[OE-core] [PATCH] ptest-cargo.bbclass: add the possibility to define test arguments

2023-05-06 Thread Frederic Martinsons
From: Frederic Martinsons It can be useful for user of this class for giving common rust test arguments (like --shuffle, --format or --test-threads) To add arguments to test binary , simply define RUST_TEST_ARGS in your recipe that inherit ptest-cargo, for example: RUST_TEST_ARGS = "--shuffle"

Re: [OE-core][kirkstone 13/15] kernel-devicetree: allow specification of dtb directory

2023-05-06 Thread Martin Jansa
This one doesn't work correctly, maybe better to postpone this until a fix is in master, see: https://lists.openembedded.org/g/openembedded-core/message/180981 and possible fix: https://git.openembedded.org/openembedded-core-contrib/commit/?h=jansa/master=e2a6da5202a6671113758f9746ddbd8141a75757

[OE-core][kirkstone 15/15] run-postinsts: Set dependency for ldconfig to avoid boot issues

2023-05-06 Thread Steve Sakoman
From: Arturo Buzarra If a package with a postsints script requires ldconfig, the package class adds a ldconfig postinst fragment to initialize it before. Systemd has its own ldconfig.service to initialize it and sometimes if both services are running at the same time in the first boot, the first

[OE-core][kirkstone 12/15] wic/bootimg-efi: if fixed-size is set then use that for mkdosfs

2023-05-06 Thread Steve Sakoman
From: Randolph Sapp This is a bit of a compatibility issue more than anything. Some devices get upset if the FAT file system contains less blocks than the partition. The fixed-size argument is currently respected by the partition creation step but not by the file system creation step. Let's

[OE-core][kirkstone 14/15] libbsd: Add correct license for all packages

2023-05-06 Thread Steve Sakoman
From: Ranjitsinh Rathod BSD-4-Clause is only applicable to the {PN}-doc package as when I check for the source code I find below files which only uses the license BSD-4-Clause ~/sources/libbsd$ grep -rl "All advertising materials mentioning features or use of this software" *|grep -v \.1|grep

[OE-core][kirkstone 13/15] kernel-devicetree: allow specification of dtb directory

2023-05-06 Thread Steve Sakoman
From: Randolph Sapp Fedora/Redhat and Arch are somewhat standardized on their dtb directory structure. Let's add some flags to configure yocto to mimic that behavior. Add the following variables to the kernel class: - KERNEL_DTBDEST (controls the destination directory for dtbs)

[OE-core][kirkstone 11/15] python3-cryptography: fix for CVE-2023-23931

2023-05-06 Thread Steve Sakoman
From: Narpat Mali cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable

[OE-core][kirkstone 10/15] webkitgtk: fix CVE-2022-32888 & CVE-2022-32923

2023-05-06 Thread Steve Sakoman
From: Kai Kang Backport patches to fix CVE-2022-32888 and CVE-2022-32923 for webkitgtk 2.36.8. The bugzilla IDs of the CVEs are from https://support.apple.com which have been listed in patch headers. Signed-off-by: Kai Kang Signed-off-by: Steve Sakoman ---

[OE-core][kirkstone 09/15] binutils : Fix CVE-2023-25588

2023-05-06 Thread Steve Sakoman
From: Deepthi Hemraj Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1] Signed-off-by: Deepthi Hemraj Signed-off-by: Steve Sakoman --- .../binutils/binutils-2.38.inc| 1 +

[OE-core][kirkstone 08/15] binutils : Fix CVE-2023-1972

2023-05-06 Thread Steve Sakoman
From: Deepthi Hemraj Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff_plain;h=c22d38baefc5a7a1e1f5cdc9dbb556b1f0ec5c57] Signed-off-by: Deepthi Hemraj Signed-off-by: Steve Sakoman --- .../binutils/binutils-2.38.inc| 1 +

[OE-core][kirkstone 07/15] binutils : Fix CVE-2023-25585

2023-05-06 Thread Steve Sakoman
From: Deepthi Hemraj Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=65cf035b8dc1df5d8020e0b1449514a3c42933e7] Signed-off-by: Deepthi Hemraj Signed-off-by: Steve Sakoman --- .../binutils/binutils-2.38.inc| 1 +

[OE-core][kirkstone 04/15] go: fix CVE-2023-24534 denial of service from excessive memory allocation

2023-05-06 Thread Steve Sakoman
From: Vivek Kumbhar A parsed MIME header is a map[string][]string. In the common case, a header contains many one-element []string slices. To avoid allocating a separate slice for each key, ReadMIMEHeader looks ahead in the input to predict the number of keys that will be parsed, and allocates a

[OE-core][kirkstone 06/15] binutils : Fix CVE-2023-25584

2023-05-06 Thread Steve Sakoman
From: Deepthi Hemraj Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=77c225bdeb410cf60da804879ad41622f5f1aa44] Signed-off-by: Deepthi Hemraj Signed-off-by: Steve Sakoman --- .../binutils/binutils-2.38.inc| 3 +

[OE-core][kirkstone 05/15] go: Security fix for CVE-2023-24538

2023-05-06 Thread Steve Sakoman
From: Shubham Kulkarni html/template: disallow actions in JS template literals Backport from https://github.com/golang/go/commit/b1e3ecfa06b67014429a197ec5e134ce4303ad9b Signed-off-by: Shubham Kulkarni Signed-off-by: Steve Sakoman --- meta/recipes-devtools/go/go-1.17.13.inc | 1 +

[OE-core][kirkstone 03/15] freetype: fix CVE-2023-2004 integer overflowin in tt_hvadvance_adjust() in src/truetype/ttgxvar.c

2023-05-06 Thread Steve Sakoman
From: Vivek Kumbhar Fix An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman --- .../freetype/freetype/CVE-2023-2004.patch | 41 +++

[OE-core][kirkstone 02/15] connman: fix CVE-2023-28488 DoS in client.c

2023-05-06 Thread Steve Sakoman
From: Hitendra Prajapati Upstream-Status: Backport from https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=99e2c16ea1cced34a5dc450d76287a1c3e762138 Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman --- .../connman/connman/CVE-2023-28488.patch | 60

[OE-core][kirkstone 01/15] ffmpeg: fix for CVE-2022-48434

2023-05-06 Thread Steve Sakoman
From: Narpat Mali libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a

[OE-core][kirkstone 00/15] Patch review

2023-05-06 Thread Steve Sakoman
Please review this set of patches for kirkstone and have comments back by end of day Tuesday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5269 The following changes since commit 2d67702bdfc64358d364dd6484ae41842ee7c52f: glibc: stable 2.35

[OE-core] [PATCH] glib-networking: Add test retry to avoid failures

2023-05-06 Thread Richard Purdie
In autobuilder testing we regularly see glib-networking ptest fail with a "Resource temporarily unavailable (g-io-error-quark, 27)" error. Add a patch to see if a retry can resolve the issue. Signed-off-by: Richard Purdie --- .../glib-networking/eagain.patch | 29

Re: [OE-core][PATCH] kernel-devicetree: allow specification of dtb directory

2023-05-06 Thread Martin Jansa
On Fri, May 5, 2023 at 6:38 PM Randolph Sapp via lists.openembedded.org wrote: > From: Randolph Sapp > > Fedora/Redhat and Arch are somewhat standardized on their dtb directory > structure. Let's add some flags to configure yocto to mimic that > behavior. > > Add the following variables to the

Re: [OE-core] [PATCH v2] ghostscript: upgrade to 10.01.1

2023-05-06 Thread Alexandre Belloni via lists.openembedded.org
Hello Ross, This doesn't apply because of 8a70d6935afa ghostscript: fix CVE-2023-28879 >From the commit message, I believe cve-2023-28879.patch is still needed. On 03/05/2023 17:47:29+0100, Ross Burton wrote: > From: Ross Burton > > Fixes CVE-2023-28879. > > Drop an upstreamed patch. > >