[OE-core] Patchtest results for [PATCH] scripts/oe-setup-build: write a build environment initialization one-liner into the build directory

2024-03-04 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/scripts-oe-setup-build-write-a-build-environment-initialization-one-liner-into-the-build-directory.patch FAIL:

[OE-core] Patchtest results for [PATCH] xz: correct upstream version check

2024-03-04 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/xz-correct-upstream-version-check.patch FAIL: test commit message presence: Please include a commit message on

[OE-core] [PATCH] xz: correct upstream version check

2024-03-04 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- meta/recipes-extended/xz/xz_5.4.6.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-extended/xz/xz_5.4.6.bb b/meta/recipes-extended/xz/xz_5.4.6.bb index 6c13e7ebe59..da3b75a10b0 100644 ---

[OE-core] [PATCH] scripts/oe-setup-build: write a build environment initialization one-liner into the build directory

2024-03-04 Thread Alexander Kanavin
With this, users no longer have to know where oe-init-build-env is relative to the build directory; that information is contained in the one liner and then it's possible to simply use that: . /path/to/build/init-build-env This will particularly help with initializing builds in unpacked build

[OE-core] [PATCH v2] image-live.bbclass: Adjust the default value for INITRD_LIVE

2024-03-04 Thread Kevin Hao
From: Kevin Hao The ${INITRAMFS_FSTYPES} may contains multi filesystem types, such as "cpio.gz cpio.xz". So it can't be used directly in setting of the default INITRD_LIVE. We choose the first filesystem type in ${INITRAMFS_FSTYPES} for the default INITRD_LIVE. Signed-off-by: Kevin Hao --- v2:

Re: [OE-core] [PATCH] image-live.bbclass: Adjust the default value for INITRD_LIVE

2024-03-04 Thread Kevin Hao
On Tue, Mar 05, 2024 at 12:11:51AM +, Richard Purdie wrote: > On Sun, 2024-03-03 at 14:54 +0800, Kevin Hao wrote: > > From: Kevin Hao > > > > - After the commit 26d97acc7137 ("image-artifact-names: include > > ${IMAGE_NAME_SUFFIX} directly in both ${IMAGE_NAME} and > > ${IMAGE_LINK_NAME}"),

Re: [OE-core] [PATCH] glibc: fix multilib headers conflict for arm

2024-03-04 Thread Kai Kang
On 3/5/24 01:00, Richard Purdie wrote: On Mon, 2024-03-04 at 09:12 +0800, Kai Kang wrote: From: Kai Kang The header files conflic when multilib enabled for arm: Error: Transaction test error:   file /usr/include/finclude/math-vector-fortran.h conflicts between attempted installs of    

Re: [OE-core] [PATCH] image-live.bbclass: Adjust the default value for INITRD_LIVE

2024-03-04 Thread Richard Purdie
On Sun, 2024-03-03 at 14:54 +0800, Kevin Hao wrote: > From: Kevin Hao > > - After the commit 26d97acc7137 ("image-artifact-names: include > ${IMAGE_NAME_SUFFIX} directly in both ${IMAGE_NAME} and > ${IMAGE_LINK_NAME}"), the image names have changed from >  

Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Richard Purdie
On Mon, 2024-03-04 at 19:10 +, Peter Kjellerstedt wrote: > > > I mean something more like meta/conf/image-uefi.conf but kernel focused. > > Hmm, the naming of that file messes with the expectations I've learnt over > the years of working with OE. I've always  thought that .conf files are >

[OE-core] [PATCH] bmaptool: now part of Yocto Project

2024-03-04 Thread Trevor Woerner
The bmaptool (previously: bmap-tools, bmap-tool, bmaptool) has been moved to be under the Yocto Project umbrella and is now hosted at: github.com/yoctoproject/bmaptool Signed-off-by: Trevor Woerner --- meta/classes-recipe/image_types.bbclass | 2 +-

Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Peter Kjellerstedt
> -Original Message- > From: Richard Purdie > Sent: den 4 mars 2024 18:39 > To: Peter Kjellerstedt ; > openembedded-core@lists.openembedded.org > Subject: Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class > > On Mon, 2024-03-04 at 17:20 +, Peter Kjellerstedt wrote: > >

Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Richard Purdie
On Mon, 2024-03-04 at 17:20 +, Peter Kjellerstedt wrote: > > -Original Message- > > From: Richard Purdie > > Sent: den 4 mars 2024 17:17 > > To: Peter Kjellerstedt ; > > openembedded-core@lists.openembedded.org > > Subject: Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add

Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Peter Kjellerstedt
> -Original Message- > From: Richard Purdie > Sent: den 4 mars 2024 17:17 > To: Peter Kjellerstedt ; > openembedded-core@lists.openembedded.org > Subject: Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class > > On Mon, 2024-03-04 at 16:57 +0100, Peter Kjellerstedt wrote: > >

Re: [OE-core] [PATCH] glibc: fix multilib headers conflict for arm

2024-03-04 Thread Richard Purdie
On Mon, 2024-03-04 at 09:12 +0800, Kai Kang wrote: > From: Kai Kang > > The header files conflic when multilib enabled for arm: > > > Error: Transaction test error: > >   file /usr/include/finclude/math-vector-fortran.h conflicts between > > attempted installs of >    

Re: [OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Richard Purdie
On Mon, 2024-03-04 at 16:57 +0100, Peter Kjellerstedt wrote: > Split out the two variables modulesloaddir and modprobedir from > kernel-module-split.bbclass as they can be useful to other recipes than > kernel module recipes. > > Signed-off-by: Peter Kjellerstedt > --- >  

[OE-core] [PATCH 2/2] kernel-module-split.bbclass: Inherit kernel-module-dirs

2024-03-04 Thread Peter Kjellerstedt
The two variables modulesloaddir and modprobedir have been moved to their own bbclass, kernel-module-dirs. Signed-off-by: Peter Kjellerstedt --- meta/classes-recipe/kernel-module-split.bbclass | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git

[OE-core] [PATCH 1/2] kernel-module-dirs.bbclass: Add class

2024-03-04 Thread Peter Kjellerstedt
Split out the two variables modulesloaddir and modprobedir from kernel-module-split.bbclass as they can be useful to other recipes than kernel module recipes. Signed-off-by: Peter Kjellerstedt --- meta/classes-recipe/kernel-module-dirs.bbclass | 8 1 file changed, 8 insertions(+)

[OE-core][kirkstone 10/11] tzdata : Upgrade to 2024a

2024-03-04 Thread Steve Sakoman
From: Priyal Doshi Signed-off-by: Priyal Doshi Signed-off-by: Alexandre Belloni (cherry picked from commit 5abbd0abf992ce8d11f3ae31fb1d83d97f5319fa) Signed-off-by: Shubham Kulkarni Signed-off-by: Steve Sakoman --- meta/recipes-extended/timezone/timezone.inc | 6 +++--- 1 file changed, 3

[OE-core][kirkstone 09/11] linux-firmware: upgrade 20231030 -> 20231211

2024-03-04 Thread Steve Sakoman
From: Alexander Sverdlin Signed-off-by: Alexander Sverdlin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 0caafdbbf4e7dc84b919afe14f7cb8c46a9e4ac2) Signed-off-by: Steve Sakoman --- ...nux-firmware_20231030.bb => linux-firmware_20231211.bb} | 7

[OE-core][kirkstone 08/11] bind: Upgrade 9.18.19 -> 9.18.24

2024-03-04 Thread Steve Sakoman
From: Soumya Sambu Includes security fixes for - CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-50868 and CVE-2023-50387 Changelog: = https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.24/CHANGES Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman ---

[OE-core][kirkstone 11/11] kernel.bbclass: Set pkg-config variables for building modules

2024-03-04 Thread Steve Sakoman
From: Munehisa Kamata [Backport cd2072e5d953 from the master without HOSTPKG_CONFIG setting] The pkg-config workaround has been applied for kernel image building, but not for module building. So pkg-config variables are different between do_compile and do_compile_kernelmodules tasks. It may

[OE-core][kirkstone 07/11] cve_check: cleanup logging

2024-03-04 Thread Steve Sakoman
From: Ross Burton Primarily list the number of patches found, useful when debugging. Also clean up some bad escaping that caused warnings and use re.IGNORECASE instead of manually doing case-insenstive rang matches. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from

[OE-core][kirkstone 06/11] dbus: Add missing CVE_PRODUCT

2024-03-04 Thread Steve Sakoman
From: Dhairya Nagodra - The current recipe only contains one (out of three) valid product names for dbus package in NVD. - This could result in reporting of lesser number CVEs than actual. - Added missing names to get a proper list. Signed-off-by: Dhairya Nagodra Signed-off-by: Steve Sakoman

[OE-core][kirkstone 05/11] qemu: Fix CVE-2023-42467

2024-03-04 Thread Steve Sakoman
From: Poonam Jadhav 1. scsi-disk: allow MODE SELECT block descriptor to set the block size Link: https://github.com/qemu/qemu/commit/356c4c441ec01910314c5867c680bef80d1dd373 The MODE SELECT command can contain an optional block descriptor that can be used to set the device block size. If the

[OE-core][kirkstone 04/11] qemu: Backport fix CVE-2023-6693

2024-03-04 Thread Steve Sakoman
From: Vivek Kumbhar Upstream-Status: Backport [https://gitlab.com/qemu-project/qemu/-/commit/2220e8189fb94068dbad333228659fbac819abb0] Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2023-6693.patch

[OE-core][kirkstone 02/11] glibc: ignore CVE-2023-0687

2024-03-04 Thread Steve Sakoman
From: Peter Marko This CVE was backported to glibc 2.35 branch 9 months ago. NVD recently updated CPE and it appeared in kirkstone cve reports. https://sourceware.org/git/?p=glibc.git;a=log;h=refs/heads/release/2.35/master gmon: Fix allocated buffer overflow (bug 29444)

[OE-core][kirkstone 03/11] qemu: Fix for CVE-2024-24474

2024-03-04 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52] Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2024-24474.patch| 44

[OE-core][kirkstone 01/11] less: Fix for CVE-2022-48624

2024-03-04 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144] Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../less/less/CVE-2022-48624.patch| 41 +++

[OE-core][kirkstone 00/11] Patch review

2024-03-04 Thread Steve Sakoman
Please review this set of changes for kirkstone and have comments back by end of day Wednesday, March 6 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6640 The following changes since commit cca0971a7d92d823cc0c2b16cf14a7b2ed8ecb61: kernel:

Re: [OE-core] [yocto-security] OE-core CVE metrics for master on Sun 03 Mar 2024 01:00:01 AM HST

2024-03-04 Thread Ross Burton
On 3 Mar 2024, at 13:18, Peter Marko via lists.yoctoproject.org wrote: > > I already mentioned this last week. > https://lists.openembedded.org/g/openembedded-core/message/196199 > > I think that partial NVD DB update is not working properly as things which > were corrected by NVD are still

Re: [OE-core][kirkstone][PATCH] libseccomp: Add back in PTESTS_SLOW list

2024-03-04 Thread Alexander Kanavin
This needs to be tested on master, and submitted for master first. Alex On Mon, 4 Mar 2024 at 13:03, Sourav Kumar Pramanik wrote: > > Enable libseccomp-ptest in PTESTS_SLOW as > all tests are passing now. > > Signed-off-by: Sourav Pramanik > --- >

[OE-core][kirkstone][PATCH] libseccomp: Add back in PTESTS_SLOW list

2024-03-04 Thread Sourav Kumar Pramanik
Enable libseccomp-ptest in PTESTS_SLOW as all tests are passing now. Signed-off-by: Sourav Pramanik --- meta/conf/distro/include/ptest-packagelists.inc | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/conf/distro/include/ptest-packagelists.inc

[OE-core] [PATCH] python3-cryptography_42.0.5.bb: delete redundant ptest packaging

2024-03-04 Thread Robert P. J. Day
Since FILES:${PN}-ptest is already defined to include the contents of ${PTEST_PATH}, adding such an entry to the package is superfluous. Signed-off-by: Robert P. J. Day --- diff --git a/meta/recipes-devtools/python/python3-cryptography_42.0.5.bb

Re: [OE-core] [PATCH v4 0/3] pkg-database and systemd-sysext image

2024-03-04 Thread Johannes Schneider via lists.openembedded.org
Hoi Alex, thanks for the heads up - i'll patiently wait then :-) gruß Johannes From: Alexander Kanavin Sent: Monday, March 4, 2024 10:25 To: SCHNEIDER Johannes Cc: openembedded-core@lists.openembedded.org; richard.pur...@linuxfoundation.org Subject:

Re: [OE-core] [PATCH v4 0/3] pkg-database and systemd-sysext image

2024-03-04 Thread Alexander Kanavin
There is a feature freeze now, so this might have to wait for after that. Alex On Mon, 4 Mar 2024 at 07:16, Johannes Schneider via lists.openembedded.org wrote: > > systemd-sysext allows to overlay another image (or multiple) ontop of > a "base-image" = the current rootfs, via the use of