[OE-core][PATCH] busybox: add tmpdir option into mktemp applet

2021-06-24 Thread Andrej Valek
- Make mktemp applet compatible with --tmpdir option in ca-certificate update script. Signed-off-by: Andrej Valek Signed-off-by: Peter Marko --- .../busybox/0001-mktemp-add-tmpdir-option.patch| 81 ++ meta/recipes-core/busybox/busybox_1.33.1.bb| 5 +- 2 files ch

[OE-core] [PATCH] qemu: fix CVE-2021-3527

2021-06-24 Thread Lee Chee Yang
From: Lee Chee Yang Signed-off-by: Lee Chee Yang --- meta/recipes-devtools/qemu/qemu.inc | 2 + .../qemu/qemu/CVE-2021-3527-1.patch | 42 + .../qemu/qemu/CVE-2021-3527-2.patch | 59 +++ 3 files changed, 103 insertions(+) create mode 10

Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-24 Thread Minjae Kim
In order to fix CVE-2021-3421, I added RPMSIGTAG_FILESIGNATURES and RPMSIGTAG_FILESIGNATURELENGTH in lib/rpmtag.h. So It is possible to build. but I cannot test on target yet. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#153263): https://lists.o

[OE-core] Hardknott (GCC10) Compiler Issues

2021-06-24 Thread Chuck Wolber
All, Please accept my apologies in advance for the detailed submission. I think it is warranted in this case. There is something... "odd" about the GCC 10 compiler that is delivered with Hardknott. I am still chasing it down, so I am not yet ready to declare a root cause or submit a bug, but I am

Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-24 Thread Anuj Mittal
> + /* Bump reference count for return. */ diff --git a/lib/rpmtag.h > +b/lib/rpmtag.h index 8c718b31b5..d562572c6f 100644 > +--- a/lib/rpmtag.h > b/lib/rpmtag.h > +@@ -65,6 +65,8 @@ typedef enum rpmTag_e { > + RPMTAG_LONGARCHIVESIZE = RPMTAG_SIG_BASE+15, /* l */ > + /* RPMT

[OE-core] [PATCH] qemurunner: Add info log for qemu startup

2021-06-24 Thread Saul Wold
Add a couple of logging info to track time between activities, first is from after the Popen(launch_cmd) to after qmp.connect(), second is from qmp.connect() to the release of the qemu via the qmp("cont") command this includes the mmap() activity. Example output: QMP connected to QEMU at 06/24/21

[OE-core] [PATCH] esdk: locked sig mismatch warnings when build from esdk env

2021-06-24 Thread Khem Raj
From: Mani Selvaraj A repo with multiple layers are placed under /layers/ and a repo with single layer is placed under /layers/openembedded-core in esdk. This tiggered locked sig mismatch warnings when building image from esdk environment. - TOPDIR=/Code/build corebase=/Code/openembedded-core

[OE-core] [PATCH] default-distrovars.inc: Remove seccomp for ARC

2021-06-24 Thread Alexey Brodkin via lists.openembedded.org
libseccomp needs too be ported to ARC first Signed-off-by: Alexey Brodkin Cc: Khem Raj --- meta/conf/distro/include/default-distrovars.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/conf/distro/include/default-distrovars.inc b/meta/conf/distro/include/default-distrovars.inc in

[OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-24 Thread Minjae Kim
unsigned signature header leads to string injection into an rpm database reference: https://nvd.nist.gov/vuln/detail/CVE-2021-3421 https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21 --- .../rpm/files/CVE-2021-3421.patch | 197 +++

[OE-core] [PATCH] sstate.bbclass: fix errors about read-only sstate mirrors

2021-06-24 Thread Michael Ho
From: Michael Ho If a read-only sstate mirror is used in conjunction with hash equiv, then OSError will be raised when an sstate-cache hit is achieved. This is because sstate_task_postfunc will try to "touch" the symlinks that point to the read-only sstate mirror when sstate_report_unihash has c

Re: [OE-core] [PATCH] pypi: set SRC_URI with =, not with +=

2021-06-24 Thread Alexander Kanavin
On Thu, 24 Jun 2021 at 09:21, Andre McCurdy wrote: > On Wed, Jun 23, 2021 at 3:18 AM Alexander Kanavin > wrote: > > > > Frankly guys, I think maybe we should just break stuff in this case, and > have it fixed up properly, then try to guess what workaround might work. > > > > From that perspectiv

[OE-core] [hardknott][PATCH] curl: fix build when proxy is not enabled in PACKAGECONFIG

2021-06-24 Thread Anuj Mittal
Backport upstream patches to fix issues introduced by a backported CVE patch. Fixes: | ../../curl-7.75.0/lib/vtls/vtls.c: In function ‘Curl_ssl_addsessionid’: | ../../curl-7.75.0/lib/vtls/vtls.c:508:14: error: ‘isProxy’ redeclared as different kind of symbol | 508 | const bool isProxy = FALSE

Re: [OE-core] [PATCH] pypi: set SRC_URI with =, not with +=

2021-06-24 Thread Andre McCurdy
On Wed, Jun 23, 2021 at 3:18 AM Alexander Kanavin wrote: > > Frankly guys, I think maybe we should just break stuff in this case, and have > it fixed up properly, then try to guess what workaround might work. > > From that perspective the original patch is the most clear. The typical ordering of