Unless I'm missing something, I just realised that we're not
validating downloaded crate checksums when we fetch them with crate://
- Surely we should be?
--
Alex Kiernan
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#176125):
Hi All,
QA for yocto-3.1.22.rc1 is completed. This is the full report for this release:
https://git.yoctoproject.org/cgit/cgit.cgi/yocto-testresults-contrib/tree/?h=intel-yocto-testresults
=== Summary
No high milestone defects.
No new issue found.
Thanks,
Jing Hui
>
Upstream-Status: Backport from
https://github.com/golang/go/commit/618120c165669c00a1606505defea6ca755cdc27
Signed-off-by: Hitendra Prajapati
---
meta/recipes-devtools/go/go-1.17.13.inc | 1 +
.../go/go-1.18/CVE-2022-41717.patch | 89 +++
2 files changed, 90
From: Xiangyu Chen
when current test platform doesn't have 2 or more CPU node, the test
case would report FAIL, according to numa test script and numademo
code, when return code=77 should be skip test, so using SKIP instead
of FAIL in test script.
Signed-off-by: Xiangyu Chen
---
On Wed, Jan 18, 2023 at 7:59 AM Richard Purdie
wrote:
>
> On Tue, 2023-01-03 at 12:05 -0800, Khem Raj wrote:
> > Signed-off-by: Khem Raj
> > ---
> > meta/conf/distro/defaultsetup.conf | 2 +-
> > 1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git
On Wed, Jan 18, 2023 at 7:59 AM Richard Purdie
wrote:
>
> On Tue, 2023-01-03 at 12:05 -0800, Khem Raj wrote:
> > Signed-off-by: Khem Raj
> > ---
> > meta/conf/distro/defaultsetup.conf | 2 +-
> > 1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git
Backport needed patches and remove local workaround
Signed-off-by: Khem Raj
---
.../elfutils/elfutils_0.188.bb| 4 +-
...od-Fix-usage-of-deprecated-CURLINFO_.patch | 49 +++
...t-Use-CURLOPT_PROTOCOLS_STR-for-libc.patch | 34 +
3 files changed, 85
libsframe is newly added in binutils 2.40
Signed-off-by: Khem Raj
---
v1 -> v2:
- Rebase
meta/recipes-devtools/binutils/binutils_2.40.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-devtools/binutils/binutils_2.40.bb
From: Mingli Yu
Backport a patch [1] to explicit use the internal __time64_t type
to fix the issue that nscd wrongly cut /etc/hosts to be /hosts on
32bits system.
Before the patch:
root@qemux86:~# systemctl status nscd
* nscd.service - Name Service Cache Daemon
Loaded: loaded
On 2023-01-17 07:58, Petr Kubizňák via lists.openembedded.org wrote:
This issue was actually caused by missing host dependencies. Shame on me...
Do you mean standard host dependencies from our documented list:
https://docs.yoctoproject.org/brief-yoctoprojectqs/index.html#build-host-packages
?
> -Original Message-
> From: Luca Ceresoli
> Sent: den 18 januari 2023 17:22
> To: Peter Kjellerstedt
> Cc: openembedded-core@lists.openembedded.org; Richard Purdie
>
> Subject: Re: [OE-core] [PATCH] librsvg: Only enable the Vala bindings if
> GObject Introspection is enabled
>
> Hello
On 18/01/2023 14:00:47+, Richard Purdie wrote:
> In rare cases we see failures, often in linux-libc-headers for things like:
>
> | INSTALL /XXX/linux-libc-headers/6.1-r0/image/usr/include
> | abort()ing pseudo client by server request. See
> https://wiki.yoctoproject.org/wiki/Pseudo_Abort
Signed-off-by: Khem Raj
---
v2: Update patch status
...sing-_Alignof-when-using-C11-or-newe.patch | 52 +++
meta/recipes-extended/mdadm/mdadm_4.2.bb | 1 +
2 files changed, 53 insertions(+)
create mode 100644
@Randy,
To summarize the discussion, I should try -
1. Upgrade Kirkstone/Lagdale rust to 1.66.1 and
2. backporting the fixes of Cargo/Rust for kirkstone (patches given in
https://github.com/rust-lang/wg-security-response/tree/main/patches/CVE-2022-46176
)
Is this correct?
--
Sundeep K.
On Wed, Jan 18, 2023 at 5:05 PM Kokkonda, Sundeep
wrote:
>
> Without 'binutils' the required linker 'x86_64-poky-linux-ld' will not be
> added to the image (getting error - cannot find 'ld').
> And, 'g++' also a required package along with 'gcc'. When removed 'g++' some
> required libs are
Without 'binutils' the required linker 'x86_64-poky-linux-ld' will not be added
to the image (getting error - cannot find 'ld').
And, 'g++' also a required package along with 'gcc'. When removed 'g++' some
required libs are missing. See below error.
root@qemux86-64:~/hello# cargo run
Compiling
On Wed, 2023-01-18 at 17:46 +0100, Luca Ceresoli wrote:
> Hello Richard,
>
> On Wed, 18 Jan 2023 14:22:21 +
> "Richard Purdie" wrote:
>
> > OE is the main user of pseudo and we've had the changes in the oe-core
> > branch
> > around long enough that we're going to run with them. Swicth
Hello Richard,
On Wed, 18 Jan 2023 14:22:21 +
"Richard Purdie" wrote:
> OE is the main user of pseudo and we've had the changes in the oe-core branch
> around long enough that we're going to run with them. Swicth back to directly
> using the master branch.
>
> Signed-off-by: Richard Purdie
Hello Peter,
On Wed, 18 Jan 2023 12:27:59 +0100
"Peter Kjellerstedt" wrote:
> This avoids the following error:
>
> configure: error: Vala bindings require GObject Introspection
>
> Signed-off-by: Peter Kjellerstedt
A different patch [0] to address the same bug is already in my testing
On Tue, 2023-01-03 at 12:05 -0800, Khem Raj wrote:
> Signed-off-by: Khem Raj
> ---
> meta/conf/distro/defaultsetup.conf | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta/conf/distro/defaultsetup.conf
> b/meta/conf/distro/defaultsetup.conf
> index
Peter Kjellerstedt escreveu no dia quarta,
18/01/2023 à(s) 14:44:
> gobject-instrospection is not enabled by default in DISTRO_FEATURES_NATIVE
> and DISTRO_FEATURES_NATIVESDK so unless you explicitly enable it yourself
> (which seems unlikely to me), it will not be enabled in the
>
On Tue, Jan 17, 2023 at 6:35 AM Sandeep Gundlupet Raju via
lists.openembedded.org
wrote:
>
> Hi All,
>
> Can someone merge these patches to langdale branch?
I already have them in my current test queue, which you can monitor at:
gobject-instrospection is not enabled by default in DISTRO_FEATURES_NATIVE and
DISTRO_FEATURES_NATIVESDK so unless you explicitly enable it yourself (which
seems unlikely to me), it will not be enabled in the native/nativesdk cases.
//Peter
From: Jose Quaresma
Sent: den 18 januari 2023 13:13
Currently, whilst patch errors or warnings are shown, the errors don't stop
builds.
The configuration isn't very configurable from WARN_QA and ERROR_QA either.
This patch:
* Uses the standard mechanisms to handle the patch fuzz warnings/errors
* Makes Upstream-Status checking configurable from
Update to pull in:
pseudo.c: Avoid patch mismatch errors for NAMELESS file entries
In rare cases we see failures, often in linux-libc-headers for things like:
| INSTALL /XXX/linux-libc-headers/6.1-r0/image/usr/include
| abort()ing pseudo client by server request. See
OE is the main user of pseudo and we've had the changes in the oe-core branch
around long enough that we're going to run with them. Swicth back to directly
using the master branch.
Signed-off-by: Richard Purdie
---
meta/recipes-devtools/pseudo/pseudo_git.bb | 2 +-
1 file changed, 1
On Wed, Jan 18, 2023 at 12:09 PM Kokkonda, Sundeep
wrote:
>
> Removed not required pkgs autoconf, make, pkgconfig... etc and not removed
> 'g++'. Have to check specifically for this package. Let me check for it and
> i'll update here.
Thanks!
I'd probably start from the other end - my guess
In rare cases we see failures, often in linux-libc-headers for things like:
| INSTALL /XXX/linux-libc-headers/6.1-r0/image/usr/include
| abort()ing pseudo client by server request. See
https://wiki.yoctoproject.org/wiki/Pseudo_Abort for more details on this.
Pseudo log:
path mismatch [2
On Wed, 2023-01-18 at 13:10 +, Jose Quaresma wrote:
> Hi Chen,
>
> Jose Quaresma via lists.openembedded.org
> escreveu no dia
> sexta, 13/01/2023 à(s) 15:39:
> > Hi Chen,
> >
> > Just for your information,
> > This patch introduces a regression that breaks the do_create_spdx
> > tasks when
On Wed, Jan 18, 2023 at 1:55 PM Luca Ceresoli
wrote:
> Hello Martin,
>
> On Mon, 16 Jan 2023 16:30:35 +0100
> "Martin Jansa" wrote:
>
> > * this version was merged to main in:
> >
> https://gitlab.freedesktop.org/mesa/mesa/-/commit/267dd1f4d571ee606141aa66f1665aa152b4e911
> > and
You may need to check with the layer maintainers to find out why these two
layers are not working.
It does not feel right if you revert a patch but cannot prove it’s wrong.
Regards,
Qi
From: Jose Quaresma
Sent: Wednesday, January 18, 2023 9:10 PM
To: quaresma.j...@gmail.com
Cc: Chen, Qi ;
Hi Chen,
Jose Quaresma via lists.openembedded.org escreveu no dia sexta, 13/01/2023 à(s)
15:39:
> Hi Chen,
>
> Just for your information,
> This patch introduces a regression that breaks the do_create_spdx tasks
> when building with multiconfig machines.
>
> I am investigating it more deeply
Hello Martin,
On Mon, 16 Jan 2023 16:30:35 +0100
"Martin Jansa" wrote:
> * this version was merged to main in:
>
> https://gitlab.freedesktop.org/mesa/mesa/-/commit/267dd1f4d571ee606141aa66f1665aa152b4e911
> and cherry-picked to staging/23.0 as well in:
>
>
Hi Peter,
Peter Kjellerstedt escreveu no dia quarta,
18/01/2023 à(s) 11:28:
> This avoids the following error:
>
> configure: error: Vala bindings require GObject Introspection
>
> Signed-off-by: Peter Kjellerstedt
> ---
> meta/recipes-gnome/librsvg/librsvg_2.54.5.bb | 5 ++---
> 1 file
Removed not required pkgs autoconf, make, pkgconfig... etc and not removed
'g++'. Have to check specifically for this package. Let me check for it and
i'll update here.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#176089):
On Wed, Jan 18, 2023 at 11:43 AM Kokkonda, Sundeep
wrote:
>
> Yes, linker is needed by 'rust' and we checked that linker issue is solved by
> adding minimal required pkgs 'gcc g++ & binutils' instead of complete pkgs
> provided by 'packagegroup-core-buildessential'.
