Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from buildroot:master #399

Merged
merged 8 commits into from
Dec 19, 2024
Merged

Conversation

pull[bot]
Copy link

@pull pull bot commented Dec 19, 2024

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

nealfrager and others added 8 commits December 18, 2024 19:35
If the u-boot DP driver attempts to configure the Kria SOM DP before it is
released from reset, it will cause a boot hang.  Since the KV260 uses the DP
by default, this patch needs to be included with buildroot until it is part
of a u-boot-xlnx release tag.

While only the KV260 is directly affected, there is no issue with applying
this patch to all 3 zynqmp_kria defconfigs.

This patch has also been committed to u-boot upstream.

Upstream: u-boot/u-boot@8b81010

Signed-off-by: Neal Frager <[email protected]>
[Julien: fix check-package error by adding Upstream tag in patch]
Signed-off-by: Julien Olivain <[email protected]>
For release notes since version 1.3, see:
https://github.com/riscv-software-src/opensbi/releases/tag/v1.5
https://github.com/riscv-software-src/opensbi/releases/tag/v1.4

This commit also updates the package home page url and the
download _SITE to reflect the change of github account from "riscv"
to "riscv-software-src".

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
The mongodb package has not been updated in close to 3 years (since commit
49bbf64 "package/mongodb: security bump to version 4.2.18") and the
4.2.x series is EOL since April 2023:

https://www.mongodb.com/legal/support-policy/lifecycles

There are no reverse dependencies, so drop the package.  If a maintainer
steps up to support it, then (a newer version of) the package can be
re-added later.

Signed-off-by: Peter Korsgaard <[email protected]>
[Julien: remove .checkpackageignore entries to fix check-package errors]
Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Raphael Pavlidis <[email protected]>
Signed-off-by: Julien Olivain <[email protected]>
For release note, see:
https://github.com/lunarmodules/luaexpat/releases/tag/1.5.2

This commit updates the license hash, due to year update:
lunarmodules/luaexpat@947d2e9

Signed-off-by: Francois Perrad <[email protected]>
[Julien: add link to release note and license update commit]
Signed-off-by: Julien Olivain <[email protected]>
Fixes the following security issue:

CVE-2024-11614: An out-of-bounds read vulnerability was found in DPDK's
Vhost library checksum offload feature.  This issue enables an untrusted or
compromised guest to crash the hypervisor's vSwitch by forging Virtio
descriptors to cause out-of-bounds reads.  This flaw allows an attacker with
a malicious VM using a virtio driver to cause the vhost-user side to crash
by sending a packet with a Tx checksum offload request and an invalid
csum_start offset.

https://www.openwall.com/lists/oss-security/2024/12/17/3

Release notes: http://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Julien Olivain <[email protected]>
@pull pull bot added the ⤵️ pull label Dec 19, 2024
@pull pull bot merged commit 3645e3b into ThomasDevoogdt:master Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants