[OE-core] [PATCH] mesa: update llvm-config RPATH

2022-11-10 Thread Vincent Davis Jr
RPATH on the llvm-config binary is set wrong which leads to. llvm-config: error while loading shared libraries: libtinfo.so.5: cannot open shared object file: No such file or directory AND File "/../../../mesa//recipe-sysroot-native/usr/lib/python3.11/re/__init__.py", line 223, in finditer

[OE-core][dunfell][PATCH v2] qemu: fix CVE-2021-3638 ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write

2022-11-10 Thread vkumbhar
From: Vivek Kumbhar Upstream-Status: Backport from https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html Signed-off-by: Vivek Kumbhar --- meta/recipes-devtools/qemu/qemu.inc | 1 + .../qemu/qemu/CVE-2021-3638.patch | 80 +++ 2 files

Re: [OE-core][PATCH] pango: fix install-vs-shipped QA error

2022-11-10 Thread Alexander Kanavin
This should not be necessary with my latest patch. Alex On Fri 11. Nov 2022 at 4.12, Chen Qi wrote: > In do_install, files are installed in ${libexecdir}, but this > directory is not listed in FILES:${PN}. This will cause package QA > error. > > Signed-off-by: Chen Qi > --- >

[OE-core][dunfell][PATCH v2] curl: fix CVE-2022-32221 POST following PUT

2022-11-10 Thread vkumbhar
From: Vivek Kumbhar Upstream-Status: Backport from https://github.com/curl/curl/commit/a64e3e59938abd7d6 Signed-off-by: Vivek Kumbhar --- .../curl/curl/CVE-2022-32221.patch| 29 +++ meta/recipes-support/curl/curl_7.69.1.bb | 1 + 2 files changed, 30

[OE-core][PATCH] pango: fix install-vs-shipped QA error

2022-11-10 Thread Chen Qi
In do_install, files are installed in ${libexecdir}, but this directory is not listed in FILES:${PN}. This will cause package QA error. Signed-off-by: Chen Qi --- meta/recipes-graphics/pango/pango_1.50.11.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

Re: [OE-core] [PATCH] pixman: backport fix for CVE-2022-44638

2022-11-10 Thread Ross Burton
For master an upgrade has been merged, we don’t need to patch it. Ross > On 10 Nov 2022, at 14:47, Alexandre Belloni via lists.openembedded.org > wrote: > > Hello, > > On 08/11/2022 21:51:48+0530, adhityax.siddartha.rav...@intel.com wrote: >> From: Adhitya Siddartha >> >> Reference to

Re: [OE-core] [PATCH 3/3] vulkan-validation: Add the official Vulkan validation layers

2022-11-10 Thread Alexander Kanavin
On Thu, 10 Nov 2022 at 21:42, Jordan Crouse via lists.openembedded.org wrote: > +DEPENDS += "vulkan-headers" > +DEPENDS += "spirv-headers spirv-tools" > +DEPENDS += "vulkan-loader" > +DEPENDS += "glslang" This should be squashed into a single line. > + > +EXTRA_OECMAKE = "\ > +

Re: [OE-core] [PATCH 1/3] spirv-tools: Correctly set the prefix in exported cmake packages

2022-11-10 Thread Khem Raj
On Thu, Nov 10, 2022 at 12:42 PM Jordan Crouse via lists.openembedded.org wrote: > > spirv-tools exports Cmake packages. When they are installed the > INTERFACE_LINK_LIBRARIES variable is not correctly updated to use > _IMPORT_PREFIX like the other variables. This may have something to do with >

Re: [OE-core] [RFC] [PATCH] Allow fitimage + initramfs rebuild to be accelerated

2022-11-10 Thread Paul Eggleton
Hi Richard On Thursday, 10 November 2022 11:14:24 NZDT Richard Purdie wrote: > We have tried really hard to avoid putting all of the kernel build > output into sstate. The main reason for that was that recompiling the > kernel from source took around the same amount of time as compressing > it

Re: [OE-core] [RFC] [PATCH] Allow fitimage + initramfs rebuild to be accelerated

2022-11-10 Thread Paul Eggleton
On Thursday, 10 November 2022 08:53:02 NZDT Martin Jansa wrote: > https://bugzilla.yoctoproject.org/show_bug.cgi?id=12937 might be > alternative solution which we at LGE were using for different usecase than > fit image, but in theory should work as well. > > Basically the initramfs do_deploy

[OE-core] [PATCH 18/19] meson: update 0.63.3 -> 0.64.0

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../0001-is_debianlike-always-return-False.patch | 15 --- .../meson/{meson_0.63.3.bb => meson_0.64.0.bb}| 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) rename meta/recipes-devtools/meson/{meson_0.63.3.bb => meson_0.64.0.bb} (98%)

[OE-core] [PATCH 19/19] systemd: update 251.4 -> 251.8

2022-11-10 Thread Alexander Kanavin
This resolves systemd-boot fails with latest meson, while systemd -> 252 is being prepared. Signed-off-by: Alexander Kanavin --- .../systemd/{systemd-boot_251.4.bb => systemd-boot_251.8.bb}| 0 meta/recipes-core/systemd/systemd.inc | 2 +-

[OE-core] [PATCH 16/19] libepoxy: update 1.5.9 -> 1.5.10

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../libepoxy/{libepoxy_1.5.9.bb => libepoxy_1.5.10.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/libepoxy/{libepoxy_1.5.9.bb => libepoxy_1.5.10.bb} (95%) diff --git

[OE-core] [PATCH 17/19] rgb: update 1.0.6 -> 1.1.0

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- meta/recipes-graphics/xorg-app/{rgb_1.0.6.bb => rgb_1.1.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-app/{rgb_1.0.6.bb => rgb_1.1.0.bb} (76%) diff --git a/meta/recipes-graphics/xorg-app/rgb_1.0.6.bb

[OE-core] [PATCH 13/19] gnomebase.bbclass: return the whole version for tarball directory if it is a number

2022-11-10 Thread Alexander Kanavin
E.g. if version is '43' without any dots, existing code would return ''. Signed-off-by: Alexander Kanavin --- meta/classes-recipe/gnomebase.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes-recipe/gnomebase.bbclass b/meta/classes-recipe/gnomebase.bbclass

[OE-core] [PATCH 14/19] adwaita-icon-theme: update 42.0 -> 43

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../0001-Don-t-use-AC_CANONICAL_HOST.patch | 6 +++--- ...{adwaita-icon-theme_42.0.bb => adwaita-icon-theme_43.bb} | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) rename meta/recipes-gnome/gnome/{adwaita-icon-theme_42.0.bb =>

[OE-core] [PATCH 15/19] libepoxy: convert to git

2022-11-10 Thread Alexander Kanavin
Latest version doesn't come with stable tarballs. Signed-off-by: Alexander Kanavin --- meta/recipes-graphics/libepoxy/libepoxy_1.5.9.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-graphics/libepoxy/libepoxy_1.5.9.bb

[OE-core] [PATCH 10/19] libxext: update 1.3.4 -> 1.3.5

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- meta/recipes-graphics/xorg-lib/a | 33 +++ .../{libxext_1.3.4.bb => libxext_1.3.5.bb}| 7 ++-- 2 files changed, 36 insertions(+), 4 deletions(-) create mode 100644 meta/recipes-graphics/xorg-lib/a rename

[OE-core] [PATCH 11/19] xcb-util: update to latest revisions

2022-11-10 Thread Alexander Kanavin
Also, default to tar.xz, as the majority of tarballs are now using that. Signed-off-by: Alexander Kanavin --- .../{xcb-util-image_0.4.0.bb => xcb-util-image_0.4.1.bb} | 3 +-- .../{xcb-util-keysyms_0.4.0.bb => xcb-util-keysyms_0.4.1.bb} | 3 +-- ...-util-renderutil_0.3.9.bb =>

[OE-core] [PATCH 12/19] xf86-input-vmmouse: update 13.1.0 -> 13.2.0

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...-input-vmmouse_13.1.0.bb => xf86-input-vmmouse_13.2.0.bb} | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-driver/{xf86-input-vmmouse_13.1.0.bb => xf86-input-vmmouse_13.2.0.bb} (84%) diff --git

[OE-core] [PATCH 08/19] libxtst: update 1.2.3 -> 1.2.4

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxtst_1.2.3.bb => libxtst_1.2.4.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxtst_1.2.3.bb => libxtst_1.2.4.bb} (79%) diff --git

[OE-core] [PATCH 07/19] libxshmfence: update 1.3 -> 1.3.1

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxshmfence_1.3.bb => libxshmfence_1.3.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxshmfence_1.3.bb => libxshmfence_1.3.1.bb} (80%) diff --git

[OE-core] [PATCH 06/19] libxrender: update 0.9.10 -> 0.9.11

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxrender_0.9.10.bb => libxrender_0.9.11.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxrender_0.9.10.bb => libxrender_0.9.11.bb} (81%) diff --git

[OE-core] [PATCH 09/19] libxxf86vm: update 1.1.4 -> 1.1.5

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxxf86vm_1.1.4.bb => libxxf86vm_1.1.5.bb}| 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxxf86vm_1.1.4.bb => libxxf86vm_1.1.5.bb} (78%) diff --git

[OE-core] [PATCH 01/19] pango: replace a recipe fix with an upstream submitted patch

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- ...d-install-nofonts-fonts.conf-as-it-i.patch | 35 +++ meta/recipes-graphics/pango/pango_1.50.11.bb | 13 ++- 2 files changed, 38 insertions(+), 10 deletions(-) create mode 100644

[OE-core] [PATCH 04/19] libxkbfile: update 1.1.0 -> 1.1.1

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxkbfile_1.1.0.bb => libxkbfile_1.1.1.bb}| 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxkbfile_1.1.0.bb => libxkbfile_1.1.1.bb} (73%) diff --git

[OE-core] [PATCH 05/19] libxmu: update 1.1.3 -> 1.1.4

2022-11-10 Thread Alexander Kanavin
Drop ipv6 option as no longer supported. License-Update: additional files, path corrections Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxmu_1.1.3.bb => libxmu_1.1.4.bb}| 9 +++-- 1 file changed, 3 insertions(+), 6 deletions(-) rename

[OE-core] [PATCH 02/19] libpciaccess: update 0.16 -> 0.17

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../{libpciaccess_0.16.bb => libpciaccess_0.17.bb} | 7 ++- 1 file changed, 2 insertions(+), 5 deletions(-) rename meta/recipes-graphics/xorg-lib/{libpciaccess_0.16.bb => libpciaccess_0.17.bb} (69%) diff --git

[OE-core] [PATCH 03/19] libxinerama: update 1.1.4 -> 1.1.5

2022-11-10 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- .../xorg-lib/{libxinerama_1.1.4.bb => libxinerama_1.1.5.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-graphics/xorg-lib/{libxinerama_1.1.4.bb => libxinerama_1.1.5.bb} (80%) diff --git

Re: [OE-core][PATCH] systemd: add group render to udev package

2022-11-10 Thread Peter Marko
Hello, How do I define static group ids for this particular build and other autobuilder builds? Is that just meta-selftest/files/static-group or also some other files? Is there also something I need to write additionally as this seems to be a breaking change.. Thanks for support, Peter

Re: [OE-core][dunfell][PATCH] curl: fix CVE-2022-32221 POST following PUT confusion

2022-11-10 Thread Steve Sakoman
This patch doesn't apply. It appears you are not at the current dunfell HEAD. steve@hexa ~/Repos/openembedded-core (stable/dunfell-nut) $ git am -3 ~/Downloads/dunfell-curl-fix-CVE-2022-32221-POST-following-PUT-confusion.patch Applying: curl: fix CVE-2022-32221 POST following PUT confusion Using

Re: [OE-core][PATCH] systemd: add group render to udev package

2022-11-10 Thread Alexandre Belloni via lists.openembedded.org
Hello, This causes the following failure: https://autobuilder.yoctoproject.org/typhoon/#/builders/117/builds/1839/steps/12/logs/stdio ERROR: Nothing PROVIDES 'udev' (but /home/pokybuild/yocto-worker/reproducible/build/meta/recipes-bsp/usbutils/usbutils_014.bb,

Re: [OE-core][dunfell][PATCH] tzdata: update to 2022f

2022-11-10 Thread Steve Sakoman
This patch will need to be submitted for master branch first, and I will then cherry-pick it to the other branches. Steve On Wed, Nov 9, 2022 at 3:25 AM wrote: > > From: Priyal Doshi > > Signed-off-by: Priyal Doshi > --- > meta/recipes-extended/timezone/timezone.inc | 6 +++--- > 1 file

Re: [OE-core] [kirkstone][PATCH] golang: CVE-2022-2880 ReverseProxy should not forward unparseable query parameters

2022-11-10 Thread Steve Sakoman
Unfortunately this patch fails to apply: Applying: golang: CVE-2022-2880 ReverseProxy should not forward unparseable query parameters error: sha1 information is lacking or useless (meta/recipes-devtools/go/go-1.17.13.inc). error: could not build fake ancestor Patch failed at 0001 golang:

Re: [OE-core] [PATCH 6/6] u-boot: Rework signing to remove interdependencies

2022-11-10 Thread Sean Anderson via lists.openembedded.org
On 11/9/22 18:07, Alexandre Belloni wrote: > Hi, > > On 01/11/2022 13:54:18-0400, Sean Anderson wrote: >> > That would result in a lot of messages on the mailing list and ends up >> > being a lot of work for the maintainers as well. >> >> If you use a tool like b4 [1] it can automatically

Re: [OE-core] [PATCH] pixman: backport fix for CVE-2022-44638

2022-11-10 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 08/11/2022 21:51:48+0530, adhityax.siddartha.rav...@intel.com wrote: > From: Adhitya Siddartha > > Reference to upstream patch: > https://gitlab.freedesktop.org/pixman/pixman/-/commit/a1f88e842e0216a5b4df1ab023caebe33c101395 > Your mailer mangled the whitespaces and the patch

Re: [OE-core][kirkstone][PATCH 1/1] python3-mako: upgrade 1.1.6 -> 1.2.0

2022-11-10 Thread Narpat Mali
Hi Tim, Have sent the patch to backport the CVE fix on python3-mako 1.1.6 version. Best Regards, Narpat From: Tim Orling Sent: 03 November 2022 04:11 To: Mali, Narpat Cc: Alexander Kanavin; G Pillai,

[OE-core][kirkstone][PATCH 1/1] python3-mako: backport fix for CVE-2022-40023

2022-11-10 Thread Narpat Mali
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-40023 Reference to Upstream Patch:

[OE-core][kirkstone 00/25] Pull request (cover letter only)

2022-11-10 Thread Steve Sakoman
The following changes since commit e1c36bdfb3c31f359e58d1644c238b74410d6091: perf: Depend on native setuptools3 (2022-11-04 07:55:17 -1000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next

[OE-core][dunfell][PATCH] go: Security Fix for CVE-2022-2879

2022-11-10 Thread Sunil Kumar
From: Sunil Kumar archive/tar: limit size of headers Set a 1MiB limit on special file blocks (PAX headers, GNU long names, GNU link names), to avoid reading arbitrarily large amounts of data into memory. Link: https://github.com/golang/go/commit/0a723816cd2 Signed-off-by: Sunil Kumar ---

[OE-core] [PATCH] oe-setup-build: add a tool for discovering config templates and setting up builds

2022-11-10 Thread Alexander Kanavin
This is the last (I believe) piece of the puzzle in setting up builds from nothing without having to write custom scripts or use external tools. After layers have been fetched and placed into their respective locations, one would surely want to proceed to the actual build, and here's how: 1.

Re: [OE-core] [PATCH] pango: Make it build with ptest disabled

2022-11-10 Thread Alexander Kanavin
I checked locally, it does. Alex On Thu, 10 Nov 2022 at 09:43, Alexander Kanavin via lists.openembedded.org wrote: > > This snippet is going to be eliminated altogether, can you check that > this patch addresses the problem? >

Re: [OE-core] [PATCH] pango: Make it build with ptest disabled

2022-11-10 Thread Alexander Kanavin
This snippet is going to be eliminated altogether, can you check that this patch addresses the problem? https://git.yoctoproject.org/poky-contrib/commit/?h=akanavin/package-version-updates=232607c0a781272e2d7f54f1a13980c109fd1d25 (if I force push, the commit is 'pango: replace a recipe fix with an