On Fri, Oct 6, 2023 at 9:25 AM Michael Halstead < [email protected]> wrote:
> This is complete. For anyone with push access, hostkeys have changed so > run this to remove the old key. > ssh-keygen -f "~/.ssh/known_hosts" -R "push.openembedded.org" > > Push to fetch the new key. Or you can add the new key to ~/.ssh/known_hosts > > push.openembedded.org ssh-ed25519 > AAAAC3NzaC1lZDI1NTE5AAAAINKXtmbMxEHuzlLBhqXVCeXUd/UVApuGB9j+S0vqlwyt > > Please report any issues that remain and we will address them as soon as > possible. > Hello Michael, noticed few issues today: 1) JerryM reported on #oe that meta-openembedded revisions went backwards and I can confirm that: >From git://git.openembedded.org/meta-openembedded + 9c5541f7e1...a88cb922f9 kirkstone -> origin/kirkstone (forced update) + 9c5541f7e1...43a4259f68 kirkstone-next -> origin/kirkstone-next (forced update) + 7bac39135d...ff4a8f80e0 master-next -> origin/master-next (forced update) + 922f41b39f...32c529d435 mickledore -> origin/mickledore (forced update) + 922f41b39f...32c529d435 mickledore-next -> origin/mickledore-next (forced update) on and this one seems to be consistent with https://github.com/openembedded/meta-openembedded e.g. kirkstone went 3 weeks back: martin@jama /OE/layers/meta-openembedded $ git show -1 9c5541f7e1 --pretty=fuller | head commit 9c5541f7e18a1fac3b8dea71e1ebb8398d58e6ff Author: Narpat Mali <[email protected]> AuthorDate: Wed Sep 27 07:42:11 2023 +0000 Commit: Armin Kuster <[email protected]> CommitDate: Wed Sep 27 10:23:28 2023 -0400 python3-django: upgrade 4.2.3 -> 4.2.5 The delta between 4.2.3 and 4.2.5 contains the CVE-2023-41164 fix and other bugfixes. git log --oneline 4.2.3..4.2.5 shows: martin@jama /OE/layers/meta-openembedded $ git show -1 a88cb922f9 --pretty=fuller | head commit a88cb922f91fda95e8a584cee3092083d5ad3e98 Author: Soumya Sambu <[email protected]> AuthorDate: Wed Sep 6 09:23:01 2023 +0000 Commit: Armin Kuster <[email protected]> CommitDate: Wed Sep 6 09:13:26 2023 -0400 hwloc: fix CVE-2022-47022 An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. 2) the synchronization between git.openembedded.org and github.com/openembedded doesn't seem to work anymore, e.g. openembedded-core/master is 11 commits behind git.openembedded.org I don't know how this was implemented, IIRC there was a git hook on git.openembedded.org pushing to github.com/openembedded but that was long time ago and maybe it's something else now (and that something might need to refresh ssh keys openembedded-core $ git log --oneline github.oe/master..origin/master fa53f898ea (origin/nanbield, origin/master, origin/HEAD) busybox: Set PATH in syslog initscript 7c42b976d7 qemu: fix CVE-2023-42467 53d9d8789e linux-firmware: create separate package for cirrus and cnm firmwares ff2fc789e0 gstreamer: upgrade 1.22.5 -> 1.22.6 ae9c64cd22 libtirpc: conditionally enable gssapi 90edba29f9 meson: upgrade 1.2.1 -> 1.2.2 457f0dad87 recipetool/create_buildsys_python: use importlib instead of imp de62d538db packages.bbclass: Correct the check for conflicts with renamed packages 0830f53900 scripts/oe-setup-layers: Update how to determine if directory is git repo 4925591919 autotools.bbclass: Add *.m4 to CONFIGURE_FILES 09873b3fb2 externalsrc.bbclass: Support specifying patterns in CONFIGURE_FILES the top commit was pushed more than hour ago: martin@jama /OE/layers/openembedded-core $ git show -1 origin/master --pretty=fuller | head commit fa53f898eaba15dff030f9eadf86e5bca7d954fa Author: Martijn de Gouw <[email protected]> AuthorDate: Thu Oct 5 21:37:49 2023 +0200 Commit: Richard Purdie <[email protected]> CommitDate: Fri Oct 6 11:50:54 2023 +0100 busybox: Set PATH in syslog initscript This script is not always called with /sbin and /usr/sbin in the PATH already, for example when called via ssh. Explicitly set PATH to make 3) this is minor issue compared to above, when updating today I've noticed that in one checkout I was using: contrib git+ssh://git.openembedded.org/meta-openembedded-contrib (fetch) contrib git+ssh://[email protected]/meta-openembedded-contrib (push) and was surprised that I got different ssh key for git.openembedded.org as well (as the e-mail mentioned just push.openembedded.org), but I don't need ssh for pull, so in this checkout I've just switched to git:// for fetch: contrib git://git.openembedded.org/meta-openembedded-contrib (fetch) contrib git+ssh://[email protected]/meta-openembedded-contrib (push) and it works (refreshing the known_hosts for git.openembedded.org worked as well). Thanks
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#1788): https://lists.openembedded.org/g/openembedded-architecture/message/1788 Mute This Topic: https://lists.openembedded.org/mt/100667820/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-architecture/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
