[OE-core] [PATCH 3/3] libcomps: clean up DEPENDS

From: Ross Burton This recipe depends on zlib so add that explicitly. Disable the tests and remove the dependency on libcheck, as we don't install them. Remove obsolete PYTHON_DESIRED assignment that isn't used anywhere. Explicitly disable the documentation for now. Signed-off-by: Ross

[OE-core] [PATCH v2] python3-async: remove recipe

From: Ross Burton This is part of the same project as GitPython, but hasn't been used by gitdb (the sole user) since 2014. Signed-off-by: Ross Burton --- meta/conf/distro/include/maintainers.inc | 1 - meta/recipes-devtools/python/python-async.inc | 14

Re: [OE-core] [PATCH 5/5] glib-networking: upgrade 2.74.0 -> 2.76.0

On 19 May 2023, at 01:55, Mittal, Anuj wrote: > > On Thu, 2023-05-18 at 12:09 +, Ross Burton wrote: >> On 18 May 2023, at 03:31, Anuj Mittal via lists.openembedded.org >> wrote: >>> rename meta/recipes-core/glib-networking/{glib-networking_2.74.0.bb >>&g

Re: [OE-core][PATCH 06/20] python3-libfdt: new package

> On 17 May 2023, at 17:32, Bruce Ashfield via lists.openembedded.org > wrote: > > I'm not sure if you saw the old threads on this, but we went through this > binding in detail in february: > > See the series from TrevorW: > > [PATCH v3 1/4] dtc: version bump and add python wrapper > > The

[OE-core] [PATCH 1/2] python3-gitdb: remove python3-async dependency

From: Ross Burton The dependency on the async module was removed back in 0.6.0 (November 2014). Whilst here, also merge the bb/inc and stop using PYTHON_PN, as we only support Python 3. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python-gitdb.inc | 23

[OE-core] [PATCH 2/2] python3-async: remove recipe

From: Ross Burton This is part of the same project as GitPython, but hasn't been used by gitdb (the sole user) since 2014. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python-async.inc | 14 -- .../recipes-devtools/python/python3-async_0.6.2.bb | 2 -- 2 files

Re: [OE-core] [PATCH 25/27] gdb: enable python PACKAGECONFIG

On 9 May 2023, at 18:23, Alexander Kanavin via lists.openembedded.org wrote: > > This is required by latest valgrind ptests. > > Signed-off-by: Alexander Kanavin > --- > meta/recipes-devtools/gdb/gdb-common.inc | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git

Re: [OE-core] [PATCH 5/5] glib-networking: upgrade 2.74.0 -> 2.76.0

On 18 May 2023, at 03:31, Anuj Mittal via lists.openembedded.org wrote: > rename meta/recipes-core/glib-networking/{glib-networking_2.74.0.bb => > glib-networking_2.76.0.bb} (95%) packages/cortexa57-poky-linux/glib-networking/glib-networking: FILELIST: removed

Re: [OE-core] [PATCH] conf: add nice level to the hash config ignored variables

Can you send patches as plaintext (ideally, using git-send-email). Copy-pasting HTML mails tends to fail. Thanks Ross > On 18 May 2023, at 10:36, lorenzo.arena via lists.openembedded.org > wrote: > > From: Lorenzo Arena > > This is needed as each user could be setting different nice

[OE-core] [PATCH 7/7] gstreamer1.0-python: mandate gobject-introspection-data DISTRO_FEATURE

From: Ross Burton This layers on top of python3-pygobject, which needs gobject-introspection to work. Signed-off-by: Ross Burton --- .../gstreamer/gstreamer1.0-python_1.22.2.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes-multimedia

[OE-core] [PATCH 6/7] python3-pygobject: mandate gobject-introspection-data DISTRO_FEATURE

From: Ross Burton PyGObject needs gobject-introspection to function, so add a distro features check. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-pygobject_3.44.1.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python

[OE-core] [PATCH 5/7] gi-docgen.bbclass: depends on gobject-introspection-data being enabled

From: Ross Burton The gi-docgen tool depends, as it's name suggests, on gobject-introspection being available. Signed-off-by: Ross Burton --- meta/classes-recipe/gi-docgen.bbclass | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/classes-recipe/gi-docgen.bbclass b

[OE-core] [PATCH 2/7] gobject-introspection: always DEPEND on gobject-introspection-native

From: Ross Burton If a recipe inherits gobject-introspection then there's a good chance that it needs the gobject-introspection-native recipe for the m4 macros in introspection.m4, because we always autoreconf so we always need the macros to be present. Change the dependencies so

[OE-core] [PATCH 1/7] meta: depend on autoconf-archive-native, not autoconf-archive

From: Ross Burton autoconf-archive is a collection of m4 autoconf macros needed at build-time, and autoconf-archive-native is a suitable provider as there is nothing in the recipe that needs to be cross-compiled. Also if we use DEPENDS=autoconf-archive then the recipe's -dev package ends up

[OE-core] [PATCH 4/7] gconf: remove explicit gobject-introspection DEPENDS

From: Ross Burton The gobject-introspection inherit does this for us. Signed-off-by: Ross Burton --- meta/recipes-gnome/gnome/gconf_3.2.6.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-gnome/gnome/gconf_3.2.6.bb b/meta/recipes-gnome/gnome/gconf_3.2.6.bb

[OE-core] [PATCH 3/7] python3-pygobject: remove explicit gobject-introspection DEPENDS

From: Ross Burton The gobject-introspection inherit pulls in the dependency for us. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-pygobject_3.44.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-pygobject_3.44.1

[OE-core] [PATCH] qemu: add PACKAGECONFIG for debuginfo support

From: Ross Burton qemu was auto-detecting the presence of libdw from elfutils, which causes problems with a sstate object for qemu-native built with libdw is ran on a machine without libdw. We have no need for the debuginfo support to be enabled, so disable this by default. Signed-off-by: Ross

Re: [OE-core][PATCH v5 1/6] gobject-introspection: reduce dependencies

> On 15 May 2023, at 15:49, Petr Kubizňák - 2N wrote: > The key question is whether the problematic packages have intrinsic > dependency on g-i-native, which can (and should) be fixed by adding the > package in DEPENDS directly, or g-i-native is always needed as Ross says, > which would

Re: [OE-core][PATCH v5 1/6] gobject-introspection: reduce dependencies

> On 15 May 2023, at 14:58, Ross Burton via lists.openembedded.org > wrote: > g-i-native will *always* be needed as a build dependency, because packages > built from git may not have any m4 macros in. I have a patch, just giving it a soak test. Ross -=-=-=-=-=-=-=-=-=-=-=

Re: [OE-core][PATCH v5 1/6] gobject-introspection: reduce dependencies

On 15 May 2023, at 12:40, Martin Jansa via lists.openembedded.org wrote: > do_configure:prepend:class-target () { > -# introspection.m4 pre-packaged with upstream tarballs does not yet > -# have our fixes > -mkdir -p ${S}/m4 > -cp

[OE-core] [PATCH 7/8] glib-networking: add gnomeproxy PACKAGECONFIG

From: Ross Burton Add a PACKAGECONFIG for the Gnome proxy configuration. Signed-off-by: Ross Burton --- meta/recipes-core/glib-networking/glib-networking_2.74.0.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/recipes-core/glib-networking/glib-networking_2.74.0.bb

[OE-core] [PATCH 6/8] glib-networking: fix LICENSE statement

From: Ross Burton The glib-networking license is LGPLv2.1 _or later_ and also has an additional exception if OpenSSL is being used. Add source comments to the checksum, and extend LICENSE if the openssl PACKAGECONFIG has been enabled. Signed-off-by: Ross Burton --- .../glib-networking/glib

[OE-core] [PATCH 8/8] glib-networking add environment variable proxy PACKAGECONFIG

From: Ross Burton Add a PACKAGECONFIG for the environment variable proxy configuration (http_proxy, etc), and enable by default as this is the fallback provider if you're not using libproxy or gnomeproxy. Signed-off-by: Ross Burton --- meta/recipes-core/glib-networking/glib-networking_2.74.0

[OE-core] [PATCH 5/8] gnutls: remove use of argp-standalone for musl

From: Ross Burton This was made obsoleten in 3.5.0 when crywrap was removed from the GnuTLS source tree. Signed-off-by: Ross Burton --- meta/recipes-support/gnutls/gnutls_3.8.0.bb | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.0.bb b/meta/recipes

[OE-core] [PATCH 4/8] gnutls: clean up ptest compilation

From: Ross Burton Don't always build the tests in do_compile, use do_compile_ptest so they are only built when needed. Signed-off-by: Ross Burton --- meta/recipes-support/gnutls/gnutls_3.8.0.bb | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/meta/recipes-support

[OE-core] [PATCH 1/8] gnutls: add PACKAGECONFIG for DANE

From: Ross Burton DANE (DNS-based Authentication of Named Entities) allows certificates to be bound to DNS entries. This requires unbound which is not part of oe-core. Add a PACKAGECONFIG but disable by default. Signed-off-by: Ross Burton --- meta/recipes-support/gnutls/gnutls_3.8.0.bb | 6

[OE-core] [PATCH 2/8] gnutls: add PACKAGECONFIG options for certification compression

From: Ross Burton GnuTLS has optional support for certificate compression. These are not widely enabled in other distributions and were previously disabled in standard builds, so don't enable them by default. Signed-off-by: Ross Burton --- meta/recipes-support/gnutls/gnutls_3.8.0.bb | 4

[OE-core] [PATCH 3/8] gnutls: use system libtasn1

From: Ross Burton Instead of using an internal ASN.1 parser, re-use libtasn1 from the system by default. Signed-off-by: Ross Burton --- meta/recipes-support/gnutls/gnutls_3.8.0.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.0

Re: [OE-core] [yocto] [dunfell][PATCH] pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE

This patch should go to openembedded-core@lists.openembedded.org . Thanks, Ross > On 15 May 2023, at 11:55, Sanjaykumar kantibhai Chitroda -X (schitrod - > E-INFO CHIPS INC at Cisco) via lists.yoctoproject.org > wrote: > > From: Alex Kiernan

Re: [OE-core] [PATCH] oeqa: adding selftest-hello and use it to speed up tests

On 12 May 2023, at 13:09, Thomas Roos via lists.openembedded.org wrote: > +do_compile() { > + ${CC} ${LDFLAGS} helloworld.c -o helloworld > +} Add CFLAGS too, please. Ros -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#181240):

Re: [OE-core] [PATCH V1] kbd: Add ptest support

On 15 May 2023, at 08:35, qi...@fujitsu.com via lists.openembedded.org wrote: > +# create atconfig > +if [[ ! -f "atconfig" ]]; then > +echo 'abs_builddir="@PTEST_PATH@/tests/"' > atconfig > +echo 'abs_srcdir="@PTEST_PATH@/tests/"' >> atconfig > +echo

Re: [yocto-security] [OE-core] OE-core CVE metrics for master on Sun 14 May 2023 01:00:01 AM HST

On 15 May 2023, at 09:41, Alexander Kanavin via lists.yoctoproject.org wrote: > nano please :) I tend to agree, there is no reason to carry > specifically vim as 'an editor for quick config file hacks on the > target’. Nano is GPL 3, there’s an argument that our default editor should be as

[OE-core] [PATCH][mickledore] machine/qemuarm*: don't explicitly set vmalloc

From: Ross Burton In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing Bruce was seeing problems when the vmalloc area was too big for the memory size of the machine (eg 256MB). The intention was for the area to be very small, but 256 bytes is too small and the kernel sets

[OE-core] [PATCH] cpio: upgrade to 2.14

From: Ross Burton Specifically this includes the commit "Fix appending to archives bigger than 2G". Drop all submitted patches. Apply a patch from git to fix the build with clang. [ YOCTO #11674 ] Signed-off-by: Ross Burton --- ...charset_alias-when-building-for-musl.p

[OE-core] [PATCH][mickledore] cpio: fix appending to archives larger than 2GB

From: Ross Burton Backport a patch to fix appending to archives larger than 2GB. [ YOCTO #11674 ] Signed-off-by: Ross Burton --- ...appending-to-archives-bigger-than-2G.patch | 312 ++ meta/recipes-extended/cpio/cpio_2.13.bb | 1 + 2 files changed, 313 insertions

Re: [OE-core] [PATCH V2] Fix error SRCDIR when using usrmerge DISTRO_FEATURES

First, please use the commit message convention: the shortlog should start with "e2fsprogs:”. > In Makefile.in, SRCDIR is set by prefix and libdir. > @echo "SRCDIR=${prefix}${libdir}/e2fsprogs/ptest/test" >> test_one > @echo "SRCDIR=${prefix}${libdir}/e2fsprogs/ptest/test" >>

Re: [OE-core][PATCH] cve-check: add option to add additional patched CVEs

On 8 May 2023, at 09:57, Adrian Freihofer via lists.openembedded.org wrote: > The patch from Andrej tries to solves a real issue: The CVE checker > distinguishes between two types of patches. Ignored (= not applicable) > and patched. Patching is only supported by adding a real patch file to >

[OE-core] [PATCH 3/3] python3: use system expat

From: Ross Burton Instead of statically linking to an integrated expat which may not be updated to fix security issues, dynamically link to the system expat. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3_3.11.2.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions

[OE-core] [PATCH 1/3] python3: use libedit instead of readline

From: Ross Burton libedit has feature parity with readline but is more permissively licensed (BSD verses GPLv3), so switch to libedit by default. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3_3.11.2.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff

[OE-core] [PATCH 2/3] python3: clean up PACKAGECONFIG

From: Ross Burton There's no need to define the PACKAGECONFIG for each class when they're all identical (as native DISTRO_FEATURES are pruned before use). Also add a disabled case to the LTO configuration to be explicit. Signed-off-by: Ross Burton --- meta/recipes-devtools/python

Re: [OE-core] [PATCH 1/5] insane.bbclass: add a SUMMARY/HOMEPAGE check (oe-core recipes only)

On 27 Apr 2023, at 08:35, Alexander Kanavin via lists.openembedded.org wrote: > > This was done in a selftest, but that is too late and creates > friction in integration as errors are not seen until autobuilder fails. > > Bonus fix: SUMMARY check wasn't even working, as in the absence > of one

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

> On 5 May 2023, at 11:31, Ross Burton wrote: > > On 11 Apr 2023, at 16:05, Louis Rannou via lists.openembedded.org > wrote: >> Create a new runner run_serial_socket which usage matches the traditional ssh >> runner. Its return status is 0 when the command succeede

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

On 11 Apr 2023, at 16:05, Louis Rannou via lists.openembedded.org wrote: > Create a new runner run_serial_socket which usage matches the traditional ssh > runner. Its return status is 0 when the command succeeded or 0 when it > failed. If an error is encountered, it raises an Exception. > > The

[OE-core] [PATCH 2/3] Revert "ffmpeg: move ffmpeg config into packageconfig"

From: Ross Burton There's very little reason to expose "build shared libraries", "build position-independent code", or "enable threads" as recipe-specific packageconfig options. Revert the commit which did this and explicitly set the relevant options in EXTR

[OE-core] [PATCH 1/3] gdb: fix crashes when debugging threads with Arm Pointer Authentication enabled

From: Ross Burton Signed-off-by: Ross Burton --- meta/recipes-devtools/gdb/gdb.inc | 1 + ...r-valid-inferior-thread-regcache-bef.patch | 286 ++ 2 files changed, 287 insertions(+) create mode 100644 meta/recipes-devtools/gdb/gdb/0001-aarch64-Check-for-valid

[OE-core] [PATCH 3/3] ffmpeg: add v4l2 PACKAGECONFIG

From: Ross Burton Can't be enabled by default as v4l-utils is in meta-oe. Signed-off-by: Ross Burton --- meta/recipes-multimedia/ffmpeg/ffmpeg_6.0.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_6.0.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_6.0

[OE-core] [PATCH v2] ghostscript: upgrade to 10.01.1

From: Ross Burton Fixes CVE-2023-28879. Drop an upstreamed patch. Signed-off-by: Ross Burton --- .../ghostscript/cross-compile.patch | 40 --- ...cript_10.0.0.bb => ghostscript_10.01.1.bb} | 3 +- 2 files changed, 1 insertion(+), 42 deletions(-) delete mode 100

[OE-core] [PATCH 3/3] ghostscript: upgrade to 10.01.1

Fixes CVE-2023-28879. Drop an upstreamed patch. Signed-off-by: Ross Burton --- .../ghostscript/cross-compile.patch | 40 --- ...cript_10.0.0.bb => ghostscript_10.01.1.bb} | 3 +- 2 files changed, 1 insertion(+), 42 deletions(-) delete mode 100644 meta/reci

[OE-core] [PATCH 1/3] spirv-headers: remove description

This description doesn't actually describe the recipe in any meaningful way, remove it. Signed-off-by: Ross Burton --- meta/recipes-graphics/spir/spirv-headers_1.3.243.0.bb | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/recipes-graphics/spir/spirv-headers_1.3.243.0.bb b/meta

[OE-core] [PATCH 2/3] spirv-tools: remove redundant python3native inherit

Python is needed at build-time, but the host Python is sufficient. Signed-off-by: Ross Burton --- meta/recipes-graphics/spir/spirv-tools_1.3.243.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/spir/spirv-tools_1.3.243.0.bb b/meta/recipes-graphics

[OE-core] [PATCH 2/2] connman: backport fix for CVE-2023-28488

Signed-off-by: Ross Burton --- ...ify-and-sanitize-packet-length-first.patch | 63 +++ .../connman/connman_1.41.bb | 1 + 2 files changed, 64 insertions(+) create mode 100644 meta/recipes-connectivity/connman/connman/0001-gdhcp-Verify-and-sanitize-packet

[OE-core] [PATCH 1/2] dmidecode: upgrade to 3.5

This includes a fix for CVE-2023-30630. Remove the patch changing prefix and instead pass the paths to the make install command. Passing -e to make is no longer needed, the Makefile respects variables now. Signed-off-by: Ross Burton --- ...mitting-changes-from-do_unpack_extra.patch | 25

[OE-core] [PATCH v2 4/4] vulkan-tools: upgrade to 1.3.243

Signed-off-by: Ross Burton --- .../{vulkan-tools_1.3.239.0.bb => vulkan-tools_1.3.243.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/vulkan/{vulkan-tools_1.3.239.0.bb => vulkan-tools_1.3.243.0.bb} (94%) diff --git a/meta/recipes-graphics/

[OE-core] [PATCH v2 2/4] vulkan-headers: upgrade to 1.3.243

Signed-off-by: Ross Burton --- ...{vulkan-headers_1.3.239.0.bb => vulkan-headers_1.3.243.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/vulkan/{vulkan-headers_1.3.239.0.bb => vulkan-headers_1.3.243.0.bb} (95%) diff --git a/meta/recipes-graphics/

[OE-core] [PATCH v2 3/4] vulkan-loader: upgrade to 1.3.243

Signed-off-by: Ross Burton --- ...{vulkan-loader_1.3.239.0.bb => vulkan-loader_1.3.243.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/vulkan/{vulkan-loader_1.3.239.0.bb => vulkan-loader_1.3.243.0.bb} (95%) diff --git a/meta/recipes-graphics/

[OE-core] [PATCH v2 1/4] glslang: upgrade to 1.3.243

The libraries are now versioned correctly, so remove the manual packaging. Signed-off-by: Ross Burton --- .../glslang/{glslang_1.3.239.0.bb => glslang_1.3.243.0.bb} | 6 +- 1 file changed, 1 insertion(+), 5 deletions(-) rename meta/recipes-graphics/glslang/{glslang_1.3.239.0

[OE-core] [PATCH v2] waffle: upgrade 1.7.0 -> 1.7.2

Upstream now only generates CMake files on Windows, so remove all references to CMake. A zsh completion is now installed, remove this for now as we don't really use zsh. Signed-off-by: Ross Burton --- ...build-request-native-wayland-scanner.patch | 9 ...-make-core-protocol

Re: [OE-core] [PATCH 1/3] vulkan-headers: upgrade to 1.3.249

On 3 May 2023, at 09:37, Alexander Kanavin wrote: > > Please respect the upstream version check; vulkan should be updated to > sdk-x.y.z versions, which currently means 1.3.243. If that’s a policy and not just because of historical branch structure, please add a comment explaining this to the

[OE-core] [PATCH 1/3] vulkan-headers: upgrade to 1.3.249

--- ...{vulkan-headers_1.3.239.0.bb => vulkan-headers_1.3.249.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/vulkan/{vulkan-headers_1.3.239.0.bb => vulkan-headers_1.3.249.0.bb} (94%) diff --git a/meta/recipes-graphics/vulkan/vulkan-headers_1.3.239.0.bb

[OE-core] [PATCH 2/3] vulkan-loader: upgrade to 1.3.249

--- ...{vulkan-loader_1.3.239.0.bb => vulkan-loader_1.3.249.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/vulkan/{vulkan-loader_1.3.239.0.bb => vulkan-loader_1.3.249.0.bb} (94%) diff --git a/meta/recipes-graphics/vulkan/vulkan-loader_1.3.239.0.bb

[OE-core] [PATCH 3/3] vulkan-tools: upgrade to 1.3.249

--- .../{vulkan-tools_1.3.239.0.bb => vulkan-tools_1.3.249.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/vulkan/{vulkan-tools_1.3.239.0.bb => vulkan-tools_1.3.249.0.bb} (93%) diff --git a/meta/recipes-graphics/vulkan/vulkan-tools_1.3.239.0.bb

[OE-core] [PATCH] vulkan-samples: update to latest SHA

Signed-off-by: Ross Burton --- meta/recipes-graphics/vulkan/vulkan-samples_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/vulkan/vulkan-samples_git.bb b/meta/recipes-graphics/vulkan/vulkan-samples_git.bb index 7e70cf1f040..52a9ee75fe9 100644

[OE-core] [PATCH v2] piglit: upgrade to latest revision

Signed-off-by: Ross Burton --- meta/recipes-graphics/piglit/piglit_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/piglit/piglit_git.bb b/meta/recipes-graphics/piglit/piglit_git.bb index 78b47985bcb..1daeb35b588 100644 --- a/meta/recipes-graphics

[OE-core] [PATCH] piglit: upgrade to latest revision

From: Upgrade Helper --- meta/recipes-graphics/piglit/piglit_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-graphics/piglit/piglit_git.bb b/meta/recipes-graphics/piglit/piglit_git.bb index 78b47985bcb..1daeb35b588 100644 ---

[OE-core] [PATCH 1/2] gtk+3: upgrade 3.24.36 -> 3.24.37

Drop merged introspection patch. Signed-off-by: Ross Burton --- ...d-introspection-according-to-option-.patch | 34 --- .../{gtk+3_3.24.36.bb => gtk+3_3.24.37.bb}| 3 +- 2 files changed, 1 insertion(+), 36 deletions(-) delete mode 100644 meta/recipes-gnome/gtk+/gtk+3/0

[OE-core] [PATCH 2/2] waffle: upgrade 1.7.0 -> 1.7.2

From: Upgrade Helper Upstream now only generates CMake files on Windows, so remove all references to CMake. A zsh completion is now installed, remove this for now as we don't really use zsh. Signed-off-by: Ross Burton --- ...build-request-native-wayland-scanner.patch | 9 ...-make

[OE-core] [PATCH] libinput: upgrade to 1.23.0

Remove determinism.patch, this is obsolete now that we set GIT_CEILING_DIRECTORIES to stop git climbing the tree outside of the work directory. Signed-off-by: Ross Burton --- .../wayland/libinput/determinism.patch| 21 --- ...{libinput_1.22.1.bb => libinput_1.23.0

[OE-core] [PATCH] python3-pytest: add missing tomllib RDEPENDS

Pytest can call tomllib (for example, when running the python3-cryptography tests), so add it as a RDEPENDS. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-pytest_7.3.1.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/python/python3-pytest_7.3.1

[OE-core] [PATCH][mickledore] connman: backport fix for CVE-2023-28488

Signed-off-by: Ross Burton --- ...ify-and-sanitize-packet-length-first.patch | 63 +++ .../connman/connman_1.41.bb | 1 + 2 files changed, 64 insertions(+) create mode 100644 meta/recipes-connectivity/connman/connman/0001-gdhcp-Verify-and-sanitize-packet

[OE-core] [PATCH] connman: backport fix for CVE-2023-28488

Signed-off-by: Ross Burton --- ...ify-and-sanitize-packet-length-first.patch | 63 +++ .../connman/connman_1.41.bb | 1 + 2 files changed, 64 insertions(+) create mode 100644 meta/recipes-connectivity/connman/connman/0001-gdhcp-Verify-and-sanitize-packet

[OE-core] [PATCH] dmidecode: upgrade to 3.5

This includes a fix for CVE-2023-30630. Remove the patch changing prefix and instead pass the paths to the make install command. Passing -e to make is no longer needed, the Makefile respects variables now. Signed-off-by: Ross Burton --- ...mitting-changes-from-do_unpack_extra.patch | 25

[OE-core] [PATCH] go: backport fix for CVE-2023-24537

Signed-off-by: Ross Burton --- meta/recipes-devtools/go/go-1.20.1.inc| 1 + .../go/go/CVE-2023-24537.patch| 89 +++ 2 files changed, 90 insertions(+) create mode 100644 meta/recipes-devtools/go/go/CVE-2023-24537.patch diff --git a/meta/recipes-devtools

[OE-core] [PATCH][mickledore] xserver-xorg: backport fix for CVE-2023-1393

Signed-off-by: Ross Burton --- ...posite-Fix-use-after-free-of-the-COW.patch | 46 +++ .../xorg-xserver/xserver-xorg_21.1.7.bb | 3 +- 2 files changed, 48 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-composite-Fix

Re: [OE-core] [PATCH 2/2] xserver-xorg: backport fix for CVE-2023-1393

Yeah, drop this, I failed to update my branch to include the 21.1.8 upgrade that had been sent. Ross > On 20 Apr 2023, at 02:38, Khem Raj wrote: > > Fails to patch - https://errors.yoctoproject.org/Errors/Details/700408/ > > On Wed, Apr 19, 2023 at 6:41 AM Ross Burton wrote

[OE-core] [PATCH 1/2] screen: backport fix for CVE-2023-24626

Signed-off-by: Ross Burton --- .../screen/screen/signal-permission.patch | 40 +++ meta/recipes-extended/screen/screen_4.9.0.bb | 1 + 2 files changed, 41 insertions(+) create mode 100644 meta/recipes-extended/screen/screen/signal-permission.patch diff --git a/meta

[OE-core] [PATCH 2/2] xserver-xorg: backport fix for CVE-2023-1393

Signed-off-by: Ross Burton --- ...posite-Fix-use-after-free-of-the-COW.patch | 46 +++ .../xorg-xserver/xserver-xorg_21.1.7.bb | 3 +- 2 files changed, 48 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-composite-Fix

[OE-core] [PATCH v2] machine/qemuarm*: don't explicitly set vmalloc

since this commit, remove the explicit vmalloc argument and use the default. I've tested that the system still boots locally. [1] early_vmalloc(), https://elixir.bootlin.com/linux/latest/source/arch/arm/mm/mmu.c#L1170 Signed-off-by: Ross Burton --- meta/conf/machine/qemuarm.conf | 2 -- meta

[OE-core] [PATCH] machine/qemuarm*: don't explicitly set vmalloc

is 240MiB[1] which is close to the value that Bruce was presumably aiming for, so I don't believe we should be setting this value explicitly. [1] early_vmalloc(), https://elixir.bootlin.com/linux/latest/source/arch/arm/mm/mmu.c#L1170 Signed-off-by: Ross Burton --- meta/conf/machine/qemuarm.conf | 2

Re: [OE-core] [PATCH 1/2] systemd: Allow native build

> On 3 Apr 2023, at 14:00, Böszörményi Zoltán wrote: > > 2023. 04. 03. 12:59 keltezéssel, Ross Burton írta: >> On 31 Mar 2023, at 10:46, Zoltan Boszormenyi via lists.openembedded.org >> wrote: >>> Regarding my attempts to fix this: I have looked into >>&g

[OE-core] [PATCH] gstreamer1.0-plugins: package the internal libraries explicitly

An upcoming change will simplify the setuptools3-base FILES assignments, which means this recipe needs to package a library explicitly. Signed-off-by: Ross Burton --- meta/recipes-multimedia/gstreamer/gstreamer1.0-python_1.22.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta

Re: [OE-core] [PATCH 1/2] systemd: Allow native build

On 31 Mar 2023, at 10:46, Zoltan Boszormenyi via lists.openembedded.org wrote: > Regarding my attempts to fix this: I have looked into > making these executables use "native: true" but it > would need duplicating all the driver and library targets > with "native: true", too, and it seemed to be

[OE-core] [PATCH 1/2] classes-recipe/setuptools3-base: clean up FILES assignments

Simply inheriting setuptools3-base should put everything in $libdir in PN, and there's no need to replicate the pkgconfig packaging rules as those are the defaults. Signed-off-by: Ross Burton --- meta/classes-recipe/setuptools3-base.bbclass | 13 +++-- 1 file changed, 3 insertions

[OE-core] [PATCH 2/2] bind: don't package non-existant .la files into -staticdev

If these files exist they should be packaged into PN-dev, and are with the default FILES:${PN}-dev. Signed-off-by: Ross Burton --- meta/recipes-connectivity/bind/bind_9.18.12.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/meta/recipes-connectivity/bind/bind_9.18.12.bb b/meta/recipes

[OE-core] [PATCH v2] oeqa/runtime: clean up deprecated backslash expansion

Signed-off-by: Ross Burton --- meta/lib/oeqa/runtime/cases/apt.py | 4 ++-- meta/lib/oeqa/runtime/cases/buildcpio.py | 7 +-- meta/lib/oeqa/runtime/cases/systemd.py | 2 +- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/meta/lib/oeqa/runtime/cases/apt.py b/meta/lib

[OE-core] [PATCH 1/3] llvm: remove redundant CMake variables

This recipe uses the cmake class, so there's no need to set the Ninja backend, or tell it where Python is, or that we're cross-compiling. Signed-off-by: Ross Burton --- meta/recipes-devtools/llvm/llvm_git.bb | 3 +-- meta/recipes-devtools/rust/rust-llvm_1.67.1.bb | 2 -- 2 files changed

[OE-core] [PATCH 3/3] webkitgtk: clean up Python variables

The cmake bbclass already sets the path to the correct Python for us, and there appears to be no more scripts in the build which use 'python' explicitly. Signed-off-by: Ross Burton --- meta/recipes-sato/webkit/webkitgtk_2.38.5.bb | 9 - 1 file changed, 9 deletions(-) diff --git a/meta

[OE-core] [PATCH 2/3] libgit2: clean up CMake variables

LIB_INSTALL_DIR was removed in libgit2 1.0 when they moved to using GNUInstallDirs. BUILD_CLAR is now BUILD_TESTS as of libgit2 1.4. Signed-off-by: Ross Burton --- meta/recipes-support/libgit2/libgit2_1.6.3.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/recipes

