[OE-core] [PATCH 1/3] libxkbcommon: Extend to build native package

2022-12-02 Thread Khem Raj
This is needed by gtk+4 recipe Signed-off-by: Khem Raj --- meta/recipes-graphics/xorg-lib/libxkbcommon_1.4.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-graphics/xorg-lib/libxkbcommon_1.4.1.bb b/meta/recipes-graphics/xorg-lib/libxkbcommon_1.4.1.bb index

[OE-core] [PATCH 3/3] xkeyboard-config: Extend to build native package

2022-12-02 Thread Khem Raj
Needed by gtk4 Signed-off-by: Khem Raj --- meta/recipes-graphics/xorg-lib/xkeyboard-config_2.37.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-graphics/xorg-lib/xkeyboard-config_2.37.bb b/meta/recipes-graphics/xorg-lib/xkeyboard-config_2.37.bb index

[OE-core] [PATCH 2/3] iso-codes: Extend to build native packages

2022-12-02 Thread Khem Raj
Needed by gtk4 Signed-off-by: Khem Raj --- meta/recipes-support/iso-codes/iso-codes_4.12.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-support/iso-codes/iso-codes_4.12.0.bb b/meta/recipes-support/iso-codes/iso-codes_4.12.0.bb index ea7c43cdae..1c884a1174 100644 ---

Re: [OE-core] [master,langdale][PATCH] qemurunner.py: Support fallback to older QEMU qmp library

2022-12-02 Thread Mark Hatle
Ping, any comments on this? On 11/21/22 1:20 PM, Mark Hatle wrote: From: Mark Hatle Some vendor versions of QEMU may be on older versions that do not have qmp.legacy, but instead of qmp. Default to the integrated library versions, fall back to the older one and then if neither is available

[OE-core] [PATCH] lsof: add update-alternatives logic

2022-12-02 Thread Alex Stewart
Some distributions (NI LinuxRT) provide both busybox-lsof and full-featured lsof implementations. When users install the full-featured lsof package, the full-binary fails to replace the bbox-binary in PATH, because `lsof` contains no update-alternatives logic. Inherit the update-alternatives

Re: [OE-Core][master,langdale][PATCH] libdrm: Remove libdrm-kms package

2022-12-02 Thread Sandeep Gundlupet Raju via lists.openembedded.org
Hi Alex, Richard, Any updates on reviewing this patch? Thanks, Sandeep On 11/3/2022 2:09 PM, Gundlupet Raju, Sandeep wrote: Hello, Any updates on reviewing this patch? Thanks, Sandeep On 10/27/2022 8:17 PM, Sandeep Gundlupet Raju wrote: libkms library is deprecated in 2.4.111 version.

[OE-core] [PATCH 2/4] glibc-tests: correctly pull in the actual tests when installing -ptest package

2022-12-02 Thread Alexander Kanavin
The tests are packaged into the main glibc-tests package which is fine, but then glibc-tests-ptest package needs to depend on that. Which is what this commit addresses. Signed-off-by: Alexander Kanavin --- meta/recipes-core/glibc/glibc-tests_2.36.bb | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [PATCH 3/4] python3: fix tests on x86 (32 bit)

2022-12-02 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...add-more-elements-in-test_determinis.patch | 27 +++ .../recipes-devtools/python/python3_3.11.0.bb | 1 + 2 files changed, 28 insertions(+) create mode 100644

[OE-core] [PATCH 4/4] ptest-packagelists.inc: do not run valgrind ptests on 32 bit x86

2022-12-02 Thread Alexander Kanavin
Valgrind build itself with -mpreferred-stack-boundary=2 on that target (and the tests expect that). On the other hand, we enable SSE instructions, which expect things to be aligned on 16 byte boundary (e.g. -mpreferred-stack-boundary=4). This won't be reported at compile time and results in

[OE-core] [PATCH 1/4] ptest-packagelists.inc: correctly assign fast and slow tests

2022-12-02 Thread Alexander Kanavin
The execution times were checked from https://autobuilder.yocto.io/pub/non-release/20221127-2/testresults/qemux86-64-ptest/core-image-ptest-all/log.do_testimage.40537.20221127010849 and ptests were moved both ways according to the same criteria: more than 30 seconds or less. openssl is dropped

Re: [oe-core][PATCH] mesa: update 22.2.3 -> 22.3.0

2022-12-02 Thread Khem Raj
On Thu, Dec 1, 2022 at 9:36 PM Markus Volk wrote: > > Am Do, 1. Dez 2022 um 11:44:16 -0800 schrieb Khem Raj : > > build for qemuriscv32 to find out. > > > mesa 22.3.0 did compile for qemuriscv32 without errors OK. Thanks for checking. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent

Re: [OE-core] [kirkstone][PATCH] golang: CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps

2022-12-02 Thread Hitendra Prajapati
Hi Steve/Team, Yes, this is mistake from my side. I noticed that mistake and I'm sincerely sorry for that issue. I'll look back for the patch to correct those issue . I'll be more careful for any future patches . Regards, Hitendra On Fri, 2 Dec 2022, 8:17 pm Steve Sakoman, wrote: > On Thu,

