<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools, branch warrior</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=warrior</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=warrior'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2020-09-16T12:34:54+00:00</updated>
<entry>
<title>python3-testtools: Avoid traceback2 module requirement</title>
<updated>2020-09-16T12:34:54+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2019-11-28T12:08:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c3d4bc65d0464eef6b254ee383a95f85704ff93b'/>
<id>urn:sha1:c3d4bc65d0464eef6b254ee383a95f85704ff93b</id>
<content type='text'>
traceback2 adds traceback for python2. Rather than depend on traceback2, we're
python3 only so just use traceback.

This caused breakage in oe-selftest -j which uses testtools on the autobuilder
using buildtools-tarball.

[YOCTO #13652]

(From OE-Core rev: ee80a06c107375e3cf0d246ea17c09dda4536dab)

(From OE-Core rev: ee82e3c24fe5727ce81e972cadedca431d6086c5)

(From OE-Core rev: be4470c9590183b388d9ff176331d0c50984dec8)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Install non-alternatives links for nativesdk</title>
<updated>2020-09-16T12:34:53+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2020-01-17T17:20:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ddfd5cf2ae6c6acdd9d2c97fd23fcddb30a752fd'/>
<id>urn:sha1:ddfd5cf2ae6c6acdd9d2c97fd23fcddb30a752fd</id>
<content type='text'>
In the SDK we need the plain symlinks and don't use alternative providers.
When these are missing the toolchain can work incorrectly so fix this.

(From OE-Core rev: 0c06cfaa016d06cc56d80dc1c244a938f3d38a3c)

(From OE-Core rev: 0d299c5dc04407d2d54574157f4014f50f2d0468)

(From OE-Core rev: aa37b5fe0620122e47f36165f5c7a07d3328dba3)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>binutils: Fix relocation of ld.so.conf in nativesdk builds</title>
<updated>2020-09-16T12:34:53+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2020-01-17T17:21:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b59770a3143aeb73fc4308be1327d59e3a417ba6'/>
<id>urn:sha1:b59770a3143aeb73fc4308be1327d59e3a417ba6</id>
<content type='text'>
We need binutils to look at our ld.so.conf file within the SDK to ensure
we search the SDK's libdirs as well as those from the host system.

There add a patch which passes in the directory to the code using a define,
then add it to a section we relocate in a similar way to the way we relocate
the gcc internal paths. This ensures that ld works correctly in our buildtools
tarball.

Standard sysroot relocation doesn't work since we're not in a sysroot,
we want to use both the host system and SDK libs.

(From OE-Core rev: f6c1089642934ad93056ef19a0888965486ee030)

(From OE-Core rev: 09a2b16ac2bd1e3e415131e46315c851373aa7e0)

(From OE-Core rev: d0b7811b0e8654cf83d1b0f8256c7941fc3d9c41)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: Upgrade 2.7.17 -&gt; 2.17.18</title>
<updated>2020-05-22T15:23:29+00:00</updated>
<author>
<name>Adrian Bunk</name>
<email>bunk@stusta.de</email>
</author>
<published>2020-05-01T21:51:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8b3e2a542785ec61a8803bb2b4d333924af232e9'/>
<id>urn:sha1:8b3e2a542785ec61a8803bb2b4d333924af232e9</id>
<content type='text'>
LICENSE checksum changed due to 2019 -&gt; 2020 update.

(From OE-Core rev: 65ab890bbdd5b104867d80b721be117a9d269aff)

Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>git: Upgrade 2.20.1 -&gt; 2.20.4</title>
<updated>2020-05-22T15:23:29+00:00</updated>
<author>
<name>Adrian Bunk</name>
<email>bunk@stusta.de</email>
</author>
<published>2020-05-13T14:26:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8fef2e0d66d12586604a8c6d40a6f1ffedd39c28'/>
<id>urn:sha1:8fef2e0d66d12586604a8c6d40a6f1ffedd39c28</id>
<content type='text'>
This includes the fixes for CVE-2020-5260 and CVE-2020-11008.

(From OE-Core rev: fe5aee43db25f622f4cbacc69765f94eca51395c)

Signed-off-by: Adrian Bunk &lt;bunk@kernel.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Upgrade 3.7.6 -&gt; 3.7.7</title>
<updated>2020-04-08T23:07:12+00:00</updated>
<author>
<name>Adrian Bunk</name>
<email>bunk@stusta.de</email>
</author>
<published>2020-03-15T18:14:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9ccd3a2b1fe9a4f5b5165392bb01b4601bf2a0d4'/>
<id>urn:sha1:9ccd3a2b1fe9a4f5b5165392bb01b4601bf2a0d4</id>
<content type='text'>
THE LICENSE checksum changed in this update due to copyright notice
added for 2020.

(From OE-Core rev: 2af49cebd669bd2992d57a586e2a06bbad09e945)

Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>e2fsprogs: backport upstream patch</title>
<updated>2020-04-08T23:07:12+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2020-03-21T19:57:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=aaf587913d6e8b5cc3fc7cee2e7416593208a4d4'/>
<id>urn:sha1:aaf587913d6e8b5cc3fc7cee2e7416593208a4d4</id>
<content type='text'>
Fixes a bug wherein a use after free could potentially be used to run
malicious code if a user can be tricked into running e2fsck on a
maliciously crafted file system.

Also see:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948517

(From OE-Core rev: 23c1b157362609bd8d85c7d35e6c7f0f60c32c88)

(From OE-Core rev: bdd978f8f68e24dd35e2c19b46cbe71b06e4fe42)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>e2fsprogs: fix CVE-2019-5188</title>
<updated>2020-04-08T23:07:12+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2020-03-21T19:57:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=548ff2152478533ba16901867837fd443f3a5610'/>
<id>urn:sha1:548ff2152478533ba16901867837fd443f3a5610</id>
<content type='text'>
Also see:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948508

(From OE-Core rev: 09bdcef183d885025da6aa87a7c2bf7e8268774e)

(From OE-Core rev: f454e207eac6fb85eb217554e13c2d3e69f41522)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python2: add ntpath</title>
<updated>2020-02-21T09:44:05+00:00</updated>
<author>
<name>Armin Kuster</name>
<email>akuster808@gmail.com</email>
</author>
<published>2020-02-04T15:06:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=31fdfbe48e90b8504d9eea80e9d1ab1df927235a'/>
<id>urn:sha1:31fdfbe48e90b8504d9eea80e9d1ab1df927235a</id>
<content type='text'>
python3 has this but python is missing this.
[Yocto #13740]

(From OE-Core rev: 3e69681857b88be44797d1d302b9e44a46a7634d)

Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit af41a2238beec0c34c1c1e5f25eed55f2a214643)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>rsync: whitelist CVE-2017-16548</title>
<updated>2020-02-21T09:44:05+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2020-01-21T05:26:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=80df8a60bb890edf29e12d07092bf76633170fda'/>
<id>urn:sha1:80df8a60bb890edf29e12d07092bf76633170fda</id>
<content type='text'>
patch for this CVE applies to v3.1.3pre1 not for v3.1.3.
patch already in v3.1.3.
see
https://git.samba.org/rsync.git/?p=rsync.git;a=commitdiff;h=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1;hp=bc112b0e7feece62ce98708092306639a8a53cce

(From OE-Core rev: 1e2739c821312527010fb0afbde5a20cd3f03d24)

(From OE-Core rev: 0a88a86d92b294175c14c7c5a2533d4e418fec6a)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 842bd7ca21efc6378ba24a8d0bf065c4d0f54f1d)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
