[OE-core] [PATCH] zlib: upgrade 1.2.13 -> 1.3

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: - Remove K function definitions and zlib2ansi - Fix bug in deflateBound() for level 0 and memLevel 9 - Fix bug when gzungetc() is used immediately after gzopen() - Fix bug when using gzflush() with a very small buffer - Fix crash when gzsetparams()

[OE-core] [PATCH] xz: upgrade 5.4.3 -> 5.4.4

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === * liblzma and xzdec can now build against WASI SDK when threading support is disabled. xz and tests don't build yet. * CMake: - Fixed a bug preventing other projects from including liblzma multiple times using find_package(). - Don't

[OE-core] [PATCH] sysklogd: upgrade 2.5.0 -> 2.5.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: - Issue #67: restore support for reading kernel logs from '/proc/kmsg', regression introduced in v2.4.0, issue #48. - Issue #37: improved accuracy of the MARK timer, optional, default: 20 minutes. Generates log messages to files, which have had no activity

[OE-core] [PATCH] sqlite3: upgrade 3.42.0 -> 3.43.0

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: == -Add support for Contentless-Delete FTS5 Indexes. -Enhancements to the date and time functions: -Added the octet_length(X) SQL function. -Added the sqlite3_stmt_explain() API. Signed-off-by: Wang Mingyu --- .../sqlite/{sqlite3_3.42.0.bb =>

[OE-core] [PATCH] shaderc: upgrade 2023.5 -> 2023.6

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: - Update dependencies, including SPIRV-Tools v2023.4.rc2 Signed-off-by: Wang Mingyu --- .../shaderc/{shaderc_2023.5.bb => shaderc_2023.6.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/shaderc/{shaderc_2023.5.bb

[OE-core] [PATCH] repo: upgrade 2.35 -> 2.36.1

2023-08-30 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- meta/recipes-devtools/repo/{repo_2.35.bb => repo_2.36.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/repo/{repo_2.35.bb => repo_2.36.1.bb} (95%) diff --git a/meta/recipes-devtools/repo/repo_2.35.bb

[OE-core] [PATCH] python3-wheel: upgrade 0.41.1 -> 0.41.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: -Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel -Fixed wheel tags to not list directories in RECORD files -Fixed ABI tag generation for GraalPy Signed-off-by: Wang Mingyu ---

[OE-core] [PATCH] python3-sphinx-rtd-theme: upgrade 1.2.2 -> 1.3.0

2023-08-30 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- ...inx-rtd-theme_1.2.2.bb => python3-sphinx-rtd-theme_1.3.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-sphinx-rtd-theme_1.2.2.bb => python3-sphinx-rtd-theme_1.3.0.bb} (88%) diff

[OE-core] [PATCH] python3-setuptools: upgrade 68.1.0 -> 68.1.2

2023-08-30 Thread wangmy
From: Wang Mingyu 0001-conditionally-do-not-fetch-code-by-easy_install.patch refreshed for new version. Changelog: -Fix editable install finder handling of nested packages, by only handling 1 level of nesting and relying on importlib.machinery to find the remaining modules based on the parent

[OE-core] [PATCH] python3-pluggy: upgrade 1.2.0 -> 1.3.0

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === #426: Python 3.7 is no longer supported. #428: Pluggy now exposes its typings to static type checkers. Signed-off-by: Wang Mingyu --- .../python/{python3-pluggy_1.2.0.bb => python3-pluggy_1.3.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [PATCH] python3-hypothesis: upgrade 6.82.5 -> 6.82.7

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: = - updates our autoformatting tools, improving our code style without any API changes. - enables and fixes many more of ruff‘s lint rules. Signed-off-by: Wang Mingyu --- ...ython3-hypothesis_6.82.5.bb => python3-hypothesis_6.82.7.bb} | 2 +- 1 file

[OE-core] [PATCH] pkgconf: upgrade 1.9.5 -> 2.0.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === * Fix long-standing bug where package identifiers for "uninstalled" packages incorrectly included the "-uninstalled" suffix. * The behavior of --modversion was largely reverted back to the traditional pkg-config behavior, but still operates on a

[OE-core] [PATCH] pigz: upgrade 2.7 -> 2.8

2023-08-30 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- meta/recipes-extended/pigz/{pigz_2.7.bb => pigz_2.8.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/pigz/{pigz_2.7.bb => pigz_2.8.bb} (94%) diff --git a/meta/recipes-extended/pigz/pigz_2.7.bb

[OE-core] [PATCH] pango: upgrade 1.50.14 -> 1.51.0

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === - itemize: Improve script itemization - build: Check for cairo DWrite dependency - win32: Fix various issues and crashes - layout: Add a missing switch case Signed-off-by: Wang Mingyu --- .../pango/{pango_1.50.14.bb => pango_1.51.0.bb}

[OE-core] [PATCH] python3: upgrade 3.11.4 -> 3.11.5

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: -gh-104432: Fix potential unaligned memory access on C APIs involving returned sequences of char * pointers within the grp and socket modules. These were revealed using a -fsaniziter=alignment build on ARM macOS. -gh-77377: Ensure that multiprocessing

[OE-core] [PATCH] neard: upgrade 0.18 -> 0.19

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === Fixed missing DBus org.neard.se.conf. Sync Linux kernel UAPI nfc.h header with newer kernel. NFC tag: Implement readout of tag UID via DBus interface. Signed-off-by: Wang Mingyu --- .../recipes-connectivity/neard/{neard_0.18.bb => neard_0.19.bb}

[OE-core] [PATCH] mpfr: upgrade 4.2.0 -> 4.2.1

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === - Bug fixes (see and/or the ChangeLog file). - Improved MPFR manual. - Configure tests: replaced the test of the link with GMP, in order to avoid the use of a function without a prototype (Autoconf issue), as

[OE-core] [PATCH] mc: upgrade 4.8.29 -> 4.8.30

2023-08-30 Thread wangmy
From: Wang Mingyu 0001-mc-replace-perl-w-with-use-warnings.patch removed since it's included in 4.8.30 Changelog: == - Core * Support PCRE2 as search engine (via with-search-engine=pcre2) (#4450) * Implement panelization buffers for both file panels (#4370) - VFS

[OE-core] [PATCH] libxml2: upgrade 2.11.4 -> 2.11.5

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: == ### Regressions --- - parser: Make xmlSwitchEncoding always skip the BOM - autotools: Improve iconv check ### Bug fixes -- - valid: Fix c1->parent pointer in xmlCopyDocElementContent - encoding: Always call ucnv_convertEx with

[OE-core] [PATCH] libsndfile1: upgrade 1.2.0 -> 1.2.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: = * Fixed invalid regex in src/create_symbols_file.py * Fixed passing null pointer to printf %s in tests Signed-off-by: Wang Mingyu --- .../libsndfile/{libsndfile1_1.2.0.bb => libsndfile1_1.2.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[OE-core] [PATCH] libsecret: upgrade 0.20.5 -> 0.21.0

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === * Unlock the keyring before getting secret attributes [!105] * file-backend: avoid deadlock when portal op is canceled [!118, !120] * Properly chain-up GTasks around GDBusProxy::init_async [!106] * Fix nullable in secret_collection_for_alias_* [!110]

[OE-core] [PATCH] librepo: upgrade 1.15.1 -> 1.15.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: = Fixes and optimizations in header files Fix lr_gpg_list_keys function when keys are empty Update PGP test vectors Fix CMake warnings Bump glib version Signed-off-by: Wang Mingyu --- .../librepo/{librepo_1.15.1.bb =>

[OE-core] [PATCH] libgit2: upgrade 1.7.0 -> 1.7.1

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === Bug fixes --- proxy: Return an error for invalid proxy URLs instead of crashing. ssh: fix known_hosts leak in _git_ssh_setup_conn repository: make cleanup safe for re-use with grafts fix: Add missing include for oidarray.

[OE-core] [PATCH] libedit: upgrade 20221030-3.1 -> 20230828-3.1

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: * src/chartype.c: Add missing stdint.h * all: sync with upstream source Signed-off-by: Wang Mingyu --- .../{libedit_20221030-3.1.bb => libedit_20230828-3.1.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core] [PATCH] libdrm: upgrade 2.4.115 -> 2.4.116

2023-08-30 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- .../drm/{libdrm_2.4.115.bb => libdrm_2.4.116.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/drm/{libdrm_2.4.115.bb => libdrm_2.4.116.bb} (97%) diff --git

[OE-core] [PATCH] libconvert-asn1-perl: upgrade 0.33 -> 0.34

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === * Fixes: #47 2nd - Debug output using print instead of printf * Fixes #47 Debug output using print instead of printf * ASN1.pod: fix minor typo Signed-off-by: Wang Mingyu --- ...ibconvert-asn1-perl_0.33.bb => libconvert-asn1-perl_0.34.bb} | 2 +-

[OE-core][PATCH] kbd: upgrade 2.6.1 -> 2.6.2

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: == loadkeys: Don't look for keymap in the current directory. keymaps: Add colemak mod-dh keymaps. Signed-off-by: Wang Mingyu --- meta/recipes-core/kbd/{kbd_2.6.1.bb => kbd_2.6.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename

[OE-core][PATCH] json-c: upgrade 0.16 -> 0.17

2023-08-30 Thread wangmy
From: Wang Mingyu 0001-Fix-build-with-clang-15.patch removed since it's included in 0.17. Changelog: === New features * json_patch: add first implementation only with patch application * Add --disable-static and --disable-dynamic options to the cmake-configure script. *

[OE-core] [PATCH] gtk4: upgrade 4.12.0 -> 4.12.1

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: === * GtkGridView: - Fix a crash when scrolling * GtkColumnView: - Fix a refcounting issue in the new scroll_to api * GtkTreeView - Fix style classes for sort arrows * GtkEntry: - Improve tracking of user changes (for undo) * GtkNotebook: - Fix a

[OE-core] [PATCH] git: upgrade 2.41.0 -> 2.42.0

2023-08-30 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- meta/recipes-devtools/git/{git_2.41.0.bb => git_2.42.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/git/{git_2.41.0.bb => git_2.42.0.bb} (98%) diff --git a/meta/recipes-devtools/git/git_2.41.0.bb

[OE-core] [PATCH] ell: upgrade 0.57 -> 0.58

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: Add support for handling sysctl settings. Signed-off-by: Wang Mingyu --- meta/recipes-core/ell/{ell_0.57.bb => ell_0.58.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/ell/{ell_0.57.bb => ell_0.58.bb} (89%) diff --git

[OE-core] [PATCH] createrepo-c: upgrade 0.21.1 -> 1.0.0

2023-08-30 Thread wangmy
From: Wang Mingyu 0001-src-cmd_parser.c-add-a-missing-parameter-name.patch removed since it's included in 1.0.0 Signed-off-by: Wang Mingyu --- ...arser.c-add-a-missing-parameter-name.patch | 39 --- ...repo-c_0.21.1.bb => createrepo-c_1.0.0.bb} | 3 +- 2 files changed, 1

[OE-core] [PATCH] bluez5: upgrade 5.68 -> 5.69

2023-08-30 Thread wangmy
From: Wang Mingyu fix-check-ell-path.patch removed since it's included in 5.69 Changelog: = Fix issue with BAP enabling state correctly when resuming. Fix issue with detaching source ASEs only after Stop Ready. Fix issue with handling VCP audio location and descriptor. Fix issue

[OE-core] [PATCH] bind: upgrade 9.18.17 -> 9.18.18

2023-08-30 Thread wangmy
From: Wang Mingyu Changelog: Deprecate the 'dialup' and 'heartbeat-interval' options. Ignore 'max-zone-ttl' on 'dnssec-policy insecure'. Return REFUSED to GSS-API TKEY requests if GSS-API support is not configured. Mark a primary server as temporarily unreachable if the TCP

Re: [OE-core] [RFC PATCH 4/5] qemu: enable parallel builds when using the jobserver class

2023-08-30 Thread Randy MacLeod via lists.openembedded.org
Thanks for the patch set Martin! On 2023-08-28 08:48, Martin Hundeb?ll via lists.openembedded.org wrote: If the jobserver class is enabled, the PARALLEL_MAKE variable is unset in favor of configuring a shared jobserver in the MAKEFLAGS variable. However, the qemu makefile translates the missing

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Richard Purdie
On Wed, 2023-08-30 at 21:08 +0100, Richard Purdie via lists.openembedded.org wrote: > On Wed, 2023-08-30 at 18:07 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: > > On 30/08/2023 15:08, Richard Purdie wrote: > > > On Wed, 2023-08-30 at 15:04 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: > > > > On

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Richard Purdie
On Wed, 2023-08-30 at 18:07 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: > On 30/08/2023 15:08, Richard Purdie wrote: > > On Wed, 2023-08-30 at 15:04 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: > > > On 30/08/2023 14:19, Richard Purdie wrote: > > > > On Wed, 2023-08-30 at 12:39 +, Eilís 'pidge'

Re: [OE-Core][PATCH v2] rust: Upgrade 1.70.0 -> 1.71.0

2023-08-30 Thread Randy MacLeod via lists.openembedded.org
On 2023-08-17 03:46, Alexander Kanavin wrote: If you already have a patch it's better if you don't wait for new versions. New version may require significant additional work, and by then feature freeze is in place, and then we'll end up with no upgrade at all. Alex FYI, There were some

[OE-core][mickledore 20/20] vim: update obsolete comment

2023-08-30 Thread Steve Sakoman
From: Etienne Cordonnier vim 8.3 has been out for a long time, so this comment is obsolete. However we still need UPSTREAM_VERSION_UNKNOWN, since we ignore the last digit of the upstream version number. Test result: $ devtool check-upgrade-status vim ... INFO: vim

[OE-core][mickledore 19/20] build-sysroots: Ensure dependency chains are minimal

2023-08-30 Thread Steve Sakoman
From: Richard Purdie We need to ensure this recipe doesn't have dependencies on others. The SPDX classes/tasks introduce dependenies quilt-native and patch-native which can introduce races on files in the sysroots. Avoid the races by removing the tasks we don't need. [YOCTO #15186]

[OE-core][mickledore 18/20] mdadm: skip running 04update-uuid and 07revert-inplace testcases

2023-08-30 Thread Steve Sakoman
From: Ovidiu Panait 04update-uuid and 07revert-inplace tests are unreliable and fail intermittently on the autobuilder (BZ#15181 and BZ#15159). Unfortunately, the failures cannot be reproduced locally and the logs cannot be retrieved from the AB. Mark the testcases as BROKEN to skip them when

[OE-core][mickledore 17/20] wic: fix wrong attempt to create file system in upartitioned regions

2023-08-30 Thread Steve Sakoman
From: Markus Niebel The kickstart parser defaults fstype to "vfat". This leads to an attempt to create an empty file system even for regions configured with "--no-table" if used without fstype when no --sourceparams given. The fix tests for fstype "none" or no_table in Partition prepare method.

[OE-core][mickledore 16/20] tcl: prevent installing another copy of tzdata

2023-08-30 Thread Steve Sakoman
From: Martin Jansa It checks build host filesystem and if it doesn't find UTC or GMT files it installs another copy of tzdata files in: /usr/lib/tcl8.6/tzdata Buildhistory shows the difference: -PKGSIZE = 2227075 +PKGSIZE = 3433088 See the autodetection in configure.in:

[OE-core][mickledore 15/20] pixman: Remove duplication of license MIT

2023-08-30 Thread Steve Sakoman
From: Poonam Jadhav Remove duplication of license MIT from pixman bbfile. Signed-off-by: Poonam Jadhav Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit e6c87b267252376ca85b534e3c9ee9b77ff665ca) Signed-off-by: Steve Sakoman ---

[OE-core][mickledore 14/20] build-sysroots: Add SUMMARY field

2023-08-30 Thread Steve Sakoman
From: Khem Raj Fixes build QA warning about [missing-metadata] Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 4f4c7130f11c069ab18c374dcbfb1276ef37be60) Signed-off-by: Steve Sakoman ---

[OE-core][mickledore 13/20] graphene: fix runtime detection of IEEE754 behaviour

2023-08-30 Thread Steve Sakoman
From: Ross Burton Graphene gates a runtime check on whether it is cross-compiling, when it should be whether it can run target binaries. Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][mickledore 12/20] linux-yocto/6.1: fix IRQ-80 warnings

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/6.1: 44fd0c7a5a79 tick/rcu: fix false positive "softirq work is pending" messages on RT Paul Gortmaker has found and fixed the root cause of why we are getting "softirq work is pending" messages on boot with -rt ..

[OE-core][mickledore 11/20] linux-yocto/6.1: update to v6.1.46

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 6c44e13dc284 Linux 6.1.46 5525c289dbcf drm/amd/pm/smu7: move variables to where they are used 4346a66ad198 sch_netem: fix issues in netem_change() vs get_dist_table()

[OE-core][mickledore 10/20] linux-yocto/6.1: fix uninitialized read in nohz_full/isolcpus setup

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/6.1: 4675ec8d0b9a kernel/sched: Fix uninitialized read in nohz_full/isolcpus setup The carry forward of commit from the v5.15 linux-yocto kernel: https://git.yoctoproject.org/linux-yocto/commit/?id=97c96388922 ...in

[OE-core][mickledore 09/20] linux-yocto/6.1: update to v6.1.45

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 1321ab403b38 Linux 6.1.45 f2615bb47be4 x86/CPU/AMD: Do not leak quotient data after a division by 0 673cdde74fd1 Revert "drm/i915: Disable DC states for all commits"

[OE-core][mickledore 08/20] linux-yocto/6.1: update to v6.1.44

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 0a4a7855302d Linux 6.1.44 dd5f2ef16e3c x86: fix backwards merge of GDS/SRSO bit fa5b932b77c8 xen/netback: Fix buffer overrun triggered by unusual packet 4f25355540ad x86/srso:

[OE-core][mickledore 07/20] linux-yocto/6.1: update to v6.1.43

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 52a953d0934b Linux 6.1.43 c3d576baa6c8 dma-buf: fix an error pointer vs NULL bug 23acc2b850ba dma-buf: keep the signaling time of merged fences v3 665e6fd71468 test_firmware:

[OE-core][mickledore 06/20] linux-yocto/6.1: update to v6.1.41

2023-08-30 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 5302e81aa209 Linux 6.1.41 ed9b87010aa8 x86/cpu/amd: Add a Zenbleed fix 5fc203d8d3ed x86/cpu/amd: Move the errata checking functionality up 75389113731b Linux 6.1.40

[OE-core][mickledore 05/20] gstreamer1.0: upgrade 1.22.4 -> 1.22.5

2023-08-30 Thread Steve Sakoman
From: Anuj Mittal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit a894c9499863f127380c38f0b17d51b356391821) Signed-off-by: Steve Sakoman --- .../{gst-devtools_1.22.4.bb => gst-devtools_1.22.5.bb} | 2 +- ...streamer1.0-libav_1.22.4.bb =>

[OE-core][mickledore 04/20] tar: upgrade 1.34 -> 1.35

2023-08-30 Thread Steve Sakoman
From: Wang Mingyu CVE-2022-48303.patch removed since it's included in 1.35 License-Update: http changed to https Changelog: === * Fail when building GNU tar, if the platform supports 64-bit time_t but the build uses only 32-bit time_t. * Leave the devmajor and devminor fields empty

[OE-core][mickledore 03/20] procps: backport fix for CVE-2023-4016

2023-08-30 Thread Steve Sakoman
From: Ross Burton (From OE-Core rev: 255515e1b52fea6d72d37fae61667db08eb5b086) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit eae2a94f5de78b95590ec45e11e930655dbd5caf) Signed-off-by: Steve Sakoman ---

[OE-core][mickledore 02/20] python3-pygments: fix for CVE-2022-40896

2023-08-30 Thread Steve Sakoman
From: Narpat Mali A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer. The CVE issue is fixed by these 3 different commits in different version: 1. Improve the Smithy metadata matcher (These changes are already available as part of current

[OE-core][mickledore 01/20] inetutils: fix CVE-2023-40303

2023-08-30 Thread Steve Sakoman
From: Yogita Urade GNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges

[OE-core][mickledore 00/20] Patch review

2023-08-30 Thread Steve Sakoman
Please review this set of patches for mickledore and have comments back by end of day Friday, September 1. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5798 The following changes since commit a46782c9f54bcb0389ea1016e37b6939aae79bfb:

Re: [OE-core] [kirkstone][PATCH] libdnf: backport a fix to build with gcc-13

2023-08-30 Thread Martin Jansa
On Wed, Aug 30, 2023 at 5:59 PM Steve Sakoman wrote: > I took a patch submitted yesterday for this same issue: > > https://lists.openembedded.org/g/openembedded-core/message/186814 > > It contains three patches from upstream, rather than the two in your > submission. > > Could you please take a

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Eilís 'pidge' Ní Fhlannagáin
On 30/08/2023 15:08, Richard Purdie wrote: On Wed, 2023-08-30 at 15:04 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: On 30/08/2023 14:19, Richard Purdie wrote: On Wed, 2023-08-30 at 12:39 +, Eilís 'pidge' Ní Fhlannagáin wrote: [YOCTO #15023] In this instance (do_populate_sdk with

Re: [OE-core] [kirkstone][PATCH v2] json-c: fix CVE-2021-32292

2023-08-30 Thread Steve Sakoman
On Tue, Aug 29, 2023 at 7:01 AM Adrian Freihofer wrote: > > This is a read past end of buffer issue in the json_parse test app, > which can happened with malformed json data. It's not an issue with the > library itself. For what ever reason this CVE has a base score of 9.8. > > Reference: >

Re: [OE-core] [kirkstone][PATCH] libdnf: backport a fix to build with gcc-13

2023-08-30 Thread Steve Sakoman
I took a patch submitted yesterday for this same issue: https://lists.openembedded.org/g/openembedded-core/message/186814 It contains three patches from upstream, rather than the two in your submission. Could you please take a look and see if there is an issue with keeping yesterday's

[OE-core] [PATCH 1/2] meta/lib/bblayers/buildconf.py: add support for configuration descriptions

2023-08-30 Thread Alexander Kanavin
Signed-off-by: Alexander Kanavin --- meta/lib/bblayers/buildconf.py | 10 -- meta/lib/oeqa/selftest/cases/bblayers.py | 2 +- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/meta/lib/bblayers/buildconf.py b/meta/lib/bblayers/buildconf.py index

[OE-core] [PATCH 2/2] scripts/oe-setup-builddir: add support for configuration descriptions

2023-08-30 Thread Alexander Kanavin
They are handled exactly same as conf-notes.txt. Signed-off-by: Alexander Kanavin --- scripts/oe-setup-builddir | 10 ++ 1 file changed, 10 insertions(+) diff --git a/scripts/oe-setup-builddir b/scripts/oe-setup-builddir index 678aeac4be5..1b5dc55743e 100755 ---

[OE-core] [PATCH] README: Update to point to new contributor guide

2023-08-30 Thread Richard Purdie
Now we have a contributor guide combining various wiki pages, point at that. Signed-off-by: Richard Purdie --- README.OE-Core.md | 10 +++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/README.OE-Core.md b/README.OE-Core.md index 2f2127fb03a..31b1bf52b44 100644 ---

[OE-core] [PATCH][master-next] qemu: fix segfault in MMU emulation

2023-08-30 Thread Ross Burton
From: Ross Burton Backport a patch that has been submitted to the qemu list that resolves a crash in the softmmu code. Signed-off-by: Ross Burton --- meta/recipes-devtools/qemu/qemu.inc | 1 + meta/recipes-devtools/qemu/qemu/softmmu.patch | 216 ++ 2 files changed,

Re: [OE-core] [PATCH v4 00/13] devtool ide plugin

2023-08-30 Thread Alexandre Belloni via lists.openembedded.org
Hello, This causes the following failures: 2023-08-30 14:00:30,617 - oe-selftest - INFO - FAIL: sstatetests.SStateHashSameSigs4.test_sstate_noop_samesigs (subunit.RemotedTestCase) 2023-08-30 14:00:30,617 - oe-selftest - INFO -

[OE-core][PATCH] wic: Add gpt-hybrid partition layout

2023-08-30 Thread Joshua Watt
Add support for formatting a disk with a hybrid MBR & GPT partition scheme. In this scheme, the primary partitioning method is GPT, but a valid MBR header is also written than can point to a subset of the GPT partitions on the disk (any partitions marked with the `--mbr` flag will be included in

[OE-core] [PATCH] meta/conf/templates/default/conf-description.txt: add a template description

2023-08-30 Thread Alexander Kanavin
There is a need to separate the template notes (which are lengthy instructions about how to use the template) and template description (which is a short explanation of what the template is for). This patch adds such a description for the default oe-core template, and updates to the tools will

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Richard Purdie
On Wed, 2023-08-30 at 15:04 +0100, Eilís 'pidge' Ní Fhlannagáin wrote: > On 30/08/2023 14:19, Richard Purdie wrote: > > On Wed, 2023-08-30 at 12:39 +, Eilís 'pidge' Ní Fhlannagáin wrote: > > > [YOCTO #15023] > > > > > > In this instance (do_populate_sdk with api-documentation turned on), > >

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Eilís 'pidge' Ní Fhlannagáin
On 30/08/2023 14:19, Richard Purdie wrote: On Wed, 2023-08-30 at 12:39 +, Eilís 'pidge' Ní Fhlannagáin wrote: [YOCTO #15023] In this instance (do_populate_sdk with api-documentation turned on), pseudo is going to end up finding the passwd/groups files in recipe-sysroot-native which is

Re: [OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Richard Purdie
On Wed, 2023-08-30 at 12:39 +, Eilís 'pidge' Ní Fhlannagáin wrote: > [YOCTO #15023] > > In this instance (do_populate_sdk with api-documentation turned on), > pseudo is going to end up finding the passwd/groups files in > recipe-sysroot-native which is incorrect and does not have man. The >

Re: [OE-core] Dilemma on changes - merge or not to merge (e.g. 6.4)

2023-08-30 Thread Richard Purdie
On Wed, 2023-08-30 at 11:43 +0100, Richard Purdie via lists.openembedded.org wrote: > On Fri, 2023-08-25 at 07:34 +0100, Richard Purdie via > lists.openembedded.org wrote: > > > > > > > > qemu 8.1.0 brings with it a new set of problems but I've reproduced the > > > > hang with 8.1.0 so it does

[OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-08-30 Thread Eilís 'pidge' Ní Fhlannagáin
[YOCTO #15023] In this instance (do_populate_sdk with api-documentation turned on), pseudo is going to end up finding the passwd/groups files in recipe-sysroot-native which is incorrect and does not have man. The solution here should be to ensure that pseudo points to the passwd/groups files in

[OE-core] [PATCH] cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig

2023-08-30 Thread Jaeyoon Jung (LGE)
From: Jaeyoon Jung Variable overrides in KCONFIG_CONFIG_COMMAND do not work as expected due to double quote mismatches. The issue is reproducible in an environment where gold is the default linker. Below is an example snippet of run.do_terminal generated by do_menuconfig. do_terminal() { exec

[OE-core] [kirkstone][PATCH] libtiff: fix CVE-2023-26966 Buffer Overflow

2023-08-30 Thread Hitendra Prajapati via lists.openembedded.org
Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/b0e1c25dd1d065200c8d8f59ad0afe014861a1b9 Signed-off-by: Hitendra Prajapati --- .../libtiff/tiff/CVE-2023-26966.patch | 35 +++ meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 1 + 2 files

Re: [OE-core] Dilemma on changes - merge or not to merge (e.g. 6.4)

2023-08-30 Thread Richard Purdie
On Fri, 2023-08-25 at 07:34 +0100, Richard Purdie via lists.openembedded.org wrote: > > > > > > qemu 8.1.0 brings with it a new set of problems but I've reproduced the > > > hang with 8.1.0 so it does not solve that. > > > > > > I'm really struggling to understand which change brought in these >

[OE-core] [PATCH v2 3/3] inetutils: remove obsolete cruft from do_configure

2023-08-30 Thread Ross Burton
From: Ross Burton glob/ doesn't exist and the other files are copied by autotools.bbclass Signed-off-by: Ross Burton --- meta/recipes-connectivity/inetutils/inetutils_2.4.bb | 4 1 file changed, 4 deletions(-) diff --git a/meta/recipes-connectivity/inetutils/inetutils_2.4.bb

[OE-core] [PATCH v2 1/3] inetutils: don't guess target paths

2023-08-30 Thread Ross Burton
From: Ross Burton inetutils guesses a lot of target paths in cross builds, and warns that some of them are known to be wrong (for example, whether /proc/net/dev exists is guessed as 'no'). Add a post-configure function to check for these warnings, and pass --with-path-* as appropriate to set

[OE-core] [PATCH v2 2/3] inetutils: remove obsolete patches

2023-08-30 Thread Ross Burton
From: Ross Burton fix-disable-ipv6.patch: we don't support uclibc, and most libcs don't have optional support for IPv6. inetutils-1.8-0001-printf-parse-pull-in-features.h-for-__GLIBC__.patch and inetutils-1.8-0003-wchar.patch: these don't appear to be needed anymore.

Re: [OE-core] [PATCH] base.bbclass: Do not fail during parsing if ${SRCREV} does not exist

2023-08-30 Thread Martin Jansa
FWIW: I have seen this in some meta-evil-bsp and the unfortunate part is that only the first parsing fatal error is shown at time, so to find all recipes which now need SkipRecipe, because your bsp vendor is evil, takes possibly many parsing cycles. But in the end nobody should work with evil

Re: [OE-core] [PATCH 3/3] libx11-compose-data: add CVE_PRODUCT

2023-08-30 Thread Ross Burton
> On 30 Aug 2023, at 10:47, Emil Kronborg Andersen wrote: > > Alright. I thought libx11​ was a dependency of the packages that include > xorg-lib-common.inc​, which is why I asked. It _mostly_ is, but issues in libx11 will be reported by the libx11 recipe, not in packages that depend on

Re: [OE-core] [PATCH 3/3] libx11-compose-data: add CVE_PRODUCT

2023-08-30 Thread Emil Kronborg Andersen via lists.openembedded.org
Alright. I thought libx11​ was a dependency of the packages that include xorg-lib-common.inc​, which is why I asked. So I guess this patch can just be dropped then? Do you need me to do anything further? Emil From: Ross Burton Sent: Wednesday, August 30, 2023

[OE-core] [PATCH] site: remove at-spi2-core values

2023-08-30 Thread Ross Burton
From: Ross Burton at-spi2-core is built with Meson now, so these values are not needed. Signed-off-by: Ross Burton --- meta/site/arm-32 | 10 -- meta/site/arm-64 | 9 - meta/site/ix86-common| 10 -- meta/site/mips-common| 10 --

Re: [OE-core] [PATCH 3/3] libx11-compose-data: add CVE_PRODUCT

2023-08-30 Thread Ross Burton
On 30 Aug 2023, at 07:37, Emil Kronborg Andersen wrote: > > That is why I want to include it in that file. Doesn't it make sense to > capture CVEs for x.org:libx11​ if you use any of the libraries? No, x.org :libx11 refers to libx11, not eg libxvmc. Ross

Re: [OE-core] [PATCH] base.bbclass: Do not fail during parsing if ${SRCREV} does not exist

2023-08-30 Thread Richard Purdie
On Fri, 2023-08-25 at 19:16 +0200, Peter Kjellerstedt wrote: > After commit a8e7b0f932 (base/package: Move source revision information > from PV to PKGV) was integrated, having a recipe with a SRCREV that > currently cannot be fetched would lead to an exception during parsing. > Catch that

[OE-core] [kirkstone][PATCH] libdnf: backport a fix to build with gcc-13

2023-08-30 Thread Martin Jansa
* needed to build libdnf-native on hosts with gcc-13 Signed-off-by: Martin Jansa --- ...ite3-Sqlite3.hpp-add-missing-cstdint.patch | 33 +++ ...onNumber.hpp-add-missing-cstdint-inc.patch | 30 + meta/recipes-devtools/libdnf/libdnf_0.66.0.bb | 2 ++ 3 files

[OE-core][PATCH] oe-depends-dot: improve '-w' behavior

2023-08-30 Thread Chen Qi via lists.openembedded.org
From: Chen Qi The '-w' option is not giving very helpful information. For example, if we add 'spice' to IMAGE_INSTALL, bitbake -g core-image-minimal, and then run `oe-depends-dot -k nspr -w task-depends.dot', the result is: $ oe-depends-dot -k nspr -w task-depends.dot Because:

Re: [OE-core] [PATCH] bitbake.conf: add bunzip2 in HOSTTOOLS

2023-08-30 Thread Richard Purdie
On Fri, 2023-08-18 at 11:30 +0200, Alberto Planas via lists.openembedded.org wrote: > From: Alberto Planas > > rpm2cpio.sh can make calls to bunzip2 to uncompress the RPM payload that > conform the cpio file. > > bzip2 is already part of HOSTTOOLS, as a link to the system installed > bzip2. >

Re: [OE-core] [PATCH 3/3] libx11-compose-data: add CVE_PRODUCT

2023-08-30 Thread Emil Kronborg Andersen via lists.openembedded.org
That is why I want to include it in that file. Doesn't it make sense to capture CVEs for x.org:libx11​ if you use any of the libraries? Emil From: Ross Burton Sent: Tuesday, August 29, 2023 11:45 To: Emil Kronborg Andersen Cc:

[OE-core][PATCH] stress-ng: disable DEBUG_BUILD

2023-08-30 Thread Chen Qi via lists.openembedded.org
From: Chen Qi We get do_compile error when DEBUG_BUILD is enabled: error: inlining failed in call to 'always_inline' '_mm512_storeu_si512': target specific option mismatch To reproduce the issue, set the following lines in local.conf and then `bitbake stress-ng'. MACHINE = "qemux86-64"