[OE-core] [hardknott][PATCH 4/8] qemu: CVE-2021-3594

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3594.patch | 40 +++ 2 files changed, 41 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3594.patch diff --git a/meta/recipes

[OE-core] [pseudo] pseudo_fix_path: do not expand symlinks in /proc

check the new code path). Checked test output to make sure the new codepath gets executed. - perftest: measured time before and after applying the patch had insignificant differences (roughly ~1%) - world build: completed without warning/errors Signed-off-by: Sakib Sajal

[OE-core] [pseudo] pseudo_fix_path: do not expand symlinks in /proc

the test output to make sure the new codepath gets executed. - perftest: measured time before and after applying the patch had insignificant differences (roughly ~1%) - world build: completed without warning/errors Signed-off-by: Sakib Sajal --- pseudo_util.c | 27

Re: [OE-core] [Dunfell][PATCH 4/4] qemu: fix CVE-2021-3682

Will this fix be cherry-picked for the hardknott branch? I sent a backport for the hardknott branch but it doesn't seem like it was merged. Maybe because the message [1] was empty? [1]

[OE-core] [PATCH] go: upgrade 1.16.7 -> 1.16.8

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/go/{go-1.16.7.inc => go-1.16.8.inc} | 4 ++-- ...{go-binary-native_1.16.7.bb => go-binary-native_1.16.8.bb} | 4 ++-- ...o-cross-canadian_1.16.7.bb => go-cross-canadian_1.16.8.bb} | 0 .../go/{go-cross_1.16.7.bb => go-cro

[OE-core] [PATCH] buildstats.bbclass: collect host data only when do_testimage fails

Signed-off-by: Sakib Sajal --- meta/classes/buildstats.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/buildstats.bbclass b/meta/classes/buildstats.bbclass index 0de605200a..874d30b292 100644 --- a/meta/classes/buildstats.bbclass +++ b/meta/classes

Re: [OE-core] [PATCH] go: upgrade to 1.17 release

Testing done: bitbake -k world bitbake core-image-full-cmdline && bitbake core-image-full-cmdline -c testimage Result: World build passes without warnings/errors. All image tests passed Sakib On 2021-08-25 1:20 p.m., Sakib Sajal wrote: go 1.17 includes small enhancements to the

[OE-core] [PATCH] go: upgrade to 1.17 release

go 1.17 includes small enhancements to the language. Release notes: https://golang.org/doc/go1.17 Signed-off-by: Sakib Sajal --- meta/conf/distro/include/tcmode-default.inc | 2 +- .../go/{go-1.16.5.inc => go-1.17.inc} | 6 +- ...ow-CC-and-CXX-to-have-multiple-words.patch |

Re: [OE-core] [hardknott][PATCH] go: upgrade 1.16.5 -> 1.16.7

on master branch to 1.17 though. Alex On Fri, 20 Aug 2021 at 17:39, Sakib Sajal <mailto:sakib.sa...@windriver.com>> wrote: Signed-off-by: Sakib Sajal mailto:sakib.sa...@windriver.com>> ---  meta/recipes-devtools/go/{go-1.16.5.inc => go-1.16.7.inc}     | 4 ++--

[OE-core] [hardknott][PATCH] go: upgrade 1.16.5 -> 1.16.7

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/go/{go-1.16.5.inc => go-1.16.7.inc} | 4 ++-- ...{go-binary-native_1.16.5.bb => go-binary-native_1.16.7.bb} | 4 ++-- ...o-cross-canadian_1.16.5.bb => go-cross-canadian_1.16.7.bb} | 0 .../go/{go-cross_1.16.5.bb => go-cro

Re: [OE-core] [PATCH] glibc: update to HEAD of release/2.34/master branch

On 2021-08-18 7:51 p.m., Randy MacLeod wrote: On 2021-08-18 7:05 p.m., Sakib Sajal wrote: Update glibc to head of release/2.34/master branch to to include fixes, includes fix for CVE-2021-38604: Changelog: glibc.git$ git log --oneline ae37d06c7d127817ba43850f0f898b793d42aea7... 7c987a5ccb

[OE-core] [PATCH] glibc: update to HEAD of release/2.34/master branch

3a48da47a9 gconv_parseconfdir: Fix memory leak 0b03996304 ldconfig: avoid leak on empty paths in config file Signed-off-by: Sakib Sajal --- meta/recipes-core/glibc/glibc-version.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta

[OE-core] update glibc to HEAD of release/2.34/master to include fix for CVE-2021-38604?

nfdir: Fix memory leak 0b03996304 ldconfig: avoid leak on empty paths in config file Sakib Sajal -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#154950): https://lists.openembedded.org/g/openembedded-core/message/154950 Mute This To

[OE-core] [hardknott][PATCH] qemu: fix CVE-2021-3682

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3682.patch | 41 +++ 2 files changed, 42 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3682.patch diff --git a/meta/recipes

[OE-core] [PATCH] qemu: fix CVE-2021-3682

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3682.patch | 41 +++ 2 files changed, 42 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3682.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 1/5] qemu: fix CVE-2021-3527

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 2 + .../qemu/qemu/CVE-2021-3527_1.patch | 57 +++ .../qemu/qemu/CVE-2021-3527_2.patch | 40 + 3 files changed, 99 insertions(+) create mode 100644 meta/recipes

[OE-core] [hardknott][PATCH 2/5] qemu: fix CVE-2021-3544, CVE-2021-3545, CVE-2021-3546

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 7 +++ .../qemu/qemu/CVE-2021-3544_1.patch | 43 ++ .../qemu/qemu/CVE-2021-3544_2.patch | 41 + .../qemu/qemu/CVE-2021-3544_3.patch | 48 +++ .../qemu

[OE-core] [hardknott][PATCH 5/5] qemu: fix CVE-2021-3608

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3608.patch | 43 +++ 2 files changed, 44 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3608.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 3/5] qemu: fix CVE-2021-3582

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3582.patch | 47 +++ 2 files changed, 48 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3582.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 4/5] qemu: fix CVE-2021-3607

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3607.patch | 43 +++ 2 files changed, 44 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3607.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH] go: fix CVE-2020-29509, CVE-2020-29511

Backport patch to fix CVE-2020-29509, CVE-2020-29511 Signed-off-by: Sakib Sajal --- meta/recipes-devtools/go/go-1.16.5.inc| 1 + ...dle-leading-trailing-or-double-colon.patch | 123 ++ 2 files changed, 124 insertions(+) create mode 100644 meta/recipes-devtools/go/go

[OE-core] [PATCH] scripts/oe-time-dd-test.sh: run "uptime" on each iteration

Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh index df36c0b297..386de83dce 100755 --- a/scripts/oe-time-dd-test.sh +++ b/scripts/oe-time-dd-test.sh @@ -25,7

[OE-core] [PATCH 2/2] oe-time-dd-test.sh: add options and refactor

without performing the data transfer. -h | --help show help Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 95 -- 1 file changed, 80 insertions(+), 15 deletions(-) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd

[OE-core] [PATCH 1/2] buildstats.bbclass: log host data on failure to task specific file

/parse. Signed-off-by: Sakib Sajal --- meta/classes/buildstats.bbclass | 44 +++-- 1 file changed, 26 insertions(+), 18 deletions(-) diff --git a/meta/classes/buildstats.bbclass b/meta/classes/buildstats.bbclass index 8a1466d3fec..0de605200a8 100644 --- a/meta/classes

[OE-core] [PATCH] oe-time-dd-test.sh: add iostat command

Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh index 103eee5f65..ccdd55e66e 100755 --- a/scripts/oe-time-dd-test.sh +++ b/scripts/oe-time-dd-test.sh

[OE-core] [PATCH] oe-time-dd-test.sh: improve output formatting

Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh index 46b218b76a..103eee5f65 100755 --- a/scripts/oe-time-dd-test.sh +++ b/scripts/oe-time-dd-test.sh @@ -24,6 +24,9 @@ uptime