[OE-core] [PATCH] oeqa/runtime: clean up deprecated backslash expansion

Signed-off-by: Ross Burton --- meta/lib/oeqa/runtime/cases/apt.py | 4 ++-- meta/lib/oeqa/runtime/cases/buildcpio.py | 7 +-- meta/lib/oeqa/runtime/cases/systemd.py | 2 +- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/meta/lib/oeqa/runtime/cases/apt.py b/meta/lib

[OE-core] [PATCH] tzdata: upgrade to 2023c

Drop a backport patch as it is now integrated. Signed-off-by: Ross Burton --- meta/recipes-extended/timezone/timezone.inc | 6 +- .../timezone/tzcode-native.bb | 2 - ...0001-Fix-C23-related-conformance-bug.patch | 301 -- 3 files changed, 3 insertions

[OE-core] [PATCH] go: fix CVE-2023-2453

Backport a security fix, can be removed once we have 1.20.2 onwards. Signed-off-by: Ross Burton --- meta/recipes-devtools/go/go-1.20.1.inc| 1 + .../go/go/CVE-2023-24532.patch| 208 ++ 2 files changed, 209 insertions(+) create mode 100644 meta/recipes

[OE-core] [PATCH] libunwind: fix compile failures on 32-bit arm with Clang 16

Signed-off-by: Ross Burton --- ...-Gtrace-remove-unguarded-print-calls.patch | 52 +++ .../libunwind/libunwind_1.6.2.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta/recipes-support/libunwind/libunwind/0001-src-Gtrace-remove-unguarded-print

Re: [yocto-security] [OE-core] OE-core CVE metrics for master on Sun 26 Mar 2023 02:00:01 AM HST

>> CVE-2023-0330 (CVSS3: 9.8 CRITICAL): qemu:qemu-native:qemu-system-native >> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-0330 * > > Very niche from what I can tell, but the patch on the list is simple, testing > now. Update: there’s an alternative patch series which is likely

Re: [OE-core] OE-core CVE metrics for master on Sun 26 Mar 2023 02:00:01 AM HST

On 26 Mar 2023, at 13:03, Steve Sakoman via lists.openembedded.org wrote: > CVE-2005-1796 (CVSS3: N/A): ncurses:ncurses-native > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1796 * Still waiting for NIST to update the CPE. > CVE-2022-3219 (CVSS3: 5.5 MEDIUM): gnupg:gnupg-native

[OE-core] [PATCH] quilt: fix non-deterministic ownership in ptest package

. [ YOCTO #15062 ] Signed-off-by: Ross Burton --- meta/recipes-devtools/quilt/quilt.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/quilt/quilt.inc b/meta/recipes-devtools/quilt/quilt.inc index 01fc22e9963..c93c38b83ca 100644 --- a/meta/recipes-devtools/quilt/quilt.inc

[OE-core] [PATCH] scripts/lib/buildstats: handle top-level build_stats not being complete

so that the parse succeeds. Signed-off-by: Ross Burton --- scripts/lib/buildstats.py | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/lib/buildstats.py b/scripts/lib/buildstats.py index c9a238bb127..9f8c9061505 100644 --- a/scripts/lib/buildstats.py +++ b/scripts/lib/buildstats.py

Re: [OE-core] [PATCH] scripts: add buildstats-summary

On 21 Mar 2023, at 17:55, Khem Raj wrote: > > This looks useful, I tried it out and it worked in one case but failed in > few others with > > % buildstats-summary build/tmp/buildstats/20230319021406 > Traceback (most recent call last): > File

Re: [OE-core][PATCH 1/2] debugedit: add recipe

On 21 Mar 2023, at 15:40, Chen Qi via lists.openembedded.org wrote: > > This recipe provides find-debuginfo which is used by rpm, more > specifically rpmbuild. > > RPM upstream removed find-debuginfo and switched to use debugedit > in the following commit. > > >

[OE-core] [PATCH] scripts: add buildstats-summary

This script will write a summary of the buildstats to the terminal, sorted by start time or duration, optionally hiding short tasks, and highlighting long running tasks. Signed-off-by: Ross Burton --- scripts/buildstats-summary | 126 + 1 file changed, 126

[OE-core] [PATCH v2 15/17] python3-wcwidth: use python3-unittest-automake-output

Instead of using sed to reformat the output use this new module. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-wcwidth/run-ptest | 2 +- meta/recipes-devtools/python/python3-wcwidth_0.2.6.bb | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/meta

[OE-core] [PATCH v2 16/17] python3-webcolors: use python3-unittest-automake-output

Instead of using sed to reformat the output use this new module. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3-webcolors/run-ptest | 2 +- meta/recipes-devtools/python/python3-webcolors_1.12.bb | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/meta

<    2   3   4   5   6   7   8   9   10   11   >