[OE-core] [kirkstone][PATCH] curl: Fix multiple CVEs

2022-11-03 Thread Hitendra Prajapati
Backport fixes for: * CVE-2022-32221 - Upstream-Status: Backport from https://github.com/curl/curl/commit/a64e3e59938abd7d6 * CVE-2022-42915 - Upstream-Status: Backport from https://github.com/curl/curl/commit/55e1875729f9d9fc7315ce * CVE-2022-42916 - Upstream-Status: Backport from

[OE-core][kirkstone 31/31] perf: Depend on native setuptools3

2022-11-03 Thread Steve Sakoman
From: Khem Raj perf has need for python setuptools when scripting is enabled from 6.0.0 onwards it seems to throw an explicit error Signed-off-by: Khem Raj Cc: Bruce Ashfield Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][kirkstone 28/31] overlayfs: Allow not used mount points

2022-11-03 Thread Steve Sakoman
From: Vyacheslav Yurkov When machine configuration defines a mount point, which is not used in any recipe, allow to fall through and only report a note in the logs. This can be expected behavior, when a mount point is defined for several machines, but not used in all of them Signed-off-by:

[OE-core][kirkstone 30/31] ltp: backport clock_gettime04 fix from upstream

2022-11-03 Thread Steve Sakoman
From: Xiangyu Chen This is to get rid of the intermittent failures in clock_gettime04, which are likely caused by different clock tick rates on platforms. Here give two thresholds (in milliseconds) for comparison, one for COARSE clock and one for the rest. Signed-off-by: Xiangyu Chen

[OE-core][kirkstone 29/31] cmake-native: Fix host tool contamination (Bug: 14951)

2022-11-03 Thread Steve Sakoman
From: Bernhard Rosenkränzer Trying to build cmake-native on a host system where curl was built with cmake (resulting in CURLConfig.cmake and friends, which do not use the same naming schemes expected by cmake-native's build process, being installed to a system wide cmake directory like

[OE-core][kirkstone 27/31] runqemu: Fix gl-es argument from causing other arguments to be ignored

2022-11-03 Thread Steve Sakoman
From: Joshua Watt The code to parse arguments was inadvertently skipping all arguments in the elif block after gl-es if it was specified on the command line. Signed-off-by: Joshua Watt Signed-off-by: Alexandre Belloni (cherry picked from commit 718bb8d56f6a24c86e67830a7d13af54df2ebb4e)

[OE-core][kirkstone 26/31] runqemu: Do not perturb script environment

2022-11-03 Thread Steve Sakoman
From: Joshua Watt Instead of changing the script environment to affect the child processes, make a copy of the environment with modifications and pass that to subprocess. Specifically, when dri rendering is enabled, LD_PRELOAD was being passed to all processes created by the script which

[OE-core][kirkstone 25/31] qemu-native: Add PACKAGECONFIG option for jack

2022-11-03 Thread Steve Sakoman
From: Jeremy Puhlman With libjack-devel or jack-audio-connection-kit-devel, qemu-native detects the library/header and tries to build with it. Since its missing from the sysroot, it fails to build. -O2 -fPIE -D_REENTRANT -Wno-undef -MD -MQ libcommon.fa.p/audio_jackaudio.c.o -MF

[OE-core][kirkstone 24/31] buildtools-tarball: export certificates to python and curl

2022-11-03 Thread Steve Sakoman
From: Jan-Simon Moeller The custom path of the ca-certificates.crt within the buildtools-tarball requires more environment variables to be exported. Namely REQUESTS_CA_BUNDLE for the python requests library and CURL_CA_BUNDLE for curl. Signed-off-by: Jan-Simon Moeller Signed-off-by: Luca

[OE-core][kirkstone 18/31] oe/packagemanager/rpm: don't leak file objects

2022-11-03 Thread Steve Sakoman
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 28706c27680745c9f8df27713ce63ef5d611138c) Signed-off-by: Steve Sakoman --- meta/lib/oe/package_manager/rpm/__init__.py | 33 + 1 file changed, 21 insertions(+), 12

[OE-core][kirkstone 23/31] meson: make wrapper options sub-command specific

2022-11-03 Thread Steve Sakoman
From: Liam Beguin The meson-wrapper adds setup options to facilitate cross-compilation. The current options are exclusive to the setup sub-command and might cause issues with other sub-commands. Update the wrapper to make options sub-command specific. Signed-off-by: Liam Beguin Signed-off-by:

[OE-core][kirkstone 22/31] gnutls: Unified package names to lower-case

2022-11-03 Thread Steve Sakoman
From: Keiya Nobuta create-spdx can't detect the license properly if the case doesn't match, so fix it. Signed-off-by: Keiya Nobuta Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 9c87828493784d996910d742006268a626ef0130) Signed-off-by: Steve Sakoman ---

[OE-core][kirkstone 20/31] bluez5: add dbus to RDEPENDS

2022-11-03 Thread Steve Sakoman
From: Bartosz Golaszewski Unless we're using systemd, dbus is not pulled into the system automatically. Bluez5 will not work without dbus so add it to RDEPENDS explicitly. Signed-off-by: Bartosz Golaszewski Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][kirkstone 21/31] glib-2.0: fix rare GFileInfo test case failure

2022-11-03 Thread Steve Sakoman
From: Ross Burton If a access or creation timestamp has 0 microseconds, then the test fails as it doesn't expect this to be a valid value. Expand a previous fix for modification times to cover these timestamps too. [ YOCTO #14373 ] Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

[OE-core][kirkstone 19/31] u-boot: Remove duplicate inherit of cml1

2022-11-03 Thread Steve Sakoman
From: Alex Kiernan Splitting u-boot-configure.inc out of the base left duplicate cml1.bbclass in the base include. Fixes: fc9a17ad386c ("u-boot: Split do_configure logic into separate file") Signed-off-by: Alex Kiernan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked

[OE-core][kirkstone 17/31] insane.bbclass: Allow hashlib version that only accepts on parameter

2022-11-03 Thread Steve Sakoman
From: Mark Hatle Some versions of hashlib don't appear to implement the second FIPS related argument. Detect this and support both versions. Signed-off-by: Mark Hatle Signed-off-by: Mark Hatle Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][kirkstone 14/31] scripts/oe-check-sstate: force build to run for all targets, specifically populate_sysroot

2022-11-03 Thread Steve Sakoman
From: Ross Burton Since the commit "populate_sdk_base/images: Drop use of 'meta' class and hence do_build dependencies"[1], builds of images or SDKs don't recursively depend on the top-level do_build target. This is typically a good thing: images just depend on the packages themselves and those

[OE-core][kirkstone 15/31] psplash: add psplash-default in rdepends

2022-11-03 Thread Steve Sakoman
From: Thomas Perrot Otherwise when the installation of recommended packages is prevented (NO_RECOMMENDATIONS = "1"), then splash screen will not be cast. Signed-off-by: Thomas Perrot Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][kirkstone 16/31] opkg-utils: use a git clone, not a dynamic snapshot

2022-11-03 Thread Steve Sakoman
From: Ross Burton opkg-utils fetches using a cgit snapshot of a tag, which is not reproducible as the tag could move, not reliable as a future dynamic snapshot could have a different checksum, and a waste of CPU load as these tarballs are built on demand. Switch opkg-utils to use a proper git

[OE-core][kirkstone 13/31] scripts/oe-check-sstate: cleanup

2022-11-03 Thread Steve Sakoman
From: Ross Burton The scriptutils import isn't used, there's no need to run bitbake in a shell environment, and invoke bitbake as a list instead of a string. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 663aa284adf312eb5c8a471e5dbff2634e87897d)

[OE-core][kirkstone 12/31] ifupdown: upgrade 0.8.37 -> 0.8.39

2022-11-03 Thread Steve Sakoman
From: wangmy Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit f0462e3336c7134aeeb2684692732c187971b330) Signed-off-by: Steve Sakoman --- .../ifupdown/{ifupdown_0.8.37.bb => ifupdown_0.8.39.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[OE-core][kirkstone 11/31] vim: upgrade 9.0.0614 -> 9.0.0820

2022-11-03 Thread Steve Sakoman
From: Tim Orling Includes fixes for CVE-2022-3705 https://nvd.nist.gov/vuln/detail/CVE-2022-3705 For a short list of important changes, see: https://www.arp242.net/vimlog/ Signed-off-by: Tim Orling Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][kirkstone 10/31] vim: Upgrade 9.0.0598 -> 9.0.0614

2022-11-03 Thread Steve Sakoman
From: Teoh Jay Shen Include fixes for CVE-2022-3352. Signed-off-by: Teoh Jay Shen Signed-off-by: Luca Ceresoli (cherry picked from commit 8aa707f80ae1cfe89d5e20ec1f1632a65149aed4) Signed-off-by: Steve Sakoman --- meta/recipes-support/vim/vim.inc | 4 ++-- 1 file changed, 2 insertions(+), 2

[OE-core][kirkstone 09/31] cve-update-db-native: add timeout to urlopen() calls

2022-11-03 Thread Steve Sakoman
From: Frank de Brabander The urlopen() call can block indefinitely under some circumstances. This can result in the bitbake process to run endlessly because of the 'do_fetch' task of cve-update-bb-native to remain active. This adds a default timeout of 60 seconds to avoid this hang, while being

[OE-core][kirkstone 08/31] wayland: fix CVE-2021-3782

2022-11-03 Thread Steve Sakoman
From: Narpat Mali An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause thereference count to overflow if the client creates a large number of wl_shm buffer

[OE-core][kirkstone 07/31] expat: backport the fix for CVE-2022-43680

2022-11-03 Thread Steve Sakoman
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Steve Sakoman --- .../expat/expat/CVE-2022-43680.patch | 33 +++ meta/recipes-core/expat/expat_2.4.9.bb| 1 + 2 files changed, 34 insertions(+) create mode 100644

[OE-core][kirkstone 06/31] tiff: fix CVE-2022-2953

2022-11-03 Thread Steve Sakoman
From: Zheng Qiu While this does not happen with the tiff 4.3.0 release, it does happen with the series of patches we have, so backport the two simple changes that restrict the tiffcrop options to avoid the vulnerability. CVE-2022-2953.patch was taken from upstream, and a small typo was fixed

[OE-core][kirkstone 05/31] lighttpd: fix CVE-2022-41556

2022-11-03 Thread Steve Sakoman
From: Ross Burton Backport the fix from upstream to fix this CVE. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 59f69125fb00dc8fd335f32fe6898e7a480141e4) Signed-off-by: Steve Sakoman --- .../lighttpd/lighttpd/CVE-2022-41556.patch| 31

[OE-core][kirkstone 04/31] openssl: Upgrade 3.0.5 -> 3.0.7

2022-11-03 Thread Steve Sakoman
From: Ed Tanous OpenSSL 3.0.5 includes a HIGH level security vulnerability [1]. Upgrade the recipe to point to 3.0.7. CVE-2022-3358 is reported fixed in 3.0.6, so drop the patch for that as well. [1] https://www.openssl.org/news/vulnerabilities.html Fixes CVE-2022-3786 and CVE-2022-3602:

[OE-core][kirkstone 03/31] openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption

2022-11-03 Thread Steve Sakoman
From: Hitendra Prajapati Upstream-Status: Backport from https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b] Description: CVE-2022-3358 openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption. Affects "openssl < 3.0.6"

[OE-core][kirkstone 02/31] openssl: Fix SSL_CERT_FILE to match ca-certs location

2022-11-03 Thread Steve Sakoman
From: Richard Purdie In OE-Core d6b15d1e70b99185cf245d829ada5b6fb99ec1af, "openssl: export necessary env vars in SDK", the value added for SSL_CERT_FILE was in conflict with the value used elsewhere, such as in buildtools. This makes them match and fixes buildtools testsdk failures.

[OE-core][kirkstone 01/31] openssl: export necessary env vars in SDK

2022-11-03 Thread Steve Sakoman
From: Chen Qi In current SDK, when running the following command in python shell, we get an error. $ python3 >>> from cryptography.hazmat.backends import openssl The error message is as below: cryptography.exceptions.InternalError: Unknown OpenSSL error. We could set OPENSSL_MODULES

[OE-core][kirkstone 00/31] Patch review

2022-11-03 Thread Steve Sakoman
Please review this set of patches for kirkstone and have comments back by end of day Monday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4416 The following changes since commit fbdf93f43ff4b876487e1f26752598ec8abcb46e:

[OE-core][langdale 00/21] Pull request (cover letter only)

2022-11-03 Thread Steve Sakoman
The following changes since commit d40f7ddcfbdd5cb1d9f96271fefddf67e9044bb9: openssl: Fix SSL_CERT_FILE to match ca-certs location (2022-10-26 23:01:13 +0100) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/langdale-next

Re: [OE-core] [PATCH 0/1] add python3-brotli_1.0.9 in meta/recipes-devtools/python

2022-11-03 Thread cp0613
The synchronous submission is located in https://github.com/openembedded/openembedded-core/pull/82 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#172659): https://lists.openembedded.org/g/openembedded-core/message/172659 Mute This Topic:

[OE-core] [PATCH 0/1] add python3-brotli_1.0.9 in meta/recipes-devtools/python

2022-11-03 Thread cp0613
The following changes since commit 6050d1f74c02495490d982ead2993b6b3c9cc04a: are available in the Git repository at: https://github.com/cp0613/openembedded-core brotli https://github.com/cp0613/openembedded-core/tree/brotli cp0613 (1): add python3-brotli_1.0.9 in

Re: [OE-core] [kirkstone][master][PATCH V2] apt: fix do_package_qa failure

2022-11-03 Thread Changqing Li
ping On 8/1/22 11:34, Changqing Li wrote: From: Changqing Li bitbake nativesdk-apt failed with error: ERROR: nativesdk-apt-2.4.5-r0 do_package_qa: QA Issue: nativesdk-apt installs files in /usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/var/volatile, but it is expected

[OE-core] How to use linux-firmware to install single firmware package? #kirkstone

2022-11-03 Thread Livius
Hi, I would like to install linux-firmware-ath10k and linux-firmware-imx-sdma-imx7d firmware package to my image recipe in kirkstone release but when i append them to IMAGE_INSTALL somewhy each pack from linux-firmware recipe installs itself. It is extramly large in size about 500 MB, it is

Re: [OE-core] [PATCH] wic: make ext2/3/4 images reproducible

2022-11-03 Thread Richard Purdie
On Thu, 2022-11-03 at 18:53 +, Sergey Zhmylev wrote: > Hi Richard, > > Thank you for the comment! > Well, the environment described in reproducible guides currently does > not provide binary reproducability due to extfs implementation. Agreed, there is an issue here. I just don't think the

Re: [OE-core] [kirkstone][PATCH] blktrace: ask for python3 specifically

2022-11-03 Thread Alexander Kanavin
This patch should be sent upstream first. Same as in your master submission. Alex On Thu, 3 Nov 2022 at 20:32, Sakib Sajal wrote: > > python2 has been deprecated, use python3 instead > > Signed-off-by: Sakib Sajal > --- > ...plot.py-ask-for-python3-specifically.patch | 35 +++

[OE-core] [PATCH] populate_sdk_base: add zip options

2022-11-03 Thread Christoph Lauer
From: Christoph Lauer Add SDK_ZIP_OPTIONS to remove symbolic link creation in zip archive or add options, e.g. for encryption of the zip archive. Signed-off-by: Christoph Lauer --- meta/classes-recipe/populate_sdk_base.bbclass | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff

[OE-core] [kirkstone][PATCH] blktrace: ask for python3 specifically

2022-11-03 Thread Sakib Sajal
python2 has been deprecated, use python3 instead Signed-off-by: Sakib Sajal --- ...plot.py-ask-for-python3-specifically.patch | 35 +++ meta/recipes-kernel/blktrace/blktrace_git.bb | 5 ++- 2 files changed, 39 insertions(+), 1 deletion(-) create mode 100644

Re: [OE-core] [PATCH] blktrace: ask for python3 specifically

2022-11-03 Thread Alexander Kanavin
On Thu, 3 Nov 2022 at 19:34, Sakib Sajal wrote: > > python2 has been deprecated, use python3 instead > > +Upstream-Status: Inappropriate (OE-specific) This is not inappropriate, or oe-specific, please send the patch upstream first. Alex -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages

Re: [OE-core] [PATCH] wic: make ext2/3/4 images reproducible

2022-11-03 Thread Sergey Zhmylev
Hi Richard, Thank you for the comment! Well, the environment described in reproducible guides currently does not provide binary reproducability due to extfs implementation. Moreover, building on some FS (for example mounted with noatime or not supporting crtime field at all like UFS) makes the

[OE-core] [PATCH] blktrace: ask for python3 specifically

2022-11-03 Thread Sakib Sajal
python2 has been deprecated, use python3 instead Signed-off-by: Sakib Sajal --- ...plot.py-ask-for-python3-specifically.patch | 35 +++ meta/recipes-kernel/blktrace/blktrace_git.bb | 5 ++- 2 files changed, 39 insertions(+), 1 deletion(-) create mode 100644

Re: [OE-core] [PATCH 2/2] gcc-source: Drop gengtype manipulation

2022-11-03 Thread Khem Raj
On Thu, Nov 3, 2022 at 5:41 AM Richard Purdie wrote: > > Whilst we patch gengtype.cc, we don't patch gengtype-lex.cc which would > be the file which would trigger regeneration of files. > > The real bug that was likely the cause for this fix is probably SDE issues > with gcc shared workdir so

Re: [OE-core] [PATCH 0/1] create-spdx: default share_src for shared sources

2022-11-03 Thread Joshua Watt
On 11/3/22 11:20, Joshua Watt wrote: On 11/3/22 09:49, Konrad WEIHMANN wrote: so what's the conclusion? I would be okay to add a var like SPDX_SHARED_SOURCE (default WORKDIR) or something and reference this as a default - when using a weak default ppl could override that to their needs...

[OE-core] [PATCH] bitbake.conf: Drop export of SOURCE_DATE_EPOCH_FALLBACK

2022-11-03 Thread Richard Purdie
Whilst SDE definitely needs to be exported, the fallback does not as it is only used in our python code via the datastore. It was introduced as an export in 9a1dde74e794362399193dc3f81c9685a83d0776 but even then it doesn't look like it needed to be, likely just a copy and paste mistake. Drop the

[OE-core] [PATCH v2] gcc-shared-source: Fix source date epoch handling

2022-11-03 Thread Richard Purdie
The source date epoch for gcc isn't being transferred from the shared workdir to the current WORKDIR for the specific recipe. This results in the clamping code within sstate.bbclass using a value from 2011 which changes the timestamps of many files. Since this happens part way through the build,

Re: [OE-core][langdale 01/20] openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption

2022-11-03 Thread Patrick Williams
On Thu, Nov 03, 2022 at 06:28:04AM -1000, Steve Sakoman wrote: > On Thu, Nov 3, 2022 at 5:54 AM Patrick Williams wrote: > > Instead of picking up this patch, wouldn't it make a lot more sense to > > go to 3.0.7 like we did with [1]? Since 3.0.7 contains a HIGH severity > > CVE fix as well as the

Re: [OE-core][langdale 01/20] openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption

2022-11-03 Thread Steve Sakoman
On Thu, Nov 3, 2022 at 5:54 AM Patrick Williams wrote: > > On Tue, Nov 01, 2022 at 04:41:51PM -1000, Steve Sakoman wrote: > > From: Hitendra Prajapati > > > > Upstream-Status: Backport from > >

Re: [OE-core] [PATCH 0/1] create-spdx: default share_src for shared sources

2022-11-03 Thread Joshua Watt
On 11/3/22 09:49, Konrad WEIHMANN wrote: so what's the conclusion? I would be okay to add a var like SPDX_SHARED_SOURCE (default WORKDIR) or something and reference this as a default - when using a weak default ppl could override that to their needs... Ya, I think what you have is fine

[OE-core] [master,langdale][PATCH] kernel.bbclass: Include randstruct seed assets in STAGING_KERNEL_BUILDDIR

2022-11-03 Thread Diego Sueiro
When building with CONFIG_MODVERSIONS=y and CONFIG_RANDSTRUCT=y we need to copy the build assets generated for the randstrutc seed to STAGING_KERNEL_BUILDDIR, otherwise the out-of-tree modules build will generate those assets which will result in a different RANDSTRUCT_HASHED_SEED. Signed-off-by:

Re: [OE-core] [PATCH] wic: make ext2/3/4 images reproducible

2022-11-03 Thread Richard Purdie
On Thu, 2022-11-03 at 18:26 +0300, Sergey Zhmylev wrote: > From: Sergei Zhmylev > > Ext2/3/4 FS contains not only mtime, but also ctime, atime and crtime. > Currently, all the files are being added into the rootfs image using > mkfs -d functionality which affects all the timestamps excluding

Re: [OE-core][langdale 01/20] openssl: CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption

2022-11-03 Thread Patrick Williams
On Tue, Nov 01, 2022 at 04:41:51PM -1000, Steve Sakoman wrote: > From: Hitendra Prajapati > > Upstream-Status: Backport from > https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b] > Description: > CVE-2022-3358 openssl: Using a Custom

[OE-core] [PATCH] wic: make ext2/3/4 images reproducible

2022-11-03 Thread Sergey Zhmylev
From: Sergei Zhmylev Ext2/3/4 FS contains not only mtime, but also ctime, atime and crtime. Currently, all the files are being added into the rootfs image using mkfs -d functionality which affects all the timestamps excluding mtime. This patch ensures all the timestamps inside the FS image equal

Re: [OE-core] [PATCH 1/2] gcc-shared-source: Fix source date epoch handling

2022-11-03 Thread Peter Kjellerstedt
> -Original Message- > From: openembedded-core@lists.openembedded.org > On Behalf Of Richard Purdie > Sent: den 3 november 2022 13:41 > To: openembedded-core@lists.openembedded.org > Subject: [OE-core] [PATCH 1/2] gcc-shared-source: Fix source date epoch > handling > > The source date

Re: [OE-core] [PATCH 1/1] lame: Remove hardcoded rpaths

2022-11-03 Thread Randy MacLeod
On 2022-07-27 04:32, Paulo Neves wrote: I thought of that myself, but did not yet investigate. We have hardcode_into_libs disabling in 4 "recipes": git grep hardcode_into_libs -- meta recipes-devtools/binutils/binutils/0009-Use-libtool-2.4.patch: hardcode_into_libs=yes

[OE-core] [kirkstone][PATCH] lighttpd: upgrade 1.4.66 -> 1.4.67

2022-11-03 Thread Sakib Sajal
From: wangmy Changelog: = * Update comment about TCP_INFO on OpenBSD * [mod_ajp13] fix crash with bad response headers (fixes #3170) * [core] handle RDHUP when collecting chunked body * [core] tweak streaming request body to backends * [core] handle ENOSPC with pwritev()

[OE-core] [PATCH v2] python3-typing-extensions: upgrade 4.3.0 -> 4.4.0

2022-11-03 Thread Tim Orling
* Add SUMMARY, DESCRIPTION, BUGTRACKER and SECTION * Update HOMEPAGE to agree with PyPi https://github.com/python/typing_extensions/blob/main/CHANGELOG.md#release-440-october-6-2022 Release 4.4.0 (October 6, 2022) * Add typing_extensions.Any a backport of python 3.11's Any class which is

[OE-core] [kirkstone][PATCH 2/2] wic: bootimg-efi: implement --include-path

2022-11-03 Thread Mikko Rapeli
From: Maxim Uvarov --include-path can be used for placing files on ESP, like dtbs. (From OE-Core rev: 46ca73f504b0792766dc4d4bbad38beb04ef4ed0) Signed-off-by: Maxim Uvarov Signed-off-by: Mikko Rapeli Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie ---

[OE-core] [kirkstone][PATCH 1/2] wic: add UEFI kernel as UEFI stub

2022-11-03 Thread Mikko Rapeli
From: Maxim Uvarov Linux kernel can be compiled as UEFI stub and loaded directly with UEFI firmware without grub or other UEFI shell. Tested with wic file: bootloader --ptable gpt --timeout=0 --append="rootwait" part /boot --source bootimg-efi --sourceparams="loader=uefi-kernel" \ --ondisk

Re: [OE-core] [PATCH 0/1] create-spdx: default share_src for shared sources

2022-11-03 Thread Joshua Watt
I see the problem, but I'm not quite sure this is the correct solution. It *does* fix the problem for exact recipe that provides the source code (e.g. the llvm-sources recipe), but I don't think it will correctly pick up the sources for anything that actually uses that shared source code (e.g.

[OE-core] [PATCH 0/1] create-spdx: default share_src for shared sources

2022-11-03 Thread Konrad WEIHMANN via lists.openembedded.org
as it's practically impossible to send an email patch from corporate environment, please find the following patch at the mentioned remote location. It would be nice to have that backported to kirkstone as well, once merged, as this is where I encountered the issue first The following changes

Re: [OE-core] [PATCH] libc-test: add libc testsuite for musl

2022-11-03 Thread Ross Burton
On 3 Nov 2022, at 05:39, Chase Qi via lists.openembedded.org wrote: > +MIRRORS += "git://nsz.repo.hu:49100/repo/libc-test > git://repo.or.cz/libc-test" Why do this recipe need a MIRRORS? > +RDEPENDS:${PN}-ptest = " \ > +bash \ > +grep \ > +musl \ > +

Re: [OE-core] [PATCH] libc-test: add libc testsuite for musl

2022-11-03 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 03/11/2022 05:39:26+, Chase Qi wrote: > libc-test is a collection of unit test to measure the correctness and > robustness of a C/POSIX standard library implementation. It is developed > as part of the musl project. > You also need to add it to the ptest list: WARNING:

[OE-core] [PATCH 1/2] gcc-shared-source: Fix source date epoch handling

2022-11-03 Thread Richard Purdie
The source date epoch for gcc isn't being transferred from the shared workdir to the current WORKDIR for the specific recipe. This results in the clamping code within sstate.bbclass using a value from 2011 which changes the timestamps of many files. Since this happens part way through the build,

[OE-core] [PATCH 2/2] gcc-source: Drop gengtype manipulation

2022-11-03 Thread Richard Purdie
Whilst we patch gengtype.cc, we don't patch gengtype-lex.cc which would be the file which would trigger regeneration of files. The real bug that was likely the cause for this fix is probably SDE issues with gcc shared workdir so this code can now be dropped. Signed-off-by: Richard Purdie ---

Re: [OE-core] [PATCHv2] python3-manifest.json: Fix re in core

2022-11-03 Thread Leon Anavi
Hi Quentin, On 3.11.22 г. 11:39 ч., Quentin Schulz wrote: Hi Leon, On 11/2/22 20:09, Leon Anavi wrote: Following the update from 3.10.6 to 3.11.0, the source code of module re for regular expression operations has been moved to Lib/re/. File python3-manifest.json has been modified according

[OE-core] [PATCHv3] python3-manifest.json: Fix re in core

2022-11-03 Thread Leon Anavi
Following the update from 3.10.6 to 3.11.0, the source code of module re for regular expression operations has been moved to Lib/re/. File python3-manifest.json has been modified according to the new path. According to the instructions the new python3-manifest.json version was created by running

[OE-core] [kirkstone][PATCH] golang: CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps

2022-11-03 Thread Hitendra Prajapati
Upstream-Status: Backport from https://github.com/golang/go/commit/e9017c2416ad0ef642f5e0c2eab2dbf3cba4d997 Signed-off-by: Hitendra Prajapati --- meta/recipes-devtools/go/go-1.17.13.inc | 1 + .../go/go-1.18/CVE-2022-41715.patch | 253 ++ 2 files changed, 254

[OE-core] [PATCH] systemd: bump to v252

2022-11-03 Thread Luca Bocassi
From: Luca Boccassi Signed-off-by: Luca Boccassi --- NOTE: I do not use musl, so I have not touched those patches .../{systemd-boot_251.4.bb => systemd-boot_252.bb} | 0 meta/recipes-core/systemd/systemd.inc| 4 ++--

[OE-core] [PATCH] gcc-source: Fix gengtypes race

2022-11-03 Thread Richard Purdie
gcc renamed .c files to .cc files: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=5c69acb32329d49e58c26fa41ae74229a52b9106 but we didn't fix this reference which meant we re-introduced a race around gengtypes-lex.c. This lead to the race reappearing on the autobuilder. Fix the naming to avoid

