Re: [OE-core] [PATCH 4/8] meson: update 0.57.2 -> 0.58.0

2021-05-14 Thread Andreas Müller
On Fri, May 14, 2021 at 5:20 PM Khem Raj wrote: > > On Fri, May 14, 2021 at 6:59 AM Alexander Kanavin > wrote: > > > > Probably resolved by updating to 40.1? > > https://gitlab.gnome.org/GNOME/nautilus/-/tags > > > > easier said than done. Sadly these are complex apps and I don't have > time to

Re: [OE-core][dunfell 00/25] Pull request (cover letter only)

2021-05-14 Thread Steve Sakoman
On Thu, May 13, 2021 at 11:11 AM Richard Purdie wrote: > > On Wed, 2021-05-12 at 04:47 -1000, Steve Sakoman wrote: > > The following changes since commit 834a8e357bc999a0163e7c5bafbcc1a8816448d4: > > > > license_image.bbclass: Fix symlink to generic license files (2021-05-03 > > 04:56:23

Re: [OE-core] [PATCH 4/8] meson: update 0.57.2 -> 0.58.0

2021-05-14 Thread Khem Raj
On Fri, May 14, 2021 at 6:59 AM Alexander Kanavin wrote: > > Probably resolved by updating to 40.1? > https://gitlab.gnome.org/GNOME/nautilus/-/tags > easier said than done. Sadly these are complex apps and I don't have time to fix the long list of dependencies it will ensue therefore I will

Re: [OE-core] [PATCH 2/2] gstreamer1.0-libav: remove explicit LICENSE_FLAGS

2021-05-14 Thread Khem Raj
On 5/14/21 1:34 AM, Jose Quaresma wrote: Hi Khem, There has already been a discussion about this in https://lists.openembedded.org/g/openembedded-core/message/143935 In short: If libav needs ffmpeg, it will need that line (with a comment explaining its due to the dependency). Assuming libav

Re: [OE-core] [PATCH 4/8] meson: update 0.57.2 -> 0.58.0

2021-05-14 Thread Alexander Kanavin
Probably resolved by updating to 40.1? https://gitlab.gnome.org/GNOME/nautilus/-/tags Alex On Fri, 14 May 2021 at 15:46, Khem Raj wrote: > breaks nautilus https://errors.yoctoproject.org/Errors/Details/581184/ > > On Thu, May 13, 2021 at 1:56 PM Alexander Kanavin > wrote: > > > > Rebase

Re: [OE-core] [PATCH 4/8] meson: update 0.57.2 -> 0.58.0

2021-05-14 Thread Khem Raj
breaks nautilus https://errors.yoctoproject.org/Errors/Details/581184/ On Thu, May 13, 2021 at 1:56 PM Alexander Kanavin wrote: > > Rebase patches; dropped chunks (and cross-prop-default.patch) > have been removed upstream. > > Move native-only patches to all-patches, as they're a pain to

Re: [OE-core] [hardknott][PATCH 1/3] libxml2: fix CVE-2021-3517

2021-05-14 Thread Randy MacLeod
On 2021-05-14 9:38 a.m., Tony Tascioglu wrote: Hello, These patches are only going to hardknott, and upstream released a new version yesterday that we can use for the master branch. The CVE fixes are present in the new version, and these patches backport those fixes for libxml version 2.9.10

Re: [OE-core] [hardknott][PATCH 1/3] libxml2: fix CVE-2021-3517

2021-05-14 Thread Tony Tascioglu
Hello, These patches are only going to hardknott, and upstream released a new version yesterday that we can use for the master branch. The CVE fixes are present in the new version, and these patches backport those fixes for libxml version 2.9.10 in hardknott. I am working on the uprev to

