API changes / functionality changes
intended - the same AST is produced.
- Add support for Python 3.14 and drop EOL 3.8 by @hugovk in #581
- Update _ast_gen.py to be in sync with c_ast.py by @simonlindholm in #582
Hongxu Jia [Tue, 3 Mar 2026 06:56:29 +0000 (14:56 +0800)]
python3-cryptography{-vectors}: 46.0.4 -> 46.0.5
46.0.5 - 2026-02-10 [1]
- An attacker could create a malicious public key that reveals portions of your
private key when using certain uncommon elliptic curves (binary curves).
This version now includes additional security checks to prevent this attack.
This issue only affects binary elliptic curves, which are rarely used in
real-world applications. Credit to XlabAI Team of Tencent Xuanwu Lab and Atuin
Automated Vulnerability Discovery Engine for reporting the issue. CVE-2026-26007
- Support for SECT* binary elliptic curves is deprecated and will be removed in
the next release.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
commit 55ceddb52f9e08a277ba634b2b0a03a9be31fb46
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Sun Jan 11 11:20:41 2026 -0800
gitlab CI: drop the ci-fairy check-mr job
The only thing this checked was the checkbox for allowing maintainers to
edit the MR. Changed permissions checks now fail this job but luckily
the setting it checked has been the default for years anyway so we can
drop it.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
commit 184c43dd059f785537c8a48a4a7972c488ac1215
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Sun Nov 19 09:45:41 2023 -0800
Add a meson build system
Includes CI checks comparing installed files based on those from xorgproto
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Hongxu Jia [Tue, 3 Mar 2026 06:56:24 +0000 (14:56 +0800)]
connman: upgrade 1.45 -> 2.0
ver 2.0 [1]:
Fix issue with agent request on NoReply D-Bus error.
Add support for DefaultEnabledTechnologies setting.
Remove installation of include headers.
Richard Purdie [Wed, 4 Mar 2026 18:40:29 +0000 (18:40 +0000)]
oeqa/runtime/ptest: Improve timeout values
The ptest runner command has timeouts disabled which has the side effect of limiting
the command logging. This can lead to incomplete logs and makes issues harder to debug
since the log buffer is lost if things crash or are interrupted.
Pass in a timeout value of the ptest timeout + 30 so that debugging is improved.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Sat, 7 Mar 2026 07:06:26 +0000 (07:06 +0000)]
ptest-runner: Upgrade 2.5.0 -> 2.5.1
Pull in buffering fix:
"""
When running slow ptests, we can see an issue where the tests are writing output
but it doesn't make it to the process (e.g. ssh connection) running ptest-runner.
The issue is that the standard buffering for non-interactive terminals is 8kb and
some ptests don't output enough data to trigger a write. This can lead to
the controlling connection timing out.
This change forces the output streams to be line buffered in all cases. Most
ptest output would contain newlines so this should work well. stderr can be
unbuffered by default but making it consistent here seems the best approach.
Testing with this change on slow ptest runs (e.g. qemu emulated) showed much
more consistent data with this change.
"""
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Yoann Congal [Fri, 6 Mar 2026 08:40:43 +0000 (09:40 +0100)]
ptest-runner: Upgrade 2.4.5.1 -> 2.5.0
Changelog:
- utils.c: Fix dirname() handling in run_ptests()
- ptest-runner-collect-system-data: add info to logs
- main.c: Set PYTHONUNBUFFERED in the environment
- utils.c: print a message when a timeout occurs
- main.c: Add print_helptext() for detailed help
- main.print_usage: Remove unused argument list of -l
Quentin Schulz [Fri, 6 Feb 2026 17:23:59 +0000 (18:23 +0100)]
mesa: depend on mesa-tools-native for less expensive libclc dependency
libclc is required for some drivers (asahi, panfrost and intel at the
very least).
libclc brings very expensive per-target dependencies such as llvm and
clang.
However, we can make libclc depend on native tools (mesa-clc and
precomp-compiler via mesa-tools-native) such that this cost exists only
once (for the native build machine) and not for each machine to build.
So this migrates the libclc dependency to make use of the newly
introduced mesa-tools-native to make use of mesa-clc=system and
precomp-compiler=system.
We told the user to have libclc PACKAGECONFIG when selecting opencl
PACKAGECONFIG but its dependencies are now gone since we're using
mesa-tools-native for libclc. Therefore, this also moves the previous
dependencies of libclc PACKAGECONFIG to opencl such that we can still
build rusticl which still requires all dependencies from previous
implementation of libclc (as specified in meson.build[1][2][3][4]).
For some reason, libclc PACKAGECONFIG is still required otherwise
rusticl fails to build with the following (stripped) message:
thread 'main' (3601157) panicked at bindgen/lib.rs:616:27:
Unable to find libclang: "couldn't find any valid shared libraries
matching: ['libclang.so', 'libclang-*.so', 'libclang.so.*',
'libclang-*.so.*'], set the `LIBCLANG_PATH` environment variable to a
path where one of these files can be found (invalid: [])"
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
"""
libclang.so is available in the sysroot. Exporting LIBCLANG_PATH with
"${STAGING_LIB_DIR}" in the recipe doesn't do anything.
So for now, we keep telling the user to add libclc PACKAGECONFIG when
opencl is selected (and keep it in mesa.bb when DISTRO_FEATURES has
opencl) and maybe can figure out why we cannot build rusticl without
libclc PACKAGECONFIG later on. I'm also not sure if the
Note that does mean that when selecting opencl, mesa will bring the
expensive dependencies again, but I'm not sure there's anything we can
do about that at the moment.
