[OE-core] [PATCH 2/2] python: fix CVE-2019-16935

2019-10-23 Thread Chen Qi
Signed-off-by: Chen Qi --- ...cape-the-server-title-of-DocXMLRPCSe.patch | 101 ++ meta/recipes-devtools/python/python_2.7.16.bb | 1 + 2 files changed, 102 insertions(+) create mode 100644

[OE-core] [PATCH 1/2] python3: fix CVE-2019-16935

2019-10-23 Thread Chen Qi
Signed-off-by: Chen Qi --- server-Escape-the-server_title-GH-1.patch | 86 +++ meta/recipes-devtools/python/python3_3.7.4.bb | 1 + 2 files changed, 87 insertions(+) create mode 100644

Re: [OE-core] [PATCH] unfs3: fixed the issue that unfsd consumes 100% CPU

2019-10-23 Thread akuster808
On 10/23/19 7:33 PM, Haiqing Bai wrote: > The 'accept' function on the socket of unfsd daemon > is always in below error state: > accept(4, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) > accept(6, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) with backport to zeus? > > And

[OE-core] [PATCH] unfs3: fixed the issue that unfsd consumes 100% CPU

2019-10-23 Thread Haiqing Bai
The 'accept' function on the socket of unfsd daemon is always in below error state: accept(4, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) accept(6, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) And 'strace -c -p ' shows: % time seconds usecs/call callserrors syscall

Re: [OE-core] [zeus][PATCH 1/2] python3: fix CVE-2019-16935

2019-10-23 Thread ChenQi
On 10/23/2019 06:59 PM, Ross Burton wrote: Zeus and master I presume? Ross Yes. These two are for zeus. I will send out another two for master to avoid conflicts. Best Regards, Chen Qi -- ___ Openembedded-core mailing list

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Khem Raj
On Wed, Oct 23, 2019 at 8:31 PM Richard Purdie wrote: > > On Wed, 2019-10-23 at 16:29 +0100, Ross Burton wrote: > > On 23/10/2019 14:03, Khem Raj wrote: > > > Hi Richard > > > > > > New master-next I see these fails > > > > > > https://errors.yoctoproject.org/Errors/Build/91645/ > > > > > > First

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Adrian Bunk
On Wed, Oct 23, 2019 at 10:20:29PM +0100, Richard Purdie wrote: > > Well, yes. The proposed policy is now that we should address these > kinds of issues if they get reported. Whilst I understand why and that > Khem doesn't get as much help as he needs with meta-oe, pushing the oe- > core

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Richard Purdie
On Wed, 2019-10-23 at 22:23 +0300, Adrian Bunk wrote: > On Wed, Oct 23, 2019 at 04:29:13PM +0100, Ross Burton wrote: > > On 23/10/2019 14:03, Khem Raj wrote: > > > Hi Richard > > > > > > New master-next I see these fails > > > > > > https://errors.yoctoproject.org/Errors/Build/91645/ > > > > >

Re: [OE-core] [PATCH v3] mesa: Upgrade to 19.2.1

2019-10-23 Thread Otavio Salvador
On Wed, Oct 23, 2019 at 6:07 PM Alistair Francis wrote: > > From: Alistair Francis > > Upgrade mesa and mesa-gl to 19.2.1. > > The license hash change was a trivial new line removal. > > The glx-tls option was removed as it isn't included in the meson.build > file. It has been replaced with

Re: [OE-core] [PATCH] systemtap: support usrmerge

2019-10-23 Thread akuster808
On 10/23/19 1:25 PM, Alessio Igor Bogani wrote: > Signed-off-by: Alessio Igor Bogani Thanks for the patch.  Could you comment on this open Yocto bug? https://bugzilla.yoctoproject.org/show_bug.cgi?id=4442 I think its fixed but would like someone who is using it to comment. - armin > --- >

[OE-core] [PATCH v3] mesa: Upgrade to 19.2.1

2019-10-23 Thread Alistair Francis
From: Alistair Francis Upgrade mesa and mesa-gl to 19.2.1. The license hash change was a trivial new line removal. The glx-tls option was removed as it isn't included in the meson.build file. It has been replaced with 'use-elf-tls' instead. The -Dasm=false was removed as it also is no longer

[OE-core] ✗ patchtest: failure for mesa: Upgrade to 19.2.1 (rev2)

2019-10-23 Thread Patchwork
== Series Details == Series: mesa: Upgrade to 19.2.1 (rev2) Revision: 2 URL : https://patchwork.openembedded.org/series/20447/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the

Re: [OE-core] [PATCH] mesa: Upgrade to 19.2.1

2019-10-23 Thread Alistair Francis
On Wed, Oct 23, 2019 at 12:46 AM Richard Purdie wrote: > > On Tue, 2019-10-22 at 15:07 -0700, Alistair Francis wrote: > > On Sat, Oct 12, 2019 at 9:54 AM Alistair Francis < > > alist...@alistair23.me> wrote: > > > Upgrade mesa and mesa-gl to 19.2.1. > > > > > > The license hash change was a

[OE-core] [PATCH v2] mesa: Upgrade to 19.2.1

2019-10-23 Thread Alistair Francis
From: Alistair Francis Upgrade mesa and mesa-gl to 19.2.1. The license hash change was a trivial new line removal. The glx-tls option was removed as it isn't included in the meson.build file. It has been replaced with 'use-elf-tls' instead. The -Dasm=false was removed as it also is no longer

Re: [OE-core] [PATCH] systemtap: support usrmerge

2019-10-23 Thread Mark Hatle
On 10/23/19 3:25 PM, Alessio Igor Bogani wrote: > Signed-off-by: Alessio Igor Bogani > --- > meta/recipes-kernel/systemtap/systemtap_git.bb | 7 +-- > 1 file changed, 5 insertions(+), 2 deletions(-) > > diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb >

[OE-core] [PATCH] systemtap: support usrmerge

2019-10-23 Thread Alessio Igor Bogani
Signed-off-by: Alessio Igor Bogani --- meta/recipes-kernel/systemtap/systemtap_git.bb | 7 +-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb b/meta/recipes-kernel/systemtap/systemtap_git.bb index 6ee3e1c0f7..2efba2e06f 100644

[OE-core] [PATCH v3] gsettings-desktop-schemas: upgrade 3.32.0 -> 3.34.0

2019-10-23 Thread Andreas Müller
Need it for gnome-settings-daemon 3.34: | meson.build:91:0: ERROR: Invalid version of dependency, need 'gsettings-desktop-schemas' ['>= 3.33.0'] found '3.32.0'. Signed-off-by: Andreas Müller --- v2: make x11 a required distro feature v3: remove gcr from depends / undo v2 ...-schemas_3.32.0.bb

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Richard Purdie
On Wed, 2019-10-23 at 16:29 +0100, Ross Burton wrote: > On 23/10/2019 14:03, Khem Raj wrote: > > Hi Richard > > > > New master-next I see these fails > > > > https://errors.yoctoproject.org/Errors/Build/91645/ > > > > First two are important one's we already know why > > ti-display-sharing-fw

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Adrian Bunk
On Wed, Oct 23, 2019 at 04:29:13PM +0100, Ross Burton wrote: > On 23/10/2019 14:03, Khem Raj wrote: > > Hi Richard > > > > New master-next I see these fails > > > > https://errors.yoctoproject.org/Errors/Build/91645/ > > > > First two are important one's we already know why > >

[OE-core] [PATCH v2 2/2] meta: add missing description in recipes-gnome

2019-10-23 Thread Maxime Roussin-Bélanger
Remove some trailing whitespace Signed-off-by: Maxime Roussin-Bélanger --- Changes in v2: - Fix missing \ in libsecret meta/recipes-gnome/gcr/gcr_3.28.1.bb | 3 +++ meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.38.2.bb| 3 +++

[OE-core] [PATCH v2 1/2] meta: update and add missing homepage/bugtracker links

2019-10-23 Thread Maxime Roussin-Bélanger
Signed-off-by: Maxime Roussin-Bélanger --- Changes in v2: - Nothing meta/recipes-gnome/epiphany/epiphany_3.34.1.bb| 1 + meta/recipes-gnome/gcr/gcr_3.28.1.bb | 4 ++-- meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.38.2.bb| 4 ++--

[OE-core] [PATCH] distutils: pass along parallel make flags to setup.py build

2019-10-23 Thread Nick Owens
parallel builds for native code in python modules was added about 5 years ago. distutils understands '-j N', so just pass along the right argument to setup.py build. Signed-off-by: Nick Owens --- meta/classes/distutils.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH v2] distutils: pass along parallel make flags to setup.py build

2019-10-23 Thread Nick Owens
thanks ross, i've updated my patch. -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [zeus][PATCH] Backporting Yi Zhao's fix on master for CVE-2019-12904 to zeus.

2019-10-23 Thread Trevor Gamblin
On 10/23/19 12:24 PM, Trevor Gamblin wrote: From: Yi Zhao libgcrypt: fix CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on

[OE-core] [zeus][PATCH v2] libgcrypt: fix CVE-2019-12904

2019-10-23 Thread Trevor Gamblin
From: Yi Zhao Backporting Yi Zhao's fix on master for CVE-2019-12904 to zeus. In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an

[OE-core] [zeus][PATCH] Backporting Yi Zhao's fix on master for CVE-2019-12904 to zeus.

2019-10-23 Thread Trevor Gamblin
From: Yi Zhao libgcrypt: fix CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread richard . purdie
Hi Khem. On Wed, 2019-10-23 at 14:03 +0100, Khem Raj wrote: > Hi Richard > > New master-next I see these fails > > https://errors.yoctoproject.org/Errors/Build/91645/ > > First two are important one's we already know why > ti-display-sharing-fw fails to fetch Firstly, before you mention it, I

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread akuster808
On 10/23/19 6:05 AM, Khem Raj wrote: > here is AB failure link > > https://autobuilder.yoctoproject.org/typhoon/#/builders/88/builds/56 Your builds are also archived on wiki https://wiki.yoctoproject.org/wiki/BuildLog > > On Wed, Oct 23, 2019 at 2:03 PM Khem Raj wrote: >> Hi Richard >> >>

[OE-core] [PATCH] buildhistory-analysis: filter out -src changes by default

2019-10-23 Thread Ross Burton
Like the -dbg package, this package is automatically generated and contains source filenames. We expect this to change on every upgrade, so don't show the differences unless the user wants to see all changes. Signed-off-by: Ross Burton --- meta/lib/oe/buildhistory_analysis.py | 2 +- 1 file

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Ross Burton
On 23/10/2019 14:03, Khem Raj wrote: Hi Richard New master-next I see these fails https://errors.yoctoproject.org/Errors/Build/91645/ First two are important one's we already know why ti-display-sharing-fw fails to fetch ERROR: QA Issue: libiio: Files/directories were installed but not

Re: [OE-core] [RFC][PATCH 0/6] NPM refactoring

2019-10-23 Thread Jean-Marie LEMETAYER
On Oct 22, 2019, at 1:22 PM, Richard Purdie richard.pur...@linuxfoundation.org wrote: > On Tue, 2019-10-22 at 11:03 +0200, Jean-Marie LEMETAYER wrote: >> The current NPM support have several issues: >>  - The current NPM fetcher downloads the dependency tree but not the other >>    fetchers. The

Re: [OE-core] [PATCH v2] gsettings-desktop-schemas: upgrade 3.32.0 -> 3.34.0

2019-10-23 Thread Andreas Müller
On Wed, Oct 23, 2019 at 2:11 PM Ross Burton wrote: > > > -DEPENDS = "glib-2.0" > > +DEPENDS = "glib-2.0 gcr" > > I can't see a gcr dependency in the source, and it builds fine with gcr > removed. Why was this added? > > Ross Checked sources and I agree. I must have mixed up the warning with

Re: [OE-core] [RFC][PATCH 1/6] npm.bbclass: refactor the npm class

2019-10-23 Thread Jean-Marie LEMETAYER
On Oct 22, 2019, at 1:35 PM, Alexander Kanavin alex.kana...@gmail.com wrote: > On Tue, 22 Oct 2019 at 11:12, Jean-Marie LEMETAYER < > jean-marie.lemeta...@savoirfairelinux.com> wrote: > >> The simplest solution is to let npm do its job. Assuming the fetcher >> only get the sources of the package,

Re: [OE-core] new meta-oe failures from master-next

2019-10-23 Thread Khem Raj
here is AB failure link https://autobuilder.yoctoproject.org/typhoon/#/builders/88/builds/56 On Wed, Oct 23, 2019 at 2:03 PM Khem Raj wrote: > > Hi Richard > > New master-next I see these fails > > https://errors.yoctoproject.org/Errors/Build/91645/ > > First two are important one's we already

[OE-core] new meta-oe failures from master-next

2019-10-23 Thread Khem Raj
Hi Richard New master-next I see these fails https://errors.yoctoproject.org/Errors/Build/91645/ First two are important one's we already know why ti-display-sharing-fw fails to fetch -- ___ Openembedded-core mailing list

Re: [OE-core] [PATCH v2] gsettings-desktop-schemas: upgrade 3.32.0 -> 3.34.0

2019-10-23 Thread Ross Burton
-DEPENDS = "glib-2.0" +DEPENDS = "glib-2.0 gcr" I can't see a gcr dependency in the source, and it builds fine with gcr removed. Why was this added? Ross -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org

Re: [OE-core] [zeus][PATCH 1/2] python3: fix CVE-2019-16935

2019-10-23 Thread Adrian Bunk
On Wed, Oct 23, 2019 at 11:59:37AM +0100, Ross Burton wrote: > Zeus and master I presume? And warrior. Or continue following the 3.7 stable releases in all 3 branches (see my patch to upgrade to 3.7.5 that also fixes this CVE). > Ross cu Adrian -- "Is there not promise of rain?" Ling

Re: [OE-core] [PATCH 2/2] meta: add missing description in recipes-gnome

2019-10-23 Thread Ross Burton
On 23/10/2019 03:14, Maxime Roussin-Bélanger wrote: --- a/meta/recipes-gnome/libsecret/libsecret_0.19.1.bb +++ b/meta/recipes-gnome/libsecret/libsecret_0.19.1.bb @@ -1,4 +1,8 @@ SUMMARY = "libsecret is a library for storing and retrieving passwords and other secrets" +DESCRIPTION = "A

Re: [OE-core] [zeus][PATCH 1/2] python3: fix CVE-2019-16935

2019-10-23 Thread Ross Burton
Zeus and master I presume? Ross -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH] distutils: pass along parallel make flags to setup.py build

2019-10-23 Thread Ross Burton
On 23/10/2019 00:59, Nick Owens wrote: parallel builds for native code in python modules was added about 5 years ago. distutils understands '-j N', so just pass along ${PARALLEL_MAKE} to setup.py build. Does distutils *only* understand -j? It's not unusual to set PARALLEL_MAKE to something

Re: [OE-core] [PATCH] python3: Upgrade 3.7.4 -> 3.7.5

2019-10-23 Thread Adrian Bunk
On Wed, Oct 23, 2019 at 12:40:33PM +0200, Alexander Kanavin wrote: > Python 3.8.0 is now out, so we should upgrade directly to that version. 3.7.4 -> 3.7.5 is a straightforward upgrade on a stable branch. 3.7 -> 3.8 is an upgrade to a new stable branch with incompatible changes that might break

Re: [OE-core] [PATCH] python3: Upgrade 3.7.4 -> 3.7.5

2019-10-23 Thread Alexander Kanavin
Python 3.8.0 is now out, so we should upgrade directly to that version. Alex On Wed, 23 Oct 2019 at 12:37, Adrian Bunk wrote: > Backported patch removed. > > Signed-off-by: Adrian Bunk > --- > ...lib-as-location-for-site-packages-an.patch | 2 +- >

[OE-core] [PATCH] python3: Upgrade 3.7.4 -> 3.7.5

2019-10-23 Thread Adrian Bunk
Backported patch removed. Signed-off-by: Adrian Bunk --- ...lib-as-location-for-site-packages-an.patch | 2 +- ...nt-parse-domains-containing-GH-13079.patch | 132 -- ...asename-to-replace-CC-for-checking-c.patch | 2 +- .../{python3_3.7.4.bb => python3_3.7.5.bb}| 5 +-

Re: [OE-core] [thud][PATCH] Revert "OpkgPM: use --add-ignore-recommends to process BAD_RECOMMENDATIONS"

2019-10-23 Thread Adrian Bunk
On Thu, Oct 17, 2019 at 12:21:11PM -0700, akuster808 wrote: > On 10/17/19 11:42 AM, Denys Dmytriyenko wrote: > > Thank you for this revert! I've been pulling my hair out past couple days > > figuring out why BAD_RECOMMENDATIONS stopped working for us. This fixed it. > > What I find curious is

[OE-core] [PATCH v2 1/1] bind: fix CVE-2019-6471 and CVE-2018-5743

2019-10-23 Thread kai.kang
From: Kai Kang Backport patches to fix CVE-2019-6471 and CVE-2018-5743 for bind. CVE-2019-6471 is fixed by 0001-bind-fix-CVE-2019-6471.patch and the other 6 patches are for CVE-2018-5743. And backport one more patch to fix compile error on arm caused by these 6 commits. Signed-off-by: Kai Kang

[OE-core] [PATCH v2 0/1] bind: fix CVE-2019-6471 and CVE-2018-5743

2019-10-23 Thread kai.kang
From: Kai Kang v2: * add tag CVE in patch files Kai Kang (1): bind: fix CVE-2019-6471 and CVE-2018-5743 .../bind/0001-bind-fix-CVE-2019-6471.patch| 64 ++ ...01-fix-enforcement-of-tcp-clients-v1.patch | 60 ++ ...p-clients-could-still-be-exceeded-v2.patch | 670 +

Re: [OE-core] [PATCH] mesa: Upgrade to 19.2.1

2019-10-23 Thread Richard Purdie
On Tue, 2019-10-22 at 15:07 -0700, Alistair Francis wrote: > On Sat, Oct 12, 2019 at 9:54 AM Alistair Francis < > alist...@alistair23.me> wrote: > > Upgrade mesa and mesa-gl to 19.2.1. > > > > The license hash change was a trivial new line removal. > > > > The glx-tls option was removed as it

[OE-core] ✗ patchtest: failure for bind: fix CVE-2019-6471 and CVE-2018-5743

2019-10-23 Thread Patchwork
== Series Details == Series: bind: fix CVE-2019-6471 and CVE-2018-5743 Revision: 1 URL : https://patchwork.openembedded.org/series/20611/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been

[OE-core] [PATCH] bind: fix CVE-2019-6471 and CVE-2018-5743

2019-10-23 Thread kai.kang
From: Kai Kang Backport patches to fix CVE-2019-6471 and CVE-2018-5743 for bind. CVE-2019-6471 is fixed by 0001-bind-fix-CVE-2019-6471.patch and the other 6 patches are for CVE-2018-5743. And backport one more patch to fix compile error on arm caused by these 6 commits. Signed-off-by: Kai Kang

[OE-core] [PATCH] kernel-fitimage: introduce FIT_SIGN_ALG

2019-10-23 Thread Richard Leitner
make fitImage configuration signature algorithm selectable with FIT_SIGN_ALG. Signed-off-by: Richard Leitner --- meta/classes/kernel-fitimage.bbclass | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta/classes/kernel-fitimage.bbclass