summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* inetutils: fix CVE-2023-40303Yogita Urade2023-09-043-0/+544
| | | | | | | | | | | | | | | | | GNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process. Refernces: https://nvd.nist.gov/vuln/detail/CVE-2023-40303 (From OE-Core rev: b8e2dad0650b8a80e3d85e6d87fda1a0e2fb195f) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* resulttool/report: Avoid divide by zeroRichard Purdie2023-08-301-1/+4
| | | | | | | | | | Avoid a divide by zero traceback if unfortunate test counts are encountered. (From OE-Core rev: a46782c9f54bcb0389ea1016e37b6939aae79bfb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c5aeea53dfacb53dedb8445cb3523dc3a8cb6dca) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/utils/gitarchive: fix tag computation when creating archiveAlexis Lothoré2023-08-301-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Sporadic errors have been observed in autobuilder when trying to store new tests results: error: failed to push some refs to 'push.yoctoproject.org:yocto-testresults' hint: Updates were rejected because the tag already exists in the remote. The new tag name is generated by gitarchive based on known tags from the repository (learnt with git tag). In autobuilder case, this repository is a shallow clone, so git tag only returns most recent tags, which mean we could miss some older tags which exist in remote but not locally. In this case, gitarchive will likely create a tag which already exists in remote, and so will fail to push Fix this tag duplication by using git ls-remote to learn about existing tags instead of git tag. Two places which wrongly read only local tags has been identified in gitarchive: expand_tag_strings and get_test_runs Fixes [YOCTO #15140] (From OE-Core rev: 5e3962a53657044431f687aaa08a993563f779e7) Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5a0a7da85a3acfd4a20a07478eabefdab60f313a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* scripts/create-pull-request: update URLs to git repositoriesMichael Opdenacker2023-08-301-5/+2
| | | | | | | | | | | | Also remove the git.pokylinux.org URL, no longer used. (From OE-Core rev: ec2bed2e82eb65b3278a6740b54973b78fe236c8) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 47b88d143c2fc61ce0e03b7eb3a9dbcffadbf5b1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* externalsrc: fix dependency chain issuesPeter Suti2023-08-301-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of deleting setscene tasks, now SSTATE_SKIP_CREATION is set instead. This seems to fix the compile issues where the populate_sysroot task was not run when an externalsrc recipe was built as a dependency. [YOCTO #15164] [RP addition: The deltask was added by me in 2012 when the class was created. The trouble is bitbake assumes 'sstate' tasks have a setscene task and by deleting the setscene task, bitbake stops thinking the task can be accelerated. There is other code in the sysroot code which assumes some tasks are always sstate tasks. We cannot delete the task without changes to the way bitbake learns about 'setscene' tasks so the patch is correct, avoiding creating files is the better approach given the way the world works now. There would be concerns about exisitng sstate reuse however this shouldn't occur since SRC_URI changes and that will change the underlying hashes. Hash equivalency could potentially cause issues by joining hashes together again however if the output matches, that shouldn't in theory cause any issue.] (From OE-Core rev: 18d0ace2d7becf2a1588d2d2b7ca0f6f2108b64f) Signed-off-by: Peter Suti <peter.suti@streamunlimited.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ee4667a24ccdd8c9d547e73aecf661e6a1283890) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gnupg: Fix reproducibility failureRichard Purdie2023-08-301-0/+2
