From: Archana Polampalli
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or
host name has shell metacharacters, and this name is referenced by an expansion
token in certain situations. For example, an untrusted Git repository can have a
submodule with shell metachara
From: Archana Polampalli
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be
incompletely applied. When destination constraints are specified during
addition of PKCS#11-hosted private keys, these constraints are only applied
to the first key, even if a PKCS#11 token returns
Hi Randy,
There were a few such failure instances (similar to current issue) we've seen
in the past and those were fixed by adding the respective modules. So, to avoid
such failure in future 'nativesdk-perl-modules' is added. If that causing
memory overhead, this issue will be fixed with only a
Hi Khem,
I'm working on some other issue these two days. But I think I can send out a
follow-up patch to handle those musl patches after New Year's Day.
Regards,
Qi
-Original Message-
From: Khem Raj
Sent: Thursday, December 28, 2023 11:20 AM
To: Chen, Qi
Cc: Alexandre Belloni ;
open
Please do a musl build too. We might have some patch conflicts to address.
On Wed, Dec 27, 2023 at 7:00 PM Chen Qi via lists.openembedded.org
wrote:
>
> I double checked it in my environment, setting INIT_MANAGER to "systemd" and
> then 'bitbake systemd' will not generate this warning. In this c
I double checked it in my environment, setting INIT_MANAGER to "systemd" and
then 'bitbake systemd' will not generate this warning. In this case ROOT_HOME's
value is "/root".
I checked
https://autobuilder.yoctoproject.org/typhoon/#/builders/40/builds/8354, but I
couldn't find the configuration
Hi, Ross,
What does "too common an issue" mean?
Is it okay to ignore the misjudgment by the following cases?
e.g. PV = "1.2.0" and Vulnerabilities Affected Versions (registered with NVD) =
"1.2"
Regards,
Shinji
-Original Message-
From: ross.bur...@arm.com
Sent: Wednesday, December 6,
Hello,
This breaks the selftests:
https://autobuilder.yoctoproject.org/typhoon/#/builders/145/builds/1080/steps/12/logs/stdio
ERROR: No recipes in default available for:
/home/pokybuild/yocto-worker/qemux86-tc/build/build-st-3959354/meta-selftest/recipes-test/aspell/aspell_0.60.8.bbappend
On
Thank you for your submission. Patchtest identified one
or more issues with the patch. Please see the log below for
more information:
---
Testing patch
/home/patchtest/share/mboxes/v2-2-8-devtool-selftest-Fix-test_devtool_modify_git_crates_subpath-bbappend-check.patch
FAIL: test shortlog length:
On Tue, Dec 26, 2023 at 8:59 AM Alex Kiernan via
lists.openembedded.org
wrote:
>
> On Mon, Dec 25, 2023 at 10:02 PM Richard Purdie
> wrote:
> >
> > On Mon, 2023-12-25 at 08:40 +, Richard Purdie via
> > lists.openembedded.org wrote:
> > > On Sun, 2023-12-24 at 23:09 +, Alex Kiernan wrote:
https://blog.rust-lang.org/2023/12/07/Rust-1.74.1.html
Signed-off-by: Alex Kiernan
---
Changes in v2:
- Skip zvariant based test rather than deleting it.
meta/recipes-devtools/rust/{cargo_1.74.0.bb => cargo_1.74.1.bb} | 0
.../rust/{libstd-rs_1.74.0.bb => libstd-rs_1.74.1.bb} | 0
..
https://blog.rust-lang.org/2023/10/05/Rust-1.73.0.html
Signed-off-by: Alex Kiernan
---
(no changes since v1)
meta/conf/distro/include/tcmode-default.inc | 2 +-
.../rust/{cargo_1.72.1.bb => cargo_1.73.0.bb} | 0
...-Do-not-use-LFS64-on-linux-with-musl.patch | 36 +-
.../rust/files/
https://blog.rust-lang.org/2023/09/19/Rust-1.72.1.html
Signed-off-by: Alex Kiernan
---
(no changes since v1)
meta/recipes-devtools/rust/{cargo_1.72.0.bb => cargo_1.72.1.bb} | 0
.../rust/{libstd-rs_1.72.0.bb => libstd-rs_1.72.1.bb} | 0
...t-cross-canadian_1.72.0.bb => rust-cross-can
This is the 1.74.1 rust series rebased to include a revert of
https://github.com/rust-lang/cc-rs/commit/c4f414f449bb7cffba3bc923f277704d1d08a8ec
which I'm pretty sure is what's causing our filename churn. I've checked
1.72.0 and 1.74.1 for the absvdi2.o intrinsic (one of many intrinsics
which had t
This fails to build upgrading rust and whilst the upgraded recipe works,
it no longer includes the essential things tested; skip it for now.
Signed-off-by: Alex Kiernan
---
(no changes since v1)
meta/lib/oeqa/selftest/cases/devtool.py | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta/
test_devtool_modify_git_crates_subpath expects 2 or more git URIs,
change the test from Greater to GreateEqual.
Signed-off-by: Alex Kiernan
---
(no changes since v1)
meta/lib/oeqa/selftest/cases/devtool.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/lib/oeqa/selfte
The recipe being tested is in `testrecipe`, use that rather than the
literal `zvariant`.
Signed-off-by: Alex Kiernan
---
(no changes since v1)
meta/lib/oeqa/selftest/cases/devtool.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/lib/oeqa/selftest/cases/devtool.py
b/
This is the 1.74.1 rust series rebased to include a revert of
https://github.com/rust-lang/cc-rs/commit/c4f414f449bb7cffba3bc923f277704d1d08a8ec
which I'm pretty sure is what's causing our filename churn. I've checked
1.72.0 and 1.74.1 for the absvdi2.o intrinsic (one of many intrinsics
which had t
On Wed, Dec 27, 2023 at 4:28 AM Richard Purdie
wrote:
>
> I wanted to write down some thoughts on this which I have all the
> pieces handy.
>
> We saw a nightly layer check fail for meta-openembedded:
>
> https://autobuilder.yoctoproject.org/typhoon/#/builders/121/builds/1798/steps/21/logs/stdio
>
Also, your subject is to vague:
[patch] packagegroups: Add perl modules to rdeps
it should be something like:
[PATCH] nativesdk-packagegroup-sdk-host: Add perl modules to RDEPENDS
That's 62 characters so still under the limt, iirc.
It's better to be specific, since there are 27 packagegrou
On 2023-12-27 7:50 a.m., deepthi.hem...@windriver.com wrote:
From: Deepthi Hemraj
In SDK,running "x86_64-poky-linux-gp-display-html --help" fails due to missing
perl modules which are required for it to work.
Fixes:Can't locate feature.pm in @INC (you may need to install the feature
module) a
From: Wang Mingyu
Changelog:
===
* LP#2046398: Inserting/replacing an ancestor into a node's children could loop
indefinitely.
* LP#1980767, GH#379: "TreeBuilder.close()" could fail with a "TypeError" after
parsing incorrect input.
* LP#1522052: A file-system specific test is now optio
From: Wang Mingyu
Changelog:
==
-Corrected the interface for SimplePath to encompass the expectations of
locate_file and PackagePath.
-Fixed type annotations to allow strings.
Signed-off-by: Wang Mingyu
---
...ib-metadata_7.0.0.bb => python3-importlib-metadata_7.0.1.bb} | 2 +-
1 file
From: Wang Mingyu
Changelog:
Add parent context modifier for path fields
Signed-off-by: Wang Mingyu
---
...{python3-hatchling_1.20.0.bb => python3-hatchling_1.21.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/python/{python3-hatchling_1.20.0.bb =>
p
From: Wang Mingyu
Changelog:
-bluez: Clean up static default properties, re-drop PairDevice() class_
parameter
-Add pre-commit rules
Signed-off-by: Wang Mingyu
---
.../{python3-dbusmock_0.30.0.bb => python3-dbusmock_0.30.1.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-
From: Wang Mingyu
0001-_distutils-sysconfig.py-make-it-possible-to-substite.patch
refreshed for 69.0.3
Changelog:
Retain valid names with underscores in egg_info.
Signed-off-by: Wang Mingyu
---
...tutils-sysconfig.py-make-it-possible-to-substite.patch | 8
...-setuptools_69.0.2.bb =
From: Wang Mingyu
License-Update: Add FC_FONT_WRAPPER
Signed-off-by: Wang Mingyu
---
.../fontconfig/{fontconfig_2.14.2.bb => fontconfig_2.15.0.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-graphics/fontconfig/{fontconfig_2.14.2.bb =>
fontconfig_2.15.0.bb}
From: Wang Mingyu
0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch
0001-remove-INCLUDEDIR-to-prevent-build-issues.patch
refreshed for 10.0.6
Changelog:
==
-privsep: Stop proxying stderr to console and fix some detachment issues
-non-privsep: Fix launcher hangup
-DHCP6: Allow t
From: Wang Mingyu
Signed-off-by: Wang Mingyu
---
.../{gst-devtools_1.22.7.bb => gst-devtools_1.22.8.bb} | 2 +-
...streamer1.0-libav_1.22.7.bb => gstreamer1.0-libav_1.22.8.bb} | 2 +-
.../{gstreamer1.0-omx_1.22.7.bb => gstreamer1.0-omx_1.22.8.bb} | 2 +-
...plugins-bad_1.22.7.bb => gs
From: Wang Mingyu
Changelog:
===
- fix: Properly fix -Wpedantic warnings
- fix: Set ppoll timeout minimum to 1ms
#459)
- fix: Revert "ping: use random value for the identifier field" to use PID
again
- fix: Fix support for DSCP (Traffic Class, option -Q)
- fix: Fix the errno handling
From: Wang Mingyu
CVE-2019-25051.patch
removed since it's included in 0.60.8.1
Changelog:
-Fix memory leak in suggestion code introduced in 0.60.8.
-Various documentation fixes.
-Fix various warnings when compiling with -Wall.
-Fix two buffer overflows found by Google's OSS-Fuzz.
-O
From: Deepthi Hemraj
In SDK,running "x86_64-poky-linux-gp-display-html --help" fails due to missing
perl modules which are required for it to work.
Fixes:Can't locate feature.pm in @INC (you may need to install the feature
module) and also add all the perl modules to sdk.
Signed-off-by: Deept
This doesn’t seem core enough, perhaps meta-oe is a better home for the
recipe?
Alex
On Wed 27. Dec 2023 at 14.20, Jörg Sommer via lists.openembedded.org
wrote:
> From: Jörg Sommer
>
> The main part is the tool lsi2c to scan the i2c bus, like lspci and lsusb
> do.
>
> This recipe also ships a
Thank you for your submission. Patchtest identified one
or more issues with the patch. Please see the log below for
more information:
---
Testing patch
/home/patchtest/share/mboxes/i2cdev-New-recipe-with-i2c-tools.patch
FAIL: test Upstream-Status presence: Upstream-Status is Submitted, but it is
From: Jörg Sommer
The main part is the tool lsi2c to scan the i2c bus, like lspci and lsusb
do.
This recipe also ships a static library *libi2cdev.a*. Because this library
contains the file *smbus.c* which is *GPL v2+,* and a static library can't
be linked dynamically to satisfy the LGPL, the wh
Hello,
This fails on x86-64 x32:
https://autobuilder.yoctoproject.org/typhoon/#/builders/57/builds/8214/steps/12/logs/stdio
| ../cairo-1.18.0/meson.build:381:13: ERROR: Can not run test applications in
this cross environment.
|
| A full log can be found at
/home/pokybuild/yocto-worker/qemux86
We hit the added warning on the autobuilders:
WARNING: systemd-1_255.1-r0 do_install: Using /home/root as root user's home
directory is not fully supported by systemd
https://autobuilder.yoctoproject.org/typhoon/#/builders/40/builds/8354/steps/14/logs/warnings
On 27/12/2023 12:20:34+0800, Chen
Dbus 1.15.x are pre releases. The recipe specifies that via the class
inherit and corresponding latest version check with devtool. Please run
that first.
Alex
On Wed 27. Dec 2023 at 11.38, Chen Qi via lists.openembedded.org wrote:
> From: Chen Qi
>
> License-Update:
> ===
> The lic
I wanted to write down some thoughts on this which I have all the
pieces handy.
We saw a nightly layer check fail for meta-openembedded:
https://autobuilder.yoctoproject.org/typhoon/#/builders/121/builds/1798/steps/21/logs/stdio
INFO: =
From: Deepthi Hemraj
CVE:CVE-2023-40030
This converts the feature name validation check from a warning to an error
Upstream-Status: Backport from
https://github.com/rust-lang/cargo/commit/9835622853f08be9a4b58ebe29dcec8f43b64b33
Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-40030
Sign
From: Chen Qi
License-Update:
===
The license checksums are changed, but the license remains the same.
The contents change are only about description changes, e.g., not
copying the whole licenses and instead telling people to go check them.
Signed-off-by: Chen Qi
---
.../dbus/{dbus
Thank you for your submission. Patchtest identified one
or more issues with the patch. Please see the log below for
more information:
---
Testing patch
/home/patchtest/share/mboxes/v4-3-3-mesa-fix-building-of-RustiCL-nouveau.patch
FAIL: test Signed-off-by presence: A patch file has been added wi
From: Zoltán Böszörményi
Mesa now has two OpenCL implementations: Clover (older one) and RustiCL
(newer one). Extend the "opencl" package config to include both
implementations into the libopencl-mesa (-dev) packages. As the Clover
implementation is in maintenance mode and is expected to be remov
Incorporate a patch by Karol Herbst, fixing nouveau / libgalliumvl
dependency.
Signed-off-by: Dmitry Baryshkov
---
.../mesa/files/fix-nouveau-vl.patch | 55 +++
meta/recipes-graphics/mesa/mesa.inc | 1 +
2 files changed, 56 insertions(+)
create mode 100644 m
The flag -Dopencl-native=true was dropped in Mesa 22.3, remove it from
mesa.inc.
Signed-off-by: Dmitry Baryshkov
---
meta/recipes-graphics/mesa/mesa.inc | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/meta/recipes-graphics/mesa/mesa.inc
b/meta/recipes-graphics/mesa/mesa.in
RustiCL is a new OpenCL implementation developed within the mesa
library. It supports more drivers and more features compared to the
existing Clover implementation. The Clover is supposed to fade away and
to be removed in the foreseeble feature ([1]), thus it doesn't make
sense to add separate clov
Thank you for your submission. Patchtest identified one
or more issues with the patch. Please see the log below for
more information:
---
Testing patch /home/patchtest/share/mboxes/dbus-upgrade-to-1.15.8.patch
FAIL: test lic files chksum modified not mentioned: LIC_FILES_CHKSUM changed
without "
From: Chen Qi
The license checksums are changed, but he license remains the same.
Signed-off-by: Chen Qi
---
.../dbus/{dbus_1.14.10.bb => dbus_1.15.8.bb} | 10 +-
1 file changed, 5 insertions(+), 5 deletions(-)
rename meta/recipes-core/dbus/{dbus_1.14.10.bb => dbus_1.15.8.bb
48 matches
Mail list logo