[OE-core] [PATCH] python3-pycairo:upgrade 1.18.1 -> 1.18.2

2019-11-04 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- .../{python3-pycairo_1.18.1.bb => python3-pycairo_1.18.2.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/python/{python3-pycairo_1.18.1.bb => python3-pycairo_1.18.2.bb} (84%) diff --git

[OE-core] [PATCH V2] go: fix CVE-2019-17596

2019-11-04 Thread Hongxu Jia
https://github.com/golang/go/commit/2017d88dbc096381d4f348d2fb08bfb3c2b7ed73 Signed-off-by: Hongxu Jia --- meta/recipes-devtools/go/go-1.12.inc | 1 + .../go/go-1.12/0010-fix-CVE-2019-17596.patch | 42 +++ 2 files changed, 43 insertions(+) create mode 100644

[OE-core] ✗ patchtest: failure for go: fix CVE-2019-17596

2019-11-04 Thread Patchwork
== Series Details == Series: go: fix CVE-2019-17596 Revision: 1 URL : https://patchwork.openembedded.org/series/20914/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the

[OE-core] [PATCH] go: fix CVE-2019-17596

2019-11-04 Thread Hongxu Jia
https://github.com/golang/go/commit/2017d88dbc096381d4f348d2fb08bfb3c2b7ed73 Signed-off-by: Hongxu Jia --- meta/recipes-devtools/go/go-1.12.inc | 1 + .../go/go-1.12/0010-fix-CVE-2019-17596.patch | 42 +++ 2 files changed, 43 insertions(+) create mode 100644

[OE-core] [PATCH] python-setuptools: upgrade 41.4.0 -> 41.6.0

2019-11-04 Thread Zang Ruochen
Signed-off-by: Zang Ruochen --- meta/recipes-devtools/python/python-setuptools.inc| 4 ++-- ...ython-setuptools_41.4.0.bb => python-setuptools_41.6.0.bb} | 0 ...hon3-setuptools_41.4.0.bb => python3-setuptools_41.6.0.bb} | 0 3 files changed, 2 insertions(+), 2 deletions(-) rename

[OE-core] ✗ patchtest: failure for add python3-nose to RDEPENDS

2019-11-04 Thread Patchwork
== Series Details == Series: add python3-nose to RDEPENDS Revision: 1 URL : https://patchwork.openembedded.org/series/20911/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the

[OE-core] Yocto Project Newcomer & Unassigned Bugs - Help Needed

2019-11-04 Thread Stephen K Jolley
All, The triage team is starting to try and collect up and classify bugs which a newcomer to the project would be able to work on in a way which means people can find them. They're being listed on the triage page under the appropriate heading:

[OE-core] [PATCH V2] python3-git: add python3-nose to RDEPENDS

2019-11-04 Thread Hongxu Jia
$>>> import git.test.lib Traceback (most recent call last): File "", line 1, in File "/usr/lib/python3/dist-packages/git/test/lib/__init__.py", line 9, in from .asserts import * File "/usr/lib/python3/dist-packages/git/test/lib/asserts.py", line 10, in from nose.tools import (

[OE-core] [PATCH] add python3-nose to RDEPENDS

2019-11-04 Thread Hongxu Jia
$>>> import git.test.lib Traceback (most recent call last): File "", line 1, in File "/usr/lib/python3/dist-packages/git/test/lib/__init__.py", line 9, in from .asserts import * File "/usr/lib/python3/dist-packages/git/test/lib/asserts.py", line 10, in from nose.tools import (

Re: [OE-core] [PATCH] perf: Add /scripts to sources

2019-11-04 Thread Bruce Ashfield
On Mon, Nov 4, 2019 at 5:56 PM Daniel Díaz wrote: > > Hello! > > On Thu, 24 Oct 2019 at 13:34, Daniel Díaz wrote: > > As of linux-next-20191022, we need bpf_helpers_doc.py in order to > > build libbpf, which lives in /scripts. Otherwise, do_compile fails > > with: > > | /bin/sh: 1: > >

Re: [OE-core] [PATCH] ell: update to 0.26

2019-11-04 Thread Khem Raj
This has API changes that will break iwd On Thu, Oct 31, 2019 at 10:23 AM Oleksandr Kravchuk wrote: > > Changelog: > - Fix issue with memory leak and TLS certificates > - Fix issue with buffer size and TLS PRF handling > - Add support for D-Bus non-root ObjectManager > > Signed-off-by: Oleksandr

Re: [OE-core] [PATCH] perf: Add /scripts to sources

2019-11-04 Thread Daniel Díaz
Hello! On Thu, 24 Oct 2019 at 13:34, Daniel Díaz wrote: > As of linux-next-20191022, we need bpf_helpers_doc.py in order to > build libbpf, which lives in /scripts. Otherwise, do_compile fails > with: > | /bin/sh: 1: >

[OE-core] [PATCH v6] mesa: Upgrade to 19.2.1

2019-11-04 Thread Alistair Francis
From: Alistair Francis Upgrade mesa and mesa-gl to 19.2.1. The license hash change was a trivial new line removal. The glx-tls option was removed as it isn't included in the meson.build file. It has been replaced with 'use-elf-tls' instead. The -Dasm=false was removed as it also is no longer

Re: [OE-core] [PATCH 3/6] oe-selftest: extend virgl gtk test to also check the SDL option

2019-11-04 Thread Alexander Kanavin
On Sat, 2 Nov 2019 at 23:29, Alexander Kanavin wrote: > Same failures on the Debian 10 worker: > >> >>> https://autobuilder.yoctoproject.org/typhoon/#/builders/56/builds/778 >>> >> >> runqemu - ERROR - Failed to run qemu: Xlib: extension "RANDR" missing on >> display ":1". >>

Re: [OE-core] [PATCH v2] insane: file-rdeps: Readability only

2019-11-04 Thread Douglas Royds via Openembedded-core
On 4/11/19 11:29 PM, Richard Purdie wrote: On Mon, 2019-11-04 at 17:52 +1300, Douglas Royds via Openembedded-core wrote: Mostly just longer (and hopefully more meaningful) variable names. "Mostly" - what else is in there? Readability changes only.  * Longer variable names  * Reworded some

[OE-core] [PATCH] lz4: Whitelist CVE-2014-4715

2019-11-04 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- meta/recipes-support/lz4/lz4_1.9.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/lz4/lz4_1.9.2.bb b/meta/recipes-support/lz4/lz4_1.9.2.bb index f0a8416a96..ed4452c82e 100644 --- a/meta/recipes-support/lz4/lz4_1.9.2.bb +++

[OE-core] [PATCH] iputils: Whitelist CVE-2000-1213 CVE-2000-1214

2019-11-04 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- meta/recipes-extended/iputils/iputils_s20190709.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-extended/iputils/iputils_s20190709.bb b/meta/recipes-extended/iputils/iputils_s20190709.bb index d8f2470d0c..3f9e9917f0 100644 ---

[OE-core] [PATCH v2] python3: Upgrade 3.7.4 -> 3.7.5

2019-11-04 Thread Adrian Bunk
Backported patches removed. Signed-off-by: Adrian Bunk --- v2: Rebased to master. --- ...lib-as-location-for-site-packages-an.patch | 2 +- ...nt-parse-domains-containing-GH-13079.patch | 132 -- server-Escape-the-server_title-GH-1.patch | 86

[OE-core] [PATCH] libpam: set CVE_PRODUCT

2019-11-04 Thread Ross Burton
Signed-off-by: Ross Burton --- meta/recipes-extended/pam/libpam_1.3.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/pam/libpam_1.3.1.bb b/meta/recipes-extended/pam/libpam_1.3.1.bb index 6b73f0a2fed..a2aa1ecd16b 100644 ---

