linux/poky.git/meta/recipes-devtools, branch yocto-4.0.1

strace: fix ptest failure in landlock

2022-05-12T15:44:05+00:00

Kernel commit: commit 3d4b396a616d0d67bf95d6823ad1197f6247292e Author: Christian Brauner Date: Mon Oct 11 15:37:04 2021 +0200 landlock: Use square brackets around "landlock-ruleset" commit aea0b9f2486da8497f35c7114b764bf55e17c7ea upstream. Make the name of the anon inode fd "[landlock-ruleset]" instead of "landlock-ruleset". This is minor but most anon inode fds already carry square brackets around their name: [eventfd] [eventpoll] [fanotify] [fscontext] [io_uring] [pidfd] [signalfd] [timerfd] [userfaultfd] For the sake of consistency lets do the same for the landlock-ruleset anon inode fd that comes with landlock. We did the same in 1cdc415f1083 ("uapi, fsopen: use square brackets around "fscontext" [ver #2]") for the new mount api. Cc: linux-security-module@vger.kernel.org Signed-off-by: Christian Brauner Link: https://lore.kernel.org/r/20211011133704.1704369-1-brauner@kernel.org Cc: stable@vger.kernel.org Signed-off-by: Mickaël Salaün Signed-off-by: Greg Kroah-Hartman Changed the format of the landlock tracing. We need to update the strace expected string to match. Upstream-Status: Submitted [https://lists.strace.io/pipermail/strace-devel/2022-April/011064.html] (From OE-Core rev: 0268bc1ed04212acdb5b08e57334ed367042c1a2) Signed-off-by: Bruce Ashfield Signed-off-by: Richard Purdie (cherry picked from commit bf7d885aef06f6208533dd5fab45ee8e92d6d6d7) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

qemu: Add packageconfig for libbpf support

2022-05-12T15:44:05+00:00

its in auto mode, which is troublesome particularly on native recipe where it pokes at build host to find this library if its not in native sysroot and when build host has libbpf installed it enables it silently otherwise disables the support. so lets make it deterministic, and if one needs to enable this feature then enable the packageconfig intentionally, It was found when trying to solve this QA warning Skipping RPATH /usr/lib64 as is a standard search path for /mnt/b/yoe/master/build/tmp/work/x86_64-linux/qemu-system-native/6.2.0- r0/sysroot-destdir/mnt/b/yoe/master/build/tmp/work/x86_64-linux/qemu-system-native/6.2.0-r0/recipe-sysroot-native/usr/bin/qemu-system-x86_64 This is becasue qemu's build system adds the needed flags to -rpath for the libraries it needs and in this case it has found libbpf.so in /usr/lib64 on build host. (From OE-Core rev: 2f97e2d92982b9cffaccdf251c1b6d47de0258c2) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 3d493928b7c98ab11b5d8c50924b1a2c464bf7f5) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

subversion: upgrade to 1.14.2

2022-05-04T12:07:33+00:00

This release is primarily to fix two CVEs: - CVE-2021-28544 - CVE-2022-24070 It also rewrites the macOS autoconf macros to be cross-compile friendly, so we don't need to delete them anymore. (From OE-Core rev: 76a74a8f22021e60326c001ccdd9b6ca200cd28e) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit ecfbc2ef45a76ab96d215954ca0a109545e6ff02) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

apt: upgrade 2.4.4 -> 2.4.5

2022-05-04T12:07:33+00:00

apt (2.4.5) release notes: * Only protect two kernels, not last installed one (LP: #1968154) * Fix segfault in CacheSetHelperAPTGet::tryVirtualPackage() (From OE-Core rev: 76f4471a26bf457d1f0816b2b5ba92d0d6474e14) Signed-off-by: Wang Mingyu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 6a6462fd0ab140b554f4bda260e26b938cd44dc2) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: ignore CVE-2015-20107

2022-05-04T12:07:31+00:00

CVE-2015-20107 describes an arbitrary command execution in the mailcap module, but this is by design in mailcap and needs to be worked around by the calling application. Upstream Python will be documenting this flaw in the library reference, and it is likely that the mailcap module will be deprecated and removed in the future. (From OE-Core rev: f525745af38b0e5ea26693849cd4f19c627efd46) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 85fac8408baf92d8b71946f5bfea92952b7eab01) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

e2fsprogs: fix CVE-2022-1304

2022-05-04T12:07:31+00:00

Backport a submitted patch to fix CVE-2022-1304. (From OE-Core rev: 6b31ebb379369cfd9448f64fca6a664b72a7f4fa) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 31fd4ca6fa85ed1e62faf37e6d7bed5b558cb309) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 3.1.1 -> 3.1.2

2022-04-28T16:07:18+00:00

Ruby 3.1.2 has been released. This release includes security fixes. CVE-2022-28738: Double free in Regexp compilation CVE-2022-28739: Buffer overrun in String-to-Float conversion (From OE-Core rev: ca1c990df62f1b3d53b2114a387f192efe7e38e8) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie (cherry picked from commit 1306c732a39070e12306b0b7a393e2a482c8b326) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

git: upgrade 2.35.2 -> 2.35.3

2022-04-28T16:07:18+00:00

Bug fix release: 0f85c4a30b setup: opt-out of check with safe.directory=* bb50ec3cc3 setup: fix safe.directory key not being checked e47363e5a8 t0033: add tests for safe.directory (From OE-Core rev: c3b96e04e91eb9e28bcfe1c84e159193a82d302c) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie (cherry picked from commit 457b5d4dad3e6fa77e80bed66666c36caa452380) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

apt: upgrade 2.4.3 -> 2.4.4

2022-04-28T16:07:18+00:00

apt (2.4.4) * Recognize Static-Built-Using and order it below Built-Using (Closes: #1008759) (From OE-Core rev: aa269a4f9808d1feadad926a2926165a5b6ed84e) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit c63741294c6322e6657f485034e434aab9fe2d8d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

git: correct license

2022-04-28T16:07:18+00:00

by default git pulls in several code fragments not being licensed under just GPL-2.0-only. obstack and poll are licensed under GPL-2.0-or-later reftable being BSD-3-Clause sha1dc and inet_ntop being MIT netmalloc being Bosst-1.0 aka BSL-1.0 regex being LGPL-2.1-or-later (From OE-Core rev: d12513f066baca13a5be0c00792b1bd7d8b07c17) Signed-off-by: Konrad Weihmann Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 5184e651651ed949d198882a10f406cef5939b7b) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie