Re: [OE-core] State of bitbake world, test-dependencies 2014-06-12

2014-06-12 Thread akuster
On Thu, 2014-06-12 at 19:41 +0200, Martin Jansa wrote: This time it was incremental and it's not really complete because there is still a lot of failing recipes in world (see my other State e-mails). Complete logs:

Re: [OE-core] [oe-core][PATCH 1/2] lz4: update to latest version 119

2014-07-08 Thread akuster
On 07/08/2014 03:15 AM, Burton, Ross wrote: On 7 July 2014 22:33, Armin Kuster akus...@mvista.com wrote: -LIC_FILES_CHKSUM = file://LICENSE;md5=2008d2325e11691e17fcaa3a6046f850 +LIC_FILES_CHKSUM = file://LICENSE;md5=0b0d063f37a4477b54af2459477dcafd Please add a comment in the commit message

[OE-core] /etc/os-release

2014-07-14 Thread akuster
Hello all, I noticed some reference to /etc/os-release in some recipes. Where can I find the initial creation of /etc/os-release? If one is not created, would there desire to have one? regards, Armin -- ___ Openembedded-core mailing list

Re: [OE-core] /etc/os-release

2014-07-14 Thread akuster
Chris, On 07/14/2014 03:54 PM, Christopher Larson wrote: On Mon, Jul 14, 2014 at 3:50 PM, Saul Wold s...@linux.intel.com mailto:s...@linux.intel.com wrote: On 07/14/2014 03:38 PM, akuster wrote: Hello all, I noticed some reference to /etc/os-release in some recipes

Re: [OE-core] [meta-oe][PATCH] V2 lz4: update to latest version

2014-07-14 Thread akuster
Bah, missed removing old recipe and wrong list. - Armin On 07/14/2014 06:41 PM, Armin Kuster wrote: update to version r119 Use github instead of svn LICENSE md5sum changed since it was updated in r117 FIxes CVE-2014-4611 Signed-off-by: Armin Kuster akus...@mvista.com ---

Re: [OE-core] [meta-oe][PATCH] nettle: update to version 3.0

2014-07-15 Thread akuster
On 07/15/2014 06:49 AM, Burton, Ross wrote: On 15 July 2014 14:27, Armin Kuster akus...@mvista.com wrote: Add GNUv3 license If nettle 3 contains GPLv3 code then we probably don't want to remove nettle 2.1, for people building without any v3 code in the images. They have what they call dual

Re: [OE-core] [meta-oe][PATCH] [v3] lz4: update to latest version

2014-07-15 Thread akuster
On 07/15/2014 08:06 AM, Saul Wold wrote: On 07/15/2014 06:28 AM, Armin Kuster wrote: update to version r119 Use github instead of svn LICENSE md5sum changed since it was updated in r117 What exactly changed in r117? Same License different working or ?? They updated the copyright date. -

Re: [OE-core] [meta-oe][PATCH] nettle: update to version 3.0

2014-07-15 Thread akuster
Richard, On 07/15/2014 08:09 AM, Richard Purdie wrote: On Tue, 2014-07-15 at 07:11 -0700, akuster wrote: On 07/15/2014 06:49 AM, Burton, Ross wrote: On 15 July 2014 14:27, Armin Kuster akus...@mvista.com wrote: Add GNUv3 license If nettle 3 contains GPLv3 code then we probably don't want

Re: [OE-core] [meta-oe][PATCH] [v2] nettle: update to version 3.0

2014-07-15 Thread akuster
On 07/15/2014 08:24 AM, Burton, Ross wrote: On 15 July 2014 16:13, Armin Kuster akus...@mvista.com wrote: +LICENSE = LGPLv2.1 GPLv2 GPLv3 The manual says: Nettle is dual licenced under the GNU General Public License version 2 or later, and the GNU Lesser General Public License version 3 or

Re: [OE-core] [meta-oe][PATCH] [v2] nettle: update to version 3.0

2014-07-15 Thread akuster
On 07/15/2014 08:21 AM, Saul Wold wrote: On 07/15/2014 08:13 AM, Armin Kuster wrote: Updating to version 3.x Version 3.x includes GPL v3 code. They call it dual licensing Keeping 2.7.1 as it is GPL v2 Put common code in inc file Signed-off-by: Armin Kuster akus...@mvista.com ---

Re: [OE-core] [meta-oe][PATCH] [v3] lz4: update to latest version

2014-07-15 Thread akuster
On 07/15/2014 08:37 AM, Saul Wold wrote: On 07/15/2014 08:22 AM, akuster wrote: On 07/15/2014 08:06 AM, Saul Wold wrote: On 07/15/2014 06:28 AM, Armin Kuster wrote: update to version r119 Use github instead of svn LICENSE md5sum changed since it was updated in r117 What exactly changed

Re: [OE-core] [meta-oe][PATCH] V2 lz4: update to latest version

2014-07-16 Thread akuster
Did not mean to generate extra work for you all. Thanks for the input. I will go back to the drawing board. regards, Armin On 07/16/2014 06:48 AM, Burton, Ross wrote: On 16 July 2014 10:11, Richard Purdie richard.pur...@linuxfoundation.org wrote: I'm still a little concerned about this

[OE-core] libpcap-ng

2014-07-25 Thread akuster
Hello all, Meta-security and Meta-selinux both have libcap-ng. Instead of maintaining the same package in both places, can we get it into OE where libcap resides? regards, Armin -- ___ Openembedded-core mailing list

Re: [OE-core] libpcap-ng

2014-07-28 Thread akuster
On 07/28/2014 07:33 AM, Mark Hatle wrote: On 7/25/14, 10:02 PM, Khem Raj wrote: On Fri, Jul 25, 2014 at 3:45 PM, akuster akus...@mvista.com wrote: Meta-security and Meta-selinux both have libcap-ng. Instead of maintaining the same package in both places, can we get it into OE where libcap

Re: [OE-core] [PATCH] os-release: Adding a new recipe for operating system identification

2014-08-02 Thread akuster
On 08/01/2014 07:19 AM, Mark Hatle wrote: While not exactly the same thing, there is a similar file being generated when LSB is enabled. It can be used outside of the LSB configuration as well. The recipe is simply 'lsb'. It provides some basic initscript functions (required by the lsb) as

Re: [OE-core] [daisy][PATCH 1/2] perf: explicitly disable libunwind

2014-08-10 Thread akuster
On 08/10/2014 02:38 AM, Martin Jansa wrote: * it's not included in DEPENDS and it's detected from sysroot Signed-off-by: Martin Jansa martin.ja...@gmail.com Acked-by: Armin Kuster akuster...@gmail.com --- meta/recipes-kernel/perf/perf.bb | 2 +- 1 file changed, 1 insertion(+), 1

Re: [OE-core] Package Upgrading for 1.8

2014-10-30 Thread akuster
On 10/30/2014 11:21 AM, Saul Wold wrote: Folks, Just a reminder now that master is open again for patches, now is a great time to consider doing package Updates. Based on some rough estimates from 1.7 we did around 300 updates from 34 contributors, that got us about 73% packages upgrades.

Re: [OE-core] [meta-oe][PATCH] serf: update to 1.3.8 including CVE-2014-3504

2014-11-17 Thread akuster
: Disable SSLv2 and SSLv3 as both or broken. Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411] Includes security fix: Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399) - CVE-2014-3504: (Closes: #757965) Signed-off-by: Armin Kuster akuster...@gmail.com --- meta/recipes-support

Re: [OE-core] [PATCH 0/1] uprev serf: 1.3.6 - 1.3.8

2014-11-17 Thread akuster
Please add to the 1.3.7 the security fix - CVE-2014-3504: (Closes: #757965) On 11/17/2014 12:38 AM, wenzong@windriver.com wrote: From: Wenzong Fan wenzong@windriver.com Release changes: Serf 1.3.8 [2014-10-20, from /tags/1.3.8, r] Fix issue #152: CRC calculation error for

Re: [OE-core] [PATCH 1/1] serf: 1.3.6 - 1.3.8

2014-11-17 Thread akuster
Since Dizzy would need the security fix in serf 1.3.7, would I backport 1.3.8 to Dizzy from master or do we need a separate 1.3.7 update for Dizzy? - Armin On 11/17/2014 12:38 AM, wenzong@windriver.com wrote: From: Wenzong Fan wenzong@windriver.com Release changes: Serf 1.3.8

Re: [OE-core] [dizzy backport] [PATCH 3/4] sysvinit-inittab: Disable the carrier detect requirement for serial consoles

2014-11-26 Thread akuster
On 11/26/2014 08:01 AM, Javier Viguera wrote: I see this patch has been committed in master. Could it be backported to dizzy? Will look into. This fixes a problem with some commands (for example busybox 'less' applet) that become unresponsive when used in a serial console on some hardware

Re: [OE-core] [PATCH v2][dizzy] lzo: add debian patch for alignment issue

2014-12-15 Thread akuster
ok. - armin On 12/15/2014 10:03 AM, Saul Wold wrote: [YOCTO #6994] -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH 0/5] [RFC] Move packages from meta-oe to core for X11

2014-12-22 Thread akuster
On 12/22/2014 06:48 AM, Burton, Ross wrote: On 22 December 2014 at 04:54, Armin Kuster akuster...@gmail.com mailto:akuster...@gmail.com wrote: This fixes 'core-image-x11' image dependancy on meta-oe packages since xinit requires xterm, xclock and twm to 'startx'. Why can't we just

Re: [OE-core] [dizzy][PATCH 0/2] Backport fixes for git-perltools split

2014-12-30 Thread akuster
not include it. Paul Eggleton (1): buildtools-tarball: restore missing git tools This patch is already in the dizzy queue. http://git.yoctoproject.org/cgit/cgit.cgi/poky-contrib/commit/?h=akuster/dizzy_1_7_1id=e8a6adf0612fc6d9ca703237a3a5c630177c2f34 see poky-contrib akuster/dizzy_1_7_1

Re: [OE-core] [PATCH RFC] kernel.bbclass: run checkpatch.pl for all patches

2020-04-17 Thread akuster
On 4/17/20 5:11 AM, Mikko Rapeli wrote: > RFC: currently unconditionally, but this may need to be changed because > so many patches are not passing this check. Even upstream backports > from Linus Torvalds are failing the check sometimes. > > This is test is important to keep all kernel patches

Re: [ZEUS][OE-core][PATCH] glibc: CVE-2020-1751

2020-04-20 Thread akuster
On 4/20/20 2:58 AM, Zhixiong Chi wrote: > Backport the CVE patch from upstream: > git://sourceware.org/git/glibc.git > commit d93769405996dfc11d216ddbe415946617b5a494 Is Dunfell or Master affected ? - armin > > Signed-off-by: Zhixiong Chi > --- > .../glibc/glibc/CVE-2020-1751.patch

Re: [OE-core] [oe][zeus][PATCH] git: Security Advisory - git - CVE-2020-5260

2020-04-21 Thread akuster
On 4/21/20 1:18 AM, Li Zhou wrote: > Backport patch from 9a6bbee8006c24b46a85d29e7b38cfa79e9ab21b> to solve CVE-2020-5260. Does this affect dunfell or master? > > Signed-off-by: Li Zhou > --- > meta/recipes-devtools/git/git.inc | 4 +- >

[OE-core] Next Zeus Dot release in May

2020-04-28 Thread akuster
Our next bot release is coming up so this is a call for patches. Please have them on the list by this Friday. Planned upcoming dot releases: * YP 3.0.3 build date 2020/5/4 * YP 3.0.3 release date 2020/5/15 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group.

Re: [OE-core] [zeus 0/7] Merge request

2020-04-28 Thread akuster
On 4/28/20 9:13 AM, Jan Lübbe wrote: > On Mon, 2020-04-27 at 19:15 -0700, akuster wrote: >> Adrian Bunk (1): >> openssl: Upgrade 1.1.1d -> 1.1.1e >> >> Alexander Kanavin (1): >> openssl: update to 1.1.1f > As 1.1.1g has been released to fix CVE-2020-196

Re: [OE-core] [zeus][PATCH] qemu: Replace stime() API with clock_settime

2020-04-22 Thread akuster
On 4/22/20 7:38 AM, Martin Jansa wrote: > From: Khem Raj > > Signed-off-by: Khem Raj > Signed-off-by: Richard Purdie > --- > meta/recipes-devtools/qemu/qemu.inc | 1 + > ...linux-user-remove-host-stime-syscall.patch | 61 +++ > 2 files changed, 62 insertions(+) >

Re: [OE-core] [bitbake-devel] [poky] Thud community support

2020-04-29 Thread akuster
he community maintainer selection process. The ultimate decision will always be on the Repo maintainer which in this case is Richard. - armin > https://wiki.yoctoproject.org/wiki/Releases still says Community support. > > Thanks > > On Tue, Mar 17, 2020 at 10:13 PM akuster <mailt

Re: [OE-core] [Openembedded-architecture] Proposal: community maintained recipes in oe-core

2020-05-03 Thread akuster
On 5/2/20 4:35 AM, Alexander Kanavin wrote: > Hello all, > > the current maintenance model in openembedded-core is problematic due > to lack of well-working process of finding maintainers, and replacing > them when they're no longer able to contribute. This becomes > especially frustrating when

[OE-core] [zeus 3/7] wic: align layer plugin path

2020-04-27 Thread akuster
From: Lee Chee Yang wic look for external layer source plugin under scripts/lib/ while other tools look for lib/. allow wic to check for source plugin at both scripts/lib/ and lib/ to align with other tools while avoid breaking any existing source plugin in external layer. [YOCTO #13056]

[OE-core] [zeus 6/7] openssl: Upgrade 1.1.1d -> 1.1.1e

2020-04-27 Thread akuster
From: Adrian Bunk Backported patch removed. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie (cherry picked from commit 710bc0f8544f54750c8fb7b8affa243932927a24) [AK: bug fix only update] Signed-off-by: Armin Kuster --- .../openssl/openssl/CVE-2019-1551.patch | 758

[OE-core] [zeus 2/7] pseudo: Ensure we use our own libsqlite

2020-04-27 Thread akuster
From: Richard Purdie pseudo-native is special in that bitbake ends up executing it from the sysroot-components directory before we have any workdirs for the bitbake fakeroot worker. Since we switched to dynamically linking sqlite, it means sqlite from the host system may be found, we really want

[OE-core] [zeus 4/7] inetutils: Use alternatives to avoid manpage conflict

2020-04-27 Thread akuster
From: Ovidiu Panait Fix the following manpage conflicts: * check_data_file_clashes: Package inetutils-doc wants to install file /usr/share/man/man1/tftp.1 But that file is already provided by package * tftp-hpa-doc * check_data_file_clashes: Package inetutils-doc wants to install

[OE-core] [zeus 7/7] openssl: update to 1.1.1f

2020-04-27 Thread akuster
From: Alexander Kanavin This also un-breaks python3 ptest which got broken with 1.1.1e update. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit b4ddf5b9d8cd769b7026663f93c8bc69b55d8cbf) [AK: bugfix only update] Signed-off-by: Armin Kuster ---

[OE-core] [zeus 5/7] openssl: recommend cryptodev-module for corresponding PACKAGECONFIG

2020-04-27 Thread akuster
From: Denys Dmytriyenko Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie (cherry picked from commit 57fcf9b517fe95e871122946cb99fe7fa9fd2e26) Signed-off-by: Armin Kuster --- meta/recipes-connectivity/openssl/openssl_1.1.1d.bb | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [zeus 1/7] cve-check: CPE version '-' as all version

2020-04-27 Thread akuster
From: Lee Chee Yang CPE version could be '-' to mean no version info. Current cve_check treat it as not valid and does not report these CVE but some of these could be a valid vulnerabilities. Since non-valid CVE can be whitelisted, so treat '-' as all version and report all these CVE to capture

[OE-core] [zeus 0/7] Merge request

2020-04-27 Thread akuster
Please consider these changes for zeus The following changes since commit 5ac98c776f9b77804a0ee812f47f3ecf593e432f: kernelsrc.bbclass: Fix externalsrc support (2020-04-06 15:17:05 +0800) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib

Re: [OE-core] [zeus][PATCH] qemu: Replace stime() API with clock_settime

2020-04-22 Thread akuster
On 4/22/20 10:04 AM, Martin Jansa wrote: > On Wed, Apr 22, 2020 at 09:54:20AM -0700, akuster808 wrote: >> >> On 4/22/20 7:38 AM, Martin Jansa wrote: >>> From: Khem Raj >>> >>> Signed-off-by: Khem Raj >>> Signed-off-by: Richard Purdie >>> --- >>> meta/recipes-devtools/qemu/qemu.inc

Re: [OE-core] [bitbake-devel] Mailing list platform change March 20th

2020-03-20 Thread akuster
Micheal, Thanks for doing this. So just for my clarification, there is no needed to update any README to use a different e-mail to like we did for the Yocto transitions since oe is already using "lists.openembedded.org" - armin On 3/20/20 11:59 AM, Michael Halstead wrote: > The migration will

[OE-core] [warrior 8/8] cve-check: CPE version '-' as all version

2020-05-19 Thread akuster
From: Lee Chee Yang CPE version could be '-' to mean no version info. Current cve_check treat it as not valid and does not report these CVE but some of these could be a valid vulnerabilities. Since non-valid CVE can be whitelisted, so treat '-' as all version and report all these CVE to capture

[OE-core] [warrior 3/8] openssl: Fix reproducibility issue

2020-05-19 Thread akuster
From: Richard Purdie There was a build architecture leaking into the target ptest which could vary depending upon host. Remove it as its cosmetic. [YOCTO #13770] (From OE-Core rev: 37db519eedb7eb5cd4f14d05f30f5d580aa7458d) (From OE-Core rev: c31c676319812e6fc036741db2ab8e16eccff723)

[OE-core] [warrior 0/8] Patch review

2020-05-19 Thread akuster
Here are the next set of changes for warrior last dot release. Please have comments back by Friday. The following changes since commit ae341aed81be28232cc34daf4684bc0922f17699: yocto-uninative.inc: version 2.8 updates glibc to 2.31 (2020-03-26 07:04:11 -0700) are available in the Git

[OE-core] [warrior 5/8] openssl: Upgrade 1.1.1d -> 1.1.1e

2020-05-19 Thread akuster
From: Adrian Bunk Backported patch removed. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie (cherry picked from commit 710bc0f8544f54750c8fb7b8affa243932927a24) [AK: bug fix only update] Signed-off-by: Armin Kuster --- .../openssl/openssl/CVE-2019-1551.patch | 758

[OE-core] [warrior 1/8] git: Upgrade 2.20.1 -> 2.20.4

2020-05-19 Thread akuster
From: Adrian Bunk This includes the fixes for CVE-2020-5260 and CVE-2020-11008. Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster --- meta/recipes-devtools/git/git_2.20.1.bb | 11 --- meta/recipes-devtools/git/git_2.20.4.bb | 11 +++ 2 files changed, 11 insertions(+), 11

[OE-core] [warrior 2/8] python: Upgrade 2.7.17 -> 2.17.18

2020-05-19 Thread akuster
From: Adrian Bunk LICENSE checksum changed due to 2019 -> 2020 update. Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../{python-native_2.7.17.bb => python-native_2.7.18.bb}| 0 meta/recipes-devtools/python/python.inc | 6

[OE-core] [warrior 4/8] openssl: recommend cryptodev-module for corresponding PACKAGECONFIG

2020-05-19 Thread akuster
From: Denys Dmytriyenko Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie (cherry picked from commit 57fcf9b517fe95e871122946cb99fe7fa9fd2e26) Signed-off-by: Armin Kuster --- meta/recipes-connectivity/openssl/openssl_1.1.1d.bb | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [warrior 7/8] openssl: upgrade 1.1.1f -> 1.1.1g

2020-05-19 Thread akuster
From: Jan Luebbe This also fixes CVE-2020-1967. Signed-off-by: Jan Luebbe Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../openssl/{openssl_1.1.1f.bb => openssl_1.1.1g.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core] [warrior 6/8] openssl: update to 1.1.1f

2020-05-19 Thread akuster
From: Alexander Kanavin This also un-breaks python3 ptest which got broken with 1.1.1e update. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit b4ddf5b9d8cd769b7026663f93c8bc69b55d8cbf) [AK: bugfix only update] Signed-off-by: Armin Kuster ---

[OE-core] [warrior 3/8] openssl: Fix reproducibility issue

2020-05-22 Thread akuster
From: Richard Purdie There was a build architecture leaking into the target ptest which could vary depending upon host. Remove it as its cosmetic. [YOCTO #13770] (From OE-Core rev: 37db519eedb7eb5cd4f14d05f30f5d580aa7458d) (From OE-Core rev: c31c676319812e6fc036741db2ab8e16eccff723)

[OE-core] [warrior 6/8] openssl: update to 1.1.1f

2020-05-22 Thread akuster
From: Alexander Kanavin This also un-breaks python3 ptest which got broken with 1.1.1e update. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit b4ddf5b9d8cd769b7026663f93c8bc69b55d8cbf) [AK: bugfix only update] Signed-off-by: Armin Kuster ---

[OE-core] [warrior 0/8] Pull request

2020-05-22 Thread akuster
Please merge these changes into warrior The following changes since commit ae341aed81be28232cc34daf4684bc0922f17699: yocto-uninative.inc: version 2.8 updates glibc to 2.31 (2020-03-26 07:04:11 -0700) are available in the Git repository at:

[OE-core] [warrior 5/8] openssl: Upgrade 1.1.1d -> 1.1.1e

2020-05-22 Thread akuster
From: Adrian Bunk Backported patch removed. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie (cherry picked from commit 710bc0f8544f54750c8fb7b8affa243932927a24) [AK: bug fix only update] Signed-off-by: Armin Kuster --- .../openssl/openssl/CVE-2019-1551.patch | 758

[OE-core] [warrior 2/8] python: Upgrade 2.7.17 -> 2.17.18

2020-05-22 Thread akuster
From: Adrian Bunk LICENSE checksum changed due to 2019 -> 2020 update. Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../{python-native_2.7.17.bb => python-native_2.7.18.bb}| 0 meta/recipes-devtools/python/python.inc | 6

[OE-core] [warrior 4/8] openssl: recommend cryptodev-module for corresponding PACKAGECONFIG

2020-05-22 Thread akuster
From: Denys Dmytriyenko Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie (cherry picked from commit 57fcf9b517fe95e871122946cb99fe7fa9fd2e26) Signed-off-by: Armin Kuster --- meta/recipes-connectivity/openssl/openssl_1.1.1d.bb | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [warrior 1/8] git: Upgrade 2.20.1 -> 2.20.4

2020-05-22 Thread akuster
From: Adrian Bunk This includes the fixes for CVE-2020-5260 and CVE-2020-11008. Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster --- meta/recipes-devtools/git/git_2.20.1.bb | 11 --- meta/recipes-devtools/git/git_2.20.4.bb | 11 +++ 2 files changed, 11 insertions(+), 11

[OE-core] [warrior 7/8] openssl: upgrade 1.1.1f -> 1.1.1g

2020-05-22 Thread akuster
From: Jan Luebbe This also fixes CVE-2020-1967. Signed-off-by: Jan Luebbe Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster --- .../openssl/{openssl_1.1.1f.bb => openssl_1.1.1g.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core] [warrior 8/8] cve-check: CPE version '-' as all version

2020-05-22 Thread akuster
From: Lee Chee Yang CPE version could be '-' to mean no version info. Current cve_check treat it as not valid and does not report these CVE but some of these could be a valid vulnerabilities. Since non-valid CVE can be whitelisted, so treat '-' as all version and report all these CVE to capture

[OE-core] [PATCH] core-image-sato: qemumips use 512 mem

2020-09-12 Thread akuster
From: Armin Kuster Fixes: WARNING: core-image-sato-sdk-1.0-r0 do_testimage: Couldn't login into serial console as root using blank password WARNING: core-image-sato-sdk-1.0-r0 do_testimage: The output: root <<< run_serial(): command timed out after 60 seconds without output >>> In another

[OE-core] [PATCH 7/8] bind: Add 9.16.x

2020-09-01 Thread akuster
Removed obsolete packageconfig options License change to MPL-2.0 https://gitlab.isc.org/isc-projects/bind9/blob/master/LICENSE Refreshed: bind-ensure-searching-for-json-headers-searches-sysr.patch 0001-named-lwresd-V-and-start-log-hide-build-options.patch

[OE-core] [PATCH 2/8] kea: Move from meta-networking

2020-09-01 Thread akuster
Signed-off-by: Armin Kuster --- .../kea/files/0001-remove-AC_TRY_RUN.patch| 34 ++ .../kea/files/kea-dhcp-ddns.service | 13 .../kea/files/kea-dhcp4.service | 13 .../kea/files/kea-dhcp6.service | 13

[OE-core] [PATCH 5/8] maintainers.inc: Add me as dhcpd maintainer

2020-09-01 Thread akuster
Signed-off-by: Armin Kuster --- meta/conf/distro/include/maintainers.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/conf/distro/include/maintainers.inc b/meta/conf/distro/include/maintainers.inc index b83be2c5f9e..27e3474da8b 100644 --- a/meta/conf/distro/include/maintainers.inc

[OE-core] [PATCH 4/8] dhcpd: move from meta-network need a client

2020-09-01 Thread akuster
Signed-off-by: Armin Kuster --- .../dhcpcd/dhcpcd_9.1.4.bb| 28 ...e-INCLUDEDIR-to-prevent-build-issues.patch | 45 +++ 2 files changed, 73 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/dhcpcd_9.1.4.bb create mode 100644

[OE-core] [PATCH 3/8] maintainers.inc: Add me as kea & log4plus maintainer.