Quentin Schulz [Fri, 6 Feb 2026 17:23:58 +0000 (18:23 +0100)]
add mesa-tools native-only recipe
libclc is required for some drivers (asahi, panfrost and intel at the
very least).
libclc brings very expensive dependencies such as llvm (through its
spirv-llvm-translator dependency) and clang.
Building clang and llvm for each target architecture is very expensive,
but mesa allows to depend on prebuilt host binaries (mesa-clc and
precomp-compiler). Those are built by mesa as well, but can be compiled
in mesa-native instead of mesa, making the dependency expensive but only
once regardless of the number of target architectures to build for.
Ideally the mesa-clc and precomp-compiler would only be compiled in
mesa-native if target mesa requires libclc support, however this is not
possible as a target recipe cannot impact or depend on a native recipe's
configuration. We thus have two choices, always build libclc in
mesa-native with its heavy dependencies and impact every build, or force
the user to modify the mesa-native recipe in a custom layer (as a native
recipe cannot use target's OVERRIDES). The latter is unacceptable so the
former seems to be the only option. Another big downside is that
mesa-native currently builds drivers (amd, nouveau, svga) which we may
have absolutely no interest in building, increasing the build time and
possibly dependencies list.
A third choice is to spin-off the native mesa recipe with libclc support
into a new recipe without drivers and only what's necessary to build
mesa-clc and precomp-compiler binaries.
This allows to keep a "clean" mesa-native recipe for whoever needs those
drivers built-in (e.g. for testing, for qemu-native, or whatever else)
and only bring the libclc dependency when required by the target recipe.
This is the native mesa tool recipe from the third choice. The next
commit will make use of it in the mesa recipes.
Suggested-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changqing Li [Tue, 3 Mar 2026 05:13:41 +0000 (13:13 +0800)]
ruby: refresh patches
* 0003-rdoc-build-reproducible-documentation.patch remove the not needed
lines
* 0001-Don-t-save-the-original-name-and-timestamp.patch use better array
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 26 Feb 2026 14:31:12 +0000 (14:31 +0000)]
kernel: remove pkg-config variables for old (<5.15) kernels
The kernel has supported setting an alternative binary for pkg-config
with a variable since 5.19 (in 2022[1]) and we set that to
pkg-config-native, so there is no longer any need to also manually set
the PKG_CONFIG_* variables.
The relevant commit was backported and is present in 5.15.91 onwards,
but is not yet in 5.10.x.
[1] linux d5ea4fece450 ("kbuild: Allow kernel installation packaging to override pkg-config")
Signed-off-by: Ross Burton <ross.burton@arm.com> Acked-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 26 Feb 2026 14:31:11 +0000 (14:31 +0000)]
qemu: extend PKG_CONFIG_LIBDIR when using the host search path
The qemu recipe does something horrible when building natively and can
also search the build host's search path.
Now that we've moved from PKG_CONFIG_PATH to PKG_CONFIG_LIBDIR, this
code also needs to do the same as otherwise it will find packages on the
build host before the native sysroot.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 26 Feb 2026 14:31:10 +0000 (14:31 +0000)]
classes/pkgconfig: rationalise variable usage
Our PKG_CONFIG_* variables were a bit of a mess.
First, PKG_CONFIG_DIR is not used by either pkg-config or pkgconf. It's
set to (approximately) ${libdir}/pkgconfig but we also want to search
${datadir}/pkgconfig so it isn't actually useful as an intermediate
variable.
Remove PKG_CONFIG_DIR and replace with the neatest expression for the
value we want: ${STAGING_LIBDIR}/pkgconfig.
Second, PKG_CONFIG_PATH and PKG_CONFIG_LIBDIR shouldn't be set to the
same paths. The semantics of these variables is that PKG_CONFIG_PATH is
searched first, followed by either PKG_CONFIG_LIBDIR or the default paths
compiled into the pkg-config binary.
Currently we set PKG_CONFIG_PATH to (approx.) ${libdir}:${datadir} and
PKG_CONFIG_LIBDIR to ${libdir}, so we search libdir twice.
Also the default paths embedded in the binary will be incorrect as they
point to pkgconfig-native's sysroot, so we absolutely need to set
PKG_CONFIG_LIBDIR.
Instead, set PKG_CONFIG_LIBDIR to ${libdir}:${datadir} so that the
default search path is correct. We can then leave PKG_CONFIG_PATH empty,
if a recipe has specific needs it can set that but normally it is not
needed anymore.
Then bubble these changes out to the few places where the variables are
used directly:
- Kernel/kconfig interaction where 'pkg-config' needs to read the
native files, not target.
- The class classes (native, etc) which redefine the values. However,
as the values are defined in terms of sysroot variables, we can
typically remove assignments from those classes as they are redundant.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 26 Feb 2026 13:45:00 +0000 (13:45 +0000)]
classes/pkgconfig: move assignments
Move the pkg-config-specific assignments (PKG_CONFIG_LIBDIR, etc) out of
bitbake.conf and into pkgconfig.bbclass.
Note that the assignments now have to be ?= so that recipes such as
gdb-cross-canadian-* can build. This is because previously the assignment
order of PKG_CONFIG_PATH was:
1) bitbake.conf
2) cross-canadian.bbclass
But with this new layout it is:
1) cross-canadian.bbclass
2) pkgconfig.bbclass
If pkgconfig does a hard assign then it replaces any assignments that
have happened already.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Mikko Rapeli [Fri, 20 Feb 2026 11:51:23 +0000 (13:51 +0200)]
systemd 259.1: fix udev rootfs by-partuuid link generation
systemd update from 257 to 258 broke genericarm64 machine boot
on Renesas SMARC EVK board. The firmware and kernel drivers
trigger a lot of udev events and the changed event priority handling
meant that rootfs by-partuuid link was not generated inside
initramfs even when all needed kernel drivers were loaded
and correct block devices were detected.
Backported patches from main branch fix the issue. The patches
have been queued to upstream v258 and v259 stable branches.
For details see:
https://github.com/systemd/systemd/issues/40654
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Chen Qi [Mon, 9 Feb 2026 08:02:13 +0000 (08:02 +0000)]
systemd: upgrade from 258.1 to 259.1
Changes with v259:
https://github.com/systemd/systemd/releases/tag/v259
The 'iptc' PACKAGECONFIG is dropped, because:
"""
systemd-networkd and systemd-nspawn no longer support creating NAT
rules via iptables/libiptc APIs; only nftables is now supported.
"""
This new version has big change on musl support.
"""
Incomplete support for musl libc is now available by setting the
"libc" meson option to "musl".
...
This support for musl is provided without a promise of continued
support in future releases.
"""
See https://github.com/systemd/systemd/blob/main/NEWS#L562 for more details.
Here are some examples:
- The musl specific '-D_LARGEFILE64_SOURCE' could be dropped because:
https://github.com/systemd/systemd/commit/fb33d20c072f2e7c3d500f00f8c04c99271f34c1
- The 0017-Always-include-netinet-if_ether.h-first.patch and '-D__UAPI_DEF_ETHHDR=0
could be dropped because:
https://github.com/systemd/systemd/commit/8324ef421373c84b5034bf47b84fe42d84b1032f
- The 0015-Avoid-sequence-point-error.patch could be dropped because:
https://github.com/systemd/systemd/commit/ebbc0ea7fd764c870bb8689111138b4f73854d42
With the above musl support, here are the changes for this 259.1 recipe:
- Add '-Dlibc=${TCLIBC}' configure option.
- The musl warning, do_warn_musl, is removed.
- *ALL* musl specific patches are dropped.
Any further fix for musl should be sent to systemd upstream.
Qualcomm SC7280 and SM8350 SoCs have slightly different LPASS audio
blocks (v9.4.5 and v9.2), however the LPASS LPI pin controllers are
exactly the same. The driver for SM8350 has two issues, which can be
fixed by simply moving over to SC7280 driver which has them correct:
1. "i2s2_data_groups" listed twice GPIO12, but should have both GPIO12
and GPIO13,
2. "swr_tx_data_groups" contained GPIO5 for "swr_tx_data2" function, but
that function is also available on GPIO14, thus listing it twice is
not necessary. OTOH, GPIO5 has also "swr_rx_data1", so selecting
swr_rx_data function should not block the TX one.
Fixes: be9f6d56381d ("pinctrl: qcom: sm8350-lpass-lpi: add SM8350 LPASS TLMM") Cc: stable@vger.kernel.org Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com> Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Reviewed-by: Konrad Dybcio <konrad.dybcio@oss.qualcomm.com> Signed-off-by: Linus Walleij <linusw@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
And is causing an audit warning, so we drop our assignement
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Benjamin Robin [Thu, 26 Feb 2026 17:01:19 +0000 (18:01 +0100)]
sbom-cve-check: add recipe
Provide sbom-cve-check (native) executable.
Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Benjamin Robin [Thu, 26 Feb 2026 17:01:18 +0000 (18:01 +0100)]
python3-spdx-python-model: add recipe
- Part of the dependency chain for sbom-cve-check
Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Benjamin Robin [Thu, 26 Feb 2026 17:01:17 +0000 (18:01 +0100)]
python3-hatch-build-scripts: add recipe
- Build dependency of python3-spdx-python-model.
- Part of the dependency chain for sbom-cve-check
Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Benjamin Robin [Thu, 26 Feb 2026 17:01:16 +0000 (18:01 +0100)]
python3-shacl2code: add recipe
- Build dependency of python3-spdx-python-model.
- Part of the dependency chain for sbom-cve-check
Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Benjamin Robin [Thu, 26 Feb 2026 17:01:15 +0000 (18:01 +0100)]
maintainers.inc: Sort list in alphabetical order
No modification was realized except sorting the content of the file.
This way this is easier to add an entry; we just have to add a line
into maintainers.inc file, and sort it again.
Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adrian Freihofer [Mon, 23 Feb 2026 21:06:38 +0000 (22:06 +0100)]
devtool: ide-sdk: support kernel module development
This add very basic support for kernel module development with devtool
ide-sdk. It exports the kernel build environment and sets up
tasks for building and cleaning the module. But it does not yet support
install, deploy, and debug tasks. It looks like possible to offer the
same level of support as for CMake and Meson based projects, but that
requires more work.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adrian Freihofer [Mon, 23 Feb 2026 21:06:37 +0000 (22:06 +0100)]
module.bbclass: move environment setup to kernel_module.py
Refactor: move kernel module environment setup from do_devshell to
kernel_module.py
Extract the kernel module environment variable setup from do_devshell
into oe.kernel_module.kernel_module_os_env(). This enables code reuse
for future features such as devtool ide-sdk.
Note: it would also be possible to e.g. bb.utils.py. But when every such
a widely used utility function gets changed, bitbake needs to recompile
a lot of code. Therefore it's probably better to put it into a
separate file. It also is a very specific function, so oe.kernel_module
seems to be a good place.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adrian Freihofer [Mon, 23 Feb 2026 21:06:36 +0000 (22:06 +0100)]
devtool: ide-sdk gate gdbserver warnings on recipe need
Add a `wants_gdbserver` attribute to modified recipes and evaluate it
across the selected set. Only emit warnings about missing `gdbserver`
and missing `image-combined-dbg` when at least one recipe actually
requires remote debugging support.
This avoids noisy, irrelevant warnings in setups that do not use
gdbserver.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
In shared-sysroot IDE SDK mode, the C++ CMake example test ran CMake
commands but did not assert that configure/build completed successfully.
This could hide failures and produce false positives.
Capture command output from both steps and assert expected messages:
- configure: "Build files have been written to: <builddir>"
- build: "Built target"
This makes the test explicitly fail when CMake configure or build does not
complete as expected.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adrian Freihofer [Mon, 23 Feb 2026 21:06:34 +0000 (22:06 +0100)]
oe-selftest: devtool: add compile step in ide-sdk tests
Add explicit compile step to the ide-sdk test workflow. The current
implementation relies on calling bitbake -c install to perform the
install step, which also triggers a build. But this will change when
bitbake will support task execution without handling dependencies.
To make the tests future-proof, add an explicit compile step after
modifying the source code.
This also improves the test coverage for meson based recipes, as the
compile step is now explicitly tested.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Daniel Turull [Wed, 4 Feb 2026 13:42:34 +0000 (14:42 +0100)]
improve_kernel_cve_report: update data if CVE exists
This allow to include additional information if one of the
sources is more complete. Updating description with more
up to date information and including summary.
For example:
Before while using cve_check:
{
"id": "CVE-2025-68167",
"status": "Patched",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-68167",
"detail": "fixed-version",
"description": "Fixed from version 6.18"
},
After:
{
"id": "CVE-2025-68167",
"status": "Patched",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-68167",
"detail": "fixed-version",
"description": "Fixed from version 6.18",
"summary": "In the Linux kernel, the following (...)"
},
Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 2 Mar 2026 04:55:31 +0000 (23:55 -0500)]
linux-yocto/6.18: genericarm64: feature splits and enablement
Integrating the following commit(s) to linux-yocto/.:
98a36302 cfgs/nfc: create an intel-nfc-vendor specific feature 6350b56a netfilter.cfg: enable NF_CONNTRACK_SNMP a425fdd0 pmem.cfg: enable DEV_DAX and DEV_DAX_HMEM 70eeaeff genericarm64.scc: enable TRANSPARENT_HUGEPAGE support d62a1267 security-arm64.cfg: rename CFI_CLANG to CFI b925ef94 security-arm64.cfg: correctly enable KASAN 1fdb98a4 security-arm64.cfg: add comment for ARM64_BTI_KERNEL 6d8bf6f0 security.cfg: move RANDOMIZE_MEMORY to x86_64 18fcb6dc arm.scc: move ARM_CPUIDLE to arm only 7e1d9b2b numa_x86_64.scc: move x86_64 config from numa.cfg to numa_x86_64.cfg e93e999e sound.cfg: split SND_SOC_WM8731 to I2C and SPI variants 5a567776 sound_x86.scc: take over x86 configs from sound.scc 1ae7ce94 genericarm64.cfg: enable MTD NAND ECC support 15d48f71 genericarm64.cfg: enable TI MTD NAND support 40a67254 genericarm64-serial.cfg: set SERIAL_8250_CONSOLE to y 5ee6148e qemu-kvm.cfg: remove extra space 9f780417 firmware.cfg: whitespace fixes bc221187 genericarm64.cfg: fix CONFIG_PM_DEVFREQ_EVENT aef69bf3 Revert "genericarm64.scc: enable OP-TEE support" 6f597e1a genericarm64.cfg: enable SCSI support for HiSilicon etc f1f313cf genericarm64.scc: enable RPMB support a4565911 genericarm64.scc: enable GNSS support 391566e2 gnss.scc: add feature d40a455d genericarm64.cfg: enable more bus drivers 20e41104 genericarm64.cfg: enable PCI_PASID support 0b2967f5 genericarm64.scc: enable NFC support 2643b37e nfc-vendor.scc: move Intel configs to nfc-vendor-intel.cfg b1d00b01 genericarm64.scc: enable RFKILL LED, INPUT and GPIO 92610953 rfkill-extra.scc: add fragment for RFKILL LEDs, input and GPIO support fc7d5f45 bluetooth.cfg: enable BT_LEDS support f18ec272 genericarm64.scc: enable HSR 79fa2c17 hsr.scc: add feature for High-availability Seamless Redundancy (HSR & PRP) 1313923a genericarm64.scc: enable Time Sensitive Networking e190eeff intel-x86.scc: enable hibernation with feature c941f4ee genericarm64.scc: enable hibernation support ce5c6d9d hibernation.scc: add feature 83620a7d bluetooth-usb.cfg: enable MediaTek and RealTek support cf6e1261 bluetooth-hw.cfg: enable BT_MTK ffdd0769 genericarm64.cfg: enable Microchip PHY support
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Mon, 2 Mar 2026 04:55:29 +0000 (23:55 -0500)]
linux-yocto/6.18: update to v6.18.11
Updating linux-yocto/6.18 to the latest korg -stable release that comprises
the following commits:
ee4fb138af107 Linux 6.18.11 32f08c3ddd6dd gpio: omap: do not register driver in probe() 116f7bd8160c6 wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add 24a253c3aa6d9 PCI: endpoint: Avoid creating sub-groups asynchronously 60b75407c172e drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free ed82e7949f5ca xfs: fix UAF in xchk_btree_check_block_owner d741534302f71 erofs: fix UAF issue for file-backed mounts w/ directio option 1d6bd6183e723 bus: fsl-mc: fix use-after-free in driver_override_show() d14e991279831 scsi: qla2xxx: Query FW again before proceeding with login f04840512438a scsi: qla2xxx: Free sp in error path to fix system crash c068ebbaf5282 scsi: qla2xxx: Delay module unload while fabric scan in progress ae49d33bfc08b scsi: qla2xxx: Allow recovery for tape devices 1a9585e4c58d1 scsi: qla2xxx: Validate sp before freeing associated memory 1339455044155 wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() 46c1d56ad321f hfs: ensure sb->s_fs_info is always cleaned up 4aa45f841413c nilfs2: Fix potential block overflow that cause system hang 52505d7f713bf crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req e69a7b0a71b65 crypto: virtio - Add spinlock protection with virtqueue notification 2ed27b5a11743 crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly 62c89e1992c86 crypto: octeontx - Fix length check to avoid truncation in ucode_load_store d75207465eed2 crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode 65a0016016e8b ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 be7a9bcee0ca6 Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB 8d76b2488eb3c driver core: enforce device_lock for driver_match_device() 16c8be3d55441 smb: client: let send_done handle a completion without IB_SEND_SIGNALED 6bf260ace7301 smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() 69ce4ae2ab65c smb: client: fix last send credit problem causing disconnects cca0526ef2344 smb: client: make use of smbdirect_socket.send_io.bcredits 9eff83600edf6 smb: client: use smbdirect_send_batch processing d059e5fc49755 smb: client: introduce and use smbd_{alloc, free}_send_io() 1f3e8e2c67cbc smb: client: split out smbd_ib_post_send() 8786127068d51 smb: client: port and use the wait_for_credits logic used by server 1fe0f989beb8b smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() 2b08ca3ab6cc5 smb: client: remove pointless sc->recv_io.credits.count rollback b9ec75aba3c8f smb: client: let smbd_post_send() make use of request->wr 5b69ba9978dd0 smb: client: let recv_done() queue a refill when the peer is low on credits f664e6e8a8110 smb: client: make use of smbdirect_socket.recv_io.credits.available 24082642654f3 smb: server: let send_done handle a completion without IB_SEND_SIGNALED 85bf0a73831cc smb: server: fix last send credit problem causing disconnects 5ef18a2e66f2f smb: server: make use of smbdirect_socket.send_io.bcredits cea7afb097b00 smb: server: let recv_done() queue a refill when the peer is low on credits 66c082e3d4651 smb: server: make use of smbdirect_socket.recv_io.credits.available 88cf40f7b5fb4 smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* e811e60e1cc79 smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available cd25e0d809531 smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() e4a8a96a93d08 ksmbd: add chann_lock to protect ksmbd_chann_list xarray 71b5e7c528315 ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths c4b9edd559873 smb: client: split cached_fid bitfields to avoid shared-byte RMW races 1658b66fed206 io_uring: allow io-wq workers to exit when unused f02693a40e407 io_uring/io-wq: add exit-on-idle state 41cec610f6906 Linux 6.18.10 31b593fbece63 riscv: Add intermediate cast to 'unsigned long' in __get_user_asm ecd164120c248 ALSA: usb-audio: Use the right limit for PCM OOB check 24ad4cfac0b8e ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. 57bac08056787 spi: tegra114: Preserve SPI mode bits in def_command1_reg b8eec12aa666c spi: tegra: Fix a memory leak in tegra_slink_probe() 2ac3a105e5149 spi: tegra210-quad: Protect curr_xfer check in IRQ handler d51554dc05695 spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer 3bc293d5b5650 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer 2d3c0122e9611 spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one 51013068438ac spi: tegra210-quad: Move curr_xfer read inside spinlock e1777c400b7a9 spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer b767cf2d4efc8 regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators 3f9b508b3eecc i2c: imx: preserve error state in block data length handler e71e3fa90a151 gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc() 279cb9180510f ASoC: amd: fix memory leak in acp3x pdm dma ops 8434b351cd4ea ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() 01d2fb15f15c1 firmware: cs_dsp: rate-limit log messages in KUnit builds abd66845227c5 firmware: cs_dsp: Factor out common debugfs string read b8ad2d53f706a ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF f3ed399e9aa6f nvme-pci: handle changing device dma map requirements 3c58f6121863c drm/xe/guc: Fix CFI violation in debugfs access. 8b68a45f9722f netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 32ddd09d1103e hwmon: (occ) Mark occ_init_attribute() as __printf 8abb71d4a1dce drm/xe/pm: Disable D3Cold for BMG only on specific platforms 7c5db0957a230 drm/xe/query: Fix topology query pointer advance 184a84f03b5e6 drm/mgag200: fix mgag200_bmc_stop_scanout() 2e5edb69e5d0e net: gro: fix outer network offset 589a530ae44d0 net: add proper RCU protection to /proc/net/ptype 9f42cb8fafd6d net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() 100f3bf914612 drm/amd/display: fix wrong color value mapping on MCM shaper LUT 0031f8829c7fb wifi: iwlwifi: mvm: pause TCM on fast resume 9b9f52f052f49 wifi: iwlwifi: mld: cancel mlo_scan_start_wk 5a2b4b0e9c003 net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4 566ea5769ec27 net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4 f346253e5fd95 net: enetc: Remove CBDR cacheability AXI settings for ENETC v4 d98745c68023f net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4 c175b1eaf729e tipc: use kfree_sensitive() for session key material f3931416cbdd0 net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts 2718ae6af7445 linkwatch: use __dev_put() in callers to prevent UAF 64cf3016234ce io_uring/zcrx: fix page array leak fad7334082cd1 net: don't touch dev->stats in BPF redirect paths 8860ddf0e07be hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() 1b2efc593dca9 net: usb: r8152: fix resume reset deadlock cdedcd5aa3f3c macvlan: fix error recovery in macvlan_common_newlink() c9e4daf62ca07 net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module 8553bf2e09828 i40e: drop udp_tunnel_get_rx_info() call from i40e_open() 07bb882485f89 ice: drop udp_tunnel_get_rx_info() call from ndo_open() 7565d4df66b66 ice: Fix PTP NULL pointer dereference during VSI rebuild ef72678c9df0e ice: PTP: fix missing timestamps on E825 hardware 6801ef140fc33 ice: fix missing TX timestamps interrupts on E825 devices 1b381a638e185 dpaa2-switch: add bounds check for if_id in IRQ handler 4640fa5ad5e1a net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup 293eaad0d6d6b net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup d028147ae0640 net: liquidio: Initialize netdev pointer before queue setup 155eb99aff292 dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero 8a672f177ebe1 net/sched: cls_u32: use skb_header_pointer_careful() 9b186feb75267 net: add skb_header_pointer_careful() helper f8611a7981cd0 hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist 9ee608a64e37c smb/client: fix memory leak in smb2_open_file() faff38ebbfe63 platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable 9029ccfab2ca9 platform/x86: hp-bioscfg: Skip empty attribute names 6c45a5a7e1e3b platform/x86: intel_telemetry: Fix PSS event register mask f93ae43780b75 platform/x86: toshiba_haps: Fix memory leaks in add/remove routines 245ff08e261ce Revert "drm/amd/display: pause the workload setting in dm" 98bf5bc8cb8cb tracing: Avoid possible signed 64-bit truncation 6dd87f6afe9e9 ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio 3228b2eceb6c3 btrfs: reject new transactions if the fs is fully read-only b4b065a880997 wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice ccb3c75d57039 btrfs: sync read disk super and set block size 7a1bec39c014e wifi: mac80211: correctly check if CSA is active 990e40fb1d111 btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer() 3835e49e146a4 scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() 108cbf2b7d295 ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU 1d5f2329ab4df io_uring/rw: free potentially allocated iovec on cache put failure c65a1a72a41e4 riscv: Use 64-bit variable for output in __get_user_asm 4530f4e4d0e6a scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() 8a7ef96e6af91 wifi: cfg80211: Fix bitrate calculation overflow for HE rates 36e88bd40a8c0 spi: intel-pci: Add support for Nova Lake SPI serial flash 7178b36de1850 ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti f08f2d2907675 regmap: maple: free entry on mas_store_gfp() failure 7d4c9c448c2b3 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization 66b73d3f2cfc7 ALSA: hda/tas2781: Add newly-released HP laptop e6ce61e01c9a2 ASoC: tlv320adcx140: Propagate error codes during probe 3ba3d959c17aa ASoC: amd: yc: Fix microphone on ASUS M6500RE 1c90f930e7b41 nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() 62932d9ed639a ALSA: usb-audio: Prevent excessive number of frames e810b290922c5 nvme-fc: release admin tagset if init fails a883080063f97 ASoC: simple-card-utils: Check device node before overwrite direction 61fa85497c7b7 ASoC: davinci-evm: Fix reference leak in davinci_evm_probe 9f665b3c3d9a1 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() 921903d73967f ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 74309a4b0ffc7 wifi: mac80211: collect station statistics earlier when disconnect da1880c7b6b83 HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) 71434e45bf124 HID: logitech: add HID++ support for Logitech MX Anywhere 3S b1f8285bc8e35 riscv: trace: fix snapshot deadlock with sbi ecall 151589d15ee87 ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free cd7ff7fd3e4b7 drm/amd/pm: Disable MMIO access during SMU Mode 1 reset ecb8653a8fe9d HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) 1e84a807c98a7 HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer 2124279f1f8c3 HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() 6e2108daed94e HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list 645671377158f drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule() eb5d6dedadd66 netfilter: replace -EEXIST with -EBUSY ddab2d0f93200 PCI: qcom: Remove ASPM L0s support for MSM8996 SoC 3210077ed2648 ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk 5b9bbe3d7bb90 x86/sev: Disable GCOV on noinstr object 75f1f512b1567 ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 747b9a7d4c712 HID: playstation: Center initial joystick axes to prevent spurious events 7ae5b35148119 HID: intel-ish-hid: Reset enum_devices_done before enumeration 8b44e75379510 riscv: Sanitize syscall table indexing under speculation 28768bd3abf99 btrfs: fix reservation leak in some error paths when inserting inline extent a206870513cda HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL ea5ef771f3c26 HID: intel-ish-hid: Update ishtp bus match to support device ID table 6de3a371a8b9f btrfs: do not free data reservation in fallback from inline due to -ENOSPC 70dd3513ed6ac smb/server: fix refcount leak in parse_durable_handle_context() c2ed4f71e9288 LoongArch: Enable exception fixup for specific ADE subcode 2bb9c8a77df50 io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings 4665e52bde3b1 smb/server: fix refcount leak in smb2_open() 0107b18cd8ac1 md: suspend array while updating raid_disks via sysfs 9531210f348aa LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED fdda836fcee6f smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() f309b2c7df659 block,bfq: fix aux stat accumulation destination 86acdc1791944 platform/x86: dell-lis3lv02d: Add Latitude 5400 ff6892ea544c4 wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP 6b7c60feab3c6 net: usb: sr9700: support devices with virtual driver CD 10d3ff7e5812c wifi: mac80211: don't WARN for connections on invalid channels 689a7980e4788 wifi: wlcore: ensure skb headroom before skb_push e0bd226804f8e wifi: mac80211: ocb: skip rx_no_sta when interface is not joined abd219fd48b11 tracing: Fix ftrace event field alignments 116ffca92dc4d binderfs: fix ida_alloc_max() upper bound e9bcfe865188a binder: fix BR_FROZEN_REPLY error log a6050dedb6f1c binder: fix UAF in binder_netlink_report() 287221c5e0707 rust_binderfs: fix ida_alloc_max() upper bound 685bb05d307ac rust_binder: add additional alignment checks 598fe3ff32e43 rust_binder: correctly handle FDA objects of length zero 13de38aa3ea7a sched/fair: Have SD_SERIALIZE affect newidle balancing de7cb4282dafc sched/fair: Skip sched_balance_running cmpxchg when balance is not due 3a15c519d2b0f bus: mhi: host: pci_generic: Add Telit FE990B40 modem support fa2274bb17a4a treewide: Drop pci_save_state() after pci_restore_state() 71c50e60421bb PCI/ERR: Ensure error recoverability at all times 1a893bd719121 hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled 37751b6d0b6b5 hwmon: (gpio-fan) Fix set_rpm() return value 4385b2f284354 KVM: Don't clobber irqfd routing type when deassigning irqfd 7a245ef476ffb KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures a82647e1a9499 net: spacemit: k1-emac: fix jumbo frame support d5b3a66986697 net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue 488009aa62bb1 net: cpsw: Execute ndo_set_rx_mode callback in a work queue ef763b480a3de nouveau/gsp: fix suspend/resume regression on r570 firmware a20887d5239a3 nouveau/gsp: use rpc sequence numbers properly. 9cc8caba82c2b nouveau: add a third state to the fini handler. 5f645222eb30c Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" 7b6a0f121d502 mm, shmem: prevent infinite loop on truncate race 41a7b9ab855c8 gve: Correct ethtool rx_dropped calculation 11f8311f69e4c gve: Fix stats report corruption on queue count change e9cdd54797dc2 drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52 d3081353acaa6 cgroup/dmem: avoid pool UAF 5c38604abbfa5 cgroup/dmem: avoid rcu warning when unregister region c13816e8fa23d cgroup/dmem: fix NULL pointer dereference when setting max e258ed369c9e0 ceph: fix oops due to invalid pointer for kfree() in parse_longname() 35e6fd0d5bc30 ARM: 9468/1: fix memset64() on big-endian 46dfdb6f7a79d rbd: check for EOD after exclusive lock is ensured to be held 57b36ffc8881d ceph: fix NULL pointer dereference in ceph_mds_auth_match() e8af57e090790 mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single cbc03ce3e6ce7 procfs: avoid fetching build ID while holding VMA lock eb54ce033b344 pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains 11ca03ce17d7d pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup 5171a3dddf427 pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset 72129d55be9ce pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup d72563e402bab pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state 5727ccf9d19ca ALSA: aloop: Fix racy access at PCM trigger 21816bbc8492f platform/x86: intel_telemetry: Fix swapped arrays in PSS output b5a02290ee3a4 KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() a94b956bb7272 x86/kfence: fix booting on 32bit non-PAE systems feb603a69f830 x86/vmware: Fix hypercall clobbers ab200d71553bd nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
QB_MEM works in recipe scope because testimage.bbclass reads it from the
current recipe datastore (d) at test time via the qemuboot.conf mechanism.
PTEST_RUNNER_TIMEOUT was only available through testdata.json (written
during image build via export2json). The testimage task reads td from the
potentially stale testdata.json, and PTEST_RUNNER_TIMEOUT was never
refreshed from the live recipe context.
[YOCTO #16163]
Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Tim Orling [Fri, 27 Feb 2026 19:39:29 +0000 (11:39 -0800)]
core-image-ptest: add PTEST_RUNNER_TIMEOUT
In lib/oeqa/runtime/cases/ptest.py, the timeout used to be hardcoded to 450 seconds.
Now that it is a variable, make that a bit more obvious by setting a default value.
Set PTEST_RUNNER_TIMEOUT for python3-cffi to 600 seconds as it is known to come close
to and surpass the 450 second limit under heavy load.
Fixes: [YOCTO #16163] Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Francesco Valla [Sun, 1 Mar 2026 21:17:03 +0000 (22:17 +0100)]
kernel-fit-image: support arbitrary loadables
Allow a user to insert additional, arbitrary loadables in a FIT image.
The loadables can be specified through the FIT_LOADABLES variable as
a list, with parameters defined by flags on dedicated FIT_LOADABLE_*
variables; they will be included in all configurations.
Sensible defaults will be used for some parameters (type, compression,
description, arch, os) if the corresponding flag is not set, while
others (load address and entry point) will be omitted in the final FIT
image.
As an example, the following configuration can be specified to add as
loadables a TF-A BL31 firmware and a (compressed) TEE firmware, to be
loaded respectively at 0x204E0000 and 0x96000000:
Signed-off-by: Francesco Valla <francesco@valla.it> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Livin Sunny [Fri, 27 Feb 2026 22:38:02 +0000 (16:38 -0600)]
busybox: Fixes CVE-2025-60876
This addresses CVE-2025-60876[1], which allows malicious URLs to inject
HTTP headers. It has been accepted by Debian[2] and is tracked here [4].
