Re: [OE-core] [PATCH v1] meson: make wrapper options sub-command specific

2022-09-20 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 17/09/2022 18:07:35-0400, Liam Beguin wrote: > The meson-wrapper adds setup options to facilitate cross-compilation. > The current options are exclusive to the setup sub-command and might > cause issues with other sub-commands. > > Update the wrapper to make options sub-command

Re: [OE-core] [PATCH] gcompat: Add __getauxval wrapper needed on aarch64

2022-09-20 Thread Khem Raj
On 9/20/22 5:39 AM, Richard Purdie wrote: On Sat, 2022-09-17 at 14:13 -0700, Khem Raj wrote: Update SRCREV to bring in few bug fixes Install a .so symlink which could be used during linking Signed-off-by: Khem Raj --- .../musl/gcompat/0001-auxv-new-module.patch | 59 +++

[OE-core] [PATCH] linux-yocto/5.19: cfg: fix ACPI warnings for -tiny

2022-09-20 Thread Bruce Ashfield
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: acpi: fix defaults for x86 and qemuarm64 commit d334505d98a85ffe7549026d10e43cccd897e19c [efi.cfg: Drop ACPI dependency] is generating configuration warnings on both qemuarm64 and x86 for the poky-tiny

[OE-core] [PATCH v2] gcompat: Add __getauxval wrapper needed on aarch64

2022-09-20 Thread Khem Raj
Update SRCREV to bring in few bug fixes Install a .so symlink which could be used during linking Signed-off-by: Khem Raj --- v2: Symlink should point to base_libdir not libdir .../musl/gcompat/0001-auxv-new-module.patch | 59 +++ meta/recipes-core/musl/gcompat_git.bb

Re: [OE-core] [yocto] QA notification for completed autobuilder build (yocto-4.0.4.rc1)

2022-09-20 Thread Jing Hui Tham
Hi all, Intel and WR YP QA is planning for QA execution for YP build yocto-4.0.4.rc1. We are planning to execute following tests for this cycle: OEQA-manual tests for following module: 1. OE-Core 2. BSP-hw Runtime auto test for following platforms: 1. MinnowTurbot 32-bit 2. NUC 7 3. NUC 6

Re: [OE-core] [PATCH 2/2] perf: Fix for recent kernel upgrades

2022-09-20 Thread Bruce Ashfield
On Tue, Sep 20, 2022 at 6:12 PM Richard Purdie wrote: > > With recent kernel changes in stable, the full path to python was being > encoded into binaries and python install files. Add some workarounds > for both issues to fix build reproducibility issues. Ack'd. Looks good to me. I was looking

Re: [OE-core] PR to fix WantedBy parsing of systemctl

2022-09-20 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 20/09/2022 17:55:42+, Robert Henz via lists.openembedded.org wrote: > Hi everyone, > > I have a PR to fix the WantedBy parsing of the systemctl script. I > tried to follow the process described in your wiki >

[OE-core] [PATCH 2/2] perf: Fix for recent kernel upgrades

2022-09-20 Thread Richard Purdie
With recent kernel changes in stable, the full path to python was being encoded into binaries and python install files. Add some workarounds for both issues to fix build reproducibility issues. Signed-off-by: Richard Purdie --- meta/recipes-kernel/perf/perf.bb | 6 ++ 1 file changed, 6

[OE-core] [PATCH 1/2 v2] rpm: Upgrade 4.17.1 -> 4.18rc1

2022-09-20 Thread Richard Purdie
rpm is close to release and give our release timings, update to the rc1 of 4.18. Includes fixes for CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 which can't be easily backported. Add a PACKAGECONFIG option for a new readline dependency and disable it by default since it pulls in GPLv3 and

[OE-core][dunfell 2/6] sqlite3: Fix CVE-2020-35527

2022-09-20 Thread Steve Sakoman
From: Virendra Thakur Add patch file to fix CVE-2020-35527 Reference: http://security.debian.org/debian-security/pool/updates/main/s/sqlite3/sqlite3_3.27.2-3+deb10u2.debian.tar.xz Signed-off-by: Virendra Thakur Signed-off-by: Steve Sakoman --- .../sqlite/files/CVE-2020-35527.patch |

[OE-core][dunfell 3/6] connman: CVE-2022-32293 man-in-the-middle attack against a WISPR HTTP

2022-09-20 Thread Steve Sakoman
From: Hitendra Prajapati Source: https://git.kernel.org/pub/scm/network/connman/connman.git/ MR: 120508 Type: Security Fix Disposition: Backport from https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=72343929836de80727a27d6744c869dff045757c &&

[OE-core][dunfell 4/6] qemu: fix and ignore several CVEs

2022-09-20 Thread Steve Sakoman
From: Chee Yang Lee backport fixes: CVE-2020-13754, backport patches as debian security tracker notes https://security-tracker.debian.org/tracker/CVE-2020-13754 CVE-2021-3713 CVE-2021-3748 CVE-2021-3930 CVE-2021-4206 CVE-2021-4207 CVE-2022-0216, does not include qtest in patches, the qtest

[OE-core][dunfell 5/6] qemu: Define libnfs PACKAGECONFIG

2022-09-20 Thread Steve Sakoman
From: Andrei Gherzan The upstream qemu recipe uses host's pkg-config files as a solution to detecting host's SDL. This has a side effect of using other host libraries that are later queried by the configure script. This can get into a situation when the host provides libnfs (for example) and

[OE-core][dunfell 0/6] Patch review

2022-09-20 Thread Steve Sakoman
Please review this set of patches for dunfell and have comments back by end of day Thursday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4245 The following changes since commit 46ba253059738dbd4de4bc7a7ac02a2585c498f5: vim: Upgrade 9.0.0341

[OE-core][dunfell 1/6] sqlite3: Fix CVE-2020-35525

2022-09-20 Thread Steve Sakoman
From: Virendra Thakur Add patch to fix CVE-2020-35525 Reference: http://security.debian.org/debian-security/pool/updates/main/s/sqlite3/sqlite3_3.27.2-3+deb10u2.debian.tar.xz Signed-off-by: Virendra Thakur Signed-off-by: Steve Sakoman --- .../sqlite/files/CVE-2020-35525.patch | 21

[OE-core][dunfell 6/6] qemu: Add PACKAGECONFIG for brlapi

2022-09-20 Thread Steve Sakoman
From: Richard Purdie Signed-off-by: Richard Purdie (cherry picked from commit 482471a617e5f682416b7ec1a920dfaeac65f1a3) Signed-off-by: Steve Sakoman --- meta/recipes-devtools/qemu/qemu.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc

Re: [OE-core] [kirkstone][PATCH] expat: CVE-2022-40674

2022-09-20 Thread Florin Diaconescu
Just saw the new release, I will submit another patch with the 2.4.9 upgrade. Thanks for letting me know! Florin On Tue, Sep 20, 2022 at 6:57 PM Alex Kiernan wrote: > 2.4.9 looks to have landed w/ this change in it. > > On Tue, Sep 20, 2022 at 12:09 PM Florin Diaconescu > wrote: > > > >

Re: [OE-core] [PATCH 1/2 v2] rpm: Upgrade 4.17.1 -> 4.18rc1

2022-09-20 Thread Alexander Kanavin
Is it possible to submit fifofix.patch upstream while the issue is still 'hot' in your head? :) Should be just a github PR. Alex On Wed, 21 Sept 2022 at 00:12, Richard Purdie wrote: > > rpm is close to release and give our release timings, update to the > rc1 of 4.18. > > Includes fixes for

Re: [OE-core] [PATCH] expat: CVE-2022-40674

2022-09-20 Thread Richard Purdie
On Tue, 2022-09-20 at 13:39 +0300, Florin Diaconescu wrote: > Upstream-Status: Accepted > [https://github.com/libexpat/libexpat/pull/629/commits/4a32da87e931ba54393d465bb77c40b5c33d343b] > > Signed-off-by: Florin Diaconescu > --- > .../expat/expat/CVE-2022-40674.patch | 57

Re: [OE-core] [PATCH 1/2 v2] rpm: Upgrade 4.17.1 -> 4.18rc1

2022-09-20 Thread Richard Purdie
On Wed, 2022-09-21 at 00:27 +0200, Alexander Kanavin wrote: > Is it possible to submit fifofix.patch upstream while the issue is > still 'hot' in your head? :) Should be just a github PR. I had already done so and just forgotten to update the patch:

[OE-core] [kirkstone][PATCH 2/2] tune-neoversen2: support tune-neoversen2 base on armv9a

2022-09-20 Thread Ruiqiang Hao
From: Ruiqiang Hao We supported neoversen2 base on armv8.5a in the past, add tune include for armv9a and support neoversen2 base on armv9a. Signed-off-by: Ruiqiang Hao --- meta/conf/machine/include/arm/arch-armv9a.inc | 28 +++ .../include/arm/armv9a/tune-neoversen2.inc|

[OE-core] [kirkstone][PATCH 1/2] gcc: add arm-v9 support

2022-09-20 Thread Ruiqiang Hao
From: Ruiqiang Hao Backport some patches from GCC 12 to support arm-v9. Signed-off-by: Ruiqiang Hao --- meta/recipes-devtools/gcc/gcc-11.3.inc| 5 + ...rch64-Update-Neoverse-N2-core-defini.patch | 42 +++ .../0002-aarch64-add-armv9-a-to-march.patch | 89 ++

Re: [OE-core] [PATCH][dunfell 2/2] qemu: fix and ignore several CVEs

2022-09-20 Thread Steve Sakoman
On Sun, Sep 18, 2022 at 2:44 PM Mittal, Anuj wrote: > > > > > -Original Message- > > From: openembedded-core@lists.openembedded.org > c...@lists.openembedded.org> On Behalf Of Steve Sakoman > > Sent: Thursday, September 15, 2022 10:14 PM > > To: Lee, Chee Yang > > Cc:

[OE-core] [PATCH] mesa: only apply patch to fix ALWAYS_INLINE for native

2022-09-20 Thread kai
From: Kai Kang 0001-nir-nir_opt_move-fix-ALWAYS_INLINE-compiler-error.patch is not required by target mesa any more. But it still fails to compile mesa-native with DEBUG_BUILD enabled on Ubuntu 18.04 with gcc 7.5.0 without this patch: | ../mesa-22.1.6/src/compiler/nir/nir_inline_helpers.h: In

Re: [OE-core] [docs] [PATCH 1/7] common-tasks.rst: remove SRC_URI:append from examples

2022-09-20 Thread Mikko Rapeli
Hi, On Mon, 19 Sept 2022 at 23:35, Michael Opdenacker wrote: > > Mikko, thanks for the patch series. > Quentin, thanks for the review. > > Indeed, I think that the description of the commit should be improved > too. See below. > > On 9/19/22 16:04, Quentin Schulz via lists.openembedded.org

Re: [OE-core] [PATCH 0/9] kernel-yocto: consolidated pull request

2022-09-20 Thread Richard Purdie
On Mon, 2022-09-19 at 10:28 -0400, bruce.ashfi...@gmail.com wrote: > From: Bruce Ashfield > > Richard, > > Here's the next set of -stable updates to the active reference kernels. > I also have updates back to 5.4 that I'll send to the various stable > branches shortly. > > I also have a couple

[OE-core] [dunfell][PATCH] connman: CVE-2022-32293 man-in-the-middle attack against a WISPR HTTP

2022-09-20 Thread Hitendra Prajapati
Source: https://git.kernel.org/pub/scm/network/connman/connman.git/ MR: 120508 Type: Security Fix Disposition: Backport from https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=72343929836de80727a27d6744c869dff045757c &&

Re: [OE-core] [Openembedded-architecture] Adding more information to the SBOM

2022-09-20 Thread Alberto Pianon
Il 2022-09-16 17:49 Mark Hatle wrote: On 9/16/22 10:18 AM, Alberto Pianon wrote: ... trimmed ... I also can see the issue with multiple sources in SRC_URI, although you should be able to map those back if you assume subtrees are "owned" by given SRC_URI entries. I suspect there may be a

Re: [OE-core] [PATCH 0/9] kernel-yocto: consolidated pull request

2022-09-20 Thread Bruce Ashfield
On Tue, Sep 20, 2022 at 8:22 AM Richard Purdie wrote: > > On Mon, 2022-09-19 at 10:28 -0400, bruce.ashfi...@gmail.com wrote: > > From: Bruce Ashfield > > > > Richard, > > > > Here's the next set of -stable updates to the active reference kernels. > > I also have updates back to 5.4 that I'll

Re: [OE-core] [PATCH 0/9] kernel-yocto: consolidated pull request

2022-09-20 Thread Richard Purdie
On Tue, 2022-09-20 at 08:53 -0400, Bruce Ashfield wrote: > On Tue, Sep 20, 2022 at 8:22 AM Richard Purdie > wrote: > > > > On Mon, 2022-09-19 at 10:28 -0400, bruce.ashfi...@gmail.com wrote: > > > From: Bruce Ashfield > > > > > > Richard, > > > > > > Here's the next set of -stable updates to

Re: [OE-core] [PATCH] python3-cryptography: workaround broken native functionality

2022-09-20 Thread Richard Purdie
On Tue, 2022-09-20 at 13:20 +0300, Mikko Rapeli wrote: > Hi, > > I created an issue in openssl about this: > > https://github.com/openssl/openssl/issues/19242 > > Then I have the openssl patches in: > >

Re: [OE-core] [PATCH 0/9] kernel-yocto: consolidated pull request

2022-09-20 Thread Richard Purdie
On Mon, 2022-09-19 at 10:28 -0400, bruce.ashfi...@gmail.com wrote: > Here's the next set of -stable updates to the active reference kernels. > I also have updates back to 5.4 that I'll send to the various stable > branches shortly. > > I also have a couple of kern-tools fixes. One to solve a

Re: [OE-core] [PATCH] python3-cryptography: workaround broken native functionality

2022-09-20 Thread Mikko Rapeli
Hi, I created an issue in openssl about this: https://github.com/openssl/openssl/issues/19242 Then I have the openssl patches in: https://github.com/openssl/openssl/compare/master...mikkorapeli-linaro:openssl:relative_paths The feedback so far is cold in upstream. Yes, the patches are a bit

[OE-core] [PATCH] expat: CVE-2022-40674

2022-09-20 Thread Florin Diaconescu
Upstream-Status: Accepted [https://github.com/libexpat/libexpat/pull/629/commits/4a32da87e931ba54393d465bb77c40b5c33d343b] Signed-off-by: Florin Diaconescu --- .../expat/expat/CVE-2022-40674.patch | 57 +++ meta/recipes-core/expat/expat_2.4.8.bb| 1 + 2 files

[OE-core] [kirkstone][PATCH] expat: upgrade 2.4.7 -> 2.4.8

2022-09-20 Thread Florin Diaconescu
Changelog: = Other changes: #587 pkg-config: Move "-lm" to section "Libs.private" #587 CMake|MSVC: Fix pkg-config section "Libs" #55 #582 CMake|macOS: Start using linker arguments "-compatibility_version " and "-current_version " in a way compatible

[OE-core] [kirkstone][PATCH] expat: CVE-2022-40674

2022-09-20 Thread Florin Diaconescu
Upstream-Status: Accepted [https://github.com/libexpat/libexpat/pull/629/commits/4a32da87e931ba54393d465bb77c40b5c33d343b] Signed-off-by: Florin Diaconescu --- .../expat/expat/CVE-2022-40674.patch | 56 +++ meta/recipes-core/expat/expat_2.4.8.bb| 1 + 2 files

Re: [OE-core] [PATCH] gcompat: Add __getauxval wrapper needed on aarch64

2022-09-20 Thread Richard Purdie
On Sat, 2022-09-17 at 14:13 -0700, Khem Raj wrote: > Update SRCREV to bring in few bug fixes > Install a .so symlink which could be used during linking > > Signed-off-by: Khem Raj > --- > .../musl/gcompat/0001-auxv-new-module.patch | 59 +++ >

[OE-core] [PATCH] python3-manifest.json: Add zoneinfo

2022-09-20 Thread Leon Anavi
The zoneinfo module provides a concrete time zone implementation to support the IANA time zone database as originally specified in PEP 615. Signed-off-by: Leon Anavi --- .../python/python3/python3-manifest.json | 11 +++ 1 file changed, 11 insertions(+) diff --git

[OE-core] Upstream checks and github

2022-09-20 Thread Alex Kiernan
It looks like something's changed in what github is returning on the releases page which has broken `devtool latest-version` for recipes which get their upstream data from that. -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online

Re: [OE-core] [Openembedded-architecture] Adding more information to the SBOM

2022-09-20 Thread Richard Purdie
On Mon, 2022-09-19 at 16:20 +0200, Carlo Piana wrote: > thank you for a well detailed and sensible answer. I certainly cannot > speak on technical issues, although I can understand there are > activities which could seriously impact the overall process and need > to be minimized. > > > > On Fri,

[OE-core] Yocto Project Status 20 September 2022 (WW38)

2022-09-20 Thread Stephen Jolley
Current Dev Position: YP 4.1 M4 (Feature Freeze) Next Deadline: 3rd October 2022 YP 4.1 M4 Build Next Team Meetings: * Bug Triage meeting Thursday September 22nd 7:30 am PDT (

Re: [OE-core] [kirkstone][PATCH] expat: CVE-2022-40674

2022-09-20 Thread Alex Kiernan
2.4.9 looks to have landed w/ this change in it. On Tue, Sep 20, 2022 at 12:09 PM Florin Diaconescu wrote: > > Upstream-Status: Accepted > [https://github.com/libexpat/libexpat/pull/629/commits/4a32da87e931ba54393d465bb77c40b5c33d343b] > > Signed-off-by: Florin Diaconescu > --- >

[OE-core] PR to fix WantedBy parsing of systemctl

2022-09-20 Thread Robert Henz via lists.openembedded.org
Hi everyone, I have a PR to fix the WantedBy parsing of the systemctl script. I tried to follow the process described in your wiki (https://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded), but ran into some problems I wasn't able to figure out. I will attach the patch file

Re: [OE-core] [PATCH 0/9] kernel-yocto: consolidated pull request

2022-09-20 Thread Bruce Ashfield
On Tue, Sep 20, 2022 at 8:55 AM Richard Purdie wrote: > > On Tue, 2022-09-20 at 08:53 -0400, Bruce Ashfield wrote: > > On Tue, Sep 20, 2022 at 8:22 AM Richard Purdie > > wrote: > > > > > > On Mon, 2022-09-19 at 10:28 -0400, bruce.ashfi...@gmail.com wrote: > > > > From: Bruce Ashfield > > > > >