Re: [OE-core] [PATCH][dizzy 1/6] glibc/wscanf: CVE-2015-1472

> On Dec 14, 2015, at 4:24 AM, Sona Sarmadi wrote: > > Fixes a heap buffer overflow in glibc wscanf. > > References: > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472 > https://sourceware.org/ml/libc-alpha/2015-02/msg00119.html > http://openwall.com/lists/oss-security/2015/02/04/1

Re: [OE-core] [PATCH 01/10] openssl: update to 1.0.2e

> On Dec 14, 2015, at 6:34 AM, Otavio Salvador > wrote: > > On Wed, Dec 9, 2015 at 12:40 PM, Alexander Kanavin > wrote: >> [YOCTO #8765] >> [YOCTO #8758] >> >> Signed-off-by: Alexander Kanavin > > This update seems to have break imx53 build[1]. > > 1. > http://ci.ossystems.com.br/view/All

Re: [OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

> On Dec 14, 2015, at 2:35 PM, Haris Okanovic wrote: > > From: Gratian Crisan > > This change allows distributions to provide multiple builds of kernel > and module packages. For example, a distro may want provide an alternate > debug kernel in a package feed for debug/testing. > > Templetize

[OE-core] [PATCH 2/2] bitbake.conf: Define source package, disabled by default

Add ${PN}-src to PACKAGES with a default set of FILES_{PV}-src per FHS: https://refspecs.linuxfoundation.org/FHS_3.0/fhs-3.0.html#usrsrcSourceCode Define a staging directory SRC_D under ${D}. Define ENABLE_SRC_INSTALL to enable source staging via package.bbclass's do_install_source() task. It's d

[OE-core] [PATCH 1/2] package.bbclass/package.py: Add do_install_source() task

Add do_install_source() task to stage a recipe's SRC_URI files under SRC_D. Dependencies: After do_fetch() to ensure SRC_URI files are downloaded After do_install() because it resets ${D} that's also used by this task Before do_package() to stage files before writing installers No-ops unless E

Re: [OE-core] [PATCHv2 2/2] ptest-runner: Add a recipe for install ptest-runner 2.0.

> On Dec 14, 2015, at 2:57 PM, Aníbal Limón > wrote: > > [YOCTO #8021] > > Signed-off-by: Aníbal Limón > --- > .../ptest-runner/ptest-runner_2.0.bb | 28 ++ > 1 file changed, 28 insertions(+) > create mode 100644 meta/recipes-support/ptest-runner/ptest-runner_

Re: [OE-core] [PATCH 2/2] oe-buildenv-internal: preserve existing BB_ENV_EXTRAWHITE

On Thu, Dec 3, 2015 at 3:09 PM, Juro Bystricky wrote: > According to the BitBake User Manual the environment variable > BB_ENV_EXTRAWHITE > specifies an additional set of variables to allow through (whitelist) from the > external environment into BitBake's datastore. However, running: > > $ sou

[OE-core] [PATCHv2 1/2] ptest-runner: Add version 2.0 re-implementation in python.

The new ptest-runner supports timeout of upstream tests executed, it looks for stdout of process and if no information is available in certain time (defaults to 5m) the process is treaty as blocked and ptest-runner kills it, this handles problems of ptest-runner being blocked indefinitly for upstre

[OE-core] [PATCHv2 0/2] ptest-runner 2.0

This v2 fixes default timeout to 5minutes also add support for wait indefinitely when specify -1 in timeout option. The changes can be reviewed at, http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=alimon/ptest-runner Aníbal Limón (2): ptest-runner: Add version 2.0 re-implementation in

[OE-core] [PATCHv2 2/2] ptest-runner: Add a recipe for install ptest-runner 2.0.

[YOCTO #8021] Signed-off-by: Aníbal Limón --- .../ptest-runner/ptest-runner_2.0.bb | 28 ++ 1 file changed, 28 insertions(+) create mode 100644 meta/recipes-support/ptest-runner/ptest-runner_2.0.bb diff --git a/meta/recipes-support/ptest-runner/ptest-runner_2.

Re: [OE-core] [PATCH] clutter-gst-3.0: add missing gudev build dependency

On 14 December 2015 at 22:59, Martin Jansa wrote: > It's libgudev not just gudev, see: > Damnit, thanks. I'll drop mine and pick yours. :) Ross -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.

Re: [OE-core] [PATCH] clutter-gst-3.0: add missing gudev build dependency

It's libgudev not just gudev, see: http://git.openembedded.org/openembedded-core-contrib/commit/?h=jansa/master&id=b4183af99a9ebd2c394c6eceb528ea97821b915a On Mon, Dec 14, 2015 at 11:34 PM, Ross Burton wrote: > This is an auto-detected build dependency but upstream doesn't have an > option to >

Re: [OE-core] [PATCH 11/20] flex: update to 2.6.0

On 14 December 2015 at 15:05, Alexander Kanavin < alexander.kana...@linux.intel.com> wrote: > Drop backported > 0001-bison-test-fixes-Do-not-use-obsolete-bison-construct.patch > > Test cases have been completely rearranged upstream, so ptest support > is fully rewritten. > Fails to build for me:

[OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

From: Gratian Crisan This change allows distributions to provide multiple builds of kernel and module packages. For example, a distro may want provide an alternate debug kernel in a package feed for debug/testing. Templetize kernel package name: Add a "weak" variable KERNEL_PACKAGE_NAME used as

[OE-core] [PATCH] clutter-gst-3.0: add missing gudev build dependency

This is an auto-detected build dependency but upstream doesn't have an option to toggle it. As GStreamer builds with gudev enabled, simply enable it here. Signed-off-by: Ross Burton --- meta/recipes-graphics/clutter/clutter-gst-3.0.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff

Re: [OE-core] [PATCH] kernel: Add support for multiple kernel packages

Hi Bruce, Thanks for taking time to look over our patch! On 12/14/2015 02:02 PM, Bruce Ashfield wrote: On Mon, Dec 14, 2015 at 2:17 PM, Bruce Ashfield mailto:bruce.ashfi...@gmail.com>> wrote: On Mon, Dec 14, 2015 at 2:06 PM, Haris Okanovic mailto:haris.okano...@ni.com>> wrote:

Re: [OE-core] [PATCH 04/20] cdrtools-native: update to 3.01 final

On 14 December 2015 at 15:05, Alexander Kanavin < alexander.kana...@linux.intel.com> wrote: > +PE = "1" > A PE is for live, not just for Christmas. I've changed this locally to use PV="3.01a31+really3.0.1" which should hopefully do the right thing but disappear when 3.0.2 is released. Ross --

[OE-core] [oe-core][PATCH] initscripts: Add RREPLACES for initscripts-functions

Back at commit acaf650aa4d458120038ba431c2d1ea563f90f77 initscripts was split into the initscripts and initscripts-functions packages. However, no RREPLACES was listed. When using opkg for package managment, upgrades fail unless --force-overwrite is specified. Add an RREPLACES declaration stating

Re: [OE-core] [PATCH 2/6] uclibc: Switch to using uclibc-ng

> On Dec 14, 2015, at 4:25 AM, Burton, Ross wrote: > > On 14 December 2015 at 06:23, Khem Raj > wrote: > --- /dev/null > +++ > b/meta/recipes-core/uclibc/uclibc-git/0001-Revert-glibc-compat-bump-glibc-minor-version.patch > @@ -0,0 +1,26 @@ > +From f9f566849ad0785b2fd

Re: [OE-core] [PATCH 2/6] uclibc: Switch to using uclibc-ng

> On Dec 14, 2015, at 4:20 AM, Burton, Ross wrote: > > > On 14 December 2015 at 06:23, Khem Raj > wrote: > diff --git a/meta/recipes-core/uclibc/uclibc_git.bb > b/meta/recipes-core/uclibc/uclibc_git.bb > index fd02b3d.

Re: [OE-core] [PATCH 2/2] kernel-yocto.bbclass: move do_kernel_link_vmlinux() into kernel.bbclass

Hi Mario, On Mon, Dec 14, 2015 at 12:08 PM, Mario Domenech Goulart wrote: > Hello Andre, > > On Mon, 14 Dec 2015 12:04:50 -0800 Andre McCurdy wrote: > >> Move do_kernel_link_vmlinux() from kernel-yocto.bbclass into >> kernel.bbclass so that it's available to any kernel recipe. >> >> Note that th

Re: [OE-core] [PATCH 2/2] kernel-yocto.bbclass: move do_kernel_link_vmlinux() into kernel.bbclass

Hello Andre, On Mon, 14 Dec 2015 12:04:50 -0800 Andre McCurdy wrote: > Move do_kernel_link_vmlinux() from kernel-yocto.bbclass into > kernel.bbclass so that it's available to any kernel recipe. > > Note that the task is not enabled by default in kernel-yocto.bbclass, > so don't enable by default

[OE-core] [PATCH 2/2] kernel-yocto.bbclass: move do_kernel_link_vmlinux() into kernel.bbclass

Move do_kernel_link_vmlinux() from kernel-yocto.bbclass into kernel.bbclass so that it's available to any kernel recipe. Note that the task is not enabled by default in kernel-yocto.bbclass, so don't enable by default in kernel.bbclass either. To enable, see the example in linux-yocto.inc, ie:

[OE-core] [PATCH 1/2] kernel-yocto.bbclass: remove do_kernel_link_vmlinux from SRCTREECOVEREDTASKS

The do_kernel_link_vmlinux() task modifies the build directory (not the source tree) and should not be skipped when externalsrc is being used. Signed-off-by: Andre McCurdy --- meta/classes/kernel-yocto.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/kerne

Re: [OE-core] [PATCH] kernel: Add support for multiple kernel packages

On Mon, Dec 14, 2015 at 2:17 PM, Bruce Ashfield wrote: > > > On Mon, Dec 14, 2015 at 2:06 PM, Haris Okanovic > wrote: > >> From: Gratian Crisan >> >> Templetize kernel package name: >> >> Add a "weak" variable KERNEL_PACKAGE_NAME used as the base name for kernel >> packages. It defaults to the

Re: [OE-core] [PATCH] kernel: Add support for multiple kernel packages

On Mon, Dec 14, 2015 at 2:06 PM, Haris Okanovic wrote: > From: Gratian Crisan > > Templetize kernel package name: > > Add a "weak" variable KERNEL_PACKAGE_NAME used as the base name for kernel > packages. It defaults to the old hard-coded name 'kernel' but it can be > redefined by recipes that p

[OE-core] [PATCH] kernel: Add support for multiple kernel packages

From: Gratian Crisan Templetize kernel package name: Add a "weak" variable KERNEL_PACKAGE_NAME used as the base name for kernel packages. It defaults to the old hard-coded name 'kernel' but it can be redefined by recipes that provide additional kernel packages in order to avoid build conflicts.

[OE-core] State of bitbake world, test-dependencies 2015-11-19

This time full build (testing all recipes available in "my world" - 2503 recipes), it took record-breaking 25days to finish. Complete log: http://logs.nslu2-linux.org/buildlogs/oe/world/log.dependencies.20151120_144802.log/ I've already sent patches for few of them, will send one for pulseaudio-

Re: [OE-core] [PATCH 0/3] recipetool/devtool: send errors to stderr

On Mon, Dec 14, 2015 at 5:06 AM, Burton, Ross wrote: > On 23 September 2015 at 19:24, Christopher Larson > wrote: > >> are available in the git repository at: >> >> git://github.com/kergoth/openembedded-core scriptutils-log-improvements >> >> https://github.com/kergoth/openembedded-core/tree/s

Re: [OE-core] [PATCH v2] libsndfile1: 1.0.25 -> 1.0.26

On Mon, 2015-12-14 at 12:17 +0200, Alexander Kanavin wrote: > On 12/12/2015 04:23 AM, Tanu Kaskinen wrote: > > Main points from the release announcement: > > There's also other audio stuff in need of update (alsa, pulseaudio), can  > you look into that? Now is a good time to do those version updat

[OE-core] [PATCH] webkit: fix libdir/libexecdir confusion

Files didn't get installed to $libdir/webkitgtk, they got installed to $libexecdir. Signed-off-by: Ross Burton --- meta/recipes-sato/webkit/webkitgtk_2.8.5.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-sato/webkit/webkitgtk_2.8.5.bb b/meta/recipes-sato/webk

[OE-core] [PATCH] unifdef: upgrade to 2.11

Add COPYING to the license checksums, and update the checksum for unifdef.c as the copyright dates changed. Signed-off-by: Ross Burton --- meta/recipes-devtools/unifdef/unifdef_2.10.bb | 15 --- meta/recipes-devtools/unifdef/unifdef_2.11.bb | 17 + 2 files changed, 17

[OE-core] [PATCH] xcb: don't build-depend on python

xcb-proto had a dependency on python-native as it builds and installs a Python module, but xcb-proto is very low in the build to force a dependency on python-native. As it turns out libxcb simply asks pkg-config for the full path to the module xcb-proto installed and uses it directly so there is n

Re: [OE-core] [PATCH 1/2] ptest-runner: Add version 2.0 re-implementation in python.

On 12/11/2015 05:23 PM, Nathan Lynch wrote: > On 12/07/2015 03:26 PM, Aníbal Limón wrote: >> The new ptest-runner supports timeout of upstream tests executed, >> it looks for stdout of process and if no information is available >> in certain time (defaults to 5m) the process is treaty as blocked

Re: [OE-core] [PATCH 2/6] uclibc: Switch to using uclibc-ng

On Mon, Dec 14, 2015 at 4:20 AM, Burton, Ross wrote: > Was this for testing? Presumably I can drop it? yes drop it. -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembed

[OE-core] [PATCH 05/20] cpio: update to 2.12

Drop backported patches: Fix-symlink-bad-length-test-for-64-bit-architectures.patch fix-memory-overrun.patch fix-testcase-symlink-bad-lengths.patch 0001-fix-testcase-of-symlink-bad-length.patch statdef.patch is fixing code that doesn't exist anymore. The problem handled by remove-gets.patch has be

[OE-core] [PATCH 04/20] cdrtools-native: update to 3.01 final

Introduce a PE to avoid the version going backwards Signed-off-by: Alexander Kanavin --- .../{cdrtools-native_3.01a31.bb => cdrtools-native_3.01.bb}| 10 -- 1 file changed, 4 insertions(+), 6 deletions(-) rename meta/recipes-devtools/cdrtools/{cdrtools-native_3.01a31.bb => cdrtools

[OE-core] [PATCH 03/20] puzzles: update to current commit

gtk+3 support has been added upstream, so add an option for that. Signed-off-by: Alexander Kanavin --- .../puzzles/files/fix-compiling-failure-with-option-g-O.patch| 9 - meta/recipes-sato/puzzles/puzzles_git.bb | 8 ++-- 2 files changed, 6 insertions(+),

[OE-core] [PATCH 02/20] gnutls: update to 3.4.7

libidn is needed by the new version to compare hostnames. Openssl compatibility is no longer enabled by default, but is required by other packages in oe-core. Signed-off-by: Alexander Kanavin --- meta/recipes-support/gnutls/gnutls.inc | 3 ++- ...tch => 0001-configure.ac-fix-sed-com

[OE-core] [PATCH 12/20] docbook-xsl-stylesheets: fix UPSTREAM_CHECK_REGEX

Versions ending in .0 are release candidates, so exclude those. Signed-off-by: Alexander Kanavin --- meta/recipes-devtools/docbook-xml/docbook-xsl-stylesheets_1.78.1.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-devtools/docbook-xml/docbook-xsl-stylesheet

[OE-core] [PATCH 08/20] python-numpy: update to 1.10.1

LICENSE checksum has changed due to updated copyright years Signed-off-by: Alexander Kanavin --- ...-usr-and-so-on-for-libraries-by-default-.patch} | 33 ++ ...ython-numpy_1.7.0.bb => python-numpy_1.10.1.bb} | 9 +++--- 2 files changed, 31 insertions(+), 11 deletions(-) ren

[OE-core] [PATCH 06/20] dmidecode: update to 3.0

LICENSE is still GPLv2, with a different physical address for the FSF. Signed-off-by: Alexander Kanavin --- .../dmidecode/{dmidecode_2.12.bb => dmidecode_3.0.bb}| 9 + 1 file changed, 5 insertions(+), 4 deletions(-) rename meta/recipes-devtools/dmidecode/{dmidecode_2.12.bb =

[OE-core] [PATCH 20/20] grep: update to 2.22

Drop backported grep-fix-CVE-2015-1345.patch Signed-off-by: Alexander Kanavin --- .../grep/grep/grep-fix-CVE-2015-1345.patch | 154 - .../grep/{grep_2.21.bb => grep_2.22.bb}| 5 +- 2 files changed, 2 insertions(+), 157 deletions(-) delete mode 100644 me

[OE-core] [PATCH 10/20] mtd-utils: update to 1.5.2

Drop 0001-hashtable-Remove-duplicate-hashtable_iterator_value-.patch, the problem has been fixed upstream. Drop backported 0001-mtd-utils-libfec-use-standard-C-type-instead-of-u_lo.patch Rebase 0001-Fix-build-with-musl.patch (2 out of 3 fixes have been made upstream) Signed-off-by: Alexander Kanav

[OE-core] [PATCH 00/20] Recipe version updates

Here are more recipe version updates - I've been looking at recipes that have been last touched in 2014 or earlier. Other than valgrind (which needs a significant effort to update), they're all here. The following changes since commit b3d6872bf169a13e572638e3809c50a868246616: lttng-tools: Rever

[OE-core] [PATCH 14/20] kbd: update to 2.0.3

0003-Only-inluclude-kernel-headers-with-glibc.patch is handling #include lines that are no longer present in the upstream source so it was dropped. Signed-off-by: Alexander Kanavin --- ...-Only-inluclude-kernel-headers-with-glibc.patch | 29 -- .../kbd/{kbd_2.0.2.bb => kbd_2

[OE-core] [PATCH 18/20] babeltrace: update to 1.3.1

Signed-off-by: Alexander Kanavin --- .../lttng/{babeltrace_1.2.4.bb => babeltrace_1.3.1.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename meta/recipes-kernel/lttng/{babeltrace_1.2.4.bb => babeltrace_1.3.1.bb} (90%) diff --git a/meta/recipes-kernel/lttng/babelt

[OE-core] [PATCH 11/20] flex: update to 2.6.0

Drop backported 0001-bison-test-fixes-Do-not-use-obsolete-bison-construct.patch Test cases have been completely rearranged upstream, so ptest support is fully rewritten. Signed-off-by: Alexander Kanavin --- ...fixes-Do-not-use-obsolete-bison-construct.patch | 80 -- meta/rec

[OE-core] [PATCH 17/20] powertop: update to 2.8

Signed-off-by: Alexander Kanavin --- meta/recipes-kernel/powertop/{powertop_2.7.bb => powertop_2.8.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-kernel/powertop/{powertop_2.7.bb => powertop_2.8.bb} (88%) diff --git a/meta/recipes-kernel/powertop/powertop_2.7.

[OE-core] [PATCH 13/20] gmp: update to 6.1.0

gmp-6.0.0-ppc64.patch was a backport configure.patch was a very old patch with an unclear purpose and significant rebasing effort required. Signed-off-by: Alexander Kanavin --- meta/recipes-support/gmp/gmp-6.0.0/configure.patch | 222 - .../gmp/gmp-6.0.0/gmp-6.0.0-ppc64.patch

[OE-core] [PATCH 19/20] procps: update to 3.3.11

fix-configure.patch was fixing lines that have been removed upstream. Signed-off-by: Alexander Kanavin --- .../procps/procps/fix-configure.patch | 19 --- .../procps/{procps_3.3.10.bb => procps_3.3.11.bb} | 5 ++--- 2 files changed, 2 insertions(+), 22 deleti

[OE-core] [PATCH 16/20] nfs-utils: update to 1.3.3

ipv6 support now requires libtirpc, so un-disable and add it to dependencies. Signed-off-by: Alexander Kanavin --- .../nfs-utils/{nfs-utils_1.3.1.bb => nfs-utils_1.3.3.bb} | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) rename meta/recipes-connectivity/nfs-utils/{nfs-util

[OE-core] [PATCH 15/20] systemtap: update to 2.9

Signed-off-by: Alexander Kanavin --- meta/recipes-kernel/systemtap/systemtap-uprobes_git.bb | 2 -- meta/recipes-kernel/systemtap/systemtap_git.inc| 4 ++-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/meta/recipes-kernel/systemtap/systemtap-uprobes_git.bb b/meta/recipe

[OE-core] [PATCH 07/20] libxml-simple-perl: update to 2.22

LICENSE checksum changed because of copyright year change in the text. Signed-off-by: Alexander Kanavin --- .../perl/{libxml-simple-perl_2.20.bb => libxml-simple-perl_2.22.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta/recipes-devtools/perl/{libxml-simple-perl_2.20.

[OE-core] [PATCH 01/20] libidn: add native and nativesdk support

This is needed because gnutls now requires libidn. Signed-off-by: Alexander Kanavin --- meta/recipes-extended/libidn/libidn_0.6.14.bb | 3 +++ meta/recipes-extended/libidn/libidn_1.32.bb | 3 +++ 2 files changed, 6 insertions(+) diff --git a/meta/recipes-extended/libidn/libidn_0.6.14.bb b/me

[OE-core] [PATCH 09/20] unfs3: update to r497

Drop fix_warnings.patch as it's been merged upstream. Signed-off-by: Alexander Kanavin --- .../unfs3/unfs3/fix_warnings.patch | 53 -- .../{unfs3_0.9.22.r490.bb => unfs3_0.9.22.r497.bb} | 11 ++--- 2 files changed, 5 insertions(+), 59 deletions(-) delete mode

Re: [OE-core] [PATCH 01/10] openssl: update to 1.0.2e

On Wed, Dec 9, 2015 at 12:40 PM, Alexander Kanavin wrote: > [YOCTO #8765] > [YOCTO #8758] > > Signed-off-by: Alexander Kanavin This update seems to have break imx53 build[1]. 1. http://ci.ossystems.com.br/view/All%20failing%20jobs/job/fsl-community-bsp-master-next_x11-imx53qsb/909/consoleText

[OE-core] [PATCH 4/4] libpng: Update SRC_URI to use GENTOO_MIRROR

Update SRC_URI to use GENTOO_MIRROR as SOURCEFORGE_MIRROR continue to move around the release files. [YOCTO #8739] Signed-off-by: Maxin B. John --- meta/recipes-multimedia/libpng/libpng_1.6.20.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/recipes-multimedia/libpn

[OE-core] [PATCH 1/4] libxslt: use proper SRC_URI

Remove extra / from SRC_URI Signed-off-by: Maxin B. John --- meta/recipes-support/libxslt/libxslt_1.1.28.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/libxslt/libxslt_1.1.28.bb b/meta/recipes-support/libxslt/libxslt_1.1.28.bb index bedc03e..23ac599

[OE-core] [PATCH v3 2/4] libical: Upgrade 1.0.0 -> 1.0.1

* Build system changed to cmake * Patch build system to not check for perl (we use host perl which won't be found) * Patch build system to not break on parallel builds Signed-off-by: Jussi Kukkonen Signed-off-by: Maxin B. John --- .../Depend-on-headers-to-fix-parallel-build.patch | 46 ++

[OE-core] [PATCH 3/4] libpng12: Upgrade 1.2.54 -> 1.2.55

1.2.54 -> 1.2.55 No change in License.The license checksums changed because of update in Copyright date. Update SRC_URI to use GENTOO_MIRROR as SOURCEFORGE_MIRROR continue to move around the release files. [YOCTO #8739] Signed-off-by: Maxin B. John --- .../libpng/{libpng12_1.2.54.bb => libpng1

[OE-core] [PATCH] useradd: Allow overriding USERADDDEPENDS for native

If I want to be able to override USERADDDEPENDS from another bbclass, I need to give USERADDDEPENDS a default value and use DEPENDS_append for the different types of class. This is one example of what I need to be able to do in another .bbclass: USERADDDEPENDS_class-native = " base-files-native ba

[OE-core] [PATCH] gettext: Upgrade 0.19.4 -> 0.19.6

Signed-off-by: Fan Xin --- .../gettext/{gettext-0.19.4 => gettext-0.19.6}/parallel.patch | 0 meta/recipes-core/gettext/{gettext_0.19.4.bb => gettext_0.19.6.bb}| 4 ++-- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-core/gettext/{gettext-0.19.4 => gettext-0.19

Re: [OE-core] [PATCH 2/6] uclibc: Switch to using uclibc-ng

On 14 December 2015 at 06:23, Khem Raj wrote: > --- /dev/null > +++ > b/meta/recipes-core/uclibc/uclibc-git/0001-Revert-glibc-compat-bump-glibc-minor-version.patch > @@ -0,0 +1,26 @@ > +From f9f566849ad0785b2fd3fd6c4c5d324f9f822aac Mon Sep 17 00:00:00 2001 > +From: Khem Raj > +Date: Sun, 13 Dec

[OE-core] [PATCH][dizzy 6/6] libxml2: CVE-2015-8241

Upstream bug (contains reproducer): https://bugzilla.gnome.org/show_bug.cgi?id=756263 Upstream patch: https://git.gnome.org/browse/libxml2/commit/?id= ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe Signed-off-by: Tudor Florea Signed-off-by: Sona Sarmadi --- meta/recipes-core/libxml/libxml2.inc

[OE-core] [PATCH][dizzy 4/6] grep2.19: CVE-2015-1345

Fixes heap-based buffer overflow flaw in grep. Affected versions are: grep 2.19 through 2.21 Upstream fix: http://git.sv.gnu.org/cgit/grep.git/commit/?id=83a95bd8c8561875b948cadd417c653dbe7ef2e2 Signed-off-by: Sona Sarmadi --- .../grep/grep-2.19/grep2.19-CVE-2015-1345.patch| 129 +++

[OE-core] [PATCH][dizzy 2/6] libxml2: CVE-2015-7942

Fixes heap-based buffer overflow in xmlParseConditionalSections(). Upstream patch: https://git.gnome.org/browse/libxml2/commit/ ?id=9b8512337d14c8ddf662fcb98b0135f225a1c489 Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=756456 Signed-off-by: Sona Sarmadi Signed-off-by: Tudor Florea -

[OE-core] [PATCH][dizzy 5/6] libxml2: CVE-2015-8035

Fixes DoS when parsing specially crafted XML document if XZ support is enabled. References: https://bugzilla.gnome.org/show_bug.cgi?id=757466 Upstream correction: https://git.gnome.org/browse/libxml2/commit/?id= f0709e3ca8f8947f2d91ed34e92e38a4c23eae63 Signed-off-by: Tudor Florea Signed-off-by:

[OE-core] [PATCH][dizzy 1/6] glibc/wscanf: CVE-2015-1472

Fixes a heap buffer overflow in glibc wscanf. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472 https://sourceware.org/ml/libc-alpha/2015-02/msg00119.html http://openwall.com/lists/oss-security/2015/02/04/1 Reference to upstream fix: https://sourceware.org/git/gitweb.cgi?p=

[OE-core] [PATCH][dizzy 3/6] unzip: CVE-2015-7696, CVE-2015-7697

From: Tudor Florea CVE-2015-7696: Fixes a heap overflow triggered by unzipping a file with password CVE-2015-7697: Fixes a denial of service with a file that never finishes unzipping References: http://www.openwall.com/lists/oss-security/2015/10/11/5 https://cve.mitre.org/cgi-bin/cvename.cgi?na

