[oe] [meta-xfce][PATCH 1/1] xfce4-panel-profiles: update remove-bashisms.patch for centos 7

2021-01-17 Thread kai
From: Kai Kang Command install is from package coreutils. And there is coreutils 8.22 on centos 7 which doesn't support options -D and -t to be used together. So create/remove the directories and files one by one. Signed-off-by: Kai Kang --- .../0001-Makefile.in.in-remove-bashisms.patch | 50 +

[oe] [meta-xfce][PATCH 0/1] Update xfce4-panel-profiles patch for centos 7

2021-01-17 Thread kai
From: Kai Kang Hi Andreas, Thank you very much to help me to create pull request in xfce4-panel-profiles git repo. But the original patch does not work with centos 7. I check the poky.conf that centos 7 is still supported by poky. So I update the patch to create/remove the directories and files

Re: [oe] [bitbake-devel] Backport changes for _PYTHON_SYSCONFIGDATA_NAME to Gatesgarth and Dunfell

2021-01-17 Thread Anuj Mittal
On Thu, 2021-01-14 at 17:50 +, Peter Kjellerstedt wrote: > I guess there may be some controversy regarding whether these changes > should > be backported to the stable branches since they modify what > python3native > does and may require existing recipes to be modified to inherit the > new

Re: [oe] [dunfell 00/28] Patch review Jan 17th

2021-01-17 Thread akuster
On 1/17/21 12:38 PM, Andreas Müller wrote: > On Sun, Jan 17, 2021 at 6:46 PM akuster wrote: >> Here is the next batch for Dunfell. Please review and have comments back by >> Wednesday. >> >> The following changes since commit f2d02cb71eaff8eb285a1997b30be52486c160ae: >> >> python3-pyinotify:

[oe] [meta-networking][PATCH] ipset: add recipe

2021-01-17 Thread akuster
This is needed for login-shield pkg in meta-security Signed-off-by: Armin Kuster --- .../recipes-filter/ipset/ipset_7.9.bb | 21 +++ 1 file changed, 21 insertions(+) create mode 100644 meta-networking/recipes-filter/ipset/ipset_7.9.bb diff --git a/meta-networking/recipe

Re: [oe] [dunfell 00/28] Patch review Jan 17th

2021-01-17 Thread Andreas Müller
On Sun, Jan 17, 2021 at 6:46 PM akuster wrote: > > Here is the next batch for Dunfell. Please review and have comments back by > Wednesday. > > The following changes since commit f2d02cb71eaff8eb285a1997b30be52486c160ae: > > python3-pyinotify: Add missing ctypes dependency (2020-11-15 11:13:25

[oe] [PATC][dunfell 0/2] graphviz fix

2021-01-17 Thread Andreas Müller
Since [1] graphviz is broken - fix it by cherry-picks | ERROR: graphviz-2.40.1-r0 do_package_qa: QA Issue: graphviz: SRC_URI uses unstable GitHub/GitLab archives, convert recipe to use git protocol [src-uri-bad] [1] https://github.com/openembedded/openembedded-core/commit/72f2c45880afbba1745e5

[oe] [PATC][dunfell 2/2] graphviz: Upgrade to 2.44.1 release

2021-01-17 Thread Andreas Müller
From: Khem Raj - Refresh patches to apply on new sources - Switch away from gitlab archives - Bypass pdf documentation generation Signed-off-by: Khem Raj --- ...t-use_tcl-to-be-empty-string-if-tcl-is-disabled.patch | 2 +- .../graphviz/graphviz/0001-Use-native-mkdefs.patch | 9 ++---

[oe] [PATC][dunfell 1/2] graphviz: Extend for nativesdk

2021-01-17 Thread Andreas Müller
From: Christian Eggers The "dot" tool is often used together with doxygen which is already available for nativesdk. Cross compiling graphviz for nativesdk looks quite similar as building for target. At installation time of the SDK, "dot -c" must be called in order to create /usr/lib/graphviz/con

