GNU bug report logs - #76692
Update arm-trusted-firmware to 2.12.1

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 76692 in the body.
You can then email your comments to 76692 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Vagrant Cascadian <vagrant <at> debian.org>
To: guix-patches <at> gnu.org
Cc: Efraim Flashner <efraim <at> flashner.co.il>
Subject: Update arm-trusted-firmware to 2.12.1
Date: Sun, 02 Mar 2025 13:03:12 -0800

[Message part 1 (text/plain, inline)]

The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few
CVE issues.

All the various u-boot dependents still appear to build:

/gnu/store/641kcdl61xjsqn6001gmfqq8cx7j0pw3-u-boot-rock64-rk3328-2024.10
/gnu/store/2lh91is66sa964nk4860f47f7bp58mfk-u-boot-orangepi-r1-plus-lts-rk3328-2024.10
/gnu/store/f9vghparyywn7w9m3nxdlg8mpbwp1xgf-u-boot-firefly-rk3399-2024.10
/gnu/store/8cd32i44gxbkig4z359l1d527wkzsqra-u-boot-pinebook-pro-rk3399-2024.10
/gnu/store/j12i6bs7a4w1k7ssa4g2nfkmymv9pir4-u-boot-puma-rk3399-2024.10
/gnu/store/a7s96k9k62aa36l733vdazgq7dvdjzas-u-boot-rockpro64-rk3399-2024.10
/gnu/store/4mlmfxzy2kb6ilzm4k6hhr870i7m5f4y-u-boot-pinebook-2024.10
/gnu/store/6d0476i6zkj1nsn78jyfclqpw5b5sgv7-u-boot-pine64-lts-2024.10
/gnu/store/5csl9vwkn195qf37y4q8c8yq3x59mw11-u-boot-pine64-plus-2024.10

I have not done any boot testing.

live well,
  vagrant

[0001-gnu-arm-trusted-firmware-Update-to-2.12.1.patch (text/x-diff, inline)]

From 17912f437b041fb790e29e07c7bfc2f543f7bb2c Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant <at> debian.org>
Date: Sun, 2 Mar 2025 11:55:42 -0800
Subject: [PATCH] gnu: arm-trusted-firmware: Update to 2.12.1.

* gnu/packages/firmware.scm (make-arm-trusted-firmware): Update to 2.12.1.
---
 gnu/packages/firmware.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/firmware.scm b/gnu/packages/firmware.scm
index 2e78936d83..06c0664d31 100644
--- a/gnu/packages/firmware.scm
+++ b/gnu/packages/firmware.scm
@@ -1107,17 +1107,17 @@ (define (native-build?)
         (string=? (%current-system) (gnu-triplet->nix-system triplet))))
   (package
     (name (downstream-package-name "arm-trusted-firmware-" platform))
-    (version "2.12")
+    (version "2.12.1")
     (source
      (origin
        (method git-fetch)
        (uri (git-reference
               (url (string-append "https://git.trustedfirmware.org"
                                   "/TF-A/trusted-firmware-a.git/"))
-              (commit (string-append "v" version))))
+              (commit (string-append "lts-v" version))))
        (file-name (git-file-name "arm-trusted-firmware" version))
        (sha256
-        (base32 "18rzhygvq0afcylirq9yis3kaa1nli14k2jrm64ih85gz4nhl99w"))
+        (base32 "1vngwbjghgsh5i02zq66nmbxxr2d4p93rirsvh5jrhbcdn0v5xf8"))
        (patches (search-patches "8mq-enable-imx_hab_handler.patch"
                                 "8mq-move-stack-to-ocram_s.patch"))
        (modules '((guix build utils)))

base-commit: 6315f3ff4d3d0cf1bd89b92bdb9a139aee404ca2
-- 
2.39.5

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 76692 <at> debbugs.gnu.org (full text, mbox):

From: Vagrant Cascadian <vagrant <at> debian.org>
To: 76692 <at> debbugs.gnu.org
Cc: Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: Update arm-trusted-firmware to 2.12.1
Date: Tue, 04 Mar 2025 10:40:44 -0800

[Message part 1 (text/plain, inline)]

On 2025-03-02, Vagrant Cascadian wrote:
> The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few
> CVE issues.
>
> All the various u-boot dependents still appear to build:
>
> /gnu/store/641kcdl61xjsqn6001gmfqq8cx7j0pw3-u-boot-rock64-rk3328-2024.10
> /gnu/store/2lh91is66sa964nk4860f47f7bp58mfk-u-boot-orangepi-r1-plus-lts-rk3328-2024.10
> /gnu/store/f9vghparyywn7w9m3nxdlg8mpbwp1xgf-u-boot-firefly-rk3399-2024.10
> /gnu/store/8cd32i44gxbkig4z359l1d527wkzsqra-u-boot-pinebook-pro-rk3399-2024.10
> /gnu/store/j12i6bs7a4w1k7ssa4g2nfkmymv9pir4-u-boot-puma-rk3399-2024.10
> /gnu/store/a7s96k9k62aa36l733vdazgq7dvdjzas-u-boot-rockpro64-rk3399-2024.10
> /gnu/store/4mlmfxzy2kb6ilzm4k6hhr870i7m5f4y-u-boot-pinebook-2024.10
> /gnu/store/6d0476i6zkj1nsn78jyfclqpw5b5sgv7-u-boot-pine64-lts-2024.10
> /gnu/store/5csl9vwkn195qf37y4q8c8yq3x59mw11-u-boot-pine64-plus-2024.10
>
> I have not done any boot testing.

Finally got my rockpro64 up and running guix again, and boot-tested it,
so that is at least one platform!

live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #13 received at 76692-done <at> debbugs.gnu.org (full text, mbox):

From: Vagrant Cascadian <vagrant <at> debian.org>
To: 76692-done <at> debbugs.gnu.org
Cc: Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: Update arm-trusted-firmware to 2.12.1
Date: Sun, 09 Mar 2025 14:56:16 -0700

[Message part 1 (text/plain, inline)]

On 2025-03-04, Vagrant Cascadian wrote:
> On 2025-03-02, Vagrant Cascadian wrote:
>> The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few
>> CVE issues.
>>
>> All the various u-boot dependents still appear to build:
...
> Finally got my rockpro64 up and running guix again, and boot-tested it,
> so that is at least one platform!

Pushed as:

  3aed6ee07bd0d22cd6cf897eada7ea3b95f6adf5 gnu: arm-trusted-firmware: Update to 2.12.1.

live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.