Re: [OE-core] [PATCH] glibc: Fix CVE-2021-35942

2021-08-15 Thread Vinay Kumar
Hi Richard, Any update on the above patch. Please let me know if anything is pending from my side. Regards, Vinay On Wed, Jul 28, 2021 at 1:22 PM Vinay Kumar wrote: > > Source: https://sourceware.org/git/glibc.git > Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=28011 > > Backporte

Re: [OE-core] [hardknott][PATCH v2] glibc: Fix CVE-2021-35942

2021-08-15 Thread Vinay Kumar
Hi Anuj, Please let me know in case any corrections are needed. Regards, Vinay On Mon, Aug 9, 2021 at 2:10 PM Vinay Kumar wrote: > > Source: https://sourceware.org/git/glibc.git > Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=28011 > > Backported upstream commit 5adda61f62b7738471

[OE-core] [PATCH] image_types_wic.bbclass: alphabetize list of WICVARS

2021-08-15 Thread Robert P. J. Day
It's way easier to scan a list of variables if they're sorted one per line. Signed-off-by: Robert P. J. Day --- diff --git a/meta/classes/image_types_wic.bbclass b/meta/classes/image_types_wic.bbclass index 2f1a0b709c..d561fb2636 100644 --- a/meta/classes/image_types_wic.bbclass +++ b/meta/cl

Re: [OE-core] [PATCH] glibc: Fix CVE-2021-35942

2021-08-15 Thread Alexandre Belloni
Hello, On 15/08/2021 13:19:33+0530, Vinay Kumar wrote: > Hi Richard, > > Any update on the above patch. > Please let me know if anything is pending from my side. > I didn't test because the plan is to switch to glibc2.34 which IIRC has the fix. > Regards, > Vinay > > On Wed, Jul 28, 2021 at 1

Re: [OE-core] [PATCH] glibc: Fix CVE-2021-35942

2021-08-15 Thread Vinay Kumar
Hi Alexandre, Thanks for confirming. Regards, Vinay On Sun, Aug 15, 2021 at 2:49 PM Alexandre Belloni wrote: > > Hello, > > On 15/08/2021 13:19:33+0530, Vinay Kumar wrote: > > Hi Richard, > > > > Any update on the above patch. > > Please let me know if anything is pending from my side. > > > >

Re: [OE-core] [pseudo][PATCH] test: Add missing test-statx test case

2021-08-15 Thread Philip Lorenz
On 11.08.21 19:19, Mike Crowe wrote: On Wednesday 11 August 2021 at 18:41:32 +0200, Philip Lorenz wrote: Adding this test case was erroneously omitted in 7c722296879906fe093e1e7c4b7537e150d492cd. Signed-off-by: Philip Lorenz --- test/test-statx.c | 20 test/test-statx.

[OE-core] OE-core CVE metrics for master on Sun 15 Aug 2021 04:00:01 AM HST

2021-08-15 Thread Steve Sakoman
Branch: master New this week: 3 CVEs CVE-2021-32803: tar https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32803 * CVE-2021-32804: tar https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32804 * CVE-2021-3682: qemu:qemu-native:qemu-system-native https://web.nvd.nist.gov/view/vuln/

[OE-core] OE-core CVE metrics for dunfell on Sun 15 Aug 2021 04:30:01 AM HST

2021-08-15 Thread Steve Sakoman
Branch: dunfell New this week: 10 CVEs CVE-2021-32066: ruby:ruby-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32066 * CVE-2021-32803: tar https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32803 * CVE-2021-32804: tar https://web.nvd.nist.gov/view/vuln/detail?vulnId=CV

[OE-core] OE-core CVE metrics for hardknott on Sun 15 Aug 2021 05:00:01 AM HST

2021-08-15 Thread Steve Sakoman
Branch: hardknott New this week: 5 CVEs CVE-2021-22923: curl:curl-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22923 * CVE-2021-32066: ruby:ruby-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32066 * CVE-2021-32803: tar https://web.nvd.nist.gov/view/vuln/de

[OE-core] [PATCH 0/8] kernel-yocto: -stable updates and 5.4 removal

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Richard, I'll follow up this series with another to poky that updates defaults to 5.10/5.13 kernels. I would have liked to send this a few weeks ago, but with vacation, I wouldn't have been around to deal with issues. 5.13 has been in place for a while now, so I don't expec

[OE-core] [PATCH 1/8] linux-yocto/5.13: update to v5.13.7

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.13 to the latest korg -stable release that comprises the following commits: f17352f54186 Linux 5.13.7 f2cd12e7fd48 ipv6: ip6_finish_output2: set sk into newly allocated nskb 0f448675132a ARM: dts: versatile: Fix up interrupt controller node

[OE-core] [PATCH 2/8] linux-yocto/5.10: update to v5.10.55

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 11fe69a17195 Linux 5.10.55 984e93b8e207 ipv6: ip6_finish_output2: set sk into newly allocated nskb a74054ca7553 ARM: dts: versatile: Fix up interrupt controller nod

[OE-core] [PATCH 3/8] linux-yocto/5.4: update to v5.4.137

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.4 to the latest korg -stable release that comprises the following commits: 5b1de8e15f0f Linux 5.4.137 ebb1b38be0c9 ipv6: ip6_finish_output2: set sk into newly allocated nskb 6c04123962f0 ARM: dts: versatile: Fix up interrupt controller node

[OE-core] [PATCH 4/8] linux-yocto/5.4: update to v5.4.139

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.4 to the latest korg -stable release that comprises the following commits: e350cd02e293 Linux 5.4.139 03ff8a4f9db6 spi: mediatek: Fix fifo transfer a0f66ddf05c2 bpf, selftests: Adjust few selftest outcomes wrt unreachable code d3796e8f

[OE-core] [PATCH 5/8] linux-yocto/5.10: update to v5.10.57

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 1cd6e30b83d7 Linux 5.10.57 9c645a020bab spi: mediatek: Fix fifo transfer 7254e2d9eb41 selftest/bpf: Verifier tests for var-off access 30ea1c535291 bpf, selftest

[OE-core] [PATCH 7/8] linux-yocto/5.4: remove recipes

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield We have 5.10 and 5.13 as the active recipes in the release/development branches, so we remove 5.4. This leaves us with the standard three versions for release (5.10, 5.13 and -dev). 5.4 will continue to be updated in stable/supported releases. Signed-off-by: Bruce Ashfield

[OE-core] [PATCH 6/8] linux-yocto/5.13: update to v5.13.9

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield Updating linux-yocto/5.13 to the latest korg -stable release that comprises the following commits: f259ee2f0379 Linux 5.13.9 4288f43d9e0e spi: mediatek: Fix fifo transfer fad0494f626f drm/amd/display: Fix ASSR regression on embedded panels 02db470b866f Revert

[OE-core] [PATCH 8/8] conf/machine: bump qemu preferred versions to 5.13

2021-08-15 Thread Bruce Ashfield
From: Bruce Ashfield 5.13 is the latest reference kernel, so let's make it the default. Signed-off-by: Bruce Ashfield --- meta/conf/machine/include/x86-base.inc | 2 +- meta/conf/machine/qemuarmv5.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/conf/machi

Re: [OE-core] [hardknott][PATCH v2] glibc: Fix CVE-2021-35942

2021-08-15 Thread Anuj Mittal
Hello, On Sun, 2021-08-15 at 13:23 +0530, Vinay Kumar wrote: > Hi Anuj, > > Please let me know in case any corrections are needed. I have taken this patch and it will be in the next pull request. Thanks, Anuj > > Regards, > Vinay > > On Mon, Aug 9, 2021 at 2:10 PM Vinay Kumar > wrote: > >

Re: [OE-core] [hardknott][PATCH 2/5] qemu: fix CVE-2021-3544, CVE-2021-3545, CVE-2021-3546

2021-08-15 Thread Anuj Mittal
Hello, On Tue, 2021-08-10 at 23:08 -0400, Sakib Sajal wrote: > Signed-off-by: Sakib Sajal > --- >  meta/recipes-devtools/qemu/qemu.inc   |  7 +++ >  .../qemu/qemu/CVE-2021-3544_1.patch   | 43 ++ >  .../qemu/qemu/CVE-2021-3544_2.patch   | 41 + >  ...

[OE-core] [hardknott][PATCH 0/7] Review request

2021-08-15 Thread Anuj Mittal
Please review this next set of patches for hardknott. Two intermittent and unrelated failures seen while testing - a valgrind ptest failure and a bitbake timeout while running a oe-selftest. https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2434 Thanks, Anuj The following change

[OE-core] [hardknott][PATCH 1/7] glibc: Fix CVE-2021-35942

2021-08-15 Thread Anuj Mittal
From: Vinay Kumar Source: https://sourceware.org/git/glibc.git Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=28011 Backported upstream commit 5adda61f62b77384718b4c0d8336ade8f2b4b35c to glibc-2.33 source. Upstream-Status: Backport [https://sourceware.org/git/?p=glibc.git;a=commit

[OE-core] [hardknott][PATCH 2/7] qemu: fix CVE-2021-3582

2021-08-15 Thread Anuj Mittal
From: Sakib Sajal Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3582.patch | 47 +++ 2 files changed, 48 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-20

[OE-core] [hardknott][PATCH 3/7] qemu: fix CVE-2021-3607

2021-08-15 Thread Anuj Mittal
From: Sakib Sajal Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3607.patch | 43 +++ 2 files changed, 44 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-20

[OE-core] [hardknott][PATCH 4/7] qemu: fix CVE-2021-3608

2021-08-15 Thread Anuj Mittal
From: Sakib Sajal Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3608.patch | 43 +++ 2 files changed, 44 insertions(+) create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-20

[OE-core] [hardknott][PATCH 5/7] gnutls: Enable seccomp if FEATURE is set

2021-08-15 Thread Anuj Mittal
From: Armin Kuster Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie (cherry picked from commit f2527b5567252c7da4fbd863e119c8114e6debcd) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal --- meta/recipes-support/gnutls/gnutls_3.7.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 dele

[OE-core] [hardknott][PATCH 6/7] gnutls: Point to staging area for finding seccomp libs and includes

2021-08-15 Thread Anuj Mittal
From: Khem Raj This ensures that if libseccomp is installed on build host then it does not resort to use it. Fixes checking for libseccomp... (cached) yes checking how to link with libseccomp... /usr/lib/libseccomp.so Signed-off-by: Khem Raj Cc: Armin Kuster Signed-off-by: Richard Purdie (ch

[OE-core] [hardknott][PATCH 7/7] gnutls: upgrade 3.7.1 -> 3.7.2

2021-08-15 Thread Anuj Mittal
From: wangmy Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 3593a4c47d5e8faccb27c7cd975f18f90b9cd86f) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal --- .../recipes-support/gnutls/{gnutls_3.7.1.bb => gnutls_3.7.2.bb} | 2 +- 1 file changed, 1 inserti

Re: [OE-core] [PATCH] glibc: Fix CVE-2021-35942

2021-08-15 Thread Khem Raj
On Sun, Aug 15, 2021 at 2:19 AM Alexandre Belloni wrote: > > Hello, > > On 15/08/2021 13:19:33+0530, Vinay Kumar wrote: > > Hi Richard, > > > > Any update on the above patch. > > Please let me know if anything is pending from my side. > > > > I didn't test because the plan is to switch to glibc2.3

[OE-core] [PATCH] scripts/lib/wic/help/py: "Redhat" -> "Red Hat"

2021-08-15 Thread Robert P. J. Day
Company name is properly spelled as "Red Hat". Signed-off-by: Robert P. J. Day --- diff --git a/scripts/lib/wic/help.py b/scripts/lib/wic/help.py index 991e5094bb..41451d1cb0 100644 --- a/scripts/lib/wic/help.py +++ b/scripts/lib/wic/help.py @@ -637,7 +637,7 @@ DESCRIPTION oe-core: direct

[OE-core] [PATCH] prelink: add PACKAGECONFIG for selinux

2021-08-15 Thread Yi Zhao
Add PACKAGECONFIG for selinux rather than disable it directly. This is useful for selinux distro feature. Signed-off-by: Yi Zhao --- meta/recipes-devtools/prelink/prelink_git.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes-devtools/prelink/prelink_git.bb b

[OE-core] Failed to boot kernel 5 after upgrading to Hardknott

2021-08-15 Thread JH
Hi, I upgrade Zeus to Hardknott, the kernel version is 5.10.4 (oe-user@oe-host) (arm-oe-linux-gnueabi-gcc (GCC) 10.2.0, GNU ld (GNU Binutils) 2.36.1.20210209), it was failed to boot the kernel : --- [9.418302] systemd[1]: Failed to mount tmpfs at /sys/fs/cgroup: No such file or d

Re: [OE-core] [yocto] Failed to boot kernel 5 after upgrading to Hardknott

2021-08-15 Thread Khem Raj
On 8/15/21 10:36 PM, Zoran wrote: You are using systemd with the wrong defconfig setup, my best guess. cgroup option in the config must be set to Y while using systemd: CONFIG_CGROUP=Y . Zee ___ On Mon, Aug 16, 2021 at 6:24 AM JH wrote: Hi, I upgrade Zeus to Hardknott, the kernel ver