On Fri, Oct 6, 2023 at 9:25 AM Michael Halstead <
[email protected]> wrote:

> This is complete. For anyone with push access, hostkeys have changed so
> run this to remove the old key.
> ssh-keygen -f "~/.ssh/known_hosts" -R "push.openembedded.org"
>
> Push to fetch the new key. Or you can add the new key to ~/.ssh/known_hosts
>
> push.openembedded.org ssh-ed25519
> AAAAC3NzaC1lZDI1NTE5AAAAINKXtmbMxEHuzlLBhqXVCeXUd/UVApuGB9j+S0vqlwyt
>
> Please report any issues that remain and we will address them as soon as
> possible.
>

Hello Michael,

noticed few issues today:

1) JerryM reported on #oe that meta-openembedded revisions went backwards
and I can confirm that:

>From git://git.openembedded.org/meta-openembedded
 + 9c5541f7e1...a88cb922f9 kirkstone       -> origin/kirkstone  (forced
update)
 + 9c5541f7e1...43a4259f68 kirkstone-next  -> origin/kirkstone-next
 (forced update)
 + 7bac39135d...ff4a8f80e0 master-next     -> origin/master-next  (forced
update)
 + 922f41b39f...32c529d435 mickledore      -> origin/mickledore  (forced
update)
 + 922f41b39f...32c529d435 mickledore-next -> origin/mickledore-next
 (forced update)

on and this one seems to be consistent with
https://github.com/openembedded/meta-openembedded

e.g. kirkstone went 3 weeks back:
martin@jama /OE/layers/meta-openembedded $ git show -1 9c5541f7e1
--pretty=fuller | head
commit 9c5541f7e18a1fac3b8dea71e1ebb8398d58e6ff
Author:     Narpat Mali <[email protected]>
AuthorDate: Wed Sep 27 07:42:11 2023 +0000
Commit:     Armin Kuster <[email protected]>
CommitDate: Wed Sep 27 10:23:28 2023 -0400

    python3-django: upgrade 4.2.3 -> 4.2.5

    The delta between 4.2.3 and 4.2.5 contains the CVE-2023-41164 fix
    and other bugfixes. git log --oneline 4.2.3..4.2.5 shows:
martin@jama /OE/layers/meta-openembedded $ git show -1 a88cb922f9
--pretty=fuller | head
commit a88cb922f91fda95e8a584cee3092083d5ad3e98
Author:     Soumya Sambu <[email protected]>
AuthorDate: Wed Sep 6 09:23:01 2023 +0000
Commit:     Armin Kuster <[email protected]>
CommitDate: Wed Sep 6 09:13:26 2023 -0400

    hwloc: fix CVE-2022-47022

    An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to
cause
    a denial of service or other unspecified impacts via glibc-cpuset in
topology-linux.c.

2) the synchronization between git.openembedded.org and
github.com/openembedded doesn't seem to work anymore, e.g.
openembedded-core/master is 11 commits behind git.openembedded.org
I don't know how this was implemented, IIRC there was a git hook on
git.openembedded.org pushing to github.com/openembedded but that was long
time ago and maybe it's something else now (and that something might need
to refresh ssh keys

openembedded-core $ git log --oneline github.oe/master..origin/master
fa53f898ea (origin/nanbield, origin/master, origin/HEAD) busybox: Set PATH
in syslog initscript
7c42b976d7 qemu: fix CVE-2023-42467
53d9d8789e linux-firmware: create separate package for cirrus and cnm
firmwares
ff2fc789e0 gstreamer: upgrade 1.22.5 -> 1.22.6
ae9c64cd22 libtirpc: conditionally enable gssapi
90edba29f9 meson: upgrade 1.2.1 -> 1.2.2
457f0dad87 recipetool/create_buildsys_python: use importlib instead of imp
de62d538db packages.bbclass: Correct the check for conflicts with renamed
packages
0830f53900 scripts/oe-setup-layers: Update how to determine if directory is
git repo
4925591919 autotools.bbclass: Add *.m4 to CONFIGURE_FILES
09873b3fb2 externalsrc.bbclass: Support specifying patterns in
CONFIGURE_FILES

the top commit was pushed more than hour ago:
martin@jama /OE/layers/openembedded-core $ git show -1 origin/master
--pretty=fuller | head
commit fa53f898eaba15dff030f9eadf86e5bca7d954fa
Author:     Martijn de Gouw <[email protected]>
AuthorDate: Thu Oct 5 21:37:49 2023 +0200
Commit:     Richard Purdie <[email protected]>
CommitDate: Fri Oct 6 11:50:54 2023 +0100

    busybox: Set PATH in syslog initscript

    This script is not always called with /sbin and /usr/sbin in the PATH
    already, for example when called via ssh. Explicitly set PATH to make

3) this is minor issue compared to above, when updating today I've noticed
that in one checkout I was using:
contrib git+ssh://git.openembedded.org/meta-openembedded-contrib (fetch)
contrib git+ssh://[email protected]/meta-openembedded-contrib (push)
and was surprised that I got different ssh key for git.openembedded.org as
well (as the e-mail mentioned just push.openembedded.org), but I don't need
ssh for pull, so in this checkout I've just switched to git:// for fetch:
contrib git://git.openembedded.org/meta-openembedded-contrib (fetch)
contrib git+ssh://[email protected]/meta-openembedded-contrib (push)

and it works (refreshing the known_hosts for git.openembedded.org worked as
well).

Thanks
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#1788): 
https://lists.openembedded.org/g/openembedded-architecture/message/1788
Mute This Topic: https://lists.openembedded.org/mt/100667820/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-architecture/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to