On Mon, Sep 21, 2020 at 5:45 PM Joshua Watt wrote:
>
> The sshkeygen uses a lot of CPU time which delays booting (especially in
> the case where no SSH connection is going to happen), but we also want
> to be proactive about generating it early so that the first SSH login
> doesn't have to wait a
Backport CVE patch from the upstream:
https://git.qemu.org/?p=qemu.git;a=commit;h=b15a22bbcbe6a78dc3d88fe3134985e4cdd87de4
Signed-off-by: Li Wang
---
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2020-12829.patch| 267 ++
2 files changed,
The sshkeygen uses a lot of CPU time which delays booting (especially in
the case where no SSH connection is going to happen), but we also want
to be proactive about generating it early so that the first SSH login
doesn't have to wait a long time.
Starting the key generation when the sockets are
On Mon, Sep 21, 2020 at 6:51 PM Richard Purdie
wrote:
>
> On Mon, 2020-09-21 at 23:23 +0200, Yann Dirson wrote:
> >
> >
> > Le lun. 21 sept. 2020 à 21:46, Richard Purdie <
> > richard.pur...@linuxfoundation.org> a écrit :
> > > On Mon, 2020-09-21 at 16:15 +0200, Yann Dirson wrote:
> > > > From:
The following changes since commit b98e50f08b2bcf61fbc75ea1b0ad83a17c0a736a:
cve-check: avoid FileNotFoundError if no do_cve_check task has run
(2020-09-14 04:26:37 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next
On Mon, 2020-09-21 at 23:23 +0200, Yann Dirson wrote:
>
>
> Le lun. 21 sept. 2020 à 21:46, Richard Purdie <
> richard.pur...@linuxfoundation.org> a écrit :
> > On Mon, 2020-09-21 at 16:15 +0200, Yann Dirson wrote:
> > > From: Yann Dirson
> > >
> > > ---
> > > meta/classes/systemtap.bbclass
On Mon, Sep 21, 2020 at 5:12 AM Richard Purdie <
richard.pur...@linuxfoundation.org> wrote:
> This is used by various pieces of the result handling code, particularly
> the
> performance testing and we're seeing autobuilder failures that are
> easiest resolved using this.
>
> Signed-off-by:
On Mon, Sep 21, 2020 at 5:12 AM Richard Purdie <
richard.pur...@linuxfoundation.org> wrote:
> This is used by some of the results handling code and needed as part of
> buildtools tarball on various autobuilder worker for testing.
>
> ptest is disabled for OE-Core, at least for now since it
On Mon, Sep 21, 2020 at 5:12 AM Richard Purdie <
richard.pur...@linuxfoundation.org> wrote:
> Needed as a dependency of python3-jinja2. ptest is disabled for OE-Core, at
> least for now since it depends on python3-pytest which in turn has may
> other
> dependencies.
>
> Signed-off-by: Richard
On Mon, Sep 21, 2020 at 5:12 AM Richard Purdie <
richard.pur...@linuxfoundation.org> wrote:
> We have a slightly pressing situation where the performance test builds
> are failing after we cleaned up the system installs on those machines
> and tried to switch over to buildtools entirely.
>
> The
Le lun. 21 sept. 2020 à 21:46, Richard Purdie <
richard.pur...@linuxfoundation.org> a écrit :
> On Mon, 2020-09-21 at 16:15 +0200, Yann Dirson wrote:
> > From: Yann Dirson
> >
> > ---
> > meta/classes/systemtap.bbclass| 74 +++
> >
This was needed because of a backported patch, this patch was dropped
in oe-core c9f8b48 but the removal of the dependency was missed.
Signed-off-by: Ross Burton
---
meta/recipes-core/gettext/gettext_0.21.bb | 7 ++-
1 file changed, 2 insertions(+), 5 deletions(-)
diff --git
On Mon, 2020-09-21 at 16:15 +0200, Yann Dirson wrote:
> From: Yann Dirson
>
> ---
> meta/classes/systemtap.bbclass| 74 +++
> .../systemtap/systemtap-demo_git.bb | 71 ++
> 2 files changed, 145 insertions(+)
> create mode 100644
The official links on:
https://curl.haxx.se/download.html
use https now and we're seeing this warning:
WARNING: curl-native-7.72.0-r0 do_fetch: Failed to fetch URL
http://curl.haxx.se/download/curl-7.72.0.tar.bz2, attempting MIRRORS if
available
Signed-off-by: Randy MacLeod
---
Signed-off-by: Aníbal Limón
---
.../mesa/{mesa-gl_20.1.6.bb => mesa-gl_20.1.8.bb} | 0
meta/recipes-graphics/mesa/mesa.inc | 2 +-
meta/recipes-graphics/mesa/{mesa_20.1.6.bb => mesa_20.1.8.bb} | 0
3 files changed, 1 insertion(+), 1 deletion(-)
rename
as otherwise when using it in combination with archiver.bbclass we would
have 2 methods of the same name but with different signatures
leading to various hard to understand exceptions
Signed-off-by: Konrad Weihmann
---
meta/classes/testexport.bbclass | 8
1 file changed, 4
From: Yann Dirson
Cross-building a systemtap module requires access to debug information.
---
meta/classes/kernel.bbclass | 4
1 file changed, 4 insertions(+)
diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass
index 48135b3d41..fd2355bb68 100644
---
From: Yann Dirson
The goal of this series is to allow for packages to provide systemtap
probes and get them cross-compiled on the host, shipping only the
minimal runtime in the filesystem.
People willing to build the probes on target can continue to do so
with no changes for some many users,
From: Yann Dirson
---
meta/recipes-kernel/systemtap/systemtap_git.bb | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb
b/meta/recipes-kernel/systemtap/systemtap_git.bb
index 375e570454..89f550c859 100644
---
From: Yann Dirson
Note the _class-target qualifier, here to prevent a funky dependency of
systemtap-native on systemtap-native-runtime-native. This possibly hints
to something deeper ?
---
meta/recipes-kernel/systemtap/systemtap_git.bb | 9 +
1 file changed, 9 insertions(+)
diff --git
From: Yann Dirson
---
meta/classes/systemtap.bbclass| 74 +++
.../systemtap/systemtap-demo_git.bb | 71 ++
2 files changed, 145 insertions(+)
create mode 100644 meta/classes/systemtap.bbclass
create mode 100644
From: Yann Dirson
---
meta/recipes-kernel/systemtap/systemtap_git.bb | 6 --
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb
b/meta/recipes-kernel/systemtap/systemtap_git.bb
index 89f550c859..74bf7cb35c 100644
---
From: Yann Dirson
Upstream looks for unversionned System.map file in kernel_build_tree,
and if this fails goes for versionned filename in $sysroot/boot/.
OTOH we have a versionned filename in kernel_build_tree.
---
.../systemtap/systemtap-native_git.bb | 6 +
From: Yann Dirson
---
meta/recipes-kernel/systemtap/systemtap_git.bb | 17 +
1 file changed, 17 insertions(+)
diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb
b/meta/recipes-kernel/systemtap/systemtap_git.bb
index 1c9f2aed16..e98aff1851 100644
---
From: Yann Dirson
Most of the RDEPENDS part of PACKAGECONFIG[translator] appears to be related to
examples only.
---
meta/recipes-kernel/systemtap/systemtap_git.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb
On 21/09/2020 14:03, Richard Purdie wrote:
On Tue, 2020-09-08 at 13:28 +0100, Usama Arif wrote:
The keys are only generated if they dont exist. The key
generation can be turned off by setting FIT_GENERATE_KEYS to "0".
The default key length for private keys is 2048 and the default
format for
On Tue, 2020-09-08 at 13:28 +0100, Usama Arif wrote:
> The keys are only generated if they dont exist. The key
> generation can be turned off by setting FIT_GENERATE_KEYS to "0".
> The default key length for private keys is 2048 and the default
> format for public key certificate is x.509.
>
>
This is used by some of the results handling code and needed as part of
buildtools tarball on various autobuilder worker for testing.
ptest is disabled for OE-Core, at least for now since it depends on
python3-pytest which in turn has may other dependencies.
Signed-off-by: Richard Purdie
---
Needed as a dependency of python3-jinja2. ptest is disabled for OE-Core, at
least for now since it depends on python3-pytest which in turn has may other
dependencies.
Signed-off-by: Richard Purdie
---
meta/conf/distro/include/maintainers.inc | 1 +
.../python/python3-markupsafe/run-ptest
We have a slightly pressing situation where the performance test builds
are failing after we cleaned up the system installs on those machines
and tried to switch over to buildtools entirely.
The issue is the need for jinja2, complicated by the recipe's ptest
dependencies. This series imports them
This is used by various pieces of the result handling code, particularly the
performance testing and we're seeing autobuilder failures that are
easiest resolved using this.
Signed-off-by: Richard Purdie
---
meta/recipes-core/meta/buildtools-tarball.bb | 1 +
1 file changed, 1 insertion(+)
diff
Hi,
Just wanted to check if there were any review comments for this patch?
Thanks,
Usama
On 08/09/2020 13:43, Usama Arif via lists.openembedded.org wrote:
On 08/09/2020 13:28, Usama Arif wrote:
The keys are only generated if they dont exist. The key
generation can be turned off by setting
From: Chee Yang Lee
Signed-off-by: Chee Yang Lee
---
.../xorg-lib/libx11/CVE-2020-14363.patch | 36 +++
.../recipes-graphics/xorg-lib/libx11_1.6.9.bb | 1 +
2 files changed, 37 insertions(+)
create mode 100644 meta/recipes-graphics/xorg-lib/libx11/CVE-2020-14363.patch
From: Chee Yang Lee
fix :
CVE-2020-14346
https://gitlab.freedesktop.org/xorg/xserver/-/commit/c940cc8b6c0a2983c1ec974f1b3f019795dd4cff
CVE-2020-14361
https://gitlab.freedesktop.org/xorg/xserver/-/commit/144849ea27230962227e62a943b399e2ab304787
CVE-2020-14362
On 16/09/2020 17.18, Steve Sakoman wrote:
> Since there is an upcoming dunfell release and we don't have a fix for
> this issue I am going to revert this patch.
>
> When it is fixed in master I will reconsider taking this patch and the
> fix for dunfell.
Sorry for not seeing this sooner, and for
From: Mingli Yu
The named service fail to start as below:
# systemctl status named.service
named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/lib/systemd/system/named.service; enabled; vendor preset:
enabled)
Active: failed (Result: exit-code) since Wed
36 matches
Mail list logo
