[OE-core][dunfell 00/15] Pull request (cover letter only)
The following changes since commit a04b207c4ffa900313a0b5e3079ad2eec7d31f27: base-files: Drop localhost.localdomain from hosts file (2023-03-20 16:38:51 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/dunfell-next http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next Bruce Ashfield (4): linux-yocto/5.4: update to v5.4.231 linux-yocto/5.4: update to v5.4.233 linux-yocto/5.4: update to v5.4.234 linux-yocto/5.4: update to v5.4.237 Chee Yang Lee (2): qemu: fix multple CVEs git: ignore CVE-2023-22743 Joshua Watt (5): classes/create-spdx: Backport classes/package: Add extended packaged data licenses: Add GPL+ licenses to map create-spdx: Use gzip for compression classes/package: Use gzip for extended package data Mikko Rapeli (1): oeqa rtc.py: skip if read-only-rootfs Piotr Łobacz (1): systemd: fix wrong nobody-group assignment Richard Purdie (1): pybootchartui: Fix python syntax issue Ross Burton (1): lib/resulttool: fix typo breaking resulttool log --ptest meta/classes/create-spdx-2.2.bbclass | 1067 +++ meta/classes/create-spdx.bbclass |8 + meta/classes/package.bbclass | 39 +- meta/conf/licenses.conf |7 + meta/files/spdx-licenses.json | 5937 + meta/lib/oe/packagedata.py| 11 + meta/lib/oe/sbom.py | 84 + meta/lib/oe/spdx.py | 357 + meta/lib/oeqa/runtime/cases/rtc.py|8 +- meta/recipes-core/systemd/systemd_244.5.bb|2 +- meta/recipes-devtools/git/git.inc |2 + meta/recipes-devtools/qemu/qemu.inc | 17 + .../qemu/qemu/CVE-2020-15469-1.patch | 50 + .../qemu/qemu/CVE-2020-15469-2.patch | 69 + .../qemu/qemu/CVE-2020-15469-3.patch | 49 + .../qemu/qemu/CVE-2020-15469-4.patch | 53 + .../qemu/qemu/CVE-2020-15469-5.patch | 53 + .../qemu/qemu/CVE-2020-15469-6.patch | 61 + .../qemu/qemu/CVE-2020-15469-7.patch | 50 + .../qemu/qemu/CVE-2020-15469-8.patch | 44 + .../qemu/qemu/CVE-2020-15859.patch| 39 + .../qemu/qemu/CVE-2020-35504.patch| 51 + .../qemu/qemu/CVE-2020-35505.patch| 42 + .../qemu/qemu/CVE-2021-3409-1.patch | 85 + .../qemu/qemu/CVE-2021-3409-2.patch | 103 + .../qemu/qemu/CVE-2021-3409-3.patch | 71 + .../qemu/qemu/CVE-2021-3409-4.patch | 52 + .../qemu/qemu/CVE-2021-3409-5.patch | 93 + .../qemu/qemu/CVE-2022-26354.patch| 57 + .../linux/linux-yocto-rt_5.4.bb |6 +- .../linux/linux-yocto-tiny_5.4.bb |8 +- meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +- scripts/lib/resulttool/resultutils.py |2 +- .../pybootchartgui/pybootchartgui/parsing.py |2 +- 34 files changed, 8574 insertions(+), 27 deletions(-) create mode 100644 meta/classes/create-spdx-2.2.bbclass create mode 100644 meta/classes/create-spdx.bbclass create mode 100644 meta/files/spdx-licenses.json create mode 100644 meta/lib/oe/sbom.py create mode 100644 meta/lib/oe/spdx.py create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-1.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-2.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-3.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-4.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-5.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-6.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-7.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15469-8.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-15859.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-35504.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2020-35505.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3409-1.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3409-2.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3409-3.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3409-4.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-3409-5.patch create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2022-26354.patch -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#179448): https://lists.openembedded.org/g/openembedded-core/message/179448 Mute This Topic: https://lists.openembedded.org/mt/97974216/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[OE-core][dunfell 00/15] Pull request (cover letter only)
The following changes since commit 38fc0807eea14dc12610da4ba73c082d5a4b0744: meta/scripts: Manual git url branch additions (2021-11-03 08:43:53 -1000) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next Jose Quaresma (1): sstate: another fix for touching files inside pseudo Joshua Watt (1): oeqa: reproducible: Fix test not producing diffs Khem Raj (1): webkitgtk: Fix reproducibility in minibrowser Marek Vasut (1): piglit: upgrade to latest revision Mark Hatle (1): reproducible_build: Remove BUILD_REPRODUCIBLE_BINARIES checking Mingli Yu (1): python3-magic: add the missing rdepends Richard Purdie (7): linunistring: Add missing gperf-native dependency pseudo: Add in ability to flush database with shutdown request pseudo: Add fcntl64 wrapper mirrors: Add uninative mirror on kernel.org sstate: Ensure SDE is accounted for in package task timestamps sstate: Avoid deploy_source_date_epoch sstate when unneeded mirrors: Add kernel.org sources mirror for downloads.yoctoproject.org Steve Sakoman (2): python3-magic: add missing DEPENDS selftest/reproducible: add webkitgtk back to exclusion list for dunfell meta/classes/mirrors.bbclass | 2 + meta/classes/reproducible_build.bbclass | 53 --- meta/classes/sstate.bbclass | 34 +--- .../oeqa/selftest/cases/diffoscope/A/file.txt | 1 + .../oeqa/selftest/cases/diffoscope/B/file.txt | 1 + meta/lib/oeqa/selftest/cases/reproducible.py | 29 +- meta/recipes-devtools/pseudo/pseudo_git.bb| 2 +- .../python/python3-magic_0.4.15.bb| 7 ++- ...ssing-include-for-htobe32-definition.patch | 27 ++ ...file.py-make-test-lists-reproducible.patch | 31 +++ ...gen_tcs-tes_input_tests.py-do-not-ha.patch | 44 +++ ...lizer.py-make-.gz-files-reproducible.patch | 30 +++ ...sort-the-file-list-before-working-on.patch | 28 ++ ...t-shader.c-do-not-hardcode-build-pat.patch | 30 +++ meta/recipes-graphics/piglit/piglit_git.bb| 12 - .../0001-MiniBrowser-Fix-reproduciblity.patch | 31 +++ meta/recipes-sato/webkit/webkitgtk_2.28.4.bb | 1 + .../libunistring/libunistring_0.9.10.bb | 1 + 18 files changed, 334 insertions(+), 30 deletions(-) create mode 100644 meta/lib/oeqa/selftest/cases/diffoscope/A/file.txt create mode 100644 meta/lib/oeqa/selftest/cases/diffoscope/B/file.txt create mode 100644 meta/recipes-graphics/piglit/piglit/0001-Add-a-missing-include-for-htobe32-definition.patch create mode 100644 meta/recipes-graphics/piglit/piglit/0001-framework-profile.py-make-test-lists-reproducible.patch create mode 100644 meta/recipes-graphics/piglit/piglit/0001-generated_tests-gen_tcs-tes_input_tests.py-do-not-ha.patch create mode 100644 meta/recipes-graphics/piglit/piglit/0001-serializer.py-make-.gz-files-reproducible.patch create mode 100644 meta/recipes-graphics/piglit/piglit/0001-tests-shader.py-sort-the-file-list-before-working-on.patch create mode 100644 meta/recipes-graphics/piglit/piglit/0002-tests-util-piglit-shader.c-do-not-hardcode-build-pat.patch create mode 100644 meta/recipes-sato/webkit/webkitgtk/0001-MiniBrowser-Fix-reproduciblity.patch -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#158237): https://lists.openembedded.org/g/openembedded-core/message/158237 Mute This Topic: https://lists.openembedded.org/mt/87022452/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][dunfell 00/15] Pull request (cover letter only)
The following changes since commit 8e7c8e43260682efafabc50c757b9c2daff98f13: connman: add CVE_PRODUCT (2021-09-24 04:27:46 -1000) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-next Minjae Kim (1): vim: fix CVE-2021-3778 Ranjitsinh Rathod (1): systemd: Add fix for systemd-networkd crash during free Richard Purdie (7): mtd-utils: upgrade 2.1.1 -> 2.1.2 pybootchart: Avoid divide by zero oeqa/qemurunner: Use oe._exit(), not sys.exit() libc_package/buildstats: Fix python regex quoting warnings oeqa/selftest/gotoolchain: Fix temp file cleanup oeqa/buildproject: Ensure temp directories are cleaned up glew: Stop polluting /tmp during builds Robert P. J. Day (1): common-licenses: add "Unlicense" license file Stefano Babic (1): mtd-utils: upgrade 2.1.2 -> 2.1.3 Tom Pollard (2): bzip2: Update soname for libbz2 1.0.8 libsamplerate0: Set correct soname for 0.1.9 William A. Kennington III (1): rm_work.bbclass: Fix for files starting with - sana kazi (1): openssh: Fix CVE-2021-28041 meta/classes/libc-package.bbclass | 2 +- meta/classes/rm_work.bbclass | 8 +- meta/files/common-licenses/Unlicense | 24 ++ meta/lib/buildstats.py| 4 +- meta/lib/oeqa/selftest/cases/gotoolchain.py | 6 + meta/lib/oeqa/utils/buildproject.py | 3 + meta/lib/oeqa/utils/qemurunner.py | 2 +- meta/lib/oeqa/utils/targetbuild.py| 4 +- .../openssh/openssh/CVE-2021-28041.patch | 20 ++ .../openssh/openssh_8.2p1.bb | 1 + ...-info-for-ordered-set-new-and-introd.patch | 78 + ...dered_set_clear-free-with-destructor.patch | 35 +++ ...etwork-add-skeleton-of-request-queue.patch | 285 ++ ...quests-when-link-enters-linger-state.patch | 50 +++ ...ork-fix-Link-reference-counter-issue.patch | 278 + ...nk_drop-and-link_detach_from_manager.patch | 67 meta/recipes-core/systemd/systemd_244.5.bb| 6 + ...-utils-Fix-return-value-of-ubiformat.patch | 62 meta/recipes-devtools/mtd/mtd-utils_git.bb| 9 +- meta/recipes-extended/bzip2/bzip2/Makefile.am | 2 +- .../glew/glew/notempdir.patch | 19 ++ meta/recipes-graphics/glew/glew_2.2.0.bb | 1 + .../libsamplerate0/shared_version_info.patch | 13 + .../libsamplerate/libsamplerate0_0.1.9.bb | 1 + .../vim/files/CVE-2021-3778.patch | 49 +++ meta/recipes-support/vim/vim.inc | 1 + scripts/pybootchartgui/pybootchartgui/draw.py | 5 +- 27 files changed, 956 insertions(+), 79 deletions(-) create mode 100644 meta/files/common-licenses/Unlicense create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2021-28041.patch create mode 100644 meta/recipes-core/systemd/systemd/basic-pass-allocation-info-for-ordered-set-new-and-introd.patch create mode 100644 meta/recipes-core/systemd/systemd/introduce-ordered_set_clear-free-with-destructor.patch create mode 100644 meta/recipes-core/systemd/systemd/network-add-skeleton-of-request-queue.patch create mode 100644 meta/recipes-core/systemd/systemd/network-also-drop-requests-when-link-enters-linger-state.patch create mode 100644 meta/recipes-core/systemd/systemd/network-fix-Link-reference-counter-issue.patch create mode 100644 meta/recipes-core/systemd/systemd/network-merge-link_drop-and-link_detach_from_manager.patch delete mode 100644 meta/recipes-devtools/mtd/mtd-utils/0001-mtd-utils-Fix-return-value-of-ubiformat.patch create mode 100644 meta/recipes-graphics/glew/glew/notempdir.patch create mode 100644 meta/recipes-multimedia/libsamplerate/libsamplerate0/shared_version_info.patch create mode 100644 meta/recipes-support/vim/files/CVE-2021-3778.patch -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#156704): https://lists.openembedded.org/g/openembedded-core/message/156704 Mute This Topic: https://lists.openembedded.org/mt/86134050/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