Re: [OE-core] [PATCH 2/6] uclibc: Switch to using uclibc-ng

On 14 December 2015 at 06:23, Khem Raj wrote: > diff --git a/meta/recipes-core/uclibc/uclibc_git.bb > b/meta/recipes-core/uclibc/uclibc_git.bb > index fd02b3d..81756ac 100644 > --- a/meta/recipes-core/uclibc/uclibc_git.bb > +++ b/meta/recipes-core/uclibc/uclibc_git.bb > @@ -13,6 +13,11 @@ DEPENDS

Re: [OE-core] [PATCH 0/3] recipetool/devtool: send errors to stderr

Hi Chris, On 23 September 2015 at 19:24, Christopher Larson wrote: > are available in the git repository at: > > git://github.com/kergoth/openembedded-core scriptutils-log-improvements > > https://github.com/kergoth/openembedded-core/tree/scriptutils-log-improvements > There's also a similar

[OE-core] [PATCH] useradd_base: Make perform_groupmems work with native

I have a problem when using useradd_base.bbclass together with native. ${sysconfdir} is BUILDDIR/tmp/sysroots/x86_64-linux/etc for native, and ${sysconfdir} is "/etc" for target. rootdir is BUILDDIR/tmp/sysroots/x86_64-linux for native, so, $rootdir${sysconfdir} is not correct for native since it

Re: [OE-core] [jethro][fido][PATCH 4/4] openssl: three CVE fixes

* akuster808 [151212 22:14]: > On 12/07/2015 11:49 PM, Anders Darander wrote: > > Hi, > > * Armin Kuster [151208 02:49]: > >> meta/recipes-connectivity/openssl/openssl_1.0.2d.bb | 4 > >> 1 file changed, 4 insertions(+) > > I'm just a little curious about this serious, and a few others t

[OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

Fixes following vulnerabilities: Certificate verify crash with missing PSS parameter (CVE-2015-3194) X509_ATTRIBUTE memory leak (CVE-2015-3195) References: https://openssl.org/news/secadv/20151203.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194 http://cve.mitre.org/cgi-bin/cvename.

Re: [OE-core] [PATCH v2] libsndfile1: 1.0.25 -> 1.0.26

On 12/12/2015 04:23 AM, Tanu Kaskinen wrote: Main points from the release announcement: There's also other audio stuff in need of update (alsa, pulseaudio), can you look into that? Now is a good time to do those version updates. Alex -- ___ Openem

[OE-core] [PATCH] wget: Upgrade 1.16.3 -> 1.17

Signed-off-by: Fan Xin --- meta/recipes-extended/wget/{wget_1.16.3.bb => wget_1.17.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-extended/wget/{wget_1.16.3.bb => wget_1.17.bb} (58%) diff --git a/meta/recipes-extended/wget/wget_1.16.3.bb b/meta/recipes-extend

Re: [OE-core] [PATCH][dizzy][daisy][dylan] openssl: fix for CVE-2015-3195

Hi Sona, > How can this patch be applied to dizzy branch? This patch is for dylan branch. I will send the patch for dizzy and daisy later. > You have only sent patch for CVE-2015-3195, how about CVE-2015-3194? Actually the patch for CVE-2015-3194 is also needed for dizzy and daisy branch. Tha

[OE-core] [PATCH v2] ltp: Upgrade 20150420 -> 20150903

1. Upgrade from 20150420 to 20150903 https://github.com/linux-test-project/ltp/releases/tag/20150903 2. Replace the patch file 0001-replace-inline-with-static-inline-for-gcc-5.x.patch due to the ltp original source code is changed. Signed-off-by: Fan Xin --- ...atch => 0001-Fix-compilation-f

Re: [OE-core] [PATCH][dizzy][daisy][dylan] openssl: fix for CVE-2015-3195

Hi Fan, dizzy branch has Openssl version 1.0.1p now: http://git.yoctoproject.org/cgit/cgit.cgi/poky/tree/meta/recipes-connectivity/openssl/openssl_1.0.1p.bb?h=dizzy How can this patch be applied to dizzy branch? You have only sent patch for CVE-2015-3195, how about CVE-2015-3194? CVE-2015-3193 d