[OE-core] [hardknott][PATCH 1/3] libxml2: fix CVE-2021-3517

2021-05-14 Thread Tony Tascioglu
Fixes heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c CVE: CVE-2021-3517 Upstream-status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/bf22713507fe1fc3a2c4b525cf0a88c2dc87a3a2] Signed-off-by: Tony Tascioglu --- .../libxml/libxml2/CVE-2021-3517.patch

[OE-core] [hardknott][PATCH 2/3] libxml2: fix CVE-2021-3516

2021-05-14 Thread Tony Tascioglu
Fixes use-after-free in xmlEncodeEntitiesInternal() in entities.c CVE: CVE-2021-3516 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539] Signed-off-by: Tony Tascioglu --- .../libxml/libxml2/CVE-2021-3516.patch| 36

[OE-core] [hardknott][PATCH 3/3] libxml2: fix CVE-2021-3537

2021-05-14 Thread Tony Tascioglu
Parsing specially crafted Mixed Content while parsing XML data may lead to invalid data structure being created, as errors were not propagated. This could lead to several NULL Pointer Dereference when post-validating documents parsed in recovery mode. CVE: CVE-2021-3537 Upstream-Status: Backport

[OE-core] can we not assign default values to "EXTRA_*" variables?

2021-05-14 Thread Robert P. J. Day
i just got burned by taking the very advice i'd been giving out for years. when people ask about how to add new image features to their images, they point to IMAGE_FEATURES and ask if that's the way to do it, as in one of: IMAGE_FEATURES += ... IMAGE_FEATURES_append = ... well, ok, i say,

Re: [OE-core] is there an easy to prevent *creation* of some recipe's packages?

2021-05-14 Thread Konrad Weihmann
On 14.05.21 13:52, Robert P. J. Day wrote: On Fri, 14 May 2021, Konrad Weihmann wrote: On 14.05.21 13:16, Robert P. J. Day wrote: pretty sure i know the answer to this one, but was asked the other day and wanted to make sure. in order to speed up the normal OE build, someone suggested

Re: [OE-core] is there an easy to prevent *creation* of some recipe's packages?

2021-05-14 Thread Robert P. J. Day
On Fri, 14 May 2021, Konrad Weihmann wrote: > On 14.05.21 13:16, Robert P. J. Day wrote: > > > >pretty sure i know the answer to this one, but was asked the > > other day and wanted to make sure. in order to speed up the normal > > OE build, someone suggested bypassing the creation of

Re: [OE-core] is there an easy to prevent *creation* of some recipe's packages?

2021-05-14 Thread Konrad Weihmann
On 14.05.21 13:16, Robert P. J. Day wrote: pretty sure i know the answer to this one, but was asked the other day and wanted to make sure. in order to speed up the normal OE build, someone suggested bypassing the creation of packages that weren't going to be relevant, such as -dev, -doc

[OE-core] is there an easy to prevent *creation* of some recipe's packages?

2021-05-14 Thread Robert P. J. Day
pretty sure i know the answer to this one, but was asked the other day and wanted to make sure. in order to speed up the normal OE build, someone suggested bypassing the creation of packages that weren't going to be relevant, such as -dev, -doc and so on -- the idea was that that could make a

[OE-core] [PATCH v3] libnotify: Make gtk+3 dependency optional

2021-05-14 Thread Mike Crowe via lists.openembedded.org
libnotify only requires gtk+3 for its tests. Let's disable them by default and only enable them if "tests" is in PACKAGECONFIG. If gtk+3 is not available then we need to declare the dependency on gdk-pixbuf explicitly. It looks like the tests genuinely do need some sort of desktop environment to

Re: [OE-core] [PATCH 2/2] gstreamer1.0-libav: remove explicit LICENSE_FLAGS

2021-05-14 Thread Jose Quaresma
Hi Khem, There has already been a discussion about this in https://lists.openembedded.org/g/openembedded-core/message/143935 In short: If libav needs ffmpeg, it will need that line (with a comment explaining its due to the dependency). Assuming libav without ffmpeg doesn't make sense/work Khem