linux/poky.git/meta/recipes-devtools, branch kirkstone-4.0

git: Upgrade 2.35.1 -> 2.35.2

2022-04-15T16:30:34+00:00

This includes a fix for CVE-2022-24765 (From OE-Core rev: a17dc42d82b12d7f891c903a02a0302b31829c88) Signed-off-by: Richard Purdie

cmake: add missing licenses

2022-04-14T08:47:00+00:00

in target and native variant a different set of vendored libraries is pulled from the cmake sources. Add those licenses and there texts (From OE-Core rev: fc6c1951dd7e53791a9d92610dfc2eefab4c2a4a) Signed-off-by: Konrad Weihmann Signed-off-by: Richard Purdie

python3-pip: correct license

2022-04-14T08:47:00+00:00

as described in src/pip/_vendor/README.rst pip ships plenty of vendored copies of other python modules. Correct the license of the resulting package and reference all the vendor copy license files correctly (From OE-Core rev: 1c192304b2b2ff8c909836d2c78826192e7d21ca) Signed-off-by: Konrad Weihmann Signed-off-by: Richard Purdie

git: Ignore CVE-2022-24975

2022-04-13T15:52:24+00:00

Everyone I've talked to doesn't see this as a major issue. The CVE asks for a documentation improvement on the --mirror option to git clone as deleted content could be leaked into a mirror. For OE's general users/use cases, we wouldn't build or ship docs so this wouldn't affect us. (From OE-Core rev: 5dfe2dd5482c9a446f8e722fe51903d205e6770d) Signed-off-by: Richard Purdie

qemu: Add fix for CVE-2022-1050

2022-04-13T15:52:24+00:00

Add a fix queued upstream for the issue in this CVE: """ Guest driver might execute HW commands when shared buffers are not yet allocated. This might happen on purpose (malicious guest) or because some other guest/host address mapping. We need to protect againts such case. """ (From OE-Core rev: 1b8513c1abdcd6430f9311efd04d785488f79d7d) Signed-off-by: Richard Purdie

python3: Do not detect multiarch when cross compiling

2022-04-13T15:52:24+00:00

This was a long standing problem seen on aarch64 build hosts when compiling python3 with clang cross compiler. The issue is not seen with gcc because native glibc headers are still compatible with gcc cross compiler (From OE-Core rev: 407744b00d702e3133304e1b43064a5634ca02cf) Signed-off-by: Khem Raj Cc: Ross Burton Cc: Jon Mason Signed-off-by: Richard Purdie

python3-cryptography: backport fix for leaky test

2022-04-10T07:31:17+00:00

The leaking test case has been fixed upstream, so backport the patch. (From OE-Core rev: 4705b8a724fe288a20f1a080e2796ea90f46c9fb) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

pseudo: Fix handling of absolute links

2022-04-05T21:23:40+00:00

Update to a version of pseudo which has a fix for absolute links, evaluating them from the chroot path. (From OE-Core rev: 33147b89bc3c9e9bdd53a942a5551d8a1d06130c) Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

Revert "meta: rust: Bug fix for target definitions returning 'NoneType'"

2022-04-05T16:41:09+00:00

This reverts commit ef49f89c89889466ee3696ab680f8e10c961a677. This appears to cause build failures which didn't originally show up in testing, reverting for now. Signed-off-by: Richard Purdie

meta: rust: Bug fix for target definitions returning 'NoneType'

2022-04-05T09:49:36+00:00

The build shows below error while building for arm machines. Exception: TypeError: int() argument must be a string, a bytes-like object or a number, not 'NoneType' Detailed error info : https://lists.openembedded.org/g/openembedded-core/message/164004 All the target definitions within tspec dictionary are generted as NoneType. The changes will fix this issue. (From OE-Core rev: ef49f89c89889466ee3696ab680f8e10c961a677) Signed-off-by: Sundeep KOKKONDA Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie