Re: [OE-core][dunfell][PATCH] expat: Backport fix for CVE-2024-28757

2024-03-14 Thread Anuj Mittal
On Thu, 2024-03-14 at 01:33 +0530, Ashish Sharma via lists.openembedded.org wrote: > Upstream ref: > https://github.com/libexpat/libexpat/pull/842 > https://github.com/libexpat/libexpat/issues/839 > > Upstream-Status: Backport >

[OE-core] [PATCH v2 1/2] multilib_header.bbclass:Disable multilib_header when fortran is enabled.

2024-03-14 Thread leimaohui via lists.openembedded.org
From: Lei Maohui It seems that multilib header doesn't work for fortran compiler. Signed-off-by: Lei Maohui --- meta/classes-recipe/multilib_header.bbclass | 6 ++ 1 file changed, 6 insertions(+) diff --git a/meta/classes-recipe/multilib_header.bbclass

[OE-core] [PATCH v2 2/2] glibc: Fix conflict error when enbale multilib on aarch64.

2024-03-14 Thread leimaohui via lists.openembedded.org
From: Lei Maohui Error: Transaction test error: file /usr/include/finclude/math-vector-fortran.h from install of lib32-libc6-dev-2.39+git0+312e159626-r0.armv7ahf_neon conflicts with file from package libc6-dev-2.39+git0+312e159626-r0.aarch64 Signed-off-by: Lei Maohui ---

[OE-core] [PATCH v2 0/2] glibc: Fix conflict error when enbale multilib on aarch64.

2024-03-14 Thread leimaohui via lists.openembedded.org
From: Lei Maohui - Fix conflict of finclude/math-vector-fortran.h error when enable multilib on aarch64. - Because multilib header doesn't work well for fortran compiler, a compile error will occur with above glibc patch. So, disable multilib_header when fortran is enabled. Lei Maohui

Re: [OE-core] [PATCH V2] dnf: remove log_lock.pid before exit

2024-03-14 Thread Changqing Li
On 3/7/24 19:42, Alexander Kanavin wrote: CAUTION: This email comes from a non Wind River email account! Do not click links or open attachments unless you recognize the sender and know the content is safe. On Thu, 7 Mar 2024 at 11:21, Chen Qi via lists.openembedded.org wrote: You can see

[OE-core] [PATCH 4/4] cve-update-nvd2-native: Remove rejected CVE from database

2024-03-14 Thread Yoann Congal
When a CVE is updated to be rejected, matching database entries must be removed. Otherwise: * an incremental update is not equivalent the to an initial download. * rejected CVEs might still appear as Unpatched in cve-check. Signed-off-by: Yoann Congal ---

[OE-core] [PATCH 2/4] cve-update-nvd2-native: nvd_request_next: Improve comment

2024-03-14 Thread Yoann Congal
Add a URL to the doc of the API used in the function. ... and fix a small typo dabase -> database Signed-off-by: Yoann Congal --- meta/recipes-core/meta/cve-update-nvd2-native.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git

[OE-core] [PATCH 3/4] cve-update-nvd2-native: Fix CVE configuration update

2024-03-14 Thread Yoann Congal
When a CVE is created, it often has no precise version information and this is stored as "-" (matching any version). After an update, version information is added. The previous "-" must be removed, otherwise, the CVE is still "Unpatched" for cve-check. Signed-off-by: Yoann Congal ---

[OE-core] [PATCH 1/4] cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition

2024-03-14 Thread Yoann Congal
CVE_CHECK_DB_FILE is already defined in cve-check.bbclass which is always inherited in cve-update-nvd2-native (There is a check line 40). Remove it to avoid confusion. Otherwise, this should not change anything. Signed-off-by: Yoann Congal --- meta/recipes-core/meta/cve-update-nvd2-native.bb |

[OE-core] [PATCH 0/4] Fixes around CVE incremental update

2024-03-14 Thread Yoann Congal
This series should improve the incremental CVE updates (versus full-download from scratch) and, hopefully, remove the difference between the updated database and the "from-scratch" one. I've tested it by comparing a full download from scratch versus a full download on a preexisting database: no

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Alexander Kanavin
On Thu, 14 Mar 2024 at 15:57, Enrico Scholz via lists.openembedded.org wrote: > | stdio: WARNING: Nothing RPROVIDES 'nativesdk-openssh-scp' ... > | stdio: WARNING: Nothing RPROVIDES 'nativesdk-openssh-sshd' ... > | stdio: WARNING: Nothing RPROVIDES 'nativesdk-openssh-ssh' ... > > are these

Re: [OE-core] [PATCH] insane: add patch-status to default ERROR_QA for all layers

2024-03-14 Thread Martin Jansa
FWIW: meta-virtualization/master is fine since 2023-06-22: https://git.yoctoproject.org/meta-virtualization/log/?qt=grep=Upstream-Status There are only 4 new issues currently in master-next: Missing Upstream-Status tag

Re: [OE-core] [PATCH] insane: add patch-status to default ERROR_QA for all layers

2024-03-14 Thread Bruce Ashfield
On Thu, Mar 14, 2024 at 3:09 AM Martin Jansa wrote: > > * it's enabled for patches in oe-core for very long time and I was using > it for many other layers as well, so most layers should be in good > shape > > * it's also possible to disable it for individual layer as shown > by oe-core in:

Re: [OE-core] [PATCH] insane: add patch-status to default ERROR_QA for all layers

2024-03-14 Thread Martin Jansa
On Thu, Mar 14, 2024 at 4:32 PM Ross Burton wrote: > > On 14 Mar 2024, at 07:09, Martin Jansa via lists.openembedded.org > wrote: > > > > * it's enabled for patches in oe-core for very long time and I was using > > it for many other layers as well, so most layers should be in good > > shape >

Re: [OE-core] [PATCH] insane: add patch-status to default ERROR_QA for all layers

2024-03-14 Thread Ross Burton
On 14 Mar 2024, at 07:09, Martin Jansa via lists.openembedded.org wrote: > > * it's enabled for patches in oe-core for very long time and I was using > it for many other layers as well, so most layers should be in good > shape > > * it's also possible to disable it for individual layer as

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Enrico Scholz via lists.openembedded.org
Richard Purdie writes: > Some further related warnings: > > https://autobuilder.yoctoproject.org/typhoon/#/builders/23/builds/9031/steps/11/logs/warnins | stdio: WARNING: Nothing RPROVIDES 'nativesdk-openssh-config' ... ok I will reduce dependency from |-RRECOMMENDS:${PN} += "openssh-config"

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Richard Purdie
On Thu, 2024-03-14 at 15:11 +0100, Enrico Scholz wrote: > Richard Purdie writes: > > > Thanks for sending this. I suspect something like this might be > > desirable however unfortunately the timing is a little tricky as > > we're > > just past the feature freeze point for 5.0. > > ok; my fault. 

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Enrico Scholz via lists.openembedded.org
Richard Purdie writes: > Thanks for sending this. I suspect something like this might be > desirable however unfortunately the timing is a little tricky as we're > just past the feature freeze point for 5.0. ok; my fault. I delayed it too much. Would it be possible to communicate such

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Richard Purdie
On Thu, 2024-03-14 at 11:00 +, Richard Purdie via lists.openembedded.org wrote: > On Mon, 2024-03-11 at 10:19 -0700, Enrico Scholz via > lists.openembedded.org wrote: > > To deal with system setups, sshd was configured in the following > > way: > > > >  - sshd_config is shipped completely by

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1

2024-03-14 Thread Richard Purdie
On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org wrote: > From: Wang Mingyu > > License-Update: > > *COPYING: >  Add the license for the XZ logo. >  Change most public domain parts to 0BSD. >  Update COPYING about the man pages of the scripts. > *getopt.c >  

Re: [OE-core] [PATCH 06/36] gnupg: upgrade 2.4.4 -> 2.4.5

2024-03-14 Thread Richard Purdie
On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org wrote: > From: Wang Mingyu > > Changelog: > == > * gpg,gpgv: New option --assert-pubkey-algo. > * gpg: Emit status lines for errors in the compression layer. > * gpg: Fix invocation with --trusted-keys and --no-options.

Re: [OE-core] [PATCH 2/2] cve-update-nvd2-native: Add an age threshold for incremental update

2024-03-14 Thread Yoann Congal
Le jeu. 14 mars 2024 à 13:14, Marta Rybczynska a écrit : > > > On Wed, 13 Mar 2024, 16:15 Yoann Congal, wrote: > >> Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to >> specify the maximum age of the database for doing an incremental update >> For older databases, a full

Re: [OE-core] [PATCH 2/2] cve-update-nvd2-native: Add an age threshold for incremental update

2024-03-14 Thread Marta Rybczynska
On Wed, 13 Mar 2024, 16:15 Yoann Congal, wrote: > Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to > specify the maximum age of the database for doing an incremental update > For older databases, a full re-download is done. > > With a value of "0", this forces a

Re: [OE-core] [PATCH 0/7] Replace sshd_config patching by snippets

2024-03-14 Thread Richard Purdie
On Mon, 2024-03-11 at 10:19 -0700, Enrico Scholz via lists.openembedded.org wrote: > To deal with system setups, sshd was configured in the following way: > >  - sshd_config is shipped completely by OE and DISTRO_FEATURES (pam, >    x11) are patched in during do_install > >    --> this is

[OE-core][PATCH 2/2] linux-firmware: add a package for ath12k firmware

2024-03-14 Thread Bartosz Golaszewski
From: Bartosz Golaszewski Add the firmware package for the ATH12K module. Signed-off-by: Bartosz Golaszewski --- .../linux-firmware/linux-firmware_20240312.bb | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git

[OE-core][PATCH 1/2] linux-firmware: update to 20240312

2024-03-14 Thread Bartosz Golaszewski
From: Bartosz Golaszewski Update the linux-firmware recipe to the most recent upstream tag. Signed-off-by: Bartosz Golaszewski --- ...{linux-firmware_20240220.bb => linux-firmware_20240312.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename

[OE-core] [PATCH] autotools: update link in comment for cross compiling

2024-03-14 Thread Jörg Sommer via lists . openembedded . org
From: Jörg Sommer Signed-off-by: Jörg Sommer --- meta/classes-recipe/autotools.bbclass | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/classes-recipe/autotools.bbclass b/meta/classes-recipe/autotools.bbclass index ca76cde0e7..9359c9b4e1 100644 ---

Re: [OE-core] [PATCH] sngrep: new recipe for ncurses SIP Messages flow viewer

2024-03-14 Thread Alexander Kanavin
This should go to the openembedded-devel list. Alex On Wed 13. Mar 2024 at 21.41, Jörg Sommer via lists.openembedded.org wrote: > From: Jörg Sommer > > Signed-off-by: Jörg Sommer > --- > .../recipes-support/sngrep/sngrep_1.8.0.bb| 37 +++ > 1 file changed, 37

[OE-core] [PATCH] insane: add patch-status to default ERROR_QA for all layers

2024-03-14 Thread Martin Jansa
* it's enabled for patches in oe-core for very long time and I was using it for many other layers as well, so most layers should be in good shape * it's also possible to disable it for individual layer as shown by oe-core in: