glibc: fix CVE-2018-11237
Signed-off-by: Zheng Ruoqin
---
meta/recipes-core/glibc/glibc/CVE-2018-11237.patch | 82 ++
meta/recipes-core/glibc/glibc_2.27.bb | 1 +
2 files changed, 83 insertions(+)
create mode 100644
> I have verified the version of hplip by subdividing it.
> Up to 3.17.9 is compiled and error starts from 3.17.10.
As a result of checking again, error will occur from version 3.17.11.
Up to version 3.17.10 will be compiled.
--
___
I'm sorry for the duplicate email Bruce. Resending because I failed to
include the list.
On Mon, Jun 25, 2018 at 3:52 PM, Bruce Ashfield
wrote:
>
>
> On Mon, Jun 25, 2018 at 1:50 PM, Jon Szymaniak
> wrote:
>>
>> An optional dependency upon the capstone disassembler was introduced
>> in QEMU
On 06/25/2018 09:40 PM, Burton, Ross wrote:
The busctl invocation will only rarely be called so is very prone to
bitrot, maybe it should just always use busctl?
Personally I think that there should be a way for VM time to be
independent of host time to avoid this sort of problem...
Ross
Hi
Refresh 0014-Define-GLIBC_DYNAMIC_LINKER-and-UCLIBC_DYNAMIC_LINKE.patch
to also define GLIBC_DYNAMIC_LINKER relative to SYSTEMLIBS_DIR on riscv.
Signed-off-by: Ricardo Salveti
---
...e-GLIBC_DYNAMIC_LINKER-and-UCLIBC_DYNAMIC_LINKE.patch | 16 +++-
1 file changed, 15 insertions(+), 1
On Mon, Jun 25, 2018 at 1:50 PM, Jon Szymaniak wrote:
> An optional dependency upon the capstone disassembler was introduced
> in QEMU v2.11.0-rc0. The necessary version of capstone is included
> in the QEMU repository as a git submodule.
>
> The QEMU configure script uses pkg-config to
On Thu, May 17, 2018 at 3:19 PM, Andre McCurdy wrote:
> An elevation of privilege vulnerability in libnl could enable a local
> malicious application to execute arbitrary code within the context of
> the Wi-Fi service. This issue is rated as Moderate because it first
> requires compromising a
The temporary files are written here (macros.in file):
%_tmppath %{_var}/tmp
What I don't understand is why they end up in the host /var and not
the rootfs one. The rpm database location is deduced from to _var as
well, and it does get created in the correct location. Further
2018-06-25 18:47 GMT+02:00 Mark Hatle :
> My question is "why is this a problem"? (Why is debugging on for normal
> usage?)
>
> If you want to enable debugging with RPM, leaving the files is the right
> answer.
> Otherwise, as mentioned in the post it's REALLY hard to debug scriptlet
>
On 18-06-25 15:25 +0200, Alexander Kanavin wrote:
> It's better to clean them up in meta/lib/oe/rootfs.py, instead of
> forever carrying a custom patch to rpm.
I have the same hesitations, but we don't know the filenames to
clean up. We can't remove every /var/tmp/rpm-tmp.*, since they
can be
An optional dependency upon the capstone disassembler was introduced
in QEMU v2.11.0-rc0. The necessary version of capstone is included
in the QEMU repository as a git submodule.
The QEMU configure script uses pkg-config to determine if an
installation of capstone already exists on the system,
On 6/25/18 8:25 AM, Alexander Kanavin wrote:
> 2018-06-25 11:27 GMT+02:00 Olof Johansson :
>> RPM writes each package scriptlet (post-/preinstall) to
>> /var/tmp/rpm-tmp.XX
>> --- a lot of files get created. When debugging is enabled, these temporary
>> scriptlet files aren't cleaned up at
Hello
I have a setup on sumo with 4 multiconfig, 3xX86 and 1xarm64. While
building recipes that are native and allarch at the same time (from
meta-java). I am having a lot of these errors. Is this something that
is currently beeing fixed? Am I the only one seeing this?
Thanks
Was reminded about this by a bug review.
The original bug was about cpio images in general, not initramfs. It
was a sdk-ptest image so no doubt that does have some huge files, but
yes 4GB is still bigger than you'd expect.
I'll kick a build and see if I can replicate...
Ross
On 14 November
Just wanted to bump this, since I still see that v3 of this patch and not v4
(this one) is in master-next.
Cheers,
Tobias Olausson
Development Engineer
HMS Industrial Networks AB
From: Andre McCurdy
Sent: Wednesday, June 20, 2018 9:07 PM
To: Tobias Olausson
Cc:
Current Dev Position: YP 2.6 M1 is in QA, accepting patches for YP 2.6 M2.
Next Deadline: YP 2.6 M1 release is targeted for June 22, 2018 (See update)
SWAT Team Rotation:
· SWAT lead is currently: Maxin
· SWAT team rotation: Maxin -> Chen on June 29, 2018
· SWAT team
The busctl invocation will only rarely be called so is very prone to
bitrot, maybe it should just always use busctl?
Personally I think that there should be a way for VM time to be
independent of host time to avoid this sort of problem...
Ross
On 25 June 2018 at 10:33, Chen Qi wrote:
> I've
2018-06-25 11:27 GMT+02:00 Olof Johansson :
> RPM writes each package scriptlet (post-/preinstall) to
> /var/tmp/rpm-tmp.XX
> --- a lot of files get created. When debugging is enabled, these temporary
> scriptlet files aren't cleaned up at all and after a while this results in the
>
package_qa_handle_error() returns True on non-fatal issues and False on
fatal issues. But the current usage has been to do
sane = package_qa_handle_error(...)
which would always reset sanity status to be that of the last issue
identified. This change the assignments to use the &= operator
If a license file referenced from LIC_FILES_CHKSUM doesn't exist,
insane.bbclass would output an error message, but would continue the
build. This change makes this error fatal (as I suspect has been the
intention).
Signed-off-by: Olof Johansson
---
meta/classes/insane.bbclass | 2 +-
1 file
On Fri, 2018-06-22 at 08:10 -0700, Christopher Larson wrote:
> Yeah, I think in this case this works as a class, but you're right,
> we should probably shift more to the python package. Namespacing is
> probably a good idea, we've talked about doing that more in the past.
Whilst changing what we
On Mon, 2018-06-25 at 10:43 +0100, Burton, Ross wrote:
> As update-rcd is for managing init scripts, and init scripts make no
> sense in a nativesdk environment, it would probably be best if the
> update-rc.d class only added these dependencies for target packages.
I had the same thought
As update-rcd is for managing init scripts, and init scripts make no
sense in a nativesdk environment, it would probably be best if the
update-rc.d class only added these dependencies for target packages.
Ross
On 23 June 2018 at 20:52, Zheng Ruoqin wrote:
> Add nativesdk for update-rc.d.
>
>
I've encountered the following error when doing testimage.
RESULTS - systemd.SystemdBasicTests.test_systemd_list - Testcase 551: FAILED
After investigation, I found that it's not functionality issue. It's
just that the qemu was not running fast enough. And it resulted 'time out'
problem when
The following changes since commit a5d1288804e517dee113cb9302149541f825d316:
meta-yocto-bsp: Workaround the Ethernet malfunction on edgerouter when
building with gcc8 (2018-06-21 09:59:26 +0100)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib
RPM writes each package scriptlet (post-/preinstall) to /var/tmp/rpm-tmp.XX
--- a lot of files get created. When debugging is enabled, these temporary
scriptlet files aren't cleaned up at all and after a while this results in the
filesystem resources are eaten up (like running out of
On Sat, 2018-06-23 at 10:50 +, Zheng, Ruoqin wrote:
> Yes, modifying the image recipe can actually customize your root file
> system, as linux vendors, they are familiar with bitbake and it's
> very easy to them.
> But, as I know, there are many users who are not very familiar with
> bitbake
On Sun, 2018-06-24 at 03:53 +0800, Zheng Ruoqin wrote:
> Add dnf-nativesdk and it's runtime dependence to make dnf work on
> cross-development environment.
>
> Signed-off-by: Zheng Ruoqin
I don't mind adding enough of the changes so that dnf-nativesdk is
buildable so some of your other patches
On Sun, 2018-06-24 at 03:53 +0800, Zheng Ruoqin wrote:
> Add DEPENDS for nativesdk.
>
> Signed-off-by: Zheng Ruoqin
> ---
> meta/recipes-devtools/rpm/rpm_4.14.1.bb | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/meta/recipes-devtools/rpm/rpm_4.14.1.bb b/meta/recipes-
>
On Sun, 2018-06-24 at 03:52 +0800, Zheng Ruoqin wrote:
> Signed-off-by: Zheng Ruoqin
> ---
> meta/recipes-devtools/file/file_5.32.bb | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/meta/recipes-devtools/file/file_5.32.bb b/meta/recipes-
> devtools/file/file_5.32.bb
> index
30 matches
Mail list logo