[OE-core] [kirkstone][PATCH] kern-tools: fix relative path processing

2022-11-03 Thread Jose Quaresma
From: Bruce Ashfield The previous fix for processing of paths with relative components, broke uses cases that were a mix of patches and configuration fragments. Updating the SRCREV to include a simplied fix for relative paths, and a cleanup patch from Jose: [ Author: Jose Quaresma Date:

Re: [OE-core] [PATCHv2] python3-manifest.json: Fix re in core

2022-11-03 Thread Quentin Schulz via lists.openembedded.org
Hi Leon, On 11/2/22 20:09, Leon Anavi wrote: Following the update from 3.10.6 to 3.11.0, the source code of module re for regular expression operations has been moved to Lib/re/. File python3-manifest.json has been modified according to the new path. I guess the changes are more than just

[OE-core] [PATCH] systemd: Consider PACKAGECONFIG in RRECOMMENDS

2022-11-03 Thread Niko Mauno via lists.openembedded.org
Since RRECOMMENDS declaration implictly induces building the recipes that provide the runtime recommended packages, conditionalize adding such values according to associated PACKAGECONFIG settings in order to avoid redundant building. Signed-off-by: Niko Mauno ---

[OE-core] [PATCH 3/3] package: Fix handling of minidebuginfo with newer binutils

2022-11-03 Thread Nathan Rossi
From: Nathan Rossi Newer versions of binutils (2.38+) have changed how the "--only-keep-debug" of objcopy behaves when stripping non-debug sections from an ELF. https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=68f543154e92ab0f5d6c569e0fa143f5e8bd2d80 This change causes associated

[OE-core] [PATCH 2/3] glibc-locale: Do not INHIBIT_DEFAULT_DEPS

2022-11-03 Thread Nathan Rossi
From: Nathan Rossi The glibc-locale recipe already partially depends on the base depends in order to satisfy the do_package dependency on binutils. However since commit d6ffd683bf6 NM has defaulted to gcc-nm, meaning do_package depends on gcc (for minidebuginfo). Whilst the do_package task

[OE-core] [PATCH 1/3] oeqa/selftest/minidebuginfo: Create selftest for minidebuginfo

2022-11-03 Thread Nathan Rossi
From: Nathan Rossi Add a new selftest to validate minidebuginfo support. This selftest builds a complete target image with PACKAGE_MINIDEBUGINFO enabled. ELFs included in the image are expected to have minidebuginfo included in the resulting executables and shared libraries, the self test

Re: [OE-core] [PATCH 10/11] python3-typing-extensions: upgrade 4.3.0 -> 4.4.0

2022-11-03 Thread Richard Purdie
On Tue, 2022-11-01 at 20:18 -0700, Tim Orling wrote: > diff --git a/meta/recipes-devtools/python/python3-typing-extensions_4.4.0.bb > b/meta/recipes-devtools/python/python3-typing-extensions_4.4.0.bb > new file mode 100644 > index 000..c8cbb215f04 > --- /dev/null > +++

[PATCH] [OE-core] [PATCH] libxcrypt: upgrade 4.4.28 -> 4.4.30

2022-11-03 Thread wangmy
From: Wang Mingyu Changelog: == * configure: Restore ucontext api functionality check. In c3f01c72b303cbbb0cc8983120677edee2f3fa4b the use of the ucontext api in the main program was removed, and with it the configure check for it. However, the ucontext api is still used in the

Re: [OE-core] [PATCH] libxcrypt-compat: upgrade 4.4.28 -> 4.4.30

2022-11-03 Thread Alexander Kanavin
Libxcrypt itself should be updated at the same time. You can squash the two patches. Alex On Thu 3. Nov 2022 at 6.33, wangmy wrote: > From: Wang Mingyu > > Changelog: > == > * configure: Restore ucontext api functionality check. > In c3f01c72b303cbbb0cc8983120677edee2f3fa4b the use

[OE-core] [kirkstone][PATCH] libX11: CVE-2022-3554 & CVE-2022-3555 Fix memory leak

2022-11-03 Thread Hitendra Prajapati
Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/1d11822601fd24a396b354fa616b04ed3df8b4ef && https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/8a368d808fec166b5fb3dfe6312aab22c7ee20af Signed-off-by: Hitendra Prajapati ---