Signed-off-by: Wang Mingyu
---
meta/recipes-devtools/repo/{repo_2.25.bb => repo_2.26.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/repo/{repo_2.25.bb => repo_2.26.bb} (95%)
diff --git a/meta/recipes-devtools/repo/repo_2.25.bb
b/meta/recipes-devtools/rep
Changelog:
=
drop world-readable permission on state file even when ACLs are enabled (#446)
fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
fix a misleading debug message with copytruncate and rotate 0 (#443)
add support for unsigned time_t (#438)
do not lock st
lzo-option.patch
removed since it's included in 5.18.
Changelog:
==
fixes:
dump-tree: don't print traling zeros in checksums
recognize paused balance as exclusive operation state, allow to start
device add
convert: properly initialize target filesystem label
mkfs: don't cr
Changelog:
==
* dpkg-statoverride: Add support for --force-not-root. Closes: #1009069
* dpkg: Fix message to allow configuration to use new
version.
* Perl modules:
- Dpkg::Source::Archive: Prevent directory traversal for in-place extracts.
- Dpkg::Substvars: Add support
Changelog:
==
- Fixed certificate strings comparison for Local authorization (CVE-2022-26691)
- The cupsFileOpen function no longer opens files for append in read-write
mode (Issue #291)
- The cupsd daemon removed processing temporary queue (Issue #364)
- Fixed delay in IPP backend if GNU
Changelog:
Fix verbose output not working when using a2x or asciidoc entry points
Signed-off-by: Wang Mingyu
---
.../asciidoc/{asciidoc_10.1.4.bb => asciidoc_10.2.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-extended/asciidoc/{asciidoc_10.1.4.bb =>
as
Signed-off-by: Wang Mingyu
---
.../iproute2/{iproute2_5.17.0.bb => iproute2_5.18.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/iproute2/{iproute2_5.17.0.bb =>
iproute2_5.18.0.bb} (75%)
diff --git a/meta/recipes-connectivity/iproute2/iprout
Signed-off-by: Wang Mingyu
---
meta/recipes-connectivity/iw/{iw_5.16.bb => iw_5.19.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/iw/{iw_5.16.bb => iw_5.19.bb} (90%)
diff --git a/meta/recipes-connectivity/iw/iw_5.16.bb
b/meta/recipes-connectivity/iw/
Hi Alex
> Can you explain the use case please? If you just want to use systemd,
I just want to select systemd instead of sysvinit. So I added the following in
local.conf before. But it doesn't work recently.
DISTRO_FEATURES:append = " system "
DISTR
Changelog:
=
Now passing subtests are shown in the test run summary at the end
(for example: 10 failed, 1 passed, 10 subtests passed in 0.10s)
Signed-off-by: Wang Mingyu
---
...ytest-subtests_0.7.0.bb => python3-pytest-subtests_0.8.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletio
Add dependence python3-pkg-resources
Changelog:
==
Ensure sorting a collection of versions is always stable, even with build
metadata.
Signed-off-by: Wang Mingyu
---
...-version_2.9.0.bb => python3-semantic-version_2.10.0.bb} | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
Signed-off-by: Wang Mingyu
---
...ython3-hypothesis_6.46.7.bb => python3-hypothesis_6.46.9.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/python/{python3-hypothesis_6.46.7.bb =>
python3-hypothesis_6.46.9.bb} (91%)
diff --git a/meta/recipes-devtools/pytho
License-Update: Copyright year updated to 2022
Signed-off-by: Wang Mingyu
---
...python3-webcolors_1.11.1.bb => python3-webcolors_1.12.bb} | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
rename meta/recipes-devtools/python/{python3-webcolors_1.11.1.bb =>
python3-webcolors_1.12.bb} (
From: Bruce Ashfield
Updating to the latest korg -stable release that comprises
the following commits:
54af9dd2b958 Linux 5.10.113
7992fdb045fb Revert "net: micrel: fix KS8851_MLL Kconfig"
8bedbc8f7f35 block/compat_ioctl: fix range check in BLKGETSIZE
fea24b07edfc staging: ion:
From: Khem Raj
qemuppc64 is LE by default, this fixes kernel build for qemuppc64 with
gcc12
Signed-off-by: Khem Raj
Cc: Bruce Ashfield
Signed-off-by: Richard Purdie
(cherry picked from commit f1674f1aeff5d2b3b2e79cc68ce1156f79eed548)
Signed-off-by: Anuj Mittal
---
meta/recipes-kernel/linux/
From: Bruce Ashfield
gcc12 generates some warnings with arch/powerpc, and we know that
these warnings are understood/non-fatal at runtime.
This fragment allows testing to continue, while upstream powerpc
looks at removing warnings.
We only enable it for 5.10/5.15 standard kernels for now, since
From: Ranjitsinh Rathod
This security upgrade fixes CVE-2022-1292 as per below link
Link: https://www.openssl.org/news/cl111.txt
Signed-off-by: Ranjitsinh Rathod
Signed-off-by: Ranjitsinh Rathod
Signed-off-by: Anuj Mittal
---
.../openssl/{openssl_1.1.1n.bb => openssl_1.1.1o.bb}|
From: Ovidiu Panait
Upgrade openssl 1.1.1l -> 1.1.1n to fix CVE-2022-0778:
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
This also fixes an evp_extra_test ptest failure introduced by openssl-1.
From: Felix Moessbauer
This patches makes locating the file database containing the file and
folder usernames and permissions more reliable.
In addition to locating it relative to the partition directory, we also
try to locate it relative to the IMAGE_ROOTFS.
Prior to this patch, the database wa
From: Bruce Ashfield
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:
1052f9bce629 Linux 5.10.112
5c62d3bf1410 ax25: Fix UAF bugs in ax25 timers
f934fa478dd1 ax25: Fix NULL pointer dereferences in ax25 timers
145ea8d213e8 ax25: fi
From: Bruce Ashfield
Integrating the following commit(s) to linux-yocto/.:
bddb0e4921f base.cfg: enable kernel crypto userspace API
Signed-off-by: Alexander Kanavin
Signed-off-by: Bruce Ashfield
Signed-off-by: Richard Purdie
(cherry picked from commit a08c1c7dba66a1d12e029906d86f4f84e916
From: Richard Purdie
Includes fixes for CVE-2022-1381, CVE-2022-1420.
Signed-off-by: Richard Purdie
(cherry picked from commit 77d745bd49c979de987c75fd7a3af116e99db82b)
Signed-off-by: Anuj Mittal
---
meta/recipes-support/vim/vim.inc | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
d
From: Bruce Ashfield
Updating linux-yocto/5.10 to the latest korg -stable release that comprises
the following commits:
3238bffaf992 Linux 5.10.110
cf342cbfb37f PCI: xgene: Revert "PCI: xgene: Use inbound resources for
setup"
a25864c5bc20 arm64: Do not defer reserve_crashkernel() fo
From: Bruce Ashfield
Integrating the following commit(s) to linux-yocto/.:
2278ed571c1 features/security: Move x86_64 configs to separate file
Signed-off-by: Kamil Dziezyk
Signed-off-by: Bruce Ashfield
Signed-off-by: Alexandre Belloni
Signed-off-by: Richard Purdie
(cherry picked from co
Next set of changes for honister. Please review.
No problems seen while testing:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3722
Thanks,
Anuj
The following changes since commit e0d5d93a18d1682f3393fc10133f08009f008601:
perf: sort-pmuevents: allow for additional type
From: Dmitry Baryshkov
License-Update: additional files
Signed-off-by: Dmitry Baryshkov
Signed-off-by: Luca Ceresoli
Signed-off-by: Richard Purdie
(cherry picked from commit 85b1fef733683be09a1efdb2d8b8ffe543053ace)
Signed-off-by: Anuj Mittal
---
...{linux-firmware_20220411.bb => linux-firmw
On Wed, May 25, 2022 at 8:49 AM Martin Jansa wrote:
>
> From: Khem Raj
>
> This is a bugfix release on gcc-11 series, fixes 189 bugs [1]
> Drop backported patches already included in 11.3 release
This is causing a reproducibility error in my autobuilder testing for
webkit-gtk. I've tried multip
On Tue, May 24, 2022 at 11:03 AM Rusty Howell wrote:
>
> From: Rusty Howell
>
> The .dot file created by `bitbake -g` changed formats a while ago, which
> broke oe-depends-dot.
