This update has CVEs fixed
CVE-2019-5489
CVE-2018-20669
Merge "[keystore] Change keystore applets store path" into base
Linux 4.19.40
ath10k: Drop WARN_ON()s that always trigger during system resume
ALSA: line6: use dynamic buffers
KVM: nVMX: Fix size checks in vmx_set_nested_state
KVM: x86: Whitelist port 0x7e for pre-incrementing %rip
net/tls: fix copy to fragments in reencrypt
net/tls: don't copy negative amounts of data in reencrypt
bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt().
bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
bnxt_en: Improve multicast address setup logic.
packet: validate msg_namelen in send directly
selftests: fib_rule_tests: print the result and return 1 if any tests failed
sctp: avoid running the sctp state machine recursively
rxrpc: Fix net namespace cleanup
net/tls: avoid NULL pointer deref on nskb->sk in fallback
net: phy: marvell: Fix buffer overrun with stats counters
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
l2ip: fix possible use-after-free
ipv6: invert flowlabel sharing check in process and user mode
...
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Include the microcode from caveats as well since all kernels supported
have those patches. Also point to the new git repo and corrected
license.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Backport patches from upstream to fix build errors when building
with kernel v5.1. These patches are backported from stable branch.
The code v5.1 is protected by ifdefs so v4.19 works as well.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Target Test devices for test coverage are updated for intel-corei7-64 architecture
Removed Minnowboard Turbot
Added NUC7i7BNH and Coffee Lake-H
Signed-off-by: sangeeta jain <sangeeta.jain@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The Intel(R) Graphics Compiler for OpenCL(TM) is an llvm based compiler
for OpenCL(TM) targeting Intel Gen graphics hardware architecture.
More details at: https://01.org/compute-runtime
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Common clang is a thin wrapper library around clang. Common clang has
OpenCL-oriented API and is capable to compile OpenCL C kernels to SPIR-V
modules.
This adds a bbappend to clang recipe from meta-clang to build the
necessary components and moves it to dynamic layers so it's built only
when clang-layer is included.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Build only linux_linker component from common clang library for native
use when compiling the target version.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Builds base from mainline-tracking production kernel.
In addition to intel-common kernel configs from yocto-kernel-cache, this
also includes security.scc feature which enables a set of configs with
the aim of reducing the kernel attack surface and/or of performing
additional checks and validation of commonly used structures in kernel.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Introduce Intel® Single Event API (Intel® SEAPI), which is the
translator of itt_notify calls into several OS specific and
third party tracing formats. It can be use as memory/performance/
whatever profile.
Wiki:
https://github.com/intel/IntelSEAPI/wiki
Signed-off-by: Lim, Raynald <raynald.lim@intel.com>
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Don't change native or nativesdk so that builds using both
meta-intel and other machines can share native sstate.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This fork of zlib has a number of IA-specific improvements and is
noticably faster when running on Intel hardware.
As this is a relatively minor fork of zlib, include the oe-core recipe
and override where appropriate. This ensures that we still generate
the ptest package for example.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
A list of third party components added to the LICENSE.
LICENSE changes:
"""
Intel MKL-DNN includes components with separate copyright
notices and license terms.
XByak, 3-clause BSD license
Copyright (c) 2007 MITSUNARI Shigeo
See full copyright notice and license text in src/cpu/xbyak/COPYRIGHT
gtest, 3-clause BSD license
Copyright 2008, Google Inc.
See full copyright notice and license text in tests/gtests/gtest/LICENSE
"""
This release contains performance optimizations, new functionality,
usability improvements and bug fixes.
For more details, please check:
https://github.com/intel/mkl-dnn/releases
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Merge Stable Linux tag 'v4.19.34' into lts2018/base
Stable Linux tag 'v4.19.34': (322 commits)
Linux 4.19.34
kprobes/x86: Blacklist non-attachable interrupt functions
bcache: fix potential div-zero error of writeback_rate_p_term_inverse
ACPI / video: Extend chassis-type detection with a "Lunch Box" check
net: stmmac: Avoid one more sometimes uninitialized Clang warning
drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
Input: soc_button_array - fix mapping of the 5th GPIO in a PNP0C40 device
dmaengine: tegra: avoid overflow of byte tracking
clk: rockchip: fix frac settings of GPLL clock for rk3328
clk: meson: clean-up clock registration
drm/fb-helper: fix leaks in error path of drm_fb_helper_fbdev_setup
x86/build: Mark per-CPU symbols as absolute explicitly for LLD
wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
brcmfmac: Use firmware_request_nowarn for the clm_blob
selinux: do not override context on context mounts
x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
drm/nouveau: Stop using drm_crtc_force_disable
drm: Auto-set allow_fb_modifiers when given modifiers at plane init
pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
...
