Re: [OE-core] Yocto reproducibilty issue :: rust-llvm binary differences

2023-02-21 Thread Sundeep KOKKONDA
Additional object files link (if needed) -> https://we.tl/t-RvgWukdcFB poky/build-llvm-A/tmp/work/x86_64-linux/rust-native/ -> rust-native-A-obj.tar poky/build-llvm-B/tmp/work/x86_64-linux/rust-native/ -> rust-native-B-obj.tar poky/build-llvm-A/tmp/work/x86_64-linux/rust-llvm-native/ ->

Re: [OE-core][kirkstone][PATCH 1/1] apr-util: fix for CVE-2022-25147

2023-02-21 Thread Narpat Mali
Sure, Tim. I think there is no need to send the patch again to upgrade apr-util to 1.6.3 since, Steve Sakoman has already sent review request for some set of patches for kirkstone and these also include the patch for apr-util: update 1.6.1 -> 1.6.3 version. These patches are currently

Re: [OE-core] Yocto reproducibilty issue :: rust-llvm binary differences

2023-02-21 Thread Sundeep KOKKONDA
Hello Alex, files are here... https://we.tl/t-ijJJZnBvKh Thanks, Sundeep K. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#177559): https://lists.openembedded.org/g/openembedded-core/message/177559 Mute This Topic:

[OE-core] [PATCH v2] gdb: Upgrade to 13.1

2023-02-21 Thread Khem Raj
Pass -Wno-enum-constexpr-conversion with clang GDB 13.1 includes the following changes and enhancements: * Support for the following new targets has been added in both GDB and GDBserver: ** GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux* ** GNU/Linux/CSKY (gdbserver) csky*-*linux* *

[OE-core] [PATCH] gdb: Upgrade to 13.1

2023-02-21 Thread Khem Raj
GDB 13.1 includes the following changes and enhancements: * Support for the following new targets has been added in both GDB and GDBserver: ** GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux* ** GNU/Linux/CSKY (gdbserver) csky*-*linux* * The Windows native target now supports target

Re: [OE-core] [PATCH 08/11] build-appliance-image: use a real /tmp

2023-02-21 Thread Trevor Woerner
On Tue 2023-02-21 @ 03:44:42 PM, Trevor Woerner via lists.openembedded.org wrote: > Make /tmp a real directory in the root filesystem and not a link to an > in-memory tmpfs. Otherwise bitbake will run out of inodes on /tmp very quickly > and stop any build. > > Signed-off-by: Trevor Woerner >

Re: [OE-core] [PATCH 09/11] build-appliance-image: QB_MEM: allow user config

2023-02-21 Thread Khem Raj
On Tue, Feb 21, 2023 at 12:45 PM Trevor Woerner wrote: > > Allow the user to specify a QB_MEM value of their choosing, otherwise set it > to a default value. > > Signed-off-by: Trevor Woerner > --- > meta/recipes-core/images/build-appliance-image_15.0.0.bb | 2 +- > 1 file changed, 1

Re: [OE-core][kirkstone][PATCH 1/1] apr-util: fix for CVE-2022-25147

2023-02-21 Thread Tim Orling
On Tue, Feb 21, 2023 at 5:20 AM Narpat Mali wrote: > Integer Overflow or Wraparound vulnerability in apr_base64 functions > of Apache Portable Runtime Utility (APR-util) allows an attacker to > write beyond bounds of a buffer. This issue affects Apache Portable > Runtime Utility (APR-util) 1.6.1

Re: [OE-core] [PATCH] gdb: Upgrade to 12.1

2023-02-21 Thread Khem Raj
On Tue, Feb 21, 2023 at 5:27 PM Randy MacLeod wrote: > On 2022-05-12 15:28, Khem Raj wrote: > > Release Announcement [1] and Notes [2] > > [1] https://lists.gnu.org/archive/html/info-gnu/2022-05/msg0.html > [2] >

Re: [OE-core] [PATCH] gdb: Upgrade to 12.1

2023-02-21 Thread Randy MacLeod
On 2022-05-12 15:28, Khem Raj wrote: Release Announcement [1] and Notes [2] [1]https://lists.gnu.org/archive/html/info-gnu/2022-05/msg0.html [2]https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=gdb/NEWS;hb=gdb-12.1-release I just noticed that gdb-13.1 was released 2

Re: [OE-core] [PATCH 3/3] glibc: backport the fix for CVE-2023-25139

2023-02-21 Thread Randy MacLeod
On 2023-02-20 11:35, Alexander Kanavin via lists.openembedded.org wrote: But then the cve should be marked as resolved? Yash is new to this game. Yash, Please submit an update along the lines of:

[OE-core] [PATCH 11/11] build-appliance-image: check for xattr feature

2023-02-21 Thread Trevor Woerner
The xattr DISTRO_FEATURE is required otherwise a bitbake build will fail due to a failure with the 'cp' utility: Subprocess output: cp: cannot preserve extended attributes, cp is built without xattr support ERROR: Logfile of failure stored in:

[OE-core] [PATCH 10/11] QB_SMP: allow user modification

2023-02-21 Thread Trevor Woerner
Allow a user to override the QM_SMP value giving them the opportunity to select for themselves the number of CPUs to use in qemu. Signed-off-by: Trevor Woerner --- meta/conf/machine/include/riscv/qemuriscv.inc | 2 +- meta/conf/machine/include/x86/qemuboot-x86.inc | 2 +-

[OE-core] [PATCH 09/11] build-appliance-image: QB_MEM: allow user config

2023-02-21 Thread Trevor Woerner
Allow the user to specify a QB_MEM value of their choosing, otherwise set it to a default value. Signed-off-by: Trevor Woerner --- meta/recipes-core/images/build-appliance-image_15.0.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-core] [PATCH 08/11] build-appliance-image: use a real /tmp

2023-02-21 Thread Trevor Woerner
Make /tmp a real directory in the root filesystem and not a link to an in-memory tmpfs. Otherwise bitbake will run out of inodes on /tmp very quickly and stop any build. Signed-off-by: Trevor Woerner --- meta/recipes-core/images/build-appliance-image_15.0.0.bb | 6 ++ 1 file changed, 6

[OE-core] [PATCH 07/11] build-appliance-image: add /lib64 symlink

2023-02-21 Thread Trevor Woerner
Add a /lib64 -> /lib symlink in case the build appliance is 64-bit. Building rust-native requires cargo to be run. The native cargo is linked to look for /lib64/ld-linux-x86-64.so.2 and can't be run without it. The build produces the following error, even though that file does exist:

[OE-core] [PATCH 06/11] build-appliance-image: fix HOMEPAGE

2023-02-21 Thread Trevor Woerner
Update the HOMEPAGE metadata. Signed-off-by: Trevor Woerner --- meta/recipes-core/images/build-appliance-image_15.0.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/images/build-appliance-image_15.0.0.bb

[OE-core] [PATCH 05/11] build-appliance-image kernel: linux-yocto: qemuall: add taskstats

2023-02-21 Thread Trevor Woerner
Add the taskstats configuration to any kernel built for qemuall for bitbake's benefit: WARNING: The Linux kernel on your build host was not configured to provide process I/O statistics. (CONFIG_TASK_IO_ACCOUNTING is not set) Signed-off-by: Trevor Woerner ---

[OE-core] [PATCH 03/11] build-appliance-image: add support for qemu

2023-02-21 Thread Trevor Woerner
Add ext4 explicitly to the list of IMAGE_FSTYPES so the build appliance can be run with runqemu. Signed-off-by: Trevor Woerner --- meta/recipes-core/images/build-appliance-image_15.0.0.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git

[OE-core] [PATCH 04/11] build-appliance-image: set TERM

2023-02-21 Thread Trevor Woerner
Choose a nicer terminal for the build appliance so that build warnings and errors show up in colour instead of: $<50>Setscene tasks: 2844 of 2844 $<50>WARNING: mesa-2_22.3.3-r0 do_fetch: Failed to fetch URL https://mesa.freedesktop.org/archive/mesa-22.3.3.tar.xz, attempting

[OE-core] [PATCH 01/11] packagegroup-self-hosted: alphabetize

2023-02-21 Thread Trevor Woerner
Several of the lists of packages are alphabetized, but the alphabetization was lost in a couple areas. Signed-off-by: Trevor Woerner --- .../packagegroups/packagegroup-self-hosted.bb | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git

[OE-core] [PATCH 02/11] packagegroup-self-hosted: add zstd

2023-02-21 Thread Trevor Woerner
Add missing tools necessary on the host for a build. Signed-off-by: Trevor Woerner --- meta/recipes-core/packagegroups/packagegroup-self-hosted.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/packagegroups/packagegroup-self-hosted.bb

[OE-core] [PATCH 00/11] build-appliance-image revival

2023-02-21 Thread Trevor Woerner
Revive the build-appliance. The build-appliance-image produces an image that contains all the necessary pieces in order to perform a bitbake build. This patch series contains a number of small tweaks that were needed in order for the build of the appliance to succeed, and then for a build within

Re: [oe-core][PATCHv2] vte: update 0.70.2 -> 0.70.3

2023-02-21 Thread Markus Volk
v2 enables vala only, if gobject-introspection-data is in DISTRO_FEATURES to unblock platforms that don't provide it Am Di, 21. Feb 2023 um 19:52:31 +0100 schrieb Markus Volk : - Allow to build the gtk4 widget and vapi This is needed to build gtk4 based terminals like blackbox - Update

[oe-core][PATCHv2] vte: update 0.70.2 -> 0.70.3

2023-02-21 Thread Markus Volk
- Allow to build the gtk4 widget and vapi This is needed to build gtk4 based terminals like blackbox - Update dependencies - Cleanup recipe and remove unneeded patch Signed-off-by: Markus Volk --- ...EXITCODE-macro-for-non-glibc-systems.patch | 42 --- .../vte/{vte_0.70.2.bb

[oe-core][PATCH] vte: update 0.70.2 -> 0.70.3

2023-02-21 Thread Markus Volk
- Allow to build the gtk4 widget and vapi This is needed to build gtk4 based terminals like blackbox - Update dependencies - Cleanup recipe and remove unneeded patch Signed-off-by: Markus Volk --- ...EXITCODE-macro-for-non-glibc-systems.patch | 42 --- .../vte/{vte_0.70.2.bb

[OE-core][PATCH] weston: Add kiosk shell

2023-02-21 Thread Joshua Watt
Adds support for the kiosk shell to weston. The Kiosk shell is designed to run a fullscreen application in a "kiosk" mode, but unlike the fullscreen shell the kiosk mode still provides traditional desktop protocols. Signed-off-by: Joshua Watt --- meta/recipes-graphics/wayland/weston_11.0.1.bb |

Re: [OE-core] Yocto reproducibilty issue :: rust-llvm binary differences

2023-02-21 Thread Alexander Kanavin
Are the two different sets of object files available somewhere for download and inspection? I could take a look and see if I can spot the difference, but I need the files. Alex On Tue, 21 Feb 2023 at 17:47, Sundeep KOKKONDA wrote: > > Hello, > > The rust builds are not reproducible when the

[OE-core] [meta-oe][dunfell][PATCH 2/2] zeromq: upgrade 4.3.3 -> 4.3.4

2023-02-21 Thread Hugo Simeliere via lists.openembedded.org
Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 8ced89f62f152e2b233c532ce03408bf46bde55b) Signed-off-by: Hugo SIMELIERE --- .../zeromq/{zeromq_4.3.3.bb => zeromq_4.3.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename

[OE-core] [meta-oe][dunfell][PATCH 1/2] zeromq: upgrade 4.3.2 -> 4.3.3

2023-02-21 Thread Hugo Simeliere via lists.openembedded.org
Refresh the following patch: 0001-CMakeLists-txt-Avoid-host-specific-path-to-libsodium.patch Signed-off-by: Zang Ruochen Signed-off-by: Khem Raj (cherry picked from commit 117b3f95507b464aafe6a1948cf4a79f26194acb) Signed-off-by: Hugo SIMELIERE --- ...void-host-specific-path-to-libsodium.patch

[OE-core][dunfell][PATCH] bluez5: Exclude CVE-2022-39177 from cve-check

2023-02-21 Thread Hugo Simeliere via lists.openembedded.org
CVE already fixed in CVE-2022-39176.patch Signed-off-by: Hugo SIMELIERE --- meta/recipes-connectivity/bluez5/bluez5_5.55.bb | 7 +++ 1 file changed, 7 insertions(+) diff --git a/meta/recipes-connectivity/bluez5/bluez5_5.55.bb b/meta/recipes-connectivity/bluez5/bluez5_5.55.bb index

[OE-core] Yocto reproducibilty issue :: rust-llvm binary differences

2023-02-21 Thread Sundeep KOKKONDA
Hello, The rust builds are not reproducible when the build path is changed. The issue details are in https://bugzilla.yoctoproject.org/show_bug.cgi?id=14875. After debugging several ways, we tried to find at what build stage the Yocto build artifacts are deviating with rust sources generated

Re: [OE-core] [PATCH 1/1] lib/oe/reproducible: Use git log without gpg signature

2023-02-21 Thread Benoît Mauduit via lists . openembedded . org
Hello, Any update on my patch ? Thanks, BR, On 1/12/23 14:23, Benoît Mauduit via lists.openembedded.org wrote: Previously, if "showSignature" is present in user gitconfig, parsing of the timestamp will fail. Ideally we should replace this command with a git plumbing command. Signed-off-by:

[OE-core] elfutils 0.189 release next week (~Feb 28)

2023-02-21 Thread Randy MacLeod
I don't see anything Uber critical in this update but should we take 0.189 for the 4.2 release in a week? The maintainers seem to be open to releasing a little earlier if prompted. Randy -- Forwarded message - From: Mark Wielaard Date: Tue., Feb. 21, 2023, 08:33 Subject:

[OE-core][dunfell][PATCH] openssl: upgrade 1.1.1s to 1.1.1t

2023-02-21 Thread Hugo Simeliere via lists.openembedded.org
Major changes between OpenSSL 1.1.1s and OpenSSL 1.1.1t [7 Feb 2023] * Fixed X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * Fixed Use-after-free following BIO_new_NDEF (CVE-2023-0215) * Fixed Double free after calling PEM_read_bio_ex (CVE-2022-4450) * Fixed Timing Oracle in

[OE-core] Yocto Project Status 21 February 2023 (WW08)

2023-02-21 Thread Stephen Jolley
Current Dev Position: YP 4.2 M3 Feature Freeze Next Deadline: 20th February 2023 YP 4.2 M3 Build Next Team Meetings: * Bug Triage meeting Thursday February 23rd 7:30 am PDT (

[OE-core][kirkstone 21/23] oeqa qemurunner.py: add timeout to QMP calls

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli When a qemu machine hangs, the QMP calls can hang for ever too, and when this happens any failing test commands from ssh runner may be followed by dump_monitor() calls which then also hang. Hangs followed by hangs. Use runqemutime at setup and run_monitor() specific timeout

[OE-core][kirkstone 04/23] apr: update 1.7.0 -> 1.7.2

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin Changes for APR 1.7.2 *) Correct a packaging issue in 1.7.1. The contents of the release were correct, but the top level directory was misnamed. Changes for APR 1.7.1 *) SECURITY: CVE-2022-24963 (cve.mitre.org) Integer Overflow or Wraparound vulnerability

[OE-core][kirkstone 07/23] libjpeg-turbo: upgrade 2.1.4 -> 2.1.5

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin Significant changes relative to 2.1.4 Fixed issues in the build system whereby, when using the Ninja Multi-Config CMake generator, a static build of libjpeg-turbo (a build in which ENABLE_SHARED is 0) could not be installed, a Windows installer could not be built, and

[OE-core][kirkstone 23/23] oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail

2023-02-21 Thread Steve Sakoman
From: Alexandre Belloni bitbake's output changed, update the test Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 7e64b63f96dd1d71e263e7bbbe6591e51e98395a) Signed-off-by: Steve Sakoman --- meta/lib/oeqa/selftest/cases/bbtests.py | 2 +- 1 file

[OE-core][kirkstone 01/23] tar: CVE-2022-48303

2023-02-21 Thread Steve Sakoman
From: Rodolfo Quesada Zumbado Fixes CVE-2022-48303 by checking Base-256 encoding is at least 2 bytes long. GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been

[OE-core][kirkstone 22/23] oeqa qemurunner.py: try to avoid reading one character at a time

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli Read from serial console with a small delay to bundle data to e.g. full lines. Reading one character at a time is not needed and causes busy looping. Signed-off-by: Mikko Rapeli Signed-off-by: Luca Ceresoli (cherry picked from commit

[OE-core][kirkstone 20/23] oeqa qemurunner: read more data at a time from serial

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli Use a short sleep to bundle serial console reads so that we are not reading one character at a time which reduces busy looping. Signed-off-by: Mikko Rapeli Signed-off-by: Luca Ceresoli (cherry picked from commit cafe65d8cf7544edbd387f7f5f6d77c64c6b18fa) Signed-off-by: Steve

[OE-core][kirkstone 19/23] oeqa dump.py: add error counter and stop after 5 failures

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli If test target qemu machine hangs completely, dump_target() calls over serial console are taking a long time to time out, possibly for every failing ssh command execution and a lot of test cases, and same with dump_monitor(). Instead of trying for ever, count errors and after

[OE-core][kirkstone 18/23] oeqa ssh.py: add connection keep alive options to ssh client

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli Configure ssh client to test that connection with server is up. If the server does not respond within a minute then the connection, target machine or sshd daemon are stuck and it's better to exit the command execution with errors. Some tests can execute a long time without

[OE-core][kirkstone 17/23] oeqa ssh.py: move output prints to new line

2023-02-21 Thread Steve Sakoman
From: Mikko Rapeli The output from is garbled otherwise and it's not easy to remove debug output form real command output on target. Signed-off-by: Mikko Rapeli Signed-off-by: Luca Ceresoli (cherry picked from commit 917a70cbc43ac1c70c477b220c4115735457ef04) Signed-off-by: Steve Sakoman ---

[OE-core][kirkstone 16/23] devshell: Do not add scripts/git-intercept to PATH

2023-02-21 Thread Steve Sakoman
From: Peter Kjellerstedt The use of scripts/git-intercept was introduced in commit 3266c327df (install/devshell: Introduce git intercept script due to fakeroot issues) and later reverted in commit af27c81eaf (scripts: Make git intercept global). Signed-off-by: Peter Kjellerstedt Signed-off-by:

[OE-core][kirkstone 15/23] image.bbclass: print all QA functions exceptions

2023-02-21 Thread Steve Sakoman
From: Mauro Queiros For the QA checks in `image.bbclass`, all exceptions other than `oe.utils.ImageQAFailed` always print the following generic message: "Image QA function func_name failed" This can be very misleading, as it may hide python syntax errors and other kind of issues that are hard

[OE-core][kirkstone 14/23] update-alternatives: fix typos

2023-02-21 Thread Steve Sakoman
From: Ulrich Ölmann Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit d3ca05b072c152b76a86edaaddebabdef312ea95) Signed-off-by: Steve Sakoman --- meta/classes/update-alternatives.bbclass | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff

[OE-core][kirkstone 13/23] qemu: fix compile error

2023-02-21 Thread Steve Sakoman
From: Kai Kang Backport 2 patches and rebase 0001-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch to fix compile error: ../qemu-6.2.0/hw/display/qxl.c: In function 'qxl_phys2virt': ../qemu-6.2.0/hw/display/qxl.c:1477:67: error: 'size' undeclared (first use in this function); did you

[OE-core][kirkstone 12/23] libgit2: upgrade 1.4.4 -> 1.4.5

2023-02-21 Thread Steve Sakoman
Fixes: libgit2, when compiled using the optional, included libssh2 backend, fails to verify SSH keys by default. Description When using an SSH remote with the optional, included libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the

[OE-core][kirkstone 11/23] libgit2: uprade 1.4.3 -> 1.4.4

2023-02-21 Thread Steve Sakoman
This is a security release with multiple changes. This provides compatibility with git's changes to address CVE 2022-29187. As a follow up to CVE 2022-24765, now not only is the working directory of a non-bare repository examined for its ownership, but the .git directory and the .git file (if

[OE-core][kirkstone 10/23] sudo: upgrade 1.9.12p1 -> 1.9.12p2

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin Changes: Fixed a compilation error on Linux/aarch64. GitHub issue #197. Fixed a potential crash introduced in the fix GitHub issue #134. If a user’s sudoers entry did not have any RunAs user’s set, running sudo -U otheruser -l would dereference a NULL pointer. Fixed

[OE-core][kirkstone 09/23] git: upgrade 2.35.6 -> 2.35.7

2023-02-21 Thread Steve Sakoman
From: Sakib Sajal Upgrade git to latest 2.37.x release to address security issues CVE-2022-23521 and CVE-2022-41903. Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman --- meta/recipes-devtools/git/{git_2.35.6.bb => git_2.35.7.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[OE-core][kirkstone 08/23] linux-firmware: upgrade 20221214 -> 20230117

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin License-Update: additional firmwares, copyright years Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit fdb8c12fc71b4a985372f5d02ce59a1402c14c4a) Signed-off-by: Steve Sakoman ---

[OE-core][kirkstone 05/23] apr-util: update 1.6.1 -> 1.6.3

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin Changes with APR-util 1.6.3 *) Correct a packaging issue in 1.6.2. The contents of the release were correct, but the top level directory was misnamed. Changes with APR-util 1.6.2 *) SECURITY: CVE-2022-25147 (cve.mitre.org) Integer Overflow or Wraparound

[OE-core][kirkstone 06/23] bind: upgrade 9.18.10 -> 9.18.11

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin Stable branch update License-update: copyright years Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 63e8a8952c3d1b3b5c481be6bba52a3f4d65648e) Signed-off-by: Steve Sakoman (cherry picked from

[OE-core][kirkstone 03/23] lttng-tools: update 2.13.8 -> 2.13.9

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin 2023-01-13 (National Sticker Day) LTTng modules 2.13.8 * fix: jbd2: use the correct print format * Fix: in_x32_syscall was introduced in v4.7.0 * Explicitly skip tracing x32 system calls * fix: kallsyms wrapper on ppc64el * fix:

[OE-core][kirkstone 02/23] diffutils: update 3.8 -> 3.9

2023-02-21 Thread Steve Sakoman
From: Alexander Kanavin NEWS * Noteworthy changes in release 3.9 (2023-01-15) [stable] ** Bug fixes diff -c and -u no longer output incorrect timezones in headers on platforms like Solaris where struct tm lacks tm_gmtoff. [bug#51228 introduced in 3.4] Drop patch as issue fixed

[OE-core][kirkstone 00/23] Patch review

2023-02-21 Thread Steve Sakoman
Please review this set of patches for kirkstone and have comments back by end of day Thursday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4951 The following changes since commit 54c30e509074073b99a7a8890482ba1af2abbab9: oeqa context.py:

Re: [OE-core] [PATCH 2/2] [YOCTO #13270] docbook-xml-dtd: refactor for style, add version check regex

2023-02-21 Thread Richard Elberger
Hello Ross, It wasn't entirely clear to me that the patch would be required if taken from docbook, but I see that my "test scope" was not appropriate and you have surfaced why patching is required. Now that I have a test target this helps but in future I probably should build world but... just

Re: [OE-core] Cve fetcher update

2023-02-21 Thread Ross Burton
Hi Marta, > On 21 Feb 2023, at 13:20, Marta Rybczynska wrote: > I'm finishing the new fetcher for cve check using the 2.0 NVD API. Will need > testers to check as many configurations as possible before we switch the > format. > > The current estimate is this week, hoping that the real life

Re: [OE-core] [PATCH 2/2] [YOCTO #13270] docbook-xml-dtd: refactor for style, add version check regex

2023-02-21 Thread Ross Burton
Sorry, but this doesn’t work: If you build xmlto-native: validity error : Could not load the external subset "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd; Document

[OE-core][kirkstone][PATCH 1/1] apr-util: fix for CVE-2022-25147

2023-02-21 Thread Narpat Mali
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions. Reference:

[OE-core] Cve fetcher update

2023-02-21 Thread Marta Rybczynska
Hello all, I'm finishing the new fetcher for cve check using the 2.0 NVD API. Will need testers to check as many configurations as possible before we switch the format. The current estimate is this week, hoping that the real life doesn't interfere. Good news for all users is that nothing changes

[OE-core] [PATCH] create.py: add command arg to add layer to bblayers.conf

2023-02-21 Thread Pedro Baptista
From: Pedro Baptista Add command arg `--add-layer` which enables the create and add layer in a single step. Signed-off-by: Pedro Baptista --- meta/lib/bblayers/create.py | 11 ++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/meta/lib/bblayers/create.py

Re: [OE-core] [PATCH] docbook-xml: Switch from debian packages to upstream docbook sources

2023-02-21 Thread Richard Elberger
The process in the last few days has very helpful because it forces me to organize practices better on my end. Thank you. On 2/21/23 05:33, Alexander Kanavin wrote: > Thanks, I do not have any further comments. The next step is taking > this through the automated test matrix. > > Alex > > On

Re: [OE-core] [PATCH] docbook-xml: Switch from debian packages to upstream docbook sources

2023-02-21 Thread Alexander Kanavin
Thanks, I do not have any further comments. The next step is taking this through the automated test matrix. Alex On Tue, 21 Feb 2023 at 11:29, Richard Elberger wrote: > > This patch changes the docbook-xml distribution package source from > debian to docbook which aligns the recipe with the

Re: [OE-core] [PATCH] ref-manual: Fix invalid feature name

2023-02-21 Thread Niko Mauno via lists.openembedded.org
On 20.2.2023 19.45, Michael Opdenacker wrote: Thanks for the patch! You also have an issue with the way your e-mails are received here. Here is a workaround: https://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded#Fixing_your_From_identity I fixed the commit manually, but

[OE-core] [PATCH] docbook-xml: Switch from debian packages to upstream docbook sources

2023-02-21 Thread Richard Elberger
This patch changes the docbook-xml distribution package source from debian to docbook which aligns the recipe with the source originator. Other changes made to the recipe include: This patch resolves [YOCTO #13270]. - removal of version 4.0 given docbook no longer distributes version 4.0 -

[OE-core] [PATCH] python3-setuptools: upgrade 67.3.1 -> 67.3.3

2023-02-21 Thread wangmy
From: Wang Mingyu Changelog: == #3820: Restore quoted #include argument to has_function. #3827: Improve deprecation warning message on pkg_resources.declare_namespace to display package name. Signed-off-by: Wang Mingyu --- ...ython3-setuptools_67.3.1.bb =>

[OE-core] [PATCH] python3-zipp: upgrade 3.13.0 -> 3.14.0

2023-02-21 Thread wangmy
From: Wang Mingyu Changelog: Minor cleanup in tests, including #93. Signed-off-by: Wang Mingyu --- .../python/{python3-zipp_3.13.0.bb => python3-zipp_3.14.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-zipp_3.13.0.bb =>

[OE-core] [PATCH] python3-pytest-subtests: upgrade 0.9.0 -> 0.10.0

2023-02-21 Thread wangmy
From: Wang Mingyu Changelog: = Added experimental support for suppressing subtest output dots in non-verbose mode with --no-subtests-shortletter -- this allows the native pytest column calculations to not be disrupted and minimizes unneeded output for large CI systems. Signed-off-by:

[OE-core] [PATCH] python3-poetry-core: upgrade 1.5.0 -> 1.5.1

2023-02-21 Thread wangmy
From: Wang Mingyu Changelog: Improve performance by caching parsed markers, constraints and versions (#556). Signed-off-by: Wang Mingyu --- ...ython3-poetry-core_1.5.0.bb => python3-poetry-core_1.5.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core] [PATCH] python3-pip: update 23.0 -> 23.0.1

2023-02-21 Thread wangmy
From: Wang Mingyu Changelog: Features - Ignore PIP_REQUIRE_VIRTUALENV for "pip index" - Implement "--break-system-packages" to permit installing packages into "EXTERNALLY-MANAGED" Python installations. Bug Fixes - - Improve handling of isolated build environments

[OE-core] [PATCH] libx11-compose-data: 1.8.3 -> 1.8.4

2023-02-21 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- ...ibx11-compose-data_1.8.3.bb => libx11-compose-data_1.8.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/xorg-lib/{libx11-compose-data_1.8.3.bb => libx11-compose-data_1.8.4.bb} (90%) diff --git

[OE-core] [PATCH] harfbuzz: upgrade 7.0.0 -> 7.0.1

2023-02-21 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- .../harfbuzz/{harfbuzz_7.0.0.bb => harfbuzz_7.0.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/harfbuzz/{harfbuzz_7.0.0.bb => harfbuzz_7.0.1.bb} (95%) diff --git

[OE-core] [PATCH] curl: upgrade 7.88.0 -> 7.88.1

2023-02-21 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- meta/recipes-support/curl/{curl_7.88.0.bb => curl_7.88.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/curl/{curl_7.88.0.bb => curl_7.88.1.bb} (98%) diff --git a/meta/recipes-support/curl/curl_7.88.0.bb