Should this patch be taken for kirkstone too?
Is this the bitbake format change you refer to in the commit description
Hi Richard,
> "I was thinking about this and whilst I'm guessing, it could be because we're
> running this in a CI environment that doesn't have an interactive terminal?"
1. The error is in the "check_screen_size", where it attempts to insure that
the terminal windows is at least 83x26. Accordi
I'm sorry, but this still doesn't make much sense to me. RPROVIDES doesn't
help with build time dependency and if something has runtime dependency
explicitly on libdrm-nouveau, then using libdrm as suitable provider
doesn't seem right, what exactly is the usecase for this, isn't it just
hiding the
Branch: kirkstone
New this week: 8 CVEs
CVE-2022-1587 (CVSS3: 9.1 CRITICAL): libpcre2:libpcre2-native
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1587 *
CVE-2022-1674 (CVSS3: 5.5 MEDIUM): vim
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1674 *
CVE-2022-1733 (CVSS3: 7.8
Branch: honister
New this week: 9 CVEs
CVE-2022-1586 (CVSS3: 9.1 CRITICAL): libpcre2:libpcre2-native
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1586 *
CVE-2022-1587 (CVSS3: 9.1 CRITICAL): libpcre2:libpcre2-native
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1587 *
CVE
On Sun, 2022-05-29 at 13:20 +0100, Richard Purdie via
lists.openembedded.org wrote:
> Hi David,
>
> On Sun, 2022-05-29 at 11:25 +0100, Richard Purdie via
> lists.openembedded.org wrote:
> > Signed-off-by: Richard Purdie
> > ---
> > meta/lib/oeqa/selftest/cases/bbtests.py | 5 +
> > 1 file ch
Branch: dunfell
New this week: 9 CVEs
CVE-2022-1587 (CVSS3: 9.1 CRITICAL): libpcre2:libpcre2-native
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1587 *
CVE-2022-1674 (CVSS3: 5.5 MEDIUM): vim
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1674 *
CVE-2022-1733 (CVSS3: 7.8 H
Hi David,
On Sun, 2022-05-29 at 11:25 +0100, Richard Purdie via
lists.openembedded.org wrote:
> Signed-off-by: Richard Purdie
> ---
> meta/lib/oeqa/selftest/cases/bbtests.py | 5 +
> 1 file changed, 5 insertions(+)
>
> diff --git a/meta/lib/oeqa/selftest/cases/bbtests.py
> b/meta/lib/oeqa/
Branch: master
New this week: 0 CVEs
Removed this week: 6 CVEs
CVE-2022-1210 (CVSS3: 6.5 MEDIUM): tiff
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1210 *
CVE-2022-1621 (CVSS3: 7.8 HIGH): vim
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1621 *
CVE-2022-1622 (CVSS3: 5.5
When running CVE checks in CI we're usually not interested in warnings on the
console for any CVEs present. Add a configuration option CVE_CHECK_SHOW_WARNINGS
to allow this to be disabled (it is left enabled by default).
Signed-off-by: Richard Purdie
---
meta/classes/cve-check.bbclass | 3 ++-
1
Signed-off-by: Richard Purdie
---
meta/lib/oeqa/selftest/cases/bbtests.py | 5 +
1 file changed, 5 insertions(+)
diff --git a/meta/lib/oeqa/selftest/cases/bbtests.py
b/meta/lib/oeqa/selftest/cases/bbtests.py
index cfac7afcf49..d222f0fb297 100644
--- a/meta/lib/oeqa/selftest/cases/bbtests.py
The libdrm-{nouveau,radeon,intel} are generated by libdrm recipe.
To use these libraries as a dependency in another component,
It should be explicitly added as RPROVIDES.
Signed-off-by:Minjae Kim
---
meta/recipes-graphics/drm/libdrm_2.4.101.bb | 6 ++
1 file changed, 6 insertions(+)
diff --
39 matches
Mail list logo