| | | | | | | | | | | | yat2m can be found within the build or from the recipe-sysroot-native if runtime dependencies are present. The sysroot version has version differences to the in tree copy. Specify the one we want to make the build determinstic. (From OE-Core rev: 8224e8cf402966a1108fe7035da9ed463f3d976a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1feb5274db6e985e10f58359b148dabb4076917a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* lib/package_manager: Improve repo artefact filteringRichard Purdie2023-08-301-1/+4
| | | | | | | | | | | | | | | | | | | | | | | If you run an arm build followed by an x86 one and then ask for a full repo to be created, it will include all of the arm and x86 packages. testexport will then find the arm socat package rather than the x86 one and try and run arm binaries within an x86 qemu image with no success. The reproducer for this was: oe-selftest -r fitimage.FitImageTests.test_initramfs_bundle runtime_test.TestImage.test_testimage_install This patch only symlinks in the compatible package archictures rather than all of them which fixes the failure and the resulting autobuilder intermittent failure too. [YOCTO #15190] (From OE-Core rev: 96954ff5ea258e8456c66bfa13a11fb4fe7a3808) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 30b45bcf49bf8207fd96bb45a55d7708661f3359) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* yocto-uninative: Update to 4.2 for glibc 2.38Michael Halstead2023-08-301-5/+5
| | | | | | | | | | | Uninative 4.2 adds glibc 2.38. (From OE-Core rev: f6c43c32394f1d603679061819f7720e5158ba3a) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c6654fab00a1b4e4bb05eec8b77c8c60e1f8a709) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* yocto-uninative: Update hashes for uninative 4.1Michael Halstead2023-08-301-4/+4
| | | | | | | | | | | This version includes fixes to patchelf. (From OE-Core rev: c6d5a51ff933c9f8570326cebeea43fc14bcb3ec) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1c5c8ff97ba0a7f9adc592d702b865b3d166a24b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* pseudo: Fix to work with glibc 2.38Richard Purdie2023-08-302-0/+73
| | | | | | | | | | | | | | | | | This adds a horrible hack to get pseudo working with glibc 2.38. We can't drop _GNU_SOURCE to something like _DEFAULT_SOURCE since we need the defines the gnu options bring in. That leaves using internal glibc defines to disable the c23 versions of strtol/fscanf and friends. Which would break pseudo build with 2.38 from running on hosts with older glibc. We'll probably need to come up with something better but this gets glibc 2.38 and working and avoids autobuilder failures. (From OE-Core rev: 387b276c2d56d58c2a25d59984fcaaf9c88ac788) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 596fb699d470d7779bfa694e04908929ffeabcf7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: Upgrade 3.1.1 -> 3.1.2Peter Marko2023-08-301-1/+1
| | | | | | | | | | | | | | | | https://github.com/openssl/openssl/blob/openssl-3.1/NEWS.md#major-changes-between-openssl-311-and-openssl-312-1-aug-2023 Major changes between OpenSSL 3.1.1 and OpenSSL 3.1.2 [1 Aug 2023] * Fix excessive time spent checking DH q parameter value (CVE-2023-3817) * Fix DH_check() excessive time with over sized modulus (CVE-2023-3446) * Do not ignore empty associated data entries with AES-SIV (CVE-2023-2975) * When building with the enable-fips option and using the resulting FIPS provider, TLS 1.2 will, by default, mandate the use of an extended master secret and the Hash and HMAC DRBGs will not operate with truncated digests. (From OE-Core rev: e8b876d6514f6257eaaddb7b44489367666504ba) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e65802383b02df6f502af859a927309d881bbb27) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gtk4: upgrade 4.10.4 -> 4.10.5Markus Volk2023-08-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Overview of Changes in 4.10.5, 05-08-2023 ========================================= * Fix ordering problems with filter model signals * Avoid lingering resize cursors * Fix alignment issues on sparc * Fix a problem with CSS corner values * Translation updates Brazilian Portuguese Czech Greek Spanish Vietnamese (From OE-Core rev: 168bab3ea6a4581f320e2eb7360f6a98f256d3d6) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 