[oe] [dunfell 28/28] geoclue: select avahi-daemon if nmea enabled

2021-01-17 Thread akuster
From: Chenxi Mao geoclue serivce rely on avahi-daemon, so enable it by default. Signed-off-by: Khem Raj (cherry picked from commit 9239584e717bb2093c9bfd6972bb2f01507ab859) Signed-off-by: Armin Kuster --- meta-oe/recipes-navigation/geoclue/geoclue_2.5.3.bb | 2 +- 1 file changed, 1 insertion(

[oe] [dunfell 26/28] libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer

2021-01-17 Thread akuster
From: jabdoa2 Remove --enable-music-ogg-tremor as it broke vorbis support: checking tremor/ivorbisfile.h usability... no checking tremor/ivorbisfile.h presence... no checking for tremor/ivorbisfile.h... no checking for ov_open_callbacks in -lvorbisidec... no configure: WARNING: *** Unable to fi

[oe] [dunfell 25/28] nodejs: 12.19.1 -> 12.20.1

2021-01-17 Thread akuster
From: Sean Nyekjaer Signed-off-by: Sean Nyekjaer Signed-off-by: Khem Raj (cherry picked from commit cde1019804c2f7b67bf89d178eec9f4efafea414) Signed-off-by: Armin Kuster (cherry picked from commit ac6bc96e7da6b3c9d5b9c9272b487a926fbb462e) Signed-off-by: Armin Kuster --- .../nodejs/{nodejs_12

[oe] [dunfell 20/28] nodejs: Fix build with icu 67.1

2021-01-17 Thread akuster
From: Khem Raj Remove soon-to-be removed getAllFieldPositions Signed-off-by: Khem Raj Cc: Andrej Valek (cherry picked from commit 7910f2b64575dcd3352effd441accb3b56e3554d) Signed-off-by: Armin Kuster --- .../0001-deps-V8-backport-3f8dc4b2e5ba.patch | 194 ++ .../recipes-devt

[oe] [dunfell 27/28] libsdl2-mixer: set --disable-music-ogg-shared to link statically

2021-01-17 Thread akuster
From: jabdoa2 Signed-off-by: Khem Raj (cherry picked from commit 69bae2a2360643805de2ae1cd9ebc4202cd5a2fb) Signed-off-by: Armin Kuster --- meta-oe/recipes-graphics/libsdl/libsdl2-mixer_2.0.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-graphics/libsdl/

[oe] [dunfell 24/28] nodejs: 12.19.0 -> 12.19.1

2021-01-17 Thread akuster
From: Stacy Gaikovaia Uprev nodejs in order to fix CVE-2020-8277. This CVE allows an attacker to trigger a DNS request for a host of their choice, which could trigger a Denial of Service in nodejs versions < 12.19.1. See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details. CVE: CVE-2020-

[oe] [dunfell 22/28] nodejs: Fix arm32/thumb builds with clang

2021-01-17 Thread akuster
From: Khem Raj Backport a patch from upstream to take care of build failure e.g. | ../deps/v8/src/codegen/arm/cpu-arm.cc:38:16: error: write to reserved register 'R7' | asm volatile("svc 0\n" |^ | 1 error generated. Signed-off-by: Khem Raj (cherry picked from commit 45a2dfdd

[oe] [dunfell 23/28] nodejs: Update to 12.19.0

2021-01-17 Thread akuster
From: Khem Raj This perhaps is last release in 12.x LTS Signed-off-by: Khem Raj (cherry picked from commit a10f894a8e7f800d2412fff8d47fb37d363fa322) Signed-off-by: Armin Kuster --- .../nodejs/{nodejs_12.18.3.bb => nodejs_12.19.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deleti

[oe] [dunfell 21/28] nodejs: Upgrade to 12.18.3

2021-01-17 Thread akuster
From: Khem Raj Drop already upstreamed patches use builtin uv, it does not build without it Signed-off-by: Khem Raj (cherry picked from commit bda3ee6276d76a10d2b5564da5709db4c21b8f13) Signed-off-by: Armin Kuster --- ...-passing-multiple-libs-to-pkg_config.patch | 41 .../0001-deps-V8-b

[oe] [dunfell 19/28] wireshark: Several securtiy fixes

2021-01-17 Thread akuster
From: Armin Kuster Source: Wireshark.org MR: 106181, 106696, 107655, 107673, 107682 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a Description: Bugfix only update including these cves: 3.2.8 CVE-2020-26575 CVE-2020-28030 3.2.9 CVE-

[oe] [dunfell 18/28] nss: Security fix CVE-2020-12401

2021-01-17 Thread akuster
From: Armin Kuster Source: Mozilla.org MR: 106876 Type: Security Fix Disposition: Backport from https://hg.mozilla.org/projects/nss/raw-rev/aeb2e583ee957a699d949009c7ba37af76515c20 ChangeID: a61d4926f8ab5afc54c23e58cd86b4a7609c9708 Description: Fixes CVE-2020-12401 Signed-off-by: Armin Kuster

[oe] [dunfell 17/28] lua: update to 5.3.6

2021-01-17 Thread akuster
From: Armin Kuster LIC_FILES_CHKSUM changed to do year updates This is the last 5.3.x update. This will give us the best starting point for doing Maintence moving forward. Its a bug fix only update. See http://www.lua.org/work/diffs-lua-5.3.5-lua-5.3.6.html Signed-off-by: Armin Kuster Signed

[oe] [dunfell 14/28] mariadb: update to 10.4.17 for cve fixes

2021-01-17 Thread akuster
Source: mariadb.org MR: 107836, 107837, 107838, 107839, 107840, 107852, 106414, 106414, 107864, 107876, 107888 Type: Security Fix Disposition: Backport from mariadb.org ChangeID: 75fb83ced15990b94659af6e107c063d288cb037 Description: refresh several patches Drop 0001-Fix-build-breakage-from-lock_g

[oe] [dunfell 16/28] lua: fix CVE-2020-24371

2021-01-17 Thread akuster
From: Wenlin Kang Source: openembedded.org MR: 105165 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded gatesgarth ChangeID: 747161877824daae061bc4fb458f55ab033f62f4 Description: Fix CVE-2020-24371 Signed-off-by: Wenlin Kang Signed-off-by: Khem Raj

[oe] [dunfell 15/28] lua: fix CVE-2020-15945

2021-01-17 Thread akuster
From: Wenlin Kang Source: openembedded.org MR: 104897 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded gatesgarth ChangeID: 6c43941d116bbb9f0d62ca5376da24ae03eb9eab Description: Fixes CVE-2020-15945 Backport with modifications to apply successfully.

[oe] [dunfell 09/28] php: Upgrade 7.4.4 -> 7.4.9

2021-01-17 Thread akuster
From: Leon Anavi Upgrade to release 7.4.9: - Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time to return usec - Fixed: BSTR to PHP string conversion not binary safe - Fixed: DCOM does not work with Username, Password parameter - Fixed: serialize() and unserialize() methods can n

[oe] [dunfell 13/28] apache2: upgrade v2.4.43 -> v2.4.46

2021-01-17 Thread akuster
From: Sakib Sajal Source: meta-openembedded.org MR: 105034, 105034, 105124 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded/commit/meta-webserver/recipes-httpd/apache2?h=gatesgarth&id=fc995b3cfed86850ce5ab1b70da1e31560ac350f ChangeID: 37b9f376c5e4b9a93

[oe] [dunfell 12/28] php: CVE-2020-7069

2021-01-17 Thread akuster
From: Zheng Ruoqin Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit fa80193468745a11bc12d5

[oe] [dunfell 11/28] php: CVE-2020-7070

2021-01-17 Thread akuster
From: Zheng Ruoqin Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin Signed-off-by: Khe

[oe] [dunfell 10/28] php: remove the failing ${D}/${TMPDIR} code

2021-01-17 Thread akuster
From: Max Kellermann Appending ${TMPDIR} to ${D} doesn't make any sense, because both are absolute paths. And additionally, the code fails: rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty Signed-off-by: Max Kellermann

[oe] [dunfell 05/28] mcpp: Normalize the patch format of CVE

2021-01-17 Thread akuster
From: Zang Ruochen Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem. Signed-off-by: Zang Ruochen Signed-off-by: Khem Raj (cherry picked from com

[oe] [dunfell 06/28] zabbix: CVE-2020-15803 Security Advisory

2021-01-17 Thread akuster
From: Wang Mingyu References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit d259144422bb44af9dbc7397fc4077d0bf3fc83f) Signed-off-by: Armin Kuster (cherry picked from commit d9911b087c83e0c73fbe7eeb497

[oe] [dunfell 04/28] wireguard-module: fix build issue with 5.4 kernel

2021-01-17 Thread akuster
/tmp/work/qemux86_64-poky-linux/wireguard-module/1.0.20200401-r0/git/src/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined |44 | #define SYM_FUNC_START ENTRY | | | In file included from /tmp/work/qemux86_64-poky-linux/wireguard-module/1.0.20200401-r0/git/src/compat/compat-as

[oe] [dunfell 08/28] samba: CVE-2020-14383 Security Advisory

2021-01-17 Thread akuster
From: Zheng Ruoqin References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit baee1ebeafce5d6a99dafc30b91e6fb760197686) Signed-off-by: Armin Kuster (cherry picked from commit 81d14a86353829eba1d55a93d

[oe] [dunfell 01/28] tcpdump: Patch for CVE-2020-8037

2021-01-17 Thread akuster
From: viatsk Signed-off-by: Stacy Gaikovaia Signed-off-by: Khem Raj Signed-off-by: Armin Kuster --- ...ping-don-t-allocate-a-too-large-buff.patch | 70 +++ .../recipes-support/tcpdump/tcpdump_4.9.3.bb | 1 + 2 files changed, 71 insertions(+) create mode 100644 meta-network

[oe] [dunfell 02/28] dlt-daemon: add upstream patch to fix CVE-2020-29394

2021-01-17 Thread akuster
From: Gianfranco More information on: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976228 | A buffer overflow in the dlt_filter_load function in dlt_common.c in | dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary | code execution because fscanf is misused (no limit on the n

[oe] [dunfell 07/28] samba: CVE-2020-14318 Security Advisory

2021-01-17 Thread akuster
From: Zheng Ruoqin References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 1d44b4c03d51e91ce01cf5fd0b33155ce36f1862) Signed-off-by: Armin Kuster (cherry picked from commit 38beb6fe98894ffaf82a05ccf

[oe] [dunfell 03/28] pcsc-lite: provide pcsc-lite-lib-native explicitly for native build

2021-01-17 Thread akuster
From: Roland Hieber Commits e2180b00b3b8fcf776c3 and 8edd760e66b48e411d2a added support for native builds for the opensc and pcsc-lite recipes, but building opensc-native fails after commit 40b3a5123120da0e4586 (2019-12-04, "opensc: fix RDEPENDS in pcsc PACKAGECONFIG"): ERROR: Required build

[oe] [dunfell 00/28] Patch review Jan 17th

2021-01-17 Thread akuster
Here is the next batch for Dunfell. Please review and have comments back by Wednesday. The following changes since commit f2d02cb71eaff8eb285a1997b30be52486c160ae: python3-pyinotify: Add missing ctypes dependency (2020-11-15 11:13:25 -0800) are available in the Git repository at: git://git

[oe] [gatesgarth 30/31] gupnp: Upgrade to 1.2.2 -> 1.2.4

2021-01-17 Thread akuster
From: Diego Santa Cruz gupnp 1.2.3 adds mitigation for CVE-2020-12695 (CallStranger) Signed-off-by: Diego Santa Cruz Signed-off-by: Armin Kuster --- .../gupnp/{gupnp_1.2.2.bb => gupnp_1.2.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-multimedia/

[oe] [gatesgarth 31/31] fuse: set CVE_PRODUCT to "fuse_project:fuse"

2021-01-17 Thread akuster
From: Mikko Rapeli Other products like "RedHat:fuse" introduce false CVE findings like: https://nvd.nist.gov/vuln/detail/CVE-2018-10906 https://nvd.nist.gov/vuln/detail/CVE-2019-14860 https://nvd.nist.gov/vuln/detail/CVE-2020-25689 Signed-off-by: Mikko Rapeli Signed-off-by: Armin Kuster ---

[oe] [gatesgarth 29/31] gssdp: Upgrade to 1.2.2 -> 1.2.3

2021-01-17 Thread akuster
From: Diego Santa Cruz Dependency of gupnp 1.2.3 Signed-off-by: Diego Santa Cruz Signed-off-by: Armin Kuster --- .../gupnp/{gssdp_1.2.2.bb => gssdp_1.2.3.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-multimedia/recipes-connectivity/gupnp/{gssdp_1.

[oe] [gatesgarth 24/31] lmbench: Fix setting LDLIBS failure

2021-01-17 Thread akuster
From: He Zhe scripts/build is interpreted as an sh script which may not recognize variable assignment operator += and thus give the following error and fail to append LDLIBS. ../scripts/build: 21: ../scripts/build: LDLIBS+=-lm: not found Use the basic assignment instead. Signed-off-by: He Zhe

[oe] [gatesgarth 20/31] nanopb: move to dynamic-layers

2021-01-17 Thread akuster
From: Martin Jansa * depends on python3-protobuf from meta-python: * fixes: ERROR: Nothing RPROVIDES 'python3-protobuf' (but meta-oe/recipes-devtools/nanopb/nanopb_0.4.3.bb RDEPENDS on or otherwise requires it) NOTE: Runtime target 'python3-protobuf' is unbuildable, removing... Missing or

[oe] [gatesgarth 28/31] libsdl2-mixer: set --disable-music-ogg-shared to link statically

2021-01-17 Thread akuster
From: jabdoa2 Signed-off-by: Khem Raj (cherry picked from commit 69bae2a2360643805de2ae1cd9ebc4202cd5a2fb) Signed-off-by: Armin Kuster --- meta-oe/recipes-graphics/libsdl/libsdl2-mixer_2.0.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-graphics/libsdl/

[oe] [gatesgarth 27/31] libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer

2021-01-17 Thread akuster
From: jabdoa2 Remove --enable-music-ogg-tremor as it broke vorbis support: checking tremor/ivorbisfile.h usability... no checking tremor/ivorbisfile.h presence... no checking for tremor/ivorbisfile.h... no checking for ov_open_callbacks in -lvorbisidec... no configure: WARNING: *** Unable to fi

[oe] [gatesgarth 26/31] nodejs: 12.19.1 -> 12.20.1

2021-01-17 Thread akuster
From: Sean Nyekjaer Signed-off-by: Sean Nyekjaer Signed-off-by: Khem Raj (cherry picked from commit cde1019804c2f7b67bf89d178eec9f4efafea414) Signed-off-by: Armin Kuster --- .../nodejs/{nodejs_12.19.1.bb => nodejs_12.20.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

[oe] [gatesgarth 25/31] wireshark: Several securtiy fixes

2021-01-17 Thread akuster
From: Armin Kuster Source: Wireshark.org MR: 106181, 106696, 107655, 107673, 107682 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a Description: Bugfix only update including these cves: 3.2.8 CVE-2020-26575 CVE-2020-28030 3.2.9 CVE-

[oe] [gatesgarth 23/31] tclap: fix branch

2021-01-17 Thread akuster
From: Chen Qi Upstream has deleted the 'master' branch, so use the 1.2 branch. Signed-off-by: Chen Qi Signed-off-by: Khem Raj (cherry picked from commit 583fbb4775a960391cb62d55164b91570a70921a) Signed-off-by: Armin Kuster --- meta-oe/recipes-devtools/tclap/tclap_1.2.2.bb | 2 +- 1 file chan

[oe] [gatesgarth 22/31] tclap: align version to tag v1.2.2

2021-01-17 Thread akuster
From: Chencheng Zhang This is to update the tclap v1.2.2 with several bug fixes. See: https://sourceforge.net/p/tclap/bugs/23/ Signed-off-by: Chencheng Zhang Signed-off-by: Khem Raj (cherry picked from commit f03ad4971ed0b7cf34550a90ee3c0fa18f964533) Signed-off-by: Armin Kuster --- meta-oe/r

[oe] [gatesgarth 21/31] postgresql: Use /dev/urandom when openssl is not used

2021-01-17 Thread akuster
From: Khem Raj Signed-off-by: Khem Raj (cherry picked from commit db3aab1e47268ae8e919e0b94c2021139031f76e) Signed-off-by: Armin Kuster --- meta-oe/recipes-dbs/postgresql/postgresql.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-dbs/postgresql/postgresq

[oe] [gatesgarth 19/31] spdlog: Fix recipe so other recipes can use spdlog with external fmt.

2021-01-17 Thread akuster
From: Philip Balister * I enabled the shared library option to eliminate linker issues with a package that used spdlog. * Edited the tweak.h file so programs use the external fmt library headers, not the oners in spdlog. Signed-off-by: Philip Balister Signed-off-by: Khem Raj (cherry pic

[oe] [gatesgarth 17/31] sdbus-c++-libsystemd: Fix reallocarray check in meson

2021-01-17 Thread akuster
From: Khem Raj Signed-off-by: Khem Raj (cherry picked from commit 4a171790a66c6adb5bf0994c9b2c85a1ea0b8ce8) Signed-off-by: Armin Kuster --- .../0001-meson-Fix-reallocarray-check.patch | 25 +++ .../sdbus-c++/sdbus-c++-libsystemd_243.bb | 1 + 2 files changed, 26 insertio

[oe] [gatesgarth 18/31] networkmanager: Fix reallocarray check in meson and configure

2021-01-17 Thread akuster
From: Khem Raj Signed-off-by: Khem Raj (cherry picked from commit 62c2f4a48a244ead00d4b32f42b10f52441afc1c) Signed-off-by: Armin Kuster --- .../fix_reallocarray_check.patch | 27 +++ .../networkmanager/networkmanager_1.22.14.bb | 1 + 2 files changed, 28 insertio

[oe] [gatesgarth 16/31] pidgin-sipe: Do not add native libdir to pkgconfig search path

2021-01-17 Thread akuster
From: Khem Raj This works fine until valgrind is installed on build host but its not selected as option to build in recipe, configure wrongly pokes at /usr/lib and sees valgrind there and enables it but only to fail in compile time where it does not find valgrind.h in recipe sysroot, since OE's b

[oe] [gatesgarth 14/31] openct: use upstream SRC_URI

2021-01-17 Thread akuster
From: Roland Hieber The Debian pool URLs are not permanent, and the package is no longer included in any active Debian release. It is also not available through any of the default Debian snapshot mirrors. Instead of adding a new Debian snapshot mirror, use the upstream URL directly. Signed-off-b

[oe] [gatesgarth 15/31] colord: fix installed-vs-shipped error

2021-01-17 Thread akuster
From: Kai Kang When multilib is enabled, tmpfiles.d is created in /usr/lib rather than ${libdir} which is /usr/lib64. It causes installed-vs-shipped error: | ERROR: colord-1.4.4-r0 do_package: QA Issue: colord: Files/directories were installed but not shipped in any package: | /usr/li

[oe] [gatesgarth 11/31] python3-aiohttp: added missing RDEPENDs

2021-01-17 Thread akuster
From: Vyacheslav Yurkov aiohttp implicitly RDEPENDs on html, json, and socketserver modules, which are part of python3 recipe. They can't be properly imported if they are missing from RDEPENDS Signed-off-by: Vyacheslav Yurkov Acked-by: Trevor Gamblin Signed-off-by: Khem Raj (cherry picked fro

[oe] [gatesgarth 13/31] fbset: use DEBIAN_MIRROR in SRC_URI

2021-01-17 Thread akuster
From: Roland Hieber Signed-off-by: Roland Hieber Signed-off-by: Khem Raj (cherry picked from commit 155e7d6b3d5a43594006aff2050fd23a110b9cdb) Signed-off-by: Armin Kuster --- meta-oe/recipes-support/fbset/fbset_2.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/

[oe] [gatesgarth 09/31] ebtables: do not install /etc/ethertypes

2021-01-17 Thread akuster
From: Yi Zhao The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7

[oe] [gatesgarth 12/31] liboop: use upstream SRC_URI

2021-01-17 Thread akuster
From: Roland Hieber The Debian pool URLs are not permanent and the package might vanish as soon as the version is no longer part of any Debian release. Use the upstream URL directly. Signed-off-by: Roland Hieber Signed-off-by: Khem Raj (cherry picked from commit 2e1a32a474b8600b56e4d7e24349671

[oe] [gatesgarth 10/31] lockfile-progs: use DEBIAN_MIRROR in SRC_URI

2021-01-17 Thread akuster
From: Roland Hieber Signed-off-by: Roland Hieber Signed-off-by: Khem Raj (cherry picked from commit 7b8efbbd0f22d1871cfe2e90adec6aa9f5e9483d) Signed-off-by: Armin Kuster --- .../recipes-extended/lockfile-progs/lockfile-progs_0.1.18.bb| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[oe] [gatesgarth 08/31] multipath-tools: fix error handling for udev_monitor_set_receive_buffer_size

2021-01-17 Thread akuster
From: Joe Slater Since systemd v246.5[1], udev_monitor_set_receive_buffer_size() will return 0 or 1 if successful. We only need to check a negative value for the failure. [1] https://github.com/systemd/systemd-stable/commit/4dcae666889ae9469e4406c0bcaffadbc01c4f66 https://github.com/system

[oe] [gatesgarth 05/31] php: CVE-2020-7070

2021-01-17 Thread akuster
From: Zheng Ruoqin Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin Signed-off-by: Khe

[oe] [gatesgarth 03/31] samba: CVE-2020-14318 Security Advisory

2021-01-17 Thread akuster
From: Zheng Ruoqin References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 1d44b4c03d51e91ce01cf5fd0b33155ce36f1862) Signed-off-by: Armin Kuster --- .../samba/samba/CVE-2020-14318.patch |

[oe] [gatesgarth 07/31] nodejs: 12.19.0 -> 12.19.1

2021-01-17 Thread akuster
From: Stacy Gaikovaia Uprev nodejs in order to fix CVE-2020-8277. This CVE allows an attacker to trigger a DNS request for a host of their choice, which could trigger a Denial of Service in nodejs versions < 12.19.1. See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details. CVE: CVE-2020-

[oe] [gatesgarth 06/31] php: CVE-2020-7069

2021-01-17 Thread akuster
From: Zheng Ruoqin Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit fa80193468745a11bc12d5

[oe] [gatesgarth 02/31] zabbix: CVE-2020-15803 Security Advisory

2021-01-17 Thread akuster
From: Wang Mingyu References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit d259144422bb44af9dbc7397fc4077d0bf3fc83f) Signed-off-by: Armin Kuster --- .../zabbix/zabbix/CVE-2020-15803.patch| 3

[oe] [gatesgarth 04/31] samba: CVE-2020-14383 Security Advisory

2021-01-17 Thread akuster
From: Zheng Ruoqin References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit baee1ebeafce5d6a99dafc30b91e6fb760197686) Signed-off-by: Armin Kuster --- .../samba/samba/CVE-2020-14383.patch |

[oe] [gatesgarth 01/31] mcpp: Normalize the patch format of CVE

2021-01-17 Thread akuster
From: Zang Ruochen Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem. Signed-off-by: Zang Ruochen Signed-off-by: Khem Raj (cherry picked from com

[oe] [gatesgarth 00/31] Patch Review

2021-01-17 Thread akuster
Please review and have comments back by Tuesday. Some of this are in master-next and will be merge once in master. The following changes since commit dba54c19f806b0cc9fed3f8557654a83b0c3a76c: Revert "gnome-calendar: update to 3.38.1, add libhandy 1.x support" (2020-12-20 08:49:12 -0800) are a