[OE-core] [PATCH] git: update to 2.24.0

2019-11-04 Thread Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk --- meta/recipes-devtools/git/git_2.23.0.bb | 11 --- meta/recipes-devtools/git/git_2.24.0.bb | 11 +++ 2 files changed, 11 insertions(+), 11 deletions(-) delete mode 100644 meta/recipes-devtools/git/git_2.23.0.bb create mode 100644

Re: [OE-core] [PATCH] libpng: whitelist CVE-2019-17371

2019-11-04 Thread Adrian Bunk
On Mon, Nov 04, 2019 at 02:24:08PM +, Ross Burton wrote: > On 04/11/2019 14:01, Adrian Bunk wrote: > > On Mon, Nov 04, 2019 at 12:42:51PM +, Ross Burton wrote: > > > This is actually a memory leak in gif2png 2.x, so whitelist it in the > > > libpng > > > recipe. > > > > > >

Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

2019-11-04 Thread Grygorii Tertychnyi (gtertych) via Openembedded-core
Andrei, From: Andrei Gherzan Sent: Friday, November 1, 2019 13:28 To: Grygorii Tertychnyi (gtertych); openembedded-core@lists.openembedded.org Cc: xe-linux-external(mailer list) Subject: Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe >> do_ar_recipe fails on perf recipe on

[OE-core] [PATCH v2 1/3] libpng: whitelist CVE-2019-17371

2019-11-04 Thread Ross Burton
This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng recipe. Signed-off-by: Ross Burton --- meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb

[OE-core] [PATCH v2 3/3] libsndfile1: whitelist CVE-2018-13419

2019-11-04 Thread Ross Burton
This is a memory leak that nobody else can replicate and has been rejected by upstream. Signed-off-by: Ross Burton --- meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb

[OE-core] [PATCH v2 2/3] procps: whitelist CVE-2018-1121

2019-11-04 Thread Ross Burton
This CVE is about race conditions in 'ps' which make it unsuitable for security audits. As these race conditions are unavoidable ps shouldn't be used for security auditing, so this isn't a valid CVE. Signed-off-by: Ross Burton --- meta/recipes-extended/procps/procps_3.3.15.bb | 9 ++--- 1

Re: [OE-core] [PATCH] libpng: whitelist CVE-2019-17371

2019-11-04 Thread Ross Burton
On 04/11/2019 14:01, Adrian Bunk wrote: On Mon, Nov 04, 2019 at 12:42:51PM +, Ross Burton wrote: This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng recipe. Signed-off-by: Ross Burton --- meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 +++ 1 file changed,

[OE-core] ✗ patchtest: failure for gdb: Discard sections whose size is greater than the file size.

2019-11-04 Thread Patchwork
== Series Details == Series: gdb: Discard sections whose size is greater than the file size. Revision: 1 URL : https://patchwork.openembedded.org/series/20897/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response.

Re: [OE-core] [PATCH] libpng: whitelist CVE-2019-17371

2019-11-04 Thread Adrian Bunk
On Mon, Nov 04, 2019 at 12:42:51PM +, Ross Burton wrote: > This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng > recipe. > > Signed-off-by: Ross Burton > --- > meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git

[OE-core] [PATCH 2/2] libsndfile1: whitelist CVE-2018-13419

2019-11-04 Thread Ross Burton
This is a memory leak that nobody else can replicate and has been rejected by upstream. Signed-off-by: Ross Burton --- meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb

[OE-core] [PATCH 1/2] procps: whitelist CVE-2018-1121

2019-11-04 Thread Ross Burton
This CVE is about race conditions in 'ps' which make it unsuitable for security audits. As these race conditions are unavoidable ps shouldn't be used for security auditing, so this isn't a valid CVE. Signed-off-by: Ross Burton --- meta/recipes-extended/procps/procps_3.3.15.bb | 9 ++--- 1

Re: [OE-core] [PATCH] target-sdk-provides-dummy: set nostamp for do_package

2019-11-04 Thread Richard Purdie
On Mon, 2019-11-04 at 14:51 +0800, changqing...@windriver.com wrote: > From: Changqing Li > > It exists a situation that there is a common config file includes > multilib.conf but variable MULTILIBS is not set by default: > > require conf/multilib.conf > MULTILIBS ?= "" > > When build

[OE-core] [PATCH] gdb: Discard sections whose size is greater than the file size.

