Please review this next set of patches for dunfell and have comments back by end of day Friday.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1440 The following changes since commit b39bda4cc62db12c0edfbe489d5a7f5988ede6a9: build-appliance-image: Update to dunfell head revision (2020-09-23 12:48:03 +0100) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Andrey Zhizhikin (1): insane: check for missing update-alternatives inherit Bruce Ashfield (5): kernel-yocto: add KBUILD_DEFCONFIG search location to failure message linux-yocto/config: netfilter: Enable nat for ipv4 and ipv6 linux-yocto/5.4: update to v5.4.64 linux-yocto/5.4: update to v5.4.65 lttng-modules: backport writeback.h changes from 2.12.x to fix kernel 5.4.62+ Chee Yang Lee (4): qemu : fix CVE-2020-16092 bash : inlcude patch 17 & 18 xserver-xorg: fix CVE-2020-14346/14361/14362 libx11: fix CVE-2020-14363 Chris Laplante (3): cve-update-db-native: be less magical about checking whether the cve-check class is enabled cve-update-db-native: move -journal checking into do_fetch cve-update-db-native: remove unused variable Christian Eggers (1): packagegroup: rrecommend perf also for musl on ARM De Huo (1): bash: fix CVE-2019-18276 Jacob Kroon (1): insane: Check for feature check variables not being used Joshua Watt (4): wic: Add --offset argument for partitions wic: Fix --extra-space argument handling wic: Fix error message when reporting invalid offset wic: Add 512 Byte alignment to --offset Khem Raj (2): site: Make sys_siglist default to no packagegroups: remove strace and lttng-tools for rv32/musl Konrad Weihmann (1): testexport: rename create_tarball method Michael Gloff (1): sysvinit rc: Use PSPLASH_FIFO_DIR for progress fifo Norman Stetter (1): sstate.bbclass: Check file ownership before doing 'touch -a' Otavio Salvador (1): openssh: Allow enable/disable of rng-tools recommendation on sshd Randy MacLeod (1): curl: Change SRC_URI from http to https Richard Purdie (10): python3-markupsafe: Import from meta-oe/meta-python python3-jinja2: Import from meta-oe/meta-python buildtools-tarball: Add python3-jinja2 dropbear/openssh: Lower priority of key generation buildtools: Handle generic environment setup injection buildtools-tarball: Fix conflicts with oe-selftest and other tooling oeqa/qemurunner: Increase serial timeout oeqa/selftest/incompatible_lib: Fix append usage oeqa/selftest/containerimage: Update to match assumptions in configuration ssh-pregen-hostkeys: Add a recipe with pregenerated ssh host keys Ross Burton (3): alsa-plugins: improve .la removal sato-screenshot: improve .la removal meta: add/fix invalid Upstream-Status tags Steve Sakoman (1): xinput-calibrator: change SRC_URI to branch with libinput support meta/classes/insane.bbclass | 21 +- meta/classes/kernel-yocto.bbclass | 2 +- meta/classes/sstate.bbclass | 2 +- meta/classes/testexport.bbclass | 8 +- meta/conf/distro/include/maintainers.inc | 3 + .../lib/oeqa/selftest/cases/containerimage.py | 3 + .../oeqa/selftest/cases/incompatible_lic.py | 2 +- meta/lib/oeqa/selftest/cases/wic.py | 157 +++++-- meta/lib/oeqa/utils/qemurunner.py | 2 +- .../openssh/openssh/sshdgenkeys.service | 1 + .../openssh/openssh_8.2p1.bb | 10 +- .../ssh-pregen-hostkeys/dropbear_rsa_host_key | Bin 0 -> 805 bytes .../openssh/ssh_host_ecdsa_key | 9 + .../openssh/ssh_host_ecdsa_key.pub | 1 + .../openssh/ssh_host_ed25519_key | 7 + .../openssh/ssh_host_ed25519_key.pub | 1 + .../openssh/ssh_host_rsa_key | 38 ++ .../openssh/ssh_host_rsa_key.pub | 1 + .../ssh-pregen-hostkeys_1.0.bb | 19 + .../dropbear/dropbear/dropbearkey.service | 1 + meta/recipes-core/meta/buildtools-tarball.bb | 23 +- .../recipes-core/meta/cve-update-db-native.bb | 18 +- .../packagegroup-core-tools-debug.bb | 5 +- .../packagegroup-core-tools-profile.bb | 2 + meta/recipes-core/sysvinit/sysvinit/rc | 9 +- .../python/python3-jinja2/run-ptest | 3 + .../python/python3-jinja2_2.11.2.bb | 45 ++ .../python/python3-markupsafe/run-ptest | 3 + .../python/python3-markupsafe_1.1.1.bb | 28 ++ ...ssing-libraries-to-Extension-for-mul.patch | 2 +- meta/recipes-devtools/qemu/qemu.inc | 1 + ...mu-Do-not-include-file-if-not-exists.patch | 2 +- .../qemu/qemu/CVE-2020-16092.patch | 45 ++ .../bash/bash/bash-CVE-2019-18276.patch | 386 ++++++++++++++++++ meta/recipes-extended/bash/bash_5.0.bb | 8 + .../0004-guard-mallocopt-with-__GLIBC__.patch | 2 +- .../xinput-calibrator_git.bb | 4 +- .../xorg-lib/libx11/CVE-2020-14363.patch | 36 ++ .../recipes-graphics/xorg-lib/libx11_1.6.9.bb | 1 + .../xserver-xorg/CVE-2020-14346.patch | 36 ++ .../xserver-xorg/CVE-2020-14361.patch | 36 ++ .../xserver-xorg/CVE-2020-14362.patch | 70 ++++ .../xorg-xserver/xserver-xorg_1.20.8.bb | 3 + .../linux/linux-yocto-rt_5.4.bb | 6 +- .../linux/linux-yocto-tiny_5.4.bb | 8 +- meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +- ...ckport-writeback.h-changes-from-2.12.patch | 128 ++++++ .../lttng/lttng-modules_2.11.2.bb | 7 +- .../alsa/alsa-plugins_1.2.1.bb | 2 +- .../sato-screenshot/sato-screenshot_0.3.bb | 2 +- meta/recipes-support/curl/curl_7.69.1.bb | 2 +- meta/site/common | 7 + meta/site/common-glibc | 3 - meta/site/common-musl | 5 - scripts/lib/wic/ksparser.py | 56 ++- scripts/lib/wic/partition.py | 1 + scripts/lib/wic/plugins/imager/direct.py | 15 + 57 files changed, 1202 insertions(+), 118 deletions(-) create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/dropbear_rsa_host_key create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_ecdsa_key create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_ecdsa_key.pub create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_ed25519_key create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_ed25519_key.pub create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_rsa_key create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_rsa_key.pub create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb create mode 100644 meta/recipes-devtools/python/python3-jinja2/run-ptest create mode 100644 meta/recipes-devtools/python/python3-jinja2_2.11.2.bb create mode 100644 meta/recipes-devtools/python/python3-markupsafe/run-ptest create mode 100644 meta/recipes-devtools/python/python3-markupsafe_1.1.1.bb create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-16092.patch create mode 100644 meta/recipes-extended/bash/bash/bash-CVE-2019-18276.patch create mode 100644 meta/recipes-graphics/xorg-lib/libx11/CVE-2020-14363.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2020-14346.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2020-14361.patch create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/CVE-2020-14362.patch create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-lttng-modules-backport-writeback.h-changes-from-2.12.patch -- 2.17.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#142946): https://lists.openembedded.org/g/openembedded-core/message/142946 Mute This Topic: https://lists.openembedded.org/mt/77228395/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
