[oe] [kirkstone][PATCH] zabbix: upgrade 5.2.6 -> 5.4.12
From: Changqing Li This upgrade CVE fix: CVE-2022-24349 CVE-2022-24917 CVE-2022-24918 CVE-2022-24919 Signed-off-by: Changqing Li --- .../zabbix/{zabbix_5.2.6.bb => zabbix_5.4.12.bb}| 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-oe/recipes-connectivity/zabbix/{zabbix_5.2.6.bb => zabbix_5.4.12.bb} (92%) diff --git a/meta-oe/recipes-connectivity/zabbix/zabbix_5.2.6.bb b/meta-oe/recipes-connectivity/zabbix/zabbix_5.4.12.bb similarity index 92% rename from meta-oe/recipes-connectivity/zabbix/zabbix_5.2.6.bb rename to meta-oe/recipes-connectivity/zabbix/zabbix_5.4.12.bb index 66c80758c..f5d89d6c3 100644 --- a/meta-oe/recipes-connectivity/zabbix/zabbix_5.2.6.bb +++ b/meta-oe/recipes-connectivity/zabbix/zabbix_5.4.12.bb @@ -23,13 +23,13 @@ DEPENDS = "libevent libpcre openldap virtual/libiconv zlib" PACKAGE_ARCH = "${MACHINE_ARCH}" -SRC_URI = "https://cdn.zabbix.com/zabbix/sources/stable/5.2/${BPN}-${PV}.tar.gz \ +SRC_URI = "https://cdn.zabbix.com/zabbix/sources/stable/5.4/${BPN}-${PV}.tar.gz \ file://0001-Fix-configure.ac.patch \ file://zabbix-agent.service \ " -SRC_URI[md5sum] = "31dab3535a1fa212f5724902727f6d4d" -SRC_URI[sha256sum] = "76cb704f2a04fbc87bb3eff44fa71339c355d467f7bbd8fb53f8927c760e1680" +SRC_URI[md5sum] = "f295fd2df86143d72f6ff26e47d9e39e" +SRC_URI[sha256sum] = "d60d5515807c30c05d0900b83a7e6ef6479929aef7d6f248fba481c4816bacf4" inherit autotools-brokensep linux-kernel-base pkgconfig systemd useradd -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97615): https://lists.openembedded.org/g/openembedded-devel/message/97615 Mute This Topic: https://lists.openembedded.org/mt/92057318/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [kirkstone][PATCH] apache2: upgrade 2.4.53 -> 2.4.54
From: Changqing Li This upgrade include CVE fixes: CVE-2022-30522 CVE-2022-31813 CVE-2022-28615 CVE-2022-30556 CVE-2022-29404 CVE-2022-26377 CVE-2022-28614 CVE-2022-28330 Signed-off-by: Changqing Li --- .../0004-apache2-log-the-SELinux-context-at-startup.patch | 8 .../apache2/{apache2_2.4.53.bb => apache2_2.4.54.bb} | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.53.bb => apache2_2.4.54.bb} (99%) diff --git a/meta-webserver/recipes-httpd/apache2/apache2/0004-apache2-log-the-SELinux-context-at-startup.patch b/meta-webserver/recipes-httpd/apache2/apache2/0004-apache2-log-the-SELinux-context-at-startup.patch index 5d8291968..a652b7969 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2/0004-apache2-log-the-SELinux-context-at-startup.patch +++ b/meta-webserver/recipes-httpd/apache2/apache2/0004-apache2-log-the-SELinux-context-at-startup.patch @@ -1,4 +1,4 @@ -From 37699e9be04d83c5923644e298f400e077f76e85 Mon Sep 17 00:00:00 2001 +From abd5b40c9b094e721e91a5d75132639149d7952f Mon Sep 17 00:00:00 2001 From: Paul Eggleton Date: Tue, 17 Jul 2012 11:27:39 +0100 Subject: [PATCH] Log the SELinux context at startup. @@ -14,7 +14,7 @@ Note: unlikely to be any interest in this upstream 2 files changed, 31 insertions(+) diff --git a/configure.in b/configure.in -index c799aec..76811e7 100644 +index ea6cec3..92b74b7 100644 --- a/configure.in +++ b/configure.in @@ -491,6 +491,11 @@ getloadavg @@ -30,7 +30,7 @@ index c799aec..76811e7 100644 [AC_TRY_RUN(#define _GNU_SOURCE #include diff --git a/server/core.c b/server/core.c -index 3020090..8fef5fd 100644 +index 4da7209..d3ca25b 100644 --- a/server/core.c +++ b/server/core.c @@ -65,6 +65,10 @@ @@ -43,7 +43,7 @@ index 3020090..8fef5fd 100644 + /* LimitRequestBody handling */ #define AP_LIMIT_REQ_BODY_UNSET ((apr_off_t) -1) - #define AP_DEFAULT_LIMIT_REQ_BODY ((apr_off_t) 0) + #define AP_DEFAULT_LIMIT_REQ_BODY ((apr_off_t) 1<<30) /* 1GB */ @@ -5126,6 +5130,28 @@ static int core_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *pte } #endif diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.53.