Re: [OE-core] [PATCH 4/4] package_rpm.bbclass: Support compression override

2023-10-21 Thread Niko Mauno via lists.openembedded.org
On 10/20/23 16:00, Richard Purdie wrote: As far as I could tell when we looked at this, the rpm world was moving over to zstd so adding in conditional xz support for a limited use case probably just creates a maintenance headache going forward as it isn't something we test or plan to test? I

[OE-core] [PATCHv2 4/4] package_rpm.bbclass: Allow compression mode override

2023-10-21 Thread Niko Mauno via lists.openembedded.org
From: Niko Mauno Commit 4a4d5f78a6962dda5f63e9891825c80a8a87bf66 ("package_rpm: use zstd instead of xz") changed the rpm package compressor from 'xz' to 'zstd' which results in decompression failure with BusyBox-provided 'rpm2cpio' applet and 'rpm' applet when given the '-i' (Install package)

[OE-core] [PATCHv2 3/4] package_rpm.bbclass: Remove unused definitions

2023-10-21 Thread Niko Mauno via lists.openembedded.org
From: Niko Mauno Some local variables defined in do_package_rpm() are not referenced, so remove such dead code lines. Signed-off-by: Niko Mauno --- meta/classes-global/package_rpm.bbclass | 4 1 file changed, 4 deletions(-) diff --git a/meta/classes-global/package_rpm.bbclass

[OE-core] [PATCHv2 2/4] package_rpm.bbclass: Minor cosmetic and style fixes

2023-10-21 Thread Niko Mauno via lists.openembedded.org
From: Niko Mauno Add the missing conventional space characters around bitbake variable assignment operators. Also fix a typo on a comment line. Signed-off-by: Niko Mauno --- meta/classes-global/package_rpm.bbclass | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git

[OE-core] [PATCHv2 1/4] package_rpm.bbclass: Fix some pycodestyle issues

2023-10-21 Thread Niko Mauno via lists.openembedded.org
From: Niko Mauno Fix following subset of observations reported by version 2.10.0 of pycodestyle utility: meta/classes-global/package_rpm.bbclass:65:46: E231 missing whitespace after ',' meta/classes-global/package_rpm.bbclass:66:46: E231 missing whitespace after ','

[OE-core][kirkstone 6/6] vim: Upgrade 9.0.2009 -> 9.0.2048

2023-10-21 Thread Steve Sakoman
From: Siddharth Doshi This includes CVE fix for CVE-2023-5535. Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman --- meta/recipes-support/vim/vim.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/vim/vim.inc

[OE-core][kirkstone 5/6] libx11: Security Fix for CVE-2023-43785, CVE-2023-43786 and CVE-2023-43787

2023-10-21 Thread Steve Sakoman
From: Siddharth Doshi CVE's Fixed: CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms() CVE-2023-43786: libX11: stack exhaustion from infinite recursion in PutSubImage() CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow Signed-off-by:

[OE-core][kirkstone 4/6] linux-firmware: upgrade 20230625 -> 20230804

2023-10-21 Thread Steve Sakoman
From: Meenali Gupta License-Update: additional firmwares upgrade include fix for CVE-2023-20569 CVE-2022-40982 CVE-2023-20593 Changelog: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/ References: https://nvd.nist.gov/vuln/detail/CVE-2023-20569

[OE-core][kirkstone 3/6] zlib: patch CVE-2023-45853

2023-10-21 Thread Steve Sakoman
From: Peter Marko Backport commit merged to develop branch from PR linked in NVD report: * https://nvd.nist.gov/vuln/detail/CVE-2023-45853 * https://github.com/madler/zlib/pull/843 Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- .../zlib/zlib/CVE-2023-45853.patch| 42

[OE-core][kirkstone 2/6] gawk: backport Debian patch to fix CVE-2023-4156

2023-10-21 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://git.launchpad.net/ubuntu/+source/gawk/tree/debian/patches?h=ubuntu/jammy-security & https://git.savannah.gnu.org/gitweb/?p=gawk.git;a=commitdiff;h=e709eb829448ce040087a3fc5481db6bfcaae212] Signed-off-by: Vijay Anusuri Signed-off-by: Steve

[OE-core][kirkstone 1/6] qemu: ignore RHEL specific CVE-2023-2680

2023-10-21 Thread Steve Sakoman
From: Lee Chee Yang Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman --- meta/recipes-devtools/qemu/qemu.inc | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 5526eacb96..83bd5d7e67 100644 ---

[OE-core][kirkstone 0/6] Patch review

2023-10-21 Thread Steve Sakoman
Please review this set of changes for kirkstone and have comments back by end of day Tuesday, October 24 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6084 The following changes since commit 5570e49791b770271f176a4deeb5f6f1a028cb4a:

Re: [OE-core] [PATCH 2/2] selftest/sstatetests: add a test for CDN sstate cache

2023-10-21 Thread Alexander Kanavin
Right, I omitted the printdiff tests and that created a conflict with master. I resent a version that's rebased directly on that. Alex On Sat, 21 Oct 2023 at 00:58, Alexandre Belloni wrote: > > Hello Alex, > > This doesn't apply cleanly, it seems the context is from another series. > > On

[OE-core] [PATCH 1/2] lib/oe/sstatesig.py: dump locked.sigs.inc only when explicitly asked via -S lockedsigs

2023-10-21 Thread Alexander Kanavin
This was writing out locked-sigs.inc into cwd with every 'bitbake -S' invocation. When the intent is only to to get task stamps (-S none), or print the difference between them (-S printdiff), the file is unnecessary clutter. A couple of selftests/scripts were however relying on this, so they're

[OE-core] [PATCH 2/2] selftest/sstatetests: add a test for CDN sstate cache

2023-10-21 Thread Alexander Kanavin
Specifically, the test checks that everything needed for building standard oe-core images for x86_64 and arm64 is available from the cache (with minor exceptions). Going forward, a complete world check could be enabled and additional configurations, but that requires improvements to performance of

Re: [OE-core] [PATCH 1/2] lib/oe/sstatesig.py: dump locked.sigs.inc only when explicitly asked via -S lockedsigs

2023-10-21 Thread Richard Purdie
On Sat, 2023-10-21 at 13:44 +0200, Alexandre Belloni via lists.openembedded.org wrote: > https://autobuilder.yoctoproject.org/typhoon/#/builders/69/builds/7980/steps/24/logs/stdio It depends on one of the autobuilder-helper patches which is master- next there. The hard part is these patches are

Re: [OE-core] [PATCH 1/2] lib/oe/sstatesig.py: dump locked.sigs.inc only when explicitly asked via -S lockedsigs

2023-10-21 Thread Alexandre Belloni via lists.openembedded.org
https://autobuilder.yoctoproject.org/typhoon/#/builders/69/builds/7980/steps/24/logs/stdio On 20/10/2023 19:12:31+0200, Alexander Kanavin wrote: > This was writing out locked-sigs.inc into cwd with every > 'bitbake -S' invocation. When the intent is only to to get task > stamps (-S none), or