Re: [oe] [meta-oe][PATCH] uw-imap: Add a patch to support newer than TLSv1.0
2024. 05. 09. 8:34 keltezéssel, Zoltan Boszormenyi via lists.openembedded.org írta: 2024. 05. 09. 8:12 keltezéssel, Khem Raj írta: On Wed, May 8, 2024 at 11:08 PM Zoltan Boszormenyi via lists.openembedded.org wrote: The patch 0001-Support-OpenSSL-1.1.patch enabled building uw-imap against OpenSSL 1.1.0 or later. However, TLSv1_client_method() and TLSv1_server_method() restricts uw-imap to TLSv1.0. These APIs, along with explicitly versioned APIs like TLSv1_1_*_method() and TLSv1_2_*_method() are deprecated in OpenSSL 1.1.0 or later. The replacements are unversioned API functions: TLS_client_method() and TLS_server_method() which support TLS version autonegotiation. This allows the PHP IMAP extension to work with IMAP servers that enforce TLSv1.2 or higher. Fixes: https://bugs.php.net/bug.php?id=76928 Signed-off-by: Zoltán Böszörményi --- .../uw-imap/uw-imap/uw-imap-newer-tls.patch | 29 +++ .../recipes-devtools/uw-imap/uw-imap_2007f.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch new file mode 100644 index 0..958abc90f --- /dev/null +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch @@ -0,0 +1,29 @@ +Signed-off-by: Zoltán Böszörményi +Upstream-Status: Pending + I think it will be good to submit this patch upstream to uw as well, Is upstream maintained? The complaints at https://bugs.php.net/bug.php?id=76928 indicate that it's not and the situation of forks is a mess. For one, the seemingly most uptodate fork at https://repo.or.cz/alpine.git contains changes that break building the PHP IMAP extension. Not sure how "upstream" https://github.com/uw-imap/imap is (https://en.wikipedia.org/wiki/UW_IMAP mentions it) but the patch is now submitted there. Thanks. +--- imap-2007f/src/osdep/unix/ssl_unix.c.old 2024-05-08 09:41:06.183450584 +0200 imap-2007f/src/osdep/unix/ssl_unix.c 2024-05-08 09:43:38.512931933 +0200 +@@ -220,7 +220,11 @@ + if (ssl_last_error) fs_give ((void **) &ssl_last_error); + ssl_last_host = host; + if (!(stream->context = SSL_CTX_new ((flags & NET_TLSCLIENT) ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_client_method () : ++#else + TLSv1_client_method () : ++#endif + SSLv23_client_method ( + return "SSL context failed"; + SSL_CTX_set_options (stream->context,0); +@@ -703,7 +707,11 @@ + } + /* create context */ + if (!(stream->context = SSL_CTX_new (start_tls ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_server_method () : ++#else + TLSv1_server_method () : ++#endif + SSLv23_server_method ( + syslog (LOG_ALERT,"Unable to create SSL context, host=%.80s", + tcp_clienthost ()); diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb index dcb59f4ea..17faa3aa6 100644 --- a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb @@ -15,6 +15,7 @@ SRC_URI = "https://fossies.org/linux/misc/old/imap-${PV}.tar.gz \ file://0001-Do-not-build-mtest.patch \ file://0002-tmail-Include-ctype.h-for-isdigit.patch \ file://0001-Fix-Wincompatible-function-pointer-types.patch \ + file://uw-imap-newer-tls.patch \ " SRC_URI[md5sum] = "2126fd125ea26b73b20f01fcd5940369" -- 2.45.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110285): https://lists.openembedded.org/g/openembedded-devel/message/110285 Mute This Topic: https://lists.openembedded.org/mt/105996685/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-oe][PATCH] uw-imap: Add a patch to support newer than TLSv1.0
2024. 05. 09. 8:12 keltezéssel, Khem Raj írta: On Wed, May 8, 2024 at 11:08 PM Zoltan Boszormenyi via lists.openembedded.org wrote: The patch 0001-Support-OpenSSL-1.1.patch enabled building uw-imap against OpenSSL 1.1.0 or later. However, TLSv1_client_method() and TLSv1_server_method() restricts uw-imap to TLSv1.0. These APIs, along with explicitly versioned APIs like TLSv1_1_*_method() and TLSv1_2_*_method() are deprecated in OpenSSL 1.1.0 or later. The replacements are unversioned API functions: TLS_client_method() and TLS_server_method() which support TLS version autonegotiation. This allows the PHP IMAP extension to work with IMAP servers that enforce TLSv1.2 or higher. Fixes: https://bugs.php.net/bug.php?id=76928 Signed-off-by: Zoltán Böszörményi --- .../uw-imap/uw-imap/uw-imap-newer-tls.patch | 29 +++ .../recipes-devtools/uw-imap/uw-imap_2007f.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch new file mode 100644 index 0..958abc90f --- /dev/null +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch @@ -0,0 +1,29 @@ +Signed-off-by: Zoltán Böszörményi +Upstream-Status: Pending + I think it will be good to submit this patch upstream to uw as well, Is upstream maintained? The complaints at https://bugs.php.net/bug.php?id=76928 indicate that it's not and the situation of forks is a mess. For one, the seemingly most uptodate fork at https://repo.or.cz/alpine.git contains changes that break building the PHP IMAP extension. +--- imap-2007f/src/osdep/unix/ssl_unix.c.old 2024-05-08 09:41:06.183450584 +0200 imap-2007f/src/osdep/unix/ssl_unix.c 2024-05-08 09:43:38.512931933 +0200 +@@ -220,7 +220,11 @@ + if (ssl_last_error) fs_give ((void **) &ssl_last_error); + ssl_last_host = host; + if (!(stream->context = SSL_CTX_new ((flags & NET_TLSCLIENT) ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_client_method () : ++#else + TLSv1_client_method () : ++#endif + SSLv23_client_method ( + return "SSL context failed"; + SSL_CTX_set_options (stream->context,0); +@@ -703,7 +707,11 @@ + } + /* create context */ + if (!(stream->context = SSL_CTX_new (start_tls ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_server_method () : ++#else + TLSv1_server_method () : ++#endif + SSLv23_server_method ( + syslog (LOG_ALERT,"Unable to create SSL context, host=%.80s", + tcp_clienthost ()); diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb index dcb59f4ea..17faa3aa6 100644 --- a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb @@ -15,6 +15,7 @@ SRC_URI = "https://fossies.org/linux/misc/old/imap-${PV}.tar.gz \ file://0001-Do-not-build-mtest.patch \ file://0002-tmail-Include-ctype.h-for-isdigit.patch \ file://0001-Fix-Wincompatible-function-pointer-types.patch \ + file://uw-imap-newer-tls.patch \ " SRC_URI[md5sum] = "2126fd125ea26b73b20f01fcd5940369" -- 2.45.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110284): https://lists.openembedded.org/g/openembedded-devel/message/110284 Mute This Topic: https://lists.openembedded.org/mt/105996685/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe][meta-oe][PATCH] composefs: add a new recipe
Hi Fathi, I am thinking of moving this back again to the meta-oe/recipes-extended/com posefs. The fuse3 is only used for development purposes and the composefs uses the kernel overlayfs and erofs on the target. So in my opinion we can remove inteirly the fuse support in OE. I'm also adding support for the native target that will be required for the next ostree v2024.6 Jose Fathi Boudra escreveu (segunda, 8/04/2024 à(s) 15:33): > Hi Martin, > > On Mon, 8 Apr 2024 at 16:18, Martin Jansa wrote: > > > > On Mon, Apr 8, 2024 at 3:50 PM Fathi Boudra > wrote: > > > > > > Hi Khem, > > > > > > On Sat, 6 Apr 2024 at 03:04, Khem Raj wrote: > > > > > > > > fails with latest musl > > > > > > > > https://errors.yoctoproject.org/Errors/Details/761688/ > > > > > > I tried to reproduce: > > > > > > local.conf: > > > MACHINE = "qemuarm64" > > > TCLIBC = "musl" > > > TOOLCHAIN = "clang" > > > > > > $ bitbake -e musl |grep "^PV=" > > > PV="1.2.4+git" > > > > > > Build Configuration: > > > BB_VERSION = "2.7.3" > > > BUILD_SYS= "x86_64-linux" > > > NATIVELSBSTRING = "debian" > > > TARGET_SYS = "aarch64-oe-linux-musl" > > > MACHINE = "qemuarm64" > > > DISTRO = "nodistro" > > > DISTRO_VERSION = "nodistro.0" > > > TUNE_FEATURES= "aarch64 crc cortexa57" > > > TARGET_FPU = "" > > > meta = > "master:486ed69939f1b7572f121960c2dde246032686e7" > > > meta-clang = > "master:13dcab852c5bcd51fd75ae84ace9eddd99254653" > > > meta-filesystems > > > meta-networking > > > meta-oe > > > meta-python = > "master:5a02b76b82d1f48986212c33dddf7986385c79ef" > > > > > > I couldn't reproduce the build failure. What am I missing? > > > > removing meta-filesystems from your bblayers.conf > > no, I'm asking about the musl basename() related build failure. > > The build failure about fuse3 dependency is quite obvious. > In my local build, I moved the recipe to > meta-filesystems/recipes-support/composefs/ > I'll submit a v2 for the latter but if I can reproduce the musl issue > and get it fixed for v2 that would be great. > > > > -- Best regards, José Quaresma -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110283): https://lists.openembedded.org/g/openembedded-devel/message/110283 Mute This Topic: https://lists.openembedded.org/mt/105351850/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-oe][PATCH] uw-imap: Add a patch to support newer than TLSv1.0
On Wed, May 8, 2024 at 11:08 PM Zoltan Boszormenyi via lists.openembedded.org wrote: > > The patch 0001-Support-OpenSSL-1.1.patch enabled building > uw-imap against OpenSSL 1.1.0 or later. > > However, TLSv1_client_method() and TLSv1_server_method() > restricts uw-imap to TLSv1.0. > > These APIs, along with explicitly versioned APIs like > TLSv1_1_*_method() and TLSv1_2_*_method() are deprecated > in OpenSSL 1.1.0 or later. The replacements are unversioned > API functions: TLS_client_method() and TLS_server_method() > which support TLS version autonegotiation. > > This allows the PHP IMAP extension to work with IMAP servers > that enforce TLSv1.2 or higher. > > Fixes: https://bugs.php.net/bug.php?id=76928 > Signed-off-by: Zoltán Böszörményi > --- > .../uw-imap/uw-imap/uw-imap-newer-tls.patch | 29 +++ > .../recipes-devtools/uw-imap/uw-imap_2007f.bb | 1 + > 2 files changed, 30 insertions(+) > create mode 100644 > meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch > > diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch > b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch > new file mode 100644 > index 0..958abc90f > --- /dev/null > +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch > @@ -0,0 +1,29 @@ > +Signed-off-by: Zoltán Böszörményi > +Upstream-Status: Pending > + I think it will be good to submit this patch upstream to uw as well, > +--- imap-2007f/src/osdep/unix/ssl_unix.c.old 2024-05-08 09:41:06.183450584 > +0200 > imap-2007f/src/osdep/unix/ssl_unix.c 2024-05-08 09:43:38.512931933 > +0200 > +@@ -220,7 +220,11 @@ > + if (ssl_last_error) fs_give ((void **) &ssl_last_error); > + ssl_last_host = host; > + if (!(stream->context = SSL_CTX_new ((flags & NET_TLSCLIENT) ? > ++#if OPENSSL_VERSION_NUMBER >= 0x1010 > ++ TLS_client_method () : > ++#else > + TLSv1_client_method () : > ++#endif > + SSLv23_client_method ( > + return "SSL context failed"; > + SSL_CTX_set_options (stream->context,0); > +@@ -703,7 +707,11 @@ > + } > + /* create context */ > + if (!(stream->context = SSL_CTX_new (start_tls ? > ++#if OPENSSL_VERSION_NUMBER >= 0x1010 > ++ TLS_server_method () : > ++#else > + TLSv1_server_method () : > ++#endif > + SSLv23_server_method ( > + syslog (LOG_ALERT,"Unable to create SSL context, host=%.80s", > + tcp_clienthost ()); > diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb > b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb > index dcb59f4ea..17faa3aa6 100644 > --- a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb > +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb > @@ -15,6 +15,7 @@ SRC_URI = > "https://fossies.org/linux/misc/old/imap-${PV}.tar.gz \ > file://0001-Do-not-build-mtest.patch \ > file://0002-tmail-Include-ctype.h-for-isdigit.patch \ > file://0001-Fix-Wincompatible-function-pointer-types.patch \ > + file://uw-imap-newer-tls.patch \ > " > > SRC_URI[md5sum] = "2126fd125ea26b73b20f01fcd5940369" > -- > 2.45.0 > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110282): https://lists.openembedded.org/g/openembedded-devel/message/110282 Mute This Topic: https://lists.openembedded.org/mt/105996685/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] uw-imap: Add a patch to support newer than TLSv1.0
The patch 0001-Support-OpenSSL-1.1.patch enabled building uw-imap against OpenSSL 1.1.0 or later. However, TLSv1_client_method() and TLSv1_server_method() restricts uw-imap to TLSv1.0. These APIs, along with explicitly versioned APIs like TLSv1_1_*_method() and TLSv1_2_*_method() are deprecated in OpenSSL 1.1.0 or later. The replacements are unversioned API functions: TLS_client_method() and TLS_server_method() which support TLS version autonegotiation. This allows the PHP IMAP extension to work with IMAP servers that enforce TLSv1.2 or higher. Fixes: https://bugs.php.net/bug.php?id=76928 Signed-off-by: Zoltán Böszörményi --- .../uw-imap/uw-imap/uw-imap-newer-tls.patch | 29 +++ .../recipes-devtools/uw-imap/uw-imap_2007f.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch new file mode 100644 index 0..958abc90f --- /dev/null +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap/uw-imap-newer-tls.patch @@ -0,0 +1,29 @@ +Signed-off-by: Zoltán Böszörményi +Upstream-Status: Pending + +--- imap-2007f/src/osdep/unix/ssl_unix.c.old 2024-05-08 09:41:06.183450584 +0200 imap-2007f/src/osdep/unix/ssl_unix.c 2024-05-08 09:43:38.512931933 +0200 +@@ -220,7 +220,11 @@ + if (ssl_last_error) fs_give ((void **) &ssl_last_error); + ssl_last_host = host; + if (!(stream->context = SSL_CTX_new ((flags & NET_TLSCLIENT) ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_client_method () : ++#else + TLSv1_client_method () : ++#endif + SSLv23_client_method ( + return "SSL context failed"; + SSL_CTX_set_options (stream->context,0); +@@ -703,7 +707,11 @@ + } + /* create context */ + if (!(stream->context = SSL_CTX_new (start_tls ? ++#if OPENSSL_VERSION_NUMBER >= 0x1010 ++ TLS_server_method () : ++#else + TLSv1_server_method () : ++#endif + SSLv23_server_method ( + syslog (LOG_ALERT,"Unable to create SSL context, host=%.80s", + tcp_clienthost ()); diff --git a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb index dcb59f4ea..17faa3aa6 100644 --- a/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb +++ b/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb @@ -15,6 +15,7 @@ SRC_URI = "https://fossies.org/linux/misc/old/imap-${PV}.tar.gz \ file://0001-Do-not-build-mtest.patch \ file://0002-tmail-Include-ctype.h-for-isdigit.patch \ file://0001-Fix-Wincompatible-function-pointer-types.patch \ + file://uw-imap-newer-tls.patch \ " SRC_URI[md5sum] = "2126fd125ea26b73b20f01fcd5940369" -- 2.45.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110281): https://lists.openembedded.org/g/openembedded-devel/message/110281 Mute This Topic: https://lists.openembedded.org/mt/105996685/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] CVE checks failures for meta-oe
see https://lists.openembedded.org/g/openembedded-devel/message/110191 and https://github.com/openembedded/meta-openembedded/issues/817 and https://lists.openembedded.org/g/openembedded-devel/message/110196 we're just waiting for Armin to merge the fix. On Wed, May 8, 2024 at 11:45 PM Alexandre Belloni via lists.openembedded.org wrote: > > https://autobuilder.yoctoproject.org/typhoon/#/builders/138/builds/1612/steps/16/logs/stdio > > ERROR: Nothing RPROVIDES 'python3-unittest-automake-output' (but > /home/pokybuild/yocto-worker/metrics/build/meta-openembedded/meta-python/recipes-devtools/python/python3-pyyaml-include_1.4.1.bb > RDEPENDS on or otherwise requires it) > NOTE: Runtime target 'python3-unittest-automake-output' is unbuildable, > removing... > Missing or unbuildable dependency chain was: > ['python3-unittest-automake-output'] > ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. > > -- > Alexandre Belloni, co-owner and COO, Bootlin > Embedded Linux and Kernel engineering > https://bootlin.com > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110280): https://lists.openembedded.org/g/openembedded-devel/message/110280 Mute This Topic: https://lists.openembedded.org/mt/105990476/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] CVE checks failures for meta-oe
https://autobuilder.yoctoproject.org/typhoon/#/builders/138/builds/1612/steps/16/logs/stdio ERROR: Nothing RPROVIDES 'python3-unittest-automake-output' (but /home/pokybuild/yocto-worker/metrics/build/meta-openembedded/meta-python/recipes-devtools/python/python3-pyyaml-include_1.4.1.bb RDEPENDS on or otherwise requires it) NOTE: Runtime target 'python3-unittest-automake-output' is unbuildable, removing... Missing or unbuildable dependency chain was: ['python3-unittest-automake-output'] ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. -- Alexandre Belloni, co-owner and COO, Bootlin Embedded Linux and Kernel engineering https://bootlin.com -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110279): https://lists.openembedded.org/g/openembedded-devel/message/110279 Mute This Topic: https://lists.openembedded.org/mt/105990476/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] nodejs: Upgrade to 20.13.0 release
nodejs release notes [1] [1] https://nodejs.org/en/blog/release/v20.13.0 Signed-off-by: Khem Raj --- .../oe-npm-cache | 0 ...-cache-native_20.12.bb => nodejs-oe-cache-native_20.13.bb} | 0 .../nodejs/{nodejs_20.12.2.bb => nodejs_20.13.0.bb} | 4 ++-- 3 files changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-devtools/nodejs/{nodejs-oe-cache-20.12 => nodejs-oe-cache-20.13}/oe-npm-cache (100%) rename meta-oe/recipes-devtools/nodejs/{nodejs-oe-cache-native_20.12.bb => nodejs-oe-cache-native_20.13.bb} (100%) rename meta-oe/recipes-devtools/nodejs/{nodejs_20.12.2.bb => nodejs_20.13.0.bb} (97%) diff --git a/meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-20.12/oe-npm-cache b/meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-20.13/oe-npm-cache similarity index 100% rename from meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-20.12/oe-npm-cache rename to meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-20.13/oe-npm-cache diff --git a/meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-native_20.12.bb b/meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-native_20.13.bb similarity index 100% rename from meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-native_20.12.bb rename to meta-oe/recipes-devtools/nodejs/nodejs-oe-cache-native_20.13.bb diff --git a/meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb b/meta-oe/recipes-devtools/nodejs/nodejs_20.13.0.bb similarity index 97% rename from meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb rename to meta-oe/recipes-devtools/nodejs/nodejs_20.13.0.bb index 232df24baa..df68b5f77d 100644 --- a/meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb +++ b/meta-oe/recipes-devtools/nodejs/nodejs_20.13.0.bb @@ -1,7 +1,7 @@ DESCRIPTION = "nodeJS Evented I/O for V8 JavaScript" HOMEPAGE = "http://nodejs.org"; LICENSE = "MIT & ISC & BSD-2-Clause & BSD-3-Clause & Artistic-2.0 & Apache-2.0" -LIC_FILES_CHKSUM = "file://LICENSE;md5=9a7fcce64128730251dbc58aa41b4674" +LIC_FILES_CHKSUM = "file://LICENSE;md5=cef54676c547a5bbab44aa8be3be9ef7" CVE_PRODUCT = "nodejs node.js" @@ -36,7 +36,7 @@ SRC_URI:append:toolchain-clang:x86 = " \ SRC_URI:append:toolchain-clang:powerpc64le = " \ file://0001-ppc64-Do-not-use-mminimal-toc-with-clang.patch \ " -SRC_URI[sha256sum] = "d7cbcc5fbfb31e9001f3f0150bbeda59abe5dd7137aaa6273958cd59ce35ced7" +SRC_URI[sha256sum] = "11d229fcad7e6e10f450301223c602043f021cda51259ffafc7e55e484b37dc7" S = "${WORKDIR}/node-v${PV}" -- 2.45.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110278): https://lists.openembedded.org/g/openembedded-devel/message/110278 Mute This Topic: https://lists.openembedded.org/mt/105982741/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe][meta-oe][kirkstone][PATCH 1/1] php: upgrade 8.1.22 -> 8.1.28
