[OE-core] [PATCH] curl: Update from 8.2.1 to 8.3.0

2023-09-17 Thread Robert Joslyn via lists.openembedded.org
NSS support was removed, so adjust PACKAGECONFIG options. The --enable-crypto-auth option was removed and split into separate options for basic-auth, bearer-auth, digest-auth, kerberos-auth, negotiate-auth, and aws. Enable basic, bearer, digest, and negotiate by default as these are probably the

Re: [OE-core] [PATCH 08/29] strace: parallelize ptest

2023-09-17 Thread Alexander Kanavin
On Sun, 17 Sept 2023 at 18:53, Khem Raj wrote: > core-image-ptest-lttng-tools () - Ran 5 tests in 2086.423s > core-image-ptest-lttng-tools - OK - All required tests passed > (successes=3, skipped=1, failures=0, errors=0) I tried to see if parallel testing can be enabled easily in lttng-tools,

[OE-core] [PATCH] igt-gpu-tools: do not write shortened git commit hash into binaries

2023-09-17 Thread Alexander Kanavin
-reproducible-20230917-br60if6q/packages/diff-html/ Signed-off-by: Alexander Kanavin --- meta/recipes-graphics/igt-gpu-tools/igt-gpu-tools_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/igt-gpu-tools/igt-gpu-tools_git.bb b/meta/recipes-graphics/igt

[OE-core] [PATCH 1/2] recipetool/devtool: Ensure server knows about changed files

2023-09-17 Thread Richard Purdie
Bitbake has changed to require notification when metadata changes in the middle of tinfoil sessions. Add the required function calls at the places metadata is changed. Signed-off-by: Richard Purdie --- scripts/lib/devtool/standard.py | 1 + scripts/lib/devtool/upgrade.py | 1 +

[OE-core] [PATCH 2/2] devtool/build_sdk: Drop unused imports

2023-09-17 Thread Richard Purdie
Drop some unused imports. Signed-off-by: Richard Purdie --- scripts/lib/devtool/build_sdk.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/lib/devtool/build_sdk.py b/scripts/lib/devtool/build_sdk.py index 6fe02fff2a4..1cd4831d2b8 100644 ---

[oe-core][PATCH 3/4] libadwaita: upgrade 1.3.4 -> 1.4.0

2023-09-17 Thread Markus Volk
- add dependency on appstream - build vapi dependent on GI_DATA_ENABLED = Version 1.4.0 = - AdwBreakpointBin - Clarify minimum size warnings - AdwExpanderRow - Improve accessible roles - AdwPreferencesGroup - Set described-by on the listbox - Docs - Fix a property

[oe-core][PATCH 4/4] maintainers.inc: add missing entries for appstream and libxmlb

2023-09-17 Thread Markus Volk
Signed-off-by: Markus Volk --- meta/conf/distro/include/maintainers.inc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/conf/distro/include/maintainers.inc b/meta/conf/distro/include/maintainers.inc index 3619588ae6..4caf137b5d 100644 --- a/meta/conf/distro/include/maintainers.inc

[oe-core][PATCH 2/4] appstream: import recipe from meta-oe

2023-09-17 Thread Markus Volk
libadwaita 1.4.0 has a dependency on it Signed-off-by: Markus Volk --- ...-meson-do-not-rely-on-an-exe-wrapper.patch | 36 +++ .../0001-remove-hardcoded-path.patch | 31 + .../appstream/appstream_0.16.3.bb | 45 +++ 3 files changed,

[oe-core][PATCH 1/4] libxmlb: import recipe from meta-oe

2023-09-17 Thread Markus Volk
appstream has a dependency on it - add a patch to fix a reproducibility and runtime issue with ptest ptest completes without error Signed-off-by: Markus Volk --- ...xb-selftest.c-hardcode-G_TEST_SRCDIR.patch | 35 +++ meta/recipes-gnome/libxmlb/libxmlb/run-ptest | 3 ++

Re: [OE-core] [PATCH 08/29] strace: parallelize ptest

2023-09-17 Thread Khem Raj
On Sun, Sep 17, 2023 at 2:39 AM Alexander Kanavin wrote: > > strace is one of the slowest tests otherwise (can take 40 minutes or more), > and this brings it to under 10 minutes \0/ This is a good fix. Next in the slowest line is perhaps lttng-tools. core-image-ptest-strace () - Ran 5 tests in

[OE-core] [kirkstone][PATCH] binutils: Fix CVE-2022-48065

2023-09-17 Thread Sanjana V
Signed-off-by: Sanjana --- .../binutils/binutils-2.38.inc| 3 + .../binutils/0029-CVE-2022-48065-1.patch | 31 + .../binutils/0029-CVE-2022-48065-2.patch | 115 + .../binutils/0029-CVE-2022-48065-3.patch | 122 ++ 4 files

[OE-core] OE-core CVE metrics for mickledore on Sun 17 Sep 2023 04:00:01 AM HST

2023-09-17 Thread Steve Sakoman
Branch: mickledore New this week: 14 CVEs CVE-2023-3777 (CVSS3: 7.8 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3777 * CVE-2023-39318 (CVSS3: 6.1 MEDIUM): go:go-binary-native:go-cross-core2-64:go-runtime

[OE-core] OE-core CVE metrics for kirkstone on Sun 17 Sep 2023 03:00:01 AM HST

2023-09-17 Thread Steve Sakoman
Branch: kirkstone New this week: 5 CVEs CVE-2023-39318 (CVSS3: 6.1 MEDIUM): go https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39318 * CVE-2023-39319 (CVSS3: 6.1 MEDIUM): go https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39319 * CVE-2023-4039 (CVSS3: 4.8 MEDIUM):

[OE-core] OE-core CVE metrics for dunfell on Sun 17 Sep 2023 02:00:01 AM HST

2023-09-17 Thread Steve Sakoman
Branch: dunfell New this week: 7 CVEs CVE-2023-3255 (CVSS3: 6.5 MEDIUM): qemu:qemu-native:qemu-system-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3255 * CVE-2023-3301 (CVSS3: 5.6 MEDIUM): qemu:qemu-native:qemu-system-native

[OE-core] OE-core CVE metrics for master on Sun 17 Sep 2023 01:00:01 AM HST

2023-09-17 Thread Steve Sakoman
Branch: master New this week: 13 CVEs CVE-2023-3777 (CVSS3: 7.8 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3777 * CVE-2023-39318 (CVSS3: 6.1 MEDIUM): go:go-binary-native:go-cross-core2-64:go-runtime

Re: [OE-core][mickledore][PATCH 2/2] qemu: fix CVE-2023-0330

2023-09-17 Thread Vijay Anusuri via lists.openembedded.org
Hi Steve, Same patch I've submitted for dunfell. Please revert it, if it is failing. Thanks & Regards, Vijay On Fri, Sep 15, 2023 at 8:56 PM Steve Sakoman wrote: > On Wed, Sep 13, 2023 at 4:44 AM Steve Sakoman via > lists.openembedded.org > wrote: > > > > Unfortunately this change breaks the

[OE-core] [PATCH 29/29] groff: add a patch to resolve build races

2023-09-17 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...d-Fix-Savannah-64681-webpage.ps-deps.patch | 51 +++ meta/recipes-extended/groff/groff_1.23.0.bb | 1 + 2 files changed, 52 insertions(+) create mode 100644

[OE-core] [PATCH 27/29] libva-utils: update 2.19.0 -> 2.20.0

2023-09-17 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../libva/{libva-utils_2.19.0.bb => libva-utils_2.20.0.bb}| 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/libva/{libva-utils_2.19.0.bb => libva-utils_2.20.0.bb} (90%) diff --git

[OE-core] [PATCH 28/29] piglit: update to latest revision

2023-09-17 Thread Alexander Kanavin
Drop patch as issue finally fixed upstream. Signed-off-by: Alexander Kanavin --- ...-bash-completions-in-the-right-place.patch | 35 --- meta/recipes-graphics/piglit/piglit_git.bb| 3 +- 2 files changed, 1 insertion(+), 37 deletions(-) delete mode 100644

[OE-core] [PATCH 23/29] procps: update 4.0.3 -> 4.0.4

2023-09-17 Thread Alexander Kanavin
Drop patches as all issues resolved upstream; one of them is a CVE backport. Signed-off-by: Alexander Kanavin --- ...o-address-failures-with-gettext-0.22.patch | 37 -- .../procps/0001-src-w.c-use-utmp.h-only.patch | 65 - .../procps/procps/CVE-2023-4016.patch |

[OE-core] [PATCH 26/29] igt-gpu-tools: update 1.27.1 -> 1.28

2023-09-17 Thread Alexander Kanavin
Drop procps 4 patch as upstream fixed the issue. Signed-off-by: Alexander Kanavin --- .../0001-Support-procps-4.x.patch | 502 -- .../igt-gpu-tools/igt-gpu-tools_git.bb| 8 +- 2 files changed, 3 insertions(+), 507 deletions(-) delete mode 100644

[OE-core] [PATCH 25/29] gobject-introspection: update 1.76.1 -> 1.78.0

2023-09-17 Thread Alexander Kanavin
Remove patch as issue fixed upstream. Signed-off-by: Alexander Kanavin --- ...pository-directory-for-native-builds.patch | 2 +- ...-ir-tool-template.in-fix-girdir-path.patch | 33 --- ...6.1.bb => gobject-introspection_1.78.0.bb} | 3 +- 3 files changed, 2 insertions(+), 36