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Stable Linux tag v4.14.110 : (368 commits)
Linux 4.14.110
vfio: ccw: only free cp on final interrupt
Revert "USB: core: only clean up what we allocated"
KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
KVM: Reject device ioctls from processes other than the VM's creator
x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
perf intel-pt: Fix TSC slip
mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
usb: cdc-acm: fix race during wakeup blocking TX traffic
xhci: Fix port resume done detection for SS ports with LPM enabled
usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
usb: common: Consider only available nodes for dr_mode
USB: gadget: f_hid: fix deadlock in f_hidg_write()
usb: mtu3: fix EXTCON dependency
phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
gpio: exar: add a check for the return value of ida_simple_get fails
drm/vgem: fix use-after-free when drm_gem_handle_create() fails
fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
...
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
4.18 has been replaced by 4.19 and 5.0 kernels in OE-core so drop the
appends.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This reverts commit 946c15720e.
Revert part of commit to keep bbappend file. This file
is required to build and deploy EFI boot stub
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
v4.19.28 have below fixes:
INTERNAL drm/i915: Additional alpha blending support
drm/i915/gvt: handles error when ioreq attach client fails
kernel/vhm:Add some debugs to print the client id/name for create/destroy ioreq_client
media: intel-ipu4: crlmodule-lite: adv7481_cvbs: Add PAL size
drm/i915: add lock to avoid racing of pvmmio operations for GVT-g guest
keystore: add iv_size restriction for dal-keystore
TSC: Print current tsc value when detected
Stable Linux tag 'v4.19.28': (69 commits)
Linux 4.19.28
bpf: fix sanitation rewrite in case of non-pointers
scsi: core: reset host byte in DID_NEXUS_FAILURE case
exec: Fix mem leak in kernel_read_file
Bluetooth: Fix locking in bt_accept_enqueue() for BH context
Bluetooth: btrtl: Restore old logic to assume firmware is already loaded
selftests: firmware: fix verify_reqs() return value
USB: serial: cp210x: fix GPIO in autosuspend
gnss: sirf: fix premature wakeup interrupt enable
xtensa: fix get_wchan
aio: Fix locking in aio_poll()
MIPS: irq: Allocate accurate order pages for irq stack
applicom: Fix potential Spectre v1 vulnerabilities
usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on INTEL_SUNRISEPOINT_LP_XHCI
tracing: Fix event filters and triggers to handle negative numbers
x86/boot/compressed/64: Do not read legacy ROM on EFI system
x86/CPU/AMD: Set the CPB bit unconditionally on F17h
net: sched: act_tunnel_key: fix NULL pointer dereference during init
net/sched: act_skbedit: fix refcount leak when replace fails
net/sched: act_ipt: fix refcount leak when replace fails
...
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Let users build linux-yocto 5.0 kernel with meta-intel machines and
machine/meta revisions from OE-Core.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The platform isn't supported anymore and this isn't tested as a result
with recent kernels supported.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Remove support for building with 4.9 kernel in this release. Also remove
related bbapends with patches to fix builds for 4.9.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Rename the systemd and grub-efi .wks files to .wks.in, and replace all 'append'
entries apart from rootfstype (which is specific to the wks file) with
${APPEND}, so the values of APPEND from the BSP and user is respected.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Add generic recipe for Intel(R) Math Kernel Library for Deep Neural
Networks. The library accelerates deep-learning applications and
frameworks on Intel architecture.
Signed-off-by: Ankit Navik <ankit.tarot@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This update brings in changes from v4.14.93 up to v4.14.101
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Stable Linux tag 'v4.19.23': (355 commits)
Linux 4.19.23
Revert "exec: load_script: don't blindly truncate shebang string"
Linux 4.19.22
svcrdma: Remove max_sge check at connect time
svcrdma: Reduce max_send_sges
batman-adv: Force mac header to start of data on xmit
batman-adv: Avoid WARN on net_device without parent in netns
xfrm: refine validation of template and selector families
libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
xfrm: Make set-mark default behavior backward compatible
SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
drm/vmwgfx: Fix setting of dma masks
drm/i915: always return something on DDI clock selection
drm/amd/powerplay: Fix missing break in switch
drm/modes: Prevent division by zero htotal
mac80211: ensure that mgmt tx skbs have tailroom for encryption
mic: vop: Fix use-after-free on remove
powerpc/radix: Fix kernel crash with mremap()
...
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
