[OE-core] [zeus 27/28] wic/engine: use 'linux-swap' for swap file system

2019-10-25 Thread Armin Kuster
From: Chee Yang Lee [YOCTO #13312] see https://bugzilla.yoctoproject.org/show_bug.cgi?id=13312 wic/engine.Disk._get_part_image was looking at variable fstypes for supported fstype which is 'swap' but image build with 'linux-swap'. supported fstype should be 'linux-swap'. Signed-off-by: Chee Yan

[OE-core] [zeus 22/28] libgcrypt: fix CVE-2019-12904

2019-10-25 Thread Armin Kuster
From: Yi Zhao In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) Reference: http

[OE-core] [zeus 21/28] python: Fix CVE-2019-10160

2019-10-25 Thread Armin Kuster
From: Changqing Li Signed-off-by: Changqing Li Signed-off-by: Ross Burton (cherry picked from commit b4240b585d7fcac2fdbf33a8e72d48cb732eb696) Signed-off-by: Armin Kuster --- .../python/python/bpo-36742-cve-2019-10160.patch | 81 ++ meta/recipes-devtools/python/python_2.

[OE-core] [zeus 28/28] connman: mark connman-wait-online as SYSTEMD_PACKAGE

2019-10-25 Thread Armin Kuster
From: André Draszik The connman-wait-online package currently isn't marked as systemd-enabled package. This means it is impossible to auto-enable the service during image creation or package installation, as no preset files and no pkg_postinst() snippet is being created. This change should have

[OE-core] [zeus 23/28] dbus: update dbus-1.init to reflect new PID file

2019-10-25 Thread Armin Kuster
From: Tom Benn The PID file referenced in dbus-1.init script was out of date and no longer existed. This meant that dbus could not be restarted via init.d without force removing the old PID file. Signed-off-by: fridgecow Signed-off-by: Ross Burton (cherry picked from commit 2ed6f06f30cb54b9c

[OE-core] [zeus 25/28] go: fix CVE-2019-16276

2019-10-25 Thread Armin Kuster
From: Chen Qi Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit e31f87e289dfd3bbca961e927447a9c7ba816d3f) Signed-off-by: Armin Kuster --- meta/recipes-devtools/go/go-1.12.inc | 1 + ...nch.go1.12-security-net-textproto-don-t-n.patch | 163

[OE-core] [zeus 24/28] sudo: fix CVE-2019-14287

2019-10-25 Thread Armin Kuster
From: Changqing Li In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER=

[OE-core] [zeus 20/28] icecc: Export ICECC_CC and friends via wrapper-script

2019-10-25 Thread Armin Kuster
From: Douglas Royds via Openembedded-core By exporting ICECC_CC, ICECC_CXX, and ICECC_VERSION in a wrapper-script, and putting this wrapper-script in the PATH, the Makefiles generated by CMake or the autotools are able to function correctly outside of bitbake. This provides a convenient develope

[OE-core] [zeus 26/28] util-linux: fix PKNAME name is NULL when use lsblk [LIN1019-2963]

2019-10-25 Thread Armin Kuster
From: Liwei Song PKNAME is NULL when run "lsblk -o+PKNAME /dev/sda1" backport an upstream patch to fix it. Signed-off-by: Liwei Song Signed-off-by: Richard Purdie (cherry picked from commit a5a987ff5e5e333e28be44a12e729907272ea3cb) Signed-off-by: Armin Kuster --- ...lsblk-force-to-print-PKNA

[OE-core] [zeus 16/28] python3: -dev should depend on distutils

2019-10-25 Thread Armin Kuster
From: Ross Burton python3-config uses distutils: Traceback (most recent call last): File "/usr/bin/python3-config", line 9, in from distutils import sysconfig ModuleNotFoundError: No module named 'distutils' Add the dependency so that distutils is always present. [ YOCTO #13592 ] Signe

[OE-core] [zeus 18/28] cmake.bbclass: add HOSTTOOLS_DIR to CMAKE_FIND_ROOT_PATH

2019-10-25 Thread Armin Kuster
From: Michael Ho The find_program command will fail if it is used on a tool that is listed in ASSUME_PROVIDED. This is because these tools are in the hosttools directory which is not listed in CMAKE_FIND_ROOT_PATH so cmake will not find them. Adding the directory HOSTTOOLS_DIR to the CMAKE_FIND_

[OE-core] [zeus 12/28] openssh: fix CVE-2019-16905

2019-10-25 Thread Armin Kuster
From: Hongxu Jia Backport a patch from upstream to fix CVE-2019-16905 https://github.com/openssh/openssh-portable/commit/a546b17bbaeb12beac4c9aeed56f74a42b18a93a Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie (cherry picked from commit 8bd4b87071c073a0e4d265bc00df34684a355eff) Signed-

[OE-core] [zeus 15/28] i2c-tools: Add missing RDEPEND

2019-10-25 Thread Armin Kuster
From: Ricardo Ribalda Delgado Fixes: # decode-dimms Can't locate Carp.pm in @INC (you may need to install the Carp module) (@INC contains: /usr/lib/perl5/site_perl/5.28.1/x86_64-linux /usr/lib/perl5/site_perl/5.28.1 /usr/lib/perl5/vendor_perl/5.28.1/x86_64-linux /usr/lib/perl5/vendor_perl/5.2

[OE-core] [zeus 17/28] qemu: Fix CVE-2019-12068

2019-10-25 Thread Armin Kuster
From: Changqing Li Signed-off-by: Changqing Li Signed-off-by: Richard Purdie (cherry picked from commit 81b375ac7851088a671317468a8e2eed69d4a827) Signed-off-by: Armin Kuster --- meta/recipes-devtools/qemu/qemu.inc| 1 + .../qemu/qemu/CVE-2019-12068.patch | 10

[OE-core] [zeus 19/28] openssl: make OPENSSL_ENGINES match install path

2019-10-25 Thread Armin Kuster
From: George McCollister Set OPENSSL_ENGINES to the path where engines are actually installed. Signed-off-by: George McCollister Signed-off-by: Ross Burton (cherry picked from commit 59565fec0b3f3e24eb01c03b671913599cd3134d) Signed-off-by: Armin Kuster --- meta/recipes-connectivity/openssl/o

[OE-core] [zeus 14/28] file: explicitly disable seccomp

2019-10-25 Thread Armin Kuster
From: Ross Burton file will automatically enable seccomp if the seccomp headers are available, but the build will fail on Opensuse Tumbleweed because the include paths are wrong. Enabling seccomp is a bad idea because it interacts badly with pseudo (causing build failures), so explicitly and glo

[OE-core] [zeus 13/28] wic/rawcopy: Support files in sub-directories

2019-10-25 Thread Armin Kuster
From: Eugene Smirnov If the source file is located in a subdirectory of DEPLOY_DIR rawcopy will currently fail in sparse_copy function on open(dst_fname, 'wb'), as the parent directory for destination file does not exist. This patch helps to avoid that by recursively creating parent directories.

[OE-core] [zeus 06/28] runqemu: Remove disabling of high resolution timer

2019-10-25 Thread Armin Kuster
From: Joerg Vehlow The option 'highres=off' sneaked itself into the runqemu script for all configurations, where the root filesystem type is not 'cpio' or 'cpio.gz'. See: https://bugzilla.yoctoproject.org/show_bug.cgi?id=13590 Signed-off-by: Joerg Vehlow Signed-off-by: Richard Purdie Signed-of

[OE-core] [zeus 07/28] ncurses: fix CVE-2019-17594, CVE-2019-17595

2019-10-25 Thread Armin Kuster
From: Trevor Gamblin Backport changes to tinfo/comp_hash.c, tinfo/parse_entry.c, and progs/dump_entry.c from upstream to fix CVEs. Signed-off-by: Trevor Gamblin Signed-off-by: Armin Kuster --- ...rses-selective-backport-of-20191012-patch.patch | 169 + meta/recipes-core/nc

[OE-core] [zeus 05/28] runqemu: unset another environment variable for 'egl-headless'

2019-10-25 Thread Armin Kuster
From: Alexander Kanavin Some host distributions (opensuse for example) are using 'pkgconf', which, unlike the original pkg-config, appends PKG_CONFIG_SYSROOT_DIR to every directory from the .pc file. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --

[OE-core] [zeus 11/28] uninative: check .done file instead of tarball

2019-10-25 Thread Armin Kuster
From: Stefan Agner In case multiple builds share UNINATIVE_DLDIR's location, one build might be in the process of downloading the tarball while another is just checking whether the tarball exists. Check for the done file instead and rely on the fetchers lockfile mechanism in case two builds are r

[OE-core] [zeus 08/28] sysstat: fix CVE-2019-16167

2019-10-25 Thread Armin Kuster
From: Wenlin Kang This commit is another part of CVE-2019-16167, please see https://github.com/sysstat/sysstat/issues/232. Signed-off-by: Wenlin Kang Signed-off-by: Richard Purdie (cherry picked from commit 586c045eb81b79200b46bf743f5d3fdb5f68c12d) Signed-off-by: Armin Kuster --- ...ory-corr

[OE-core] [zeus 09/28] libsdl2: fix CVE-2019-13616

2019-10-25 Thread Armin Kuster
From: Yi Zhao Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-13616 Patch from: https://hg.libsdl.org/SDL/rev/e7ba650a643a Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie (cherry picked from commit 70b9cdf86b9c5ed14937500619387a890a57ef20) Signed-off-by: Armin Kuster --- ...538-va

[OE-core] [zeus 10/28] sanity: check the format of SDK_VENDOR

2019-10-25 Thread Armin Kuster
From: Ross Burton If SDK_VENDOR isn't formatted as -foosdk and is instead for example -foo-sdk then the triple that are constructed are not in fact triples, which results in mysterious compile errors. Check in sanity.bbclass so this failure is detected early. [ YOCTO #13573 ] Signed-off-by: Ro

[OE-core] [zeus 04/28] python3: CVE-2019-16056

2019-10-25 Thread Armin Kuster
From: Chen Qi Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- ...55-Dont-parse-domains-containing-GH-13079.patch | 132 + meta/recipes-devtools/python/python3_3.7.4.bb | 1 + 2 files changed, 133 insertions(+) create mode 100644

[OE-core] [zeus 03/28] python: CVE-2019-16056

2019-10-25 Thread Armin Kuster
From: Chen Qi Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster --- ...55-Dont-parse-domains-containing-GH-13079.patch | 90 ++ meta/recipes-devtools/python/python_2.7.16.bb | 1 + 2 files changed, 91 insertions(+) create mode 100644

[OE-core] [zeus 02/28] aspell: fix CVE-2019-17544

2019-10-25 Thread Armin Kuster
From: Trevor Gamblin Backport CVE-2019-17544 fix to zeus. Signed-off-by: Trevor Gamblin Signed-off-by: Armin Kuster --- .../0001-Fix-various-bugs-found-by-OSS-Fuze.patch | 56 ++ meta/recipes-support/aspell/aspell_0.60.7.bb | 4 +- 2 files changed, 59 insertions(+)

[OE-core] [zeus 01/28] sqlite3: fix CVE-2019-16168

2019-10-25 Thread Armin Kuster
From: "qi.c...@windriver.com" Signed-off-by: Chen Qi Signed-off-by: Armin Kuster --- .../sqlite/files/0001-Fix-CVE-2019-16168.patch | 40 ++ meta/recipes-support/sqlite/sqlite3_3.29.0.bb | 3 +- 2 files changed, 42 insertions(+), 1 deletion(-) create mode 100644

[OE-core] [zeus 00/28] Patch review

2019-10-25 Thread Armin Kuster
This is what has been backported from master or patches. Comments by Monday. The following changes since commit 59938780e7e776d87146002ea939b185f8704408: build-appliance-image: Update to master head revision (2019-10-09 22:28:44 +0100) are available in the git repository at: git://git.ope

Re: [OE-core] [PATCH] mesa: Upgrade 19.1.6 -> 19.2.1

2019-10-25 Thread Martin Jansa
It's not part of this mesa upgrade, but as you're maintaining it and I'll possibly forget to mention it next time (or if someone is using newest mesa for whatever reason like pinephone does now)... In latest mesa MESA_EGL_NO_X11_HEADERS was renamed to EGL_NO_X11 in: https://github.com/mesa3d/mesa/

[OE-core] [thud][PATCH v2] libgcrypt: CVE-2019-12904 fix

2019-10-25 Thread shuagr97
From: Shubham Agrawal --- .../libgcrypt/files/CVE-2019-12904.patch | 501 + meta/recipes-support/libgcrypt/libgcrypt_1.8.4.bb | 1 + 2 files changed, 502 insertions(+) create mode 100644 meta/recipes-support/libgcrypt/files/CVE-2019-12904.patch diff --git a/met

[OE-core] [PATCH v5 1/2] libsdl2: Fix build failure when using mesa 19.2.1

2019-10-25 Thread Alistair Francis
Signed-off-by: Alistair Francis --- v5: - Backport upstream fix ...DL-fails-to-compile-with-Mesa-Master.patch | 41 +++ .../libsdl2/libsdl2_2.0.10.bb | 1 + 2 files changed, 42 insertions(+) create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/0002-Fixed-b

[OE-core] [PATCH] libcap-ng: undefined reference to `pthread_atfork'

2019-10-25 Thread Trevor Woerner
Some hosts need -lpthread in order to link properly (e.g. openSUSE 15.1). Signed-off-by: Trevor Woerner --- meta/recipes-support/libcap-ng/libcap-ng_0.7.10.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/libcap-ng/libcap-ng_0.7.10.bb b/meta/recipes-support/libcap-ng/

[OE-core] ✗ patchtest: failure for libgcrypt: CVE-2019-12904 fix

2019-10-25 Thread Patchwork
== Series Details == Series: libgcrypt: CVE-2019-12904 fix Revision: 1 URL : https://patchwork.openembedded.org/series/20686/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the p

[OE-core] [PATCH v5 2/2] mesa: Upgrade to 19.2.1

2019-10-25 Thread Alistair Francis
From: Alistair Francis Upgrade mesa and mesa-gl to 19.2.1. The license hash change was a trivial new line removal. The glx-tls option was removed as it isn't included in the meson.build file. It has been replaced with 'use-elf-tls' instead. The -Dasm=false was removed as it also is no longer i

[OE-core] [PATCH] sudo: Fix fetching sources

2019-10-25 Thread Ferry Toth
It looks like https://www.sudo.ws/download.html changed certificate and directory structure. This breaks fetching sources. Signed-off-by: Ferry Toth --- meta/recipes-extended/sudo/sudo_1.8.23.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/sudo/sudo_1

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 01:24:51 PM, Trevor Woerner wrote: > On Fri 2019-10-25 @ 07:37:34 AM, akuster808 wrote: > > is someone going to send a patch? > > Yes, I'm working on that now. This looks like something that should be fixed > upstream, so that's the approach I'm taking. Please bear with me :-)

Re: [OE-core] Add recipes for Go v1.13

2019-10-25 Thread Alexander Kube
Done. The latest patchset removes go-1.12 and cleans up the rest of the 1.13 recipes. On Fri, Oct 25, 2019 at 1:49 PM Khem Raj wrote: > 1.12 should be removed along with this > > On Thu, Oct 24, 2019 at 6:29 PM Alexander Kube > wrote: > >> This patch set adds various go-1.13 recipes and changes

Re: [OE-core] [PATCH 1/1] openssl: make OPENSSL_ENGINES match install path

2019-10-25 Thread akuster808
On 10/25/19 1:16 PM, George McCollister wrote: > Can we get 59565fec0b3f3e24eb01c03b671913599cd3134d cherry-picked to > warrior now that this has landed in master? once it makes it into zeus mainline. Its staged @ https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/zeus-nmut  whi

Re: [OE-core] ✗ patchtest: failure for sudo: Fix fetching sources

2019-10-25 Thread Ferry Toth
Op 25-10-2019 om 21:32 schreef Patchwork: == Series Details == Series: sudo: Fix fetching sources Revision: 1 URL : https://patchwork.openembedded.org/series/20684/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response.

Re: [OE-core] [PATCH 1/1] openssl: make OPENSSL_ENGINES match install path

2019-10-25 Thread George McCollister
Can we get 59565fec0b3f3e24eb01c03b671913599cd3134d cherry-picked to warrior now that this has landed in master? Thanks, George -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo

[OE-core] ✗ patchtest: failure for sudo: Fix fetching sources

2019-10-25 Thread Patchwork
== Series Details == Series: sudo: Fix fetching sources Revision: 1 URL : https://patchwork.openembedded.org/series/20684/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the prop

[OE-core] [PATCH v5 4/5] go: Remove go-1.12

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.12.inc | 24 -- ...ow-CC-and-CXX-to-have-multiple-words.patch | 31 -- ...o1.12-security-net-textproto-don-t-n.patch | 163 -- ...ent-based-hash-generation-less-pedan.patch | 218 -- ...-to

[OE-core] [PATCH v5 5/5] go: Extract common environment setup.

2019-10-25 Thread Alexander Kube
From: Alex Kube Add default values for go environment variables to go-common.inc. Override where appropriate in other go*.inc files, and use host/target tuples from goarch for setting CC flags. Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-common.inc | 10 ++ meta/re

[OE-core] [PATCH v5 2/5] go: Add go1.13 recipes

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.13.inc | 24 +++ .../go/go-cross-canadian_1.13.bb | 2 ++ meta/recipes-devtools/go/go-cross_1.13.bb | 2 ++ meta/recipes-devtools/go/go-crosssdk_1.13.bb | 2 ++ meta/recipes-

[OE-core] [PATCH v5 1/5] go: Refactor patches for 1.13.3

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- ...ow-CC-and-CXX-to-have-multiple-words.patch | 38 +++ ...ent-based-hash-generation-less-pedan.patch | 226 ++ ...-to-be-overridden-in-the-environment.patch | 54 ...4-ld-add-soname-to-shareable-objects.patch | 50 ...de-CC-

[OE-core] [PATCH v5 3/5] go: Change default GOVERSION to 1.13

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/conf/distro/include/tcmode-default.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/conf/distro/include/tcmode-default.inc b/meta/conf/distro/include/tcmode-default.inc index 4a23c50631..c6c4cf7ce0 100644 --- a/meta/

