linux/poky.git/meta/recipes-devtools, branch yocto-5.0.3

orc: upgrade 0.4.38 -> 0.4.39

2024-08-10T13:34:25+00:00

(From OE-Core rev: 9be9260985e751f90f9432aa68a789bf0a26fb43) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit bcbaaa9f7d88686915c354fb66682cbe9b1d0536) Signed-off-by: Steve Sakoman

nasm: Upgrade 2.16.01 -> 2.16.03

2024-08-10T13:34:25+00:00

Removes CVE-2022-46456 from reports. (From OE-Core rev: 4a5b6e8dd315b2281afb232410db585d431be00f) (From OE-Core rev: 5b330f3dfe7a37eff5251d2c29d324e90677b33c) Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

qemu: set cve status for CVE-2023-6683

2024-08-10T13:34:25+00:00

This CVE is fixed in v8.2.2 with v8.2.1-55-g480a6adc83 https://github.com/qemu/qemu/commit/480a6adc83a7bbc84bfe67229e084603dc061824 (From OE-Core rev: 422fc84ddbe46580dc6d647eff62c4dbc8551e63) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS

2024-08-07T02:11:18+00:00

There is a need to enable some extra tools from the rust for the build and so this new variable will help for that This varaible then we can use during do_configure task to add overall values as per json format in build -> tools (From OE-Core rev: 136a25567499191b23a4d000a06bf83a473224ca) Signed-off-by: Ranjitsinh Rathod Signed-off-by: Steve Sakoman

pseudo: Update to include open symlink handling bugfix

2024-08-07T02:11:18+00:00

Update to a new revision which includes "Bugfix for Linux open(O_CREAT|O_EXCL)" (From OE-Core rev: 97410e90f7233e5c9ce38eea0fa99b76160ffce9) Signed-off-by: Richard Purdie (cherry picked from commit 92a9710ec88c8729fa3d83baa2e63dd74d95cdf8) Signed-off-by: Mark Hatle Signed-off-by: Steve Sakoman

pseudo: Fix to work with glibc 2.40

2024-08-07T02:11:18+00:00

glibc 2.40 renames some internal header variables. Update our hack to work with the new version. These kinds of problems illustrate we need to address the issue properly. (From OE-Core rev: 1d5903bf749436d9b26df858041337b723614963) Signed-off-by: Richard Purdie (cherry picked from commit 35021d650de3eecc3f42000181b39a5db5a8eaa0) Signed-off-by: Mark Hatle Signed-off-by: Steve Sakoman

qemu: upgrade 8.2.2 -> 8.2.3

2024-08-07T02:11:18+00:00

This includes fix for: CVE-2024-26327, CVE-2024-26328 and CVE-2024-3447 General changelog for 8.2: https://wiki.qemu.org/ChangeLog/8.2 Droped 0001-linux-user-x86_64-Handle-the-vsyscall-page-in-open_s.patch, CVE-2024-3446 and CVE-2024-3567 since already contained the fix. (From OE-Core rev: 1a6d502c04fad0d190bb665e9d454b85c0853fcc) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust

2024-08-07T02:11:18+00:00

These recipes come from rust sources and CVEs are reported for them under rust-lang:rust vendor:product touple. Especially libstd-rs needs correct CVE_PRODUCT as is it installed on target devices (being statically linked to rust compiled binaries). before: cargo: CVE_PRODUCT="cargo" cargo-c-native: CVE_PRODUCT="cargo-c" libstd-rs: CVE_PRODUCT="libstd-rs" rust: CVE_PRODUCT="rust" rust-cross-canadian: CVE_PRODUCT="rust-cross-canadian-" rust-llvm: CVE_PRODUCT="rust-llvm" after: cargo: CVE_PRODUCT="cargo" cargo-c-native: CVE_PRODUCT="cargo-c" libstd-rs: CVE_PRODUCT="rust" rust: CVE_PRODUCT="rust" rust-cross-canadian-x86-64: CVE_PRODUCT="rust" rust-llvm: CVE_PRODUCT="rust-llvm" Product for rust-llvm is uncertain and, should be handled in another commit if it is desired to align it, too. sqlite> select vendor, product, count(product) from products where vendor="rust-lang" group by product; rust-lang|async-h1|2 rust-lang|cargo|5 rust-lang|future-utils|2 rust-lang|futures-task|2 rust-lang|mdbook|1 rust-lang|regex|2 rust-lang|rsa|2 rust-lang|rust|45 rust-lang|socket2|1 (From OE-Core rev: 91bfe1f64ee3e2b8534baa8a3eb2fb7fa3521657) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (cherry picked from commit e8cf1df16a6ec2785cacaf608bec5cd8496103af) Signed-off-by: Steve Sakoman

python3-attrs: drop python3-ctypes from RDEPENDS

2024-08-01T13:08:09+00:00

python3-ctypes was dropped as a dependency in v19.2.0 (From OE-Core rev: 48c43d2ff467c067d1518dc55d8d6da39bea159a) Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie (cherry picked from commit 8d06116caf2382ad4782b9b2da50534d076a736d) Signed-off-by: Steve Sakoman

dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream

2024-08-01T13:08:09+00:00

(From OE-Core rev: bd782cf02ab8ae5250d8009595a877fab54b8d1a) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit da9906553c69af0db8b14c39ee224348d539e7b1) Signed-off-by: Steve Sakoman