[OE-core] [PATCH V2] qemu: Fix CVE-2019-12068

2019-10-16 Thread changqing.li
From: Changqing Li Signed-off-by: Changqing Li --- meta/recipes-devtools/qemu/qemu.inc| 1 + .../qemu/qemu/CVE-2019-12068.patch | 108 + 2 files changed, 109 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2019-12068.pa

[OE-core] ✗ patchtest: failure for qemu: Fix CVE-2019-12068

2019-10-16 Thread Patchwork
== Series Details == Series: qemu: Fix CVE-2019-12068 Revision: 1 URL : https://patchwork.openembedded.org/series/20510/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the propos

[OE-core] [PATCH] qemu: Fix CVE-2019-12068

2019-10-16 Thread changqing.li
From: Changqing Li Signed-off-by: Changqing Li --- meta/recipes-devtools/qemu/qemu.inc| 1 + .../qemu/qemu/CVE-2019-12068.patch | 107 + 2 files changed, 108 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2019-12068.pa

Re: [OE-core] [PATCH v2] elfutils: add PACKAGECONFIG for compression algorithms

2019-10-16 Thread Randy MacLeod
On 10/16/19 6:10 AM, Ross Burton wrote: On 15/10/2019 23:46, Dan Callaghan wrote: It does seem like it would be simpler to just take bzip2-native out of ASSUME_PROVIDED, but I guess leaving it in there lets people avoid building bzip2-native under some circumstances. I believe it's a bootstrap

[OE-core] ✗ patchtest: failure for curl: Security fix for CVE-2019-5481

2019-10-16 Thread Patchwork
== Series Details == Series: curl: Security fix for CVE-2019-5481 Revision: 1 URL : https://patchwork.openembedded.org/series/20507/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed o

[OE-core] [thud][PATCH] systemd: Security fixes for CVE

2019-10-16 Thread Muminul Islam
CVE: CVE-2019-3842 CVE-2019-3843 CVE-2019-3844 Upstream-Status: Backport Signed-off-by: Muminul Islam --- .../systemd/systemd/CVE-2019-3842.patch | 59 + .../systemd/systemd/CVE-2019-3843_p1.patch| 227 ++ .../systemd/systemd/CVE-2019-3843_p2.patch| 174 ++

[OE-core] [thud][PATCH] curl: Security fix for CVE-2019-5481

2019-10-16 Thread Muminul Islam
CVE: CVE-2019-5481 Upstream-Status: Backport Signed-off-by: Muminul Islam --- .../curl/curl/CVE-2019-5481.patch | 52 +++ meta/recipes-support/curl/curl_7.61.0.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta/recipes-support/curl/curl/CVE-20

Re: [OE-core] [warrior][PATCH 7/8] devtool: finish: Add suppport for the --no-clean option

2019-10-16 Thread akuster808
On 10/16/19 9:30 AM, Peter Kjellerstedt wrote: > From: Peter Kjellerstedt > > This works just like the already existing --no-clean option to the > `devtool reset` command. what problem is this solving in warrior? -a rmin > > Signed-off-by: Peter Kjellerstedt > Signed-off-by: Richard Purdie >

Re: [OE-core] [warrior][PATCH 1/8] meson.bbclass: Remove the MESON_*_ARGS variables

2019-10-16 Thread akuster808
On 10/16/19 9:30 AM, Peter Kjellerstedt wrote: > From: Peter Kjellerstedt > > The options in ${HOST_CC_ARCH}${TOOLCHAIN_OPTIONS} are already passed > via ${CC}/${CXX} and there is no reason to pass them a second time. Thus > we can remove MESON_TOOLCHAIN_ARGS. And when it is removed, the other

Re: [OE-core] [PATCH] mesa: Upgrade to 19.2.1

2019-10-16 Thread Otavio Salvador
On Wed, Oct 16, 2019 at 3:35 PM Alistair Francis wrote: > > On Wed, Oct 16, 2019 at 11:21 AM Otavio Salvador > wrote: > > > > On Sat, Oct 12, 2019 at 2:01 PM Alistair Francis > > wrote: > > > The glx-tls option was removed as it isn't included in the meson.build > > > file. > > > > Why drop it?

Re: [OE-core] [PATCH] mesa: Upgrade to 19.2.1

2019-10-16 Thread Alistair Francis
On Wed, Oct 16, 2019 at 11:21 AM Otavio Salvador wrote: > > On Sat, Oct 12, 2019 at 2:01 PM Alistair Francis > wrote: > > The glx-tls option was removed as it isn't included in the meson.build > > file. > > Why drop it? Update the patch, please. It doesn't exist any more. It has been removed fr

Re: [OE-core] [PATCH] mesa: Upgrade to 19.2.1

2019-10-16 Thread Otavio Salvador
On Sat, Oct 12, 2019 at 2:01 PM Alistair Francis wrote: > The glx-tls option was removed as it isn't included in the meson.build > file. Why drop it? Update the patch, please. -- Otavio Salvador O.S. Systems http://www.ossystems.com.brhttp://code.ossystems.

Re: [OE-core] [PATCH] ell: update to 0.23

2019-10-16 Thread Oleksandr Kravchuk
Hey Ross, Is this still a code freeze? On 26/09/2019 13:04, Ross Burton wrote: > On 26/09/2019 01:54, Oleksandr Kravchuk wrote: >> Changelog: >> - Add support for checking if uintset is empty. >> >> Signed-off-by: Oleksandr Kravchuk > > This is in ross/mut so it won't get lost, but we're freezin

[OE-core] ✗ patchtest: failure for Backport relevant changes from Zeus

2019-10-16 Thread Patchwork
== Series Details == Series: Backport relevant changes from Zeus Revision: 1 URL : https://patchwork.openembedded.org/series/20503/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on

[OE-core] [warrior][PATCH 6/8] devtool: finish: Keep patches ordered when updating bbappend

2019-10-16 Thread Peter Kjellerstedt
From: Niclas Svensson The _get_patchset_revs() function returns the patches in an OrderedDict to keep them ordered. However, this information was lost when the patches were added to the bbappend file. Signed-off-by: Niclas Svensson Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdi

[OE-core] [warrior][PATCH 3/8] devtool: Avoid failure for recipes with S == WORKDIR and no local files

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt When extracting the sources for a recipe that has S == WORKDIR and no local files in the SRC_URI (which, e.g., can happen for a recipe with a URI that has the unpack=false attribute), the extraction fails with the following backtrace: Traceback (most recent call last):

[OE-core] [warrior][PATCH 8/8] lib/oe/lsb: Make sure the distro ID is always lowercased

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt In commit 8689e561 (lib/oe/lsb: attempt to ensure consistent distro id regardless of source), the distro ID returned by oe.lsb.distro_identifier() was lowercased, but only if a release version is also present. This changes the code to always lowercase the distro ID, incl

[OE-core] [warrior][PATCH 7/8] devtool: finish: Add suppport for the --no-clean option

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt This works just like the already existing --no-clean option to the `devtool reset` command. Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie --- scripts/lib/devtool/standard.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/script

[OE-core] [warrior][PATCH 5/8] tzdata: Correct the packaging of /etc/localtime and /etc/timezone

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt During restructuring of the packaging in 2af4d6eb (tzdata: Install everything by default), these two files remained in the tzdata package, which is supposed to be empty. Move them to tzdata-core where they belong. Also simplify the definition of CONFFILES_tzdata-core. As

[OE-core] [warrior][PATCH 4/8] package_rpm.bbclass: Remove a misleading bb.note()

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt It should have been removed in 3db9d865 (classes/package_rpm.bbclass: Enhance diagnostic messages) when it was split in two new notes. Also change the casing of two other notes to align them with the other notes. Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard

[OE-core] [warrior][PATCH 0/8] Backport relevant changes from Zeus

2019-10-16 Thread Peter Kjellerstedt
This patch set contains backports of our changes from Zeus that are relevant for Warrior. //Peter The following changes since commit 79a850a10a4b88a6d20d607b322542f947874323: conf/poky: add Fedora 30 and Opensuse Leap 15.1 to supported distributions (2019-10-14 09:49:27 +0100) are available

[OE-core] [warrior][PATCH 2/8] nativesdk-meson: Remove some unused variables

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie --- meta/recipes-devtools/meson/nativesdk-meson_0.49.2.bb | 5 - 1 file changed, 5 deletions(-) diff --git a/meta/recipes-devtools/meson/nativesdk-meson_0.49.2.bb b/meta/recipes-devtools/meson/native

[OE-core] [warrior][PATCH 1/8] meson.bbclass: Remove the MESON_*_ARGS variables

2019-10-16 Thread Peter Kjellerstedt
From: Peter Kjellerstedt The options in ${HOST_CC_ARCH}${TOOLCHAIN_OPTIONS} are already passed via ${CC}/${CXX} and there is no reason to pass them a second time. Thus we can remove MESON_TOOLCHAIN_ARGS. And when it is removed, the other MESON_*_ARGS variables revert to the standard CFLAGS, CXXFL

Re: [OE-core] [PATCH] systemd.bbclass: enable all services specified in ${SYSTEMD_SERVICE}

2019-10-16 Thread Mikko.Rapeli
On Wed, Oct 16, 2019 at 12:45:20PM +, Peter Kjellerstedt wrote: > > -Original Message- > > From: openembedded-core-boun...@lists.openembedded.org > core-boun...@lists.openembedded.org> On Behalf Of Mikko Rapeli > > Sent: den 16 oktober 2019 14:32 > > To: openembedded-core@lists.openemb

Re: [OE-core] [PATCH] aspell: upgrade from 0.60.7 to 0.60.8

2019-10-16 Thread Trevor Gamblin
On 10/16/19 9:03 AM, Adrian Bunk wrote: On Wed, Oct 16, 2019 at 05:05:26AM -0700, Trevor Gamblin wrote: ... --- a/meta/recipes-support/aspell/aspell_0.60.7.bb +++ b/meta/recipes-support/aspell/aspell_0.60.8.bb @@ -7,8 +7,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=7fbc338309ac38fefcd64b04bb90

[OE-core] [PATCH v2] aspell: upgrade from 0.60.7 to 0.60.8

2019-10-16 Thread Trevor Gamblin
New version fixes CVE-2019-17544 as well as various other bugs. CVE: CVE-2019-17544 Signed-off-by: Trevor Gamblin --- .../aspell/{aspell_0.60.7.bb => aspell_0.60.8.bb} | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) rename meta/recipes-support/aspell/{aspell_0.60.7.bb =>

Re: [OE-core] [PATCH] aspell: upgrade from 0.60.7 to 0.60.8

2019-10-16 Thread Adrian Bunk
On Wed, Oct 16, 2019 at 05:05:26AM -0700, Trevor Gamblin wrote: >... > --- a/meta/recipes-support/aspell/aspell_0.60.7.bb > +++ b/meta/recipes-support/aspell/aspell_0.60.8.bb > @@ -7,8 +7,8 @@ LIC_FILES_CHKSUM = > "file://COPYING;md5=7fbc338309ac38fefcd64b04bb903e34" > PR = "r1" >... A new upstr

[OE-core] [zeus][PATCH] aspell: fix CVE-2019-17544

2019-10-16 Thread Trevor Gamblin
Backport CVE-2019-17544 fix to zeus. Signed-off-by: Trevor Gamblin --- ...1-Fix-various-bugs-found-by-OSS-Fuze.patch | 56 +++ meta/recipes-support/aspell/aspell_0.60.7.bb | 4 +- 2 files changed, 59 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-support/aspell/

Re: [OE-core] [PATCH] systemd.bbclass: enable all services specified in ${SYSTEMD_SERVICE}

2019-10-16 Thread Peter Kjellerstedt
> -Original Message- > From: openembedded-core-boun...@lists.openembedded.org core-boun...@lists.openembedded.org> On Behalf Of Mikko Rapeli > Sent: den 16 oktober 2019 14:32 > To: openembedded-core@lists.openembedded.org > Subject: [OE-core] [PATCH] systemd.bbclass: enable all services >

[OE-core] [PATCH] systemd.bbclass: enable all services specified in ${SYSTEMD_SERVICE}

2019-10-16 Thread Mikko Rapeli
This has been the traditional way of enabling systemd services. It may conflict with presets feature, but other layers, image classes and recipes add services to be enabled using SYSTEMD_SERVICE variable also with read-only rootfs, e.g. IMAGE_FEATURES has stateless-rootfs and systemd_preset_all tas