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 07:37:34 AM, akuster808 wrote: > is someone going to send a patch? Yes, I'm working on that now. This looks like something that should be fixed upstream, so that's the approach I'm taking. Please bear with me :-) -- ___ Openembedded-

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 06:01:54 PM, Khem Raj wrote: > On Fri, Oct 25, 2019 at 2:45 PM Trevor Woerner wrote: > > Yes, adding the following line fixes it: > > > > LDFLAGS_append_class-native = " -lpthread" > > > > (unless there's a distro-override way of doing it...?) > > > There is no need to

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 11:44:14 AM, Trevor Gamblin wrote: > On 10/25/19 11:16 AM, Trevor Woerner wrote: > > Does this break on hosts where it had previously worked? > Doesn't affect my (successful) Fedora build. Would also be interested to > know. Okay, thanks for the report! :-) --

[OE-core] [PATCH 2/2] binutils: fix CVE-2019-17451

2019-10-25 Thread Trevor Gamblin
Backport upstream fix. No upstream release version of binutils it yet, so backport the fix independently. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch| 51 +++ 2 files changed, 52 insertions

[OE-core] [PATCH 1/2] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
Backport upstream fix. No upstream release version of binutils it yet, so backport the fix independently. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99 +++ 2 files changed, 100 insertion

Re: [OE-core] [zeus][PATCH v3] binutils: fix CVE-2019-17450

2019-10-25 Thread Khem Raj
On Fri, Oct 25, 2019 at 4:05 PM Trevor Gamblin wrote: > On 10/25/19 11:02 AM, akuster808 wrote: > > > > > On 10/25/19 5:22 AM, Trevor Gamblin wrote: > >> Backport upstream fix to zeus. > >> > >> Signed-off-by: Trevor Gamblin > > Does this affect Master? > > > > - armin > >> --- > >> .../binuti

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Khem Raj
On Fri, Oct 25, 2019 at 2:45 PM Trevor Woerner wrote: > On Fri 2019-10-25 @ 09:22:04 AM, Trevor Woerner wrote: > > On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: > > > perhaps you need to add -pthread to LDFLAGS > > > > I'll set up a test build. > > Yes, adding the following line fixes it: > >

Re: [OE-core] [zeus][PATCH v3] binutils: fix CVE-2019-17450

2019-10-25 Thread Randy MacLeod
On 10/25/19 11:05 AM, Trevor Gamblin wrote: It does, but I'm working on an upgrade for binutils to 2.33 for master that I'll then apply this (and another CVE patch) on top of. You should probably send the CVE fix to master so it gets tested there even if there's an upgrade coming in a few days.

[OE-core] [zeus][PATCH v4 1/2] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99 +++ 2 files changed, 100 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-1

[OE-core] [zeus][PATCH v4 2/2] binutils: fix CVE-2019-17451

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch| 51 +++ 2 files changed, 52 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-17

[OE-core] ✗ patchtest: failure for binutils: fix CVE-2019-17450 (rev5)

2019-10-25 Thread Patchwork
== Series Details == Series: binutils: fix CVE-2019-17450 (rev5) Revision: 5 URL : https://patchwork.openembedded.org/series/20658/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on

[OE-core] ✗ patchtest: failure for binutils: fix CVE-2019-17450 (rev4)

2019-10-25 Thread Patchwork
== Series Details == Series: binutils: fix CVE-2019-17450 (rev4) Revision: 4 URL : https://patchwork.openembedded.org/series/20658/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on

Re: [OE-core] [thud][PATCH] systemd: Security fixes for CVE

2019-10-25 Thread akuster808
On 10/16/19 2:16 PM, Muminul Islam wrote: > CVE: CVE-2019-3842 CVE-2019-3843 CVE-2019-3844 > > Upstream-Status: Backport Warrior needs these fixes before thud mainline can be fixed. - armin > > Signed-off-by: Muminul Islam > --- > .../systemd/systemd/CVE-2019-3842.patch | 59 + > ..

