linux/poky.git, branch dunfell-23.0.24

build-appliance-image: Update to dunfell head revision

2023-03-15T23:09:43+00:00

(From OE-Core rev: efb1a73a13907bed3acac8e06053aef3e2ef57f5) Signed-off-by: Richard Purdie

linux: inherit pkgconfig in kernel.bbclass

2023-03-15T23:09:24+00:00

pkgconfig is being required to find dependencies for building kernel native tools, move "inherit pkgconfig" to kernel.bbclass so BSP kernel recipes can also benefit from it. (From OE-Core rev: a5e62888768be641d5da00fd847e0cac96820c75) Signed-off-by: Ming Liu Signed-off-by: Alexandre Belloni (cherry picked from commit 8a84bd98e3fbc16c782f83064801e469d086911e) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

vim: add missing pkgconfig inherit

2023-03-15T23:09:24+00:00

Vim uses pkgconfig to find dependencies but it wasn't present, so it silently doesn't enable features like GTK+ UI. [ YOCTO #15044 ] (From OE-Core rev: c84f0822e7cffc62e2f042bf9d2e424f85f74ecd) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni (cherry picked from commit 70900616298f5e70732a34e7406e585e323479ed) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

oeqa/selftest/prservice: Improve debug output for failure

2023-03-15T23:09:23+00:00

We keep seeing this failure on the autobuilder but the output amounts to "False is not True". Improve the debug message on the chance it may make the issue clearer. (From OE-Core rev: 68d3766c37e4b3a1b49dc27226b2513e3b0db9a9) Signed-off-by: Richard Purdie (cherry picked from commit d03f4cf19c2cc96e9d942252a451521dfec42ebc) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

shadow: ignore CVE-2016-15024

2023-03-15T23:09:23+00:00

This recently got an updated CPE which matches this recipe, but the issue is related to an entirely different shadow project so ignore it. (From OE-Core rev: 9d5a05c27a01b3859eae70590ba7dd836abe2719) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni (cherry picked from commit 2331e98abb09cbcd56625d65c4e5d258dc29dd04) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

harfbuzz: Security fix for CVE-2023-25193

2023-03-15T23:09:23+00:00

Upstream-Status: Backport from [https://github.com/harfbuzz/harfbuzz/commit/8708b9e081192786c027bb7f5f23d76dbe5c19e8] (From OE-Core rev: c22bbe9b45e38601b89138999dd157fad8513262) Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gnutls: fix CVE-2023-0361 timing side-channel in the TLS RSA key exchange code

2023-03-15T23:09:23+00:00

Remove branching that depends on secret data. since the `ok` variable isn't used any more, we can remove all code used to calculate it (From OE-Core rev: 5b8a3601ebff7a0cdfaa50d7a0b5e384a7e2514c) Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

devshell: Do not add scripts/git-intercept to PATH

2023-03-14T14:59:10+00:00

The use of scripts/git-intercept was introduced in commit 3266c327df (install/devshell: Introduce git intercept script due to fakeroot issues) and later reverted in commit af27c81eaf (scripts: Make git intercept global). (From OE-Core rev: 51424b9955374196307aaf73cf4b6c184ce4fb6d) Signed-off-by: Peter Kjellerstedt Signed-off-by: Luca Ceresoli (cherry picked from commit f6c260c8e2a33e282a35afc99de4ef8cc1791b08) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

image.bbclass: print all QA functions exceptions

2023-03-14T14:59:10+00:00

For the QA checks in `image.bbclass`, all exceptions other than `oe.utils.ImageQAFailed` always print the following generic message: "Image QA function func_name failed" This can be very misleading, as it may hide python syntax errors and other kind of issues that are hard to detect without more explicit error messages. This change makes sure that the error message of all exceptions are displayed. Before this change: "Image QA function func_name failed" After this change: "Image QA function func_name failed: f-string: empty expression not allowed (, line 13)" (From OE-Core rev: c4e3b86f2bcb2b445efc72bd8e06b1b89d88daa2) Signed-off-by: Mauro Queiros Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 3d85b30d8704d38b86f5b006748cebc74bd2a4fa) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

kernel-yocto: fix kernel-meta data detection

2023-03-14T14:59:10+00:00

Fixes: 7ef7af5c03ba ("kernel-yocto: restore kernel-meta data detection for SRC_URI elements") (From OE-Core rev: 4533e8363549f87a0484d7c0a43a162c918f33bc) Signed-off-by: Ulrich Ölmann Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit c77754f23e3fb49a62602a6c6a04d5525d1cf457) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie