linux/poky.git/meta, branch yocto-3.4.3

build-appliance-image: Update to honister head revision

2022-03-24T11:05:34+00:00

(From OE-Core rev: ebca8f3ac9372b7ebb3d39e8f7f930b63b481448) Signed-off-by: Richard Purdie

crate-fetch: fix setscene failures

2022-03-24T11:05:16+00:00

In sstate.bbclass, when fetching an sstate object we have: pstaging_fetch(sstatefetch, d): [...] localdata.setVar('SRCPV', d.getVar('SRCPV')) i.e. some code which expands SRCPV before it changes SRC_URI for the sstate tarball fetching. In crate-fetch.bbclass we have: def import_crate(d): import crate if not getattr(crate, 'imported', False): bb.fetch2.methods.append(crate.Crate()) crate.imported = True def crate_get_srcrev(d): import_crate(d) return bb.fetch2.get_srcrev(d) SRCPV = "${@crate_get_srcrev(d)}" and so an "import crate" occurs when pstating_fetch() is called. That succeeds and all is well but the bb.fetch2.get_srcrev(d) call fails since there is no url in SRC_URI which supports srcrev() resulting in: | WARNING: rust-cross-core2-32-musl-1.54.0-r0 do_deploy_source_date_epoch_setscene: ExpansionError('SRCPV', '${@crate_get_srcrev(d)}', FetchError('SRCREV was used yet no valid SCM was found in SRC_URI', None)) | WARNING: Logfile for failed setscene task is /home/pokybuild/yocto-worker/musl-qemux86/build/build/tmp/work/x86_64-linux/rust-cross-core2-32-musl/1.54.0-r0/temp/log.do_deploy_source_date_epoch_setscene.3133099 | WARNING: Setscene task (/home/pokybuild/yocto-worker/musl-qemux86/build/meta/recipes-devtools/rust/rust-cross_1.54.0.bb:do_deploy_source_date_epoch_setscene) failed with exit code '1' - real task will be run instead [YOCTO #14680] (From OE-Core rev: 73b6c53ceea30a3f81c6de88c5bea452fe1c0018) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

build-appliance-image: Update to honister head revision

2022-03-22T22:22:41+00:00

(From OE-Core rev: a92a10d1ac5d050619cd6f71da5e6fa86bb9ab13) Signed-off-by: Richard Purdie

go: update to 1.16.15

2022-03-22T22:18:56+00:00

go1.16.15 (released 2022-03-03) includes a security fix to the regexp/syntax package, as well as bug fixes to the compiler, runtime, the go command, and to the net package. (From OE-Core rev: 685555947d91cfab6db45bca93419bd2f627e294) Signed-off-by: Chee Yang Lee Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

go: upgrade 1.16.13 -> 1.16.14

2022-03-22T22:18:56+00:00

go 1.16.14 release includes fix for CVE-2022-23806. (From OE-Core rev: 7b5723ae41b7fcdc73a24f04ec0cda4fba8f8622) (From OE-Core rev: 676614ca3f72242f41263e793de104f3b324f5bb) Signed-off-by: Sakib Sajal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Chee Yang Lee Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ghostscript: fix CVE-2021-3781

2022-03-22T22:18:56+00:00

(From OE-Core rev: c9c5254345249b8a2c53e80cec3c469ca6fc1099) Signed-off-by: Chee Yang Lee Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

patch.py: Prevent git repo reinitialization

2022-03-15T16:38:29+00:00

There were few bugs in the _isInitialized() function which might trigger git repo to be reinitialized and patches failing to apply. (From OE-Core rev: 427f4ef11beb8ceee007b5c7e152f2383a114aca) Signed-off-by: Pavel Zhukov Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

util-linux: upgrade 2.37.3 -> 2.37.4

2022-03-15T16:38:29+00:00

(From OE-Core rev: ff7d5af61066eee1fdcf9b8704d60a4dc3a9da14) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 6a3289c4786c4d278e2bf0ec1a5e04363772d8bc) Signed-off-by: Quentin Schulz Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

util-linux: update 2.37.2 -> 2.37.3

2022-03-15T16:38:29+00:00

(From OE-Core rev: 5bf810a46db77e3136e7c49dae7394e513a3e71d) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit e543d4407fdc91559a77d6c5cd41bcb75bc8c73c) Signed-off-by: Quentin Schulz Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: Update to 8.2.4524 for further CVE fixes

2022-03-15T16:38:29+00:00

Includes CVE-2022-0696, CVE-2022-0714, CVE-2022-0729. (From OE-Core rev: 4fa9357473eb62703b1df1b1fb529b4c0ba452a9) Signed-off-by: Richard Purdie (cherry picked from commit 0d29988958e48534a0076307bb2393a3c1309e03) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie