summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* squashfs-tools: disable LZO by defaultRoss Burton2022-05-291-1/+1
| | | | | | | | | | LZO is a fairly obsolete compression format these days, so disable it by default. (From OE-Core rev: 374756be0e332f625ebf8267a7d2216d9189a4d8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libarchive: disable LZO by defaultRoss Burton2022-05-291-1/+1
| | | | | | | | | | LZO is a fairly obsolete compression format these days, so disable it by default. (From OE-Core rev: d5a484a01caebc71ddc98d04954199c3f4642c77) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: Mark CVE-2022-29824 as not applyingRichard Purdie2022-05-281-0/+4
| | | | | | | | | We have libxml2 2.9.14 and we don't link statically against libxml2 anyway so the CVE doesn't apply to libxslt. (From OE-Core rev: c6315d8a2a1429a0fb7563b1d6352ceee7bc222c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: Add jbig PACKAGECONFIG and clarify CVE-2022-1210Richard Purdie2022-05-281-0/+4
| | | | | | | | | | | | We never depended upon libjbig so this was never present. Add the PACKAGECONFIG to make this explict. CVE-2022-1210 is an issue in libjbig so we don't have a problem there, mark as such. (From OE-Core rev: 34e6a19f2430ee2fd0fec4bec1891e898a0d9766) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 8.2.4912 -> 8.2.5034 to fix 9 CVEsRichard Purdie2022-05-281-2/+2
| | | | | | | | | Address CVE-2022-1621, CVE-2022-1629, CVE-2022-1674, CVE-2022-1733, CVE-2022-1735 CVE-2022-1769, CVE-2022-1771, CVE-2022-1785, CVE-2022-1796 (From OE-Core rev: fafce97bd440150ac5c586b53b887ee70a5b66bd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go.bbclass: fix path to linker in native Go buildsDmitry Baryshkov2022-05-281-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Building native Go tools results in the tool pointing to the wrong location of dynamic linker (see below). The linker is looked up in the temporary dir, which can be removed if rm_work is inherited. This results in being unable to execute the program with the 'No such file or directory' error. Override linker specificiation for native recipes (and let Go build environment to pick up a correct one on it's own). The error is observed in case the distro doesn't use uninative.bbclass. If uninative.bbclass is used, the binary will be patched automatically to use the uninative loader instead of the system one. Without this patch: $ ldd tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man linux-vdso.so.1 (0x00007ffe945ec000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f3a7490e000) /home/lumag/Projects/RPB/build-rpb/tmp-rpb-glibc/work/x86_64-linux/go-md2man-native/1.0.10+gitAUTOINC+f79a8a8ca6-r0/recipe-sysroot-native/usr/lib/ld-linux-x86-64.so.2 => /lib64/ld-linux-x86-64.so.2 (0x00007f3a74d13000) $ tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man --help -bash: tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man: No such file or directory With the patch $ ldd tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man linux-vdso.so.1 (0x00007ffd19dbf000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f2d44181000) /lib64/ld-linux-x86-64.so.2 (0x00007f2d44586000) $ tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man --help Usage of tmp-rpb-glibc/sysroots-components/x86_64/go-md2man-native/usr/bin/go-md2man: -in string Path to file to be processed (default: stdin) -out string Path to output processed file (default: stdout) (From OE-Core rev: 44b397daa68b4d0a461225fe9ff7db8b5fcfdb7b) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* staging.bbclass: process direct dependencies in deterministic orderMartin Jansa2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | * this doesn't fix any issue (at least AFAIK), just keeps the log files more deterministic to avoid unnecessary churn like in: --- /OE/build/oe-core/tmp-glibc/work/qemux86_64-oe-linux/keymaps/1.0-r31/temp/log.do_patch.2213051 2022-05-26 11:35:44.110063749 +0200 +++ /OE/build/oe-core/tmp-glibc/work/qemux86_64-oe-linux/keymaps/1.0-r31/temp/log.do_patch.2213372 2022-05-26 11:35:54.553062630 +0200 @@ -1,7 +1,7 @@ DEBUG: Executing python function extend_recipe_sysroot -NOTE: Direct dependencies are ['virtual:native:/OE/build/oe-core/openembedded-core/meta/recipes-devtools/patch/patch_2.7.6.bb:do_populate_sysroot', '/OE/build/oe-core/openembedded-core/meta/recipes-devtools/quilt/quilt-native_0.67.bb:do_populate_sysroot'] +NOTE: Direct dependencies are ['/OE/build/oe-core/openembedded-core/meta/recipes-devtools/quilt/quilt-native_0.67.bb:do_populate_sysroot', 'virtual:native:/OE/build/oe-core/openembedded-core/meta/recipes-devtools/patch/patch_2.7.6.bb:do_populate_sysroot'] NOTE: Installed into sysroot: [] -NOTE: Skipping as already exists in sysroot: ['patch-native', 'quilt-native', 'attr-native', 'libtool-native', 'gettext-minimal-native', 'texinfo-dummy-native'] +NOTE: Skipping as already exists in sysroot: ['quilt-native', 'patch-native', 'attr-native', 'libtool-native', 'gettext-minimal-native', 'texinfo-dummy-native'] DEBUG: Python function extend_recipe_sysroot finished DEBUG: Executing python function do_patch DEBUG: Executing python function patch_do_patch (From OE-Core rev: d3ebb37b97da15166d452bf51f5f7e0c312ae42e) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* insane.bbclass: make sure to close .patch filesMartin Jansa2022-05-281-8/+10
| | | | | | | | | | | | | | * fixes: DEBUG: Executing python function do_qa_patch /OE/build/oe-core/openembedded-core/meta/classes/insane.bbclass:1189: ResourceWarning: unclosed file <_io.TextIOWrapper name='/OE/build/oe-core/openembedded-core/meta/recipes-bsp/keymaps/files/GPLv2.patch' mode='r' encoding='utf-8'> content = open(fullpath, encoding='utf-8', errors='ignore').read() ResourceWarning: Enable tracemalloc to get the object allocation traceback DEBUG: Python function do_qa_patch finished (From OE-Core rev: 61be3668d866834adfff688620aee7e29f6d8c44) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-self-hosted: remove lzoRoss Burton2022-05-281-1/+0
| | | | | | | | | | lzo isn't needed to build, so it doesn't need to be in the self-hosted packagegroup. (From OE-Core rev: 28beab2c5c90b66269bda89b2c0bed21018a0a61) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "meson.bblcass: Remove empty egg-info directories before running meson"Richard Purdie2022-05-281-10/+0
| | | | | | | | This reverts commit 47d9d90b4ec7d04d6f3f1a9b97c0ab7f1264a88e. This is no longer needed with a patch to fix importlib in python. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "qemu.inc: Remove empty egg-info directories before running meson"Richard Purdie2022-05-281-6/+2
| | | | | | | | This reverts commit 9d05227e910d3f374ba7a9763ff2584b9e40db61. This is no longer needed with a patch to importlib in python. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: Ensure stale empty python module directories don't break the buildRichard Purdie2022-05-282-0/+33
| | | | | | | | | | | | | | | | | | There are two issues inside importlib. Firstly, the modules are accessed in on disk order. This means behaviour seen on one system might not reproduce on another and is a real headache. Secondly, empty directories left behind by previous modules might be looked at. This has caused a long string of different issues for us. As a result, patch this to a behaviour which works for us. Upstream discussion can follow later, this is breaking builds for too many people to leave unpatched. [YOCTO #14816] (From OE-Core rev: e5944a38db513e033c3a3e9313267055f7254be7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: Remove problematic paths from sysroot filesRichard Purdie2022-05-281-3/+7
| | | | | | | | | | | | | | | | | In the native sysroot we should never have paths to the python3-native build directory. These may or may not exist at the time some dependency is building and nothing should rely upon them. I suspect nothing is relying on this at the moment but clean up just to be sure. The various config copies are adjusted to be modified consistently as some copies were and some were not. The Makefile has the "bad" ${B} paths replaced with a dummy placeholder too. (From OE-Core rev: ae9e6249ded8fc063d6333231c391cfa2d594567) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: mark CVE-2022-1622 and CVE-2022-1623 as invalidRoss Burton2022-05-281-0/+3
| | | | | | | | | | These issues only affect libtiff post-4.3.0 but before 4.4.0, caused by 3079627e and fixed by b4e79bfa. (From OE-Core rev: 49e93892a37d1a2af2b0a155117441e978385e4c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzo: Add further info to a patch and mark as Inactive-UpstreamRichard Purdie2022-05-271-1/+9
| | | | | | | | | | | | Add some further info to the patch based on upstream changes. Given the last release in 2017 and glaring issues on at least armv5, it does raise the question on whether we should drop this. There are probably better compression tools now. (From OE-Core rev: 241309c6dec364445093fa5973cc8998431cbed9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zip/unzip: mark all submittable patches as Inactive-UpstreamAlexander Kanavin2022-05-2710-10/+10
| | | | | | | | (From OE-Core rev: df78f7bb461c7d3eccac469fd01a77a3d0b800df) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/wic.py: Repaired test_qemu()Tobias Schmidl2022-05-271-1/+1
| | | | | | | | | | The grep is too wide, so it falsely fits additional lines that have a UUID (i.e, `/`). (From OE-Core rev: f72fdea1c890ddd793aa63bb9c1c0857962161cc) Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* btrfs-tools: add a PACKAGECONFIG for lzoRoss Burton2022-05-272-1/+129
| | | | | | | | | | | LZO is a fairly obsolete compression format these days, so add an option to enable/disable LZO to btrfs-progs and disable it by default. (From OE-Core rev: 26ffb0300cfa365627299a7af2efcb230f5951f0) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* makedevs: Don't use COPYING.patch just to add license file into ${S}Martin Jansa2022-05-273-349/+6
| | | | | | | | | | | | * as it uses S = "${WORKDIR}" it's another possible reproducer for do_patch issue mentioned here: https://lists.yoctoproject.org/g/yocto/message/56602 (From OE-Core rev: 4d5c5af4dc69df39934fe54500b3dac2fb7b8ae7) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: Add kernel CVEsRichard Purdie2022-05-271-0/+37
| | | | | | | | | | | | | | | | | | For OE-Core our policy is to stay as close to the kernel stable releases as we can. This should ensure the bulk of the major kernel CVEs are fixed and we don't dive into each individual issue as the stable maintainers are much more able to do that. Rather than just ignore all kernel CVEs which is what we have been doing, list the ones we ignore on this basis here, allowing new issues to be visible. If anyone wishes to clean up CPE entries with NIST for these, we'd welcome than and then entries can likely be removed from here. (From OE-Core rev: 319d465d44328b5f062d2da0526c0e8b189b4239) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libseccomp: Add missing files for ptestsJoerg Vehlow2022-05-271-0/+4
| | | | | | | | | | | | pfc files are used e.g. in 38-basic-pfc_coverage.sh valgrind_test.supp is required, when valgrind is installed, otherwise all valgrind tests fail (From OE-Core rev: 32ba67bc37b5ca73f7d29cb6c7de281ab8f824bd) Signed-off-by: Joerg Vehlow <joerg.vehlow@aox.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-setuptools: upgrade 62.3.1 -> 62.3.2wangmy2022-05-272-2/+2
| | | | | | | | | | | | | | Changelog: ========= Misc ----- #3328: Include a first line summary to some of the existing multi-line warnings. (From OE-Core rev: a7881dfcd5cb9de175799bb3eadba9ca9864aa4d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pip: upgrade 22.1 -> 22.1.1wangmy2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: f8a2540b640eafb5f9390142ae17411aaefc5861) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-magic: upgrade 0.4.25 -> 0.4.26wangmy2022-05-271-1/+1
| | | | | | | | | | | | Changes to 0.4.26: - Use tox for all multi-version testing - Fix use of pytest, use it via tox (From OE-Core rev: 4f4483a5e9df585d74071d30a52fd5839d320828) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-importlib-metadata: upgrade 4.11.3 -> 4.11.4wangmy2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: 372c0db2d7f661317ab57618e4707069450313cb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-hypothesis: upgrade 6.46.4 -> 6.46.7wangmy2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: 082dbb3cb1290ca4cb4bfee207f55c97d12e4277) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-cython: upgrade 0.29.28 -> 0.29.30wangmy2022-05-272-1/+1
| | | | | | | | | | | Changelog: https://github.com/cython/cython/blob/master/CHANGES.rst (From OE-Core rev: 04943836240dc061875829b8526610bc24969926) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-certifi: upgrade 2021.10.8 -> 2022.5.18.1wangmy2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: 6aad7b790df73bd9c986f5abec497a4e155994b6) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsdl2: add back xvm and xinerama optionsChen Qi2022-05-271-0/+2
| | | | | | | | | | | | | | | | | | | | | | | When building libsdl2-native, and I met a do_configure error as below. | CMake Error: The following variables are used in this project, but they are set to NOTFOUND. | Please set them or make sure they are set and tested correctly in the CMake files: | XINERAMA_LIB This error appears on hosts with libxinerama-dev installed. Looking at the CMakeLists.txt file, I got: set(SDL_X11_OPTIONS Xcursor Xdbe Xinerama XInput Xfixes Xrandr Xscrnsaver XShape Xvm We an see neither Xinerama nor Xvm is removed. So we should add back these options removed by a previous commit. (From OE-Core rev: 2c5d78153614fcdf30dbe3e41d88f18e9ae06684) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: Added fips option.leimaohui2022-05-272-1/+51
| | | | | | | | | | | | | - Added a patch to avoid excute fipshmac command. Because *.hmac file should be created on target instead of on build environment. - Added pkg_postinst_ontarget to make sure necessary files are created on target. (From OE-Core rev: 1b5c620d10aa678871b6cea46e113c8fe3b79822) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pciutils: avoid lspci conflict with busyboxNaveen Saini2022-05-271-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | if virtualization is enabled as DISTRO_FEATURES, then meta-virtualization layer enables CONFIG_LSPCI=y for busybox, which in result have conflicts with pciutils update-alternatives: Error: not linking ..core-image-base/1.0-r0/rootfs/usr/bin/lspci to /bin/busybox.nosuid since ..core-image-base/1.0-r0/rootfs/usr/bin/lspci exists and is not a link So marking it as ALTERNATIVE with ALTERNATIVE_PRIORITY set to 100 Ref: https://git.yoctoproject.org/poky/commit/meta/recipes-bsp/pciutils?id=a81af375dfc51446b21548dce2afa6a77bc02df3 https://github.com/pciutils/pciutils/commit/0b307156c92f61c1a02d232f4c6ed17e888de9a9 https://git.yoctoproject.org/meta-virtualization/tree/recipes-core/busybox/busybox/lspci.cfg https://git.yoctoproject.org/meta-virtualization/tree/recipes-core/busybox/busybox_virtualization.inc#n4 https://git.yoctoproject.org/meta-virtualization/tree/recipes-core/busybox/busybox_%25.bbappend#n1 (From OE-Core rev: 257e7620a79ea50c0c59746ff9a3817d43411e39) Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apt: fix upstream version checkAlexander Kanavin2022-05-271-2/+8
| | | | | | | | (From OE-Core rev: da784aae3014d82039a5404d9b871b44ecd4aa52) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: submit arm patches upstreamAlexander Kanavin2022-05-273-3/+3
| | | | | | | | (From OE-Core rev: 118a68bbe8c87eac77e87db409ce419749b211bb) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: submit patch upstreamAlexander Kanavin2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: 424f1c24c569afd245463b02ca10c40dad3f8a0c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Only include installed packages for rootfs manifestErnst Sjöstrand2022-05-271-15/+54
| | | | | | | | | | | | | | Before this the rootfs manifest and the summary were identical. We should separate the summary and rootfs manifest more clearly, now the summary is for all CVEs and the rootfs manifest is only for things in that image. This is even more useful if you build multiple images. (From OE-Core rev: 3b8cc6fc45f0ea5677729ee2b1819bdc7a441ab1) Signed-off-by: Ernst Sjöstrand <ernstp@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Add helper for symlink handlingErnst Sjöstrand2022-05-271-21/+13
| | | | | | | | (From OE-Core rev: 5046d54df2c3057be2afa4143a2833183fca0d67) Signed-off-by: Ernst Sjöstrand <ernstp@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pluggy: add BBCLASSEXTEND for native/nativesdkRoss Burton2022-05-271-0/+2
| | | | | | | | | | | This is a dependency of Hatchling, another Python build tool, so we need it natively. (From OE-Core rev: b6b17abaa3b5dcce61f6a5c8bdb397f714dba69d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ninja: upgrade 1.10.2 -> 1.11.0wangmy2022-05-271-1/+1
| | | | | | | | (From OE-Core rev: 466fb2e1ec98b0b8b55be7340764dd02967b6761) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* init-system-helpers: upgrade 1.62 -> 1.63wangmy2022-05-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Remove constraints unnecessary since buster * init-system-helpers: Drop versioned constraint on perl-base in Depends. * init: Drop versioned constraint on init-system-helpers in Depends. * t/helpers.pm: use installed version of deb-systemd-helper if TEST_INSTALLED is set * add DPKG_ROOT support (Closes: #983421) * Add additional error checking on write operations. The 'close()' call can fail on both read and write - while the read is usually relatively benign, for the write counter part can include "fun" errors. Most of these would most likely be persistent issues, but it makes sense to detect errors as early possible. * service: use 'grep -F' instead of 'egrep' 'egrep' and 'fgrep' have been deprecated in GNU grep since 2007, and in current post 3.7 Git they have been made to emit obsolescence warnings. The occurrence in 'service' uses a non-regex argument, so switch to 'grep -F' instead of '-E'. (From OE-Core rev: abf37e040faf510e6e087d97bf76cf07aef05e18) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ccache: upgrade 4.6 -> 4.6.1wangmy2022-05-271-2/+2
| | | | | | | | | | | | | | | | Changelog: https://ccache.dev/releasenotes.html#_ccache_4_6_1 License-Update: - Copyright year updated to 2020 - updated version of expected-lite from 0.5.0 to revision 3abf06821d489d56aa9c60eccf8aab70d67d158b (From OE-Core rev: 61bea09d7edc116bb7fa30fb37e8a3ad15b5f11e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.2 -> 9.18.3wangmy2022-05-2710-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by premature TLS stream socket object deletion. (CVE-2022-1183) [GL #3216] [bug] RPZ NSIP and NSDNAME rule processing didn't handle stub and static-stub zones at or above the query name. This has now been addressed. [GL #3232] Fixed a deadlock that could occur if an rndc connection arrived during the shutdown of network interfaces. [GL #3272] Refactor the fctx_done() function to set fctx to NULL after detaching, so that reference counting errors will be easier to avoid. [GL #2969] udp_recv() in dispatch could trigger an INSIST when the callback's result indicated success but the response was canceled in the meantime. [GL #3300] Work around a jemalloc quirk which could trigger an out-of-memory condition in named over time. [GL #3287] If there was a pending negative cache DS entry, validations depending upon it could fail. [GL #3279] dig returned a 0 exit status on UDP connection failure. [GL #3235] Fix an assertion failure when using dig with +nssearch and +tcp options by starting the next query in the send_done() callback (like in the UDP mode) instead of doing that recursively in start_tcp(). Also ensure that queries interrupted while connecting are detached properly. [GL #3144] Don't remove CDS/CDNSKEY DELETE records on zone sign when using 'auto-dnssec maintain;'. [GL #2931] [contrib] Avoid name space collision in dlz modules by prefixing functions with 'dlz_'. [GL !5778] dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306] [func] Add new named command-line option -C to print built-in defaults. [GL #1326] Introduce the concept of broken catalog zones described in the DNS catalog zones draft version 5 document. [GL #3224] Add DNS Extended Errors when stale answers are returned from cache. [GL #2267] Implement support for catalog zones change of ownership (coo) mechanism described in the DNS catalog zones draft version 5 document. [GL #3223] Implement support for catalog zones options new syntax based on catalog zones custom properties with "ext" suffix described in the DNS catalog zones draft version 5 document. [GL #3222] Implement reference counting for TLS contexts and allow reloading of TLS certificates on reconfiguration without destroying the underlying TCP listener sockets for TLS-based DNS transports. [GL #3122] Add support for remote TLS certificates verification, both to BIND and dig, making it possible to implement Strict and Mutual TLS authentication, as described in RFC 9103, Section 9.3. [GL #3163] [cleanup] Remove use of exclusive mode in ns_interfacemgr in favor of rwlocked access to localhost and localnets members of dns_aclenv_t structure. [GL #3229] Remove the task exclusive mode use in ns_clientmgr. [GL #3230] (From OE-Core rev: d2ae8b85c71be2e9e332b1ef0a2d3083b30c63e6) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* efivar: add musl libc compatibilityDavide Gardenal2022-05-272-2/+185
| | | | | | | | | | | | | | | | | Backport patch to get efivar working with musl. Upstream issue: https://github.com/rhboot/efivar/issues/202 After commit meta-oe/1582f81805ee3114bc1a44bd5cf52d21f96702ca fwupd gives an error when trying to build with musl because efivar is not compatible. This fixes the issue. (From OE-Core rev: 005b6aba89eaf1b79fdd7565dd028fdd9bbfcc7d) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel.bbclass: Do not overwrite recipe's custom postinstRaphael Teller2022-05-231-1/+1
| | | | | | | | | | | | | Allow recipe to set a custom postinst for kernel image. Use prependVar in order to allow custom postinst to be ran after default postinst, potentially modifying the installed file/symlink. (From OE-Core rev: 579906b9f4ea32c8d4e0e11a87ee6c9e27cdf0dc) Signed-off-by: Raphael Teller <raphael.teller@se.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check.bbclass: Added do_populate_sdk[recrdeptask].leimaohui2022-05-231-0/+1
| | | | | | | | | | As product, sdk should do cve check as well as rootfs. (From OE-Core rev: cc17753935c5f9e08aaa6c5886f059303147c07b) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Correct path returned in sd_path_lookup()Jiaqing Zhao2022-05-233-43/+74
| | | | | | | | | | | | | | | In oe-core, sysusers.d/sysctl.d/binfmt.d/modules-load.d are still kept under /usr/lib instead of /lib changed in systemd v246. This patch corrects the SD_PATH_{SYSUSERS,SYSCTL,BINFMT,MODULES_LOAD} returned in sd_path_lookup() back to the /usr/lib ones. Also updates the patch description and upstream status. (From OE-Core rev: 8d913ab6db3ae4b2786a64a086d519a40dcb8c4d) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Drop 0002-don-t-use-glibc-specific-qsort_r.patchJiaqing Zhao2022-05-232-164/+0
| | | | | | | | | | musl 1.2.3 implements qsort_r function. (From OE-Core rev: 0c2bbf66c7a00268457ac10fed4bef3714da8651) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Remove __compare_fn_t type in musl-specific patchJiaqing Zhao2022-05-233-38/+22
| | | | | | | | | | | | Since systemd v250, commit d8f16737005e ("sort-util: avoid using glibc's internal __compar_d_fn_t type"), __compare_fn_t type is no longer used. This patch removes that type in the musl-specific patch. (From OE-Core rev: 89c8a3f96dfeb444213fd6c523e1495c49065ccc) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Drop 0001-test-parse-argument-Include-signal.h.patchJiaqing Zhao2022-05-232-28/+0
| | | | | | | | | | | This patch has already been upstreamed in commit systemd/850f0008bff7 ("test-parse-argument: Include signal.h") since v249 stable release. (From OE-Core rev: 25d8defc806ed760d371423a7ef99bd872462d1e) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust-common: Fix native signature dependency issuesRichard Purdie2022-05-211-0/+3
| | | | | | | | | | | The previous changes cause sstatetests.SStateTests.test_sstate_32_64_same_hash to fail since RUST_XXX_SYS changes depending on the native architecture. This is correct but these are accounted for in the layout of paths in TMPDIR so they should be excluded from the task signatures for the correct behaviour. (From OE-Core rev: 2b9bb4c07d0ab53f58cbdd8a96896780a90be9a8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust-common: Drop LLVM_TARGET and simplifyRichard Purdie2022-05-213-21/+5
| | | | | | | | | | This all seems over complicated for something which is basically always one of two values. This might even help cross-canadian work on something which isn't x86-64. (From OE-Core rev: bd36593ba3db758b3eacc974e48468a665967961) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-17 19:29:00 +0000