2020-09-01 Thread akuster
Signed-off-by: Armin Kuster --- meta/conf/distro/include/maintainers.inc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/conf/distro/include/maintainers.inc b/meta/conf/distro/include/maintainers.inc index c3a1f273328..b83be2c5f9e 100644 --- a/meta/conf/distro/include/maintainers.inc

[OE-core] [PATCH 6/8] dhcp: remove from core

2020-09-01 Thread akuster
update maintainers.inc too Signed-off-by: Armin Kuster --- meta/conf/distro/include/maintainers.inc | 1 - meta/recipes-connectivity/dhcp/dhcp.inc | 149 -- ...TH_DHCPD_CONF-and-_PATH_DHCLIENT_CON.patch | 27 ...-limitation-in-linux-dhclient-script.patch | 65

[OE-core] [PATCH 8/8] bind: 9.11 remove

2020-09-01 Thread akuster
Signed-off-by: Armin Kuster --- ...1-avoid-start-failure-with-bind-user.patch | 27 -- in-remove-useless-L-use_openssl-lib.patch | 30 -- ...d-V-and-start-log-hide-build-options.patch | 34 -- ...ching-for-json-headers-searches-sysr.patch | 47 ---

[OE-core] [PATCH 1/8] log4cplus: move meta-oe pkg to core

2020-09-01 Thread akuster
pkg need for kea Signed-off-by: Armin Kuster --- .../log4cplus/log4cplus_2.0.5.bb | 19 +++ 1 file changed, 19 insertions(+) create mode 100644 meta/recipes-devtools/log4cplus/log4cplus_2.0.5.bb diff --git a/meta/recipes-devtools/log4cplus/log4cplus_2.0.5.bb

Re: [OE-core] [PATCH 6/8] dhcp: remove from core

2020-09-01 Thread akuster
.cgi/poky/commit/?h=master-next=a5a4fa3d7cf7a88a7788e64306b8797e60999005 -armin > in meta-networking networkmanager recipe > depends on it too which I think I can take care. > > On Tue, Sep 1, 2020 at 8:23 AM akuster wrote: >> update maintainers.inc too >> >> Signed-off

[OE-core] [yocto] Warrior and Thud stable branches

2020-09-08 Thread akuster
Sorry. still have the old email address in my contacts. re-sending. Forwarded Message Subject:[yocto] Warrior and Thud stable branches Date: Tue, 8 Sep 2020 21:39:28 -0700 From: akuster via lists.yoctoproject.org Reply-To: akuster...@gmail.com

[OE-core] Yocto Zeus stable branch

2020-09-08 Thread akuster
Hello, The Zeus branch was defined as a transitional branch with a 9 month stable cycle since LTS was created. The 3.0.4 was the last Zeus dot release. We have since added several Build stabilization changes and last minute backports . We intend on doing on last formal build cycle but no QA so no

[OE-core] [dunfell][PATCH] uninative: Upgrade to 2.9

2020-09-07 Thread akuster
From: Khem Raj This supports glibc upto 2.32 which is now rolling into distributions Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 5cda8c7d642cfb72242c95f450e3391bd6537709) Signed-off-by: Armin Kuster --- meta/conf/distro/include/yocto-uninative.inc | 10

Re: [OE-core] [PATCH 7/8] bind: Add 9.16.x

2020-09-07 Thread akuster
On 9/4/20 1:39 AM, Andrey Zhizhikin wrote: > Hello Armin, > > On Tue, Sep 1, 2020 at 5:23 PM akuster wrote: >> Removed obsolete packageconfig options >> >> License change to MPL-2.0 >> https://gitlab.isc.org/isc-projects/bind9/blob/master/LICENSE >>

Re: [OE-core] [PATCH] cve-check: use SAFELIST

2020-09-11 Thread akuster
On 9/11/20 12:37 AM, Lee Chee Yang wrote: > From: Lee Chee Yang > > use safelist instead of whitelist. Thanks for sending the patch. There is some unfinished conclusions for renaming various variables to be more inclusive. I am personally fine with this word choice. Is this what other open

[OE-core] [master][dunfell][PATCH] bind: update to 9.11.22 ESV

2020-08-22 Thread akuster
From: Armin Kuster Source: isc.org MR: 105232, 105246, 105260 Type: Security Fix Disposition: Backport from https://www.isc.org/bind/ ChangeID: 655cfdf1e91c4107321e63a2012302e1cc184366 Description: Bug fix only update Three CVE fixes CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 For more

Re: [OE-core] [AUH] bind: upgrading to 9.16.5 FAILED

2020-08-17 Thread akuster
This update has been attempted a few times. It has many moving parts. the latest work is sitting @ https://git.openembedded.org/openembedded-core-contrib akuster/bind_update <https://git.openembedded.org/openembedded-core-contrib/log/?h=akuster/bind_update> - armin On 8/15/20 11

[OE-core] [PATCH] libdrm: fix build failure

2020-09-28 Thread akuster
From: akuster Failure seen on my CentOS7 build host Signed-off-by: akuster --- .../0001-xf86drm.c-fix-build-failure.patch| 87 +++ meta/recipes-graphics/drm/libdrm_2.4.102.bb | 4 +- 2 files changed, 90 insertions(+), 1 deletion(-) create mode 100644 meta/recipes

[OE-core] [zeus][PATCH] mesa: fix meson configure fix when 'dri' is excluded from PACKAGECONFIG

2020-05-28 Thread akuster
From: Yann Dirson Signed-off-by: Yann Dirson Signed-off-by: Ross Burton (cherry picked from commit 78efff8741f869647790810a3dd41459b9d9d8a6) Signed-off-by: Armin Kuster --- .../mesa/files/0003-Allow-enable-DRI-without-DRI-drivers.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[OE-core] [master][dunfell][PATCH] glibc: Secruity fix for CVE-2020-6096

2020-07-20 Thread akuster
From: Armin Kuster Source: glibc.org MR: 104799 Type: Security Fix Disposition: Backport from beea361050728138b82c57dda0c4810402d342b9 ChangeID: 29df826fb697fdd2742c3bace33388bda962c5f1 Description: Signed-off-by: Armin Kuster --- .../glibc/glibc/CVE-2020-6096.patch | 112

Re: [OE-core] [yocto] QA notification for completed autobuilder build (yocto-3.1.2.rc1)

2020-07-29 Thread akuster
2020 3:58 PM >> To: yo...@lists.yoctoproject.org >> Cc: ota...@ossystems.com.br; yi.z...@windriver.com; Sangal, Apoorv >> ; Yeoh, Ee Peng ; Chan, >> Aaron Chun Yew ; >> richard.pur...@linuxfoundation.org; akuster...@gmail.com; >> sjolley.yp...@gmail.com; Jain, Sangeeta ;

[OE-core] [zeus][PATCH 1/2] pypi.bbclass: mind package suffix on version check

2020-08-08 Thread akuster
From: Konrad Weihmann Some pypi packages do have suffixes like dev, or a0 or b1. When doing a version check on these, the version will get falsely identified as major release versions. Add a terminating slash to rule out those false positives Signed-off-by: Konrad Weihmann Signed-off-by:

[OE-core] [zeus][PATCH 2/2] pypi.bbclass: use new pypi UPSTREAM_CHECK_URI

2020-08-08 Thread akuster
From: Tim Orling Upstream https://pypi.python.org/pypi/${PYPI_PACKAGE}/ redirects to https://pypi.org/project/${PYPI_PACKAGE}/ Signed-off-by: Tim Orling Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman (cherry picked from commit e5f3f961242d888f3f786af8f793bf1d247fdff0) [Yocto #

[OE-core] [dunfell][PATCH] sqlite3: Security fix for CVE-2020-15358

2020-06-30 Thread akuster
From: Armin Kuster Source: sqlite.org MR: 104526 Type: Security Fix Disposition: Backport from https://www.sqlite.org/src/vinfo/10fa79d00f8091e5?diff=1 ChangeID: a1c012b8c8aecd4970f3ae16686bf25f2376f542 Description: Affects sqlite < 3.32.3 Fixes CVE CVE-2020-15358 Signed-off-by: Armin Kuster

[OE-core] [dunfell][v2][PATCH] sqlite3: Security fix for CVE-2020-15358

2020-06-30 Thread akuster
From: Armin Kuster Source: sqlite.org MR: 104526 Type: Security Fix Disposition: Backport from https://www.sqlite.org/src/vinfo/10fa79d00f8091e5?diff=1 ChangeID: a1c012b8c8aecd4970f3ae16686bf25f2376f542 Description: Affects sqlite < 3.32.3 Fixes CVE CVE-2020-15358 Signed-off-by: Armin Kuster

Re: [OE-core] [dunfell][PATCH] busybox: Security Fix For CVE-2018-1000500

2020-07-11 Thread akuster
On 7/11/20 6:21 PM, Rahul Kumar wrote: > CVE: CVE-2018-1000500 > > Signed-off-by: Rahul Kumar Does this affect master? -armin > --- > .../busybox/busybox/busybox-CVE-2018-1000500.patch | 98 > ++ > meta/recipes-core/busybox/busybox_1.31.1.bb| 1 + > 2 files

[OE-core] [PATCH] cve-check.bbclass: always save cve report

2020-07-12 Thread akuster
The cve-check file should be saved always, it has good info. Put a copy in the log dir as cve-summary with symlinks to latest run. [Yocto #13974] Signed-off-by: Armin Kuster --- meta/classes/cve-check.bbclass | 32 1 file changed, 32 insertions(+) diff --git

Re: [OE-core][master][PATCH] libjpeg-turbo: Fix CVE-2020-13790

2020-06-18 Thread akuster
On 6/18/20 1:31 AM, jason.lau wrote: > libjpeg-turbo 2.0.4 has a heap-based buffer over-read > in get_rgb_row() in rdppm.c via a malformed PPM input file. > > CVE: CVE-2020-13790 What about dunfell? -armin > > Upstream-Status: Backport >

[OE-core] [PATCH]] wpa-supplicant: Security fix CVE-2020-12695

2020-06-25 Thread akuster
From: Armin Kuster Source: http://w1.fi/security/ MR: 104452 Type: Security Fix Disposition: Backport from http://w1.fi/security/2020-1/ ChangeID: 81edff1c2c8bd592643ad3e9bba41447c34b3468 Description: Affects <= 2.9 wpa-supplicant Signed-off-by: Armin Kuster ---

[OE-core] [dunfell][PATCH] curl: Security fixes for CVE-2020-{8169/8177}

2020-06-25 Thread akuster
From: Armin Kuster Source: https://curl.haxx.se/ MR: 104472, 104458 Type: Security Fix Disposition: Backport from https://github.com/curl/curl/commit/{600a8cded447cd/8236aba58542c5f} ChangeID: 1300924f7a64b22375b4326daeef0b686481e30c Description: - Affected versions: curl 7.20.0 to and

[OE-core] [PATCH] libuv: update to the last version in meta-oe

2020-06-26 Thread akuster
Looks like I forgot to update the contrib branch. This is a squished set of these changes: https://git.openembedded.org/meta-openembedded/commit/?id=e03b48481438c747322f07ac1e1f04add541ffac https://git.openembedded.org/meta-openembedded/commit/?id=9b61f412d36b390f8d71ad1fb5875f5f6e32fd8a

Re: [OE-core] [PATCH 1/6] libuv: move from meta-oe to core for bind update

2020-06-26 Thread akuster
e4e66856ebe8d8800dfc1f0 > Oh, that is not good. I will be sending an upgrade patch soon. -armin > On Mon, Jun 22, 2020 at 4:19 PM akuster <mailto:akuster...@gmail.com>> wrote: > > From: Armin Kuster mailto:akus...@mvista.com>> > > Signed-off-by: Armin Ku

[OE-core] [PATCH 0/6] Update bind and replace dhcp

2020-06-22 Thread akuster
Move to the latest Bind ESV and replace the depricated dhcp with kea. Three packages need to move from meta-oe to core. The new bind is not compatable with the dhcp Armin Kuster (6): libuv: move from meta-oe to core for bind update bind: Update to latest ESV version 9.16 log4cplus: move

[OE-core] [PATCH 6/6] maintainers.inc: add new packages remove dhcp

2020-06-22 Thread akuster
Signed-off-by: Armin Kuster --- meta/conf/distro/include/maintainers.inc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/meta/conf/distro/include/maintainers.inc b/meta/conf/distro/include/maintainers.inc index fc1b5272da..31dfbf5064 100644 ---

[OE-core] [PATCH 5/6] dhcp: remove depricated package

2020-06-22 Thread akuster
replaces by kea Signed-off-by: Armin Kuster --- meta/recipes-connectivity/dhcp/dhcp.inc | 149 -- ...TH_DHCPD_CONF-and-_PATH_DHCLIENT_CON.patch | 27 ...-limitation-in-linux-dhclient-script.patch | 65 .../dhcp/dhcp/0002-dhclient-dbus.patch| 117

[OE-core] [PATCH 2/6] bind: Update to latest ESV version 9.16

2020-06-22 Thread akuster
From: Armin Kuster Removed obsolete packageconfig options License change to MPL-2.0 https://gitlab.isc.org/isc-projects/bind9/blob/master/LICENSE Refreshed: bind-ensure-searching-for-json-headers-searches-sysr.patch 0001-named-lwresd-V-and-start-log-hide-build-options.patch

[OE-core] [PATCH 3/6] log4cplus: move meta-oe pkg to core

2020-06-22 Thread akuster
pkg need for kea Signed-off-by: Armin Kuster --- .../log4cplus/log4cplus_2.0.5.bb | 19 +++ 1 file changed, 19 insertions(+) create mode 100644 meta/recipes-devtools/log4cplus/log4cplus_2.0.5.bb diff --git a/meta/recipes-devtools/log4cplus/log4cplus_2.0.5.bb

[OE-core] [PATCH 1/6] libuv: move from meta-oe to core for bind update

2020-06-22 Thread akuster
From: Armin Kuster Signed-off-by: Armin Kuster --- meta/conf/distro/include/maintainers.inc | 1 + .../libuv/libuv_1.34.2.bb | 19 +++ 2 files changed, 20 insertions(+) create mode 100644 meta/recipes-connectivity/libuv/libuv_1.34.2.bb diff --git

[OE-core] [PATCH 4/6] kea: Move to core

2020-06-22 Thread akuster
ISC dhcp is being retiered by kea. Move kea from meta-oe to core Signed-off-by: Armin Kuster --- .../kea/files/0001-remove-AC_TRY_RUN.patch| 34 ++ .../kea/files/kea-dhcp-ddns.service | 13 .../kea/files/kea-dhcp4.service | 13

Re: [OE-core] [AUH] bind: upgrading to 9.16.3 FAILED

2020-06-18 Thread akuster
On 6/17/20 1:22 AM, a...@auh.yoctoproject.org wrote: > Hello, > > this email is a notification from the Auto Upgrade Helper > that the automatic attempt to upgrade the recipe *bind* to *9.16.3* has > Failed (devtool error). Its on my list to update the work i did awhile back. -armin > >

  1   2   >