Re: [yocto] CVEs and OSS info for nested dependencies

2024-07-31 Thread Peter Marko via lists.yoctoproject.org
> -Original Message- > From: Steven Dorigotti > Sent: Wednesday, July 31, 2024 13:20 > To: Marko, Peter (ADV D EU SK BFS1) > Cc: yocto@lists.yoctoproject.org > Subject: Re: [yocto] CVEs and OSS info for nested dependencies > > > > On 31 Jul 2024, at 10:21, Marko, Peter wrote: > > Hel

Re: [yocto] CVEs and OSS info for nested dependencies

2024-07-31 Thread Peter Marko via lists.yoctoproject.org
This topic comes up from time to time. There was already a patch proposed for this: https://lists.openembedded.org/g/openembedded-core/topic/101991269#msg189260 https://lists.openembedded.org/g/openembedded-core/topic/102076964#msg189501 Maybe it wouldn't be that difficult to finish it, but it's p

Re: [Yocto][QA] patches : QA Issue: Missing Upstream-Status in patch

2024-07-10 Thread Peter Marko via lists.yoctoproject.org
Following distro config did the trick for me half a year ago when I started our migration to scarthgap. ERROR_QA:remove = "patch-status" WARN_QA:append = " patch-status" But I would not recommend to use it as permanent solution. Rather adapt your toolkit which backports patches to add proper upst

Re: [yocto] Issue with Installing openssh Package #systemd #yocto #kirkstone

2024-04-17 Thread Peter Marko via lists.yoctoproject.org
From: yocto@lists.yoctoproject.org On Behalf Of Nitesh D via lists.yoctoproject.org Sent: Wednesday, April 17, 2024 14:21 To: Alexander Kanavin ; yocto@lists.yoctoproject.org Subject: Re: [yocto] Issue with Installing openssh Package #systemd #yocto #kirkstone > Alex, > > Thanks for your promp

Re: [yocto] Correct way for multiple recipes to install files in the same directory

2024-04-11 Thread Peter Marko via lists.yoctoproject.org
Obvious solution is to copy chmod command to your recipe. Peter From: linusnilsson via Lists.Yoctoproject.Org Sent: Thursday, April 11, 2024 14:38 To: Marko, Peter (ADV D EU SK BFS1) ; yocto@lists.yoctoproject.org Subject: Re: [yocto] Correct way for multiple recipes to install files in the sa

Re: [yocto] Correct way for multiple recipes to install files in the same directory

2024-04-11 Thread Peter Marko via lists.yoctoproject.org
From: yocto@lists.yoctoproject.org On Behalf Of linusnilsson via lists.yoctoproject.org Sent: Thursday, April 11, 2024 9:53 To: yocto@lists.yoctoproject.org Subject: [yocto] Correct way for multiple recipes to install files in the same directory > Hi! > How/can I let multiple recipes install f

Re: [yocto] [meta-virtualization][PATCH v2] netavark: correct PV

2024-02-15 Thread Peter Marko via lists.yoctoproject.org
Gentle ping -Original Message- From: Marko, Peter (ADV D EU SK BFS1) Sent: Wednesday, January 24, 2024 22:06 To: yocto@lists.yoctoproject.org Cc: Marko, Peter (ADV D EU SK BFS1) Subject: [meta-virtualization][PATCH v2] netavark: correct PV > From: Peter Marko > > Current hash is 20 co

[yocto] [meta-virtualization][PATCH v2] netavark: correct PV

2024-01-24 Thread Peter Marko via lists.yoctoproject.org
From: Peter Marko Current hash is 20 commits after tag, so add +git to PV. Signed-off-by: Peter Marko --- .../netavark/{netavark_1.9.0.bb => netavark_git.bb} | 1 + 1 file changed, 1 insertion(+) rename recipes-containers/netavark/{netavark_1.9.0.bb => netavark_git.bb} (99%) dif

Re: [yocto] [meta-virtualization][PATCH] netavark: correct PV

2024-01-24 Thread Peter Marko via lists.yoctoproject.org
Ignore this one, I had notes on an old version. Peter -Original Message- From: yocto@lists.yoctoproject.org On Behalf Of Peter Marko via lists.yoctoproject.org Sent: Wednesday, January 24, 2024 21:15 To: yocto@lists.yoctoproject.org Cc: Marko, Peter (ADV D EU SK BFS1) Subject: [yocto

[yocto] [meta-virtualization][PATCH] netavark: correct PV

2024-01-24 Thread Peter Marko via lists.yoctoproject.org
From: Peter Marko Current hash is 10 commits after tag, so add +git to PV. Signed-off-by: Peter Marko --- .../netavark/{netavark_1.9.0.bb => netavark_git.bb} | 1 + 1 file changed, 1 insertion(+) rename recipes-containers/netavark/{netavark_1.9.0.bb => netavark_git.bb} (99%) dif

Re: [yocto] Unable to run arm 64 binary on arm64 machine

2023-11-15 Thread Peter Marko via lists.yoctoproject.org
Is /lib/ld-linux-aarch64.so.1 (interpreter listed in your file command output) installed in your system? If not, then you have to install it. How to do that depends on how you built your image. Peter From: yocto@lists.yoctoproject.org On Behalf Of MOHAMMED HASSAN via lists.yoctoproject.org Se

Re: [yocto] Yocto Project Status 07 November 2023 (WW45)

2023-11-07 Thread Peter Marko via lists.yoctoproject.org
The new website looks nice, just https://yoctoproject.org/development/releases/ is populated by: Plugin JSON Content Importer Pro not running: Check Licence! Check that a Licence is active for https://yoctoproject.org Instead of actual release data. Peter From: yocto@lists.yoctoproject.org On

[yocto] [meta-virtualization][PATCH v2] grpc-go: Upgrade 1.41.0 -> 1.59.0

2023-11-06 Thread Peter Marko via lists.yoctoproject.org
CVE: CVE-2023-44487 Bumping grpc-go to version v1.59.0, which comprises the following commits: 7765221f Change version to 1.59.0 (#6695) e88f12e0 server: prohibit more than MaxConcurrentStreams handlers from running at once (#6703) (#6704) be7919c3 transport: Pass Header metadata to

[yocto][meta-lts-mixins][kirkstone/rust-1.68] gitignore: add pyc files

2023-09-24 Thread Peter Marko via lists.yoctoproject.org
From: Peter Marko Using this mixin layer causes dirty repository after parsing due to lib/mixin/rust.py compilation. Signed-off-by: Peter Marko --- .gitignore | 1 + 1 file changed, 1 insertion(+) create mode 100644 .gitignore diff --git a/.gitignore b/.gitignore new file mode 100644 index 0

Re: [yocto] [meta-security][kirkstone][PATCH] tpm2-tss: ignore CVE-2023-22745

2023-07-29 Thread Peter Marko via lists.yoctoproject.org
Hi Armin, Gentle ping to pick this commit to kirkstone. Thanks, Peter > -Original Message- > From: yocto@lists.yoctoproject.org On Behalf > Of Peter Marko via lists.yoctoproject.org > Sent: Friday, June 30, 2023 0:10 > To: yocto@lists.yoctoproject.org > Cc: Marko,

Re: [yocto] [OE-core][PATCH] go: update 1.20.5 -> 1.20.6

2023-07-29 Thread Peter Marko via lists.yoctoproject.org
Alex, Jose, I could not find documentation how to handle mixins layer. Could you please pick this to kirkstone/go meta-lts-mixins? Or should I send a patch to yocto@lists.yoctoproject.org (or other mailing list) instead of asking for a cherry-pick? Thanks, Peter -=-=-=-=-=-=-=-=-=-=-=- Links:

[yocto] [meta-security][kirkstone][PATCH] tpm2-tss: ignore CVE-2023-22745

2023-06-29 Thread Peter Marko via lists.yoctoproject.org
From: Peter Marko As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated. Signed-off-by: Peter Marko --- meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tp

[yocto] kirkstone meta-security branch

2023-06-05 Thread Peter Marko via lists.yoctoproject.org
Hello maintainers, I'd be interested to know if meta-security repository for kirkstone is still maintained. Looking at commit history, there are only two commits since July 2022 (almost a year). The mailing lists has several contributions meanwhile (list what I could find from 2023): - tpm2-ts

Re: [yocto] [meta-security][kirkstone][PATCH v2] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-09 Thread Peter Marko via lists.yoctoproject.org
Hi Michael, Unfortunately, my corporate email server does not support me in this. I have sent you a test email after explicitly configuring this in git, but I think it won't do anything better. Last patch to yocto mailing list had to be sent by my colleague as the server has bounced it. https://

Re: [yocto] [meta-security][kirkstone][PATCH] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Peter Marko via lists.yoctoproject.org
guess master branch and 4.0.1 is not impacted. Would be nice to have > this info in commit message though. > > Cheers, > > -Mikko > > On Mon, May 08, 2023 at 03:23:34PM +0200, Peter Marko via > lists.yoctoproject.org wrote: -=-=-=-=-=-=-=-=-=-=-=- Links: You recei

[yocto] [meta-security][kirkstone][PATCH v2] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Peter Marko via lists.yoctoproject.org
Changelog: 3.2.2 A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it devi

Re: [yocto] [meta-security][PATCH] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Peter Marko via lists.yoctoproject.org
Forgot to put kirkstone prefix, so please ignore this one. Peter -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#59903): https://lists.yoctoproject.org/g/yocto/message/59903 Mute This Topic: https://lists.yoctoproject.org/mt/98760825/21656 Group Owne

[yocto] [meta-security][kirkstone][PATCH] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Peter Marko via lists.yoctoproject.org
Changelog: 3.2.2 A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it devi

[yocto] [meta-security][PATCH] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Peter Marko via lists.yoctoproject.org
Changelog: 3.2.2 A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it devi