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.54.bb similarity index 99% rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.53.bb rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.54.bb index 8413f5379..4b0ed2f62 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.53.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.54.bb @@ -26,7 +26,7 @@ SRC_URI:append:class-target = " \ " LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3" -SRC_URI[sha256sum] = "d0bbd1121a57b5f2a6ff92d7b96f8050c5a45d3f14db118f64979d525858db63" +SRC_URI[sha256sum] = "eb397feeefccaf254f8d45de3768d9d68e8e73851c49afd5b7176d1ecf80c340" S = "${WORKDIR}/httpd-${PV}" -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97614): https://lists.openembedded.org/g/openembedded-devel/message/97614 Mute This Topic: https://lists.openembedded.org/mt/92057317/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [kirkstone][PATCH] redis: upgrade 7.0-rc3 -> 7.0.2
From: Changqing Li This upgrade include CVE fix: CVE-2022-24735 CVE-2022-24736 Signed-off-by: Changqing Li --- .../recipes-extended/redis/{redis_7.0-rc3.bb => redis_7.0.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/redis/{redis_7.0-rc3.bb => redis_7.0.2.bb} (96%) diff --git a/meta-oe/recipes-extended/redis/redis_7.0-rc3.bb b/meta-oe/recipes-extended/redis/redis_7.0.2.bb similarity index 96% rename from meta-oe/recipes-extended/redis/redis_7.0-rc3.bb rename to meta-oe/recipes-extended/redis/redis_7.0.2.bb index e977d67f6..b188278e1 100644 --- a/meta-oe/recipes-extended/redis/redis_7.0-rc3.bb +++ b/meta-oe/recipes-extended/redis/redis_7.0.2.bb @@ -19,7 +19,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \ file://GNU_SOURCE.patch \ file://0006-Define-correct-gregs-for-RISCV32.patch \ " -SRC_URI[sha256sum] = "66b2ecc2e4b53c62940589434ea8af3a85546df131001680ed294028cd84ecdc" +SRC_URI[sha256sum] = "5e57eafe7d4ac5ecb6a7d64d6b61db775616dbf903293b3fcc660716dbda5eeb" inherit autotools-brokensep update-rc.d systemd useradd -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97613): https://lists.openembedded.org/g/openembedded-devel/message/97613 Mute This Topic: https://lists.openembedded.org/mt/92057314/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [kirkstone][master][PATCH] redis: upgrade 6.2.6 -> 6.2.7
From: Changqing Li This upgrade include CVE fix: CVE-2022-24735 CVE-2022-24736 Signed-off-by: Changqing Li --- .../recipes-extended/redis/redis/GNU_SOURCE.patch | 14 -- .../redis/{redis_6.2.6.bb => redis_6.2.7.bb} | 2 +- 2 files changed, 9 insertions(+), 7 deletions(-) rename meta-oe/recipes-extended/redis/{redis_6.2.6.bb => redis_6.2.7.bb} (96%) diff --git a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch b/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch index 12994da56..20f689bd0 100644 --- a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch +++ b/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch @@ -1,4 +1,4 @@ -From 18dc1457db8f66237e016b85a04dc50833c33c50 Mon Sep 17 00:00:00 2001 +From 98d526f76049be21bf3d77158236b2189419a78e Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Sat, 21 Dec 2019 12:09:51 -0800 Subject: [PATCH] Define _GNU_SOURCE to get PTHREAD_MUTEX_INITIALIZER @@ -10,20 +10,22 @@ Fixes Upstream-Status: Pending Signed-off-by: Khem Raj - --- src/zmalloc.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/zmalloc.c b/src/zmalloc.c -index ba03685..322304f 100644 +index 1f33d09..5e182d1 100644 --- a/src/zmalloc.c +++ b/src/zmalloc.c -@@ -32,6 +32,7 @@ - #include "config.h" - #include "solarisfixes.h" +@@ -28,6 +28,7 @@ + * POSSIBILITY OF SUCH DAMAGE. + */ +#define _GNU_SOURCE #include #include #include +-- +2.25.1 + diff --git a/meta-oe/recipes-extended/redis/redis_6.2.6.bb b/meta-oe/recipes-extended/redis/redis_6.2.7.bb similarity index 96% rename from meta-oe/recipes-extended/redis/redis_6.2.6.bb rename to meta-oe/recipes-extended/redis/redis_6.2.7.bb index 87fade7e0..7f922a4e0 100644 --- a/meta-oe/recipes-extended/redis/redis_6.2.6.bb +++ b/meta-oe/recipes-extended/redis/redis_6.2.7.bb @@ -17,7 +17,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \ file://GNU_SOURCE.patch \ file://0006-Define-correct-gregs-for-RISCV32.patch \ " -SRC_URI[sha256sum] = "5b2b8b7a50111ef395bf1c1d5be11e6e167ac018125055daa8b5c2317ae131ab" +SRC_URI[sha256sum] = "b7a79cc3b46d3c6eb52fa37dde34a4a60824079ebdfb3abfbbfa035947c55319" inherit autotools-brokensep update-rc.d systemd useradd -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97612): https://lists.openembedded.org/g/openembedded-devel/message/97612 Mute This Topic: https://lists.openembedded.org/mt/92057310/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [OE-core] Announcing pkgexp
Em ter., 28 de jun. de 2022 às 11:26, Michael Opdenacker via lists.openembedded.org escreveu: > > On 6/28/22 16:24, Ross Burton wrote: > > > >> On 28 Jun 2022, at 15:11, Michael Opdenacker < > michael.opdenac...@bootlin.com> wrote: > >> Hey, this looks very nice and very easy to use! > >> One minor complaint, though: the "What Depends on" button didn't > immediately catch my eye. > >> Would it be possible to show such reverse dependencies in the same way > you show RDEPENDS? The result may look better and everything would be on > the same page. > > The immediate problem with that is that for some packages, like libc, > the reverse depends list can be hge. If the page is redesigned to have > scrollable regions then sure. That would likely involve someone more > skilled in web design than me getting involved ;) > Ross, take a look on ye (https://github.com/OSSystemsEmbeddedLinux/ye) it does have some things worth adding as well. -- Otavio Salvador O.S. Systems http://www.ossystems.com.brhttp://code.ossystems.com.br Mobile: +55 (53) 9 9981-7854 Mobile: +1 (347) 903-9750 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97611): https://lists.openembedded.org/g/openembedded-devel/message/97611 Mute This Topic: https://lists.openembedded.org/mt/92044622/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [PATCH] libpwquality: Add option to disable python bindings
Hi Noah, Noah Brewer escreveu no dia terça, 28/06/2022 à(s) 21:48: > From: Noah Brewer > > Remove python3-core from RDEPENDS when the appropriate PACKAGECONFIG > is set using the remove operator. Use bbappend file to set PACKAGECONFIG > to disable python bindings and to remove python3-core from RDEPENDS. > > Signed-off-by: Noah Brewer > --- > meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-) > > diff --git a/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb > b/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb > index f892cc650..ea3787792 100644 > --- a/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb > +++ b/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb > @@ -32,9 +32,11 @@ EXTRA_OECONF += > "--with-python-rev=${PYTHON_BASEVERSION} \ > --libdir=${libdir} \ > " > > -PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', > '', d)}" > +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', > '', d)} python-bindings" > +PACKAGECONFIG[python-bindings] = "--enable-python-bindings=yes, > --enable-python-bindings=no" > PACKAGECONFIG[pam] = "--enable-pam, --disable-pam, libpam" > > +RDEPENDS:${PN}:remove = "${@bb.utils.contains('PACKAGECONFIG', > 'python-bindings', '', '${PYTHON_PN}-core', d)}" > We can't override the remove operator so if you use remove no one can undo that. Please use inverted logic with RDEPENDS:${PN}:append so it is possible to use remove if needed in bbappend. Anyway we can add RDEPENDS with the PACKAGECONFIG (it is the argument number 4) https://docs.yoctoproject.org/ref-manual/variables.html?highlight=packageconfig#term-PACKAGECONFIG +PACKAGECONFIG[python-bindings] = "--enable-python-bindings=yes, --enable-python-bindings=no,,python3-core" Jose FILES:${PN} += "${libdir}/security/pam_pwquality.so" > FILES:${PN}-dbg += "${libdir}/security/.debug" > FILES:${PN}-staticdev += "${libdir}/security/pam_pwquality.a" > -- > 2.25.1 > > > > > -- Best regards, José Quaresma -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97610): https://lists.openembedded.org/g/openembedded-devel/message/97610 Mute This Topic: https://lists.openembedded.org/mt/92052665/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [PATCH] libpwquality: Add option to disable python bindings
From: Noah Brewer Remove python3-core from RDEPENDS when the appropriate PACKAGECONFIG is set using the remove operator. Use bbappend file to set PACKAGECONFIG to disable python bindings and to remove python3-core from RDEPENDS. Signed-off-by: Noah Brewer --- meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb b/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb index f892cc650..ea3787792 100644 --- a/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb +++ b/meta-oe/recipes-extended/libpwquality/libpwquality_1.4.4.bb @@ -32,9 +32,11 @@ EXTRA_OECONF += "--with-python-rev=${PYTHON_BASEVERSION} \ --libdir=${libdir} \ " -PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)}" +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)} python-bindings" +PACKAGECONFIG[python-bindings] = "--enable-python-bindings=yes, --enable-python-bindings=no" PACKAGECONFIG[pam] = "--enable-pam, --disable-pam, libpam" +RDEPENDS:${PN}:remove = "${@bb.utils.contains('PACKAGECONFIG', 'python-bindings', '', '${PYTHON_PN}-core', d)}" FILES:${PN} += "${libdir}/security/pam_pwquality.so" FILES:${PN}-dbg += "${libdir}/security/.debug" FILES:${PN}-staticdev += "${libdir}/security/pam_pwquality.a" -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97609): https://lists.openembedded.org/g/openembedded-devel/message/97609 Mute This Topic: https://lists.openembedded.org/mt/92052665/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] OpenEmbedded Happy Hour June 29 9pm/2100 UTC
All, You are cordially invited to the next OpenEmbedded Happy Hour on June 29 for Europe/Americas time zones @ 2100/9pm UTC (5pm ET / 2pm PT). https://www.openembedded.org/wiki/Calendar https://www.openembedded.org/wiki/Happy_Hours https://www.timeanddate.com/worldclock/fixedtime.html?msg=OpenEmbedded+Happy+Hour+June+29=20220629T21=1440 Regards, Tim "moto-timo" Orling -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97608): https://lists.openembedded.org/g/openembedded-devel/message/97608 Mute This Topic: https://lists.openembedded.org/mt/92046218/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [OE-core] Announcing pkgexp
On 6/28/22 16:24, Ross Burton wrote: On 28 Jun 2022, at 15:11, Michael Opdenacker wrote: Hey, this looks very nice and very easy to use! One minor complaint, though: the "What Depends on" button didn't immediately catch my eye. Would it be possible to show such reverse dependencies in the same way you show RDEPENDS? The result may look better and everything would be on the same page. The immediate problem with that is that for some packages, like libc, the reverse depends list can be hge. If the page is redesigned to have scrollable regions then sure. That would likely involve someone more skilled in web design than me getting involved ;) Understood, this definitely makes sense. Forget it! Cheers Michael -- Michael Opdenacker, Bootlin Embedded Linux and Kernel engineering https://bootlin.com -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97607): https://lists.openembedded.org/g/openembedded-devel/message/97607 Mute This Topic: https://lists.openembedded.org/mt/92044622/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [OE-core] Announcing pkgexp
> On 28 Jun 2022, at 15:11, Michael Opdenacker > wrote: > Hey, this looks very nice and very easy to use! > One minor complaint, though: the "What Depends on" button didn't immediately > catch my eye. > Would it be possible to show such reverse dependencies in the same way you > show RDEPENDS? The result may look better and everything would be on the same > page. The immediate problem with that is that for some packages, like libc, the reverse depends list can be hge. If the page is redesigned to have scrollable regions then sure. That would likely involve someone more skilled in web design than me getting involved ;) Ross IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97606): https://lists.openembedded.org/g/openembedded-devel/message/97606 Mute This Topic: https://lists.openembedded.org/mt/92044622/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [OE-core] Announcing pkgexp
Hi Ross On 6/28/22 15:36, Ross Burton wrote: Hi, I’ve just released the first release of pkgexp, a tool to explore the pkgdata that has been generated in a build. Quoting from the README: pkgexp is a tool to visually explore the OpenEmbedded `pkgdata`, which is the generated package-scope metadata. Specifically, it is designed to answer common questions regarding what has been built: - What recipes have been built? - What packages did those packages build? - What files are in a specific package? - What other packages does this package depend on? - What packages depend on this package? It’s written in Python and is a local webapp (mainly because my build machine is remote, so little webapps make sense). The code is at https://gitlab.com/rossburton/pkgexp, and positive feedback is welcome. Cheers, Ross Hey, this looks very nice and very easy to use! One minor complaint, though: the "What Depends on" button didn't immediately catch my eye. Would it be possible to show such reverse dependencies in the same way you show RDEPENDS? The result may look better and everything would be on the same page. I vote for including it in the next release :-) Many thanks Michael. -- Michael Opdenacker, Bootlin Embedded Linux and Kernel engineering https://bootlin.com -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97605): https://lists.openembedded.org/g/openembedded-devel/message/97605 Mute This Topic: https://lists.openembedded.org/mt/92044622/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] Announcing pkgexp
Hi, I’ve just released the first release of pkgexp, a tool to explore the pkgdata that has been generated in a build. Quoting from the README: pkgexp is a tool to visually explore the OpenEmbedded `pkgdata`, which is the generated package-scope metadata. Specifically, it is designed to answer common questions regarding what has been built: - What recipes have been built? - What packages did those packages build? - What files are in a specific package? - What other packages does this package depend on? - What packages depend on this package? It’s written in Python and is a local webapp (mainly because my build machine is remote, so little webapps make sense). The code is at https://gitlab.com/rossburton/pkgexp, and positive feedback is welcome. Cheers, Ross IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#97604): https://lists.openembedded.org/g/openembedded-devel/message/97604 Mute This Topic: https://lists.openembedded.org/mt/92043862/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] mariadb: Upgrade to 10.8.3
From: Mingli Yu Remove the backported patch mariadb-openssl3.patch as the logic is included in the new version. Add libzstd to RDEPENDS to fix below qa issue: mariadb-10.8.3-r0 do_package_qa: QA Issue: /usr/lib64/plugin/zstd.so contained in package mariadb-server requires libzstd.so.1()(64bit), but no providers found in RDEPENDS:mariadb-server? [file-rdeps] Signed-off-by: Mingli Yu --- ...ive_10.7.4.bb => mariadb-native_10.8.3.bb} | 0 meta-oe/recipes-dbs/mysql/mariadb.inc | 12 +- .../mysql/mariadb/mariadb-openssl3.patch | 416 -- .../{mariadb_10.7.4.bb => mariadb_10.8.3.bb} | 0 4 files changed, 9 insertions(+), 419 deletions(-) rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb => mariadb-native_10.8.3.bb} (100%) delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.8.3.bb} (100%) diff --git a/meta-oe/recipes-dbs/mysql/mariadb-native_10.7.4.bb b/meta-oe/recipes-dbs/mysql/mariadb-native_10.8.3.bb similarity index 100% rename from meta-oe/recipes-dbs/mysql/mariadb-native_10.7.4.bb rename to meta-oe/recipes-dbs/mysql/mariadb-native_10.8.3.bb diff --git a/meta-oe/recipes-dbs/mysql/mariadb.inc b/meta-oe/recipes-dbs/mysql/mariadb.inc index 922373b63..4c072dbf7 100644 --- a/meta-oe/recipes-dbs/mysql/mariadb.inc +++ b/meta-oe/recipes-dbs/mysql/mariadb.inc @@ -19,11 +19,10 @@ SRC_URI = "https://archive.mariadb.org/${BP}/source/${BP}.tar.gz \ file://ssize_t.patch \ file://mm_malloc.patch \ file://sys_futex.patch \ - file://mariadb-openssl3.patch \ " SRC_URI:append:libc-musl = " file://ppc-remove-glibc-dep.patch" -SRC_URI[sha256sum] = "73dd9c9d325520f20ca5e0ef16f94b7be1146bed7e4a78e735c20daebf3a4173" +SRC_URI[sha256sum] = "887eadc55176ac1ead1fccfc89ade4b5990ef192745ad4dcd879acb41c050892" UPSTREAM_CHECK_URI = "https://github.com/MariaDB/server/releases; @@ -176,6 +175,13 @@ do_install() { if [ -f ${D}${datadir}/doc/README ]; then mv ${D}${datadir}/doc/README ${D}${datadir}/doc/${PN}/ fi + +# mini-benchmark used for Gitlab-CI to run on every commit to catch +# if there are severe performance regressions. +# remove it to avoid introducing bash dependency +if [ -f ${D}${datadir}/mysql/mini-benchmark ]; then +rm -rf ${D}${datadir}/mysql/mini-benchmark +fi if ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'true', 'false', d)}; then pam_so=$(find ${D} -name pam_user_map.so) if [ x"${pam_so}" != x ]; then @@ -206,7 +212,7 @@ RDEPENDS:${PN}-client = "perl perl-module-getopt-long perl-module-file-temp \ RDEPENDS:${PN}-server = "perl perl-module-getopt-long perl-module-data-dumper \ perl-module-file-basename perl-module-file-path perl-module-sys-hostname \ perl-module-file-copy perl-module-file-temp perl-module-posix \ -${PN}-client ${PN}-setupdb libdbi-perl libdbd-mysql-perl lzo" +${PN}-client ${PN}-setupdb libdbi-perl libdbd-mysql-perl lzo libzstd" RDEPENDS:${PN}-leftovers = "perl perl-module-cwd perl-module-benchmark perl-module-getopt-long \ perl-module-posix perl-module-data-dumper perl-module-sigtrap perl-module-threads \ perl-module-threads-shared perl-module-io-socket perl-module-sys-hostname perl-module-file-copy \ diff --git a/meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch b/meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch deleted file mode 100644 index 878675f30..0 --- a/meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch +++ /dev/null @@ -1,416 +0,0 @@ -From 1626955f3a2107ec4c7fd927ebfa3c6c1d2b09b8 Mon Sep 17 00:00:00 2001 -From: Vladislav Vaintroub -Date: Mon, 8 Nov 2021 18:48:19 +0100 -Subject: [PATCH] MDEV-25785 Add support for OpenSSL 3.0 - -Summary of changes - -- MD_CTX_SIZE is increased - -- EVP_CIPHER_CTX_buf_noconst(ctx) does not work anymore, points - to nobody knows where. The assumption made previously was that - (since the function does not seem to be documented) - was that it points to the last partial source block. - Add own partial block buffer for NOPAD encryption instead - -- SECLEVEL in CipherString in openssl.cnf - had been downgraded to 0, from 1, to make TLSv1.0 and TLSv1.1 possible - -- Workaround Ssl_cipher_list issue, it now returns TLSv1.3 ciphers, - in addition to what was set in --ssl-cipher - -- ctx_buf buffer now must be aligned to 16 bytes with openssl( - previously with WolfSSL only), ot crashes will happen - -- updated aes-t , to be better debuggable - using function, rather than a huge multiline macro - added test that does "nopad" encryption piece-wise, to test - replacement of EVP_CIPHER_CTX_buf_noconst - -Patch from Fedora https://src.fedoraproject.org/rpms/mariadb/raw/rawhide/f/mariadb-openssl3.patch - -Upstream-Status: Backport [https://github.com/MariaDB/server/commit/d42c2efbaa06a0307c2f0fd8fa87819ff50bbd7e]