Re: [OE-core] [thud][PATCH] curl: Security fix for CVE-2019-5481

2019-10-25 Thread akuster808
On 10/16/19 2:10 PM, Muminul Islam wrote: > CVE: CVE-2019-5481 > > Upstream-Status: Backport Warrior needs to be fixed before I can get this in mainline thud. - Armin > > Signed-off-by: Muminul Islam > --- > .../curl/curl/CVE-2019-5481.patch | 52 +++ > meta/recip

[OE-core] [zeus][PATCH v2] binutils: fix CVE-2019-17451

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch| 51 +++ 2 files changed, 52 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-17

Re: [OE-core] [zeus][PATCH] binutils: fix CVE-2019-17451

2019-10-25 Thread Trevor Gamblin
On 10/25/19 11:41 AM, Trevor Gamblin wrote: Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch| 51 +++ 2 files changed, 52 insertions(+) create mode 100644

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Gamblin
On 10/25/19 11:16 AM, Trevor Woerner wrote: On Fri 2019-10-25 @ 07:37:34 AM, akuster808 wrote: On 10/25/19 6:44 AM, Trevor Woerner wrote: On Fri 2019-10-25 @ 09:22:04 AM, Trevor Woerner wrote: On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: perhaps you need to add -pthread to LDFLAGS I'l

[OE-core] [zeus][PATCH] binutils: fix CVE-2019-17451

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch| 51 +++ 2 files changed, 52 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-17

Re: [OE-core] [opkg-devel] [yocto][PATCH][opkg] bug 13528 add SPDX id to opkg

2019-10-25 Thread Alejandro Del Castillo
merged thanks again for doing this, its been on the wish-list for a while! -- Cheers, Alejandro On 10/25/19 2:50 AM, Yann CARDAILLAC wrote: > Hi Alejandro, > > Here's patch v2 > > Thanks for your sharpened eyes ! > > Regards, > > On Thu, Oct 24, 2019 at 9:39 PM Alejandro Del Castillo > mai

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 07:37:34 AM, akuster808 wrote: > > > On 10/25/19 6:44 AM, Trevor Woerner wrote: > > On Fri 2019-10-25 @ 09:22:04 AM, Trevor Woerner wrote: > >> On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: > >>> perhaps you need to add -pthread to LDFLAGS > >> I'll set up a test build. > >

Re: [OE-core] [zeus][PATCH v3] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
On 10/25/19 11:02 AM, akuster808 wrote: On 10/25/19 5:22 AM, Trevor Gamblin wrote: Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin Does this affect Master? - armin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99

Re: [OE-core] [zeus][PATCH v3] binutils: fix CVE-2019-17450

2019-10-25 Thread akuster808
On 10/25/19 5:22 AM, Trevor Gamblin wrote: > Backport upstream fix to zeus. > > Signed-off-by: Trevor Gamblin Does this affect Master? - armin > --- > .../binutils/binutils-2.32.inc| 1 + > .../binutils/binutils/CVE-2019-17450.patch| 99 +++ > 2 files chan

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread akuster808
On 10/25/19 6:44 AM, Trevor Woerner wrote: > On Fri 2019-10-25 @ 09:22:04 AM, Trevor Woerner wrote: >> On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: >>> perhaps you need to add -pthread to LDFLAGS >> I'll set up a test build. > Yes, adding the following line fixes it: > > LDFLAGS_append

[OE-core] ✗ patchtest: failure for "[v5] go: Refactor patches for ..." and 3 more

2019-10-25 Thread Patchwork
== Series Details == Series: "[v5] go: Refactor patches for ..." and 3 more Revision: 1 URL : https://patchwork.openembedded.org/series/20677/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been

[OE-core] [PATCH v5 4/4] go: Remove go-1.12

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.12.inc | 24 -- ...ow-CC-and-CXX-to-have-multiple-words.patch | 31 -- ...o1.12-security-net-textproto-don-t-n.patch | 163 -- ...ent-based-hash-generation-less-pedan.patch | 218 -- ...-to

[OE-core] [PATCH v4 4/4] Remove go-1.12

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.12.inc | 24 -- ...ow-CC-and-CXX-to-have-multiple-words.patch | 31 -- ...o1.12-security-net-textproto-don-t-n.patch | 163 -- ...ent-based-hash-generation-less-pedan.patch | 218 -- ...-to

[OE-core] [PATCH v5 3/4] go: Change default GOVERSION to 1.13

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/conf/distro/include/tcmode-default.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/conf/distro/include/tcmode-default.inc b/meta/conf/distro/include/tcmode-default.inc index 4a23c50631..c6c4cf7ce0 100644 --- a/meta/

[OE-core] [PATCH v5 2/4] go: Add go1.13 recipes

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.13.inc | 24 +++ .../go/go-cross-canadian_1.13.bb | 2 ++ meta/recipes-devtools/go/go-cross_1.13.bb | 2 ++ meta/recipes-devtools/go/go-crosssdk_1.13.bb | 2 ++ meta/recipes-

[OE-core] [PATCH v5 1/4] go: Refactor patches for 1.13.3

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- ...ow-CC-and-CXX-to-have-multiple-words.patch | 38 +++ ...ent-based-hash-generation-less-pedan.patch | 226 ++ ...-to-be-overridden-in-the-environment.patch | 54 ...4-ld-add-soname-to-shareable-objects.patch | 50 ...de-CC-

[OE-core] [PATCH v2] systemtap: support usrmerge

2019-10-25 Thread Alessio Igor Bogani
Signed-off-by: Alessio Igor Bogani --- meta/recipes-kernel/systemtap/systemtap_git.bb | 11 +++ 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/meta/recipes-kernel/systemtap/systemtap_git.bb b/meta/recipes-kernel/systemtap/systemtap_git.bb index 6ee3e1c0f7..1c9f2aed16 10064

[OE-core] ✗ patchtest: failure for "[v4] go: Refactor patches for ..." and 3 more

2019-10-25 Thread Patchwork
== Series Details == Series: "[v4] go: Refactor patches for ..." and 3 more Revision: 1 URL : https://patchwork.openembedded.org/series/20676/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been

[OE-core] [PATCH v4 1/4] go: Refactor patches for 1.13.3

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- ...ow-CC-and-CXX-to-have-multiple-words.patch | 38 +++ ...ent-based-hash-generation-less-pedan.patch | 226 ++ ...-to-be-overridden-in-the-environment.patch | 54 ...4-ld-add-soname-to-shareable-objects.patch | 50 ...de-CC-

[OE-core] [PATCH v4 1/4] go: Refactor patches for 1.13.3

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- ...ow-CC-and-CXX-to-have-multiple-words.patch | 38 +++ ...ent-based-hash-generation-less-pedan.patch | 226 ++ ...-to-be-overridden-in-the-environment.patch | 54 ...4-ld-add-soname-to-shareable-objects.patch | 50 ...de-CC-

[OE-core] [PATCH v4 4/4] Remove go-1.12

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.12.inc | 24 -- ...ow-CC-and-CXX-to-have-multiple-words.patch | 31 -- ...o1.12-security-net-textproto-don-t-n.patch | 163 -- ...ent-based-hash-generation-less-pedan.patch | 218 -- ...-to

[OE-core] [PATCH v4 3/4] go: Change default GOVERSION to 1.13

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/conf/distro/include/tcmode-default.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/conf/distro/include/tcmode-default.inc b/meta/conf/distro/include/tcmode-default.inc index 4a23c50631..c6c4cf7ce0 100644 --- a/meta/

[OE-core] [PATCH v4 2/4] go: Add go1.13 recipes

2019-10-25 Thread Alexander Kube
From: Alex Kube Signed-off-by: Alex Kube --- meta/recipes-devtools/go/go-1.13.inc | 24 +++ .../go/go-cross-canadian_1.13.bb | 2 ++ meta/recipes-devtools/go/go-cross_1.13.bb | 2 ++ meta/recipes-devtools/go/go-crosssdk_1.13.bb | 2 ++ meta/recipes-

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 09:22:04 AM, Trevor Woerner wrote: > On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: > > perhaps you need to add -pthread to LDFLAGS > > I'll set up a test build. Yes, adding the following line fixes it: LDFLAGS_append_class-native = " -lpthread" (unless there's a d

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Gamblin
On 10/25/19 9:17 AM, Trevor Woerner wrote: On Fri 2019-10-25 @ 01:30:32 PM, zangrc wrote: hello! We think this problem has something to do with the host environment. We tried to reproduce the error on ubuntu16.04 and fedora29, but they all compiled successfully. Can you tell us which distribut

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Thu 2019-10-24 @ 04:05:10 PM, Khem Raj wrote: > perhaps you need to add -pthread to LDFLAGS That's what it feels like. I'll set up a test build. I'm pretty sure I've stumbled across this in the past, but it seems like different distros package the crypto things differently, therefore building

Re: [OE-core] [PATCH] libcap-ng:upgrade 0.7.9 -> 0.7.10

2019-10-25 Thread Trevor Woerner
On Fri 2019-10-25 @ 01:30:32 PM, zangrc wrote: > hello! > > We think this problem has something to do with the host environment. We > tried to reproduce the error on ubuntu16.04 and fedora29, but they all > compiled successfully. Can you tell us which distributions are having this > problem? open

Re: [OE-core] [zeus][PATCH v2] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
On 10/25/19 8:20 AM, Trevor Gamblin wrote: Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99 +++ 2 files changed, 100 insertions(+) create mode 100644

[OE-core] [zeus][PATCH v3] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99 +++ 2 files changed, 100 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-1

[OE-core] [zeus][PATCH v2] binutils: fix CVE-2019-17450

2019-10-25 Thread Trevor Gamblin
Backport upstream fix to zeus. Signed-off-by: Trevor Gamblin --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch| 99 +++ 2 files changed, 100 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2019-1

Re: [OE-core] [RFC][PATCH 0/6] NPM refactoring

2019-10-25 Thread Adrian Bunk
On Fri, Oct 25, 2019 at 10:35:20AM +0200, Stefan Herbrechtsmeier wrote: > Am 24.10.19 um 17:59 schrieb Richard Purdie: > > On Thu, 2019-10-24 at 18:37 +0300, Adrian Bunk wrote: > > > On Thu, Oct 24, 2019 at 02:12:43PM +0200, Alexander Kanavin wrote: > > > > On Thu, 24 Oct 2019 at 14:02, Stefan Herb

Re: [OE-core] [zeus][PATCH] binutils: fix CVE-2019-17450

2019-10-25 Thread Khem Raj
On Fri, Oct 25, 2019 at 2:02 AM Trevor Gamblin wrote: > Backport upstream fix to zeus. > > Signed-off-by: Trevor Gamblin > --- > .../binutils/binutils-2.32.inc| 1 + > ...erflow-in-function-find_abstract_ins.patch | 99 +++ > 2 files changed, 100 insertions(+) >

Re: [OE-core] [PATCH v3 1/3] recipes-devtools/go: Refactor patches for go-1.13.3

2019-10-25 Thread Khem Raj
Looks good but please delete 1.12 along as well On Thu, Oct 24, 2019 at 9:39 PM Alexander Kube wrote: > From: Alex Kube > > Signed-off-by: Alex Kube > --- > ...ow-CC-and-CXX-to-have-multiple-words.patch | 38 +++ > ...ent-based-hash-generation-less-pedan.patch | 226 ++ > ...-to-

Re: [OE-core] Add recipes for Go v1.13

2019-10-25 Thread Khem Raj
1.12 should be removed along with this On Thu, Oct 24, 2019 at 6:29 PM Alexander Kube wrote: > This patch set adds various go-1.13 recipes and changes the > poky GOVERSION to 1.13%. It leaves the existing go-1.12 > recipes untouched and available for existing users of > those recipes. > > > -- >

Re: [OE-core] [RFC][PATCH 0/6] NPM refactoring

2019-10-25 Thread Stefan Herbrechtsmeier
Hi Andre, Am 25.10.19 um 10:01 schrieb André Draszik: Hi, This has been an interesting discussion so far. I'd like to throw in something else... A couple years back I wrote a little python script to automatically generate all the required dependency recipes given an npm project's package.json

Re: [OE-core] [RFC][PATCH 0/6] NPM refactoring

2019-10-25 Thread Stefan Herbrechtsmeier
Am 24.10.19 um 19:58 schrieb Alexander Kanavin: On Thu, 24 Oct 2019 at 19:45, Stefan Herbrechtsmeier mailto:ste...@herbrechtsmeier.net>> wrote: > The package-lock.json in their tarball is 600K. The project use two major version and seven different versions with 30 installations of

[OE-core] [RFC][PATCH v2 3/7] recipetool/create_npm.py: refactor the npm recipe creation handler

2019-10-25 Thread Jean-Marie LEMETAYER
This commit refactors the npm recipe creation handler to use the new npm behavior. The process is kept as simple as possible and only generates the shrinkwrap file. To avoid naming issues the recipe name is now extracted from the npm package name and not directly map. Signed-off-by: Jean-Marie LE

[OE-core] [RFC][PATCH v2 7/7] oeqa/selftest/recipetool: add npm recipe creation test

2019-10-25 Thread Jean-Marie LEMETAYER
This commit adds a recipetool creation test for npm recipe. Signed-off-by: Jean-Marie LEMETAYER --- meta/lib/oeqa/selftest/cases/recipetool.py | 19 +++ 1 file changed, 19 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/recipetool.py b/meta/lib/oeqa/selftest/cases/recip

[OE-core] [RFC][PATCH v2 0/7] NPM refactoring

2019-10-25 Thread Jean-Marie LEMETAYER
The current NPM support have several issues: - The current NPM fetcher downloads the dependency tree but not the other fetchers. The 'subdir' parameter was used to fix this issue. - They are multiple issues with package names (uppercase, exotic characters, scoped packages) even if they are

[OE-core] [RFC][PATCH v2 2/7] devtool: update command line options for npm

2019-10-25 Thread Jean-Marie LEMETAYER
This commit renames the '--fetch-dev' option into '--npm-dev' which is more easily understandable. It also adds the '--npm-registry' option to allow creating a npm recipe with a non default npm registry (e.g. if the SRC_URI is using git://). Signed-off-by: Jean-Marie LEMETAYER --- scripts/lib/d

  1   2   >