[oe-core][PATCH] ell: update 0.61 -> 0.62

2024-02-18 Thread Markus Volk
ver 0.62: Add support for cleanup functions and macros. Add support for setting DHCP max attempts. Signed-off-by: Markus Volk --- meta/recipes-core/ell/{ell_0.61.bb => ell_0.62.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/ell/{ell_0.61.bb

Re: [OE-core] [PATCH 7/9] swig: upgrade 4.1.1 -> 4.2.0

2024-02-18 Thread Khem Raj
On Sun, Feb 18, 2024 at 6:51 PM Mittal, Anuj wrote: > On Sat, 2024-02-17 at 19:01 -0800, Khem Raj wrote: > > here is one failure due to this upgrade - > > https://errors.yoctoproject.org/Errors/Details/753587/ > > Thanks for checking. This project and its dependencies that are giving > error

Re: [OE-core] [PATCH 7/9] swig: upgrade 4.1.1 -> 4.2.0

2024-02-18 Thread Anuj Mittal
On Sat, 2024-02-17 at 19:01 -0800, Khem Raj wrote: > here is one failure due to this upgrade - > https://errors.yoctoproject.org/Errors/Details/753587/ Thanks for checking. This project and its dependencies that are giving error aren't maintained any more.

Re: [OE-core] systemd-firstboot not triggered on read/write /etc folder

2024-02-18 Thread Chen Qi via lists.openembedded.org
Does adding 'stateless-rootfs' to IMAGE_FEATURES work for you? meta/classes-recipe/image.bbclass:IMAGE_PREPROCESS_COMMAND:append = " ${@ 'systemd_preset_all systemd_disable_units' if bb.utils.contains('DISTRO_FEATURES', 'systemd', True, False, d) and not bb.utils.contains('IMAGE_FEATURES',

Re: [OE-core] [qa-build-notification] QA notification for completed autobuilder build (yocto-4.3.3.rc1)

2024-02-18 Thread Jing Hui Tham
Hi all, Intel and WR YP QA is planning for QA execution for YP build yocto-4.3.3.rc1. We are planning to execute following tests for this cycle: OEQA-manual tests for following module: 1. OE-Core 2. BSP-hw Runtime auto test for following platforms: 1. MinnowBoard Turbot - 32bit

[OE-core] Patchtest results for [PATCHv2 4/5] patch.bbclass: Make use of oe.patch.GitApplyTree.commitIgnored()

2024-02-18 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/PATCHv2-4-5-patch.bbclass-Make-use-of-oe.patch.GitApplyTree.commitIgnored.patch FAIL: test max line length: Patch

[OE-core] [PATCH] useradd.bbclass: Fix missing space when appending vardeps.

2024-02-18 Thread Siong W.LIM
Missing space character when appending vardeps for populate sysroot causes USERADD_PARAM:%s and another variable to be concatenated into one word, consequently both variables are not valid for vardeps. Signed-off-by: Siong --- meta/classes/useradd.bbclass | 2 +- 1 file changed, 1 insertion(+),

[OE-core] [PATCHv2 5/5] lib/oe/patch: Use git notes to store the filenames for the patches

2024-02-18 Thread Peter Kjellerstedt
The old way of keeping track of the filenames for the patches that correspond to the commits was to add a special comment line to the end of the commit message, e.g., "%% original patch: ", using a temporary git hook. This method had some drawbacks, e.g.: * It caused problems if one wanted to

[OE-core] [PATCHv2 2/5] lib/oe/patch: Add GitApplyTree.commitIgnored()

2024-02-18 Thread Peter Kjellerstedt
This function can be used to create a commit that devtool will ignore when creating/updating the patches. Signed-off-by: Peter Kjellerstedt --- PATCHv2: No changes. meta/lib/oe/patch.py | 10 ++ 1 file changed, 10 insertions(+) diff --git a/meta/lib/oe/patch.py b/meta/lib/oe/patch.py

[OE-core] [PATCHv2 4/5] patch.bbclass: Make use of oe.patch.GitApplyTree.commitIgnored()

2024-02-18 Thread Peter Kjellerstedt
This makes use of the oe.patch.GitApplyTree.commitIgnored() function to create commits that shall be ignored by `devtool finish`. Signed-off-by: Peter Kjellerstedt --- PATCHv2: No changes. meta/classes-global/patch.bbclass | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git

[OE-core] [PATCHv2 1/5] lib/oe/patch: Make extractPatches() not extract ignored commits

2024-02-18 Thread Peter Kjellerstedt
If a commit is marked with "%% ignore" it means it is used by devtool to keep track of changes to the source code that are not the result of running do_patch(). These changes need to actually be ignored when extracting the patches as they typically make no sense as actual patches in a recipe.

[OE-core] [PATCHv2 3/5] devtool: Make use of oe.patch.GitApplyTree.commitIgnored()

2024-02-18 Thread Peter Kjellerstedt
This makes use of the oe.patch.GitApplyTree.commitIgnored() function to create commits that shall be ignored by `devtool finish`. Signed-off-by: Peter Kjellerstedt --- PATCHv2: No changes. scripts/lib/devtool/__init__.py | 4 +--- scripts/lib/devtool/standard.py | 6 +- 2 files changed, 2

[OE-core] [PATCH] meta: Update CVE_STATUS for incorrect cpes

2024-02-18 Thread Simone Weiß
From: Simone Weiß Set CVE_STATUS as none of the issues apply against the versions used in the recipes. Signed-off-by: Simone Weiß --- meta/recipes-bsp/grub/grub2.inc | 2 ++ meta/recipes-devtools/binutils/binutils-2.42.inc | 2 ++

Re: [OE-core] [PATCH 7/7] lib/oe/patch: Use git notes to store the filenames for the patches

2024-02-18 Thread Peter Kjellerstedt
> -Original Message- > From: Richard Purdie > Sent: den 17 februari 2024 13:34 > To: Peter Kjellerstedt ; openembedded- > c...@lists.openembedded.org > Subject: Re: [OE-core] [PATCH 7/7] lib/oe/patch: Use git notes to store > the filenames for the patches > > On Fri, 2024-02-16 at 19:59

Re: [OE-core] [PATCH V4] systemd: fix a dead link under /var/log

2024-02-18 Thread Peter Kjellerstedt
> -Original Message- > From: openembedded-core@lists.openembedded.org > On Behalf Of Changqing Li > Sent: den 18 februari 2024 06:41 > To: openembedded-core@lists.openembedded.org > Subject: [OE-core] [PATCH V4] systemd: fix a dead link under /var/log > > From: Changqing Li > > Commit

[OE-core][PATCH] sstatesig: Implement new siggen API

2024-02-18 Thread Joshua Watt
Implements the new API required for querying unihashes in parallel Signed-off-by: Joshua Watt --- meta/lib/oe/sstatesig.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/meta/lib/oe/sstatesig.py b/meta/lib/oe/sstatesig.py index 1b4380f21bc..aa891ecf0a0 100644 ---

[OE-core] [dunfell][kirkstone][nanbield][PATCH] vim: upgrade v9.0.2130 -> v9.0.2190

2024-02-18 Thread Tim Orling
This is the latest/last of the 9.0.z upgrades, since 9.1 is now released. CVE: CVE-2024-22667 (includes the patch for .2142 https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47) Changes: https://github.com/vim/vim/compare/v9.0.2130...v9.0.2190 Signed-off-by: Tim Orling

[OE-core] Patchtest results for [PATCH] useradd.bbclass: Fix missing space when appending vardeps.

2024-02-18 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/useradd.bbclass-Fix-missing-space-when-appending-vardeps..patch FAIL: test commit message presence: Please include

[OE-core] [PATCH] useradd.bbclass: Fix missing space when appending vardeps.

2024-02-18 Thread Siong W.LIM
Signed-off-by: Siong --- meta/classes/useradd.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/useradd.bbclass b/meta/classes/useradd.bbclass index a58f8287c9..f0ec080920 100644 --- a/meta/classes/useradd.bbclass +++ b/meta/classes/useradd.bbclass @@

[OE-core] [PATCH v2] qemu: Set CVE_STATUS for wrong CVEs

2024-02-18 Thread Simone Weiß
From: Simone Weiß All are already fixed in 8.2.1, NVD was informed that cpes are wrong. Signed-off-by: Simone Weiß --- meta/recipes-devtools/qemu/qemu.inc | 6 ++ 1 file changed, 6 insertions(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index

Re: [OE-core] [PATCH] qemu: Set CVE_STATUS for wrong CVEs

2024-02-18 Thread Simone Weiß
On Sun, 2024-02-18 at 17:42 +, Richard Purdie wrote: > On Sun, 2024-02-18 at 16:52 +, Simone Weiß wrote: > > From: Simone Weiß > > > > All are already fixed in 8.2.1, NVD was informed that cpes are wrong. > > > > Signed-off-by: Simone Weiß > > --- > >  

