linux/poky.git/meta, branch gatesgarth-24.0.4

build-appliance-image: Update to gatesgarth head revision

2021-05-06T10:20:41+00:00

(From OE-Core rev: d47b7cdc3508343349f3bb3eacb2dc3227dd94d2) Signed-off-by: Richard Purdie

populate_sdk_ext: Avoid copying and producing .pyc files

2021-05-05T16:43:23+00:00

Since pyc cache files are really system specific, no real reason to copy or generate them during the eSDK build process. Also generating them has the possibility of re-using inodes that pseudo may have been tracking, leading a build failure. (From OE-Core rev: b89b583067762aa5ec53341a6bc0ec2d87790a1b) Signed-off-by: Mark Hatle Signed-off-by: Richard Purdie (cherry picked from commit ce8eba263647ae63a722122e28f26af46ae083a0) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

linux-firmware: Package RSI 911x WiFi firmware

2021-05-05T16:43:23+00:00

The RSI 911x WiFi firmware is already part of the linux-firmware repository, package it to make it easily available. (From OE-Core rev: a6c9d8d2ba11b385d36ae6d7315ace398c693971) Signed-off-by: Marek Vasut Cc: Richard Purdie Cc: Steve Sakoman Signed-off-by: Richard Purdie (cherry picked from commit cc44b71f6ea68ca0f483d635df7dc7b9905b1593) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

deb: apply postinstall on sdk

2021-05-05T16:43:23+00:00

If not postinstall applied, some nativesdk command could not be found in sdk due to update-alternatives in postinst not be executed, such as chroot: $ which chroot /sbin/chroot $ which chroot.coreutils path-to-sdk/sysroots/x86_64-wrlinuxsdk-linux/usr/bin/chroot.coreutils After applying the fix $ which chroot path-to-sdk/sysroots/x86_64-wrlinuxsdk-linux/usr/bin/chroot $ which chroot.coreutils path-to-sdk/sysroots/x86_64-wrlinuxsdk-linux/usr/bin/chroot.coreutils (From OE-Core rev: cbbdb5333d36bda3e6ce833d95960a8d4b09fbea) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie (cherry picked from commit 2a9bf19502766baa4087456649d5471483d04f6a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

gdk-pixbuf: fix CVE-2021-20240

2021-05-05T16:43:23+00:00

(From OE-Core rev: 69314f890b208ac5ac5d63b905c42f3d3c39da7c) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

cairo: fix CVE-2020-35492

2021-05-05T16:43:23+00:00

(From OE-Core rev: 58e9ecbda48faff9c1babc90504eb76805eb9266) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

rsync: fix CVE-2020-14387

2021-05-05T16:43:23+00:00

Backport patch to fix CVE-2020-14387. (From OE-Core rev: fd18be85b77488cfac72e9703940764615e37e98) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit 13f331436747ebb8e9211feee3aa774f1acd0fee) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

sanity: Further improve directory sanity tests

2021-04-30T13:37:32+00:00

Add tests to ensure COREBASE/TMPDIR doon't contain ".." as this causes hard to understand build failures. Also rework the code to test TMPDIR and COREBASE for all the patterns since they may be set differently and one may contain problematic characters. [YOCTO #14111] (From OE-Core rev: 8b0aef3f504d650c3208f11b62a7926aa90967f1) Signed-off-by: Richard Purdie (cherry picked from commit f22a6e46d003aba516a9a0cc7f94eae678d846b7) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

kmod: do not symlink config.guess/config.sub during autoreconf

2021-04-30T13:37:32+00:00

I was encountering the following race condition on poky: - automake-native does do_install. - automake-native does do_populate_sysroot. This hardlinks config.guess and config.sub into ${D}. - kmod-native does do_configure. This runs `autoreconf`, which runs `automake --add-missing` (symlinks config.guess/config.sub from recipe-sysroot-native to build dir), then runs `gnu-configize` (copies _its own_ config.guess/config.sub _on top_ of the already existing ones). Since the destinations already had symlinks, the copy would overwrite config.guess/config.sub in recipe-sysroot-native, which would in turn overwrite the same in ${D} due to being hardlinked. - automake-native does do_package. The outhash is thus calculated on the clobbered config.guess/config.sub files. With hash equivalency enabled, the different outhash produced a different unihash, which kept me from reusing sstate between my laptop and my build server. This race condition would happen only on the build server (BB_NUMBER_THREADS = 32) but never on my laptop (BB_NUMBER_THREADS = 6). I didn't see the --install and --symlink flags being used by any other recipe, so I removed them, and that fixed the issue. (From OE-Core rev: b423a574496a7bf6023883584a6d1ad1cdb8f017) Signed-off-by: Richard Purdie (cherry picked from commit 89d675efd633b495daa4a3a57420b9c309497035) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ca-certificates: Fix openssl runtime cert dependencies

2021-04-30T13:37:32+00:00

With commit dc778c70449ee5401b5a24ad18b22b88338c47c5, dependency was moved to openssl-bin which in itself was a fine change, but dropping dependency on openssl too should have been kept along, dropping this meant that openssl binary wont be able to validate secure connections as the CApath files wont be installed, which infact are required for openssl bins to work, following call e.g. fails $ openssl s_client -connect google.com:443 .... New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 20 (unable to get local issuer certificate) .... The local issuer certs are not found in default location /usr/lib/ssh-1.1/certs, this dir and its content is installed by openssl package therefore re-add the dependency on openssl (From OE-Core rev: b2a233c9c5fb919d6507683bdf27a4435a2b5285) Signed-off-by: Khem Raj Cc: Andrei Gherzan Signed-off-by: Richard Purdie (cherry picked from commit eaf377315efc73d6ffe361372a873918b3bb3bf5) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie