[OE-core][meta-oe][dunfell][PATCH] mdns: Whitelisted CVE-2007-0613 for mdns

2021-03-07 Thread Sana Kazi
CVE-2007-0613 is not applicable as it only affects Apple products i.e. ichat,mdnsresponder, instant message framework and MacOS. Also, https://www.exploit-db.com/exploits/3230 shows the part of code affected by CVE-2007-0613 which is not preset in upstream source code. Hence, CVE-2007-0613 does

Re: [OE-core][PATCH] populate_sdk_ext: record METADATA_REVISION

2021-03-07 Thread Chen Qi
On 03/08/2021 10:30 AM, Chen Qi wrote: On 03/06/2021 07:29 AM, Richard Purdie wrote: On Fri, 2021-03-05 at 18:10 +0800, Chen Qi wrote: As we delete the .git/ directory, it's impossible to get METADATA_REVISION inside eSDK. Because of this, we meet the following warning when installing eSDK.

[OE-core][PATCH] base-files: exclude METADATA_REVISION for signature computation

2021-03-07 Thread Chen Qi
A previous commit changes poky's DISTRO_VERSION to include METADATA_REVISION. """ poky.conf: do not write current date into distro version, use git hash instead """ This results in base-files do_install depend on the METADATA_REVISION, which is not expected, exclude it. Signed-off-by:

Re: [OE-core][PATCH] populate_sdk_ext: record METADATA_REVISION

2021-03-07 Thread Chen Qi
On 03/06/2021 07:29 AM, Richard Purdie wrote: On Fri, 2021-03-05 at 18:10 +0800, Chen Qi wrote: As we delete the .git/ directory, it's impossible to get METADATA_REVISION inside eSDK. Because of this, we meet the following warning when installing eSDK. WARNING: The base-files:do_install

Re: [OE-core] [PATCH v2] bitbake.conf: use ${RECIPE_SYSROOT} for PSEUDO_IGNORE_PATHS

2021-03-07 Thread Yu, Mingli
On 1/31/21 7:36 PM, Richard Purdie wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] On Wed, 2021-01-20 at 15:05 +0800, Yu, Mingli wrote: From: Mingli Yu When multilib enabled, there comes below error for packages which inherit useradd bbclass randomly when build eSDK.

[OE-core] [PATCH] scripts/oe-timeout-dd-test.sh: add script

2021-03-07 Thread Sakib Sajal
oe-timeout-dd-test tries to write number of kilobytes to the filesystem within a specified . The purporse of this script is to find which part of the build system puts stress on the filesystem io and log all the processes. To use and monitor a build, add to local.conf: BB_HEARTBEAT_EVENT = ""

[OE-core] OE-core CVE metrics for gatesgarth on Sun 07 Mar 2021 10:00:01 AM HST

2021-03-07 Thread Steve Sakoman
Branch: gatesgarth New this week: CVE-2021-20203: qemu:qemu-native:qemu-system-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20203 * CVE-2021-23840: openssl:openssl-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-23840 * CVE-2021-27803: wpa-supplicant

[OE-core] OE-core CVE metrics for dunfell on Sun 07 Mar 2021 09:30:01 AM HST

2021-03-07 Thread Steve Sakoman
Branch: dunfell New this week: CVE-2020-27618: glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27618 * CVE-2021-20203: qemu:qemu-native:qemu-system-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20203 * CVE-2021-23840: openssl:openssl-native

[OE-core] OE-core CVE metrics for master on Sun 07 Mar 2021 09:00:01 AM HST

2021-03-07 Thread Steve Sakoman
Branch: master New this week: Removed this week: Full list: Found 55 unpatched CVEs CVE-2000-0006: strace https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2000-0006 * CVE-2000-0803: groff:groff-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2000-0803 * CVE-2005-0238:

[OE-core] puzzling wording about "nostamp" task in bitbake-whatchanged

2021-03-07 Thread Robert P. J. Day
in that script, one reads: Note: The amount of tasks is not accurate when the task is "do_build" since it usually depends on other tasks. The "nostamp" task is not included. i have to assume that should read that all "nostamp" tasks are excluded, as "nostamp" is a flag, not a

[OE-core] [PATCH] bitbake-whatchanged: change ending quote to proper period

2021-03-07 Thread Robert P. J. Day
Pretty sure that trailing quote should be a period; it appears to work properly. Signed-off-by: Robert P. J. Day --- diff --git a/scripts/bitbake-whatchanged b/scripts/bitbake-whatchanged index 3095dafa46..6f4b268119 100755 --- a/scripts/bitbake-whatchanged +++ b/scripts/bitbake-whatchanged

[OE-core] [poky][master][PATCH] openssl: whitelisted CVE-2018-12433, CVE-2018-12437, CVE-2018-12438

2021-03-07 Thread saloni
From: "Saloni.Jain" Whitelisted below CVEs: 1. CVE-2018-12433 is disputed and reported for crypt libraries. Link: https://security-tracker.debian.org/tracker/CVE-2018-12433 Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12433 2. CVE-2018-12437 is reported for libtomcrypt and is

[OE-core][PATCH] python3: make pydoc rdepend on python3-io

2021-03-07 Thread Bartosz Golaszewski
From: Bartosz Golaszewski pydoc needs tempfile (provided by python3-io) to work. Add python3-io to its RDEPENDS. Signed-off-by: Bartosz Golaszewski --- meta/recipes-devtools/python/python3_3.9.2.bb | 1 + 1 file changed, 1 insertion(+) diff --git

[OE-core] any value to "export PSEUDO_..." lines in bitbake.conf?

2021-03-07 Thread Robert P. J. Day
just noticed in bitbake.conf (around line 700): #export PSEUDO_PREFIX = "${STAGING_DIR_NATIVE}${prefix_native}" #export PSEUDO_BINDIR = "${STAGING_DIR_NATIVE}${bindir_native}" #export PSEUDO_LIBDIR = "${STAGING_DIR_NATIVE}$PSEUDOBINDIR/../lib/pseudo/lib apart from those lines being commented