date:20240620

Re: [oe] [meta-oe][PATCH] bpftool: Add missing dep on elfutils-native

2024-06-20 Thread chenheyun

hi，
this patch may be have some problem。
bitbake bpftool：
chy@ubuntu:/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work-shared/qemuarm64/kernel-source/tools/bpf/bpftool$
 make -C 
/home/sam/work/qemu-buildsystem/buildsystem3.0/buildsystem/source/kernel/linux-6.1.83/tools/lib/bpf
 
OUTPUT=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/
  
DESTDIR=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf
 prefix=  ARCH= CROSS_COMPILE= CC=gcc  
-isystem/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/recipe-sysroot-native/usr/include
 -O2 -pipe LD=ld AR=ar 
/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/libbpf.a
 install_headers
make: invalid option -- 'y'
make: invalid option -- '/'

i guss that：
HOSTCC="${BUILD_CC} ${BUILD_CFLAGS}"
should be this：
HOSTCC="${BUILD_CC}

because， HOSTCC is used in ：

$(LIBBPF_BOOTSTRAP): $(wildcard $(BPF_DIR)/*.[ch] $(BPF_DIR)/Makefile) | 
$(LIBBPF_BOOTSTRAP_OUTPUT)
echo chy1___$(BPF_DIR) ___
$(Q)$(MAKE) -C $(BPF_DIR) OUTPUT=$(LIBBPF_BOOTSTRAP_OUTPUT) \
DESTDIR=$(LIBBPF_BOOTSTRAP_DESTDIR:/=) prefix= \
ARCH= CROSS_COMPILE= CC=$(HOSTCC) LD=$(HOSTLD) AR=$(HOSTAR) $@ install_headers
echo chy2__

if HOSTCC= ${BUILD_CC} and ${BUILD_CFLAGS}
it will be err in step make -C ：

make -C 
/home/sam/work/qemu-buildsystem/buildsystem3.0/buildsystem/source/kernel/linux-6.1.83/tools/lib/bpf
 
OUTPUT=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/
  
DESTDIR=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf
 prefix=  ARCH= CROSS_COMPILE= *CC=gcc* 
*-isystem/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/recipe-sysroot-native/usr/include
 -O2 -pipe* LD=ld AR=ar 
/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/libbpf.a
 install_headers

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110971): 
https://lists.openembedded.org/g/openembedded-devel/message/110971
Mute This Topic: https://lists.openembedded.org/mt/104092706/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 1/4] python3-eth-utils: Upgrade 3.0.0 -> 4.1.1

2024-06-20 Thread Leon Anavi

Upgrade to version 4.1.1:

- Web3.is_address now returns True for non-checksummed addresses.
- Upgrades from the template with support for Python 3.12 and
  linting with blocklint.
- Remove cached_property dependency, as it was only for <=py37
- Update networks for latest changes and testnets.

Signed-off-by: Leon Anavi 
---
 ...{python3-eth-utils_3.0.0.bb => python3-eth-utils_4.1.1.bb} | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-eth-utils_3.0.0.bb => 
python3-eth-utils_4.1.1.bb} (77%)

diff --git a/meta-python/recipes-devtools/python/python3-eth-utils_3.0.0.bb 
b/meta-python/recipes-devtools/python/python3-eth-utils_4.1.1.bb
similarity index 77%
rename from meta-python/recipes-devtools/python/python3-eth-utils_3.0.0.bb
rename to meta-python/recipes-devtools/python/python3-eth-utils_4.1.1.bb
index faca03865..54bd9a67c 100644
--- a/meta-python/recipes-devtools/python/python3-eth-utils_3.0.0.bb
+++ b/meta-python/recipes-devtools/python/python3-eth-utils_4.1.1.bb
@@ -4,7 +4,9 @@ SECTION = "devel/python"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=6749008d847c14b9718949c2e24d5c0a"
 
-SRC_URI[sha256sum] = 
"8721869568448349bceae63c277b75758d11e0dc190e7ef31e161b89619458f1"
+SRC_URI[sha256sum] = 
"71c8d10dec7494aeed20fa7a4d52ec2ce4a2e52fdce80aab4f5c3c19f3648b25"
+
+PYPI_PACKAGE = "eth_utils"
 
 inherit pypi setuptools3
 
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110972): 
https://lists.openembedded.org/g/openembedded-devel/message/110972
Mute This Topic: https://lists.openembedded.org/mt/106780170/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

2024-06-20 Thread Leon Anavi

Upgrade to release 2.1.0:

- Correct a typo in requests_file.py
- Remove dependency on six
- Move metadata to pyproject.toml
- Correct homepage link in pyproject.toml
- Fix black formatting
- Set the request property in the returned Response object

Signed-off-by: Leon Anavi 
---
 ...ests-file_1.5.1.bb => python3-requests-file_2.1.0.bb} | 9 ++---
 1 file changed, 6 insertions(+), 3 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-requests-file_1.5.1.bb => 
python3-requests-file_2.1.0.bb} (70%)

diff --git a/meta-python/recipes-devtools/python/python3-requests-file_1.5.1.bb 
b/meta-python/recipes-devtools/python/python3-requests-file_2.1.0.bb
similarity index 70%
rename from meta-python/recipes-devtools/python/python3-requests-file_1.5.1.bb
rename to meta-python/recipes-devtools/python/python3-requests-file_2.1.0.bb
index 7ff984a93..4e0adc39f 100644
--- a/meta-python/recipes-devtools/python/python3-requests-file_1.5.1.bb
+++ b/meta-python/recipes-devtools/python/python3-requests-file_2.1.0.bb
@@ -3,15 +3,18 @@ HOMEPAGE = "http://github.com/dashea/requests-file";
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=9cc728d6087e43796227b0a31422de6b"
 
-SRC_URI[md5sum] = "c96daf6b0c56687556e8a52748fd896c"
-SRC_URI[sha256sum] = 
"07d74208d3389d01c38ab89ef403af0cfec63957d53a0081d8eca738d0247d8e"
+SRC_URI[sha256sum] = 
"0f549a3f3b0699415ac04d167e9cb39bccfb730cb832b4d20be3d9867356e658"
 
-inherit pypi setuptools3 ptest
+PYPI_PACKAGE = "requests_file"
+
+inherit pypi python_setuptools_build_meta ptest
 
 SRC_URI += " \
 file://run-ptest \
 "
 
+DEPENDS += "python3-setuptools-scm-native"
+
 RDEPENDS:${PN}-ptest += " \
 python3-pytest \
 python3-unittest-automake-output \
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110973): 
https://lists.openembedded.org/g/openembedded-devel/message/110973
Mute This Topic: https://lists.openembedded.org/mt/106780172/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 3/4] python3-filelock: Upgrade 3.14.0 -> 3.15.3

2024-06-20 Thread Leon Anavi

Upgrade to version 3.15.3:

- Add test for virtualenv stability
- Fix TypeError: _CountedFileLock.__init__() got an unexpected
  keyword argument 'timeout'

Signed-off-by: Leon Anavi 
---
 ...hon3-filelock_3.14.0.bb => python3-filelock_3.15.3.bb} | 8 +++-
 1 file changed, 7 insertions(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-filelock_3.14.0.bb => 
python3-filelock_3.15.3.bb} (74%)

diff --git a/meta-python/recipes-devtools/python/python3-filelock_3.14.0.bb 
b/meta-python/recipes-devtools/python/python3-filelock_3.15.3.bb
similarity index 74%
rename from meta-python/recipes-devtools/python/python3-filelock_3.14.0.bb
rename to meta-python/recipes-devtools/python/python3-filelock_3.15.3.bb
index d94ad4bf3..3bbf72319 100644
--- a/meta-python/recipes-devtools/python/python3-filelock_3.14.0.bb
+++ b/meta-python/recipes-devtools/python/python3-filelock_3.15.3.bb
@@ -6,7 +6,7 @@ HOMEPAGE = "https://py-filelock.readthedocs.io/";
 LICENSE = "Unlicense"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=911690f51af322440237a253d695d19f"
 
-SRC_URI[sha256sum] = 
"6ea72da3be9b8c82afd3edcf99f2fffbb5076335a5ae4d03248bb5b6c3eae78a"
+SRC_URI[sha256sum] = 
"e1199bf5194a2277273dacd50269f0d87d0682088a3c561c15674ea9005d8635"
 
 BBCLASSEXTEND = "native nativesdk"
 inherit pypi python_hatchling
@@ -14,3 +14,9 @@ inherit pypi python_hatchling
 DEPENDS += "\
 python3-hatch-vcs-native \
 "
+
+RDEPENDS:${PN} += " \
+python3-core \
+python3-logging \
+python3-asyncio \
+"
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110974): 
https://lists.openembedded.org/g/openembedded-devel/message/110974
Mute This Topic: https://lists.openembedded.org/mt/106780174/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 4/4] python3-hexbytes: Upgrade 1.2.0 -> 1.2.1

2024-06-20 Thread Leon Anavi

Upgrade to release 1.2.1:

- Update docs structure, adding Contribution and Code of Conduct
  sections
- Drop ``bumpversion`` for ``bump-my-version`` and add ``make
  package-test`` to build and test the package before pushing to
  pypi.

Signed-off-by: Leon Anavi 
---
 ...ython3-hexbytes_1.2.0.bb => python3-hexbytes_1.2.1.bb} | 8 +++-
 1 file changed, 7 insertions(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-hexbytes_1.2.0.bb => 
python3-hexbytes_1.2.1.bb} (60%)

diff --git a/meta-python/recipes-devtools/python/python3-hexbytes_1.2.0.bb 
b/meta-python/recipes-devtools/python/python3-hexbytes_1.2.1.bb
similarity index 60%
rename from meta-python/recipes-devtools/python/python3-hexbytes_1.2.0.bb
rename to meta-python/recipes-devtools/python/python3-hexbytes_1.2.1.bb
index b75f7794a..c8e34fc40 100644
--- a/meta-python/recipes-devtools/python/python3-hexbytes_1.2.0.bb
+++ b/meta-python/recipes-devtools/python/python3-hexbytes_1.2.1.bb
@@ -4,6 +4,12 @@ SECTION = "devel/python"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=16ffc86adf4293d4cfb204e77d62cfe6"
 
-SRC_URI[sha256sum] = 
"965f1cc712e7b263c41fdf3fb36cf671ba6f59b895937cf33941a5c996ec3a5c"
+SRC_URI[sha256sum] = 
"515f00dddf31053db4d0d7636dd16061c1d896c3109b8e751005db4ca46bcca7"
 
 inherit pypi setuptools3
+
+RDEPENDS:${PN} += " \
+python3-core \
+python3-email \
+python3-compression \
+"
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110975): 
https://lists.openembedded.org/g/openembedded-devel/message/110975
Mute This Topic: https://lists.openembedded.org/mt/106780176/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

2024-06-20 Thread Tim Orling

This should also be updated to inherit python_setuptools_build_meta per
https://github.com/dashea/requests-file/blob/ce642a115d0cc7ee2d2cda614ce9b2a0bbebe562/pyproject.toml#L3


On Thu, Jun 20, 2024 at 6:53 AM Leon Anavi via lists.openembedded.org
 wrote:

> Upgrade to release 2.1.0:
>
> - Correct a typo in requests_file.py
> - Remove dependency on six
> - Move metadata to pyproject.toml
> - Correct homepage link in pyproject.toml
> - Fix black formatting
> - Set the request property in the returned Response object
>
> Signed-off-by: Leon Anavi 
> ---
>  ...ests-file_1.5.1.bb => python3-requests-file_2.1.0.bb} | 9 ++---
>  1 file changed, 6 insertions(+), 3 deletions(-)
>  rename meta-python/recipes-devtools/python/{
> python3-requests-file_1.5.1.bb => python3-requests-file_2.1.0.bb} (70%)
>
> diff --git a/meta-python/recipes-devtools/python/
> python3-requests-file_1.5.1.bb b/meta-python/recipes-devtools/python/
> python3-requests-file_2.1.0.bb
> similarity index 70%
> rename from meta-python/recipes-devtools/python/
> python3-requests-file_1.5.1.bb
> rename to meta-python/recipes-devtools/python/
> python3-requests-file_2.1.0.bb
> index 7ff984a93..4e0adc39f 100644
> --- a/meta-python/recipes-devtools/python/python3-requests-file_1.5.1.bb
> +++ b/meta-python/recipes-devtools/python/python3-requests-file_2.1.0.bb
> @@ -3,15 +3,18 @@ HOMEPAGE = "http://github.com/dashea/requests-file";
>  LICENSE = "Apache-2.0"
>  LIC_FILES_CHKSUM = "file://LICENSE;md5=9cc728d6087e43796227b0a31422de6b"
>
> -SRC_URI[md5sum] = "c96daf6b0c56687556e8a52748fd896c"
> -SRC_URI[sha256sum] =
> "07d74208d3389d01c38ab89ef403af0cfec63957d53a0081d8eca738d0247d8e"
> +SRC_URI[sha256sum] =
> "0f549a3f3b0699415ac04d167e9cb39bccfb730cb832b4d20be3d9867356e658"
>
> -inherit pypi setuptools3 ptest
> +PYPI_PACKAGE = "requests_file"
> +
> +inherit pypi python_setuptools_build_meta ptest
>
>  SRC_URI += " \
>  file://run-ptest \
>  "
>
> +DEPENDS += "python3-setuptools-scm-native"
> +
>  RDEPENDS:${PN}-ptest += " \
>  python3-pytest \
>  python3-unittest-automake-output \
> --
> 2.39.2
>
>
> 
>
>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110976): 
https://lists.openembedded.org/g/openembedded-devel/message/110976
Mute This Topic: https://lists.openembedded.org/mt/106780172/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

2024-06-20 Thread Tim Orling

On Thu, Jun 20, 2024 at 7:01 AM Tim Orling  wrote:

> This should also be updated to inherit python_setuptools_build_meta per
>
> https://github.com/dashea/requests-file/blob/ce642a115d0cc7ee2d2cda614ce9b2a0bbebe562/pyproject.toml#L3
>


>
Never mind you did that ;)

>
>
> On Thu, Jun 20, 2024 at 6:53 AM Leon Anavi via lists.openembedded.org
>  wrote:
>
>> Upgrade to release 2.1.0:
>>
>> - Correct a typo in requests_file.py
>> - Remove dependency on six
>> - Move metadata to pyproject.toml
>> - Correct homepage link in pyproject.toml
>> - Fix black formatting
>> - Set the request property in the returned Response object
>>
>> Signed-off-by: Leon Anavi 
>> ---
>>  ...ests-file_1.5.1.bb => python3-requests-file_2.1.0.bb} | 9 ++---
>>  1 file changed, 6 insertions(+), 3 deletions(-)
>>  rename meta-python/recipes-devtools/python/{
>> python3-requests-file_1.5.1.bb => python3-requests-file_2.1.0.bb} (70%)
>>
>> diff --git a/meta-python/recipes-devtools/python/
>> python3-requests-file_1.5.1.bb b/meta-python/recipes-devtools/python/
>> python3-requests-file_2.1.0.bb
>> similarity index 70%
>> rename from meta-python/recipes-devtools/python/
>> python3-requests-file_1.5.1.bb
>> rename to meta-python/recipes-devtools/python/
>> python3-requests-file_2.1.0.bb
>> index 7ff984a93..4e0adc39f 100644
>> --- a/meta-python/recipes-devtools/python/python3-requests-file_1.5.1.bb
>> +++ b/meta-python/recipes-devtools/python/python3-requests-file_2.1.0.bb
>> @@ -3,15 +3,18 @@ HOMEPAGE = "http://github.com/dashea/requests-file";
>>  LICENSE = "Apache-2.0"
>>  LIC_FILES_CHKSUM = "file://LICENSE;md5=9cc728d6087e43796227b0a31422de6b"
>>
>> -SRC_URI[md5sum] = "c96daf6b0c56687556e8a52748fd896c"
>> -SRC_URI[sha256sum] =
>> "07d74208d3389d01c38ab89ef403af0cfec63957d53a0081d8eca738d0247d8e"
>> +SRC_URI[sha256sum] =
>> "0f549a3f3b0699415ac04d167e9cb39bccfb730cb832b4d20be3d9867356e658"
>>
>> -inherit pypi setuptools3 ptest
>> +PYPI_PACKAGE = "requests_file"
>> +
>> +inherit pypi python_setuptools_build_meta ptest
>>
>>  SRC_URI += " \
>>  file://run-ptest \
>>  "
>>
>> +DEPENDS += "python3-setuptools-scm-native"
>> +
>>  RDEPENDS:${PN}-ptest += " \
>>  python3-pytest \
>>  python3-unittest-automake-output \
>> --
>> 2.39.2
>>
>>
>> 
>>
>>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110977): 
https://lists.openembedded.org/g/openembedded-devel/message/110977
Mute This Topic: https://lists.openembedded.org/mt/106780172/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-python] [PATCH 26/43] python3-pyyaml-include: upgrade 1.3.2 -> 2.1

2024-06-20 Thread Khem Raj

This seems to be failing ptests.

bitbake meta-python-image-ptest-python3-pyyaml-include
should show the problem.

On Tue, Jun 11, 2024 at 7:59 PM wangmy via lists.openembedded.org
 wrote:
>
> From: Wang Mingyu 
>
> Changelog:
> 
> - Remove custom PyYAML types definition module, use that from types-PyYAML 
> instead.
> - Add mypy hook in pre-commit
> - Better type hints/annotations
> - Better type hints
> - Some optimizations and bugfix
> - Add py.typed file, make the package PEP-561 friendly
> - data-class attribute order changed in yaml_include.Constructor
> - namespace changed to yaml_include
> - Data class for include statement.
> - autoload attribute for Constructor class, controlling if open and parse 
> including files, or return a Data object.
> - Representer class for YAML dumping.
> - load and lazy_load function - recursive open and parse for Data object.
> - Custom loader
> - Introduce fsspec to open including files. Now we can include files from 
> local filesystem, s3, http, sftp ...
> - New parameters for the tag in YAML
> - Drop python support blow 3.8
> - The tag constructor class YamlIncludeConstructor renamed to Constructor
> - Readers for JSON, TOML, INI ... YAML only now
> - The argument relative and encoding was removed from the tag class's load 
> method.
> - Anchor (Maybe recovered in future)
>
> Signed-off-by: Wang Mingyu 
> ---
>  ...n3-pyyaml-include_1.3.2.bb => python3-pyyaml-include_2.1.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta-python/recipes-devtools/python/{python3-pyyaml-include_1.3.2.bb 
> => python3-pyyaml-include_2.1.bb} (93%)
>
> diff --git 
> a/meta-python/recipes-devtools/python/python3-pyyaml-include_1.3.2.bb 
> b/meta-python/recipes-devtools/python/python3-pyyaml-include_2.1.bb
> similarity index 93%
> rename from 
> meta-python/recipes-devtools/python/python3-pyyaml-include_1.3.2.bb
> rename to meta-python/recipes-devtools/python/python3-pyyaml-include_2.1.bb
> index 3a5bd99a7..f989f4c25 100644
> --- a/meta-python/recipes-devtools/python/python3-pyyaml-include_1.3.2.bb
> +++ b/meta-python/recipes-devtools/python/python3-pyyaml-include_2.1.bb
> @@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/tanbro/pyyaml-include";
>  LICENSE = "GPL-3.0-only"
>  LIC_FILES_CHKSUM = "file://LICENSE;md5=d32239bcb673463ab874e80d47fae504"
>  DEPENDS += "python3-setuptools-scm-native"
> -SRCREV = "36b6975aa8fc7a6cbf37de40aa2ed6d996b2f7be"
> +SRCREV = "dc16153b28f5cab997814c0ce9b43dc4c58507e7"
>
>  SRC_URI = " \
>  
> git://github.com/tanbro/pyyaml-include;protocol=https;branch=main \
> --
> 2.34.1
>
>
> 
>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110978): 
https://lists.openembedded.org/g/openembedded-devel/message/110978
Mute This Topic: https://lists.openembedded.org/mt/106626292/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 1/2] python3-grpcio-reflection: new recipe

2024-06-20 Thread Jan Luebbe

gRPC reflection allows tools like grpcurl and postman to use a service
without having the respective .proto files.

Signed-off-by: Jan Luebbe 
---
 .../python/python3-grpcio-reflection_1.62.2.bb   | 16 
 1 file changed, 16 insertions(+)
 create mode 100644 
meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb

diff --git 
a/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb 
b/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb
new file mode 100644
index ..478c5b33ecd9
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb
@@ -0,0 +1,16 @@
+DESCRIPTION = "Google gRPC reflection"
+HOMEPAGE = "http://www.grpc.io/";
+SECTION = "devel/python"
+
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = 
"file://PKG-INFO;beginline=8;endline=8;md5=7145f7cdd263359b62d342a02f005515"
+
+inherit pypi setuptools3
+
+DEPENDS += "python3-grpcio"
+
+SRC_URI[sha256sum] = 
"2dd44806d68d0006636529bda573012b19a42281478c2d051cdaaebb91e2516c"
+
+RDEPENDS:${PN} = "python3-grpcio"
+
+BBCLASSEXTEND = "native nativesdk"
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110979): 
https://lists.openembedded.org/g/openembedded-devel/message/110979
Mute This Topic: https://lists.openembedded.org/mt/106782856/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-python][PATCH 2/2] python3-grpcio-channelz: new recipe

2024-06-20 Thread Jan Luebbe

gRPC channelz is used to expose runtime statistics for administration
and debugging purposes.

Signed-off-by: Jan Luebbe 
---
 .../python/python3-grpcio-channelz_1.62.2.bb | 16 
 1 file changed, 16 insertions(+)
 create mode 100644 
meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb

diff --git 
a/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb 
b/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb
new file mode 100644
index ..ed5ede4252a1
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb
@@ -0,0 +1,16 @@
+DESCRIPTION = "Google gRPC channelz"
+HOMEPAGE = "http://www.grpc.io/";
+SECTION = "devel/python"
+
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = 
"file://PKG-INFO;beginline=8;endline=8;md5=7145f7cdd263359b62d342a02f005515"
+
+inherit pypi setuptools3
+
+DEPENDS += "python3-grpcio"
+
+SRC_URI[sha256sum] = 
"6e4ac2c43d76b245c5f66d98f523db08786b186128a655ee6f20a30a7e68e4f9"
+
+RDEPENDS:${PN} = "python3-grpcio"
+
+BBCLASSEXTEND = "native nativesdk"
-- 
2.39.2


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110980): 
https://lists.openembedded.org/g/openembedded-devel/message/110980
Mute This Topic: https://lists.openembedded.org/mt/106782858/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [PATCH 0/1] imagemagick: Update status for CVE

2024-06-20 Thread Ninette Adhikari

Update status for:
CVE-2016-7532, CVE-2014-9822, CVE-2014-9823, CVE-2014-9824, CVE-2014-9825, 
CVE-2014-9826, CVE-2014-9827, CVE-2014-9828, CVE-2014-9829, CVE-2014-9830, 
CVE-2014-9831, CVE-2014-9848, CVE-2014-9852, CVE-2014-9853, CVE-2014-9854, 
CVE-2014-9907, CVE-2016-10062, CVE-2016-10144, CVE-2016-10145, CVE-2016-10146, 
CVE-2016-5118, CVE-2016-7513, CVE-2016-7514, CVE-2016-7515, CVE-2016-7516, 
CVE-2016-7517, CVE-2016-7518, CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, 
CVE-2016-7522, CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526, 
CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530, CVE-2016-7533

CPE is incorrect, the current version (7.1.1) is not affected.

Ninette Adhikari (1):
  imagemagick: Update status for CVE

 .../imagemagick/imagemagick_7.1.1.bb  | 41 +++
 1 file changed, 41 insertions(+)

--
2.44.0


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110981): 
https://lists.openembedded.org/g/openembedded-devel/message/110981
Mute This Topic: https://lists.openembedded.org/mt/106782927/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [PATCH 1/1] imagemagick: Update status for CVE

2024-06-20 Thread Ninette Adhikari

Update status for:
CVE-2016-7532, CVE-2014-9822, CVE-2014-9823, CVE-2014-9824, CVE-2014-9825, 
CVE-2014-9826, CVE-2014-9827, CVE-2014-9828, CVE-2014-9829, CVE-2014-9830, 
CVE-2014-9831, CVE-2014-9848, CVE-2014-9852, CVE-2014-9853, CVE-2014-9854, 
CVE-2014-9907, CVE-2016-10062, CVE-2016-10144, CVE-2016-10145, CVE-2016-10146, 
CVE-2016-5118, CVE-2016-7513, CVE-2016-7514, CVE-2016-7515, CVE-2016-7516, 
CVE-2016-7517, CVE-2016-7518, CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, 
CVE-2016-7522, CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526, 
CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530, CVE-2016-7533

CPE is incorrect, the current version (7.1.1) is not affected.

Signed-off-by: Ninette Adhikari 
---
 .../imagemagick/imagemagick_7.1.1.bb  | 41 +++
 1 file changed, 41 insertions(+)

diff --git a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb 
b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb
index 6ab8a61b9..51bc36e56 100644
--- a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb
+++ b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb
@@ -99,3 +99,44 @@ ALTERNATIVE_LINK_NAME[montage.1] = "${mandir}/man1/montage.1"
 ALTERNATIVE_TARGET[montage.1] = "${mandir}/man1/montage.im7.1"
 ALTERNATIVE_LINK_NAME[stream.1] = "${mandir}/man1/stream.1"
 ALTERNATIVE_TARGET[stream.1] = "${mandir}/man1/stream.im7.1"
+
+CVE_STATUS[CVE-2016-7532] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9822] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9823] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9824] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9825] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9826] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9827] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9828] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9829] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9830] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9831] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9848] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9852] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9853] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9854] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2014-9907] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2016-10062] = "cpe-incorrect: The current version (7.1.1) is 
not affected by the CVE which affects versions at least earlier than 7.0.1-10"
+CVE_STATUS[CVE-2016-10144] = "cpe-incorrect: The current version (7.1.1) is 
not affected by the CVE which affects versions at least earlier than 6.9.7-1"
+CVE_STATUS[CVE-2016-10145] = "cpe-incorrect: The current version (7.1.1) is 
not affected by the CVE which affects versions at least earlier than 6.9.7-1"
+CVE_STATUS[CVE-2016-10146] = "cpe-incorrect: The current version (7.1.1) is 
not affected by the CVE which affects versions at least earlier than 6.9.6-8"
+CVE_STATUS[CVE-2016-5118] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 7.0.1-7"
+CVE_STATUS[CVE-2016-7513] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 6.9.4-0"
+CVE_STATUS[CVE-2016-7514] = "cpe-incorrect: The current version (7.1.1) is not 
affected by the CVE which affects versions at least earlier than 7.0.1-0"
+CVE_STATUS[CVE-2016-7515] = "c

Re: [oe] [meta-oe][PATCH] bpftool: Add missing dep on elfutils-native

2024-06-20 Thread Khem Raj

can you try changing it to

HOSTCC="'${BUILD_CC} ${BUILD_CFLAGS}'"

On Thu, Jun 20, 2024 at 12:06 AM chenheyun via lists.openembedded.org
 wrote:
>
> hi，
>   this patch may be have some problem。
>   bitbake bpftool：
> chy@ubuntu:/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work-shared/qemuarm64/kernel-source/tools/bpf/bpftool$
>  make -C 
> /home/sam/work/qemu-buildsystem/buildsystem3.0/buildsystem/source/kernel/linux-6.1.83/tools/lib/bpf
>  
> OUTPUT=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/
>   
> DESTDIR=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf
>  prefix=  ARCH= CROSS_COMPILE= CC=gcc  
> -isystem/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/recipe-sysroot-native/usr/include
>  -O2 -pipe LD=ld AR=ar 
> /home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/libbpf.a
>  install_headers
> make: invalid option -- 'y'
> make: invalid option -- '/'
>
> i guss that：
> HOSTCC="${BUILD_CC} ${BUILD_CFLAGS}"
> should be this：
> HOSTCC="${BUILD_CC}
>
> because，HOSTCC is used in ：
>
> $(LIBBPF_BOOTSTRAP): $(wildcard $(BPF_DIR)/*.[ch] $(BPF_DIR)/Makefile) | 
> $(LIBBPF_BOOTSTRAP_OUTPUT)
> echo chy1___$(BPF_DIR) ___
> $(Q)$(MAKE) -C $(BPF_DIR) OUTPUT=$(LIBBPF_BOOTSTRAP_OUTPUT) \
> DESTDIR=$(LIBBPF_BOOTSTRAP_DESTDIR:/=) prefix= \
> ARCH= CROSS_COMPILE= CC=$(HOSTCC) LD=$(HOSTLD) AR=$(HOSTAR) $@ 
> install_headers
> echo chy2__
>
> if HOSTCC= ${BUILD_CC} and  ${BUILD_CFLAGS}
> it will be err in step make -C ：
>
> make -C 
> /home/sam/work/qemu-buildsystem/buildsystem3.0/buildsystem/source/kernel/linux-6.1.83/tools/lib/bpf
>  
> OUTPUT=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/
>   
> DESTDIR=/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf
>  prefix=  ARCH= CROSS_COMPILE= CC=gcc  
> -isystem/home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/recipe-sysroot-native/usr/include
>  -O2 -pipe LD=ld AR=ar 
> /home/sam/work/qemu-buildsystem/buildsystem3.0/build/qemuarm64/tmp/work/qemuarm64-poky-linux/bpftool/1.0-r0/bpftool-1.0/bootstrap/libbpf/libbpf.a
>  install_headers
>
>
>
> 
>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110983): 
https://lists.openembedded.org/g/openembedded-devel/message/110983
Mute This Topic: https://lists.openembedded.org/mt/104092706/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-networking][PATCH 1/2] libldb: upgrade 2.8.0 -> 2.8.1

2024-06-20 Thread Yi Zhao

Signed-off-by: Yi Zhao 
---
 .../recipes-support/libldb/{libldb_2.8.0.bb => libldb_2.8.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-networking/recipes-support/libldb/{libldb_2.8.0.bb => 
libldb_2.8.1.bb} (97%)

diff --git a/meta-networking/recipes-support/libldb/libldb_2.8.0.bb 
b/meta-networking/recipes-support/libldb/libldb_2.8.1.bb
similarity index 97%
rename from meta-networking/recipes-support/libldb/libldb_2.8.0.bb
rename to meta-networking/recipes-support/libldb/libldb_2.8.1.bb
index bdd87993d..29ff2cf6f 100644
--- a/meta-networking/recipes-support/libldb/libldb_2.8.0.bb
+++ b/meta-networking/recipes-support/libldb/libldb_2.8.1.bb
@@ -34,7 +34,7 @@ LIC_FILES_CHKSUM = 
"file://pyldb.h;endline=24;md5=dfbd238cecad76957f7f860fbe9ada
 
file://man/ldb.3.xml;beginline=261;endline=262;md5=137f9fd61040c1505d1aa1019663fd08
 \
 
file://tools/ldbdump.c;endline=19;md5=a7d4fc5d1f75676b49df491575a86a42"
 
-SRC_URI[sha256sum] = 
"358dca10fcd27207ac857a0d7f435a46dbc6cd1f7c10dbb840c1931bf1965f08"
+SRC_URI[sha256sum] = 
"b68ce6eb0ccd2870fa3c8c334f2028b5d16606fd41308696c17b71959f7bf59f"
 
 inherit pkgconfig waf-samba ptest
 
-- 
2.25.1


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110984): 
https://lists.openembedded.org/g/openembedded-devel/message/110984
Mute This Topic: https://lists.openembedded.org/mt/106792504/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-networking][PATCH 2/2] samba: upgrade 4.19.6 -> 4.19.7

2024-06-20 Thread Yi Zhao

ChangeLog:
https://www.samba.org/samba/history/samba-4.19.7.html

Signed-off-by: Yi Zhao 
---
 .../samba/{samba_4.19.6.bb => samba_4.19.7.bb}  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-networking/recipes-connectivity/samba/{samba_4.19.6.bb => 
samba_4.19.7.bb} (99%)

diff --git a/meta-networking/recipes-connectivity/samba/samba_4.19.6.bb 
b/meta-networking/recipes-connectivity/samba/samba_4.19.7.bb
similarity index 99%
rename from meta-networking/recipes-connectivity/samba/samba_4.19.6.bb
rename to meta-networking/recipes-connectivity/samba/samba_4.19.7.bb
index 7bdcfd35c..796f1697f 100644
--- a/meta-networking/recipes-connectivity/samba/samba_4.19.6.bb
+++ b/meta-networking/recipes-connectivity/samba/samba_4.19.7.bb
@@ -31,7 +31,7 @@ SRC_URI:append:libc-musl = " \
file://samba-4.3.9-remove-getpwent_r.patch \
"
 
-SRC_URI[sha256sum] = 
"653b52095554dbc223c63b96af5cdf9e98c3e048549c5f56143d3b33dce1cef1"
+SRC_URI[sha256sum] = 
"2bbb800af2d6bc7b9c23e708cd58d008da3bfa6ef7e621d9ec8b53387efee445"
 
 UPSTREAM_CHECK_REGEX = "samba\-(?P4\.19(\.\d+)+).tar.gz"
 
-- 
2.25.1


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#110985): 
https://lists.openembedded.org/g/openembedded-devel/message/110985
Mute This Topic: https://lists.openembedded.org/mt/106792506/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[oe] [meta-openembedded][kirkstone][PATCH 1/1] openvpn: fix multiple CVEs

2024-06-20 Thread Meenali Gupta via lists.openembedded.org

From: Meenali Gupta 

CVE-2024-24974:
Previously, the VPN tool’s Windows implementation allowed remote access to
its service pipe, posing a security risk. Using compromised credentials, a
threat actor could communicate with OpenVPN to orchestrate attacks.

CVE-2024-27903:
OpenVPN has mitigated the risk by restricting plugin load. Plugins can
now only be loaded from the software’s install directory, the Windows
system directory, and the plugin_dir directory under the software’s 
installation.

CVE-2024-27459:
This vulnerability affects the interactive service component, potentially 
leading
to local privilege escalation when triggered by an oversized message.To mitigate
this risk, the VPN solution now terminates connections upon detecting 
excessively
large messages, preventing stack overflow exploits.

References:
https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/
https://socradar.io/openvpn-fixed-multiple-vulnerabilities-on-windows/
https://community.openvpn.net/openvpn/wiki/CVE-2024-27903
https://community.openvpn.net/openvpn/wiki/CVE-2024-27459
https://community.openvpn.net/openvpn/wiki/CVE-2024-24974

Signed-off-by: Meenali Gupta 
---
 .../openvpn/openvpn/CVE-2024-24974.patch  |  49 
 .../openvpn/openvpn/CVE-2024-27459.patch  |  99 +++
 .../openvpn/openvpn/CVE-2024-27903.patch  | 119 ++
 .../recipes-support/openvpn/openvpn_2.5.6.bb  |   6 +-
 4 files changed, 272 insertions(+), 1 deletion(-)
 create mode 100644 
meta-networking/recipes-support/openvpn/openvpn/CVE-2024-24974.patch
 create mode 100644 
meta-networking/recipes-support/openvpn/openvpn/CVE-2024-27459.patch
 create mode 100644 
meta-networking/recipes-support/openvpn/openvpn/CVE-2024-27903.patch

diff --git 
a/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-24974.patch 
b/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-24974.patch
new file mode 100644
index 00..b42b3040ef
--- /dev/null
+++ b/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-24974.patch
@@ -0,0 +1,49 @@
+From 2c1de0f0803360c0a6408f754066bd3a6fb28237 Mon Sep 17 00:00:00 2001
+From: Lev Stipakov 
+Date: Tue, 19 Mar 2024 17:16:07 +0200
+Subject: [PATCH] interactive.c: disable remote access to the service pipe
+
+Remote access to the service pipe is not needed and might
+be a potential attack vector.
+
+For example, if an attacker manages to get credentials for
+a user which is the member of "OpenVPN Administrators" group
+on a victim machine, an attacker might be able to communicate
+with the privileged interactive service on a victim machine
+and start openvpn processes remotely.
+
+CVE: 2024-24974
+
+Microsoft case number: 85925
+
+Reported-by: Vladimir Tokarev 
+Change-Id: I8739c5f127e9ca0683fcdbd099dba9896ae46277
+Signed-off-by: Lev Stipakov 
+Acked-by: Heiko Hund 
+Message-Id: <20240319151723.936-2-...@openvpn.net>
+URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg28419.html
+Signed-off-by: Gert Doering 
+
+CVE:CVE-2024-24974
+Upstream-Status: Backport 
[https://github.com/OpenVPN/openvpn/commit/2c1de0f0803360c0a6408f754066bd3a6fb28237]
+
+Signed-off-by: Meenali Gupta 
+---
+ src/openvpnserv/interactive.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/openvpnserv/interactive.c b/src/openvpnserv/interactive.c
+index 3b120ae..5e3ff12 100644
+--- a/src/openvpnserv/interactive.c
 b/src/openvpnserv/interactive.c
+@@ -1994,7 +1994,7 @@ CreateClientPipeInstance(VOID)
+
+ openvpn_sntprintf(pipe_name, _countof(pipe_name), TEXT(".\\pipe\\" 
PACKAGE "%s\\service"), service_instance);
+ pipe = CreateNamedPipe(pipe_name, flags,
+-   PIPE_TYPE_MESSAGE | PIPE_READMODE_MESSAGE,
++   PIPE_TYPE_MESSAGE | PIPE_READMODE_MESSAGE | 
PIPE_REJECT_REMOTE_CLIENTS,
+PIPE_UNLIMITED_INSTANCES, 1024, 1024, 0, NULL);
+ if (pipe == INVALID_HANDLE_VALUE)
+ {
+--
+2.40.0
diff --git 
a/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-27459.patch 
b/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-27459.patch
new file mode 100644
index 00..d04eeb571d
--- /dev/null
+++ b/meta-networking/recipes-support/openvpn/openvpn/CVE-2024-27459.patch
@@ -0,0 +1,99 @@
+From 989b22cb6e007fd1addcfaf7d12f4fec9fbc9639 Mon Sep 17 00:00:00 2001
+From: Lev Stipakov 
+Date: Tue, 19 Mar 2024 17:27:11 +0200
+Subject: [PATCH] interactive.c: Fix potential stack overflow issue
+When reading message from the pipe, we first peek the pipe to get the size
+of the message waiting to be read and then read the message. A compromised
+OpenVPN process could send an excessively large message, which would result
+in a stack-allocated message buffer overflow.
+
+To address this, we terminate the misbehaving process if the peeked message
+size exceeds the maximum allowable size.
+
+CVE: 2024-27459
+Microsoft case number: 85932
+
+Reported-by:

Re: [oe] [meta-oe][PATCH] bpftool: Add missing dep on elfutils-native

[oe] [meta-python][PATCH 1/4] python3-eth-utils: Upgrade 3.0.0 -> 4.1.1

[oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

[oe] [meta-python][PATCH 3/4] python3-filelock: Upgrade 3.14.0 -> 3.15.3

[oe] [meta-python][PATCH 4/4] python3-hexbytes: Upgrade 1.2.0 -> 1.2.1

Re: [oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

Re: [oe] [meta-python][PATCH 2/4] python3-requests-file: Upgrade 1.5.1 -> 2.1.0

Re: [oe] [meta-python] [PATCH 26/43] python3-pyyaml-include: upgrade 1.3.2 -> 2.1

[oe] [meta-python][PATCH 1/2] python3-grpcio-reflection: new recipe

[oe] [meta-python][PATCH 2/2] python3-grpcio-channelz: new recipe

[oe] [PATCH 0/1] imagemagick: Update status for CVE

[oe] [PATCH 1/1] imagemagick: Update status for CVE

Re: [oe] [meta-oe][PATCH] bpftool: Add missing dep on elfutils-native

[oe] [meta-networking][PATCH 1/2] libldb: upgrade 2.8.0 -> 2.8.1

[oe] [meta-networking][PATCH 2/2] samba: upgrade 4.19.6 -> 4.19.7

[oe] [meta-openembedded][kirkstone][PATCH 1/1] openvpn: fix multiple CVEs

16 matches

Site Navigation

Mail list logo

Footer information