Re: [OE-core][PATCH v3] python3-calver: Add recipe

2023-05-05 Thread Peter Kjellerstedt
> -Original Message- > From: Trevor Gamblin > Sent: den 5 maj 2023 20:52 > To: Peter Kjellerstedt ; > openembedded-core@lists.openembedded.org > Subject: Re: [OE-core][PATCH v3] python3-calver: Add recipe > > On 2023-05-02 18:40, Peter Kjellerstedt wrote: > >> -Original Message-

[mickledore][oe-core][PATCH 1/1] ghostscript: fix CVE-2023-28879

2023-05-05 Thread Joe Slater via lists.openembedded.org
From: Joe Slater Backport from tag ghostpdl-10.01.1-gse-10174 which is after 10.01.1. Signed-off-by: Joe Slater Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 8a70d6935afa38173dbf012b8e1c3d59228504df) --- .../ghostscript/cve-2023-28879.patch |

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
On Fri, 5 May 2023 at 21:21, Michael Opdenacker < michael.opdenac...@bootlin.com> wrote: > Hi Frederic > > On 05.05.23 at 19:17, Frederic Martinsons wrote: > > Hello list > > > > I'm wondering if there are documentations on how contribution are > > managed for the project. > > > > I try to find

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
On Fri, 5 May 2023 at 21:08, Trevor Gamblin wrote: > > On 2023-05-05 14:31, Frédéric Martinsons wrote: > > > > Le ven. 5 mai 2023, 20:21, Trevor Gamblin a > écrit : > >> >> On 2023-05-05 13:37, Alexander Kanavin wrote: >> > There is >> >

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
On Fri, 5 May 2023 at 21:05, Alexander Kanavin wrote: > On Fri, 5 May 2023 at 20:26, Frédéric Martinsons > wrote: > > That's what I did for unit test of rust recipes and I didn't get much > comments beside you and khem 15 days ago. And I still don't know if my > patches are an issue or if

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Michael Opdenacker via lists.openembedded.org
Hi Frederic On 05.05.23 at 19:17, Frederic Martinsons wrote: Hello list I'm wondering if there are documentations on how contribution are managed for the project. I try to find some but didn't manage to. There are easily reachable doc about how to contribute of course (how to make patches,

Re: [OE-core] [RFC] python3-cryptogaphy upgrade to 40.0.2 issues

2023-05-05 Thread Peter Bergin
Hi, a short status update: On 2023-05-05 06:01, Tim Orling wrote: On Thu, May 4, 2023 at 5:00 AM Peter Bergin wrote: On 2023-05-04 11:00, Alexander Kanavin wrote: > On Thu, 4 May 2023 at 10:41, Peter Bergin wrote: > >> At >>

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Trevor Gamblin
On 2023-05-05 14:31, Frédéric Martinsons wrote: Le ven. 5 mai 2023, 20:21, Trevor Gamblin a écrit : On 2023-05-05 13:37, Alexander Kanavin wrote: > There is > http://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded > and some additional pages linked

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Alexander Kanavin
On Fri, 5 May 2023 at 20:26, Frédéric Martinsons wrote: > That's what I did for unit test of rust recipes and I didn't get much > comments beside you and khem 15 days ago. And I still don't know if my > patches are an issue or if nobody had the time to look at them, it's pretty > frustrating.

Re: [OE-core][PATCH v3] python3-calver: Add recipe

2023-05-05 Thread Trevor Gamblin
On 2023-05-02 18:40, Peter Kjellerstedt wrote: -Original Message- From: openembedded-core@lists.openembedded.org On Behalf Of Trevor Gamblin Sent: den 2 maj 2023 19:45 To: openembedded-core@lists.openembedded.org Subject: [OE-core][PATCH v3] python3-calver: Add recipe calver is "a

[OE-core][PATCH v5] python3-calver: Add recipe

2023-05-05 Thread Trevor Gamblin
calver is "a setuptools extension for automatically defining your Python package version as a calendar version." It is required for python3-trove-classifiers (another new recipe), which in turn is required for the upgrade of python3-hatchling from 1.13.0 to work. Signed-off-by: Trevor Gamblin

[OE-core][PATCH v3] python3-trove-classifiers: Add recipe

2023-05-05 Thread Trevor Gamblin
python3-trove-classifiers is "Canonical source for classifiers on PyPI.". It is required to update python3-hatchling from the current version (1.13.0) in oe-core, and depends on python3-calver (another new recipe). Also add ptests. Signed-off-by: Trevor Gamblin --- v3 adds these revision notices

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
Le ven. 5 mai 2023, 20:21, Trevor Gamblin a écrit : > > On 2023-05-05 13:37, Alexander Kanavin wrote: > > There is > > http://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded > > and some additional pages linked from it: > >

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
Le ven. 5 mai 2023, 19:37, Alexander Kanavin a écrit : > There is > http://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded I do know this one. > > and some additional pages linked from it: > http://www.openembedded.org/wiki/Commit_Patch_Message_Guidelines >

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Trevor Gamblin
On 2023-05-05 13:37, Alexander Kanavin wrote: There is http://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded and some additional pages linked from it: http://www.openembedded.org/wiki/Commit_Patch_Message_Guidelines http://www.openembedded.org/wiki/Styleguide The wiki is not

[OE-core] [PATCH] python3-attrs: upgrade 22.2.0 -> 23.1.0

2023-05-05 Thread Tim Orling
* Change inherit python_setuptools_build_meta to python_hatchling * Add DEPENDS: - python3-hatch-vcs-native - python3-hatch-fancy-pypi-readme-native Changes: https://www.attrs.org/en/stable/changelog.html Signed-off-by: Tim Orling --- .../{python3-attrs_22.2.0.bb =>

Re: [OE-core] Yocto Project Community Manager updates

2023-05-05 Thread Khem Raj
Nico, thanks fo all your contributions to project. We will miss you. On Thu, May 4, 2023 at 7:40 AM Nicolas Dechesne wrote: > > Dear all, > > After five years, I have decided to resign from my position as the Yocto > Project Community Manager. I joined the OpenEmbedded community around 2008. I

Re: [OE-core] Contributing, how it works?

2023-05-05 Thread Alexander Kanavin
There is http://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded and some additional pages linked from it: http://www.openembedded.org/wiki/Commit_Patch_Message_Guidelines http://www.openembedded.org/wiki/Styleguide The wiki is not great, and needs improvements, but the problem is

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-05-05 Thread Bruce Ashfield
On Fri, May 5, 2023 at 6:24 AM Jose Quaresma wrote: > > Hi Bruce, > > Jose Quaresma via lists.openembedded.org > escreveu no dia quarta, > 3/05/2023 à(s) 11:09: >> >> >> >> Bruce Ashfield escreveu no dia terça, 2/05/2023 >> à(s) 22:12: >>> >>> Attached is v2 of the patch. I've consolidated

[OE-core] Contributing, how it works?

2023-05-05 Thread Frederic Martinsons
Hello list I'm wondering if there are documentations on how contribution are managed for the project. I try to find some but didn't manage to. There are easily reachable doc about how to contribute of course (how to make patches, fixe your identity, send mail via git... etc) but I didn't find

Re: [OE-core] [Yocto-Advocacy] Yocto Project Community Manager updates

2023-05-05 Thread Trevor Woerner
Nico: you did a fantastic job as Community Manager, as I knew you would. You always do a great job with everything you take on, and this endeavour was no exception. Your help with the virtual summits is especially appreciated; they wouldn't have happened without your help. Jeffro did a great job

[OE-core][kirkstone][PATCH 1/1] python3-cryptography: fix for CVE-2023-23931

2023-05-05 Thread Narpat Mali via lists.openembedded.org
From: Narpat Mali cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable

Re: [OE-core] [PATCH 1/5] insane.bbclass: add a SUMMARY/HOMEPAGE check (oe-core recipes only)

2023-05-05 Thread Alexander Kanavin
On Fri, 5 May 2023 at 13:43, Ross Burton wrote: > I’m torn over this and the maintainer check. I like that the checks are > being done earlier so they don’t trip up in oe-selftest, but I don’t like > that they’re errors. > > If I want to add a new recipe to core and use devtool, it will

[OE-core][PATCH] kernel-devicetree: allow specification of dtb directory

2023-05-05 Thread Randolph Sapp via lists.openembedded.org
From: Randolph Sapp Fedora/Redhat and Arch are somewhat standardized on their dtb directory structure. Let's add some flags to configure yocto to mimic that behavior. Add the following variables to the kernel class: - KERNEL_DTBDEST (controls the destination directory for dtbs)

[OE-core][mickledore 34/35] kernel: improve initramfs bundle processing time

2023-05-05 Thread Steve Sakoman
From: Bruce Ashfield This is a partial fix for bugzilla 15059 [https://bugzilla.yoctoproject.org/show_bug.cgi?id=15059] It has been noted by several people that when an initramfs is bundled: - a lot of the kernel is rebuilt - it takes a really long time When looking at the logs, the

[OE-core][mickledore 35/35] update-alternatives.bbclass: fix old override syntax

2023-05-05 Thread Steve Sakoman
From: Peter Bergin Function 'gen_updatealternativesvardeps' still used old override syntax when fetching variable flags. Update to use ':' instead to match recipe meta data. This was found by review and no real issue encountered but it is a bug that affects variable dependencies and can affect

[OE-core][mickledore 33/35] oeqa/utils/metadata.py: Fix running oe-selftest running with no distro set

2023-05-05 Thread Steve Sakoman
From: Thomas Roos This will use default values when no distribution is set. [YOCTO #15086] Signed-off-by: Thomas Roos Signed-off-by: Luca Ceresoli (cherry picked from commit 888fe63b46efceeff08dbe8c4f66fec33d06cb7a) Signed-off-by: Steve Sakoman --- meta/lib/oeqa/utils/metadata.py | 6

[OE-core][mickledore 32/35] qemu: Add fix for powerpc instruction fallback issue

2023-05-05 Thread Steve Sakoman
From: Richard Purdie See the patch for more details, fixes a regression in qemu causing illegal instructions in libm on powerpc, triggered by a libinput upgrade. https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=f1c56cdff09f650ad721fae026eb6a3651631f3d was the glibc code generating the

[OE-core][mickledore 31/35] libpam: Fix the xtests/tst-pam_motd[1|3] failures

2023-05-05 Thread Steve Sakoman
From: Zhixiong Chi Reproducer: 1.Enable the ptest of libpam and build the image. 2.Boot the rootfs with nfs, then run the following tests as root: cd /usr/share/Linux-PAM/xtests /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd1 /usr/share/Linux-PAM/xtests# ./run-xtests.sh .

[OE-core][mickledore 30/35] populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override

2023-05-05 Thread Steve Sakoman
From: Martin Jansa * otherwise it ends '' inside esdk, because of parsing order: # $METADATA_REVISION [3 operations] # set /OE/build/test-D/conf/local.conf:43 # "f2da54ef432eac89b0f18eaad68e602b6990b5de" # immediate /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:9

[OE-core][mickledore 29/35] libarchive: Enable acls, xattr for native as well as target

2023-05-05 Thread Steve Sakoman
From: Piotr Łobacz Libarchive is being used by OPKG package manager as default API for extracting tar files. This fix allows us to extract ipks packages with preserved ACLs and xattrs. Partially addresses [YOCTO #15091] [RP: Merge into main PACKAGECONFIG and tweak commit message]

[OE-core][mickledore 28/35] kernel-devsrc: depend on python3-core instead of python3

2023-05-05 Thread Steve Sakoman
From: "bkyleruss...@gmail.com" Avoids pulling in potential GPLv3 packages through python3-misc catch-all. python3-core is the intended minimal RDEPENDS for packages requiring python3 support. Other python3 module dependencies should be listed explicitly. Signed-off-by: Kyle Russell

[OE-core][mickledore 27/35] kernel-fitimage: Fix the default dtb config check

2023-05-05 Thread Steve Sakoman
From: Arslan Ahmad The current check for default dtb image checks if the file exists and is not empty but appends a slash to the path due to which the file is never found. It also doesn't replace slash in filename with _ as done when populating the DTB variable. A better way to check the

[OE-core][mickledore 26/35] libnotify: remove dependency dbus

2023-05-05 Thread Steve Sakoman
From: Kai Kang It ported to use GDBus in libnotify 0.7.0 [1]. So remove dbus from DEPENDS. And GDBus is provided by glib-2.0. [1]: https://gitlab.gnome.org/GNOME/libnotify/-/commit/f63e8ab Signed-off-by: Kai Kang Signed-off-by: Alexandre Belloni (cherry picked from commit

[OE-core][mickledore 25/35] mesa: upgrade 23.0.0 -> 23.0.2

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu 23.0.1 changes New features None Bug fixes radv: A Plague Tale: Requiem black “flash” on 7900XTX 7900 XTX: Graphical corruption / artifacts in Cyberpunk radv: CmdCopyQueryPoolResults broken for VK_QUERY_TYPE_PRIMITIVES_GENERATED_EXT with queryCount > 1 radeonsi draws

[OE-core][mickledore 24/35] linux-firmware: upgrade 20230210 -> 20230404

2023-05-05 Thread Steve Sakoman
From: Dmitry Baryshkov The LICENCE.qat_firmware license file was updated to reflect Intel licensing (it removed a term regarding patent licenses). License-Update: additional files Signed-off-by: Dmitry Baryshkov Signed-off-by: Luca Ceresoli (cherry picked from commit

[OE-core][mickledore 23/35] rust: Upgrade 1.68.1 -> 1.68.2

2023-05-05 Thread Steve Sakoman
From: Alex Kiernan Changes: * Update the GitHub RSA host key bundled within Cargo. The key was rotated by GitHub on 2023-03-24 after the old one leaked. * Mark the old GitHub RSA host key as revoked. This will prevent Cargo from accepting the leaked key even when trusted by the system. *

[OE-core][mickledore 22/35] vala: upgrade 0.56.4 -> 0.56.6

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: === * Regression fix: - vala: Improve initialization of namespace fields with compound literal [#1424] * Bindings: - gio-2.0,glib-2.0,gobject-2.0: Update 2.74 symbols - webkit2gtk-4.*: Update to 2.40.0 - webkitgtk-6.0: Update to 2.40.0 -

[OE-core][mickledore 20/35] xserver-xorg: upgrade 21.1.7 -> 21.1.8

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu This release contains the fix for CVE-2023-1393 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-March/003374.html Benno Schulenberg (1): xkbUtils: use existing symbol names instead of deleted deprecated ones Olivier Fourdan (2):

[OE-core][mickledore 21/35] xwayland: upgrade 22.1.8 -> 23.1.1

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu This release contains the fix for CVE-2023-1393 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-March/003374.html Benno Schulenberg (1): xkbUtils: use existing symbol names instead of deleted deprecated ones Joshua Ashton (1):

[OE-core][mickledore 19/35] Revert "xserver-xorg: backport fix for CVE-2023-1393"

2023-05-05 Thread Steve Sakoman
Fixed with subsequent version bump This reverts commit 7828f7026b4cd3ae97ebe5d849c09fabbc17272d. Signed-off-by: Steve Sakoman --- ...posite-Fix-use-after-free-of-the-COW.patch | 46 --- .../xorg-xserver/xserver-xorg_21.1.7.bb | 3 +- 2 files changed, 1 insertion(+), 48

[OE-core][mickledore 18/35] wpebackend-fdo: upgrade 1.14.0 -> 1.14.2

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: == - Reverted a change introduced in 1.14.1 which introduced crashes both with WebKitGTK and WPE running under Wayland in some configurations. - Fix a crash caused by wrong assertion, which was typically triggered in debug builds when using the NVidia

[OE-core][mickledore 17/35] texinfo: upgrade 7.0.2 -> 7.0.3

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: == * texi2any . fix performance regression when Perl binary extension (XS) modules are not being used (e.g. with TEXINFO_XS=omit) * info . further fix of recoding of UTF-8 files to ASCII to avoid text disappearing from nodes . avoid possible

[OE-core][mickledore 16/35] ruby: upgrade 3.2.1 -> 3.2.2

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Ruby 3.1.2 CVE-2022-28738: Double free in Regexp compilation.. CVE-2022-28739: Buffer overrun in String-to-Float conversion.. Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit b261bc704839b12769118f6f1c4207f3d19fe4fd) Signed-off-by:

[OE-core][mickledore 15/35] pango: upgrade 1.50.13 -> 1.50.14

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: - Fix underline thickness in scaled contexts Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit f34ee7f08bdf94297042969b114da38b71168c5b) Signed-off-by: Steve Sakoman --- .../pango/{pango_1.50.13.bb => pango_1.50.14.bb}

[OE-core][mickledore 14/35] mtools: upgrade 4.0.42 -> 4.0.43

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: == - Fix root directory test in mattrib - -b BiosDisk flag for mformat to allow setting physdrive to a user-specified value - Clearer error message in mformat when trying to mformat a disk whose total size is not known - Make recursive copy more

[OE-core][mickledore 13/35] man-pages: upgrade 6.03 -> 6.04

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu License-Update: tmp/ -> .tmp/ Changelog: - Sections: - Add HISTORY. - HISTORY: Restore C89 references. - Repurpose VERSIONS. - Simplify STANDARDS. - SYNOPSIS: Mark several functions as deprecated. - Build system: - Support installing in

[OE-core][mickledore 12/35] mpg123: upgrade 1.31.2 -> 1.31.3

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: = - build: -- Fix --disable-8bit. -- Fall back to generic decoder if no yasm for MSVC (bug 346). -- Fix some pedantic compiler warnings, avoid breaking libtool wrappers. - mpg123: -- Fix verbose position printout for new resampling outside libmpg123 (where

[OE-core][mickledore 11/35] libsdl2: upgrade 2.26.3 -> 2.26.5

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu 2.26.4 This is a stable bugfix release, with the following changes: Fixed relative mouse motion over remote desktop on Windows Fixed using older game controller mappings on Linux 2.26.5 This is a stable bugfix release, with the following changes: The minimum deployment

[OE-core][mickledore 10/35] libpcap: upgrade 1.10.3 -> 1.10.4

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Summary for 1.10.4 libpcap release Source code: Fix spaces before tabs in indentation. rpcap: Fix name of launchd service. Documentation: Document use of rpcapd with systemd, launchd, inetd, and xinetd. Building and testing: Require at

[OE-core][mickledore 09/35] libhandy: upgrade 1.8.1 -> 1.8.2

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: == - Demo - Correctly use GtkSwitch - Fix a GLib deprecation - Docs - Fix dependency names - HdyTabView - Fix set_menu_model() input check - Fix a typo in docs - HdySwipeable - Fix get_swipe_area() fallback - Memory leak fixes - Translation

[OE-core][mickledore 07/35] bind: upgrade 9.18.12 -> 9.18.13

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: == [bug] Use two pairs of dns_db_t and dns_dbversion_t in a catalog zone structure to avoid a race between the dns__catz_update_cb() and dns_catz_dbupdate_callback() functions. [GL #3907] [bug] Make sure to revert the reconfigured zones to

[OE-core][mickledore 05/35] cargo: Fix build on musl/riscv

2023-05-05 Thread Steve Sakoman
From: Khem Raj libc needs fix for defining scope of SOCK_SEQPACKET Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni (cherry picked from commit 378da16ebe2917f26f9fe8cf654bced09ec6ecfe) Signed-off-by: Steve Sakoman --- ...efine-SOCK_SEQPACKET-in-common-place.patch | 98

[OE-core][mickledore 08/35] cracklib: upgrade 2.9.10 -> 2.9.11

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changes: v2.9.11 Added xz dist Fix incorrect non-static memory return (drfiemost) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit a3932906cba1e693ff51a4fdcc60a7b15debee9f) Signed-off-by: Steve Sakoman ---

[OE-core][mickledore 06/35] apr: upgrade 1.7.2 -> 1.7.3

2023-05-05 Thread Steve Sakoman
From: Wang Mingyu Changelog: === *) apr-1-config: Fix crosscompiling detection in apr-1-config. PR 66510 *) configure: Add --enable-sysv-shm to use SysV shared memory (shmget) if available. *) apr_socket_sendfile: Use WSAIoctl() to get TransmitFile function pointer on

[OE-core][mickledore 04/35] cve-update-nvd2-native: added the missing http import

2023-05-05 Thread Steve Sakoman
From: Jan Vermaete Signed-off-by: Jan Vermaete Signed-off-by: Luca Ceresoli (cherry picked from commit 39d2cde7eb922cb0a2cf9402cd8b3ae3b4cc2f62) Signed-off-by: Steve Sakoman --- meta/recipes-core/meta/cve-update-nvd2-native.bb | 1 + 1 file changed, 1 insertion(+) diff --git

[OE-core][mickledore 03/35] cve-extra-exclusions: linux-yocto: ignore fixed CVE-2023-1652 & CVE-2023-1829

2023-05-05 Thread Steve Sakoman
From: Yoann Congal CVE-2023-1652 & CVE-2023-1829 are fixed by all version used by linux-yocto. Fixing commits are not referenced by NVD but are referenced by: * https://www.linuxkernelcves.com * Debian kernel-sec team ... this should be trust worthy enough. Signed-off-by: Yoann Congal (cherry

[OE-core][mickledore 02/35] tiff: Add fix for CVE-2022-4645

2023-05-05 Thread Steve Sakoman
From: Pawan Badganchi Below patch fixes the CVE-2022-4645 as well. 0001-Revised-handling-of-TIFFTAG_INKNAMES-and-related-TIF.patch Link: https://nvd.nist.gov/vuln/detail/CVE-2022-4645 Signed-off-by: Pawan Badganchi Signed-off-by: Luca Ceresoli (cherry picked from commit

[OE-core][mickledore 00/35] Patch review

2023-05-05 Thread Steve Sakoman
Please review this set of patches for mickledore and have comments back by end of day Tuesday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5265 The following changes since commit c57d1a561db563ed2f521bbac5fc12d4ac8e11a7:

[OE-core][mickledore 01/35] connman: backport fix for CVE-2023-28488

2023-05-05 Thread Steve Sakoman
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Steve Sakoman --- ...ify-and-sanitize-packet-length-first.patch | 63 +++ .../connman/connman_1.41.bb | 1 + 2 files changed, 64 insertions(+) create mode 100644

[OE-core] [PATCH 3/3] python3: use system expat

2023-05-05 Thread Ross Burton
From: Ross Burton Instead of statically linking to an integrated expat which may not be updated to fix security issues, dynamically link to the system expat. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3_3.11.2.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

[OE-core] [PATCH 1/3] python3: use libedit instead of readline

2023-05-05 Thread Ross Burton
From: Ross Burton libedit has feature parity with readline but is more permissively licensed (BSD verses GPLv3), so switch to libedit by default. Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python3_3.11.2.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff

[OE-core] [PATCH 2/3] python3: clean up PACKAGECONFIG

2023-05-05 Thread Ross Burton
From: Ross Burton There's no need to define the PACKAGECONFIG for each class when they're all identical (as native DISTRO_FEATURES are pruned before use). Also add a disabled case to the LTO configuration to be explicit. Signed-off-by: Ross Burton ---

[OE-core] [PATCH] Revert "ipk: Decode byte data to string in manifest handling"

2023-05-05 Thread Andrew Jeffery
cf9df9e8d89f ("ipk: Decode byte data to string in manifest handling") did a bit of least-effort fix to a string vs byte sequence issue in the manifest handling. The approach was chosen as it localised the fix, rather than having to analyse further call sites. However since then f2167ae80258

Re: [OE-core][PATCH] cve-check: add option to add additional patched CVEs

2023-05-05 Thread Richard Purdie
On Fri, 2023-05-05 at 11:36 +, Valek, Andrej wrote: > On Fri, 2023-05-05 at 12:30 +0100, Richard Purdie wrote: > > On Fri, 2023-05-05 at 13:18 +0200, Andrej Valek via > > lists.openembedded.org wrote: > > > CVE_CHECK_PATCHED - should contains an additional CVEs which have > > > been > > >

Re: [OE-core] [PATCH 1/5] insane.bbclass: add a SUMMARY/HOMEPAGE check (oe-core recipes only)

2023-05-05 Thread Ross Burton
On 27 Apr 2023, at 08:35, Alexander Kanavin via lists.openembedded.org wrote: > > This was done in a selftest, but that is too late and creates > friction in integration as errors are not seen until autobuilder fails. > > Bonus fix: SUMMARY check wasn't even working, as in the absence > of one

Re: [OE-core][PATCH] cve-check: add option to add additional patched CVEs

2023-05-05 Thread Andrej Valek via lists.openembedded.org
On Fri, 2023-05-05 at 12:30 +0100, Richard Purdie wrote: > On Fri, 2023-05-05 at 13:18 +0200, Andrej Valek via > lists.openembedded.org wrote: > > CVE_CHECK_PATCHED - should contains an additional CVEs which have > > been > > fixed and shouldn't be mark as vulnerable nor ignored. > > > >

Re: [OE-core][PATCH] cve-check: add option to add additional patched CVEs

2023-05-05 Thread Richard Purdie
On Fri, 2023-05-05 at 13:18 +0200, Andrej Valek via lists.openembedded.org wrote: > CVE_CHECK_PATCHED - should contains an additional CVEs which have been > fixed and shouldn't be mark as vulnerable nor ignored. > > Signed-off-by: Andrej Valek > --- > meta/classes/cve-check.bbclass | 8

[OE-core][PATCH] cve-check: add option to add additional patched CVEs

2023-05-05 Thread Andrej Valek via lists.openembedded.org
CVE_CHECK_PATCHED - should contains an additional CVEs which have been fixed and shouldn't be mark as vulnerable nor ignored. Signed-off-by: Andrej Valek --- meta/classes/cve-check.bbclass | 8 1 file changed, 8 insertions(+) diff --git a/meta/classes/cve-check.bbclass

Re: [OE-core][PATCH] image_types_wic.bbclass: remove MLPREFIX for binutils

2023-05-05 Thread Richard Purdie
On Thu, 2023-05-04 at 21:17 -0700, Chen Qi via lists.openembedded.org wrote: > From: Chen Qi > > With the following two commits, the MLPREFIX needs to be removed > to avoid the 'nothing provides' error. > > gcc/go: Drop crosssdk suffix from virtual provides to improve dependency > handling >

Re: [OE-core][PATCH v4] devicetree.bbclass: Allow selection of dts files to build

2023-05-05 Thread Richard Purdie
On Fri, 2023-05-05 at 10:59 +, Petr Kubizňák - 2N wrote: > Thanks for accepting the patch. > > I can for sure send a doc patch, just want to make sure it is desired > since the glossary does not list any DT_* variable at the moment, and > the devicetree class section in this respect only

Re: [OE-core][PATCH v4] devicetree.bbclass: Allow selection of dts files to build

2023-05-05 Thread Petr Kubizňák
Hi Richard, Thanks for accepting the patch. I can for sure send a doc patch, just want to make sure it is desired since the glossary does not list any DT_* variable at the moment, and the devicetree class section in this respect only refers to the class sources. So I think both DT_FILES and

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

2023-05-05 Thread Richard Purdie
On Fri, 2023-05-05 at 10:32 +, Ross Burton wrote: > On 11 Apr 2023, at 16:05, Louis Rannou via lists.openembedded.org > wrote: > > Create a new runner run_serial_socket which usage matches the traditional > > ssh > > runner. Its return status is 0 when the command succeeded or 0 when it > >

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

2023-05-05 Thread Ross Burton
> On 5 May 2023, at 11:31, Ross Burton wrote: > > On 11 Apr 2023, at 16:05, Louis Rannou via lists.openembedded.org > wrote: >> Create a new runner run_serial_socket which usage matches the traditional ssh >> runner. Its return status is 0 when the command succeeded or 0 when it >> failed.

Re: [OE-core] [PATCH v4 1/2] oeqa/utils/qemurunner: change the serial runner

2023-05-05 Thread Ross Burton
On 11 Apr 2023, at 16:05, Louis Rannou via lists.openembedded.org wrote: > Create a new runner run_serial_socket which usage matches the traditional ssh > runner. Its return status is 0 when the command succeeded or 0 when it > failed. If an error is encountered, it raises an Exception. > > The

Re: [OE-core] [PATCH] make-mod-scripts: preserve libraries when rm_work is used

2023-05-05 Thread Jose Quaresma
Hi Bruce, Jose Quaresma via lists.openembedded.org escreveu no dia quarta, 3/05/2023 à(s) 11:09: > > > Bruce Ashfield escreveu no dia terça, > 2/05/2023 à(s) 22:12: > >> Attached is v2 of the patch. I've consolidated the suggested changes. >> >> I'm soaking it a bit longer, and then will send

Re: [OE-core] Yocto Project Community Manager updates

2023-05-05 Thread Alexander Kanavin
Thank you for the work over the years Nico; it takes a lot of organizational effort for things to simply 'go right', and that effort isn't particularly visible most of the time, which only makes it more valuable from my POV. Alex On Thu, 4 May 2023 at 16:40, Nicolas Dechesne wrote: > > Dear

[OE-core] [kirkstone][PATCH] webkitgtk: fix CVE-2022-32888 & CVE-2022-32923

2023-05-05 Thread Kai Kang
From: Kai Kang Backport patches to fix CVE-2022-32888 and CVE-2022-32923 for webkitgtk 2.36.8. The bugzilla IDs of the CVEs are from https://support.apple.com which have been listed in patch headers. Signed-off-by: Kai Kang --- .../webkit/webkitgtk/CVE-2022-32888.patch | 41 ++