From: Soumya Sambu Upgrade php to 8.1.28 Security fixes: CVE-2024-3096 CVE-2024-2756 https://www.php.net/ChangeLog-8.php#8.1.28 Signed-off-by: Soumya Sambu --- meta-oe/recipes-devtools/php/{php_8.1.22.bb => php_8.1.28.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/php/{php_8.1.22.bb => php_8.1.28.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php_8.1.22.bb b/meta-oe/recipes-devtools/php/php_8.1.28.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.1.22.bb rename to meta-oe/recipes-devtools/php/php_8.1.28.bb index ffa331844..e7eb75c1a 100644 --- a/meta-oe/recipes-devtools/php/php_8.1.22.bb +++ b/meta-oe/recipes-devtools/php/php_8.1.28.bb @@ -33,7 +33,7 @@ SRC_URI:append:class-target = " \ " S = "${WORKDIR}/php-${PV}" -SRC_URI[sha256sum] = "992354e382c6c618d01ed4be06beea8dec3178b14153df64d3c8c48b85e9fbc2" +SRC_URI[sha256sum] = "8be450096e0153c47d75384e7dd595cc897f1d53ce0060708ce9589bcc3141ee" CVE_CHECK_IGNORE += "\ CVE-2007-2728 \ -- 2.40.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110277): https://lists.openembedded.org/g/openembedded-devel/message/110277 Mute This Topic: https://lists.openembedded.org/mt/105978819/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe][meta-oe][PATCH 1/1] php: Upgrade to 8.2.18
From: Soumya Sambu Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu --- ...ext-opcache-config.m4-enable-opcache.patch | 21 +++ .../php/{php_8.2.16.bb => php_8.2.18.bb} | 2 +- 2 files changed, 13 insertions(+), 10 deletions(-) rename meta-oe/recipes-devtools/php/{php_8.2.16.bb => php_8.2.18.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch b/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch index a967d6412..c74369746 100644 --- a/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch +++ b/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch @@ -1,6 +1,6 @@ -From ca9b419f2c146061f73ee045cb0a069c18b40cd0 Mon Sep 17 00:00:00 2001 -From: Mingli Yu -Date: Wed, 15 Dec 2021 14:00:08 +0800 +From 889583912ddd7abc628f2703892ec4884db6419a Mon Sep 17 00:00:00 2001 +From: Soumya Sambu +Date: Tue, 7 May 2024 08:39:16 + Subject: [PATCH 01/11] ext/opcache/config.m4: enable opcache We can't use AC_TRY_RUN to run programs in a cross compile @@ -20,15 +20,18 @@ Signed-off-by: Claude Bing update patch to version 8.1.0 Signed-off-by: Mingli Yu + +update patch to version 8.2.18 +Signed-off-by: Soumya Sambu --- ext/opcache/config.m4 | 204 ++ 1 file changed, 8 insertions(+), 196 deletions(-) diff --git a/ext/opcache/config.m4 b/ext/opcache/config.m4 -index 2a83fa2..9471b5d 100644 +index 6bf07ad3..5d645b86 100644 --- a/ext/opcache/config.m4 +++ b/ext/opcache/config.m4 -@@ -108,209 +108,21 @@ if test "$PHP_OPCACHE" != "no"; then +@@ -113,209 +113,21 @@ if test "$PHP_OPCACHE" != "no"; then AC_CHECK_FUNCS([mprotect]) AC_MSG_CHECKING(for sysvipc shared memory support) @@ -40,7 +43,7 @@ index 2a83fa2..9471b5d 100644 -#include -#include - --int main() { +-int main(void) { - pid_t pid; - int status; - int ipc_id; @@ -121,7 +124,7 @@ index 2a83fa2..9471b5d 100644 -# define MAP_FAILED ((void*)-1) -#endif - --int main() { +-int main(void) { - pid_t pid; - int status; - char *shm; @@ -185,7 +188,7 @@ index 2a83fa2..9471b5d 100644 -# define MAP_FAILED ((void*)-1) -#endif - --int main() { +-int main(void) { - pid_t pid; - int status; - int fd; @@ -247,5 +250,5 @@ index 2a83fa2..9471b5d 100644 PHP_NEW_EXTENSION(opcache, ZendAccelerator.c \ -- -2.17.1 +2.40.0 diff --git a/meta-oe/recipes-devtools/php/php_8.2.16.bb b/meta-oe/recipes-devtools/php/php_8.2.18.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.2.16.bb rename to meta-oe/recipes-devtools/php/php_8.2.18.bb index 1cb378fb9..da04ffba6 100644 --- a/meta-oe/recipes-devtools/php/php_8.2.16.bb +++ b/meta-oe/recipes-devtools/php/php_8.2.18.bb @@ -34,7 +34,7 @@ SRC_URI:append:class-target = " \ " S = "${WORKDIR}/php-${PV}" -SRC_URI[sha256sum] = "2658c1b8935ab6b53a7f209354602761ab07066e66920bc472b8815fd1b43f71" +SRC_URI[sha256sum] = "ca0b07c254200320f518ac5b3df540a9cf14d866f3c93edc3013b52e06fac796" CVE_STATUS_GROUPS += "CVE_STATUS_PHP" CVE_STATUS_PHP[status] = "fixed-version: The name of this product is exactly the same as github.com/emlog/emlog. CVE can be safely ignored." -- 2.40.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110276): https://lists.openembedded.org/g/openembedded-devel/message/110276 Mute This Topic: https://lists.openembedded.org/mt/105978790/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][scarthgap][master][PATCH] re2: remove dev dependencies from main package
From: Peter Marko It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko --- meta-oe/recipes-support/re2/re2_2024.03.01.bb | 5 + 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/meta-oe/recipes-support/re2/re2_2024.03.01.bb b/meta-oe/recipes-support/re2/re2_2024.03.01.bb index 192fe265f..6e5b32a94 100644 --- a/meta-oe/recipes-support/re2/re2_2024.03.01.bb +++ b/meta-oe/recipes-support/re2/re2_2024.03.01.bb @@ -16,9 +16,6 @@ DEPENDS = "abseil-cpp ${@bb.utils.contains('PTEST_ENABLED', '1', 'gtest googlebe inherit cmake ptest RDEPENDS:${PN}-ptest += "cmake sed" -RDEPENDS:${PN} += "abseil-cpp-dev" - -INSANE_SKIP:${PN} += "dev-deps" EXTRA_OECMAKE += " \ -DBUILD_SHARED_LIBS=ON \ @@ -39,6 +36,6 @@ FILES:${PN} = "${libdir}" INSANE_SKIP:${PN} += "dev-so" # Don't include so files in dev package -FILES:${PN}-dev = "${includedir} ${libdir}/cmake" +FILES:${PN}-dev = "${includedir} ${libdir}/cmake ${libdir}/pkgconfig" BBCLASSEXTEND = "native nativesdk" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110275): https://lists.openembedded.org/g/openembedded-devel/message/110275 Mute This Topic: https://lists.openembedded.org/mt/105978716/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [PATCH v3 1/1] apache2: fix multilib file conflicts
From: Kai Kang There are file conflicts of apache2 when multilib enabled: Error: Transaction test error: file /usr/share/apache2/build/config.nice conflicts between attempted installs of apache2-dev-2.4.58-r0.cortexa57 and lib32-apache2-dev-2.4.58-r0.armv7vet2hf_vfp file /usr/share/apache2/build/config_vars.mk conflicts between attempted installs of apache2-dev-2.4.58-r0.cortexa57 and lib32-apache2-dev-2.4.58-r0.armv7vet2hf_vfp Install the 'build' directory to ${libexecdir} by setting 'installbuilddir' to fix the conflicts. ${libexecdir} is not populated to sysroot by default, but command apxs requires these files, then add the dir to SYSROOT_DIRS to populate them. And inherit bbclasses multilib_script and multilib_header to fix follow up conflicts: file /usr/bin/apxs conflicts between attempted installs of apache2-dev-2.4.58-r0.cortexa57 and lib32-apache2-dev-2.4.58-r0.armv7vet2hf_vfp file /usr/include/apache2/ap_config_layout.h conflicts between attempted installs of apache2-dev-2.4.58-r0.cortexa57 and lib32-apache2-dev-2.4.58-r0.armv7vet2hf_vfp Since multilib_script inherits update-alternatives, remove it from inherit line for beautification. Fix buildpaths warning as well: WARNING: lib32-apache2-2.4.58-r0 do_package_qa: QA Issue: File /usr/share/apache2/build/config.nice in package lib32-apache2-dev contains reference to TMPDIR [buildpaths] Signed-off-by: Kai Kang --- .../recipes-httpd/apache2/apache2_2.4.59.bb | 37 --- 1 file changed, 23 insertions(+), 14 deletions(-) diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.59.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.59.bb index b96e8b4e1..59db22310 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.59.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.59.bb @@ -31,7 +31,7 @@ SRC_URI[sha256sum] = "ec51501ec480284ff52f637258135d333230a7d229c3afa6f6c2f9040e S = "${WORKDIR}/httpd-${PV}" -inherit autotools update-rc.d pkgconfig systemd update-alternatives +inherit autotools update-rc.d pkgconfig systemd multilib_script multilib_header DEPENDS = "openssl expat pcre apr apr-util apache2-native " @@ -80,7 +80,9 @@ EXTRA_OECONF:class-native = "\ " do_configure:prepend() { -sed -i -e 's:$''{prefix}/usr/lib/cgi-bin:$''{libexecdir}/cgi-bin:g' ${S}/config.layout +sed -i -e 's#\(cgidir:\s*\).*#\1${libexecdir}/cgi-bin#' \ + -e 's#\(installbuilddir:\s*\).*#\1${libexecdir}/${PN}/build#' \ + ${S}/config.layout } do_install:append:class-target() { @@ -119,14 +121,15 @@ do_install:append:class-target() { -e 's,-fdebug-prefix-map[^ ]*,,g; s,-fmacro-prefix-map[^ ]*,,g; s,-ffile-prefix-map[^ ]*,,g' \ -e 's,${HOSTTOOLS_DIR}/,,g' \ -e 's,APU_INCLUDEDIR = .*,APU_INCLUDEDIR = ,g' \ - -e 's,APU_CONFIG = .*,APU_CONFIG = ,g' ${D}${datadir}/apache2/build/config_vars.mk + -e 's,APU_CONFIG = .*,APU_CONFIG = ,g' ${D}${libexecdir}/${PN}/build/config_vars.mk sed -i -e 's,--sysroot=${STAGING_DIR_TARGET},,g' \ -e 's,${DEBUG_PREFIX_MAP},,g' \ -e 's,${RECIPE_SYSROOT},,g' \ -e 's,-fdebug-prefix-map[^ ]*,,g; s,-fmacro-prefix-map[^ ]*,,g; s,-fmacro-prefix-map[^ ]*,,g' \ -e 's,APU_INCLUDEDIR = .*,APU_INCLUDEDIR = ,g' \ - -e 's,".*/configure","configure",g' ${D}${datadir}/apache2/build/config.nice + -e 's,${WORKDIR}/recipe-sysroot/,,g' \ + -e 's,".*/configure","configure",g' ${D}${libexecdir}/${PN}/build/config.nice if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then install -d ${D}${sysconfdir}/tmpfiles.d/ @@ -143,6 +146,8 @@ do_install:append:class-target() { rm -rf ${D}${localstatedir} ${D}${sbindir}/envvars* chown -R root:root ${D} + +oe_multilib_header apache2/ap_config_layout.h } do_install:append:class-native() { @@ -152,20 +157,22 @@ do_install:append:class-native() { SYSROOT_PREPROCESS_FUNCS:append:class-target = " apache_sysroot_preprocess" +SYSROOT_DIRS += "${libexecdir}/${PN}/build" + apache_sysroot_preprocess() { install -d ${SYSROOT_DESTDIR}${bindir_crossscripts} install -m 755 ${D}${bindir}/apxs ${SYSROOT_DESTDIR}${bindir_crossscripts} install -d ${SYSROOT_DESTDIR}${sbindir} install -m 755 ${D}${sbindir}/apachectl ${SYSROOT_DESTDIR}${sbindir} -sed -i 's!my $installbuilddir = .*!my $installbuilddir = "${STAGING_DIR_HOST}/${datadir}/${BPN}/build";!' ${SYSROOT_DESTDIR}${bindir_crossscripts}/apxs - -sed -i 's!^APR_CONFIG = .*!APR_CONFIG = ${STAGING_BINDIR_CROSS}/apr-1-config!' ${SYSROOT_DESTDIR}${datadir}/${BPN}/build/config_vars.mk -sed -i 's!^APU_CONFIG = .*!APU_CONFIG = ${STAGING_BINDIR_CROSS}/apu-1-config!' ${SYSROOT_DESTDIR}${datadir}/${BPN}/build/config_vars.mk -sed -i 's!^includedir = .*!includedir = ${STAGING_INCDIR}/apache2!' ${SYSROOT_DESTDIR}${datadir}/${
[oe] [PATCH v3 0/1] apache2: fix multilib file conflicts
From: Kai Kang v3: * substitute the install dir of `build` directory for all layout just as the same as the `cgidir` Hi Peter, Please have a try. If not work for you, please let me know. Regards, Kai Kai Kang (1): apache2: fix multilib file conflicts .../recipes-httpd/apache2/apache2_2.4.59.bb | 37 --- 1 file changed, 23 insertions(+), 14 deletions(-) -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110273): https://lists.openembedded.org/g/openembedded-devel/message/110273 Mute This Topic: https://lists.openembedded.org/mt/105976647/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-