[OE-core] [PATCH] libc-test: Run as non-root user

2023-09-08 Thread Khem Raj
Some of tests impose rlimit on it before running which wont be imposed when running as root user. Fixes src/regression/pthread_atfork-errno-clobber.c:23: (pid = fork()) == -1 failed: fork succeeded despite rlimit src/regression/pthread_atfork-errno-clobber.c:23: (pid = fork()) == -1 failed:

Re: [OE-core] [PATCH] classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables

2023-09-08 Thread Peter Kjellerstedt
> -Original Message- > From: openembedded-core@lists.openembedded.org > On Behalf Of Richard Purdie > Sent: den 8 september 2023 00:11 > To: openembedded-core@lists.openembedded.org > Subject: [OE-core] [PATCH] classes: Drop ';' delimiter from > ROOTFS/IMAGE*COMMAND variables > >

Re: [OE-core][PATCH v5 00/14] devtool ide plugin

2023-09-08 Thread Alexandre Belloni via lists.openembedded.org
Hello, This caused the following failures on the autobuilders: https://autobuilder.yoctoproject.org/typhoon/#/builders/80/builds/5678/steps/14/logs/stdio https://autobuilder.yoctoproject.org/typhoon/#/builders/87/builds/5748/steps/14/logs/stdio

[OE-core] [PATCH] update_mandb: Point to correct /etc/passwd with man

2023-09-08 Thread Eilís 'pidge' Ní Fhlannagáin
[YOCTO #15023] In this instance (do_populate_sdk with api-documentation turned on), pseudo is going to end up finding the passwd/groups files in recipe-sysroot-native which is incorrect and does not have man. The solution here should be to ensure that pseudo points to the passwd/groups files in

[OE-core] [PATCH] libc-test: Depend on musl-staticdev

2023-09-08 Thread Khem Raj
It builds statically linked tests during ptest run and therefore needs libc.a Signed-off-by: Khem Raj --- meta/recipes-core/musl/libc-test_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/musl/libc-test_git.bb b/meta/recipes-core/musl/libc-test_git.bb index

Re: [oe-core][PATCHv3] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
v3 removes the :append from SRC_URI because we dont need to differ between native/target anymore On Fri, Sep 8 2023 at 05:15:41 PM +02:00:00, Markus Volk wrote: The upcoming libadwaita update will have a required dependency on appstream, so these will be required in oe-core. In order to be

[oe-core][PATCHv3] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
The upcoming libadwaita update will have a required dependency on appstream, so these will be required in oe-core. In order to be able to use snowball for appstream by default, also libstemmer would need to be moved. Signed-off-by: Markus Volk --- meta/conf/distro/include/maintainers.inc

[oe-core][PATCHv2] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
The upcoming libadwaita update will have a required dependency on appstream, so these will be required in oe-core. In order to be able to use snowball for appstream by default, also libstemmer would need to be moved. Signed-off-by: Markus Volk --- meta/conf/distro/include/maintainers.inc

Re: [RFC][oe-core][PATCH] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
On Fri, Sep 8 2023 at 03:45:34 PM +02:00:00, Alexander Kanavin wrote: 0001-fix-crosscompile.patch needs to be split in two, both parts properly described and submitted upstream. The good news is, that the first issue seems to be fixed with the latest appstream update. I'll send an update

Re: [RFC][oe-core][PATCH] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
On Fri, Sep 8 2023 at 03:43:49 PM +02:00:00, Alexander Kanavin wrote: Is it super hard to patch epiphany so that libadwaita is optional? I don't think that this is possible with gtk4 I'm fine with splitting the patch if needed, but I believe that both of the changes are inappropriate for

Re: [OE-core] [kirkstone][PATCH V2] binutils: Fix CVE-2022-47008

2023-09-08 Thread Steve Sakoman
Hi Deepthi, Could you please submit V3 as a patch series? No ordering works as is, the second patch in a series for the same recipe must take the first into account. Steve On Tue, Sep 5, 2023 at 11:25 PM Hemraj, Deepthi via lists.openembedded.org wrote: > > Signed-off-by: Deepthi Hemraj > ---

[OE-core][PATCH 1/1] dropbear: fix CVE-2023-36328

2023-09-08 Thread Urade, Yogita via lists.openembedded.org
From: Yogita Urade Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). References: https://nvd.nist.gov/vuln/detail/CVE-2023-36328

[OE-core][kirkstone][PATCH 1/1] webkitgtk: fix CVE-2022-48503

2023-09-08 Thread Urade, Yogita via lists.openembedded.org
From: Yogita Urade The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. References:

[OE-core][mickledore 9/9] yocto-uninative: Update to 4.3

2023-09-08 Thread Steve Sakoman
From: Michael Halstead Add in stable updates to glibc 2.38 to fix malloc bugs Signed-off-by: Michael Halstead Signed-off-by: Richard Purdie (cherry picked from commit 39f987fcb20ad7c0e45425b9f508d463c50ce0c1) Signed-off-by: Steve Sakoman --- meta/conf/distro/include/yocto-uninative.inc | 8

[OE-core][mickledore 8/9] go: upgrade 1.20.6 -> 1.20.7

2023-09-08 Thread Steve Sakoman
From: Sakib Sajal Upgrade to latest 1.20.x release [1]: $ git log --oneline go1.20.6..go1.20.7 origin/release-branch.go1.20 adb775e309 (tag: go1.20.7, origin/release-branch.go1.20) [release-branch.go1.20] go1.20.7 659f2a2207 [release-branch.go1.20] crypto/tls: restrict RSA keys in

[OE-core][mickledore 7/9] python3: update to 3.11.5

2023-09-08 Thread Steve Sakoman
From: Chee Yang Lee upgrade include fix for CVE-2023-40217 Release notes: https://docs.python.org/3/whatsnew/changelog.html#python-3-11-5-final Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman --- .../python/{python3_3.11.4.bb => python3_3.11.5.bb} | 2 +- 1 file

[OE-core][mickledore 6/9] python3: update 3.11.3 -> 3.11.4

2023-09-08 Thread Steve Sakoman
From: Alexander Kanavin upgrade include fix for CVE-2023-24329 (cherry picked from commit f7f163ebe8c53de4314d04595c1fbcc7af2deccc ) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman

[OE-core][mickledore 5/9] python3: upgrade 3.11.2 -> 3.11.3

2023-09-08 Thread Steve Sakoman
From: Alexander Kanavin (cherry picked from commit 7d5bb3a4690ef61a1fee21773b4717e829789e32) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman --- .../0001-Don-t-search-system-for-headers-libraries.patch| 2 +-

[OE-core][mickledore 4/9] webkitgtk: fix CVE-2023-32435

2023-09-08 Thread Steve Sakoman
From: Kai Kang Backport and rebase patch to fix CVE-2023-32435 for webkitgtk 2.38.6: * drop the patches for the files WasmAirIRGenerator64.cpp and WasmAirIRGeneratorBase.h which are involved in 2.40.0 * drop test cases as well CVE: CVE-2023-32435 Signed-off-by: Kai Kang Signed-off-by:

[OE-core][mickledore 3/9] webkitgtk: fix CVE-2023-32439

2023-09-08 Thread Steve Sakoman
From: Kai Kang Backport patch to fix CVE-2023-32439 for webkitgtk. CVE: CVE-2023-32439 Signed-off-by: Kai Kang Signed-off-by: Steve Sakoman --- .../webkit/webkitgtk/CVE-2023-32439.patch | 128 ++ meta/recipes-sato/webkit/webkitgtk_2.38.6.bb | 1 + 2 files changed, 129

[OE-core][mickledore 2/9] nghttp2: fix CVE-2023-35945

2023-09-08 Thread Steve Sakoman
From: Yogita Urade Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests

[OE-core][mickledore 1/9] libssh2: fix CVE-2020-22218

2023-09-08 Thread Steve Sakoman
From: Chee Yang Lee Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman --- .../libssh2/libssh2/CVE-2020-22218.patch | 34 +++ .../recipes-support/libssh2/libssh2_1.10.0.bb | 1 + 2 files changed, 35 insertions(+) create mode 100644

[OE-core][mickledore 0/9] Patch review

2023-09-08 Thread Steve Sakoman
Please review this set of changes for mickledore and have comments back by end of day Tuesday, September 12 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5856 The following changes since commit 981fa51afe040550c7c351fff028553d4bbbd1ca: vim:

Re: [RFC][oe-core][PATCH] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Alexander Kanavin
0001-fix-crosscompile.patch needs to be split in two, both parts properly described and submitted upstream. Alex On Fri, 8 Sept 2023 at 15:43, Alexander Kanavin wrote: > > Is it super hard to patch epiphany so that libadwaita is optional? > > Alex > > On Fri, 8 Sept 2023 at 15:05, Markus Volk

Re: [RFC][oe-core][PATCH] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Alexander Kanavin
Is it super hard to patch epiphany so that libadwaita is optional? Alex On Fri, 8 Sept 2023 at 15:05, Markus Volk wrote: > > The upcoming libadwaita update will have a required dependency on appstream, > so these will be required in oe-core. > > In order to be able to use snowball for appstream

[OE-core][PATCH v2] pybootchartgui: also match do_compile and do_configure subtasks

2023-09-08 Thread Jose Quaresma
This will match other deviation subtask of the same main task, a couple of them can be found on oe-core layer: do_compile_kernelmodules do_compile_ptest cmake_do_configure setuptools3_do_configure cargo_common_do_configure python_pyo3_do_configure python_setuptools3_rust_do_configure

Re: [OE-core] [kirkstone][PATCH] Qemu: Resolve undefined reference issue in CVE-2023-2861

2023-09-08 Thread Steve Sakoman
On Thu, Sep 7, 2023 at 5:51 PM Siddharth via lists.openembedded.org wrote: > > Hi Team, > > Any updates for this patch? The patch was accepted and is now in the kirkstone branch: https://git.yoctoproject.org/poky/commit/?h=kirkstone=074ad15e1e34007997e58892daf759c8d6d9abff Steve > Regards, >

[RFC][oe-core][PATCH] RFC: import libxmlb and appstream from meta-oe

2023-09-08 Thread Markus Volk
The upcoming libadwaita update will have a required dependency on appstream, so these will be required in oe-core. In order to be able to use snowball for appstream by default, also libstemmer would need to be moved. Signed-off-by: Markus Volk --- meta/conf/distro/include/maintainers.inc

[OE-core] [mickledore][PATCH] binutils: Fix CVE-2023-39128

2023-09-08 Thread Sanjana V
Avoid buffer overflow in ada_decode. Signed-off-by: Sanjana --- .../binutils/binutils-2.40.inc| 1 + .../binutils/0017-CVE-2023-39128.patch| 74 +++ 2 files changed, 75 insertions(+) create mode 100644

Re: [OE-core] [PATCH] base: improve LICENSE_FLAGS_DETAILS output

2023-09-08 Thread Michael Opdenacker via lists.openembedded.org
On 08.09.23 at 13:11, Ross Burton wrote: On 8 Sep 2023, at 12:00, Michael Opdenacker wrote: Hi Ross, I'm currently writing the doc patch for LICENSE_FLAGS_DETAILS. However, I don't find the current behavior optimal... On 21.06.23 at 16:22, ross.bur...@arm.com wrote: From: Ross Burton

[OE-core] [PATCH] base: add newline before LICENSE_FLAGS_DETAILS

2023-09-08 Thread Michael Opdenacker via lists.openembedded.org
From: Michael Opdenacker To improve readability and avoid putting one inside LICENSE_FLAGS_DETAILS. Signed-off-by: Michael Opdenacker --- Suggested by Ross here: https://lists.openembedded.org/g/openembedded-core/message/187412 --- meta/classes-global/base.bbclass | 2 +- 1 file changed, 1

[OE-core][mickledore][PATCH 1/1] dropbear: fix CVE-2023-36328

2023-09-08 Thread Urade, Yogita via lists.openembedded.org
From: Yogita Urade Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). References: https://nvd.nist.gov/vuln/detail/CVE-2023-36328

Re: [OE-core] [PATCH] base: improve LICENSE_FLAGS_DETAILS output

2023-09-08 Thread Ross Burton
On 8 Sep 2023, at 12:00, Michael Opdenacker wrote: > > Hi Ross, > > I'm currently writing the doc patch for LICENSE_FLAGS_DETAILS. > However, I don't find the current behavior optimal... > > On 21.06.23 at 16:22, ross.bur...@arm.com wrote: >> From: Ross Burton >> Don't prefix the output of

Re: [OE-core] [PATCH] base: improve LICENSE_FLAGS_DETAILS output

2023-09-08 Thread Michael Opdenacker via lists.openembedded.org
Hi Ross, I'm currently writing the doc patch for LICENSE_FLAGS_DETAILS. However, I don't find the current behavior optimal... On 21.06.23 at 16:22, ross.bur...@arm.com wrote: From: Ross Burton Don't prefix the output of LICENSE_FLAGS_DETAILS with "For further details, see" so that recipes

Re: [OE-core] [PATCH 1/3] linux/generate-cve-exclusions: fix mishandling of boundary values

2023-09-08 Thread Ross Burton
On 6 Sep 2023, at 13:30, Ross Burton via lists.openembedded.org wrote: >>> On 5 Sep 2023, at 08:29, Yuta Hayama wrote: affected_versions in kernel_cves.json does not mean "first affected version to last affected version" but actually "first affected version to fixed

Re: [OE-core] [PATCH] classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables

2023-09-08 Thread Richard Purdie
On Fri, 2023-09-08 at 09:29 +0300, Mikko Rapeli wrote: > Hi, > > On Thu, Sep 07, 2023 at 11:11:20PM +0100, Richard Purdie wrote: > > Originally these were shell functions but they have long since been > > processed by > > bb.build.exec_func(). Since we no longer need shell syntax, we can drop

Re: [OE-core] [PATCH] classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables

2023-09-08 Thread Mikko Rapeli
Hi, On Thu, Sep 07, 2023 at 11:11:20PM +0100, Richard Purdie wrote: > Originally these were shell functions but they have long since been processed > by > bb.build.exec_func(). Since we no longer need shell syntax, we can drop the > ';' > delimiters and just use a space separated string. > >