Re: [OE-core][master][PATCH] rm_work: add note about how to clean all built recipes' workdir

2022-12-02 Thread Chen Qi
Hi Richard, When I was trying to figure out a way to solve the problem, I found that with a single line change, things will just work fine. -bb.build.addtask('do_rm_work', 'do_build', ' '.join(deps), d) +bb.build.addtask('do_rm_work', 'do_build do_rm_work_all', ' '.join(deps),

Re: [OE-core] [kirkstone][PATCH] golang: CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps

2022-12-02 Thread Steve Sakoman
On Thu, Dec 1, 2022 at 6:35 PM Hitendra Prajapati wrote: > > Hi team, > > Why this issue is unattended ?? Any issue in merged ?? > > Please look at this issue, Which fixed for Go package . I sent you a private email when I noticed you were changing the author on CVE patches, but it seems you

[oe-core][kirkstone][PATCH 1/1] xserver-xorg: fix CVE-2022-3550, CVE-2022-3551

2022-12-02 Thread Soumya
A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability

Re: [OE-core] About the judgment result of the CVE check tool

2022-12-02 Thread Mikko Rapeli
Hi, On Fri, Dec 02, 2022 at 09:55:37AM +, Matsunaga-Shinji wrote: > Hi, I'm Shinji. > > I have a question about the judgment result of the CVE check tool. > > If the version of the package "pv" cannot be compared to the version > retrieved from NVD("version_start" or "version_end"), >

Re: [OE-core] About the judgment result of the CVE check tool

2022-12-02 Thread Mikko Rapeli
Hi, On Fri, Dec 02, 2022 at 09:55:37AM +, Matsunaga-Shinji wrote: > Hi, I'm Shinji. > > I have a question about the judgment result of the CVE check tool. > > If the version of the package "pv" cannot be compared to the version > retrieved from NVD("version_start" or "version_end"), >

Re: [OE-Core][master][langdale][kirkstone][PATCH v2] rng-tools: backport patch to adjust jitterentropy library to timeout/fail on long delay

2022-12-02 Thread Xiangyu Chen
On 11/30/22 06:28, Randy MacLeod wrote: On 2022-11-29 10:52, Ross Burton via lists.openembedded.org wrote: On 28 Nov 2022, at 09:25, Alexander Kanavin via lists.openembedded.org wrote: On Sun, 27 Nov 2022 at 14:39, Xiangyu Chen wrote:   * add libgcc in RDEPENDS flag to solve testing

[OE-core] About the judgment result of the CVE check tool

2022-12-02 Thread Matsunaga-Shinji
Hi, I'm Shinji. I have a question about the judgment result of the CVE check tool. If the version of the package "pv" cannot be compared to the version retrieved from NVD("version_start" or "version_end"), there is a vulnerability for which the judgment result is "Patched".(e.g.

[OE-core] [kirkstone][PATCH v2] libarchive: CVE-2022-36227 NULL pointer dereference in archive_write.c

2022-12-02 Thread Hitendra Prajapati
Upstream-Status: Backport from https://github.com/libarchive/libarchive/commit/bff38efe8c110469c5080d387bec62a6ca15b1a5 Signed-off-by: Hitendra Prajapati --- .../libarchive/CVE-2022-36227.patch | 42 +++ .../libarchive/libarchive_3.6.1.bb| 4 +- 2 files

Re: [OE-core] Y2038 proposal

2022-12-02 Thread Matt Johnston
On Wed, 2022-11-30 at 09:07 +0100, Alexander Kanavin wrote: > > > > On Tue, 29 Nov 2022 at 16:45, Stephen Jolley > > > > wrote: > > > > > > > > We’d welcome a proposal/series on how to move forward with > > > > > > > > the Y2038 work for 32 bit platforms. > > > > > > > > I have the following

Re: [OE-core] [kirkstone][PATCH] libarchive: CVE-2022-36227 NULL pointer dereference in archive_write.c

2022-12-02 Thread Hitendra Prajapati
Hi Martin/Team, Yes, I missed that part. It is my mistake. I'm extremely sorry for that. I'll correct the patch and resubmit. Regards, Hitendra Prajapati On Fri, 2 Dec 2022, 1:19 pm Martin Jansa, wrote: > >> +From afa85b75607649f3a89cb4d17cf3f003738d3576 Mon Sep 17 00:00:00 2001 >> +From:

Re: [OE-core] [kirkstone][PATCH] curl: Fix multiple CVEs

2022-12-02 Thread Hitendra Prajapati
Hi Martin/Team, Yes, I missed that part. It is my mistake. I'm extremely sorry for that. I'll take care of it in next patches. Regards, Hitendra Prajapati On Fri, 2 Dec 2022, 1:11 pm Martin Jansa, wrote: > I see the same fixes with correct Author in .patch files (please don't > change the