Re: [OE-core] [PATCH v2] elfutils: add PACKAGECONFIG for compression algorithms

2019-10-16 Thread Richard Purdie
On Wed, 2019-10-16 at 08:46 +1000, Dan Callaghan wrote: > Excerpts from Ross Burton's message of 2019-10-15 11:55:31 +01:00: > > If you need bzip-native for the libraries, DEPEND on > > bzip2-replacement-native. > > Oh, thanks for the hint! I hadn't seen that trick used before but > now > I see i

[OE-core] [PATCH] aspell: upgrade from 0.60.7 to 0.60.8

2019-10-16 Thread Trevor Gamblin
New version fixes CVE-2019-17544 as well as various other bugs. CVE: CVE-2019-17544 Signed-off-by: Trevor Gamblin --- .../aspell/{aspell_0.60.7.bb => aspell_0.60.8.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-support/aspell/{aspell_0.60.7.bb =>

Re: [OE-core] [PATCH v2] elfutils: add PACKAGECONFIG for compression algorithms

2019-10-16 Thread Ross Burton
On 15/10/2019 23:46, Dan Callaghan wrote: It does seem like it would be simpler to just take bzip2-native out of ASSUME_PROVIDED, but I guess leaving it in there lets people avoid building bzip2-native under some circumstances. I believe it's a bootstrap speed thing. If we can assume bzip2 on

[OE-core] [PATCH 4/6] oeqa/core/decorator: add skipIfFeature

2019-10-16 Thread André Draszik
skipIfFeature will skip a test if a given DIST_FEATURE or IMAGE_FEATURE is enabled. Signed-off-by: André Draszik --- meta/lib/oeqa/core/decorator/data.py | 18 ++ 1 file changed, 18 insertions(+) diff --git a/meta/lib/oeqa/core/decorator/data.py b/meta/lib/oeqa/core/decorator/d

[OE-core] [PATCH 6/6] oeqa/runtime/systemd: skip unit enable/disable on read-only-rootfs

2019-10-16 Thread André Draszik
This doesn't work on read-only-rootfs: AssertionError: 1 != 0 : SYSTEMD_BUS_TIMEOUT=240s systemctl disable avahi-daemon.service Failed to disable unit: File /etc/systemd/system/multi-user.target.wants/avahi-daemon.service: Read-only file system Skip the test in that case to avoid this.

[OE-core] [PATCH 3/6] oeqa/runtime/df: don't fail on long device names

2019-10-16 Thread André Draszik
When device names are long (more than 20 characters), the df test will fail with an exception: self.assertTrue(int(output)>5120, msg=msg) ValueError: invalid literal for int() with base 10: '' at least when busybox is in use. The reason is that busybox breaks the line in that case: Fil

[OE-core] [PATCH 5/6] oeqa/runtime/opkg: skip install on read-only-rootfs

2019-10-16 Thread André Draszik
Images can have package management enabled, but be generally running as read-only. In this case, the test fails at the moment with various errors due to that. Use the new @skipIfFeature decorator to also skip this test in that case. Signed-off-by: André Draszik --- meta/lib/oeqa/runtime/cases/o

[OE-core] [PATCH 2/6] testimage.bbclass: enable ssh agent forwarding

2019-10-16 Thread André Draszik
Some targets might use ssh to do their power- or serial- control. In that case, ssh might need access to the ssh agent, or otherwise won't work. So export it into the environment. Note that the (old) oeqa/controllers/masterimage.py tries to do that as well by exporting all of BB_ORIGENV into the

[OE-core] [PATCH 1/6] testimage.bbclass: support hardware-controlled targets

2019-10-16 Thread André Draszik
From: André Draszik Since the introduction of the new runtime framework for target testing in commit 2aa5a4954d76 ("testimage.bbclass: Migrate class to use new runtime framework") commit 3857e5c91da6 in poky.git, target controllers have no access to the global datastore 'd' anymore. This makes i

[OE-core] [PATCH 0/6] various oeqa fixes

2019-10-16 Thread André Draszik
Hi, These patches: * allow hardware controlled targets work with testimage again In particular, I have a custom target hardware controller modelled after the ssh/qemu controllers and it works now * fix a few issues Cheers, Andre' PS: BTW, not related to this series, but it appears as if meta