Re: [OE-core] [PATCH] strace: set COMPATIBLE_HOST for riscv32

2022-07-24 Thread Yu, Mingli
Hi Khem, On 7/20/22 20:14, Khem Raj wrote: **[Please note: This e-mail is from an EXTERNAL e-mail address] On Wed, Jul 20, 2022 at 5:35 AM Yu, Mingli > wrote: Hi Khem, On 7/5/22 21:39, Khem Raj wrote: > [Please note: This e-mail is from an

[OE-core] [kirkstone][PATCH] gnupg: CVE-2022-34903 possible signature forgery via injection into the status line

2022-07-24 Thread Hitendra Prajapati
Source: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git MR: 119422 Type: Security Fix Disposition: Backport from https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=34c649b3601383cd11dbc76221747ec16fd68e1b ChangeID: 6924f2a96aae0e29654c6797697bea3d500a41ed Description:

Re: [OE-core][kirkstone 01/35] curl: Fix multiple CVEs

2022-07-24 Thread Yu, Mingli
Ping. Thanks, On 7/18/22 22:48, Steve Sakoman wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] From: Robert Joslyn Backport fixes for: * CVE-2022-32205 - https://curl.se/docs/CVE-2022-32205.html * CVE-2022-32206 - https://curl.se/docs/CVE-2022-32206.html *

Re: [OE-core][PATCH] dropbear: Enable x11 forwarding

2022-07-24 Thread Matt Johnston
On Thu, 2022-07-21 at 09:12 +, Ross Burton wrote: > > On 20 Jul 2022, at 20:44, Daniel Gomez via lists.openembedded.org > > wrote: > > + > > file://0008-default_options-Enable-x11-forwarding.patch', '', d)}” > > This should be a PACKAGECONFIG instead of a forced on/off based

[OE-core] [PATCH 2/2] kernel.bbclass: pass LD also in savedefconfig

2022-07-24 Thread Martin Jansa
* similar to: https://git.openembedded.org/openembedded-core/commit/?id=66c1f4b0abd3483759f9e4141a80f982eaf8ccfd https://git.openembedded.org/openembedded-core/commit/?id=36fe2efc91fec5a52374a2dc4814a69076a2d28e but for savedefconfig task * otherwise with ld-is-gold it will fail with:

[OE-core] [PATCH 1/2] python3-setuptools: move patch from 'files' to 'python3-setuptools'

2022-07-24 Thread Martin Jansa
* it's not used by any other recipe AFAIK * meta-python2 has own copy for python-setuptools there in: meta-python2/recipes-devtools/python/python-setuptools/0001-conditionally-do-not-fetch-code-by-easy_install.patch Signed-off-by: Martin Jansa ---

Re: [OE-core][kirkstone 10/27] glibc: stable 2.35 branch updates

2022-07-24 Thread Martin Jansa
On Thu, Jul 14, 2022 at 6:36 AM Steve Sakoman wrote: > From: Sundeep KOKKONDA > > Below commits on Glibc-2.35 development branch are updated. > > glibc: > > 2d05ba7f8e Linux: Implement a useful version of _startup_fatal > ... This last commit seems to cause build failure with DEBUG_BUILD:

[OE-core] [PATCH] linux-firwmare: restore WHENCE_CHKSUM variable

2022-07-24 Thread Dmitry Baryshkov
Restore WHENCE_CHKSUM variable which is used to hold the WHENCE file checksum. It is necessary to allow easily overriding it from local.conf if the devupstream version is selected: PREFERRED_VERSION_linux-firmware = "1:20220708+git%" SRCREV:class-devupstream = "${AUTOREV}"

[OE-core] [PATCH RFC] rust: Rework and improve so SDK and target versions work

2022-07-24 Thread Richard Purdie
This patch: * Uses RUST_{BUILD|HOST|TARGET}_SYS everywhere consistently within rust context as the configuration name and --target option to rust * Moves the on target libraries to rust's "sysroot" layout so the SDK can find libraries without prompting * Moves the target SDK libraries into the

Re: [OE-core] [PATCH] oeqa/selftest/context: set branch name when creating temporary git repo

2022-07-24 Thread Richard Purdie
On Fri, 2022-07-22 at 12:15 +0100, Ross Burton wrote: > Modern gits print a big note if no branch name is specified when > creating a new repository. Silence this by explicitly naming the new > branch 'master' to match existing naming. > > Signed-off-by: Ross Burton > --- >

[OE-core] [PATCH v2] libgcc: Fix standalone target builds with usrmerge distro feature

2022-07-24 Thread Khem Raj
Ignore the rmdir cmd if using usrmerge distro feature since the intention is to delete /lib or /lib64 but not libdir under /usr and base_libdir = libdir when usrmerge is enabled in distro Signed-off-by: Khem Raj --- v2: Use base_libdir != libdir to compare instead of usrmerge distro feature

[OE-core] [PATCH v2] gcc-runtime: Use static dummy libstdc++

2022-07-24 Thread Khem Raj
some standalone targets e.g. riscv64-elf disable shared linking for baremetal ELF ABI in ld, therefore lets make it a static library Signed-off-by: Khem Raj --- v2: Use ar to create usable .a file meta/recipes-devtools/gcc/gcc-runtime.inc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

Re: [OE-core] [PATCH 1/3] libgcc: Fix standalone target builds with usrmerge distro feature

2022-07-24 Thread Peter Kjellerstedt
> -Original Message- > From: Khem Raj > Sent: den 24 juli 2022 15:52 > To: Peter Kjellerstedt > Cc: openembedded-core@lists.openembedded.org > Subject: Re: [OE-core] [PATCH 1/3] libgcc: Fix standalone target builds > with usrmerge distro feature > > Hi Peter > > Thanks for the review.

Re: [OE-core] [PATCH 1/3] libgcc: Fix standalone target builds with usrmerge distro feature

2022-07-24 Thread Khem Raj
Hi Peter Thanks for the review. On Sun, Jul 24, 2022 at 7:47 AM Peter Kjellerstedt wrote: > > > -Original Message- > > From: openembedded-core@lists.openembedded.org > > On Behalf Of Khem Raj > > Sent: den 23 juli 2022 16:54 > > To: openembedded-core@lists.openembedded.org > > Cc:

[OE-core] [PATCH] systemd: Drop backported patch applied in 251.3

2022-07-24 Thread Khem Raj
This was added to musl specific backport patchset so it escaped testing Signed-off-by: Khem Raj --- .../0001-Add-sys-file.h-for-LOCK_.patch | 78 --- meta/recipes-core/systemd/systemd_251.3.bb| 1 - 2 files changed, 79 deletions(-) delete mode 100644

[OE-core] OE-core CVE metrics for kirkstone on Sun 24 Jul 2022 03:00:01 AM HST

2022-07-24 Thread Steve Sakoman
Branch: kirkstone New this week: 4 CVEs CVE-2022-2343 (CVSS3: 7.8 HIGH): vim https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2343 * CVE-2022-29187 (CVSS3: 7.8 HIGH): git https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-29187 * CVE-2022-30634 (CVSS3: 7.5 HIGH): go

[OE-core] OE-core CVE metrics for dunfell on Sun 24 Jul 2022 02:30:01 AM HST

2022-07-24 Thread Steve Sakoman
Branch: dunfell New this week: 6 CVEs CVE-2020-9948 (CVSS3: 8.8 HIGH): webkitgtk https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-9948 * CVE-2020-9951 (CVSS3: 8.8 HIGH): webkitgtk https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-9951 * CVE-2020-9952 (CVSS3: 7.1 HIGH):

[OE-core] OE-core CVE metrics for master on Sun 24 Jul 2022 02:00:01 AM HST

2022-07-24 Thread Steve Sakoman
Branch: master New this week: 2 CVEs CVE-2022-2343 (CVSS3: 7.8 HIGH): vim https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2343 * CVE-2022-35414 (CVSS3: 8.8 HIGH): qemu:qemu-native:qemu-system-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-35414 * Removed this week:

Re: [OE-core] [PATCH 1/3] libgcc: Fix standalone target builds with usrmerge distro feature

2022-07-24 Thread Peter Kjellerstedt
> -Original Message- > From: openembedded-core@lists.openembedded.org > On Behalf Of Khem Raj > Sent: den 23 juli 2022 16:54 > To: openembedded-core@lists.openembedded.org > Cc: Khem Raj > Subject: [OE-core] [PATCH 1/3] libgcc: Fix standalone target builds with > usrmerge distro

Re: [OE-core][PATCH 2/3] archiver.bbclass: avoid kernel rebuilds caused by the do_unpack_and_patch

2022-07-24 Thread Richard Purdie
On Fri, 2022-07-22 at 13:31 +0100, Jose Quaresma wrote: > The commit b8c5680 [1] add the funcion is_work_shared and at the same > time change from kernel-yocto.bbclass to a more generic kernel.bbclass. > > This is also a fixup for the commit fed0ed8 [2] to avoid kernel rebuilds > because of the

[OE-core] [PATCH] vim: Upgrade 9.0.0021 -> 9.0.0063

2022-07-24 Thread Richard Purdie
Pulls in several CVE fixes. Added a patch to avoid timer_create cross compile issue (and submitted upstream). Also submit the race fix upstream. Signed-off-by: Richard Purdie --- .../vim/files/crosscompile.patch | 51 +++