Patchtest results for [oe-core][PATCH] wayland-protocols: update 1.32 -> 1.33

2024-02-18 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/wayland-protocols-update-1.32---1.33.patch FAIL: test commit message presence: Please include a commit message on

[oe-core][PATCH] wayland-protocols: update 1.32 -> 1.33

2024-02-18 Thread Markus Volk
Signed-off-by: Markus Volk --- .../{wayland-protocols_1.32.bb => wayland-protocols_1.33.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/wayland/{wayland-protocols_1.32.bb => wayland-protocols_1.33.bb} (91%) diff --git

[OE-core] [PATCH] libuv: Upgrade 1.47.0 -> 1.48.0

2024-02-18 Thread Simone Weiß
From: Simone Weiß Upgrade libuv to pull in the fix for CVE-2024-24806 Changes: * misc: remove deprecated stalebot file (Jameson Nash) * build: disable windows asan buildbot (Ben Noordhuis) * test: don't run tcp_writealot under msan (Ben Noordhuis) * build,win: remove extraneous -lshell32 (Ben

Re: [OE-core] [PATCH] qemu: Set CVE_STATUS for wrong CVEs

2024-02-18 Thread Richard Purdie
On Sun, 2024-02-18 at 16:52 +, Simone Weiß wrote: > From: Simone Weiß > > All are already fixed in 8.2.1, NVD was informed that cpes are wrong. > > Signed-off-by: Simone Weiß > --- >  meta/recipes-devtools/qemu/qemu.inc | 6 ++ >  1 file changed, 6 insertions(+) > > diff --git

Re: [OE-core] [PATCH] vim: upgrade 9.0.2130 -> 9.0.2142

2024-02-18 Thread Tim Orling
On Sun, Feb 18, 2024 at 7:49 AM Simone Weiß wrote: > On Sun, 2024-02-18 at 07:01 -0800, Tim Orling wrote: > > > > On Sun, Feb 18, 2024 at 4:33 AM Simone Weiß > wrote: > > From: Simone Weiß > > Changes: > https://github.com/vim/vim/compare/v9.0.2130...v9.0.2142 > > This fixes CVE-2024-22667 > >

[OE-core] [PATCH] vim: upgrade from 9.0.2130 -> 9.1.0114

2024-02-18 Thread Tim Orling
https://www.vim.org/vim-9.1-released.php Vim 9.1 is available The Vim project is happy to announce that Vim 9.1 has finally been released. This release is dedicated to Bram Moolenaar, Vim's lead developer for more than 30 years, who passed away half a year ago. The Vim project wouldn't exist

[OE-core] [PATCH] qemu: Set CVE_STATUS for wrong CVEs

2024-02-18 Thread Simone Weiß
From: Simone Weiß All are already fixed in 8.2.1, NVD was informed that cpes are wrong. Signed-off-by: Simone Weiß --- meta/recipes-devtools/qemu/qemu.inc | 6 ++ 1 file changed, 6 insertions(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index

Re: [OE-core] OE-core CVE metrics for master on Sun 18 Feb 2024 01:00:01 AM HST

2024-02-18 Thread Simone Weiß
Hi, This time we have some real new issues, mostly we need to upgrade some recipes. For wrong entries NVD was now multiple times pinged. I'll set the CVE_STATUS now, but ping them again anyhow. On Sun, 2024-02-18 at 01:18 -1000, Steve Sakoman wrote: > Branch: master > > New this week: 13 CVEs

Re: [OE-core] [PATCH] vim: upgrade 9.0.2130 -> 9.0.2142

2024-02-18 Thread Simone Weiß
On Sun, 2024-02-18 at 07:01 -0800, Tim Orling wrote: > > > On Sun, Feb 18, 2024 at 4:33 AM Simone Weiß > wrote: > > From: Simone Weiß > > > > Changes: > > https://github.com/vim/vim/compare/v9.0.2130...v9.0.2142 > > > > This fixes CVE-2024-22667 > > > > Signed-off-by: Simone Weiß > > --- >

[OE-core] [PATCH 1/2] libgit2: update 1.7.1 -> 1.7.2

2024-02-18 Thread Simone Weiß
From: Simone Weiß Update libgit2 to pull in securtiy fixes. Changelog summary: - A bug in git_revparse_single is fixed that could cause a Denial of Service attack. This fixes CVE-2024-24575 - A bug in git_index_add is fixed that could lead to arbitrary code execution. This fixes

[OE-core] [PATCH] oeqa/selftest/rust: Exclude failing riscv tests

2024-02-18 Thread Richard Purdie
The rust tests nearly pass for qemurisv64, add the remaining ones to the exclusion list so it matches everythig else in exlcuding all the know to break cases. Signed-off-by: Richard Purdie --- meta/lib/oeqa/selftest/cases/rust.py | 3 +++ 1 file changed, 3 insertions(+) diff --git

Re: [OE-core] [RFC 5/7] lib/oe/buildcfg.py: Add additional git functions

2024-02-18 Thread Martin Jansa
Was there a reason why this wasn't merged in the end (other than being sent as RFC)? We're using git describe in webOS for long time (through our bbclass: https://github.com/webosose/meta-webosose/blob/master/meta-webos/classes/webos_base.bbclass#L114 ) I would be happy to drop it from our

Re: [OE-core] [PATCH] vim: upgrade 9.0.2130 -> 9.0.2142

2024-02-18 Thread Tim Orling
On Sun, Feb 18, 2024 at 4:33 AM Simone Weiß wrote: > From: Simone Weiß > > Changes: > https://github.com/vim/vim/compare/v9.0.2130...v9.0.2142 > > This fixes CVE-2024-22667 > > Signed-off-by: Simone Weiß > --- > meta/recipes-support/vim/vim.inc | 2 +- > 1 file changed, 1 insertion(+), 1

[OE-core] OE-core CVE metrics for nanbield on Sun 18 Feb 2024 04:00:01 AM HST

2024-02-18 Thread Steve Sakoman
Branch: nanbield New this week: 13 CVEs CVE-2023-6240 (CVSS3: 6.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6240 * CVE-2023-6356 (CVSS3: 7.5 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6356 * CVE-2023-6535 (CVSS3: 7.5 HIGH):

[OE-core] OE-core CVE metrics for kirkstone on Sun 18 Feb 2024 03:00:01 AM HST

2024-02-18 Thread Steve Sakoman
Branch: kirkstone New this week: 5 CVEs CVE-2023-0687 (CVSS3: 9.8 CRITICAL): glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-0687 * CVE-2023-7216 (CVSS3: 8.8 HIGH): cpio https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-7216 * CVE-2024-1048 (CVSS3: 3.3 LOW):

[OE-core] [PATCH] vim: upgrade 9.0.2130 -> 9.0.2142

2024-02-18 Thread Simone Weiß
From: Simone Weiß Changes: https://github.com/vim/vim/compare/v9.0.2130...v9.0.2142 This fixes CVE-2024-22667 Signed-off-by: Simone Weiß --- meta/recipes-support/vim/vim.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/vim/vim.inc

[OE-core] OE-core CVE metrics for dunfell on Sun 18 Feb 2024 02:00:01 AM HST

2024-02-18 Thread Steve Sakoman
Branch: dunfell New this week: 4 CVEs CVE-2023-7216 (CVSS3: 8.8 HIGH): cpio https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-7216 * CVE-2024-1048 (CVSS3: 3.3 LOW): grub:grub-efi:grub-efi-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-1048 * CVE-2024-22667 (CVSS3: 7.8

[OE-core] [PATCH] grub2: ignore CVE-2024-1048, Redhat only issue

2024-02-18 Thread Simone Weiß
From: Simone Weiß Redhat/Fedora specific as it affects the grub2-set-bootflag extension added by Redhat to grub. Signed-off-by: Simone Weiß --- meta/recipes-bsp/grub/grub2.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc

[OE-core] OE-core CVE metrics for master on Sun 18 Feb 2024 01:00:01 AM HST

2024-02-18 Thread Steve Sakoman
Branch: master New this week: 13 CVEs CVE-2023-6240 (CVSS3: 6.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6240 * CVE-2023-6356 (CVSS3: 7.5 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6356 * CVE-2023-6535 (CVSS3: 7.5 HIGH):

[OE-core] Patchtest results for systemd-firstboot not triggered on read/write /etc folder

2024-02-18 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/systemd-firstboot-not-triggered-on-read-write-etc-folder.patch FAIL: test Signed-off-by presence: Mbox is missing

[OE-core] systemd-firstboot not triggered on read/write /etc folder

2024-02-18 Thread dave . elek . 96
Hi! In the systemd-systemctl there is a *systemctl* script used for some configuration/settings for the systemd services (e.g. enabling services). In this script if we call the *preset_all* command, it will create an empty /etc/machine-id file. This is required on read-only /etc folder,