[OE-core] [PATCH 22/29] gzip: update 1.12 -> 1.13

2023-09-17 Thread Alexander Kanavin
Drop autoconf-2.73.patch as issue resolved upstream. License-update: http -> https Signed-off-by: Alexander Kanavin --- .../gzip/gzip-1.12/autoconf-2.73.patch| 24 --- .../wrong-path-fix.patch | 0 .../gzip/{gzip_1.12.bb => gzip_1.13.bb} | 7

[OE-core] [PATCH 21/29] go-helloworld: update to latest revision

2023-09-17 Thread Alexander Kanavin
Fix up test case to match what binary prints. Signed-off-by: Alexander Kanavin --- meta/lib/oeqa/runtime/cases/go.py | 2 +- meta/recipes-extended/go-examples/go-helloworld_0.1.bb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git

[OE-core] [PATCH 24/29] screen: update 4.9.0 -> 4.9.1

2023-09-17 Thread Alexander Kanavin
Remove patches; they are merged upstream or backported. Signed-off-by: Alexander Kanavin --- ...-Add-needed-system-headers-in-checks.patch | 151 -- .../screen/screen/signal-permission.patch | 40 - .../{screen_4.9.0.bb => screen_4.9.1.bb} | 4 +- 3 files

[OE-core] [PATCH 14/29] sysstat: merge .inc into .bb

2023-09-17 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- meta/recipes-extended/sysstat/sysstat.inc | 71 - .../sysstat/sysstat_12.6.2.bb | 78 +-- 2 files changed, 73 insertions(+), 76 deletions(-) delete mode 100644 meta/recipes-extended/sysstat/sysstat.inc

[OE-core] [PATCH 20/29] python3-pygobject: update 3.44.1 -> 3.46.0

2023-09-17 Thread Alexander Kanavin
Replace a patch with a recipe option. Signed-off-by: Alexander Kanavin --- .../0001-Do-not-build-tests.patch | 30 --- ..._3.44.1.bb => python3-pygobject_3.46.0.bb} | 8 ++--- 2 files changed, 3 insertions(+), 35 deletions(-) delete mode 100644

[OE-core] [PATCH 19/29] liburi-perl: update 5.17 -> 5.21

2023-09-17 Thread Alexander Kanavin
License-Update: formatting Signed-off-by: Alexander Kanavin --- .../0001-Skip-TODO-test-cases-that-fail.patch| 12 ++-- .../{liburi-perl_5.17.bb => liburi-perl_5.21.bb} | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) rename

[OE-core] [PATCH 18/29] libdnf: update 0.70.1 -> 0.71.0

2023-09-17 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...ers-for-both-libsolv-and-libsolvext-libdn.patch | 10 +- ...-variables-with-pkg-config-cmake-s-own-mo.patch | 8 .../libdnf/libdnf/enable_test_data_dir_set.patch | 14 +++--- .../libdnf/{libdnf_0.70.1.bb => libdnf_0.71.0.bb} |

[OE-core] [PATCH 17/29] ovmf: update edk2-stable202305 -> edk2-stable202308

2023-09-17 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...ols-makefile-adjust-to-build-in-under-bitbake.patch | 10 +- meta/recipes-core/ovmf/ovmf_git.bb | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git

[OE-core] [PATCH 16/29] glib-2.0: update 2.76.4 -> 2.78.0

2023-09-17 Thread Alexander Kanavin
Add a patch so that native glib executables do not error out on systems with kernels less than 5.4. Signed-off-by: Alexander Kanavin --- ...t-write-bindir-into-pkg-config-files.patch | 74 ++-- ...-support-Fix-snap-test-ordering-race.patch | 107 --

[OE-core] [PATCH 07/29] perl: ensure all failures are caught

2023-09-17 Thread Alexander Kanavin
Sed expression may miss some failures, and | obscures the non-zero return code which would otherwise indicate them. Signed-off-by: Alexander Kanavin --- meta/recipes-devtools/perl/files/run-ptest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH 15/29] sysstat: update 12.6.2 -> 12.7.4

2023-09-17 Thread Alexander Kanavin
Old homepage is no longer being updated and will be taken down soon. Let's switch to git, as the new homepage is still being set up. Upstream has confirmed that odd-even version scheme is no longer in place: https://github.com/sysstat/sysstat/issues/373 Signed-off-by: Alexander Kanavin ---

[OE-core] [PATCH 13/29] glibc-tests: rename to glibc-y2038-tests

2023-09-17 Thread Alexander Kanavin
The recipe originates from meta-y2038 where the name was not confusing, but in oe-core it is. Signed-off-by: Alexander Kanavin --- meta/conf/distro/include/maintainers.inc | 2 +- meta/conf/distro/include/ptest-packagelists.inc | 4 ++--

[OE-core] [PATCH 06/29] perl: use 64 bit integers across all targets

2023-09-17 Thread Alexander Kanavin
Otherwise perl would use 32 bit integers on 32 bit targets, causing loss of bits when copying 64 bit time_t into an internal representation. Signed-off-by: Alexander Kanavin --- meta/recipes-devtools/perl/perl_5.38.0.bb | 1 + 1 file changed, 1 insertion(+) diff --git

[OE-core] [PATCH 11/29] openssl: parallelize tests

2023-09-17 Thread Alexander Kanavin
This brings them from 15 minutes to just over 4. Signed-off-by: Alexander Kanavin --- meta/recipes-connectivity/openssl/openssl/run-ptest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/openssl/openssl/run-ptest

[OE-core] [PATCH 12/29] openssl: ensure all ptest fails are caught

2023-09-17 Thread Alexander Kanavin
Piping results through sed may mask failures that sed isn't catching. Signed-off-by: Alexander Kanavin --- meta/recipes-connectivity/openssl/openssl/run-ptest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/openssl/openssl/run-ptest

[OE-core] [PATCH 10/29] busybox: enable 64 bit shell arithmetic (via long long type)

2023-09-17 Thread Alexander Kanavin
This matters on 32 bit systems where otherwise timestamp manipulation in shell scripts would overflow after 2038. One of the scripts in strace test suite exposed the issue. Signed-off-by: Alexander Kanavin --- meta/recipes-core/busybox/busybox/defconfig | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [PATCH 09/29] strace: remove from time64.inc exception list

2023-09-17 Thread Alexander Kanavin
The issues were resolved via https://github.com/strace/strace/pull/263 https://github.com/strace/strace/pull/264 https://github.com/strace/strace/pull/265 and the fixes were released in strace 6.5. Signed-off-by: Alexander Kanavin --- meta/conf/distro/include/time64.inc | 2 -- 1 file

[OE-core] [PATCH 05/29] ptest: report tests that were killed on timeout

2023-09-17 Thread Alexander Kanavin
I'm not sure if this was reported correctly before, but it currently is not. Test that is stuck is an error in itself. Signed-off-by: Alexander Kanavin --- meta/lib/oeqa/runtime/cases/ptest.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH 08/29] strace: parallelize ptest

2023-09-17 Thread Alexander Kanavin
strace is one of the slowest tests otherwise (can take 40 minutes or more), and this brings it to under 10 minutes \0/ Signed-off-by: Alexander Kanavin --- meta/recipes-devtools/strace/strace/run-ptest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH 04/29] curl: build and run the full set of ptests

2023-09-17 Thread Alexander Kanavin
Not running make in the top level tests/ directory excluded about a third of them (those that consisted of running small test binaries). Also, run tests in parallel, which reduces total time from five minutes to about 75 seconds. Signed-off-by: Alexander Kanavin ---

[OE-core] [PATCH 03/29] shadow: update 4.13 -> 4.14.0

2023-09-17 Thread Alexander Kanavin
License-Update: formatting, spdx conversion Drop: 0001-Disable-use-of-syslog-for-sysroot.patch (issue fixed upstream) 0001-Fix-can-not-print-full-login.patch 0001-Overhaul-valid_field.patch CVE-2023-29383.patch (backports) libbsd is a new native dependency, as otherwise glibc >= 2.38 is needed.

[OE-core] [PATCH 02/29] useradd.bbclass: list all needed items for package_setscene task

2023-09-17 Thread Alexander Kanavin
Latest shadow-native links with additional libraries; I was unable to find a way to resolve those in setscene context where tasks do not contain such dependencies. Signed-off-by: Alexander Kanavin --- meta/classes/useradd.bbclass | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-)

[OE-core] [PATCH 01/29] sstate.bbclass: setscene_depvalid(): do not exclude shadow-native from task dependency resolution

2023-09-17 Thread Alexander Kanavin
This results in executables from shadow-native, such as useradd, falling through to host libraries instead of using native ones that they were linked with, because the native libraries would not be installed because of this dependency exclusion. Until now that could be coincidentally fulfilled

Re: [OE-core] [PATCH] groff: do not build in parallel

2023-09-17 Thread Alexander Kanavin
Please ignore/drop this. Upstream has quickly fixed the issue, so I'll send a backport: https://git.savannah.gnu.org/cgit/groff.git/commit/?id=22e0153d6c204dc2dfe34bc2b6e3be7d878ca8b1 These things shouldn't be happening on Saturday night, and we should all get a life. I know :) Alex On Sat, 16