[OE-core] [PATCH][dunfell 1/3] gstreamer-plugins-good: fix CVE-2021-3497 CVE-2021-3498

2021-06-09 Thread Lee Chee Yang
From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- .../CVE-2021-3497.patch | 207 ++ .../CVE-2021-3498.patch | 44 .../gstreamer1.0-plugins-good_1.16.3.bb | 2 + 3 files changed, 253 insertions(+) create mode 100644

[OE-core] [PATCH][dunfell 3/3] ruby: 2.7.1 -> 2.7.3

2021-06-09 Thread Lee Chee Yang
From: Lee Chee Yang This release includes security fixes. CVE-2021-28965: XML round-trip vulnerability in REXML CVE-2021-28966: Path traversal in Tempfile on Windows CVE-2020-25613 fixed in 2.7.2, do drop the patch release notes for 2.7.2 and 2.7.3

[OE-core] [PATCH][dunfell 2/3] bind: 9.11.22 -> 9.11.32

2021-06-09 Thread Lee Chee Yang
From: Lee Chee Yang updates include fixes for CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 CVE-2020-8625 fixed in 9.11.28, so drop that patch Signed-off-by: Lee Chee Yang tmp Signed-off-by: Lee Chee Yang --- .../bind/bind/CVE-2020-8625.patch | 17 -

[OE-core] [PATCH][hardknott 1/2] python3: 3.9.4 -> 3.9.5

2021-06-09 Thread Lee Chee Yang
From: Lee Chee Yang This fifth maintenance release of Python 3.9 include fix for CVE-2021-29921. Signed-off-by: Lee Chee Yang --- .../python/{python3_3.9.4.bb => python3_3.9.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core] [PATCH 3/3] p11-kit: upgrade 0.23.22 -> 0.23.24

2021-06-09 Thread Andreas Müller
* Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to "blocklist" [#324] * Fix issues spotted by coverity and ASan [#349, #351] * Integrate gettext with tools more tightly [#358] * rpc: Forbid use of array of attributes

[OE-core] [PATCH 2/3] vala: upgrade 0.52.3 -> 0.52.4

2021-06-09 Thread Andreas Müller
Vala 0.52.4 === * Various improvements and bug fixes: - codegen: + GArray, GByteArray and GPtrArray are reference counted + Replace wrongly hard coded usage of G_OBJECT_GET_CLASS + Don't add errornous cast for unknown type_symbol + Mark entry point method implementation

[OE-core] [PATCH 1/3] epiphany: upgrade 40.1 -> 40.2

2021-06-09 Thread Andreas Müller
40.2 - June 4, 2021 === * Fix some memory leaks (from !958) * Fix memory corruption in history dialog (!960) * Fix crash when checking for modified forms (!962) Signed-off-by: Andreas Müller --- .../epiphany/{epiphany_40.1.bb => epiphany_40.2.bb} | 2 +- 1 file

Re: [OE-core] [V2][PATCH] libjpeg-turbo: fix do_compile error on armv5

2021-06-09 Thread William A. Kennington III via lists.openembedded.org
Btw, I'm hoping upstream will fix this for all arm https://github.com/libjpeg-turbo/libjpeg-turbo/issues/523 On Wed, Jun 9, 2021 at 12:32 AM Changqing Li wrote: > > From: Changqing Li > > fix below error: > /include/arm_neon.h:31:2: error: #error "NEON intrinsics not available with > the

[OE-core] [PATCH][hardknott 2/2] bind: 9.16.12 -> 9.16.16

2021-06-09 Thread Lee Chee Yang
From: Lee Chee Yang updates include fix for CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 release notes: https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/html/notes.html#notes-for-bind-9-16-16 Signed-off-by: Lee Chee Yang --- .../0001-avoid-start-failure-with-bind-user.patch

[OE-core] [V2][PATCH] libjpeg-turbo: fix do_compile error on armv5

2021-06-09 Thread Changqing Li
From: Changqing Li fix below error: /include/arm_neon.h:31:2: error: #error "NEON intrinsics not available with the soft-float ABI. Please use -mfloat-abi=softfp or -mfloat-abi=hard" 31 | #error "NEON intrinsics not available with the soft-float ABI. Please use -mfloat-abi=softfp or

[OE-core] [PATCH] systemd: Fix libseccomp testcase involving __NR_ppoll

2021-06-09 Thread Khem Raj
Some architectures may not have this syscall Signed-off-by: Khem Raj --- ...comp-Check-for-__NR_ppoll-before-use.patch | 39 +++ meta/recipes-core/systemd/systemd_248.3.bb| 1 + 2 files changed, 40 insertions(+) create mode 100644

Re: [OE-core] [PATCH 04/10] cmake: update 3.20.2 -> 3.20.3

2021-06-09 Thread Richard Purdie
On Tue, 2021-06-08 at 20:15 +0200, Alexander Kanavin wrote: > I can confirm that the previous kernel behaves correctly: > utimensat_time64(AT_FDCWD, > "../install/usr/local/lib/cmake/assimp-4.1/assimp-config.cmake", > [{tv_sec=1623176017, tv_nsec=6290007298941124608}, {tv_sec=1622966579, >

Re: [OE-core] [PATCH] overlayfs.bbclass: generate overlayfs mount units

2021-06-09 Thread Andrei Gherzan
Hi, On Thu, 3 Jun 2021, at 15:21, Vyacheslav Yurkov wrote: > It's often desired in Embedded System design to have a read-only rootfs. > But a lot of different applications might want to have a read-write access > to some parts of a filesystem. It can be especially useful when your update >

Re: [OE-core] [PATCH 04/10] cmake: update 3.20.2 -> 3.20.3

2021-06-09 Thread Alexander Kanavin
On Wed, 9 Jun 2021 at 13:37, Richard Purdie < richard.pur...@linuxfoundation.org> wrote: > Thanks Michael and Alex. We can therefore pretty safely say that something > was > broken between the 240 and 305 of the centos8 kernel for the 32 bit syscall > utimensat syscalls. > > I did poke around

Re: [OE-core] [oe] Fedora 34, shadow-native/icedtea7-native, umask problems ?

2021-06-09 Thread Jacob Kroon
On 6/2/21 6:01 PM, Jacob Kroon via lists.openembedded.org wrote: On 6/2/21 8:32 AM, Jacob Kroon via lists.openembedded.org wrote: Hi, I'm using Fedora 34 and OE-Core/Bitbake/layers from git master as of today, with reproducible builds. Sometimes when rebuilding my image I see sudden changes

Re: [OE-core] [V2][PATCH] libjpeg-turbo: fix do_compile error on armv5

2021-06-09 Thread Andre McCurdy
On Wed, Jun 9, 2021 at 12:32 AM Changqing Li wrote: > > From: Changqing Li > > fix below error: > /include/arm_neon.h:31:2: error: #error "NEON intrinsics not available with > the soft-float ABI. Please use -mfloat-abi=softfp or -mfloat-abi=hard" > 31 | #error "NEON intrinsics not available

Re: [OE-core] [meta-oe][dunfell][PATCH] opencv: Add fix for CVE-2019-5063 and CVE-2019-5064

2021-06-09 Thread akash hadke
Hi Armin, Any update on this? -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#152819): https://lists.openembedded.org/g/openembedded-core/message/152819 Mute This Topic: https://lists.openembedded.org/mt/83071295/21656 Group Owner:

Re: [OE-core] [PATCH] overlayfs.bbclass: generate overlayfs mount units

2021-06-09 Thread Vyacheslav Yurkov
Hi Andrei, Like you mentioned, it's application specific. The advantage of overlayfs here is that you preserve the data that was changed by user (in case of persistent storage), which of course would hide the data from rootfs, or your just see the defaults from rootfs if the data was not

[OE-core] [PATCH] systemd: install new sysext tool via systemd-extra-utils

2021-06-09 Thread Luca Bocassi
From: Luca Boccassi New standalone (no new dependency) utility added in v248 Signed-off-by: Luca Boccassi --- meta/recipes-core/systemd/systemd_248.3.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/systemd/systemd_248.3.bb b/meta/recipes-core/systemd/systemd_248.3.bb

[OE-core] [PATCH] conf/machine-sdk: Add ppc64 SDK machine

2021-06-09 Thread Marcus Comstedt
Signed-off-by: Marcus Comstedt --- I was able to work around the lack of this file by putting SDKMACHINE = "" SDK_ARCH = "${BUILD_ARCH}" into local.conf, but it seems to me that should not be necessary. Thanks // Marcus meta/conf/machine-sdk/ppc64.conf | 2 ++ 1 file changed, 2

[OE-core] [PATCH 3/3] opkg: add QA check for openssl feed verification

2021-06-09 Thread Alex Stewart
Feed signature checking with OpenSSL will be deprecated in the next release of opkg. Upstream ML Announcement: https://groups.google.com/g/opkg-devel/c/drqw5_HuXuU The opkg-0.4.5 configure.ac already throws a warning when `--enable-openssl` is requested. Add a temporary QA check to the opkg

[OE-core] [PATCH 2/3] opkg: upgrade to version 0.4.5

2021-06-09 Thread Alex Stewart
Drop patches which have been accepted upstream. Signed-off-by: Alex Stewart --- ...e-OS-negotiate-relative-package-dirs.patch | 43 --- .../opkg/opkg/sourcedateepoch.patch | 24 --- .../opkg/{opkg_0.4.4.bb => opkg_0.4.5.bb} | 6 +-- 3 files changed, 2

[OE-core] [PATCH 1/3] opkg-utils: upgrade to version 0.4.5

2021-06-09 Thread Alex Stewart
Signed-off-by: Alex Stewart --- .../opkg-utils/{opkg-utils_0.4.3.bb => opkg-utils_0.4.5.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/opkg-utils/{opkg-utils_0.4.3.bb => opkg-utils_0.4.5.bb} (94%) diff --git

Re: [OE-core] [V2][PATCH] libjpeg-turbo: fix do_compile error on armv5

2021-06-09 Thread Andrea Adami
On Wed, Jun 9, 2021 at 7:30 PM Andre McCurdy wrote: > > On Wed, Jun 9, 2021 at 12:32 AM Changqing Li > wrote: > > > > From: Changqing Li > > > > fix below error: > > /include/arm_neon.h:31:2: error: #error "NEON intrinsics not available with > > the soft-float ABI. Please use

[OE-core] [PATCH] arch-armv4: Allow -march=armv4

2021-06-09 Thread Khem Raj
Even though it is deprecated in GCC 6 [1] it has not yet been removed from gcc upstream. We do have active machines in OE ecosystem which use armv4 ( SA11xx ) e.g. collie in meta-handheld so until upstream gcc takes next step to remove them lets support armv4 again, we are still carrying the