[OE-core][dunfell 0/5] Patch review

Please review this next set of changes for dunfell and have comments back by end of day Thursday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2554 The following changes since commit b46b059a306b2823624e64adecded9f76430471a: layer.conf: fix

[OE-core][dunfell 1/5] gdk-pixbuf: fix CVE-2021-20240

From: Changqing Li Source: https://git.openembedded.org/openembedded-core MR: 111543 Type: Security Fix Disposition: Backport from https://git.openembedded.org/openembedded-core/commit/meta/recipes-gnome/gdk-pixbuf?h=hardknott=bd08e4d179979937604c196b4047f59c5499a960 ChangeID:

[OE-core][dunfell 2/5] xdg-utils: Add fix for CVE-2020-27748

From: Richard Purdie Backport an upstream patch for the CVE. Signed-off-by: Richard Purdie (cherry picked from commit 87191ed0303f6552865ad1edcacd674c57f2010c) Signed-off-by: Steve Sakoman --- ...9813e0eb0246f63b54e9e154970e609575af.patch | 58 +++

[OE-core] [PATCH] create-spdx: remove trailing comma

The trailing comma turns ref_id into an object instead of a string when added to the relationship table. Signed-off-by: Saul Wold --- meta/classes/create-spdx.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/create-spdx.bbclass

[OE-core][dunfell 3/5] lighttpd: Add patch for reuse large memory chunks

From: Purushottam Choudhary Added 0001-core-reuse-large-mem-chunks-fix-mem-usage-fixes-3033.patch to fix large memory usage for large file downloads from dynamic backends reuse or release large memory chunks. Also, added patch to set default chunk size 8k earlier it was 4k. This issue is

[OE-core][dunfell 4/5] oeqa/runtime/parselogs: Make DVD ata error apply to all qemux86 machines

From: Richard Purdie This log checking fix is needed for both qemux86 and qemux86-64 so move to the common section. [YOCTO #14528] Signed-off-by: Richard Purdie (cherry picked from commit 2475ce68f0bc1f342c75364dfcfaf7f30499badf) Signed-off-by: Steve Sakoman ---

[OE-core][dunfell 5/5] default-distrovars.inc: Set BBINCLUDELOGS to empty to disable printing failed task output multiple times

From: Martin Jansa * the output is shown 3 times with default configuration and 5 times when --verbose is being used with knotty, there might be other use-cases where we actually need this, but until the logging is resolved better, setting this to empty looks like more reasonable option

[OE-core] Yocto Project Status WW36`21

Current Dev Position: YP 3.4 M4 Next Deadline: 4th Oct. 2021 YP 3.4 M4 build Next Team Meetings: * Bug Triage meeting Thursday Sept. 9th at 7:30am PDT ( https://zoom.us/j/454367603?pwd=ZGxoa2ZXL3FkM3Y0bFd5aVpHVVZ6dz09)

Re: [OE-core] [PATCH 1/1] assimp: Remove it

On Tue, Sep 7, 2021 at 5:10 AM Ross Burton wrote: > > On Tue, 7 Sept 2021 at 13:04, Randy MacLeod > wrote: > > I'll look at the sections that you have pointed out later today. > > Debian is always worth looking at when there's license issues. > >

[OE-core][dunfell 0/5] Pull request (cover letter only)

*The following changes since commit 448e0271ed831582bb5833486fc17b131676fb53: selftest: disable virgl headless test (2021-08-27 04:58:08 -1000) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-next

Re: [OE-core] [Dunfell][PATCH] dbus: Security fix CVE-2020-35512

On 9/2/21 7:55 PM, Steve Sakoman wrote: > On Thu, Sep 2, 2021 at 8:38 AM Steve Sakoman wrote: >> On Thu, Sep 2, 2021 at 8:10 AM Armin Kuster wrote: >>> ping or did I miss a response to this patch? >> No you didn't miss anything! >> >> I mistakenly stashed this patch along with your "lz4:

[OE-core] [dunfell][PATCH 2/5] dbus-test: upgrade 1.12.16 -> 1.12.18

From: Wang Mingyu (From OE-Core rev: 839695e0c1b0c0fcfbb924c2b174c4a638067a32) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 5cbf053481642a820b9f4c6bed9ac79246719087) Signed-off-by: Armin Kuster --- .../dbus/{dbus-test_1.12.16.bb =>

[OE-core] [dunfell][PATCH 1/5] dbus: upgrade 1.12.16 -> 1.12.18

From: Wang Mingyu (From OE-Core rev: 8d33a2a4e4b6ff8f831523e5b1b16ead6b29cc79) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit a62471f0641551717a260c67690d3a7d280ac028) [Bug fix only update, drop cve patch now included a0926ef86f (tag: dbus-1.12.18)

[OE-core] [dunfell][PATCH 3/5] dbus-test: Remove EXTRA_OECONF_X configs

From: Ovidiu Panait X specific configs are already handled through PACKAGECONFIG: PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd x11', d)}" ... PACKAGECONFIG[x11] = "--with-x --enable-x11-autolaunch,--without-x --disable-x11-autolaunch, virtual/libx11

[OE-core] [dunfell][PATCH 4/5] dbus,dbus-test: Move common parts to dbus.inc

From: Ovidiu Panait dbus and dbus-test share the same source code and base configuration options, so factor out the common parts into dbus.inc. This way we can eliminate the need to keep the two recipes in sync. When they are not properly in sync (e.g. when dbus recipe has extra patches/config

[OE-core] [dunfell][PATCH 5/5] dbus: upgrade 1.12.18 -> 1.12.20

From: Wang Mingyu Source: https://git.openembedded.org/openembedded-core MR: 108825 Type: Security Fix Disposition: Backport from https://git.openembedded.org/openembedded-core/commit/meta/recipes-core/dbus?id=bfaef91e77cd54e4f642e966903aac3f3291c325 ChangeID:

Re: [OE-core] [hardknott][PATCH] Revert "sdk: fix relocate symlink failed"

On 9/7/21 6:39 PM, Andrey Zhizhikin wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] Hello Hongxu, On Tue, Sep 7, 2021 at 8:26 AM hongxu wrote: The commit [7e71acd265 sdk: fix relocate symlink failed] is used to fix regression issue caused by commit [bc4ee54535 sdk:

Re: [OE-core] License issues for assimp_5.0.1.bb

On 9/7/21 3:44 PM, Alexander Kanavin wrote: I'm not sure what, if anything, uses assimp anymore - it used to be a dependency of (old) vulkan-demos, but not anymore. And nothing in meta-oe. Qt5/6 has it as an optional dependency in qt3d, off by default. I'd say, remove. Thanks, makes

[OE-core] [hardknott][PATCH] Revert "sdk: fix relocate symlink failed"

The commit [7e71acd265 sdk: fix relocate symlink failed] is used to fix regression issue caused by commit [bc4ee54535 sdk: Decouple default install path from built in path], but hardknott does not contain commit bc4ee54535, so commit 7e71acd265 should not be in hardknott neither, otherwise it

[OE-core] [hardknott][PATCH 07/11] linux-yocto/5.10: update to v5.10.59

From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 5805e5eec901 Linux 5.10.59 25cff25ec606 net: xilinx_emaclite: Do not print real IOMEM pointer 6a002d48a660 ovl: prevent private clone if bind mount is not allowed

[OE-core] [hardknott][PATCH 08/11] linux-yocto/5.10: update to v5.10.60

From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 2c5bd949b1df Linux 5.10.60 3a24e121304a net: dsa: microchip: ksz8795: Use software untagging on CPU port 1e78179d75fb net: dsa: microchip: ksz8795: Fix VLAN

[OE-core] [hardknott][PATCH 09/11] parselogs.py: ignore intermittent CD/DVDROM identification failure

From: Bruce Ashfield We don't use the CD/DVD ROM drive in any of our tests, but it periodically fails discovery and that leads to a QA error: [6.403477] ata3.00: failed to IDENTIFY (I/O error, err_mask=0x4) The only way to disable the optical ROM drive in qemu is to use the

[OE-core] [hardknott][PATCH 10/11] oeqa/runtime/parselogs: Make DVD ata error apply to all qemux86 machines

From: Richard Purdie This log checking fix is needed for both qemux86 and qemux86-64 so move to the common section. [YOCTO #14528] Signed-off-by: Richard Purdie (cherry picked from commit 2475ce68f0bc1f342c75364dfcfaf7f30499badf) Signed-off-by: Anuj Mittal ---

[OE-core] [hardknott][PATCH 11/11] xdg-utils: Add fix for CVE-2020-27748

From: Richard Purdie Backport an upstream patch for the CVE. Signed-off-by: Richard Purdie (cherry picked from commit 87191ed0303f6552865ad1edcacd674c57f2010c) Signed-off-by: Anuj Mittal --- ...9813e0eb0246f63b54e9e154970e609575af.patch | 58 +++

[OE-core] [hardknott][PATCH 03/11] lz4: Security Fix for CVE-2021-3520

From: Armin Kuster Source: https://github.com/lz4/lz4 MR: 111604 Type: Security Fix Disposition: Backport from https://github.com/lz4/lz4/commit/8301a21773ef61656225e264f4f06ae14462bca7#diff-7055e9cf14c488aea9837aaf9f528b58ee3c22988d7d0d81d172ec62d94a88a7 ChangeID:

[OE-core] [hardknott][PATCH 04/11] sdk: Decouple default install path from built in path

From: Richard Purdie Add SDKPATHINSTALL which is used as the default install location of the SDK instead of SDKPATH. This means the default install path isn't encoded into every SDK binary, meaning if a date is used there the entire SDK doesn't have to rebuild. Most distros can switch to only

[OE-core] [hardknott][PATCH 06/11] vim: add option to disable NLS support

From: Andrej Valek - Some distributions with UTF-8 locale have problem when National Language Support is enabled. Add there an option to disable it. Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie (cherry picked from commit da630d6d81a396c3e1635fbd7b8103df47ed2732) Signed-off-by:

[OE-core] [hardknott][PATCH 05/11] cpio: backport fix for CVE-2021-38185

From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 4accf77ea5b5810cb2330acc6773690ec1b1c71b) Signed-off-by: Anuj Mittal --- .../cpio/cpio-2.13/CVE-2021-38185.patch | 581 ++ meta/recipes-extended/cpio/cpio_2.13.bb

[OE-core] [hardknott][PATCH 01/11] kernel-yocto: Simplify no git repo case in do_kernel_checkout

From: Paul Barker If the kernel sources are not fetched via git, a local git repository is created in do_kernel_checkout. In this case we know that there will be no remote branches and we will already be on the correct branch (since only one branch will exist). So we can simplify things by

[OE-core] [hardknott][PATCH 00/11] Patch review request

Please review these changes for hardknott. Builds cleanly on autobuilder except for an intermittent failure. https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2550 Thanks, Anuj The following changes since commit e3a7eaf9fe1420b2525e14f0c0f2936e7818b8a3:

[OE-core] [hardknott][PATCH 02/11] bluez5: fix CVE-2021-3658

From: Trevor Gamblin Backporting upstream fix since the uprev from 5.60 -> 5.61 does include some minor functionality changes. Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal --- meta/recipes-connectivity/bluez5/bluez5.inc | 1 + ...ter-Fix-storing-discoverable-setting.patch |

Re: [OE-core] minor curiosity related to libdir vs base_libdir and shared libs

On Sun, Sep 5, 2021 at 1:02 PM Robert P. J. Day wrote: > a minor oddity i stumbled over digging into the proper installation > of shared libraries ... building core-image-minimal for qemuarm64 and, > for the most part, recipes from oe-core that install shared libs put > all three artifacts

[OE-core] License issues for assimp_5.0.1.bb

Hello, It seems that meta/recipes-graphics/vulkan/assimp_5.0.1.bb has license issues, its license is BSD-3-Clause in the LICENSE file, but a few files can't be redistributed with out written permissions: * scripts/StepImporter/schema_ifc2x3.exp Copyright by: International Alliance for

Re: [OE-core] License issues for assimp_5.0.1.bb

I'm not sure what, if anything, uses assimp anymore - it used to be a dependency of (old) vulkan-demos, but not anymore. And nothing in meta-oe. Qt5/6 has it as an optional dependency in qt3d, off by default. I'd say, remove. Alex On Tue, 7 Sept 2021 at 09:35, Robert Yang wrote: > Hello, > >

Re: [OE-core] minor curiosity related to libdir vs base_libdir and shared libs

On Tue, 7 Sep 2021, Andre McCurdy wrote: > On Sun, Sep 5, 2021 at 1:02 PM Robert P. J. Day wrote: > > a minor oddity i stumbled over digging into the proper installation > > of shared libraries ... building core-image-minimal for qemuarm64 and, > > for the most part, recipes from oe-core that

[OE-core] [PATCH 0/1] assimp: Remove it

The following changes since commit 70de1dbb660461bdf0613494f53ec4c78738ae2a: vim: Add packageconfig for sound notification support (2021-09-06 09:49:13 +0100) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib rbt/assimp

[OE-core] [PATCH 1/1] assimp: Remove it

Remove it since it has license issues: * scripts/StepImporter/schema_ifc2x3.exp Copyright by: International Alliance for Interoperability, 1996-2005 All rights reserved. No part of this documentation may be reproduced, stored in a retrieval system, or transmitted in any form or by any means,

Re: [OE-core] minor curiosity related to libdir vs base_libdir and shared libs

On Tue, 7 Sep 2021, Andre McCurdy wrote: ... snip ... > The original commit from 2013 gives a few more clues in this case: > > > https://git.yoctoproject.org/cgit/cgit.cgi/meta-selinux/commit/?id=587fdba43a7747992995029a88d3051ef0efe7f6 > > It's not explicit which QA test was being triggered

[OE-core] [hardknott][PATCH 0/1] assimp: Remove it

The following changes since commit e3a7eaf9fe1420b2525e14f0c0f2936e7818b8a3: build-appliance-image: Update to hardknott head revision (2021-09-01 16:28:21 +0100) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib rbt/assimp-hardknott

[OE-core] [hardknott][PATCH 1/1] assimp: Remove it

Remove it since it has license issues: * scripts/StepImporter/schema_ifc2x3.exp Copyright by: International Alliance for Interoperability, 1996-2005 All rights reserved. No part of this documentation may be reproduced, stored in a retrieval system, or transmitted in any form or by any means,

Re: [OE-core] [PATCH 1/1] assimp: Remove it

On Tue, 7 Sept 2021 at 13:04, Randy MacLeod wrote: > I'll look at the sections that you have pointed out later today. Debian is always worth looking at when there's license issues. https://salsa.debian.org/debian/assimp/-/blob/master/debian/README.source Specifically:

[OE-core] [PATCH] findutils: add ptest

Signed-off-by: Oleh Matiusha --- meta/recipes-extended/findutils/findutils.inc | 6 +- .../findutils/findutils/run-ptest | 57 +++ .../findutils/findutils_4.8.0.bb | 11 3 files changed, 72 insertions(+), 2 deletions(-) create mode 100644

Re: [OE-core] [hardknott][PATCH] Revert "sdk: fix relocate symlink failed"

Hello Hongxu, On Tue, Sep 7, 2021 at 8:26 AM hongxu wrote: > > The commit [7e71acd265 sdk: fix relocate symlink failed] is used to fix > regression issue caused by commit [bc4ee54535 sdk: Decouple default install > path from built in path], but hardknott does not contain commit bc4ee54535, > so

Re: [OE-core] [hardknott][PATCH] Revert "sdk: fix relocate symlink failed"

On Tue, Sep 7, 2021 at 12:40 PM Andrey Zhizhikin via lists.openembedded.org wrote: > > Hello Hongxu, > > On Tue, Sep 7, 2021 at 8:26 AM hongxu wrote: > > > > The commit [7e71acd265 sdk: fix relocate symlink failed] is used to fix > > regression issue caused by commit [bc4ee54535 sdk: Decouple

Re: [OE-core] [PATCH 1/1] assimp: Remove it

On 2021-09-07 5:17 a.m., Robert Yang wrote: Remove it since it has license issues: * scripts/StepImporter/schema_ifc2x3.exp Copyright by: International Alliance for Interoperability, 1996-2005 All rights reserved. No part of this documentation may be reproduced, stored in a retrieval system, or