2019-11-04 Thread Vinay Kumar
Backport the upstream fix. that was not present in master. CVE: CVE-2019-1010180 Upstream-Status: Backport Signed-off-by: Vinay Kumar --- meta/recipes-devtools/gdb/gdb-8.3.1.inc | 1 + meta/recipes-devtools/gdb/gdb/CVE-2019-1010180.patch | 20 2 files

Re: [OE-core] [PATCH] linux-dummy: Add package kernel

2019-11-04 Thread Ross Burton
On 01/11/2019 02:01, He Zhe wrote: It's the "efi" in MACHINE_FEATURES who asks for "kernel". https://git.openembedded.org/openembedded-core/tree/meta/recipes-core/packagegroups/packagegroup-core-boot.bb#n31 I'd just rip out 'kernel' from that as that doesn't look right to me. Ross --

[OE-core] [PATCH] libpng: whitelist CVE-2019-17371

2019-11-04 Thread Ross Burton
This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng recipe. Signed-off-by: Ross Burton --- meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb

[OE-core] [PATCH] patch: the CVE-2019-13638 fix also handles CVE-2018-20969

2019-11-04 Thread Ross Burton
Signed-off-by: Ross Burton --- .../0001-Invoke-ed-directly-instead-of-using-the-shell.patch | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/patch/patch/0001-Invoke-ed-directly-instead-of-using-the-shell.patch

[OE-core] [PATCH 2/3] file: remove redundant upstream check workaround

2019-11-04 Thread Ross Burton
This tag has been removed, so we don't need to work around it anymore. Signed-off-by: Ross Burton --- meta/recipes-devtools/file/file_5.37.bb | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/recipes-devtools/file/file_5.37.bb b/meta/recipes-devtools/file/file_5.37.bb index

[OE-core] [PATCH 3/3] file: run test suite when building natively

2019-11-04 Thread Ross Burton
As we apply the same patches to native and target builds of file, we can verify that the patches are not breaking by executing the test suite during the build of file-native. Signed-off-by: Ross Burton --- meta/recipes-devtools/file/file_5.37.bb | 4 1 file changed, 4 insertions(+) diff

[OE-core] [PATCH 1/3] file: fix CVE-2019-18218

2019-11-04 Thread Ross Burton
Signed-off-by: Ross Burton --- .../file/file/CVE-2019-18218.patch| 55 +++ meta/recipes-devtools/file/file_5.37.bb | 3 +- 2 files changed, 57 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-devtools/file/file/CVE-2019-18218.patch diff --git

[OE-core] [PATCH] file: fix CVE-2019-18218

2019-11-04 Thread Ross Burton
Signed-off-by: Ross Burton --- .../file/file/CVE-2019-18218.patch| 55 +++ meta/recipes-devtools/file/file_5.37.bb | 3 +- 2 files changed, 57 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-devtools/file/file/CVE-2019-18218.patch diff --git

Re: [OE-core] [PATCH v2] insane: file-rdeps: Readability only

2019-11-04 Thread Richard Purdie
On Mon, 2019-11-04 at 17:52 +1300, Douglas Royds via Openembedded-core wrote: > Mostly just longer (and hopefully more meaningful) variable names. "Mostly" - what else is in there? Cheers, Richard -- ___ Openembedded-core mailing list

[OE-core] [PATCH] python: Upgrade 2.7.16 -> 2.7.17

2019-11-04 Thread Adrian Bunk
Patches applied upstream removed. Signed-off-by: Adrian Bunk --- ...-fix-one-do_populate_sysroot-warning.patch | 15 +- ...tive_2.7.16.bb => python-native_2.7.17.bb} | 0 meta/recipes-devtools/python/python.inc | 10 +- ...nt-parse-domains-containing-GH-13079.patch | 90