The upstream fix has been submitted [3] and is pending merge.
Changqing Li [Sat, 28 Feb 2026 09:27:52 +0000 (17:27 +0800)]
toolchain-scripts-base.bbclass: remove timestamp
This timestamp makes the package meta-environment-qemux86-64 not
reproducible, and it is the time when the package is built, mabybe not
that important, the key info is the meta revision.
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Chen Qi [Fri, 27 Feb 2026 02:24:20 +0000 (02:24 +0000)]
runqemu: restore support to run inside SDK
Using runqemu from SDK has been supported for a long time[1].
Below are example steps for using runqemu inside SDK.
1. mkdir destdir
2. cp -r /path/to/build/tmp/deploy/image/qemux86-64 destdir
3. Install SDK to destdir
4. Source SDK
5. runqemu qemux86-64 nographic slirp
Recently the related code path was deleted by accident during
an effort to make codes cleaner and more consistent.
We need to restore support for it.
What actually matters is the STAGING_BINDIR_NATIVE, which we
use to locate the qemu binary. So in case of SDK, we set it
from OECORE_NATIVE_SYSROOT. The STAGING_DIR_NATIVE checking
and setting are meaningless, thus deleting it.
A notable change is:
1. This release now uses Mike Haertel's MinRX regular expression matcher
as the default regexp engine. The old regex and dfa engines are still
available.
The former regex matcher is selectable at run-time by setting the environemnt
variable:
GAWK_GNU_MATCHERS
More details are available here:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/tree/README_d/README.matchers?h=gawk-5.4-stable
Switch the tarball from .gz to .xz to reduce size by ~3MB.
No ptests errors for x86-64 for glibc/musl.
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssl: Package /etc/ssl/openssl.conf.d in openssl-conf
Since the /etc/ssl/openssl.conf file is packaged in openssl-conf, it
makes sense to also add the new /etc/ssl/openssl.conf.d directory to the
same package.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Adrian Freihofer [Thu, 26 Feb 2026 20:19:50 +0000 (21:19 +0100)]
oe-init-build-env: Drop VSCode setup
Remove the VSCode setup from oe-init-build-env.
Since poky as a combo-layer repository is no longer available, using the
oe-init-build-env script from openembedded-core is no longer
straightforward. There are too many ways to set up a build environment,
with different directory structures, with containers involved or not,
etc. Each of these setups may have its own way to provide IDE support.
A simple shell script like oe-init-vscode cannot address all these use
cases. Rather than trying to make oe-init-build-env smart enough to
cover all these cases, it is better to delegate the responsibility to
whatever tool or repository is used to set up the build environment.
If no tool such as bitbake-setup is used, it is still possible to use
a variant of the oe-setup-vscode script from a custom layer. One way
which works well is to create a custom oe-init-build-env script in the
custom layer repository which calls the custom oe-setup-vscode script
from the custom layer repository. Example directory structure:
my-project/
├── .vscode # generated by oe-setup-vscode
| # when oe-init-build-env is called
├── layers/
│ └── openembedded-core/
| └── bitbake/
├── scripts/
│ └── oe-setup-vscode
├── build/
│ └── conf
└── oe-init-build-env
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Update RDEPENDS for perl-module-extutils-parsexs, refer [1], this should
fix libmodule-build-perl ptest failure:
Failed to load or import from ExtUtils::ParseXS (version 3.57). Please
check that ExtUtils::ParseXS is installed correctly and that the newest
version will be found in your @INC path: Can't locate
ExtUtils/ParseXS/Node.pm in @INC
New Features:
Support for new instructions added to AMD, ARM and RISC-V architectures.
Support for version 3 of the SFrame standard.
The readelf program can now display the contents of Global Offset Tables.
Improved linker tagging support.
Dropped patches:
0001-aarch64-constify-BTI-and-GCS-report-functions.patch
Since the fix is already included in binutils 2.46.
CVE patches: CVE-2025-11081,CVE-2025-11082,CVE-2025-11083,
CVE-2025-11839,CVE-2025-11840,CVE-2025-11412,CVE-2025-11413,
CVE-2025-11414,CVE-2025-11494,CVE-2025-11495.
These were dropped because they are already addressed in binutils 2.46.
Drop CVE_STATUS:
binutils 2.46 has needed fixes for CVE-2025-7545 and CVE-2025-7546.
Testcases changes:
-------------------------------------------------------------------------------
Testcase-name 2.45.1 2.46
-------------------------------------------------------------------------------
nm --ifunc-chars=-- (global ifunc) - PASS
nm --ifunc-chars=-- (local ifunc) - PASS
copy with unknown section flag - PASS
objcopy tek2bin - PASS
binary symbol (implicit) - PASS
binary symbol (explicit) - PASS
readelf SFrame V2 (x86-64/test-v2-ET_EXEC.sframe) - PASS
objdump SFrame V2 (x86-64/test-v2-ET_EXEC.sframe) - PASS
readelf SFrame V2 (x86-64/test-v2-ET_REL.sframe) - PASS
objdump SFrame V2 (x86-64/test-v2-ET_REL.sframe) - PASS
run objcopy of executable UNSUPPORTED PASS
run stripped executable UNSUPPORTED PASS
run stripped executable with saving a symbol UNSUPPORTED PASS
Copy object attributes v2 data from an object to another - UNSUPPORTED
Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>