99deaf528acdd8ef7031e251a821721191968644) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* file: upgrade 5.44 -> 5.45Wang Mingyu2023-08-301-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: ========== -PR/465: psrok1: Avoid muslc asctime_r crash -add SIMH tape format support -bump the max size of the elf section notes to be read to 128K and make it configurable -PR/415: Fix decompression with program returning empty -PR/408: fix -p with seccomp -PR/412: fix MinGW compilation (From OE-Core rev: 6f1caa944982e265c394a554bfcfa8a105b1d698) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit facef006da35e22394a4cbb13243769586d10f31) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3-git: upgrade 3.1.31 -> 3.1.32Narpat Mali2023-08-301-1/+1
| | | | | | | | | | | | | | | | | | | The delta between 3.1.31 & 3.1.32 contains the CVE-2023-40267 fix and other bugfixes. Changelog: https://github.com/gitpython-developers/GitPython/releases/tag/3.1.32 - Bump cygwin/cygwin-install-action from 3 to 4 by @dependabot in #1572 - Fix up the commit trailers functionality by @itsluketwist in #1576 - Name top-level exceptions as private variables by @Hawk777 in #1590 - fix pypi long description by @eUgEntOptIc44 in #1603 - Don't rely on del by @r-darwish in #1606 - Block insecure non-multi options in clone/clone_from by @Beuc in #1609 (From OE-Core rev: fd38c8d91f95b44ea7b833772b9a07e1f1d74479) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc: stable 2.37 branch updatessanjana2023-08-301-1/+1
| | | | | | | | | | | | | | | Below commits on glibc-2.37 stable branch are updated. 58f7431fd7 sparc: Fix la_symbind for bind-now 260d4b742b nptl: Fix tst-cancel30 on sparc64 3f4b4e2cdd elf: _dl_find_object may return 1 during early startup 0930ff8eb3 realloc: Limit chunk reuse to only growing requests 8dcb1a5181 hppa: xfail debug/tst-ssp-1 when have-ssp is yes (From OE-Core rev: eef4f4502390d1e18770c604477dd63a1adcee6d) Signed-off-by: sanjana <sanjanasanju1608@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* librsvg: upgrade to 2.54.6Chee Yang Lee2023-08-301-1/+1
| | | | | | | | | update include fix for CVE-2023-38633. (From OE-Core rev: 295eedb61d8224cc4bbb0ced1864db0a6a74ab1f) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux/cve-exclusion: add generated CVE_CHECK_IGNOREsRoss Burton2023-08-301-28/+7218
| | | | | | | | | | | Run generate-cve-exclusions.py to generate the ignore lists. The ignores already in this file are included in the generated lines, so nothing is lost. (From OE-Core rev: 1328cd3a720735c848ab401b61f98fae4fd75dd3) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto: add script to generate kernel CVE_CHECK_IGNORE entriesRoss Burton2023-08-301-0/+101
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of manually looking up new CVEs and determining what point releases the fixes are incorporated into, add a script to generate the CVE_CHECK_IGNORE data automatically. First, note that this is very much an interim solution until the cve-check class fetches data from www.linuxkernelcves.com directly. The script should be passed the path to a local clone of the linuxkernelcves repository[1] and the kernel version number. It will then write to standard output the CVE_STATUS entries for every known kernel CVE. The script should be periodically reran as CVEs are backported and kernels upgraded frequently. [1] https://github.com/nluedtke/linux_kernel_cves Note: for the backport this is not a cherry-pick of the commit in master as the variable names are different. This incorporates the following commits: linux/generate-cve-exclusions: add version check warning linux/generate-cve-exclusions.py: fix comparison linux-yocto: add script to generate kernel CVE_STATUS entries (From OE-Core rev: f9bfaee1c05a61457ada7850d707a847f327e605) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ffmpeg: add CVE_CHECK_IGNORE for CVE-2023-39018Narpat Mali2023-08-301-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | CVE-2023-39018 belongs to ffmpeg-cli-wrapper (Java wrapper around the FFmpeg CLI) and not ffmpeg itself. As per