[oe-core][kirkstone][PATCH 2/2] openssh: fix CVE-2023-51385

2023-12-27 Thread Polampalli, Archana via lists.openembedded.org
From: Archana Polampalli In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell

[oe-core][kirkstone][PATCH 1/2] openssh: fix CVE-2023-51384

2023-12-27 Thread Polampalli, Archana via lists.openembedded.org
From: Archana Polampalli In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token

Re: [OE-core] [patch] packagegroups: Add perl modules to rdeps

2023-12-27 Thread Harish.Sadineni via lists.openembedded.org
Hi Randy, There were a few such failure instances (similar to current issue) we've seen in the past and those were fixed by adding the respective modules. So, to avoid such failure in future 'nativesdk-perl-modules' is added. If that causing memory overhead, this issue will be fixed with only

Re: [OE-core][PATCH 1/3] systemd: upgrade to 255.1

2023-12-27 Thread Chen Qi via lists.openembedded.org
Hi Khem, I'm working on some other issue these two days. But I think I can send out a follow-up patch to handle those musl patches after New Year's Day. Regards, Qi -Original Message- From: Khem Raj Sent: Thursday, December 28, 2023 11:20 AM To: Chen, Qi Cc: Alexandre Belloni ;

Re: [OE-core][PATCH 1/3] systemd: upgrade to 255.1

2023-12-27 Thread Khem Raj
Please do a musl build too. We might have some patch conflicts to address. On Wed, Dec 27, 2023 at 7:00 PM Chen Qi via lists.openembedded.org wrote: > > I double checked it in my environment, setting INIT_MANAGER to "systemd" and > then 'bitbake systemd' will not generate this warning. In this

Re: [OE-core][PATCH 1/3] systemd: upgrade to 255.1

2023-12-27 Thread Chen Qi via lists.openembedded.org
I double checked it in my environment, setting INIT_MANAGER to "systemd" and then 'bitbake systemd' will not generate this warning. In this case ROOT_HOME's value is "/root". I checked https://autobuilder.yoctoproject.org/typhoon/#/builders/40/builds/8354, but I couldn't find the configuration

Re: [OE-core] [PATCH] Revert "cve-check: Modify judgment processing using "=" in version comparison"

2023-12-27 Thread Matsunaga-Shinji
Hi, Ross, What does "too common an issue" mean? Is it okay to ignore the misjudgment by the following cases? e.g. PV = "1.2.0" and Vulnerabilities Affected Versions (registered with NVD) = "1.2" Regards, Shinji -Original Message- From: ross.bur...@arm.com Sent: Wednesday, December

Re: [OE-core] [PATCH] aspell: upgrade 0.60.8 -> 0.60.8.1

2023-12-27 Thread Alexandre Belloni via lists.openembedded.org
Hello, This breaks the selftests: https://autobuilder.yoctoproject.org/typhoon/#/builders/145/builds/1080/steps/12/logs/stdio ERROR: No recipes in default available for: /home/pokybuild/yocto-worker/qemux86-tc/build/build-st-3959354/meta-selftest/recipes-test/aspell/aspell_0.60.8.bbappend

Patchtest results for [OE-Core][PATCH v2 2/8] devtool: selftest: Fix test_devtool_modify_git_crates_subpath bbappend check

2023-12-27 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/v2-2-8-devtool-selftest-Fix-test_devtool_modify_git_crates_subpath-bbappend-check.patch FAIL: test shortlog

Re: [OE-Core][PATCH 0/6] Stepwise rust upgrade 1.71.1 -> 1.74.1

2023-12-27 Thread Alex Kiernan
On Tue, Dec 26, 2023 at 8:59 AM Alex Kiernan via lists.openembedded.org wrote: > > On Mon, Dec 25, 2023 at 10:02 PM Richard Purdie > wrote: > > > > On Mon, 2023-12-25 at 08:40 +, Richard Purdie via > > lists.openembedded.org wrote: > > > On Sun, 2023-12-24 at 23:09 +, Alex Kiernan wrote:

[OE-Core][PATCH v2 8/8] rust: Upgrade 1.74.0 -> 1.74.1

2023-12-27 Thread Alex Kiernan
https://blog.rust-lang.org/2023/12/07/Rust-1.74.1.html Signed-off-by: Alex Kiernan --- Changes in v2: - Skip zvariant based test rather than deleting it. meta/recipes-devtools/rust/{cargo_1.74.0.bb => cargo_1.74.1.bb} | 0 .../rust/{libstd-rs_1.74.0.bb => libstd-rs_1.74.1.bb} | 0

[OE-Core][PATCH v2 6/8] rust: Upgrade 1.72.1 -> 1.73.0

2023-12-27 Thread Alex Kiernan
https://blog.rust-lang.org/2023/10/05/Rust-1.73.0.html Signed-off-by: Alex Kiernan --- (no changes since v1) meta/conf/distro/include/tcmode-default.inc | 2 +- .../rust/{cargo_1.72.1.bb => cargo_1.73.0.bb} | 0 ...-Do-not-use-LFS64-on-linux-with-musl.patch | 36 +-

[OE-Core][PATCH v2 5/8] rust: Upgrade 1.72.0 -> 1.72.1

2023-12-27 Thread Alex Kiernan
https://blog.rust-lang.org/2023/09/19/Rust-1.72.1.html Signed-off-by: Alex Kiernan --- (no changes since v1) meta/recipes-devtools/rust/{cargo_1.72.0.bb => cargo_1.72.1.bb} | 0 .../rust/{libstd-rs_1.72.0.bb => libstd-rs_1.72.1.bb} | 0 ...t-cross-canadian_1.72.0.bb =>

[OE-Core][PATCH v2 0/8] Stepwise rust upgrade 1.71.1 -> 1.74.1

2023-12-27 Thread Alex Kiernan
This is the 1.74.1 rust series rebased to include a revert of https://github.com/rust-lang/cc-rs/commit/c4f414f449bb7cffba3bc923f277704d1d08a8ec which I'm pretty sure is what's causing our filename churn. I've checked 1.72.0 and 1.74.1 for the absvdi2.o intrinsic (one of many intrinsics which had

[OE-Core][PATCH v2 3/8] devtool: selftest: Skip test_devtool_modify_git_crates_subpath

2023-12-27 Thread Alex Kiernan
This fails to build upgrading rust and whilst the upgraded recipe works, it no longer includes the essential things tested; skip it for now. Signed-off-by: Alex Kiernan --- (no changes since v1) meta/lib/oeqa/selftest/cases/devtool.py | 2 ++ 1 file changed, 2 insertions(+) diff --git

[OE-Core][PATCH v2 1/8] devtool: selftest: Fix test_devtool_modify_git_crates_subpath inequality

2023-12-27 Thread Alex Kiernan
test_devtool_modify_git_crates_subpath expects 2 or more git URIs, change the test from Greater to GreateEqual. Signed-off-by: Alex Kiernan --- (no changes since v1) meta/lib/oeqa/selftest/cases/devtool.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[OE-Core][PATCH v2 2/8] devtool: selftest: Fix test_devtool_modify_git_crates_subpath bbappend check

2023-12-27 Thread Alex Kiernan
The recipe being tested is in `testrecipe`, use that rather than the literal `zvariant`. Signed-off-by: Alex Kiernan --- (no changes since v1) meta/lib/oeqa/selftest/cases/devtool.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py

[OE-Core][PATCH v2 00/10] Stepwise rust upgrade 1.71.1 -> 1.74.1

2023-12-27 Thread Alex Kiernan
This is the 1.74.1 rust series rebased to include a revert of https://github.com/rust-lang/cc-rs/commit/c4f414f449bb7cffba3bc923f277704d1d08a8ec which I'm pretty sure is what's causing our filename churn. I've checked 1.72.0 and 1.74.1 for the absvdi2.o intrinsic (one of many intrinsics which had

Re: [OE-core] [bitbake-devel] pthread_cancel bug on ubuntu2004/debian11

2023-12-27 Thread Joshua Watt
On Wed, Dec 27, 2023 at 4:28 AM Richard Purdie wrote: > > I wanted to write down some thoughts on this which I have all the > pieces handy. > > We saw a nightly layer check fail for meta-openembedded: > > https://autobuilder.yoctoproject.org/typhoon/#/builders/121/builds/1798/steps/21/logs/stdio

Re: [OE-core] [patch] packagegroups: Add perl modules to rdeps

2023-12-27 Thread Randy MacLeod via lists.openembedded.org
Also, your subject is to vague:    [patch] packagegroups: Add perl modules to rdeps it should be something like:   [PATCH] nativesdk-packagegroup-sdk-host: Add perl modules to RDEPENDS That's 62 characters so still under the limt, iirc. It's better to be specific, since there are 27

Re: [OE-core] [patch] packagegroups: Add perl modules to rdeps

2023-12-27 Thread Randy MacLeod via lists.openembedded.org
On 2023-12-27 7:50 a.m., deepthi.hem...@windriver.com wrote: From: Deepthi Hemraj In SDK,running "x86_64-poky-linux-gp-display-html --help" fails due to missing perl modules which are required for it to work. Fixes:Can't locate feature.pm in @INC (you may need to install the feature module)

[OE-core] [PATCH] python3-lxml: upgrade 4.9.3 -> 4.9.4

2023-12-27 Thread wangmy
From: Wang Mingyu Changelog: === * LP#2046398: Inserting/replacing an ancestor into a node's children could loop indefinitely. * LP#1980767, GH#379: "TreeBuilder.close()" could fail with a "TypeError" after parsing incorrect input. * LP#1522052: A file-system specific test is now

[OE-core] [PATCH] python3-importlib-metadata: upgrade 7.0.0 -> 7.0.1

2023-12-27 Thread wangmy
From: Wang Mingyu Changelog: == -Corrected the interface for SimplePath to encompass the expectations of locate_file and PackagePath. -Fixed type annotations to allow strings. Signed-off-by: Wang Mingyu --- ...ib-metadata_7.0.0.bb => python3-importlib-metadata_7.0.1.bb} | 2 +- 1

[OE-core] [PATCH] python3-hatchling: upgrade 1.20.0 -> 1.21.0

2023-12-27 Thread wangmy
From: Wang Mingyu Changelog: Add parent context modifier for path fields Signed-off-by: Wang Mingyu --- ...{python3-hatchling_1.20.0.bb => python3-hatchling_1.21.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-hatchling_1.20.0.bb =>

[OE-core] [PATCH] python3-dbusmock: upgrade 0.30.0 -> 0.30.1

2023-12-27 Thread wangmy
From: Wang Mingyu Changelog: -bluez: Clean up static default properties, re-drop PairDevice() class_ parameter -Add pre-commit rules Signed-off-by: Wang Mingyu --- .../{python3-dbusmock_0.30.0.bb => python3-dbusmock_0.30.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1

[OE-core] [PATCH] python3-setuptools: upgrade 69.0.2 -> 69.0.3

2023-12-27 Thread wangmy
From: Wang Mingyu 0001-_distutils-sysconfig.py-make-it-possible-to-substite.patch refreshed for 69.0.3 Changelog: Retain valid names with underscores in egg_info. Signed-off-by: Wang Mingyu --- ...tutils-sysconfig.py-make-it-possible-to-substite.patch | 8 ...-setuptools_69.0.2.bb

[OE-core] [PATCH] fontconfig: upgrade 2.14.2 -> 2.15.0

2023-12-27 Thread wangmy
From: Wang Mingyu License-Update: Add FC_FONT_WRAPPER Signed-off-by: Wang Mingyu --- .../fontconfig/{fontconfig_2.14.2.bb => fontconfig_2.15.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/fontconfig/{fontconfig_2.14.2.bb => fontconfig_2.15.0.bb}

[OE-core] [PATCH] dhcpcd: upgrade 10.0.5 -> 10.0.6

2023-12-27 Thread wangmy
From: Wang Mingyu 0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch 0001-remove-INCLUDEDIR-to-prevent-build-issues.patch refreshed for 10.0.6 Changelog: == -privsep: Stop proxying stderr to console and fix some detachment issues -non-privsep: Fix launcher hangup -DHCP6: Allow

[OE-core] [PATCH] gstreamer1.0: upgrade 1.22.7 -> 1.22.8

2023-12-27 Thread wangmy
From: Wang Mingyu Signed-off-by: Wang Mingyu --- .../{gst-devtools_1.22.7.bb => gst-devtools_1.22.8.bb} | 2 +- ...streamer1.0-libav_1.22.7.bb => gstreamer1.0-libav_1.22.8.bb} | 2 +- .../{gstreamer1.0-omx_1.22.7.bb => gstreamer1.0-omx_1.22.8.bb} | 2 +- ...plugins-bad_1.22.7.bb =>

[OE-core] [PATCH] iputils: upgrade 20221126 -> 20231222

2023-12-27 Thread wangmy
From: Wang Mingyu Changelog: === - fix: Properly fix -Wpedantic warnings - fix: Set ppoll timeout minimum to 1ms #459) - fix: Revert "ping: use random value for the identifier field" to use PID again - fix: Fix support for DSCP (Traffic Class, option -Q) - fix: Fix the errno handling

[OE-core] [PATCH] aspell: upgrade 0.60.8 -> 0.60.8.1

2023-12-27 Thread wangmy
From: Wang Mingyu CVE-2019-25051.patch removed since it's included in 0.60.8.1 Changelog: -Fix memory leak in suggestion code introduced in 0.60.8. -Various documentation fixes. -Fix various warnings when compiling with -Wall. -Fix two buffer overflows found by Google's OSS-Fuzz.

[OE-core] [patch] packagegroups: Add perl modules to rdeps

2023-12-27 Thread Hemraj, Deepthi via lists.openembedded.org
From: Deepthi Hemraj In SDK,running "x86_64-poky-linux-gp-display-html --help" fails due to missing perl modules which are required for it to work. Fixes:Can't locate feature.pm in @INC (you may need to install the feature module) and also add all the perl modules to sdk. Signed-off-by:

Re: [OE-core] [PATCH] i2cdev: New recipe with i2c tools

2023-12-27 Thread Alexander Kanavin
This doesn’t seem core enough, perhaps meta-oe is a better home for the recipe? Alex On Wed 27. Dec 2023 at 14.20, Jörg Sommer via lists.openembedded.org wrote: > From: Jörg Sommer > > The main part is the tool lsi2c to scan the i2c bus, like lspci and lsusb > do. > > This recipe also ships a

[OE-core] Patchtest results for [PATCH] i2cdev: New recipe with i2c tools

2023-12-27 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/i2cdev-New-recipe-with-i2c-tools.patch FAIL: test Upstream-Status presence: Upstream-Status is Submitted, but it

[OE-core] [PATCH] i2cdev: New recipe with i2c tools

2023-12-27 Thread Jörg Sommer via lists . openembedded . org
From: Jörg Sommer The main part is the tool lsi2c to scan the i2c bus, like lspci and lsusb do. This recipe also ships a static library *libi2cdev.a*. Because this library contains the file *smbus.c* which is *GPL v2+,* and a static library can't be linked dynamically to satisfy the LGPL, the

Re: [OE-core] [PATCH V4] cairo: upgrade 1.16.0 -> 1.18.0

2023-12-27 Thread Alexandre Belloni via lists.openembedded.org
Hello, This fails on x86-64 x32: https://autobuilder.yoctoproject.org/typhoon/#/builders/57/builds/8214/steps/12/logs/stdio | ../cairo-1.18.0/meson.build:381:13: ERROR: Can not run test applications in this cross environment. | | A full log can be found at

Re: [OE-core][PATCH 1/3] systemd: upgrade to 255.1

2023-12-27 Thread Alexandre Belloni via lists.openembedded.org
We hit the added warning on the autobuilders: WARNING: systemd-1_255.1-r0 do_install: Using /home/root as root user's home directory is not fully supported by systemd https://autobuilder.yoctoproject.org/typhoon/#/builders/40/builds/8354/steps/14/logs/warnings On 27/12/2023 12:20:34+0800, Chen

Re: [OE-core][PATCH V2] dbus: upgrade to 1.15.8

2023-12-27 Thread Alexander Kanavin
Dbus 1.15.x are pre releases. The recipe specifies that via the class inherit and corresponding latest version check with devtool. Please run that first. Alex On Wed 27. Dec 2023 at 11.38, Chen Qi via lists.openembedded.org wrote: > From: Chen Qi > > License-Update: > === > The

[OE-core] pthread_cancel bug on ubuntu2004/debian11

2023-12-27 Thread Richard Purdie
I wanted to write down some thoughts on this which I have all the pieces handy. We saw a nightly layer check fail for meta-openembedded: https://autobuilder.yoctoproject.org/typhoon/#/builders/121/builds/1798/steps/21/logs/stdio INFO:

[OE-core] [nanbield][patch] rust: Fix CVE-2023-40030

2023-12-27 Thread Hemraj, Deepthi via lists.openembedded.org
From: Deepthi Hemraj CVE:CVE-2023-40030 This converts the feature name validation check from a warning to an error Upstream-Status: Backport from https://github.com/rust-lang/cargo/commit/9835622853f08be9a4b58ebe29dcec8f43b64b33 Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-40030

[OE-core][PATCH V2] dbus: upgrade to 1.15.8

2023-12-27 Thread Chen Qi via lists.openembedded.org
From: Chen Qi License-Update: === The license checksums are changed, but the license remains the same. The contents change are only about description changes, e.g., not copying the whole licenses and instead telling people to go check them. Signed-off-by: Chen Qi ---

[OE-core] Patchtest results for [PATCH v4 3/3] mesa: fix building of RustiCL + nouveau

2023-12-27 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/v4-3-3-mesa-fix-building-of-RustiCL-nouveau.patch FAIL: test Signed-off-by presence: A patch file has been added

[OE-core] [PATCH v4 2/3] mesa: add support for RustiCL under PACKAGECONFIG "opencl"

2023-12-27 Thread Dmitry Baryshkov
From: Zoltán Böszörményi Mesa now has two OpenCL implementations: Clover (older one) and RustiCL (newer one). Extend the "opencl" package config to include both implementations into the libopencl-mesa (-dev) packages. As the Clover implementation is in maintenance mode and is expected to be

[OE-core] [PATCH v4 3/3] mesa: fix building of RustiCL + nouveau

2023-12-27 Thread Dmitry Baryshkov
Incorporate a patch by Karol Herbst, fixing nouveau / libgalliumvl dependency. Signed-off-by: Dmitry Baryshkov --- .../mesa/files/fix-nouveau-vl.patch | 55 +++ meta/recipes-graphics/mesa/mesa.inc | 1 + 2 files changed, 56 insertions(+) create mode 100644

[OE-core] [PATCH v4 1/3] mesa: drop -Dopencl-native=true

2023-12-27 Thread Dmitry Baryshkov
The flag -Dopencl-native=true was dropped in Mesa 22.3, remove it from mesa.inc. Signed-off-by: Dmitry Baryshkov --- meta/recipes-graphics/mesa/mesa.inc | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/recipes-graphics/mesa/mesa.inc

[OE-core] [PATCH v4 0/3] mesa: RustiCL support

2023-12-27 Thread Dmitry Baryshkov
RustiCL is a new OpenCL implementation developed within the mesa library. It supports more drivers and more features compared to the existing Clover implementation. The Clover is supposed to fade away and to be removed in the foreseeble feature ([1]), thus it doesn't make sense to add separate

Patchtest results for [OE-core][PATCH] dbus: upgrade to 1.15.8

2023-12-27 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/dbus-upgrade-to-1.15.8.patch FAIL: test lic files chksum modified not mentioned: LIC_FILES_CHKSUM changed without

[OE-core][PATCH] dbus: upgrade to 1.15.8

2023-12-27 Thread Chen Qi via lists.openembedded.org
From: Chen Qi The license checksums are changed, but he license remains the same. Signed-off-by: Chen Qi --- .../dbus/{dbus_1.14.10.bb => dbus_1.15.8.bb} | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) rename meta/recipes-core/dbus/{dbus_1.14.10.bb =>