[OE-core] [PATCH] oeqa/core/target/qemu.py: display contents of dumped files

context for the target not being started up. Signed-off-by: Sakib Sajal --- meta/lib/oeqa/core/target/qemu.py | 27 ++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/meta/lib/oeqa/core/target/qemu.py b/meta/lib/oeqa/core/target/qemu.py index 4a5df4a9a8

[OE-core] [hardknott][PATCH] qemu: Exclude CVE-2020-3550[4/5/6] from cve-check

CVE's affect ESP (NCR53C90) part of chip STP2000 (Master I/O). On Sparc32 it is the NCR89C100 part of the chip. On Macintosh Quadra it is NCR53C96. Both are not supported by yocto. Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 9 + 1 file changed, 9 insertions

[OE-core] [PATCH 1/2] qemu: fix CVE-2020-27821

memory: clamp cached translation in case it points to an MMIO region Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-27821.patch| 143 ++ 2 files changed, 144 insertions(+) create mode 100644 meta/recipes

[OE-core] [PATCH 2/2] qemu: fix CVE-2021-20263

virtiofs: drop remapped security.capability xattr as needed Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20263.patch| 214 ++ 2 files changed, 215 insertions(+) create mode 100644 meta/recipes-devtools

[OE-core] [PATCH] buildstats.bbclass: collect data in the same file.

ilure. The variables are BB_LOG_HOST_STAT_CMDS_INTERVAL and BB_LOG_HOST_STAT_CMDS_FAILURE respecteviely. Signed-off-by: Sakib Sajal --- meta/classes/buildstats.bbclass | 32 1 file changed, 20 insertions(+), 12 deletions(-) diff --git a/meta/classes/buildstats.bb

[OE-core] [PATCH v2] oe-time-dd-test.sh: collect cooker log when timeout is exceeded

Collect the last 30 lines from the cooker.log whenever the timeout is exceeded. Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh index 459071e732..46b218b76a 100755 --- a/scripts

[OE-core] [hardknott][PATCH 6/6] qemu: fix CVE-2021-20257

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20257.patch| 55 +++ 2 files changed, 56 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20257.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 2/6] qemu: fix CVE-2020-29443

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-29443.patch| 107 ++ 2 files changed, 108 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-29443.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 3/6] qemu: fix CVE-2021-20221

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20221.patch| 70 +++ 2 files changed, 71 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20221.patch diff --git a/meta/recipes

[OE-core] [hardknott][PATCH 5/6] qemu: fix CVE-2021-3416

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 10 + .../qemu/qemu/CVE-2021-3416_1.patch | 177 ++ .../qemu/qemu/CVE-2021-3416_10.patch | 44 + .../qemu/qemu/CVE-2021-3416_2.patch | 42 + .../qemu/qemu/CVE

[OE-core] [hardknott][PATCH 4/6] qemu: fix CVE-2021-3409

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 6 + .../qemu/qemu/CVE-2021-3409_1.patch | 56 + .../qemu/qemu/CVE-2021-3409_2.patch | 92 +++ .../qemu/qemu/CVE-2021-3409_3.patch | 109

[OE-core] [hardknott][PATCH 1/6] qemu: fix CVE-2021-20181

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20181.patch| 81 +++ 2 files changed, 82 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20181.patch diff --git a/meta/recipes

[OE-core] [PATCH 1/6] qemu: fix CVE-2021-20181

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20181.patch| 81 +++ 2 files changed, 82 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20181.patch diff --git a/meta/recipes

[OE-core] [PATCH 2/6] qemu: fix CVE-2020-29443

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-29443.patch| 107 ++ 2 files changed, 108 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-29443.patch diff --git a/meta/recipes

[OE-core] [PATCH 3/6] qemu: fix CVE-2021-20221

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20221.patch| 70 +++ 2 files changed, 71 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20221.patch diff --git a/meta/recipes

[OE-core] [PATCH 4/6] qemu: fix CVE-2021-3409

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 6 + .../qemu/qemu/CVE-2021-3409_1.patch | 56 + .../qemu/qemu/CVE-2021-3409_2.patch | 92 +++ .../qemu/qemu/CVE-2021-3409_3.patch | 109

[OE-core] [PATCH 6/6] qemu: fix CVE-2021-20257

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-20257.patch| 55 +++ 2 files changed, 56 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20257.patch diff --git a/meta/recipes

[OE-core] [PATCH 5/6] qemu: fix CVE-2021-3416

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 10 + .../qemu/qemu/CVE-2021-3416_1.patch | 177 ++ .../qemu/qemu/CVE-2021-3416_10.patch | 44 + .../qemu/qemu/CVE-2021-3416_2.patch | 42 + .../qemu/qemu/CVE

[OE-core] [PATCH] oe-time-dd-test.sh: collect cooker log when timeout is exceeded

Collect the last 30 lines from the cooker.log whenever the timeout is exceeded. Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh index 459071e732..2c74b49b3f 100755 --- a/scripts

Re: [OE-core] [PATCH] linux-yocto[-rt]_5.4: remove feature/gpio/mockup.scc

On 2021-04-06 7:36 p.m., Bruce Ashfield wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] On Mon, Apr 5, 2021 at 3:08 PM Sakib Sajal wrote: mockup.scc is not supported in 5.4 kernel Can you elaborate ? Are you seeing build issues ? Something else ? The Kconfig options

[OE-core] [PATCH 2/2] oe-time-dd-test.sh: provide more information from "top"

Improvements: - increase width to 512 - pass -c option to show full command-line Signed-off-by: Sakib Sajal Signed-off-by: Randy MacLeod --- scripts/oe-time-dd-test.sh | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe

[OE-core] [PATCH 1/2] oe-time-dd-test.sh: make executable

Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100644 => 100755 scripts/oe-time-dd-test.sh diff --git a/scripts/oe-time-dd-test.sh b/scripts/oe-time-dd-test.sh old mode 100644 new mode 100755 -- 2.2

[OE-core] [PATCH] linux-yocto-dev: add features/gpio/mockup.scc to KERNEL_FEATURES

add features/gpio/mockup.scc to KERNEL_FEATURES when ptest is enabled as it is required for testing libgpiod. Signed-off-by: Sakib Sajal --- meta/recipes-kernel/linux/linux-yocto-dev.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-kernel/linux/linux-yocto-dev.bb b/meta

[OE-core] [PATCH] linux-yocto[-rt]_5.4: remove feature/gpio/mockup.scc

mockup.scc is not supported in 5.4 kernel Signed-off-by: Sakib Sajal --- meta/recipes-kernel/linux/linux-yocto-rt_5.4.bb | 1 - meta/recipes-kernel/linux/linux-yocto_5.4.bb| 1 - 2 files changed, 2 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.4.bb b/meta/recipes

Re: [OE-core] Autobuilder data collection for intermittent bugs

On 2021-03-26 1:50 p.m., Richard Purdie wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] On Thu, 2021-03-25 at 20:00 -0400, Randy MacLeod wrote: Thanks for the update Sakib. We're planning to follow Steve's example of getting commit access to contrib branches of y-a-h and

[OE-core] Autobuilder data collection for intermittent bugs

ilds seems to have been altered. I am wondering if the changes that I've made are even being picked up by the controller. Am I missing something? Is there an easier way to update the conf files? Initially I'd like collect data on a single node and scale it to all the nodes. Any ideas/suggesti

[OE-core] [PATCH] scripts: add oe-time-dd-test.sh

is to find which part of the build system puts stress on the filesystem io and log all the processes. Signed-off-by: Sakib Sajal --- scripts/oe-time-dd-test.sh | 23 +++ 1 file changed, 23 insertions(+) create mode 100644 scripts/oe-time-dd-test.sh diff --git a/scripts/oe-time-dd

[OE-core] [PATCH] oe-timeout-dd-test.sh: make script executable

Signed-off-by: Sakib Sajal --- scripts/oe-timeout-dd-test.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100644 => 100755 scripts/oe-timeout-dd-test.sh diff --git a/scripts/oe-timeout-dd-test.sh b/scripts/oe-timeout-dd-test.sh old mode 100644 new mode 100755 -- 2.2

[OE-core] [PATCH] buildstats.bbclass: improve timeout handling

The subprocess that runs the commands periodically times out prematurely even when there is sufficient time available within the given interval for the commands to run. This change improves timeout handling and give all the commands equal time to run. Signed-off-by: Sakib Sajal --- meta

Re: [OE-core] [PATCH] scripts/oe-timeout-dd-test.sh: add script

On 2021-03-08 12:33 p.m., Richard Purdie wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] On Mon, 2021-03-08 at 09:50 -0500, Randy MacLeod wrote: On 2021-03-07 3:58 p.m., Sakib Sajal wrote: +timeout $1 dd if=/dev/zero of=/tmp/foo bs=1024 count=$2 >/dev/null 2

[OE-core] [PATCH] scripts/oe-timeout-dd-test.sh: add script

= "" BB_LOG_HOST_STAT_ON_INTERVAL = "1" BB_LOG_HOST_STAT_CMDS = "oe-timeout-dd-test.sh " Log can be found at: $TMPDIR/buildstats//host_stats file. Signed-off-by: Sakib Sajal --- scripts/oe-timeout-dd-test.sh | 26 ++ 1 file changed, 26 insertions(

[OE-core] [PATCH] linux-yocto*: add features/gpio/mockup.scc to KERNEL_FEATURES

add features/gpio/mockup.scc to KERNEL_FEATURES when ptest is enabled as it is required for testing libgpiod. Signed-off-by: Sakib Sajal --- meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb | 1 + meta/recipes-kernel/linux/linux-yocto-rt_5.4.bb | 1 + meta/recipes-kernel/linux/linux-yocto_5.10

Re: [OE-core] OE-core CVE metrics for dunfell on Sun 08 Nov 2020 07:30:01 AM HST

On 2020-11-09 2:57 p.m., Steve Sakoman wrote: [Please note this e-mail is from an EXTERNAL e-mail address] On Mon, Nov 9, 2020 at 8:36 AM Sakib Sajal wrote: On 2020-11-08 12:34 p.m., Steve Sakoman wrote: [Please note this e-mail is from an EXTERNAL e-mail address] Branch: dunfell New

[OE-core] [PATCH v2] buildstats.bbclass: add functionality to collect build system stats

uild_stats The list of commands, along with the desired options, need to be specified in the BB_LOG_HOST_STAT_CMDS variable delimited by ; as such: BB_LOG_HOST_STAT_CMDS = "command1 ; command2 ;... ;" Signed-off-by: Sakib Sajal --- meta/classes/buildstats.bbclass | 40 +++

[OE-core] [meta-oe][PATCH v2] buildstats.bbclass: add functionality to collect build system stats

uild_stats The list of commands, along with the desired options, need to be specified in the BB_LOG_HOST_STAT_CMDS variable delimited by ; as such: BB_LOG_HOST_STAT_CMDS = "command1 ; command2 ;... ;" Signed-off-by: Sakib Sajal --- meta/classes/buildstats.bbclass | 40 +++

Re: [OE-core] OE-core CVE metrics for dunfell on Sun 08 Nov 2020 07:30:01 AM HST

On 2020-11-08 12:34 p.m., Steve Sakoman wrote: [Please note this e-mail is from an EXTERNAL e-mail address] Branch: dunfell New this week: CVE-2020-27619: python3-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27619 * Removed this week: CVE-2019-20175: qemu

[OE-core] [PATCH] pseudo: do not expand symlinks in /proc

patch, without significant measurable difference. $ bitbake -c compile ; time bitbake installed pseudo on an image and was unable to reproduce the test on bug report after applying the patch. FIXES: Bug 13288 Signed-off-by: Sakib Sajal --- pseudo_util.c | 27 +++ 1

[OE-core] [PATCH] qemu: fix CVE-2020-14364

Upstream-Status: Backport [b946434f2659a182afc17e155be6791ebfb302eb] Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + ...sb-fix-setup_len-init-CVE-2020-14364.patch | 88 +++ 2 files changed, 89 insertions(+) create mode 100644 meta/recipes

[OE-core] [meta-webserver][PATCH] apache2: upgrade v2.4.43 -> v2.4.46

Minor upgrade inluding bug and CVE fixes, namely: - CVE-2020-9490 - CVE-2020-11984 - CVE-2020-11993 Signed-off-by: Sakib Sajal --- .../apache2/{apache2_2.4.43.bb => apache2_2.4.46.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-webserver/recipes-ht

[OE-core] [dunfell][PATCH v2] busybox: make hwclock compatible with glibc 2.31

settimeofday(2) has been deprecated as of glibc 2.31 which hwclock makes use of. This patch makes hwclock compatible with glibc v2.31 See patch for more details: busybox/0001-hwclock-make-glibc-2.31-compatible.patch Fixes [YOCTO #13981] Signed-off-by: Sakib Sajal --- v2 changes: rebased

Re: [OE-core] [dunfell][PATCH] busybox: make hwclock compatible with glibc 2.31

On 2020-07-21 3:01 p.m., Khem Raj wrote: On 7/21/20 11:54 AM, Sakib Sajal wrote: On 2020-07-21 2:11 p.m., Randy MacLeod wrote: Hi Sakib, Did you check this busybox fix against musl? I forgot to ask you this when you showed me this patch yesterday. Randy Yes, I built core-image

Re: [OE-core] [dunfell][PATCH] busybox: make hwclock compatible with glibc 2.31

On 2020-07-21 2:11 p.m., Randy MacLeod wrote: Hi Sakib, Did you check this busybox fix against musl? I forgot to ask you this when you showed me this patch yesterday. Randy Yes, I built core-image-minimal with musl and everything was fine. Sakib On Tue., Jul. 21, 2020, 14:01 Sakib Sajal

[OE-core] [dunfell][PATCH] busybox: make hwclock compatible with glibc 2.31

settimeofday(2) has been deprecated as of glibc 2.31 which hwclock makes use of. This patch makes hwclock compatible with glibc v2.31 See patch for more details: busybox/0001-hwclock-make-glibc-2.31-compatible.patch Fixes [YOCTO #13981] Signed-off-by: Sakib Sajal --- ...1-hwclock-make-glibc

[OE-core] [PATCH] busybox: make hwclock compatible with glibc 2.31

settimeofday(2) has been deprecated as of glibc 2.31 which hwclock makes use of. This patch makes hwclock compatible with glibc v2.31 See patch for more details: busybox/0001-hwclock-make-glibc-2.31-compatible.patch Fixes [YOCTO #13981] Signed-off-by: Sakib Sajal --- ...1-hwclock-make-glibc

[OE-core] [PATCH 2/4] qemu: fix CVE-2020-13659

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-13659.patch| 58 +++ 2 files changed, 59 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-13659.patch diff --git a/meta/recipes

[OE-core] [PATCH 3/4] qemu: fix CVE-2020-13800

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-13800.patch| 63 +++ 2 files changed, 64 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-13800.patch diff --git a/meta/recipes

[OE-core] [PATCH 1/4] qemu: fix CVE-2020-13362

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-13362.patch| 55 +++ 2 files changed, 56 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-13362.patch diff --git a/meta/recipes

[OE-core] [PATCH 4/4] qemu: fix CVE-2020-13791

Signed-off-by: Sakib Sajal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2020-13791.patch| 53 +++ 2 files changed, 54 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-13791.patch diff --git a/meta/recipes

Re: [OE-core][PATCH V2] qemu: uprev v4.2.0 -> v5.0.0

On 2020-06-22 5:00 p.m., Richard Purdie wrote: On Mon, 2020-06-22 at 18:36 +0100, Richard Purdie via lists.openembedded.org wrote: On Fri, 2020-06-19 at 14:12 -0400, Sakib Sajal wrote: Major update after v4.2. Changes: - os_find_datadir() was changed after the v4.2 release causing

[OE-core][PATCH V2] qemu: uprev v4.2.0 -> v5.0.0

nf/machine and succesfully booted with qemu v5.0 Ran qemu-ptest on x86-64 and arm64 with identical results: PASS: 1166 SKIP:0 FAIL:0 Signed-off-by: Sakib Sajal Signed-off-by: Joe Slater --- V2 changes: -show-cursor qemu option is now deprecated, updated scripts/runqemu to use upda

Re: [OE-core] [PATCH] qemu: uprev v4.2.0 -> v5.0.0

On 2020-06-19 11:59 a.m., Alexander Kanavin wrote: On Fri, 19 Jun 2020 at 16:59, Sakib Sajal wrote: Ran qemu-ptest on x86-64 and arm64 with identical results: PASS: 1166 SKIP:0 FAIL:0 Please add qemu-ptest to conf/distro/include/ptest-packagelists.inc if it is now passing

[OE-core] [PATCH] qemu: uprev v4.2.0 -> v5.0.0

on x86-64 and arm64 with identical results: PASS: 1166 SKIP:0 FAIL: 0 Signed-off-by: Sakib Sajal Signed-off-by: Joe Slater --- meta/classes/qemuboot.bbclass | 2 +- meta/conf/distro/include/tcmode-default.inc | 2 +- meta/conf/machine/include/qemuboot-mips.inc | 2 +

[OE-core] [PATCH] git: uprev v2.24.1 -> v2.26.2

Fixes CVE-2020-11008 https://github.com/git/git/commit/af6b65d45ef179ed52087e80cb089f6b2349f4ec Signed-off-by: Sakib Sajal --- meta/recipes-devtools/git/git_2.24.1.bb | 11 --- meta/recipes-devtools/git/git_2.26.2.bb | 18 ++ 2 files changed, 18 insertions(+), 11

[OE-core] [PATCH] sqlite: backport CVE fixes

Fixes CVE-2020-11655 and CVE-2020-11656 Signed-off-by: Sakib Sajal --- .../sqlite/files/CVE-2020-11655.patch | 32 + .../sqlite/files/CVE-2020-11656.patch | 70 +++ meta/recipes-support/sqlite/sqlite3_3.31.1.bb | 2 + 3 files changed, 104 insertions

[OE-core] [PATCH] u-boot: cmd/gpt.c: fix memory leak

Fixes CVE-2020-8432, a double free introduced by commit 18030d04d25d7c08d3deff85881772a520d84d49 CVE: CVE-2020-8432 Signed-off-by: Sakib Sajal --- meta/recipes-bsp/u-boot/u-boot-common.inc | 1 + ...error-cases-during-gpt-rename-more-c.patch | 116 ++ 2 files changed, 117

[OE-core] [PATCH] u-boot: Fix CVE-2020-8432

Fix a double free in cmd/gpt.c, function do_rename_gpt_parts(). CVE: CVE-2020-8432 Signed-off-by: Sakib Sajal --- meta/recipes-bsp/u-boot/u-boot-common.inc | 1 + ...error-cases-during-gpt-rename-more-c.patch | 116 ++ 2 files changed, 117 insertions(+) create mode

Re: [OE-core] [PATCH] libpng: Fix CVE-2019-6129

: Fix CVE-2019-6129 Hi, Is this v2? Should say so in the subject. Also, should mention the changes from v1 under the commit log. On Mon, Mar 23, 2020 at 02:28:23PM -0700, Sakib Sajal wrote: > Fix memory leak in png_create_info_struct. > > Upstream-Status: Submitted [https://github.co

[OE-core] [PATCH v3] libpng: Fix CVE-2019-6129

Fix memory leak in png_create_info_struct. Upstream-Status: Submitted [https://github.com/glennrp/libpng/pull/293] CVE: CVE-2019-6129 Signed-off-by: Sakib Sajal --- .../libpng/0001-Repair-of-CVE-2019-6129.patch | 28 +++ .../libpng/libpng_1.6.37.bb | 5

[OE-core] [PATCH] libpng: Fix CVE-2019-6129

Fix memory leak in png_create_info_struct. Upstream-Status: Submitted [https://github.com/glennrp/libpng/pull/293] CVE: CVE-2019-6129 Signed-off-by: Sakib Sajal --- .../libpng/0001-Repair-of-CVE-2019-6129.patch | 27 +++ .../libpng/libpng_1.6.37.bb | 5

[OE-core] [PATCH] libpng: Fix CVE-2019-6129

Fix of memory leak in png_create_info_struct. Upstream-Status: Submitted [https://github.com/glennrp/libpng/pull/293] CVE: CVE-2019-6129 Signed-off-by: Sakib Sajal --- .../libpng/0001-Repair-of-CVE-2019-6129.patch | 25 +++ .../libpng/libpng_1.6.37.bb | 5

[OE-core] [meta-oe][PATCH] openjpeg: Fix CVE-2020-6851

From: Yue Tao Backport patch from upstream to fix heap-based buffer overflow Signed-off-by: Yue Tao Signed-off-by: Sakib Sajal --- .../openjpeg/openjpeg/CVE-2020-6851.patch | 32 +++ .../openjpeg/openjpeg_2.3.1.bb| 1 + 2 files changed, 33 insertions

[OE-core] [PATCH] libical: fix host contamination in -dev pkg

[YOCTO #13512] Signed-off-by: Sakib Sajal --- meta/recipes-support/libical/libical_3.0.7.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/libical/libical_3.0.7.bb b/meta/recipes-support/libical/libical_3.0.7.bb index ac9c114691..a50473e9ec 100644 --- a/meta/recipes

[OE-core] [meta-oe][PATCH 2/2] bash: inherit useradd and remove redundant patch

: execscript test read trap Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- meta/recipes-extended/bash/bash.inc | 2 +- ...un-heredoc-run-execscript-run-test-f.patch | 45 --- meta/recipes-extended/bash/bash_5.0.bb

[OE-core] [meta-oe][PATCH 1/2] ptest-runner: update SRCREV to latest HEAD on ptest-runner2 repo

63d097c Add SPDX-License-Identifier: GPL-2.0-or-later in source files (HEAD) fb93c99 utils.c: close all file descriptors after completing a ptest Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- meta/recipes-support/ptest-runner/ptest-runner_2.3.1.bb | 2 +- 1 file changed, 1

[OE-core] [PATCH 3/3] bash: run bash ptest as non-root user

e bash/ptest/tests directory is owned by the bash_user while the tests are being run and return it to root owner afterwards. Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- meta/recipes-extended/bash/bash/run-ptest | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/met

[OE-core] [PATCH 2/3] ptest-runner: close all fds in child process.

am-Status: Submitted [yo...@yoctoproject.org] Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- ...l-file-descriptors-after-completing-.patch | 69 +++ .../ptest-runner/ptest-runner_2.3.1.bb| 4 +- 2 files changed, 72 insertions(+), 1 deletion(-) create mode 100

[OE-core] [PATCH 1/3] bash: add big5hkscs gconv RDEPENDS needed by bash-ptest.

glob-test failed beacuse it could not convert big5hkscs encoding to perform comparison. Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- meta/recipes-extended/bash/bash.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-extended/bash/bash.inc b/meta/recipes

[OE-core] [PATCH 2/2] Bash: Allow new-exp ptest to pass when run as root.

The ptest was failing as it was expecting non-root user. Ptests are only run as root. Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- ...llow-ptest-new-exp-to-be-run-as-root.patch | 45 +++ meta/recipes-extended/bash/bash_5.0.bb| 1 + 2 files changed, 46

[OE-core] [PATCH 1/2] bash: add iso8859-1 gconv RDEPENDS needed by bash-ptest.

orm comparison. Signed-off-by: Sakib Sajal Signed-off-by: Randy Macleod --- meta/recipes-extended/bash/bash.inc | 11 +-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/meta/recipes-extended/bash/bash.inc b/meta/recipes-extended/bash/bash.inc index 4b3692c613..1e4dc

<    1   2