CVE description, it is mentioned as FFmpeg 0.7.0 which is the version for ffmpeg-cli-wrapper and ffmpeg don't have 0.7.0 version at all. Debian & Bugzilla trackers have already marked as NOT-FOR-US/RESOLVED-INVALID. As it won't be affecting the ffmpeg package so, we can ignore the CVE-2023-39018 in ffmpeg recipe. References: https://github.com/bramp/ffmpeg-cli-wrapper https://github.com/FFmpeg/FFmpeg https://security-tracker.debian.org/tracker/CVE-2023-39018 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-39018 Upstream master patch: https://git.openembedded.org/openembedded-core/commit/?id=c21ed498b423c13463a4ae0bb475883cc7901847 (From OE-Core rev: d1c087713add2d780b4978b9d7ec33d514d68cd4) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: fix CVE-2023-38559Chee Yang Lee2023-08-302-0/+32
| | | | | | | (From OE-Core rev: 9552f934ae5305b9154f1560d4823b168457b784) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: fix CVE-2023-32001Chee Yang Lee2023-08-302-0/+40
| | | | | | | (From OE-Core rev: f6ab54c91d18d5ebb0c7e27e41f49fc17c9d8c1c) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* build-appliance-image: Update to mickledore head revisionyocto-4.2.3mickledore-4.2.3Steve Sakoman2023-08-181-1/+1
| | | | | | (From OE-Core rev: 7e3489c0c5970389c8a239dc7b367bcadf554eb5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: bump version for 4.2.3 releaseSteve Sakoman2023-08-181-1/+1
| | | | | | (From meta-yocto rev: a6cbea61972f3ee292f6177f3923d797d8841cd8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* poky.conf: update SANITY_TESTED_DISTROS to match autobuilderMichael Opdenacker2023-08-181-3/+6
| | | | | | | | | | | | From the intersection of the list of allowed workers on https://git.yoctoproject.org/yocto-autobuilder2/tree/config.py and the active workers on https://autobuilder.yoctoproject.org/typhoon/#/workers (From meta-yocto rev: e1590665ab1a4fa4ffb2321a4a63e038c153e5d8) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kernel: don't fail if Modules.symvers doesn't existJoel Stanley2023-08-181-2/+2
| | | | | | | | | | | | | | | Kernels that do not use modules do not have the Modules.symvers file, which causes the previous one-liner to fail. Invert the logic so that the absence of the Modules.symvers is a passing situation but we still get failure checking on the install operation. (From OE-Core rev: 6fff6ce35864cfef70ffd10db3b7d5f090dd3f62) Signed-off-by: Joel Stanley <joel@jms.id.au> Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 856c916ffbf3438d8cf5d8bed344473bde03b56e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: ensure all ptest failures are caughtAlexander Kanavin2023-08-182-1/+3
| | | | | | | | | | | | | | | Piping results through sed is masking failures that aren't picked up by sed expressions. One such failure probes the source tree, and so isn't relevant for target testing, and can be disabled. (From OE-Core rev: 3afb1edc760a7cc1048aa9ae009a8cc6d32f9e89) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 86c96cbf68d986b44fdb45e988343ce29d6b8cc7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* devtool/upgrade: raise an error if extracting source produces more than one ↵Alexander Kanavin2023-08-181-0/+2
| | | | | | | | | | | | | | | | | | | | | directory This can happen if running unpack task produces unrelated files and directories (e.g. if recipe_qa or other tasks run); in this case it's better to stop, rather than allow devtool to continue and error out much later with a message that has nothing to do with where the problem originated. The idea here was to handle tarballs that don't contain a top level directory and thus the source tree is one level up; this basically never happens, and if it does we should find a less brittle way to handle such tarballs. (From OE-Core rev: 814672f886b5859524dcc0c285d916a1ccca6605) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b25e922b271794906b22450c7e6cc18fcab51ff8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* maintainers.inc: Modify email addressAndrej Valek2023-08-181-1/+1
