[OE-core] [meta][dunfell][PATCH v2] systemd: Add fix for CVE-2020-13529 and CVE-2021-33910

Added fix for below CVEs from below Link http://archive.ubuntu.com/ubuntu/pool/main/s/systemd/systemd_237-3ubuntu10.50.debian.tar.xz 1. CVE-2020-13529 Upstream-Status: Backport [https://github.com/systemd/systemd/commit/38e980a6a5a3442c2f48b1f827284388096d8ca5] 2. CVE-2021-33910

[OE-core] [PATCH] ell: upgrade 0.41 -> 0.42

Signed-off-by: Wang Mingyu --- meta/recipes-core/ell/{ell_0.41.bb => ell_0.42.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/ell/{ell_0.41.bb => ell_0.42.bb} (90%) diff --git a/meta/recipes-core/ell/ell_0.41.bb b/meta/recipes-core/ell/ell_0.42.bb similarity

Re: [OE-core] [master][PATCH 0/4] Reproducible LTO builds

On 2021-07-27 9:34 a.m., Tony Battersby wrote: Currently, enabling Link Time Optimization via: require conf/distro/include/lto.inc DISTRO_FEATURES_append = " lto" makes the build non-reproducible (as in https://reproducible-builds.org/).  This patch set fixes some of the problems, but is not

[OE-core] [PATCH 1/2] valgrind: Add patches for glibc 2.34 support

This partially resolves ptest failures with glibc 2.34. Signed-off-by: Richard Purdie --- ...6a5a0ea3e1e154663b0fc575bfe2becf177d.patch | 34 + ...51fc35f8a6148c2940eb46932b02dd3b9b23.patch | 171 ++ ...2a4d246519cd1a638cfc7eff00cdd74413c4.patch | 43 +

[OE-core] [PATCH 2/2] elfutils: Add patch from upstream for glibc 2.34 ptest fixes

Add a patch being discussed upstream to fix a ptest issue with glibc 2.34. Signed-off-by: Richard Purdie --- .../elfutils/elfutils_0.185.bb| 1 + .../elfutils/files/glibc-2.34-fix.patch | 139 ++ 2 files changed, 140 insertions(+) create mode 100644

[OE-core] [PATCHv3] systemd-boot: use ld.bfd as efi-ld even when gold or lld is used in ${LD}

* since the upgrade to 249.1 in: https://git.openembedded.org/openembedded-core/commit/?id=323ec445dfe22860cd450c303db5ed8fcb4e791c the builds with ld-is-gold are failing with: [17/21] Generating linuxx64.elf.stub with a custom command FAILED: src/boot/efi/linuxx64.elf.stub

[OE-core] [PATCH] python3-scons{-native}: upgrade 4.1.0 -> 4.2.0

NOTE: The 4.2.0 Release of SCons will deprecate Python 3.5 Support. Python 3.5 support will be dropped in the next major release. RELEASE 4.2.0 - Sat, 31 Jul 2021 18:12:46 -0700 From Byron Platt: - Fix Install() issue when copytree recursion gives bad arguments that can lead to

[OE-core] [PATCH 2/2] python3-importlib-metadata: upgrade 4.6.1 -> 4.6.3

v4.6.3 Moved workaround for #327 to _compat module. v4.6.2 bpo-44784: Avoid errors in test suite when DeprecationWarnings are treated as errors. References: https://github.com/python/importlib_metadata/issues/327 https://bugs.python.org/issue44784 Signed-off-by: Tim Orling ---

[OE-core] [PATCH 1/2] python3-hypothesis: upgrade 6.14.3 -> 6.14.5

6.14.5 - 2021-07-27 This patch fixes hypothesis.strategies._internal.types.is_a_new_type. It was failing on Python 3.10.0b4, where NewType is a function. 6.14.4 - 2021-07-26 This patch fixes from_type() and register_type_strategy() for typing.NewType on Python 3.10, which changed the underlying

Re: [OE-core] [dunfell][PATCH v2] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wed, Aug 4, 2021 at 9:42 AM Mike Crowe wrote: > > On Wednesday 04 August 2021 at 08:05:27 -1000, Steve Sakoman wrote: > > On Wed, Aug 4, 2021 at 7:27 AM Steve Sakoman via > > lists.openembedded.org > > wrote: > > > > > > On Wed, Aug 4, 2021 at 7:06 AM Mike Crowe via lists.openembedded.org > >

Re: [OE-core] [dunfell][PATCH v2] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wednesday 04 August 2021 at 08:05:27 -1000, Steve Sakoman wrote: > On Wed, Aug 4, 2021 at 7:27 AM Steve Sakoman via > lists.openembedded.org > wrote: > > > > On Wed, Aug 4, 2021 at 7:06 AM Mike Crowe via lists.openembedded.org > > wrote: > > > > > > curl v7.78 contained fixes for five CVEs: >

Re: [OE-core] [PATCH 6/9] shadow: update 4.8.1 -> 4.9

On 8/4/21 1:13 PM, Khem Raj wrote: > > > On 8/4/21 3:12 AM, Alexander Kanavin wrote: >> Yes, plaintext passwords can no longer be there, which is a good thing >> I'd say? The hashed/salted passwords can still be provided through the >> same class, but this needs to be documented, and perhaps

Re: [OE-core] [PATCH] libwpe: remove rpi-specific custom code

On Wed, Aug 04, 2021 at 10:54:32AM -0700, Khem Raj wrote: > > > On 8/3/21 6:34 PM, Denys Dmytriyenko wrote: > >This recipe was ported from another layer, which had special handling for > >rpi. > > > >OE-Core doesn't have 'rpi' override, doesn't define 'vc4graphics' > >DISTRO_FEATURES > >and

Re: [OE-core] [PATCH 6/9] shadow: update 4.8.1 -> 4.9

On 8/4/21 3:12 AM, Alexander Kanavin wrote: Yes, plaintext passwords can no longer be there, which is a good thing I'd say? The hashed/salted passwords can still be provided through the same class, but this needs to be documented, and perhaps tested too. Its perhaps fine to discourage

Re: [OE-core] [dunfell][PATCH v2] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wed, Aug 4, 2021 at 7:27 AM Steve Sakoman via lists.openembedded.org wrote: > > On Wed, Aug 4, 2021 at 7:06 AM Mike Crowe via lists.openembedded.org > wrote: > > > > curl v7.78 contained fixes for five CVEs: > > > > CVE-2021-22922[1] and CVE-2021-22923[2] are only present when support > > for

[OE-core] [PATCH] devtool.py: Correct override syntax

Signed-off-by: Khem Raj --- meta/lib/oeqa/selftest/cases/devtool.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py b/meta/lib/oeqa/selftest/cases/devtool.py index c6dbf50e68..6d9cd46bf3 100644 ---

[OE-core] [PATCH 2/3] toaster-managed-mode.json: Correctly specify term with new override syntax

Signed-off-by: Khem Raj --- meta/lib/oeqa/manual/toaster-managed-mode.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/lib/oeqa/manual/toaster-managed-mode.json b/meta/lib/oeqa/manual/toaster-managed-mode.json index d8bbbece4a..1a71985c3c 100644 ---

[OE-core] [PATCH 1/3] libssh2: Fix syntax for using ptest override

Signed-off-by: Khem Raj --- meta/recipes-support/libssh2/libssh2_1.9.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/libssh2/libssh2_1.9.0.bb b/meta/recipes-support/libssh2/libssh2_1.9.0.bb index 9ae736d25a..a0cbb6af6b 100644 ---

[OE-core] [PATCH 3/3] distrooverrides.bbclass: Correct override syntax

Signed-off-by: Khem Raj --- meta/classes/distrooverrides.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/distrooverrides.bbclass b/meta/classes/distrooverrides.bbclass index c172a348d8..bf3a2b2090 100644 --- a/meta/classes/distrooverrides.bbclass +++

Re: [OE-core] [PATCH] libwpe: remove rpi-specific custom code

On 8/3/21 6:34 PM, Denys Dmytriyenko wrote: This recipe was ported from another layer, which had special handling for rpi. OE-Core doesn't have 'rpi' override, doesn't define 'vc4graphics' DISTRO_FEATURES and overall, BSP-specifics should be handled in downstream layers, not in OE-Core.

Re: [OE-core] [dunfell][PATCH] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wed, Aug 4, 2021 at 7:06 AM Mike Crowe wrote: > > On Wednesday 04 August 2021 at 06:44:51 -1000, Steve Sakoman wrote: > > On Tue, Aug 3, 2021 at 10:11 PM Mike Crowe via lists.openembedded.org > > wrote: > > > > > > curl v7.78 contained fixes for five CVEs: > > > > > > CVE-2021-22922 and

Re: [OE-core] [dunfell][PATCH v2] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wed, Aug 4, 2021 at 7:06 AM Mike Crowe via lists.openembedded.org wrote: > > curl v7.78 contained fixes for five CVEs: > > CVE-2021-22922[1] and CVE-2021-22923[2] are only present when support > for metalink is enabled. EXTRA_OECONF contains "--without-libmetalink" > so these fixes are

Re: [OE-core] [PATCHv2] systemd-boot: use ld.bfd as efi-ld even when gold or lld is used in ${LD}

On Wed, 2021-08-04 at 19:20 +0200, Martin Jansa wrote: > I've tried to reproduce this with: > > BB_VERSION           = "1.51.1" > BUILD_SYS            = "x86_64-linux" > NATIVELSBSTRING      = "universal" > TARGET_SYS           = "x86_64-poky-linux" > MACHINE              = "genericx86-64" >

Re: [OE-core] [PATCHv2] systemd-boot: use ld.bfd as efi-ld even when gold or lld is used in ${LD}

I've tried to reproduce this with: BB_VERSION = "1.51.1" BUILD_SYS= "x86_64-linux" NATIVELSBSTRING = "universal" TARGET_SYS = "x86_64-poky-linux" MACHINE = "genericx86-64" DISTRO = "poky-altcfg" DISTRO_VERSION =

Re: [OE-core] [PATCH 2/2] convert-overrides.py: handle few more cases of overrides

On Wed, Aug 04, 2021 at 06:04:27PM +0100, Richard Purdie wrote: > On Wed, 2021-08-04 at 12:07 -0400, Denys Dmytriyenko wrote: > > On Wed, Aug 04, 2021 at 04:29:45PM +0200, Martin Jansa wrote: > > > Yes, I see the same in meta-oe and meta-webosose. > > > > > > It's easy to spot false translations

Re: [OE-core] [dunfell][PATCH] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Wednesday 04 August 2021 at 06:44:51 -1000, Steve Sakoman wrote: > On Tue, Aug 3, 2021 at 10:11 PM Mike Crowe via lists.openembedded.org > wrote: > > > > curl v7.78 contained fixes for five CVEs: > > > > CVE-2021-22922 and CVE-2021-22923 are only present when support for > > metalink is

[OE-core] [dunfell][PATCH v2] curl: Fix CVE-2021-22924 and CVE-2021-22925

curl v7.78 contained fixes for five CVEs: CVE-2021-22922[1] and CVE-2021-22923[2] are only present when support for metalink is enabled. EXTRA_OECONF contains "--without-libmetalink" so these fixes are unnecessary. CVE-2021-22926[3] only affects builds for MacOS. CVE-2021-22924[4] and

Re: [OE-core] [PATCH 2/2] convert-overrides.py: handle few more cases of overrides

On Wed, 2021-08-04 at 12:07 -0400, Denys Dmytriyenko wrote: > On Wed, Aug 04, 2021 at 04:29:45PM +0200, Martin Jansa wrote: > > Yes, I see the same in meta-oe and meta-webosose. > > > > It's easy to spot false translations in incremental conversion where the > > diff is relatively small, but

[OE-core] [PATCH 2/2] strace: Upgrade 5.12 -> 5.13

This includes changes to work with glibc 2.34. Signed-off-by: Richard Purdie --- .../strace/strace/Makefile-ptest.patch | 10 +- .../strace/{strace_5.12.bb => strace_5.13.bb} | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) rename

[OE-core] [PATCH 1/2] diffoscope: Upgrade 178 -> 179

Signed-off-by: Richard Purdie --- .../diffoscope/{diffoscope_178.bb => diffoscope_179.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/diffoscope/{diffoscope_178.bb => diffoscope_179.bb} (92%) diff --git

[oe-core][hardknott][PATCH 1/1] util-linux: fix CVE 2021-37600

Backport patch, which should be in next release (2.37.2). Signed-off-by: Joe Slater --- meta/recipes-core/util-linux/util-linux.inc| 1 + .../util-linux/util-linux/CVE-2021-37600.patch | 38 ++ 2 files changed, 39 insertions(+) create mode 100644

Re: [OE-core] [dunfell][PATCH] curl: Fix CVE-2021-22924 and CVE-2021-22925

On Tue, Aug 3, 2021 at 10:11 PM Mike Crowe via lists.openembedded.org wrote: > > curl v7.78 contained fixes for five CVEs: > > CVE-2021-22922 and CVE-2021-22923 are only present when support for > metalink is enabled. EXTRA_OECONF contains "--without-libmetalink" so > these fixes are unnecessary.

Re: [OE-core] [meta][dunfell][PATCH] systemd: Add fix for CVE-2020-13529 and CVE-2021-33910

On Wed, Aug 4, 2021 at 5:40 AM Ranjitsinh Rathod wrote: > > Added fix for below CVEs > 1. CVE-2020-13529 > 2. CVE-2021-33910 > Link: > http://archive.ubuntu.com/ubuntu/pool/main/s/systemd/systemd_237-3ubuntu10.50.debian.tar.xz > > Upstream-Status: Pending This needs to be in the patch files,

Re: [oe] [OE-core] [PATCH] systemd-boot: use ld.bfd as efi-ld when gold is being used by default with ld-is-gold

On 8/4/21 8:54 AM, Randy Li wrote: I found I sent this email to wrong list, let me CC to it. On Aug 4, 2021, at 3:28 AM, Martin Jansa > wrote: Probably as lld isn't supported as well:

Re: [OE-core] [PATCH 2/2] convert-overrides.py: handle few more cases of overrides

On Wed, Aug 04, 2021 at 04:29:45PM +0200, Martin Jansa wrote: > Yes, I see the same in meta-oe and meta-webosose. > > It's easy to spot false translations in incremental conversion where the > diff is relatively small, but doing initial conversion on big layer with > this change already included

Re: [OE-core] [PATCH] systemd-boot: use ld.bfd as efi-ld when gold is being used by default with ld-is-gold

I found I sent this email to wrong list, let me CC to it. > On Aug 4, 2021, at 3:28 AM, Martin Jansa wrote: > > Probably as lld isn't supported as well: > https://github.com/systemd/systemd/commit/e39288193fcdf3a36dbc49b78e6c9bf86a764e31 > You can’t use systemd in Android of course, I decide

[OE-core] [meta][dunfell][PATCH] systemd: Add fix for CVE-2020-13529 and CVE-2021-33910

Added fix for below CVEs 1. CVE-2020-13529 2. CVE-2021-33910 Link: http://archive.ubuntu.com/ubuntu/pool/main/s/systemd/systemd_237-3ubuntu10.50.debian.tar.xz Upstream-Status: Pending Signed-off-by: Ranjitsinh Rathod --- .../systemd/systemd/CVE-2020-13529.patch | 37 +++

Re: [OE-core] [PATCH 0/4] yocto-check-layer: add support to check for dependencies

On Tue, Aug 3, 2021 at 4:14 PM Denys Dmytriyenko wrote: > > On Mon, Aug 02, 2021 at 05:07:41AM -1000, Steve Sakoman wrote: > > On Mon, Aug 2, 2021 at 5:04 AM Richard Purdie > > wrote: > > > > > > On Mon, 2021-08-02 at 04:57 -1000, Steve Sakoman wrote: > > > > On Mon, Aug 2, 2021 at 12:35 AM

Re: [OE-core] [PATCH 2/2] convert-overrides.py: handle few more cases of overrides

Yes, I see the same in meta-oe and meta-webosose. It's easy to spot false translations in incremental conversion where the diff is relatively small, but doing initial conversion on big layer with this change already included might be more painful. On Wed, Aug 4, 2021 at 12:31 PM Richard Purdie <

[OE-core] [PATCH] convert-overrides.py: allow dots before override in vars_re and shortvars_re

e.g. VIRTUAL-RUNTIME_com.webos.service.flowmanager_armv4 weren't replaced with VIRTUAL-RUNTIME_com.webos.service.flowmanager:armv4 or when package name contains a dot like in: RDEPENDS:gstreamer1.0-meta-base:remove Signed-off-by: Martin Jansa --- scripts/contrib/convert-overrides.py | 6 +++---

[OE-core] [PATCH] devupstream: Allow support of native class extensions

It is useful to be able to use the class with recipes using BBCLASSEXTEND for native extensions. This adds the magic required to do that. [YOCTO #11449] Signed-off-by: Richard Purdie --- meta/classes/devupstream.bbclass | 20 +--- 1 file changed, 13 insertions(+), 7

[OE-core] [PATCH] createrepo-c: fix createrepo-c failed in nativesdk

In sdk, call createrepo-c failed with: ... $ createrepo_c --update ./test_repo/rpm Directory walk started Critical: Failed to detect compression for file ./test_repo/rpm/cortexa72/hello-2.10-r0.cortexa72.rpm: magic_load() failed: could not find any valid magic files! ... Since commit [ea666fbc74

[OE-core] [PATCH 2/2] image: Drop COMPRESS_CMD

This was replaced by CONVERSION_CMD a long time ago and is no longer referenced in core. Remove the references to it. Signed-off-by: Richard Purdie --- meta/classes/image.bbclass | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/classes/image.bbclass

[OE-core] [PATCH 1/2] image/image_types: Convert CONVERSION_CMD/COMPRESS_CMD to new override syntax

For consistency, use override syntax for these variables as well since it is more consistent with the rest of the image code. We may be able to use these as proper overrides in due course. Signed-off-by: Richard Purdie --- meta/classes/image.bbclass | 6 ++--

Re: [OE-core] [PATCHv2] systemd-boot: use ld.bfd as efi-ld even when gold or lld is used in ${LD}

On Wed, 2021-08-04 at 12:36 +0200, Martin Jansa wrote: > * since the upgrade to 249.1 in: >    > https://git.openembedded.org/openembedded-core/commit/?id=323ec445dfe22860cd450c303db5ed8fcb4e791c >   the builds with ld-is-gold are failing with: > >   [17/21] Generating linuxx64.elf.stub with a

[OE-core] [PATCH 1/2] meta: Convert IMAGE_TYPEDEP to use override syntax

The IMAGE_TYPEDEP variable would make more sense to match the form of the other image override variables, convert it to use the overrides format. Signed-off-by: Richard Purdie --- meta/classes/image-container.bbclass | 2 +- meta/classes/image-live.bbclass| 6 +++---

[OE-core] [PATCH 2/2] uboot-extlinux-config: Fix missing override conversion

Signed-off-by: Richard Purdie --- meta/classes/uboot-extlinux-config.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/uboot-extlinux-config.bbclass b/meta/classes/uboot-extlinux-config.bbclass index be285daa016..dcebe7ff313 100644 ---

[OE-core] [PATCHv2] systemd-boot: use ld.bfd as efi-ld even when gold or lld is used in ${LD}

* since the upgrade to 249.1 in: https://git.openembedded.org/openembedded-core/commit/?id=323ec445dfe22860cd450c303db5ed8fcb4e791c the builds with ld-is-gold are failing with: [17/21] Generating linuxx64.elf.stub with a custom command FAILED: src/boot/efi/linuxx64.elf.stub

Re: [OE-core] [PATCH 2/2] convert-overrides.py: handle few more cases of overrides

On Tue, 2021-08-03 at 21:28 -0400, Denys Dmytriyenko wrote: > Add task-configure and few more supported values of TARGET_OS override. > > Signed-off-by: Denys Dmytriyenko > --- >  scripts/contrib/convert-overrides.py | 5 +++-- >  1 file changed, 3 insertions(+), 2 deletions(-) > > diff --git

Re: [OE-core] [PATCH 6/9] shadow: update 4.8.1 -> 4.9

Yes, plaintext passwords can no longer be there, which is a good thing I'd say? The hashed/salted passwords can still be provided through the same class, but this needs to be documented, and perhaps tested too. Alex On Wed, 4 Aug 2021 at 10:39, Yi Zhao wrote: > > On 7/30/21 7:45 PM, Alexander

Re: [OE-core][PATCH] runqemu: decouple bios and kernel options

On 8/4/21 10:53 AM, Matthias Klein wrote: > This will allow the use of a bios (e.g. U-Boot) in combination with > a WIC file (from which U-Boot loads the kernel). > > Signed-off-by: Matthias Klein > --- > scripts/runqemu | 6 -- > 1 file changed, 4 insertions(+), 2 deletions(-) > > diff

[OE-core] meta-android-ndk: initial version that could build some simple utility

Hello All: It now could compile the libpng and its unit test, I could run it on an Android 11 board. But there are still many problems waiting for solving. The building above would fail the OE package QA test. There is not a library linker file in Android, all the library files won't have a

Re: [OE-core][PATCH] runqemu: Fix typo in error message

Hi Matthias, On 8/4/21 10:53 AM, Matthias Klein wrote: > Signed-off-by: Matthias Klein > --- > scripts/runqemu | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/scripts/runqemu b/scripts/runqemu > index 2914f15d06..9c92eec030 100755 > --- a/scripts/runqemu > +++

Re: [OE-core] [PATCH] iputils: backport a fix for building on hosts without ip installed

Thanks, I haven't seen your fix before sending mine. Thanks RP: please ignore my version. On Wed, Aug 4, 2021 at 10:25 AM ChenQi wrote: > Hi Martin, > > I met the same problem and sent out a similar patch. > More accurately, the problem is about 'testsdk' and 'testimage' not being > inherited

Re: [OE-core] [PATCH] qemu: Fix DHCP broken in libslirp

On Wed, 2021-08-04 at 14:24 +0800, qiang.zh...@windriver.com wrote: > From: Zqiang > > Fix issue 48 > Reference to upstream patch: > https://gitlab.freedesktop.org/slirp/libslirp/-/commit/c9f314f6e315a5518432761fea864196a290f799 > > Signed-off-by: Zqiang > --- >  

[OE-core][PATCH] runqemu: decouple bios and kernel options

This will allow the use of a bios (e.g. U-Boot) in combination with a WIC file (from which U-Boot loads the kernel). Signed-off-by: Matthias Klein --- scripts/runqemu | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scripts/runqemu b/scripts/runqemu index

[OE-core][PATCH] runqemu: Fix typo in error message

Signed-off-by: Matthias Klein --- scripts/runqemu | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/runqemu b/scripts/runqemu index 2914f15d06..9c92eec030 100755 --- a/scripts/runqemu +++ b/scripts/runqemu @@ -776,7 +776,7 @@ class BaseConfig(object):

Re: [OE-core] [PATCH 6/9] shadow: update 4.8.1 -> 4.9

On 7/30/21 7:45 PM, Alexander Kanavin wrote: Add a couple backports to fix builds. Drop 0002-Allow-for-setting-password-in-clear-text.patch; what it adds is horribly insecure and AB testing didn't reveal any regressions or use cases for it. Dropping this patch makes the password setting

Re: [OE-core] [PATCH] iputils: backport a fix for building on hosts without ip installed

Hi Martin, I met the same problem and sent out a similar patch. More accurately, the problem is about 'testsdk' and 'testimage' not being inherited in configuration. meta/conf/bitbake.conf:HOSTTOOLS += "${@'ip ping ps scp ssh stty' if (bb.utils.contains_any('IMAGE_CLASSES', 'testimage

[OE-core] [PATCH] aspell: fix CVE-2019-25051

From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- meta/recipes-support/aspell/aspell_0.60.8.bb | 4 +- .../aspell/files/CVE-2019-25051.patch | 101 ++ 2 files changed, 104 insertions(+), 1 deletion(-) create mode 100644

[OE-core] [dunfell][PATCH] curl: Fix CVE-2021-22924 and CVE-2021-22925

curl v7.78 contained fixes for five CVEs: CVE-2021-22922 and CVE-2021-22923 are only present when support for metalink is enabled. EXTRA_OECONF contains "--without-libmetalink" so these fixes are unnecessary. CVE-2021-22926 only affects builds for MacOS. CVE-2021-22924 and CVE-2021-22925 are

[OE-core][PATCH] insane.bbclass: fix the file-rdeps QA message for the new override syntax

Instead of replacing '_', we should be replacing ':'. Otherwise, when we meet a 'file-rdeps' QA error, the error message would be like below. QA Issue: /usr/lib64/libatopology.so.2.0.0:libatopology contained in package libatopology ... The ':libatopology' should not be in the error message.

[OE-core] [PATCH] iputils: backport a fix for building on hosts without ip installed

* otherwise fails with: ../git/ping/meson.build:38:0: ERROR: Program or command 'ip' not found or not executable on hosts without ip command Signed-off-by: Martin Jansa --- .../0001-meson-Make-tests-optional.patch | 217 ++ .../iputils/iputils_20210722.bb