Does it really need g++? If
Yes, linker is needed by 'rust' and we checked that linker issue is solved by
adding minimal required pkgs 'gcc g++ & binutils' instead of complete pkgs
provided by ' packagegroup-core-buildessential'.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online
This avoids the following error:
configure: error: Vala bindings require GObject Introspection
Signed-off-by: Peter Kjellerstedt
---
meta/recipes-gnome/librsvg/librsvg_2.54.5.bb | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git
From: Alexander Kanavin
ChangeLog (libksba-1.6.3)
2022-12-06 Werner Koch
Release 1.6.3.
+ commit bffa9b346071725363a483db547e7dced9721cb5
2022-11-23 Werner Koch
Fix an integer overflow in the CRL signature parser.
+ commit
On Wed, Jan 18, 2023 at 8:08 AM Mikko Rapeli wrote:
>
> Hi,
>
> On Wed, Jan 18, 2023 at 08:45:56AM +0100, Alexander Kanavin wrote:
> > On Wed, 18 Jan 2023 at 03:08, Randy MacLeod
> > wrote:
> > > So far, there haven't been many Rust/Cargo CVEs so maybe we're making
> > > too big a deal out of
Hello Maanya,
On Tue, 17 Jan 2023 18:02:52 +
"Maanya Goenka via lists.openembedded.org"
wrote:
> Also, signed off by Paul Eggleton: paul.eggle...@microsoft.com
>
> From: maanyagoe...@linux.microsoft.com
> Sent: Tuesday, January 17, 2023 10:01 AM
> To:
On Wed, 2023-01-18 at 01:13 -0800, Khem Raj wrote:
> On Wed, Jan 18, 2023 at 12:47 AM Alejandro Hernandez wrote:
> >
> > Hey Khem,
> >
> > On Sun, 15 Jan 2023 at 11:44, Khem Raj wrote:
> > >
> > > Signed-off-by: Khem Raj
> > > ---
> > > meta/recipes-devtools/binutils/binutils.inc | 10
On 1/16/23 23:33, Martin Jansa wrote:
Kai: can you please test it on ubuntu-18.04?
Hi Martin,
It works for me with & without DEBUG_BUILD on ubuntu-18.04.6(gcc 7.5.0).
Regards,
Kai
I've tested it with DEBUG_BUILD in native and target build on a host
with new toolchain (gentoo with
On Wed, Jan 18, 2023 at 12:47 AM Alejandro Hernandez wrote:
>
> Hey Khem,
>
> On Sun, 15 Jan 2023 at 11:44, Khem Raj wrote:
>>
>> Signed-off-by: Khem Raj
>> ---
>> meta/recipes-devtools/binutils/binutils.inc | 10 ++
>> 1 file changed, 10 insertions(+)
>>
>> diff --git
Hey Khem,
On Sun, 15 Jan 2023 at 11:44, Khem Raj wrote:
> Signed-off-by: Khem Raj
> ---
> meta/recipes-devtools/binutils/binutils.inc | 10 ++
> 1 file changed, 10 insertions(+)
>
> diff --git a/meta/recipes-devtools/binutils/binutils.inc
>
Hi Khem,
On Tue, 17 Jan 2023 14:55:31 +0100
"Luca Ceresoli via lists.openembedded.org"
wrote:
> Hi Khem,
>
> On Sun, 15 Jan 2023 10:43:55 -0800
> "Khem Raj" wrote:
>
> > Signed-off-by: Khem Raj
>
> This patchset (perhaps this one specific patch) seems to be causing
> failures on the
Hi,
On Wed, Jan 18, 2023 at 08:45:56AM +0100, Alexander Kanavin wrote:
> On Wed, 18 Jan 2023 at 03:08, Randy MacLeod
> wrote:
> > So far, there haven't been many Rust/Cargo CVEs so maybe we're making
> > too big a deal out of this. I certainly don't miss the deluge of memory
> > management
Hi Team,
Please ignore previous mail.
Regards,
Hitendra
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#176076):
https://lists.openembedded.org/g/openembedded-core/message/176076
Mute This Topic: https://lists.openembedded.org/mt/94860718/21656
48 matches
Mail list logo