| | | | | | | | | | | andrej.valek@siemens.com -> andrej.v@skyrain.eu (From OE-Core rev: ac97d97f56d409fab994cdf2e43f4feefca058d3) Signed-off-by: Andrej Valek <andrej.v@skyrain.eu> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1af0edaa83934d67ff554be591968fc8cea42e4e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: split platform-specific Adreno shaders to separate packagesDmitry Baryshkov2023-08-181-6/+12
| | | | | | | | | | | | | | | | For newest Qualcomm platforms the firmware for the Adreno GPU consists of two parts: platform-independent SQE/GMU/GPMU/PFP/PM4 and platform-specific ZAP shader, which is used during the boot process. As the platform-independent parts can be shared between different platforms, split the platform-specific part to the separate package. (From OE-Core rev: d13736bd39b4bf10d25f25cbfe47910bb2b42327) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bf00a042d2fa2eb4b20d8c5982926758821bf990) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware : Add firmware of RTL8822 serieBELOUARGA Mohamed2023-08-181-0/+8
| | | | | | | | | | | | | RTL8822 is a serie of wireless modules that need firmwares to function correctly. The linux firmware recipe does not have a package of these firmwares, and this commit add them. (From OE-Core rev: fffb1425b94818ef282760551296b60f9e6e90d0) Signed-off-by: BELOUARGA Mohamed <m.belouarga@technologyandstrategy.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6459959beeb91c0b694f5f17b6587a12c6dcb087) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-firmware: Fix mediatek mt7601u firmware pathMarek Vasut2023-08-181-1/+1
| | | | | | | | | | | | The following linux-firmware commit moved the mt7601u firmware blob into a mediatek/ subdirectory, update the path accordingly. 8451c2b1 ("mt76xx: Move the old Mediatek WiFi firmware to mediatek") Fixes: 64603f602d ("linux-firmware: upgrade 20230404 -> 20230515") (From OE-Core rev: 9eb02966397c825d1482dd59246c0d446cc7454d) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* glibc-locale: use stricter matching for metapackages' runtime dependenciesAlexander Kanavin2023-08-181-4/+4
| | | | | | | | | | | | | | | | | | | | This resolves two issues: 1. metapackages were depending on themselves (except -binaries which wouldn't match against 'glibc-binary'). 2. for the nativesdk variant, due to a non-empty dependency list at parsing time caused by issue 1, map_depends_variable() from meta/lib/oe/classextend.py was forcibly setting PACKAGES to the initial parse-time value (e.g. missing the dynamically created packages). This meant that three out of four nativesdk- metapackages were entireyly missing the dependencies on the respective dynamic package sets. (From OE-Core rev: 580d92c2ae5aab9f4afab1e534291c26dd5bc5c6) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a90fd3afe9184aa1870b34a826e3ba0563477d4b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/ssh: Further improve process exit handlingRichard Purdie2023-08-181-2/+3
| | | | | | | | | | | | | | | | It looks like there were further cases where orphaned processes may be left behind since the .kill() calls may be unsuccessful if the process terminated due to the terminate or through normal exit. In that situation .wait() wouldn't have been called. Further tweak the exit code paths to ensure .wait() is called to update the returncode value before returning in all cases. (From OE-Core rev: f647d1400bfa5b8eab81b2b2e2c86df306970a71) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0a0a1731e38edfa72a141e8fd8f2de52be562e94) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* tcf-agent: Update to 1.8.0 releaseMark Hatle2023-08-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | New 1.8 release of tcf-agent. Implements DWARF 5 support and various bug fixes. Changelog since last SRCREV: Releng: Upversion TCF to 1.8 Fixed possible SEGFAULT after error message queue overflow Fixed misspelling in a comment TCF Agent: update breakpoint error message Fixed regression: possible segfault in run_safe_events() Bug 581978 - TCF agent wrong handle the call frame debug info generated by LLVM 16 for RISC-V DWARF: a bit faster implementation of dio_ReadAddressX() Bug 581971 - Failed to handle loclist for DWARF 5 Fixed handling of situation when a context resumed or exited during breakpoint evaluation Bug 581799 - when loads .debug_info section from dwarf 5 file, the content of some part are zero Updated examples/daytime/readme.txt (From OE-Core rev: 1b5b577f1b766ed6f98b6854e6968d4b9b02a45a) Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 0c2c7c910fa933bc46f69207f1f7641c1e7b77e0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade to v9.18.17Sudip Mukherjee2023-08-1810-2/+2
| | | | | | | | | | | | | | | | | Changes: Update license checksum: only whitespace change. Update sha256sum for new version. Additional change: Do not use version with the foldername, which will result in less diffstat with future upgrades. (From OE-Core rev: 742833f076ae44036369b9570bb1584c62d9047b) Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 1eda31b370ab4129ad149c45f1e43a44d6db9241) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: upgrade to 9.3p2Ross Burton2023-08-181-1/+1
| | | | | | | | | | | | | | | | 9795c401 (tag: V_9_3_P2) OpenSSH 9.3p2 bde3635f update version in README f673f2f3 update RPM spec versions d7790cdc disallow remote addition of FIDO/PKCS11 keys b23fe83f terminate pkcs11 process for bad libraries This includes the fix for CVE-2023-38408. (From OE-Core rev: b76fb3ee4b339cfbbb332ed239826b3efcdb6f1e) Signed-off-by: Ross Burton <ross.burton@arm.com> (cherry picked from commit 7ae89bdeaa97c8d6a0b63e92da31290548f03168) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* binutils: stable 2.40 branch updatessanjana2023-08-181-1/+1
| | | | | | | | | | | | | Below commits on binutils-2.40 stable branch are updated. 391fd4d9ee5 PR30697, ppc32 mix of local-dynamic and global-dynamic TLS 7ad52a2357f [GOLD] powerpc DT_RELACOUNT 03f49a0619c PR30536, ppc64el gold linker produces unusable clang-16 binary (From OE-Core rev: 74e6452a9fbeb928a635869160bc17cfeab867f0) Signed-off-by: sanjana <sanjanasanju1608@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: fix CVE-2023-2861Yogita Urade2023-08-182-0/+172
| | | | | | | | | | | | qemu: 9pfs: prevent opening special files Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-2861 (From OE-Core rev: 4dd99f7f48664dbaef7f3a083a9d362552ba44ac) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: fix CVE-2023-3255Yogita Urade2023-08-182-0/+66
| | | | | | | | | | | | QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3255 (From OE-Core rev: 886536b056230a9d72c900eacc8d1d8b44bd2836) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: fix CVE-2023-3301Yogita Urade2023-08-182-0/+66
| | | | | | | | | | | | | qemu: hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3301 (From OE-Core rev: 82bf6c4cba88dc9f25caf14d60e79ce0c366919c) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* dev-manual: wic.rst: Update native tools build commandDaniel Semkowicz2023-08-151-1/+1
| | | | | | | | | | | | | | | | Requirements list seems to be outdated. It is not possible to follow instructions for Raw Mode as not all of the native tools are available. All wic dependencies are gathered under wic-tools package. Some commands in the instruction already use wic-tools native sysroot, but this dependency is not specified in the requirements. Update the command for building native tools to use wic-tools instead of the seperate packages. (From yocto-docs rev: 8e6752a9e55d16f3713e248b37f9d4d2745a2375) Signed-off-by: Daniel Semkowicz <dse@thaumatec.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* migration-guides: add release notes for 4.2.2Lee Chee Yang2023-08-152-0/+331
| | | | | | | | (From yocto-docs rev: 38f76e898192154aaa18b1bdb90c0b5dff0b50c9) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ref-manual: document image-specific variant of INCOMPATIBLE_LICENSEAlexander Kanavin2023-08-152-9/+20
| | | | | | | | | | | | This has been around without being properly documented since 2019 (!!!), and is nowadays the preferred method for enforcing license restrictions, especially since meta-gplv2 is officially obsolete. (From yocto-docs rev: 40d3cb5257fea3669efe28e534e5f9479a2837b3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* target/ssh: Ensure exit code set for commandsRichard Purdie2023-08-151-0/+3
| | | | | | | | | | | | | | As spotted by Joshua Watt, the returncode isn't set until .poll() or .wait() is called so we need to call this after the .kill() call. This fixes return code reporting so that timeouts for example now return an exit code when they didn't before. (From OE-Core rev: 6bd6b7110ea2029fc736a40760536adfaf28eec0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3924e94214b5135369be2551d54fb92097d35e95) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ltp: Add kernel loopback module dependencyRichard Purdie2023-08-151-0/+2
| | | | | | | | | | | | | The qemuarm64 kernel builds loopback device support as a module and it isn't included in the image leading to ltp test failures on that platform. Add the missing kernel module RRECOMMENDS to avoid this and fix those errors. (From OE-Core rev: 5273868106b46cd330e15f36f4592f05ca9e3feb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8691020f33a644d52b7d867376ef3c85be84abf9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/runtime/ltp: Increase ltp test output timeoutRichard Purdie2023-08-151-1/+1
| | | | | | | | | | | | On our slower arm server, the tests currently timeout leading to inconsistent test results. Increase the timeout to avoid this and aim to make the test results consistent. (From OE-Core rev: a9e2179f3b4a4fe7321539de9e8e2707c9ca350a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9a8b49208f3c99e184eab426360b137bc773aa31) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/target/ssh: Ensure EAGAIN doesn't truncate outputRichard Purdie2023-08-151-0/+3
| | | | | | | | | | | | We have a suspicion that the read() call may return EAGAIN on the non-blocking fd and this may truncate test output leading to some of our intermittent failures. Tweak the code to avoid this potential issue. (From OE-Core rev: fd9e47ee5653dad1f24d823d32d2012e7f8bb3a6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a8920c105725431e989cceb616bd04eaa52127ec) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* file: fix the way path is written to environment-setup.dOleksandr Hnatiuk2023-08-151-1/+1
| | | | | | | | | | | | | | | | | | | | $OECORE_NATIVE_SYSROOT is not escaped, thus it is expanded to an empty string. This happens to work because we have ${datadir} which in this context is relocated to the buildtools sysroot after installation of buildtools. If the $ before OECORE_NATIVE_SYSROOT is escaped, it will be saved to file.sh as intended, but MAGIC will point to the wrong location because both OECORE_NATIVE_SYSROOT and datadir resolve to sysroot which doubles the path like so: /path/to/buildtools/sysroots/x86_64-xesdk-linux/path/to/buildtools/sysroots/x86_64-xesdk-linux/usr/share/misc/magic.mgc which does not exist. So, removing reference to OECORE_NATIVE_SYSROOT. (From OE-Core rev: 7ae5c9a17d6f8133fa5b4e127dd4e9cc43454ee8) Signed-off-by: Oleksandr Hnatiuk <ohnatiuk@cisco.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit c6206249683876670602888e78ecaf719753a317) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest/cases/glibc.py: switch to using NFS over TCPAnuj Mittal2023-08-151-2/+2
| | | | | | | | | | | | | This provides a more reliable test execution when running tests that write a large buffer/file and significantly reduces the localedata test failures. (From OE-Core rev: e138b648a56a0146588dc52edd9b44929ed8a73e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 97a7612e3959bc9c75116a4e696f47cc31aea75d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/utils/nfs: allow requesting non-udp portsAnuj Mittal2023-08-151-2/+2
| | | | | | | | | | | Allows setting up NFS over TCP as well. (From OE-Core rev: a177ce907ec7a044659ec49c679e66f49cd71c43) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e1ff9b9a3b7f7924aea67d2024581bea2e916036) Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-02-12 10:04:13 +0000